PDB Symbols - mskeyprotect.dll (0xBFB9E796C4311FDCE52317F98F1D7DC8DD23AC8C2C62F65D86EFF60CC82CB738)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\mskeyprotect.dll Base=0x180000000 SHA-256=BFB9E796C4311FDCE52317F98F1D7DC8DD23AC8C2C62F65D86EFF60CC82CB738
PDB: mskeyprotect.pdb GUID={E522916E-9479-AAB4-8AF5A3A1A84B7161} Age=1

493 located named symbols:
0x180012108: "__cdecl _imp_VaultOpenVault" __imp_VaultOpenVault
0x180007240: KeyFileUnprotectSessionTicket
0x18000D628: g_rgbObjDraCert
0x18000C708: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000C930: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180001C40: MsKeyProtOpenProtector
0x180002297: "__cdecl _imp_load_CryptStringToBinaryW" __imp_load_CryptStringToBinaryW
0x180001D30: TearDownKeyFileCache
0x180001B60: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000CF18: "SHA384" ??_C@_1O@KOBLHLEG@?$AAS?$AAH?$AAA?$AA3?$AA8?$AA4?$AA?$AA@
0x18000ED1C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000C750: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x1800022DF: "__cdecl _imp_load_CryptProtectMemory" __imp_load_CryptProtectMemory
0x180010670: ASN1_NCRYPT_MODULE_HANDLE
0x18000DA90: WPP_7a810d74fb663fa763476e0773cd764a_Traceguids
0x180010078: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000D1F0: "0 `�He-" ??_C@_0BA@BHJEGIDE@0?$AN?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AB?9?$AF?$AA?$AA@
0x180009830: VaultProtKeyProtect
0x18000D9D8: "KeyLength" ??_C@_1BE@FGBADLPC@?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18000DA20: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x18000D200: "" ??_C@_02GHFOEAG@?$AF?$AA?$AA@
0x180004960: WppControlCallback
0x180007E88: FindKeyInCacheInternal
0x180002800: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800120B0: "__cdecl _imp_RtlAsn1Decode" __imp_RtlAsn1Decode
0x180012018: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18000C6E8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000D838: "RSAES_OAEP" ??_C@_1BG@GKMLGEJF@?$AAR?$AAS?$AAA?$AAE?$AAS?$AA_?$AAO?$AAA?$AAE?$AAP?$AA?$AA@
0x18000D3A8: "`string'" ??_C@_07NOKMIKFH@?$AG?$AF?$CL?$IB?$AE?$AA?$CD?$AA@
0x18000D850: "machine" ??_C@_1BA@FOMDDNNM@?$AAm?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x180012088: "__cdecl _imp_ASN1_FindOidInfoByEoid" __imp_ASN1_FindOidInfoByEoid
0x18000D590: "VAULTCREDENTIALS" ??_C@_1CC@IODJKICC@?$AAV?$AAA?$AAU?$AAL?$AAT?$AAC?$AAR?$AAE?$AAD?$AAE?$AAN?$AAT?$AAI?$AAA?$AAL?$AAS?$AA?$AA@
0x180010620: g_ulAdditionalProbeSize
0x18000C888: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x18000D7E0: "onecore\ds\security\cryptoapi\nc" ??_C@_0FE@DJLJAKGN@onecore?2ds?2security?2cryptoapi?2nc@
0x18000C950: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18000C7A0: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180012040: "__cdecl _imp_CryptImportPublicKeyInfoEx2" __imp_CryptImportPublicKeyInfoEx2
0x18000DAA8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800023E8: "__cdecl _imp_load_ASN1_FindOidInfo" __imp_load_ASN1_FindOidInfo
0x18000CC10: "__cdecl _sz_NTASN1_dll" __sz_NTASN1_dll
0x18000ED94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000C898: bcrypt_NULL_THUNK_DATA
0x1800120B8: NTASN1_NULL_THUNK_DATA_DLA
0x18000EC10: NTASN1_NULL_THUNK_DATA_DLB
0x18000CF48: "3DES_112" ??_C@_1BC@OBELMIOB@?$AA3?$AAD?$AAE?$AAS?$AA_?$AA1?$AA1?$AA2?$AA?$AA@
0x180003790: CNG_Free_KeyAgreeEncryptInfo
0x18000E878: NTASN1_NULL_THUNK_DATA_DLN
0x18000C730: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180001AD0: WppInitUm
0x18000CD90: "onecore\ds\security\cryptoapi\nc" ??_C@_0DH@EEMPEGKE@onecore?2ds?2security?2cryptoapi?2nc@
0x18000D050: "ECDSA" ??_C@_1M@FNACMMMF@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA?$AA@
0x18000C9B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000CF60: "DESX" ??_C@_19GOPKKBMO@?$AAD?$AAE?$AAS?$AAX?$AA?$AA@
0x18000ABC0: CliLRpcSIDKeyProtect
0x18000D668: g_rgbObjSID
0x1800120A8: "__cdecl _imp_ASN1_FindOidInfo" __imp_ASN1_FindOidInfo
0x18000CE80: g_rgbObjDescriptor
0x1800105F8: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180002285: "__cdecl _imp_load_CertOpenStore" __imp_load_CertOpenStore
0x1800024BB: "__cdecl _imp_load_RtlAsn1Decode" __imp_load_RtlAsn1Decode
0x180010600: "__cdecl _hmod__NTASN1_dll" __hmod__NTASN1_dll
0x18000D470: "AES Key Wrap" ??_C@_1BK@LIHGKGKE@?$AAA?$AAE?$AAS?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAW?$AAr?$AAa?$AAp?$AA?$AA@
0x18000C800: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x18000C8A8: "__cdecl _imp_NCryptDecrypt" __imp_NCryptDecrypt
0x18000C940: "__cdecl _imp_LdrDisableThreadCalloutsForDll" __imp_LdrDisableThreadCalloutsForDll
0x18000CA68: "AES" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x18000C8B8: "__cdecl _imp_NCryptDeriveKey" __imp_NCryptDeriveKey
0x180012050: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x18000A044: CNG_HexToBin
0x18000C920: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18000CA10: "__cdecl _guard_iat_table" __guard_iat_table
0x18000C770: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1800027C5: memcpy
0x18000C830: "__cdecl _imp_BCryptDecrypt" __imp_BCryptDecrypt
0x18000CA48: "LOCAL" ??_C@_1M@GMCGGEIO@?$AAL?$AAO?$AAC?$AAA?$AAL?$AA?$AA@
0x18000209C: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x18000C838: "__cdecl _imp_BCryptDeriveKey" __imp_BCryptDeriveKey
0x18000DA80: WPP_371309e0bc27388e96f48cb82dfbc912_Traceguids
0x180012070: "__cdecl _imp_CryptUnprotectMemory" __imp_CryptUnprotectMemory
0x1800082D8: CNG_InitOAEPPaddingInfo
0x18000CB80: "DRACERTIFICATE" ??_C@_1BO@HDJNECFK@?$AAD?$AAR?$AAA?$AAC?$AAE?$AAR?$AAT?$AAI?$AAF?$AAI?$AAC?$AAA?$AAT?$AAE?$AA?$AA@
0x18000C990: "__cdecl _imp_memset" __imp_memset
0x18000C680: g_ObjBlobVAULTWEBPASSWORD
0x1800023C4: "__cdecl _imp_load_RpcBindingFree" __imp_load_RpcBindingFree
0x180004E7C: CNG_ImportPublicKeyInfoForNCryptSecretAgreement
0x18000EE34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800078B0: AddFileToCache
0x18000B168: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x18000215E: RtlUnhandledExceptionFilter
0x18000C998: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180012068: "__cdecl _imp_CryptUnprotectData" __imp_CryptUnprotectData
0x18000C938: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000258E: "__cdecl _C_specific_handler" __C_specific_handler
0x18000B2C0: MIDL_user_free
0x18000C7B8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000213A: RtlCaptureContext
0x180010668: WPP_REGISTRATION_GUIDS
0x180008C18: GetSpecifiedSidKey_LocalUser
0x180008194: RegisterKeyFileChangeNotification
0x18000D658: g_rgbObjVAULTCREDENTIALS
0x18000A17C: DebugTraceError
0x1800043EC: MsKeyProtDraCertUnprotect
0x18000D6F0: "dwErr" ??_C@_05HABMCAIK@dwErr?$AA@
0x18000C718: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000274C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800087B8: DecodeAlgorithmId
0x18000CA70: "user" ??_C@_19LHMFLJNI@?$AAu?$AAs?$AAe?$AAr?$AA?$AA@
0x18000D948: "KeyDataBlob" ??_C@_1BI@NNGJONND@?$AAK?$AAe?$AAy?$AAD?$AAa?$AAt?$AAa?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18000B100: SafeAllocaFreeToHeap
0x18000E75C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_NTASN1_dll" __DELAY_IMPORT_DESCRIPTOR_NTASN1_dll
0x18000C8E8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000E840: CRYPT32_NULL_THUNK_DATA_DLN
0x18000C790: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180010640: WPP_MAIN_CB
0x1800010D0: CNG_CleanupBCryptProvCache
0x18000257C: "__cdecl _imp_load_VaultGetItem" __imp_load_VaultGetItem
0x18000D490: "Microsoft Windows DPAPI-NG" ??_C@_1DG@OOCDPMLH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAP?$AAA?$AAP?$AAI?$AA?9?$AAN?$AAG?$AA?$AA@
0x18000DAA0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000EE0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18000536C: CNG_KeyAgreeUnprotect
0x18000C8F8: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x18000ED6C: "__cdecl _IMPORT_DESCRIPTOR_ncrypt" __IMPORT_DESCRIPTOR_ncrypt
0x18000ED44: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x18000216A: "__cdecl _imp_load_CryptAcquireCertificatePrivateKey" __imp_load_CryptAcquireCertificatePrivateKey
0x180010960: g_keyfilecacheLock
0x180012078: "__cdecl _imp_CryptProtectMemory" __imp_CryptProtectMemory
0x18000D458: "PUBLICBLOB" ??_C@_1BG@HPKCIHOF@?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x1800105F0: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x18000B120: VerifyStackAvailable
0x18000C970: "__cdecl _imp_strcmp" __imp_strcmp
0x18000E73C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180001D80: SIDKeyLocalClientUninitialize
0x18000C798: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x18000CEB8: "SP800_56A_CONCAT" ??_C@_1CC@MMGMOOPO@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA5?$AA6?$AAA?$AA_?$AAC?$AAO?$AAN?$AAC?$AAA?$AAT?$AA?$AA@
0x1800024D9: "__cdecl _tailMerge_vaultcli_dll" __tailMerge_vaultcli_dll
0x18000C6C8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000D7C4: "0" ??_C@_02CENFMDHN@0?$AA?$AA@
0x180012010: "__cdecl _imp_CertGetIntendedKeyUsage" __imp_CertGetIntendedKeyUsage
0x18000D280: "HWND Handle" ??_C@_1BI@NMDAIEK@?$AAH?$AAW?$AAN?$AAD?$AA?5?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x1800044E0: SearchRecipientCertificate
0x18000526C: CNG_KeyAgreeKeyWrap
0x18000D068: "DSA" ??_C@_17JOLIKJIA@?$AAD?$AAS?$AAA?$AA?$AA@
0x18000D390: "*�H�=" ??_C@_0L@LEBACLDH@?$AG?$AI?$CK?$IGH?N?$DN?$AD?$AB?$AH?$AA@
0x18000C7C8: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180005F6C: DeriveKeyFromKeyMeterial
0x18000D7B8: " *�H�� " ??_C@_0M@EKOMDIDM@?$AG?7?$CK?$IGH?$IG?w?$AN?$AB?$AB?$AH?$AA@
0x1800040B0: LoadCertBlobInMemory
0x1800120F0: RPCRT4_NULL_THUNK_DATA_DLA
0x18000EBD8: RPCRT4_NULL_THUNK_DATA_DLB
0x18000C808: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x1800025A0: DllMain
0x18000E8B0: RPCRT4_NULL_THUNK_DATA_DLN
0x18000CC00: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x180009378: VaultProtGetWrappingKey
0x180009D84: VaultProtKeyUnprotect
0x18000ED30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000C900: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000C8E0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000C740: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C7F0: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x18000223D: "__cdecl _imp_load_CertDuplicateCertificateContext" __imp_load_CertDuplicateCertificateContext
0x180012038: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x18000D7C8: " *�H�� " ??_C@_0M@BMLGJPLK@?$AG?7?$CK?$IGH?$IG?w?$AN?$AB?$AB?$AB?$AA@
0x180008450: CNG_KeyTransUnprotect
0x18000C6C0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000CEA8: "PBKDF2" ??_C@_1O@JNLJINNB@?$AAP?$AAB?$AAK?$AAD?$AAF?$AA2?$AA?$AA@
0x180002497: "__cdecl _imp_load_RtlAsn1GetModuleHandle" __imp_load_RtlAsn1GetModuleHandle
0x18000D6A0: "onecore\ds\security\cryptoapi\nc" ??_C@_0EN@EHFBKCPI@onecore?2ds?2security?2cryptoapi?2nc@
0x180002728: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001E60: MsKeyProtCloseProtector
0x18000C948: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000AD20: CliLRpcSIDKeyUnprotect
0x18000CCF0: WPP_bae7c0412af63f2dec3256323cff21e7_Traceguids
0x18000C980: "__cdecl _imp_memcmp" __imp_memcmp
0x18000D938: WPP_136b2bdcac0e38533393541b4c639450_Traceguids
0x18000D2F8: "1.2.840.113549.1.1.7" ??_C@_0BF@IMPLLFIO@1?42?4840?4113549?41?41?47?$AA@
0x180008600: CNG_WrapKeyTrans
0x18000C778: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x18000C850: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180012048: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x18000CF38: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x18000D380: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000C8A0: "__cdecl _imp_NCryptSetProperty" __imp_NCryptSetProperty
0x18000EE70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000C8C8: "__cdecl _imp_NCryptGetProperty" __imp_NCryptGetProperty
0x18000256A: "__cdecl _imp_load_VaultOpenVault" __imp_load_VaultOpenVault
0x18000D418: "ECCPUBLICBLOB" ??_C@_1BM@HFKJNGID@?$AAE?$AAC?$AAC?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18000D438: "Algorithm Name" ??_C@_1BO@LONLFJGG@?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180010058: RpcNcryptAllocPara
0x18000DAA0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000C880: "__cdecl _imp_BCryptSecretAgreement" __imp_BCryptSecretAgreement
0x1800076E4: ReadAndValidateKeyFile
0x1800062F0: GetKeyDecryptionKey
0x18000C8F0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000D268: "dwReturn" ??_C@_08KOCHCJLB@dwReturn?$AA@
0x18000CF08: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x18000ED80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000D998: "onecore\ds\security\cryptoapi\nc" ??_C@_0DO@OHLGFDPJ@onecore?2ds?2security?2cryptoapi?2nc@
0x180001BA0: "__cdecl CleanupCertStoreCache" _CleanupCertStoreCache
0x18000CFB0: "ECDH_P521" ??_C@_1BE@NAPMNIN@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA5?$AA2?$AA1?$AA?$AA@
0x180002473: "__cdecl _imp_load_RtlAsn1DecodeAndAllocate" __imp_load_RtlAsn1DecodeAndAllocate
0x18000C8B0: "__cdecl _imp_NCryptSecretAgreement" __imp_NCryptSecretAgreement
0x18000CA90: "1.3.6.1.4.1.311.74.1.5" ??_C@_1CO@DLHKNHOP@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA5?$AA?$AA@
0x18000C788: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18000C7A8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18000E79C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180007C68: FindHandlesInCache
0x180002219: "__cdecl _imp_load_CertControlStore" __imp_load_CertControlStore
0x1800120E8: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18000CAC0: "SDDL" ??_C@_19KGIKMJCK@?$AAS?$AAD?$AAD?$AAL?$AA?$AA@
0x180005634: CNG_WrapKeyAgree
0x1800120D0: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x180006A34: KeyFileProtKeyUnprotect
0x18000E77C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_VAULTCLI_dll" __DELAY_IMPORT_DESCRIPTOR_VAULTCLI_dll
0x18000CC34: "Status" ??_C@_06PGDKHFME@Status?$AA@
0x18000CB08: "1.3.6.1.4.1.311.74.1.11" ??_C@_1DA@BCFHEOPM@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA1?$AA1?$AA?$AA@
0x18000CF88: "RC4" ??_C@_17HLFLMDBJ@?$AAR?$AAC?$AA4?$AA?$AA@
0x18000EE5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000D9F0: "SidKey Local End Point" ??_C@_1CO@OMFCFKMI@?$AAS?$AAi?$AAd?$AAK?$AAe?$AAy?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAE?$AAn?$AAd?$AA?5?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x18000C738: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18000D080: "DPNGRA" ??_C@_1O@ILOPMOJN@?$AAD?$AAP?$AAN?$AAG?$AAR?$AAA?$AA?$AA@
0x180004C08: CNG_EccCmsSharedInfoKDF
0x18000DA30: "onecore\ds\security\keyman\sidke" ??_C@_0DL@ELNCOPNE@onecore?2ds?2security?2keyman?2sidke@
0x18000D860: "{34e4912d-f770-4f49-b020-96dd74c" ??_C@_1EO@PDBHJFDD@?$AA?$HL?$AA3?$AA4?$AAe?$AA4?$AA9?$AA1?$AA2?$AAd?$AA?9?$AAf?$AA7?$AA7?$AA0?$AA?9?$AA4?$AAf?$AA4?$AA9?$AA?9?$AAb?$AA0?$AA2?$AA0?$AA?9?$AA9?$AA6?$AAd?$AAd?$AA7?$AA4?$AAc@
0x180012000: "__cdecl _imp_CryptAcquireCertificatePrivateKey" __imp_CryptAcquireCertificatePrivateKey
0x18000C9A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000D278: "dwError" ??_C@_07KEIALHHM@dwError?$AA@
0x180002146: RtlLookupFunctionEntry
0x180002261: "__cdecl _imp_load_CryptImportPublicKeyInfoEx2" __imp_load_CryptImportPublicKeyInfoEx2
0x180012090: "__cdecl _imp_RtlAsn1GetModuleHandle" __imp_RtlAsn1GetModuleHandle
0x18000C840: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x18000D930: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18000C810: "__cdecl _imp_BCryptEncrypt" __imp_BCryptEncrypt
0x18000D008: "ECDSA_P521" ??_C@_1BG@PLLBJNPN@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA5?$AA2?$AA1?$AA?$AA@
0x18000D638: g_rgbObjVAULTWEBPASSWORD
0x18000EB50: CRYPT32_NULL_THUNK_DATA_DLB
0x18000A790: CNG_AesKeyWrap
0x18000212E: NtTerminateProcess
0x18000C928: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000C820: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x18000C8D0: "__cdecl _imp_NCryptFreeObject" __imp_NCryptFreeObject
0x18000C7D0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000C6B0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000D7A8: " *�H�� " ??_C@_0M@MNHECEPD@?$AG?7?$CK?$IGH?$IG?w?$AN?$AB?$AB?$AI?$AA@
0x180001770: MsKeyProtKeyProtect
0x180002558: "__cdecl _imp_load_VaultFree" __imp_load_VaultFree
0x18000CAD0: "1.3.6.1.4.1.311.74.1.1" ??_C@_1CO@LEBIEALI@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA1?$AA?$AA@
0x18000CD40: "onecore\ds\security\cryptoapi\nc" ??_C@_0EN@BKLBGNAH@onecore?2ds?2security?2cryptoapi?2nc@
0x18000CC90: "onecore\ds\security\cryptoapi\nc" ??_C@_0EN@NPBHKOIH@onecore?2ds?2security?2cryptoapi?2nc@
0x18000B030: SidKeyDebugTraceError
0x18000D978: "1.3.132.0.34" ??_C@_0N@HHOBADMI@1?43?4132?40?434?$AA@
0x18000D798: " *�H�� " ??_C@_0M@NEGPBFLC@?$AG?7?$CK?$IGH?$IG?w?$AN?$AB?$AB?7?$AA@
0x18000D988: "1.3.132.0.35" ??_C@_0N@GOPKDCIJ@1?43?4132?40?435?$AA@
0x18000D5B8: "1.3.6.1.4.1.311.74.1.10" ??_C@_1DA@KKOLCJJJ@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA1?$AA0?$AA?$AA@
0x180010000: WPP_GLOBAL_Control
0x1800080C4: GetFirstLevelDirectoryPath
0x18000D38C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000EE48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000C760: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1800064CC: KeyFileProtKeyProtect
0x1800120C8: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x18000CF70: "DES" ??_C@_17LBCHNHBC@?$AAD?$AAE?$AAS?$AA?$AA@
0x1800027DD: strcmp
0x18000C7E0: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x18000C7E8: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x18000C818: "__cdecl _imp_BCryptKeyDerivation" __imp_BCryptKeyDerivation
0x18000CBA0: "Microsoft Key Protection Provide" ??_C@_1EE@PMMEAAAP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe@
0x18000D020: "ECDSA_P384" ??_C@_1BG@KLJLEHCO@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA3?$AA8?$AA4?$AA?$AA@
0x180001EB0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000D210: "onecore\ds\security\cryptoapi\nc" ??_C@_0FB@LAFLPAIB@onecore?2ds?2security?2cryptoapi?2nc@
0x180003170: CNG_CreateRecipientInfoForCert
0x18000C868: "__cdecl _imp_BCryptExportKey" __imp_BCryptExportKey
0x18000EDBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000D560: "1.3.6.1.4.1.311.74.1.7" ??_C@_1CO@JBHDBPGE@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA7?$AA?$AA@
0x18000C780: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000D740: "onecore\ds\security\cryptoapi\nc" ??_C@_0FC@DPLOIEIF@onecore?2ds?2security?2cryptoapi?2nc@
0x18000D070: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x18000AA78: CNG_GetKeyPairAlgorithmProvider
0x180001BE0: WppCleanupUm
0x18000CFE0: "ECDH_P256" ??_C@_1BE@IHBIMMJF@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA2?$AA5?$AA6?$AA?$AA@
0x18000EDF8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x18000D2C8: "1.3.133.16.840.63.0.2" ??_C@_0BG@MAFPGMCM@1?43?4133?416?4840?463?40?42?$AA@
0x18000C720: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18000C968: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x18000C6A0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000D2B0: "2.16.840.1.101.3.4.1.45" ??_C@_0BI@HMDOMIKO@2?416?4840?41?4101?43?44?41?445?$AA@
0x1800027AD: "__cdecl _chkstk" __chkstk
0x180012110: "__cdecl _imp_VaultCloseVault" __imp_VaultCloseVault
0x18000D3B0: "*�H�=" ??_C@_09FLIKDALJ@?$AG?$AH?$CK?$IGH?N?$DN?$AC?$AB?$AA@
0x180012098: "__cdecl _imp_RtlAsn1EncodeAndAllocate" __imp_RtlAsn1EncodeAndAllocate
0x18000D8B0: "onecore\ds\security\cryptoapi\nc" ??_C@_0EP@GOIFHOBJ@onecore?2ds?2security?2cryptoapi?2nc@
0x18000D078: "MY" ??_C@_15ELPOAHMG@?$AAM?$AAY?$AA?$AA@
0x1800023A0: "__cdecl _imp_load_I_RpcExceptionFilter" __imp_load_I_RpcExceptionFilter
0x180012030: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x18000516C: CNG_KeyAgreeKeyUnwrap
0x1800120A0: "__cdecl _imp_RtlAsn1DecodeAndAllocate" __imp_RtlAsn1DecodeAndAllocate
0x180010608: "__cdecl _hmod__VAULTCLI_dll" __hmod__VAULTCLI_dll
0x180008E4C: LocalUnprotect
0x180012058: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x18000389C: ConvertCertStringToBinary
0x18000C9B8: "__cdecl _guard_fids_table" __guard_fids_table
0x180007CD8: FindKeyInCache
0x18000C070: "__cdecl load_config_used" _load_config_used
0x18000C7D8: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x18000CB50: "1.3.6.1.4.1.311.74.1.9" ??_C@_1CO@HBKMGIFH@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA9?$AA?$AA@
0x18000C6B8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000C6A8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000D688: WPP_b2ddd4ea53803bc02b615da127e47d10_Traceguids
0x18000CB38: "CERTIFICATE" ??_C@_1BI@GPJGGBLI@?$AAC?$AAE?$AAR?$AAT?$AAI?$AAF?$AAI?$AAC?$AAA?$AAT?$AAE?$AA?$AA@
0x18000EDA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000D900: Vault_DefaultVault_ID
0x1800120E0: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180012080: CRYPT32_NULL_THUNK_DATA_DLA
0x18000C848: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x1800022F1: "__cdecl _imp_load_CryptProtectData" __imp_load_CryptProtectData
0x18000CFF8: "ECDH" ??_C@_19JJNKGML@?$AAE?$AAC?$AAD?$AAH?$AA?$AA@
0x18000C660: g_ObjBlobKEYFILE
0x18000C700: "__cdecl _imp_FindCloseChangeNotification" __imp_FindCloseChangeNotification
0x18000E8D8: VAULTCLI_NULL_THUNK_DATA_DLN
0x18000EC48: VAULTCLI_NULL_THUNK_DATA_DLB
0x180012118: VAULTCLI_NULL_THUNK_DATA_DLA
0x18000C910: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000C890: "__cdecl _imp_BCryptGenRandom" __imp_BCryptGenRandom
0x18000C7F8: "__cdecl _imp_BCryptGenerateSymmetricKey" __imp_BCryptGenerateSymmetricKey
0x18000A290: CNG_GetBCryptHandle
0x180008980: GetLatestSidKey_LocalUser
0x18000D3A0: "`string'" ??_C@_07MHLHLLBG@?$AG?$AF?$CL?$IB?$AE?$AA?$CC?$AA@
0x18000D678: g_rgbObjSDDL
0x18000CC40: "{DCD07F46-25B9-4844-BFA5-C7D582C" ??_C@_1EO@OKBGBGHI@?$AA?$HL?$AAD?$AAC?$AAD?$AA0?$AA7?$AAF?$AA4?$AA6?$AA?9?$AA2?$AA5?$AAB?$AA9?$AA?9?$AA4?$AA8?$AA4?$AA4?$AA?9?$AAB?$AAF?$AAA?$AA5?$AA?9?$AAC?$AA7?$AAD?$AA5?$AA8?$AA2?$AAC@
0x18000C958: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000CF98: "AES-GMAC" ??_C@_1BC@MHLDAMHA@?$AAA?$AAE?$AAS?$AA?9?$AAG?$AAM?$AAA?$AAC?$AA?$AA@
0x18000D540: "WEBCREDENTIALS" ??_C@_1BO@MCMHIIAE@?$AAW?$AAE?$AAB?$AAC?$AAR?$AAE?$AAD?$AAE?$AAN?$AAT?$AAI?$AAA?$AAL?$AAS?$AA?$AA@
0x18000C7B0: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x18000C758: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180002176: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x1800041C8: MsKeyProtCertProtect
0x18000C748: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x1800120C0: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x18000C918: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000DAA8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000CF90: "RC2" ??_C@_17FODAJMMF@?$AAR?$AAC?$AA2?$AA?$AA@
0x18000C6D0: "__cdecl _imp_FindFirstChangeNotificationW" __imp_FindFirstChangeNotificationW
0x18000E71C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x18000AE80: MIDL_user_allocate
0x180002710: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000C768: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1800027B9: memcmp
0x18000D960: "1.2.840.10045.3.1.7" ??_C@_0BE@BKJNBBIF@1?42?4840?410045?43?41?47?$AA@
0x18000CC30: "hr" ??_C@_02FLHDKHAB@hr?$AA@
0x18000CC20: "__cdecl _sz_VAULTCLI_dll" __sz_VAULTCLI_dll
0x18000C870: "__cdecl _imp_BCryptGenerateKeyPair" __imp_BCryptGenerateKeyPair
0x18000D2E0: "1.2.840.113549.1.1.1" ??_C@_0BF@NKKBBCAI@1?42?4840?4113549?41?41?41?$AA@
0x180002485: "__cdecl _imp_load_RtlAsn1EncodeAndAllocate" __imp_load_RtlAsn1EncodeAndAllocate
0x180010610: g_ulMaxStackAllocSize
0x18000EDD0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000C828: "__cdecl _imp_BCryptDestroySecret" __imp_BCryptDestroySecret
0x1800022A9: "__cdecl _imp_load_CertGetCertificateContextProperty" __imp_load_CertGetCertificateContextProperty
0x180001DD0: GetKeyProtectionInterface
0x18000C858: "__cdecl _imp_BCryptImportKey" __imp_BCryptImportKey
0x18000CEE0: "SP800_108_CTR_HMAC" ??_C@_1CG@GKFGHMMK@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA1?$AA0?$AA8?$AA_?$AAC?$AAT?$AAR?$AA_?$AAH?$AAM?$AAA?$AAC?$AA?$AA@
0x18000C908: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18000C960: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x1800022BB: "__cdecl _imp_load_CryptUnprotectData" __imp_load_CryptUnprotectData
0x18000C9A0: ntdll_NULL_THUNK_DATA
0x18000C988: "__cdecl _imp_memcpy" __imp_memcpy
0x180012008: "__cdecl _imp_CryptProtectData" __imp_CryptProtectData
0x18000D5F8: "1.3.6.1.4.1.311.74.1.12" ??_C@_1DA@OCOBBC@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA1?$AA2?$AA?$AA@
0x18000222B: "__cdecl _imp_load_CryptQueryObject" __imp_load_CryptQueryObject
0x180012020: "__cdecl _imp_CertControlStore" __imp_CertControlStore
0x18000C6F8: "__cdecl _imp_FindNextChangeNotification" __imp_FindNextChangeNotification
0x18000EDE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000A1C8: WPP_SF_sDsd
0x18000D910: Vault_Schema_WebProtector
0x18000D038: "ECDSA_P256" ??_C@_1BG@HBKGJMOF@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA2?$AA5?$AA6?$AA?$AA@
0x180010070: "__cdecl _security_cookie" __security_cookie
0x180010618: g_pfnAllocate
0x18000D920: Vault_Schema_WebPassword
0x1800023F4: "__cdecl _tailMerge_ntasn1_dll" __tailMerge_ntasn1_dll
0x180002207: "__cdecl _imp_load_CertFreeCertificateContext" __imp_load_CertFreeCertificateContext
0x18000C710: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000CE70: g_rgbObjLocal
0x180002273: "__cdecl _imp_load_CertFindCertificateInStore" __imp_load_CertFindCertificateInStore
0x18000C728: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000ED58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000230F: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x18000D72C: "hrTmp" ??_C@_05CNHNJLE@hrTmp?$AA@
0x180006DC0: KeyFileProtectSessionTicket
0x1800057F0: MsKeyProtKeyUnprotect
0x18000D5E8: "KEYFILE" ??_C@_1BA@HCAPFMNF@?$AAK?$AAE?$AAY?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x1800023D6: "__cdecl _imp_load_NdrClientCall3" __imp_load_NdrClientCall3
0x1800021F5: "__cdecl _imp_load_CertGetIntendedKeyUsage" __imp_load_CertGetIntendedKeyUsage
0x180012028: "__cdecl _imp_CryptQueryObject" __imp_CryptQueryObject
0x180005CB0: DeriveHandlesFromKeyMaterial
0x18000C8D8: ncrypt_NULL_THUNK_DATA
0x1800048E8: WPP_SF_qS
0x180007C00: FileChangeCallBack
0x180008D30: GetSpecifiedSidKey_Logon
0x18000C8C0: "__cdecl _imp_NCryptImportKey" __imp_NCryptImportKey
0x18000C878: "__cdecl _imp_BCryptFinalizeKeyPair" __imp_BCryptFinalizeKeyPair
0x18000CD00: "1.3.6.1.4.1.311.74.1.8" ??_C@_1CO@MJBAAPDC@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA8?$AA?$AA@
0x180003840: CNG_Free_KeyTransEncryptInfo
0x18000238E: "__cdecl _imp_load_RpcStringBindingComposeW" __imp_load_RpcStringBindingComposeW
0x180002050: "__cdecl _security_init_cookie" __security_init_cookie
0x18000DA70: "rpcStatus" ??_C@_09NEKHPDOE@rpcStatus?$AA@
0x18000D4F0: "onecore\ds\security\cryptoapi\nc" ??_C@_0EP@OPOAAB@onecore?2ds?2security?2cryptoapi?2nc@
0x1800063E4: GetKeyEncryptionKey
0x18000C978: "__cdecl _imp___chkstk" __imp___chkstk
0x18000C860: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180004574: "__cdecl MsKeyProtCertUnprotectLocal" _MsKeyProtCertUnprotectLocal
0x18000224F: "__cdecl _imp_load_CertCloseStore" __imp_load_CertCloseStore
0x180010010: g_CertStore
0x180010628: g_pfnFree
0x18000A3F8: CNG_AesKeyUnwrap
0x1800120F8: "__cdecl _imp_VaultGetItem" __imp_VaultGetItem
0x1800023B2: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x1800027E9: wcscmp
0x18000C6D8: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18000CA20: "Rfc3565KeyWrapBlob" ??_C@_1CG@HHCKKMCI@?$AAR?$AAf?$AAc?$AA3?$AA5?$AA6?$AA5?$AAK?$AAe?$AAy?$AAW?$AAr?$AAa?$AAp?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18000CFC8: "ECDH_P384" ??_C@_1BE@FNCFBHFO@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA3?$AA8?$AA4?$AA?$AA@
0x18000AE40: HResultFromRpcException
0x18000D3C0: "onecore\ds\security\cryptoapi\nc" ??_C@_0FG@EHNBBELE@onecore?2ds?2security?2cryptoapi?2nc@
0x180001120: LocalProtect
0x18000CF78: "3DES" ??_C@_19LEELFJDG@?$AA3?$AAD?$AAE?$AAS?$AA?$AA@
0x18000D4C8: "Provider Handle" ??_C@_1CA@JABBOFJE@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?5?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x1800022CD: "__cdecl _imp_load_CryptUnprotectMemory" __imp_load_CryptUnprotectMemory
0x1800024CD: "__cdecl _imp_load_VaultCloseVault" __imp_load_VaultCloseVault
0x180012100: "__cdecl _imp_VaultFree" __imp_VaultFree
0x180002152: RtlVirtualUnwind
0x18000D05C: "DH" ??_C@_15IEFEGGPE@?$AAD?$AAH?$AA?$AA@
0x18000CD30: "status" ??_C@_06DJIHEMFI@status?$AA@
0x18000C6E0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000CBF0: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x180004D48: CNG_GetECCParameters
0x180002303: "__cdecl _imp_load_RpcBindingFromStringBindingW" __imp_load_RpcBindingFromStringBindingW
0x18000D6F8: "dpaping key file provider" ??_C@_1DE@JAHDKANM@?$AAd?$AAp?$AAa?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1800061B4: GetFileFullPath
0x180001F00: "__cdecl _report_gsfailure" __report_gsfailure
0x18000CDC8: "onecore\ds\security\cryptoapi\nc" ??_C@_0DO@PLDPHDHC@onecore?2ds?2security?2cryptoapi?2nc@
0x18000C268: g_ObjBlobLocal
0x18000D298: "1.2.840.10045.2.1" ??_C@_0BC@BDFNABHD@1?42?4840?410045?42?41?$AA@
0x18000C670: g_ObjBlobVAULTCREDENTIALS
0x18000CE90: "CAPI_KDF" ??_C@_1BC@NEGGPAMC@?$AAC?$AAA?$AAP?$AAI?$AA_?$AAK?$AAD?$AAF?$AA?$AA@
0x180001010: SafeAllocaInitialize
0x180012060: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x18000D648: g_rgbObjKEYFILE
0x1800024A9: "__cdecl _imp_load_ASN1_FindOidInfoByEoid" __imp_load_ASN1_FindOidInfoByEoid
0x18000CF28: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x18000CCE0: "NTE_FAIL" ??_C@_08OCLNAKPD@NTE_FAIL?$AA@
0x18000B084: InternalVerifyStackAvailable
0x18000EE20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800120D8: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x18000CB00: "SID" ??_C@_17HNFFEAHN@?$AAS?$AAI?$AAD?$AA?$AA@
0x18000B0E0: SafeAllocaAllocateFromHeap
0x18000CA80: "logon" ??_C@_1M@HBOLNDPJ@?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x18000436C: MsKeyProtCertUnprotect
0x180008AD8: GetLatestSidKey_Logon
0x180005C2C: WPP_SF_SD
0x18000D310: WPP_ThisDir_CTLGUID_CNGTraceControlGuid
0x18000C7C0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180001ED4: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x18000AFC8: WPP_SF_S
0x18000C258: g_ObjBlobDescriptor
0x1800027D1: memset
0x18000EE84: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000C6F0: "__cdecl _imp_ReadFile" __imp_ReadFile
0x180009170: SIDKeyProtKeyUnprotect

[JEB Decompiler by PNF Software]