Generated by JEB on 2019/08/01

PE: C:\Windows\System32\pku2u.dll Base=0x180000000 SHA-256=98F1270FD71583E9B70F6D1C54C35861D9EE26193D031716850E60060C2846FB
PDB: pku2u.pdb GUID={022E7662-12E9-DF33-317559DD23BB5245} Age=1

1222 located named symbols:
0x180019A6C: "void __cdecl Pku2uByteReverse(unsigned char * __ptr64,unsigned long)" ?Pku2uByteReverse@@YAXPEAEK@Z
0x18002E150: "void __cdecl basessp::WSTUnpackSuppliedCreds(struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64,struct basessp::_WST_CONTEXT_SUPPLIED_CREDS * __ptr64)" ?WSTUnpackSuppliedCreds@basessp@@YAXPEAU_SECPKG_SUPPLIED_CREDENTIAL@@PEAU_WST_CONTEXT_SUPPLIED_CREDS@1@@Z
0x180021140: "void __cdecl KerbFreeRealm(char * __ptr64 * __ptr64)" ?KerbFreeRealm@@YAXPEAPEAD@Z
0x18003AD00: "long volatile Pku2uGlobalLastuSec" ?Pku2uGlobalLastuSec@@3JC
0x180031B98: "__cdecl _imp_MesEncodeIncrementalHandleCreate" __imp_MesEncodeIncrementalHandleCreate
0x180031DF8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800336D0: WPP_cf63516066cd3719a55f4996415d13fa_Traceguids
0x180011690: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl Compare(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?Compare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_GENERIC_TABLE@@PEAX1@Z
0x18002F5F8: "long __cdecl PAC_UnmarshallAndConvertValidationInfo(struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64,unsigned long)" ?PAC_UnmarshallAndConvertValidationInfo@@YAJPEAPEAU_NETLOGON_VALIDATION_SAM_INFO4@@PEAU_UNICODE_STRING@@1PEAEK@Z
0x1800326F0: "MODPDHModulusSize" ??_C@_1CE@CNPMDMJH@?$AAM?$AAO?$AAD?$AAP?$AAD?$AAH?$AAM?$AAo?$AAd?$AAu?$AAl?$AAu?$AAs?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1800036A0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800197E8: "long __cdecl Pku2uAddWellknownDomainParameters(unsigned long,unsigned char * __ptr64,unsigned long)" ?Pku2uAddWellknownDomainParameters@@YAJKPEAEK@Z
0x18001B460: "void __cdecl Pku2uRightShiftOnebit(unsigned char * __ptr64,unsigned long)" ?Pku2uRightShiftOnebit@@YAXPEAEK@Z
0x180038FF8: "struct _RTL_CRITICAL_SECTION Pku2uGlobalWellknownDomainParamtersLock" ?Pku2uGlobalWellknownDomainParamtersLock@@3U_RTL_CRITICAL_SECTION@@A
0x1800335E0: WPP_c3b9d9f8930532f3aa3cc58ae48d6052_Traceguids
0x18002E434: "int __cdecl basessp::WSTCompareCreds(struct basessp::_WST_CREDENTIAL * __ptr64,struct basessp::_WST_CREDENTIAL * __ptr64)" ?WSTCompareCreds@basessp@@YAHPEAU_WST_CREDENTIAL@1@0@Z
0x1800038A0: "__cdecl FindPESection" _FindPESection
0x180041020: "__cdecl _imp_CryptMsgGetParam" __imp_CryptMsgGetParam
0x180003CF4: "__cdecl _imp_load_CryptDestroyKey" __imp_load_CryptDestroyKey
0x180027D38: "long __cdecl Pku2uDecryptServiceTicket(struct KERB_AP_REQUEST * __ptr64,struct _PKU2U_CONTEXT * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64 * __ptr64,struct KERB_AUTHENTICATOR * __ptr64 * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,long * __ptr64)" ?Pku2uDecryptServiceTicket@@YAJPEAUKERB_AP_REQUEST@@PEAU_PKU2U_CONTEXT@@PEAPEAUKERB_ENCRYPTED_TICKET@@PEAPEAUKERB_AUTHENTICATOR@@PEAUKERB_ENCRYPTION_KEY@@4PEAJ@Z
0x180031AD0: "__cdecl _imp_ASN1DecAlloc" __imp_ASN1DecAlloc
0x180031E18: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180033748: "onecore\ds\security\protocols\pk" ??_C@_0CO@BPBMDIBL@onecore?2ds?2security?2protocols?2pk@
0x18001ED34: WSTVerifySignature
0x180031CF8: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18001C588: "void __cdecl Pku2uFreeLogonSession(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uFreeLogonSession@@YAXPEAU_PKU2U_LOGON_SESSION@@@Z
0x1800030C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180032008: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180036250: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180031F40: "__cdecl _imp_RtlSystemTimeToLocalTime" __imp_RtlSystemTimeToLocalTime
0x180024BA8: WPP_SF_qdqdD
0x18002E130: "void __cdecl basessp::WSTTableFree(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64)" ?WSTTableFree@basessp@@YAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x180031BA8: "__cdecl _imp_MesDecodeIncrementalHandleCreate" __imp_MesDecodeIncrementalHandleCreate
0x180031CA8: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180004064: "__cdecl _imp_load_LsaIFreeSupplementalTokenInfo" __imp_load_LsaIFreeSupplementalTokenInfo
0x180002DD0: "long __cdecl SpLsaModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpLsaModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_FUNCTION_TABLE@@0@Z
0x18002C578: "long __cdecl KerbDuplicateKey(struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64)" ?KerbDuplicateKey@@YAJPEAUKERB_ENCRYPTION_KEY@@0@Z
0x18001F0E0: WSTVerifySignatureToken
0x180003F13: "__cdecl _imp_load_PstAcquirePrivateKey" __imp_load_PstAcquirePrivateKey
0x1800381E0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800169C0: "long __cdecl SpInitLsaModeContext(unsigned __int64,unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,struct _SecBufferDesc * __ptr64,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpInitLsaModeContext@@YAJ_K0PEAU_UNICODE_STRING@@KKPEAU_SecBufferDesc@@PEA_K2PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x180004040: "__cdecl _imp_load_LsaICancelNotification" __imp_load_LsaICancelNotification
0x180041068: "__cdecl _imp_CertCreateCertificateContext" __imp_CertCreateCertificateContext
0x180031AC8: "__cdecl _imp_ASN1BEREncSX" __imp_ASN1BEREncSX
0x18000318C: "__cdecl CRT_INIT" _CRT_INIT
0x18002D088: "int __cdecl Pku2uIsLocalHost(struct _UNICODE_STRING * __ptr64)" ?Pku2uIsLocalHost@@YAHPEAU_UNICODE_STRING@@@Z
0x180018488: "long __cdecl Pku2uMapContext(struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?Pku2uMapContext@@YAJPEAU_PKU2U_CONTEXT@@PEAEPEAU_SecBuffer@@@Z
0x180014570: "void __cdecl Pku2uFreeSSPIMessages(struct _PKU2U_CONTEXT * __ptr64)" ?Pku2uFreeSSPIMessages@@YAXPEAU_PKU2U_CONTEXT@@@Z
0x180031CE0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180029944: "long __cdecl KerbFindAuthDataFromMultipleIfReleventContainers(struct PKERB_AUTHORIZATION_DATA * __ptr64,unsigned long,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64 * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64)" ?KerbFindAuthDataFromMultipleIfReleventContainers@@YAJPEAUPKERB_AUTHORIZATION_DATA@@KPEAPEAPEAU1@PEAPEAU1@@Z
0x180003F49: "__cdecl _imp_load_IntPstGetTrustAnchors" __imp_load_IntPstGetTrustAnchors
0x180003CE2: "__cdecl _imp_load_CertCompareCertificateName" __imp_load_CertCompareCertificateName
0x180011ED8: "int __cdecl ScHelperGetSignerCertAndVerify(unsigned long,void * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?ScHelperGetSignerCertAndVerify@@YAHKPEAXPEAPEBU_CERT_CONTEXT@@@Z
0x180032000: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180019760: WppControlCallback
0x180002ED0: "long __cdecl SpGetExtendedInformation(enum _SECPKG_EXTENDED_INFORMATION_CLASS,struct _SECPKG_EXTENDED_INFORMATION * __ptr64 * __ptr64)" ?SpGetExtendedInformation@@YAJW4_SECPKG_EXTENDED_INFORMATION_CLASS@@PEAPEAU_SECPKG_EXTENDED_INFORMATION@@@Z
0x180004300: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180033668: "1.3.6.1.5.2.3.1" ??_C@_0BA@CGKNPEBH@1?43?46?41?45?42?43?41?$AA@
0x180003CBE: "__cdecl _imp_load_CryptDecodeObjectEx" __imp_load_CryptDecodeObjectEx
0x180041048: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x180041158: "__cdecl _imp_CredParseUserNameWithType" __imp_CredParseUserNameWithType
0x180032750: "DHDomainParameters" ??_C@_1CG@GAIGFFKB@?$AAD?$AAH?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180002410: "void __cdecl PacWriteFcn(void * __ptr64,char * __ptr64,unsigned int)" ?PacWriteFcn@@YAXPEAXPEADI@Z
0x180025958: "long __cdecl KerbDuplicateTicket(struct KERB_TICKET * __ptr64,struct KERB_TICKET * __ptr64)" ?KerbDuplicateTicket@@YAJPEAUKERB_TICKET@@0@Z
0x18001C454: "long __cdecl Pku2uAllocateLogonSession(struct _LUID * __ptr64,struct _PKU2U_LOGON_SESSION * __ptr64 * __ptr64)" ?Pku2uAllocateLogonSession@@YAJPEAU_LUID@@PEAPEAU_PKU2U_LOGON_SESSION@@@Z
0x180025C04: "void __cdecl KerbFreeDuplicatedTicket(struct KERB_TICKET * __ptr64)" ?KerbFreeDuplicatedTicket@@YAXPEAUKERB_TICKET@@@Z
0x180031AB0: "__cdecl _imp_ASN1DEREncOctetString" __imp_ASN1DEREncOctetString
0x180041170: "__cdecl _imp_IntPstGetCertificate" __imp_IntPstGetCertificate
0x18002E768: "private: void __cdecl basessp::BaseSSP::WSTUnloadCredTable(void) __ptr64" ?WSTUnloadCredTable@BaseSSP@basessp@@AEAAXXZ
0x180011384: "private: unsigned long __cdecl CAuthenticatorList::Age(union _LARGE_INTEGER const & __ptr64,union _LARGE_INTEGER const & __ptr64) __ptr64" ?Age@CAuthenticatorList@@AEAAKAEBT_LARGE_INTEGER@@0@Z
0x1800410E8: CRYPTSP_NULL_THUNK_DATA_DLA
0x180031BC0: "__cdecl _imp_NdrMesTypeEncode3" __imp_NdrMesTypeEncode3
0x180025348: "void __cdecl KerbConvertGeneralizedTimeToLargeInt(union _LARGE_INTEGER * __ptr64,struct tagASN1generalizedtime_t * __ptr64,int)" ?KerbConvertGeneralizedTimeToLargeInt@@YAXPEAT_LARGE_INTEGER@@PEAUtagASN1generalizedtime_t@@H@Z
0x180038C90: g_ulAdditionalProbeSize
0x180038CBC: "long Pku2uGlobalTicketListSize" ?Pku2uGlobalTicketListSize@@3JA
0x180021568: "int __cdecl SafeRtlInitString(struct _STRING * __ptr64,char const * __ptr64)" ?SafeRtlInitString@@YAHPEAU_STRING@@PEBD@Z
0x180038C40: "__cdecl _hmod__ext_ms_win_security_certpoleng_l1_1_0_dll" __hmod__ext_ms_win_security_certpoleng_l1_1_0_dll
0x180020D64: "long __cdecl KerbConvertStringToKdcName(struct _KERB_INTERNAL_NAME * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbConvertStringToKdcName@@YAJPEAPEAU_KERB_INTERNAL_NAME@@PEAU_UNICODE_STRING@@@Z
0x180020724: "long __cdecl KerbConvertKdcNameToString(struct _UNICODE_STRING * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbConvertKdcNameToString@@YAJPEAU_UNICODE_STRING@@PEAU_KERB_INTERNAL_NAME@@0@Z
0x180033860: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18002B830: "long __cdecl SpDeleteUserModeContext(unsigned __int64)" ?SpDeleteUserModeContext@@YAJ_K@Z
0x180018F24: "long __cdecl WSTInitUserModeContextList(void)" ?WSTInitUserModeContextList@@YAJXZ
0x180033778: WPP_3c5bffb7f55d30b8de78e3c8e07dfa0c_Traceguids
0x180001840: "long __cdecl SpAcquireCredentialsHandle(struct _UNICODE_STRING * __ptr64,unsigned long,struct _LUID * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64 * __ptr64,union _LARGE_INTEGER * __ptr64)" ?SpAcquireCredentialsHandle@@YAJPEAU_UNICODE_STRING@@KPEAU_LUID@@PEAX22PEA_KPEAT_LARGE_INTEGER@@@Z
0x180031E50: bcrypt_NULL_THUNK_DATA
0x1800360E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x18002D610: "void __cdecl Pku2uRevertImpersonation(void * __ptr64)" ?Pku2uRevertImpersonation@@YAXPEAX@Z
0x18001ABA4: "int __cdecl Pku2uGetSharedKey(unsigned __int64,struct _CRYPTOAPI_BLOB * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64)" ?Pku2uGetSharedKey@@YAH_KPEAU_CRYPTOAPI_BLOB@@1@Z
0x180031F68: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x180031A98: "__cdecl _imp_ASN1BERDecObjectIdentifier" __imp_ASN1BERDecObjectIdentifier
0x18001CAFC: WPP_SF_dii
0x180031C80: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800211D8: "void __cdecl KerbFreeString2(struct _UNICODE_STRING * __ptr64)" ?KerbFreeString2@@YAXPEAU_UNICODE_STRING@@@Z
0x1800186F8: "long __cdecl WSTAllocateUserModeContext(struct _WST_USERMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTAllocateUserModeContext@@YAJPEAPEAU_WST_USERMODE_CONTEXT@@@Z
0x18001358C: "long __cdecl CredpExtractMarshalledTargetInfo(struct _UNICODE_STRING * __ptr64,struct _CREDENTIAL_TARGET_INFORMATIONW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?CredpExtractMarshalledTargetInfo@@YAJPEAU_UNICODE_STRING@@PEAPEAU_CREDENTIAL_TARGET_INFORMATIONW@@PEAK@Z
0x18003E58C: "int Pku2uGlobalDHInitialized" ?Pku2uGlobalDHInitialized@@3HA
0x180031FC8: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x180033418: SEC_WINNT_AUTH_DATA_TYPE_CERT
0x180031A90: "__cdecl _imp_ASN1BEREncObjectIdentifier" __imp_ASN1BEREncObjectIdentifier
0x18002E364: "private: long __cdecl basessp::BaseSSP::WSTInitGlobalVariables(void) __ptr64" ?WSTInitGlobalVariables@BaseSSP@basessp@@AEAAJXZ
0x180031EB0: "__cdecl _imp_wcschr" __imp_wcschr
0x180041140: "__cdecl _imp_CredFree" __imp_CredFree
0x180002390: "long __cdecl SpQueryCredentialsAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryCredentialsAttributes@@YAJ_KKPEAX@Z
0x18001F890: "void __cdecl KerbPutKdcNameAsWOWString(struct _KERB_INTERNAL_NAME * __ptr64,struct _STRING32 * __ptr64,__int64,unsigned char * __ptr64 * __ptr64)" ?KerbPutKdcNameAsWOWString@@YAXPEAU_KERB_INTERNAL_NAME@@PEAU_STRING32@@_JPEAPEAE@Z
0x1800410C0: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x180032090: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x180031B38: "__cdecl _imp_ASN1BERDecOctetString" __imp_ASN1BERDecOctetString
0x180031950: "long (__cdecl** Pku2uCallPackageDispatch)(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?Pku2uCallPackageDispatch@@3PAP6AJPEAPEAXPEAX1K0PEAKPEAJ@ZA
0x1800320C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180024C24: "long __cdecl KerbBuildErrorMessageEx(long,struct KERB_EXT_ERROR * __ptr64,struct _UNICODE_STRING * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?KerbBuildErrorMessageEx@@YAJJPEAUKERB_EXT_ERROR@@PEAU_UNICODE_STRING@@PEAU_KERB_INTERNAL_NAME@@1PEAEKPEAKPEAPEAE@Z
0x180032028: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x180031E20: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180031B18: "__cdecl _imp_ASN1BERDecBool" __imp_ASN1BERDecBool
0x180013460: "long __cdecl KerbEncryptDataEx(struct KERB_ENCRYPTED_DATA * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long,struct KERB_ENCRYPTION_KEY * __ptr64)" ?KerbEncryptDataEx@@YAJPEAUKERB_ENCRYPTED_DATA@@KPEAEKKPEAUKERB_ENCRYPTION_KEY@@@Z
0x180041008: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x180038D30: "unsigned long Pku2uGlobalMaxTokenSize" ?Pku2uGlobalMaxTokenSize@@3KA
0x18003623C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x180019A94: "long __cdecl Pku2uCreateDHKeyWithDomainParameters(struct _CERT_X942_DH_PARAMETERS * __ptr64,unsigned __int64 * __ptr64)" ?Pku2uCreateDHKeyWithDomainParameters@@YAJPEAU_CERT_X942_DH_PARAMETERS@@PEA_K@Z
0x180038E30: "struct _RTL_RESOURCE Pku2uGlobalCredTableLock" ?Pku2uGlobalCredTableLock@@3U_RTL_RESOURCE@@A
0x18000387B: "__cdecl XcptFilter" _XcptFilter
0x180038EC0: "struct _RTL_RESOURCE Pku2uGlobalLogonSessionTableLock" ?Pku2uGlobalLogonSessionTableLock@@3U_RTL_RESOURCE@@A
0x1800320D0: "__cdecl _xc_a" __xc_a
0x1800122D4: "long __cdecl Pku2uCredTableDelete(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64)" ?Pku2uCredTableDelete@@YAJPEAU_PKU2U_SECONDARY_CREDENTIAL@@@Z
0x180003B49: "__cdecl _imp_load_CertOpenStore" __imp_load_CertOpenStore
0x180038CB8: "unsigned char Pku2uGlobalUserModeContextsInitialized" ?Pku2uGlobalUserModeContextsInitialized@@3EA
0x180038C48: "__cdecl _hmod__LSASRV_dll" __hmod__LSASRV_dll
0x180035F48: CRYPTSP_NULL_THUNK_DATA_DLB
0x180038FD8: "unsigned long Pku2uGlobalSendOnlyLeafCertificate" ?Pku2uGlobalSendOnlyLeafCertificate@@3KA
0x180032050: "__cdecl _imp_RtlConvertSharedToExclusive" __imp_RtlConvertSharedToExclusive
0x180031AE8: "__cdecl _imp_ASN1BEREncBool" __imp_ASN1BEREncBool
0x18002A810: "long __cdecl Pku2uFilterGroupMembership(struct _SID_AND_ATTRIBUTES_LIST * __ptr64,void * __ptr64,struct _SAMPR_GET_GROUPS_BUFFER * __ptr64,struct _SID_AND_ATTRIBUTES_LIST * __ptr64,unsigned long * __ptr64)" ?Pku2uFilterGroupMembership@@YAJPEAU_SID_AND_ATTRIBUTES_LIST@@PEAXPEAU_SAMPR_GET_GROUPS_BUFFER@@0PEAK@Z
0x180020F74: "long __cdecl KerbDuplicateRealm(char * __ptr64 * __ptr64,char * __ptr64)" ?KerbDuplicateRealm@@YAJPEAPEADPEAD@Z
0x180031E48: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x18001A104: "int __cdecl Pku2uEqualOID(struct ASN1objectidentifier_s * __ptr64,struct ASN1objectidentifier_s * __ptr64)" ?Pku2uEqualOID@@YAHPEAUASN1objectidentifier_s@@0@Z
0x18001CB60: WPP_SF_dqdqdd
0x180031DB8: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x180014EA8: "long __cdecl Pku2uReadEncryptedCredsFromCredMgr(struct _LUID * __ptr64,int,unsigned long * __ptr64,unsigned long,struct _GUID const & __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _ENCRYPTED_CREDENTIALW * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?Pku2uReadEncryptedCredsFromCredMgr@@YAJPEAU_LUID@@HPEAKKAEBU_GUID@@PEAG31PEAPEAPEAU_ENCRYPTED_CREDENTIALW@@1PEAPEAE@Z
0x180031FB8: "__cdecl _imp_NtAllocateLocallyUniqueId" __imp_NtAllocateLocallyUniqueId
0x180038CC8: "struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64 __ptr64 basessp::WSTGlobalLsaFunctions" ?WSTGlobalLsaFunctions@basessp@@3PEAU_LSA_SECPKG_FUNCTION_TABLE@@EA
0x180018AD8: "long __cdecl WSTExportSecurityContext(unsigned __int64,unsigned long,struct _SecBuffer * __ptr64,void * __ptr64 * __ptr64)" ?WSTExportSecurityContext@@YAJ_KKPEAU_SecBuffer@@PEAPEAX@Z
0x180041030: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x180033640: "@@@" ??_C@_17CHAMLACK@?$AA?$EA?$AA?$EA?$AA?$EA?$AA?$AA@
0x18000386F: "__cdecl callnewh" _callnewh
0x18002C5DC: "void __cdecl KerbFreeKey(struct KERB_ENCRYPTION_KEY * __ptr64)" ?KerbFreeKey@@YAXPEAUKERB_ENCRYPTION_KEY@@@Z
0x180033598: "onecore\ds\security\protocols\pk" ??_C@_0DB@KNBEPEDP@onecore?2ds?2security?2protocols?2pk@
0x180031EA8: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180017C9C: RtlUShortAdd
0x180032460: "__cdecl _guard_iat_table" __guard_iat_table
0x180026020: "long __cdecl KerbPackData(void * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?KerbPackData@@YAJPEAXKPEAKPEAPEAE@Z
0x180031CD0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1800410D8: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x1800142D4: "long __cdecl Pku2uConstructTrustedCertifiersArray(struct PKU2UMetaData_trustedCertifiers * __ptr64,struct _SecPkgContext_IssuerListInfoEx * __ptr64)" ?Pku2uConstructTrustedCertifiersArray@@YAJPEAUPKU2UMetaData_trustedCertifiers@@PEAU_SecPkgContext_IssuerListInfoEx@@@Z
0x1800042D2: memcpy
0x180011C1C: "int __cdecl ScHelperCMSVerifyMessage(unsigned char * __ptr64,unsigned long,int,char * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64 * __ptr64)" ?ScHelperCMSVerifyMessage@@YAHPEAEKHPEADPEAPEAEPEAKPEAPEBU_CERT_CONTEXT@@PEAPEAU_CRYPT_ALGORITHM_IDENTIFIER@@@Z
0x180020E9C: "long __cdecl KerbDuplicatePrincipalName(struct KERB_PRINCIPAL_NAME * __ptr64,struct KERB_PRINCIPAL_NAME * __ptr64)" ?KerbDuplicatePrincipalName@@YAJPEAUKERB_PRINCIPAL_NAME@@0@Z
0x180038FDC: "unsigned long Pku2uGlobalMinMODPDHModulusSize" ?Pku2uGlobalMinMODPDHModulusSize@@3KA
0x1800334C0: "onecore\ds\security\protocols\pk" ??_C@_0DA@IFFPMEPO@onecore?2ds?2security?2protocols?2pk@
0x180031EF8: "__cdecl _imp_memset" __imp_memset
0x180003D7F: "__cdecl _imp_load_CredParseUserNameWithType" __imp_load_CredParseUserNameWithType
0x180001010: "long __cdecl SpQueryMetaData(unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?SpQueryMetaData@@YAJ_KPEAU_UNICODE_STRING@@KPEAKPEAPEAEPEA_K@Z
0x180003A5F: "__cdecl initterm" _initterm
0x180031DD8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18001BE48: "long __cdecl Pku2uS4UToSelfLogon(void * __ptr64,void * __ptr64,unsigned long,enum _LSA_TOKEN_INFORMATION_TYPE * __ptr64,void * __ptr64 * __ptr64,struct _SECPKG_PRIMARY_CRED * __ptr64,struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64 * __ptr64)" ?Pku2uS4UToSelfLogon@@YAJPEAX0KPEAW4_LSA_TOKEN_INFORMATION_TYPE@@PEAPEAXPEAU_SECPKG_PRIMARY_CRED@@PEAPEAU_NETLOGON_VALIDATION_SAM_INFO4@@@Z
0x180031C00: "__cdecl _imp_CredMarshalTargetInfo" __imp_CredMarshalTargetInfo
0x180036110: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180038C78: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180031D98: "__cdecl _imp_Sleep" __imp_Sleep
0x1800326C0: "MinMODPDHModulusSize" ??_C@_1CK@LCAGGOI@?$AAM?$AAi?$AAn?$AAM?$AAO?$AAD?$AAP?$AAD?$AAH?$AAM?$AAo?$AAd?$AAu?$AAl?$AAu?$AAs?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18002F704: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x180031F28: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1800320F0: "__cdecl _xi_z" __xi_z
0x180041198: "__cdecl _imp_IntPstMapCertificateToProvider" __imp_IntPstMapCertificateToProvider
0x180031BE0: "__cdecl _imp_SspiFreeAuthIdentity" __imp_SspiFreeAuthIdentity
0x18001337C: "long __cdecl KerbDecryptDataEx(struct KERB_ENCRYPTED_DATA * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?KerbDecryptDataEx@@YAJPEAUKERB_ENCRYPTED_DATA@@PEAUKERB_ENCRYPTION_KEY@@KPEAKPEAE@Z
0x18002E264: "public: long __cdecl basessp::BaseSSP::SpInstanceInit(unsigned long,struct _SECPKG_DLL_FUNCTIONS * __ptr64) __ptr64" ?SpInstanceInit@BaseSSP@basessp@@QEAAJKPEAU_SECPKG_DLL_FUNCTIONS@@@Z
0x180031C50: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180031F50: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x180014360: "void __cdecl Pku2uDereferenceContext(struct _PKU2U_CONTEXT * __ptr64)" ?Pku2uDereferenceContext@@YAXPEAU_PKU2U_CONTEXT@@@Z
0x180032048: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x180003694: "__cdecl _C_specific_handler" __C_specific_handler
0x18002EF28: "unsigned long __cdecl PAC_GetSize(struct _PACTYPE * __ptr64)" ?PAC_GetSize@@YAKPEAU_PACTYPE@@@Z
0x1800221D8: "long __cdecl Pku2uBuildTicketTimesAndFlags(union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,struct KERB_KDC_REQUEST_BODY * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64)" ?Pku2uBuildTicketTimesAndFlags@@YAJPEAT_LARGE_INTEGER@@000PEAUKERB_KDC_REQUEST_BODY@@PEAUKERB_ENCRYPTED_TICKET@@@Z
0x1800195BC: "long __cdecl WSTReferenceUserModeContextByLsaHandle(unsigned __int64,unsigned char,struct _WST_USERMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTReferenceUserModeContextByLsaHandle@@YAJ_KEPEAPEAU_WST_USERMODE_CONTEXT@@@Z
0x18001F4EC: "void __cdecl KerbBuildQueryTicketCacheResponseEx2(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,struct _KERB_QUERY_TKT_CACHE_EX2_RESPONSE * __ptr64,unsigned char,__int64 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?KerbBuildQueryTicketCacheResponseEx2@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@PEAU_KERB_QUERY_TKT_CACHE_EX2_RESPONSE@@EPEA_JPEAPEAEPEAK@Z
0x18002CF50: MIDL_user_free
0x180029178: "long __cdecl Pku2uCreateTicketCacheEntry(struct KERB_KDC_REPLY * __ptr64,struct KERB_ENCRYPTED_KDC_REPLY * __ptr64,long,unsigned long,struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64 * __ptr64)" ?Pku2uCreateTicketCacheEntry@@YAJPEAUKERB_KDC_REPLY@@PEAUKERB_ENCRYPTED_KDC_REPLY@@JKPEAU_PKU2U_PRIMARY_CREDENTIAL@@PEAPEAU_PKU2U_TICKET_CACHE_ENTRY@@@Z
0x18001B5B0: "int __cdecl der_read_length(unsigned char * __ptr64 * __ptr64,int * __ptr64)" ?der_read_length@@YAHPEAPEAEPEAH@Z
0x180002240: "void __cdecl Pku2uDereferenceLogonSession(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uDereferenceLogonSession@@YAXPEAU_PKU2U_LOGON_SESSION@@@Z
0x180033790: "onecore\ds\security\protocols\pk" ??_C@_0DA@OOALOKLD@onecore?2ds?2security?2protocols?2pk@
0x180038F98: "struct _LSA_IF_IDPROVEXT_FUNCTION_TABLE * __ptr64 __ptr64 Pku2uGlobalIdpExtTable" ?Pku2uGlobalIdpExtTable@@3PEAU_LSA_IF_IDPROVEXT_FUNCTION_TABLE@@EA
0x1800042DE: memmove
0x180001C80: "long __cdecl Pku2uAllocateSecondaryCredential(struct _SECPKG_CREDENTIAL * __ptr64,struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64 * __ptr64)" ?Pku2uAllocateSecondaryCredential@@YAJPEAU_SECPKG_CREDENTIAL@@PEAPEAU_PKU2U_SECONDARY_CREDENTIAL@@@Z
0x180003D00: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x180038EB8: WPP_REGISTRATION_GUIDS
0x180031A70: "__cdecl _imp_ASN1BERDecU32Val" __imp_ASN1BERDecU32Val
0x180031AB8: "__cdecl _imp_ASN1BERDecS32Val" __imp_ASN1BERDecS32Val
0x180031F18: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x180038CD8: "struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64 __ptr64 Pku2uGlobalLsaFunctions" ?Pku2uGlobalLsaFunctions@@3PEAU_LSA_SECPKG_FUNCTION_TABLE@@EA
0x180031F98: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x180003863: malloc
0x180033540: "HMAC-SHA1-96" ??_C@_1BK@BPAIOKHG@?$AAH?$AAM?$AAA?$AAC?$AA?9?$AAS?$AAH?$AAA?$AA1?$AA?9?$AA9?$AA6?$AA?$AA@
0x180031C68: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180003E1C: "__cdecl _imp_load_CryptGenKey" __imp_load_CryptGenKey
0x1800252D0: "unsigned long __cdecl KerbConvertFlagsToUlong(void * __ptr64)" ?KerbConvertFlagsToUlong@@YAKPEAX@Z
0x180031D30: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180031F48: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x1800324D0: "Software\Microsoft\Windows\Curre" ??_C@_1JG@BKMNHBLG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800041D4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800040BE: "__cdecl _imp_load_LsaGetInterface" __imp_load_LsaGetInterface
0x1800324A8: "HTTP" ??_C@_19BMGGGIKC@?$AAH?$AAT?$AAT?$AAP?$AA?$AA@
0x180021424: "long __cdecl KerbUnicodeStringFromUtf8StrEx(char * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbUnicodeStringFromUtf8StrEx@@YAJPEADPEAU_UNICODE_STRING@@@Z
0x18002D9CC: "public: long __cdecl basessp::BaseSSP::WSTCreateTokenDacl(void * __ptr64) __ptr64" ?WSTCreateTokenDacl@BaseSSP@basessp@@QEAAJPEAX@Z
0x18002C3F0: "long __cdecl SpUserModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_USER_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpUserModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_USER_FUNCTION_TABLE@@0@Z
0x180031B08: "__cdecl _imp_ASN1EncSetError" __imp_ASN1EncSetError
0x1800191F0: "long __cdecl WSTPackContextFromContextData(struct _WST_CONTEXT_DATA * __ptr64,struct _SecBuffer * __ptr64)" ?WSTPackContextFromContextData@@YAJPEAU_WST_CONTEXT_DATA@@PEAU_SecBuffer@@@Z
0x18003AC40: "struct KERB_ALGORITHM_IDENTIFIER * __ptr64 __ptr64 Pku2uGlobalEmpheralDHAlg" ?Pku2uGlobalEmpheralDHAlg@@3PEAUKERB_ALGORITHM_IDENTIFIER@@EA
0x180033810: "onecore\ds\security\protocols\ba" ??_C@_0DC@CFGGOCK@onecore?2ds?2security?2protocols?2ba@
0x180032038: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x180035868: CRYPT32_NULL_THUNK_DATA_DLN
0x1800337C0: WPP_55c5e89ed0903e3e0ad7f48ee39225cb_Traceguids
0x1800264C4: "long __cdecl KerbUnpackAuthenticator(struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTED_DATA * __ptr64,unsigned char,struct KERB_AUTHENTICATOR * __ptr64 * __ptr64)" ?KerbUnpackAuthenticator@@YAJPEAUKERB_ENCRYPTION_KEY@@PEAUKERB_ENCRYPTED_DATA@@EPEAPEAUKERB_AUTHENTICATOR@@@Z
0x180032718: "SkewTime" ??_C@_1BC@BKLDGILK@?$AAS?$AAk?$AAe?$AAw?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180031D78: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180038E90: WPP_MAIN_CB
0x180002A10: "void __cdecl Pku2uGetRegParams(int)" ?Pku2uGetRegParams@@YAXH@Z
0x180031B50: "__cdecl _imp_ASN1BERDecGeneralizedTime" __imp_ASN1BERDecGeneralizedTime
0x18002C2D0: "long __cdecl SpUnsealMessage(unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long * __ptr64)" ?SpUnsealMessage@@YAJ_KPEAU_SecBufferDesc@@KPEAK@Z
0x180021170: "void __cdecl KerbFreePrincipalName(struct KERB_PRINCIPAL_NAME * __ptr64)" ?KerbFreePrincipalName@@YAXPEAUKERB_PRINCIPAL_NAME@@@Z
0x180031FB0: "__cdecl _imp_RtlEqualDomainName" __imp_RtlEqualDomainName
0x180036188: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180003887: "__cdecl amsg_exit" _amsg_exit
0x180031E98: "__cdecl _imp__callnewh" __imp__callnewh
0x18002202C: "long __cdecl Pku2uBuildTicketAS(struct _KERB_INTERNAL_NAME * __ptr64,struct PKERB_HOST_ADDRESSES * __ptr64,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,struct KERB_KDC_REQUEST_BODY * __ptr64,unsigned long,struct KERB_TICKET * __ptr64)" ?Pku2uBuildTicketAS@@YAJPEAU_KERB_INTERNAL_NAME@@PEAUPKERB_HOST_ADDRESSES@@PEAT_LARGE_INTEGER@@2PEAUKERB_KDC_REQUEST_BODY@@KPEAUKERB_TICKET@@@Z
0x180041188: "__cdecl _imp_PstGetUserNameForCertificate" __imp_PstGetUserNameForCertificate
0x180019094: "long __cdecl WSTMapContextToContextData(struct _WST_USERMODE_CONTEXT * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?WSTMapContextToContextData@@YAJPEAU_WST_USERMODE_CONTEXT@@PEAPEAEPEAK@Z
0x180033858: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180026494: "void __cdecl KerbTermAsn(struct ASN1encoding_s * __ptr64,struct ASN1decoding_s * __ptr64)" ?KerbTermAsn@@YAXPEAUASN1encoding_s@@PEAUASN1decoding_s@@@Z
0x1800140CC: "long __cdecl Pku2uComputeFinishedChecksum(struct _PKU2U_CONTEXT * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_CHECKSUM * __ptr64)" ?Pku2uComputeFinishedChecksum@@YAJPEAU_PKU2U_CONTEXT@@PEAUKERB_ENCRYPTION_KEY@@PEAUKERB_CHECKSUM@@@Z
0x180025D30: "long __cdecl KerbGetPacFromAuthData(struct PKERB_AUTHORIZATION_DATA * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64 * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64)" ?KerbGetPacFromAuthData@@YAJPEAUPKERB_AUTHORIZATION_DATA@@PEAPEAPEAU1@PEAPEAU1@@Z
0x1800410C8: "__cdecl _imp_CryptExportKey" __imp_CryptExportKey
0x180041010: "__cdecl _imp_CryptMsgOpenToEncode" __imp_CryptMsgOpenToEncode
0x18003E5A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUyzhvhhkUlyquivUznwGEUkivxlnkOlyq@basessp" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUyzhvhhkUlyquivUznwGEUkivxlnkOlyq@basessp
0x180031B58: "__cdecl _imp_ASN1DEREncGeneralizedTime" __imp_ASN1DEREncGeneralizedTime
0x1800204DC: "long __cdecl KerbCompareRealmNames(char * __ptr64 * __ptr64,char * __ptr64 * __ptr64,unsigned char * __ptr64)" ?KerbCompareRealmNames@@YAJPEAPEAD0PEAE@Z
0x18002E014: "public: long __cdecl basessp::BaseSSP::WSTGetTokenUser(void * __ptr64,struct _TOKEN_USER * __ptr64 * __ptr64) __ptr64" ?WSTGetTokenUser@BaseSSP@basessp@@QEAAJPEAXPEAPEAU_TOKEN_USER@@@Z
0x180033570: "1.2.840.10046.2.1" ??_C@_0BC@JFMJHDNN@1?42?4840?410046?42?41?$AA@
0x1800360FC: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x180035FA0: ext-ms-win-security-certpoleng-l1-1-0_NULL_THUNK_DATA_DLB
0x180003A76: "__cdecl _imp_load_CryptAcquireCertificatePrivateKey" __imp_load_CryptAcquireCertificatePrivateKey
0x180032880: "__cdecl _sz_lsass_exe" __sz_lsass_exe
0x180021500: "long __cdecl KerbUnicodeStringToKerbString(struct _STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbUnicodeStringToKerbString@@YAJPEAU_STRING@@PEAU_UNICODE_STRING@@@Z
0x180031D88: "__cdecl _imp_lstrcmpiA" __imp_lstrcmpiA
0x180001720: "long __cdecl Pku2uPopulateContextWithCredmanCreds(struct _PKU2U_CONTEXT * __ptr64)" ?Pku2uPopulateContextWithCredmanCreds@@YAJPEAU_PKU2U_CONTEXT@@@Z
0x18002BE00: "long __cdecl SpQueryContextAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryContextAttributes@@YAJ_KKPEAX@Z
0x180038C20: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x180032800: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x18001A280: "int __cdecl Pku2uGenerateDHParameters(unsigned long,int,struct _CERT_X942_DH_PARAMETERS * __ptr64)" ?Pku2uGenerateDHParameters@@YAHKHPEAU_CERT_X942_DH_PARAMETERS@@@Z
0x180041180: "__cdecl _imp_PstAcquirePrivateKey" __imp_PstAcquirePrivateKey
0x180031D70: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180003C88: "__cdecl _imp_load_CredFree" __imp_load_CredFree
0x18002F6BC: VerifyStackAvailable
0x180013088: "void __cdecl Pku2uReferenceAssociatedCredential(struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64)" ?Pku2uReferenceAssociatedCredential@@YAXPEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180031A10: "__cdecl _imp_ASN1_FreeDecoded" __imp_ASN1_FreeDecoded
0x180026B64: "long __cdecl Pku2uBuildApReply(struct _PKU2U_CONTEXT * __ptr64,struct KERB_AUTHENTICATOR * __ptr64,struct KERB_AP_REQUEST * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uBuildApReply@@YAJPEAU_PKU2U_CONTEXT@@PEAUKERB_AUTHENTICATOR@@PEAUKERB_AP_REQUEST@@PEAPEAEPEAK@Z
0x180032098: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x18001B624: "void __cdecl g_make_token_header(struct gss_OID_desc_struct * __ptr64,int,unsigned char * __ptr64 * __ptr64,int)" ?g_make_token_header@@YAXPEAUgss_OID_desc_struct@@HPEAPEAEH@Z
0x180031B90: "__cdecl _imp_MesHandleFree" __imp_MesHandleFree
0x180018294: WPP_SF_q_HEX_
0x1800336F0: "onecore\ds\security\protocols\pk" ??_C@_0CN@HGBBDOHF@onecore?2ds?2security?2protocols?2pk@
0x180031EA0: "__cdecl _imp_tolower" __imp_tolower
0x180031D38: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180018FEC: "long __cdecl WSTInsertUserModeContext(struct _WST_USERMODE_CONTEXT * __ptr64)" ?WSTInsertUserModeContext@@YAJPEAU_WST_USERMODE_CONTEXT@@@Z
0x180031DF0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180003D8B: "__cdecl _tailMerge_api_ms_win_security_credentials_l2_1_0_dll" __tailMerge_api_ms_win_security_credentials_l2_1_0_dll
0x18001B570: "int __cdecl der_length_size(int)" ?der_length_size@@YAHH@Z
0x180031C58: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180031DD0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180033560: WPP_e4e6b8499a9638a587e02114fa1d09aa_Traceguids
0x180018CF8: "void __cdecl WSTFreeUserModeContextList(unsigned long)" ?WSTFreeUserModeContextList@@YAXK@Z
0x180029AD4: "long __cdecl Pku2uComputeDomainRelativeSid(void * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uComputeDomainRelativeSid@@YAJPEAXPEAPEAXPEAK@Z
0x180031BB0: "__cdecl _imp_MesIncrementalHandleReset" __imp_MesIncrementalHandleReset
0x18002EBD8: "long __cdecl PAC_EncodeValidationInformation(struct _NETLOGON_VALIDATION_SAM_INFO3 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?PAC_EncodeValidationInformation@@YAJPEAU_NETLOGON_VALIDATION_SAM_INFO3@@PEAPEAEPEAK@Z
0x180031DB0: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180031CD8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180038150: "struct _SECPKG_USER_FUNCTION_TABLE Pku2uGlobalUserFunctions" ?Pku2uGlobalUserFunctions@@3U_SECPKG_USER_FUNCTION_TABLE@@A
0x1800384F0: "unsigned long Pku2uGlobalWellknownDomainParamtersCount" ?Pku2uGlobalWellknownDomainParamtersCount@@3KA
0x180038D10: "unsigned long Pku2uGlobalMODPDHModulusSize" ?Pku2uGlobalMODPDHModulusSize@@3KA
0x18002D570: "long __cdecl Pku2uReceiveErrorMessage(unsigned char * __ptr64,unsigned long,struct KERB_ERROR * __ptr64 * __ptr64,struct KERB_ERROR_METHOD_DATA * __ptr64 * __ptr64)" ?Pku2uReceiveErrorMessage@@YAJPEAEKPEAPEAUKERB_ERROR@@PEAPEAUKERB_ERROR_METHOD_DATA@@@Z
0x180031D80: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x18002EA68: "long __cdecl PAC_DecodeValidationInformation(unsigned char * __ptr64,unsigned long,struct _NETLOGON_VALIDATION_SAM_INFO3 * __ptr64 * __ptr64)" ?PAC_DecodeValidationInformation@@YAJPEAEKPEAPEAU_NETLOGON_VALIDATION_SAM_INFO3@@@Z
0x18002831C: "long __cdecl Pku2uVerifyApReply(struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long)" ?Pku2uVerifyApReply@@YAJPEAU_PKU2U_CONTEXT@@PEAEK@Z
0x1800334F0: "HomeGroupUser$" ??_C@_1BO@NCMEELDD@?$AAH?$AAo?$AAm?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp?$AAU?$AAs?$AAe?$AAr?$AA$?$AA?$AA@
0x1800028C0: "private: long __cdecl basessp::BaseSSP::WSTLoadCredTable(void) __ptr64" ?WSTLoadCredTable@BaseSSP@basessp@@AEAAJXZ
0x18002DE74: "public: void __cdecl basessp::BaseSSP::WSTFree2(void * __ptr64) __ptr64" ?WSTFree2@BaseSSP@basessp@@QEAAXPEAX@Z
0x180038C68: "__cdecl _native_startup_lock" __native_startup_lock
0x180003F6D: "__cdecl _imp_load_IntPstGetCertificate" __imp_load_IntPstGetCertificate
0x180031AD8: "__cdecl _imp_ASN1Free" __imp_ASN1Free
0x180031E30: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180004150: DllMain
0x180035988: lsass_NULL_THUNK_DATA_DLN
0x1800029F0: "unsigned long __cdecl Pku2uWatchPolicy(void * __ptr64)" ?Pku2uWatchPolicy@@YAKPEAX@Z
0x18002D674: "long __cdecl WSTBuildFullServiceName(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?WSTBuildFullServiceName@@YAJPEAU_UNICODE_STRING@@00@Z
0x1800290A4: WPP_SF_ii
0x180033498: "(empty)" ??_C@_1BA@OGKPHKHF@?$AA?$CI?$AAe?$AAm?$AAp?$AAt?$AAy?$AA?$CJ?$AA?$AA@
0x18001CC50: WSTMakeSignature
0x18002EF68: "long __cdecl PAC_InitEx2(struct _SAMPR_USER_ALL_INFORMATION * __ptr64,struct _SAMPR_GET_GROUPS_BUFFER * __ptr64,struct _SID_AND_ATTRIBUTES_LIST * __ptr64,void * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,unsigned long,struct _PAC_INFO_BUFFER * __ptr64 * __ptr64,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,struct _LSA_LAST_INTER_LOGON_INFO * __ptr64,struct _PACTYPE * __ptr64 * __ptr64)" ?PAC_InitEx2@@YAJPEAU_SAMPR_USER_ALL_INFORMATION@@PEAU_SAMPR_GET_GROUPS_BUFFER@@PEAU_SID_AND_ATTRIBUTES_LIST@@PEAXPEAU_UNICODE_STRING@@4KKKPEAPEAU_PAC_INFO_BUFFER@@PEAT_LARGE_INTEGER@@6PEAU_LSA_LAST_INTER_LOGON_INFO@@PEAPEAU_PACTYPE@@@Z
0x180001C50: "void __cdecl Pku2uReferenceSecondaryCredential(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64)" ?Pku2uReferenceSecondaryCredential@@YAXPEAU_PKU2U_SECONDARY_CREDENTIAL@@@Z
0x180004238: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180031F10: "__cdecl _imp_RtlSubAuthorityCountSid" __imp_RtlSubAuthorityCountSid
0x18003619C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180031EB8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180031ED0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180003B37: "__cdecl _imp_load_CryptMsgClose" __imp_load_CryptMsgClose
0x1800151A0: "long __cdecl SpAcceptLsaModeContext(unsigned __int64,unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpAcceptLsaModeContext@@YAJ_K0PEAU_SecBufferDesc@@KKPEA_K1PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x180031D58: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18002064C: "long __cdecl KerbConvertKdcNameToPrincipalName(struct KERB_PRINCIPAL_NAME * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64)" ?KerbConvertKdcNameToPrincipalName@@YAJPEAUKERB_PRINCIPAL_NAME@@PEAU_KERB_INTERNAL_NAME@@@Z
0x180031CA0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18002C460: "long __cdecl SpVerifySignature(unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long * __ptr64)" ?SpVerifySignature@@YAJ_KPEAU_SecBufferDesc@@KPEAK@Z
0x180038CF8: "union _LARGE_INTEGER Pku2uGlobalHasNeverTime" ?Pku2uGlobalHasNeverTime@@3T_LARGE_INTEGER@@A
0x180003C9A: "__cdecl _imp_load_CertDuplicateCertificateContext" __imp_load_CertDuplicateCertificateContext
0x1800265E4: "long __cdecl KerbUnpackData(unsigned char * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?KerbUnpackData@@YAJPEAEKKPEAPEAX@Z
0x180041050: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x180031A20: "__cdecl _imp_ASN1_FreeEncoded" __imp_ASN1_FreeEncoded
0x180041168: "__cdecl _imp_IntPstGetTrustAnchors" __imp_IntPstGetTrustAnchors
0x180033510: "onecore\ds\security\protocols\pk" ??_C@_0DA@BJJIIBKJ@onecore?2ds?2security?2protocols?2pk@
0x18002124C: "long __cdecl KerbStringToUnicodeString(struct _UNICODE_STRING * __ptr64,struct _STRING * __ptr64)" ?KerbStringToUnicodeString@@YAJPEAU_UNICODE_STRING@@PEAU_STRING@@@Z
0x180038D18: "void * __ptr64 __ptr64 Pku2uGlobalLsaNotification" ?Pku2uGlobalLsaNotification@@3PEAXEA
0x180031C38: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000310C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180031A30: "__cdecl _imp_ASN1_CloseDecoder" __imp_ASN1_CloseDecoder
0x18002B6AC: WPP_SF_ZZsd
0x1800410E0: "__cdecl _imp_CryptGenKey" __imp_CryptGenKey
0x18001C9C8: "void __cdecl Pku2uPurgeTicketsForLogonSession(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uPurgeTicketsForLogonSession@@YAXPEAU_PKU2U_LOGON_SESSION@@@Z
0x1800381D0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800041B0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180014524: "void __cdecl Pku2uFreeSSPIMessage(struct _PKU2U_SSPI_MESSAGE * __ptr64)" ?Pku2uFreeSSPIMessage@@YAXPEAU_PKU2U_SSPI_MESSAGE@@@Z
0x18002E688: "public: void __cdecl basessp::BaseSSP::WSTDereferenceCredential(struct basessp::_WST_CREDENTIAL * __ptr64) __ptr64" ?WSTDereferenceCredential@BaseSSP@basessp@@QEAAXPEAU_WST_CREDENTIAL@2@@Z
0x1800273C4: "long __cdecl Pku2uBuildThirdLegApReply(struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uBuildThirdLegApReply@@YAJPEAU_PKU2U_CONTEXT@@PEAPEAEPEAK@Z
0x180031EF0: "__cdecl _imp_memcmp" __imp_memcmp
0x1800130A4: "void __cdecl Pku2uRemoveAssociatedCredential(struct _PKU2U_LOGON_SESSION * __ptr64,struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64)" ?Pku2uRemoveAssociatedCredential@@YAXPEAU_PKU2U_LOGON_SESSION@@PEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180020E60: "long __cdecl KerbConvertUnicodeStringToRealm(char * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbConvertUnicodeStringToRealm@@YAJPEAPEADPEAU_UNICODE_STRING@@@Z
0x180003C09: "__cdecl _tailMerge_api_ms_win_security_credentials_l1_1_0_dll" __tailMerge_api_ms_win_security_credentials_l1_1_0_dll
0x18001D2EC: WSTSealMessage
0x180031F60: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x180003F37: "__cdecl _imp_load_IntPstMapCertificateToProvider" __imp_load_IntPstMapCertificateToProvider
0x180003F5B: "__cdecl _imp_load_PstGetCertificateChain" __imp_load_PstGetCertificateChain
0x1800336E0: WPP_3f2c822c564b375f4b3de62bb73e6772_Traceguids
0x180038D00: "enum basessp::_WST_STATE Pku2uGlobalState" ?Pku2uGlobalState@@3W4_WST_STATE@basessp@@A
0x180029594: "void __cdecl Pku2uPurgeTicketCache(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64)" ?Pku2uPurgeTicketCache@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@@Z
0x18002DF38: "long __cdecl basessp::WSTGetTokenPackage(void * __ptr64,int * __ptr64,struct _TOKEN_APPCONTAINER_INFORMATION * __ptr64 * __ptr64)" ?WSTGetTokenPackage@basessp@@YAJPEAXPEAHPEAPEAU_TOKEN_APPCONTAINER_INFORMATION@@@Z
0x180031CE8: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x1800269D8: "long __cdecl KerbVerifyTicket(struct KERB_TICKET * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,union _LARGE_INTEGER * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64 * __ptr64)" ?KerbVerifyTicket@@YAJPEAUKERB_TICKET@@PEAUKERB_ENCRYPTION_KEY@@PEAT_LARGE_INTEGER@@PEAPEAUKERB_ENCRYPTED_TICKET@@@Z
0x1800334A8: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x180041098: "__cdecl _imp_CertCompareCertificateName" __imp_CertCompareCertificateName
0x180015114: "long __cdecl Pku2uValidateChannelBindings(void * __ptr64,unsigned long)" ?Pku2uValidateChannelBindings@@YAJPEAXK@Z
0x180041070: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x1800411A8: "__cdecl _imp_IntPstValidate" __imp_IntPstValidate
0x180002420: "void __cdecl Pku2uInitDebugSupport(void)" ?Pku2uInitDebugSupport@@YAXXZ
0x180033480: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800362B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180031D00: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18002E6B8: "private: void __cdecl basessp::BaseSSP::WSTFreeCredential(struct basessp::_WST_CREDENTIAL * __ptr64) __ptr64" ?WSTFreeCredential@BaseSSP@basessp@@AEAAXPEAU_WST_CREDENTIAL@2@@Z
0x18002D028: "long __cdecl Pku2uImpersonateToken(void * __ptr64,void * __ptr64 * __ptr64,int * __ptr64)" ?Pku2uImpersonateToken@@YAJPEAXPEAPEAXPEAH@Z
0x180038D70: "struct _CERT_X942_DH_PARAMETERS Pku2uGlobalDHParameters" ?Pku2uGlobalDHParameters@@3U_CERT_X942_DH_PARAMETERS@@A
0x180031A60: "__cdecl _imp_ASN1bitstring_free" __imp_ASN1bitstring_free
0x18001D014: WSTMakeSignatureToken
0x18001AEDC: "int __cdecl Pku2uInitDHWellknowDomainParametersDefaults(void)" ?Pku2uInitDHWellknowDomainParametersDefaults@@YAHXZ
0x18003AC48: "unsigned __int64 Pku2uGlobalCSPProvider" ?Pku2uGlobalCSPProvider@@3_KA
0x180033858: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180032570: "System\CurrentControlSet\Control" ??_C@_1GM@HDJOBHGC@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180003950: "__cdecl ValidateImageBase" _ValidateImageBase
0x18001CBE8: WSTGetChecksumAndEncryptionType
0x180017F18: WPP_SF_ZD
0x180033588: WPP_804f393aee0037a2b2a3772441405ecf_Traceguids
0x180017FE4: WPP_SF_ZS
0x18001F9E0: "long __cdecl LsaApCallPackageUntrusted(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackageUntrusted@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x180035744: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_certpoleng_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_certpoleng_l1_1_0_dll
0x180031B30: "__cdecl _imp_ASN1BERDecNotEndOfContents" __imp_ASN1BERDecNotEndOfContents
0x180033428: SEC_WINNT_AUTH_DATA_TYPE_CREDMAN_CERT
0x180031FE0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180032010: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x180022D68: "long __cdecl Pku2uHandlePeer2PeerAsRequest(struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long,long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uHandlePeer2PeerAsRequest@@YAJPEAU_PKU2U_CONTEXT@@PEAEKPEAJPEAPEAEPEAK@Z
0x180036174: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18002DD58: "public: long __cdecl basessp::BaseSSP::WSTDuplicateKey(struct basessp::_WST_ENCRYPTION_KEY * __ptr64,struct basessp::_WST_ENCRYPTION_KEY * __ptr64) __ptr64" ?WSTDuplicateKey@BaseSSP@basessp@@QEAAJPEAU_WST_ENCRYPTION_KEY@2@0@Z
0x180020208: "char * __ptr64 __cdecl KerbAllocUtf8StrFromUnicodeString(struct _UNICODE_STRING * __ptr64)" ?KerbAllocUtf8StrFromUnicodeString@@YAPEADPEAU_UNICODE_STRING@@@Z
0x180017E64: WPP_SF_Z
0x180020AB8: "long __cdecl KerbConvertPrincipalNameToString(struct _UNICODE_STRING * __ptr64,unsigned long * __ptr64,struct KERB_PRINCIPAL_NAME * __ptr64)" ?KerbConvertPrincipalNameToString@@YAJPEAU_UNICODE_STRING@@PEAKPEAUKERB_PRINCIPAL_NAME@@@Z
0x180003BFD: "__cdecl _imp_load_CredUnmarshalCredentialW" __imp_load_CredUnmarshalCredentialW
0x1800165F0: "long __cdecl SpGetCredUIContext(unsigned __int64,struct _GUID * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?SpGetCredUIContext@@YAJ_KPEAU_GUID@@PEAKPEAPEAE@Z
0x180038D28: "class CAuthenticatorList * __ptr64 __ptr64 Pku2uGlobalAuthenticators" ?Pku2uGlobalAuthenticators@@3PEAVCAuthenticatorList@@EA
0x180033400: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1800280A8: "long __cdecl Pku2uMarshallApReply(struct KERB_AP_REPLY * __ptr64,struct KERB_ENCRYPTED_AP_REPLY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uMarshallApReply@@YAJPEAUKERB_AP_REPLY@@PEAUKERB_ENCRYPTED_AP_REPLY@@PEAUKERB_ENCRYPTION_KEY@@PEAPEAEPEAK@Z
0x180011728: WPP_SF_
0x180038CE8: "struct _TOKEN_SOURCE Pku2uGlobalSource" ?Pku2uGlobalSource@@3U_TOKEN_SOURCE@@A
0x18002D26C: "long __cdecl Pku2uProcessTargetNames(struct _UNICODE_STRING * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64 * __ptr64)" ?Pku2uProcessTargetNames@@YAJPEAU_UNICODE_STRING@@PEAPEAU_KERB_INTERNAL_NAME@@@Z
0x180003F91: "__cdecl _imp_load_IntPstValidate" __imp_load_IntPstValidate
0x1800357A4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18002CA18: "unsigned long __cdecl Pku2uAllocateNonce(void)" ?Pku2uAllocateNonce@@YAKXZ
0x180033468: "My" ??_C@_15OLMMKIPI@?$AAM?$AAy?$AA?$AA@
0x180031D90: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1800275B8: "long __cdecl Pku2uComputeGssBindHash(struct _SEC_CHANNEL_BINDINGS * __ptr64,unsigned char * __ptr64)" ?Pku2uComputeGssBindHash@@YAJPEAU_SEC_CHANNEL_BINDINGS@@PEAE@Z
0x1800137B0: "long __cdecl Pku2uCheckCertIssuedByProvider(void * __ptr64,unsigned short,unsigned char * __ptr64 const,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?Pku2uCheckCertIssuedByProvider@@YAJPEAXGQEAEPEAKPEAPEAE@Z
0x1800033D0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180031A68: "__cdecl _imp_ASN1_CreateModule" __imp_ASN1_CreateModule
0x1800335D0: WPP_ca6d715d65a83792b2421853a8637c0e_Traceguids
0x180031EE0: "__cdecl _imp__initterm" __imp__initterm
0x180017760: "long __cdecl SpQueryLsaModeContext(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryLsaModeContext@@YAJ_KKPEAX@Z
0x1800040CA: "__cdecl _tailMerge_lsass_exe" __tailMerge_lsass_exe
0x180035784: "__cdecl _DELAY_IMPORT_DESCRIPTOR_lsass_exe" __DELAY_IMPORT_DESCRIPTOR_lsass_exe
0x18002AFC0: "long __cdecl Pku2uVerifyPacSignature(struct _PACTYPE * __ptr64,unsigned long,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64,struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64 * __ptr64)" ?Pku2uVerifyPacSignature@@YAJPEAU_PACTYPE@@KPEAUKERB_ENCRYPTION_KEY@@PEAUKERB_ENCRYPTED_TICKET@@PEAPEAU_NETLOGON_VALIDATION_SAM_INFO4@@@Z
0x18002C6A4: "long __cdecl KerbMakeKeyEx(unsigned long,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64)" ?KerbMakeKeyEx@@YAJKKPEAEK0K0PEAUKERB_ENCRYPTION_KEY@@@Z
0x180031C08: "__cdecl _imp_CredUnmarshalTargetInfo" __imp_CredUnmarshalTargetInfo
0x1800117E0: "long __cdecl ScHelperBuildCertContext(unsigned char * __ptr64,unsigned long,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?ScHelperBuildCertContext@@YAJPEAEKPEAPEBU_CERT_CONTEXT@@@Z
0x18002A054: "long __cdecl Pku2uCreateTokenFromTicket(struct KERB_ENCRYPTED_TICKET * __ptr64,struct KERB_AUTHENTICATOR * __ptr64,unsigned long,struct KERB_ENCRYPTION_KEY * __ptr64,struct _LUID * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64,union _LARGE_INTEGER * __ptr64)" ?Pku2uCreateTokenFromTicket@@YAJPEAUKERB_ENCRYPTED_TICKET@@PEAUKERB_AUTHENTICATOR@@KPEAUKERB_ENCRYPTION_KEY@@PEAU_LUID@@PEAPEAX4PEAU_UNICODE_STRING@@PEAT_LARGE_INTEGER@@@Z
0x180031C40: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800362A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180014388: "void __cdecl Pku2uFreeContext(struct _PKU2U_CONTEXT * __ptr64)" ?Pku2uFreeContext@@YAXPEAU_PKU2U_CONTEXT@@@Z
0x180021E3C: "long __cdecl Pku2uBuildReply(unsigned long,struct KERB_PRINCIPAL_NAME * __ptr64,char * __ptr64,struct KERB_TICKET * __ptr64,struct KERB_ENCRYPTED_KDC_REPLY * __ptr64)" ?Pku2uBuildReply@@YAJKPEAUKERB_PRINCIPAL_NAME@@PEADPEAUKERB_TICKET@@PEAUKERB_ENCRYPTED_KDC_REPLY@@@Z
0x180031C88: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800116CC: "public: void __cdecl CAuthenticatorList::SetMaxAge(union _LARGE_INTEGER) __ptr64" ?SetMaxAge@CAuthenticatorList@@QEAAXT_LARGE_INTEGER@@@Z
0x180025CDC: "void __cdecl KerbFreeTicketExtensions(struct PKERB_TICKET_EXTENSIONS * __ptr64)" ?KerbFreeTicketExtensions@@YAXPEAUPKERB_TICKET_EXTENSIONS@@@Z
0x180031FF0: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x180011460: "public: long __cdecl CAuthenticatorList::Check(void * __ptr64,unsigned long,void * __ptr64,unsigned long,union _LARGE_INTEGER * __ptr64,unsigned char,unsigned char,unsigned char) __ptr64" ?Check@CAuthenticatorList@@QEAAJPEAXK0KPEAT_LARGE_INTEGER@@EEE@Z
0x180031BF8: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x18002031C: "unsigned short * __ptr64 __cdecl KerbAllocWStrFromUtf8Str(char * __ptr64)" ?KerbAllocWStrFromUtf8Str@@YAPEAGPEAD@Z
0x180020D2C: "long __cdecl KerbConvertRealmToUnicodeString(struct _UNICODE_STRING * __ptr64,char * __ptr64 * __ptr64)" ?KerbConvertRealmToUnicodeString@@YAJPEAU_UNICODE_STRING@@PEAPEAD@Z
0x18002C1B0: "long __cdecl SpSealMessage(unsigned __int64,unsigned long,struct _SecBufferDesc * __ptr64,unsigned long)" ?SpSealMessage@@YAJ_KKPEAU_SecBufferDesc@@K@Z
0x18003E588: "int Pku2uGlobalDHAvailable" ?Pku2uGlobalDHAvailable@@3HA
0x1800290F4: "void __cdecl Pku2uAgeTickets(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64)" ?Pku2uAgeTickets@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@@Z
0x1800361C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180032998: WPP_38ebe2385e853b10d6f4f0556a513f37_Traceguids
0x18002EEF0: "struct _PAC_INFO_BUFFER * __ptr64 __cdecl PAC_Find(struct _PACTYPE * __ptr64,unsigned long,struct _PAC_INFO_BUFFER * __ptr64)" ?PAC_Find@@YAPEAU_PAC_INFO_BUFFER@@PEAU_PACTYPE@@KPEAU1@@Z
0x1800411B0: ext-ms-win-security-certpoleng-l1-1-0_NULL_THUNK_DATA_DLA
0x180032870: "__cdecl _sz_LSASRV_dll" __sz_LSASRV_dll
0x180041128: "__cdecl _imp_LsaIAuditReplay" __imp_LsaIAuditReplay
0x1800295FC: "void __cdecl Pku2uPurgeTicketCacheEntry(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64,struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64)" ?Pku2uPurgeTicketCacheEntry@@YAXPEAU_PKU2U_SECONDARY_CREDENTIAL@@PEAU_PKU2U_ASSOCIATED_CREDENTIAL@@PEAU_PKU2U_TICKET_CACHE_ENTRY@@@Z
0x180041000: "__cdecl _imp_CryptAcquireCertificatePrivateKey" __imp_CryptAcquireCertificatePrivateKey
0x180038C58: "__cdecl _onexitend" __onexitend
0x180029B7C: "long __cdecl Pku2uCreatePac(union _LARGE_INTEGER * __ptr64,struct _UNICODE_STRING * __ptr64,struct _CERT_CONTEXT const * __ptr64,struct _UNICODE_STRING * __ptr64,struct _PACTYPE * __ptr64 * __ptr64)" ?Pku2uCreatePac@@YAJPEAT_LARGE_INTEGER@@PEAU_UNICODE_STRING@@PEBU_CERT_CONTEXT@@1PEAPEAU_PACTYPE@@@Z
0x18001D284: WSTRotateLeftByCount
0x180035FF0: LSASRV_NULL_THUNK_DATA_DLB
0x180041138: LSASRV_NULL_THUNK_DATA_DLA
0x18002553C: "void __cdecl KerbConvertLargeIntToGeneralizedTimeWrapper(struct tagASN1generalizedtime_t * __ptr64,long * __ptr64,union _LARGE_INTEGER * __ptr64)" ?KerbConvertLargeIntToGeneralizedTimeWrapper@@YAXPEAUtagASN1generalizedtime_t@@PEAJPEAT_LARGE_INTEGER@@@Z
0x18002134C: "long __cdecl KerbUnicodeStringFromUtf8Str(char * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbUnicodeStringFromUtf8Str@@YAJPEADPEAU_UNICODE_STRING@@@Z
0x1800320C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180035900: LSASRV_NULL_THUNK_DATA_DLN
0x180032968: "PKU2U Security Package" ??_C@_1CO@ENFKAJBI@?$AAP?$AAK?$AAU?$AA2?$AAU?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?$AA@
0x180003BEB: "__cdecl _imp_load_CertFreeCertificateChain" __imp_load_CertFreeCertificateChain
0x180031BD8: "__cdecl _imp_QuerySecurityPackageInfoW" __imp_QuerySecurityPackageInfoW
0x180018E64: "long __cdecl WSTImportSecurityContext(struct _SecBuffer * __ptr64,void * __ptr64,unsigned __int64 * __ptr64)" ?WSTImportSecurityContext@@YAJPEAU_SecBuffer@@PEAXPEA_K@Z
0x1800334B8: "" ??_C@_13IOKCHHHM@?$AA?$BA?$AA?$AA@
0x180002350: "void __cdecl Pku2uTableFree(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64)" ?Pku2uTableFree@@YAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x180035764: "__cdecl _DELAY_IMPORT_DESCRIPTOR_LSASRV_dll" __DELAY_IMPORT_DESCRIPTOR_LSASRV_dll
0x180036278: "__cdecl _IMPORT_DESCRIPTOR_cryptdll" __IMPORT_DESCRIPTOR_cryptdll
0x18003348C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18003E570: "struct _CRYPT_ALGORITHM_IDENTIFIER Pku2uGlobalDHAlgorithm" ?Pku2uGlobalDHAlgorithm@@3U_CRYPT_ALGORITHM_IDENTIFIER@@A
0x18000402E: "__cdecl _imp_load_LsaIRegisterNotification" __imp_load_LsaIRegisterNotification
0x180031CF0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800150A0: "long __cdecl Pku2uSaveSSPIMessage(unsigned char * __ptr64,unsigned long,struct _PKU2U_CONTEXT * __ptr64)" ?Pku2uSaveSSPIMessage@@YAJPEAEKPEAU_PKU2U_CONTEXT@@@Z
0x180031B10: "__cdecl _imp_ASN1objectidentifier_free" __imp_ASN1objectidentifier_free
0x18001B15C: "long __cdecl Pku2uIsKeyUsingWellKnownDHDomainParameters(unsigned __int64,int * __ptr64)" ?Pku2uIsKeyUsingWellKnownDHDomainParameters@@YAJ_KPEAH@Z
0x180035E88: CRYPT32_NULL_THUNK_DATA_DLB
0x180001E00: "long __cdecl Pku2uValidateCreds(struct _SECPKG_CREDENTIAL * __ptr64,int * __ptr64)" ?Pku2uValidateCreds@@YAJPEAU_SECPKG_CREDENTIAL@@PEAH@Z
0x18001A1E0: "long __cdecl Pku2uGenerateDHKey(struct _CERT_X942_DH_PARAMETERS * __ptr64,int,unsigned __int64 * __ptr64)" ?Pku2uGenerateDHKey@@YAJPEAU_CERT_X942_DH_PARAMETERS@@HPEA_K@Z
0x180031AC0: "__cdecl _imp_ASN1BEREncOpenType" __imp_ASN1BEREncOpenType
0x180041178: "__cdecl _imp_IntPstGetNameIdentifierForCertificate" __imp_IntPstGetNameIdentifierForCertificate
0x180038C50: "__cdecl _hmod__lsass_exe" __hmod__lsass_exe
0x180031E40: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x1800268BC: "long __cdecl KerbUnpackTicket(struct KERB_TICKET * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64 * __ptr64)" ?KerbUnpackTicket@@YAJPEAUKERB_TICKET@@PEAUKERB_ENCRYPTION_KEY@@PEAPEAUKERB_ENCRYPTED_TICKET@@@Z
0x18001A8E4: "int __cdecl Pku2uGetDHPublicKey(unsigned __int64,struct _CRYPTOAPI_BLOB * __ptr64)" ?Pku2uGetDHPublicKey@@YAH_KPEAU_CRYPTOAPI_BLOB@@@Z
0x180031B80: "__cdecl _imp_ASN1BERDecOpenType2" __imp_ASN1BERDecOpenType2
0x18001C78C: "long __cdecl Pku2uLogonSessionTableInsertOrLocate(struct _PKU2U_LOGON_SESSION * __ptr64 * __ptr64)" ?Pku2uLogonSessionTableInsertOrLocate@@YAJPEAPEAU_PKU2U_LOGON_SESSION@@@Z
0x180031DC8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800320E0: "__cdecl _xi_a" __xi_a
0x180031DC0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180031C28: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180003E40: "__cdecl _imp_load_CryptExportKey" __imp_load_CryptExportKey
0x1800333F0: WPP_ThisDir_CTLGUID_Pku2uGlobalDebugTraceControlGuid
0x18001DD20: WSTUnsealMessage
0x180038F88: "void * __ptr64 __ptr64 Pku2uGlobalAliasAdminsSid" ?Pku2uGlobalAliasAdminsSid@@3PEAXEA
0x180032030: "__cdecl _imp_RtlNumberGenericTableElementsAvl" __imp_RtlNumberGenericTableElementsAvl
0x180031E28: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180003BB5: "__cdecl _imp_load_CryptGetMessageCertificates" __imp_load_CryptGetMessageCertificates
0x18001C3B8: "void __cdecl Pku2uAgeTicketsForLogonSession(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uAgeTicketsForLogonSession@@YAXPEAU_PKU2U_LOGON_SESSION@@@Z
0x180011420: "void * __ptr64 __cdecl Pku2uTableAllocate(struct _RTL_AVL_TABLE * __ptr64,unsigned long)" ?Pku2uTableAllocate@@YAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x1800410B0: "__cdecl _imp_CryptImportKey" __imp_CryptImportKey
0x180031FD0: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x180033448: WPP_9a7742002944343f5ac08752241c27f5_Traceguids
0x180031E78: "__cdecl _imp_CDLocateCSystem" __imp_CDLocateCSystem
0x18001B4A4: "void __cdecl Pku2uUnLoadDH(void)" ?Pku2uUnLoadDH@@YAXXZ
0x18001CAA4: WPP_SF_di
0x180035978: ext-ms-win-security-certpoleng-l1-1-0_NULL_THUNK_DATA_DLN
0x180013244: WPP_SF_DD
0x180013244: WPP_SF_dD
0x180013244: WPP_SF_dd
0x180024810: WPP_SF_DZ
0x180038FF0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUkpfCfUwooUlyquivUznwGEUkivxlnkOlyq@pku2u" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUkpfCfUwooUlyquivUznwGEUkivxlnkOlyq@pku2u
0x1800248EC: WPP_SF_ds
0x180017CC4: WPP_SF_DS
0x180038D08: "union _LARGE_INTEGER Pku2uGlobalSkewTime" ?Pku2uGlobalSkewTime@@3T_LARGE_INTEGER@@A
0x18001328C: WPP_SF_Dq
0x180031E58: "__cdecl _imp_CDGenerateRandomBits" __imp_CDGenerateRandomBits
0x180031AA8: "__cdecl _imp_ASN1charstring_free" __imp_ASN1charstring_free
0x1800123A0: "void __cdecl Pku2uDereferenceAssociatedCredential(struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64)" ?Pku2uDereferenceAssociatedCredential@@YAXPEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180038000: WPP_GLOBAL_Control
0x1800410A8: "__cdecl _imp_CryptGetKeyParam" __imp_CryptGetKeyParam
0x180025EB0: "long __cdecl KerbMapKerbError(long)" ?KerbMapKerbError@@YAJJ@Z
0x180013A18: "long __cdecl Pku2uCheckCredMgrCreds(struct _LUID * __ptr64,void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64 * __ptr64,enum _SECPKG_CRED_CLASS * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uCheckCredMgrCreds@@YAJPEAU_LUID@@PEAXPEAG2PEAPEAU_SECPKG_SUPPLIED_CREDENTIAL@@PEAW4_SECPKG_CRED_CLASS@@PEAPEAEPEAK@Z
0x1800361EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180031CC0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1800023F0: "void __cdecl PacAllocFcn(void * __ptr64,char * __ptr64 * __ptr64,unsigned int * __ptr64)" ?PacAllocFcn@@YAXPEAXPEAPEADPEAI@Z
0x1800267A0: "long __cdecl KerbUnpackKdcReplyBody(struct KERB_ENCRYPTED_DATA * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,struct KERB_ENCRYPTED_KDC_REPLY * __ptr64 * __ptr64)" ?KerbUnpackKdcReplyBody@@YAJPEAUKERB_ENCRYPTED_DATA@@PEAUKERB_ENCRYPTION_KEY@@KPEAPEAUKERB_ENCRYPTED_KDC_REPLY@@@Z
0x18001210C: WPP_SF_d
0x18001210C: WPP_SF_D
0x180038C80: "__cdecl pRawDllMain" _pRawDllMain
0x180031F80: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x180001AD0: "long __cdecl Pku2uAllocateContext(int,struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long,struct _PKU2U_CONTEXT * __ptr64 * __ptr64)" ?Pku2uAllocateContext@@YAJHPEAU_PKU2U_SECONDARY_CREDENTIAL@@PEAU_UNICODE_STRING@@KPEAPEAU_PKU2U_CONTEXT@@@Z
0x18001CA20: "void __cdecl Pku2uUnloadLogonSessionTable(void)" ?Pku2uUnloadLogonSessionTable@@YAXXZ
0x180002020: "long __cdecl KerbDuplicateStringEx(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char,unsigned char)" ?KerbDuplicateStringEx@@YAJPEAU_UNICODE_STRING@@0EE@Z
0x180013100: "void __cdecl Pku2uUnloadCredTable(void)" ?Pku2uUnloadCredTable@@YAXXZ
0x180003100: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180031C10: SspiCli_NULL_THUNK_DATA
0x180032068: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x180031F88: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x180038FA0: "unsigned long Pku2uGlobalAlwaysPrompt" ?Pku2uGlobalAlwaysPrompt@@3KA
0x1800125A8: "long __cdecl Pku2uGetCertFromCred(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct _GUID const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?Pku2uGetCertFromCred@@YAJPEAU_PKU2U_SECONDARY_CREDENTIAL@@PEBU_GUID@@PEAU_UNICODE_STRING@@@Z
0x1800258E0: "long __cdecl KerbDuplicateSid(void * __ptr64 * __ptr64,void * __ptr64)" ?KerbDuplicateSid@@YAJPEAPEAXPEAX@Z
0x180003670: "__cdecl _security_check_cookie" __security_check_cookie
0x180038690: "unsigned char * Pku2uGlobalEncodedMODPDHOID" ?Pku2uGlobalEncodedMODPDHOID@@3PAEA
0x1800320D8: "__cdecl _xc_z" __xc_z
0x1800124FC: "void __cdecl Pku2uFreeSecondaryCredential(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64)" ?Pku2uFreeSecondaryCredential@@YAXPEAU_PKU2U_SECONDARY_CREDENTIAL@@@Z
0x180038C28: "__cdecl _hmod__api_ms_win_security_credentials_l1_1_0_dll" __hmod__api_ms_win_security_credentials_l1_1_0_dll
0x180036138: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180031D08: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180028794: "long __cdecl Pku2uVerifyApRequest(struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long,struct KERB_AP_REQUEST * __ptr64 * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64 * __ptr64,struct KERB_AUTHENTICATOR * __ptr64 * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,long * __ptr64,struct _SEC_CHANNEL_BINDINGS * __ptr64)" ?Pku2uVerifyApRequest@@YAJPEAU_PKU2U_CONTEXT@@PEAEKPEAPEAUKERB_AP_REQUEST@@PEAPEAUKERB_ENCRYPTED_TICKET@@PEAPEAUKERB_AUTHENTICATOR@@PEAUKERB_ENCRYPTION_KEY@@5PEAJPEAU_SEC_CHANNEL_BINDINGS@@@Z
0x180031B88: MSASN1_NULL_THUNK_DATA
0x180038D20: "int Pku2uGlobalDHParametersInitialized" ?Pku2uGlobalDHParametersInitialized@@3HA
0x180029388: "void __cdecl Pku2uDereferenceTicketCacheEntry(struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64)" ?Pku2uDereferenceTicketCacheEntry@@YAXPEAU_PKU2U_TICKET_CACHE_ENTRY@@@Z
0x1800381C0: "struct gss_OID_desc_struct * pku2u_global_oids" ?pku2u_global_oids@@3PAUgss_OID_desc_struct@@A
0x180019708: WppCleanupUm
0x180033470: WPP_efe603d9d028312d63bb7ebd33bc668a_Traceguids
0x180032470: "WELLKNOWN:PKU2U" ??_C@_1CA@CKNBCJII@?$AAW?$AAE?$AAL?$AAL?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?3?$AAP?$AAK?$AAU?$AA2?$AAU?$AA?$AA@
0x18000409A: "__cdecl _imp_load_LsaIGetTokenInformationForLocalUser" __imp_load_LsaIGetTokenInformationForLocalUser
0x180036040: lsass_NULL_THUNK_DATA_DLB
0x180029040: WPP_SF_Ddq
0x18002DDC0: "public: long __cdecl basessp::BaseSSP::WSTDuplicateStringEx(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char) __ptr64" ?WSTDuplicateStringEx@BaseSSP@basessp@@QEAAJPEAU_UNICODE_STRING@@0E@Z
0x180003E52: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x18003AD10: "struct _RTL_RESOURCE Pku2uGlobalUserModeContextResource" ?Pku2uGlobalUserModeContextResource@@3U_RTL_RESOURCE@@A
0x180031DA8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180031B28: "__cdecl _imp_ASN1BEREncExplicitTag" __imp_ASN1BEREncExplicitTag
0x18002F2CC: "long __cdecl PAC_MarshallValidationInfo(struct _SAMPR_USER_ALL_INFORMATION * __ptr64,struct _SAMPR_GET_GROUPS_BUFFER * __ptr64,struct _SID_AND_ATTRIBUTES_LIST * __ptr64,void * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char,unsigned char,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,struct _LSA_LAST_INTER_LOGON_INFO * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?PAC_MarshallValidationInfo@@YAJPEAU_SAMPR_USER_ALL_INFORMATION@@PEAU_SAMPR_GET_GROUPS_BUFFER@@PEAU_SID_AND_ATTRIBUTES_LIST@@PEAXPEAU_UNICODE_STRING@@4EEPEAT_LARGE_INTEGER@@5PEAU_LSA_LAST_INTER_LOGON_INFO@@PEAPEAEPEAK@Z
0x180003B5B: "__cdecl _imp_load_CertGetSubjectCertificateFromStore" __imp_load_CertGetSubjectCertificateFromStore
0x180011874: "int __cdecl ScHelperCMSSignMessage(struct _CERT_CONTEXT const * __ptr64,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64,unsigned char * __ptr64,unsigned long,int,char * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScHelperCMSSignMessage@@YAHPEBU_CERT_CONTEXT@@PEAU_CRYPT_ALGORITHM_IDENTIFIER@@PEAEKHPEADPEAPEBU1@KPEAPEAEPEAK@Z
0x180026134: "long __cdecl KerbPackKdcReplyBody(struct KERB_ENCRYPTED_KDC_REPLY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,unsigned long,unsigned long,struct KERB_ENCRYPTED_DATA * __ptr64)" ?KerbPackKdcReplyBody@@YAJPEAUKERB_ENCRYPTED_KDC_REPLY@@PEAUKERB_ENCRYPTION_KEY@@KKKPEAUKERB_ENCRYPTED_DATA@@@Z
0x180032058: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x180036228: "__cdecl _IMPORT_DESCRIPTOR_MSASN1" __IMPORT_DESCRIPTOR_MSASN1
0x180031C70: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180031C18: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180032840: "__cdecl _sz_ext_ms_win_security_certpoleng_l1_1_0_dll" __sz_ext_ms_win_security_certpoleng_l1_1_0_dll
0x180031B60: "__cdecl _imp_ASN1BERDecExplicitTag" __imp_ASN1BERDecExplicitTag
0x1800410F8: "__cdecl _imp_LsaISetSupplementalTokenInfo" __imp_LsaISetSupplementalTokenInfo
0x180031B70: "__cdecl _imp_ASN1octetstring_free" __imp_ASN1octetstring_free
0x180004320: "__cdecl _chkstk" __chkstk
0x180038500: "unsigned long * Pku2uGlobalDomainParametersModulusSize" ?Pku2uGlobalDomainParametersModulusSize@@3PAKA
0x1800294C8: "struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64 __cdecl Pku2uLookupTicketCacheEntry(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64)" ?Pku2uLookupTicketCacheEntry@@YAPEAU_PKU2U_TICKET_CACHE_ENTRY@@PEAU_PKU2U_PRIMARY_CREDENTIAL@@PEAU_KERB_INTERNAL_NAME@@@Z
0x180029470: "unsigned char __cdecl Pku2uIsExpiring(union _LARGE_INTEGER * __ptr64,long,union _LARGE_INTEGER * __ptr64)" ?Pku2uIsExpiring@@YAEPEAT_LARGE_INTEGER@@J0@Z
0x180038FB0: "struct _RTL_CRITICAL_SECTION Pku2uGlobalDHParametersLock" ?Pku2uGlobalDHParametersLock@@3U_RTL_CRITICAL_SECTION@@A
0x180033458: WPP_9015de51ef7c366c48f332d06f8a1d5a_Traceguids
0x18001818C: WPP_SF_qDDZ
0x18003E5A4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUyzhvUohzUxlnnlmUhhkrsvokviUlyquivUznwGEUhvxkxsOlyq@SspiHelper" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUyzhvUohzUxlnnlmUhhkrsvokviUlyquivUznwGEUhvxkxsOlyq@SspiHelper
0x18001F7C0: "void __cdecl KerbPutKdcNameAsString(struct _KERB_INTERNAL_NAME * __ptr64,struct _UNICODE_STRING * __ptr64,__int64,unsigned char * __ptr64 * __ptr64)" ?KerbPutKdcNameAsString@@YAXPEAU_KERB_INTERNAL_NAME@@PEAU_UNICODE_STRING@@_JPEAPEAE@Z
0x180032080: "__cdecl _imp_RtlDeleteElementGenericTable" __imp_RtlDeleteElementGenericTable
0x18002545C: "void __cdecl KerbConvertLargeIntToGeneralizedTime(struct tagASN1generalizedtime_t * __ptr64,int * __ptr64,union _LARGE_INTEGER * __ptr64)" ?KerbConvertLargeIntToGeneralizedTime@@YAXPEAUtagASN1generalizedtime_t@@PEAHPEAT_LARGE_INTEGER@@@Z
0x180018740: "long __cdecl WSTCreateUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64,struct _WST_USERMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTCreateUserModeContext@@YAJ_KPEAU_SecBuffer@@PEAPEAU_WST_USERMODE_CONTEXT@@@Z
0x180041080: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x1800023A0: "long __cdecl SpGetInfo(struct _SecPkgInfoW * __ptr64)" ?SpGetInfo@@YAJPEAU_SecPkgInfoW@@@Z
0x180031D60: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180041118: "__cdecl _imp_LsaIGetTokenInformationForLocalUser" __imp_LsaIGetTokenInformationForLocalUser
0x18002109C: "unsigned char __cdecl KerbEqualKdcNames(struct _KERB_INTERNAL_NAME * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64)" ?KerbEqualKdcNames@@YAEPEAU_KERB_INTERNAL_NAME@@0@Z
0x180020860: "long __cdecl KerbConvertPrincipalNameToKdcName(struct _KERB_INTERNAL_NAME * __ptr64 * __ptr64,struct KERB_PRINCIPAL_NAME * __ptr64)" ?KerbConvertPrincipalNameToKdcName@@YAJPEAPEAU_KERB_INTERNAL_NAME@@PEAUKERB_PRINCIPAL_NAME@@@Z
0x180027B78: "long __cdecl Pku2uCreateApRequest(struct _KERB_INTERNAL_NAME * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64,unsigned long,union _LARGE_INTEGER * __ptr64,struct KERB_TICKET * __ptr64,unsigned long,struct KERB_CHECKSUM * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?Pku2uCreateApRequest@@YAJPEAU_KERB_INTERNAL_NAME@@PEAUKERB_ENCRYPTION_KEY@@1PEAUPKERB_AUTHORIZATION_DATA@@KPEAT_LARGE_INTEGER@@PEAUKERB_TICKET@@KPEAUKERB_CHECKSUM@@3EPEAKPEAPEAE@Z
0x180002FB0: "long __cdecl Pku2uInitGlobalVariables(void)" ?Pku2uInitGlobalVariables@@YAJXZ
0x180038C38: "__cdecl _hmod__api_ms_win_security_credentials_l2_1_0_dll" __hmod__api_ms_win_security_credentials_l2_1_0_dll
0x180031A28: "__cdecl _imp_ASN1_Encode" __imp_ASN1_Encode
0x1800023E0: "long __cdecl SpShutdown(void)" ?SpShutdown@@YAJXZ
0x180031BB8: "__cdecl _imp_NdrMesTypeDecode3" __imp_NdrMesTypeDecode3
0x1800410B8: "__cdecl _imp_CryptDestroyKey" __imp_CryptDestroyKey
0x180031D68: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1800361D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180038CE0: "union _LARGE_INTEGER Pku2uGlobalWillNeverTime" ?Pku2uGlobalWillNeverTime@@3T_LARGE_INTEGER@@A
0x1800020A0: "int __cdecl Pku2uCompareLogonSessions(struct _PKU2U_LOGON_SESSION * __ptr64,struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uCompareLogonSessions@@YAHPEAU_PKU2U_LOGON_SESSION@@0@Z
0x180031AF8: "__cdecl _imp_ASN1DEREncCharString" __imp_ASN1DEREncCharString
0x180031D18: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800320F8: "__cdecl _guard_fids_table" __guard_fids_table
0x180031E68: "__cdecl _imp_CDFindCommonCSystem" __imp_CDFindCommonCSystem
0x180031F00: msvcrt_NULL_THUNK_DATA
0x1800304F0: "__cdecl load_config_used" _load_config_used
0x180031A88: "__cdecl _imp_ASN1BERDecZeroCharString" __imp_ASN1BERDecZeroCharString
0x1800411C0: lsass_NULL_THUNK_DATA_DLA
0x180003B01: "__cdecl _imp_load_CryptMsgOpenToEncode" __imp_load_CryptMsgOpenToEncode
0x18002D960: "public: void * __ptr64 __cdecl basessp::BaseSSP::WSTAllocate(unsigned __int64) __ptr64" ?WSTAllocate@BaseSSP@basessp@@QEAAPEAX_K@Z
0x1800145D0: "long __cdecl Pku2uGetSuppliedCredForCredmanCredential(struct _LUID * __ptr64,void * __ptr64,struct _ENCRYPTED_CREDENTIALW * __ptr64,struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64 * __ptr64)" ?Pku2uGetSuppliedCredForCredmanCredential@@YAJPEAU_LUID@@PEAXPEAU_ENCRYPTED_CREDENTIALW@@PEAPEAU_SECPKG_SUPPLIED_CREDENTIAL@@@Z
0x180031F20: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x180041088: "__cdecl _imp_CryptEncodeObjectEx" __imp_CryptEncodeObjectEx
0x180041078: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x180031A48: "__cdecl _imp_ASN1_CreateEncoder" __imp_ASN1_CreateEncoder
0x1800203E0: "unsigned char __cdecl KerbComparePrincipalNames(struct KERB_PRINCIPAL_NAME * __ptr64,struct KERB_PRINCIPAL_NAME * __ptr64)" ?KerbComparePrincipalNames@@YAEPEAUKERB_PRINCIPAL_NAME@@0@Z
0x1800019B0: "void __cdecl Pku2uDereferenceSecondaryCredential(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64)" ?Pku2uDereferenceSecondaryCredential@@YAXPEAU_PKU2U_SECONDARY_CREDENTIAL@@@Z
0x18002F850: SspiHelperConstructAuthEx2FromStrings
0x180003E76: "__cdecl _imp_load_CryptGetKeyParam" __imp_load_CryptGetKeyParam
0x180031C30: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180031C20: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180031A40: "__cdecl _imp_ASN1_CreateDecoder" __imp_ASN1_CreateDecoder
0x180003BA3: "__cdecl _imp_load_CryptMsgOpenToDecode" __imp_load_CryptMsgOpenToDecode
0x180031AE0: "__cdecl _imp_ASN1BERDecSkip" __imp_ASN1BERDecSkip
0x18002F1B0: "void * __ptr64 __cdecl PAC_MakeDomainRelativeSid(void * __ptr64,unsigned long)" ?PAC_MakeDomainRelativeSid@@YAPEAXPEAXK@Z
0x180031A08: "__cdecl _imp_ASN1BERDecCharString" __imp_ASN1BERDecCharString
0x180003E2E: "__cdecl _imp_load_CryptSetKeyParam" __imp_load_CryptSetKeyParam
0x180025238: "long __cdecl KerbConvertCryptListToArray(unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64,struct KERB_KDC_REQUEST_BODY_encryption_type * __ptr64)" ?KerbConvertCryptListToArray@@YAJPEAPEAKPEAKPEAUKERB_KDC_REQUEST_BODY_encryption_type@@@Z
0x18002F514: "unsigned long __cdecl PAC_UnMarshal(struct _PACTYPE * __ptr64,unsigned long)" ?PAC_UnMarshal@@YAKPEAU_PACTYPE@@K@Z
0x180025A14: "long __cdecl KerbDuplicateTicketExtensions(struct PKERB_TICKET_EXTENSIONS * __ptr64 * __ptr64,struct PKERB_TICKET_EXTENSIONS * __ptr64)" ?KerbDuplicateTicketExtensions@@YAJPEAPEAUPKERB_TICKET_EXTENSIONS@@PEAU1@@Z
0x180012D1C: "long __cdecl Pku2uMapCredsToProvider(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct _UNICODE_STRING * __ptr64)" ?Pku2uMapCredsToProvider@@YAJPEAU_PKU2U_SECONDARY_CREDENTIAL@@PEAU_UNICODE_STRING@@@Z
0x180041148: "__cdecl _imp_CredUnmarshalCredentialW" __imp_CredUnmarshalCredentialW
0x180011420: "void * __ptr64 __cdecl AuthenAllocate(struct _RTL_GENERIC_TABLE * __ptr64,unsigned long)" ?AuthenAllocate@@YAPEAXPEAU_RTL_GENERIC_TABLE@@K@Z
0x180031FE8: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x18002CF50: "void __cdecl Pku2uFree(void * __ptr64)" ?Pku2uFree@@YAXPEAX@Z
0x180032658: "LeafOnly" ??_C@_1BC@GIOEAAGN@?$AAL?$AAe?$AAa?$AAf?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x180021214: "void __cdecl KerbFreeString(struct _UNICODE_STRING * __ptr64)" ?KerbFreeString@@YAXPEAU_UNICODE_STRING@@@Z
0x180032018: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x180032958: WPP_e533eee86feb34b7b704cf718e590335_Traceguids
0x18001FEB0: "long __cdecl Pku2uQueryTicketCacheEx2(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?Pku2uQueryTicketCacheEx2@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18002E0D4: "void __cdecl basessp::WSTLowerCase(unsigned char * __ptr64,unsigned long)" ?WSTLowerCase@basessp@@YAXPEAEK@Z
0x180024324: "long __cdecl Pku2uSignPac(struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,unsigned char * __ptr64)" ?Pku2uSignPac@@YAJPEAUKERB_ENCRYPTION_KEY@@KPEAE@Z
0x1800361B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180012060: "long __cdecl ScHelperVerifyPkcsMessage(unsigned char * __ptr64,unsigned long,int,char * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64 * __ptr64)" ?ScHelperVerifyPkcsMessage@@YAJPEAEKHPEADPEAPEAEPEAKPEAPEBU_CERT_CONTEXT@@PEAPEAXPEAPEAU_CRYPT_ALGORITHM_IDENTIFIER@@@Z
0x18002058C: "unsigned char __cdecl KerbCompareUnicodeRealmNames(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?KerbCompareUnicodeRealmNames@@YAEPEAU_UNICODE_STRING@@0@Z
0x180032600: "SupportLocalHost" ??_C@_1CC@ECNOOLPB@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAL?$AAo?$AAc?$AAa?$AAl?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x18002E808: "long __cdecl PAC_ConvertInfo3ToInfo4(struct _NETLOGON_VALIDATION_SAM_INFO3 * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64 * __ptr64)" ?PAC_ConvertInfo3ToInfo4@@YAJPEAU_NETLOGON_VALIDATION_SAM_INFO3@@PEAU_UNICODE_STRING@@1PEAPEAU_NETLOGON_VALIDATION_SAM_INFO4@@@Z
0x180015D70: "long __cdecl SpDeleteContext(unsigned __int64)" ?SpDeleteContext@@YAJ_K@Z
0x180038FA8: "unsigned long Pku2uGlobalSupportLocalHost" ?Pku2uGlobalSupportLocalHost@@3KA
0x180003F25: "__cdecl _imp_load_IntPstGetNameIdentifierForCertificate" __imp_load_IntPstGetNameIdentifierForCertificate
0x180021D48: "long __cdecl Pku2uBuildPeer2PeerKeys(unsigned long * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64 * __ptr64)" ?Pku2uBuildPeer2PeerKeys@@YAJPEAKPEAPEAUKERB_ENCRYPTION_KEY@@@Z
0x180004088: "__cdecl _imp_load_LsaISetSupplementalTokenInfo" __imp_load_LsaISetSupplementalTokenInfo
0x180031F78: "__cdecl _imp_NtSetSecurityObject" __imp_NtSetSecurityObject
0x180031ED8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180038CA8: PKU2UMSG_Module
0x1800410A0: CRYPT32_NULL_THUNK_DATA_DLA
0x180033620: WPP_57afb970a827395cc3ea4e52eafc8ecf_Traceguids
0x180032490: WNF_SEB_INTERNET_PRESENT
0x180031C98: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180031FF8: "__cdecl _imp_NtClose" __imp_NtClose
0x1800410F0: "__cdecl _imp_LsaIRegisterNotification" __imp_LsaIRegisterNotification
0x180041108: "__cdecl _imp_LsaIGetSupplementalTokenInfo" __imp_LsaIGetSupplementalTokenInfo
0x180003E88: "__cdecl _imp_load_IntPstMapUserCredsToProvider" __imp_load_IntPstMapUserCredsToProvider
0x180031A18: "__cdecl _imp_ASN1_Decode" __imp_ASN1_Decode
0x180033800: WPP_aa47bb499f8f3ac05ac2dbfbb24686e5_Traceguids
0x180031E80: cryptdll_NULL_THUNK_DATA
0x180033720: "KRB_AP_REQ" ??_C@_1BG@GIEMLJHH@?$AAK?$AAR?$AAB?$AA_?$AAA?$AAP?$AA_?$AAR?$AAE?$AAQ?$AA?$AA@
0x1800271E8: "long __cdecl Pku2uBuildGssChecksum(struct KERB_ENCRYPTION_KEY * __ptr64,struct _PKU2U_CONTEXT * __ptr64,struct KERB_CHECKSUM * __ptr64,unsigned long * __ptr64,struct _SEC_CHANNEL_BINDINGS * __ptr64)" ?Pku2uBuildGssChecksum@@YAJPEAUKERB_ENCRYPTION_KEY@@PEAU_PKU2U_CONTEXT@@PEAUKERB_CHECKSUM@@PEAKPEAU_SEC_CHANNEL_BINDINGS@@@Z
0x180024200: "long __cdecl Pku2uInsertPacIntoAuthData(struct PKERB_AUTHORIZATION_DATA * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64)" ?Pku2uInsertPacIntoAuthData@@YAJPEAUPKERB_AUTHORIZATION_DATA@@00PEAPEAU1@@Z
0x180031D50: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180031F58: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x180033658: "true" ??_C@_04LOAJBDKD@true?$AA@
0x180031D10: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180031E70: "__cdecl _imp_CDLocateCheckSum" __imp_CDLocateCheckSum
0x180031F30: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x180038D40: "struct _RTL_CRITICAL_SECTION Pku2uGlobalTicketListLock" ?Pku2uGlobalTicketListLock@@3U_RTL_CRITICAL_SECTION@@A
0x180031B78: "__cdecl _imp_ASN1BERDecSXVal" __imp_ASN1BERDecSXVal
0x180035704: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x18001242C: "void __cdecl Pku2uFreeAssociatedCredential(struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64)" ?Pku2uFreeAssociatedCredential@@YAXPEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180001FC0: "int __cdecl Pku2uCompareCreds(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64)" ?Pku2uCompareCreds@@YAHPEAU_PKU2U_SECONDARY_CREDENTIAL@@0@Z
0x180031CB8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180032078: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x180003857: free
0x180025B04: "struct KERB_PA_DATA * __ptr64 __cdecl KerbFindPreAuthDataEntry(unsigned long,struct KERB_KDC_REQUEST_preauth_data * __ptr64)" ?KerbFindPreAuthDataEntry@@YAPEAUKERB_PA_DATA@@KPEAUKERB_KDC_REQUEST_preauth_data@@@Z
0x18002B910: "long __cdecl SpExportSecurityContext(unsigned __int64,unsigned long,struct _SecBuffer * __ptr64,void * __ptr64 * __ptr64)" ?SpExportSecurityContext@@YAJ_KKPEAU_SecBuffer@@PEAPEAX@Z
0x180003A82: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x180041090: "__cdecl _imp_CryptDecodeObjectEx" __imp_CryptDecodeObjectEx
0x180031CB0: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180038CB0: "int fKRB5ModuleStarted" ?fKRB5ModuleStarted@@3HA
0x180031D40: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18002CC60: "long __cdecl Pku2uBuildHostAddresses(struct PKERB_HOST_ADDRESSES * __ptr64 * __ptr64)" ?Pku2uBuildHostAddresses@@YAJPEAPEAUPKERB_HOST_ADDRESSES@@@Z
0x180019308: "long __cdecl WSTQueryContextAttributes(struct _WST_USERMODE_CONTEXT * __ptr64,unsigned long,void * __ptr64)" ?WSTQueryContextAttributes@@YAJPEAU_WST_USERMODE_CONTEXT@@KPEAX@Z
0x18003AC58: "unsigned __int64 Pku2uGlobalDHKey" ?Pku2uGlobalDHKey@@3_KA
0x180033860: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180026D1C: "long __cdecl Pku2uBuildApRequest(struct _PKU2U_CONTEXT * __ptr64,struct KERB_ERROR * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,struct _SEC_CHANNEL_BINDINGS * __ptr64)" ?Pku2uBuildApRequest@@YAJPEAU_PKU2U_CONTEXT@@PEAUKERB_ERROR@@PEAPEAEPEAKPEAU_SEC_CHANNEL_BINDINGS@@@Z
0x180003B13: "__cdecl _imp_load_CryptMsgUpdate" __imp_load_CryptMsgUpdate
0x1800356C4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x180041190: "__cdecl _imp_IntPstMapUserCredsToProvider" __imp_IntPstMapUserCredsToProvider
0x18001B710: "int __cdecl g_verify_token_header(struct gss_OID_desc_struct * __ptr64,int * __ptr64,unsigned char * __ptr64 * __ptr64,int,int)" ?g_verify_token_header@@YAHPEAUgss_OID_desc_struct@@PEAHPEAPEAEHH@Z
0x180033630: WPP_46447be76c8c3e10a0f9dc0c5ed3f0c5_Traceguids
0x180033678: "1.3.6.1.5.2.3.2" ??_C@_0BA@NIAKHNE@1?43?46?41?45?42?43?42?$AA@
0x180033688: "onecore\ds\security\protocols\pk" ??_C@_0CP@OPCIPA@onecore?2ds?2security?2protocols?2pk@
0x180031B40: "__cdecl _imp_ASN1BEREncU32" __imp_ASN1BEREncU32
0x180031B00: "__cdecl _imp_ASN1BEREncS32" __imp_ASN1BEREncS32
0x1800180E8: WPP_SF_DDsd
0x180017D54: WPP_SF_Ddsd
0x1800180E8: WPP_SF_ddsd
0x18002CA00: MIDL_user_allocate
0x180002410: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180031CC8: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1800042C6: memcmp
0x180018D58: "long __cdecl WSTGetContextToken(unsigned __int64,void * __ptr64 * __ptr64)" ?WSTGetContextToken@@YAJ_KPEAPEAX@Z
0x18002709C: "long __cdecl Pku2uBuildAuthenticatorAD(struct _PKU2U_SECONDARY_CREDENTIAL * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64)" ?Pku2uBuildAuthenticatorAD@@YAJPEAU_PKU2U_SECONDARY_CREDENTIAL@@PEAPEAUPKERB_AUTHORIZATION_DATA@@@Z
0x180003CAC: "__cdecl _imp_load_CryptEncodeObjectEx" __imp_load_CryptEncodeObjectEx
0x18002BC10: "long __cdecl SpInstanceInit(unsigned long,struct _SECPKG_DLL_FUNCTIONS * __ptr64,void * __ptr64 * __ptr64)" ?SpInstanceInit@@YAJKPEAU_SECPKG_DLL_FUNCTIONS@@PEAPEAX@Z
0x180031BA0: "__cdecl _imp_NdrMesTypeAlignSize3" __imp_NdrMesTypeAlignSize3
0x180018A4C: "void __cdecl WSTDereferenceUserModeContext(struct _WST_USERMODE_CONTEXT * __ptr64)" ?WSTDereferenceUserModeContext@@YAXPEAU_WST_USERMODE_CONTEXT@@@Z
0x180025864: "long __cdecl KerbDuplicateSid2(void * __ptr64 * __ptr64,void * __ptr64)" ?KerbDuplicateSid2@@YAJPEAPEAXPEAX@Z
0x180033648: WPP_4dfc738b71e43dd5ee9b35d6f649923e_Traceguids
0x180032810: "__cdecl _sz_api_ms_win_security_credentials_l2_1_0_dll" __sz_api_ms_win_security_credentials_l2_1_0_dll
0x180025DA8: "long __cdecl KerbInitAsn(struct ASN1encoding_s * __ptr64 * __ptr64,struct ASN1decoding_s * __ptr64 * __ptr64)" ?KerbInitAsn@@YAJPEAPEAUASN1encoding_s@@PEAPEAUASN1decoding_s@@@Z
0x180038C88: g_ulMaxStackAllocSize
0x180036160: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180035918: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLN
0x18003AC60: "struct ASN1objectidentifier_s * Pku2uSignatureAlg" ?Pku2uSignatureAlg@@3PAUASN1objectidentifier_s@@A
0x180035F08: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLB
0x180041150: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLA
0x180031C90: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18002D8F0: "public: void * __ptr64 __cdecl basessp::BaseSSP::WSTAllocate2(unsigned __int64) __ptr64" ?WSTAllocate2@BaseSSP@basessp@@QEAAPEAX_K@Z
0x180031BC8: "__cdecl _imp_I_RpcMapWin32Status" __imp_I_RpcMapWin32Status
0x1800327D0: "__cdecl _sz_api_ms_win_security_credentials_l1_1_0_dll" __sz_api_ms_win_security_credentials_l1_1_0_dll
0x1800023F0: "void __cdecl PacReadFcn(void * __ptr64,char * __ptr64 * __ptr64,unsigned int * __ptr64)" ?PacReadFcn@@YAXPEAXPEAPEADPEAI@Z
0x180035928: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLN
0x180041160: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLA
0x180020FE8: "long __cdecl KerbDuplicateStringEx2(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char)" ?KerbDuplicateStringEx2@@YAJPEAU_UNICODE_STRING@@0E@Z
0x180035F58: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLB
0x18001A4DC: "int __cdecl Pku2uGetDHParametersFromKeyHandle(unsigned __int64,struct _CERT_X942_DH_PARAMETERS * __ptr64)" ?Pku2uGetDHParametersFromKeyHandle@@YAH_KPEAU_CERT_X942_DH_PARAMETERS@@@Z
0x180031E00: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180012CDC: "long __cdecl Pku2uInitializePrimaryCredential(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64)" ?Pku2uInitializePrimaryCredential@@YAJPEAU_PKU2U_PRIMARY_CREDENTIAL@@@Z
0x180024D64: "long __cdecl KerbCheckTicket(struct KERB_TICKET * __ptr64,struct KERB_ENCRYPTED_DATA * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,class CAuthenticatorList * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char,unsigned char,struct _KERB_REPLAY_AUDIT_INFO * __ptr64,struct KERB_ENCRYPTED_TICKET * __ptr64 * __ptr64,struct KERB_AUTHENTICATOR * __ptr64 * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned char * __ptr64)" ?KerbCheckTicket@@YAJPEAUKERB_TICKET@@PEAUKERB_ENCRYPTED_DATA@@PEAUKERB_ENCRYPTION_KEY@@PEAVCAuthenticatorList@@PEAT_LARGE_INTEGER@@EEPEAU_KERB_REPLAY_AUDIT_INFO@@PEAPEAUKERB_ENCRYPTED_TICKET@@PEAPEAUKERB_AUTHENTICATOR@@22PEAE@Z
0x1800411A0: "__cdecl _imp_PstGetCertificateChain" __imp_PstGetCertificateChain
0x180031F90: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x1800244E8: "long __cdecl ScHelperPeer2PeerSignPkcsMessage(struct _CERT_CONTEXT const * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64,char * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScHelperPeer2PeerSignPkcsMessage@@YAJPEBU_CERT_CONTEXT@@PEBU_CERT_CHAIN_CONTEXT@@PEAU_CRYPT_ALGORITHM_IDENTIFIER@@PEADPEAEKPEAPEAEPEAK@Z
0x180032498: "HTTPS" ??_C@_1M@GOAILCL@?$AAH?$AAT?$AAT?$AAP?$AAS?$AA?$AA@
0x180031EC8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180028DC4: "long __cdecl Pku2uVerifyTgsChecksum(struct KERB_KDC_REQUEST_BODY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct KERB_CHECKSUM * __ptr64)" ?Pku2uVerifyTgsChecksum@@YAJPEAUKERB_KDC_REQUEST_BODY@@PEAUKERB_ENCRYPTION_KEY@@PEAUKERB_CHECKSUM@@@Z
0x180041120: "__cdecl _imp_LsaIAddNamesToLogonSession" __imp_LsaIAddNamesToLogonSession
0x180032020: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x180035724: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll
0x18002C618: "long __cdecl KerbGetClientNetbiosAddress(struct _UNICODE_STRING * __ptr64,struct PKERB_HOST_ADDRESSES * __ptr64)" ?KerbGetClientNetbiosAddress@@YAJPEAU_UNICODE_STRING@@PEAUPKERB_HOST_ADDRESSES@@@Z
0x180029658: "void __cdecl Pku2uRemoveTicketCacheEntry(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64)" ?Pku2uRemoveTicketCacheEntry@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@PEAU_PKU2U_TICKET_CACHE_ENTRY@@@Z
0x1800320B8: ntdll_NULL_THUNK_DATA
0x180031EC0: "__cdecl _imp_memcpy" __imp_memcpy
0x180039020: "struct _CERT_X942_DH_PARAMETERS * Pku2uGlobalWellknownDomainParamters" ?Pku2uGlobalWellknownDomainParamters@@3PAU_CERT_X942_DH_PARAMETERS@@A
0x180002930: "long __cdecl Pku2uLoadLogonSessionTable(void)" ?Pku2uLoadLogonSessionTable@@YAJXZ
0x18003614C: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x180001F80: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl Pku2uCredTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?Pku2uCredTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x1800279B4: "long __cdecl Pku2uComputeTgsChecksum(struct KERB_KDC_REQUEST_BODY * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,struct KERB_CHECKSUM * __ptr64)" ?Pku2uComputeTgsChecksum@@YAJPEAUKERB_KDC_REQUEST_BODY@@PEAUKERB_ENCRYPTION_KEY@@KPEAUKERB_CHECKSUM@@@Z
0x180028FE0: WPP_SF_DDD
0x1800132E4: WPP_SF_ddd
0x180018348: WPP_SF_qdq
0x180041040: "__cdecl _imp_CryptMsgControl" __imp_CryptMsgControl
0x180017DD4: WPP_SF_dsD
0x180017DD4: WPP_SF_dsd
0x180017DD4: WPP_SF_Dsd
0x18002CF74: "long __cdecl Pku2uImpersonateToken2(void * __ptr64,void * __ptr64 * __ptr64,int * __ptr64)" ?Pku2uImpersonateToken2@@YAJPEAXPEAPEAXPEAH@Z
0x18001FA10: "long __cdecl Pku2uPurgeTicketEx(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?Pku2uPurgeTicketEx@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18002B4D4: WPP_SF_ZZZ
0x1800320B0: "__cdecl _imp_RtlTimeToTimeFields" __imp_RtlTimeToTimeFields
0x180031FC0: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x1800040AC: "__cdecl _imp_load_LsaIIsLocalHost" __imp_load_LsaIIsLocalHost
0x180033738: WPP_c93ba866c9d1325e12919c4a3cef9d5e_Traceguids
0x180038FF4: "int Pku2uGlobalWellknownDomainParamtersLockInitialized" ?Pku2uGlobalWellknownDomainParamtersLockInitialized@@3HA
0x180012148: "long __cdecl Pku2uAllocateAssociatedCredential(struct _PKU2U_LOGON_SESSION * __ptr64,struct _UNICODE_STRING * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64 * __ptr64,struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64 * __ptr64)" ?Pku2uAllocateAssociatedCredential@@YAJPEAU_PKU2U_LOGON_SESSION@@PEAU_UNICODE_STRING@@PEAPEBU_CERT_CONTEXT@@PEAPEBU_CERT_CHAIN_CONTEXT@@PEAPEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180031E10: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800336B8: "1.3.14.3.2.26" ??_C@_0O@GPJKGEMP@1?43?414?43?42?426?$AA@
0x1800410D0: "__cdecl _imp_CryptSetKeyParam" __imp_CryptSetKeyParam
0x180038C30: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x180031DE0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180011440: "void __cdecl AuthenFree(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64)" ?AuthenFree@@YAXPEAU_RTL_GENERIC_TABLE@@PEAX@Z
0x180023FC8: "long __cdecl Pku2uInitDH(void)" ?Pku2uInitDH@@YAJXZ
0x1800336C8: "union _LARGE_INTEGER Pku2uGlobalInfinity" ?Pku2uGlobalInfinity@@3T_LARGE_INTEGER@@A
0x180024B3C: WPP_SF_qdqd
0x1800183AC: WPP_SF_qdqD
0x180041060: "__cdecl _imp_CryptGetMessageCertificates" __imp_CryptGetMessageCertificates
0x180031DE8: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18002ED64: "long __cdecl PAC_EncodeValidationInformationEx(struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?PAC_EncodeValidationInformationEx@@YAJPEAU_NETLOGON_VALIDATION_SAM_INFO4@@PEAPEAEPEAK@Z
0x1800381D8: "__cdecl _security_cookie" __security_cookie
0x180031D20: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18002B9D0: "long __cdecl SpGetContextToken(unsigned __int64,void * __ptr64 * __ptr64)" ?SpGetContextToken@@YAJ_KPEAPEAX@Z
0x180025CDC: "void __cdecl Pku2uFreeHostAddresses(struct PKERB_HOST_ADDRESSES * __ptr64)" ?Pku2uFreeHostAddresses@@YAXPEAUPKERB_HOST_ADDRESSES@@@Z
0x180038C98: g_pfnAllocate
0x180019E00: "long __cdecl Pku2uDecodeDHParameters(struct _CRYPTOAPI_BLOB * __ptr64,struct _CERT_X942_DH_PARAMETERS * __ptr64)" ?Pku2uDecodeDHParameters@@YAJPEAU_CRYPTOAPI_BLOB@@PEAU_CERT_X942_DH_PARAMETERS@@@Z
0x180004320: "__cdecl alloca_probe" _alloca_probe
0x180003B7F: "__cdecl _imp_load_CertFreeCertificateContext" __imp_load_CertFreeCertificateContext
0x180031E08: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180031B20: "__cdecl _imp_ASN1BERDecEndOfContents" __imp_ASN1BERDecEndOfContents
0x180031AA0: "__cdecl _imp_ASN1BERDecBitString" __imp_ASN1BERDecBitString
0x180003FAF: "__cdecl _tailMerge_lsasrv_dll" __tailMerge_lsasrv_dll
0x180041130: "__cdecl _imp_LsaIFreeSupplementalTokenInfo" __imp_LsaIFreeSupplementalTokenInfo
0x180025B28: "void __cdecl KerbFreePreAuthData(struct KERB_KDC_REQUEST_preauth_data * __ptr64)" ?KerbFreePreAuthData@@YAXPEAUKERB_KDC_REQUEST_preauth_data@@@Z
0x18002E1E8: "public: __cdecl basessp::BaseSSP::BaseSSP(void) __ptr64" ??0BaseSSP@basessp@@QEAA@XZ
0x1800335F0: "onecore\ds\security\protocols\pk" ??_C@_0DA@EKCMPIOO@onecore?2ds?2security?2protocols?2pk@
0x180031C60: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180031D48: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x180003FA3: "__cdecl _imp_load_LsaIAddNamesToLogonSession" __imp_load_LsaIAddNamesToLogonSession
0x180003BD9: "__cdecl _imp_load_CertFindCertificateInStore" __imp_load_CertFindCertificateInStore
0x180025B28: "void __cdecl KerbFreeAuthData(struct PKERB_AUTHORIZATION_DATA * __ptr64)" ?KerbFreeAuthData@@YAXPEAUPKERB_AUTHORIZATION_DATA@@@Z
0x180031C78: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180038CC0: "union _LARGE_INTEGER basessp::WSTGlobalForever" ?WSTGlobalForever@basessp@@3T_LARGE_INTEGER@@A
0x180036124: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18001C4F0: "long __cdecl Pku2uCreateLinkedLogonSession(struct _LUID * __ptr64,struct _PKU2U_LOGON_SESSION * __ptr64 * __ptr64)" ?Pku2uCreateLinkedLogonSession@@YAJPEAU_LUID@@PEAPEAU_PKU2U_LOGON_SESSION@@@Z
0x18001B25C: "int __cdecl Pku2uLoadDH(void)" ?Pku2uLoadDH@@YAHXZ
0x18002D174: "long __cdecl Pku2uPackContextLevelToken(unsigned char * __ptr64,unsigned long,int,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uPackContextLevelToken@@YAJPEAEKHPEAPEAEPEAK@Z
0x18002D754: "long __cdecl Pku2uConvertWOWLogonBuffer(void * __ptr64,void * __ptr64,unsigned long * __ptr64,enum _PKU2U_LOGON_SUBMIT_TYPE,void * __ptr64 * __ptr64)" ?Pku2uConvertWOWLogonBuffer@@YAJPEAX0PEAKW4_PKU2U_LOGON_SUBMIT_TYPE@@PEAPEAX@Z
0x180003E0A: "__cdecl _imp_load_CryptAcquireContextW" __imp_load_CryptAcquireContextW
0x180032070: "__cdecl _imp_RtlInsertElementGenericTable" __imp_RtlInsertElementGenericTable
0x180041110: "__cdecl _imp_LsaIIsLocalHost" __imp_LsaIIsLocalHost
0x180031BE8: "__cdecl _imp_SspiLocalFree" __imp_SspiLocalFree
0x1800337D0: "onecore\ds\security\protocols\pk" ??_C@_0CM@PKHHFFC@onecore?2ds?2security?2protocols?2pk@
0x180003E64: "__cdecl _imp_load_CryptImportKey" __imp_load_CryptImportKey
0x18002F4D4: "unsigned char __cdecl PAC_ReMarshal(struct _PACTYPE * __ptr64,unsigned long)" ?PAC_ReMarshal@@YAEPEAU_PACTYPE@@K@Z
0x180038C60: "__cdecl _onexitbegin" __onexitbegin
0x180031AF0: "__cdecl _imp_ASN1BEREncEndOfContents" __imp_ASN1BEREncEndOfContents
0x18002C96C: "long __cdecl KerbUnpackErrorMethodData(struct KERB_ERROR * __ptr64,struct KERB_ERROR_METHOD_DATA * __ptr64 * __ptr64)" ?KerbUnpackErrorMethodData@@YAJPEAUKERB_ERROR@@PEAPEAUKERB_ERROR_METHOD_DATA@@@Z
0x18001D1F4: WSTMapContextAttributes
0x180031FA8: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x180033788: "+
" ??_C@_06DPALDFNB@?$CL?$AG?$AB?$AF?$AC?$AH?$AA@
0x180015E40: "long __cdecl SpExchangeMetaData(unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned __int64 * __ptr64)" ?SpExchangeMetaData@@YAJ_KPEAU_UNICODE_STRING@@KKPEAEPEA_K@Z
0x180038F90: "void * __ptr64 __ptr64 Pku2uGlobalLocalSystemSid" ?Pku2uGlobalLocalSystemSid@@3PEAXEA
0x18002F260: "unsigned long __cdecl PAC_Marshal(struct _PACTYPE * __ptr64,unsigned long,unsigned char * __ptr64)" ?PAC_Marshal@@YAKPEAU_PACTYPE@@KPEAE@Z
0x180033408: SEC_WINNT_AUTH_DATA_TYPE_NGC
0x1800182FC: WPP_SF_qD
0x1800182FC: WPP_SF_qd
0x180024968: "public: void * __ptr64 __cdecl basessp::BaseSSP::`scalar deleting destructor'(unsigned int) __ptr64" ??_GBaseSSP@basessp@@QEAAPEAXI@Z
0x180031C48: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180031A78: "__cdecl _imp_ASN1DEREncBitString" __imp_ASN1DEREncBitString
0x180041028: "__cdecl _imp_CryptMsgClose" __imp_CryptMsgClose
0x180003BC7: "__cdecl _imp_load_CertCreateCertificateContext" __imp_load_CertCreateCertificateContext
0x180032670: "PreferWellKnownMODPDHDomainParam" ??_C@_1EM@PLGILOPC@?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAW?$AAe?$AAl?$AAl?$AAK?$AAn?$AAo?$AAw?$AAn?$AAM?$AAO?$AAD?$AAP?$AAD?$AAH?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm@
0x18002BA70: "long __cdecl SpImportSecurityContext(struct _SecBuffer * __ptr64,void * __ptr64,unsigned __int64 * __ptr64)" ?SpImportSecurityContext@@YAJPEAU_SecBuffer@@PEAXPEA_K@Z
0x18001F6F0: "void __cdecl KerbComputeTicketCacheSizeEx2(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,unsigned char,unsigned long * __ptr64,unsigned long * __ptr64)" ?KerbComputeTicketCacheSizeEx2@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@EPEAK1@Z
0x180031D28: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18002BB20: "long __cdecl SpInitUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64)" ?SpInitUserModeContext@@YAJ_KPEAU_SecBuffer@@@Z
0x180032060: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x18001C604: "long __cdecl Pku2uLocateAndReferenceLogonSessionByPointer(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uLocateAndReferenceLogonSessionByPointer@@YAJPEAU_PKU2U_LOGON_SESSION@@@Z
0x18001C6C4: "struct _PKU2U_LOGON_SESSION * __ptr64 __cdecl Pku2uLocateLogonSession(struct _LUID * __ptr64)" ?Pku2uLocateLogonSession@@YAPEAU_PKU2U_LOGON_SESSION@@PEAU_LUID@@@Z
0x180031A80: "__cdecl _imp_ASN1intx_free" __imp_ASN1intx_free
0x18002DEBC: "public: void __cdecl basessp::BaseSSP::WSTFree(void * __ptr64) __ptr64" ?WSTFree@BaseSSP@basessp@@QEAAXPEAX@Z
0x180003984: "__cdecl _security_init_cookie" __security_init_cookie
0x1800411B8: "__cdecl _imp_LsaGetInterface" __imp_LsaGetInterface
0x180013340: WPP_SF_q
0x180025570: "long __cdecl KerbCreateAuthenticator(struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,union _LARGE_INTEGER * __ptr64,struct _KERB_INTERNAL_NAME * __ptr64,struct _UNICODE_STRING * __ptr64,union _LARGE_INTEGER * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64,struct KERB_CHECKSUM * __ptr64,unsigned char,struct KERB_ENCRYPTED_DATA * __ptr64)" ?KerbCreateAuthenticator@@YAJPEAUKERB_ENCRYPTION_KEY@@KPEAT_LARGE_INTEGER@@PEAU_KERB_INTERNAL_NAME@@PEAU_UNICODE_STRING@@10PEAUPKERB_AUTHORIZATION_DATA@@PEAUKERB_CHECKSUM@@EPEAUKERB_ENCRYPTED_DATA@@@Z
0x180031E38: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x18002BCE0: "long __cdecl SpMakeSignature(unsigned __int64,unsigned long,struct _SecBufferDesc * __ptr64,unsigned long)" ?SpMakeSignature@@YAJ_KKPEAU_SecBufferDesc@@K@Z
0x180003CD0: "__cdecl _imp_load_CertGetCertificateChain" __imp_load_CertGetCertificateChain
0x180003B91: "__cdecl _imp_load_CertCloseStore" __imp_load_CertCloseStore
0x180031F38: "__cdecl _imp_RtlIdentifierAuthoritySid" __imp_RtlIdentifierAuthoritySid
0x180003E94: "__cdecl _tailMerge_ext_ms_win_security_certpoleng_l1_1_0_dll" __tailMerge_ext_ms_win_security_certpoleng_l1_1_0_dll
0x18002AA18: "long __cdecl Pku2uMakeTokenInformationV2(struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64,unsigned char,unsigned char,struct _LSA_TOKEN_INFORMATION_V1 * __ptr64 * __ptr64)" ?Pku2uMakeTokenInformationV2@@YAJPEAU_NETLOGON_VALIDATION_SAM_INFO4@@EEPEAPEAU_LSA_TOKEN_INFORMATION_V1@@@Z
0x180033660: "false" ??_C@_05LAPONLG@false?$AA@
0x180038CA0: g_pfnFree
0x18001C704: "struct _PKU2U_LOGON_SESSION * __ptr64 __cdecl Pku2uLocateLogonSessionNoLock(struct _LUID * __ptr64)" ?Pku2uLocateLogonSessionNoLock@@YAPEAU_PKU2U_LOGON_SESSION@@PEAU_LUID@@@Z
0x180014230: "long __cdecl Pku2uComputeFinishedMsg(struct KERB_ENCRYPTION_KEY * __ptr64,struct _PKU2U_CONTEXT * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uComputeFinishedMsg@@YAJPEAUKERB_ENCRYPTION_KEY@@PEAU_PKU2U_CONTEXT@@PEAPEAEPEAK@Z
0x1800360D4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180025AE8: "struct PKERB_AUTHORIZATION_DATA * __ptr64 __cdecl KerbFindAuthDataEntry(unsigned long,struct PKERB_AUTHORIZATION_DATA * __ptr64)" ?KerbFindAuthDataEntry@@YAPEAUPKERB_AUTHORIZATION_DATA@@KPEAU1@@Z
0x18002CE34: "long __cdecl Pku2uCheckTokenMembership(void * __ptr64,unsigned long,int * __ptr64)" ?Pku2uCheckTokenMembership@@YAJPEAXKPEAH@Z
0x180031EE8: "__cdecl _imp_memmove" __imp_memmove
0x180002120: "void __cdecl LsaApLogonTerminated(struct _LUID * __ptr64)" ?LsaApLogonTerminated@@YAXPEAU_LUID@@@Z
0x18001B810: "long __cdecl LsaApLogonUserEx2(void * __ptr64 * __ptr64,enum _SECURITY_LOGON_TYPE,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,struct _LUID * __ptr64,long * __ptr64,enum _LSA_TOKEN_INFORMATION_TYPE * __ptr64,void * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _SECPKG_PRIMARY_CRED * __ptr64,struct _SECPKG_SUPPLEMENTAL_CRED_ARRAY * __ptr64 * __ptr64)" ?LsaApLogonUserEx2@@YAJPEAPEAXW4_SECURITY_LOGON_TYPE@@PEAX2K0PEAKPEAU_LUID@@PEAJPEAW4_LSA_TOKEN_INFORMATION_TYPE@@0PEAPEAU_UNICODE_STRING@@77PEAU_SECPKG_PRIMARY_CRED@@PEAPEAU_SECPKG_SUPPLEMENTAL_CRED_ARRAY@@@Z
0x180031A50: "__cdecl _imp_ASN1intx_setuint32" __imp_ASN1intx_setuint32
0x18001F960: "long __cdecl LsaApCallPackage(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackage@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x180029A34: "long __cdecl Pku2uBuildPacVerifier(union _LARGE_INTEGER * __ptr64,struct _UNICODE_STRING * __ptr64,struct _PAC_INFO_BUFFER * __ptr64 * __ptr64)" ?Pku2uBuildPacVerifier@@YAJPEAT_LARGE_INTEGER@@PEAU_UNICODE_STRING@@PEAPEAU_PAC_INFO_BUFFER@@@Z
0x180038FA4: "unsigned long Pku2uGlobalSupportInitiatorFirst" ?Pku2uGlobalSupportInitiatorFirst@@3KA
0x180038DC0: "struct _RTL_AVL_TABLE Pku2uGlobalCredTable" ?Pku2uGlobalCredTable@@3U_RTL_AVL_TABLE@@A
0x18002EB20: "long __cdecl PAC_DecodeValidationInformationEx(unsigned char * __ptr64,unsigned long,struct _NETLOGON_VALIDATION_SAM_INFO4 * __ptr64 * __ptr64)" ?PAC_DecodeValidationInformationEx@@YAJPEAEKPEAPEAU_NETLOGON_VALIDATION_SAM_INFO4@@@Z
0x180041038: "__cdecl _imp_CertGetSubjectCertificateFromStore" __imp_CertGetSubjectCertificateFromStore
0x180038F20: "struct _RTL_AVL_TABLE Pku2uGlobalLogonSessionTable" ?Pku2uGlobalLogonSessionTable@@3U_RTL_AVL_TABLE@@A
0x180031FA0: "__cdecl _imp_RtlTimeFieldsToTime" __imp_RtlTimeFieldsToTime
0x1800358B0: CRYPTSP_NULL_THUNK_DATA_DLN
0x180031E90: "__cdecl _imp_malloc" __imp_malloc
0x18001174C: "void * __ptr64 __cdecl ScHelperAllocAndMsgGetParam(void * __ptr64,unsigned long,unsigned long)" ?ScHelperAllocAndMsgGetParam@@YAPEAXPEAXKK@Z
0x180031E60: "__cdecl _imp_CDBuildIntegrityVect" __imp_CDBuildIntegrityVect
0x18002CA00: "void * __ptr64 __cdecl Pku2uAllocate(unsigned __int64)" ?Pku2uAllocate@@YAPEAX_K@Z
0x180036264: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180031F08: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180031BF0: "__cdecl _imp_SspiGetTargetHostName" __imp_SspiGetTargetHostName
0x1800327C0: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x1800320A0: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x180025BAC: "void __cdecl KerbFreeData(unsigned long,void * __ptr64)" ?KerbFreeData@@YAXKPEAX@Z
0x180021140: "void __cdecl KerbFreeKdcName(struct _KERB_INTERNAL_NAME * __ptr64 * __ptr64)" ?KerbFreeKdcName@@YAXPEAPEAU_KERB_INTERNAL_NAME@@@Z
0x18002DF00: "public: void __cdecl basessp::BaseSSP::WSTFreeString(struct _UNICODE_STRING * __ptr64) __ptr64" ?WSTFreeString@BaseSSP@basessp@@QEAAXPEAU_UNICODE_STRING@@@Z
0x18002E110: "void * __ptr64 __cdecl basessp::WSTTableAllocate(struct _RTL_AVL_TABLE * __ptr64,unsigned long)" ?WSTTableAllocate@basessp@@YAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x180031BD0: RPCRT4_NULL_THUNK_DATA
0x1800036E0: "__cdecl _report_gsfailure" __report_gsfailure
0x180032628: "SupportInitiatorFirst" ??_C@_1CM@CKNLKIAG@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAo?$AAr?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?$AA@
0x180032730: "MaxTokenSize" ??_C@_1BK@BMAFFMMB@?$AAM?$AAa?$AAx?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x180013190: "long __cdecl SpFreeCredentialsHandle(unsigned __int64)" ?SpFreeCredentialsHandle@@YAJ_K@Z
0x1800298B8: "unsigned long __cdecl KerbCopyDomainRelativeSid(void * __ptr64,void * __ptr64,unsigned long)" ?KerbCopyDomainRelativeSid@@YAKPEAX0K@Z
0x18003AD70: "struct basessp::_WST_LIST * Pku2uGlobalUserModeContextList" ?Pku2uGlobalUserModeContextList@@3PAU_WST_LIST@basessp@@A
0x1800215AC: "long __cdecl Pku2uBuildPeer2PeerAsRequest(struct _PKU2U_CONTEXT * __ptr64,struct KERB_ERROR * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Pku2uBuildPeer2PeerAsRequest@@YAJPEAU_PKU2U_CONTEXT@@PEAUKERB_ERROR@@PEAPEAEPEAK@Z
0x180002320: "void __cdecl Pku2uReferenceLogonSession(struct _PKU2U_LOGON_SESSION * __ptr64)" ?Pku2uReferenceLogonSession@@YAXPEAU_PKU2U_LOGON_SESSION@@@Z
0x180025C48: "void __cdecl KerbFreeInternalTicket(struct KERB_TICKET * __ptr64)" ?KerbFreeInternalTicket@@YAXPEAUKERB_TICKET@@@Z
0x180012468: "void __cdecl Pku2uFreePrimaryCredential(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64)" ?Pku2uFreePrimaryCredential@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@@Z
0x180002570: "long __cdecl SpInitialize(unsigned __int64,struct _SECPKG_PARAMETERS * __ptr64,struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64)" ?SpInitialize@@YAJ_KPEAU_SECPKG_PARAMETERS@@PEAU_LSA_SECPKG_FUNCTION_TABLE@@@Z
0x18002515C: "long __cdecl KerbConvertArrayToCryptList(struct KERB_KDC_REQUEST_BODY_encryption_type * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long,int)" ?KerbConvertArrayToCryptList@@YAJPEAPEAUKERB_KDC_REQUEST_BODY_encryption_type@@PEAKKH@Z
0x180038C70: "__cdecl _native_startup_state" __native_startup_state
0x1800136EC: "long __cdecl Pku2uAllocateSSPIMessage(unsigned char * __ptr64,unsigned long,struct _PKU2U_SSPI_MESSAGE * __ptr64 * __ptr64)" ?Pku2uAllocateSSPIMessage@@YAJPEAEKPEAPEAU_PKU2U_SSPI_MESSAGE@@@Z
0x180031A38: "__cdecl _imp_ASN1_CloseEncoder" __imp_ASN1_CloseEncoder
0x180041018: "__cdecl _imp_CryptMsgUpdate" __imp_CryptMsgUpdate
0x1800296D0: "unsigned long __cdecl Pku2uScavengerCleanupStaleCreds(void * __ptr64)" ?Pku2uScavengerCleanupStaleCreds@@YAKPEAX@Z
0x180022518: "void __cdecl Pku2uFreePeer2PeerKeys(unsigned long * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64 * __ptr64)" ?Pku2uFreePeer2PeerKeys@@YAXPEAKPEAPEAUKERB_ENCRYPTION_KEY@@@Z
0x180029708: "long __cdecl KerbApplyAuthDataRestrictions(void * __ptr64 * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64,int * __ptr64)" ?KerbApplyAuthDataRestrictions@@YAJPEAPEAXPEAUPKERB_AUTHORIZATION_DATA@@PEAH@Z
0x180004076: "__cdecl _imp_load_LsaIAuditReplay" __imp_load_LsaIAuditReplay
0x180004052: "__cdecl _imp_load_LsaIGetSupplementalTokenInfo" __imp_load_LsaIGetSupplementalTokenInfo
0x1800320A8: "__cdecl _imp_RtlInitializeGenericTable" __imp_RtlInitializeGenericTable
0x180031B68: "__cdecl _imp_ASN1DecSetError" __imp_ASN1DecSetError
0x1800274D8: "long __cdecl Pku2uBuildTokenRestrictionsAD(struct _LSA_TOKEN_INFO_HEADER * __ptr64,struct PKERB_AUTHORIZATION_DATA * __ptr64 * __ptr64)" ?Pku2uBuildTokenRestrictionsAD@@YAJPEAU_LSA_TOKEN_INFO_HEADER@@PEAPEAUPKERB_AUTHORIZATION_DATA@@@Z
0x1800325E0: "AlwaysPrompt" ??_C@_1BK@HIILKHCM@?$AAA?$AAl?$AAw?$AAa?$AAy?$AAs?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA?$AA@
0x1800179A0: "long __cdecl SpUpdateCredentials(unsigned __int64,struct _GUID * __ptr64,unsigned long,unsigned char * __ptr64)" ?SpUpdateCredentials@@YAJ_KPEAU_GUID@@KPEAE@Z
0x180022578: "long __cdecl Pku2uHandlePeer2PeerAsReply(struct _PKU2U_CONTEXT * __ptr64,unsigned long,unsigned char * __ptr64)" ?Pku2uHandlePeer2PeerAsReply@@YAJPEAU_PKU2U_CONTEXT@@KPEAE@Z
0x1800249F0: "long __cdecl SpSetContextAttributes(unsigned __int64,unsigned long,void * __ptr64,unsigned long)" ?SpSetContextAttributes@@YAJ_KKPEAXK@Z
0x18003AC50: "int Pku2uGlobalDHParameterGenerated" ?Pku2uGlobalDHParameterGenerated@@3HA
0x1800329A8: WPP_eb61fcd382d5340c8cc2b4c75d103dcf_Traceguids
0x180038020: "struct _SECPKG_FUNCTION_TABLE Pku2uGlobalFunctionTable" ?Pku2uGlobalFunctionTable@@3U_SECPKG_FUNCTION_TABLE@@A
0x18002F66C: InternalVerifyStackAvailable
0x18003628C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x18001A134: "void __cdecl Pku2uFreeDHParameters(struct _CERT_X942_DH_PARAMETERS * __ptr64)" ?Pku2uFreeDHParameters@@YAXPEAU_CERT_X942_DH_PARAMETERS@@@Z
0x180032040: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x180031B48: "__cdecl _imp_ASN1BERDecPeekTag" __imp_ASN1BERDecPeekTag
0x180003B6D: "__cdecl _imp_load_CryptMsgControl" __imp_load_CryptMsgControl
0x18002CA54: "long __cdecl Pku2uBuildGssErrorMessage(long,unsigned char * __ptr64,unsigned long,struct _PKU2U_CONTEXT * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?Pku2uBuildGssErrorMessage@@YAJJPEAEKPEAU_PKU2U_CONTEXT@@PEAKPEAPEAE@Z
0x180003F7F: "__cdecl _imp_load_PstGetUserNameForCertificate" __imp_load_PstGetUserNameForCertificate
0x180041100: "__cdecl _imp_LsaICancelNotification" __imp_LsaICancelNotification
0x1800324B8: "pku2u" ??_C@_1M@HIIECOBP@?$AAp?$AAk?$AAu?$AA2?$AAu?$AA?$AA@
0x180026274: "long __cdecl KerbPackTicket(struct KERB_TICKET * __ptr64,struct KERB_ENCRYPTION_KEY * __ptr64,unsigned long,struct KERB_TICKET * __ptr64)" ?KerbPackTicket@@YAJPEAUKERB_TICKET@@PEAUKERB_ENCRYPTION_KEY@@K0@Z
0x180029404: "void __cdecl Pku2uInsertTicketCacheEntry(struct _PKU2U_PRIMARY_CREDENTIAL * __ptr64,struct _PKU2U_TICKET_CACHE_ENTRY * __ptr64)" ?Pku2uInsertTicketCacheEntry@@YAXPEAU_PKU2U_PRIMARY_CREDENTIAL@@PEAU_PKU2U_TICKET_CACHE_ENTRY@@@Z
0x18002E650: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl basessp::WSTCredTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?WSTCredTableCompare@basessp@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x18001353C: "long __cdecl KerbGetEncryptionOverhead(unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?KerbGetEncryptionOverhead@@YAJKPEAK0@Z
0x180031F70: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x180038CD0: "class basessp::BaseSSP * __ptr64 __ptr64 Pku2uGlobalBaseSSP" ?Pku2uGlobalBaseSSP@@3PEAVBaseSSP@basessp@@EA
0x180018C60: "void __cdecl WSTFreeUserModeContext(struct _WST_USERMODE_CONTEXT * __ptr64)" ?WSTFreeUserModeContext@@YAXPEAU_WST_USERMODE_CONTEXT@@@Z
0x180031FD8: "__cdecl _imp_NtDuplicateObject" __imp_NtDuplicateObject
0x180019FB0: "int __cdecl Pku2uEncodeParametersAsDHAlgorithmId(struct _CERT_X942_DH_PARAMETERS * __ptr64,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64)" ?Pku2uEncodeParametersAsDHAlgorithmId@@YAHPEAU_CERT_X942_DH_PARAMETERS@@PEAU_CRYPT_ALGORITHM_IDENTIFIER@@@Z
0x180041058: "__cdecl _imp_CryptMsgOpenToDecode" __imp_CryptMsgOpenToDecode
0x1800356E4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll
0x18001C874: "long __cdecl Pku2uLookupOrCreateAssociatedCredentialInLogonSession(struct _UNICODE_STRING * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64 * __ptr64,struct _PKU2U_LOGON_SESSION * __ptr64,struct _PKU2U_ASSOCIATED_CREDENTIAL * __ptr64 * __ptr64)" ?Pku2uLookupOrCreateAssociatedCredentialInLogonSession@@YAJPEAU_UNICODE_STRING@@PEAPEBU_CERT_CONTEXT@@PEAPEBU_CERT_CHAIN_CONTEXT@@PEAU_PKU2U_LOGON_SESSION@@PEAPEAU_PKU2U_ASSOCIATED_CREDENTIAL@@@Z
0x180036214: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180038D14: "unsigned long Pku2uGlobalPreferWellknownMODPDHDomainParameters" ?Pku2uGlobalPreferWellknownMODPDHDomainParameters@@3KA
0x18002AF1C: "unsigned char __cdecl Pku2uVerifyAuthData(struct PKERB_AUTHORIZATION_DATA * __ptr64)" ?Pku2uVerifyAuthData@@YAEPEAUPKERB_AUTHORIZATION_DATA@@@Z
0x180018418: WPP_SF_sd
0x180031E88: "__cdecl _imp_free" __imp_free
0x1800038F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180031DA0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800334BC: "" ??_C@_13DOGEFHNA@?$AA?$AO?$AA?$AA@
0x180003B25: "__cdecl _imp_load_CryptMsgGetParam" __imp_load_CryptMsgGetParam
0x180025B7C: "void __cdecl KerbFreeCryptList(struct KERB_KDC_REQUEST_BODY_encryption_type * __ptr64)" ?KerbFreeCryptList@@YAXPEAUKERB_KDC_REQUEST_BODY_encryption_type@@@Z
0x180002990: "long __cdecl Pku2uLoadCredTable(void)" ?Pku2uLoadCredTable@@YAJXZ
0x180032780: "%SystemRoot%\SysWOW64\pku2u.DLL" ??_C@_1EA@EJNPGNOF@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?2?$AAp?$AAk?$AAu?$AA2?$AAu?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180033438: SEC_WINNT_AUTH_DATA_TYPE_PASSWORD
0x180031A58: "__cdecl _imp_ASN1ztcharstring_free" __imp_ASN1ztcharstring_free
0x180032088: "__cdecl _imp_RtlGetElementGenericTable" __imp_RtlGetElementGenericTable
0x180036200: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180033848: WPP_660d4a270d503e1faa2e806d309bd6c1_Traceguids
0x1800042EA: memset
0x1800362C8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180002060: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl Pku2uLogonSessionTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?Pku2uLogonSessionTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z

[JEB Decompiler by PNF Software]