Generated by JEB on 2019/08/01

PE: C:\Windows\System32\TSpkg.dll Base=0x180000000 SHA-256=B6D50B26DC1F00B493B4DBA6C6D9A800DF705862527E4FF15127FF71291DD428
PDB: TSpkg.pdb GUID={0024D7B8-1F0D-ED7D-C6586F315BC8C372} Age=1

1127 located named symbols:
0x18001CB40: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x18001D7D0: "AllowSavedCredentialsWhenNTLMOnl" ??_C@_1EE@JNFHPALL@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAa?$AAv?$AAe?$AAd?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AAW?$AAh?$AAe?$AAn?$AAN?$AAT?$AAL?$AAM?$AAO?$AAn?$AAl@
0x18000B3D8: "long __cdecl TSCheckUserNameForCert(struct _UNICODE_STRING * __ptr64,struct _CERT_CONTEXT * __ptr64 * __ptr64)" ?TSCheckUserNameForCert@@YAJPEAU_UNICODE_STRING@@PEAPEAU_CERT_CONTEXT@@@Z
0x1800040C4: ?EnsureCoalescedTimer_SetTimer@details@wil@@YAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@2@AEA_N_J@Z
0x180016F10: "long __cdecl TSUnicodeStringFromString(struct _UNICODE_STRING * __ptr64,unsigned short * __ptr64)" ?TSUnicodeStringFromString@@YAJPEAU_UNICODE_STRING@@PEAG@Z
0x180023BB8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x180001D74: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000258D: "__cdecl _imp_load_CryptGetProvParam" __imp_load_CryptGetProvParam
0x180007978: "public: bool __cdecl wil::details_abi::heap_buffer::push_back(void const * __ptr64,unsigned __int64) __ptr64" ?push_back@heap_buffer@details_abi@wil@@QEAA_NPEBX_K@Z
0x180023E08: "int (__cdecl* __ptr64 WTSVirtualChannelCloseFunc)(void * __ptr64)" ?WTSVirtualChannelCloseFunc@@3P6AHPEAX@ZEA
0x18001C5C8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1800064AC: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x18001CB08: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180002060: "__cdecl FindPESection" _FindPESection
0x18001D9C0: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x180027100: "__cdecl _imp_CredIsProtectedW" __imp_CredIsProtectedW
0x180006D30: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToUsageFlush(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64)) __ptr64" ?SubscribeToUsageFlush@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z@Z
0x180023DB8: "struct _RTL_CRITICAL_SECTION WTSVirtualChannelLoaderLock" ?WTSVirtualChannelLoaderLock@@3U_RTL_CRITICAL_SECTION@@A
0x180006E68: "public: void __cdecl wil::details_abi::RawUsageIndex::Swap(class wil::details_abi::RawUsageIndex & __ptr64) __ptr64" ?Swap@RawUsageIndex@details_abi@wil@@QEAAXAEAV123@@Z
0x18001C470: "__cdecl _imp_ASN1DecAlloc" __imp_ASN1DecAlloc
0x180006254: "void __cdecl wil::details::ReleaseMutex(void * __ptr64)" ?ReleaseMutex@details@wil@@YAXPEAX@Z
0x18001C910: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18001DA40: "onecore\ds\security\protocols\cr" ??_C@_0DI@HLMFOFIC@onecore?2ds?2security?2protocols?2cr@
0x18001C558: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x18001C6C8: "__cdecl _imp_GetCurrentDirectoryW" __imp_GetCurrentDirectoryW
0x180013088: "long __cdecl TSCreateUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64,struct _TS_CONTEXT * __ptr64 * __ptr64)" ?TSCreateUserModeContext@@YAJ_KPEAU_SecBuffer@@PEAPEAU_TS_CONTEXT@@@Z
0x18001B680: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18001CB60: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180020218: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800169F4: "long __cdecl TSParseHintsFromDomainName(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSParseHintsFromDomainName@@YAJPEAU_UNICODE_STRING@@00@Z
0x18001E010: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18001C698: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x18001DF90: "WTSVirtualChannelClose" ??_C@_0BH@LPKJGIB@WTSVirtualChannelClose?$AA@
0x180016B6C: "long __cdecl TSPublicKeyFromCert(struct _CERT_CONTEXT const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSPublicKeyFromCert@@YAJPEBU_CERT_CONTEXT@@PEAPEAEPEAK@Z
0x1800126F0: "long __cdecl SpLsaModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpLsaModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_FUNCTION_TABLE@@0@Z
0x18001CB50: "__cdecl _imp_RtlMapSecurityErrorToNtStatus" __imp_RtlMapSecurityErrorToNtStatus
0x1800238A8: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x1800148AC: "long __cdecl TSDecodeSecretU(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSDecodeSecretU@@YAJPEAU_UNICODE_STRING@@0@Z
0x180023240: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000F450: "long __cdecl SpInitLsaModeContext(unsigned __int64,unsigned __int64,struct _UNICODE_STRING * __ptr64,unsigned long,unsigned long,struct _SecBufferDesc * __ptr64,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpInitLsaModeContext@@YAJ_K0PEAU_UNICODE_STRING@@KKPEAU_SecBufferDesc@@PEA_K2PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x18001C9F8: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x180002753: "__cdecl _imp_load_LsaICancelNotification" __imp_load_LsaICancelNotification
0x18001CF68: "WilStaging_02" ??_C@_0O@BKMDNGIM@WilStaging_02?$AA@
0x180027038: "__cdecl _imp_CertCreateCertificateContext" __imp_CertCreateCertificateContext
0x180017D70: "long __cdecl TSInitRedirectedLogon(void * __ptr64,struct _UNICODE_STRING const * __ptr64,unsigned long,struct _LUID const * __ptr64)" ?TSInitRedirectedLogon@@YAJPEAXPEBU_UNICODE_STRING@@KPEBU_LUID@@@Z
0x1800270B0: "__cdecl _imp_LsaIGetRemoteCredGuardLogonBuffer" __imp_LsaIGetRemoteCredGuardLogonBuffer
0x18000186C: "__cdecl CRT_INIT" _CRT_INIT
0x1800072BC: "public: void __cdecl wil::details_abi::UsageIndexProperty::UpdateCount(unsigned int) __ptr64" ?UpdateCount@UsageIndexProperty@details_abi@wil@@QEAAXI@Z
0x18001C6F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800077E8: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x18000DCD8: "long __cdecl TSUnpackCredEx(struct _LUID * __ptr64,void * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSUnpackCredEx@@YAJPEAU_LUID@@PEAXPEAPEAU_TS_PRIMARY_CREDENTIAL@@PEAK@Z
0x18001C908: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA
0x1800035F0: "public: __cdecl wil::details_abi::SubscriptionList::SubscriptionList(void) __ptr64" ??0SubscriptionList@details_abi@wil@@QEAA@XZ
0x180007948: "public: bool __cdecl wil::details_abi::heap_buffer::ensure(unsigned __int64) __ptr64" ?ensure@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x18000227D: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180016F5C: "long __cdecl TSUnicodeStringToString(unsigned short * __ptr64 * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSUnicodeStringToString@@YAJPEAPEAGPEAU_UNICODE_STRING@@@Z
0x180005528: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x18001DF20: "CredSSP Server-To-Client Binding" ??_C@_0CG@EPEPBFE@CredSSP?5Server?9To?9Client?5Binding@
0x18001CB70: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180023DA8: "int TSGLobalIsInitialized" ?TSGLobalIsInitialized@@3HA
0x1800123D0: WppControlCallback
0x180012580: "long __cdecl SpGetExtendedInformation(enum _SECPKG_EXTENDED_INFORMATION_CLASS,struct _SECPKG_EXTENDED_INFORMATION * __ptr64 * __ptr64)" ?SpGetExtendedInformation@@YAJW4_SECPKG_EXTENDED_INFORMATION_CLASS@@PEAPEAU_SECPKG_EXTENDED_INFORMATION@@@Z
0x1800029E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180016CCC: "long __cdecl TSRsaPublicKeyFromCert(struct _CERT_PUBLIC_KEY_INFO * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSRsaPublicKeyFromCert@@YAJPEAU_CERT_PUBLIC_KEY_INFO@@PEAPEAEPEAK@Z
0x1800024DE: "__cdecl _imp_load_CryptDecodeObjectEx" __imp_load_CryptDecodeObjectEx
0x180027000: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x1800238C0: "long (__cdecl* __ptr64 g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64)" ?g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion@@3P6AJPEAU__WIL__WNF_USER_SUBSCRIPTION@@@ZEA
0x180023DAC: "enum _TS_STATE TSGlobalState" ?TSGlobalState@@3W4_TS_STATE@@A
0x180027128: "__cdecl _imp_CredParseUserNameWithType" __imp_CredParseUserNameWithType
0x18001C518: "__cdecl _imp_SspiEncodeAuthIdentityAsStrings" __imp_SspiEncodeAuthIdentityAsStrings
0x18001C458: "__cdecl _imp_ASN1DEREncOctetString" __imp_ASN1DEREncOctetString
0x180015A70: "void __cdecl TSHidePassword(struct _UNICODE_STRING * __ptr64)" ?TSHidePassword@@YAXPEAU_UNICODE_STRING@@@Z
0x180023000: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x1800075EC: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x18001DA78: "Negotiate" ??_C@_1BE@ELFOBFGL@?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAe?$AA?$AA@
0x180027098: CRYPTSP_NULL_THUNK_DATA_DLA
0x180013CD8: "long __cdecl TSCalculateBindingHashes(unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?TSCalculateBindingHashes@@YAJKPEAEK0K0K0@Z
0x18001D0D4: "" ??_C@_00CNPNBAHC@?$AA@
0x180023878: g_ulAdditionalProbeSize
0x1800017C0: "public: __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x18001C9C8: "__cdecl _imp_memmove_s" __imp_memmove_s
0x18001CB28: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18001C788: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180019EFC: "unsigned short const * __ptr64 __cdecl _DbgpGetTraceMappingName(void)" ?_DbgpGetTraceMappingName@@YAPEBGXZ
0x18001E1B8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18001D288: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x18001C630: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180012BA0: "long __cdecl SpDeleteUserModeContext(unsigned __int64)" ?SpDeleteUserModeContext@@YAJ_K@Z
0x18001D9C8: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180014D8C: "long __cdecl TSGetCertFromCertChain(unsigned char * __ptr64,unsigned long,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?TSGetCertFromCertChain@@YAJPEAEKPEAPEBU_CERT_CONTEXT@@@Z
0x180023AD0: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x18001C738: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18002022C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180003448: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x18000A5A0: "long __cdecl SpAcquireCredentialsHandle(struct _UNICODE_STRING * __ptr64,unsigned long,struct _LUID * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64 * __ptr64,union _LARGE_INTEGER * __ptr64)" ?SpAcquireCredentialsHandle@@YAJPEAU_UNICODE_STRING@@KPEAU_LUID@@PEAX22PEA_KPEAT_LARGE_INTEGER@@@Z
0x18001C990: bcrypt_NULL_THUNK_DATA
0x18000E0B4: "long __cdecl TSUnpackKerbPasswordLogonBuffer(int,void * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSUnpackKerbPasswordLogonBuffer@@YAJHPEAXPEAU_UNICODE_STRING@@11PEAPEAXPEAK@Z
0x1800016C8: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::FeatureStateManager>::Construct(void) __ptr64" ?Construct@?$manually_managed_shutdown_aware_object@VFeatureStateManager@details@wil@@@wil@@QEAAXXZ
0x18001C9E8: "__cdecl _imp_wcsncat_s" __imp_wcsncat_s
0x18001C620: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18001D618: "ConcatenateDefaults_DenySaved" ??_C@_1DM@MLGHKKIO@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAD?$AAe?$AAn?$AAy?$AAS?$AAa?$AAv?$AAe?$AAd?$AA?$AA@
0x180014D18: "long __cdecl TSGenRandom(unsigned long,unsigned char * __ptr64)" ?TSGenRandom@@YAJKPEAE@Z
0x1800057E4: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Read(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64) __ptr64" ?Read@UsageIndexProperty@details_abi@wil@@QEAA_NAEAPEAEPEAE@Z
0x18001C9D8: "__cdecl _imp_wcschr" __imp_wcschr
0x180027110: "__cdecl _imp_CredFree" __imp_CredFree
0x18000279B: "__cdecl _imp_load_LsaIQueryInformationPolicyTrusted" __imp_load_LsaIQueryInformationPolicyTrusted
0x180012458: WppInitUm
0x18001DC48: "DisableLoopback" ??_C@_1CA@BHACPHCO@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAL?$AAo?$AAo?$AAp?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180001250: "long __cdecl SpQueryCredentialsAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryCredentialsAttributes@@YAJ_KKPEAX@Z
0x18001DFD8: "Microsoft::Windows::RDS::AuthRed" ??_C@_0CJ@IDJFCKBD@Microsoft?3?3Windows?3?3RDS?3?3AuthRed@
0x18000784C: "protected: void __cdecl wistd::_Func_class<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::_Tidy(void) __ptr64" ?_Tidy@?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@IEAAXXZ
0x18001D658: "AllowFreshCredentials" ??_C@_1CM@JOOMKPDF@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAF?$AAr?$AAe?$AAs?$AAh?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x180027088: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x18001CAF0: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x18001DE08: "1.3.14.3.2.12" ??_C@_0O@JLABPJC@1?43?414?43?42?412?$AA@
0x18001C3D0: "__cdecl _imp_ASN1BERDecOctetString" __imp_ASN1BERDecOctetString
0x18001CC08: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800238D4: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18000AEB0: "long __cdecl TSAllocateCredential(struct _TS_CREDENTIAL * __ptr64 * __ptr64)" ?TSAllocateCredential@@YAJPEAPEAU_TS_CREDENTIAL@@@Z
0x18002027C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x18001D1B8: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x18001D8C0: "ConcatenateDefaults_AllowFreshNT" ??_C@_1EO@GOJOKMNN@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAF?$AAr?$AAe?$AAs?$AAh?$AAN?$AAT@
0x18001DD60: "1.3.6.1.5.5.7.3.1" ??_C@_0BC@HAIAHLOC@1?43?46?41?45?45?47?43?41?$AA@
0x18001C7C0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18001CB98: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x18001C668: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180007F60: "long __cdecl wil_details_StagingConfig_Load(struct wil_details_StagingConfig * __ptr64,enum wil_FeatureStore,unsigned __int64,void * __ptr64,int)" ?wil_details_StagingConfig_Load@@YAJPEAUwil_details_StagingConfig@@W4wil_FeatureStore@@_KPEAXH@Z
0x18001C9F0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18001E038: "Debug.Trace.Memory.%x" ??_C@_1CM@BKDBMICI@?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?4?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?4?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?4?$AA?$CF?$AAx?$AA?$AA@
0x18001C638: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180002789: "__cdecl _imp_load_LsaIFree_LSAPR_POLICY_INFORMATION" __imp_load_LsaIFree_LSAPR_POLICY_INFORMATION
0x18001C930: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180027068: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x18000C060: "void __cdecl TSFreeCredential(struct _TS_CREDENTIAL * __ptr64)" ?TSFreeCredential@@YAXPEAU_TS_CREDENTIAL@@@Z
0x18001C8E8: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x180007420: "void __cdecl wil::details::WilApiImpl_SubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?WilApiImpl_SubscribeFeatureStateChangeNotification@details@wil@@YAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x180006DC8: "public: void __cdecl wil::details_abi::SubscriptionList::SubscribeUnderLock(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeUnderLock@SubscriptionList@details_abi@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x18001414C: "long __cdecl TSCreateKerbLogonBuffer(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSCreateKerbLogonBuffer@@YAJPEAU_UNICODE_STRING@@00PEAPEAEPEAK@Z
0x18001E080: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800044A4: "public: static void __cdecl wil::details::ThreadFailureCallbackHolder::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@ThreadFailureCallbackHolder@details@wil@@SAXPEAUFailureInfo@3@PEAD_K@Z
0x180002041: "__cdecl XcptFilter" _XcptFilter
0x180018F9C: "long __cdecl IsPolicyDisabled(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?IsPolicyDisabled@@YAJPEAUHKEY__@@PEBGPEAH@Z
0x18001CC10: "__cdecl _xc_a" __xc_a
0x180002838: "__cdecl _imp_load_DsrIsDeviceJoined" __imp_load_DsrIsDeviceJoined
0x1800023AC: "__cdecl _imp_load_CertOpenStore" __imp_load_CertOpenStore
0x1800184D4: "unsigned char __cdecl TSContextIsValid(struct _TS_CONTEXT * __ptr64)" ?TSContextIsValid@@YAEPEAU_TS_CONTEXT@@@Z
0x180023828: "__cdecl _hmod__LSASRV_dll" __hmod__LSASRV_dll
0x18001FF68: CRYPTSP_NULL_THUNK_DATA_DLB
0x180023BF0: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18001D0E8: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x18001FA88: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLN
0x18001CBC0: "__cdecl _imp_RtlConvertSharedToExclusive" __imp_RtlConvertSharedToExclusive
0x180005BC0: "void __cdecl wil::details::RecordSRUMFeatureUsage(unsigned int,unsigned int,unsigned int)" ?RecordSRUMFeatureUsage@details@wil@@YAXIII@Z
0x180023264: "unsigned long g_dwEncryptionOracle" ?g_dwEncryptionOracle@@3KA
0x180004AC8: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x18001C970: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x18001D938: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x18001C830: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x18001C6A0: "__cdecl _imp_MapViewOfFileEx" __imp_MapViewOfFileEx
0x1800059F8: "public: bool __cdecl wil::details_abi::FeatureStateData::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateData@details_abi@wil@@QEAA_NIW4wil_details_ServiceReportingKind@@_K@Z
0x1800033B4: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x18001E178: ".etl" ??_C@_19DEKJANFJ@?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x18001772C: "long __cdecl TSDeconstructRedirectedLogonPacket(struct _TS_CONTEXT * __ptr64,void * __ptr64,unsigned long,struct _UNICODE_STRING * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSDeconstructRedirectedLogonPacket@@YAJPEAU_TS_CONTEXT@@PEAXKPEAU_UNICODE_STRING@@PEAPEAXPEAK@Z
0x18001C608: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1800120CC: "long __cdecl TSContextTableLookup(unsigned __int64,struct _TS_CONTEXT * __ptr64 * __ptr64)" ?TSContextTableLookup@@YAJ_KPEAPEAU_TS_CONTEXT@@@Z
0x180016360: "long __cdecl TSParseBuffers(struct _SecBuffer * __ptr64,struct _SecBufferDesc * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSParseBuffers@@YAJPEAU_SecBuffer@@PEAU_SecBufferDesc@@PEAPEAEPEAK233PEAJ23@Z
0x180002259: "__cdecl lock" _lock
0x180017B60: "long __cdecl TSGetRedirectedSuppCreds(void * __ptr64,struct _SECPKG_SUPPLEMENTAL_CRED_ARRAY * __ptr64 * __ptr64)" ?TSGetRedirectedSuppCreds@@YAJPEAXPEAPEAU_SECPKG_SUPPLEMENTAL_CRED_ARRAY@@@Z
0x180023BC8: g_pfnResultLoggingCallback
0x18001C6B8: "__cdecl _imp_SetCurrentDirectoryW" __imp_SetCurrentDirectoryW
0x18000C8F4: "long __cdecl TSObtainLoopbackCredentials(void * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSObtainLoopbackCredentials@@YAJPEAXPEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18001D740: "AllowDefCredentialsWhenNTLMOnly" ??_C@_1EA@CAEHLOBH@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAf?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AAW?$AAh?$AAe?$AAn?$AAN?$AAT?$AAL?$AAM?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x180003DA4: "public: int __cdecl wil::details_abi::UsageIndexProperty::Compare(void * __ptr64,unsigned __int64)const __ptr64" ?Compare@UsageIndexProperty@details_abi@wil@@QEBAHPEAX_K@Z
0x180006C8C: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToEnabledStateChanges(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeToEnabledStateChanges@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x18001D100: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x180027020: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x180018C2C: "int __cdecl CompareValue(unsigned short const * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?CompareValue@@YAHPEBG_K01@Z
0x180002029: "__cdecl wcsicmp" _wcsicmp
0x180002903: "__cdecl callnewh" _callnewh
0x18001C528: "__cdecl _imp_SspiValidateAuthIdentity" __imp_SspiValidateAuthIdentity
0x180011D34: WPP_SF_ZDDD
0x18001C4A8: "__cdecl _imp_SspiCopyAuthIdentity" __imp_SspiCopyAuthIdentity
0x18001CE4C: "__cdecl _guard_iat_table" __guard_iat_table
0x18001C6D0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180023BD1: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x1800029B2: memcpy
0x180013FD8: "long __cdecl TSCreateKerbCertLogonBuffer(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSCreateKerbCertLogonBuffer@@YAJPEAU_UNICODE_STRING@@00PEAEKPEAPEAEPEAK@Z
0x18001C510: "__cdecl _imp_ImpersonateSecurityContext" __imp_ImpersonateSecurityContext
0x18001C640: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180011FE0: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl TSContextTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?TSContextTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x180002680: "__cdecl _imp_load_LsaIEventWritePackageNotCacheLogonUser" __imp_load_LsaIEventWritePackageNotCacheLogonUser
0x18000690C: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x18001D080: "__cdecl _sz_ext_ms_win_security_credui_l1_1_0_dll" __sz_ext_ms_win_security_credui_l1_1_0_dll
0x18001D918: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001A140: "void __cdecl _DbgpRegistryChangeNotifycationCallback(void * __ptr64,unsigned char)" ?_DbgpRegistryChangeNotifycationCallback@@YAXPEAXE@Z
0x18001C9B0: "__cdecl _imp_memset" __imp_memset
0x18001C7B0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x180002502: "__cdecl _imp_load_CredParseUserNameWithType" __imp_load_CredParseUserNameWithType
0x18001C778: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18001C5D8: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x180002238: "__cdecl initterm" _initterm
0x18001CB38: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x18001A3B0: "void __cdecl _DbgpTraceTimerCallback(void * __ptr64,unsigned char)" ?_DbgpTraceTimerCallback@@YAXPEAXE@Z
0x180023A60: "struct _RTL_AVL_TABLE TSGlobalCredTable" ?TSGlobalCredTable@@3U_RTL_AVL_TABLE@@A
0x1800201F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180023860: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001C808: "__cdecl _imp_Sleep" __imp_Sleep
0x180023C9C: "struct std::nothrow_t TSGlobalNoThrow" ?TSGlobalNoThrow@@3Unothrow_t@std@@A
0x18001B01C: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x18001CC68: "__cdecl _xi_z" __xi_z
0x1800238D0: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x1800270E8: "__cdecl _imp_LsaIEventWritePackageNotCacheLogonUser" __imp_LsaIEventWritePackageNotCacheLogonUser
0x18001C4E0: "__cdecl _imp_SspiFreeAuthIdentity" __imp_SspiFreeAuthIdentity
0x18000242A: "__cdecl _imp_load_CredProtectW" __imp_load_CredProtectW
0x18001C5A8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180023BE8: g_pfnThrowPlatformException
0x18001DE98: "RNG" ??_C@_17LOEPNPLF@?$AAR?$AAN?$AAG?$AA?$AA@
0x1800066B8: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x1800239F8: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x18001C4F8: "__cdecl _imp_SetCredentialsAttributesW" __imp_SetCredentialsAttributesW
0x18001CBB8: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x180015AA0: "long __cdecl TSInitAsn(struct ASN1encoding_s * __ptr64 * __ptr64,struct ASN1decoding_s * __ptr64 * __ptr64)" ?TSInitAsn@@YAJPEAPEAUASN1encoding_s@@PEAPEAUASN1decoding_s@@@Z
0x18001CB10: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180001FEC: "__cdecl _C_specific_handler" __C_specific_handler
0x18001DE18: "1.2.840.10040.4.1" ??_C@_0BC@GGPLMPBM@1?42?4840?410040?44?41?$AA@
0x18001C7C8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000AFB0: "long __cdecl TSBuildCspDetail(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,struct _TS_CSPDATA_DETAIL * __ptr64)" ?TSBuildCspDetail@@YAJPEAG000KPEAU_TS_CSPDATA_DETAIL@@@Z
0x18001D220: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x18001C7E8: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x1800202F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0
0x180023BC0: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x180005B9C: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x180004478: "void __cdecl wil::details::FreeProcessHeap(void * __ptr64)" ?FreeProcessHeap@details@wil@@YAXPEAX@Z
0x18001C9A0: "__cdecl _imp__onexit" __imp__onexit
0x18001C5F8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180002599: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x180023D98: WPP_REGISTRATION_GUIDS
0x18001C440: "__cdecl _imp_ASN1BERDecU32Val" __imp_ASN1BERDecU32Val
0x18001C460: "__cdecl _imp_ASN1BERDecS32Val" __imp_ASN1BERDecS32Val
0x18001D970: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x180018314: "public: long __cdecl RedirectedCredContextTable::AddPackage(struct _UNICODE_STRING const & __ptr64,void * __ptr64,long (__cdecl*)(void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64),void (__cdecl*)(void * __ptr64)) __ptr64" ?AddPackage@RedirectedCredContextTable@@QEAAJAEBU_UNICODE_STRING@@PEAXP6AJ11KPEAPEAXPEAK@ZP6AX1@Z@Z
0x18001D0B0: "__cdecl _sz_dsreg_dll" __sz_dsreg_dll
0x180003DD8: "private: long __cdecl wil::details_abi::SemaphoreValue::CreateFromValueInternal(unsigned short const * __ptr64,bool,unsigned __int64) __ptr64" ?CreateFromValueInternal@SemaphoreValue@details_abi@wil@@AEAAJPEBG_N_K@Z
0x180023E28: "struct _DBG_TCB_HEADER * __ptr64 __ptr64 DbgpGlobalControllerHeader" ?DbgpGlobalControllerHeader@@3PEAU_DBG_TCB_HEADER@@EA
0x180018EB0: "long __cdecl IsNTLMServerAuthAllowed(unsigned short const * __ptr64,enum CRED_SOURCE,int * __ptr64)" ?IsNTLMServerAuthAllowed@@YAJPEBGW4CRED_SOURCE@@PEAH@Z
0x18000A3C0: "long __cdecl ConstructAuthdataExWMarshalledW(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _SEC_WINNT_AUTH_IDENTITY_EXW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ConstructAuthdataExWMarshalledW@@YAJPEAU_UNICODE_STRING@@000PEAPEAU_SEC_WINNT_AUTH_IDENTITY_EXW@@PEAK@Z
0x180002143: malloc
0x1800061D4: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x18001C5E8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180017504: "long __cdecl TSBuildRedirectedLogonPacket(struct _TS_CONTEXT * __ptr64,void * __ptr64,unsigned long,struct _UNICODE_STRING const & __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSBuildRedirectedLogonPacket@@YAJPEAU_TS_CONTEXT@@PEAXKAEBU_UNICODE_STRING@@PEAPEAXPEAK@Z
0x18000B574: "long __cdecl TSCopyClientString(void * __ptr64,unsigned long,unsigned char,struct _UNICODE_STRING * __ptr64,unsigned long)" ?TSCopyClientString@@YAJPEAXKEPEAU_UNICODE_STRING@@K@Z
0x180023DE0: "void * __ptr64 __ptr64 g_LsaNotification" ?g_LsaNotification@@3PEAXEA
0x18001C728: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18001CB48: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x180002940: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18001CA98: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x180016EC0: "void * __ptr64 __cdecl TSTableAllocate(struct _RTL_AVL_TABLE * __ptr64,unsigned long)" ?TSTableAllocate@@YAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x180014280: "long __cdecl TSCspDataFromAsnDetail(struct TSCspDataDetail * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSCspDataFromAsnDetail@@YAJPEAUTSCspDataDetail@@PEAPEAEPEAK@Z
0x18001C500: "__cdecl _imp_AcquireCredentialsHandleW" __imp_AcquireCredentialsHandleW
0x18001C488: "__cdecl _imp_SspiDecryptAuthIdentityEx" __imp_SspiDecryptAuthIdentityEx
0x18001D780: "ConcatenateDefaults_AllowDefNTLM" ??_C@_1EK@KEOOMPCA@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAf?$AAN?$AAT?$AAL?$AAM@
0x180014400: "void * __ptr64 __cdecl TSDecodeAlloc(unsigned __int64)" ?TSDecodeAlloc@@YAPEAX_K@Z
0x180013020: "long __cdecl SpUserModeInitialize(unsigned long,unsigned long * __ptr64,struct _SECPKG_USER_FUNCTION_TABLE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?SpUserModeInitialize@@YAJKPEAKPEAPEAU_SECPKG_USER_FUNCTION_TABLE@@0@Z
0x180023B98: "void * __ptr64 __ptr64 TSGlobalEventLogHandle" ?TSGlobalEventLogHandle@@3PEAXEA
0x18001D98C: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x180023C00: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800238C8: "long (__cdecl* __ptr64 g_wil_details_pfnNtUpdateWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnNtUpdateWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@ZEA
0x18001D228: "NtQueryWnfStateData" ??_C@_0BE@KACOKPLP@NtQueryWnfStateData?$AA@
0x18001CBA8: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x18001CAB8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18001F9B8: CRYPT32_NULL_THUNK_DATA_DLN
0x180023D70: WPP_MAIN_CB
0x180020150: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-2-0
0x18002013C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18001C720: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000204D: "__cdecl amsg_exit" _amsg_exit
0x18001CA10: "__cdecl _imp__callnewh" __imp__callnewh
0x18001DD78: "1.3.6.1.4.1.311.54.1.2" ??_C@_0BH@JDIJLBNJ@1?43?46?41?44?41?4311?454?41?42?$AA@
0x180012A00: "long __cdecl TSGetRegistryDwords(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned long,struct _TSPKG_REG_PARAMETER * __ptr64)" ?TSGetRegistryDwords@@YAJPEAUHKEY__@@0KPEAU_TSPKG_REG_PARAMETER@@@Z
0x180006B00: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x18001E1B4: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18001C560: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180027018: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x18001D820: "ConcatenateDefaults_AllowSavedNT" ??_C@_1EO@FODDJNL@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAa?$AAv?$AAe?$AAd?$AAN?$AAT@
0x18000615C: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x1800202E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18001D4D0: "ConcatenateDefaults_AllowDefault" ??_C@_1EC@DOAFHMGE@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt@
0x18001D688: "DenyFreshCredentials" ??_C@_1CK@JHAHKIFN@?$AAD?$AAe?$AAn?$AAy?$AAF?$AAr?$AAe?$AAs?$AAh?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x180023B88: "void (__cdecl* __ptr64 g_wil_details_internalUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_internalUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x18001A574: "__cdecl DeleteDebugTracing" _DeleteDebugTracing
0x1800038D8: "public: class wistd::unique_ptr<void,struct wil::process_heap_deleter> & __ptr64 __cdecl wistd::unique_ptr<void,struct wil::process_heap_deleter>::operator=(class wistd::unique_ptr<void,struct wil::process_heap_deleter> &&) __ptr64" ??4?$unique_ptr@XUprocess_heap_deleter@wil@@@wistd@@QEAAAEAV01@$$QEAV01@@Z
0x18001C798: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x1800201A0: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x180002406: "__cdecl _imp_load_CryptAcquireCertificatePrivateKey" __imp_load_CryptAcquireCertificatePrivateKey
0x18001DB18: "TSSSP" ??_C@_1M@HDMKOEHG@?$AAT?$AAS?$AAS?$AAS?$AAP?$AA?$AA@
0x180014CE8: "void __cdecl TSFreeString(struct _UNICODE_STRING * __ptr64)" ?TSFreeString@@YAXPEAU_UNICODE_STRING@@@Z
0x18000CBB0: "long __cdecl TSObtainRedirectableCreds(struct _SecHandle * __ptr64,struct _UNICODE_STRING * __ptr64,void * __ptr64,struct _TS_CONTEXT * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSObtainRedirectableCreds@@YAJPEAU_SecHandle@@PEAU_UNICODE_STRING@@PEAXPEAU_TS_CONTEXT@@PEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18001C850: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x18001D990: "RtlSubscribeWnfStateChangeNotifi" ??_C@_0CH@DLHFNNLE@RtlSubscribeWnfStateChangeNotifi@
0x180004050: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x18000272F: "__cdecl _imp_load_LsapDbLookupGetDomainInfo" __imp_load_LsapDbLookupGetDomainInfo
0x180012D60: "long __cdecl SpQueryContextAttributes(unsigned __int64,unsigned long,void * __ptr64)" ?SpQueryContextAttributes@@YAJ_KKPEAX@Z
0x180023800: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x18001D010: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x18001C9C0: "__cdecl _imp__lock" __imp__lock
0x1800023E2: "__cdecl _imp_load_CredFree" __imp_load_CredFree
0x1800039B0: ??_E?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x180014700: "long __cdecl TSDecodeSecret(unsigned short * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSDecodeSecret@@YAJPEAGPEAU_UNICODE_STRING@@@Z
0x180001FBC: atexit
0x18001AFD4: VerifyStackAvailable
0x1800231C0: "struct _OIDPROVMAP * g_CertTypes" ?g_CertTypes@@3PAU_OIDPROVMAP@@A
0x18001CA70: "__cdecl _imp_strcmp" __imp_strcmp
0x1800191D8: "unsigned long __cdecl _DbgpControlTracing(struct _DBG_TRACE_CONTROL_BLOCK * __ptr64,unsigned long,int)" ?_DbgpControlTracing@@YAKPEAU_DBG_TRACE_CONTROL_BLOCK@@KH@Z
0x18001C408: "__cdecl _imp_ASN1_FreeDecoded" __imp_ASN1_FreeDecoded
0x1800079DC: "public: bool __cdecl wil::details_abi::heap_buffer::reserve(unsigned __int64) __ptr64" ?reserve@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x18001CBF0: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x180023BF8: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x1800239F4: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180023DE8: "unsigned long g_bTSDisableLoopback" ?g_bTSDisableLoopback@@3KA
0x180023BB0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUxivwhhkUghkptUwooUlyquivUznwGEUkivxlnkOlyq@TSpkg" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUkilglxlohUxivwhhkUghkptUwooUlyquivUznwGEUkivxlnkOlyq@TSpkg
0x180005B80: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x180006280: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x180014C78: "long __cdecl TSFreeSecBuffers(struct _SecBufferDesc * __ptr64)" ?TSFreeSecBuffers@@YAJPEAU_SecBufferDesc@@@Z
0x18001C790: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180023890: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x18001C780: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x18001C750: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000250E: "__cdecl _tailMerge_api_ms_win_security_credentials_l2_1_0_dll" __tailMerge_api_ms_win_security_credentials_l2_1_0_dll
0x180014EA8: "long __cdecl TSGetCertificateByHash(unsigned char * __ptr64,unsigned long,unsigned short * __ptr64,int,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?TSGetCertificateByHash@@YAJPEAEKPEAGHPEAPEBU_CERT_CONTEXT@@@Z
0x18000391C: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x18001C5B8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800188C0: "long __cdecl TSInitializeEventLogHandle(void)" ?TSInitializeEventLogHandle@@YAJXZ
0x18001DF48: WPP_bb57f8964f5b3a2da49c46b90a380b74_Traceguids
0x1800136A0: "void * __ptr64 __cdecl TSAllocate(unsigned __int64)" ?TSAllocate@@YAPEAX_K@Z
0x18001C838: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18001C6E8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18001853C: "struct _TS_CONTEXT * __ptr64 __cdecl TSContextLookupByLogonId(struct _LUID const & __ptr64)" ?TSContextLookupByLogonId@@YAPEAU_TS_CONTEXT@@AEBU_LUID@@@Z
0x180002271: "__cdecl _dllonexit" __dllonexit
0x180013718: "long __cdecl TSAuditPolicyFailure(struct _TS_CREDENTIAL * __ptr64,struct _TS_CONTEXT * __ptr64,unsigned short * __ptr64)" ?TSAuditPolicyFailure@@YAJPEAU_TS_CREDENTIAL@@PEAU_TS_CONTEXT@@PEAG@Z
0x18001DDC0: "1.2.840.113549.1.1.3" ??_C@_0BF@OIJHHAIK@1?42?4840?4113549?41?41?43?$AA@
0x180016ED0: "void __cdecl TSTableFree(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64)" ?TSTableFree@@YAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x18001D950: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x180023840: "__cdecl _native_startup_lock" __native_startup_lock
0x180014600: "void __cdecl TSDecodeFree(void * __ptr64)" ?TSDecodeFree@@YAXPEAX@Z
0x18001C478: "__cdecl _imp_ASN1Free" __imp_ASN1Free
0x18001C508: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x18001DAE0: "NTLM" ??_C@_19FMIOBHFB@?$AAN?$AAT?$AAL?$AAM?$AA?$AA@
0x18001C980: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180027140: dsreg_NULL_THUNK_DATA_DLA
0x18000222C: DllMain
0x18000C3E0: "long __cdecl TSGetCspDetailFromCspData(unsigned long,unsigned char * __ptr64,struct _TS_CSPDATA_DETAIL * __ptr64)" ?TSGetCspDetailFromCspData@@YAJKPEAEPEAU_TS_CSPDATA_DETAIL@@@Z
0x18001DE30: "2.5.29.17" ??_C@_09HICPAIKK@2?45?429?417?$AA@
0x18001DA3C: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x180023C08: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x1800239F0: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x180023260: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x180007F24: "void __cdecl wil_details_StagingConfig_Free(struct wil_details_StagingConfig * __ptr64)" ?wil_details_StagingConfig_Free@@YAXPEAUwil_details_StagingConfig@@@Z
0x18001A2A0: "void __cdecl _DbgpStopTracing(struct _DBG_TRACE_CONTROL_BLOCK * __ptr64)" ?_DbgpStopTracing@@YAXPEAU_DBG_TRACE_CONTROL_BLOCK@@@Z
0x18001A310: "void __cdecl _DbgpTraceControllerTimerCallback(void * __ptr64,unsigned char)" ?_DbgpTraceControllerTimerCallback@@YAXPEAXE@Z
0x18001CA20: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18001CA00: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180023C50: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x180013620: "unsigned int __cdecl MapOidToKeyExch(char * __ptr64)" ?MapOidToKeyExch@@YAIPEAD@Z
0x18001C9D0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18001E188: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000EA00: "long __cdecl SpAcceptLsaModeContext(unsigned __int64,unsigned __int64,struct _SecBufferDesc * __ptr64,unsigned long,unsigned long,unsigned __int64 * __ptr64,struct _SecBufferDesc * __ptr64,unsigned long * __ptr64,union _LARGE_INTEGER * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?SpAcceptLsaModeContext@@YAJ_K0PEAU_SecBufferDesc@@KKPEA_K1PEAKPEAT_LARGE_INTEGER@@PEAEPEAU_SecBuffer@@@Z
0x18001C760: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180023A00: "struct _RTL_RESOURCE TSGlobalCredTableLock" ?TSGlobalCredTableLock@@3U_RTL_RESOURCE@@A
0x18001C660: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18001C8A8: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180002418: "__cdecl _imp_load_CertDuplicateCertificateContext" __imp_load_CertDuplicateCertificateContext
0x180027030: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x1800041AC: "private: void __cdecl wil::details::FeatureStateManager::EnsureSubscribedToProcessWideUsageFlushUnderLock(void) __ptr64" ?EnsureSubscribedToProcessWideUsageFlushUnderLock@FeatureStateManager@details@wil@@AEAAXXZ
0x18001C3F8: "__cdecl _imp_ASN1_FreeEncoded" __imp_ASN1_FreeEncoded
0x18001C840: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x180007B90: "struct HINSTANCE__ * __ptr64 __cdecl wil_details_GetNtDllModuleHandle(void)" ?wil_details_GetNtDllModuleHandle@@YAPEAUHINSTANCE__@@XZ
0x18001C598: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800028C4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18001C418: "__cdecl _imp_ASN1_CloseDecoder" __imp_ASN1_CloseDecoder
0x180006540: "private: void __cdecl wil::details_abi::FeatureStateData::RetrieveUsageUnderLock(struct wil::details_abi::UsageIndexes & __ptr64) __ptr64" ?RetrieveUsageUnderLock@FeatureStateData@details_abi@wil@@AEAAXAEAUUsageIndexes@23@@Z
0x18001C4C0: "__cdecl _imp_EncryptMessage" __imp_EncryptMessage
0x180004220: ?EnsureSubscribedToStateChangesUnderLock@FeatureStateManager@details@wil@@CAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@3@U__WIL__WNF_STATE_NAME@@PEAX@Z
0x180023230: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000291C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18001C7A8: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x18001CA28: "__cdecl _imp__snwprintf_s" __imp__snwprintf_s
0x18001CEF0: "SOFTWARE\Policies\Microsoft\Wind" ??_C@_1HE@PHOKDFBH@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18000262C: IsWTSVirtualChannelOpenExPresent
0x18001CBE8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18001CE70: "SYSTEM\CurrentControlSet\Control" ??_C@_1HI@OGBJAPHB@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18001CA48: "__cdecl _imp_memcmp" __imp_memcmp
0x18000232D: "__cdecl _tailMerge_api_ms_win_security_credentials_l1_1_0_dll" __tailMerge_api_ms_win_security_credentials_l1_1_0_dll
0x18001E1A0: "@@D " ??_C@_1BC@DHBDIJEN@?$AA?$EA?$AA?$EA?$AAD?$AA?$AH?$AA?$AI?$AA?$AM?$AA?6?$AA?$AN?$AA?$AA@
0x180011BC4: "long __cdecl TSSelectCredManCred(struct _ENCRYPTED_CREDENTIALW * __ptr64 * __ptr64,unsigned long,int,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSSelectCredManCred@@YAJPEAPEAU_ENCRYPTED_CREDENTIALW@@KHPEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18001C6F0: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x18001C960: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180027028: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x180023252: g_header_init_InitializeStagingHeaderInternalApi
0x18001D5D8: "ConcatenateDefaults_AllowSaved" ??_C@_1DO@PENAFCGJ@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAa?$AAv?$AAe?$AAd?$AA?$AA@
0x180023B90: "struct HKEY__ * __ptr64 __ptr64 g_hKeyParams" ?g_hKeyParams@@3PEAUHKEY__@@EA
0x18001DA30: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800202A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18001C6D8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18001C7F0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18001DC18: "IgnoreTSServerAuthEKU" ??_C@_1CM@HFLGKEIH@?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AAT?$AAS?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AAE?$AAK?$AAU?$AA?$AA@
0x180027070: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x1800027B9: "__cdecl _tailMerge_ext_ms_win_security_credui_l1_1_0_dll" __tailMerge_ext_ms_win_security_credui_l1_1_0_dll
0x180019018: "long __cdecl OpenPolicyKey(struct HKEY__ * __ptr64 * __ptr64,int)" ?OpenPolicyKey@@YAJPEAPEAUHKEY__@@H@Z
0x180005C3C: "public: void __cdecl wil::details_abi::FeatureStateData::RecordUsage(void) __ptr64" ?RecordUsage@FeatureStateData@details_abi@wil@@QEAAXXZ
0x18001FFE8: dsreg_NULL_THUNK_DATA_DLB
0x18001DBB0: "UseCachedCRLOnlyAndIgnoreRevocat" ??_C@_1GC@MBNKMHFH@?$AAU?$AAs?$AAe?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAC?$AAR?$AAL?$AAO?$AAn?$AAl?$AAy?$AAA?$AAn?$AAd?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AAR?$AAe?$AAv?$AAo?$AAc?$AAa?$AAt@
0x18001E1B4: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180002110: "__cdecl ValidateImageBase" _ValidateImageBase
0x18001D470: "AllowDefaultCredentials" ??_C@_1DA@KAMCMPPM@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x18001440C: "long __cdecl TSDecodeAuthIdFromCred(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSDecodeAuthIdFromCred@@YAJPEAU_UNICODE_STRING@@00PEAPEAEPEAK@Z
0x18000E684: WPP_SF_ZD
0x1800024F0: "__cdecl _imp_load_CertNameToStrW" __imp_load_CertNameToStrW
0x180001FF8: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180004304: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::FindInsertionPointOrIncrement(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?FindInsertionPointOrIncrement@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAEPEAX_KI@Z
0x18001D398: TSPkgGlobalDebugTraceControlGuid
0x180017260: "long __cdecl LsaApCallPackageUntrusted(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackageUntrusted@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x180023898: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x18001F8F4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_dsreg_dll" __DELAY_IMPORT_DESCRIPTOR_dsreg_dll
0x180007B38: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x1800074F0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x18001C3D8: "__cdecl _imp_ASN1BERDecNotEndOfContents" __imp_ASN1BERDecNotEndOfContents
0x18001CA88: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18001CB90: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x180023C20: "void (__cdecl* __ptr64 g_wil_details_RecordSRUMFeatureUsage)(unsigned int,unsigned int,unsigned int)" ?g_wil_details_RecordSRUMFeatureUsage@@3P6AXIII@ZEA
0x18001880C: "long __cdecl TSContextStopTracking(struct _TS_CONTEXT * __ptr64)" ?TSContextStopTracking@@YAJPEAU_TS_CONTEXT@@@Z
0x1800039B0: ??_G?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x18001D258: "RtlUnsubscribeWnfNotificationWai" ??_C@_0CP@IJFJHHED@RtlUnsubscribeWnfNotificationWai@
0x18001D150: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x180020074: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000D3F4: "void __cdecl TSUnloadCredTable(void)" ?TSUnloadCredTable@@YAXXZ
0x18000DDA0: "long __cdecl TSUnpackKerbCertLogonBuffer(int,void * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSUnpackKerbCertLogonBuffer@@YAJHPEAXPEAU_UNICODE_STRING@@11PEAPEAEPEAKPEAPEAX3@Z
0x1800024BA: "__cdecl _imp_load_CredIsProtectedW" __imp_load_CredIsProtectedW
0x180002321: "__cdecl _imp_load_CredUnmarshalCredentialW" __imp_load_CredUnmarshalCredentialW
0x18001D910: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180002844: "__cdecl _tailMerge_dsreg_dll" __tailMerge_dsreg_dll
0x18000E410: WPP_SF_
0x18001DEF8: "CredSSP Client-To-Server Binding" ??_C@_0CG@FNLDOBID@CredSSP?5Client?9To?9Server?5Binding@
0x18001C5F0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18001C648: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18001D9B8: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x180014AD8: "long __cdecl TSEncodeData(void * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned char)" ?TSEncodeData@@YAJPEAXKPEAKPEAPEAEE@Z
0x18001C7B8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001F914: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180005F6C: "void __cdecl wil::details_abi::RecordWnfUsageIndex(struct __WIL__WNF_STATE_NAME const * __ptr64,unsigned __int64,class wil::details_abi::RawUsageIndex const & __ptr64)" ?RecordWnfUsageIndex@details_abi@wil@@YAXPEBU__WIL__WNF_STATE_NAME@@_KAEBVRawUsageIndex@12@@Z
0x18000409C: "public: void __cdecl wil::details_abi::SemaphoreValue::Destroy(void) __ptr64" ?Destroy@SemaphoreValue@details_abi@wil@@QEAAXXZ
0x1800239FC: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180023DF4: "int fTSSSPModuleStarted" ?fTSSSPModuleStarted@@3HA
0x180023268: "unsigned short * TSGlobalEventSourceName" ?TSGlobalEventSourceName@@3PAGA
0x180001AB0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180023E20: "struct HINSTANCE__ * __ptr64 __ptr64 WTSVirtualChannelModule" ?WTSVirtualChannelModule@@3PEAUHINSTANCE__@@EA
0x18001C438: "__cdecl _imp_ASN1_CreateModule" __imp_ASN1_CreateModule
0x18001CA18: "__cdecl _imp__initterm" __imp__initterm
0x180020100: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18001C7D0: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x18001D2B8: "internal\sdk\inc\wil/Staging.h" ??_C@_0BP@KCGEFLDE@internal?2sdk?2inc?2wil?1Staging?4h?$AA@
0x1800048BC: "unsigned long __cdecl wil::details::GetLastErrorFail(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64)" ?GetLastErrorFail@details@wil@@YAKPEAXIPEBD110@Z
0x18001C5B0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800122A4: "long __cdecl TSLoadContextTable(void)" ?TSLoadContextTable@@YAJXZ
0x18001DC68: "AllowEncryptionOracle" ??_C@_1CM@PNKLDCGJ@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AAO?$AAr?$AAa?$AAc?$AAl?$AAe?$AA?$AA@
0x180020290: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180023C10: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x1800109F0: "long __cdecl TSGetUserNameFromCreds(struct _TS_CONTEXT * __ptr64,unsigned short * __ptr64 * __ptr64)" ?TSGetUserNameFromCreds@@YAJPEAU_TS_CONTEXT@@PEAPEAG@Z
0x18001C628: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18001CB58: "__cdecl _imp_RtlCreateUnicodeStringFromAsciiz" __imp_RtlCreateUnicodeStringFromAsciiz
0x180019894: "unsigned long __cdecl _DbgpControlTracingThroughRegistry(struct _DBG_TRACE_CONTROL_BLOCK * __ptr64,int)" ?_DbgpControlTracingThroughRegistry@@YAKPEAU_DBG_TRACE_CONTROL_BLOCK@@H@Z
0x18001CAF8: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x18001C4D0: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x18001C828: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x180003570: "public: __cdecl wil::details_abi::RawUsageIndex::RawUsageIndex(unsigned short,unsigned short,enum wil::details_abi::CountSize,unsigned short,enum wil::details_abi::CountSize) __ptr64" ??0RawUsageIndex@details_abi@wil@@QEAA@GGW4CountSize@12@G0@Z
0x180020178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800270A0: "__cdecl _imp_LsaIFree_LSAPR_POLICY_INFORMATION" __imp_LsaIFree_LSAPR_POLICY_INFORMATION
0x18001C5D0: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x180011E48: WPP_SF_qqZ
0x18001DE58: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1800011F0: "enum _RTL_GENERIC_COMPARE_RESULTS __cdecl TSCredTableCompare(struct _RTL_AVL_TABLE * __ptr64,void * __ptr64,void * __ptr64)" ?TSCredTableCompare@@YA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x1800185E4: "long __cdecl TSContextSetLogonId(struct _TS_CONTEXT * __ptr64,struct _LUID const & __ptr64)" ?TSContextSetLogonId@@YAJPEAU_TS_CONTEXT@@AEBU_LUID@@@Z
0x18001DF58: "wtsapi32.dll" ??_C@_1BK@DGNDAKKP@?$AAw?$AAt?$AAs?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014BE0: "void __cdecl TSFree(void * __ptr64)" ?TSFree@@YAXPEAX@Z
0x18001D070: "__cdecl _sz_LSASRV_dll" __sz_LSASRV_dll
0x180027048: "__cdecl _imp_CryptAcquireCertificatePrivateKey" __imp_CryptAcquireCertificatePrivateKey
0x180016C00: "long __cdecl TSRelocateCspString(unsigned long,void * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,int)" ?TSRelocateCspString@@YAJKPEAXKPEAPEAGH@Z
0x180027090: "__cdecl _imp_CryptGetProvParam" __imp_CryptGetProvParam
0x180023850: "__cdecl _onexitend" __onexitend
0x180005DA0: "private: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsageInternal(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsageInternal@RawUsageIndex@details_abi@wil@@AEAA_NPEAX_K01I@Z
0x180002265: "__cdecl unlock" _unlock
0x18001FF80: LSASRV_NULL_THUNK_DATA_DLB
0x1800270F0: LSASRV_NULL_THUNK_DATA_DLA
0x18001CC00: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004108: "private: bool __cdecl wil::details::FeatureStateManager::EnsureStateData(void) __ptr64" ?EnsureStateData@FeatureStateManager@details@wil@@AEAA_NXZ
0x18001FA28: LSASRV_NULL_THUNK_DATA_DLN
0x18001C958: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180002472: "__cdecl _imp_load_CertFreeCertificateChain" __imp_load_CertFreeCertificateChain
0x180003CB4: "public: bool __cdecl wil::details_abi::UsageIndexProperty::AddToCount(unsigned int) __ptr64" ?AddToCount@UsageIndexProperty@details_abi@wil@@QEAA_NI@Z
0x180023DF8: "int (__cdecl* __ptr64 WTSVirtualChannelWriteFunc)(void * __ptr64,char * __ptr64,unsigned long,unsigned long * __ptr64)" ?WTSVirtualChannelWriteFunc@@3P6AHPEAXPEADKPEAK@ZEA
0x18001F8B4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_LSASRV_dll" __DELAY_IMPORT_DESCRIPTOR_LSASRV_dll
0x18001DA28: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800058D0: "public: void __cdecl wil::details_abi::UsageIndexes::Record(void) __ptr64" ?Record@UsageIndexes@details_abi@wil@@QEAAXXZ
0x180002741: "__cdecl _imp_load_LsaIRegisterNotification" __imp_load_LsaIRegisterNotification
0x18001C6E0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001DDD8: "1.2.840.113549.1.1.4" ??_C@_0BF@KHNGOGEN@1?42?4840?4113549?41?41?44?$AA@
0x18001C868: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x18001C4B0: "__cdecl _imp_SspiPrepareForCredRead" __imp_SspiPrepareForCredRead
0x18001C8F0: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18001C538: "__cdecl _imp_FreeCredentialsHandle" __imp_FreeCredentialsHandle
0x18001FEA0: CRYPT32_NULL_THUNK_DATA_DLB
0x18001C468: "__cdecl _imp_ASN1BEREncOpenType" __imp_ASN1BEREncOpenType
0x18001CA80: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18001C498: "__cdecl _imp_AcceptSecurityContext" __imp_AcceptSecurityContext
0x18000243C: "__cdecl _imp_load_CertSetCertificateContextProperty" __imp_load_CertSetCertificateContextProperty
0x18000C528: "long __cdecl TSInitCertCreds(struct _CERT_CONTEXT * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned char * __ptr64,unsigned long,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSInitCertCreds@@YAJPEAU_CERT_CONTEXT@@PEAU_UNICODE_STRING@@11PEAEKPEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x180015E38: "long __cdecl TSPackCreds(struct _TS_PRIMARY_CREDENTIAL * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSPackCreds@@YAJPEAU_TS_PRIMARY_CREDENTIAL@@PEAPEAEPEAK@Z
0x18001C978: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x180027008: "__cdecl _imp_CertNameToStrW" __imp_CertNameToStrW
0x18001C568: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x18001C3A8: "__cdecl _imp_ASN1BERDecOpenType2" __imp_ASN1BERDecOpenType2
0x18001C848: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18001CC58: "__cdecl _xi_a" __xi_a
0x18001C820: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18001DB00: "TSSelectCredManCred" ??_C@_0BE@OBJAAEMD@TSSelectCredManCred?$AA@
0x18001C570: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180012300: "void __cdecl TSUnloadContextTable(void)" ?TSUnloadContextTable@@YAXXZ
0x18001C588: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180023C1C: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x180023E10: "void * __ptr64 (__cdecl* __ptr64 WTSVirtualChannelOpenExFunc)(unsigned long,char * __ptr64,unsigned long)" ?WTSVirtualChannelOpenExFunc@@3P6APEAXKPEADK@ZEA
0x180017AD0: "long __cdecl TSGetRedirectedLogonCreds(void * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSGetRedirectedLogonCreds@@YAJPEAXPEAPEAEPEAK@Z
0x18001C9B8: "__cdecl _imp__unlock" __imp__unlock
0x18001DE40: "1.3.6.1.4.1.311.20.2.3" ??_C@_0BH@MGBBFDOO@1?43?46?41?44?41?4311?420?42?43?$AA@
0x180015BC4: "long __cdecl TSOctetStringToUnicodeGeneral(struct _UNICODE_STRING * __ptr64,struct tagASN1octetstring_t const * __ptr64,unsigned char)" ?TSOctetStringToUnicodeGeneral@@YAJPEAU_UNICODE_STRING@@PEBUtagASN1octetstring_t@@E@Z
0x180023838: "__cdecl _hmod__dsreg_dll" __hmod__dsreg_dll
0x18001CBA0: "__cdecl _imp_RtlNumberGenericTableElementsAvl" __imp_RtlNumberGenericTableElementsAvl
0x18001C938: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180012190: "void __cdecl TSDereferenceContext(struct _TS_CONTEXT * __ptr64)" ?TSDereferenceContext@@YAXPEAU_TS_CONTEXT@@@Z
0x180023C98: "int g_wil_details_preventOnDemandStagingConfigReads" ?g_wil_details_preventOnDemandStagingConfigReads@@3HA
0x180007A88: ?reset@?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAU_TP_TIMER@@@Z
0x18000E470: WPP_SF_DD
0x18001CE60: "CREDSSP" ??_C@_1BA@HHLIBPHG@?$AAC?$AAR?$AAE?$AAD?$AAS?$AAS?$AAP?$AA?$AA@
0x1800024A8: "__cdecl _imp_load_CryptDecodeObject" __imp_load_CryptDecodeObject
0x1800039B0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x1800056C4: "bool __cdecl wil::ProcessShutdownInProgress(void)" ?ProcessShutdownInProgress@wil@@YA_NXZ
0x180014A34: "long __cdecl TSDuplicateStringEx(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING const * __ptr64,unsigned char)" ?TSDuplicateStringEx@@YAJPEAU_UNICODE_STRING@@PEBU1@E@Z
0x180023010: WPP_GLOBAL_Control
0x180007618: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Write(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64)const __ptr64" ?Write@UsageIndexProperty@details_abi@wil@@QEBA_NAEAPEAEPEAE@Z
0x18000567C: "public: void __cdecl wil::details_abi::FeatureStateData::ProcessShutdown(void) __ptr64" ?ProcessShutdown@FeatureStateData@details_abi@wil@@QEAAXXZ
0x180007460: "void __cdecl wil::details::WilApiImpl_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApiImpl_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x180011F04: "long __cdecl TSAllocateContext(struct _TS_CONTEXT * __ptr64 * __ptr64,unsigned char)" ?TSAllocateContext@@YAJPEAPEAU_TS_CONTEXT@@E@Z
0x1800238B0: "long (__cdecl* __ptr64 g_wil_details_pfnNtQueryWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?g_wil_details_pfnNtQueryWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@ZEA
0x180007AE0: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x18001C4A0: "__cdecl _imp_SspiEncryptAuthIdentityEx" __imp_SspiEncryptAuthIdentityEx
0x18001DB24: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800200D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000BCF8: "long __cdecl TSCredTableLocateDefaultCreds(struct _LUID * __ptr64,struct _TS_CREDENTIAL * __ptr64 * __ptr64)" ?TSCredTableLocateDefaultCreds@@YAJPEAU_LUID@@PEAPEAU_TS_CREDENTIAL@@@Z
0x18001C6B0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18001C050: "const wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vftable'" ??_7?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@6B@
0x1800186E0: "long __cdecl TSContextStartTracking(struct _TS_CONTEXT * __ptr64)" ?TSContextStartTracking@@YAJPEAU_TS_CONTEXT@@@Z
0x18000E434: WPP_SF_d
0x18000E434: WPP_SF_D
0x180023868: "__cdecl pRawDllMain" _pRawDllMain
0x18001C8C8: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x1800029CA: strcmp
0x18001C898: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x18001C8A0: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x180023830: "__cdecl _hmod__ext_ms_win_security_credui_l1_1_0_dll" __hmod__ext_ms_win_security_credui_l1_1_0_dll
0x18001DAD0: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x18001DB70: "%SystemRoot%\SysWOW64\TsPkg.DLL" ??_C@_1EA@CACEMFHG@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?2?$AAT?$AAs?$AAP?$AAk?$AAg?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180006660: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x180014C20: "void __cdecl TSFreeDecoded(unsigned long,void * __ptr64)" ?TSFreeDecoded@@YAXKPEAX@Z
0x18000ACD0: "long __cdecl SpSetCredentialsAttributes(unsigned __int64,unsigned long,void * __ptr64,unsigned long)" ?SpSetCredentialsAttributes@@YAJ_KKPEAXK@Z
0x18001C9A8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180004C48: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x180001820: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18001C540: SspiCli_NULL_THUNK_DATA
0x18001CBE0: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x18001DAB0: WPP_965006f499f33769cf4a651b07612fda_Traceguids
0x18001C8B0: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x18001CAE0: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x18002009C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18001C7A0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180001D50: "__cdecl _security_check_cookie" __security_check_cookie
0x18001CC50: "__cdecl _xc_z" __xc_z
0x180023808: "__cdecl _hmod__api_ms_win_security_credentials_l1_1_0_dll" __hmod__api_ms_win_security_credentials_l1_1_0_dll
0x180020164: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180006424: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x180012058: "long __cdecl TSContextTableInsert(struct _TS_CONTEXT * __ptr64)" ?TSContextTableInsert@@YAJPEAU_TS_CONTEXT@@@Z
0x18001C700: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001C658: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001C480: MSASN1_NULL_THUNK_DATA
0x180006F24: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetPointer(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?TryGetPointer@SemaphoreValue@details_abi@wil@@SAJPEBGPEAPEAX@Z
0x18000BEA0: "long __cdecl TSDuplicatePrimaryCreds(struct _TS_PRIMARY_CREDENTIAL * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSDuplicatePrimaryCreds@@YAJPEAU_TS_PRIMARY_CREDENTIAL@@PEAPEAU1@@Z
0x180023253: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18001D380: "tspkg.dll" ??_C@_1BE@BJFBAFNL@?$AAt?$AAs?$AAp?$AAk?$AAg?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000C800: "long __cdecl TSLoadCredTable(void)" ?TSLoadCredTable@@YAJXZ
0x1800202CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x180023C38: "void (__cdecl* __ptr64 g_wil_details_internalSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_internalSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x18000E4B8: WPP_SF_DDq
0x18000E874: WPP_SF_qdd
0x180002618: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x18001C818: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18001C3E0: "__cdecl _imp_ASN1BEREncExplicitTag" __imp_ASN1BEREncExplicitTag
0x180006610: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x18001CBC8: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x180020204: "__cdecl _IMPORT_DESCRIPTOR_MSASN1" __IMPORT_DESCRIPTOR_MSASN1
0x18000A35C: "public: void * __ptr64 __cdecl RedirectedCredContextTable::`scalar deleting destructor'(unsigned int) __ptr64" ??_GRedirectedCredContextTable@@QEAAPEAXI@Z
0x180016EE0: "void __cdecl TSTermAsn(struct ASN1encoding_s * __ptr64,struct ASN1decoding_s * __ptr64)" ?TSTermAsn@@YAXPEAUASN1encoding_s@@PEAUASN1decoding_s@@@Z
0x18001C618: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18001CB20: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180002460: "__cdecl _imp_load_CertVerifyCertificateChainPolicy" __imp_load_CertVerifyCertificateChainPolicy
0x18001C900: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x180023BD0: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x18001C578: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18001C490: "__cdecl _imp_InitializeSecurityContextW" __imp_InitializeSecurityContextW
0x180018A90: "long __cdecl CheckConcatDefault(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?CheckConcatDefault@@YAJPEAUHKEY__@@PEBGPEAH@Z
0x180003894: "public: __cdecl wil::details_abi::UsageIndexes::~UsageIndexes(void) __ptr64" ??1UsageIndexes@details_abi@wil@@QEAA@XZ
0x18001C3B8: "__cdecl _imp_ASN1BERDecExplicitTag" __imp_ASN1BERDecExplicitTag
0x18001C600: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18001C3B0: "__cdecl _imp_ASN1octetstring_free" __imp_ASN1octetstring_free
0x18000E8D8: WPP_SF_qddd
0x180002A00: "__cdecl _chkstk" __chkstk
0x18001B5F0: NetpWriteEventlogEx
0x180003B48: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x180003628: "public: __cdecl wil::details_abi::UsageIndexes::UsageIndexes(void) __ptr64" ??0UsageIndexes@details_abi@wil@@QEAA@XZ
0x1800027AD: "__cdecl _imp_load_CredUnPackAuthenticationBufferW" __imp_load_CredUnPackAuthenticationBufferW
0x180024038: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUyzhvUohzUxlnnlmUhhkrsvokviUlyquivUznwGEUhvxkxsOlyq@SspiHelper" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUyzhvUohzUxlnnlmUhhkrsvokviUlyquivUznwGEUhvxkxsOlyq@SspiHelper
0x18001D560: "AllowSavedCredentials" ??_C@_1CM@IMIELIMI@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAa?$AAv?$AAe?$AAd?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x18001E110: "\tracing" ??_C@_1BC@MCOJGIKC@?$AA?2?$AAt?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x180004654: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x18001DB28: WPP_1a5fc25f0c633bb9f1e8f6bd59f1f10b_Traceguids
0x18001D4A0: "DenyDefaultCredentials" ??_C@_1CO@JPEJJEBG@?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x18001C730: "__cdecl _imp_RegNotifyChangeKeyValue" __imp_RegNotifyChangeKeyValue
0x18001C680: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x180002765: "__cdecl _imp_load_LsaIAdtAuditingEnabledBySubCategory" __imp_load_LsaIAdtAuditingEnabledBySubCategory
0x18001DAA4: "MY" ??_C@_15ELPOAHMG@?$AAM?$AAY?$AA?$AA@
0x180027050: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x180012610: "long __cdecl SpGetInfo(struct _SecPkgInfoW * __ptr64)" ?SpGetInfo@@YAJPEAU_SecPkgInfoW@@@Z
0x180012B80: "unsigned long __cdecl TSWatchParamKey(void * __ptr64)" ?TSWatchParamKey@@YAKPEAX@Z
0x180023DF0: "unsigned long g_bTSParamCacheCRLandIgnoreUnknown" ?g_bTSParamCacheCRLandIgnoreUnknown@@3KA
0x18001C8B8: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x18001C5C0: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x1800042C0: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x18001C770: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180004A3C: "public: struct wil::details_abi::ProcessLocalData * __ptr64 __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::GetShared(void) __ptr64" ?GetShared@?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAUProcessLocalData@23@XZ
0x180023BE0: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180023020: "struct _SECPKG_FUNCTION_TABLE TSGlobalFunctionTable" ?TSGlobalFunctionTable@@3U_SECPKG_FUNCTION_TABLE@@A
0x18001C870: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180015954: "long __cdecl TSGetUserNameFromContext(struct _TS_CONTEXT * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSGetUserNameFromContext@@YAJPEAU_TS_CONTEXT@@PEAU_UNICODE_STRING@@1@Z
0x18001C4D8: "__cdecl _imp_QueryContextAttributesW" __imp_QueryContextAttributesW
0x180023810: "__cdecl _hmod__api_ms_win_security_credentials_l2_1_0_dll" __hmod__api_ms_win_security_credentials_l2_1_0_dll
0x18001C400: "__cdecl _imp_ASN1_Encode" __imp_ASN1_Encode
0x180023DB0: "struct _SECPKG_DLL_FUNCTIONS * __ptr64 __ptr64 TSGlobalDllFunctions" ?TSGlobalDllFunctions@@3PEAU_SECPKG_DLL_FUNCTIONS@@EA
0x18000D46C: "long __cdecl TSUnpackAuthIdLogonBuffer(int,void * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSUnpackAuthIdLogonBuffer@@YAJHPEAXPEAU_UNICODE_STRING@@11PEAPEAXPEAK23@Z
0x18000E330: "long __cdecl TSUpdateCredentialsPassword(struct _SECPKG_PRIMARY_CRED * __ptr64,struct _TS_CREDENTIAL * __ptr64)" ?TSUpdateCredentialsPassword@@YAJPEAU_SECPKG_PRIMARY_CRED@@PEAU_TS_CREDENTIAL@@@Z
0x1800127F0: "long __cdecl SpShutdown(void)" ?SpShutdown@@YAJXZ
0x1800201C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18001CAD8: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x18001D320: "System\CurrentControlSet\Control" ??_C@_1FK@LNMPAIKJ@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800202B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x18001C710: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18001CC70: "__cdecl _guard_fids_table" __guard_fids_table
0x18001CA08: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18001FA78: dsreg_NULL_THUNK_DATA_DLN
0x1800064F0: "unsigned __int64 __cdecl wil::details::ResultStringSize(char const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBD@Z
0x1800178E0: "long __cdecl TSDoRedirectedLogonOperation(void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSDoRedirectedLogonOperation@@YAJPEAX0KPEAPEAXPEAK@Z
0x18001CA78: msvcrt_NULL_THUNK_DATA
0x18001C110: "__cdecl load_config_used" _load_config_used
0x18001DD50: WPP_325033fcaad33ae29fa0c9a6a8920f2e_Traceguids
0x18001C888: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180023DEC: "unsigned long g_bIgnoreTSAuthEKU" ?g_bIgnoreTSAuthEKU@@3KA
0x18000270B: "__cdecl _imp_load_LsaIGetRemoteCredGuardSupplementalCreds" __imp_load_LsaIGetRemoteCredGuardSupplementalCreds
0x18001C7E0: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x180027078: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x18001C430: "__cdecl _imp_ASN1_CreateEncoder" __imp_ASN1_CreateEncoder
0x1800039B0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x18001A870: SspiHelperConstructAuthEx2FromStrings
0x1800045A0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x18001C590: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18001C580: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18001C428: "__cdecl _imp_ASN1_CreateDecoder" __imp_ASN1_CreateDecoder
0x18001DDF0: "1.2.840.113549.1.1.5" ??_C@_0BF@LOMNNHAM@1?42?4840?4113549?41?41?45?$AA@
0x18000B070: "long __cdecl TSCaptureSuppliedCreds(struct _LUID * __ptr64,void * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSCaptureSuppliedCreds@@YAJPEAU_LUID@@PEAXPEAPEAU_TS_PRIMARY_CREDENTIAL@@PEAK@Z
0x18001C450: "__cdecl _imp_ASN1BERDecSkip" __imp_ASN1BERDecSkip
0x1800065A8: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x1800270F8: "__cdecl _imp_CredUnmarshalCredentialW" __imp_CredUnmarshalCredentialW
0x180003CE0: "public: void __cdecl wil::details_abi::ThreadLocalData::Clear(void) __ptr64" ?Clear@ThreadLocalData@details_abi@wil@@QEAAXXZ
0x180019178: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x18001DFC0: "WTSVirtualChannelWrite" ??_C@_0BH@GMEJLGLG@WTSVirtualChannelWrite?$AA@
0x18001CB88: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x180004060: "public: static void __cdecl wil::details::DestroyThreadPoolTimer<struct wil::details::SystemThreadPoolMethods,0>::Destroy(struct _TP_TIMER * __ptr64)" ?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAXPEAU_TP_TIMER@@@Z
0x180006518: "unsigned __int64 __cdecl wil::details::ResultStringSize(unsigned short const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBG@Z
0x180023C28: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x18002018C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000C158: "long __cdecl TSFreePrimaryCredentials(struct _TS_PRIMARY_CREDENTIAL * __ptr64)" ?TSFreePrimaryCredentials@@YAJPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18000BC30: "long __cdecl TSCredTableLocate(struct _TS_CREDENTIAL * __ptr64 * __ptr64,unsigned char * __ptr64)" ?TSCredTableLocate@@YAJPEAPEAU_TS_CREDENTIAL@@PEAE@Z
0x18000557C: "public: void __cdecl wil::details_abi::SubscriptionList::OnSignaled(class wil::srwlock & __ptr64) __ptr64" ?OnSignaled@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@@Z
0x18000F400: "long __cdecl SpDeleteContext(unsigned __int64)" ?SpDeleteContext@@YAJ_K@Z
0x18001C448: "__cdecl _imp_ASN1BERDecOctetString2" __imp_ASN1BERDecOctetString2
0x18001CA58: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18001C880: "__cdecl _imp_ChangeTimerQueueTimer" __imp_ChangeTimerQueueTimer
0x180027080: CRYPT32_NULL_THUNK_DATA_DLA
0x18001C950: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x180023E18: "unsigned long WTSVirtualChannelRefCount" ?WTSVirtualChannelRefCount@@3KA
0x18001CAA0: "__cdecl _imp_NtClose" __imp_NtClose
0x180004610: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x1800270E0: "__cdecl _imp_LsaIRegisterNotification" __imp_LsaIRegisterNotification
0x18000C85C: "long __cdecl TSObtainClearCreds(struct _TS_PRIMARY_CREDENTIAL * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSObtainClearCreds@@YAJPEAU_TS_PRIMARY_CREDENTIAL@@PEAPEAU1@@Z
0x18001C410: "__cdecl _imp_ASN1_Decode" __imp_ASN1_Decode
0x180006B78: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18001DFA8: "WTSVirtualChannelRead" ??_C@_0BG@DDAEGNDM@WTSVirtualChannelRead?$AA@
0x18000C748: "long __cdecl TSInitPrimaryCreds(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSInitPrimaryCreds@@YAJPEAU_UNICODE_STRING@@00PEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x180007550: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x18001C758: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18001C968: "__cdecl _imp_BCryptGenRandom" __imp_BCryptGenRandom
0x18001C708: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180006A2C: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::SkipValues(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64) __ptr64" ?SkipValues@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAE@Z
0x180014940: "long __cdecl TSDuplicatePassword(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSDuplicatePassword@@YAJPEAU_UNICODE_STRING@@0@Z
0x18001D590: "TERMSRV/*" ??_C@_1BE@NAAMCDED@?$AAT?$AAE?$AAR?$AAM?$AAS?$AAR?$AAV?$AA?1?$AA?$CK?$AA?$AA@
0x18001C520: "__cdecl _imp_CompleteAuthToken" __imp_CompleteAuthToken
0x18001CB18: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800270C8: "__cdecl _imp_LsaIAdtAuditingEnabledBySubCategory" __imp_LsaIAdtAuditingEnabledBySubCategory
0x18001DEB0: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18001CB78: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x18001F894: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x18001C948: api-ms-win-security-base-l1-2-0_NULL_THUNK_DATA
0x180005424: ?MakeAndInitialize@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x180023150: "struct _SECPKG_USER_FUNCTION_TABLE TSGlobalUserFunctions" ?TSGlobalUserFunctions@@3U_SECPKG_USER_FUNCTION_TABLE@@A
0x18001C690: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180019074: "long __cdecl QueryForMatch(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned __int64,int * __ptr64)" ?QueryForMatch@@YAJPEAUHKEY__@@PEBG_KPEAH@Z
0x18001D240: "NtUpdateWnfStateData" ??_C@_0BF@NPHHEHP@NtUpdateWnfStateData?$AA@
0x180027118: "__cdecl _imp_CredUnprotectW" __imp_CredUnprotectW
0x180002910: ApiSetQueryApiSetPresence
0x180007CD4: "long __cdecl wil_details_RtlSubscribeWnfStateChangeNotification(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?wil_details_RtlSubscribeWnfStateChangeNotification@@YAJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@Z
0x18001CAE8: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x180002035: free
0x18001C8F8: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x1800022A2: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x180027010: "__cdecl _imp_CryptDecodeObjectEx" __imp_CryptDecodeObjectEx
0x18001C688: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x18000B6A0: "long __cdecl TSCreateNewCredential(struct _SECPKG_PRIMARY_CRED * __ptr64,struct _TS_CREDENTIAL * __ptr64 * __ptr64)" ?TSCreateNewCredential@@YAJPEAU_SECPKG_PRIMARY_CRED@@PEAPEAU_TS_CREDENTIAL@@@Z
0x18001CAA8: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x18001C678: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180004928: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x18001C768: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001FE0: "__cdecl purecall" _purecall
0x18001C740: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180006398: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x18001E1B8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18001F834: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x18001E0C0: "\StringFileInfo\%04x%04x\FileVer" ??_C@_1EK@JBGMAMNI@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr@
0x18001C3C8: "__cdecl _imp_ASN1BEREncU32" __imp_ASN1BEREncU32
0x18001C3E8: "__cdecl _imp_ASN1BEREncS32" __imp_ASN1BEREncS32
0x18001C6A8: "__cdecl _imp_OpenFileMappingW" __imp_OpenFileMappingW
0x180013678: "long __cdecl RtlULongToUShort(unsigned long,unsigned short * __ptr64)" ?RtlULongToUShort@@YAJKPEAG@Z
0x180003688: "public: __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x180002250: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18001C6C0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18001C670: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1800029A6: memcmp
0x18001B28C: NetpEventlogWriteEx3
0x18001D2A8: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x18000C25C: "long __cdecl TSGetCspDataForCert(struct _CERT_CONTEXT * __ptr64,struct _TS_CSPDATA_DETAIL * __ptr64)" ?TSGetCspDataForCert@@YAJPEAU_CERT_CONTEXT@@PEAU_TS_CSPDATA_DETAIL@@@Z
0x1800270D8: "__cdecl _imp_LsaIGetRemoteCredGuardSupplementalCreds" __imp_LsaIGetRemoteCredGuardSupplementalCreds
0x18001DD90: "1.2.840.113549.1.1.1" ??_C@_0BF@NKKBBCAI@1?42?4840?4113549?41?41?41?$AA@
0x1800059DC: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x1800034F8: ??0?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAA@$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@2@$$QEAVSemaphoreValue@12@@Z
0x18000B8D4: "void __cdecl TSCredTableDelete(struct _TS_CREDENTIAL * __ptr64,unsigned char)" ?TSCredTableDelete@@YAXPEAU_TS_CREDENTIAL@@E@Z
0x18001D110: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180023C30: "long (__cdecl* __ptr64 g_wil_details_pfnRtlSubscribeWnfStateChangeNotification)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnRtlSubscribeWnfStateChangeNotification@@3P6AJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@ZEA
0x180012D00: "long __cdecl SpInstanceInit(unsigned long,struct _SECPKG_DLL_FUNCTIONS * __ptr64,void * __ptr64 * __ptr64)" ?SpInstanceInit@@YAJKPEAU_SECPKG_DLL_FUNCTIONS@@PEAPEAX@Z
0x18000495C: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x180004A98: "public: unsigned __int64 __cdecl wil::details_abi::UsageIndexProperty::GetSize(void)const __ptr64" ?GetSize@UsageIndexProperty@details_abi@wil@@QEBA_KXZ
0x18000201D: wcschr
0x180018B0C: "long __cdecl CheckPolicyValue(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,enum PolicyID,int * __ptr64,int * __ptr64)" ?CheckPolicyValue@@YAJPEAUHKEY__@@0PEBGW4PolicyID@@PEAH3@Z
0x18001D2F0: "tspkg" ??_C@_1M@NGIKBMDD@?$AAt?$AAs?$AAp?$AAk?$AAg?$AA?$AA@
0x180019BE4: "void __cdecl _DbgpDeleteTraceControl(struct _DBG_TRACE_CONTROL_BLOCK * __ptr64)" ?_DbgpDeleteTraceControl@@YAXPEAU_DBG_TRACE_CONTROL_BLOCK@@@Z
0x18001CFE0: "__cdecl _sz_api_ms_win_security_credentials_l2_1_0_dll" __sz_api_ms_win_security_credentials_l2_1_0_dll
0x180023870: g_ulMaxStackAllocSize
0x180020114: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18001FA58: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLN
0x180011A2C: "long __cdecl TSProtectPassword(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSProtectPassword@@YAJPEAU_UNICODE_STRING@@0@Z
0x1800077D8: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x18001FEB0: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLB
0x1800023F4: "__cdecl _imp_load_CertGetCertificateContextProperty" __imp_load_CertGetCertificateContextProperty
0x180027120: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLA
0x18001C650: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18001DB38: "TS Service Security Package" ??_C@_1DI@BDONOPIC@?$AAT?$AAS?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?$AA@
0x180007808: "void __cdecl wil::details::in1diag3::_FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x180020240: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x18001CFB0: "__cdecl _sz_api_ms_win_security_credentials_l1_1_0_dll" __sz_api_ms_win_security_credentials_l1_1_0_dll
0x18001FA68: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLN
0x180023AC8: "void * __ptr64 __ptr64 TSPkgGlobalTraceControlBlock" ?TSPkgGlobalTraceControlBlock@@3PEAXEA
0x180027130: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLA
0x18001C8D0: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x18001FF58: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA_DLB
0x18001C878: "__cdecl _imp_CreateTimerQueueTimer" __imp_CreateTimerQueueTimer
0x180001260: "long __cdecl SpAcceptCredentials(enum _SECURITY_LOGON_TYPE,struct _UNICODE_STRING * __ptr64,struct _SECPKG_PRIMARY_CRED * __ptr64,struct _SECPKG_SUPPLEMENTAL_CRED * __ptr64)" ?SpAcceptCredentials@@YAJW4_SECURITY_LOGON_TYPE@@PEAU_UNICODE_STRING@@PEAU_SECPKG_PRIMARY_CRED@@PEAU_SECPKG_SUPPLEMENTAL_CRED@@@Z
0x180023BA0: "int TSGlobalIsCredGuardEnabled" ?TSGlobalIsCredGuardEnabled@@3HA
0x180005C9C: "public: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsage(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsage@RawUsageIndex@details_abi@wil@@QEAA_NPEAX_K01I@Z
0x18001D1F8: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x18001CBD0: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18001CA40: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180018DBC: "long __cdecl IsDelegationAllowed(unsigned short const * __ptr64,enum CRED_SOURCE,int * __ptr64)" ?IsDelegationAllowed@@YAJPEBGW4CRED_SOURCE@@PEAH@Z
0x18001DCA0: "Software\Microsoft\Windows\Curre" ??_C@_1JK@JGMFCEDK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18001CAC8: "__cdecl _imp_RtlAvlRemoveNode" __imp_RtlAvlRemoveNode
0x18001CB80: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x18001F874: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l2_1_0_dll
0x18001CBF8: ntdll_NULL_THUNK_DATA
0x18001CA50: "__cdecl _imp_memcpy" __imp_memcpy
0x18001E068: "\DSYSDBG.%s" ??_C@_1BI@OFHKAKEE@?$AA?2?$AAD?$AAS?$AAY?$AAS?$AAD?$AAB?$AAG?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x180020128: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x18001D0D8: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x180018CF8: "unsigned long __cdecl GetNextValue(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned __int64 * __ptr64)" ?GetNextValue@@YAKPEAUHKEY__@@KPEAGPEA_K@Z
0x180010E34: "long __cdecl TSLookForCredmanCreds(struct _UNICODE_STRING * __ptr64,struct _LUID * __ptr64,int,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSLookForCredmanCreds@@YAJPEAU_UNICODE_STRING@@PEAU_LUID@@HPEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18000E51C: WPP_SF_Dsd
0x180007884: ?acquire@?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEBA?AV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@2@PEAKKH@Z
0x180016690: "long __cdecl TSParseCreds(struct _TS_CONTEXT * __ptr64,unsigned char * __ptr64,unsigned long,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSParseCreds@@YAJPEAU_TS_CONTEXT@@PEAEKPEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x18001F8D4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll
0x18001D1A8: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x18001D138: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18001CAC0: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180023250: g_header_init_InitializeStagingSRUMFeatureReporting
0x18001D5A8: "DenySavedCredentials" ??_C@_1CK@IFGPLPKA@?$AAD?$AAe?$AAn?$AAy?$AAS?$AAa?$AAv?$AAe?$AAd?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x18001DF78: "WTSVirtualChannelOpenEx" ??_C@_0BI@BOGIMDEJ@WTSVirtualChannelOpenEx?$AA@
0x18001C920: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180015C74: "long __cdecl TSPackBuffers(struct _SecBufferDesc * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,struct _SecBuffer * __ptr64,long,unsigned char * __ptr64,unsigned long)" ?TSPackBuffers@@YAJPEAU_SecBufferDesc@@PEAEK1KPEAU_SecBuffer@@J1K@Z
0x180023818: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x180020088: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18001C858: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180005704: "public: void __cdecl wil::details::FeatureStateManager::QueueBackgroundSRUMUsageReporting(unsigned int,unsigned short,unsigned int) __ptr64" ?QueueBackgroundSRUMUsageReporting@FeatureStateManager@details@wil@@QEAAXIGI@Z
0x18001C998: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180014568: "long __cdecl TSDecodeData(unsigned char * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?TSDecodeData@@YAJPEAEKKPEAPEAX@Z
0x18001C548: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180023238: "__cdecl _security_cookie" __security_cookie
0x18001C748: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180012BE0: "long __cdecl SpGetContextToken(unsigned __int64,void * __ptr64 * __ptr64)" ?SpGetContextToken@@YAJ_KPEAPEAX@Z
0x18000E718: WPP_SF_dZDD
0x180023880: g_pfnAllocate
0x180007BC0: "long __cdecl wil_details_NtQueryWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?wil_details_NtQueryWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@Z
0x180002A00: "__cdecl alloca_probe" _alloca_probe
0x180004ED4: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x180002296: "__cdecl _imp_load_CertFreeCertificateContext" __imp_load_CertFreeCertificateContext
0x18001D210: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x18001C918: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18001C3A0: "__cdecl _imp_ASN1BERDecEndOfContents" __imp_ASN1BERDecEndOfContents
0x18001C860: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x18000268C: "__cdecl _tailMerge_lsasrv_dll" __tailMerge_lsasrv_dll
0x18001A444: "long __cdecl _DbgpWaitForControllerEvent(int * __ptr64,void * __ptr64 * __ptr64)" ?_DbgpWaitForControllerEvent@@YAJPEAHPEAPEAX@Z
0x18000271D: "__cdecl _imp_load_LsaIGetRemoteCredGuardLogonBuffer" __imp_load_LsaIGetRemoteCredGuardLogonBuffer
0x18001C5E0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001C8D8: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x18001DDA8: "1.2.840.113549.1.1.2" ??_C@_0BF@PBIMEBML@1?42?4840?4113549?41?41?42?$AA@
0x180020254: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x1800023BE: "__cdecl _imp_load_CertFindCertificateInStore" __imp_load_CertFindCertificateInStore
0x18001C610: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18001E018: WPP_67ad98a5788c33baccc8c8b9fc383b40_Traceguids
0x1800078E4: ?close_reset@?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@SAXPEAU__WIL__WNF_USER_SUBSCRIPTION@@@Z
0x1800200B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180003734: "public: __cdecl wil::details::FeatureStateManager::~FeatureStateManager(void) __ptr64" ??1FeatureStateManager@details@wil@@QEAA@XZ
0x18001C4B8: "__cdecl _imp_SspiLocalFree" __imp_SspiLocalFree
0x18001CB68: "__cdecl _imp_RtlGetLastNtStatus" __imp_RtlGetLastNtStatus
0x18000C118: "long __cdecl TSFreeCspDataDetail(struct _TS_CSPDATA_DETAIL * __ptr64)" ?TSFreeCspDataDetail@@YAJPEAU_TS_CSPDATA_DETAIL@@@Z
0x180027150: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLA
0x180023858: "__cdecl _onexitbegin" __onexitbegin
0x18001C8C0: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x18001C3F0: "__cdecl _imp_ASN1BEREncEndOfContents" __imp_ASN1BEREncEndOfContents
0x1800121B8: "void __cdecl TSFreeContext(struct _TS_CONTEXT * __ptr64)" ?TSFreeContext@@YAXPEAU_TS_CONTEXT@@@Z
0x180027060: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x180023B70: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x18001DD40: WPP_7bc7fc9108c335177acde41481b24196_Traceguids
0x18001CB00: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x18001CA60: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000E828: WPP_SF_qd
0x18001C5A0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180011DF4: WPP_SF_qq
0x180013AF4: "long __cdecl TSBuildSCLogonInfo(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSBuildSCLogonInfo@@YAJPEAG000KPEAPEAEPEAK@Z
0x180005BD0: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,2>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$01@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x1800128A4: "void __cdecl TSGetRegParams(struct HKEY__ * __ptr64)" ?TSGetRegParams@@YAXPEAUHKEY__@@@Z
0x180002496: "__cdecl _imp_load_CertCreateCertificateContext" __imp_load_CertCreateCertificateContext
0x1800183CC: "public: long __cdecl RedirectedCredContextTable::CallPackage(struct _UNICODE_STRING const & __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CallPackage@RedirectedCredContextTable@@QEAAJAEBU_UNICODE_STRING@@PEAXKPEAPEAXPEAK@Z
0x18001C718: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180018940: "void __cdecl TSReportNoVersionMatch(struct _UNICODE_STRING * __ptr64,unsigned long)" ?TSReportNoVersionMatch@@YAXPEAU_UNICODE_STRING@@K@Z
0x180012C40: "long __cdecl SpInitUserModeContext(unsigned __int64,struct _SecBuffer * __ptr64)" ?SpInitUserModeContext@@YAJ_KPEAU_SecBuffer@@@Z
0x18001CBD8: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x180023C40: "void (__cdecl* __ptr64 g_wil_details_apiRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_apiRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x1800238B8: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x18001A6E4: "__cdecl InitDebugTracingEx" _InitDebugTracingEx
0x180004BC0: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x180002150: "__cdecl _security_init_cookie" __security_init_cookie
0x18001DED0: "HashDigestLength" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18001C4F0: "__cdecl _imp_SspiUnmarshalAuthIdentity" __imp_SspiUnmarshalAuthIdentity
0x180023B60: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x18000E7EC: WPP_SF_q
0x18001DAC0: WPP_ThisDir_CTLGUID_TSPkgDebugTraceGuid
0x18001C988: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x18001CAB0: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18001C940: "__cdecl _imp_CheckTokenMembershipEx" __imp_CheckTokenMembershipEx
0x18000244E: "__cdecl _imp_load_CertGetCertificateChain" __imp_load_CertGetCertificateChain
0x1800023D0: "__cdecl _imp_load_CertCloseStore" __imp_load_CertCloseStore
0x180027058: "__cdecl _imp_CertAddEncodedCertificateToStore" __imp_CertAddEncodedCertificateToStore
0x1800051F8: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::LowerBound(unsigned char * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64) __ptr64" ?LowerBound@RawUsageIndex@details_abi@wil@@AEAAPEAEPEAE_KPEAX1@Z
0x1800074B8: "void __cdecl wil::details::WilApi_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApi_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x18000BDF8: "long __cdecl TSDuplicateCspDetail(struct _TS_CSPDATA_DETAIL * __ptr64,struct _TS_CSPDATA_DETAIL * __ptr64)" ?TSDuplicateCspDetail@@YAJPEAU_TS_CSPDATA_DETAIL@@0@Z
0x180023888: g_pfnFree
0x180005AB8: "public: void __cdecl wil::details::FeatureStateManager::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateManager@details@wil@@QEAAXIW4wil_details_ServiceReportingKind@@_K@Z
0x1800270A8: "__cdecl _imp_LsaIQueryInformationPolicyTrusted" __imp_LsaIQueryInformationPolicyTrusted
0x180008254: "long __cdecl wil_details_WriteSRUMWnfUsageBuffer(class wil::details_abi::heap_vector<struct wil_details_FeatureUsageSRUM> * __ptr64)" ?wil_details_WriteSRUMWnfUsageBuffer@@YAJPEAV?$heap_vector@Uwil_details_FeatureUsageSRUM@@@details_abi@wil@@@Z
0x180004D8C: ?Iterate@RawUsageIndex@details_abi@wil@@QEBA_NV?$function@$$A6A_NPEAX_K01I@Z@wistd@@@Z
0x18001DE70: "vs-debug/localhost" ??_C@_1CG@EPEDKINC@?$AAv?$AAs?$AA?9?$AAd?$AAe?$AAb?$AAu?$AAg?$AA?1?$AAl?$AAo?$AAc?$AAa?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x180020060: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180001120: "void __cdecl LsaApLogonTerminated(struct _LUID * __ptr64)" ?LsaApLogonTerminated@@YAXPEAU_LUID@@@Z
0x18001D6B8: "ConcatenateDefaults_AllowFresh" ??_C@_1DO@MBJPJKJI@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAF?$AAr?$AAe?$AAs?$AAh?$AA?$AA@
0x1800052C4: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x18001E130: "%s_%wZ_%d_%d_%d_%d_%d_%d_%s_%x_%" ??_C@_1EE@OPBIIOEJ@?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAw?$AAZ?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAx?$AA_?$AA?$CF@
0x18001D520: "ConcatenateDefaults_DenyDefault" ??_C@_1EA@NDJIDCMP@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180016DD4: "long __cdecl TSSplitName(unsigned short * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSSplitName@@YAJPEAGPEAU_UNICODE_STRING@@1@Z
0x180017200: "long __cdecl LsaApCallPackage(void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64)" ?LsaApCallPackage@@YAJPEAPEAXPEAX1K0PEAKPEAJ@Z
0x18001D6F8: "ConcatenateDefaults_DenyFresh" ??_C@_1DM@POCIGCHP@?$AAC?$AAo?$AAn?$AAc?$AAa?$AAt?$AAe?$AAn?$AAa?$AAt?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA_?$AAD?$AAe?$AAn?$AAy?$AAF?$AAr?$AAe?$AAs?$AAh?$AA?$AA@
0x180019F4C: "struct _DBG_TCB_HEADER * __ptr64 __cdecl _DbgpOpenOrCreateSharedMem(void)" ?_DbgpOpenOrCreateSharedMem@@YAPEAU_DBG_TCB_HEADER@@XZ
0x1800238D8: TSSSP_Module
0x1800065C8: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x1800039DC: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x1800107EC: "long __cdecl TSEncryptBuffer(struct _SecHandle * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSEncryptBuffer@@YAJPEAU_SecHandle@@PEAEKPEAPEAEPEAK@Z
0x18001F9D0: CRYPTSP_NULL_THUNK_DATA_DLN
0x180001480: "long __cdecl CheckValue(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64,int * __ptr64)" ?CheckValue@@YAJPEAUHKEY__@@0PEBG1111_KPEAH@Z
0x18001CA68: "__cdecl _imp_malloc" __imp_malloc
0x180023DA0: "struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64 __ptr64 TSGlobalLsaFunctions" ?TSGlobalLsaFunctions@@3PEAU_LSA_SECPKG_FUNCTION_TABLE@@EA
0x18001C9E0: "__cdecl _imp__purecall" __imp__purecall
0x18001FFD8: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLB
0x180005C04: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,0>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$0A@@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x180007228: "public: void __cdecl wil::details_abi::SubscriptionList::Unsubscribe(class wil::srwlock & __ptr64,struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64) __ptr64" ?Unsubscribe@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@PEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x18001C4E8: "__cdecl _imp_SspiIsAuthIdentityEncrypted" __imp_SspiIsAuthIdentityEncrypted
0x180023D68: "unsigned long TSPkgInfoLevel" ?TSPkgInfoLevel@@3KA
0x180010A60: "long __cdecl TSInitPrimaryCredsFromCredManCred(struct _ENCRYPTED_CREDENTIALW * __ptr64,struct _TS_PRIMARY_CREDENTIAL * __ptr64 * __ptr64)" ?TSInitPrimaryCredsFromCredManCred@@YAJPEAU_ENCRYPTED_CREDENTIALW@@PEAPEAU_TS_PRIMARY_CREDENTIAL@@@Z
0x180007310: "void __cdecl wil::details::WilApiImpl_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApiImpl_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x18001D1D0: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x18001C7F8: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x18001C928: "__cdecl _imp_DuplicateToken" __imp_DuplicateToken
0x180023B58: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x18001CFA0: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x18001AA7C: SspiHelperProcessEncodedPackedCredentials
0x18001CB30: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x180027108: "__cdecl _imp_CredProtectW" __imp_CredProtectW
0x18001A9C8: SspiHelperDuplicateStringEx
0x180001DB0: "__cdecl _report_gsfailure" __report_gsfailure
0x18001C550: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x18001D870: "AllowFreshCredentialsWhenNTLMOnl" ??_C@_1EE@GONICDJC@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAF?$AAr?$AAe?$AAs?$AAh?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AAW?$AAh?$AAe?$AAn?$AAN?$AAT?$AAL?$AAM?$AAO?$AAn?$AAl@
0x1800024CC: "__cdecl _imp_load_CredUnprotectW" __imp_load_CredUnprotectW
0x180003D78: "void __cdecl wil::details::CloseHandle(void * __ptr64)" ?CloseHandle@details@wil@@YAXPEAX@Z
0x18000AC10: "long __cdecl SpFreeCredentialsHandle(unsigned __int64)" ?SpFreeCredentialsHandle@@YAJ_K@Z
0x18001C7D8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800270B8: "__cdecl _imp_LsaIAuditInitializeParametersAndWriteEvent" __imp_LsaIAuditInitializeParametersAndWriteEvent
0x180001F28: "__cdecl onexit" _onexit
0x1800153DC: "long __cdecl TSGetPublicKeyFromCertFormat(unsigned long,struct _SecBuffer * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSGetPublicKeyFromCertFormat@@YAJKPEAU_SecBuffer@@PEAPEAEPEAK@Z
0x18001C4C8: "__cdecl _imp_DecryptMessage" __imp_DecryptMessage
0x180023C90: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x18001C8E0: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x180023BD8: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x18001D020: "ext-ms-win-session-wtsapi32-l1-1" ??_C@_1EG@MFPCCJEE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAt?$AAs?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180012680: "long __cdecl SpInitialize(unsigned __int64,struct _SECPKG_PARAMETERS * __ptr64,struct _LSA_SECPKG_FUNCTION_TABLE * __ptr64)" ?SpInitialize@@YAJ_KPEAU_SECPKG_PARAMETERS@@PEAU_LSA_SECPKG_FUNCTION_TABLE@@@Z
0x1800067F8: "public: void __cdecl wil::details_abi::RawUsageIndex::SetBuffer(void * __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?SetBuffer@RawUsageIndex@details_abi@wil@@QEAAXPEAX_K1@Z
0x180023848: "__cdecl _native_startup_state" __native_startup_state
0x18001D0C0: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000E9A4: "long __cdecl IsDeviceDomainJoined(int * __ptr64)" ?IsDeviceDomainJoined@@YAJPEAH@Z
0x180023B78: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x18001C420: "__cdecl _imp_ASN1_CloseEncoder" __imp_ASN1_CloseEncoder
0x180015B70: "unsigned char __cdecl TSIsLoopback(unsigned short * __ptr64)" ?TSIsLoopback@@YAEPEAG@Z
0x1800238AC: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x1800270C0: "__cdecl _imp_LsapDbLookupGetDomainInfo" __imp_LsapDbLookupGetDomainInfo
0x18001AF1C: SafeAllocaInitialize
0x180027138: "__cdecl _imp_DsrIsDeviceJoined" __imp_DsrIsDeviceJoined
0x18001E028: "Domain" ??_C@_1O@OAMNPMOM@?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AA?$AA@
0x180023B80: "void (__cdecl* __ptr64 g_wil_details_internalRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_internalRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x1800155C0: "long __cdecl TSGetUpnFromCert(struct _CERT_CONTEXT const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSGetUpnFromCert@@YAJPEBU_CERT_CONTEXT@@PEAU_UNICODE_STRING@@@Z
0x18001C530: "__cdecl _imp_DeleteSecurityContext" __imp_DeleteSecurityContext
0x180027040: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180001220: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x180011240: "long __cdecl TSMapContext(struct _TS_CONTEXT * __ptr64,unsigned char * __ptr64,struct _SecBuffer * __ptr64)" ?TSMapContext@@YAJPEAU_TS_CONTEXT@@PEAEPEAU_SecBuffer@@@Z
0x18001DEA0: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180007D78: "long __cdecl wil_details_StagingConfig_FireNotification(struct wil_details_StagingConfig * __ptr64,unsigned int,unsigned short,int)" ?wil_details_StagingConfig_FireNotification@@YAJPEAUwil_details_StagingConfig@@IGH@Z
0x1800017E0: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::FeatureStateManager>::Destroy(void) __ptr64" ?Destroy@?$manually_managed_shutdown_aware_object@VFeatureStateManager@details@wil@@@wil@@QEAAXXZ
0x18001D170: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180023E00: "int (__cdecl* __ptr64 WTSVirtualChannelReadFunc)(void * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long * __ptr64)" ?WTSVirtualChannelReadFunc@@3P6AHPEAXKPEADKPEAK@ZEA
0x180007C40: "long __cdecl wil_details_NtUpdateWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?wil_details_NtUpdateWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@Z
0x180017640: "void __cdecl TSCleanupRedirectedLogon(void * __ptr64)" ?TSCleanupRedirectedLogon@@YAXPEAX@Z
0x180012008: "void __cdecl TSContextTableDelete(struct _TS_CONTEXT * __ptr64)" ?TSContextTableDelete@@YAXPEAU_TS_CONTEXT@@@Z
0x18001AECC: InternalVerifyStackAvailable
0x180020268: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180010670: "long __cdecl TSDecryptBuffer(struct _SecHandle * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSDecryptBuffer@@YAJPEAU_SecHandle@@PEAEKPEAPEAEPEAK@Z
0x18001CBB0: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x18001C3C0: "__cdecl _imp_ASN1BERDecPeekTag" __imp_ASN1BERDecPeekTag
0x180005180: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x18000175C: "public: __cdecl wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>::~ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>(void) __ptr64" ??1?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@wil@@QEAA@XZ
0x180002484: "__cdecl _imp_load_CertAddEncodedCertificateToStore" __imp_load_CertAddEncodedCertificateToStore
0x18001DA90: "SpAcceptCredentials" ??_C@_0BE@CAGFPEMJ@SpAcceptCredentials?$AA@
0x1800270D0: "__cdecl _imp_LsaICancelNotification" __imp_LsaICancelNotification
0x18001DAF0: "pku2u" ??_C@_1M@HIIECOBP@?$AAp?$AAk?$AAu?$AA2?$AAu?$AA?$AA@
0x18001B1DC: NetpEventlogOpen
0x18001B168: NetpEventlogClose
0x180023B68: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x1800238E0: "class wil::shutdown_aware_object<class wil::details::FeatureStateManager> wil::details::g_featureStateManager" ?g_featureStateManager@details@wil@@3V?$shutdown_aware_object@VFeatureStateManager@details@wil@@@2@A
0x18001F854: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll
0x18001A208: "void __cdecl _DbgpSetExt(unsigned long,unsigned short * __ptr64)" ?_DbgpSetExt@@YAXKPEAG@Z
0x1800201DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000BA88: "long __cdecl TSCredTableInsertOrLocate(struct _TS_CREDENTIAL * __ptr64 * __ptr64)" ?TSCredTableInsertOrLocate@@YAJPEAPEAU_TS_CREDENTIAL@@@Z
0x180019CBC: "int __cdecl _DbgpGetFileVersionString(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64)" ?_DbgpGetFileVersionString@@YAHPEAGK0@Z
0x180023C18: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x18001CAD0: "__cdecl _imp_RtlAvlInsertNodeEx" __imp_RtlAvlInsertNodeEx
0x18000E580: WPP_SF_SD
0x18000E604: WPP_SF_Sd
0x180027148: "__cdecl _imp_CredUnPackAuthenticationBufferW" __imp_CredUnPackAuthenticationBufferW
0x18001CA30: "__cdecl _imp_free" __imp_free
0x18001C890: "__cdecl _imp_DeleteTimerQueueTimer" __imp_DeleteTimerQueueTimer
0x1800020B0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18001C810: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18001CA90: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x180006FA8: "private: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValueInternal(unsigned short const * __ptr64,bool,unsigned __int64 * __ptr64,bool * __ptr64)" ?TryGetValueInternal@SemaphoreValue@details_abi@wil@@CAJPEBG_NPEA_KPEA_N@Z
0x180014FC8: "long __cdecl TSGetPublicKeyFromCertChain(unsigned long,struct _SecBuffer * __ptr64,struct _SecBuffer * __ptr64,unsigned short * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,struct _CERT_TRUST_STATUS * __ptr64)" ?TSGetPublicKeyFromCertChain@@YAJKPEAU_SecBuffer@@0PEAGPEAPEAEPEAKPEAEPEAU_CERT_TRUST_STATUS@@@Z
0x18001CA38: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x1800200C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x18001D0F4: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x18000BDD0: "void __cdecl TSDereferenceCredential(struct _TS_CREDENTIAL * __ptr64)" ?TSDereferenceCredential@@YAXPEAU_TS_CREDENTIAL@@@Z
0x1800200EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18001DA10: SEC_WINNT_AUTH_DATA_TYPE_PASSWORD
0x18001C800: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18001D300: "DebugLogLevel" ??_C@_1BM@EEOBPDAM@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAL?$AAo?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1800201B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800238A0: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x180019940: "int __cdecl _DbgpCreateTraceControl(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _GUID * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,struct _DBG_TRACE_CONTROL_BLOCK * __ptr64 * __ptr64)" ?_DbgpCreateTraceControl@@YAHPEBG0PEAU_GUID@@00HPEAPEAU_DBG_TRACE_CONTROL_BLOCK@@@Z
0x180011CCC: WPP_SF_S
0x18000E948: WPP_SF_s
0x180016FDC: "long __cdecl TSUnpackAuthIdEx2LogonBuffer(struct _SEC_WINNT_AUTH_IDENTITY_EX2 * __ptr64,unsigned char,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64)" ?TSUnpackAuthIdEx2LogonBuffer@@YAJPEAU_SEC_WINNT_AUTH_IDENTITY_EX2@@EPEAU_UNICODE_STRING@@11@Z
0x180012378: "void __cdecl TSInitDebugSupport(void)" ?TSInitDebugSupport@@YAXXZ
0x1800029BE: memset
0x180020308: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180002777: "__cdecl _imp_load_LsaIAuditInitializeParametersAndWriteEvent" __imp_load_LsaIAuditInitializeParametersAndWriteEvent
0x180023251: g_header_init_InitializeResultHeader
0x1800180B4: "long __cdecl TSReadReturnBuffer(void * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TSReadReturnBuffer@@YAJPEAXPEAPEAXPEAK@Z

[JEB Decompiler by PNF Software]