Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rdpsign.exe Base=0x140000000 SHA-256=D58172FFC44BC94722C950984D056919739FDFF69EAB646A06F499CB137204F6
PDB: rdpsign.pdb GUID={F2E963DB-56F5-79E0-C37ECAB301872B4A} Age=1

716 located named symbols:
0x140012220: "rdpSignTemp" ??_C@_1BI@LGJGCHFH@?$AAr?$AAd?$AAp?$AAS?$AAi?$AAg?$AAn?$AAT?$AAe?$AAm?$AAp?$AA?$AA@
0x1400020B8: TsCryptIsValidRdpSignEndCertificate
0x14000FEE4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140011B38: "__cdecl _imp_IsTextUnicode" __imp_IsTextUnicode
0x140010370: "__cdecl FindPESection" _FindPESection
0x14000FA9C: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x140001094: "enum _XResult32 __cdecl RdpX_CreateObject(struct RdpXInterface * __ptr64,unsigned int,enum _XObjectId32,enum _XInterfaceId32,void * __ptr64 * __ptr64)" ?RdpX_CreateObject@@YA?AW4_XResult32@@PEAURdpXInterface@@IW4_XObjectId32@@W4_XInterfaceId32@@PEAPEAX@Z
0x140012E28: "GatewayHostname" ??_C@_1CA@BKIEPAKD@?$AAG?$AAa?$AAt?$AAe?$AAw?$AAa?$AAy?$AAH?$AAo?$AAs?$AAt?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x14000AD64: "public: virtual __cdecl CRdpSettingsStore::~CRdpSettingsStore(void) __ptr64" ??1CRdpSettingsStore@@UEAA@XZ
0x140011EC0: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x1400146DC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140002990: "enum _XResult32 __cdecl XObjectId_RdpClientUtils_CreateObject(struct RdpXInterface * __ptr64,unsigned int,enum _XInterfaceId32,void * __ptr64 * __ptr64)" ?XObjectId_RdpClientUtils_CreateObject@@YA?AW4_XResult32@@PEAURdpXInterface@@IW4_XInterfaceId32@@PEAPEAX@Z
0x140011310: "const CTsRdpCertSignature::`vftable'{for `INonDelegatingUnknown'}" ??_7CTsRdpCertSignature@@6BINonDelegatingUnknown@@@
0x140013504: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x140016650: "unsigned short * password" ?password@@3PAGA
0x1400031D0: "public: virtual int __cdecl CClientUtils::ReadRegistryInt(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64,enum UT_REGREAD_LOCATION) __ptr64" ?ReadRegistryInt@CClientUtils@@UEAAHPEBG0PEAHW4UT_REGREAD_LOCATION@@@Z
0x140008670: "__cdecl wsetargv" _wsetargv
0x140013958: "ITsRdpSignature::SetUnsignedBlob" ??_C@_0CI@FBOJHJHH@ITsRdpSignature?3?3SetUnsignedBlob@
0x140009F74: "public: static int __cdecl CUT::BinaryToString(unsigned __int64,unsigned char * __ptr64,unsigned short * __ptr64,unsigned int * __ptr64)" ?BinaryToString@CUT@@SAH_KPEAEPEAGPEAI@Z
0x140006620: "public: virtual long __cdecl CTsRdpCertSignature::GetCertificate(struct _CERT_CONTEXT const * __ptr64 * __ptr64) __ptr64" ?GetCertificate@CTsRdpCertSignature@@UEAAJPEAPEBU_CERT_CONTEXT@@@Z
0x1400098A0: "public: virtual long __cdecl CRdpSettingsFileStream::PrepareForRead(void) __ptr64" ?PrepareForRead@CRdpSettingsFileStream@@UEAAJXZ
0x140016070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140011E90: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140008300: "[thunk]:public: virtual int __cdecl CTsRdpCertSignature::IsValid`adjustor{40}' (void) __ptr64" ?IsValid@CTsRdpCertSignature@@WCI@EAAHXZ
0x14000FB60: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x14000AC4C: "public: __cdecl CRdpSettingsStore::CRdpSettingsStore(void) __ptr64" ??0CRdpSettingsStore@@QEAA@XZ
0x140011BE0: "__cdecl _imp_CertDuplicateCertificateChain" __imp_CertDuplicateCertificateChain
0x140011030: "const RdpInterfaceClientUtils::`vftable'" ??_7RdpInterfaceClientUtils@@6B@
0x140011D40: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140009A30: "[thunk]:protected: virtual void * __ptr64 __cdecl CRdpSettingsFileStream::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECRdpSettingsFileStream@@OBA@EAAPEAXI@Z
0x14000FA68: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x1400133D8: "LoadBalanceInfo" ??_C@_1CA@FDLAFBED@?$AAL?$AAo?$AAa?$AAd?$AAB?$AAa?$AAl?$AAa?$AAn?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1400122C8: "1.3.6.1.5.5.7.3.3" ??_C@_0BC@ECLGBJGA@1?43?46?41?45?45?47?43?43?$AA@
0x140010660: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140011BA8: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x140011E60: "__cdecl _imp__wcslwr" __imp__wcslwr
0x140011CA0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140013540: "CRdpSettingsStore::ApplyCertSign" ??_C@_0CN@MGOANONK@CRdpSettingsStore?3?3ApplyCertSign@
0x140008520: "public: virtual long __cdecl CTsRdpUserSignature::Sign(void) __ptr64" ?Sign@CTsRdpUserSignature@@UEAAJXZ
0x140013980: "ITsRdpSignature::Sign failed" ??_C@_0BN@HOFJMJNF@ITsRdpSignature?3?3Sign?5failed?$AA@
0x1400083D0: "public: virtual unsigned long __cdecl CTsRdpSignature::Release(void) __ptr64" ?Release@CTsRdpSignature@@UEAAKXZ
0x14000C15C: "protected: int __cdecl CRdpSettingsStore::ParseLine(unsigned short const * __ptr64,unsigned int * __ptr64,unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64,unsigned __int64) __ptr64" ?ParseLine@CRdpSettingsStore@@IEAAHPEBGPEAIPEAG_K23@Z
0x1400134EC: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x14000ADF0: "public: virtual long __cdecl CRdpSettingsStore::OpenStore(class ITsRdpSettingsStream * __ptr64,int) __ptr64" ?OpenStore@CRdpSettingsStore@@UEAAJPEAVITsRdpSettingsStream@@H@Z
0x1400129C8: WPP_0d45b9641f513b4684f44d7c2c4be636_Traceguids
0x140012590: "*ppThumbprint" ??_C@_0O@IPAJABCK@?$CKppThumbprint?$AA@
0x140012348: "pbBinary" ??_C@_08ILOEJCEL@pbBinary?$AA@
0x140003EE0: "public: virtual int __cdecl CClientUtils::WriteRegistryEntry(enum UT_REGREAD_LOCATION,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 const,int,long) __ptr64" ?WriteRegistryEntry@CClientUtils@@UEAAHW4UT_REGREAD_LOCATION@@PEBG1QEAEHJ@Z
0x140016630: "__cdecl commode" _commode
0x1400135C0: "GetInterface for ITSRdpCertSigna" ??_C@_0CM@MKPHBGOC@GetInterface?5for?5ITSRdpCertSigna@
0x140008760: "protected: virtual void * __ptr64 __cdecl CRdpSettingsFileStream::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRdpSettingsFileStream@@MEAAPEAXI@Z
0x140005E90: "public: static long __cdecl CClientUtilsWin32::UT_GetAppContainerRegistryLocation(struct HKEY__ * __ptr64 * __ptr64)" ?UT_GetAppContainerRegistryLocation@CClientUtilsWin32@@SAJPEAPEAUHKEY__@@@Z
0x140008520: "public: virtual long __cdecl CRdpSettingsMemoryStream::OpenForWrite(unsigned short const * __ptr64,int) __ptr64" ?OpenForWrite@CRdpSettingsMemoryStream@@UEAAJPEBGH@Z
0x1400129B8: "pCertArray" ??_C@_0L@MOLJGHKE@pCertArray?$AA@
0x140011B60: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x140012D88: "EnableCredSspSupport" ??_C@_1CK@GICJHDNC@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAC?$AAr?$AAe?$AAd?$AAS?$AAs?$AAp?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x140002770: "public: virtual unsigned int __cdecl CClientUtils::DecrementRefCount(void) __ptr64" ?DecrementRefCount@CClientUtils@@UEAAIXZ
0x140008798: "protected: virtual __cdecl CRdpSettingsFileStream::~CRdpSettingsFileStream(void) __ptr64" ??1CRdpSettingsFileStream@@MEAA@XZ
0x140008310: "public: virtual long __cdecl CTsRdpSignature::NonDelegatingQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?NonDelegatingQueryInterface@CTsRdpSignature@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14001701C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxorvmgUxorvmgoryhUhvggrmthoryUlyquivUznwGEUhgwzucOlyq@settingslibu" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxorvmgUxorvmgoryhUhvggrmthoryUlyquivUznwGEUhgwzucOlyq@settingslibu
0x14000AD2C: "public: virtual void * __ptr64 __cdecl CRdpSettingsStore::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRdpSettingsStore@@UEAAPEAXI@Z
0x140010250: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140011F30: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140013438: "KDCProxyName" ??_C@_1BK@GFAHIIBH@?$AAK?$AAD?$AAC?$AAP?$AAr?$AAo?$AAx?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140013B10: "Mandatory sensitive setting miss" ??_C@_0CO@JDJAOGKK@Mandatory?5sensitive?5setting?5miss@
0x14001663C: "__cdecl fmode" _fmode
0x1400122B0: "1.3.6.1.5.5.7.3.1" ??_C@_0BC@HAIAHLOC@1?43?46?41?45?45?47?43?41?$AA@
0x1400121C0: "SignScope" ??_C@_1BE@GJKPNCAF@?$AAS?$AAi?$AAg?$AAn?$AAS?$AAc?$AAo?$AAp?$AAe?$AA?$AA@
0x140011D98: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140012308: "Unable to get AppContainer regis" ??_C@_0CO@KLCHAIEK@Unable?5to?5get?5AppContainer?5regis@
0x140012508: "OpenStore failed!" ??_C@_0BC@LDKCNBNL@OpenStore?5failed?$CB?$AA@
0x140011BA0: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x140011C58: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x140013870: "Base64StringToBinary failed" ??_C@_0BM@MNIDCOFK@Base64StringToBinary?5failed?$AA@
0x140013840: "szSignature" ??_C@_0M@LENDBNMP@szSignature?$AA@
0x1400113B0: "const CRdpSettingsFileStream::`vftable'{for `CTSObject'}" ??_7CRdpSettingsFileStream@@6BCTSObject@@@
0x140012298: "System" ??_C@_06JIODDOFH@System?$AA@
0x140012D38: "Server Port" ??_C@_1BI@NEJHAJBN@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x140002B30: "public: virtual int __cdecl CClientUtils::ReadRegistryString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,int,enum UT_REGREAD_LOCATION,unsigned long * __ptr64,int) __ptr64" ?ReadRegistryString@CClientUtils@@UEAAHPEBG0PEAGHW4UT_REGREAD_LOCATION@@PEAKH@Z
0x1400102AE: "__cdecl XcptFilter" _XcptFilter
0x1400084D0: "public: virtual unsigned int __cdecl CTsRdpSignature::IncrementRefCount(void) __ptr64" ?IncrementRefCount@CTsRdpSignature@@UEAAIXZ
0x140011F38: "__cdecl _xc_a" __xc_a
0x14000D180: "protected: int __cdecl CRdpSettingsStore::DeleteRecords(void) __ptr64" ?DeleteRecords@CRdpSettingsStore@@IEAAHXZ
0x140013AE8: "szBlob" ??_C@_06FCCJACDK@szBlob?$AA@
0x140013688: "CRdpSettingsStore::VerifySignatu" ??_C@_0CK@PDLALGIL@CRdpSettingsStore?3?3VerifySignatu@
0x140012E48: "GatewayUsageMethod" ??_C@_1CG@HOIJBHAL@?$AAG?$AAa?$AAt?$AAe?$AAw?$AAa?$AAy?$AAU?$AAs?$AAa?$AAg?$AAe?$AAM?$AAe?$AAt?$AAh?$AAo?$AAd?$AA?$AA@
0x140012458: WPP_1ff14ccd5b25325e9a62caff13d5d78d_Traceguids
0x140013630: "CRdpSettingsStore::GetSignatureT" ??_C@_0CL@NGHDBGLO@CRdpSettingsStore?3?3GetSignatureT@
0x14000A094: "public: static int __cdecl CUT::StringToBinary(unsigned __int64,unsigned short * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?StringToBinary@CUT@@SAH_KPEAGPEAEPEAK@Z
0x1400129D8: "CRdpSettingsFileStream" ??_C@_0BH@BJGCBJME@CRdpSettingsFileStream?$AA@
0x140002730: "public: virtual long __cdecl CRdpSettingsStream::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRdpSettingsStream@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140006098: "long __cdecl TsCreateFileStream(unsigned short const * __ptr64,class ITsRdpSettingsStream * __ptr64 * __ptr64,int)" ?TsCreateFileStream@@YAJPEBGPEAPEAVITsRdpSettingsStream@@H@Z
0x14000A730: "public: virtual long __cdecl CRdpSettingsMemoryStream::OpenForRead(unsigned short const * __ptr64) __ptr64" ?OpenForRead@CRdpSettingsMemoryStream@@UEAAJPEBG@Z
0x140005870: "public: virtual long __cdecl CClientUtils::ReadPolicyDWORD(enum UT_REGREAD_LOCATION,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?ReadPolicyDWORD@CClientUtils@@UEAAJW4UT_REGREAD_LOCATION@@PEBG1PEAK@Z
0x140012BF0: WPP_f89767c35eff3110c8cbbf3014a619d5_Traceguids
0x140011220: "const CRdpSettingsFileStream::`vftable'{for `INonDelegatingUnknown'}" ??_7CRdpSettingsFileStream@@6BINonDelegatingUnknown@@@
0x140012808: "invalid signature version" ??_C@_0BK@HMBJEPKH@invalid?5signature?5version?$AA@
0x140011310: "const CTsRdpUserSignature::`vftable'{for `INonDelegatingUnknown'}" ??_7CTsRdpUserSignature@@6BINonDelegatingUnknown@@@
0x140012438: WPP_0a2ecef0dd023ba9b9eb5820e7d4b579_Traceguids
0x140011C10: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x140008C80: "protected: long __cdecl CRdpSettingsFileStream::DoOpenForWrite(unsigned short const * __ptr64,int,int) __ptr64" ?DoOpenForWrite@CRdpSettingsFileStream@@IEAAJPEBGHH@Z
0x140011DA8: "__cdecl _imp_wcstombs_s" __imp_wcstombs_s
0x1400101EC: "__cdecl callnewh" _callnewh
0x140011CD8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x140012BC8: "StringCchPrintf failed" ??_C@_0BH@NLAELKLB@StringCchPrintf?5failed?$AA@
0x140011618: "const CRdpSettingsStore::`vftable'" ??_7CRdpSettingsStore@@6B@
0x140010636: memcpy
0x140011C38: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140013700: "CRdpSettingsStore::VerifySenstit" ??_C@_0DD@LCOCNFJC@CRdpSettingsStore?3?3VerifySenstit@
0x140003050: "public: virtual int __cdecl CClientUtils::StealthReadRegistryInt(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64,enum UT_REGREAD_LOCATION) __ptr64" ?StealthReadRegistryInt@CClientUtils@@UEAAHPEBG0PEAHW4UT_REGREAD_LOCATION@@@Z
0x140011CB8: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x140004FC0: "public: virtual int __cdecl CClientUtils::EnumRegistry(unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64,int * __ptr64,enum UT_REGREAD_LOCATION) __ptr64" ?EnumRegistry@CClientUtils@@UEAAHPEBGIPEAGPEAHW4UT_REGREAD_LOCATION@@@Z
0x140011E18: "__cdecl _imp_memset" __imp_memset
0x140017010: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUgvinhieUiwkUdrmUhbhgvnUlyquivUznwGEUkxsOlyq@RdpWinSystem" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUgvinhieUiwkUdrmUhbhgvnUlyquivUznwGEUkxsOlyq@RdpWinSystem
0x14001052F: "__cdecl initterm" _initterm
0x140011B88: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x14000FA40: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x140013418: "RDGIsKDCProxy" ??_C@_1BM@EBIHBJCL@?$AAR?$AAD?$AAG?$AAI?$AAs?$AAK?$AAD?$AAC?$AAP?$AAr?$AAo?$AAx?$AAy?$AA?$AA@
0x140017050: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000EAE8: "protected: long __cdecl CRdpSettingsStore::GenerateSignScope(unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GenerateSignScope@CRdpSettingsStore@@IEAAJPEAPEAGPEAK@Z
0x140011D08: "__cdecl _imp_Sleep" __imp_Sleep
0x14000D780: "public: virtual long __cdecl CRdpSettingsStore::ApplyCurrentUserSignature(void) __ptr64" ?ApplyCurrentUserSignature@CRdpSettingsStore@@UEAAJXZ
0x140016870: "unsigned short * __ptr64 * fileList" ?fileList@@3PAPEAGA
0x140011F68: "__cdecl _xi_z" __xi_z
0x140011C90: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x14000C948: "protected: int __cdecl CRdpSettingsStore::InsertBinaryRecord(unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long) __ptr64" ?InsertBinaryRecord@CRdpSettingsStore@@IEAAHPEBGPEAEK@Z
0x1400124E0: "Failed to create file settings s" ??_C@_0CH@NHJIHFGJ@Failed?5to?5create?5file?5settings?5s@
0x140011DB0: "__cdecl _imp___iob_func" __imp___iob_func
0x140011D10: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140012950: "RdpSignCertChainRevocationCheck" ??_C@_1EA@PEKDJICC@?$AAR?$AAd?$AAp?$AAS?$AAi?$AAg?$AAn?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAa?$AAi?$AAn?$AAR?$AAe?$AAv?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x140012858: "zero-length signature field" ??_C@_0BM@HLAMOKOH@zero?9length?5signature?5field?$AA@
0x140002ABC: "protected: virtual __cdecl CClientUtils::~CClientUtils(void) __ptr64" ??1CClientUtils@@MEAA@XZ
0x14001053B: "__cdecl _C_specific_handler" __C_specific_handler
0x140016A00: "unsigned short * pHash" ?pHash@@3PAGA
0x140012214: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140008760: "protected: virtual void * __ptr64 __cdecl CRdpSettingsFileStream::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRdpSettingsFileStream@@MEAAPEAXI@Z
0x1400128D8: "insufficient number of signature" ??_C@_0DJ@OHOGHONC@insufficient?5number?5of?5signature@
0x140012990: "ConstructCertificateChain failed" ??_C@_0CC@CEHFDHBE@ConstructCertificateChain?5failed@
0x140013738: "CRdpSettingsStore::GenerateSecur" ??_C@_0DF@OOBFMAFB@CRdpSettingsStore?3?3GenerateSecur@
0x140017014: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxorvmgUxorvmgoryhUfgrohUlyquivUznwGEUhgwzucOlyq@utilsu" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUxorvmgUxorvmgoryhUfgrohUlyquivUznwGEUhgwzucOlyq@utilsu
0x140004A5C: "protected: static int __cdecl CClientUtils::WriteRegistryEntry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 const,int,long)" ?WriteRegistryEntry@CClientUtils@@KAHPEAUHKEY__@@PEBG1QEAEHJ@Z
0x1400101A1: malloc
0x140004630: "protected: static int __cdecl CClientUtils::RegistryEntryExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?RegistryEntryExists@CClientUtils@@KAHPEAUHKEY__@@PEBG1@Z
0x14000AD2C: "public: virtual void * __ptr64 __cdecl CRdpSettingsStore::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRdpSettingsStore@@UEAAPEAXI@Z
0x140012C70: "Close on the memory stream faile" ??_C@_0CD@PJOAJHAM@Close?5on?5the?5memory?5stream?5faile@
0x140012AF8: "Failed to load file contents!" ??_C@_0BO@MPBCLJDC@Failed?5to?5load?5file?5contents?$CB?$AA@
0x1400123C0: "Created" ??_C@_1BA@FFEAJEML@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x140011E40: "__cdecl _imp__wfopen_s" __imp__wfopen_s
0x140011B68: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1400105D0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000D1F0: "protected: int __cdecl CRdpSettingsStore::DeleteRecord(struct tagRDPF_RECORD * __ptr64) __ptr64" ?DeleteRecord@CRdpSettingsStore@@IEAAHPEAUtagRDPF_RECORD@@@Z
0x1400069B0: "public: virtual long __cdecl CTsRdpCertSignature::Sign(void) __ptr64" ?Sign@CTsRdpCertSignature@@UEAAJXZ
0x140012338: "szEncoded" ??_C@_09LALJEBDM@szEncoded?$AA@
0x1400137A0: "Signature verification failed" ??_C@_0BO@MCDFNDLN@Signature?5verification?5failed?$AA@
0x1400083B0: "public: virtual long __cdecl CRdpSettingsStore::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRdpSettingsStore@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140011B40: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x140008520: "public: virtual long __cdecl CTsRdpUserSignature::InitializeSignature(struct _RDP_SERIALIZED_SIG * __ptr64,unsigned long) __ptr64" ?InitializeSignature@CTsRdpUserSignature@@UEAAJPEAU_RDP_SERIALIZED_SIG@@K@Z
0x140011D58: "__cdecl _imp_GetModuleHandleExA" __imp_GetModuleHandleExA
0x140013528: "StringCchCopy failed" ??_C@_0BF@DHLBICEP@StringCchCopy?5failed?$AA@
0x1400084E8: "protected: virtual void * __ptr64 __cdecl CTsRdpSignature::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTsRdpSignature@@MEAAPEAXI@Z
0x140013820: "Signature is zero-length" ??_C@_0BJ@FDLHIBJM@Signature?5is?5zero?9length?$AA@
0x140016E00: "unsigned short * pfxFile" ?pfxFile@@3PAGA
0x14000C698: "protected: int __cdecl CRdpSettingsStore::SetNodeValue(struct tagRDPF_RECORD * __ptr64,unsigned int,unsigned short const * __ptr64) __ptr64" ?SetNodeValue@CRdpSettingsStore@@IEAAHPEAUtagRDPF_RECORD@@IPEBG@Z
0x14000B790: "public: virtual int __cdecl CRdpSettingsStore::ReadStringNoDefault(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned int) __ptr64" ?ReadStringNoDefault@CRdpSettingsStore@@UEAAHPEBGPEAGI@Z
0x1400131E8: "RemoteApplicationExpandCmdLine" ??_C@_1DO@FJIGIOLC@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAE?$AAx?$AAp?$AAa?$AAn?$AAd?$AAC?$AAm?$AAd?$AAL?$AAi?$AAn?$AAe?$AA?$AA@
0x140013770: "CRdpSettingsStore::SetUnsignedBl" ??_C@_0CK@DLCNPFBK@CRdpSettingsStore?3?3SetUnsignedBl@
0x140013598: "Failed to get Iunknown interface" ??_C@_0CB@DPGIEIBO@Failed?5to?5get?5Iunknown?5interface@
0x140011B50: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x140010363: "__cdecl amsg_exit" _amsg_exit
0x140011EB0: "__cdecl _imp__callnewh" __imp__callnewh
0x140012F28: "Require pre-authentication" ??_C@_1DG@BCPONKKP@?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AA?5?$AAp?$AAr?$AAe?$AA?9?$AAa?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140012FF8: "RemoteApplicationProgram" ??_C@_1DC@CBFEOEPF@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?$AA@
0x14000D350: "public: virtual unsigned long __cdecl CRdpSettingsStore::GetDataLength(unsigned short const * __ptr64) __ptr64" ?GetDataLength@CRdpSettingsStore@@UEAAKPEBG@Z
0x140011DF0: "__cdecl _imp_iswdigit" __imp_iswdigit
0x14000A648: "protected: virtual void * __ptr64 __cdecl CRdpSettingsMemoryStream::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRdpSettingsMemoryStream@@MEAAPEAXI@Z
0x1400023A0: "public: virtual long __cdecl CTSUnknown::NonDelegatingQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?NonDelegatingQueryInterface@CTSUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140011B98: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x140013AC0: "CalculateSecureSettingsLength fa" ??_C@_0CF@JHONABMO@CalculateSecureSettingsLength?5fa@
0x14000B9C0: "public: virtual int __cdecl CRdpSettingsStore::WriteString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?WriteString@CRdpSettingsStore@@UEAAHPEBG00H@Z
0x1400083B0: "public: virtual long __cdecl CTsRdpSignature::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CTsRdpSignature@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400082F0: "[thunk]:public: virtual void * __ptr64 __cdecl CTsRdpCertSignature::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECTsRdpCertSignature@@W7EAAPEAXI@Z
0x140012FC8: "Shell Working Directory" ??_C@_1DA@DPCHMMNO@?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?5?$AAW?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AA?5?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x1400044F0: WPP_SF_DSl
0x140011C48: "__cdecl _imp_GetACP" __imp_GetACP
0x14000EE2C: "protected: long __cdecl CRdpSettingsStore::VerifySenstitiveSettings(unsigned short * __ptr64) __ptr64" ?VerifySenstitiveSettings@CRdpSettingsStore@@IEAAJPEAG@Z
0x140004D10: "public: virtual int __cdecl CClientUtils::DeleteRegistryEntry(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?DeleteRegistryEntry@CClientUtils@@UEAAHPEBG0@Z
0x140011D78: "__cdecl _imp_StrCmpW" __imp_StrCmpW
0x140011DC0: "__cdecl _imp_exit" __imp_exit
0x1400114B0: "const CTsRdpSignature::`vftable'{for `ITsRdpSignature'}" ??_7CTsRdpSignature@@6BITsRdpSignature@@@
0x140008520: "public: virtual long __cdecl CTsRdpUserSignature::VerifySignature(unsigned long * __ptr64) __ptr64" ?VerifySignature@CTsRdpUserSignature@@UEAAJPEAK@Z
0x140011C80: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400121B8: "/?" ??_C@_15BAIPABEI@?$AA?1?$AA?$DP?$AA?$AA@
0x140005DC0: "[thunk]:protected: virtual void * __ptr64 __cdecl CClientUtils::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECClientUtils@@OBA@EAAPEAXI@Z
0x140012170: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x140012278: "EventActivityIdControl" ??_C@_0BH@HMPLKEEO@EventActivityIdControl?$AA@
0x140011E30: "__cdecl _imp_fputws" __imp_fputws
0x140011BD0: "__cdecl _imp_CryptVerifyDetachedMessageSignature" __imp_CryptVerifyDetachedMessageSignature
0x140002B20: "public: virtual unsigned int __cdecl CClientUtils::GetANSICodePage(void) __ptr64" ?GetANSICodePage@CClientUtils@@UEAAIXZ
0x1400075B0: "public: virtual long __cdecl CTsRdpCertSignature::VerifySignature(unsigned long * __ptr64) __ptr64" ?VerifySignature@CTsRdpCertSignature@@UEAAJPEAK@Z
0x140011E68: "__cdecl _imp_towlower" __imp_towlower
0x140011B80: "__cdecl _imp_EventActivityIdControl" __imp_EventActivityIdControl
0x1400129F0: "Close failed on stream!" ??_C@_0BI@GJNKEEN@Close?5failed?5on?5stream?$CB?$AA@
0x1400084B0: "public: virtual unsigned long __cdecl CTsRdpSignature::AddRef(void) __ptr64" ?AddRef@CTsRdpSignature@@UEAAKXZ
0x140009E58: "public: static int __cdecl CUT::UT_ReadRegistryInt(unsigned short const * __ptr64,unsigned short const * __ptr64,int,enum UT_REGREAD_LOCATION)" ?UT_ReadRegistryInt@CUT@@SAHPEBG0HW4UT_REGREAD_LOCATION@@@Z
0x1400124B8: "Failed to create settings store!" ??_C@_0CB@PHOIHCAA@Failed?5to?5create?5settings?5store?$CB@
0x14000A480: "public: virtual void __cdecl CTsRdpSignature::Reset(void) __ptr64" ?Reset@CTsRdpSignature@@UEAAXXZ
0x14000AB20: "[thunk]:protected: virtual void * __ptr64 __cdecl CRdpSettingsMemoryStream::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECRdpSettingsMemoryStream@@OBA@EAAPEAXI@Z
0x140013AF0: "CopySecureSettings failed" ??_C@_0BK@KAOIFFIF@CopySecureSettings?5failed?$AA@
0x14000D7E0: "public: virtual long __cdecl CRdpSettingsStore::GetSignatureType(enum RDP_STORE_SIGNATURE_TYPE * __ptr64) __ptr64" ?GetSignatureType@CRdpSettingsStore@@UEAAJPEAW4RDP_STORE_SIGNATURE_TYPE@@@Z
0x1400122A0: "2.5.29.37" ??_C@_09HLKLNMME@2?45?429?437?$AA@
0x1400063D0: "public: virtual void * __ptr64 __cdecl CTsRdpCertSignature::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTsRdpCertSignature@@UEAAPEAXI@Z
0x140005B30: "public: virtual int __cdecl CClientUtils::IsEqualDomainName(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long) __ptr64" ?IsEqualDomainName@CClientUtils@@UEAAHPEBGK0K@Z
0x140011D20: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140013B40: "Mandatory sensitive setting empt" ??_C@_0CC@PHCLIJEB@Mandatory?5sensitive?5setting?5empt@
0x140013108: "RemoteApplicationIcon" ??_C@_1CM@MPDFNCLC@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAc?$AAo?$AAn?$AA?$AA@
0x140013618: "InternalSign failed" ??_C@_0BE@EKAFMDAH@InternalSign?5failed?$AA@
0x1400138B8: "Failed signature type check on s" ??_C@_0CJ@EFEAMAME@Failed?5signature?5type?5check?5on?5s@
0x140017040: "__cdecl _native_startup_lock" __native_startup_lock
0x1400126F0: "RegQueryValueEx failed" ??_C@_0BH@NPMDAILC@RegQueryValueEx?5failed?$AA@
0x1400132E8: "RedirectCOMPorts" ??_C@_1CC@PHJMDINO@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAC?$AAO?$AAM?$AAP?$AAo?$AAr?$AAt?$AAs?$AA?$AA@
0x140003840: "public: virtual int __cdecl CClientUtils::WriteRegistryInt(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?WriteRegistryInt@CClientUtils@@UEAAHPEBG0H@Z
0x1400084E8: "public: virtual void * __ptr64 __cdecl CTsRdpUserSignature::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTsRdpUserSignature@@UEAAPEAXI@Z
0x1400112F0: "const CTsRdpCertSignature::`vftable'{for `CTSObject'}" ??_7CTsRdpCertSignature@@6BCTSObject@@@
0x140011E48: "__cdecl _imp_setlocale" __imp_setlocale
0x140010290: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140012C98: WPP_9735943f49983b308acedded131dab5d_Traceguids
0x140011E70: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x140011DE8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140012248: IID_ITsRdpSignature
0x140007280: "public: virtual long __cdecl CTsRdpCertSignature::InitializeSignature(struct _RDP_SERIALIZED_SIG * __ptr64,unsigned long) __ptr64" ?InitializeSignature@CTsRdpCertSignature@@UEAAJPEAU_RDP_SERIALIZED_SIG@@K@Z
0x140011F08: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140011270: "const CTsRdpCertSignature::`vftable'{for `RdpXInterface'}" ??_7CTsRdpCertSignature@@6BRdpXInterface@@@
0x140013850: "Failed to get RdpClientUtils" ??_C@_0BN@CIGKGHMH@Failed?5to?5get?5RdpClientUtils?$AA@
0x1400133B0: "DrivesToRedirect" ??_C@_1CC@IPKAEDAO@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAs?$AAT?$AAo?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AA?$AA@
0x140011C28: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x140002A84: "protected: virtual void * __ptr64 __cdecl CClientUtils::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClientUtils@@MEAAPEAXI@Z
0x140013488: ":i:" ??_C@_17DOLNCJHE@?$AA?3?$AAi?$AA?3?$AA?$AA@
0x140013228: "Prompt For Credentials" ??_C@_1CO@DEAKNDMG@?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA?5?$AAF?$AAo?$AAr?$AA?5?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AA?$AA@
0x140011D70: KERNEL32_NULL_THUNK_DATA
0x140008630: "[thunk]:protected: virtual void * __ptr64 __cdecl CTsRdpSignature::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECTsRdpSignature@@O7EAAPEAXI@Z
0x140012CA8: "Full Address" ??_C@_1BK@ECKKLBFO@?$AAF?$AAu?$AAl?$AAl?$AA?5?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x140011CE0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000FAB4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x14000AA00: "public: virtual long __cdecl CRdpSettingsMemoryStream::GetSettingsString(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetSettingsString@CRdpSettingsMemoryStream@@UEAAJPEAPEAG@Z
0x1400122E0: "1.3.6.1.4.1.311.54.1.1" ??_C@_0BH@LIKEOCBK@1?43?46?41?44?41?4311?454?41?41?$AA@
0x140013360: "RedirectClipboard" ??_C@_1CE@IJKPAKOL@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAC?$AAl?$AAi?$AAp?$AAb?$AAo?$AAa?$AAr?$AAd?$AA?$AA@
0x140001FD0: "int __cdecl TsCryptEnhancedKeyUsageContainsIds(struct _CTL_USAGE * __ptr64,char const * __ptr64 * __ptr64,unsigned long,enum EKUSearchOption)" ?TsCryptEnhancedKeyUsageContainsIds@@YAHPEAU_CTL_USAGE@@PEAPEBDKW4EKUSearchOption@@@Z
0x14000C530: "int __cdecl FreeNodeBuffer(struct tagRDPF_RECORD * __ptr64)" ?FreeNodeBuffer@@YAHPEAUtagRDPF_RECORD@@@Z
0x1400105AC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1400083D0: "public: virtual unsigned long __cdecl CRdpSettingsStore::Release(void) __ptr64" ?Release@CRdpSettingsStore@@UEAAKXZ
0x1400084E8: "protected: virtual void * __ptr64 __cdecl CTsRdpSignature::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTsRdpSignature@@MEAAPEAXI@Z
0x140011E10: "__cdecl _imp__commode" __imp__commode
0x14000CF98: "protected: struct tagRDPF_RECORD * __ptr64 __cdecl CRdpSettingsStore::FindRecord(unsigned short const * __ptr64) __ptr64" ?FindRecord@CRdpSettingsStore@@IEAAPEAUtagRDPF_RECORD@@PEBG@Z
0x1400146B4: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x140008F90: "public: virtual long __cdecl CRdpSettingsFileStream::Close(void) __ptr64" ?Close@CRdpSettingsFileStream@@UEAAJXZ
0x140011DD8: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400146F0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140008630: "[thunk]:public: virtual void * __ptr64 __cdecl CTsRdpUserSignature::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECTsRdpUserSignature@@W7EAAPEAXI@Z
0x140011C18: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x1400064A0: "public: virtual int __cdecl CTsRdpCertSignature::IsValid(void) __ptr64" ?IsValid@CTsRdpCertSignature@@UEAAHXZ
0x140008C70: "public: virtual long __cdecl CRdpSettingsFileStream::OpenForWrite(unsigned short const * __ptr64,int) __ptr64" ?OpenForWrite@CRdpSettingsFileStream@@UEAAJPEBGH@Z
0x140012448: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x140011D38: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140011BC8: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x140004130: "public: virtual long __cdecl CClientUtils::Base64StringToBinary(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Base64StringToBinary@CClientUtils@@UEAAJPEBGPEAPEAEPEAK@Z
0x14000A648: "protected: virtual void * __ptr64 __cdecl CRdpSettingsMemoryStream::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRdpSettingsMemoryStream@@MEAAPEAXI@Z
0x140012650: "System\CurrentControlSet\Service" ??_C@_1FI@KOMIBCCA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140011E00: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x140001D5C: "long __cdecl TsCryptDecodeObject(unsigned long,char const * __ptr64,unsigned char const * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?TsCryptDecodeObject@@YAJKPEBDPEBEKKPEAPEAXPEAK@Z
0x140011B48: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x140011740: "unsigned short const * __ptr64 * g_szTypeCodeMap" ?g_szTypeCodeMap@@3PAPEBGA
0x1400137E0: "RDP file signature has a wrong t" ??_C@_0CF@NEBKFMFC@RDP?5file?5signature?5has?5a?5wrong?5t@
0x140017024: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUovtzxbckozgUyzhvfgrohUrnkovnvmgzgrlmUlyquivUznwGEUhgwzucOlyq@baseutils" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUovtzxbckozgUyzhvfgrohUrnkovnvmgzgrlmUlyquivUznwGEUhgwzucOlyq@baseutils
0x140010420: "__cdecl ValidateImageBase" _ValidateImageBase
0x140013938: "Failed GenerateSignScope" ??_C@_0BJ@LPJDBLEI@Failed?5GenerateSignScope?$AA@
0x14000BA50: "public: virtual int __cdecl CRdpSettingsStore::ReadBinary(unsigned short const * __ptr64,unsigned char * __ptr64,unsigned int) __ptr64" ?ReadBinary@CRdpSettingsStore@@UEAAHPEBGPEAEI@Z
0x140013910: "CTsRdpSignature::Initialize fail" ??_C@_0CD@NFAKBGMO@CTsRdpSignature?3?3Initialize?5fail@
0x140012258: IID_IUnknown
0x1400101B9: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x140009A40: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140002350: "public: virtual long __cdecl CTSObject::Initialize(void) __ptr64" ?Initialize@CTSObject@@UEAAJXZ
0x140003BD0: "public: virtual int __cdecl CClientUtils::StealthReadRegistryString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,int,enum UT_REGREAD_LOCATION) __ptr64" ?StealthReadRegistryString@CClientUtils@@UEAAHPEBG0PEAGHW4UT_REGREAD_LOCATION@@@Z
0x140012360: "SOFTWARE\Microsoft\Terminal Serv" ??_C@_1FK@EAIIKPCN@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AA?5?$AAS?$AAe?$AAr?$AAv@
0x1400136E8: "Empty signscope field" ??_C@_0BG@JIJCFJEK@Empty?5signscope?5field?$AA@
0x1400033F0: "public: virtual int __cdecl CClientUtils::ReadRegistryBinary(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,int,unsigned long * __ptr64,enum UT_REGREAD_LOCATION) __ptr64" ?ReadRegistryBinary@CClientUtils@@UEAAHPEBG0PEAGHPEAKW4UT_REGREAD_LOCATION@@@Z
0x1400019A8: "long __cdecl createTemporaryFile(unsigned short * __ptr64,int)" ?createTemporaryFile@@YAJPEAGH@Z
0x1400123D0: "Opened" ??_C@_1O@DPBMHML@?$AAO?$AAp?$AAe?$AAn?$AAe?$AAd?$AA?$AA@
0x140011128: "const CClientUtils::`vftable'" ??_7CClientUtils@@6B@
0x140013510: "StringCchCatCRLF failed" ??_C@_0BI@OMFGCKNH@StringCchCatCRLF?5failed?$AA@
0x140011CF0: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x140011258: "const CTsRdpCertSignature::`vftable'" ??_7CTsRdpCertSignature@@6B@
0x1400123F0: "normaliz.dll" ??_C@_1BK@GHCIIOJL@?$AAn?$AAo?$AAr?$AAm?$AAa?$AAl?$AAi?$AAz?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140012410: "IdnToNameprepUnicode" ??_C@_0BF@NPFHBJDK@IdnToNameprepUnicode?$AA@
0x140011D68: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140011270: "const CTsRdpUserSignature::`vftable'{for `RdpXInterface'}" ??_7CTsRdpUserSignature@@6BRdpXInterface@@@
0x1400125D0: "attempt to sign with invalid sig" ??_C@_0DA@LFFFBPFN@attempt?5to?5sign?5with?5invalid?5sig@
0x140011CF8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x1400134F8: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x14000BD30: "public: virtual int __cdecl CRdpSettingsStore::ReadBool(unsigned short const * __ptr64,unsigned int,int * __ptr64) __ptr64" ?ReadBool@CRdpSettingsStore@@UEAAHPEBGIPEAH@Z
0x140003650: "public: virtual int __cdecl CClientUtils::WriteRegistryString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WriteRegistryString@CClientUtils@@UEAAHPEBG00@Z
0x1400121EC: "My" ??_C@_15OLMMKIPI@?$AAM?$AAy?$AA?$AA@
0x14000A200: "long __cdecl TsCreateSettingsStore(class ITsSettingsStore * __ptr64 * __ptr64)" ?TsCreateSettingsStore@@YAJPEAPEAVITsSettingsStore@@@Z
0x140016638: "__cdecl newmode" _newmode
0x140010568: "__cdecl _acrt_iob_func" __acrt_iob_func
0x140011DE0: "__cdecl _imp__initterm" __imp__initterm
0x140011DB8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140012548: "GetCertificateChainContext faile" ??_C@_0CC@BHFNCPKF@GetCertificateChainContext?5faile@
0x14000BB40: "public: virtual int __cdecl CRdpSettingsStore::ReadIntNoDefault(unsigned short const * __ptr64,unsigned int * __ptr64) __ptr64" ?ReadIntNoDefault@CRdpSettingsStore@@UEAAHPEBGPEAI@Z
0x1400063D0: "public: virtual void * __ptr64 __cdecl CTsRdpCertSignature::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTsRdpCertSignature@@UEAAPEAXI@Z
0x140011390: "const CTsRdpUserSignature::`vftable'{for `CTSObject'}" ??_7CTsRdpUserSignature@@6BCTSObject@@@
0x140013078: "RemoteApplicationMode" ??_C@_1CM@CMLHBAEF@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14000D880: "public: virtual long __cdecl CRdpSettingsStore::GetSignature(class ITsRdpSignature * __ptr64 * __ptr64) __ptr64" ?GetSignature@CRdpSettingsStore@@UEAAJPEAPEAVITsRdpSignature@@@Z
0x14000A9D0: "public: virtual long __cdecl CRdpSettingsMemoryStream::Close(void) __ptr64" ?Close@CRdpSettingsMemoryStream@@UEAAJXZ
0x140013A90: "Settings in signscope and file d" ??_C@_0CP@FALGNPFE@Settings?5in?5signscope?5and?5file?5d@
0x1400131B0: "RemoteApplicationCmdLine" ??_C@_1DC@NIBANGN@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAm?$AAd?$AAL?$AAi?$AAn?$AAe?$AA?$AA@
0x1400115A8: "const CRdpSettingsMemoryStream::`vftable'" ??_7CRdpSettingsMemoryStream@@6B@
0x140009AC8: "int __cdecl PAL_System_Win32_IsRunningInAppContainer(void)" ?PAL_System_Win32_IsRunningInAppContainer@@YAHXZ
0x140002770: "public: virtual unsigned long __cdecl CClientUtils::Release(void) __ptr64" ?Release@CClientUtils@@UEAAKXZ
0x140014618: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1400101C5: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x1400084E8: "public: virtual void * __ptr64 __cdecl CTsRdpUserSignature::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTsRdpUserSignature@@UEAAPEAXI@Z
0x140011CB0: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x1400145F0: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1400134B8: "RecordToString failed" ??_C@_0BG@NHAAJHBC@RecordToString?5failed?$AA@
0x1400132C0: "RedirectPrinters" ??_C@_1CC@JNFCANPH@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x140011C30: CRYPT32_NULL_THUNK_DATA
0x1400067C0: "public: virtual long __cdecl CTsRdpCertSignature::GetCertificateThumbPrint(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetCertificateThumbPrint@CTsRdpCertSignature@@UEAAJPEAPEAEPEAK@Z
0x140011D80: SHLWAPI_NULL_THUNK_DATA
0x140017030: "__cdecl _onexitend" __onexitend
0x140011DC8: "__cdecl _imp__exit" __imp__exit
0x140002A84: "protected: virtual void * __ptr64 __cdecl CClientUtils::`vector deleting destructor'(unsigned int) __ptr64" ??_ECClientUtils@@MEAAPEAXI@Z
0x140011F28: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140012CF8: "PCB" ??_C@_17HHCKDLCE@?$AAP?$AAC?$AAB?$AA?$AA@
0x1400121B0: "/l" ??_C@_15MJDHKBAE@?$AA?1?$AAl?$AA?$AA@
0x140011EA8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x140012C30: "CRdpSettingsMemoryStream" ??_C@_0BJ@CLOPAPKE@CRdpSettingsMemoryStream?$AA@
0x140010210: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1400128C0: "VerifySignature failed" ??_C@_0BH@DFMCFEJA@VerifySignature?5failed?$AA@
0x140012290: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x140011D28: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140009850: "public: virtual unsigned short * __ptr64 __cdecl CRdpSettingsFileStream::GetNextLine(void) __ptr64" ?GetNextLine@CRdpSettingsFileStream@@UEAAPEAGXZ
0x140011D90: USER32_NULL_THUNK_DATA
0x14000196C: "void __cdecl warnMessage(int,long)" ?warnMessage@@YAXHJ@Z
0x140002370: "public: virtual void * __ptr64 __cdecl CTSObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTSObject@@UEAAPEAXI@Z
0x140013288: "AudioMode" ??_C@_1BE@OFAIDMOH@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x140012470: "userenv.dll" ??_C@_1BI@MNMKIIAN@?$AAu?$AAs?$AAe?$AAr?$AAe?$AAn?$AAv?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140011E50: "__cdecl _imp_wcstol" __imp_wcstol
0x1400125A0: "attempt to sign with missing cer" ??_C@_0CO@JFKMOPGJ@attempt?5to?5sign?5with?5missing?5cer@
0x140011EF8: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x14000B770: "public: virtual int __cdecl CRdpSettingsStore::IsDirty(void) __ptr64" ?IsDirty@CRdpSettingsStore@@UEAAHXZ
0x140012918: "ValidateCertificate failed" ??_C@_0BL@PCBMOAFL@ValidateCertificate?5failed?$AA@
0x140012188: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140011F50: "__cdecl _xi_a" __xi_a
0x140011D50: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140012B18: WPP_8a6598a4ea30308b94f4056e6a2a52a8_Traceguids
0x14000D990: "public: virtual long __cdecl CRdpSettingsStore::VerifySignature(unsigned long * __ptr64) __ptr64" ?VerifySignature@CRdpSettingsStore@@UEAAJPEAK@Z
0x140003E50: "public: virtual int __cdecl CClientUtils::RegistryEntryExists(enum UT_REGREAD_LOCATION,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegistryEntryExists@CClientUtils@@UEAAHW4UT_REGREAD_LOCATION@@PEBG1@Z
0x140008670: "__cdecl matherr" _matherr
0x140002730: "public: virtual long __cdecl CClientUtils::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CClientUtils@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140017028: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUovtzxbckozgUhvggrmthoryUrnkovnvmgzgrlmUlyquivUznwGEUhgwzucOlyq@basesettingslib" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUovtzxbckozgUhvggrmthoryUrnkovnvmgzgrlmUlyquivUznwGEUhgwzucOlyq@basesettingslib
0x1400010DC: wmain
0x140013A68: "Field in SignScope not found in " ??_C@_0CG@ONNGMKEB@Field?5in?5SignScope?5not?5found?5in?5@
0x14000F840: "long __cdecl MapXResultToHR(enum _XResult32)" ?MapXResultToHR@@YAJW4_XResult32@@@Z
0x14000D300: "public: virtual int __cdecl CRdpSettingsStore::IsValuePresent(unsigned short const * __ptr64) __ptr64" ?IsValuePresent@CRdpSettingsStore@@UEAAHPEBG@Z
0x140001AA8: RdpX_GetActivityIdPrefix
0x140012530: "GetCertificate failed" ??_C@_0BG@FHMGADNM@GetCertificate?5failed?$AA@
0x14000852C: "enum _XResult32 __cdecl XObjectId_RdpXUserSignature_CreateObject(struct RdpXInterface * __ptr64,unsigned int,enum _XInterfaceId32,void * __ptr64 * __ptr64)" ?XObjectId_RdpXUserSignature_CreateObject@@YA?AW4_XResult32@@PEAURdpXInterface@@IW4_XInterfaceId32@@PEAPEAX@Z
0x1400126A8: "HashAlgorithm" ??_C@_1BM@OCIOHKBA@?$AAH?$AAa?$AAs?$AAh?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AA?$AA@
0x140009880: "public: virtual int __cdecl CRdpSettingsFileStream::ResetLinePointer(void) __ptr64" ?ResetLinePointer@CRdpSettingsFileStream@@UEAAHXZ
0x140004594: WPP_SF_Dl
0x14000FB20: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x140014650: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x140001C08: WPP_SF_DD
0x140001C08: WPP_SF_Dd
0x140012778: "2.16.840.1.101.3.4.2.1" ??_C@_0BH@NLFGIGEG@2?416?4840?41?4101?43?44?42?41?$AA@
0x140012A38: "Failed to set memory stream cont" ??_C@_0CG@IAHJIJPD@Failed?5to?5set?5memory?5stream?5cont@
0x140012B68: WPP_5caf662119873234b1c6b6cf787eec7b_Traceguids
0x140005DD0: WPP_SF_DS
0x140001C50: WPP_SF_Ds
0x140013258: "Authentication Level" ??_C@_1CK@DAHMAJLN@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140016008: WPP_GLOBAL_Control
0x140001F00: TsCryptGetCertTimeStatus
0x140012AB0: "_pAnsiLineBuf" ??_C@_0O@PCEFHELN@_pAnsiLineBuf?$AA@
0x1400129C4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14000F830: "[thunk]:public: virtual void * __ptr64 __cdecl CRdpSettingsStore::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECRdpSettingsStore@@W7EAAPEAXI@Z
0x1400066C0: "public: virtual long __cdecl CTsRdpCertSignature::GetCertificateChainContext(struct _CERT_CHAIN_CONTEXT const * __ptr64 * __ptr64) __ptr64" ?GetCertificateChainContext@CTsRdpCertSignature@@UEAAJPEAPEBU_CERT_CHAIN_CONTEXT@@@Z
0x140001A6C: WPP_SF_D
0x140013310: "RedirectSmartCards" ??_C@_1CG@PLPPFOCP@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAs?$AA?$AA@
0x140010098: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140011E20: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x140011EF0: "__cdecl _imp_towupper" __imp_towupper
0x14000A820: "public: virtual long __cdecl CRdpSettingsMemoryStream::InitializeFromMoniker(unsigned short const * __ptr64) __ptr64" ?InitializeFromMoniker@CRdpSettingsMemoryStream@@UEAAJPEBG@Z
0x14000D280: "public: virtual int __cdecl CRdpSettingsStore::DeleteValueIfPresent(unsigned short const * __ptr64) __ptr64" ?DeleteValueIfPresent@CRdpSettingsStore@@UEAAHPEBG@Z
0x140012E70: "GatewayProfileUsageMethod" ??_C@_1DE@KONEIAOJ@?$AAG?$AAa?$AAt?$AAe?$AAw?$AAa?$AAy?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAU?$AAs?$AAa?$AAg?$AAe?$AAM?$AAe?$AAt?$AAh?$AAo?$AAd?$AA?$AA@
0x140005DB0: "[thunk]:public: virtual void * __ptr64 __cdecl CTSUnknown::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECTSUnknown@@W7EAAPEAXI@Z
0x140011310: "const CTsRdpSignature::`vftable'{for `INonDelegatingUnknown'}" ??_7CTsRdpSignature@@6BINonDelegatingUnknown@@@
0x1400024B0: "enum _XResult32 __cdecl MapHRToXResult(long)" ?MapHRToXResult@@YA?AW4_XResult32@@J@Z
0x140008A70: "public: virtual long __cdecl CRdpSettingsFileStream::OpenForRead(unsigned short const * __ptr64) __ptr64" ?OpenForRead@CRdpSettingsFileStream@@UEAAJPEBG@Z
0x140011238: "const CTSObject::`vftable'" ??_7CTSObject@@6B@
0x14000FB04: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140012268: "Advapi32.dll" ??_C@_0N@DOHINHCI@Advapi32?4dll?$AA@
0x140012738: "wcstombs_s failed" ??_C@_0BC@CDLKECOG@wcstombs_s?5failed?$AA@
0x140011028: "const type_info::`vftable'" ??_7type_info@@6B@
0x14000FEC0: "__cdecl _security_check_cookie" __security_check_cookie
0x140011D00: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x140012B78: "<NULL>" ??_C@_1O@DPFEOIGE@?$AA?$DM?$AAN?$AAU?$AAL?$AAL?$AA?$DO?$AA?$AA@
0x140008670: "public: virtual long __cdecl ITsRdpSettingsStream::PrepareForRead(void) __ptr64" ?PrepareForRead@ITsRdpSettingsStream@@UEAAJXZ
0x1400081CC: "enum _XResult32 __cdecl XObjectId_RdpXCertSignature_CreateObject(struct RdpXInterface * __ptr64,unsigned int,enum _XInterfaceId32,void * __ptr64 * __ptr64)" ?XObjectId_RdpXCertSignature_CreateObject@@YA?AW4_XResult32@@PEAURdpXInterface@@IW4_XInterfaceId32@@PEAPEAX@Z
0x140011F48: "__cdecl _xc_z" __xc_z
0x140009930: "public: virtual long __cdecl CRdpSettingsFileStream::InitializeFromMoniker(unsigned short const * __ptr64) __ptr64" ?InitializeFromMoniker@CRdpSettingsFileStream@@UEAAJPEBG@Z
0x140011D60: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140016640: "int numberFiles" ?numberFiles@@3HA
0x14000F440: "protected: long __cdecl CRdpSettingsStore::CalculateSecureSettingsLength(unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?CalculateSecureSettingsLength@CRdpSettingsStore@@IEAAJPEAGPEAK@Z
0x140008410: "public: virtual enum _XResult32 __cdecl CTsRdpSignature::GetInterface(enum _XInterfaceId32,void * __ptr64 * __ptr64) __ptr64" ?GetInterface@CTsRdpSignature@@UEAA?AW4_XResult32@@W4_XInterfaceId32@@PEAPEAX@Z
0x140013030: "RemoteApplicationExpandWorkingdi" ??_C@_1EE@LJJDMEPE@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAE?$AAx?$AAp?$AAa?$AAn?$AAd?$AAW?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AAd?$AAi@
0x140012840: "no signature field" ??_C@_0BD@FIFCBDOP@no?5signature?5field?$AA@
0x140012D00: "Use Redirection Server Name" ??_C@_1DI@HNHJJFEG@?$AAU?$AAs?$AAe?$AA?5?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140012708: "HashAlgorithm registry type is i" ??_C@_0CJ@LAHKNICG@HashAlgorithm?5registry?5type?5is?5i@
0x1400047FC: "protected: static int __cdecl CClientUtils::ReadRegistryEntry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64,int,long,unsigned long * __ptr64,int)" ?ReadRegistryEntry@CClientUtils@@KAHPEAUHKEY__@@PEBG1PEAEHJPEAKH@Z
0x140008650: "public: virtual int __cdecl CRdpSettingsStream::IsOpenForRead(void) __ptr64" ?IsOpenForRead@CRdpSettingsStream@@UEAAHXZ
0x140002820: "public: virtual enum _XResult32 __cdecl CClientUtils::GetInterface(enum _XInterfaceId32,void * __ptr64 * __ptr64) __ptr64" ?GetInterface@CClientUtils@@UEAA?AW4_XResult32@@W4_XInterfaceId32@@PEAPEAX@Z
0x14000A2A8: "long __cdecl OverwriteByteBlob(unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?OverwriteByteBlob@@YAJPEAEKPEAPEAEPEAK@Z
0x140012570: "GetCertificateThumbPrint failed" ??_C@_0CA@BOGCBGLH@GetCertificateThumbPrint?5failed?$AA@
0x1400101F8: "__cdecl CxxThrowException" _CxxThrowException
0x140011E28: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140011D48: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140016030: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x140012238: IID_RdpInterfaceClientUtils
0x14000B760: "public: virtual int __cdecl CRdpSettingsStore::IsOpenForWrite(void) __ptr64" ?IsOpenForWrite@CRdpSettingsStore@@UEAAHXZ
0x140012FA8: "Alternate Shell" ??_C@_1CA@HMJGBBLH@?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140011CE8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140012BA0: "0123456789ABCDEF" ??_C@_1CC@JPENPCAM@?$AA0?$AA1?$AA2?$AA3?$AA4?$AA5?$AA6?$AA7?$AA8?$AA9?$AAA?$AAB?$AAC?$AAD?$AAE?$AAF?$AA?$AA@
0x140012A60: "Unable to initialize file name f" ??_C@_0CN@DFHBNHJI@Unable?5to?5initialize?5file?5name?5f@
0x140010680: "__cdecl _chkstk" __chkstk
0x140012600: "Unable to construct cert chain f" ??_C@_0CL@PPLKBECF@Unable?5to?5construct?5cert?5chain?5f@
0x1400123E0: "xn--" ??_C@_19NFOAIBGH@?$AAx?$AAn?$AA?9?$AA?9?$AA?$AA@
0x1400134D0: "szBuf" ??_C@_05CAGJCPHB@szBuf?$AA@
0x140012C20: WPP_57189b7fed7f3b3af3f62bb9c4c08879_Traceguids
0x140010210: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140011518: "const ITsRdpSettingsStream::`vftable'" ??_7ITsRdpSettingsStream@@6B@
0x140012878: "invalid length of signature fiel" ??_C@_0CC@GJNNCPAC@invalid?5length?5of?5signature?5fiel@
0x140012428: "IdnToUnicode" ??_C@_0N@NDHHCCGO@IdnToUnicode?$AA@
0x140002750: "public: virtual unsigned long __cdecl CClientUtils::AddRef(void) __ptr64" ?AddRef@CClientUtils@@UEAAKXZ
0x140002370: "public: virtual void * __ptr64 __cdecl CTSObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTSObject@@UEAAPEAXI@Z
0x140008660: "public: virtual int __cdecl CRdpSettingsStream::IsOpenForWrite(void) __ptr64" ?IsOpenForWrite@CRdpSettingsStream@@UEAAHXZ
0x1400121F8: "w,ccs=UNICODE" ??_C@_1BM@PIDCHPMB@?$AAw?$AA?0?$AAc?$AAc?$AAs?$AA?$DN?$AAU?$AAN?$AAI?$AAC?$AAO?$AAD?$AAE?$AA?$AA@
0x140011720: "const CRdpSettingsStore::`vftable'{for `CTSObject'}" ??_7CRdpSettingsStore@@6BCTSObject@@@
0x140011BE8: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x1400127A0: "cannot serialize empty signature" ??_C@_0CB@PGAOMGMM@cannot?5serialize?5empty?5signature@
0x140012C10: "CTsRdpSignature" ??_C@_0BA@EFBJBLPP@CTsRdpSignature?$AA@
0x140012488: "GetAppContainerRegistryLocation" ??_C@_0CA@CLCNMPEJ@GetAppContainerRegistryLocation?$AA@
0x140011C50: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x140012C50: "InitializeFromMoniker failed!" ??_C@_0BO@INCKINDN@InitializeFromMoniker?5failed?$CB?$AA@
0x140011BF8: "__cdecl _imp_CryptBinaryToStringW" __imp_CryptBinaryToStringW
0x140011BF0: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x140011C70: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1400084B0: "public: virtual unsigned long __cdecl CRdpSettingsStore::AddRef(void) __ptr64" ?AddRef@CRdpSettingsStore@@UEAAKXZ
0x14000D098: "protected: struct tagRDPF_RECORD * __ptr64 __cdecl CRdpSettingsStore::NewRecord(unsigned short const * __ptr64,unsigned int) __ptr64" ?NewRecord@CRdpSettingsStore@@IEAAPEAUtagRDPF_RECORD@@PEBGI@Z
0x140011CC0: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x140011F70: "__cdecl _guard_fids_table" __guard_fids_table
0x1400124A8: WPP_da9bdb25184e394a65a120a7e6cea436_Traceguids
0x140011DF8: "__cdecl _imp_iswxdigit" __imp_iswxdigit
0x140002750: "public: virtual unsigned long __cdecl CRdpSettingsStream::AddRef(void) __ptr64" ?AddRef@CRdpSettingsStream@@UEAAKXZ
0x140011F00: msvcrt_NULL_THUNK_DATA
0x140011A30: "__cdecl load_config_used" _load_config_used
0x140011ED0: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x140007FB4: "private: void * __ptr64 __cdecl CTsRdpCertSignature::GetHandleToMsgStore(unsigned char const * __ptr64,unsigned long) __ptr64" ?GetHandleToMsgStore@CTsRdpCertSignature@@AEAAPEAXPEBEK@Z
0x14000FB20: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x140011C20: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x14000F168: "protected: long __cdecl CRdpSettingsStore::GenerateSecureSettingsBlob(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GenerateSecureSettingsBlob@CRdpSettingsStore@@IEAAJPEBGPEAPEAEPEAK@Z
0x1400023F0: "public: virtual unsigned long __cdecl CTSUnknown::NonDelegatingAddRef(void) __ptr64" ?NonDelegatingAddRef@CTSUnknown@@UEAAKXZ
0x140013A30: "Mandatory sensitive setting not " ??_C@_0CI@DHPAGILJ@Mandatory?5sensitive?5setting?5not?5@
0x1400135F0: "ITsRdpSignature::SetCertificate " ??_C@_0CH@KIAHOMLG@ITsRdpSignature?3?3SetCertificate?5@
0x1400053B0: "public: virtual int __cdecl CClientUtils::EnumRegistryMerge(unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64,int * __ptr64,enum UT_REGREAD_LOCATION * __ptr64) __ptr64" ?EnumRegistryMerge@CClientUtils@@UEAAHPEBGIPEAGPEAHPEAW4UT_REGREAD_LOCATION@@@Z
0x1400113D0: "const CRdpSettingsFileStream::`vftable'" ??_7CRdpSettingsFileStream@@6B@
0x140012CC8: "Alternate Full Address" ??_C@_1CO@NJBKLKCI@?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AA?5?$AAF?$AAu?$AAl?$AAl?$AA?5?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1400146C8: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x140011E58: "__cdecl _imp_toupper" __imp_toupper
0x140012468: "phKey" ??_C@_05BAKJHLFJ@phKey?$AA@
0x1400127C8: "pRdpSig" ??_C@_07FMHCEJJI@pRdpSig?$AA@
0x140001880: "void __cdecl displayMessage(int,int,struct _iobuf * __ptr64,long)" ?displayMessage@@YAXHHPEAU_iobuf@@J@Z
0x140012630: "CertChainContextToArray failed" ??_C@_0BP@ODNNKHDF@CertChainContextToArray?5failed?$AA@
0x1400146A0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140012A08: "Failed to get the file contents " ??_C@_0CN@MMKEEHCO@Failed?5to?5get?5the?5file?5contents?5@
0x140002360: "public: virtual long __cdecl CTSObject::Terminate(void) __ptr64" ?Terminate@CTSObject@@UEAAJXZ
0x140011E98: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400101E0: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x14000A5A0: "public: virtual unsigned short * __ptr64 __cdecl CRdpSettingsStream::GetNextLine(void) __ptr64" ?GetNextLine@CRdpSettingsStream@@UEAAPEAGXZ
0x140012F60: "Pre-authentication server addres" ??_C@_1EE@OOFBBLKD@?$AAP?$AAr?$AAe?$AA?9?$AAa?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs@
0x1400122F8: "CClientUtils" ??_C@_0N@FIFPPHLE@CClientUtils?$AA@
0x140013B90: WPP_45ead54c32bc301f6d5c8e866801c33c_Traceguids
0x1400138E8: "GetInterface for ITSRdpSignature" ??_C@_0CI@NPCHGNIL@GetInterface?5for?5ITSRdpSignature@
0x140011D88: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140001B88: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140008640: "[thunk]:public: virtual int __cdecl CTsRdpSignature::IsValid`adjustor{40}' (void) __ptr64" ?IsValid@CTsRdpSignature@@WCI@EAAHXZ
0x140017018: "protected: static enum UT_APPCONTAINER_CHECK_STATE CClientUtilsWin32::_utRunningInAppContainer" ?_utRunningInAppContainer@CClientUtilsWin32@@1W4UT_APPCONTAINER_CHECK_STATE@@A
0x140011F10: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000A550: "public: virtual long __cdecl CTsRdpSignature::GetSignedBlob(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSignedBlob@CTsRdpSignature@@UEAAJPEAPEAEPEAK@Z
0x140011D30: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140012B28: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140016634: "__cdecl dowildcard" _dowildcard
0x140017008: "int testOnly" ?testOnly@@3HA
0x1400121D8: "Signature" ??_C@_1BE@PEHMGMOH@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x140012C00: "*ppbOutBlob" ??_C@_0M@JFAPNCPA@?$CKppbOutBlob?$AA@
0x140012EF8: "PromptCredentialOnce" ??_C@_1CK@MBMELLIH@?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAO?$AAn?$AAc?$AAe?$AA?$AA@
0x140013138: "RemoteApplicationFile" ??_C@_1CM@POGLGAFI@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140011EC8: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x140012218: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140011E38: "__cdecl _imp_fclose" __imp_fclose
0x140011000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x140010195: free
0x140008A80: "protected: long __cdecl CRdpSettingsFileStream::DoOpenForRead(unsigned short const * __ptr64,int) __ptr64" ?DoOpenForRead@CRdpSettingsFileStream@@IEAAJPEBGH@Z
0x140009DEC: WPP_SF_Dss
0x1400028B4: WPP_SF_DSS
0x140001AFC: "unsigned int __cdecl RdpWppGetCurrentThreadActivityIdPrefix(void)" ?RdpWppGetCurrentThreadActivityIdPrefix@@YAIXZ
0x140007EC0: "private: long __cdecl CTsRdpCertSignature::CertChainContextToArray(struct _CERT_CHAIN_CONTEXT const * __ptr64,unsigned long * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64 * __ptr64) __ptr64" ?CertChainContextToArray@CTsRdpCertSignature@@AEAAJPEBU_CERT_CHAIN_CONTEXT@@PEAKPEAPEAPEBU_CERT_CONTEXT@@@Z
0x140011F18: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400105A0: "__cdecl purecall" _purecall
0x14000C5B0: "public: virtual int __cdecl CRdpSettingsStore::InsertRecord(unsigned short const * __ptr64,unsigned int,unsigned short const * __ptr64) __ptr64" ?InsertRecord@CRdpSettingsStore@@UEAAHPEBGI0@Z
0x140001934: "void __cdecl errorMessage(int,long)" ?errorMessage@@YAXHJ@Z
0x140001008: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x140002DA0: "public: virtual int __cdecl CClientUtils::ReadRegistryExpandString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,int * __ptr64,enum UT_REGREAD_LOCATION) __ptr64" ?ReadRegistryExpandString@CClientUtils@@UEAAHPEBG0PEAPEAGPEAHW4UT_REGREAD_LOCATION@@@Z
0x14000B750: "public: virtual int __cdecl CRdpSettingsStore::IsOpenForRead(void) __ptr64" ?IsOpenForRead@CRdpSettingsStore@@UEAAHXZ
0x140010550: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140011C40: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140012828: "invalid signature type" ??_C@_0BH@LKNJKIHJ@invalid?5signature?5type?$AA@
0x140012190: "/sha256" ??_C@_1BA@EKPLCOKI@?$AA?1?$AAs?$AAh?$AAa?$AA2?$AA5?$AA6?$AA?$AA@
0x1400102BC: RtlpImageNtHeader
0x14000AB30: WPP_SF_Dssd
0x140004300: WPP_SF_DSSl
0x14000DDA4: "protected: long __cdecl CRdpSettingsStore::InitializeSignature(int) __ptr64" ?InitializeSignature@CRdpSettingsStore@@IEAAJH@Z
0x14000B390: "public: virtual long __cdecl CRdpSettingsStore::SerializeStore(unsigned short * __ptr64 * __ptr64) __ptr64" ?SerializeStore@CRdpSettingsStore@@UEAAJPEAPEAG@Z
0x140002474: "public: virtual void * __ptr64 __cdecl CTSUnknown::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTSUnknown@@UEAAPEAXI@Z
0x140002770: "public: virtual unsigned long __cdecl CRdpSettingsStream::Release(void) __ptr64" ?Release@CRdpSettingsStream@@UEAAKXZ
0x140008894: "protected: long __cdecl CRdpSettingsFileStream::LoadFileContents(void) __ptr64" ?LoadFileContents@CRdpSettingsFileStream@@IEAAJXZ
0x140012750: "could not allocate bHashAlgorith" ??_C@_0CD@OBLMMJDO@could?5not?5allocate?5bHashAlgorith@
0x140002790: "public: virtual long __cdecl CClientUtils::NonDelegatingQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?NonDelegatingQueryInterface@CClientUtils@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140003A00: "public: virtual int __cdecl CClientUtils::WriteRegistryBinary(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,int) __ptr64" ?WriteRegistryBinary@CClientUtils@@UEAAHPEBG0PEAGH@Z
0x140011CC8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140016858: "struct _CRYPTOAPI_BLOB m_hashBlob" ?m_hashBlob@@3U_CRYPTOAPI_BLOB@@A
0x1400134D8: "ppwszSettingsStore" ??_C@_0BD@HCIEODDB@ppwszSettingsStore?$AA@
0x140013A2C: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x14000A580: "public: virtual int __cdecl CRdpSettingsStream::ResetLinePointer(void) __ptr64" ?ResetLinePointer@CRdpSettingsStream@@UEAAHXZ
0x140011E78: "__cdecl _imp_wcstok_s" __imp_wcstok_s
0x140012180: ".OCP" ??_C@_04EMDMLPCB@?4OCP?$AA@
0x140011EA0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140011EE8: "__cdecl _imp_fwprintf" __imp_fwprintf
0x140006450: "public: virtual void __cdecl CTsRdpCertSignature::Reset(void) __ptr64" ?Reset@CTsRdpCertSignature@@UEAAXXZ
0x14000BB10: "public: virtual int __cdecl CRdpSettingsStore::WriteBinary(unsigned short const * __ptr64,unsigned char * __ptr64,unsigned int) __ptr64" ?WriteBinary@CRdpSettingsStore@@UEAAHPEBGPEAEI@Z
0x140011F20: ntdll_NULL_THUNK_DATA
0x140011E80: "__cdecl _imp_memcpy" __imp_memcpy
0x140013170: "RemoteApplicationFileExtensions" ??_C@_1EA@IPLADOIE@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x140016010: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x1400139A0: "ITsRdpSignature::Serialize faile" ??_C@_0CC@OCELHOCE@ITsRdpSignature?3?3Serialize?5faile@
0x140011270: "const CTsRdpSignature::`vftable'{for `RdpXInterface'}" ??_7CTsRdpSignature@@6BRdpXInterface@@@
0x140016000: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x140001CCC: WPP_SF_DSD
0x1400044F0: WPP_SF_DSd
0x140001CCC: WPP_SF_DsD
0x140013338: "RedirectPOSDevices" ??_C@_1CG@NJKAEIKO@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAP?$AAO?$AAS?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x14001058C: "__cdecl _iob_func" __iob_func
0x1400045E4: "protected: static void __cdecl CClientUtils::MakeSubKey(unsigned short * __ptr64,unsigned int,unsigned short const * __ptr64)" ?MakeSubKey@CClientUtils@@KAXPEAGIPEBG@Z
0x140012AC0: "Failed to move pointer to the be" ??_C@_0DF@GFIDICFC@Failed?5to?5move?5pointer?5to?5the?5be@
0x140013890: "Failed version check on signatur" ??_C@_0CC@NOCCPNAF@Failed?5version?5check?5on?5signatur@
0x140011390: "const CTsRdpSignature::`vftable'{for `CTSObject'}" ??_7CTsRdpSignature@@6BCTSObject@@@
0x140011C00: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x140013498: ":b:" ??_C@_17FEHKNJLH@?$AA?3?$AAb?$AA?3?$AA?$AA@
0x140016068: "__cdecl _security_cookie" __security_cookie
0x140002340: "public: virtual int __cdecl CTSObject::IsValid(void) __ptr64" ?IsValid@CTSObject@@UEAAHXZ
0x140011B78: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1400137C0: "RDP file signature is missing." ??_C@_0BP@MDDIEAEJ@RDP?5file?5signature?5is?5missing?4?$AA@
0x140010680: "__cdecl alloca_probe" _alloca_probe
0x1400134A0: "CRdpSettingsStore" ??_C@_0BC@IIOGBIOE@CRdpSettingsStore?$AA@
0x14000B8B0: "public: virtual int __cdecl CRdpSettingsStore::ReadString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned int) __ptr64" ?ReadString@CRdpSettingsStore@@UEAAHPEBG0PEAGI@Z
0x140011CA8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140013A58: "szTempScope" ??_C@_0M@LBEIIAFI@szTempScope?$AA@
0x140013388: "DevicesToRedirect" ??_C@_1CE@KNIJOAHH@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AAT?$AAo?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AA?$AA@
0x140011BD8: "__cdecl _imp_CryptSignMessage" __imp_CryptSignMessage
0x140011220: "const CTSUnknown::`vftable'{for `INonDelegatingUnknown'}" ??_7CTSUnknown@@6BINonDelegatingUnknown@@@
0x140011CD0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140016060: "__cdecl _defaultmatherr" __defaultmatherr
0x140012790: "pbSignedBlob" ??_C@_0N@LCLDBFLB@pbSignedBlob?$AA@
0x140013490: ":s:" ??_C@_17JMPAAIIJ@?$AA?3?$AAs?$AA?3?$AA?$AA@
0x140011C78: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x140013B68: "SignScope field not found in sto" ??_C@_0CD@BAEPLGMO@SignScope?5field?5not?5found?5in?5sto@
0x140011C88: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140013570: "RdpX_CreateObject CertSignature " ??_C@_0CI@PANMJEAP@RdpX_CreateObject?5CertSignature?5@
0x140005E58: "public: static int __cdecl CClientUtilsWin32::UT_IsRunningInAppContainer(void)" ?UT_IsRunningInAppContainer@CClientUtilsWin32@@SAHXZ
0x140011B58: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1400064D0: "public: virtual long __cdecl CTsRdpCertSignature::SetCertificate(void * __ptr64,void * __ptr64) __ptr64" ?SetCertificate@CTsRdpCertSignature@@UEAAJPEAX0@Z
0x140016648: "struct HINSTANCE__ * __ptr64 __ptr64 m_hInstance" ?m_hInstance@@3PEAUHINSTANCE__@@EA
0x140017038: "__cdecl _onexitbegin" __onexitbegin
0x14000BCA0: "public: virtual int __cdecl CRdpSettingsStore::ReadBoolNoDefault(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?ReadBoolNoDefault@CRdpSettingsStore@@UEAAHPEBGPEAH@Z
0x14000E5D8: "protected: long __cdecl CRdpSettingsStore::InternalSign(class ITsRdpSignature * __ptr64,enum RDP_STORE_SIGNATURE_TYPE) __ptr64" ?InternalSign@CRdpSettingsStore@@IEAAJPEAVITsRdpSignature@@W4RDP_STORE_SIGNATURE_TYPE@@@Z
0x1400128A0: "OverwriteByteBlob failed" ??_C@_0BJ@CAOJMDIF@OverwriteByteBlob?5failed?$AA@
0x140012520: WPP_581e623cf86d3a964c7c00e076d46389_Traceguids
0x140008520: "public: virtual long __cdecl CRdpSettingsMemoryStream::Write(unsigned short const * __ptr64) __ptr64" ?Write@CRdpSettingsMemoryStream@@UEAAJPEBG@Z
0x1400092B0: "public: virtual long __cdecl CRdpSettingsFileStream::GetSettingsString(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetSettingsString@CRdpSettingsFileStream@@UEAAJPEAPEAG@Z
0x14000867C: "public: __cdecl CRdpSettingsFileStream::CRdpSettingsFileStream(void) __ptr64" ??0CRdpSettingsFileStream@@QEAA@XZ
0x140012A90: "Failed to close file stream!" ??_C@_0BN@PBEJGLAI@Failed?5to?5close?5file?5stream?$CB?$AA@
0x1400130D8: "RemoteApplicationName" ??_C@_1CM@PFAFOILM@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140011DA0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000D310: "public: virtual int __cdecl CRdpSettingsStore::IsValuePresent(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?IsValuePresent@CRdpSettingsStore@@UEAAHPEBGPEAH@Z
0x140011EB8: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x140011D18: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400078C4: "private: long __cdecl CTsRdpCertSignature::ValidateCertificate(struct _CERT_CONTEXT const * __ptr64,void * __ptr64,unsigned long * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64 * __ptr64) __ptr64" ?ValidateCertificate@CTsRdpCertSignature@@AEAAJPEBU_CERT_CONTEXT@@PEAXPEAKPEAPEBU_CERT_CHAIN_CONTEXT@@@Z
0x140011200: "const CTSUnknown::`vftable'{for `CTSObject'}" ??_7CTSUnknown@@6BCTSObject@@@
0x140011BB0: "__cdecl _imp_CryptMsgClose" __imp_CryptMsgClose
0x140011288: "const CTsRdpCertSignature::`vftable'{for `ITsRdpSignature'}" ??_7CTsRdpCertSignature@@6BITsRdpSignature@@@
0x140002750: "public: virtual unsigned int __cdecl CClientUtils::IncrementRefCount(void) __ptr64" ?IncrementRefCount@CClientUtils@@UEAAIXZ
0x140014678: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140011B70: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400139E8: "CRdpSettingsStore::CalculateSign" ??_C@_0DD@BNFHGIPB@CRdpSettingsStore?3?3CalculateSign@
0x140009000: "public: virtual long __cdecl CRdpSettingsFileStream::Write(unsigned short const * __ptr64) __ptr64" ?Write@CRdpSettingsFileStream@@UEAAJPEBG@Z
0x140012938: "SetCertificate failed" ??_C@_0BG@KCJANKJN@SetCertificate?5failed?$AA@
0x1400059D0: "public: virtual long __cdecl CClientUtils::ReadPolicyString(enum UT_REGREAD_LOCATION,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?ReadPolicyString@CClientUtils@@UEAAJW4UT_REGREAD_LOCATION@@PEBG1PEAGK@Z
0x140010454: "__cdecl _security_init_cookie" __security_init_cookie
0x14000A418: "protected: virtual __cdecl CTsRdpSignature::~CTsRdpSignature(void) __ptr64" ??1CTsRdpSignature@@MEAA@XZ
0x14000CA70: "long __cdecl StringCchCatCRLF(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatCRLF@@YAJPEAG_KPEBG@Z
0x140011DD0: "__cdecl _imp__cexit" __imp__cexit
0x14000A4D0: "public: virtual int __cdecl CTsRdpSignature::IsValid(void) __ptr64" ?IsValid@CTsRdpSignature@@UEAAHXZ
0x140007130: "public: virtual long __cdecl CTsRdpCertSignature::Serialize(struct _RDP_SERIALIZED_SIG * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Serialize@CTsRdpCertSignature@@UEAAJPEAPEAU_RDP_SERIALIZED_SIG@@PEAK@Z
0x140012EA8: "GatewayCredentialsSource" ??_C@_1DC@EBDCCBAK@?$AAG?$AAa?$AAt?$AAe?$AAw?$AAa?$AAy?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x140010318: "__cdecl get_image_app_type" _get_image_app_type
0x140013A20: "szSignScope" ??_C@_0M@BDIBJDGO@szSignScope?$AA@
0x140001E3C: TsCryptGetCertContext
0x140002474: "public: virtual void * __ptr64 __cdecl CTSUnknown::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTSUnknown@@UEAAPEAXI@Z
0x1400101AD: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x14000BBE0: "public: virtual int __cdecl CRdpSettingsStore::ReadInt(unsigned short const * __ptr64,unsigned int,unsigned int * __ptr64) __ptr64" ?ReadInt@CRdpSettingsStore@@UEAAHPEBGIPEAI@Z
0x140012B48: "GetCurrentPackageFamilyName" ??_C@_0BM@GKOCOFBK@GetCurrentPackageFamilyName?$AA@
0x14001468C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400083F0: "public: virtual unsigned int __cdecl CTsRdpSignature::DecrementRefCount(void) __ptr64" ?DecrementRefCount@CTsRdpSignature@@UEAAIXZ
0x1400136B8: "CRdpSettingsStore::InitializeSig" ??_C@_0CP@OJLDGGBC@CRdpSettingsStore?3?3InitializeSig@
0x1400126C8: "could not allocate bHashAlgorith" ??_C@_0CC@LDIKFHEN@could?5not?5allocate?5bHashAlgorith@
0x140012DF0: "AutoReconnection Enabled" ??_C@_1DC@EOGLDOBL@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140012EE0: "Support URL" ??_C@_1BI@KCGLENFP@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AA?5?$AAU?$AAR?$AAL?$AA?$AA@
0x140008520: "public: virtual long __cdecl CTsRdpUserSignature::Serialize(struct _RDP_SERIALIZED_SIG * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Serialize@CTsRdpUserSignature@@UEAAJPEAPEAU_RDP_SERIALIZED_SIG@@PEAK@Z
0x14000B780: "public: virtual int __cdecl CRdpSettingsStore::SetDirtyFlag(int) __ptr64" ?SetDirtyFlag@CRdpSettingsStore@@UEAAHH@Z
0x1400121A0: "/q" ??_C@_15GLEECOEG@?$AA?1?$AAq?$AA?$AA@
0x14000FE90: wmainCRTStartup
0x1400132A0: "RedirectDrives" ??_C@_1BO@GIPEIFFO@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAr?$AAi?$AAv?$AAe?$AAs?$AA?$AA@
0x140012BE0: WPP_2882457f24043a92705195b48df56d0c_Traceguids
0x1400133F8: "RedirectDirectX" ??_C@_1CA@PEKAAFGL@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAX?$AA?$AA@
0x1400127D0: "Initialize failed" ??_C@_0BC@PIOGNNJE@Initialize?5failed?$AA@
0x140011ED8: "__cdecl _imp_malloc" __imp_malloc
0x1400127E8: "too few bytes in signature" ??_C@_0BL@PDCMCHOI@too?5few?5bytes?5in?5signature?$AA@
0x140011E88: "__cdecl _imp__purecall" __imp__purecall
0x140011B90: ADVAPI32_NULL_THUNK_DATA
0x140001544: "long __cdecl rdpSignFile(unsigned short * __ptr64,unsigned short * __ptr64,int)" ?rdpSignFile@@YAJPEAG0H@Z
0x1400110F0: "const CClientUtils::`vftable'{for `CTSObject'}" ??_7CClientUtils@@6BCTSObject@@@
0x14000620C: "long __cdecl TsOpenFileSettingsStore(unsigned short const * __ptr64,class ITsSettingsStore * __ptr64 * __ptr64,int)" ?TsOpenFileSettingsStore@@YAJPEBGPEAPEAVITsSettingsStore@@H@Z
0x140008118: "private: void __cdecl CTsRdpCertSignature::FreeCertArray(unsigned long,struct _CERT_CONTEXT const * __ptr64 * __ptr64) __ptr64" ?FreeCertArray@CTsRdpCertSignature@@AEAAXKPEAPEBU_CERT_CONTEXT@@@Z
0x1400043EC: WPP_SF_DSSll
0x140011C98: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140003E80: "public: virtual int __cdecl CClientUtils::ReadRegistryEntry(enum UT_REGREAD_LOCATION,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64,int,long,unsigned long * __ptr64,int) __ptr64" ?ReadRegistryEntry@CClientUtils@@UEAAHW4UT_REGREAD_LOCATION@@PEBG1PEAEHJPEAKH@Z
0x140011220: "const CRdpSettingsMemoryStream::`vftable'{for `INonDelegatingUnknown'}" ??_7CRdpSettingsMemoryStream@@6BINonDelegatingUnknown@@@
0x140011220: "const CRdpSettingsStore::`vftable'{for `INonDelegatingUnknown'}" ??_7CRdpSettingsStore@@6BINonDelegatingUnknown@@@
0x140011C60: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x140013808: "StringCchLength failed" ??_C@_0BH@JJCALLOK@StringCchLength?5failed?$AA@
0x140013458: "EventLogUploadAddress" ??_C@_1CM@EJMJLNJK@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAU?$AAp?$AAl?$AAo?$AAa?$AAd?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x14000D3C0: "public: virtual long __cdecl CRdpSettingsStore::ApplyCertSignature(void * __ptr64) __ptr64" ?ApplyCertSignature@CRdpSettingsStore@@UEAAJPEAX@Z
0x14000FF20: "__cdecl _report_gsfailure" __report_gsfailure
0x140016080: "int outputLevel" ?outputLevel@@3HA
0x14000A500: "public: virtual long __cdecl CTsRdpSignature::SetUnsignedBlob(unsigned char * __ptr64,unsigned long) __ptr64" ?SetUnsignedBlob@CTsRdpSignature@@UEAAJPEAEK@Z
0x14000CAC8: "protected: long __cdecl CRdpSettingsStore::RecordToString(struct tagRDPF_RECORD * __ptr64,unsigned short * __ptr64,unsigned int,unsigned int * __ptr64) __ptr64" ?RecordToString@CRdpSettingsStore@@IEAAJPEAUtagRDPF_RECORD@@PEAGIPEAI@Z
0x1400130A8: "RemoteApplicationGuid" ??_C@_1CM@NCMMNJNE@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x14000BED0: "protected: int __cdecl CRdpSettingsStore::InsertRecordFromLine(unsigned short const * __ptr64) __ptr64" ?InsertRecordFromLine@CRdpSettingsStore@@IEAAHPEBG@Z
0x140012DB8: "DisableConnectionSharing" ??_C@_1DC@GGPIHINJ@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAh?$AAa?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x140017048: "__cdecl _native_startup_state" __native_startup_state
0x14001702C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUckozgUifmgrnvUrnkovnvmgzgrlmUlyquivUznwGEUiwkcifmgrnvkxsOlyq@RdpXPlatRuntime" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUiwkUckozgUifmgrnvUrnkovnvmgzgrlmUlyquivUznwGEUiwkcifmgrnvkxsOlyq@RdpXPlatRuntime
0x140011BB8: "__cdecl _imp_CryptMsgUpdate" __imp_CryptMsgUpdate
0x1400121A8: "/v" ??_C@_15PGJDBGPP@?$AA?1?$AAv?$AA?$AA@
0x14000F634: "protected: long __cdecl CRdpSettingsStore::CopySecureSettings(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?CopySecureSettings@CRdpSettingsStore@@IEAAJPEAG0K@Z
0x140017020: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUgvinhieUiwkkozgulinUxlnnlmUiwkoryhUwkroryUoryUlyquivUznwGEUhgwzucOlyq@rdpWin32DpiApi" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUgvinhieUiwkkozgulinUxlnnlmUiwkoryhUwkroryUoryUlyquivUznwGEUhgwzucOlyq@rdpWin32DpiApi
0x140011C08: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x140002420: "public: virtual unsigned long __cdecl CTSUnknown::NonDelegatingRelease(void) __ptr64" ?NonDelegatingRelease@CTSUnknown@@UEAAKXZ
0x140011110: "const CClientUtils::`vftable'{for `INonDelegatingUnknown'}" ??_7CClientUtils@@6BINonDelegatingUnknown@@@
0x14000C88C: "protected: int __cdecl CRdpSettingsStore::InsertIntRecord(unsigned short const * __ptr64,unsigned int) __ptr64" ?InsertIntRecord@CRdpSettingsStore@@IEAAHPEBGI@Z
0x14000A520: "public: virtual long __cdecl CTsRdpSignature::GetUnsignedBlob(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetUnsignedBlob@CTsRdpSignature@@UEAAJPEAPEAEPEAK@Z
0x140011E08: "__cdecl _imp__fmode" __imp__fmode
0x140011440: "const CRdpSettingsStream::`vftable'" ??_7CRdpSettingsStream@@6B@
0x140003F30: "public: virtual long __cdecl CClientUtils::BinaryToBase64String(unsigned char * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?BinaryToBase64String@CClientUtils@@UEAAJPEAEKPEAPEAGPEAK@Z
0x14000BC40: "public: virtual int __cdecl CRdpSettingsStore::WriteInt(unsigned short const * __ptr64,unsigned int,unsigned int,int) __ptr64" ?WriteInt@CRdpSettingsStore@@UEAAHPEBGIIH@Z
0x1400139C8: "BinaryToBase64String failed" ??_C@_0BM@JBONILJA@BinaryToBase64String?5failed?$AA@
0x140012B88: "StringCchCopy failed!" ??_C@_0BG@GKMLPIGA@StringCchCopy?5failed?$CB?$AA@
0x14000B6E0: "public: virtual long __cdecl CRdpSettingsStore::CloseStore(void) __ptr64" ?CloseStore@CRdpSettingsStore@@UEAAJXZ
0x140011328: "const CTsRdpUserSignature::`vftable'{for `ITsRdpSignature'}" ??_7CTsRdpUserSignature@@6BITsRdpSignature@@@
0x140014638: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x140011BC0: "__cdecl _imp_CryptMsgOpenToDecode" __imp_CryptMsgOpenToDecode
0x14000D2D0: "public: virtual long __cdecl CRdpSettingsStore::SetToNullStore(void) __ptr64" ?SetToNullStore@CRdpSettingsStore@@UEAAJXZ
0x14000BD70: "public: virtual int __cdecl CRdpSettingsStore::WriteBool(unsigned short const * __ptr64,unsigned int,int,int) __ptr64" ?WriteBool@CRdpSettingsStore@@UEAAHPEBGIHH@Z
0x140011EE0: "__cdecl _imp_free" __imp_free
0x1400103C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140008520: "public: virtual long __cdecl CTsRdpUserSignature::SetCertificate(void * __ptr64,void * __ptr64) __ptr64" ?SetCertificate@CTsRdpUserSignature@@UEAAJPEAX0@Z
0x14000BD80: "protected: long __cdecl CRdpSettingsStore::ParseStream(void) __ptr64" ?ParseStream@CRdpSettingsStore@@IEAAJXZ
0x140012D50: "Negotiate Security Layer" ??_C@_1DC@BIEEIGCB@?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAL?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1400021FC: TsCryptConstructCertChain
0x14000AFF0: "public: virtual long __cdecl CRdpSettingsStore::CommitStore(class ITsRdpSettingsStream * __ptr64) __ptr64" ?CommitStore@CRdpSettingsStore@@UEAAJPEAVITsRdpSettingsStream@@@Z
0x140011588: "const CRdpSettingsMemoryStream::`vftable'{for `CTSObject'}" ??_7CRdpSettingsMemoryStream@@6BCTSObject@@@
0x140010642: memset
0x140014704: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14001700C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUgvinhieUiwkkozgulinUxlnnlmUwvekozgulinUkozgPrmwUdrmDCfUlyquivUznwGEUwvekozgkozgkrkxsOlyq@piplatformu" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUgvinhieUiwkkozgulinUxlnnlmUwvekozgulinUkozgPrmwUdrmDCfUlyquivUznwGEUwvekozgkozgkrkxsOlyq@piplatformu
0x140013660: "CRdpSettingsStore::GetSignature " ??_C@_0CH@IHCDIIBG@CRdpSettingsStore?3?3GetSignature?5@
0x140011C68: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]