PDB Symbols - negoexts.dll (0xB59D1E41F82A49269AFBF768DE903475D087B78567B407217B7B37DD4EB6FEFB)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\negoexts.dll Base=0x180000000 SHA-256=B59D1E41F82A49269AFBF768DE903475D087B78567B407217B7B37DD4EB6FEFB
PDB: negoexts.pdb GUID={7854F33B-2660-791E-21E59BE07382A021} Age=1

603 located named symbols:
0x18000CDD0: "int __cdecl WSTIsCommonAuthScheme(struct _GUID * __ptr64,unsigned short,struct _GUID * __ptr64)" ?WSTIsCommonAuthScheme@@YAHPEAU_GUID@@G0@Z
0x180016DBC: "void __cdecl basessp::WSTUnpackSuppliedCreds(struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64,struct basessp::_WST_CONTEXT_SUPPLIED_CREDS * __ptr64)" ?WSTUnpackSuppliedCreds@basessp@@YAXPEAU_SECPKG_SUPPLIED_CREDENTIAL@@PEAU_WST_CONTEXT_SUPPLIED_CREDS@1@@Z
0x180018890: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x180018328: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180003180: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002630: "unsigned long __cdecl WSTPackageLoad(void * __ptr64)" ?WSTPackageLoad@@YAKPEAX@Z
0x180010C54: WPP_SF_DdDDdZ
0x180001850: "int __cdecl basessp::WSTCompareCreds(struct basessp::_WST_CREDENTIAL * __ptr64,struct basessp::_WST_CREDENTIAL * __ptr64)" ?WSTCompareCreds@basessp@@YAHPEAU_WST_CREDENTIAL@1@0@Z
0x180014790: "private: long __cdecl basessp::BaseSSP::WSTCopyCredManCredentials(struct _LUID * __ptr64,struct _CREDENTIAL_TARGET_INFORMATIONW * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTCopyCredManCredentials@BaseSSP@basessp@@AEAAJPEAU_LUID@@PEAU_CREDENTIAL_TARGET_INFORMATIONW@@PEAU_UNICODE_STRING@@2PEAPEAEPEAK44@Z
0x180003380: "__cdecl FindPESection" _FindPESection
0x180022060: "__cdecl _imp_CredIsProtectedW" __imp_CredIsProtectedW
0x180018CD0: "AllocFn" ??_C@_07PBFCAEHP@AllocFn?$AA@
0x180018258: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x180002B90: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800183E8: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18001A8C8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003761: "__cdecl _imp_load_CDLocateCheckSum" __imp_load_CDLocateCheckSum
0x180001B90: "void __cdecl basessp::WSTTableFree(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64)" ?WSTTableFree@basessp@@YAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x1800188B0: "__cdecl _sz_cryptdll_dll" __sz_cryptdll_dll
0x180007224: "void __cdecl WSTDereferenceContext(struct _WST_CONTEXT * __ptr64)" ?WSTDereferenceContext@@YAXPEAU_WST_CONTEXT@@@Z
0x180018220: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180001580: "public: void __cdecl basessp::BaseSSP::WSTReferenceCredential(struct basessp::_WST_CREDENTIAL * __ptr64) __ptr64" ?WSTReferenceCredential@BaseSSP@basessp@@QEAAXPEAU_WST_CREDENTIAL@2@@Z
0x180002A20: "long __cdecl SpLsaModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpLsaModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_FUNCTION_TABLE@@0@Z
0x180012378: "struct _WST_CONTEXT * __ptr64 __cdecl WSTLocateContextByTargetNameNoLock(struct _UNICODE_STRING * __ptr64,struct _LUID * __ptr64)" ?WSTLocateContextByTargetNameNoLock@@YAPEAU_WST_CONTEXT@@PEAU_UNICODE_STRING@@PEAU_LUID@@@Z
0x18001C1C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800025F0: "long __cdecl WSTInitializeLoader(void)" ?WSTInitializeLoader@@YAJXZ
0x180004EA0: "long __cdecl SpInitLsaModeContext(unsigned __int64,unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,struct _SecBufferDesc * __ptr64,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpInitLsaModeContext@@YAJ_K0PEAU_UNICODE_STRING@@KKPEAU_SecBufferDesc@@PEA_K2PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x180003615: "__cdecl _imp_load_LsaICancelNotification" __imp_load_LsaICancelNotification
0x1800026E0: "long __cdecl WSTAddSSPPackage(unsigned long,struct _UNICODE_STRING * __ptr64,struct _SECPKG_FUNCTION_TABLE * __ptr64)" ?WSTAddSSPPackage@@YAJKPEAU_UNICODE_STRING@@PEAU_SECPKG_FUNCTION_TABLE@@@Z
0x18000716C: "long __cdecl WSTContextTableInsert(struct _WST_CONTEXT * __ptr64)" ?WSTContextTableInsert@@YAJPEAU_WST_CONTEXT@@@Z
0x180002C6C: "__cdecl CRT_INIT" _CRT_INIT
0x180018250: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180022098: cryptdll_NULL_THUNK_DATA_DLA
0x18001A6F8: cryptdll_NULL_THUNK_DATA_DLB
0x180018180: "__cdecl _imp_SystemFunction036" __imp_SystemFunction036
0x18001A540: cryptdll_NULL_THUNK_DATA_DLN
0x1800164D8: WPP_SF_L
0x18001A83C: "__cdecl _IMPORT_DESCRIPTOR_CRYPTBASE" __IMPORT_DESCRIPTOR_CRYPTBASE
0x1800184C8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180007C40: WppControlCallback
0x180002B00: "long __cdecl SpGetExtendedInformation(enum _SECPKG_EXTENDED_INFORMATION_CLASS,struct _SECPKG_EXTENDED_INFORMATION * __ptr64 * __ptr64)" ?SpGetExtendedInformation@@YAJW4_SECPKG_EXTENDED_INFORMATION_CLASS@@PEAPEAU_SECPKG_EXTENDED_INFORMATION@@@Z
0x180003A70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180018160: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18000CD50: "void __cdecl WSTFree(void * __ptr64)" ?WSTFree@@YAXPEAX@Z
0x180018840: "%SystemRoot%\SysWOW64\negoexts.D" ??_C@_1EG@MJJHEIBI@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?2?$AAn?$AAe?$AAg?$AAo?$AAe?$AAx?$AAt?$AAs?$AA?4?$AAD@
0x180022078: "__cdecl _imp_CredParseUserNameWithType" __imp_CredParseUserNameWithType
0x180018118: "long (__cdecl** WSTCallPackageDispatch)(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?WSTCallPackageDispatch@@3PAP6AJPEAPEAXPEAX1K0PEAKPEAJ@ZA
0x180003566: "__cdecl _imp_load_SspiValidateAuthIdentity" __imp_load_SspiValidateAuthIdentity
0x1800163CC: "private: void __cdecl basessp::BaseSSP::WSTUnloadCredTable(void) __ptr64" ?WSTUnloadCredTable@BaseSSP@basessp@@AEAAXXZ
0x18001C7B0: g_ulAdditionalProbeSize
0x180018D98: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000A6F0: "long __cdecl SpDeleteUserModeContext(unsigned __int64)" ?SpDeleteUserModeContext@@YAJ_K@Z
0x18000C5E4: "long __cdecl WSTComputeVerifyMessageByKey(struct basessp::_WST_ENCRYPTION_KEY * __ptr64,struct _WST_CONTEXT * __ptr64,struct _GUID * __ptr64,struct _WST_VERIFY_MESSAGE * __ptr64,struct _WST_MESSAGE * __ptr64 * __ptr64)" ?WSTComputeVerifyMessageByKey@@YAJPEAU_WST_ENCRYPTION_KEY@basessp@@PEAU_WST_CONTEXT@@PEAU_GUID@@PEAU_WST_VERIFY_MESSAGE@@PEAPEAU_WST_MESSAGE@@@Z
0x18000A3A8: "long __cdecl WSTInitUserModeContextList(void)" ?WSTInitUserModeContextList@@YAJXZ
0x1800036A0: "__cdecl _imp_load_LsaIGetNego2Package" __imp_load_LsaIGetNego2Package
0x180009C90: "long __cdecl WSTCreateUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64,struct _NEGOEXTS_UMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTCreateUserModeContext@@YAJ_KPEAU_SecBuffer@@PEAPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x180001010: "long __cdecl SpAcquireCredentialsHandle(struct _UNICODE_STRING * __ptr64,unsigned long,struct _LUID * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64 * __ptr64,union _LARGE_INTEGER * __ptr64)" ?SpAcquireCredentialsHandle@@YAJPEAU_UNICODE_STRING@@KPEAU_LUID@@PEAX22PEA_KPEAT_LARGE_INTEGER@@@Z
0x18001A7D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180005290: "long __cdecl WSTProcessContextLevelTokens(int,unsigned __int64,unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,struct _SecBufferDesc * __ptr64,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?WSTProcessContextLevelTokens@@YAJH_K0PEAU_UNICODE_STRING@@KKPEAU_SecBufferDesc@@PEA_K2PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x1800181F0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180018A60: WPP_ThisDir_CTLGUID_NegoExtsGlobalDebugTraceControlGuid
0x180018CA0: "Buffer Overflow" ??_C@_0BA@LMKNADMB@Buffer?5Overflow?$AA@
0x180018390: "__cdecl _imp_wcschr" __imp_wcschr
0x180022048: "__cdecl _imp_CredFree" __imp_CredFree
0x180012490: "void __cdecl WSTUnloadContextByTargetTable(void)" ?WSTUnloadContextByTargetTable@@YAXXZ
0x180001BB0: "long __cdecl SpQueryCredentialsAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryCredentialsAttributes@@YAJ_KKPEAX@Z
0x180016EB8: "void __cdecl WPPTraceLogA(char const * __ptr64,...)" ?WPPTraceLogA@@YAXPEBDZZ
0x18000CD74: "void __cdecl WSTFreeString(struct _UNICODE_STRING * __ptr64)" ?WSTFreeString@@YAXPEAU_UNICODE_STRING@@@Z
0x180018198: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x1800184A0: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x1800184E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180018400: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x180018338: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180018BD8: WPP_36cc2140e16e3b946342a970885110cf_Traceguids
0x18001CA70: "struct _RTL_RESOURCE NegoExtsGlobalUserModeContextResource" ?NegoExtsGlobalUserModeContextResource@@3U_RTL_RESOURCE@@A
0x180011598: WPP_SF_dqZDdZ_HEX_
0x18000335B: "__cdecl XcptFilter" _XcptFilter
0x1800184F0: "__cdecl _xc_a" __xc_a
0x180018700: "System\CurrentControlSet\Control" ??_C@_1HK@FMNJJKOG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18001C758: "__cdecl _hmod__LSASRV_dll" __hmod__LSASRV_dll
0x180018420: "__cdecl _imp_RtlConvertSharedToExclusive" __imp_RtlConvertSharedToExclusive
0x180014B04: "private: void __cdecl basessp::BaseSSP::WSTFreeCspDataDetail(struct basessp::_WST_CSPDATA_DETAIL * __ptr64) __ptr64" ?WSTFreeCspDataDetail@BaseSSP@basessp@@AEAAXPEAU_WST_CSPDATA_DETAIL@2@@Z
0x180022000: "__cdecl _imp_LsaIGetNego2Package" __imp_LsaIGetNego2Package
0x180018B90: WPP_be8fa02db3883c4cd9b363b57d712306_Traceguids
0x180016730: WPP_SF_dddsd
0x1800092F0: WPP_SF_DDDsd
0x180010D88: WPP_SF_DdZ
0x180006178: WPP_SF_DDZ
0x180009AB8: WPP_SF_ZdD
0x180006440: WPP_SF_ZDd
0x18001C7D8: "struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64 __ptr64 basessp::WSTGlobalLsaFunctions" ?WSTGlobalLsaFunctions@basessp@@3PEAU_LSA_SECPKG_FUNCTION_TABLE@@EA
0x18000B828: "long __cdecl WSTComputeInitialHelloMessage(struct _SecBuffer * __ptr64,struct _WST_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WSTComputeInitialHelloMessage@@YAJPEAU_SecBuffer@@PEAU_WST_CONTEXT@@PEAK@Z
0x18000B354: "long __cdecl WSTAddTokenMessage(struct _WST_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long,struct _GUID * __ptr64)" ?WSTAddTokenMessage@@YAJPEAU_WST_CONTEXT@@PEAEKPEAU_GUID@@@Z
0x180018C88: "0x%08x %s:%u : %s:%ws" ??_C@_0BG@KFEFLOBO@0x?$CF08x?5?$CFs?3?$CFu?5?3?5?$CFs?3?$CFws?$AA@
0x1800097DC: "long __cdecl WSTIsPackageAllowedForCaller(unsigned long,int * __ptr64)" ?WSTIsPackageAllowedForCaller@@YAJKPEAH@Z
0x18001C8B0: "struct _RTL_CRITICAL_SECTION WSTGlobalContextByTargetTableLock" ?WSTGlobalContextByTargetTableLock@@3U_RTL_CRITICAL_SECTION@@A
0x180009EB8: "long __cdecl WSTExportSecurityContext(unsigned __int64,unsigned long,struct _SecBuffer * __ptr64,void * __ptr64 * __ptr64)" ?WSTExportSecurityContext@@YAJ_KKPEAU_SecBuffer@@PEAPEAX@Z
0x180018168: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x18000334F: "__cdecl callnewh" _callnewh
0x180022038: "__cdecl _imp_SspiValidateAuthIdentity" __imp_SspiValidateAuthIdentity
0x18001C810: "struct _RTL_CRITICAL_SECTION WSTGlobalZombieContextTableLock" ?WSTGlobalZombieContextTableLock@@3U_RTL_CRITICAL_SECTION@@A
0x1800178DC: RtlUShortAdd
0x18001861C: "__cdecl _guard_iat_table" __guard_iat_table
0x180018240: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180003A42: memcpy
0x180011D24: "long __cdecl WSTContextByTargetTableInsert(struct _WST_CONTEXT * __ptr64)" ?WSTContextByTargetTableInsert@@YAJPEAU_WST_CONTEXT@@@Z
0x180001AB0: "void __cdecl WSTDereferencePackage(struct _WST_SSP_PACKAGE * __ptr64)" ?WSTDereferencePackage@@YAXPEAU_WST_SSP_PACKAGE@@@Z
0x180007A54: "void __cdecl WSTUnloadContextTable(void)" ?WSTUnloadContextTable@@YAXXZ
0x180018350: "__cdecl _imp_memset" __imp_memset
0x180018AF0: WPP_ff25a6d671a9360f7c9f04222be6047b_Traceguids
0x180003846: "__cdecl _imp_load_CredParseUserNameWithType" __imp_load_CredParseUserNameWithType
0x18000353F: "__cdecl initterm" _initterm
0x180018308: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18001A8B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001C798: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180018D80: WPP_7dbdf5c37db4303e43265ce13f99cbcc_Traceguids
0x1800182D0: "__cdecl _imp_Sleep" __imp_Sleep
0x180017A04: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x180018510: "__cdecl _xi_z" __xi_z
0x180018D40: "No Client Token" ??_C@_0BA@FBBMJIGF@No?5Client?5Token?$AA@
0x1800181D0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000B4A8: "long __cdecl WSTComputeAuthSchemeArray(struct _WST_CONTEXT * __ptr64,struct _GUID * __ptr64 * __ptr64,unsigned short * __ptr64)" ?WSTComputeAuthSchemeArray@@YAJPEAU_WST_CONTEXT@@PEAPEAU_GUID@@PEAG@Z
0x180018418: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x1800160B4: "private: long __cdecl basessp::BaseSSP::WSTProcessUserNameCredential(struct _LUID * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTProcessUserNameCredential@BaseSSP@basessp@@AEAAJPEAU_LUID@@PEAU_UNICODE_STRING@@111PEAPEAEPEAK33@Z
0x180003174: "__cdecl _C_specific_handler" __C_specific_handler
0x1800189A8: WPP_2b6bdc604b083ce2752e0bea3ef63f2e_Traceguids
0x180008F40: "long __cdecl WSTUpdateCredentials(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?WSTUpdateCredentials@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18001CA24: "unsigned long WSTGlobalExpiration" ?WSTGlobalExpiration@@3KA
0x18001C80C: "unsigned long WSTGlobalMaxTokenSize" ?WSTGlobalMaxTokenSize@@3KA
0x18001C9A8: WPP_REGISTRATION_GUIDS
0x180006808: WPP_SF_qDDZq
0x180003343: malloc
0x180018298: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800183D8: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x18001646C: "public: long __cdecl basessp::BaseSSP::WSTValidateAndReferenceCredential(unsigned __int64,struct basessp::_WST_CREDENTIAL * __ptr64 * __ptr64) __ptr64" ?WSTValidateAndReferenceCredential@BaseSSP@basessp@@QEAAJ_KPEAPEAU_WST_CREDENTIAL@2@@Z
0x180003944: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180022030: "__cdecl _imp_SspiDecryptAuthIdentityEx" __imp_SspiDecryptAuthIdentityEx
0x180018480: "__cdecl _imp_RtlLookupElementGenericTable" __imp_RtlLookupElementGenericTable
0x18000AF60: "long __cdecl SpUserModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_USER_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpUserModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_USER_FUNCTION_TABLE@@0@Z
0x180011C88: "long __cdecl WSTContextByTargetTableDeleteExNoLock(struct _RTL_GENERIC_TABLE * __ptr64,struct _WST_CONTEXT * __ptr64)" ?WSTContextByTargetTableDeleteExNoLock@@YAJPEAU_RTL_GENERIC_TABLE@@PEAU_WST_CONTEXT@@@Z
0x18001C7C8: "unsigned char NegoExtsGlobalUserModeContextsInitialized" ?NegoExtsGlobalUserModeContextsInitialized@@3EA
0x18001CA48: "unsigned long WSTGlobalScavengerInterval" ?WSTGlobalScavengerInterval@@3KA
0x180018410: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x18001C980: WPP_MAIN_CB
0x180008BA0: "long __cdecl WSTLookupContext(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?WSTLookupContext@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18000AE30: "long __cdecl SpUnsealMessage(unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long * __ptr64)" ?SpUnsealMessage@@YAJ_KPEAU_SecBufferDesc@@KPEAK@Z
0x18001A8F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180003367: "__cdecl amsg_exit" _amsg_exit
0x180018380: "__cdecl _imp__callnewh" __imp__callnewh
0x1800175DC: "char const * __ptr64 __cdecl _DBG_BASENAME(char const * __ptr64)" ?_DBG_BASENAME@@YAPEBDPEBD@Z
0x180003810: "__cdecl _imp_load_CredIsMarshaledCredentialW" __imp_load_CredIsMarshaledCredentialW
0x180018D90: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180009970: "struct _WST_SSP_PACKAGE * __ptr64 __cdecl WSTLocatePackageByAuthScheme(struct _GUID * __ptr64)" ?WSTLocatePackageByAuthScheme@@YAPEAU_WST_SSP_PACKAGE@@PEAU_GUID@@@Z
0x1800202D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUyzhvhhkUlyquivUznwGEUkivxlnkOlyq@basessp" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUyzhvhhkUlyquivUznwGEUkivxlnkOlyq@basessp
0x1800105E8: "long __cdecl WSTSelectAuthScheme(struct _WST_CONTEXT * __ptr64)" ?WSTSelectAuthScheme@@YAJPEAU_WST_CONTEXT@@@Z
0x18000ABD0: "long __cdecl SpQueryContextAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryContextAttributes@@YAJ_KKPEAX@Z
0x1800037FE: "__cdecl _imp_load_CredFree" __imp_load_CredFree
0x18000C514: "long __cdecl WSTComputeVerifyMessage(struct _WST_CONTEXT * __ptr64,struct _GUID * __ptr64,struct _WST_VERIFY_MESSAGE * __ptr64,struct _WST_MESSAGE * __ptr64 * __ptr64)" ?WSTComputeVerifyMessage@@YAJPEAU_WST_CONTEXT@@PEAU_GUID@@PEAU_WST_VERIFY_MESSAGE@@PEAPEAU_WST_MESSAGE@@@Z
0x1800179BC: VerifyStackAvailable
0x1800184B8: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x1800096E0: "long __cdecl WSTGetAllPackages(unsigned long * __ptr64,struct _WST_SSP_PACKAGE * __ptr64 * __ptr64 * __ptr64)" ?WSTGetAllPackages@@YAJPEAKPEAPEAPEAU_WST_SSP_PACKAGE@@@Z
0x1800094F0: WPP_SF_q_HEX_
0x1800183B0: "__cdecl _imp_tolower" __imp_tolower
0x1800182A8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180018320: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180003852: "__cdecl _tailMerge_api_ms_win_security_credentials_l2_1_0_dll" __tailMerge_api_ms_win_security_credentials_l2_1_0_dll
0x180011998: "unsigned long __cdecl WSTAgeContextTableNoLock(struct _RTL_GENERIC_TABLE * __ptr64,unsigned __int64 * __ptr64)" ?WSTAgeContextTableNoLock@@YAKPEAU_RTL_GENERIC_TABLE@@PEA_K@Z
0x180007840: "void __cdecl WSTReferenceContext(struct _WST_CONTEXT * __ptr64)" ?WSTReferenceContext@@YAXPEAU_WST_CONTEXT@@@Z
0x1800181E0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180018318: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180007254: "void __cdecl WSTFreeActiveEngineContext(struct _WST_ACTIVE_ENGINE_CONTEXT * __ptr64)" ?WSTFreeActiveEngineContext@@YAXPEAU_WST_ACTIVE_ENGINE_CONTEXT@@@Z
0x18000A014: "void __cdecl WSTFreeUserModeContextList(unsigned long)" ?WSTFreeUserModeContextList@@YAXK@Z
0x180018BA0: "onecore\ds\security\protocols\ne" ??_C@_0DD@LIGGLGIL@onecore?2ds?2security?2protocols?2ne@
0x1800182E8: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180018268: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180018D50: "_DecodePin" ??_C@_0L@GIMDJDMB@_DecodePin?$AA@
0x180002580: "private: long __cdecl basessp::BaseSSP::WSTLoadCredTable(void) __ptr64" ?WSTLoadCredTable@BaseSSP@basessp@@AEAAJXZ
0x1800035F1: "__cdecl _imp_load_FreeContextBuffer" __imp_load_FreeContextBuffer
0x180016CC8: "public: void __cdecl basessp::BaseSSP::WSTFree2(void * __ptr64) __ptr64" ?WSTFree2@BaseSSP@basessp@@QEAAXPEAX@Z
0x18001C788: "__cdecl _native_startup_lock" __native_startup_lock
0x1800038D4: DllMain
0x180018C50: "onecore\ds\security\protocols\ba" ??_C@_0DG@LAMHNCOC@onecore?2ds?2security?2protocols?2ba@
0x180018BF8: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x180018AB0: "(empty)" ??_C@_1BA@OGKPHKHF@?$AA?$CI?$AAe?$AAm?$AAp?$AAt?$AAy?$AA?$CJ?$AA?$AA@
0x180016524: WPP_SF_SDZ
0x180022040: SspiCli_NULL_THUNK_DATA_DLA
0x1800039A8: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1800183A0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004B20: "long __cdecl SpAcceptLsaModeContext(unsigned __int64,unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpAcceptLsaModeContext@@YAJ_K0PEAU_SecBufferDesc@@KKPEA_K1PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x1800182C0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180018210: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000AFD0: "long __cdecl SpVerifySignature(unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long * __ptr64)" ?SpVerifySignature@@YAJ_KPEAU_SecBufferDesc@@KPEAK@Z
0x180018CC0: "RtlUShortAdd" ??_C@_0N@KJJCCKEM@RtlUShortAdd?$AA@
0x180018158: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x18001178C: WPP_SF_i
0x180018958: WPP_f457019c0afc3b498f52811db9f14562_Traceguids
0x1800181C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180002BE8: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18001C1B0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003920: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800016E0: "public: void __cdecl basessp::BaseSSP::WSTDereferenceCredential(struct basessp::_WST_CREDENTIAL * __ptr64) __ptr64" ?WSTDereferenceCredential@BaseSSP@basessp@@QEAAXPEAU_WST_CREDENTIAL@2@@Z
0x180018358: "__cdecl _imp_memcmp" __imp_memcmp
0x18000377F: "__cdecl _tailMerge_api_ms_win_security_credentials_l1_1_0_dll" __tailMerge_api_ms_win_security_credentials_l1_1_0_dll
0x180012224: "struct _WST_CONTEXT * __ptr64 __cdecl WSTLocateContextByPointerNoLock(void * __ptr64,struct _LUID * __ptr64)" ?WSTLocateContextByPointerNoLock@@YAPEAU_WST_CONTEXT@@PEAXPEAU_LUID@@@Z
0x18001CA28: "struct _GUID WSTGlobalConversationId" ?WSTGlobalConversationId@@3U_GUID@@A
0x180018C10: "@@D " ??_C@_1BC@DHBDIJEN@?$AA?$EA?$AA?$EA?$AAD?$AA?$AH?$AA?$AI?$AA?$AM?$AA?6?$AA?$AN?$AA?$AA@
0x18001C140: "struct _SECPKG_USER_FUNCTION_TABLE NegoExtsGlobalUserFunctions" ?NegoExtsGlobalUserFunctions@@3U_SECPKG_USER_FUNCTION_TABLE@@A
0x180018270: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x180007380: "void __cdecl WSTFreeContext(struct _WST_CONTEXT * __ptr64)" ?WSTFreeContext@@YAXPEAU_WST_CONTEXT@@@Z
0x180018AC0: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x180018170: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x180018AE0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001A92C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180018248: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001A90: "void __cdecl WSTReferencePackage(struct _WST_SSP_PACKAGE * __ptr64)" ?WSTReferencePackage@@YAXPEAU_WST_SSP_PACKAGE@@@Z
0x180018D90: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180003430: "__cdecl ValidateImageBase" _ValidateImageBase
0x18001A6B0: SspiCli_NULL_THUNK_DATA_DLB
0x1800099F0: WPP_SF_Zd
0x180003572: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x180016600: WPP_SF_ZZ
0x1800066E8: WPP_SF_qDDZd
0x180007AE0: WPP_SF_ZS
0x180007D50: "long __cdecl LsaApCallPackageUntrusted(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackageUntrusted@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18001C7F0: "class basessp::BaseSSP * __ptr64 __ptr64 WSTGlobalBaseSSP" ?WSTGlobalBaseSSP@@3PEAVBaseSSP@basessp@@EA
0x180014F20: "private: long __cdecl basessp::BaseSSP::WSTPackSuppliedCreds(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64,unsigned long,struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64 * __ptr64) __ptr64" ?WSTPackSuppliedCreds@BaseSSP@basessp@@AEAAJPEAU_UNICODE_STRING@@0PEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@KPEAPEAU_SECPKG_SUPPLIED_CREDENTIAL@@@Z
0x180018C38: "Malformed source string" ??_C@_0BI@NHEKPCIH@Malformed?5source?5string?$AA@
0x180012784: "private: long __cdecl basessp::BaseSSP::WSTBuildCspDetail(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,struct basessp::_WST_CSPDATA_DETAIL * __ptr64) __ptr64" ?WSTBuildCspDetail@BaseSSP@basessp@@AEAAJPEAG000KPEAU_WST_CSPDATA_DETAIL@2@@Z
0x18001C760: "__cdecl _hmod__cryptdll_dll" __hmod__cryptdll_dll
0x180018470: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x18001A800: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000638C: WPP_SF_Z
0x180012A74: "private: long __cdecl basessp::BaseSSP::WSTCaptureSuppliedCreds(struct _LUID * __ptr64,void * __ptr64,void * __ptr64,struct basessp::_WST_CREDENTIAL * __ptr64 * __ptr64) __ptr64" ?WSTCaptureSuppliedCreds@BaseSSP@basessp@@AEAAJPEAU_LUID@@PEAX1PEAPEAU_WST_CREDENTIAL@2@@Z
0x180003822: "__cdecl _imp_load_CredIsProtectedW" __imp_load_CredIsProtectedW
0x180003773: "__cdecl _imp_load_CredUnmarshalCredentialW" __imp_load_CredUnmarshalCredentialW
0x180004A30: WPP_SF_
0x1800189B8: "onecore\ds\security\protocols\ba" ??_C@_0DC@LIIDBKPL@onecore?2ds?2security?2protocols?2ba@
0x18001A484: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180002EB0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180018360: "__cdecl _imp__initterm" __imp__initterm
0x180004FE0: "long __cdecl SpQueryLsaModeContext(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryLsaModeContext@@YAJ_KKPEAX@Z
0x18001C7E0: "void * __ptr64 __ptr64 WSTGlobalLsaNotification2" ?WSTGlobalLsaNotification2@@3PEAXEA
0x180022020: "__cdecl _imp_CredUnmarshalTargetInfo" __imp_CredUnmarshalTargetInfo
0x18000A2AC: "long __cdecl WSTInitUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64)" ?WSTInitUserModeContext@@YAJ_KPEAU_SecBuffer@@@Z
0x18001A918: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180018200: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800183F0: "__cdecl _imp_RtlCreateUnicodeStringFromAsciiz" __imp_RtlCreateUnicodeStringFromAsciiz
0x180018458: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x180022028: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x180009840: "long __cdecl WSTIsPackageExcluded(struct _SECPKG_CREDENTIAL * __ptr64,struct _UNICODE_STRING * __ptr64,int * __ptr64)" ?WSTIsPackageExcluded@@YAJPEAU_SECPKG_CREDENTIAL@@PEAU_UNICODE_STRING@@PEAH@Z
0x18000AD00: "long __cdecl SpSealMessage(unsigned __int64,unsigned long,struct _SecBufferDesc * __ptr64,unsigned long)" ?SpSealMessage@@YAJ_KKPEAU_SecBufferDesc@@K@Z
0x18001A828: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180009E2C: "void __cdecl WSTDereferenceUserModeContext(struct _NEGOEXTS_UMODE_CONTEXT * __ptr64)" ?WSTDereferenceUserModeContext@@YAXPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x1800093AC: WPP_SF_ZDq
0x180018178: CRYPT32_NULL_THUNK_DATA
0x1800188A0: "__cdecl _sz_LSASRV_dll" __sz_LSASRV_dll
0x180018968: "NegoExtender Security Package" ??_C@_1DM@ECHBDPEJ@?$AAN?$AAe?$AAg?$AAo?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?$AA@
0x180018150: "__cdecl _imp_CryptAcquireCertificatePrivateKey" __imp_CryptAcquireCertificatePrivateKey
0x180018190: "__cdecl _imp_CryptGetProvParam" __imp_CryptGetProvParam
0x18001C778: "__cdecl _onexitend" __onexitend
0x18001A6D0: LSASRV_NULL_THUNK_DATA_DLB
0x180022018: LSASRV_NULL_THUNK_DATA_DLA
0x1800184E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18001A4C0: LSASRV_NULL_THUNK_DATA_DLN
0x18000A164: "long __cdecl WSTImportSecurityContext(struct _SecBuffer * __ptr64,void * __ptr64,unsigned __int64 * __ptr64)" ?WSTImportSecurityContext@@YAJPEAU_SecBuffer@@PEAXPEA_K@Z
0x180018AD0: "" ??_C@_13IOKCHHHM@?$AA?$BA?$AA?$AA@
0x18001A404: "__cdecl _DELAY_IMPORT_DESCRIPTOR_LSASRV_dll" __DELAY_IMPORT_DESCRIPTOR_LSASRV_dll
0x180018AD8: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800036B2: "__cdecl _imp_load_LsaIRegisterNotification" __imp_load_LsaIRegisterNotification
0x180018260: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180007078: "long __cdecl WSTAllocateWstMessage(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,struct _WST_MESSAGE * __ptr64 * __ptr64)" ?WSTAllocateWstMessage@@YAJPEAPEAEPEAKPEAPEAU_WST_MESSAGE@@@Z
0x180009FC0: "void __cdecl WSTFreeUserModeContext(struct _NEGOEXTS_UMODE_CONTEXT * __ptr64)" ?WSTFreeUserModeContext@@YAXPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x180018188: CRYPTBASE_NULL_THUNK_DATA
0x18001CA20: "unsigned long WSTGlobalExtenderActive" ?WSTGlobalExtenderActive@@3KA
0x180006C80: "long __cdecl NegoExtsMapLsaModeContext(struct _GUID * __ptr64,struct _SecBuffer * __ptr64,struct _SecBuffer * __ptr64)" ?NegoExtsMapLsaModeContext@@YAJPEAU_GUID@@PEAU_SecBuffer@@1@Z
0x180011C50: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl WSTContextByTargetTableCompare(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?WSTContextByTargetTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_GENERIC_TABLE@@PEAX1@Z
0x1800182F8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180018500: "__cdecl _xi_a" __xi_a
0x180018B48: WPP_33b3de1ffb1036610bb58eba370d98cd_Traceguids
0x1800182F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005268: "int __cdecl WSTIsExplicitCredentials(struct _SECPKG_CREDENTIAL * __ptr64)" ?WSTIsExplicitCredentials@@YAHPEAU_SECPKG_CREDENTIAL@@@Z
0x1800181B8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800189F0: WPP_b693eb923ad9398744bfc53ee8046ea9_Traceguids
0x180014D10: "private: long __cdecl basessp::BaseSSP::WSTPackCredentialsUnsafe(struct _SECPKG_SUPPLIED_CREDENTIAL * __ptr64,struct _UNICODE_STRING * __ptr64,struct basessp::_WST_CREDENTIAL * __ptr64 * __ptr64) __ptr64" ?WSTPackCredentialsUnsafe@BaseSSP@basessp@@AEAAJPEAU_SECPKG_SUPPLIED_CREDENTIAL@@PEAU_UNICODE_STRING@@PEAPEAU_WST_CREDENTIAL@2@@Z
0x180018818: "NegoExtender" ??_C@_1BK@JDEFAMH@?$AAN?$AAe?$AAg?$AAo?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x18000759C: "void __cdecl WSTFreeWstMessage(struct _WST_MESSAGE * __ptr64)" ?WSTFreeWstMessage@@YAXPEAU_WST_MESSAGE@@@Z
0x180018408: "__cdecl _imp_RtlNumberGenericTableElementsAvl" __imp_RtlNumberGenericTableElementsAvl
0x180018340: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180022090: "__cdecl _imp_CDLocateCSystem" __imp_CDLocateCSystem
0x180010ED4: WPP_SF_dD
0x180006344: WPP_SF_dd
0x180006344: WPP_SF_DD
0x180006344: WPP_SF_Dd
0x180006264: WPP_SF_DZ
0x180004A90: WPP_SF_Dq
0x18001CA10: "struct _LIST_ENTRY WSTGlobalPkgList" ?WSTGlobalPkgList@@3U_LIST_ENTRY@@A
0x18001C000: WPP_GLOBAL_Control
0x1800095D8: "void __cdecl WSTWaitCleanup(void)" ?WSTWaitCleanup@@YAXXZ
0x180018BFC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001A88C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180018230: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180010A10: "void __cdecl WSTTableFree(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64)" ?WSTTableFree@@YAXPEAU_RTL_GENERIC_TABLE@@PEAX@Z
0x18001A424: "__cdecl _DELAY_IMPORT_DESCRIPTOR_cryptdll_dll" __DELAY_IMPORT_DESCRIPTOR_cryptdll_dll
0x180004A54: WPP_SF_d
0x180004A54: WPP_SF_D
0x18001C7A0: "__cdecl pRawDllMain" _pRawDllMain
0x180011DAC: "long __cdecl WSTContextTableInsertExNoLock(struct _RTL_GENERIC_TABLE * __ptr64,unsigned __int64,struct _WST_CONTEXT * __ptr64)" ?WSTContextTableInsertExNoLock@@YAJPEAU_RTL_GENERIC_TABLE@@_KPEAU_WST_CONTEXT@@@Z
0x180010500: "unsigned long __cdecl WSTScavengerCleanupStaleContexts(void * __ptr64)" ?WSTScavengerCleanupStaleContexts@@YAKPEAX@Z
0x18001CAD0: "struct basessp::_WST_LIST * NegoExtsGlobalUserModeContextList" ?NegoExtsGlobalUserModeContextList@@3PAU_WST_LIST@basessp@@A
0x1800152B8: "private: long __cdecl basessp::BaseSSP::WSTProcessCertCredentials(struct _LUID * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTProcessCertCredentials@BaseSSP@basessp@@AEAAJPEAU_LUID@@PEAU_UNICODE_STRING@@1111PEAPEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@PEAK@Z
0x18000DC7C: "long __cdecl WSTProcessInitialHelloMessage(struct _SecBuffer * __ptr64,struct _WST_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WSTProcessInitialHelloMessage@@YAJPEAU_SecBuffer@@PEAU_WST_CONTEXT@@PEAK@Z
0x180018468: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x1800036D6: "__cdecl _imp_load_CDLocateCSystem" __imp_load_CDLocateCSystem
0x1800184D0: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x180018A80: SEC_WINNT_AUTH_DATA_TYPE_CSP_DATA
0x1800183A8: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180003150: "__cdecl _security_check_cookie" __security_check_cookie
0x1800184F8: "__cdecl _xc_z" __xc_z
0x180018BE8: WPP_77c3d0f02f4b308985534b5b4d9aa978_Traceguids
0x18001C768: "__cdecl _hmod__api_ms_win_security_credentials_l1_1_0_dll" __hmod__api_ms_win_security_credentials_l1_1_0_dll
0x180007860: "long __cdecl WSTResuscitateContextByConversationId(struct _GUID * __ptr64,struct _WST_CONTEXT * __ptr64 * __ptr64)" ?WSTResuscitateContextByConversationId@@YAJPEAU_GUID@@PEAPEAU_WST_CONTEXT@@@Z
0x18001A7EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180018278: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800187A8: "ClientExpiry" ??_C@_1BK@JGHGIIPL@?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAE?$AAx?$AAp?$AAi?$AAr?$AAy?$AA?$AA@
0x180011AAC: "int __cdecl WSTCompareContexts(struct _WST_CONTEXT * __ptr64,struct _WST_CONTEXT * __ptr64)" ?WSTCompareContexts@@YAHPEAU_WST_CONTEXT@@0@Z
0x180017608: "long __cdecl basessp::_DecodePin(void * __ptr64 (__cdecl*)(unsigned __int64),void (__cdecl*)(void * __ptr64),unsigned short * __ptr64,void * __ptr64,struct _UNICODE_STRING * __ptr64)" ?_DecodePin@basessp@@YAJP6APEAX_K@ZP6AXPEAX@ZPEAG2PEAU_UNICODE_STRING@@@Z
0x180010264: "void __cdecl WSTRemoveAuthScheme(struct _GUID * __ptr64,unsigned short * __ptr64,struct _GUID * __ptr64)" ?WSTRemoveAuthScheme@@YAXPEAU_GUID@@PEAG0@Z
0x180007BE4: WppCleanupUm
0x180018D28: "0x%08x %s:%u : %s:%u" ??_C@_0BF@LEDBDHCD@0x?$CF08x?5?$CFs?3?$CFu?5?3?5?$CFs?3?$CFu?$AA@
0x18000A470: "long __cdecl WSTInsertUserModeContext(struct _NEGOEXTS_UMODE_CONTEXT * __ptr64)" ?WSTInsertUserModeContext@@YAJPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x180011BDC: "long __cdecl WSTContextByPointerTableInsert(struct _WST_CONTEXT * __ptr64)" ?WSTContextByPointerTableInsert@@YAJPEAU_WST_CONTEXT@@@Z
0x1800125A0: WPP_SF_DDq
0x180002950: "public: long __cdecl basessp::BaseSSP::WSTDuplicateStringEx(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char) __ptr64" ?WSTDuplicateStringEx@BaseSSP@basessp@@QEAAJPEAU_UNICODE_STRING@@0E@Z
0x1800036E2: "__cdecl _tailMerge_cryptdll_dll" __tailMerge_cryptdll_dll
0x1800182E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180018460: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x180018D00: "Invalid Message Type for Cloud A" ??_C@_0CI@DKAHDMFK@Invalid?5Message?5Type?5for?5Cloud?5A@
0x18001C750: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x1800181A8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180006BD4: "long __cdecl CredpExtractMarshalledTargetInfo(struct _UNICODE_STRING * __ptr64,struct _CREDENTIAL_TARGET_INFORMATIONW * __ptr64 * __ptr64)" ?CredpExtractMarshalledTargetInfo@@YAJPEAU_UNICODE_STRING@@PEAPEAU_CREDENTIAL_TARGET_INFORMATIONW@@@Z
0x180018920: "onecore\ds\security\protocols\ne" ??_C@_0DD@NDDCJIMG@onecore?2ds?2security?2protocols?2ne@
0x18001C888: "struct _RTL_CRITICAL_SECTION WSTGlobalContextByPointerTableLock" ?WSTGlobalContextByPointerTableLock@@3U_RTL_CRITICAL_SECTION@@A
0x180003A90: "__cdecl _chkstk" __chkstk
0x180018AA0: WPP_a4c0db7badd83832d5525e2ec0ff6487_Traceguids
0x180003603: "__cdecl _imp_load_CredUnmarshalTargetInfo" __imp_load_CredUnmarshalTargetInfo
0x1800065E8: WPP_SF_qDDZ
0x180009C44: "long __cdecl WSTAllocateUserModeContext(struct _NEGOEXTS_UMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTAllocateUserModeContext@@YAJPEAPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x180018490: "__cdecl _imp_RtlDeleteElementGenericTable" __imp_RtlDeleteElementGenericTable
0x18001C8E0: "struct _RTL_GENERIC_TABLE WSTGlobalContextByPointerTable" ?WSTGlobalContextByPointerTable@@3U_RTL_GENERIC_TABLE@@A
0x180018C00: "MY" ??_C@_15ELPOAHMG@?$AAM?$AAY?$AA?$AA@
0x180001BC0: "long __cdecl SpGetInfo(struct _SecPkgInfoW * __ptr64)" ?SpGetInfo@@YAJPEAU_SecPkgInfoW@@@Z
0x18001CA38: "struct _UNICODE_STRING WSTGlobalPackageName" ?WSTGlobalPackageName@@3U_UNICODE_STRING@@A
0x1800182C8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180018780: "ScavengerInterval" ??_C@_1CE@IHDPBDIG@?$AAS?$AAc?$AAa?$AAv?$AAe?$AAn?$AAg?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1800122F8: "struct _WST_CONTEXT * __ptr64 __cdecl WSTLocateContextByTargetName(struct _UNICODE_STRING * __ptr64,struct _LUID * __ptr64)" ?WSTLocateContextByTargetName@@YAPEAU_WST_CONTEXT@@PEAU_UNICODE_STRING@@PEAU_LUID@@@Z
0x18001C770: "__cdecl _hmod__api_ms_win_security_credentials_l2_1_0_dll" __hmod__api_ms_win_security_credentials_l2_1_0_dll
0x180006D4C: "long __cdecl SspiGetTargetHostName(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?SspiGetTargetHostName@@YAJPEAU_UNICODE_STRING@@0@Z
0x180001C00: "long __cdecl SpShutdown(void)" ?SpShutdown@@YAJXZ
0x18001A864: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800010F0: "public: long __cdecl basessp::BaseSSP::SpAcquireCredentialsHandle(struct _UNICODE_STRING * __ptr64,unsigned long,struct _LUID * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64 * __ptr64,union _LARGE_INTEGER * __ptr64) __ptr64" ?SpAcquireCredentialsHandle@BaseSSP@basessp@@QEAAJPEAU_UNICODE_STRING@@KPEAU_LUID@@PEAX22PEA_KPEAT_LARGE_INTEGER@@@Z
0x18000CDA0: "struct _WST_ACTIVE_ENGINE_CONTEXT * __ptr64 __cdecl WSTGetActiveContextByAuthScheme(struct _WST_CONTEXT * __ptr64,struct _GUID * __ptr64)" ?WSTGetActiveContextByAuthScheme@@YAPEAU_WST_ACTIVE_ENGINE_CONTEXT@@PEAU_WST_CONTEXT@@PEAU_GUID@@@Z
0x18001C808: "long WSTGlobalCounter" ?WSTGlobalCounter@@3JA
0x180018288: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180018518: "__cdecl _guard_fids_table" __guard_fids_table
0x1800183B8: msvcrt_NULL_THUNK_DATA
0x18001A940: "__cdecl _IMPORT_DESCRIPTOR_CRYPTSP" __IMPORT_DESCRIPTOR_CRYPTSP
0x180018010: "__cdecl load_config_used" _load_config_used
0x18001687C: "public: void * __ptr64 __cdecl basessp::BaseSSP::WSTAllocate(unsigned __int64) __ptr64" ?WSTAllocate@BaseSSP@basessp@@QEAAPEAX_K@Z
0x18001A4E8: SspiCli_NULL_THUNK_DATA_DLN
0x180022068: "__cdecl _imp_CredIsMarshaledCredentialW" __imp_CredIsMarshaledCredentialW
0x18001C800: "unsigned __int64 NegoExtsGlobalWillNever" ?NegoExtsGlobalWillNever@@3_KA
0x180015990: "private: long __cdecl basessp::BaseSSP::WSTProcessEncodedPackedCredentials(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long * __ptr64,struct _UNICODE_STRING * __ptr64,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTProcessEncodedPackedCredentials@BaseSSP@basessp@@AEAAJPEAU_UNICODE_STRING@@000PEAK0PEAPEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@1@Z
0x18000F07C: "long __cdecl WSTProcessResponse(struct _SecBuffer * __ptr64,int,struct _WST_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WSTProcessResponse@@YAJPEAU_SecBuffer@@HPEAU_WST_CONTEXT@@PEAK@Z
0x1800181C0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1800181B0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180009B94: "long __cdecl NegoExtsMapContextData(struct _SecBuffer * __ptr64,unsigned long,struct _SecBuffer * __ptr64)" ?NegoExtsMapContextData@@YAJPEAU_SecBuffer@@K0@Z
0x180022050: "__cdecl _imp_CredUnmarshalCredentialW" __imp_CredUnmarshalCredentialW
0x18001A8DC: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x1800183F8: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x180018CE8: "Invalid Buffer length" ??_C@_0BG@PKKBLKLL@Invalid?5Buffer?5length?$AA@
0x1800144A0: "private: long __cdecl basessp::BaseSSP::WSTCheckUserNameCredential(struct _LUID * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64 * __ptr64) __ptr64" ?WSTCheckUserNameCredential@BaseSSP@basessp@@AEAAJPEAU_LUID@@PEAU_UNICODE_STRING@@111PEAPEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@@Z
0x180016D84: "void __cdecl basessp::WSTLowerCase(unsigned char * __ptr64,unsigned long)" ?WSTLowerCase@basessp@@YAXPEAEK@Z
0x180018B00: "onecore\ds\security\protocols\ne" ??_C@_0DD@GPCABGFL@onecore?2ds?2security?2protocols?2ne@
0x18001A814: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180004C60: "long __cdecl SpDeleteContext(unsigned __int64)" ?SpDeleteContext@@YAJ_K@Z
0x180012080: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl WSTGlobalContextByPointerTableCompare(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?WSTGlobalContextByPointerTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_GENERIC_TABLE@@PEAX1@Z
0x180018370: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800113E4: WPP_SF_ddZdqZ
0x180006A9C: WPP_SF_qdDDZq
0x180018208: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180018478: "__cdecl _imp_NtClose" __imp_NtClose
0x180022010: "__cdecl _imp_LsaIRegisterNotification" __imp_LsaIRegisterNotification
0x1800149A8: "private: long __cdecl basessp::BaseSSP::WSTCreateCertLogonBuffer(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTCreateCertLogonBuffer@BaseSSP@basessp@@AEAAJPEAU_UNICODE_STRING@@00PEAEKKPEAPEAXPEAK@Z
0x18000CE2C: "long __cdecl WSTParseMessages(unsigned char * __ptr64,unsigned long,int,int,struct _WST_CONTEXT * __ptr64 * __ptr64)" ?WSTParseMessages@@YAJPEAEKHHPEAPEAU_WST_CONTEXT@@@Z
0x1800182B8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006DE8: "long __cdecl WSTAllocateActiveEngineContext(struct _WST_SSP_PACKAGE * __ptr64,unsigned __int64,struct _WST_ACTIVE_ENGINE_CONTEXT * __ptr64 * __ptr64)" ?WSTAllocateActiveEngineContext@@YAJPEAU_WST_SSP_PACKAGE@@_KPEAPEAU_WST_ACTIVE_ENGINE_CONTEXT@@@Z
0x180018280: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000697C: WPP_SF_qdDDZ
0x180022088: "__cdecl _imp_CDLocateCheckSum" __imp_CDLocateCheckSum
0x180016C88: "public: long __cdecl basessp::BaseSSP::WSTDuplicateStringFromString(struct _UNICODE_STRING * __ptr64,unsigned short * __ptr64) __ptr64" ?WSTDuplicateStringFromString@BaseSSP@basessp@@QEAAJPEAU_UNICODE_STRING@@PEAG@Z
0x180012664: WPP_SF_qqDDZ
0x1800183C0: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x1800075E8: "long __cdecl WSTGetTargetHostName(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?WSTGetTargetHostName@@YAJPEAU_UNICODE_STRING@@0@Z
0x180018218: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180009674: "void __cdecl WSTFreePackages(unsigned long * __ptr64,struct _WST_SSP_PACKAGE * __ptr64 * __ptr64)" ?WSTFreePackages@@YAXPEAKPEAPEAU_WST_SSP_PACKAGE@@@Z
0x18000961C: "void __cdecl WSTFreePackage(struct _WST_SSP_PACKAGE * __ptr64)" ?WSTFreePackage@@YAXPEAU_WST_SSP_PACKAGE@@@Z
0x180022058: "__cdecl _imp_CredUnprotectW" __imp_CredUnprotectW
0x180018488: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x18000A780: "long __cdecl SpExportSecurityContext(unsigned __int64,unsigned long,struct _SecBuffer * __ptr64,void * __ptr64 * __ptr64)" ?SpExportSecurityContext@@YAJ_KKPEAU_SecBuffer@@PEAPEAX@Z
0x1800184C0: "__cdecl _imp_RtlIpv6StringToAddressExW" __imp_RtlIpv6StringToAddressExW
0x180018228: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x1800187C8: "ServerExpiry" ??_C@_1BK@KHOJLHHO@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAE?$AAx?$AAp?$AAi?$AAr?$AAy?$AA?$AA@
0x1800168E8: "private: long __cdecl basessp::BaseSSP::WSTCopyClientString(void * __ptr64,unsigned long,unsigned char,struct _UNICODE_STRING * __ptr64,unsigned long) __ptr64" ?WSTCopyClientString@BaseSSP@basessp@@AEAAJPEAXKEPEAU_UNICODE_STRING@@K@Z
0x1800182B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000B0F8: "long __cdecl WSTAddAlertMessage(struct _WST_CONTEXT * __ptr64,struct _GUID * __ptr64)" ?WSTAddAlertMessage@@YAJPEAU_WST_CONTEXT@@PEAU_GUID@@@Z
0x180009DEC: "long __cdecl WSTDeleteUserModeContext(unsigned __int64)" ?WSTDeleteUserModeContext@@YAJ_K@Z
0x180018D98: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18001032C: "long __cdecl WSTRetrieveSessionKeys(struct _WST_ACTIVE_ENGINE_CONTEXT * __ptr64)" ?WSTRetrieveSessionKeys@@YAJPEAU_WST_ACTIVE_ENGINE_CONTEXT@@@Z
0x18000651C: WPP_SF_ddsd
0x18001211C: "struct _WST_CONTEXT * __ptr64 __cdecl WSTLocateContextByHostName(struct _UNICODE_STRING * __ptr64,struct _LUID * __ptr64)" ?WSTLocateContextByHostName@@YAPEAU_WST_CONTEXT@@PEAU_UNICODE_STRING@@PEAU_LUID@@@Z
0x180003550: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180018238: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180003A36: memcmp
0x180007100: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl WSTContextTableCompare(struct _RTL_GENERIC_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?WSTContextTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_GENERIC_TABLE@@PEAX1@Z
0x18000A074: "long __cdecl WSTGetContextToken(unsigned __int64,void * __ptr64 * __ptr64)" ?WSTGetContextToken@@YAJ_KPEAPEAX@Z
0x180018398: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180012854: "private: long __cdecl basessp::BaseSSP::WSTBuildSCLogonInfo(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WSTBuildSCLogonInfo@BaseSSP@basessp@@AEAAJPEAG000KPEAPEAEPEAK@Z
0x1800183E0: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x180018C28: WPP_8835c56bb07539ba8d17d35bc917f3b6_Traceguids
0x18000AA30: "long __cdecl SpInstanceInit(unsigned long,struct _SECPKG_DLL_FUNCTIONS * __ptr64,void * __ptr64 * __ptr64)" ?SpInstanceInit@@YAJKPEAU_SECPKG_DLL_FUNCTIONS@@PEAPEAX@Z
0x180018498: "__cdecl _imp_RtlEnumerateGenericTable" __imp_RtlEnumerateGenericTable
0x180003337: wcschr
0x1800188F0: "__cdecl _sz_api_ms_win_security_credentials_l2_1_0_dll" __sz_api_ms_win_security_credentials_l2_1_0_dll
0x180016A18: "private: long __cdecl basessp::BaseSSP::WSTDecodeSecret(unsigned short * __ptr64,void * __ptr64,struct _UNICODE_STRING * __ptr64) __ptr64" ?WSTDecodeSecret@BaseSSP@basessp@@AEAAJPEAGPEAXPEAU_UNICODE_STRING@@@Z
0x18001C7A8: g_ulMaxStackAllocSize
0x18001A518: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLN
0x18001A710: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLB
0x180022070: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLA
0x1800181F8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18001680C: "public: void * __ptr64 __cdecl basessp::BaseSSP::WSTAllocate2(unsigned __int64) __ptr64" ?WSTAllocate2@BaseSSP@basessp@@QEAAPEAX_K@Z
0x180016FFC: "long __cdecl basessp::WSTConvertLegacySCardBufferToEx2PackedCreds(void * __ptr64 (__cdecl*)(unsigned __int64),void (__cdecl*)(void * __ptr64),void * __ptr64,void * __ptr64,unsigned long,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64 * __ptr64)" ?WSTConvertLegacySCardBufferToEx2PackedCreds@basessp@@YAJP6APEAX_K@ZP6AXPEAX@Z22KPEAPEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@@Z
0x1800188C0: "__cdecl _sz_api_ms_win_security_credentials_l1_1_0_dll" __sz_api_ms_win_security_credentials_l1_1_0_dll
0x18001A528: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLN
0x180022080: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLA
0x18001A740: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLB
0x180018330: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18001A3E4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x18001CA60: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUmvtlvcghUwooUlyquivUznwGEUkivxlnkOlyq@negoexts" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUmvtlvcghUwooUlyquivUznwGEUkivxlnkOlyq@negoexts
0x1800183C8: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18001C010: "struct _SECPKG_FUNCTION_TABLE WSTGlobalFunctionTable" ?WSTGlobalFunctionTable@@3U_SECPKG_FUNCTION_TABLE@@A
0x180018378: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180001C10: "void __cdecl WSTInitDebugSupport(void)" ?WSTInitDebugSupport@@YAXXZ
0x180018448: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x18001A464: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll
0x1800184D8: ntdll_NULL_THUNK_DATA
0x180018348: "__cdecl _imp_memcpy" __imp_memcpy
0x180007D80: "long __cdecl WSTFlushContext(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?WSTFlushContext@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x180017324: "long __cdecl basessp::_CreateSmartcardEx2PackedCreds(void * __ptr64 (__cdecl*)(unsigned __int64),void (__cdecl*)(void * __ptr64),struct _UNICODE_STRING * __ptr64,struct _KERB_CERTIFICATE_LOGON * __ptr64,struct _SEC_WINNT_AUTH_PACKED_CREDENTIALS * __ptr64 * __ptr64)" ?_CreateSmartcardEx2PackedCreds@basessp@@YAJP6APEAX_K@ZP6AXPEAX@ZPEAU_UNICODE_STRING@@PEAU_KERB_CERTIFICATE_LOGON@@PEAPEAU_SEC_WINNT_AUTH_PACKED_CREDENTIALS@@@Z
0x1800166D0: WPP_SF_ddd
0x180010E74: WPP_SF_Ddd
0x18000948C: WPP_SF_qDq
0x180018B58: "onecore\ds\security\protocols\ne" ??_C@_0DC@PDNGGPEM@onecore?2ds?2security?2protocols?2ne@
0x18000A65C: WPP_SF_Dsd
0x1800117D4: WPP_SF_qZdZ_HEX_
0x18001CA50: "struct _SECPKG_DLL_FUNCTIONS * __ptr64 __ptr64 NegoExtsGlobaDllFunctions" ?NegoExtsGlobaDllFunctions@@3PEAU_SECPKG_DLL_FUNCTIONS@@EA
0x180018310: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180014B58: "private: long __cdecl basessp::BaseSSP::WSTGetCspDataForCert(struct _CERT_CONTEXT const * __ptr64,struct basessp::_WST_CSPDATA_DETAIL * __ptr64) __ptr64" ?WSTGetCspDataForCert@BaseSSP@basessp@@AEAAJPEBU_CERT_CONTEXT@@PEAU_WST_CSPDATA_DETAIL@2@@Z
0x18001102C: WPP_SF_dZDq
0x1800112D8: WPP_SF_dZdq
0x180018300: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18001C1B8: "__cdecl _security_cookie" __security_cookie
0x1800182A0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000A840: "long __cdecl SpGetContextToken(unsigned __int64,void * __ptr64 * __ptr64)" ?SpGetContextToken@@YAJ_KPEAPEAX@Z
0x180010B4C: WPP_SF_DDdZ
0x180010F24: WPP_SF_dDdZ
0x18001C7B8: g_pfnAllocate
0x180003A90: "__cdecl alloca_probe" _alloca_probe
0x180010908: "struct _WST_ACTIVE_ENGINE_CONTEXT * __ptr64 __cdecl WSTSelectAuthSchemeFromContext(struct _WST_CONTEXT * __ptr64)" ?WSTSelectAuthSchemeFromContext@@YAPEAU_WST_ACTIVE_ENGINE_CONTEXT@@PEAU_WST_CONTEXT@@@Z
0x180003621: "__cdecl _tailMerge_lsasrv_dll" __tailMerge_lsasrv_dll
0x180002BD0: "unsigned long __cdecl WSTWatchPolicy(void * __ptr64)" ?WSTWatchPolicy@@YAKPEAX@Z
0x180007F50: "long __cdecl WSTGetCredUIContext(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?WSTGetCredUIContext@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x1800181E8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18001209C: "struct _WST_CONTEXT * __ptr64 __cdecl WSTLocateAndReferenceContextByPointer(void * __ptr64,struct _LUID * __ptr64)" ?WSTLocateAndReferenceContextByPointer@@YAPEAU_WST_CONTEXT@@PEAXPEAU_LUID@@@Z
0x180018630: "negoexts" ??_C@_1BC@DHIOGJNO@?$AAn?$AAe?$AAg?$AAo?$AAe?$AAx?$AAt?$AAs?$AA?$AA@
0x18001C7D0: "union _LARGE_INTEGER basessp::WSTGlobalForever" ?WSTGlobalForever@basessp@@3T_LARGE_INTEGER@@A
0x18001A878: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180018CD8: "RtlULongAdd" ??_C@_0M@JOEIOAGL@RtlULongAdd?$AA@
0x180018B38: WPP_c0a49628348931a6c5615165814a26c2_Traceguids
0x180018440: "__cdecl _imp_RtlInsertElementGenericTable" __imp_RtlInsertElementGenericTable
0x18001C780: "__cdecl _onexitbegin" __onexitbegin
0x180018A70: SEC_WINNT_AUTH_DATA_TYPE_NGC
0x18000659C: WPP_SF_qD
0x180006928: WPP_SF_qd
0x180006E6C: "long __cdecl WSTAllocateContext(int,struct _UNICODE_STRING * __ptr64,unsigned long,struct _WST_CONTEXT * __ptr64 * __ptr64)" ?WSTAllocateContext@@YAJHPEAU_UNICODE_STRING@@KPEAPEAU_WST_CONTEXT@@@Z
0x1800181D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180012604: WPP_SF_qq
0x18000A8E0: "long __cdecl SpImportSecurityContext(struct _SecBuffer * __ptr64,void * __ptr64,unsigned __int64 * __ptr64)" ?SpImportSecurityContext@@YAJPEAU_SecBuffer@@PEAXPEA_K@Z
0x180018290: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000A990: "long __cdecl SpInitUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64)" ?SpInitUserModeContext@@YAJ_KPEAU_SecBuffer@@@Z
0x18001C9B0: "struct _RTL_RESOURCE WSTGlobalLoaderLock" ?WSTGlobalLoaderLock@@3U_RTL_RESOURCE@@A
0x180018428: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x180016D10: "public: void __cdecl basessp::BaseSSP::WSTFree(void * __ptr64) __ptr64" ?WSTFree@BaseSSP@basessp@@QEAAXPEAX@Z
0x180003464: "__cdecl _security_init_cookie" __security_init_cookie
0x180004ADC: WPP_SF_q
0x1800181A0: CRYPTSP_NULL_THUNK_DATA
0x180018D60: "_CreateSmartcardEx2PackedCreds" ??_C@_0BP@JKLCPIHG@_CreateSmartcardEx2PackedCreds?$AA@
0x18000AAA0: "long __cdecl SpMakeSignature(unsigned __int64,unsigned long,struct _SecBufferDesc * __ptr64,unsigned long)" ?SpMakeSignature@@YAJ_KKPEAU_SecBufferDesc@@K@Z
0x1800109F0: "void * __ptr64 __cdecl WSTTableAllocate(struct _RTL_GENERIC_TABLE * __ptr64,unsigned long)" ?WSTTableAllocate@@YAPEAXPEAU_RTL_GENERIC_TABLE@@K@Z
0x18001C7C0: g_pfnFree
0x1800187E8: "Active" ??_C@_1O@EMLLFJNI@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x18001A7C4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800018F0: "void __cdecl LsaApLogonTerminated(struct _LUID * __ptr64)" ?LsaApLogonTerminated@@YAXPEAU_LUID@@@Z
0x180001D60: "long __cdecl LsaApLogonUserEx2(void * __ptr64 * __ptr64,enum _SECURITY_LOGON_TYPE,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,struct _LUID * __ptr64,long * __ptr64,enum _LSA_TOKEN_INFORMATION_TYPE * __ptr64,void * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64 * __ptr64,struct _SECPKG_PRIMARY_CRED * __ptr64,struct _SECPKG_SUPPLEMENTAL_CRED_ARRAY * __ptr64 * __ptr64)" ?LsaApLogonUserEx2@@YAJPEAPEAXW4_SECURITY_LOGON_TYPE@@PEAX2K0PEAKPEAU_LUID@@PEAJPEAW4_LSA_TOKEN_INFORMATION_TYPE@@0PEAPEAU_UNICODE_STRING@@77PEAU_SECPKG_PRIMARY_CRED@@PEAPEAU_SECPKG_SUPPLEMENTAL_CRED_ARRAY@@@Z
0x180007CD0: "long __cdecl LsaApCallPackage(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackage@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x180018388: "__cdecl _imp_malloc" __imp_malloc
0x18001C930: "struct _RTL_GENERIC_TABLE WSTGlobalContextByTargetTable" ?WSTGlobalContextByTargetTable@@3U_RTL_GENERIC_TABLE@@A
0x180010A30: WPP_SF_DDDdZ
0x180011138: WPP_SF_dZddZ
0x1800015B0: "private: long __cdecl basessp::BaseSSP::WSTCredTableDelete(struct basessp::_WST_CREDENTIAL * __ptr64) __ptr64" ?WSTCredTableDelete@BaseSSP@basessp@@AEAAJPEAU_WST_CREDENTIAL@2@@Z
0x180018438: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x180016D54: "public: void __cdecl basessp::BaseSSP::WSTFreeString(struct _UNICODE_STRING * __ptr64) __ptr64" ?WSTFreeString@BaseSSP@basessp@@QEAAXPEAU_UNICODE_STRING@@@Z
0x180001B70: "void * __ptr64 __cdecl basessp::WSTTableAllocate(struct _RTL_AVL_TABLE * __ptr64,unsigned long)" ?WSTTableAllocate@basessp@@YAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x18001CA4C: "unsigned long WSTGlobalClientExpiration" ?WSTGlobalClientExpiration@@3KA
0x1800031C0: "__cdecl _report_gsfailure" __report_gsfailure
0x180003834: "__cdecl _imp_load_CredUnprotectW" __imp_load_CredUnprotectW
0x1800187F8: "MaxTokenSize" ??_C@_1BK@BMAFFMMB@?$AAM?$AAa?$AAx?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18001507C: "private: long __cdecl basessp::BaseSSP::WSTParseHintsFromDomainName(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64) __ptr64" ?WSTParseHintsFromDomainName@BaseSSP@basessp@@AEAAJPEAU_UNICODE_STRING@@00@Z
0x180016C7C: "public: long __cdecl basessp::BaseSSP::WSTDuplicateString(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64) __ptr64" ?WSTDuplicateString@BaseSSP@basessp@@QEAAJPEAU_UNICODE_STRING@@0@Z
0x180001AF0: "long __cdecl SpFreeCredentialsHandle(unsigned __int64)" ?SpFreeCredentialsHandle@@YAJ_K@Z
0x18001C7E8: "void * __ptr64 __ptr64 WSTGlobalLsaNotification" ?WSTGlobalLsaNotification@@3PEAXEA
0x180001DE0: "long __cdecl SpInitialize(unsigned __int64,struct _SECPKG_PARAMETERS * __ptr64,struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64)" ?SpInitialize@@YAJ_KPEAU_SECPKG_PARAMETERS@@PEAU_LSA_SECPKG_FUNCTION_TABLE@@@Z
0x18001C790: "__cdecl _native_startup_state" __native_startup_state
0x180011B50: "long __cdecl WSTContextByPointerTableDelete(struct _WST_CONTEXT * __ptr64)" ?WSTContextByPointerTableDelete@@YAJPEAU_WST_CONTEXT@@@Z
0x1800036C4: "__cdecl _imp_load_SspiDecryptAuthIdentityEx" __imp_load_SspiDecryptAuthIdentityEx
0x180018148: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x1800102B8: "void __cdecl WSTRemoveAuthSchemeFromArray(struct _GUID * __ptr64,unsigned short * __ptr64,unsigned long)" ?WSTRemoveAuthSchemeFromArray@@YAXPEAU_GUID@@PEAGK@Z
0x1800184B0: "__cdecl _imp_RtlInitializeGenericTable" __imp_RtlInitializeGenericTable
0x18000B490: "void * __ptr64 __cdecl WSTAllocate(unsigned __int64)" ?WSTAllocate@@YAPEAX_K@Z
0x18000B22C: "long __cdecl WSTAddMetaDataMessage(struct _WST_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long,struct _GUID * __ptr64)" ?WSTAddMetaDataMessage@@YAJPEAU_WST_CONTEXT@@PEAEKPEAU_GUID@@@Z
0x18001C840: "struct _RTL_GENERIC_TABLE WSTGlobalZombieContextTable" ?WSTGlobalZombieContextTable@@3U_RTL_GENERIC_TABLE@@A
0x180009560: "long __cdecl SpSetContextAttributes(unsigned __int64,unsigned long,void * __ptr64,unsigned long)" ?SpSetContextAttributes@@YAJ_KKPEAXK@Z
0x18001796C: InternalVerifyStackAvailable
0x18001A904: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180018450: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x180018CB0: "AllocateLsaHeap" ??_C@_0BA@FOLJDFBD@AllocateLsaHeap?$AA@
0x180002340: "void __cdecl WSTGetRegParamsEx(int)" ?WSTGetRegParamsEx@@YAXH@Z
0x180022008: "__cdecl _imp_LsaICancelNotification" __imp_LsaICancelNotification
0x18001C7F8: "unsigned long WSTGlobalPkgCount" ?WSTGlobalPkgCount@@3KA
0x180001810: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl basessp::WSTCredTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?WSTCredTableCompare@basessp@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x1800183D0: "__cdecl _imp_NtDuplicateObject" __imp_NtDuplicateObject
0x180018650: "Software\Microsoft\Windows\Curre" ??_C@_1KE@CPGHBEEA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18001A444: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll
0x18001A8A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000CC28: "long __cdecl WSTExtractMessagesToSend(struct _WST_CONTEXT * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?WSTExtractMessagesToSend@@YAJPEAU_WST_CONTEXT@@PEAPEAEPEAK@Z
0x1800167BC: WPP_SF_sd
0x180018368: "__cdecl _imp_free" __imp_free
0x1800184A8: "__cdecl _imp_RtlNumberGenericTableElements" __imp_RtlNumberGenericTableElements
0x1800033D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800182D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180018AD4: "" ??_C@_13DOGEFHNA@?$AA?$AO?$AA?$AA@
0x180011D58: "long __cdecl WSTContextByTargetTableInsertEx(unsigned __int64,struct _WST_CONTEXT * __ptr64)" ?WSTContextByTargetTableInsertEx@@YAJ_KPEAU_WST_CONTEXT@@@Z
0x18000A510: "long __cdecl WSTReferenceUserModeContextByLsaHandle(unsigned __int64,unsigned char,struct _NEGOEXTS_UMODE_CONTEXT * __ptr64 * __ptr64)" ?WSTReferenceUserModeContextByLsaHandle@@YAJ_KEPEAPEAU_NEGOEXTS_UMODE_CONTEXT@@@Z
0x180018A90: SEC_WINNT_AUTH_DATA_TYPE_PASSWORD
0x180018430: "__cdecl _imp_RtlGetElementGenericTable" __imp_RtlGetElementGenericTable
0x18001A850: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180017904: WPP_SF_s
0x180003A4E: memset
0x18001A954: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]