Generated by JEB on 2019/02/01

PE: C:\Windows\System32\NtlmShared.dll Base=0x180000000 SHA-256=B89FAC14FAE533D5C37D0CB8FF0693B014EDD94D19A796D05F5C2D182958D59D
PDB: NtlmShared.pdb GUID={D46C17E3-483F-4AE8-8439557328CA330E} Age=1

280 located named symbols:
0x180002130: MsvpDeriveSecureCredKey
0x180004894: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003D8C: "int __cdecl ReusableHMAC(void * __ptr64,void * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long)" ?ReusableHMAC@@YAHPEAX0KPEAEK1K1K1K@Z
0x180005330: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x1800044C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180005390: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18000651C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180004480: "public: int __cdecl CLinkedList::Initialize(void) __ptr64" ?Initialize@CLinkedList@@QEAAHXZ
0x180008058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800029F0: MsvpUpdateSharedConfiguration
0x1800044F8: "__cdecl CRT_INIT" _CRT_INIT
0x1800056A0: "`string'" ??_C@_1BG@FFCFCMBD@?$AAN?$AAt?$AAl?$AAm?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AA?$AA@
0x1800051E8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000A000: "__cdecl _imp_SystemFunction036" __imp_SystemFunction036
0x180005490: "__cdecl _sz_CRYPTBASE_dll" __sz_CRYPTBASE_dll
0x180005368: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800025D0: WppControlCallback
0x1800055C8: "`string'" ??_C@_0BK@KDCOLOBF@HandleMsvSupplementalCred?$AA@
0x180002AA8: WPP_SF_sDZZZDD
0x180004C80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002548: MsvpAvlGet
0x180001970: MsvpNtlm3Response
0x180003700: MsvpValidateSupplementalCredsBuffer
0x1800052E8: "__cdecl _imp_RtlUpperChar" __imp_RtlUpperChar
0x180005520: "`string'" ??_C@_0BA@DKEOAFMB@MsvpLm3Response?$AA@
0x180005560: "`string'" ??_C@_0CC@PADFCDHF@MsvpLm20GetNtlm3ChallengeRespons@
0x18000A038: CRYPTSP_NULL_THUNK_DATA_DLA
0x18000569C: "`string'" ??_C@_00CNPNBAHC@?$AA@
0x1800052C8: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x180005370: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800058A8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800052D0: bcrypt_NULL_THUNK_DATA
0x180005140: "__cdecl _imp__initterm_e" __imp__initterm_e
0x1800051C0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180003EB8: PKCS5DerivePBKDF2
0x180002670: NtlmSharedInit
0x1800053A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005220: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180005260: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x180004B5A: "__cdecl _imp_load_SystemFunction006" __imp_load_SystemFunction006
0x180005530: "`string'" ??_C@_0BC@DFFPEEGO@MsvpNtlm3Response?$AA@
0x1800053B0: "__cdecl _xc_a" __xc_a
0x180005638: "`string'" ??_C@_0BK@JKAOPIKN@MsvpDecryptDpapiMasterKey?$AA@
0x1800060C0: CRYPTSP_NULL_THUNK_DATA_DLB
0x180004A50: "__cdecl _imp_load_SystemFunction036" __imp_load_SystemFunction036
0x1800052B0: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x180002390: MsvpCachePasswordsToCredential
0x180002360: MsvpCredentialToCachePasswords
0x180005810: "`string'" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x1800037A8: "__cdecl TlgDefineProvider_annotation__TlgNtlmTraceLoggerProv" _TlgDefineProvider_annotation__TlgNtlmTraceLoggerProv
0x1800051A8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000A020: "__cdecl _imp_SystemFunction011" __imp_SystemFunction011
0x180005484: "__cdecl _guard_iat_table" __guard_iat_table
0x180004BE1: memcpy
0x1800037AC: "unsigned long __cdecl DecryptMasterKeyToMemoryEx(unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,void * __ptr64 (__cdecl*)(unsigned __int64),unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned int * __ptr64,unsigned int * __ptr64,unsigned long * __ptr64)" ?DecryptMasterKeyToMemoryEx@@YAKPEAEK0KP6APEAX_K@ZPEAPEAEPEAKPEAI54@Z
0x180005288: "__cdecl _imp_BCryptDecrypt" __imp_BCryptDecrypt
0x180005340: "__cdecl _imp_RtlConvertSidToUnicodeString" __imp_RtlConvertSidToUnicodeString
0x180004AD5: "__cdecl _imp_load_SystemFunction007" __imp_load_SystemFunction007
0x180005128: "__cdecl _imp_memset" __imp_memset
0x18000485F: "__cdecl initterm" _initterm
0x1800065A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000421C: GetBCryptProviderHandle
0x1800053C8: "__cdecl _xi_z" __xi_z
0x180001660: MsvpCalculateNtlm3Owf
0x180005170: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180005380: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180004B8A: "__cdecl _C_specific_handler" __C_specific_handler
0x180003D20: "int __cdecl BCryptProvIsMatch(struct _ELT * __ptr64,struct _ELT * __ptr64)" ?BCryptProvIsMatch@@YAHPEAU_ELT@@0@Z
0x180005678: WPP_00455145ae8b323005fda892635f0223_Traceguids
0x180005198: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180004AE1: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x180001200: "void __cdecl NtlmTraceErrorWithStatusViaWpp(char const * __ptr64,unsigned long,char const * __ptr64,long)" ?NtlmTraceErrorWithStatusViaWpp@@YAXPEBDK0J@Z
0x180008630: WPP_REGISTRATION_GUIDS
0x1800057A0: WPP_9c7a4d64eb273e23791bcbc0188c64c7_Traceguids
0x1800057F8: "`string'" ??_C@_17MDMFNACG@?$AAM?$AAD?$AA4?$AA?$AA@
0x1800087E0: "struct _NtlmGlobalConfiguration GlobalConfig" ?GlobalConfig@@3U_NtlmGlobalConfiguration@@A
0x180008808: "struct _LM_OWF_PASSWORD NlpNullNtOwfPassword" ?NlpNullNtOwfPassword@@3U_LM_OWF_PASSWORD@@A
0x18000A030: "__cdecl _imp_SystemFunction007" __imp_SystemFunction007
0x18000A018: "__cdecl _imp_SystemFunction006" __imp_SystemFunction006
0x18000A010: "__cdecl _imp_SystemFunction009" __imp_SystemFunction009
0x18000A028: "__cdecl _imp_SystemFunction008" __imp_SystemFunction008
0x180004C10: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180008818: "struct _NtlmSharedConfiguration GlobalSharedConfig" ?GlobalSharedConfig@@3U_NtlmSharedConfiguration@@A
0x180008610: "__cdecl _hmod__CRYPTBASE_dll" __hmod__CRYPTBASE_dll
0x180008638: WPP_MAIN_CB
0x1800058A4: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180005688: "`string'" ??_C@_0BE@IIMGJGCF@MsvpAvlGetTimestamp?$AA@
0x180005588: "`string'" ??_C@_0CA@KLNLGJAD@MsvpComputeSaltedHashedPassword?$AA@
0x180006530: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x1800054A0: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x180002660: MsvpGMSACred
0x180005228: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180004770: "__cdecl decode_pointer" _decode_pointer
0x1800022B0: MsvpCompareCredentials
0x18000656C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0
0x180004B66: "__cdecl _imp_load_SystemFunction011" __imp_load_SystemFunction011
0x180005188: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800051F8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001D70: MsvpComputeSaltedHashedPassword
0x1800052B8: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180004868: DllMain
0x180005268: api-ms-win-core-util-l1-1-0_NULL_THUNK_DATA
0x1800054F8: "`string'" ??_C@_1BA@OGKPHKHF@?$AA?$CI?$AAe?$AAm?$AAp?$AAt?$AAy?$AA?$CJ?$AA?$AA@
0x180002970: NtlmSharedAllocate
0x1800012EC: WPP_SF_sZZ
0x180005110: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005310: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800051D8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004620: "__cdecl _DllMainCRTStartup" __DllMainCRTStartup
0x1800060B0: CRYPTBASE_NULL_THUNK_DATA_DLB
0x180001780: MsvpLm3Response
0x180005748: "`string'" ??_C@_0BI@GFANELMN@MsvpLm3ValidateResponse?$AA@
0x180004B90: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180001F70: MsvpPutClearOwfsInPrimaryCredential
0x180004BF0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005388: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x1800029B0: NtlmSharedAllocatePrivateHeap
0x180005760: "`string'" ??_C@_0BF@MLHGCPFP@MsvpPasswordValidate?$AA@
0x180005120: "__cdecl _imp_memcmp" __imp_memcmp
0x180005278: "__cdecl _imp_BCryptDeriveKeyPBKDF2" __imp_BCryptDeriveKeyPBKDF2
0x180005508: "`string'" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1800052A0: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180005828: "`string'" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x180006634: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800051E0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800058A4: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180002D68: WPP_SF_ssI
0x180005838: "`string'" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x180006544: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000A008: CRYPTBASE_NULL_THUNK_DATA_DLA
0x1800052D8: "__cdecl _imp_PBKDF2" __imp_PBKDF2
0x1800055A8: "`string'" ??_C@_0BK@PIBICPPJ@MsvpMakeSecretPasswordNT5?$AA@
0x1800051A0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180005FCC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800045E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005138: "__cdecl _imp__initterm" __imp__initterm
0x180005180: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180005800: "`string'" ??_C@_17HLFLMDBJ@?$AAR?$AAC?$AA4?$AA?$AA@
0x180006620: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800051D0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800052F8: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x180005148: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x1800053A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005290: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180005130: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x180005518: "`string'" ??_C@_13IOKCHHHM@?$AA?$BA?$AA?$AA@
0x1800065D0: "__cdecl _IMPORT_DESCRIPTOR_cryptdll" __IMPORT_DESCRIPTOR_cryptdll
0x1800054AC: "`string'" ??_C@_04HIBGFPH@NULL?$AA@
0x1800051F0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005300: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x180005350: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005280: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x180005250: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800053C0: "__cdecl _xi_a" __xi_a
0x180005240: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005160: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180005718: "`string'" ??_C@_0BO@ONNFCJKD@MsvpUpdateSharedConfiguration?$AA@
0x180008000: WPP_GLOBAL_Control
0x180006594: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001000: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180005850: "`string'" ??_C@_1BG@OOALDDHJ@?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AAs?$AA?$AA@
0x180005808: "`string'" ??_C@_17LBCHNHBC@?$AAD?$AAE?$AAS?$AA?$AA@
0x180004BB8: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180005258: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180006558: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180005230: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180004750: "__cdecl _security_check_cookie" __security_check_cookie
0x1800053B8: "__cdecl _xc_z" __xc_z
0x1800065E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180005200: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180005848: "`string'" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x180005248: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800051B0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180005378: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180005150: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180005190: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180005FF8: CRYPTBASE_NULL_THUNK_DATA_DLN
0x180001240: "void __cdecl NtlmTraceInfoViaWpp(char const * __ptr64,unsigned long,char const * __ptr64)" ?NtlmTraceInfoViaWpp@@YAXPEBDK0@Z
0x180005F8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll
0x180003D50: "void __cdecl BCryptProvFreeElt(struct _ELT * __ptr64)" ?BCryptProvFreeElt@@YAXPEAU_ELT@@@Z
0x180008068: "__cdecl _dllonexit_data" __dllonexit_data
0x180005210: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800053D0: "__cdecl _guard_fids_table" __guard_fids_table
0x180005010: "__cdecl load_config_used" _load_config_used
0x1800036E0: MsvpValidateSupplementalCreds
0x180005548: "`string'" ??_C@_0BE@CMBIKGHM@RtlGetRandomFailure?$AA@
0x180005168: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180005158: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180008620: "struct _LM_OWF_PASSWORD NlpNullLmOwfPassword" ?NlpNullLmOwfPassword@@3U_LM_OWF_PASSWORD@@A
0x180001490: MsvpCalculateNtlm2Challenge
0x1800052C0: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x180002ED0: MsvpNtlm3ValidateResponse
0x1800051C8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002900: NtlmSharedCleanup
0x1800052E0: cryptdll_NULL_THUNK_DATA
0x180004A5C: "__cdecl _tailMerge_cryptbase_dll" __tailMerge_cryptbase_dll
0x180004128: FBCryptProviderSupportsAlg
0x180005318: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005298: "__cdecl _imp_BCryptGenerateSymmetricKey" __imp_BCryptGenerateSymmetricKey
0x180005738: "`string'" ??_C@_04LOAJBDKD@true?$AA@
0x180005208: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005360: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800057D8: "`string'" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180005FAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x180004778: "__cdecl encoded_null" _encoded_null
0x180005320: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800058A8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180004890: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004BDB: memcmp
0x180005328: "__cdecl _imp_RtlDowncaseUnicodeString" __imp_RtlDowncaseUnicodeString
0x1800030F0: MsvpPasswordValidate
0x180004B72: "__cdecl _imp_load_SystemFunction008" __imp_load_SystemFunction008
0x180001580: MsvpCalculateNtlm2SessionKeys
0x180004859: "__cdecl initterm_e" _initterm_e
0x180005398: ntdll_NULL_THUNK_DATA
0x180005118: "__cdecl _imp_memcpy" __imp_memcpy
0x180001080: WPP_SF_sds
0x180008820: "class CBCryptProvList * __ptr64 __ptr64 g_pBCProvList" ?g_pBCProvList@@3PEAVCBCryptProvList@@EA
0x1800055E8: "`string'" ??_C@_0CE@IPPEPCNG@MsvpPutClearOwfsInPrimaryCredent@
0x1800054B8: WPP_1ee9a07b73a9344ab95657e58de2ac8f_Traceguids
0x180005778: "`string'" ??_C@_0CE@BNOGGIAE@MsvpValidateSupplementalCredsBuf@
0x180005308: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180005348: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180008618: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x1800065F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180001138: WPP_SF_sdsD
0x180008050: "__cdecl _security_cookie" __security_cookie
0x180004B7E: "__cdecl _imp_load_SystemFunction009" __imp_load_SystemFunction009
0x1800052F0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1800051B8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180002990: NtlmSharedFree
0x1800065BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180006508: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x180004428: "public: __cdecl CLinkedList::~CLinkedList(void) __ptr64" ??1CLinkedList@@QEAA@XZ
0x180005178: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004784: "__cdecl _security_init_cookie" __security_init_cookie
0x1800057B0: "`string'" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180005270: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180005338: "__cdecl _imp_RtlUpcaseUnicodeString" __imp_RtlUpcaseUnicodeString
0x180005740: "`string'" ??_C@_05LAPONLG@false?$AA@
0x180001B60: MsvpLm20GetNtlm3ChallengeResponse
0x180005818: "`string'" ??_C@_19LEELFJDG@?$AA3?$AAD?$AAE?$AAS?$AA?$AA@
0x18000660C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x180002A50: NtLmAlterRtlEqualUnicodeString
0x180006028: CRYPTSP_NULL_THUNK_DATA_DLN
0x1800054D8: "`string'" ??_C@_0M@BOCCHOMP@NtlmSuccess?$AA@
0x180005868: "`string'" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180002E00: MsvpLm3ValidateResponse
0x1800048D0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800029D0: NtlmSharedFreePrivateHeap
0x180005218: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800054E8: "`string'" ??_C@_0M@NHGAMFJF@NtlmFailure?$AA@
0x1800052A8: "__cdecl _imp_BCryptHash" __imp_BCryptHash
0x180005610: "`string'" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1800056C0: "`string'" ??_C@_1FG@BJMNNLDB@?$AA_?$AAS?$AAA?$AA_?$AA?$HL?$AA2?$AA6?$AA2?$AAE?$AA9?$AA9?$AAC?$AA9?$AA?9?$AA6?$AA1?$AA6?$AA0?$AA?9?$AA4?$AA8?$AA7?$AA1?$AA?9?$AAA?$AAC?$AAE?$AAC?$AA?9?$AA4?$AAE?$AA6@
0x1800023F0: MsvpDecryptDpapiMasterKey
0x180006580: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800054C8: WPP_ThisDir_CTLGUID_NtlmSharedDebugTraceControlGuid
0x180001280: WPP_SF_sD
0x180002CF0: WPP_SF_ss
0x180005358: "__cdecl _imp_EtwEventSetInformation" __imp_EtwEventSetInformation
0x18000551C: "`string'" ??_C@_13DOGEFHNA@?$AA?$AO?$AA?$AA@
0x180005238: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180004BE7: memset
0x180006648: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180005658: "`string'" ??_C@_0CA@IOFIGBMB@DecryptMasterKeyToMemoryFailure?$AA@
0x180001ED0: MsvpMakeSecretPasswordNT5
0x180005620: "`string'" ??_C@_0BC@GOEPEFIJ@BCryptHashFailure?$AA@

[JEB Decompiler by PNF Software]