Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winsta.dll Base=0x180000000 SHA-256=C13DA4DE69EA8D9AFE2161C6F796B82685BB2CD1215C82FE0C12B4BFFE113F78
PDB: winsta.pdb GUID={0F53A9C0-1DF8-A61A-884EA92204A4D172} Age=1

1687 located named symbols:
0x180043558: "!FATAL!:" ??_C@_08LOJKOGCF@?$CBFATAL?$CB?3?$AA@
0x180042B58: "!!! WinStationInstallLicense dep" ??_C@_0CI@EPOOGLPH@?$CB?$CB?$CB?5WinStationInstallLicense?5dep@
0x18004E8F0: "__cdecl _hmod__WS2_32_dll" __hmod__WS2_32_dll
0x18003AAA0: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x180018870: "private: static long __cdecl CSecurityUtils::UnprotectString(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short)" ?UnprotectString@CSecurityUtils@@CAJPEAG0G@Z
0x1800428F8: "RpcGetSessionUnderArbitration fa" ??_C@_0DB@IIKMFBOH@RpcGetSessionUnderArbitration?5fa@
0x180038EC0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180043630: "memory allocation failed: 0x%x i" ??_C@_0CF@LOIGBKKC@memory?5allocation?5failed?3?50x?$CFx?5i@
0x18004E96C: "public: static long CWindowNotification::g_NumNotifications" ?g_NumNotifications@CWindowNotification@@2JA
0x180038FE8: "__cdecl _imp_RtlUnicodeToMultiByteSize" __imp_RtlUnicodeToMultiByteSize
0x18000C9D2: "__cdecl _tailMerge_ext_ms_win_ntuser_message_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_message_l1_1_0_dll
0x18002D41C: "public: void * __ptr64 __cdecl CPublicBinding::GetUnifiedRpcBinding(void) __ptr64" ?GetUnifiedRpcBinding@CPublicBinding@@QEAAPEAXXZ
0x1800435BC: "VER:" ??_C@_04GINFLOCB@VER?3?$AA@
0x1800397F8: "%s%s:%s" ??_C@_07LKNKDOHD@?$CFs?$CFs?3?$CFs?$AA@
0x180027AF0: ServerLicensingDeactivateCurrentPolicy
0x180041320: "WinStationEnableChildSessions" ??_C@_0BO@IHFGONJJ@WinStationEnableChildSessions?$AA@
0x18000C140: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000B4B0: WinStationPreCreateGlassReplacementSessionEx
0x180045050: "RpcAsyncInitializeHandle failed:" ??_C@_0CM@CCGGIFCF@RpcAsyncInitializeHandle?5failed?3@
0x18000CB00: "__cdecl _imp_load_CreateWellKnownSid" __imp_load_CreateWellKnownSid
0x1800449E8: "RpcGetSessionModules failed: 0x%" ??_C@_0CC@BOHGPEKF@RpcGetSessionModules?5failed?3?50x?$CF@
0x1800403B0: "RpcGetCurrentSessionConfigData t" ??_C@_0DI@IAGCLDDL@RpcGetCurrentSessionConfigData?5t@
0x180038EC8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18003A0B0: "484809d6-4239-471b-b5bc-61df8c23" ??_C@_1EK@DICGFNIM@?$AA4?$AA8?$AA4?$AA8?$AA0?$AA9?$AAd?$AA6?$AA?9?$AA4?$AA2?$AA3?$AA9?$AA?9?$AA4?$AA7?$AA1?$AAb?$AA?9?$AAb?$AA5?$AAb?$AAc?$AA?9?$AA6?$AA1?$AAd?$AAf?$AA8?$AAc?$AA2?$AA3@
0x180044F38: "IsSystemProcess failed : 0x%X" ??_C@_0BO@FOEMMAHH@IsSystemProcess?5failed?5?3?50x?$CFX?$AA@
0x18000C400: "__cdecl FindPESection" _FindPESection
0x180043238: "RPC Exception %d" ??_C@_0BB@IMIOINLH@RPC?5Exception?5?$CFd?$AA@
0x180042C88: "!!! _WinStationAnnoyancePopup de" ??_C@_0CJ@PIJGJHI@?$CB?$CB?$CB?5_WinStationAnnoyancePopup?5de@
0x18003FAF8: LICENSE_TYPE_BUILTIN
0x180045590: "Failed Bind" ??_C@_0M@JKBAAHEE@Failed?5Bind?$AA@
0x18002AE90: "unsigned char __cdecl Legacy_WinStationWaitSystemEvent(void * __ptr64,unsigned long,unsigned long * __ptr64)" ?Legacy_WinStationWaitSystemEvent@@YAEPEAXKPEAK@Z
0x180045448: "pWindowNotification->AddToWaitLi" ??_C@_0DG@BLHEJODF@pWindowNotification?9?$DOAddToWaitLi@
0x180043F80: "_tsrpcEnumerate: Failed to open " ??_C@_0CI@IBINJGEB@_tsrpcEnumerate?3?5Failed?5to?5open?5@
0x1800015C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18004E954: "int RegisteredProvider" ?RegisteredProvider@@3HA
0x180040C60: "WinStationEnumerateProcesses: 0x" ??_C@_0CD@MHDEFHHK@WinStationEnumerateProcesses?3?50x@
0x18004C8B4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800419F0: "RpcOpenEnum threw an exception: " ??_C@_0CF@PIEANMGK@RpcOpenEnum?5threw?5an?5exception?3?5@
0x18004AB20: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLN
0x1800411E0: "RpcGetCurrentSessionCapabilities" ??_C@_0DE@EKGPKMHG@RpcGetCurrentSessionCapabilities@
0x18002FC44: WPP_SF_Ddddd
0x18000CD7C: "public: static long __cdecl CUtils::GetUserSessionId(void * __ptr64,long * __ptr64)" ?GetUserSessionId@CUtils@@SAJPEAXPEAJ@Z
0x180042550: "RpcGetAllSessions failed: 0x%x i" ??_C@_0CF@MCHDDEMJ@RpcGetAllSessions?5failed?3?50x?$CFx?5i@
0x180028E90: "__cdecl WinStationUpdateUserConfig" _WinStationUpdateUserConfig
0x1800404A0: "RpcGetCurrentSessionInformation " ??_C@_0DD@CIGJBKFA@RpcGetCurrentSessionInformation?5@
0x180040238: "WinStationConnectW" ??_C@_0BD@HKLNNBOE@WinStationConnectW?$AA@
0x18004C990: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x1800419C8: "RpcCloseEnum threw an exception:" ??_C@_0CG@KNEGEHJA@RpcCloseEnum?5threw?5an?5exception?3@
0x18003FDA8: "ImpersonationCheck failed: 0x%x " ??_C@_0CG@GOCMCOOO@ImpersonationCheck?5failed?3?50x?$CFx?5@
0x180039940: "RpcIsSessionDesktopLocked() take" ??_C@_0CF@LAJOOEIL@RpcIsSessionDesktopLocked?$CI?$CJ?5take@
0x180039B40: "__cdecl _sz_ext_ms_win_ntuser_synch_l1_1_0_dll" __sz_ext_ms_win_ntuser_synch_l1_1_0_dll
0x18002B57C: "public: long __cdecl CProcessUtils::ConvertSysProcInfoToTSAllProcInfo(struct _SYSTEM_PROCESS_INFORMATION * __ptr64,unsigned long,struct _TS_ALL_PROCESSES_INFO_NT6 * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64) __ptr64" ?ConvertSysProcInfoToTSAllProcInfo@CProcessUtils@@QEAAJPEAU_SYSTEM_PROCESS_INFORMATION@@KPEAPEAU_TS_ALL_PROCESSES_INFO_NT6@@PEAKPEAJ@Z
0x180044010: "_tsrpcSessionNameFromLogonId: Fa" ??_C@_0DJ@DHGFIOLD@_tsrpcSessionNameFromLogonId?3?5Fa@
0x180028D10: "__cdecl WinStationNotifyDisconnectPipe" _WinStationNotifyDisconnectPipe
0x18003FFA0: " Commit: Base [%6ld], Us" ??_C@_0EP@HJGBGBEN@?5?5?5Commit?3?5?5?5?5?5?5?5Base?5?$FL?$CF6ld?$FN?0?5Us@
0x180044698: "RpcGetState() takes %d" ??_C@_0BH@DAHKPDGA@RpcGetState?$CI?$CJ?5takes?5?$CFd?$AA@
0x18004E1C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18002F158: "public: unsigned long * __ptr64 __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::GetPtrAs<unsigned long>(void)const __ptr64" ??$GetPtrAs@K@?$SP@EV?$SP_HLOCAL@E@@@@QEBAPEAKXZ
0x18000CA51: "__cdecl _imp_load_PostMessageW" __imp_load_PostMessageW
0x180009EC0: "public: virtual void * __ptr64 __cdecl CWindowNotification::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWindowNotification@@UEAAPEAXI@Z
0x180039040: "__cdecl _imp_NtOpenProcess" __imp_NtOpenProcess
0x180044BB0: "GetWinStationModule failed: 0x%x" ??_C@_0CH@MCJFMJHH@GetWinStationModule?5failed?3?50x?$CFx@
0x1800513E8: "protected: static void * __ptr64 __ptr64 CPublicBinding::pSystemSid" ?pSystemSid@CPublicBinding@@1PEAXEA
0x18000CB5A: "__cdecl _imp_load_RpcAsyncGetCallStatus" __imp_load_RpcAsyncGetCallStatus
0x180040840: "WinStationGetCurrentSessionTermi" ??_C@_0CI@LCJGIFEF@WinStationGetCurrentSessionTermi@
0x180039738: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x18000303C: "public: static long __cdecl CUtils::CreateNetworkServiceSid(void * __ptr64 * __ptr64)" ?CreateNetworkServiceSid@CUtils@@SAJPEAPEAX@Z
0x18003980C: "INF:" ??_C@_04EGELDCNP@INF?3?$AA@
0x18003A170: "OpenLocalLSM: RpcBindingSetAuthI" ??_C@_0DB@NOECHBMG@OpenLocalLSM?3?5RpcBindingSetAuthI@
0x180044EB0: "CheckTokenMembership failed: 0x%" ??_C@_0CI@DMEFLACD@CheckTokenMembership?5failed?3?50x?$CF@
0x18000BC2C: "__cdecl CRT_INIT" _CRT_INIT
0x18000B490: WinStationPreCreateGlassReplacementSession
0x180038DB0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000A1C0: "int __cdecl _tsrpcUnInitialize(int)" ?_tsrpcUnInitialize@@YAHH@Z
0x180055080: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180039E18: "GetCurrentSessionWinStationType " ??_C@_0DD@FMHNBJO@GetCurrentSessionWinStationType?5@
0x180041FD8: "StartWait failed: 0x%x in %s" ??_C@_0BN@GGIIIPOI@StartWait?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x180043BC8: "AcquireIpAttempts" ??_C@_1CE@CAGHNJDL@?$AAA?$AAc?$AAq?$AAu?$AAi?$AAr?$AAe?$AAI?$AAp?$AAA?$AAt?$AAt?$AAe?$AAm?$AAp?$AAt?$AAs?$AA?$AA@
0x180043600: "NtQuerySystemInformation failed:" ??_C@_0CM@PFOMMPLB@NtQuerySystemInformation?5failed?3@
0x180041690: "WinstationEnumerate = %d, failed" ??_C@_0CL@DNMCIDNC@WinstationEnumerate?5?$DN?5?$CFd?0?5failed@
0x180017270: "public: virtual void * __ptr64 __cdecl CWaitEventCollect::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWaitEventCollect@@UEAAPEAXI@Z
0x180041578: "ConvertSidToStringSid failed: 0x" ??_C@_0CJ@BMGELDPI@ConvertSidToStringSid?5failed?3?50x@
0x180044498: "CSmartSession::CopySessionExInfo" ??_C@_0CB@MFCDIOO@CSmartSession?3?3CopySessionExInfo@
0x180039B10: "__cdecl _sz_ext_ms_win_ntuser_window_l1_1_0_dll" __sz_ext_ms_win_ntuser_window_l1_1_0_dll
0x180042EC0: "!!! ServerSetInternetConnectorSt" ??_C@_0DA@LMOHLJIA@?$CB?$CB?$CB?5ServerSetInternetConnectorSt@
0x1800430E0: "!!! RemoteAssistancePrepareSyste" ??_C@_0DE@CKHHGOCK@?$CB?$CB?$CB?5RemoteAssistancePrepareSyste@
0x180028830: WinStationEnumerate_IndexedW
0x18000D130: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180045240: "g_WaitEventNotificationCS.Initia" ??_C@_0DI@EALPEKLA@g_WaitEventNotificationCS?4Initia@
0x180030238: "const CWindowNotification::`vftable'" ??_7CWindowNotification@@6B@
0x180044460: "RpcGetSessionInformationEx threw" ??_C@_0DE@HIMHDLOK@RpcGetSessionInformationEx?5threw@
0x18003FE40: "InitializeLoadMetrics failed! Sy" ??_C@_0EA@ELDJJOKD@InitializeLoadMetrics?5failed?$CB?5Sy@
0x180015D00: WinStationReset
0x18000156C: "public: __cdecl CLocalHostAddress::CLocalHostAddress(void) __ptr64" ??0CLocalHostAddress@@QEAA@XZ
0x1800444C0: "StringCchLength on WinStation Na" ??_C@_0DG@ELKAIPBO@StringCchLength?5on?5WinStation?5Na@
0x180019B00: WinStationTerminateGlassReplacementSession
0x1800400D0: " Session Avg: Commit [%4ld], " ??_C@_0DP@MIPGHGEE@?5?5?5Session?5Avg?3?5Commit?5?5?$FL?$CF4ld?$FN?0?5@
0x18003FB18: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1800405A0: "RpcGetCurrentSessionProtocolLast" ??_C@_0EJ@EMBINMFF@RpcGetCurrentSessionProtocolLast@
0x180045180: "RpcRegisterCurrentSessionAsyncNo" ??_C@_0EE@CMIPNFKM@RpcRegisterCurrentSessionAsyncNo@
0x180001658: "int __cdecl InitLSCore(void)" ?InitLSCore@@YAHXZ
0x1800015FC: "public: __cdecl CLocalHostAddress::~CLocalHostAddress(void) __ptr64" ??1CLocalHostAddress@@QEAA@XZ
0x18003A038: "GetTokenInformation failed: 0x%x" ??_C@_0CB@LFHAAANB@GetTokenInformation?5failed?3?50x?$CFx@
0x1800046A0: "unsigned char __cdecl _tsrpcQuerySessionInfo(void * __ptr64,unsigned long,enum _WINSTATIONINFOCLASS,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?_tsrpcQuerySessionInfo@@YAEPEAXKW4_WINSTATIONINFOCLASS@@0KPEAK@Z
0x180055078: "__cdecl _imp_RpcAsyncCancelCall" __imp_RpcAsyncCancelCall
0x180043B90: "ForceLogoffOnIPLeaseFail" ??_C@_1DC@IFODCEKD@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AAO?$AAn?$AAI?$AAP?$AAL?$AAe?$AAa?$AAs?$AAe?$AAF?$AAa?$AAi?$AAl?$AA?$AA@
0x18000CEF4: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Attach(unsigned short * __ptr64 * __ptr64) __ptr64" ?Attach@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXPEAPEAG@Z
0x180002A7C: "public: long __cdecl CWindowNotification::StartWait(void) __ptr64" ?StartWait@CWindowNotification@@QEAAJXZ
0x180044658: "Invoke RpcGetState" ??_C@_0BD@HLHGKJLC@Invoke?5RpcGetState?$AA@
0x180042200: "ExpandEnvironmentStrings on init" ??_C@_0DP@DNKDLCAJ@ExpandEnvironmentStrings?5on?5init@
0x180042278: "2nd ExpandEnvironmentStrings fai" ??_C@_0DH@HBBHNCMN@2nd?5ExpandEnvironmentStrings?5fai@
0x180041AF0: "RpcGetUserCredentials failed: 0x" ??_C@_0CD@BOCLNLMB@RpcGetUserCredentials?5failed?3?50x@
0x180001F58: "private: long __cdecl CWaitItem::IsSystemProcess(void) __ptr64" ?IsSystemProcess@CWaitItem@@AEAAJXZ
0x180040168: "SystemPtes" ??_C@_0L@GFOIJPCG@SystemPtes?$AA@
0x18003FC2B: "" ??_C@_00CNPNBAHC@?$AA@
0x180044158: "_tsrpcResetSession - Failed to o" ??_C@_0CM@MKFJPALA@_tsrpcResetSession?5?9?5Failed?5to?5o@
0x180040320: "RpcGetCurrentSessionClientData t" ??_C@_0DI@OKOKCNED@RpcGetCurrentSessionClientData?5t@
0x1800473A0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180051490: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x180039850: "WinStationQueryInformationW" ??_C@_0BM@JBGMANEK@WinStationQueryInformationW?$AA@
0x180051488: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUmvdhexUzkkhieUgherkUfgrohUlyquivUznwGEUkivxlnkOlyq@TSVIPUtils" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUmvdhexUzkkhieUgherkUfgrohUlyquivUznwGEUkivxlnkOlyq@TSVIPUtils
0x180041700: "done with call RpcWinStationBroa" ??_C@_0EI@IIEPEBDD@done?5with?5call?5RpcWinStationBroa@
0x180042A18: "!!! WinStationRenameW deprecated" ??_C@_0CB@JEODPABL@?$CB?$CB?$CB?5WinStationRenameW?5deprecated@
0x180039600: "Process is in Session %d or proc" ??_C@_0EK@CNBCJFFE@Process?5is?5in?5Session?5?$CFd?5or?5proc@
0x1800431B0: "!!! _WinStationOpenSessionDirect" ??_C@_0CP@HDOKJOPD@?$CB?$CB?$CB?5_WinStationOpenSessionDirect@
0x180042408: "WinStationEnumerateW" ??_C@_0BF@FEANPGB@WinStationEnumerateW?$AA@
0x180043848: "host/%s" ??_C@_1BA@CBJEAAFG@?$AAh?$AAo?$AAs?$AAt?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x180041D30: "RpcGetRedirectAuthInfo threw an " ??_C@_0DA@NMPGBCCK@RpcGetRedirectAuthInfo?5threw?5an?5@
0x18004CA1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180041DC0: "RpcGetRestrictedLogonInfo failed" ??_C@_0CN@BKHOMGKO@RpcGetRestrictedLogonInfo?5failed@
0x180027E00: ServerLicensingGetPolicyInformationW
0x180039DE8: "GetCurrentSessionInformation fai" ??_C@_0DA@JKOHLGEM@GetCurrentSessionInformation?5fai@
0x180028A10: WinStationQueryLicense
0x180044918: "GetTimes failed: 0x%x in %s" ??_C@_0BM@BGDPFGKC@GetTimes?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x180044F58: "CWaitItem::StopWait" ??_C@_0BE@CAAIMOEB@CWaitItem?3?3StopWait?$AA@
0x180038D28: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180044C00: "GetWinStationPd failed: 0x%x in " ??_C@_0CD@EOIJKOAG@GetWinStationPd?5failed?3?50x?$CFx?5in?5@
0x18004ADD8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x180042E90: "!!! ServerGetInternetConnectorSt" ??_C@_0DA@FCOFLHKG@?$CB?$CB?$CB?5ServerGetInternetConnectorSt@
0x180040A10: "RpcShadowStop2 threw an exceptio" ??_C@_0CI@OPAHBMGB@RpcShadowStop2?5threw?5an?5exceptio@
0x180043658: "CProcessUtils::GetSidFromProcess" ??_C@_0CD@DOHILMCF@CProcessUtils?3?3GetSidFromProcess@
0x180041958: "RpcSetAutologonPassword threw an" ??_C@_0DB@PACOFBED@RpcSetAutologonPassword?5threw?5an@
0x18000B9C0: WinStationIsSessionPermitted
0x180001B20: WinStationUnRegisterConsoleNotification
0x1800550A0: "__cdecl _imp_GetAddrInfoW" __imp_GetAddrInfoW
0x180040720: "Listener_WinStationQueryInformat" ??_C@_0CF@BPLELEPC@Listener_WinStationQueryInformat@
0x180043170: "!!! WinStationQueryAllowConcurre" ??_C@_0DJ@PANCDIEK@?$CB?$CB?$CB?5WinStationQueryAllowConcurre@
0x180038C40: "const CWaitEventCollect::`vftable'" ??_7CWaitEventCollect@@6B@
0x180038E58: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18000A638: "public: long __cdecl CSmartSession::IsDesktopLocked(void) __ptr64" ?IsDesktopLocked@CSmartSession@@QEAAJXZ
0x180043A50: "EnableVirtualIP" ??_C@_1CA@DGIGCFMH@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAI?$AAP?$AA?$AA@
0x180044FF8: "RpcUnRegisterAsyncNotification t" ??_C@_0DI@LLABIPAP@RpcUnRegisterAsyncNotification?5t@
0x1800449C0: "CopySessionExInfo failed: 0x%x i" ??_C@_0CF@EBCHGGNH@CopySessionExInfo?5failed?3?50x?$CFx?5i@
0x180004640: WinStationEnumerateW
0x18004C9A4: "__cdecl _IMPORT_DESCRIPTOR_KERNELBASE" __IMPORT_DESCRIPTOR_KERNELBASE
0x180038FF0: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x18002B4DC: "__cdecl TlgWrite" _TlgWrite
0x180014B90: WinStationFreePropertyValue
0x180039090: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180041990: "RpcCreateChildSessionTransport t" ??_C@_0DI@LAIKCPNP@RpcCreateChildSessionTransport?5t@
0x180042168: "CSecurityUtils::UnprotectString" ??_C@_0CA@DGKNOHEJ@CSecurityUtils?3?3UnprotectString?$AA@
0x1800396E0: "RpcGetTerminalName() takes %d" ??_C@_0BO@JKHJMOPP@RpcGetTerminalName?$CI?$CJ?5takes?5?$CFd?$AA@
0x180041FF8: "RpcSystemShutdownStarted threw a" ??_C@_0DC@MGAGAKNE@RpcSystemShutdownStarted?5threw?5a@
0x1800414F8: "Failed to open binding failed: 0" ??_C@_0CK@BFNKKFBN@Failed?5to?5open?5binding?5failed?3?50@
0x180015EC0: WinStationSendMessageA
0x180028220: ServerLicensingUnloadPolicy
0x1800513E0: "protected: static void * __ptr64 __ptr64 CPublicBinding::pNetsrvSid" ?pNetsrvSid@CPublicBinding@@1PEAXEA
0x1800428D8: "WinStationQueryEnforcementCore" ??_C@_0BP@JKDEDNOK@WinStationQueryEnforcementCore?$AA@
0x180038E60: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180038D70: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180043468: "bind.GetSessionIP failed: 0x%x i" ??_C@_0CF@LPALBBPL@bind?4GetSessionIP?5failed?3?50x?$CFx?5i@
0x180041EA8: "WinStationIsBoundToCacheTerminal" ??_C@_0CB@ODOGPBFA@WinStationIsBoundToCacheTerminal@
0x18000CB7E: "__cdecl _imp_load_RpcAsyncCancelCall" __imp_load_RpcAsyncCancelCall
0x180045550: "HintApiRPCEntry#%d" ??_C@_1CG@HIMCJCJK@?$AAH?$AAi?$AAn?$AAt?$AAA?$AAp?$AAi?$AAR?$AAP?$AAC?$AAE?$AAn?$AAt?$AAr?$AAy?$AA?$CD?$AA?$CF?$AAd?$AA?$AA@
0x180044AF8: "GetConfigData failed: 0x%x in %s" ??_C@_0CB@LMKMEBGF@GetConfigData?5failed?3?50x?$CFx?5in?5?$CFs@
0x180041008: "RpcGetLoggedOnCount threw an exc" ??_C@_0CN@EKIFGCEH@RpcGetLoggedOnCount?5threw?5an?5exc@
0x1800016C0: "void __cdecl DestroyLSCore(void)" ?DestroyLSCore@@YAXXZ
0x18000A330: WinStationVirtualOpenEx
0x18003FCE8: "RpcOpenSession threw an exceptio" ??_C@_0CI@NNGPKHAK@RpcOpenSession?5threw?5an?5exceptio@
0x1800431E0: "!!! WinStationQueryLogonCredenti" ??_C@_0DA@CAAJBKCN@?$CB?$CB?$CB?5WinStationQueryLogonCredenti@
0x18003FCB8: "RpcCloseSession threw an excepti" ??_C@_0CJ@BOOKKHLN@RpcCloseSession?5threw?5an?5excepti@
0x18003FED0: "InitializeLoadMetrics():" ??_C@_0BJ@DKHLANNB@InitializeLoadMetrics?$CI?$CJ?3?$AA@
0x18004E8B0: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180041928: "RpcSendWindowMessage threw an ex" ??_C@_0CO@FBPGGGHD@RpcSendWindowMessage?5threw?5an?5ex@
0x180028030: ServerLicensingOpenW
0x1800086A0: "public: long __cdecl CEnum::Open(void * __ptr64) __ptr64" ?Open@CEnum@@QEAAJPEAX@Z
0x180043DC0: "Legacy_WinStationOpenServerW ret" ??_C@_0CI@HGBGFLCF@Legacy_WinStationOpenServerW?5ret@
0x180043708: "NtOpenProcessToken failed: 0x%x " ??_C@_0CG@HCIAJJME@NtOpenProcessToken?5failed?3?50x?$CFx?5@
0x180028E00: "__cdecl WinStationReInitializeSecurity" _WinStationReInitializeSecurity
0x1800408D8: "WinStationGetTermSrvCountersValu" ??_C@_0CC@BODJODPP@WinStationGetTermSrvCountersValu@
0x180003400: WinStationGetAllUserSessions
0x180040678: "RpcGetCurrentSessionType failed:" ??_C@_0CM@FNBLHIMN@RpcGetCurrentSessionType?5failed?3@
0x180042CE0: "!!! _WinStationBreakPoint deprec" ??_C@_0CF@JHIIFHA@?$CB?$CB?$CB?5_WinStationBreakPoint?5deprec@
0x180003830: "long __cdecl GetCurrentSessionWinStationType(unsigned long * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetCurrentSessionWinStationType@@YAJPEAKK0@Z
0x18003A358: "SafeCopyString on user name fail" ??_C@_0CP@NJLALHAM@SafeCopyString?5on?5user?5name?5fail@
0x1800010A0: WinStationGetCurrentSessionTerminalName
0x18000B790: WinStationSendWindowMessage
0x180041370: "RpcIsChildSessionsEnabled threw " ??_C@_0DD@EHOBPMLO@RpcIsChildSessionsEnabled?5threw?5@
0x18000C3E0: "__cdecl XcptFilter" _XcptFilter
0x18000C947: "__cdecl _tailMerge_ext_ms_win_ntuser_synch_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_synch_l1_1_0_dll
0x180040E28: "WinStationSetInformationW" ??_C@_0BK@JIFNPOIC@WinStationSetInformationW?$AA@
0x18002B180: WTSUnRegisterSessionNotificationEx
0x180039098: "__cdecl _xc_a" __xc_a
0x180014620: WinStationConnectAndLockDesktop
0x180043780: "CUtils::CreateNetworkServiceSid" ??_C@_0CA@GKMPJANH@CUtils?3?3CreateNetworkServiceSid?$AA@
0x18003A008: "CUtils::GetUserSessionId" ??_C@_0BJ@PENCFHIE@CUtils?3?3GetUserSessionId?$AA@
0x1800417A0: "WinStationBSMWorkerThread(): cal" ??_C@_0DL@EGOGEDCM@WinStationBSMWorkerThread?$CI?$CJ?3?5cal@
0x18002C538: "public: unsigned long __cdecl CRegistry::OpenKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?OpenKey@CRegistry@@QEAAKPEAUHKEY__@@PEBGK1@Z
0x180028CB0: "__cdecl WinStationFUSCanRemoteUserDisconnect" _WinStationFUSCanRemoteUserDisconnect
0x180044ED8: "RpcWaitAsyncNotificationEx threw" ??_C@_0DE@ONAIHCKJ@RpcWaitAsyncNotificationEx?5threw@
0x18003A060: "Error %d in RpcStringBindingComp" ??_C@_0CE@JIAFHKJM@Error?5?$CFd?5in?5RpcStringBindingComp@
0x180002F24: "protected: long __cdecl CWaitItem::StartWaitPrologue(void) __ptr64" ?StartWaitPrologue@CWaitItem@@IEAAJXZ
0x1800023F0: "public: virtual long __cdecl CWindowNotificationItem::Notify(struct _SESSION_CHANGE * __ptr64,unsigned long) __ptr64" ?Notify@CWindowNotificationItem@@UEAAJPEAU_SESSION_CHANGE@@K@Z
0x18001AA68: "unsigned char __cdecl ConvertPolicyInformationU2A(struct LCPOLICYINFOGENERIC * __ptr64 * __ptr64,struct LCPOLICYINFOGENERIC * __ptr64)" ?ConvertPolicyInformationU2A@@YAEPEAPEAULCPOLICYINFOGENERIC@@PEAU1@@Z
0x1800429C0: "!!! WinStationGetLanAdapterNameA" ??_C@_0CM@DMAFFJJC@?$CB?$CB?$CB?5WinStationGetLanAdapterNameA@
0x180039660: PROPERTY_TYPE_TS_LICENSETYPE_GUID
0x180001E40: WinStationGetCurrentSessionCapabilities
0x18004E930: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUghfgroUlyquivUznwGEUkivxlnkOlyq@tsutil" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUghfgroUlyquivUznwGEUkivxlnkOlyq@tsutil
0x180008C60: "public: __cdecl CSmartPublicBinding::~CSmartPublicBinding(void) __ptr64" ??1CSmartPublicBinding@@QEAA@XZ
0x18000B0AC: "long __cdecl _GetSessionProtocolLastInputTime(void * __ptr64,unsigned long,enum _WINSTATIONSTATECLASS,union _LARGE_INTEGER,struct _PROTOCOLSTATUS * __ptr64,union _LARGE_INTEGER * __ptr64)" ?_GetSessionProtocolLastInputTime@@YAJPEAXKW4_WINSTATIONSTATECLASS@@T_LARGE_INTEGER@@PEAU_PROTOCOLSTATUS@@PEAT2@@Z
0x180002A48: "public: class SmartPtr<class CWindowNotification> & __ptr64 __cdecl SmartPtr<class CWindowNotification>::operator=(class CWindowNotification * __ptr64) __ptr64" ??4?$SmartPtr@VCWindowNotification@@@@QEAAAEAV0@PEAVCWindowNotification@@@Z
0x180041908: "lParam length too big = %d" ??_C@_0BL@IMBKKEBE@lParam?5length?5too?5big?5?$DN?5?$CFd?$AA@
0x180043CC0: "System\CurrentControlSet\Control" ??_C@_1II@LAMMNJCM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180040B90: "RpcShadowTarget failed: 0x%x in " ??_C@_0CD@HGHMEJBM@RpcShadowTarget?5failed?3?50x?$CFx?5in?5@
0x18003FFF0: " Ptes: Base [%6ld], Us" ??_C@_0FA@LCDENNON@?5?5?5Ptes?3?5?5?5?5?5?5?5?5?5Base?5?$FL?$CF6ld?$FN?0?5Us@
0x180042CB8: "!!! _WinStationCallback deprecat" ??_C@_0CD@EIKLDNON@?$CB?$CB?$CB?5_WinStationCallback?5deprecat@
0x180009EC0: "public: virtual void * __ptr64 __cdecl CWindowNotification::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWindowNotification@@UEAAPEAXI@Z
0x180042F90: "!!! WinStationGetMachinePolicy d" ??_C@_0CK@NLBBPKIF@?$CB?$CB?$CB?5WinStationGetMachinePolicy?5d@
0x1800395A8: "WinStationGetAllUserSessions" ??_C@_0BN@MLADMABO@WinStationGetAllUserSessions?$AA@
0x180041ED0: "WinStationIsBoundToCacheTerminal" ??_C@_0DE@HLCNBJFM@WinStationIsBoundToCacheTerminal@
0x18000CAEE: "__cdecl _imp_load_CheckTokenMembership" __imp_load_CheckTokenMembership
0x180038D10: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180044298: "Session.Open failed: 0x%x in %s" ??_C@_0CA@EOALPEDM@Session?4Open?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x1800550E8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x18000C5D9: "__cdecl lock" _lock
0x1800426D0: "2f59a331-bf7d-48cb-9e5c-7c090d76" ??_C@_1EK@MDIKCDKK@?$AA2?$AAf?$AA5?$AA9?$AAa?$AA3?$AA3?$AA1?$AA?9?$AAb?$AAf?$AA7?$AAd?$AA?9?$AA4?$AA8?$AAc?$AAb?$AA?9?$AA9?$AAe?$AA5?$AAc?$AA?9?$AA7?$AAc?$AA0?$AA9?$AA0?$AAd?$AA7?$AA6@
0x180014EA0: WinStationGetCurrentSessionConnectionProperty
0x18000CF78: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Reset(void) __ptr64" ?Reset@?$SP@KV?$SP_MEM@K@@@@QEAAXXZ
0x180039F78: "!!! Obsolete_WinStationQueryInfo" ??_C@_0DE@IEHKHLMN@?$CB?$CB?$CB?5Obsolete_WinStationQueryInfo@
0x18003FB08: TERMINAL_TYPE_REGULAR_DESKTOP
0x180002304: "protected: long __cdecl CWaitItem::StartWaitEpilogue(void) __ptr64" ?StartWaitEpilogue@CWaitItem@@IEAAJXZ
0x180002630: "private: static unsigned long __cdecl CWaitItem::staticIssueWait(void * __ptr64)" ?staticIssueWait@CWaitItem@@CAKPEAX@Z
0x18000C3C8: "__cdecl callnewh" _callnewh
0x180041840: "RpcGetReconnectId threw an excep" ??_C@_0CL@GACMEPDH@RpcGetReconnectId?5threw?5an?5excep@
0x1800435A0: "TSRPC<<<:" ??_C@_09IMLLHJNF@TSRPC?$DM?$DM?$DM?3?$AA@
0x180007FC0: "private: long __cdecl CPublicBinding::CloseSessionContextHandle(void) __ptr64" ?CloseSessionContextHandle@CPublicBinding@@AEAAJXZ
0x1800550B0: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x180017270: "public: virtual void * __ptr64 __cdecl CWaitEventCollect::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWaitEventCollect@@UEAAPEAXI@Z
0x180014D90: WinStationGetChildSessionId
0x180028560: LogonIdFromWinStationNameA
0x1800394E4: "__cdecl _guard_iat_table" __guard_iat_table
0x180040DB8: "_WinStationBeepOpen" ??_C@_0BE@GBBMEMKH@_WinStationBeepOpen?$AA@
0x180038D88: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180014568: "public: long __cdecl CSmartSession::ShowMessageBox(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64,int) __ptr64" ?ShowMessageBox@CSmartSession@@QEAAJPEAG0KKPEAKH@Z
0x18000D0F6: memcpy
0x180028860: WinStationGenerateLicense
0x1800448D8: "GetWinStationInformation" ??_C@_0BJ@KDFOMCKP@GetWinStationInformation?$AA@
0x18002AF88: "public: int __cdecl CSmartWinStation::Open(void) __ptr64" ?Open@CSmartWinStation@@QEAAHXZ
0x180039910: "CWindowNotification::g_NumNotifi" ??_C@_0CO@MJBIFKNP@CWindowNotification?3?3g_NumNotifi@
0x180038D60: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180040188: "Unknown!" ??_C@_08HMEBKAKE@Unknown?$CB?$AA@
0x18003A420: "GetSessionProtocolLastInputTime " ??_C@_0DD@JOAGBAPN@GetSessionProtocolLastInputTime?5@
0x18002F164: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Attach(unsigned char * __ptr64) __ptr64" ?Attach@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXPEAE@Z
0x180038FA8: "__cdecl _imp_RtlCaptureStackBackTrace" __imp_RtlCaptureStackBackTrace
0x180038EB8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180055000: "__cdecl _imp_CryptUnprotectMemory" __imp_CryptUnprotectMemory
0x180043A88: "VirtualizeLoopbackAdresses" ??_C@_1DG@PKOOHEFH@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAi?$AAz?$AAe?$AAL?$AAo?$AAo?$AAp?$AAb?$AAa?$AAc?$AAk?$AAA?$AAd?$AAr?$AAe?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x180041A48: "RpcIsSessionPermitted threw an e" ??_C@_0CP@PDFILJKL@RpcIsSessionPermitted?5threw?5an?5e@
0x180038F18: "__cdecl _imp_memset" __imp_memset
0x18004A964: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x18004AA00: IPHLPAPI_NULL_THUNK_DATA_DLN
0x18004AED8: IPHLPAPI_NULL_THUNK_DATA_DLB
0x180041640: "DuplicateHandle() failed with er" ??_C@_0CI@JGBKBMOB@DuplicateHandle?$CI?$CJ?5failed?5with?5er@
0x180038E50: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180055018: IPHLPAPI_NULL_THUNK_DATA_DLA
0x180042308: "WinStationTerminateGlassReplacem" ??_C@_0CL@HEECBNKK@WinStationTerminateGlassReplacem@
0x18000C5BF: "__cdecl initterm" _initterm
0x180038EA8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18003FC60: "RpcOpenListener threw an excepti" ??_C@_0CJ@MFMCGPHC@RpcOpenListener?5threw?5an?5excepti@
0x18000C6A3: "__cdecl _imp_load_RpcBindingFree" __imp_load_RpcBindingFree
0x180043680: "NtOpenProcess failed: 0x%x in %s" ??_C@_0CB@EABDCOIO@NtOpenProcess?5failed?3?50x?$CFx?5in?5?$CFs@
0x180039C28: "DLL_PROCESS_DETTACH" ??_C@_0BE@MLNLICCH@DLL_PROCESS_DETTACH?$AA@
0x180041148: "Can't bind to local LSM, error c" ??_C@_0CL@OKBKLFDG@Can?8t?5bind?5to?5local?5LSM?0?5error?5c@
0x18004C940: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18004E920: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800288C0: WinStationGetLanAdapterNameW
0x180019160: WinStationIsBoundToCacheTerminal
0x180038E70: "__cdecl _imp_Sleep" __imp_Sleep
0x180055130: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x180041870: "WinStationUserToken failed: 0x%x" ??_C@_0CH@HDGBAFJC@WinStationUserToken?5failed?3?50x?$CFx@
0x180039A50: "Calling WinStationPreCreateGlass" ??_C@_0DF@NHKLFJKH@Calling?5WinStationPreCreateGlass@
0x1800174C0: WinStationRegisterNotificationEvent
0x1800390D8: "__cdecl _xi_z" __xi_z
0x180028D70: "__cdecl WinStationNotifyLogon" _WinStationNotifyLogon
0x180042FC0: "!!! _WinStationUpdateClientCache" ??_C@_0DI@EFKPFEDB@?$CB?$CB?$CB?5_WinStationUpdateClientCache@
0x1800171E0: "__cdecl WinStationShadowTargetSetup" _WinStationShadowTargetSetup
0x180041430: "WinStationGetChildSessionId" ??_C@_0BM@FKGEFAI@WinStationGetChildSessionId?$AA@
0x180038CD0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800445F8: "Invoke RpcGetUserName" ??_C@_0BG@DGLOAHND@Invoke?5RpcGetUserName?$AA@
0x180039068: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x180039FB0: "!!! Obsolete_WinStationSetInform" ??_C@_0DC@PNHALALB@?$CB?$CB?$CB?5Obsolete_WinStationSetInform@
0x180038F00: "__cdecl _imp_wcscmp" __imp_wcscmp
0x18000AAF8: "long __cdecl GetWinStationWd(void * __ptr64,unsigned long,struct _WDCONFIGW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationWd@@YAJPEAXKPEAU_WDCONFIGW@@KPEAK@Z
0x18000C134: "__cdecl _C_specific_handler" __C_specific_handler
0x180015850: WinStationGetUserCertificates
0x180016AB0: WinStationTerminateProcess
0x180028CE0: "__cdecl WinStationGetApplicationInfo" _WinStationGetApplicationInfo
0x180003D30: "public: long __cdecl CSmartSession::GetUserNameW(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetUserNameW@CSmartSession@@QEAAJPEAPEAG0@Z
0x180042A70: "!!! WinStationSetInformationA de" ??_C@_0CJ@NAHIANAL@?$CB?$CB?$CB?5WinStationSetInformationA?5de@
0x1800136F0: MIDL_user_free
0x180040970: "RpcRcmShadow2 failed: 0x%x in %s" ??_C@_0CB@OLCPHAKK@RpcRcmShadow2?5failed?3?50x?$CFx?5in?5?$CFs@
0x180040B18: "Session.ShadowStop failed: 0x%x " ??_C@_0CG@MPGLMBMA@Session?4ShadowStop?5failed?3?50x?$CFx?5@
0x180041110: "RpcIsCurrentSessionTerminalRemot" ??_C@_0DF@GHPJKMOC@RpcIsCurrentSessionTerminalRemot@
0x180039BE0: "__cdecl _sz_IPHLPAPI_DLL" __sz_IPHLPAPI_DLL
0x1800288F0: WinStationGetMachinePolicy
0x180038F20: "__cdecl _imp__onexit" __imp__onexit
0x18003FE80: "InitializeLoadMetrics failed! Sy" ??_C@_0EJ@CDIJGHAI@InitializeLoadMetrics?5failed?$CB?5Sy@
0x180044B50: "GetWinStationInformationEx faile" ??_C@_0CO@KNNCLBAJ@GetWinStationInformationEx?5faile@
0x18002E528: "public: long __cdecl CWaitItem::CleanupWait(void) __ptr64" ?CleanupWait@CWaitItem@@QEAAJXZ
0x18000D102: memmove
0x180038D00: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180041F08: "CWaitShutdown::AreSessionsDraine" ??_C@_0CC@MKAEMNBH@CWaitShutdown?3?3AreSessionsDraine@
0x180028AA0: WinStationRemoveLicense
0x18000C868: "__cdecl _imp_load_UuidToStringW" __imp_load_UuidToStringW
0x180044638: "RpcGetUserName() takes %d" ??_C@_0BK@BOPJGHKD@RpcGetUserName?$CI?$CJ?5takes?5?$CFd?$AA@
0x180044778: "Invoke RpcGetProtocolStatus" ??_C@_0BM@GGNMGIOD@Invoke?5RpcGetProtocolStatus?$AA@
0x180044670: "RpcGetState threw an exception: " ??_C@_0CF@EGDPDELP@RpcGetState?5threw?5an?5exception?3?5@
0x18000CB36: "__cdecl _imp_load_RpcBindingSetAuthInfoExW" __imp_load_RpcBindingSetAuthInfoExW
0x180002010: WinStationGetAllSessionsEx
0x18000C3BC: malloc
0x180014470: "private: long __cdecl CPrivilegeEnable::ImpersonationCheck(void) __ptr64" ?ImpersonationCheck@CPrivilegeEnable@@AEAAJXZ
0x180016470: WinStationShadow
0x180038CF0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180044E68: "new pSid failed: 0x%x in %s" ??_C@_0BM@HDCCAJCH@new?5pSid?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x18004A944: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_message_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_message_l1_1_0_dll
0x180018DE0: WinStationGetUserCredentials
0x180041828: "Request is rejected " ??_C@_0BG@FPMCKFDD@Request?5is?5rejected?5?6?$AA@
0x1800420C0: "CSecurityUtils::DecryptPasswordI" ??_C@_0CK@OFPLMCCL@CSecurityUtils?3?3DecryptPasswordI@
0x180038E10: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180001070: WinStationFreeUserSessionInfo
0x1800550F8: "__cdecl _imp_PeekMessageW" __imp_PeekMessageW
0x1800412C0: "RpcConnectAndLockDesktop failed:" ??_C@_0CM@PMPKGJJP@RpcConnectAndLockDesktop?5failed?3@
0x180039038: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x1800448F8: "GetState failed: 0x%x in %s" ??_C@_0BM@JOMJMJOP@GetState?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x18000D000: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180043580: "TSAPI<<<:" ??_C@_09NPBEGMHL@TSAPI?$DM?$DM?$DM?3?$AA@
0x180041E70: "RpcIsBoundToCacheTerminal threw " ??_C@_0DD@NGAHOAKA@RpcIsBoundToCacheTerminal?5threw?5@
0x180055050: "__cdecl _imp_RpcSsDestroyClientContext" __imp_RpcSsDestroyClientContext
0x18002AA6C: "long __cdecl Legacy_WinStationShadowTarget(void * __ptr64,unsigned long,struct _WINSTATIONCONFIG2W * __ptr64,struct _ICA_STACK_ADDRESS * __ptr64,void * __ptr64,unsigned long,void * __ptr64,unsigned long,void * __ptr64,unsigned long)" ?Legacy_WinStationShadowTarget@@YAJPEAXKPEAU_WINSTATIONCONFIG2W@@PEAU_ICA_STACK_ADDRESS@@0K0K0K@Z
0x18002F1FC: "public: int __cdecl CLocalHostAddress::operator==(unsigned short const * __ptr64) __ptr64" ??8CLocalHostAddress@@QEAAHPEBG@Z
0x180030098: "const CTSVIPBinding::`vftable'" ??_7CTSVIPBinding@@6B@
0x180028E30: "__cdecl WinStationUpdateClientCachedCredentials" _WinStationUpdateClientCachedCredentials
0x18002C76C: "public: void __cdecl CRegistry::ReleaseMemory(void) __ptr64" ?ReleaseMemory@CRegistry@@QEAAXXZ
0x180028A40: WinStationQueryLogonCredentialsW
0x1800296A0: "unsigned char __cdecl Legacy_WinStationDisconnect(void * __ptr64,unsigned long,unsigned char)" ?Legacy_WinStationDisconnect@@YAEPEAXKE@Z
0x18002C438: SdClassSize
0x180004010: "public: long __cdecl CSmartSession::GetTimes(union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64,union _LARGE_INTEGER * __ptr64) __ptr64" ?GetTimes@CSmartSession@@QEAAJPEAT_LARGE_INTEGER@@00@Z
0x18004E964: "int gbWinstaCritInitialized" ?gbWinstaCritInitialized@@3HA
0x18004E960: "protected: static int CPublicBinding::bCritSecInitialized" ?bCritSecInitialized@CPublicBinding@@1HA
0x180043730: "NtQueryInformationToken failed: " ??_C@_0CL@DBLGHAJK@NtQueryInformationToken?5failed?3?5@
0x18001AD50: "unsigned char __cdecl LcRpcBindLocal(void)" ?LcRpcBindLocal@@YAEXZ
0x180038D50: "__cdecl _imp_GetModuleHandleExA" __imp_GetModuleHandleExA
0x1800550D8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA_DLA
0x180042390: "Memory allocation failed." ??_C@_0BK@JCLLEHFP@Memory?5allocation?5failed?4?$AA@
0x1800424D8: "GetEnumResultEx failed: 0x%x in " ??_C@_0CD@PPOIKAH@GetEnumResultEx?5failed?3?50x?$CFx?5in?5@
0x18004A9F0: CRYPT32_NULL_THUNK_DATA_DLN
0x180044970: "GetWinStationInformationEx" ??_C@_0BL@MNECBMDB@GetWinStationInformationEx?$AA@
0x180028000: ServerLicensingOpenA
0x18000CF20: "void * __ptr64 __cdecl MemoryAlloc(unsigned __int64)" ?MemoryAlloc@@YAPEAX_K@Z
0x18002E1D8: "long __cdecl GetWinStationModules(void * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationModules@@YAJPEAXKPEAEKPEAK@Z
0x180044A70: "_tsrpcQuerySessionInfo - Session" ??_C@_0EF@KAFJOMAN@_tsrpcQuerySessionInfo?5?9?5Session@
0x180029464: "unsigned char __cdecl Legacy_WinStationConnectW(void * __ptr64,unsigned long,unsigned long,unsigned short * __ptr64,unsigned char)" ?Legacy_WinStationConnectW@@YAEPEAXKKPEAGE@Z
0x180044050: "_tsrpcSessionNameFromLogonId - L" ??_C@_0EJ@GBHJHJPF@_tsrpcSessionNameFromLogonId?5?9?5L@
0x18004AE18: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLB
0x18002A830: "unsigned char __cdecl Legacy_WinStationSendMessageW(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long * __ptr64,unsigned char)" ?Legacy_WinStationSendMessageW@@YAEPEAXKPEBGK1KKKPEAKE@Z
0x180044740: "RpcGetProtocolStatus returned %d" ??_C@_0DE@PINIDGAG@RpcGetProtocolStatus?5returned?5?$CFd@
0x18000C3EC: "__cdecl amsg_exit" _amsg_exit
0x1800067D0: "long __cdecl GetCurrentSessionInformation(struct _WINSTATIONINFORMATIONW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetCurrentSessionInformation@@YAJPEAU_WINSTATIONINFORMATIONW@@KPEAK@Z
0x180038F60: "__cdecl _imp__callnewh" __imp__callnewh
0x180041C78: "RpcGetUserProfile threw an excep" ??_C@_0CL@NMAIFBKM@RpcGetUserProfile?5threw?5an?5excep@
0x180008110: "public: long __cdecl CSmartSession::GetSessionInformation(unsigned long,void * __ptr64) __ptr64" ?GetSessionInformation@CSmartSession@@QEAAJKPEAX@Z
0x18002C2BC: CopySourceToDest
0x180045128: "StartWaitEpilogue() failed: 0x%x" ??_C@_0CH@DMBMOMKH@StartWaitEpilogue?$CI?$CJ?5failed?3?50x?$CFx@
0x1800396C0: "Invoke RpcGetTerminalName" ??_C@_0BK@IEKPLEM@Invoke?5RpcGetTerminalName?$AA@
0x180013C0C: "public: __cdecl CPrivilegeEnable::~CPrivilegeEnable(void) __ptr64" ??1CPrivilegeEnable@@QEAA@XZ
0x180016E70: "__cdecl WinStationShadowTarget" _WinStationShadowTarget
0x180040CE8: "ProcessUtils.GetSessionProcessIn" ??_C@_0DN@KKEBHEKK@ProcessUtils?4GetSessionProcessIn@
0x180001550: WinStationFreeMemory
0x18002C83C: "public: long __cdecl CTSVIPPublicBinding::GetSessionIP(unsigned short,unsigned long,struct __TSVIPSession * __ptr64) __ptr64" ?GetSessionIP@CTSVIPPublicBinding@@QEAAJGKPEAU__TSVIPSession@@@Z
0x1800450F8: "RpcRegisterAsyncNotification fai" ??_C@_0DA@DMEDDBIO@RpcRegisterAsyncNotification?5fai@
0x180015100: WinStationGetInitialApplication
0x180047398: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180029C88: "unsigned char __cdecl Legacy_WinStationGetAllProcesses(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64)" ?Legacy_WinStationGetAllProcesses@@YAEPEAXKPEAKPEAPEAX@Z
0x180039FE8: "Missing paramter %s in %s" ??_C@_0BK@IFEOMGBA@Missing?5paramter?5?$CFs?5in?5?$CFs?$AA@
0x180009430: WinStationIsCurrentSessionRemoteable
0x180040FD0: "RpcGetConnectionProperty threw a" ??_C@_0DC@BHCNPBJI@RpcGetConnectionProperty?5threw?5a@
0x18004CA58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18002DD88: "long __cdecl GetLastInputTime(void * __ptr64,unsigned long,union _LARGE_INTEGER * __ptr64)" ?GetLastInputTime@@YAJPEAXKPEAT_LARGE_INTEGER@@@Z
0x180028EC0: "unsigned long __cdecl CheckUserBuffer(enum _WINSTATIONINFOCLASS,void * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?CheckUserBuffer@@YAKW4_WINSTATIONINFOCLASS@@PEAXKPEAPEAXPEAKPEAE@Z
0x18003FDF8: "InitializeLoadMetrics failed! Sy" ??_C@_0DK@FINFMMP@InitializeLoadMetrics?5failed?$CB?5Sy@
0x180039700: "Open session on %d" ??_C@_0BD@KBPCKFME@Open?5session?5on?5?$CFd?$AA@
0x18004A8A4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_base_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_base_l1_1_0_dll
0x180040930: "RpcRcmShadow2 threw an exception" ??_C@_0CH@BADEOGNG@RpcRcmShadow2?5threw?5an?5exception@
0x180041CA8: "WinStationRedirectLogonBeginPain" ??_C@_0CF@DJDPNDO@WinStationRedirectLogonBeginPain@
0x180042080: "WinStationSystemShutdownWait" ??_C@_0BN@BJANJGPD@WinStationSystemShutdownWait?$AA@
0x180042D30: "!!! _WinStationNotifyLogoff depr" ??_C@_0CH@ONNEJGPD@?$CB?$CB?$CB?5_WinStationNotifyLogoff?5depr@
0x180039008: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x180042578: "RpcGetAllSessionsEx threw an exc" ??_C@_0CN@OPMADLGB@RpcGetAllSessionsEx?5threw?5an?5exc@
0x18002DAB4: "long __cdecl _tsrpcResetSession(void * __ptr64,unsigned long,unsigned char)" ?_tsrpcResetSession@@YAJPEAXKE@Z
0x180051478: "int g_bDebugSpew" ?g_bDebugSpew@@3HA
0x180002204: "private: long __cdecl CWindowNotification::DeleteFromWaitList(struct HWND__ * __ptr64) __ptr64" ?DeleteFromWaitList@CWindowNotification@@AEAAJPEAUHWND__@@@Z
0x18004E8C0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x18001A5D0: WinStationEnumerateExW
0x1800402A0: "WinStationDisconnect" ??_C@_0BF@EADHEBDG@WinStationDisconnect?$AA@
0x180042B80: "!!! WinStationEnumerateLicenses " ??_C@_0CL@BONKAJPA@?$CB?$CB?$CB?5WinStationEnumerateLicenses?5@
0x18004A984: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WS2_32_dll" __DELAY_IMPORT_DESCRIPTOR_WS2_32_dll
0x1800410A8: "RpcIsCurrentSessionTerminalRemot" ??_C@_0DL@FECKPICO@RpcIsCurrentSessionTerminalRemot@
0x180042AA0: "!!! LogonIdFromWinStationNameA d" ??_C@_0CK@MINHPBAL@?$CB?$CB?$CB?5LogonIdFromWinStationNameA?5d@
0x18004E8C8: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x1800426B8: "LcRpc" ??_C@_1M@LOCBNNAF@?$AAL?$AAc?$AAR?$AAp?$AAc?$AA?$AA@
0x180038F38: "__cdecl _imp__lock" __imp__lock
0x180042448: "LogonIdFromWinStationNameW" ??_C@_0BL@JENNGIHJ@LogonIdFromWinStationNameW?$AA@
0x18003A298: "MIDL_user_allocate failed: 0x%x " ??_C@_0CG@CKDPPAOJ@MIDL_user_allocate?5failed?3?50x?$CFx?5@
0x180030098: "const NotificationItem::`vftable'" ??_7NotificationItem@@6B@
0x18000C38C: atexit
0x180044D20: "RPC CallBack called with call st" ??_C@_0ED@JECGKBGM@RPC?5CallBack?5called?5with?5call?5st@
0x180044B20: "GetWinStationInfromation failed:" ??_C@_0CM@IKLHCLDP@GetWinStationInfromation?5failed?3@
0x18004A884: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180015560: WinStationGetSessionIds
0x18001A260: LogonIdFromWinStationNameW
0x1800285C0: ServerGetInternetConnectorStatus
0x180040620: "RpcGetCurrentSessionType threw a" ??_C@_0DC@ILCPHPKB@RpcGetCurrentSessionType?5threw?5a@
0x1800409C8: "WinStationShadowAccessCheck" ??_C@_0BM@CAIHFALH@WinStationShadowAccessCheck?$AA@
0x180038FE0: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x18004E938: LCRPC_IfHandle
0x1800455C0: "EventActivityIdControl" ??_C@_0BH@HMPLKEEO@EventActivityIdControl?$AA@
0x180008D10: "unsigned char __cdecl Listener_WinStationQueryInformationW(void * __ptr64,unsigned long,enum _WINSTATIONINFOCLASS,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?Listener_WinStationQueryInformationW@@YAEPEAXKW4_WINSTATIONINFOCLASS@@0KPEAK@Z
0x1800399E0: "RpcDisconnect() takes %d" ??_C@_0BJ@HIAGCPLP@RpcDisconnect?$CI?$CJ?5takes?5?$CFd?$AA@
0x180040A78: "RpcShadow threw an exception: 0x" ??_C@_0CD@GCGCHHEO@RpcShadow?5threw?5an?5exception?3?50x@
0x180043FA8: "_tsrpcEnumerate" ??_C@_0BA@IJCNEMOK@_tsrpcEnumerate?$AA@
0x180044400: "RpcGetSessionInformationEx an ex" ??_C@_0FJ@BNFGKLHD@RpcGetSessionInformationEx?5an?5ex@
0x1800443A0: "Session::Disconnect failed: 0x%x" ??_C@_0CH@DKHDFFEP@Session?3?3Disconnect?5failed?3?50x?$CFx@
0x18002C280: CopyPdParamsToWire
0x180038E28: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180014C00: WinStationFreeUserCertificates
0x180018664: "public: static long __cdecl CSecurityUtils::DecryptCertInCredInfo(struct _SEC_WINNT_AUTH_IDENTITY_EX2 * __ptr64,unsigned long)" ?DecryptCertInCredInfo@CSecurityUtils@@SAJPEAU_SEC_WINNT_AUTH_IDENTITY_EX2@@K@Z
0x180043030: "!!! WinStationCheckLoopBack depr" ??_C@_0CH@GMNHMHDB@?$CB?$CB?$CB?5WinStationCheckLoopBack?5depr@
0x180027F50: ServerLicensingLoadPolicy
0x180038E20: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x1800289E0: WinStationQueryInformationA
0x180039CD0: "Failed to open binding" ??_C@_0BH@MPDEMBAB@Failed?5to?5open?5binding?$AA@
0x180042DA0: "!!! _WinStationCheckForApplicati" ??_C@_0DC@HPNHAMEE@?$CB?$CB?$CB?5_WinStationCheckForApplicati@
0x18000C6C1: "__cdecl _tailMerge_api_ms_win_security_base_l1_1_0_dll" __tailMerge_api_ms_win_security_base_l1_1_0_dll
0x18003A3D8: "GetLastInputTime failed: 0x%x" ??_C@_0BO@KMEEPPOI@GetLastInputTime?5failed?3?50x?$CFx?$AA@
0x180007FF0: "public: __cdecl CSmartSession::~CSmartSession(void) __ptr64" ??1CSmartSession@@QEAA@XZ
0x180007330: WinStationQueryInformationW
0x18002C324: CopyWinStaConfigFromWire
0x180038CD8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800454C8: "CWindowNotification::AddToWaitLi" ??_C@_0CD@DLIGOBDP@CWindowNotification?3?3AddToWaitLi@
0x180038D38: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180009210: "void * __ptr64 __cdecl OpenLocalLSM(void * __ptr64)" ?OpenLocalLSM@@YAPEAXPEAX@Z
0x180030250: "const CWaitEventItem::`vftable'" ??_7CWaitEventItem@@6B@
0x180002360: "public: virtual long __cdecl CWindowNotification::Callback(void) __ptr64" ?Callback@CWindowNotification@@UEAAJXZ
0x180045340: "g_WindowNotificationCS.Initializ" ??_C@_0DF@LAOCHHGA@g_WindowNotificationCS?4Initializ@
0x180030090: "const CWindowNotificationItem::`vftable'" ??_7CWindowNotificationItem@@6B@
0x18002B210: WinStationQuerySessionVirtualIP
0x180028890: WinStationGetLanAdapterNameA
0x180040278: "Session::Connect failed: 0x%x in" ??_C@_0CE@JLFIHJNJ@Session?3?3Connect?5failed?3?50x?$CFx?5in@
0x180040508: "RpcGetCurrentSessionProtocolLast" ??_C@_0DN@GGNJOPLG@RpcGetCurrentSessionProtocolLast@
0x180040040: " PagedPool: Base [%6ld], Us" ??_C@_0EP@ICENGDCJ@?5?5?5PagedPool?3?5?5?5?5Base?5?$FL?$CF6ld?$FN?0?5Us@
0x18000C9C6: "__cdecl _imp_load_PeekMessageW" __imp_load_PeekMessageW
0x18002B0F0: WTSRegisterSessionNotificationEx
0x180038D90: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000C5F1: "__cdecl _dllonexit" __dllonexit
0x180042030: "WinStationSystemShutdownStarted" ??_C@_0CA@JHEHMGEM@WinStationSystemShutdownStarted?$AA@
0x18003A100: "OpenEvent( Global\TermSrvReadyEv" ??_C@_0DD@NFLGHDNJ@OpenEvent?$CI?5Global?2TermSrvReadyEv@
0x180040DD0: "_WinStationBeepOpen failed: 0x%x" ??_C@_0CH@MKKADEGG@_WinStationBeepOpen?5failed?3?50x?$CFx@
0x180045278: "g_NumWaitEventNotification is no" ??_C@_0CM@HDBBHJCD@g_NumWaitEventNotification?5is?5no@
0x18003A088: "Error %d in RpcBindingFromString" ??_C@_0CI@MOGIDJEB@Error?5?$CFd?5in?5RpcBindingFromString@
0x18000CEF4: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Attach(unsigned long * __ptr64) __ptr64" ?Attach@?$SP@KV?$SP_MEM@K@@@@QEAAXPEAK@Z
0x18000CEF4: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Attach(unsigned char * __ptr64) __ptr64" ?Attach@?$SP@EV?$SP_MEM@E@@@@QEAAXPEAE@Z
0x180039BF0: "StringCchCopy failed: %x" ??_C@_0BJ@PGGGMFJP@StringCchCopy?5failed?3?5?$CFx?$AA@
0x18004E8D0: "__cdecl _hmod__ext_ms_win_ntuser_window_l1_1_0_dll" __hmod__ext_ms_win_ntuser_window_l1_1_0_dll
0x180039680: "Winsta.dll" ??_C@_1BG@MFIBNPID@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180055090: RPCRT4_NULL_THUNK_DATA_DLA
0x18004ADA8: RPCRT4_NULL_THUNK_DATA_DLB
0x1800436D8: "GetSidFromProcessId: mismatching" ??_C@_0CN@CJFGHJDC@GetSidFromProcessId?3?5mismatching@
0x18004E900: "__cdecl _native_startup_lock" __native_startup_lock
0x180043870: "Error %d in RpcBindingSetAuthInf" ??_C@_0CE@GIEGBDN@Error?5?$CFd?5in?5RpcBindingSetAuthInf@
0x180043B58: "RpcUUID" ??_C@_1BA@JHMEHAHA@?$AAR?$AAp?$AAc?$AAU?$AAU?$AAI?$AAD?$AA?$AA@
0x1800512B0: "private: static struct _LIST_ENTRY CWaitEventItem::g_WaitEventNotificationListHead" ?g_WaitEventNotificationListHead@CWaitEventItem@@0U_LIST_ENTRY@@A
0x18000CCDC: DllMain
0x18004AA78: RPCRT4_NULL_THUNK_DATA_DLN
0x1800420A0: "WaitShutdown failed: 0x%x in %s" ??_C@_0CA@OBLJKBHA@WaitShutdown?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x1800402E8: "WinStationReset" ??_C@_0BA@OGMJNIGK@WinStationReset?$AA@
0x180027A80: ServerLicensingClose
0x180044990: "GetSessionInformationEx failed: " ??_C@_0CL@KMIFEOOE@GetSessionInformationEx?5failed?3?5@
0x1800413D0: "RpcIsChildSessionsEnabled failed" ??_C@_0CN@LJFPMHDC@RpcIsChildSessionsEnabled?5failed@
0x1800447E0: "RpcGetLastInputTime failed: 0x%x" ??_C@_0CB@PKOOMOIB@RpcGetLastInputTime?5failed?3?50x?$CFx@
0x180039F50: "StringCchLength failed: 0x%x in " ??_C@_0CD@PELBNJJB@StringCchLength?5failed?3?50x?$CFx?5in?5@
0x180039A90: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x180044A38: "RpcGetSessionType threw an excep" ??_C@_0CL@DDPKJMM@RpcGetSessionType?5threw?5an?5excep@
0x18002DA2C: "void * __ptr64 __cdecl _tsrpcOpenServer(unsigned short const * __ptr64)" ?_tsrpcOpenServer@@YAPEAXPEBG@Z
0x180041AC8: "RpcConnectTerminal failed: 0x%x " ??_C@_0CG@NEIAGADF@RpcConnectTerminal?5failed?3?50x?$CFx?5@
0x18000D064: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180013A0C: "__cdecl TlgDefineProvider_annotation__Tlgg_ProviderToUseProv" _TlgDefineProvider_annotation__Tlgg_ProviderToUseProv
0x180038F80: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180043AF8: "VIPAdapter" ??_C@_1BG@PODILHLB@?$AAV?$AAI?$AAP?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
0x180041F78: "CWaitShutdown::Callback" ??_C@_0BI@OJENGLH@CWaitShutdown?3?3Callback?$AA@
0x180043DE8: "CPublicBinding::CreateLocalSids" ??_C@_0CA@DPJHGBIO@CPublicBinding?3?3CreateLocalSids?$AA@
0x180038F90: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18002E964: SetRenderHintImpl
0x180038FC8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180038D78: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180008710: "public: long __cdecl CEnum::GetEnumResult(unsigned long,struct _SESSIONENUM * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetEnumResult@CEnum@@QEAAJKPEAPEAU_SESSIONENUM@@PEAK@Z
0x1800413A8: "WinStationIsChildSessionsEnabled" ??_C@_0CB@GPODCAFD@WinStationIsChildSessionsEnabled@
0x1800193A0: WinStationRedirectLogonBeginPainting
0x1800455D8: WPP_27a6d321da993e3c6835a669ce5f88bb_Traceguids
0x18004E8E8: "__cdecl _hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x18004C9E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180013670: "public: void * __ptr64 __cdecl CPublicBinding::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPublicBinding@@QEAAPEAXI@Z
0x18002D6A8: "private: long __cdecl CPublicBinding::OpenSessionContextHandle(void) __ptr64" ?OpenSessionContextHandle@CPublicBinding@@AEAAJXZ
0x180044AD0: "GetClientData failed: 0x%x in %s" ??_C@_0CB@BLAABOIC@GetClientData?5failed?3?50x?$CFx?5in?5?$CFs@
0x180038CB8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000BBA4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180040D30: "ProcessUtils.ConvertSysProcInfoT" ??_C@_0EC@NFCOILNL@ProcessUtils?4ConvertSysProcInfoT@
0x1800550E0: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180038CE8: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180038ED8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000CC5D: "__cdecl _tailMerge_iphlpapi_dll" __tailMerge_iphlpapi_dll
0x180041F30: "Enum->Open failed: 0x%x in %s" ??_C@_0BO@GMGEIGPP@Enum?9?$DOOpen?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x18004E1B0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180041178: "RpcGetCurrentSessionCapabilities" ??_C@_0DK@HKGDMHLA@RpcGetCurrentSessionCapabilities@
0x18000CFDC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180039BD0: "__cdecl _sz_WS2_32_dll" __sz_WS2_32_dll
0x180044870: "RpcGetConfigData threw an except" ??_C@_0CK@HKHPPJLH@RpcGetConfigData?5threw?5an?5except@
0x180028BF0: "__cdecl WinStationAnnoyancePopup" _WinStationAnnoyancePopup
0x18000CA63: "__cdecl _imp_load_GetSystemMetrics" __imp_load_GetSystemMetrics
0x180004C50: "public: long __cdecl CSmartSession::GetTerminalName(unsigned short * __ptr64) __ptr64" ?GetTerminalName@CSmartSession@@QEAAJPEAG@Z
0x18004AAA0: WS2_32_NULL_THUNK_DATA_DLN
0x180041038: "WinStationGetLoggedOnCount" ??_C@_0BL@BIGBBAIP@WinStationGetLoggedOnCount?$AA@
0x18004AEB0: WS2_32_NULL_THUNK_DATA_DLB
0x1800550B8: WS2_32_NULL_THUNK_DATA_DLA
0x180029E6C: "unsigned char __cdecl Legacy_WinStationGetProcessSid(void * __ptr64,unsigned long,struct _FILETIME,unsigned char * __ptr64,unsigned long * __ptr64)" ?Legacy_WinStationGetProcessSid@@YAEPEAXKU_FILETIME@@PEAEPEAK@Z
0x1800195E0: WinStationRedirectLogonMessage
0x180042990: "!!! WinStationGetLanAdapterNameW" ??_C@_0CM@CIOHCAJF@?$CB?$CB?$CB?5WinStationGetLanAdapterNameW@
0x180041058: "RpcVerify threw an exception: 0x" ??_C@_0CD@HMEMJMCG@RpcVerify?5threw?5an?5exception?3?50x@
0x180029A44: "unsigned char __cdecl Legacy_WinStationEnumerateW(void * __ptr64,struct _SESSIONIDW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Legacy_WinStationEnumerateW@@YAEPEAXPEAPEAU_SESSIONIDW@@PEAK@Z
0x18000A704: "public: long __cdecl CSmartSession::GetSessionInformationEx(unsigned long,void * __ptr64) __ptr64" ?GetSessionInformationEx@CSmartSession@@QEAAJKPEAX@Z
0x180009DB4: "public: static long __cdecl CWaitEventItem::InitializeWaitEventNotificationList(void)" ?InitializeWaitEventNotificationList@CWaitEventItem@@SAJXZ
0x180039870: "GetSessionInformation taks %d" ??_C@_0BO@PMNIFJLJ@GetSessionInformation?5taks?5?$CFd?$AA@
0x180001DF8: "unsigned long __cdecl ConvertHRESULT2WIN32(long)" ?ConvertHRESULT2WIN32@@YAKJ@Z
0x180039814: "ERR:" ??_C@_04ICFLDMFF@ERR?3?$AA@
0x1800398B0: "Global\TermSrvReadyEvent" ??_C@_1DC@PCGGBKHB@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAS?$AAr?$AAv?$AAR?$AAe?$AAa?$AAd?$AAy?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x180039020: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x180038C88: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x180017A94: "long __cdecl GetReconnectedFromId(unsigned long,unsigned long * __ptr64)" ?GetReconnectedFromId@@YAJKPEAK@Z
0x180038EE8: "__cdecl _imp_srand" __imp_srand
0x180041450: "RpcGetChildSessionId failed: 0x%" ??_C@_0CI@JNCBHNLJ@RpcGetChildSessionId?5failed?3?50x?$CF@
0x1800169C0: WinStationShutdownSystem
0x180001850: "protected: virtual long __cdecl CWaitEventItem::Callback(void) __ptr64" ?Callback@CWaitEventItem@@MEAAJXZ
0x1800455A0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800454F0: "new CWindowNotificationItem fail" ??_C@_0CP@NCFJCHMH@new?5CWindowNotificationItem?5fail@
0x180001684: "void __cdecl UnregisterTraceLoggingProvider(void)" ?UnregisterTraceLoggingProvider@@YAXXZ
0x18004CA44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800442B8: "Session::Logoff failed: 0x%x in " ??_C@_0CD@LJAKCFPG@Session?3?3Logoff?5failed?3?50x?$CFx?5in?5@
0x180038DD8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180038E30: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180045080: "CWaitItem::StartWait" ??_C@_0BF@LGKOOEFD@CWaitItem?3?3StartWait?$AA@
0x1800016F0: "protected: virtual long __cdecl CWaitItem::CompleteCancel(void) __ptr64" ?CompleteCancel@CWaitItem@@MEAAJXZ
0x180028650: ServerSetInternetConnectorStatus
0x18002BF1C: "public: static long __cdecl CRpcUtils::MIDL_str_dup(unsigned short * __ptr64 * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?MIDL_str_dup@CRpcUtils@@SAJPEAPEAG_KPEBG@Z
0x180043448: "bind.Open failed: 0x%x in %s" ??_C@_0BN@MGOOGIJH@bind?4Open?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x1800397F4: " " ??_C@_01EEMJAFIK@?6?$AA@
0x18002D2DC: "public: void * __ptr64 __cdecl CPublicBinding::GetLSMBinding(void) __ptr64" ?GetLSMBinding@CPublicBinding@@QEAAPEAXXZ
0x1800416C0: "RpcBroadcastSystemMessage(sess=%" ??_C@_0DE@KLGOKFPM@RpcBroadcastSystemMessage?$CIsess?$DN?$CF@
0x18002F3C0: "private: void __cdecl CLocalHostAddress::Cleanup(void) __ptr64" ?Cleanup@CLocalHostAddress@@AEAAXXZ
0x1800513A8: "public: static class CCriticalSection CWindowNotification::g_WindowNotificationCS" ?g_WindowNotificationCS@CWindowNotification@@2VCCriticalSection@@A
0x1800154B0: WinStationGetProcessSid
0x1800174F0: WinStationWaitSystemEvent
0x180047398: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180013D14: "public: unsigned long __cdecl CLoadBalancingMetrics::GetData(struct _WINSTATIONLOADINDICATORDATA * __ptr64) __ptr64" ?GetData@CLoadBalancingMetrics@@QEAAKPEAU_WINSTATIONLOADINDICATORDATA@@@Z
0x180028C20: "__cdecl WinStationBreakPoint" _WinStationBreakPoint
0x180003CB0: "public: void * __ptr64 __cdecl CPublicBinding::GetRCMBinding(void) __ptr64" ?GetRCMBinding@CPublicBinding@@QEAAPEAXXZ
0x18000C4B0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180041478: "RpcGetParentSessionId threw an e" ??_C@_0CP@GGAAJGGD@RpcGetParentSessionId?5threw?5an?5e@
0x180044CA8: "WinStationType failed: 0x%x in %" ??_C@_0CC@OEJMNPOL@WinStationType?5failed?3?50x?$CFx?5in?5?$CF@
0x180029010: "unsigned char __cdecl CloseContextHandle(void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?CloseContextHandle@@YAEPEAPEAXPEAK@Z
0x18000A380: "void * __ptr64 __cdecl CreateVirtualChannel(void * __ptr64,char const * __ptr64,unsigned long,int,char * __ptr64,unsigned short,unsigned long)" ?CreateVirtualChannel@@YAPEAXPEAXPEBDKHPEADGK@Z
0x1800414A8: "WinStationGetParentSessionId" ??_C@_0BN@MCINOABG@WinStationGetParentSessionId?$AA@
0x18001890C: "public: long __cdecl CWaitShutdown::WaitShutdown(unsigned long) __ptr64" ?WaitShutdown@CWaitShutdown@@QEAAJK@Z
0x1800410E8: "WinStationIsCurrentSessionRemote" ??_C@_0CF@MOAFFKLM@WinStationIsCurrentSessionRemote@
0x180043210: "!!! WinStationConnectEx deprecat" ??_C@_0CD@EOHGCPAN@?$CB?$CB?$CB?5WinStationConnectEx?5deprecat@
0x18002AFB4: "unsigned char __cdecl ValidUserBuffer(unsigned long,enum _WINSTATIONINFOCLASS)" ?ValidUserBuffer@@YAEKW4_WINSTATIONINFOCLASS@@@Z
0x18000B3B0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18000CC3F: "__cdecl _imp_load_WSACleanup" __imp_load_WSACleanup
0x180043EB8: "RpcStopListener threw an excepti" ??_C@_0CJ@DKKKEMAF@RpcStopListener?5threw?5an?5excepti@
0x18002D9A4: "public: long __cdecl CListener::Stop(void) __ptr64" ?Stop@CListener@@QEAAJXZ
0x180008200: "void __cdecl _DbgPrintMessage(int,char const * __ptr64,...)" ?_DbgPrintMessage@@YAXHPEBDZZ
0x1800436A8: "NtQueryInformationProcess failed" ??_C@_0CN@HIAFDCEO@NtQueryInformationProcess?5failed@
0x1800425A8: "_WinStationGetAllSessionsEx" ??_C@_0BM@DBFADKND@_WinStationGetAllSessionsEx?$AA@
0x180041DF0: "RpcConsumeCacheSession threw an " ??_C@_0DA@KLBODMAL@RpcConsumeCacheSession?5threw?5an?5@
0x180041CF0: "WinStationRedirectLogonMessage" ??_C@_0BP@LAOKPJIA@WinStationRedirectLogonMessage?$AA@
0x180040BB8: "GetSidFromProcessId: mimatching " ??_C@_0CM@EPDHFMBG@GetSidFromProcessId?3?5mimatching?5@
0x180005240: "void * __ptr64 __cdecl OpenLocalRCM(void * __ptr64)" ?OpenLocalRCM@@YAPEAXPEAX@Z
0x18004C8C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180028B30: WinStationSetInformationA
0x180017410: "public: virtual long __cdecl CWaitEventCollect::CompleteCancel(void) __ptr64" ?CompleteCancel@CWaitEventCollect@@UEAAJXZ
0x1800406B0: "WINSTATIONINFORMATION (or WINSTA" ??_C@_0EC@CKICNBIG@WINSTATIONINFORMATION?5?$CIor?5WINSTA@
0x180051378: "private: static class CCriticalSection CWaitEventItem::g_WaitEventNotificationCS" ?g_WaitEventNotificationCS@CWaitEventItem@@0VCCriticalSection@@A
0x180014C40: WinStationGetAllProcesses
0x180016320: WinStationSetInformationW
0x1800550F0: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x180038EF0: "__cdecl _imp_time" __imp_time
0x180028800: WinStationEnumerate_IndexedA
0x1800452A8: "_tsrpcRegisterForSessionNotifica" ??_C@_0CG@DNPHJOHD@_tsrpcRegisterForSessionNotifica@
0x180038CF8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180042D58: "!!! _NWLogonSetAdmin deprecated" ??_C@_0CA@JIDHOPD@?$CB?$CB?$CB?5_NWLogonSetAdmin?5deprecated?$AA@
0x180002D90: "public: class SmartPtr<class CWindowNotificationItem> & __ptr64 __cdecl SmartPtr<class CWindowNotificationItem>::operator=(class CWindowNotificationItem * __ptr64) __ptr64" ??4?$SmartPtr@VCWindowNotificationItem@@@@QEAAAEAV0@PEAVCWindowNotificationItem@@@Z
0x180038D48: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800169D0: WinStationSwitchToServicesSession
0x180040B40: "RpcShadowTarget threw an excepti" ??_C@_0CJ@FMOFEHKG@RpcShadowTarget?5threw?5an?5excepti@
0x180039050: "__cdecl _imp_RtlUnicodeToMultiByteN" __imp_RtlUnicodeToMultiByteN
0x18003A2C0: "CSmartSession::GetTerminalNameFr" ??_C@_0DF@ODNBFFPI@CSmartSession?3?3GetTerminalNameFr@
0x18004ADC8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA_DLB
0x180042830: "SLGetWindowsInformationDWORD fai" ??_C@_0DA@ECCBHIHH@SLGetWindowsInformationDWORD?5fai@
0x180039968: "Invoke RpcIsSessionDesktopLocked" ??_C@_0CB@HONEKOBM@Invoke?5RpcIsSessionDesktopLocked@
0x18004A9C4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180038DA8: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x18004A9A4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_IPHLPAPI_DLL" __DELAY_IMPORT_DESCRIPTOR_IPHLPAPI_DLL
0x180040770: "listener.IsListening failed: 0x%" ??_C@_0CI@FFCJLIPB@listener?4IsListening?5failed?3?50x?$CF@
0x180017450: "int __cdecl WinStationRegisterConsoleNotificationEx2(void * __ptr64,struct HWND__ * __ptr64,unsigned long,unsigned long)" ?WinStationRegisterConsoleNotificationEx2@@YAHPEAXPEAUHWND__@@KK@Z
0x180055028: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180040748: "Listener.Open failed: 0x%x in %s" ??_C@_0CB@BDHPCJCK@Listener?4Open?5failed?3?50x?$CFx?5in?5?$CFs@
0x1800186E4: "public: static long __cdecl CSecurityUtils::DecryptPINInCredInfo(struct _KERB_CERTIFICATE_UNLOCK_LOGON * __ptr64,unsigned long)" ?DecryptPINInCredInfo@CSecurityUtils@@SAJPEAU_KERB_CERTIFICATE_UNLOCK_LOGON@@K@Z
0x18000BE70: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180042B00: "!!! WinStationConnectA deprecate" ??_C@_0CC@ICEEPGEB@?$CB?$CB?$CB?5WinStationConnectA?5deprecate@
0x180038F40: "__cdecl _imp__initterm" __imp__initterm
0x18000AEA0: WinStationDisconnect
0x180055060: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x18002AD9C: "unsigned char __cdecl Legacy_WinStationTerminateProcess(void * __ptr64,unsigned long,unsigned long)" ?Legacy_WinStationTerminateProcess@@YAEPEAXKK@Z
0x180042F28: "!!! ServerQueryInetConnectorInfo" ??_C@_0DE@NDOPOFKG@?$CB?$CB?$CB?5ServerQueryInetConnectorInfo@
0x18004C9CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18003FD38: "RpcConnect() takes %d" ??_C@_0BG@HAJPAIIJ@RpcConnect?$CI?$CJ?5takes?5?$CFd?$AA@
0x180055128: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLA
0x1800185E0: "private: virtual long __cdecl CWaitShutdown::Callback(void) __ptr64" ?Callback@CWaitShutdown@@EEAAJXZ
0x180001710: WinStationUnRegisterNotificationEvent
0x180044BD8: "GetWinStationWd failed: 0x%x in " ??_C@_0CD@CLFAJAEG@GetWinStationWd?5failed?3?50x?$CFx?5in?5@
0x180013970: WinStationOpenServerExW
0x180038CC0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18004CA30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180015A70: WinStationIsChildSessionsEnabled
0x180016D70: WinStationVirtualOpen
0x180013850: WinStationOpenServerExA
0x180042140: "CSecurityUtils::DecryptCertInCre" ??_C@_0CG@EAKMJLKF@CSecurityUtils?3?3DecryptCertInCre@
0x18002C468: "public: virtual __cdecl CRegistry::~CRegistry(void) __ptr64" ??1CRegistry@@UEAA@XZ
0x18003FF60: "Session Statistics: Total [%ld]," ??_C@_0DI@BPMGHJDP@Session?5Statistics?3?5Total?5?$FL?$CFld?$FN?0@
0x180038D68: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180002A20: "public: long __cdecl NotificationItem::Release(void) __ptr64" ?Release@NotificationItem@@QEAAJXZ
0x1800437D0: "CUtils::CreateNetworkServiceSid " ??_C@_0DD@GNAIGBPL@CUtils?3?3CreateNetworkServiceSid?5@
0x1800090DC: "public: __cdecl CListener::~CListener(void) __ptr64" ??1CListener@@QEAA@XZ
0x180044CD0: "GetWinStationType failed: 0x%x i" ??_C@_0CF@NNLGJCNE@GetWinStationType?5failed?3?50x?$CFx?5i@
0x18003A3B8: "GetProtocolStatus failed: 0x%x" ??_C@_0BP@BIEPJNOB@GetProtocolStatus?5failed?3?50x?$CFx?$AA@
0x180003264: "long __cdecl GetCurrentSessionClientData(struct _WINSTATIONCLIENTW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetCurrentSessionClientData@@YAJPEAU_WINSTATIONCLIENTW@@KPEAK@Z
0x18000A4D4: "long __cdecl GetCurrentSessionConfigData(struct _WINSTATIONCONFIGW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetCurrentSessionConfigData@@YAJPEAU_WINSTATIONCONFIGW@@KPEAK@Z
0x18004C9B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800402B8: "_tsrpcDisconnectSession failed: " ??_C@_0CL@OLAEDHFE@_tsrpcDisconnectSession?5failed?3?5@
0x1800394F0: "RpcCreateVirtualChannel failed: " ??_C@_0CL@PMOCFHLF@RpcCreateVirtualChannel?5failed?3?5@
0x18001AB38: "unsigned char __cdecl ConvertUnicodeToAnsi(char * __ptr64 * __ptr64,unsigned short * __ptr64)" ?ConvertUnicodeToAnsi@@YAEPEAPEADPEAG@Z
0x180027D90: ServerLicensingGetPolicyInformationA
0x18003A3F8: "_GetSessionProtocolLastInputTime" ??_C@_0CB@LNMCJDKI@_GetSessionProtocolLastInputTime@
0x180043148: "!!! WinStationAutoReconnect depr" ??_C@_0CH@FNPJEPJJ@?$CB?$CB?$CB?5WinStationAutoReconnect?5depr@
0x1800396B0: "RtlGetSuiteMask" ??_C@_0BA@NMKLFHJH@RtlGetSuiteMask?$AA@
0x1800414C8: "RpcGetParentSessionId failed: 0x" ??_C@_0CJ@BPDMLJFG@RpcGetParentSessionId?5failed?3?50x@
0x180039E50: "Public_WinStationQueryInformatio" ??_C@_0CD@JELNBDNG@Public_WinStationQueryInformatio@
0x180042688: "CRpcUtils::MIDL_str_dup failed: " ??_C@_0CL@BOHJJGHN@CRpcUtils?3?3MIDL_str_dup?5failed?3?5@
0x1800187F8: "long __cdecl StringCbLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCbLengthW@@YAJPEBG_KPEA_K@Z
0x180044938: "_GetSessionProtocolLastInputTime" ??_C@_0DE@MHDMPFJG@_GetSessionProtocolLastInputTime@
0x18003A468: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180028770: WinStationConnectCallback
0x1800440E0: "RcpGetAllListeners threw an exce" ??_C@_0CM@FEGBDHLB@RcpGetAllListeners?5threw?5an?5exce@
0x18004E910: "__cdecl _onexitend" __onexitend
0x1800435D0: "CProcessUtils::GetSystemProcessI" ??_C@_0CL@OHONJPKJ@CProcessUtils?3?3GetSystemProcessI@
0x180038DC0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180038C78: "__cdecl _imp_WTSGetServiceSessionId" __imp_WTSGetServiceSessionId
0x180014B50: WinStationFreeGAPMemory
0x180017F90: WinStationBroadcastSystemMessage
0x18000C5E5: "__cdecl unlock" _unlock
0x1800435AC: "BVT:" ??_C@_04LLJEALKA@BVT?3?$AA@
0x1800149B0: WinStationEnumerateA
0x180041A78: "RpcConnectTerminal threw an exce" ??_C@_0CM@KGNLHODM@RpcConnectTerminal?5threw?5an?5exce@
0x180039088: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18004E940: IcaApi_IfHandle
0x180043BF0: "AcquireIpRetrySleepTime" ??_C@_1DA@OHANCDEK@?$AAA?$AAc?$AAq?$AAu?$AAi?$AAr?$AAe?$AAI?$AAp?$AAR?$AAe?$AAt?$AAr?$AAy?$AAS?$AAl?$AAe?$AAe?$AAp?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180044388: "_tsrpcDisconnectSession" ??_C@_0BI@GJFCPKGA@_tsrpcDisconnectSession?$AA@
0x180042240: "LocalAlloc on pszInitialCommand " ??_C@_0DD@KGCAEMKN@LocalAlloc?5on?5pszInitialCommand?5@
0x1800405F0: "CUtils::GetUserSessionId() faile" ??_C@_0CO@FLFHHGDO@CUtils?3?3GetUserSessionId?$CI?$CJ?5faile@
0x180038C80: KERNELBASE_NULL_THUNK_DATA
0x18002D620: "private: long __cdecl CPublicBinding::OpenSessionContextHandle(void * __ptr64) __ptr64" ?OpenSessionContextHandle@CPublicBinding@@AEAAJPEAX@Z
0x1800512A0: "struct _LIST_ENTRY gNotificationsListHead" ?gNotificationsListHead@@3U_LIST_ENTRY@@A
0x180043B10: "IPPool" ??_C@_1O@MFFNBFOO@?$AAI?$AAP?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
0x180016020: WinStationSendMessageW
0x180042498: "RpcGetAllListeners failed: 0x%x " ??_C@_0CG@FPBCBHNC@RpcGetAllListeners?5failed?3?50x?$CFx?5@
0x180045520: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180038DC8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000C93B: "__cdecl _imp_load_MsgWaitForMultipleObjects" __imp_load_MsgWaitForMultipleObjects
0x1800174A0: WinStationRegisterConsoleNotificationEx
0x180038F88: "__cdecl _imp__resetstkoflw" __imp__resetstkoflw
0x18002C704: "public: unsigned long __cdecl CRegistry::ReadRegString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?ReadRegString@CRegistry@@QEAAKPEBGPEAPEAGPEAK@Z
0x180045030: "CWaitItem::StartWaitPrologue" ??_C@_0BN@PJBLMFMC@CWaitItem?3?3StartWaitPrologue?$AA@
0x1800432A0: "RpcBindingFree failed 0x%x" ??_C@_0BL@DBONEAMJ@RpcBindingFree?5failed?50x?$CFx?$AA@
0x18003A138: "OpenLocalRCM: RpcBindingSetAuthI" ??_C@_0DB@DGBJDNMB@OpenLocalRCM?3?5RpcBindingSetAuthI@
0x18000CF4C: "void __cdecl MemoryFree(void * __ptr64)" ?MemoryFree@@YAXPEAX@Z
0x1800550C0: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18002AC30: "unsigned char __cdecl Legacy_WinStationShutdownSystem(void * __ptr64,unsigned long)" ?Legacy_WinStationShutdownSystem@@YAEPEAXK@Z
0x18004ADF0: CRYPT32_NULL_THUNK_DATA_DLB
0x18002F1AC: "public: void __cdecl SH<void * __ptr64,class SH_HANDLE>::Reset(void) __ptr64" ?Reset@?$SH@PEAXVSH_HANDLE@@@@QEAAXXZ
0x18004E968: "private: static long CWaitEventItem::g_NumWaitEventNotification" ?g_NumWaitEventNotification@CWaitEventItem@@0JA
0x18002BFB8: "public: static int __cdecl CRpcUtils::PrepareServerSPN(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?PrepareServerSPN@CRpcUtils@@SAHPEBGPEAPEAG@Z
0x180039650: PROPERTY_TYPE_CLIENT_ALLOWS_AUDIO_CAPTURE_CLSID
0x1800446E8: "Invoke RpcGetTimes" ??_C@_0BD@LFKJAJBB@Invoke?5RpcGetTimes?$AA@
0x180039010: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1800422D8: "RpcCreateSession threw an except" ??_C@_0CK@DLDOAJNC@RpcCreateSession?5threw?5an?5except@
0x180051240: "protected: static struct _RTL_CRITICAL_SECTION CPublicBinding::m_CritSec" ?m_CritSec@CPublicBinding@@1U_RTL_CRITICAL_SECTION@@A
0x180015380: WinStationGetParentSessionId
0x180005EF0: "long __cdecl _tsrpcSessionNameFromLogonId(void * __ptr64,unsigned long,unsigned short * __ptr64)" ?_tsrpcSessionNameFromLogonId@@YAJPEAXKPEAG@Z
0x18004AB10: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLN
0x180039C80: "OpenThreadToken failed: 0x%x in " ??_C@_0CD@EALJDKLC@OpenThreadToken?5failed?3?50x?$CFx?5in?5@
0x18002D3CC: "public: void * __ptr64 __cdecl CPublicBinding::GetLegacyBinding(void) __ptr64" ?GetLegacyBinding@CPublicBinding@@QEAAPEAXXZ
0x180038E90: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800390C8: "__cdecl _xi_a" __xi_a
0x1800148B0: WinStationEnableChildSessions
0x180038DF0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180042C08: "!!! WinStationQueryLicense depre" ??_C@_0CG@LFBENAJD@?$CB?$CB?$CB?5WinStationQueryLicense?5depre@
0x18003FD50: "RpcShowMessageBox threw an excep" ??_C@_0CL@OCBCEHBN@RpcShowMessageBox?5threw?5an?5excep@
0x180038E88: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180038C90: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180038CA8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180041B50: "RpcGetUserCredentials returned a" ??_C@_0IJ@IMPGDKNG@RpcGetUserCredentials?5returned?5a@
0x180044310: "_tsrpcDisconnectSession: Failed " ??_C@_0DA@EEONEPNL@_tsrpcDisconnectSession?3?5Failed?5@
0x180040D78: "WinStationSendMessageW" ??_C@_0BH@GCGGBMEA@WinStationSendMessageW?$AA@
0x180045098: "StartWaitPrologue() failed: 0x%x" ??_C@_0CH@ECKAADIL@StartWaitPrologue?$CI?$CJ?5failed?3?50x?$CFx@
0x180040184: "CPU" ??_C@_03PMGKFAJB@CPU?$AA@
0x180038F30: "__cdecl _imp__unlock" __imp__unlock
0x18004A924: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_synch_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_synch_l1_1_0_dll
0x18002E4F0: "public: virtual void * __ptr64 __cdecl CWaitItem::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWaitItem@@UEAAPEAXI@Z
0x1800412F0: "RpcEnableChildSessions threw an " ??_C@_0DA@MEOMHNCL@RpcEnableChildSessions?5threw?5an?5@
0x180045208: "CWaitEventItem::InitializeWaitEv" ??_C@_0DE@EKAJFKHL@CWaitEventItem?3?3InitializeWaitEv@
0x1800437A0: "new pNetworkServiceSid failed: 0" ??_C@_0CK@LHMGDNEJ@new?5pNetworkServiceSid?5failed?3?50@
0x1800427B8: "QueryMaxSessions" ??_C@_0BB@PBJBMPCC@QueryMaxSessions?$AA@
0x180044208: "_tsrpcResetSession" ??_C@_0BD@IILELHHG@_tsrpcResetSession?$AA@
0x180044560: "StringCchCopy on User Name faile" ??_C@_0CO@OLLPEOLI@StringCchCopy?5on?5User?5Name?5faile@
0x180038E98: "__cdecl _imp_QueueUserWorkItem" __imp_QueueUserWorkItem
0x18003A1A8: "new CPublicBinding" ??_C@_0BD@CMCHLLH@new?5CPublicBinding?$AA@
0x180018B70: WinStationGetRedirectAuthInfo
0x1800040A0: "long __cdecl GetWinStationInformation(void * __ptr64,unsigned long,struct _WINSTATIONINFORMATIONW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationInformation@@YAJPEAXKPEAU_WINSTATIONINFORMATIONW@@KPEAK@Z
0x18005148C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUnfogrnvwrzUsrmgzkrUikxxorvmgUoryUlyquivUznwGEUhgwzucOlyq@HintApiRpcClient" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUnfogrnvwrzUsrmgzkrUikxxorvmgUoryUlyquivUznwGEUhgwzucOlyq@HintApiRpcClient
0x180042500: "RpcGetAllSessions threw an excep" ??_C@_0CL@IFGAKINO@RpcGetAllSessions?5threw?5an?5excep@
0x180040F90: "RpcGetCurrentSessionConnectionPr" ??_C@_0EA@EOAOBCID@RpcGetCurrentSessionConnectionPr@
0x180027CD0: ServerLicensingGetPolicy
0x18000CFBC: RtlULongLongAdd
0x1800030A8: "public: static long __cdecl CUtils::CreateSystemSid(void * __ptr64 * __ptr64)" ?CreateSystemSid@CUtils@@SAJPEAPEAX@Z
0x180042760: "TerminalServices-RemoteConnectio" ??_C@_1FE@IEHPHJOH@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?9?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo@
0x180017BE0: "unsigned long __cdecl WinStationBSMWorkerThread(void * __ptr64)" ?WinStationBSMWorkerThread@@YAKPEAX@Z
0x180045418: "new CWindowNotification failed: " ??_C@_0CL@ONHNJNHB@new?5CWindowNotification?5failed?3?5@
0x18002F014: WPP_SF_Di
0x180028BC0: "__cdecl NWLogonSetAdmin" _NWLogonSetAdmin
0x180028680: WinStationActivateLicense
0x180043F50: "RpcGetTerminalName threw an exce" ??_C@_0CM@NBHDOOKK@RpcGetTerminalName?5threw?5an?5exce@
0x180040550: "RpcGetCurrentSessionProtocolLast" ??_C@_0EE@BPFHEOJP@RpcGetCurrentSessionProtocolLast@
0x18002EFC4: WPP_SF_Dd
0x18002FA14: WPP_SF_DD
0x1800286E0: WinStationCheckAccess
0x180039A00: "WinStationPreCreateGlassReplacem" ??_C@_0EK@EMBOOHAO@WinStationPreCreateGlassReplacem@
0x180043EE8: "RpcDisconnect threw an exception" ??_C@_0CH@MKECDLHE@RpcDisconnect?5threw?5an?5exception@
0x180017460: WinStationFreeConsoleNotification
0x180040F38: "RpcGetInitialApplication failed:" ??_C@_0CM@DIKEFKFG@RpcGetInitialApplication?5failed?3@
0x18002EF34: WPP_SF_DS
0x1800453E0: "CWindowNotification::GetInstance" ??_C@_0DF@BGPEHGEJ@CWindowNotification?3?3GetInstance@
0x18002F068: WPP_SF_Dq
0x180042420: "_tsrpcEnumerate failed: 0x%x in " ??_C@_0CD@BIHINHIJ@_tsrpcEnumerate?5failed?3?50x?$CFx?5in?5@
0x180028740: WinStationConnectA
0x1800435B4: "PERF:" ??_C@_05OCBKGJLA@PERF?3?$AA@
0x1800513D8: "unsigned long g_DbgTracePos" ?g_DbgTracePos@@3KA
0x180028620: ServerQueryInetConnectorInformationW
0x18000AA10: "__cdecl WinStationWaitForConnect" _WinStationWaitForConnect
0x18001ADAC: "long __cdecl QueryMaxSessions(struct _GUID * __ptr64,unsigned long * __ptr64)" ?QueryMaxSessions@@YAJPEAU_GUID@@PEAK@Z
0x180045308: "CWindowNotification::InitializeW" ??_C@_0DI@JIGNFGDF@CWindowNotification?3?3InitializeW@
0x18004E1A8: WPP_GLOBAL_Control
0x180040378: "RpcGetCurrentSessionClientData f" ??_C@_0DC@DIIMEMLI@RpcGetCurrentSessionClientData?5f@
0x1800397AC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18004C918: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18004C9F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x18002B460: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x18002EE8C: WPP_SF_D
0x18002FA64: WPP_SF_DDDDDDDDDDDDDDDDD
0x18004E928: "__cdecl pRawDllMain" _pRawDllMain
0x1800423D8: "RpcGetEnumResultEx threw an exce" ??_C@_0CK@JNMOLIMM@RpcGetEnumResultEx?5threw?5an?5exce@
0x180044F10: "ProcessIdToSessionId failed : 0x" ??_C@_0CD@HEBMJOFA@ProcessIdToSessionId?5failed?5?3?50x@
0x180019A20: WinStationSystemShutdownWait
0x180055030: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x180042D08: "!!! _WinStationNotifyLogon depre" ??_C@_0CG@ODGOPLDK@?$CB?$CB?$CB?5_WinStationNotifyLogon?5depre@
0x180038EA0: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x180041A18: "RpcGetEnumResult threw an except" ??_C@_0CK@FOFGPCLG@RpcGetEnumResult?5threw?5an?5except@
0x1800404D8: "RpcGetSessionProtocolLastInputTi" ??_C@_0DA@BHAABKAI@RpcGetSessionProtocolLastInputTi@
0x180038FA0: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x180038F28: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180042E08: "!!! WinStationNtsdDebug deprecat" ??_C@_0CD@KGFCBDAC@?$CB?$CB?$CB?5WinStationNtsdDebug?5deprecat@
0x180018440: "public: virtual void * __ptr64 __cdecl CWaitShutdown::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWaitShutdown@@UEAAPEAXI@Z
0x180017B70: "void __cdecl MsgWaitForMultipleObjectsLoop(void * __ptr64,unsigned long)" ?MsgWaitForMultipleObjectsLoop@@YAXPEAXK@Z
0x180043550: "<<<:" ??_C@_04OPCJNIPB@?$DM?$DM?$DM?3?$AA@
0x180041B18: "RpcGetUserCredentials threw an e" ??_C@_0CP@JJIENMOB@RpcGetUserCredentials?5threw?5an?5e@
0x18002B948: "public: void __cdecl CProcessUtils::FreeTSAllProcInfo(struct _TS_ALL_PROCESSES_INFO_NT6 * __ptr64,unsigned long) __ptr64" ?FreeTSAllProcInfo@CProcessUtils@@QEAAXPEAU_TS_ALL_PROCESSES_INFO_NT6@@K@Z
0x18002C8E0: "public: virtual long __cdecl CTSVIPPublicBinding::Open(unsigned short const * __ptr64) __ptr64" ?Open@CTSVIPPublicBinding@@UEAAJPEBG@Z
0x18000BBE4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180041238: "RpcIsTerminalRemote threw an exc" ??_C@_0CN@POLLFONA@RpcIsTerminalRemote?5threw?5an?5exc@
0x180039760: "Security=Impersonation Dynamic F" ??_C@_1EK@JJEDDIEE@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$DN?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AA?5?$AAF@
0x180039670: PROPERTY_TYPE_AUDIOENUM_DLL
0x180045378: "CWindowNotification::DeleteWindo" ??_C@_0CO@NPBKIPNE@CWindowNotification?3?3DeleteWindo@
0x1800455B0: "Advapi32.dll" ??_C@_0N@DOHINHCI@Advapi32?4dll?$AA@
0x180044FB0: "CWaitItem::StopWait(): myStatus=" ??_C@_0EC@CHBCMEOG@CWaitItem?3?3StopWait?$CI?$CJ?3?5myStatus?$DN@
0x180013A18: "public: __cdecl CLoadBalancingMetrics::CLoadBalancingMetrics(void) __ptr64" ??0CLoadBalancingMetrics@@QEAA@XZ
0x18004CA08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000C740: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x1800408A0: "RpcCreateVirtualChannel threw an" ??_C@_0DB@MBLCGKC@RpcCreateVirtualChannel?5threw?5an@
0x180028710: WinStationCheckLoopBack
0x180038E40: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18000ADA8: "long __cdecl _tsrpcDisconnectSession(void * __ptr64,unsigned long,unsigned char)" ?_tsrpcDisconnectSession@@YAJPEAXKE@Z
0x1800430B0: "!!! _WinStationUpdateSettings de" ??_C@_0CJ@BLIFBLLK@?$CB?$CB?$CB?5_WinStationUpdateSettings?5de@
0x180038EE0: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x18003FF28: " PtesAvail [%6ld], PagedUsed " ??_C@_0DI@GHAEINAA@?5?5?5PtesAvail?5?5?$FL?$CF6ld?$FN?0?5PagedUsed?5@
0x18000C110: "__cdecl _security_check_cookie" __security_check_cookie
0x180030220: "const CWaitItem::`vftable'" ??_7CWaitItem@@6B@
0x18002F1D4: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXXZ
0x1800390C0: "__cdecl _xc_z" __xc_z
0x180028950: WinStationNameFromLogonIdA
0x180001788: "public: long __cdecl CWaitItem::StartWaitCurrentSession(unsigned long) __ptr64" ?StartWaitCurrentSession@CWaitItem@@QEAAJK@Z
0x18002A6F4: "unsigned char __cdecl Legacy_WinStationReset(void * __ptr64,unsigned long,unsigned char)" ?Legacy_WinStationReset@@YAEPEAXKE@Z
0x18004C904: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180039BA0: "__cdecl _sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x180038DE0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002684: "int __cdecl _tsrpcRegisterForSessionNotifications(void * __ptr64,struct HWND__ * __ptr64,unsigned long,unsigned long)" ?_tsrpcRegisterForSessionNotifications@@YAHPEAXPEAUHWND__@@KK@Z
0x180009E3C: "public: virtual __cdecl CWaitItem::~CWaitItem(void) __ptr64" ??1CWaitItem@@UEAA@XZ
0x18002C5A0: "private: unsigned long __cdecl CRegistry::ReadReg(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long) __ptr64" ?ReadReg@CRegistry@@AEAAKPEBGPEAPEAEPEAKK@Z
0x180040D90: "Session::SendMessage failed: 0x%" ??_C@_0CI@JBGEPAFO@Session?3?3SendMessage?5failed?3?50x?$CF@
0x180055010: "__cdecl _imp_GetAdaptersAddresses" __imp_GetAdaptersAddresses
0x180028B90: "__cdecl NWLogonQueryAdmin" _NWLogonQueryAdmin
0x180038D40: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800415F8: "CWaitEventCollect::Callback" ??_C@_0BM@KBONFFDN@CWaitEventCollect?3?3Callback?$AA@
0x18002F5E8: "private: int __cdecl CLocalHostAddress::IsLocalAdapterAddress(struct addrinfoW const * __ptr64)const __ptr64" ?IsLocalAdapterAddress@CLocalHostAddress@@AEBAHPEBUaddrinfoW@@@Z
0x1800406F8: "WinStationNameFromLogonIdW faile" ??_C@_0CC@NKBFNAL@WinStationNameFromLogonIdW?5faile@
0x18004E8F8: "__cdecl _hmod__IPHLPAPI_DLL" __hmod__IPHLPAPI_DLL
0x180028B60: WinStationSetPoolCount
0x1800417E0: "WinStationBroadcastSystemMessage" ??_C@_0EH@ENEEBDOO@WinStationBroadcastSystemMessage@
0x18002C4E8: "private: void * __ptr64 __cdecl CRegistry::Allocate(unsigned long) __ptr64" ?Allocate@CRegistry@@AEAAPEAXK@Z
0x1800398E8: "RpcCloseSession() takes %d" ??_C@_0BL@GDDKMAGI@RpcCloseSession?$CI?$CJ?5takes?5?$CFd?$AA@
0x180044530: "StringCchLength on User Name fai" ??_C@_0DA@OHENMCII@StringCchLength?5on?5User?5Name?5fai@
0x1800192B0: WinStationRedirectErrorMessage
0x180055120: "__cdecl _imp_IsWindow" __imp_IsWindow
0x180039520: "CreateVirtualChannel" ??_C@_0BF@ODHEKHGF@CreateVirtualChannel?$AA@
0x180039C40: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x18003FC00: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000C929: "__cdecl _imp_load_GetWindowThreadProcessId" __imp_load_GetWindowThreadProcessId
0x180039890: "Invoke GetSessionInformation" ??_C@_0BN@CGMIFNOK@Invoke?5GetSessionInformation?$AA@
0x180038E80: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800421E0: "Bind( NULL ) failed: 0x%x in %s" ??_C@_0CA@EDELILJN@Bind?$CI?5NULL?5?$CJ?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x180041AA8: "_WinStationWaitForConnect" ??_C@_0BK@FODHBIBK@_WinStationWaitForConnect?$AA@
0x180039580: "RpcAsyncCancelCall() failed: sta" ??_C@_0CI@MPDLKOL@RpcAsyncCancelCall?$CI?$CJ?5failed?3?5sta@
0x18003A028: "pSessionId" ??_C@_0L@EAGIJPFH@pSessionId?$AA@
0x180038D18: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180029F94: "unsigned char __cdecl Legacy_WinStationGetTermSrvCountersValue(void * __ptr64,unsigned long,void * __ptr64)" ?Legacy_WinStationGetTermSrvCountersValue@@YAEPEAXK0@Z
0x180039558: "RpcIsTerminalRemote failed: 0x%x" ??_C@_0CH@LOPJPBEN@RpcIsTerminalRemote?5failed?3?50x?$CFx@
0x18000B138: "public: long __cdecl CSmartSession::CopySessionExInfo(unsigned long,struct _WINSTATIONINFORMATIONEX * __ptr64,unsigned long) __ptr64" ?CopySessionExInfo@CSmartSession@@QEAAJKPEAU_WINSTATIONINFORMATIONEX@@K@Z
0x180038C98: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180002710: "public: static long __cdecl CWindowNotification::GetInstanceOfWindowNotification(void * __ptr64,struct HWND__ * __ptr64,long,unsigned long,class CWindowNotification * __ptr64 * __ptr64)" ?GetInstanceOfWindowNotification@CWindowNotification@@SAJPEAXPEAUHWND__@@JKPEAPEAV1@@Z
0x18002B3B0: WinStationSetRenderHint
0x180038D08: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180039800: "WINSTA: " ??_C@_08PFHKHIOC@WINSTA?3?5?$AA@
0x1800438B8: "QueryTSVIPConfig failed: 0x%x in" ??_C@_0CE@GLMLKEFA@QueryTSVIPConfig?5failed?3?50x?$CFx?5in@
0x180001D30: WinStationGetConnectionProperty
0x18000D150: "__cdecl _chkstk" __chkstk
0x180028AD0: WinStationRenameA
0x180039AA0: "__cdecl _sz_api_ms_win_security_base_l1_1_0_dll" __sz_api_ms_win_security_base_l1_1_0_dll
0x180047388: WPP_cf4842c6999d3506b1aef6c5afef2aa2_Traceguids
0x180039820: "GetUserTokenForSession failed: 0" ??_C@_0CK@EJOLHKCC@GetUserTokenForSession?5failed?3?50@
0x1800550A8: "__cdecl _imp_FreeAddrInfoW" __imp_FreeAddrInfoW
0x180028B00: WinStationRenameW
0x180019280: WinStationIsHelpAssistantSession
0x180009940: "public: __cdecl CSmartPublicBinding::CSmartPublicBinding(void * __ptr64,int) __ptr64" ??0CSmartPublicBinding@@QEAA@PEAXH@Z
0x180027BA0: ServerLicensingFreePolicyInformation
0x180043570: "TSAPI>>>:" ??_C@_09MFJCDPO@TSAPI?$DO?$DO?$DO?3?$AA@
0x180009A40: "public: __cdecl CPublicBinding::CPublicBinding(unsigned short const * __ptr64,int,unsigned long * __ptr64) __ptr64" ??0CPublicBinding@@QEAA@PEBGHPEAK@Z
0x1800421B0: "WinStationPreCreateGlassReplacem" ??_C@_0CN@MLLLMLIO@WinStationPreCreateGlassReplacem@
0x18003A270: "Invalid parameter failed: 0x%x i" ??_C@_0CF@IPLHLNFD@Invalid?5parameter?5failed?3?50x?$CFx?5i@
0x18002E590: "void __cdecl FlushSystemNotifications(void * __ptr64)" ?FlushSystemNotifications@@YAXPEAX@Z
0x180028980: WinStationNtsdDebug
0x18000C8AA: "__cdecl _tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll
0x1800401A0: "Remaining Sessions: Raw: [%4ld" ??_C@_0EK@JJAKEDJK@Remaining?5Sessions?3?5?5?5Raw?3?5?$FL?$CF4ld@
0x180043898: "CTSVIPPublicBinding::Open" ??_C@_0BK@KLKNEOGP@CTSVIPPublicBinding?3?3Open?$AA@
0x1800292A8: "unsigned char __cdecl Legacy_LogonIdFromWinStationNameW(void * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?Legacy_LogonIdFromWinStationNameW@@YAEPEAXPEAGPEAK@Z
0x18005147C: "int g_bCaptureObjectStackTrace" ?g_bCaptureObjectStackTrace@@3HA
0x18002CE98: LoadTSVIPConfig
0x180040CC8: "WinStationGetAllProcesses" ??_C@_0BK@LHDGOOHB@WinStationGetAllProcesses?$AA@
0x180013700: WinStationCloseServer
0x1800282D0: WinStationQueryEnforcementCore
0x18000188C: "public: static long __cdecl CWindowNotification::RemoveWindowNotificationFromList(class CWindowNotification * __ptr64,int)" ?RemoveWindowNotificationFromList@CWindowNotification@@SAJPEAV1@H@Z
0x180038C58: "const CWaitShutdown::`vftable'" ??_7CWaitShutdown@@6B@
0x18000C7CB: "__cdecl _imp_load_I_RpcExceptionFilter" __imp_load_I_RpcExceptionFilter
0x180042530: "_WinStationGetAllSessions" ??_C@_0BK@NMPNMAIA@_WinStationGetAllSessions?$AA@
0x180038DB8: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x1800287D0: WinStationEnumerateLicenses
0x180041D98: "WinStationGetRestrictedLogonInfo" ??_C@_0CB@LPPKCGOP@WinStationGetRestrictedLogonInfo@
0x1800025C0: "public: enum CWaitItem::WaitItemCallState __cdecl StateTracker<enum CWaitItem::WaitItemCallState>::operator=(enum CWaitItem::WaitItemCallState) __ptr64" ??4?$StateTracker@W4WaitItemCallState@CWaitItem@@@@QEAA?AW4WaitItemCallState@CWaitItem@@W412@@Z
0x180043A70: "VirtualMode" ??_C@_1BI@PKGFCKJK@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180042468: "RpcGetAllListeners threw an exce" ??_C@_0CM@BMEBLEJH@RpcGetAllListeners?5threw?5an?5exce@
0x180043250: "5ca4a760-ebb1-11cf-8611-00a02454" ??_C@_1EK@HOBHONMH@?$AA5?$AAc?$AAa?$AA4?$AAa?$AA7?$AA6?$AA0?$AA?9?$AAe?$AAb?$AAb?$AA1?$AA?9?$AA1?$AA1?$AAc?$AAf?$AA?9?$AA8?$AA6?$AA1?$AA1?$AA?9?$AA0?$AA0?$AAa?$AA0?$AA2?$AA4?$AA5?$AA4@
0x18004E8B8: "__cdecl _hmod__api_ms_win_security_base_l1_1_0_dll" __hmod__api_ms_win_security_base_l1_1_0_dll
0x180043058: "!!! _WinStationNotifyDisconnectP" ??_C@_0CP@NJOJCAGG@?$CB?$CB?$CB?5_WinStationNotifyDisconnectP@
0x180027BF0: ServerLicensingGetAvailablePolicyIds
0x180042D78: "!!! _NWLogonQueryAdmin deprecate" ??_C@_0CC@HAMOHDCF@?$CB?$CB?$CB?5_NWLogonQueryAdmin?5deprecate@
0x180043D88: "OpenLocalUnifiedRpc: RpcBindingS" ??_C@_0DI@NBFMHHHG@OpenLocalUnifiedRpc?3?5RpcBindingS@
0x180044190: "_tsrpcResetSession - SessionId i" ??_C@_0EB@LKMNNABO@_tsrpcResetSession?5?9?5SessionId?5i@
0x180042A40: "!!! WinStationQueryInformationA " ??_C@_0CL@FNPKONHM@?$CB?$CB?$CB?5WinStationQueryInformationA?5@
0x180028C80: "__cdecl WinStationCheckForApplicationName" _WinStationCheckForApplicationName
0x180009C38: "public: __cdecl CWindowNotification::CWindowNotification(void * __ptr64,struct HWND__ * __ptr64,long,long * __ptr64) __ptr64" ??0CWindowNotification@@QEAA@PEAXPEAUHWND__@@JPEAJ@Z
0x18002E4F0: "public: virtual void * __ptr64 __cdecl CWaitItem::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWaitItem@@UEAAPEAXI@Z
0x180040658: "GetCurrentSessionWinStationType" ??_C@_0CA@IELJJPPC@GetCurrentSessionWinStationType?$AA@
0x18003FEF0: " Processors [%6ld], PageSize " ??_C@_0DI@LCILPOMJ@?5?5?5Processors?5?$FL?$CF6ld?$FN?0?5PageSize?5?5@
0x18003FF98: "*" ??_C@_01NBENCBCI@?$CK?$AA@
0x18000CC51: "__cdecl _imp_load_GetAdaptersAddresses" __imp_load_GetAdaptersAddresses
0x180038E00: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180018B20: WinStationFreeUserCredentials
0x1800390E0: "__cdecl _guard_fids_table" __guard_fids_table
0x1800302D8: "const CTSVIPPublicBinding::`vftable'" ??_7CTSVIPPublicBinding@@6B@
0x18000AF30: "long __cdecl GetWinStationInformationEx(void * __ptr64,unsigned long,struct _WINSTATIONINFORMATIONEX * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationInformationEx@@YAJPEAXKPEAU_WINSTATIONINFORMATIONEX@@KPEAK@Z
0x1800550D0: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x180038F98: msvcrt_NULL_THUNK_DATA
0x1800303D0: "__cdecl load_config_used" _load_config_used
0x180042050: "RpcSystemShutdownStarted failed:" ??_C@_0CM@ELACHNAH@RpcSystemShutdownStarted?5failed?3@
0x18000A8A0: WinStationNegotiateSession
0x180042DD8: "!!! _WinStationGetApplicationInf" ??_C@_0CN@OGLBDODP@?$CB?$CB?$CB?5_WinStationGetApplicationInf@
0x18000CA6F: "__cdecl _tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x180039018: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x18003A388: "SafeCopyString on domainname fai" ??_C@_0DA@MIBEMJCC@SafeCopyString?5on?5domainname?5fai@
0x18004A8C4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x1800411B8: "WinStationGetCurrentSessionCapab" ??_C@_0CI@LPJAEMOH@WinStationGetCurrentSessionCapab@
0x18004AAF8: ext-ms-win-ntuser-synch-l1-1-0_NULL_THUNK_DATA_DLN
0x18004AE30: ext-ms-win-ntuser-synch-l1-1-0_NULL_THUNK_DATA_DLB
0x18000148C: "void __cdecl MIDL_free_EXECENVDATAEX(struct _EXECENVDATAEX * __ptr64,unsigned long)" ?MIDL_free_EXECENVDATAEX@@YAXPEAU_EXECENVDATAEX@@K@Z
0x18002A238: "void * __ptr64 __cdecl Legacy_WinStationOpenServerW(void * __ptr64)" ?Legacy_WinStationOpenServerW@@YAPEAXPEAX@Z
0x180055110: ext-ms-win-ntuser-synch-l1-1-0_NULL_THUNK_DATA_DLA
0x18004A904: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll
0x1800453A8: "pWindowNotification not found fa" ??_C@_0DB@EICJOKJE@pWindowNotification?5not?5found?5fa@
0x180038CB0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180045578: "Failed StringCchPrintf" ??_C@_0BH@IMNPEOJC@Failed?5StringCchPrintf?$AA@
0x180038CA0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180055118: "__cdecl _imp_GetWindowThreadProcessId" __imp_GetWindowThreadProcessId
0x1800448B0: "RpcGetConfigData failed: 0x%x in" ??_C@_0CE@LPEPMNI@RpcGetConfigData?5failed?3?50x?$CFx?5in@
0x180040440: "RpcGetCurrentSessionInformation " ??_C@_0DJ@FKCJJMLN@RpcGetCurrentSessionInformation?5@
0x18000B434: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x18003F3D8: "ncalrpc" ??_C@_07KBJPLKPH@ncalrpc?$AA@
0x180019490: WinStationRedirectLogonError
0x1800407D0: "_tsrpcQuerySessionInfo failed: 0" ??_C@_0CK@KNPBKFO@_tsrpcQuerySessionInfo?5failed?3?50@
0x180039D18: "OpenProcessToken failed: 0x%x" ??_C@_0BO@IOEAOMAC@OpenProcessToken?5failed?3?50x?$CFx?$AA@
0x180042658: "_WinStationGetAllSessions failed" ??_C@_0CN@POOIOLFJ@_WinStationGetAllSessions?5failed@
0x18004C968: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180055038: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x18002B9E8: "public: long __cdecl CProcessUtils::GetSidFromProcessId(void * __ptr64,union _LARGE_INTEGER,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64) __ptr64" ?GetSidFromProcessId@CProcessUtils@@QEAAJPEAXT_LARGE_INTEGER@@PEAPEAXPEAKPEAJ@Z
0x180038E38: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180040868: "RpcGetCurrentSessionTerminalName" ??_C@_0DE@MANFHPJO@RpcGetCurrentSessionTerminalName@
0x180040900: "RpcGetSessionCounters failed: 0x" ??_C@_0CJ@LFFNJFCM@RpcGetSessionCounters?5failed?3?50x@
0x1800432E0: "WinStationOpenServerW: Error %d " ??_C@_0DH@PIKDFICA@WinStationOpenServerW?3?5Error?5?$CFd?5@
0x180044AB8: "_tsrpcQuerySessionInfo" ??_C@_0BH@FKNMNFPM@_tsrpcQuerySessionInfo?$AA@
0x18002A08C: "unsigned char __cdecl Legacy_WinStationNameFromLogonIdW(void * __ptr64,unsigned long,unsigned short * __ptr64)" ?Legacy_WinStationNameFromLogonIdW@@YAEPEAXKPEAG@Z
0x180043350: "RpcWinStationShutdownSystem() re" ??_C@_0DC@CCHGLNNA@RpcWinStationShutdownSystem?$CI?$CJ?5re@
0x180040AA0: "WinStationShadow" ??_C@_0BB@GFPJFJND@WinStationShadow?$AA@
0x180028D40: "__cdecl WinStationNotifyLogoff" _WinStationNotifyLogoff
0x180018440: "public: virtual void * __ptr64 __cdecl CWaitShutdown::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWaitShutdown@@UEAAPEAXI@Z
0x18004AAC0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA_DLN
0x1800428A0: "RpcGetSessionUnderArbitration th" ??_C@_0DH@OKCOJFHM@RpcGetSessionUnderArbitration?5th@
0x180055020: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x18001876C: "public: static long __cdecl CSecurityUtils::DecryptPasswordInCredInfo(struct _KERB_INTERACTIVE_UNLOCK_LOGON * __ptr64,unsigned long)" ?DecryptPasswordInCredInfo@CSecurityUtils@@SAJPEAU_KERB_INTERACTIVE_UNLOCK_LOGON@@K@Z
0x18000376C: "long __cdecl GetWinStationType(void * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationType@@YAJPEAXKPEAK@Z
0x180038F48: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180028920: WinStationInstallLicense
0x180041340: "RpcEnableChildSessions failed: 0" ??_C@_0CK@IPAAICM@RpcEnableChildSessions?5failed?3?50@
0x180029150: "void __cdecl ConvertFromX86(struct _TS_SYS_PROCESS_INFORMATION * __ptr64)" ?ConvertFromX86@@YAXPEAU_TS_SYS_PROCESS_INFORMATION@@@Z
0x18003FC30: "RpcCloseListener threw an except" ??_C@_0CK@JAAEMMFN@RpcCloseListener?5threw?5an?5except@
0x180044590: "StringCchLength on Domain Name f" ??_C@_0DC@EDPKNLLL@StringCchLength?5on?5Domain?5Name?5f@
0x180042808: "StringCchPrintf failed: 0x%x in " ??_C@_0CD@MOAEHAHI@StringCchPrintf?5failed?3?50x?$CFx?5in?5@
0x180055008: CRYPT32_NULL_THUNK_DATA_DLA
0x180015DE0: WinStationRevertFromServicesSession
0x180042930: "!!! WinStationEnumerate_IndexedA" ??_C@_0CM@HFJNBFOF@?$CB?$CB?$CB?5WinStationEnumerate_IndexedA@
0x180040C38: "_EnumerateProcessesOld failed: 0" ??_C@_0CE@BJELDFG@_EnumerateProcessesOld?5failed?3?50@
0x180039048: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x180043AC0: "MaxCacheIP" ??_C@_1BG@LMBGBPF@?$AAM?$AAa?$AAx?$AAC?$AAa?$AAc?$AAh?$AAe?$AAI?$AAP?$AA?$AA@
0x180044E88: "CreateWellKnownSid failed: 0x%x " ??_C@_0CG@LEFJEHHO@CreateWellKnownSid?5failed?3?50x?$CFx?5@
0x18000C6B5: "__cdecl _imp_load_GetTokenInformation" __imp_load_GetTokenInformation
0x180017CBC: "long __cdecl WinStationBroadcastSystemMessageWorker(void * __ptr64,int,unsigned long,unsigned long,unsigned long,unsigned long * __ptr64,unsigned long,unsigned __int64,__int64,long * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char)" ?WinStationBroadcastSystemMessageWorker@@YAJPEAXHKKKPEAKK_K_JPEAJKPEAEKE@Z
0x180038D58: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180039028: "__cdecl _imp_NtClose" __imp_NtClose
0x1800093C4: "int __cdecl WaitForLsmStart(void)" ?WaitForLsmStart@@YAHXZ
0x180040BE8: "NtQueryInformationProcess failed" ??_C@_0CH@FCBHFDGP@NtQueryInformationProcess?5failed@
0x1800085A0: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x1800418F0: "Request is rejected" ??_C@_0BE@MBPNKNLJ@Request?5is?5rejected?$AA@
0x180018260: WinStationCreateChildSessionTransport
0x1800279F8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180004EC0: "public: long __cdecl CSmartSession::Open(unsigned long,void * __ptr64) __ptr64" ?Open@CSmartSession@@QEAAJKPEAX@Z
0x180040DF8: "RpcPopSecurityDialog threw an ex" ??_C@_0CO@OKJJJADG@RpcPopSecurityDialog?5threw?5an?5ex@
0x180019C60: WinStationUserLoginAccessCheck
0x18002D510: "void * __ptr64 __cdecl OpenLocalUnifiedRpc(void * __ptr64)" ?OpenLocalUnifiedRpc@@YAPEAXPEAX@Z
0x180009DFC: "public: long __cdecl CCriticalSection::Initialize(void) __ptr64" ?Initialize@CCriticalSection@@QEAAJXZ
0x180041CD0: "WinStationRedirectLogonStatus" ??_C@_0BO@EKKECBKC@WinStationRedirectLogonStatus?$AA@
0x180038FC0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180039070: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x180038DF8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002930: "private: long __cdecl CWindowNotification::AddToWaitList(struct HWND__ * __ptr64,unsigned long) __ptr64" ?AddToWaitList@CWindowNotification@@AEAAJPEAUHWND__@@K@Z
0x180042860: "RpcGetSessionUnderArbitration - " ??_C@_0DK@GENBPIPN@RpcGetSessionUnderArbitration?5?9?5@
0x180039C10: "DLL_PROCESS_ATTACH" ??_C@_0BD@NPDDDGID@DLL_PROCESS_ATTACH?$AA@
0x180040B00: "WinStationShadowStop" ??_C@_0BF@FIHALLFA@WinStationShadowStop?$AA@
0x1800415D8: "LocalAlloc failed: 0x%x in %s" ??_C@_0BO@LMEAMOBL@LocalAlloc?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x1800053E0: "long __cdecl _tsrpcEnumerate(void * __ptr64,struct _SESSIONIDW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?_tsrpcEnumerate@@YAJPEAXPEAPEAU_SESSIONIDW@@PEAK@Z
0x18000CB48: "__cdecl _imp_load_RpcAsyncInitializeHandle" __imp_load_RpcAsyncInitializeHandle
0x1800447C0: "Invoke RpcGetLastInputTime" ??_C@_0BL@PMPPBIOF@Invoke?5RpcGetLastInputTime?$AA@
0x180038FD8: "__cdecl _imp_RtlGetSuiteMask" __imp_RtlGetSuiteMask
0x1800450C0: "RpcRegisterAsyncNotification thr" ??_C@_0DG@BAKMLLAB@RpcRegisterAsyncNotification?5thr@
0x180039078: "__cdecl _imp_RtlMultiByteToUnicodeN" __imp_RtlMultiByteToUnicodeN
0x180042EF0: "!!! ServerQueryInetConnectorInfo" ??_C@_0DE@MHANJMKB@?$CB?$CB?$CB?5ServerQueryInetConnectorInfo@
0x180039538: "InternalIsSessionRemoteable" ??_C@_0BM@COFOBEGE@InternalIsSessionRemoteable?$AA@
0x1800441D8: "_tsrpcResetSession - Failed to o" ??_C@_0DA@BCNLPKCI@_tsrpcResetSession?5?9?5Failed?5to?5o@
0x180018498: "private: long __cdecl CWaitShutdown::AreSessionsDrained(int * __ptr64) __ptr64" ?AreSessionsDrained@CWaitShutdown@@AEAAJPEAH@Z
0x180001B50: "public: static long __cdecl CWindowNotification::DeleteWindowNotification(void * __ptr64,struct HWND__ * __ptr64,int)" ?DeleteWindowNotification@CWindowNotification@@SAJPEAXPEAUHWND__@@H@Z
0x180042610: "WinStationGetAllSessionsEx" ??_C@_0BL@NENMJCKC@WinStationGetAllSessionsEx?$AA@
0x180040EE0: "RpcGetInitialApplication threw a" ??_C@_0DC@EMICLCEC@RpcGetInitialApplication?5threw?5a@
0x180044838: "GetClientData" ??_C@_0O@JINHIGBF@GetClientData?$AA@
0x180040F18: "WinStationGetInitialApplication" ??_C@_0CA@KMCGOEEO@WinStationGetInitialApplication?$AA@
0x180038FD0: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x180019820: WinStationReportUIResult
0x18000C3D4: free
0x1800171E0: "__cdecl WinStationSessionInitialized" _WinStationSessionInitialized
0x180040CA8: "NtTerminateProcess failed: 0x%x" ??_C@_0CA@MMDDLEKP@NtTerminateProcess?5failed?3?50x?$CFx?$AA@
0x18000C7E9: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x18002E640: "unsigned int __cdecl RdpWppGetCurrentThreadActivityIdPrefix(void)" ?RdpWppGetCurrentThreadActivityIdPrefix@@YAIXZ
0x180043564: "DUMP:" ??_C@_05KGMCGLE@DUMP?3?$AA@
0x180042E30: "!!! _WinStationReInitializeSecur" ??_C@_0CP@PEAOGCEE@?$CB?$CB?$CB?5_WinStationReInitializeSecur@
0x180055048: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180044DB8: "RPC CallBack called but call sta" ??_C@_0DI@ONJKLDHA@RPC?5CallBack?5called?5but?5call?5sta@
0x180043C20: "Software\Policies\Microsoft\Wind" ??_C@_1JI@IKNAHFPL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x180038FB8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000C3B0: "__cdecl purecall" _purecall
0x180041FB8: "CWaitShutdown::WaitShutdown" ??_C@_0BM@LPBICEIO@CWaitShutdown?3?3WaitShutdown?$AA@
0x1800473A0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180019710: WinStationRedirectLogonStatus
0x180041400: "RpcGetChildSessionId threw an ex" ??_C@_0CO@NNEFDBID@RpcGetChildSessionId?5threw?5an?5ex@
0x180043760: "RtlCopySid failed: 0x%x in %s" ??_C@_0BO@NOPPODPF@RtlCopySid?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x18004A8E4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x18000C74C: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180043F38: "RpcLogoff() takes %d" ??_C@_0BF@BEFGMIJP@RpcLogoff?$CI?$CJ?5takes?5?$CFd?$AA@
0x1800427F0: "%ws%ws%ws" ??_C@_1BE@MFOEGDMN@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180045480: "CWindowNotification::DeleteFromW" ??_C@_0CI@DKPPEPNE@CWindowNotification?3?3DeleteFromW@
0x18002C06C: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x18001A8B0: WinStationGetAllSessionsW
0x180043508: "Connected to console. Ignoring W" ??_C@_0DN@DGFHIIKA@Connected?5to?5console?4?5Ignoring?5W@
0x180009B88: "public: __cdecl CWaitItem::CWaitItem(void * __ptr64) __ptr64" ??0CWaitItem@@QEAA@PEAX@Z
0x180001460: MIDL_user_allocate
0x18000C5D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180038D80: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18002A4A4: "unsigned char __cdecl Legacy_WinStationQueryInformationW(void * __ptr64,unsigned long,enum _WINSTATIONINFOCLASS,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?Legacy_WinStationQueryInformationW@@YAEPEAXKW4_WINSTATIONINFOCLASS@@0KPEAK@Z
0x180042BB0: "!!! WinStationActivateLicense de" ??_C@_0CJ@IPCGAEPA@?$CB?$CB?$CB?5WinStationActivateLicense?5de@
0x180041668: "termsrv\newsvc\client\private.cp" ??_C@_0CC@HDLMPEIF@termsrv?2newsvc?2client?2private?4cp@
0x180044CF8: "CWaitItem::StartWait() failed wi" ??_C@_0CI@HMDFMKNO@CWaitItem?3?3StartWait?$CI?$CJ?5failed?5wi@
0x180028590: RemoteAssistancePrepareSystemRestore
0x18002C24C: CopyPdParamsFromWire
0x18002BC68: "public: long __cdecl CProcessUtils::GetSystemProcessInformation(struct _SYSTEM_PROCESS_INFORMATION * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64) __ptr64" ?GetSystemProcessInformation@CProcessUtils@@QEAAJPEAPEAU_SYSTEM_PROCESS_INFORMATION@@PEAKPEAJ@Z
0x1800444F8: "StringCchCopy on WinStation Name" ??_C@_0DE@BOLJPCGI@StringCchCopy?5on?5WinStation?5Name@
0x1800420F0: "UnprotectString failed: 0x%x in " ??_C@_0CD@PAFKLDFG@UnprotectString?5failed?3?50x?$CFx?5in?5@
0x18003A2F8: "SafeStringCopy failed: 0x%x in %" ??_C@_0CC@GFJICCNI@SafeStringCopy?5failed?3?50x?$CFx?5in?5?$CF@
0x18000A140: WinStationRegisterCurrentSessionNotificationEvent
0x180019040: WinStationGetUserProfile
0x180014AA0: WinStationEnumerateProcesses
0x180045150: "CWaitItem::StartWaitCurrentSessi" ??_C@_0CD@DIPKCOBN@CWaitItem?3?3StartWaitCurrentSessi@
0x18002C3B4: CopyWinStaConfigToWire
0x18002BE2C: "public: static long __cdecl CRpcUtils::BindSecureEx(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _RPC_SECURITY_QOS * __ptr64,void * __ptr64 * __ptr64)" ?BindSecureEx@CRpcUtils@@SAJPEBG0000PEAU_RPC_SECURITY_QOS@@PEAPEAX@Z
0x18003FC10: "alloca failed for %d bytes" ??_C@_0BL@MPGBONA@alloca?5failed?5for?5?$CFd?5bytes?$AA@
0x180040AB8: "RpcShadow failed: 0x%x in %s" ??_C@_0BN@JKGJDMAN@RpcShadow?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x180044340: "_tsrpcDisconnectSession - Sessio" ??_C@_0EG@OLNGJNAD@_tsrpcDisconnectSession?5?9?5Sessio@
0x1800440A0: "_tsrpcSessionNameFromLogonId: Fa" ??_C@_0DJ@HMLKHEJK@_tsrpcSessionNameFromLogonId?3?5Fa@
0x180044C80: "IsDesktopLocked failed: 0x%x in " ??_C@_0CD@CPLEAG@IsDesktopLocked?5failed?3?50x?$CFx?5in?5@
0x180009830: WinStationIsSessionRemoteable
0x18004C92C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000C88C: "__cdecl _imp_load_RpcSsDestroyClientContext" __imp_load_RpcSsDestroyClientContext
0x180040A38: "WinStationShadowStop2" ??_C@_0BG@IGEDHFDO@WinStationShadowStop2?$AA@
0x18000CC1B: "__cdecl _imp_load_GetAddrInfoW" __imp_load_GetAddrInfoW
0x180009130: "public: long __cdecl CListener::Open(void * __ptr64,unsigned short * __ptr64) __ptr64" ?Open@CListener@@QEAAJPEAXPEAG@Z
0x1800399B8: "Invoke RpcGetSessionInformationE" ??_C@_0CC@DBDBOGEN@Invoke?5RpcGetSessionInformationE@
0x180055088: "__cdecl _imp_RpcAsyncGetCallStatus" __imp_RpcAsyncGetCallStatus
0x18004AAE8: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLN
0x180016C20: WinStationVerify
0x18000CC2D: "__cdecl _imp_load_FreeAddrInfoW" __imp_load_FreeAddrInfoW
0x180055100: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLA
0x18004AE40: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLB
0x1800171E0: "__cdecl WinStationReadRegistry" _WinStationReadRegistry
0x18004AE58: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLB
0x180038EB0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180042118: "CSecurityUtils::DecryptPINInCred" ??_C@_0CF@EKEPOAJM@CSecurityUtils?3?3DecryptPINInCred@
0x180043808: "GetComputerName failed: 0x%x in " ??_C@_0CD@CKHKOJDM@GetComputerName?5failed?3?50x?$CFx?5in?5@
0x180040800: "RpcGetCurrentSessionTerminalName" ??_C@_0DK@NAEMGLHO@RpcGetCurrentSessionTerminalName@
0x18000A170: "public: virtual void * __ptr64 __cdecl CWaitEventItem::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWaitEventItem@@UEAAPEAXI@Z
0x1800028F4: "public: long __cdecl CWaitItem::Release(void) __ptr64" ?Release@CWaitItem@@QEAAJXZ
0x180038F50: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180039904: "WRN:" ??_C@_04INEHKCKD@WRN?3?$AA@
0x180040408: "RpcGetCurrentSessionConfigData f" ??_C@_0DC@JPCABDFP@RpcGetCurrentSessionConfigData?5f@
0x180028150: ServerLicensingSetPolicy
0x180039D88: "GetCurrentSessionClientData fail" ??_C@_0CP@LCLHIAB@GetCurrentSessionClientData?5fail@
0x1800397C8: "RpcGetUserToken threw an excepti" ??_C@_0CJ@LNLDNBMH@RpcGetUserToken?5threw?5an?5excepti@
0x180039080: ntdll_NULL_THUNK_DATA
0x180038F08: "__cdecl _imp_memcpy" __imp_memcpy
0x18003A1C0: "CRpcUtils::BindSecure failed: %d" ??_C@_0CB@JIFAFKLF@CRpcUtils?3?3BindSecure?5failed?3?5?$CFd@
0x1800287A0: WinStationConnectEx
0x180019CE8: "public: long __cdecl CEnum::GetEnumResultEx(unsigned long,struct _SESSIONENUM_EX * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetEnumResultEx@CEnum@@QEAAJKPEAPEAU_SESSIONENUM_EX@@PEAK@Z
0x180043D48: "OpenLocalUnifiedRpc: CRpcUtils::" ??_C@_0DM@LNHHDHFB@OpenLocalUnifiedRpc?3?5CRpcUtils?3?3@
0x180043938: "RpcGetSessionIP threw an excepti" ??_C@_0CJ@CPLMNOIG@RpcGetSessionIP?5threw?5an?5excepti@
0x18002EED0: WPP_SF_DDd
0x1800097D0: "int __cdecl TestServiceStarted(unsigned long)" ?TestServiceStarted@@YAHK@Z
0x180039B70: "__cdecl _sz_ext_ms_win_ntuser_message_l1_1_0_dll" __sz_ext_ms_win_ntuser_message_l1_1_0_dll
0x1800024F0: "protected: virtual long __cdecl CWaitItem::Callback(void) __ptr64" ?Callback@CWaitItem@@MEAAJXZ
0x180041E40: "RpcConsumeCacheSession failed: 0" ??_C@_0CK@JDOOEONE@RpcConsumeCacheSession?5failed?3?50@
0x18002F0C0: WPP_SF_DsD
0x18002FBA0: WPP_SF_DSD
0x180001C40: "public: static long __cdecl CUtils::IsCurrentSession(unsigned long,int * __ptr64)" ?IsCurrentSession@CUtils@@SAJKPEAH@Z
0x180041BE0: "RpcGetUserCredentials returned a" ??_C@_0GM@KCPKPDIB@RpcGetUserCredentials?5returned?5a@
0x180039EB0: "WinStationValidationInfo is not " ??_C@_0EP@BJDAMOGP@WinStationValidationInfo?5is?5not?5@
0x180001480: WinStationFreeEXECENVDATAEX
0x180051494: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxlnnlmUhlxpfgroUlyquivUznwGEUhgwzucOlyq@tssockutil" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxlnnlmUhlxpfgroUlyquivUznwGEUhgwzucOlyq@tssockutil
0x180039000: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180038D30: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180043B20: "AllowPerSessionInMultiNIC" ??_C@_1DE@CKGMHMMH@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAP?$AAe?$AAr?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAI?$AAn?$AAM?$AAu?$AAl?$AAt?$AAi?$AAN?$AAI?$AAC?$AA?$AA@
0x180039060: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180043118: "!!! WinStationConnectCallback de" ??_C@_0CJ@DJALCIOB@?$CB?$CB?$CB?5WinStationConnectCallback?5de@
0x18000CF78: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x180040E48: "RpcPopSecurityDialog failed: 0x%" ??_C@_0CI@BNCOGPGK@RpcPopSecurityDialog?5failed?3?50x?$CF@
0x180039D38: "OpenThreadToken failed: 0x%x" ??_C@_0BN@OAACFEDG@OpenThreadToken?5failed?3?50x?$CFx?$AA@
0x1800433D8: "WinStationQuerySessionVirtualIP" ??_C@_0CA@OPLGFDLI@WinStationQuerySessionVirtualIP?$AA@
0x180040AD8: "RpcShadowStop threw an exception" ??_C@_0CH@CILDBBAB@RpcShadowStop?5threw?5an?5exception@
0x180029234: "unsigned long __cdecl CreateGenericWireBuf(unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?CreateGenericWireBuf@@YAKKPEAPEAXPEAK@Z
0x180042630: "Parameter validation failed: 0x%" ??_C@_0CI@IMDNBGME@Parameter?5validation?5failed?3?50x?$CF@
0x18000212C: "public: long __cdecl CWaitItem::StartWait(long,unsigned long) __ptr64" ?StartWait@CWaitItem@@QEAAJJK@Z
0x180044220: "Listener.Initialize failed: 0x%x" ??_C@_0CH@MJLONMCD@Listener?4Initialize?5failed?3?50x?$CFx@
0x18004C954: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800429F0: "!!! WinStationRenameA deprecated" ??_C@_0CB@IAABIJBM@?$CB?$CB?$CB?5WinStationRenameA?5deprecated@
0x180016EE0: "__cdecl WinStationShadowTarget2" _WinStationShadowTarget2
0x180040B70: "_WinStationShadowTarget2" ??_C@_0BJ@JADMEMOL@_WinStationShadowTarget2?$AA@
0x180003FB0: "public: long __cdecl CSmartSession::GetState(long * __ptr64) __ptr64" ?GetState@CSmartSession@@QEAAJPEAJ@Z
0x1800443C8: "RpcGetSessionInformation threw a" ??_C@_0DC@DMCCEHPM@RpcGetSessionInformation?5threw?5a@
0x1800422B0: "RpcCreateSession failed: 0x%x in" ??_C@_0CE@GKJNDEIM@RpcCreateSession?5failed?3?50x?$CFx?5in@
0x1800415A8: "RpcGetAllUserSessions threw an e" ??_C@_0CP@PMFBLKFC@RpcGetAllUserSessions?5threw?5an?5e@
0x18000CB90: "__cdecl _imp_load_WSAStartup" __imp_load_WSAStartup
0x18003FD10: "RpcConnect threw an exception: 0" ??_C@_0CE@BMOOCABD@RpcConnect?5threw?5an?5exception?3?50@
0x18004E1B8: "__cdecl _security_cookie" __security_cookie
0x18002C4B0: "public: virtual void * __ptr64 __cdecl CRegistry::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegistry@@UEAAPEAXI@Z
0x180038E18: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180051268: "struct _LIST_ENTRY gSystemEventsListHead" ?gSystemEventsListHead@@3U_LIST_ENTRY@@A
0x180041F50: "GetEnumResult failed: 0x%x in %s" ??_C@_0CB@EGLGHCJA@GetEnumResult?5failed?3?50x?$CFx?5in?5?$CFs@
0x18000D150: "__cdecl alloca_probe" _alloca_probe
0x18003FD80: "CPrivilegeEnable::CPrivilegeEnab" ??_C@_0CD@LOPCODJF@CPrivilegeEnable?3?3CPrivilegeEnab@
0x180041080: "RpcQuerySessionData failed: 0x%x" ??_C@_0CB@FGGBDJJF@RpcQuerySessionData?5failed?3?50x?$CFx@
0x18004E950: "int g_bWstHandleLock" ?g_bWstHandleLock@@3HA
0x1800550C8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180044848: "RpcGetClientData failed: 0x%x in" ??_C@_0CE@KMFIKDDP@RpcGetClientData?5failed?3?50x?$CFx?5in@
0x180042C30: "!!! WinStationSetPoolCount depre" ??_C@_0CG@FNBMLFFB@?$CB?$CB?$CB?5WinStationSetPoolCount?5depre@
0x180038CE0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180043088: "!!! WinStationCheckAccess deprec" ??_C@_0CF@CDLILEKD@?$CB?$CB?$CB?5WinStationCheckAccess?5deprec@
0x18004E8D8: "__cdecl _hmod__ext_ms_win_ntuser_synch_l1_1_0_dll" __hmod__ext_ms_win_ntuser_synch_l1_1_0_dll
0x180028DA0: "__cdecl WinStationNotifyNewSession" _WinStationNotifyNewSession
0x18002C798: "public: __cdecl __TSVirtualIPConfig::__TSVirtualIPConfig(void) __ptr64" ??0__TSVirtualIPConfig@@QEAA@XZ
0x180038D20: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180019F6C: "long __cdecl _WinStationGetAllSessions(void * __ptr64,unsigned long * __ptr64,struct _EXECENV_ENUMINFOW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?_WinStationGetAllSessions@@YAJPEAXPEAKPEAPEAU_EXECENV_ENUMINFOW@@1@Z
0x18004C8F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180041898: "WinStationReconnectedFromId fail" ??_C@_0CP@MCNMMJHJ@WinStationReconnectedFromId?5fail@
0x18000C612: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x1800448A0: "GetConfigData" ??_C@_0O@NJOLBJIH@GetConfigData?$AA@
0x18000CFA0: RtlUIntAdd
0x180028C50: "__cdecl WinStationCallback" _WinStationCallback
0x18002E0C4: "long __cdecl GetWinStationAddress(void * __ptr64,unsigned long,struct WINSTATIONREMOTEADDRESS * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationAddress@@YAJPEAXKPEAUWINSTATIONREMOTEADDRESS@@KPEAK@Z
0x18004EA40: "char (*)[80] g_DbgTrace" ?g_DbgTrace@@3PAY0FA@DA
0x180040C88: "NtOpenProcess failed: 0x%x" ??_C@_0BL@EPDECPHF@NtOpenProcess?5failed?3?50x?$CFx?$AA@
0x180002670: WinStationRegisterConsoleNotification
0x180051330: "class CLocalHostAddress g_localAddr" ?g_localAddr@@3VCLocalHostAddress@@A
0x180044270: "Listener.Start failed: 0x%x in %" ??_C@_0CC@JLOHJEOK@Listener?4Start?5failed?3?50x?$CFx?5in?5?$CF@
0x180040F68: "WinStationGetConnectionProperty" ??_C@_0CA@HFDKIGNG@WinStationGetConnectionProperty?$AA@
0x18000C606: "__cdecl _imp_load_NdrClientCall3" __imp_load_NdrClientCall3
0x180013C38: "public: long __cdecl CSmartSession::Connect(unsigned long,unsigned short * __ptr64) __ptr64" ?Connect@CSmartSession@@QEAAJKPEAG@Z
0x18000AC38: "long __cdecl GetConfigData(void * __ptr64,unsigned long,struct _WINSTATIONCONFIGW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetConfigData@@YAJPEAXKPEAU_WINSTATIONCONFIGW@@KPEAK@Z
0x180015260: WinStationGetLoggedOnCount
0x180040958: "WinStationRcmShadow2" ??_C@_0BF@FMGJICFI@WinStationRcmShadow2?$AA@
0x18002C6C8: "public: unsigned long __cdecl CRegistry::ReadRegDWord(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?ReadRegDWord@CRegistry@@QEAAKPEBGPEAK@Z
0x1800156F0: WinStationGetTermSrvCountersValue
0x180044610: "RpcGetUserName threw an exceptio" ??_C@_0CI@OPPDPJON@RpcGetUserName?5threw?5an?5exceptio@
0x18004E990: "private: static class CrimsonHelper CrimsonHelper::s_instance" ?s_instance@CrimsonHelper@@0V1@A
0x18004E918: "__cdecl _onexitbegin" __onexitbegin
0x180040C10: "GetSidFromProcessId failed: 0x%x" ??_C@_0CB@IANLOIDA@GetSidFromProcessId?5failed?3?50x?$CFx@
0x180043FC0: "_tsrpcEnumerate: No sessions or " ??_C@_0EM@JJKCPN@_tsrpcEnumerate?3?5No?5sessions?5or?5@
0x180041218: "WinStationIsSessionRemoteable" ??_C@_0BO@BBIEPGCL@WinStationIsSessionRemoteable?$AA@
0x1800409E8: "RpcShadowAccessCheck failed: 0x%" ??_C@_0CI@HPFDBMBE@RpcShadowAccessCheck?5failed?3?50x?$CF@
0x1800395C8: "RpcGetAllUserSessions failed: 0x" ??_C@_0CJ@GNAICBED@RpcGetAllUserSessions?5failed?3?50x@
0x18003A458: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x1800445C8: "StringCchCopy on Domain Name fai" ??_C@_0DA@HILCCOLB@StringCchCopy?5on?5Domain?5Name?5fai@
0x180038FB0: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x180043E88: "RpcStartListener threw an except" ??_C@_0CK@NMBBDOBI@RpcStartListener?5threw?5an?5except@
0x180043830: "CRpcUtils::MIDL_str_dup" ??_C@_0BI@JNIELMJD@CRpcUtils?3?3MIDL_str_dup?$AA@
0x180038F78: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180040358: "GetCurrentSessionClientData" ??_C@_0BM@BOKIDPKI@GetCurrentSessionClientData?$AA@
0x18001AC28: "unsigned char __cdecl CopyPolicyInformationFromWire(struct LCPOLICYINFOGENERIC * __ptr64 * __ptr64,struct LCPOLICYINFOGENERIC * __ptr64)" ?CopyPolicyInformationFromWire@@YAEPEAPEAULCPOLICYINFOGENERIC@@PEAU1@@Z
0x18004E958: "void * __ptr64 __ptr64 g_ReadyEventHandle" ?g_ReadyEventHandle@@3PEAXEA
0x180038CC8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180038DD0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180041528: "ERROR_INVALID_PARAMETER failed: " ??_C@_0CL@HGEDCEI@ERROR_INVALID_PARAMETER?5failed?3?5@
0x1800425F0: "WinStationGetAllSessionsW" ??_C@_0BK@EBIIMJLO@WinStationGetAllSessionsW?$AA@
0x180039D58: "WinStationQueryCurrentSessionInf" ??_C@_0CJ@ELCMJDDG@WinStationQueryCurrentSessionInf@
0x18004AAD0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x1800297DC: "unsigned char __cdecl Legacy_WinStationEnumerateProcesses(void * __ptr64,void * __ptr64 * __ptr64)" ?Legacy_WinStationEnumerateProcesses@@YAEPEAXPEAPEAX@Z
0x180016E20: "__cdecl WinStationBeepOpen" _WinStationBeepOpen
0x18003FDD0: "CPrivilegeEnable::ImpersonationC" ??_C@_0CF@MCMHNNJA@CPrivilegeEnable?3?3ImpersonationC@
0x180028A70: WinStationQueryUpdateRequired
0x180038E08: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800427D0: "-MaxSessions" ??_C@_1BK@MLFDBBFA@?$AA?9?$AAM?$AAa?$AAx?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18000CB24: "__cdecl _imp_load_RpcStringBindingComposeW" __imp_load_RpcStringBindingComposeW
0x180016610: WinStationShadowAccessCheck
0x180041D10: "WinStationRedirectLogonError" ??_C@_0BN@PFNJPFOD@WinStationRedirectLogonError?$AA@
0x1800435C4: "UNK:" ??_C@_04OLIDNLAP@UNK?3?$AA@
0x1800451C8: "RpcRegisterCurrentSessionAsyncNo" ??_C@_0DO@IKBMJEII@RpcRegisterCurrentSessionAsyncNo@
0x18000C4E4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800286B0: WinStationAutoReconnect
0x18000C691: "__cdecl _imp_load_Ndr64AsyncClientCall" __imp_load_Ndr64AsyncClientCall
0x18002D75C: "public: long __cdecl CSmartSession::Logoff(void) __ptr64" ?Logoff@CSmartSession@@QEAAJXZ
0x180042188: "StringCbLength failed: 0x%x in %" ??_C@_0CC@CNBNGBFD@StringCbLength?5failed?3?50x?$CFx?5in?5?$CF@
0x18003A250: "CSmartSession::SafeCopyString" ??_C@_0BO@LOPPBND@CSmartSession?3?3SafeCopyString?$AA@
0x180044F70: "Loader lock held or DLL is getti" ??_C@_0DP@FHLGOPOF@Loader?5lock?5held?5or?5DLL?5is?5getti@
0x180039058: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18002C0F8: CopyInWireBuf
0x180008620: "public: __cdecl CEnum::~CEnum(void) __ptr64" ??1CEnum@@QEAA@XZ
0x1800454A8: "Finding item failed: 0x%x in %s" ??_C@_0CA@MALEEJCL@Finding?5item?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x180043AD8: "AdapterAddress" ??_C@_1BO@FCDDMCKN@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x180039CE8: "LOGONID_CURRENT specified for a " ??_C@_0CP@CHOFJDAL@LOGONID_CURRENT?5specified?5for?5a?5@
0x180040798: "WinStationType - Invalid Size fa" ??_C@_0DB@IIKIGGKM@WinStationType?5?9?5Invalid?5Size?5fa@
0x180003698: "long __cdecl _WinStationGetAllSessionsEx(void * __ptr64,unsigned long,struct _EXECENVDATAEX * __ptr64 * __ptr64,unsigned long * __ptr64)" ?_WinStationGetAllSessionsEx@@YAJPEAXKPEAPEAU_EXECENVDATAEX@@PEAK@Z
0x1800028C0: "private: static void __cdecl CWaitItem::staticNotificationCallback(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,enum _RPC_ASYNC_EVENT)" ?staticNotificationCallback@CWaitItem@@CAXPEAU_RPC_ASYNC_STATE@@PEAXW4_RPC_ASYNC_EVENT@@@Z
0x180043E08: "CUtils::CreateSystemSid failed: " ??_C@_0CL@IHFFJMMP@CUtils?3?3CreateSystemSid?5failed?3?5@
0x180009CF0: "int __cdecl _tsrpcInitialize(void)" ?_tsrpcInitialize@@YAHXZ
0x1800142BC: "long __cdecl GetSidFromProcessId(void * __ptr64,union _LARGE_INTEGER,void * __ptr64,unsigned long * __ptr64)" ?GetSidFromProcessId@@YAJPEAXT_LARGE_INTEGER@@0PEAK@Z
0x18002F404: "private: unsigned long __cdecl CLocalHostAddress::Initialize(void) __ptr64" ?Initialize@CLocalHostAddress@@AEAAKXZ
0x18000C87A: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x180001954: "public: long __cdecl CWaitItem::StopWait(void) __ptr64" ?StopWait@CWaitItem@@QEAAJXZ
0x18004C8A0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000D11A: wcscmp
0x1800168A0: WinStationShadowStop2
0x180044248: "Listener.Stop failed: 0x%x in %s" ??_C@_0CB@NIHLKELJ@Listener?4Stop?5failed?3?50x?$CFx?5in?5?$CFs@
0x180042BE0: "!!! WinStationRemoveLicense depr" ??_C@_0CH@KCDEJOHJ@?$CB?$CB?$CB?5WinStationRemoveLicense?5depr@
0x180045528: "NT AUTHORITY\SYSTEM" ??_C@_1CI@MJIGLNDO@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180040EA8: "RpcRevertFromServicesSession thr" ??_C@_0DG@HAAHKKBF@RpcRevertFromServicesSession?5thr@
0x180038F10: "__cdecl _imp_memmove" __imp_memmove
0x180016740: WinStationShadowStop
0x180042338: "RpcTerminateSession failed: 0x%x" ??_C@_0CH@LCKCCACM@RpcTerminateSession?5failed?3?50x?$CFx@
0x180044B80: "GetWinStationVirtualData failed:" ??_C@_0CM@PCMKAHAB@GetWinStationVirtualData?5failed?3@
0x180042360: "RpcTerminateSession threw an exc" ??_C@_0CN@JMJAKFAB@RpcTerminateSession?5threw?5an?5exc@
0x1800425C8: "RpcGetAllSessionsEx failed: 0x%x" ??_C@_0CH@PLDIAMHK@RpcGetAllSessionsEx?5failed?3?50x?$CFx@
0x18000C7DD: "__cdecl _imp_load_CryptUnprotectMemory" __imp_load_CryptUnprotectMemory
0x180040090: " Session Raw: Commit [%4ld], " ??_C@_0DP@HICKMOFK@?5?5?5Session?5Raw?3?5Commit?5?5?$FL?$CF4ld?$FN?0?5@
0x1800289B0: WinStationQueryAllowConcurrentConnections
0x180055040: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x180008780: "long __cdecl GetSessionProtocolLastInputTime(void * __ptr64,unsigned long,struct _PROTOCOLSTATUS * __ptr64,union _LARGE_INTEGER * __ptr64)" ?GetSessionProtocolLastInputTime@@YAJPEAXKPEAU_PROTOCOLSTATUS@@PEAT_LARGE_INTEGER@@@Z
0x180043910: "TSVIPBindSecure failed: 0x%x in " ??_C@_0CD@GCENGBFL@TSVIPBindSecure?5failed?3?50x?$CFx?5in?5@
0x180038F68: "__cdecl _imp_malloc" __imp_malloc
0x18002DE7C: "long __cdecl GetProtocolStatus(void * __ptr64,unsigned long,struct _PROTOCOLSTATUS * __ptr64)" ?GetProtocolStatus@@YAJPEAXKPEAU_PROTOCOLSTATUS@@@Z
0x180038F70: "__cdecl _imp__purecall" __imp__purecall
0x180044728: "RpcGetTimes() takes %d" ??_C@_0BH@FFCPPOBF@RpcGetTimes?$CI?$CJ?5takes?5?$CFd?$AA@
0x180041F90: "AreSessionsDrained failed: 0x%x " ??_C@_0CG@MFGFOCCD@AreSessionsDrained?5failed?3?50x?$CFx?5@
0x180038ED0: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000A170: "public: virtual void * __ptr64 __cdecl CWaitEventItem::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWaitEventItem@@UEAAPEAXI@Z
0x180043590: "TSRPC>>>:" ??_C@_09FPPGDGFA@TSRPC?$DO?$DO?$DO?3?$AA@
0x180042960: "!!! WinStationEnumerate_IndexedW" ??_C@_0CM@GBHPGMOC@?$CB?$CB?$CB?5WinStationEnumerate_IndexedW@
0x18002C1A0: CopyOutWireBuf
0x180002FCC: "public: static long __cdecl CPublicBinding::CreateLocalSids(void)" ?CreateLocalSids@CPublicBinding@@SAJXZ
0x180039F00: "WinStationNameFromLogonIdW" ??_C@_0BL@OEIKPDEA@WinStationNameFromLogonIdW?$AA@
0x180040E70: "RpcSwitchToServicesSession threw" ??_C@_0DE@FFHCBFLF@RpcSwitchToServicesSession?5threw@
0x180002AF0: "protected: long __cdecl CWaitItem::IssueWait(int) __ptr64" ?IssueWait@CWaitItem@@IEAAJH@Z
0x180043548: ">>>:" ??_C@_04DMGEJHHE@?$DO?$DO?$DO?3?$AA@
0x180044798: "RpcGetProtocolStatus failed: 0x%" ??_C@_0CC@CMHHOOCM@RpcGetProtocolStatus?5failed?3?50x?$CF@
0x180028DD0: "__cdecl WinStationOpenSessionDirectory" _WinStationOpenSessionDirectory
0x180039E78: "CUtils::IsCurrentSession failed:" ??_C@_0CM@FPKANEEN@CUtils?3?3IsCurrentSession?5failed?3@
0x180044C28: "GetWinStationPdParams failed: 0x" ??_C@_0CJ@PMHIFFIH@GetWinStationPdParams?5failed?3?50x@
0x180043318: "WinStationCloseServer: Error %d " ??_C@_0DH@FPPLIMHP@WinStationCloseServer?3?5Error?5?$CFd?5@
0x180039030: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180044C58: "GetWinStationAddress failed: 0x%" ??_C@_0CI@DIIMBIHL@GetWinStationAddress?5failed?3?50x?$CF@
0x180044130: "RcpGetAllListeners failed: 0x%x " ??_C@_0CG@OCOOGNKN@RcpGetAllListeners?5failed?3?50x?$CFx?5@
0x180044700: "RpcGetTimes threw an exception: " ??_C@_0CF@OKIEJOIP@RpcGetTimes?5threw?5an?5exception?3?5@
0x180039B00: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x18000CB12: "__cdecl _imp_load_RpcBindingFromStringBindingW" __imp_load_RpcBindingFromStringBindingW
0x1800432C0: "Using nonsecure connection!!!" ??_C@_0BO@EKOPGLAH@Using?5nonsecure?5connection?$CB?$CB?$CB?$AA@
0x180038FF8: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x1800178B8: "public: __cdecl BSM_DATA_PACKAGE::BSM_DATA_PACKAGE(void) __ptr64" ??0BSM_DATA_PACKAGE@@QEAA@XZ
0x180044E48: "CWaitItem::IsSystemProcess" ??_C@_0BL@FPIKFEFO@CWaitItem?3?3IsSystemProcess?$AA@
0x18000A7FC: "public: long __cdecl CSmartSession::Disconnect(void) __ptr64" ?Disconnect@CSmartSession@@QEAAJXZ
0x18000CB6C: "__cdecl _imp_load_RpcAsyncCompleteCall" __imp_load_RpcAsyncCompleteCall
0x180043400: "OGONID_CURRENT specified for a r" ??_C@_0EB@IKJPAMIB@OGONID_CURRENT?5specified?5for?5a?5r@
0x18000C180: "__cdecl _report_gsfailure" __report_gsfailure
0x18000A0C8: "public: long __cdecl CWaitEventItem::AddToWaitEventNotificationList(void) __ptr64" ?AddToWaitEventNotificationList@CWaitEventItem@@QEAAJXZ
0x180041C50: "Decrypting password or PIN faile" ??_C@_0CI@BAJJAOIK@Decrypting?5password?5or?5PIN?5faile@
0x180042F60: "!!! _WinStationUpdateUserConfig " ??_C@_0CL@FGJHCEKM@?$CB?$CB?$CB?5_WinStationUpdateUserConfig?5@
0x1800412A0: "WinStationConnectAndLockDesktop" ??_C@_0CA@LOJOIHJG@WinStationConnectAndLockDesktop?$AA@
0x18000CF78: "public: void __cdecl SP<unsigned short,class SP_MEM<unsigned short> >::Reset(void) __ptr64" ?Reset@?$SP@GV?$SP_MEM@G@@@@QEAAXXZ
0x180014750: WinStationConnectW
0x1800418C8: "GetReconnectedFromId failed: 0x%" ??_C@_0CI@HKNEIOIK@GetReconnectedFromId?5failed?3?50x?$CF@
0x180018340: WinStationSetAutologonPassword
0x1800285F0: ServerQueryInetConnectorInformationA
0x180041750: "RPC Exception %d in RpcWinStatio" ??_C@_0EP@IBBEOBHO@RPC?5Exception?5?$CFd?5in?5RpcWinStatio@
0x180041558: "Invalid SID failed: 0x%x in %s" ??_C@_0BP@HADDHPAN@Invalid?5SID?5failed?3?50x?$CFx?5in?5?$CFs?$AA@
0x1800091A0: "public: long __cdecl CListener::IsListening(int * __ptr64) __ptr64" ?IsListening@CListener@@QEAAJPEAH@Z
0x18002BDAC: "public: static long __cdecl CRpcUtils::Bind(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?Bind@CRpcUtils@@SAJPEBG0000PEAPEAX@Z
0x1800401F0: "GetLoadMetrics failed: init [%ld" ??_C@_0EI@JIBMBNMC@GetLoadMetrics?5failed?3?5init?5?$FL?$CFld@
0x180038E48: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180019C74: "public: static long __cdecl CEnum::FreeEnumResultEx(struct _SESSIONENUM_EX * __ptr64,unsigned long)" ?FreeEnumResultEx@CEnum@@SAJPEAU_SESSIONENUM_EX@@K@Z
0x18000C2F8: "__cdecl onexit" _onexit
0x180055070: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x180042E60: "!!! _WinStationNotifyNewSession " ??_C@_0CL@HHLOMILN@?$CB?$CB?$CB?5_WinStationNotifyNewSession?5@
0x180040110: " CPU Idle: Current [%4ld], " ??_C@_0DP@DLPJMACH@?5?5?5CPU?5Idle?3?5?5?5?5Current?5?$FL?$CF4ld?$FN?0?5@
0x180039CA8: "GetTokenInformation failed: 0x%x" ??_C@_0CH@CNCKPMMP@GetTokenInformation?5failed?3?50x?$CFx@
0x180014FB0: WinStationGetDeviceId
0x18004E908: "__cdecl _native_startup_state" __native_startup_state
0x1800452D0: "GetInstanceOfWindowNotification " ??_C@_0DD@OEFJMOAG@GetInstanceOfWindowNotification?5@
0x180039698: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180044DF0: "this->lHasCompletedSystemProcess" ??_C@_0FE@BKNBMEMD@this?9?$DOlHasCompletedSystemProcess@
0x180039C58: "StringCchCopy failed: 0x%x in %s" ??_C@_0CB@EFMMNFKJ@StringCchCopy?5failed?3?50x?$CFx?5in?5?$CFs@
0x1800423B0: "Incorrect data level is retured:" ??_C@_0CE@LOEHGHAO@Incorrect?5data?5level?5is?5retured?3@
0x180015B90: WinStationRcmShadow2
0x18002C4B0: "public: virtual void * __ptr64 __cdecl CRegistry::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegistry@@UEAAPEAXI@Z
0x180042B28: "!!! WinStationGenerateLicense de" ??_C@_0CJ@FDIMBFHA@?$CB?$CB?$CB?5WinStationGenerateLicense?5de@
0x180002DC4: "long __cdecl GetClientData(void * __ptr64,unsigned long,struct _WINSTATIONCLIENTW * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetClientData@@YAJPEAXKPEAU_WINSTATIONCLIENTW@@KPEAK@Z
0x180042C58: "!!! WinStationQueryUpdateRequire" ??_C@_0CN@LJIEOLHG@?$CB?$CB?$CB?5WinStationQueryUpdateRequire@
0x18003A320: "CSmartSession::GetUserNameFromSe" ??_C@_0DB@BLAOMAEB@CSmartSession?3?3GetUserNameFromSe@
0x180055108: "__cdecl _imp_MsgWaitForMultipleObjects" __imp_MsgWaitForMultipleObjects
0x180043B68: "PromptOnIPLeaseFail" ??_C@_1CI@JHBPBCFI@?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AAO?$AAn?$AAI?$AAP?$AAL?$AAe?$AAa?$AAs?$AAe?$AAF?$AAa?$AAi?$AAl?$AA?$AA@
0x18002E6CC: "long __cdecl SetRenderHintRpcBind(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?SetRenderHintRpcBind@@YAJPEAG0PEAPEAX@Z
0x180044A10: "RpcGetRemoteAddress failed: 0x%x" ??_C@_0CB@LBFKLDMJ@RpcGetRemoteAddress?5failed?3?50x?$CFx@
0x180017900: "public: void * __ptr64 __cdecl BSM_DATA_PACKAGE::`scalar deleting destructor'(unsigned int) __ptr64" ??_GBSM_DATA_PACKAGE@@QEAAPEAXI@Z
0x180042AD0: "!!! WinStationNameFromLogonIdA d" ??_C@_0CK@BINIEKKD@?$CB?$CB?$CB?5WinStationNameFromLogonIdA?5d@
0x180040250: "Session::Open failed: 0x%x in %s" ??_C@_0CB@LKHIFIPD@Session?3?3Open?5failed?3?50x?$CFx?5in?5?$CFs@
0x1800403E8: "GetCurrentSessionConfigData" ??_C@_0BM@FPJEKADK@GetCurrentSessionConfigData?$AA@
0x18002D91C: "public: long __cdecl CListener::Start(void) __ptr64" ?Start@CListener@@QEAAJXZ
0x1800442E0: "RpcWaitForSessionState( State_Do" ??_C@_0CM@INOEGIOO@RpcWaitForSessionState?$CI?5State_Do@
0x1800438E0: "FALSE == Config.EnableVip failed" ??_C@_0CN@EANKJMHF@FALSE?5?$DN?$DN?5Config?4EnableVip?5failed@
0x180041268: "RpcConnectAndLockDesktop threw a" ??_C@_0DC@CBJAHJGF@RpcConnectAndLockDesktop?5threw?5a@
0x180013A00: WinStationOpenServerW
0x180038EF8: "__cdecl _imp_rand" __imp_rand
0x180004FB0: "public: __cdecl CSmartPublicBinding::operator void * __ptr64(void) __ptr64" ??BCSmartPublicBinding@@QEAAPEAXXZ
0x180039990: "RpcGetSessionInformationEx takes" ??_C@_0CE@BMGDHPHJ@RpcGetSessionInformationEx?5takes@
0x180013730: WinStationOpenServerA
0x180039AD0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x1800402F8: "_tsrpcResetSession failed: 0x%x " ??_C@_0CG@IJDFGCMK@_tsrpcResetSession?5failed?3?50x?$CFx?5@
0x1800284B0: WinStationServerPing
0x1800434D8: "WinStationIsSessionRemoteable ca" ??_C@_0CL@KJNIMEHJ@WinStationIsSessionRemoteable?5ca@
0x180043F10: "RpcLogoff threw an exception: 0x" ??_C@_0CD@LCHJOEEO@RpcLogoff?5threw?5an?5exception?3?50x@
0x18002E358: "long __cdecl GetWinStationVirtualData(void * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWinStationVirtualData@@YAJPEAXKPEAEKPEAK@Z
0x180001320: WinStationNameFromLogonIdW
0x180038D98: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180044110: "_tsrpcSessionNameFromLogonId" ??_C@_0BN@JFPEMJAF@_tsrpcSessionNameFromLogonId?$AA@
0x180040A50: "RpcShadowStop2 failed: 0x%x in %" ??_C@_0CC@NGDFEEA@RpcShadowStop2?5failed?3?50x?$CFx?5in?5?$CF@
0x18000BB7C: "public: __cdecl CrimsonHelper::~CrimsonHelper(void) __ptr64" ??1CrimsonHelper@@QEAA@XZ
0x180055058: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x1800171EC: "public: __cdecl CWaitEventCollect::CWaitEventCollect(void * __ptr64,void * __ptr64) __ptr64" ??0CWaitEventCollect@@QEAA@PEAX0@Z
0x180043858: "Error %d in TermSrvBind" ??_C@_0BI@MFFMKDEL@Error?5?$CFd?5in?5TermSrvBind?$AA@
0x18004E8E0: "__cdecl _hmod__ext_ms_win_ntuser_message_l1_1_0_dll" __hmod__ext_ms_win_ntuser_message_l1_1_0_dll
0x180055138: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLA
0x180040150: "Available Memory" ??_C@_0BB@GEJMBKGK@Available?5Memory?$AA@
0x180040480: "GetCurrentSessionInformation" ??_C@_0BN@HLMNJGDJ@GetCurrentSessionInformation?$AA@
0x18000C89E: "__cdecl _imp_load_IsWindow" __imp_load_IsWindow
0x1800512C0: "public: static struct _LIST_ENTRY CWindowNotification::g_WindowNotificationListHead" ?g_WindowNotificationListHead@CWindowNotification@@2U_LIST_ENTRY@@A
0x180042720: "QueryMaxSessions: UuidToString F" ??_C@_0DG@IOFAGIAG@QueryMaxSessions?3?5UuidToString?5F@
0x180040178: "PagedPool" ??_C@_09KPCJIDKC@PagedPool?$AA@
0x18000CB9C: "__cdecl _tailMerge_ws2_32_dll" __tailMerge_ws2_32_dll
0x18000BB28: "public: __cdecl CrimsonHelper::CrimsonHelper(void) __ptr64" ??0CrimsonHelper@@QEAA@XZ
0x180018CB0: WinStationGetRestrictedLogonInfo
0x180007A80: "long __cdecl GetUserTokenForSession(unsigned long,void * __ptr64 * __ptr64)" ?GetUserTokenForSession@@YAJKPEAPEAX@Z
0x18003FC90: "RpcIsListening threw an exceptio" ??_C@_0CI@MGFMDIA@RpcIsListening?5threw?5an?5exceptio@
0x1800018F4: "public: long __cdecl CWindowNotification::StopWait(void) __ptr64" ?StopWait@CWindowNotification@@QEAAJXZ
0x1800424C0: "WinStationEnumerateExW" ??_C@_0BH@DPICPNIM@WinStationEnumerateExW?$AA@
0x18000CE94: StringCchLengthW
0x180029408: "unsigned char __cdecl Legacy_WinStationCloseServer(void * __ptr64)" ?Legacy_WinStationCloseServer@@YAEPEAX@Z
0x180038DE8: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x18004EA10: "struct _RTL_CRITICAL_SECTION g_WstHandleLock" ?g_WstHandleLock@@3U_RTL_CRITICAL_SECTION@@A
0x180042FF8: "!!! _WinStationFUSCanRemoteUserD" ??_C@_0DF@IGJHNIFN@?$CB?$CB?$CB?5_WinStationFUSCanRemoteUserD@
0x18004C97C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000CF78: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Reset(void) __ptr64" ?Reset@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXXZ
0x180044D70: "RPC CallBack called but call sta" ??_C@_0ED@HBAGKIPI@RPC?5CallBack?5called?5but?5call?5sta@
0x180018A00: WinStationConsumeCacheSession
0x180041D60: "RpcGetRestrictedLogonInfo threw " ??_C@_0DD@NDJFCIFE@RpcGetRestrictedLogonInfo?5threw?5@
0x1800446B0: "RpcIsSessionDesktopLocked threw " ??_C@_0DD@PDKPMCBD@RpcIsSessionDesktopLocked?5threw?5@
0x180041618: "CWaitItem::Callback failed: 0x%x" ??_C@_0CH@CHHNDIOE@CWaitItem?3?3Callback?5failed?3?50x?$CFx@
0x180038F58: "__cdecl _imp_free" __imp_free
0x18000C450: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180038E78: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180044808: "RpcGetClientData threw an except" ??_C@_0CK@BAPHGHMP@RpcGetClientData?5threw?5an?5except@
0x180055068: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x180039F20: "_tsrpcSessionNameFromLogonId fai" ??_C@_0DA@DAMDNKKH@_tsrpcSessionNameFromLogonId?5fai@
0x180038C70: "const CRegistry::`vftable'" ??_7CRegistry@@6B@
0x18000BAB0: WinStationQueryCurrentSessionInformation
0x180051278: "struct _RTL_CRITICAL_SECTION gWinstaCrit" ?gWinstaCrit@@3U_RTL_CRITICAL_SECTION@@A
0x180038DA0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1800172D0: "private: virtual long __cdecl CWaitEventCollect::Callback(void) __ptr64" ?Callback@CWaitEventCollect@@EEAAJXZ
0x180038E68: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180028E60: "__cdecl WinStationUpdateSettings" _WinStationUpdateSettings
0x18003F3E0: "LcRpc" ??_C@_05JDBAAOML@LcRpc?$AA@
0x180043490: "Family != VIPSession.SessionIP.I" ??_C@_0EH@CIJMIGCO@Family?5?$CB?$DN?5VIPSession?4SessionIP?4I@
0x18004C8DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180055098: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x180019900: WinStationSystemShutdownStarted
0x18000D10E: memset
0x18004CA6C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180041E20: "WinStationConsumeCacheSession" ??_C@_0BO@EDABMDIJ@WinStationConsumeCacheSession?$AA@
0x180040998: "RpcShadowAccessCheck threw an ex" ??_C@_0CO@LHMFABJH@RpcShadowAccessCheck?5threw?5an?5ex@
0x18002D810: "private: long __cdecl CSmartSession::SafeCopyString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?SafeCopyString@CSmartSession@@AEAAJPEBGPEAPEAG@Z
0x180039DB8: "GetCurrentSessionConfigData fail" ??_C@_0CP@KMIHCHOG@GetCurrentSessionConfigData?5fail@
0x180039718: "RpcOpenSession() takes %d" ??_C@_0BK@HABGGFEE@RpcOpenSession?$CI?$CJ?5takes?5?$CFd?$AA@

[JEB Decompiler by PNF Software]