Generated by JEB on 2019/08/01

PE: C:\Windows\System32\efsutil.dll Base=0x180000000 SHA-256=E605EB30BA2D5D8E1574A10DCD6C9E690DD64FFB425DC2F2657A2BD75654D63A
PDB: efsutil.pdb GUID={3F0DEEE7-0590-97B2-1C3E1544A1AD4474} Age=1

434 located named symbols:
0x1800083D0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180006F4C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000723E: "__cdecl _imp_load_CryptGetProvParam" __imp_load_CryptGetProvParam
0x1800083D8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180007250: "__cdecl _imp_load_CryptSetProvParam" __imp_load_CryptSetProvParam
0x180006D70: "__cdecl FindPESection" _FindPESection
0x1800072E0: "__cdecl _imp_load_CryptDestroyKey" __imp_load_CryptDestroyKey
0x180005424: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1800074BC: "__cdecl _imp_load_SCardFreeMemory" __imp_load_SCardFreeMemory
0x1800067C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180003170: "unsigned long __cdecl EfsUtilpAddCertToStore(struct _CERT_CONTEXT const * __ptr64,unsigned short const * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?EfsUtilpAddCertToStore@@YAKPEBU_CERT_CONTEXT@@PEBGPEAPEBU1@@Z
0x180008350: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18000A124: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008290: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x18000C080: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800074AA: "__cdecl _imp_load_SCardGetCardTypeProviderNameW" __imp_load_SCardGetCardTypeProviderNameW
0x180008150: "__cdecl _imp_CertCreateCertificateContext" __imp_CertCreateCertificateContext
0x18000683C: "__cdecl CRT_INIT" _CRT_INIT
0x1800082D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180008158: "__cdecl _imp_CertVerifyTimeValidity" __imp_CertVerifyTimeValidity
0x18000E098: "__cdecl _imp_DsUnBindW" __imp_DsUnBindW
0x180008508: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800086B8: "RequireValidEKU" ??_C@_1CA@JLEHABLK@?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAV?$AAa?$AAl?$AAi?$AAd?$AAE?$AAK?$AAU?$AA?$AA@
0x1800075C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180008190: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x180008D68: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000E078: CRYPTSP_NULL_THUNK_DATA_DLA
0x18000C690: g_ulAdditionalProbeSize
0x180008430: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x180008120: "__cdecl _imp_CryptImportPublicKeyInfoEx2" __imp_CryptImportPublicKeyInfoEx2
0x180008D08: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180008270: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180007298: "__cdecl _imp_load_CryptSignHashW" __imp_load_CryptSignHashW
0x1800088B0: "Capabilities" ??_C@_1BK@JKLHPNBO@?$AAC?$AAa?$AAp?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x180008440: bcrypt_NULL_THUNK_DATA
0x180008518: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x180008268: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800015F8: "unsigned long __cdecl EfsUtilpDeriveMasterKey(unsigned __int64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsUtilpDeriveMasterKey@@YAK_KPEAPEAEPEAK@Z
0x180008940: "Key Usage" ??_C@_1BE@IHAGLIMF@?$AAK?$AAe?$AAy?$AA?5?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18000E060: "__cdecl _imp_CryptEncrypt" __imp_CryptEncrypt
0x180008660: "__cdecl _sz_ext_ms_win_security_winscard_l1_1_0_dll" __sz_ext_ms_win_security_winscard_l1_1_0_dll
0x18000E020: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x180001134: "__cdecl TlgWrite" _TlgWrite
0x180008538: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800074CE: "__cdecl _imp_load_SCardReleaseContext" __imp_load_SCardReleaseContext
0x180008968: "CertificateHash" ??_C@_1CA@LBKMOPLJ@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1800073C5: "__cdecl _imp_load_DsUnBindW" __imp_load_DsUnBindW
0x180008710: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1GC@KMNDFHGJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1800098C0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x18000E0B0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x180009B28: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x180006D50: "__cdecl XcptFilter" _XcptFilter
0x180008540: "__cdecl _xc_a" __xc_a
0x180001090: TraceLoggingRegister
0x180009B38: CRYPTSP_NULL_THUNK_DATA_DLB
0x18000A070: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x180001260: EfsUtilSmartcardCredsNeededError
0x180008250: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1800084B8: "__cdecl _imp_NCryptOpenStorageProvider" __imp_NCryptOpenStorageProvider
0x1800098B0: NTDSAPI_NULL_THUNK_DATA_DLN
0x180001500: EfsUtilSetSmartcardPin
0x1800081B8: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x180001B68: "unsigned long __cdecl EfsUtilpCheckProviderInfo(struct _CERT_CONTEXT const * __ptr64,unsigned long * __ptr64)" ?EfsUtilpCheckProviderInfo@@YAKPEBU_CERT_CONTEXT@@PEAK@Z
0x180008600: "__cdecl _guard_iat_table" __guard_iat_table
0x18000E010: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x180007572: memcpy
0x18000E0E8: "__cdecl _imp_SCardReleaseContext" __imp_SCardReleaseContext
0x180003E90: EfsUtilParseDataRecoveryPolicy_1_1
0x18000C638: "__cdecl _hmod__ext_ms_win_security_winscard_l1_1_0_dll" __hmod__ext_ms_win_security_winscard_l1_1_0_dll
0x1800083C8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180008470: "__cdecl _imp_memset" __imp_memset
0x180009900: ext-ms-win-security-winscard-l1-1-0_NULL_THUNK_DATA_DLN
0x180006F2F: "__cdecl initterm" _initterm
0x18000A05C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000C678: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180008378: "__cdecl _imp_Sleep" __imp_Sleep
0x1800060A4: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x180008560: "__cdecl _xi_z" __xi_z
0x180008390: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180008200: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800084A8: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180006D44: "__cdecl _C_specific_handler" __C_specific_handler
0x180008360: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000757E: memmove
0x180008240: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180002720: EfsUtilCheckCurrentKeyCapabilities
0x1800071AD: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x18000A0D4: "__cdecl _IMPORT_DESCRIPTOR_DSROLE" __IMPORT_DESCRIPTOR_DSROLE
0x180007262: "__cdecl _imp_load_CryptCreateHash" __imp_load_CryptCreateHash
0x1800089E0: "2.5.29.7" ??_C@_08MGCGAKMB@2?45?429?47?$AA@
0x180008230: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180007304: "__cdecl _imp_load_CryptGenKey" __imp_load_CryptGenKey
0x18000E030: "__cdecl _imp_CryptSetProvParam" __imp_CryptSetProvParam
0x18000E0C0: "__cdecl _imp_SCardFreeMemory" __imp_SCardFreeMemory
0x1800082F8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180007504: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000C620: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x180005808: "unsigned long __cdecl EfspGetDefaultPolSettings(unsigned char * __ptr64 const,struct _EFS_POL_SETTINGS * __ptr64 * __ptr64)" ?EfspGetDefaultPolSettings@@YAKQEAEPEAPEAU_EFS_POL_SETTINGS@@@Z
0x18000560C: "unsigned long __cdecl EfspGetPolRegSettings(struct HKEY__ * __ptr64,struct _EFS_POL_SETTINGS * __ptr64 * __ptr64)" ?EfspGetPolRegSettings@@YAKPEAUHKEY__@@PEAPEAU_EFS_POL_SETTINGS@@@Z
0x180008920: "Algorithm Group" ??_C@_1CA@FKOMDOKK@?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AA?5?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x180008358: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180007474: "__cdecl _imp_load_SCardListReadersW" __imp_load_SCardListReadersW
0x18000A098: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000E068: "__cdecl _imp_CryptGetUserKey" __imp_CryptGetUserKey
0x180008318: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180006D5C: "__cdecl amsg_exit" _amsg_exit
0x1800067A4: MicrosoftTelemetryAssertTriggeredNoArgs
0x180008830: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1HK@PAHDFBCF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180008D04: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180005E70: EfsUtilApplyGroupPolicy
0x180008140: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x180008A80: "1.3.6.1.4.1.311.10.3.4.1" ??_C@_0BJ@KJBHKDLM@1?43?46?41?44?41?4311?410?43?44?41?$AA@
0x1800011E0: "void * __ptr64 __cdecl EfsUtilAllocateHeap(unsigned __int64)" ?EfsUtilAllocateHeap@@YAPEAX_K@Z
0x180008C58: "RSAKeyLength" ??_C@_1BK@FBCEACNO@?$AAR?$AAS?$AAA?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180008CF8: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x180009FF8: "__cdecl _IMPORT_DESCRIPTOR_ncrypt" __IMPORT_DESCRIPTOR_ncrypt
0x180007486: "__cdecl _imp_load_SCardGetStatusChangeW" __imp_load_SCardGetStatusChangeW
0x18000A034: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x1800087C0: "AlgorithmName" ??_C@_1BM@GMOELGKK@?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180008640: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x1800062F8: VerifyStackAvailable
0x180008478: "__cdecl _imp_strcmp" __imp_strcmp
0x180002E88: "unsigned long __cdecl EfsUtilpFormatCertNames(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?EfsUtilpFormatCertNames@@YAKPEBG00PEAPEAG1H@Z
0x180001C38: "unsigned long __cdecl EfsUtilp_CurrentKeyCheck_MasterKey(struct _EFS_CRYPT_KEY const * __ptr64,int * __ptr64)" ?EfsUtilp_CurrentKeyCheck_MasterKey@@YAKPEBU_EFS_CRYPT_KEY@@PEAH@Z
0x180008328: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180008220: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180008128: "__cdecl _imp_CertGetIntendedKeyUsage" __imp_CertGetIntendedKeyUsage
0x180007334: "__cdecl _tailMerge_ntdsapi_dll" __tailMerge_ntdsapi_dll
0x180005B54: "unsigned long __cdecl EfspMergePolRegSettings(struct _EFS_POL_SETTINGS * __ptr64 * __ptr64,unsigned long,struct _EFS_POL_SETTINGS * __ptr64 * __ptr64)" ?EfspMergePolRegSettings@@YAKPEAPEAU_EFS_POL_SETTINGS@@K0@Z
0x180008AA0: "2.5.29.37" ??_C@_09HLKLNMME@2?45?429?437?$AA@
0x1800073E9: "__cdecl _imp_load_SCardEstablishContext" __imp_load_SCardEstablishContext
0x180008388: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x1800082D0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180008198: "__cdecl _imp_CryptEncodeObject" __imp_CryptEncodeObject
0x18000C668: "__cdecl _native_startup_lock" __native_startup_lock
0x180008BD8: "SuiteBAlgorithm" ??_C@_1CA@BOMKDNGD@?$AAS?$AAu?$AAi?$AAt?$AAe?$AAB?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AA?$AA@
0x180001240: DllMain
0x1800089F0: "2.5.29.17" ??_C@_09HICPAIKK@2?45?429?417?$AA@
0x180008B04: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x18000A048: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180008408: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180008460: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005950: "unsigned long __cdecl EfspApplyPolRegSettings(struct _EFS_POL_SETTINGS * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfspApplyPolRegSettings@@YAKPEAU_EFS_POL_SETTINGS@@PEAEPEAK22PEAPEAG3@Z
0x180008340: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180008278: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800081A0: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x180008188: "__cdecl _imp_CertGetEnhancedKeyUsage" __imp_CertGetEnhancedKeyUsage
0x18000A14C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180008218: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008138: "__cdecl _imp_CertGetNameStringW" __imp_CertGetNameStringW
0x180008420: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x18000E018: "__cdecl _imp_CryptGenKey" __imp_CryptGenKey
0x1800083F0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000E058: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x18000C070: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800074E0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180008448: "__cdecl _imp_memcmp" __imp_memcmp
0x180008910: "Length" ??_C@_1O@IONIPGKG@?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800082A8: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x180008688: EFS_API_ERROR
0x180008180: "__cdecl _imp_CertCompareCertificateName" __imp_CertCompareCertificateName
0x1800081A8: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x180008160: "__cdecl _imp_CertDeleteCertificateFromStore" __imp_CertDeleteCertificateFromStore
0x1800084C8: "__cdecl _imp_NCryptSetProperty" __imp_NCryptSetProperty
0x18000A188: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800082B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800084C0: "__cdecl _imp_NCryptGetProperty" __imp_NCryptGetProperty
0x180008178: "__cdecl _imp_CertStrToNameW" __imp_CertStrToNameW
0x180008B00: "(" ??_C@_13LLDNKHDC@?$AA?$CI?$AA?$AA@
0x180008D04: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180006E20: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800086D8: "Impl Type" ??_C@_1BE@EMELPOLH@?$AAI?$AAm?$AAp?$AAl?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180008788: "1.3.6.1.4.1.311.10.3.4" ??_C@_0BH@ELINB@1?43?46?41?44?41?4311?410?43?44?$AA@
0x1800054FC: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180004C08: EfspGetAlternateNameFromCert
0x180002BA4: "unsigned long __cdecl EfsUtilpMakeBasicConstraintExt(struct _CERT_EXTENSION * __ptr64 * __ptr64)" ?EfsUtilpMakeBasicConstraintExt@@YAKPEAPEAU_CERT_EXTENSION@@@Z
0x180009FA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001DF8: "unsigned long __cdecl EfsUtilpGetUserKeyNoProviderCheck(struct _CERT_CONTEXT const * __ptr64,unsigned long,struct _EFS_CRYPT_KEY * __ptr64 * __ptr64)" ?EfsUtilpGetUserKeyNoProviderCheck@@YAKPEBU_CERT_CONTEXT@@KPEAPEAU_EFS_CRYPT_KEY@@@Z
0x1800086F0: "SmartCardPin" ??_C@_1BK@BLOAFCAL@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAP?$AAi?$AAn?$AA?$AA@
0x180008810: "ECDH_P521" ??_C@_1BE@NAPMNIN@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA5?$AA2?$AA1?$AA?$AA@
0x180008248: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800073D7: "__cdecl _imp_load_DsFreeNameResultW" __imp_load_DsFreeNameResultW
0x180008368: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1800097EC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800089AC: "My" ??_C@_15OLMMKIPI@?$AAM?$AAy?$AA?$AA@
0x180006A80: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180008480: "__cdecl _imp__initterm" __imp__initterm
0x180001450: EfsUtilIsSmartcardProvider
0x180008208: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000A174: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180003210: EfsUtilCreateSelfSignedCertificate
0x180004810: EfsUtilGetCertNameFromCertContext
0x180005D90: "unsigned long __cdecl EfspMergePolicyWithLocalConfigAndApply(unsigned char * __ptr64 const,struct _EFS_POL_SETTINGS * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfspMergePolicyWithLocalConfigAndApply@@YAKQEAEPEAU_EFS_POL_SETTINGS@@PEAEPEAK33PEAPEAG4@Z
0x1800089B8: "2.5.29.19" ??_C@_09OGKMCFCE@2?45?429?419?$AA@
0x180008C80: "SOFTWARE\Policies\Microsoft\Wind" ??_C@_1HE@IJFJHJID@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18000A020: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800081C0: CRYPT32_NULL_THUNK_DATA
0x18000222C: "unsigned long __cdecl EfsUtilpCheckCurrentKeyCapabilities(struct _CERT_CONTEXT const * __ptr64,unsigned long,unsigned long * __ptr64)" ?EfsUtilpCheckCurrentKeyCapabilities@@YAKPEBU_CERT_CONTEXT@@KPEAK@Z
0x18000E0E0: "__cdecl _imp_SCardGetCardTypeProviderNameW" __imp_SCardGetCardTypeProviderNameW
0x18000E080: "__cdecl _imp_DsFreeNameResultW" __imp_DsFreeNameResultW
0x180008130: "__cdecl _imp_CryptAcquireCertificatePrivateKey" __imp_CryptAcquireCertificatePrivateKey
0x18000E028: "__cdecl _imp_CryptGetProvParam" __imp_CryptGetProvParam
0x18000C658: "__cdecl _onexitend" __onexitend
0x180008A10: ",L=EFS,OU=EFS File Encryption Ce" ??_C@_1FE@BHFMDOFK@?$AA?0?$AAL?$AA?$DN?$AAE?$AAF?$AAS?$AA?0?$AAO?$AAU?$AA?$DN?$AAE?$AAF?$AAS?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAC?$AAe@
0x180008530: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180007274: "__cdecl _imp_load_CryptGetHashParam" __imp_load_CryptGetHashParam
0x180008438: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180007286: "__cdecl _imp_load_CryptSetHashParam" __imp_load_CryptSetHashParam
0x180008BB8: "TemplateName" ??_C@_1BK@FAHGCJIK@?$AAT?$AAe?$AAm?$AAp?$AAl?$AAa?$AAt?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000E050: "__cdecl _imp_CryptSignHashW" __imp_CryptSignHashW
0x1800082A0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003BB0: EfsUtilGetSmartcardProviderName
0x180008400: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000E0D0: "__cdecl _imp_SCardGetStatusChangeW" __imp_SCardGetStatusChangeW
0x180008510: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180001854: "unsigned long __cdecl EfsUtilp_CurrentKeyCheck_EKU(struct _CERT_CONTEXT const * __ptr64,enum EFS_CERT_EXTENDED_USAGE * __ptr64)" ?EfsUtilp_CurrentKeyCheck_EKU@@YAKPEBU_CERT_CONTEXT@@PEAW4EFS_CERT_EXTENDED_USAGE@@@Z
0x180005584: "void __cdecl EfspFreePolRegSettings(struct _EFS_POL_SETTINGS * __ptr64)" ?EfspFreePolRegSettings@@YAXPEAU_EFS_POL_SETTINGS@@@Z
0x1800084E8: "__cdecl _imp_NCryptFreeObject" __imp_NCryptFreeObject
0x1800083A8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180008550: "__cdecl _xi_a" __xi_a
0x1800083A0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003E80: EfsUtilGetCurrentKey_Deprecated
0x1800081F0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800089C8: "1.3.6.1.4.1.311.20.2.3" ??_C@_0BH@MGBBFDOO@1?43?46?41?44?41?4311?420?42?43?$AA@
0x180008650: "__cdecl _sz_NTDSAPI_dll" __sz_NTDSAPI_dll
0x180008C20: "EfsOptions" ??_C@_1BG@FMCCNKAB@?$AAE?$AAf?$AAs?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180008418: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800011E0: "void * __ptr64 __cdecl EfsUtilpAlloc(unsigned __int64)" ?EfsUtilpAlloc@@YAPEAX_K@Z
0x180003058: "unsigned long __cdecl EfsUtilpMakeCertNames(int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?EfsUtilpMakeCertNames@@YAKHPEBG00PEAPEAG1H@Z
0x1800046B0: EfsUtilFreeParsedRecoveryPolicy
0x1800088F0: "Export Policy" ??_C@_1BM@KJNKFFDA@?$AAE?$AAx?$AAp?$AAo?$AAr?$AAt?$AA?5?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18000E000: "__cdecl _imp_CryptGetKeyParam" __imp_CryptGetKeyParam
0x18000A084: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180008298: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1800020C0: EfsUtilReleaseUserKey
0x18000C680: "__cdecl pRawDllMain" _pRawDllMain
0x180008610: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x180007596: strcmp
0x1800072AA: "__cdecl _imp_load_CryptDestroyHash" __imp_load_CryptDestroyHash
0x180006320: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x1800089FC: "@" ??_C@_13EFKPHINO@?$AA?$EA?$AA?$AA@
0x1800072BC: "__cdecl _imp_load_CryptEncrypt" __imp_load_CryptEncrypt
0x180001D3C: "unsigned long __cdecl EfsUtilpCheckCurrentKeyCapabilitiesCached(unsigned short * __ptr64,unsigned long * __ptr64)" ?EfsUtilpCheckCurrentKeyCapabilitiesCached@@YAKPEAGPEAK@Z
0x180009FBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000E0B8: "__cdecl _imp_SCardEstablishContext" __imp_SCardEstablishContext
0x180006D20: "__cdecl _security_check_cookie" __security_check_cookie
0x180002AE0: "unsigned long __cdecl EfsUtilpEncodeAndAlloc(unsigned long,char const * __ptr64,void const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsUtilpEncodeAndAlloc@@YAKKPEBDPEBXPEAPEAEPEAK@Z
0x180008A68: "1.2.840.10045.4.3.4" ??_C@_0BE@IGLMLKHF@1?42?4840?410045?44?43?44?$AA@
0x180008548: "__cdecl _xc_z" __xc_z
0x1800081C8: "__cdecl _imp_DsRoleGetPrimaryDomainInformation" __imp_DsRoleGetPrimaryDomainInformation
0x18000A00C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000C648: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x1800082E0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180001F30: EfsUtilGetUserKey
0x180008828: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x1800028F0: EfsUtilSetCurrentKey
0x1800087E0: "ECDH_P256" ??_C@_1BE@IHBIMMJF@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA2?$AA5?$AA6?$AA?$AA@
0x18000E038: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x180008E5B: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000722C: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x180008398: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180008988: "NumBackupAttempts" ??_C@_1CE@LPEHAPKJ@?$AAN?$AAu?$AAm?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAA?$AAt?$AAt?$AAe?$AAm?$AAp?$AAt?$AAs?$AA?$AA@
0x180008258: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800081E0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000E040: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x180008238: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800075E0: "__cdecl _chkstk" __chkstk
0x18000E0A8: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x180001FF0: EfsUtilIsSmartcardKey
0x180008520: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x18000C640: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUfgroUlyquivUznwGEUkivxlnkOlyq@efsutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUfgroUlyquivUznwGEUkivxlnkOlyq@efsutil
0x180008348: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000C630: "__cdecl _hmod__NTDSAPI_dll" __hmod__NTDSAPI_dll
0x1800083B8: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x18000E070: "__cdecl _imp_CryptDestroyKey" __imp_CryptDestroyKey
0x18000A110: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180007498: "__cdecl _imp_load_SCardListCardsW" __imp_load_SCardListCardsW
0x180008C78: "EFS" ??_C@_17PLBJKFCC@?$AAE?$AAF?$AAS?$AA?$AA@
0x1800082F0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180008568: "__cdecl _guard_fids_table" __guard_fids_table
0x1800084B0: msvcrt_NULL_THUNK_DATA
0x180008010: "__cdecl load_config_used" _load_config_used
0x180001210: "void __cdecl EfsUtilFreeHeap(void * __ptr64)" ?EfsUtilFreeHeap@@YAXPEAX@Z
0x18000A0AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800084E0: "__cdecl _imp_NCryptCreatePersistedKey" __imp_NCryptCreatePersistedKey
0x18000E090: "__cdecl _imp_DsCrackNamesW" __imp_DsCrackNamesW
0x1800072F2: "__cdecl _imp_load_CryptGetKeyParam" __imp_load_CryptGetKeyParam
0x1800081F8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1800081E8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000435C: EfspParseRecoveryCertificate
0x1800072CE: "__cdecl _imp_load_CryptGetUserKey" __imp_load_CryptGetUserKey
0x180007316: "__cdecl _imp_load_CryptSetKeyParam" __imp_load_CryptSetKeyParam
0x180009FD0: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180008468: "__cdecl _imp_toupper" __imp_toupper
0x180008498: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000C644: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUoryUlyquivUznwGEUkivxlnkOlyq@efslib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUoryUlyquivUznwGEUkivxlnkOlyq@efslib
0x180008BF8: "EfsConfiguration" ??_C@_1CC@KIIGADPD@?$AAE?$AAf?$AAs?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180008958: "ECDH" ??_C@_19JJNKGML@?$AAE?$AAC?$AAD?$AAH?$AA?$AA@
0x1800083B0: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x180008330: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800082E8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000978C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x180008288: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x18000C650: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x1800081D8: DSROLE_NULL_THUNK_DATA
0x180008170: "__cdecl _imp_CertCreateSelfSignCertificate" __imp_CertCreateSelfSignCertificate
0x180008280: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180008338: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000E0C8: "__cdecl _imp_SCardListReadersW" __imp_SCardListReadersW
0x180008D08: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180006F40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180007566: memcmp
0x180004A00: EfsUtilGetCertDisplayInformation
0x18000E0F0: ext-ms-win-security-winscard-l1-1-0_NULL_THUNK_DATA_DLA
0x18000C688: g_ulMaxStackAllocSize
0x18000A0C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800073F5: "__cdecl _tailMerge_ext_ms_win_security_winscard_l1_1_0_dll" __tailMerge_ext_ms_win_security_winscard_l1_1_0_dll
0x180008778: "2.5.29.37.0" ??_C@_0M@MNGGKKAH@2?45?429?437?40?$AA@
0x180008500: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x1800063D0: MicrosoftTelemetryAssertTriggeredWorker
0x1800084A0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180008528: ntdll_NULL_THUNK_DATA
0x180008450: "__cdecl _imp_memcpy" __imp_memcpy
0x180007122: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000E0D8: "__cdecl _imp_SCardListCardsW" __imp_SCardListCardsW
0x18000E008: "__cdecl _imp_CryptSetKeyParam" __imp_CryptSetKeyParam
0x18000C628: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x18000A160: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180008148: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x18000C078: "__cdecl _security_cookie" __security_cookie
0x180002128: "unsigned long __cdecl EfsUtilp_CurrentKeyCheck_SuiteB(struct _EFS_CRYPT_KEY const * __ptr64,int * __ptr64)" ?EfsUtilp_CurrentKeyCheck_SuiteB@@YAKPEBU_EFS_CRYPT_KEY@@PEAH@Z
0x180008300: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000C698: g_pfnAllocate
0x1800075E0: "__cdecl alloca_probe" _alloca_probe
0x180008118: "__cdecl _imp_CertAddCertificateContextToStore" __imp_CertAddCertificateContextToStore
0x180008228: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180008260: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180008410: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800084D0: "__cdecl _imp_NCryptDeleteKey" __imp_NCryptDeleteKey
0x180009FE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800071A1: "__cdecl _imp_load_CryptAcquireContextW" __imp_load_CryptAcquireContextW
0x1800081D0: "__cdecl _imp_DsRoleFreeMemory" __imp_DsRoleFreeMemory
0x180008310: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000C660: "__cdecl _onexitbegin" __onexitbegin
0x1800083E0: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x180008C38: "CacheTimeout" ??_C@_1BK@PMFPHGFE@?$AAC?$AAa?$AAc?$AAh?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x180002760: EfsUtilGetCurrentKey
0x180008168: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x1800084F0: ncrypt_NULL_THUNK_DATA
0x180008210: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800082C0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180002A20: EfsUtilGetCertContextFromCertHash
0x18000E0A0: NTDSAPI_NULL_THUNK_DATA_DLA
0x1800097CC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_winscard_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_winscard_l1_1_0_dll
0x18000E048: "__cdecl _imp_CryptSetHashParam" __imp_CryptSetHashParam
0x180008308: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000C090: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem_SuppressPrivateApiUse
0x180006E54: "__cdecl _security_init_cookie" __security_init_cookie
0x180005140: EfsUtilGetPublicKeyType
0x180008320: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x18000C6A0: g_pfnFree
0x180009F94: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800075A2: wcscmp
0x180001400: EfsUtilReleaseProvider
0x180008428: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180008458: "__cdecl _imp_memmove" __imp_memmove
0x180006008: fnEfsLogTrace1
0x1800087F8: "ECDH_P384" ??_C@_1BE@FNCFBHFO@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA3?$AA8?$AA4?$AA?$AA@
0x1800088D0: "Provider Handle" ??_C@_1CA@JABBOFJE@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?5?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x180009888: CRYPTSP_NULL_THUNK_DATA_DLN
0x180008488: "__cdecl _imp_malloc" __imp_malloc
0x1800084D8: "__cdecl _imp_NCryptFinalizeKey" __imp_NCryptFinalizeKey
0x180007116: "__cdecl _imp_load_LookupAccountSidLocalW" __imp_load_LookupAccountSidLocalW
0x180008698: EFS_SERVICE_DRA_PARSING_FAILED
0x1800083E8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800083F8: "__cdecl _imp_DuplicateToken" __imp_DuplicateToken
0x1800097AC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_NTDSAPI_dll" __DELAY_IMPORT_DESCRIPTOR_NTDSAPI_dll
0x180008AB0: "TrustedPeople" ??_C@_1BM@GBJFPFNG@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAP?$AAe?$AAo?$AAp?$AAl?$AAe?$AA?$AA@
0x1800073B3: "__cdecl _imp_load_DsCrackNamesW" __imp_load_DsCrackNamesW
0x180006F90: "__cdecl _report_gsfailure" __report_gsfailure
0x18000976C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x1800084F8: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x1800083C0: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x180006320: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x180009BB8: NTDSAPI_NULL_THUNK_DATA_DLB
0x180001974: "unsigned long __cdecl GetCertificatePublicKeyType(struct _CERT_CONTEXT const * __ptr64,enum EFS_PUBLIC_KEY_TYPE * __ptr64)" ?GetCertificatePublicKeyType@@YAKPEBU_CERT_CONTEXT@@PEAW4EFS_PUBLIC_KEY_TYPE@@@Z
0x180008A00: "CN=" ??_C@_17KNMKOPI@?$AAC?$AAN?$AA?$DN?$AA?$AA@
0x18000C670: "__cdecl _native_startup_state" __native_startup_state
0x180003E54: "void __cdecl EfsUtilpFree(void * __ptr64)" ?EfsUtilpFree@@YAXPEAX@Z
0x1800061F0: SafeAllocaInitialize
0x180008AD0: "SmartCardKeyCertificate" ??_C@_1DA@HMDKMDKC@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAK?$AAe?$AAy?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?$AA@
0x1800081B0: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180007328: "__cdecl _imp_load_DsBindW" __imp_load_DsBindW
0x180009BE0: ext-ms-win-security-winscard-l1-1-0_NULL_THUNK_DATA_DLB
0x18000E088: "__cdecl _imp_DsBindW" __imp_DsBindW
0x1800062A8: InternalVerifyStackAvailable
0x18000A138: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800082B8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180001290: EfsUtilGetProvider
0x18000A0FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180008490: "__cdecl _imp_free" __imp_free
0x180006DC0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180008380: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800087A0: "PrimitiveType" ??_C@_1BM@JBKFHMPN@?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800086A8: EFS_ERROR_MEMORY
0x1800082C8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180004214: EfspValidatePublicKeyInfo
0x180008370: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180002CAC: "unsigned long __cdecl EfsUtilpMakeAltNameExt(unsigned short * __ptr64,struct _CERT_EXTENSION * __ptr64 * __ptr64)" ?EfsUtilpMakeAltNameExt@@YAKPEAGPEAPEAU_CERT_EXTENSION@@@Z
0x180003940: EfsUtilGetCurrentUserInformation
0x18000A0E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000758A: memset
0x18000A19C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]