Generated by JEB on 2019/08/01

PE: C:\Windows\System32\msauserext.dll Base=0x180000000 SHA-256=E5D95195CDC5C5BDA0ACE5D3220F79BCC425A4B5D04A604F8F36CB1E3AD9E1D3
PDB: msauserext.pdb GUID={065E153F-B5CF-B0F8-B8044B58C7BB2E8C} Age=1

279 located named symbols:
0x180002E3C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004390: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180002C50: "__cdecl FindPESection" _FindPESection
0x180004D58: WlidBho_TraceFunction_Failure
0x1800020B0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180004BA0: WlidSvc_TraceFunction_Warning
0x1800068A4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUvcgUorevUrwvmgrgbUoryUvcvxfgrlmxlmgvcgorgvUoryUlyquivUznwGEUhgwzucOlyq@ExecutionContextLite" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUvcgUorevUrwvmgrgbUoryUvcvxfgrlmxlmgvcgorgvUoryUlyquivUznwGEUhgwzucOlyq@ExecutionContextLite
0x1800060A0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003032: "__cdecl _tailMerge_ext_ms_win_els_elscore_l1_1_0_dll" __tailMerge_ext_ms_win_els_elscore_l1_1_0_dll
0x18000266C: "__cdecl CRT_INIT" _CRT_INIT
0x1800042A0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800045D0: "onecoreuap\ds\ext\live\identity\" ??_C@_0EE@DCJGAMLA@onecoreuap?2ds?2ext?2live?2identity?2@
0x180004D38: LiveSsp_TraceFunction_Warning
0x180003170: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001A30: MsaUser_GetPlatformQualifier
0x180004CE0: Extension_TraceFunction_Failure
0x180002080: "public: virtual void * __ptr64 __cdecl IRegistryFunctions::`vector deleting destructor'(unsigned int) __ptr64" ??_EIRegistryFunctions@@UEAAPEAXI@Z
0x180004C80: TokenProvider_TraceFunction_Failure
0x180004820: WlidSvc_TraceFunction_Enter
0x180004DB0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180004308: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180004D78: WlidModern_TraceFunction_Enter
0x180004840: WlidProv_TraceFunction_Enter
0x180004320: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x1800047D0: WlidModern_TraceProcess
0x1800019D0: MsaUser_WinBioSetMSACredential
0x180004860: WlidModern_TraceFunction_Warning
0x180004428: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004350: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180004CF0: TokenProvider_TraceFunction_Exit
0x180004D28: Extension_TraceFunction_Exit
0x180002C31: "__cdecl XcptFilter" _XcptFilter
0x180004430: "__cdecl _xc_a" __xc_a
0x180004D18: WlidProv_TraceProcess
0x180002FF7: "__cdecl lock" _lock
0x180002200: "public: virtual long __cdecl RegistryFunctions::RegGetValueEx(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegGetValueEx@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG1KPEAKPEAE2@Z
0x180004560: "__cdecl _guard_iat_table" __guard_iat_table
0x180002080: "public: virtual void * __ptr64 __cdecl IRegistryFunctions::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIRegistryFunctions@@UEAAPEAXI@Z
0x180004398: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180004410: "__cdecl _imp_memset" __imp_memset
0x1800047A8: "MsaUser_LoadServiceConfiguration" ??_C@_0CB@DHDEGHIJ@MsaUser_LoadServiceConfiguration@
0x180002E0F: "__cdecl initterm" _initterm
0x1800057AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800068E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004368: "__cdecl _imp_Sleep" __imp_Sleep
0x180004468: "__cdecl _xi_z" __xi_z
0x180004258: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002E1B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800021C0: "public: virtual long __cdecl RegistryFunctions::RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?RegOpenKeyExW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x1800043B8: "__cdecl _imp__onexit" __imp__onexit
0x180004BB0: Microsoft_Windows_LiveIdLevels
0x1800042E8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800030F0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005368: ext-ms-win-els-elscore-l1-1-0_NULL_THUNK_DATA_DLN
0x1800042C0: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180001D70: MsaUser_OverrideTicketRequestForLegacyAdControl
0x180001EE0: MsaUI_CredUIPromptForWindowsCredentials
0x1800042E0: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180002C3D: "__cdecl amsg_exit" _amsg_exit
0x180004CD0: WlidSvc_TraceProcess
0x180001F00: MsaUI_ClearThreadClientContext
0x180004DA8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180004830: WlidCli_TraceFunction_Failure
0x180006000: Microsoft_Windows_LiveId_Context
0x1800043D0: "__cdecl _imp__lock" __imp__lock
0x180002C08: atexit
0x1800025C0: "public: virtual long __cdecl RegistryFunctions::RegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegEnumValueW@RegistryFunctions@@UEAAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x180004328: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004268: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004290: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000300F: "__cdecl _dllonexit" __dllonexit
0x1800024C0: "public: virtual long __cdecl RegistryFunctions::RegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegQueryValueExW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x1800068C8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001E20: DllMain
0x180004708: "MsaUser_GetDeviceTypeParameterVa" ??_C@_0CE@LPGPNOB@MsaUser_GetDeviceTypeParameterVa@
0x1800042C8: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x1800043D8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180001C20: MsaUser_GetDeviceTypeParameterValue
0x180004338: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004280: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180005748: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1800045B0: "MsaUser_FormatUserDisplayName" ??_C@_0BO@JLCDBDHE@MsaUser_FormatUserDisplayName?$AA@
0x180001A90: MsaUser_CanSetParentWindow
0x1800043A8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180002150: "public: virtual long __cdecl RegistryFunctions::RegOpenCurrentUser(unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?RegOpenCurrentUser@RegistryFunctions@@UEAAJKPEAPEAUHKEY__@@@Z
0x180004C60: WlidSvc_TraceFunction_Exit
0x180006090: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800030CC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800047E0: WlidProv_TraceFunction_Exit
0x180004598: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180001F10: MsaUI_CreateClientContext
0x180005824: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180004288: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004CC0: WlidModern_TraceFunction_Failure
0x180002320: "public: virtual long __cdecl RegistryFunctions::RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteKeyW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG@Z
0x180004310: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180001B50: MsaUser_GetUserRegistrySecurityDescriptor
0x180004DA8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180002D00: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004630: "MsaUser_WinBioSetMSACredential" ??_C@_0BP@DMGHCHIF@MsaUser_WinBioSetMSACredential?$AA@
0x1800013E8: "unsigned long __cdecl MsaTracingInternal::TraceFunctionEnter(char const * __ptr64,char const * __ptr64,unsigned long,unsigned short const * __ptr64)" ?TraceFunctionEnter@MsaTracingInternal@@YAKPEBD0KPEBG@Z
0x1800068A8: "class CKoreanDecomposition g_koreanDecomposition" ?g_koreanDecomposition@@3VCKoreanDecomposition@@A
0x1800068B8: "class CScriptAutoDetection g_scriptAutoDetection" ?g_scriptAutoDetection@@3VCScriptAutoDetection@@A
0x180004880: TokenProvider_TraceFunction_Enter
0x18000575C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180004810: Extension_TraceFunction_Enter
0x180004CA0: WlidNsp_TraceFunction_Warning
0x1800016FC: "public: __cdecl CTraceFuncW<long>::~CTraceFuncW<long>(void) __ptr64" ??1?$CTraceFuncW@J@@QEAA@XZ
0x180005340: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001970: MsaUser_IsChildAccount
0x180002250: "public: virtual long __cdecl RegistryFunctions::RegSetKeyValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void const * __ptr64,unsigned long) __ptr64" ?RegSetKeyValueW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG1KPEBXK@Z
0x180004570: "__cdecl _sz_ext_ms_win_els_elscore_l1_1_0_dll" __sz_ext_ms_win_els_elscore_l1_1_0_dll
0x180004D88: CredProv_TraceFunction_Warning
0x180004618: "MsaUser_IsChildAccount" ??_C@_0BH@JHELFBFH@MsaUser_IsChildAccount?$AA@
0x1800028B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800043E0: "__cdecl _imp__initterm" __imp__initterm
0x180002470: "public: virtual long __cdecl RegistryFunctions::RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned long * __ptr64) __ptr64" ?RegQueryInfoKeyW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEAK@Z
0x180004758: "MsaUser_CallerIsLoggedOnUser" ??_C@_0BN@OEFBNLAH@MsaUser_CallerIsLoggedOnUser?$AA@
0x180005810: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180004278: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800057FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004670: "MsaUser_CanSetParentWindow" ??_C@_0BL@MCKGKDBC@MsaUser_CanSetParentWindow?$AA@
0x180001DD0: MsaUser_LoadServiceConfiguration
0x1800068D8: "__cdecl _onexitend" __onexitend
0x180003003: "__cdecl unlock" _unlock
0x180004420: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002340: "public: virtual long __cdecl RegistryFunctions::RegDeleteKeyValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteKeyValueW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG1@Z
0x1800045A4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180004298: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005390: ext-ms-win-els-elscore-l1-1-0_NULL_THUNK_DATA_DLB
0x180002500: "public: virtual long __cdecl RegistryFunctions::RegGetStringValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?RegGetStringValue@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG1PEAGPEAK@Z
0x180004010: "const IRegistryFunctions::`vftable'" ??_7IRegistryFunctions@@6B@
0x180002080: "public: virtual void * __ptr64 __cdecl RegistryFunctions::`scalar deleting destructor'(unsigned int) __ptr64" ??_GRegistryFunctions@@UEAAPEAXI@Z
0x180001F20: MsaUi_CreateClientContextFromWab
0x180004388: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004458: "__cdecl _xi_a" __xi_a
0x180004380: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004248: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800043C8: "__cdecl _imp__unlock" __imp__unlock
0x180004D98: WlidProv_TraceFunction_Warning
0x180001F00: MsaUI_CloseClientContext
0x1800011AC: McGenEventWrite
0x180005798: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001C80: MsaUser_GetDeviceTelemetryInformation
0x1800068F0: "__cdecl pRawDllMain" _pRawDllMain
0x1800043C0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180006680: Microsoft_Windows_LiveIdEnableBits
0x180002620: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180004778: "MsaUser_OverrideTicketRequestFor" ??_C@_0DA@MDGMBCGL@MsaUser_OverrideTicketRequestFor@
0x180004358: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180002B50: "__cdecl _security_check_cookie" __security_check_cookie
0x180004450: "__cdecl _xc_z" __xc_z
0x1800042A8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004C30: WlidBho_TraceFunction_Exit
0x1800068A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUvcgUorevUrwvmgrgbUoryUgizxrmtUivtfoziUlyquivUznwGEUhgwzucOlyq@CRLClientCommonTracing" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUvcgUorevUrwvmgrgbUoryUgizxrmtUivtfoziUlyquivUznwGEUhgwzucOlyq@CRLClientCommonTracing
0x180005320: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_els_elscore_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_els_elscore_l1_1_0_dll
0x180004378: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004238: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180004650: "MsaUser_GetPlatformQualifier" ??_C@_0BN@HEEPELPG@MsaUser_GetPlatformQualifier?$AA@
0x180004C90: WlidCli_TraceFunction_Enter
0x180004D48: Microsoft_Windows_LiveId
0x180004348: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002080: "public: virtual void * __ptr64 __cdecl RegistryFunctions::`vector deleting destructor'(unsigned int) __ptr64" ??_ERegistryFunctions@@UEAAPEAXI@Z
0x1800057C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800042B8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004470: "__cdecl _guard_fids_table" __guard_fids_table
0x1800048A0: Microsoft_Windows_LiveIdKeywords
0x180004418: msvcrt_NULL_THUNK_DATA
0x180004130: "__cdecl load_config_used" _load_config_used
0x180002200: "public: virtual long __cdecl RegistryFunctions::RegGetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64) __ptr64" ?RegGetValueW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG1KPEAKPEAX2@Z
0x180004250: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180004240: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180001240: McGenEventUnregister
0x180004730: "MsaUser_GetDeviceTelemetryInform" ??_C@_0CG@NJGDOCGL@MsaUser_GetDeviceTelemetryInform@
0x180008008: ext-ms-win-els-elscore-l1-1-0_NULL_THUNK_DATA_DLA
0x180006050: "private: static class TraceSession TraceSession::_instance" ?_instance@TraceSession@@0V1@A
0x1800043E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800023B0: "public: virtual long __cdecl RegistryFunctions::RegDeleteTreeW(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteTreeW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBG@Z
0x180004800: WlidCli_TraceFunction_Warning
0x180004270: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180008000: "__cdecl _imp_MappingFreeServices" __imp_MappingFreeServices
0x180004330: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800042B0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800046E0: "MsaUser_GetInlineUxParameterValu" ??_C@_0CC@GKBCLKCP@MsaUser_GetInlineUxParameterValu@
0x1800040A0: "const RegistryFunctions::`vftable'" ??_7RegistryFunctions@@6B@
0x180001F30: MsaUI_LaunchWebAuthFlow
0x180002C25: free
0x1800047F0: Extension_TraceProcess
0x180004C10: TokenProvider_TraceProcess
0x180004340: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180004D68: WlidBho_TraceProcess
0x1800030C0: "__cdecl purecall" _purecall
0x180004300: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180004DB0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180002E30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002170: "public: virtual long __cdecl RegistryFunctions::RegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long) __ptr64" ?RegEnumKeyW@RegistryFunctions@@UEAAJPEAUHKEY__@@KPEAGK@Z
0x180001270: McTemplateU0sd
0x180004D00: WlidModern_TraceFunction_Exit
0x180001F00: MsaUI_RunWizard
0x180004C50: TokenProvider_TraceFunction_Warning
0x180004408: "__cdecl _imp_strrchr" __imp_strrchr
0x180004890: Extension_TraceFunction_Warning
0x1800020F0: "public: virtual long __cdecl RegistryFunctions::RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?RegEnumKeyExW@RegistryFunctions@@UEAAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x1800046B0: "MsaUser_GetUserRegistrySecurityD" ??_C@_0CK@DCJAKHFO@MsaUser_GetUserRegistrySecurityD@
0x180001D10: MsaUser_CallerIsLoggedOnUser
0x1800043F0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180001308: McTemplateU0ssqz
0x1800057E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180006098: "__cdecl _security_cookie" __security_cookie
0x180004850: WlidProv_TraceFunction_Failure
0x1800042F8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800021F0: "public: virtual long __cdecl RegistryFunctions::RegCloseKey(struct HKEY__ * __ptr64) __ptr64" ?RegCloseKey@RegistryFunctions@@UEAAJPEAUHKEY__@@@Z
0x180001AF0: MsaUser_CheckIfAppTrusted
0x1800057D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180001090: McGenControlCallbackV2
0x180004C70: WlidCli_TraceFunction_Exit
0x1800042F0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800068E0: "__cdecl _onexitbegin" __onexitbegin
0x180001BC0: MsaUser_GetInlineUxParameterValue
0x180004260: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004318: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x1800042D0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002D34: "__cdecl _security_init_cookie" __security_init_cookie
0x1800042D8: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180005734: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004690: "MsaUser_CheckIfAppTrusted" ??_C@_0BK@JGGIBJOF@MsaUser_CheckIfAppTrusted?$AA@
0x180001208: McGenEventRegister
0x1800043F8: "__cdecl _imp_malloc" __imp_malloc
0x1800043B0: "__cdecl _imp__purecall" __imp__purecall
0x1800043A0: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180001F00: MsaUI_SetThreadClientContext
0x1800015A4: "unsigned long __cdecl MsaTracingInternal::TraceFunctionWarning(char const * __ptr64,long)" ?TraceFunctionWarning@MsaTracingInternal@@YAKPEBDJ@Z
0x180002E80: "__cdecl _report_gsfailure" __report_gsfailure
0x180002B74: "__cdecl onexit" _onexit
0x180004870: WlidBho_TraceFunction_Enter
0x1800068D0: "__cdecl _native_startup_state" __native_startup_state
0x180004CB0: WlidCli_TraceProcess
0x1800023D0: "public: virtual long __cdecl RegistryFunctions::RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?RegQueryInfoKeyW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x180003026: "__cdecl _imp_load_MappingFreeServices" __imp_load_MappingFreeServices
0x180005784: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004400: "__cdecl _imp_free" __imp_free
0x180002CA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004370: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180006640: "__cdecl _hmod__ext_ms_win_els_elscore_l1_1_0_dll" __hmod__ext_ms_win_els_elscore_l1_1_0_dll
0x180004C40: WlidSvc_TraceFunction_Failure
0x180002550: "public: virtual long __cdecl RegistryFunctions::RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?RegCreateKeyExW@RegistryFunctions@@UEAAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180004360: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180005770: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000200C: McTemplateU0z
0x1800018F0: MsaUser_FormatUserDisplayName
0x180003151: memset
0x180005838: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180004C20: WlidBho_TraceFunction_Warning

[JEB Decompiler by PNF Software]