PDB Symbols - cryptsvc.dll (0xE6288151F398248D3B474701F26A8D5E5587DB632493559A1DE5277F15A43731)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cryptsvc.dll Base=0x180000000 SHA-256=E6288151F398248D3B474701F26A8D5E5587DB632493559A1DE5277F15A43731
PDB: cryptsvc.pdb GUID={3518C47A-99A0-9AF1-088F21EEFFA71A5F} Age=1

849 located named symbols:
0x1800087A5: "__cdecl _imp_load_PowerSettingUnregisterNotification" __imp_load_PowerSettingUnregisterNotification
0x18000801C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003800: "void __cdecl DirChangeCallback(void * __ptr64,unsigned char)" ?DirChangeCallback@@YAXPEAXE@Z
0x1800116C8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180005A78: PkiZeroAlloc
0x1800079EC: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180011710: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x18000C688: CreateAndAddToBeRunServiceStopJob
0x180003DD0: "unsigned short * __ptr64 __cdecl GetMetaDataDirectory(unsigned short const * __ptr64)" ?GetMetaDataDirectory@@YAPEAGPEBG@Z
0x18000B0E4: "void __cdecl AddFlushCacheEntry(struct _CRYPTNET_URL_CACHE_ENTRY const * __ptr64,struct _CUCS_ENUM_URL_CACHE_ARG * __ptr64)" ?AddFlushCacheEntry@@YAXPEBU_CRYPTNET_URL_CACHE_ENTRY@@PEAU_CUCS_ENUM_URL_CACHE_ARG@@@Z
0x180011A20: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180019050: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1800117A0: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x1800062C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180014C3C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000BB60: "void __cdecl NextRetryPreFetchJob(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64,struct _FILETIME * __ptr64,struct _FILETIME * __ptr64)" ?NextRetryPreFetchJob@@YAXPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@PEAU_FILETIME@@1@Z
0x180011998: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x180014A5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180011770: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180008708: "__cdecl _imp_load_SetServiceStatus" __imp_load_SetServiceStatus
0x18000C994: FreeTriggerJob
0x18000EE14: Asn1UtilDecodeLength
0x1800170E0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180017078: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180008582: "__cdecl o_qsort" _o_qsort
0x180012088: "HpkpMaxMaxAgeSeconds" ??_C@_1CK@EACIKP@?$AAH?$AAp?$AAk?$AAp?$AAM?$AAa?$AAx?$AAM?$AAa?$AAx?$AAA?$AAg?$AAe?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x180012008: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180012DF0: ".Default" ??_C@_1BC@KICPAAIK@?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180012DB0: "max-age" ??_C@_07PEFKGEJF@max?9age?$AA@
0x180011AF0: "__cdecl _imp_MD5Final" __imp_MD5Final
0x1800117A8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800115D8: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x18000853A: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180019000: "__cdecl _imp_SystemFunction036" __imp_SystemFunction036
0x180008AF0: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180012850: "__cdecl _sz_CRYPTBASE_dll" __sz_CRYPTBASE_dll
0x180011E28: "LastSyncTime" ??_C@_1BK@ECNMLEJL@?$AAL?$AAa?$AAs?$AAt?$AAS?$AAy?$AAn?$AAc?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180008C60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180011498: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18000FCDC: GetTokenUserSidHKCU
0x180011668: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800176B0: "__cdecl _hmod__api_ms_win_service_core_l1_1_0_dll" __hmod__api_ms_win_service_core_l1_1_0_dll
0x180011CC8: "Content" ??_C@_1BA@LONCKALH@?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?$AA@
0x180011750: "__cdecl _imp_CompareStringA" __imp_CompareStringA
0x18000CAC0: I_CryptIsZeroFileTime
0x18000859C: "__cdecl vsnwprintf" _vsnwprintf
0x1800178F8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil
0x180014768: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLN
0x180011A70: "__cdecl _imp_GetSidIdentifierAuthority" __imp_GetSidIdentifierAuthority
0x180011B68: "__cdecl _xp_a" __xp_a
0x18000F6EC: CertGetHpkpHeaderThumbprint
0x180011950: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180008AFC: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x1800114E0: "__cdecl _imp_CryptGetDefaultOIDDllList" __imp_CryptGetDefaultOIDDllList
0x180017718: "struct HINSTANCE__ * __ptr64 __ptr64 hToBeRunJobModule" ?hToBeRunJobModule@@3PEAUHINSTANCE__@@EA
0x180007F7C: "__cdecl RTC_Initialize" _RTC_Initialize
0x180017700: g_ulAdditionalProbeSize
0x1800118A0: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18000B400: "int __cdecl EnumFlushCacheEntryCallback(struct _CRYPTNET_URL_CACHE_ENTRY const * __ptr64,unsigned long,void * __ptr64,void * __ptr64)" ?EnumFlushCacheEntryCallback@@YAHPEBU_CRYPTNET_URL_CACHE_ENTRY@@KPEAX1@Z
0x180012D70: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180008AF0: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x18000CE20: ValidateAutoUpdateCabPreFetchContent
0x18000C968: FreeScanJob
0x1800133E8: "__cdecl _rtc_taa" __rtc_taa
0x180017858: "struct _CUCS_URL_CACHE_DIR_ENTRY * __ptr64 __ptr64 pUrlCacheDirHead" ?pUrlCacheDirHead@@3PEAU_CUCS_URL_CACHE_DIR_ENTRY@@EA
0x180014B88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180012820: "__cdecl _sz_api_ms_win_power_setting_l1_1_0_dll" __sz_api_ms_win_power_setting_l1_1_0_dll
0x180011AD0: bcrypt_NULL_THUNK_DATA
0x180017710: "struct _CUCS_JOB_HEADER * __ptr64 __ptr64 pToBeRunJobHead" ?pToBeRunJobHead@@3PEAU_CUCS_JOB_HEADER@@EA
0x180012760: "DebugFlags" ??_C@_0L@FCMALLDM@DebugFlags?$AA@
0x1800119C8: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180011700: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180011A60: "__cdecl _imp_GetAce" __imp_GetAce
0x180014910: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x1800115C0: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x1800119D8: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x1800084D0: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x180012D1C: "0.2" ??_C@_03PBDDOHNJ@0?42?$AA@
0x18000EE8C: Asn1UtilExtractContentEx
0x180008AF0: "__cdecl _vcrt_initialize" __vcrt_initialize
0x1800118B8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180006290: AddToLinkList
0x180011958: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x180019038: WINHTTP_NULL_THUNK_DATA_DLA
0x1800177B4: "int volatile fUrlCacheSvcStarted" ?fUrlCacheSvcStarted@@3HC
0x180017908: "struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64 __ptr64 pRetrievalPreFetchJobHead" ?pRetrievalPreFetchJobHead@@3PEAU_CUCS_PRE_FETCH_JOB_ENTRY@@EA
0x180011B30: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800087D0: NdrServerCall2
0x180008A2C: "__cdecl _imp_load_I_CryptNetSetUrlCachePreFetchInfo" __imp_load_I_CryptNetSetUrlCachePreFetchInfo
0x180012C08: "SetServiceStatus" ??_C@_1CC@BDPDFHMO@?$AAS?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180012550: "CryptnetPreFetchAfterPublishPreF" ??_C@_1FI@ONNCJHOG@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAA?$AAf?$AAt?$AAe?$AAr?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAP?$AAr?$AAe?$AAF@
0x180011570: "__cdecl _imp_I_CertSrvProtectFunction" __imp_I_CertSrvProtectFunction
0x180012CD0: "1.3.6.1.5.5.7.3.1" ??_C@_0BC@HAIAHLOC@1?43?46?41?45?45?47?43?41?$AA@
0x1800118E8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180011730: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180011A18: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180006330: "unsigned long __cdecl PreFetchJobLruCacheHashUrlId(struct _CRYPTOAPI_BLOB * __ptr64)" ?PreFetchJobLruCacheHashUrlId@@YAKPEAU_CRYPTOAPI_BLOB@@@Z
0x180011510: "__cdecl _imp_CertFreeCRLContext" __imp_CertFreeCRLContext
0x1800133D8: "__cdecl _rtc_iaa" __rtc_iaa
0x180002480: RemovePreFetchJobFromDir
0x1800107BC: I_UrlCacheWriteCryptBlobArray2
0x1800114B0: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x180011650: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180008AF0: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x180011CE0: "MetaData" ??_C@_1BC@EKNHBLNP@?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180006340: FindAndAddToBeRunSessionLogoffJob
0x180019088: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x1800119A0: "__cdecl _imp__o___stdio_common_vswprintf" __imp__o___stdio_common_vswprintf
0x180011B38: "__cdecl _xc_a" __xc_a
0x180010614: I_UrlCacheReadCryptBlobArray
0x180011568: "__cdecl _imp_I_CryptCreateLruEntry" __imp_I_CryptCreateLruEntry
0x180014680: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x1800087DC: "__cdecl _imp_load_SystemFunction036" __imp_load_SystemFunction036
0x180011AB8: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x1800116B0: "__cdecl _imp_FindClose" __imp_FindClose
0x1800127B0: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180011988: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180011D80: "http://ctldl.windowsupdate.com/m" ??_C@_1IO@PIFPNPMO@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAc?$AAt?$AAl?$AAd?$AAl?$AA?4?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAm@
0x180017090: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x1800012A4: I_CertReadBINARYValueFromRegistry
0x180012E08: "S-%lu-" ??_C@_1O@NEDHCEJJ@?$AAS?$AA?9?$AA?$CF?$AAl?$AAu?$AA?9?$AA?$AA@
0x180012DE0: "report-uri" ??_C@_0L@JBCOECMJ@report?9uri?$AA@
0x180006A04: ReportStatusToSCMgr
0x180019078: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x180011B18: "__cdecl _imp_MD5Update" __imp_MD5Update
0x180011488: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x18000EBE4: I_CertGetAutoUpdateConfigParameters
0x180017088: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18000BE7C: "void __cdecl RestoreToken(void * __ptr64)" ?RestoreToken@@YAXPEAX@Z
0x18000B770: "struct _OCSP_REQUEST_INFO * __ptr64 __cdecl GetOcspRequestInfoFromOcspUrl(unsigned short const * __ptr64)" ?GetOcspRequestInfoFromOcspUrl@@YAPEAU_OCSP_REQUEST_INFO@@PEBG@Z
0x180014958: WINHTTP_NULL_THUNK_DATA_DLB
0x180011660: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180012610: "CryptnetPreFetchMaxMaxAgeSeconds" ??_C@_1EC@PIODIMOF@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAa?$AAx?$AAM?$AAa?$AAx?$AAA?$AAg?$AAe?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs@
0x180010038: StringCchPrintfExW
0x180011C44: "__cdecl _guard_iat_table" __guard_iat_table
0x180011788: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180008C3F: memcpy
0x180005030: I_UrlCacheReadAndValidateMetaDataFile
0x180008ADB: "__cdecl _imp_load_GetAppContainerRegistryHandle" __imp_load_GetAppContainerRegistryHandle
0x18000CBB8: ProcessToBeRunServiceStopJob
0x180011518: "__cdecl _imp_CertEnumCRLsInStore" __imp_CertEnumCRLsInStore
0x180011C88: "\Microsoft\CryptnetUrlCache\" ??_C@_1DK@OHJGEGIB@?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAU?$AAr?$AAl?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?2?$AA?$AA@
0x1800119E8: "__cdecl _imp_memset" __imp_memset
0x1800118D0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x180008AF0: "__cdecl _acrt_initialize" __acrt_initialize
0x180011898: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800084E6: "__cdecl initterm" _initterm
0x180017768: "struct _SVCHOST_GLOBAL_DATA * __ptr64 __ptr64 g_pCryptsvcSvcsGlobals" ?g_pCryptsvcSvcsGlobals@@3PEAU_SVCHOST_GLOBAL_DATA@@EA
0x18000855E: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180014B38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800176E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800118F8: "__cdecl _imp_Sleep" __imp_Sleep
0x180011FE8: "Low" ??_C@_17OLKFNCJO@?$AAL?$AAo?$AAw?$AA?$AA@
0x18000E490: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x180011B60: "__cdecl _xi_z" __xi_z
0x180008A50: "__cdecl _imp_load_GetBasicProfileFolderPath" __imp_load_GetBasicProfileFolderPath
0x1800178C8: "long volatile lUrlCacheSvcStartOrStop" ?lUrlCacheSvcStartOrStop@@3JC
0x180011618: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180017938: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprUfioxzxsvUlyquivUznwGEUtolyzoOlyq@urlcache" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprUfioxzxsvUlyquivUznwGEUtolyzoOlyq@urlcache
0x180014CC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0
0x18000850A: "__cdecl _C_specific_handler" __C_specific_handler
0x180011970: "__cdecl _imp_bsearch" __imp_bsearch
0x18000AFE0: MIDL_user_free
0x1800118C0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000B4C8: "struct _OCSP_BASIC_RESPONSE_ENTRY * __ptr64 __cdecl FindOcspResponseEntry(struct _OCSP_CERT_ID * __ptr64,struct _OCSP_BASIC_RESPONSE_INFO * __ptr64)" ?FindOcspResponseEntry@@YAPEAU_OCSP_BASIC_RESPONSE_ENTRY@@PEAU_OCSP_CERT_ID@@PEAU_OCSP_BASIC_RESPONSE_INFO@@@Z
0x180012DA0: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180017770: "struct _CUCS_PRE_FETCH_PARA PreFetchPara" ?PreFetchPara@@3U_CUCS_PRE_FETCH_PARA@@A
0x180008AF0: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180010378: I_UrlCacheCloseHandle
0x180012660: "CryptnetPreFetchMinMaxAgeSeconds" ??_C@_1EC@OCFJMOID@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAi?$AAn?$AAM?$AAa?$AAx?$AAA?$AAg?$AAe?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs@
0x180011CD8: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x180008604: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180007DD4: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x18000B094: "__cdecl TlgDefineProvider_annotation__Tlgg_hCapi2TraceProviderProv" _TlgDefineProvider_annotation__Tlgg_hCapi2TraceProviderProv
0x180012018: "keysvc" ??_C@_1O@IBDLKHPE@?$AAk?$AAe?$AAy?$AAs?$AAv?$AAc?$AA?$AA@
0x1800116E0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000391C: RemoveToBeRunTriggerJobs
0x180008A3E: "__cdecl _imp_load_I_CryptNetSetUrlCacheFlushInfo" __imp_load_I_CryptNetSetUrlCacheFlushInfo
0x180011818: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180008B64: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180008516: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180007D08: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x18000B0A0: PkiRealloc
0x18000852E: "__cdecl cexit" _cexit
0x18000E304: ProcessToBeRunAddHpkpJob
0x180011528: "__cdecl _imp_I_CryptFreeLruCache" __imp_I_CryptFreeLruCache
0x180006D50: InitHpkpPara
0x180007BD8: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180006720: "void __cdecl CryptServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64)" ?CryptServiceMain@@YAXKPEAPEAG@Z
0x180008867: "__cdecl _imp_load_WinHttpCrackUrl" __imp_load_WinHttpCrackUrl
0x1800114F8: "__cdecl _imp_CertFreeCTLContext" __imp_CertFreeCTLContext
0x180008AF0: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x1800119F0: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x180008546: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000E470: SafeAllocaFreeToHeap
0x1800176C0: "__cdecl _hmod__CRYPTBASE_dll" __hmod__CRYPTBASE_dll
0x180005AB0: s_SSCertProtectFunction
0x180007A00: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180011AF8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000397C: CreateSessionProcessEntryAndAddToDir
0x180011880: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180006CAC: CreatePreFetchJobLruCache
0x180011AE0: "__cdecl _imp_MD5Init" __imp_MD5Init
0x180014C8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-2-0
0x180012E70: "-%lu" ??_C@_19DEJHOMFE@?$AA?9?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x180014BC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180011848: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180012860: "__cdecl _sz_WINHTTP_dll" __sz_WINHTTP_dll
0x180002444: "void __cdecl UpdatePreFetchJob(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64)" ?UpdatePreFetchJob@@YAXPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@@Z
0x180012D68: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800190A0: "__cdecl _imp_GetBasicProfileFolderPath" __imp_GetBasicProfileFolderPath
0x180014C14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x1800176D0: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x18000CFC0: ValidateCrlPreFetchContent
0x180012E20: "0x%02hx%02hx%02hx%02hx%02hx%02hx" ??_C@_1EC@MPDKEHCN@?$AA0?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx@
0x180012D38: "1.3.6.1.4.1.311.10.3.60" ??_C@_0BI@CNBGAEGH@1?43?46?41?44?41?4311?410?43?460?$AA@
0x180008AF0: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x18000FA44: MkWStr
0x180014BEC: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x1800176A8: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x180007B84: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x180014620: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll
0x180007478: VerifyStackAvailable
0x1800119E0: "__cdecl _imp_strcmp" __imp_strcmp
0x180011978: "__cdecl _imp__o_qsort" __imp__o_qsort
0x1800128B0: CLSID_NetworkListManager
0x180011550: "__cdecl _imp_I_CryptGetLruEntryData" __imp_I_CryptGetLruEntryData
0x180011F58: "pinrulesstl.cab" ??_C@_1CA@FEODJEJM@?$AAp?$AAi?$AAn?$AAr?$AAu?$AAl?$AAe?$AAs?$AAs?$AAt?$AAl?$AA?4?$AAc?$AAa?$AAb?$AA?$AA@
0x180008552: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x1800116A8: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180017850: "struct _CUCS_LOGOFF_EXIT_JOB_ENTRY * __ptr64 __ptr64 pPendingLogoffExitJobHead" ?pPendingLogoffExitJobHead@@3PEAU_CUCS_LOGOFF_EXIT_JOB_ENTRY@@EA
0x180012DB8: "includeSubDomains" ??_C@_0BC@PBBFHGDC@includeSubDomains?$AA@
0x180019048: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1800118E0: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1800118A8: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x180019060: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x180011850: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180006100: PkiFree
0x1800118C8: "__cdecl _imp_CreateEventA" __imp_CreateEventA
0x18000C9D0: FreeUrlCacheDir
0x180008AF0: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x180011638: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180011960: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180008873: "__cdecl _tailMerge_winhttp_dll" __tailMerge_winhttp_dll
0x18000FAF0: GetTextualSidHKCU
0x180011B78: "__cdecl _xt_a" __xt_a
0x180017124: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x180011910: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x1800117D8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800120B8: "HpkpMinMaxAgeSeconds" ??_C@_1CK@BKPKGKMJ@?$AAH?$AAp?$AAk?$AAp?$AAM?$AAi?$AAn?$AAM?$AAa?$AAx?$AAA?$AAg?$AAe?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x180017910: "struct _CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO * __ptr64 __ptr64 pRetrievalPreFetchJobInfo" ?pRetrievalPreFetchJobInfo@@3PEAU_CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO@@EA
0x180002CA0: I_UrlCacheEnum
0x180011960: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x180001010: ProcessToBeRunUpdateHpkpJob
0x1800114A8: "__cdecl _imp_CryptHashCertificate2" __imp_CryptHashCertificate2
0x180011AB0: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180008B08: DllMain
0x18000E0CC: CreateAndAddToBeRunAddHpkpJob
0x180008AF0: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180008576: "__cdecl o_bsearch" _o_bsearch
0x180007FC0: "__cdecl RTC_Terminate" _RTC_Terminate
0x1800126F8: "CryptnetPreFetchEnable" ??_C@_1CO@GDADEFMG@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x180014CB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180011A80: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180019020: "__cdecl _imp_CryptRetrieveObjectByUrlW" __imp_CryptRetrieveObjectByUrlW
0x1800119B0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180011860: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180011748: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800125B0: "CryptnetPreFetchMinOcspValidityP" ??_C@_1FK@OINGHCHH@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAi?$AAn?$AAO?$AAc?$AAs?$AAp?$AAV?$AAa?$AAl?$AAi?$AAd?$AAi?$AAt?$AAy?$AAP@
0x180011948: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180011588: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x180014BB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180019098: "__cdecl _imp_GetAppContainerRegistryHandle" __imp_GetAppContainerRegistryHandle
0x180014948: CRYPTBASE_NULL_THUNK_DATA_DLB
0x180011620: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800176D8: "__cdecl _hmod__CRYPTNET_dll" __hmod__CRYPTNET_dll
0x1800116D8: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180011A00: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180008B40: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001E20: CreatePreFetchJob
0x180008726: "__cdecl _tailMerge_api_ms_win_power_setting_l1_1_0_dll" __tailMerge_api_ms_win_power_setting_l1_1_0_dll
0x180012870: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x180008552: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x180012D78: "S:(ML;OICI;NW;;;LW)" ??_C@_1CI@JGLHCICE@?$AAS?$AA?3?$AA?$CI?$AAM?$AAL?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AA?$DL?$AAN?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAL?$AAW?$AA?$CJ?$AA?$AA@
0x1800119B8: "__cdecl _imp_memcmp" __imp_memcmp
0x1800074F0: "void __cdecl SvchostPushServiceGlobals(struct _SVCHOST_GLOBAL_DATA * __ptr64)" ?SvchostPushServiceGlobals@@YAXPEAU_SVCHOST_GLOBAL_DATA@@@Z
0x180011798: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x180002860: ProcessToBeRunScanJob
0x18000E6A0: I_CryptIsAppContainerToken
0x180011AC8: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180017084: "__cdecl _isa_enabled" __isa_enabled
0x180011A58: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180014758: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x18000E2D8: FreeAddHpkpJob
0x180012390: "CryptnetPreFetchMaxAfterNextUpda" ??_C@_1HA@IKKIHKLI@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAa?$AAx?$AAA?$AAf?$AAt?$AAe?$AAr?$AAN?$AAe?$AAx?$AAt?$AAU?$AAp?$AAd?$AAa@
0x180014968: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180019058: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x180014C78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800117B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000D0B4: ValidateOcspPreFetchContent
0x1800114B8: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x180014C28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x18000E028: CheckPendingAndScheduleUpdateHpkpJob
0x1800011B0: FreePendingHpkp
0x18000855E: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x180012D68: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180012480: "CryptnetPreFetchMinBeforeNextUpd" ??_C@_1GG@KNLFGMOF@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAi?$AAn?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAN?$AAe?$AAx?$AAt?$AAU?$AAp?$AAd@
0x1800170E8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180012320: "CryptnetPreFetchMinAfterNextUpda" ??_C@_1HA@BAAPEGDP@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAM?$AAi?$AAn?$AAA?$AAf?$AAt?$AAe?$AAr?$AAN?$AAe?$AAx?$AAt?$AAU?$AAp?$AAd?$AAa@
0x180017038: PkiDecodePara
0x180012C30: "%s error: %lu" ??_C@_1BM@PMMOJKFB@?$AA?$CF?$AAs?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x1800115C8: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x18000ADB0: "void __cdecl TeardownServer(unsigned long,int)" ?TeardownServer@@YAXKH@Z
0x1800053A0: "int __cdecl ImpersonateToken(void * __ptr64,void * __ptr64 * __ptr64)" ?ImpersonateToken@@YAHPEAXPEAPEAX@Z
0x180008AF0: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x180011B08: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800117F8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x18000B250: "void __cdecl CompletePreFetchJob(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64)" ?CompletePreFetchJob@@YAXPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@@Z
0x180012DD0: "pin-sha256" ??_C@_0L@NNJBIBLD@pin?9sha256?$AA@
0x180011B50: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180014B10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180011980: "__cdecl _imp_strtoul" __imp_strtoul
0x180019008: CRYPTBASE_NULL_THUNK_DATA_DLA
0x180011980: "__cdecl _imp__o_strtoul" __imp__o_strtoul
0x180011508: "__cdecl _imp_CryptFreeOIDFunctionAddress" __imp_CryptFreeOIDFunctionAddress
0x180012C00: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180003450: I_UrlCacheGetCacheFileName
0x18000AEA0: "void __cdecl TerminationNotify(void * __ptr64,unsigned char)" ?TerminationNotify@@YAXPEAXE@Z
0x180011738: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800147A8: profapi_NULL_THUNK_DATA_DLN
0x1800118B0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1800146E0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000871A: "__cdecl _imp_load_RegisterServiceCtrlHandlerExW" __imp_load_RegisterServiceCtrlHandlerExW
0x180011708: "__cdecl _imp_LocalSize" __imp_LocalSize
0x1800117F0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180007AB4: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180011A30: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x1800078C0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800087C0: NdrServerCallAll
0x1800119D0: "__cdecl _imp__initterm" __imp__initterm
0x180014B74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180008A5C: "__cdecl _tailMerge_profapi_dll" __tailMerge_profapi_dll
0x1800115B0: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18000C43C: AddPendingPreFetchJobToDir
0x180011630: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180011500: "__cdecl _imp_CryptGetDefaultOIDFunctionAddress" __imp_CryptGetDefaultOIDFunctionAddress
0x1800114D8: "__cdecl _imp_CertCreateContext" __imp_CertCreateContext
0x180014C64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000B634: "struct _OCSP_BASIC_RESPONSE_INFO * __ptr64 __cdecl GetOcspBasicResponseInfoFromPreFetchContent(unsigned char const * __ptr64,unsigned long)" ?GetOcspBasicResponseInfoFromPreFetchContent@@YAPEAU_OCSP_BASIC_RESPONSE_INFO@@PEBEK@Z
0x18000B05C: I_CryptIsResetBackCurrentFileTime
0x180014BD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180011530: "__cdecl _imp_I_CryptCreateLruCache" __imp_I_CryptCreateLruCache
0x180017934: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprUfioxzxsvhexUlyquivUznwGEUtolyzoOlyq@urlcachesvc" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprUfioxzxsvhexUlyquivUznwGEUtolyzoOlyq@urlcachesvc
0x180011590: CRYPT32_NULL_THUNK_DATA
0x18000853A: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x180007A14: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180014600: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_0_dll
0x1800059E8: CreateLogoffExitJob
0x1800117D0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180007C28: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x180011B28: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800038C8: FreeLogoffExitJob
0x1800115D0: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x180007E18: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x180011658: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x180011790: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800127A0: "CryptsvcDllCtrl" ??_C@_0BA@GBBEMDLJ@CryptsvcDllCtrl?$AA@
0x180010578: I_UrlCacheGetUrlFileName
0x1800190A8: profapi_NULL_THUNK_DATA_DLA
0x180012890: "__cdecl _sz_CRYPTNET_dll" __sz_CRYPTNET_dll
0x180011E80: "PinRulesLastSyncTime" ??_C@_1CK@DFPGKIHH@?$AAP?$AAi?$AAn?$AAR?$AAu?$AAl?$AAe?$AAs?$AAL?$AAa?$AAs?$AAt?$AAS?$AAy?$AAn?$AAc?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180005F30: "unsigned long __cdecl service_ctrlEx(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?service_ctrlEx@@YAKKKPEAX0@Z
0x180011A50: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180011AE8: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x18000C46C: AddRetrievalPreFetchJob
0x1800176E0: "__cdecl _hmod__profapi_dll" __hmod__profapi_dll
0x18000897D: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x180012C80: CAPI2_PROVIDER
0x180011AA0: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x18000858E: "__cdecl o_strtoul" _o_strtoul
0x180011520: "__cdecl _imp_I_CryptEnumMatchingLruEntries" __imp_I_CryptEnumMatchingLruEntries
0x1800115E8: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180017860: "long volatile lUrlCacheSvcActiveRefCnt" ?lUrlCacheSvcActiveRefCnt@@3JC
0x1800177B8: g_HpkpPara
0x180011928: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180011B48: "__cdecl _xi_a" __xi_a
0x180011800: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180011918: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800115F0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180007B00: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x180011608: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000F808: I_CryptGetToken
0x180007A38: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x180012D00: "2.16.840.1.113730.4.1" ??_C@_0BG@OKBPPGBB@2?416?4840?41?4113730?44?41?$AA@
0x180014988: CRYPTNET_NULL_THUNK_DATA_DLB
0x180019028: CRYPTNET_NULL_THUNK_DATA_DLA
0x180011A88: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180014728: CRYPTNET_NULL_THUNK_DATA_DLN
0x180012400: "CryptnetPreFetchValidityPeriodAf" ??_C@_1HK@BCAPMPNH@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAV?$AAa?$AAl?$AAi?$AAd?$AAi?$AAt?$AAy?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AAA?$AAf@
0x180011FF0: "CryptSvc" ??_C@_1BC@CALJKBMN@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAv?$AAc?$AA?$AA@
0x18000852E: "__cdecl o__cexit" _o__cexit
0x180012D20: "2.16.840.1.101.3.4.2.1" ??_C@_0BH@NLFGIGEG@2?416?4840?41?4101?43?44?42?41?$AA@
0x18000856A: "__cdecl seh_filter_dll" _seh_filter_dll
0x180011998: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180012DEC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180014A98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180014AD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180011778: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180008158: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1800127B0: "__cdecl pRawDllMain" _pRawDllMain
0x1800115A0: "__cdecl _imp_RpcRevertToSelfEx" __imp_RpcRevertToSelfEx
0x1800178B8: "void * __ptr64 __ptr64 hAlgSha256" ?hAlgSha256@@3PEAXEA
0x180008C27: strcmp
0x180011938: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x180011940: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x18000BED0: "unsigned long __cdecl RetrievalPreFetchJobThreadProc(void * __ptr64)" ?RetrievalPreFetchJobThreadProc@@YAKPEAX@Z
0x180008304: "__cdecl _isa_available_init" __isa_available_init
0x1800084C4: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x180011EB0: "authrootstl.cab" ??_C@_1CA@EAIIJPDI@?$AAa?$AAu?$AAt?$AAh?$AAr?$AAo?$AAo?$AAt?$AAs?$AAt?$AAl?$AA?4?$AAc?$AAa?$AAb?$AA?$AA@
0x1800133E0: "__cdecl _rtc_izz" __rtc_izz
0x180011A90: "__cdecl _imp_CheckTokenCapability" __imp_CheckTokenCapability
0x180011890: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180007910: "__cdecl _security_check_cookie" __security_check_cookie
0x180011B40: "__cdecl _xc_z" __xc_z
0x1800088F2: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x180003A80: "void __cdecl UrlCacheSvcProcessExitCallback(void * __ptr64,unsigned char)" ?UrlCacheSvcProcessExitCallback@@YAXPEAXE@Z
0x180014AE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800117E8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002580: ReleaseTokenEntry
0x1800035C8: AddToBeRunJobEx
0x18000E5DC: I_CryptHasAppContainerUserCertCapability
0x180012C90: "1.3.6.1.5.5.7.48.1.1" ??_C@_0BF@MFJEALGE@1?43?46?41?45?45?47?448?41?41?$AA@
0x1800176B8: "__cdecl _hmod__api_ms_win_power_setting_l1_1_0_dll" __hmod__api_ms_win_power_setting_l1_1_0_dll
0x180011ED0: "SyncDeltaTime" ??_C@_1BM@PIDBEOJM@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAe?$AAl?$AAt?$AAa?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18000C0E4: "int __cdecl RetrievalPreFetchJobThreadProcLockAndCheckForServiceStop(struct _CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO * __ptr64)" ?RetrievalPreFetchJobThreadProcLockAndCheckForServiceStop@@YAHPEAU_CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO@@@Z
0x180008AF0: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180012CE8: "1.3.6.1.4.1.311.10.3.3" ??_C@_0BH@EPEFCOBG@1?43?46?41?44?41?4311?410?43?43?$AA@
0x180014C00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x180019040: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180011920: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180011C50: "HpkpEncodedCtl" ??_C@_1BO@GCMDJNKG@?$AAH?$AAp?$AAk?$AAp?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AAd?$AAC?$AAt?$AAl?$AA?$AA@
0x1800116F8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180007AD0: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x1800122B0: "CryptnetPreFetchAfterCurrentTime" ??_C@_1GM@GLFOKFIB@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAA?$AAf?$AAt?$AAe?$AAr?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAT?$AAi?$AAm?$AAe@
0x18000856A: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x1800115F8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180011560: "__cdecl _imp_I_CryptInsertLruEntry" __imp_I_CryptInsertLruEntry
0x180008516: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x18000AED8: AddToMessageLog
0x180008BD0: "__cdecl _chkstk" __chkstk
0x180014708: CRYPTBASE_NULL_THUNK_DATA_DLN
0x180011698: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180014640: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll
0x180019080: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180011758: api-ms-win-core-localization-obsolete-l1-2-0_NULL_THUNK_DATA
0x180012950: "D:(A;;GRGWGX;;;WD)(A;;GRGWGX;;;R" ??_C@_1BGK@IKNMNACI@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAR@
0x18000CCB0: RemoveFromLinkList2
0x18000CD30: ValidateAnyPreFetchContent
0x18000C710: CryptnetUrlCacheSvcAddHpkp
0x180003A54: RemoveFromLinkList
0x1800176C8: "__cdecl _hmod__WINHTTP_dll" __hmod__WINHTTP_dll
0x180011640: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x180011EF0: "disallowedcertstl.cab" ??_C@_1CM@CKICNLJN@?$AAd?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAc?$AAe?$AAr?$AAt?$AAs?$AAt?$AAl?$AA?4?$AAc?$AAa?$AAb?$AA?$AA@
0x180011870: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180011B70: "__cdecl _xp_z" __xp_z
0x180003830: ProcessToBeRunLogoffExitJob
0x180012038: "HpkpMaxDomainCount" ??_C@_1CG@IMDICHI@?$AAH?$AAp?$AAk?$AAp?$AAM?$AAa?$AAx?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x18000898F: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x180019010: "__cdecl _imp_I_CryptNetSetUrlCacheFlushInfo" __imp_I_CryptNetSetUrlCacheFlushInfo
0x180011478: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x180011878: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180014B60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180012060: "HpkpMaxPendingCount" ??_C@_1CI@ODOMBCKJ@?$AAH?$AAp?$AAk?$AAp?$AAM?$AAa?$AAx?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x180011810: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800133F0: "__cdecl _rtc_tzz" __rtc_tzz
0x1800089AD: "__cdecl _tailMerge_cryptnet_dll" __tailMerge_cryptnet_dll
0x180011B88: "__cdecl _guard_fids_table" __guard_fids_table
0x1800036D0: AddTimeOrderedJob
0x180012770: "SYSTEM\CurrentControlSet\Service" ??_C@_0CK@POIICBHI@SYSTEM?2CurrentControlSet?2Service@
0x180011070: "__cdecl load_config_used" _load_config_used
0x180001500: "int __cdecl EnumUrlCacheEntryCallback(struct _CRYPTNET_URL_CACHE_ENTRY const * __ptr64,unsigned long,void * __ptr64,void * __ptr64)" ?EnumUrlCacheEntryCallback@@YAHPEBU_CRYPTNET_URL_CACHE_ENTRY@@KPEAX1@Z
0x180011930: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180010408: I_UrlCacheCreateMetaDataAndContentFiles
0x1800114C0: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x1800067D4: ServiceStart
0x18000F78C: CertParseHpkpHeader
0x1800145E0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x180012140: "Software\Microsoft\Cryptography\" ??_C@_1LM@JFBCIKEE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180011F20: "DisallowedCertSyncDeltaTime" ??_C@_1DI@COFNEENB@?$AAD?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAC?$AAe?$AAr?$AAt?$AAS?$AAy?$AAn?$AAc?$AAD?$AAe?$AAl?$AAt?$AAa?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180011610: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180011600: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180007130: "unsigned long __cdecl GetPreFetchDebugFlags(void)" ?GetPreFetchDebugFlags@@YAKXZ
0x180012D50: "1.3.6.1.4.1.311.10.3.34" ??_C@_0BI@EPLBADII@1?43?46?41?44?41?4311?410?43?434?$AA@
0x180011B58: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180014AFC: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x1800146A0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTNET_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTNET_dll
0x1800114D0: "__cdecl _imp_CryptMsgEncodeAndSignCTL" __imp_CryptMsgEncodeAndSignCTL
0x180011C70: "1.3.6.1.4.1.311.10.3.61" ??_C@_0BI@DEANDFCG@1?43?46?41?44?41?4311?410?43?461?$AA@
0x180011820: "__cdecl _imp_RegQueryValueExA" __imp_RegQueryValueExA
0x180014CA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180011978: "__cdecl _imp_qsort" __imp_qsort
0x180017868: "struct _RTL_CRITICAL_SECTION JobsCriticalSection" ?JobsCriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x18000C60C: CreateAndAddToBeRunDeleteDirJob
0x1800149A8: profapi_NULL_THUNK_DATA_DLB
0x180007E08: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x18000BA5C: "int __cdecl IsPostOcspUrl(unsigned short const * __ptr64)" ?IsPostOcspUrl@@YAHPEBG@Z
0x1800126B0: "CryptnetDefaultFlushExemptSecond" ??_C@_1EE@PFCIHHFE@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAF?$AAl?$AAu?$AAs?$AAh?$AAE?$AAx?$AAe?$AAm?$AAp?$AAt?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd@
0x180011AC0: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x18000CB24: ProcessToBeRunDeleteDirJob
0x180011740: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180012250: "CryptnetPreFetchScanAfterTrigger" ??_C@_1FK@LDDIEIJ@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAS?$AAc?$AAa?$AAn?$AAA?$AAf?$AAt?$AAe?$AAr?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr@
0x180011D00: "Software\Microsoft\SystemCertifi" ??_C@_1HE@EJNFFFPF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi@
0x1800178D8: g_hTestHpkpEvent
0x18000858E: strtoul
0x180011678: "__cdecl _imp_FindCloseChangeNotification" __imp_FindCloseChangeNotification
0x18000AD34: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800103B4: I_UrlCacheCreateCacheFileFromUrlHash
0x1800087E8: "__cdecl _tailMerge_cryptbase_dll" __tailMerge_cryptbase_dll
0x180011858: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180011808: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180014A48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x18000EDBC: I_CertGetAutoUpdateFlags
0x180006180: CertProtectCryptsvcDllCtrl
0x180011A98: api-ms-win-security-base-l1-2-0_NULL_THUNK_DATA
0x1800178B0: "void * __ptr64 __ptr64 hRegisteredWait" ?hRegisteredWait@@3PEAXEA
0x180008AF0: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x1800118D8: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x180011760: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180011558: "__cdecl _imp_I_CryptFindLruEntry" __imp_I_CryptFindLruEntry
0x180011A40: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x180011538: "__cdecl _imp_I_CryptRemoveLruEntry" __imp_I_CryptRemoveLruEntry
0x180011950: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x180011480: "__cdecl _imp_CryptDecodeObjectEx" __imp_CryptDecodeObjectEx
0x1800109F4: I_UrlUnescapeBase64W
0x180011768: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180011718: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180011868: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180012D70: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800128A0: IID_INetworkCostManager
0x1800119A0: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x180011680: "__cdecl _imp_FindFirstChangeNotificationW" __imp_FindFirstChangeNotificationW
0x180008610: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180006D0C: Pki_InitializeCriticalSection
0x180011970: "__cdecl _imp__o_bsearch" __imp__o_bsearch
0x1800170B0: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x18000AFC0: MIDL_user_allocate
0x180008010: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180011780: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180008C33: memcmp
0x1800116F0: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x1800088FE: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x18000CADC: I_CryptSubtractFileTimes
0x18000BBF4: "void __cdecl ProcessRetrievalPreFetchJob(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64)" ?ProcessRetrievalPreFetchJob@@YAXPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@@Z
0x180008AF0: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180008AFC: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x1800127F0: "__cdecl _sz_api_ms_win_service_core_l1_1_0_dll" __sz_api_ms_win_service_core_l1_1_0_dll
0x180011E48: "DisallowedCertLastSyncTime" ??_C@_1DG@DLEPBBGP@?$AAD?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAC?$AAe?$AAr?$AAt?$AAL?$AAa?$AAs?$AAt?$AAS?$AAy?$AAn?$AAc?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800104FC: I_UrlCacheDeleteFile
0x180019070: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180014B4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x1800176F0: g_ulMaxStackAllocSize
0x180014AC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180012200: "CryptnetPreFetchRetrievalTimeout" ??_C@_1FA@GLKNKIMB@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt@
0x1800013A0: PkiNonzeroAlloc
0x18000B014: Capi2TraceLoggingUnregister
0x1800084F2: "__cdecl initterm_e" _initterm_e
0x180005B80: CryptnetUrlCacheSvcTriggerPreFetch
0x1800114A0: "__cdecl _imp_CryptStringToBinaryA" __imp_CryptStringToBinaryA
0x180012120: "HpkpDisable" ??_C@_1BI@MDOCGODE@?$AAH?$AAp?$AAk?$AAp?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x18000F6AC: CertFreeHpkpHeaderValue
0x180007DA8: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x18000F8B8: I_RecursiveCreateDirectory
0x180002500: FreePreFetchJob
0x180006E78: "void __cdecl InitPreFetchPara(void)" ?InitPreFetchPara@@YAXXZ
0x180011B00: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18000CCEC: RemoveToBeRunJob
0x180007BBC: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x180011598: "__cdecl _imp_I_RpcBindingInqLocalClientPID" __imp_I_RpcBindingInqLocalClientPID
0x180011B20: ntdll_NULL_THUNK_DATA
0x180011968: "__cdecl _imp_memcpy" __imp_memcpy
0x180011A48: "__cdecl _imp_SetFileSecurityW" __imp_SetFileSecurityW
0x180008582: qsort
0x180011688: "__cdecl _imp_FindNextChangeNotification" __imp_FindNextChangeNotification
0x180011B10: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180008AF0: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180011A28: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180011A68: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18000B5A0: "int __cdecl GetConditionalMaxAgeTime(struct _CRYPTNET_URL_CACHE_PRE_FETCH_INFO * __ptr64,struct _FILETIME * __ptr64,struct _FILETIME * __ptr64,unsigned long,struct _FILETIME * __ptr64)" ?GetConditionalMaxAgeTime@@YAHPEAU_CRYPTNET_URL_CACHE_PRE_FETCH_INFO@@PEAU_FILETIME@@1K1@Z
0x180014A70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000FEEC: RegCloseHKCU
0x1800114F0: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x180017070: "__cdecl _security_cookie" __security_cookie
0x180011830: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800062FC: FindPendingLogoffExitJob
0x1800176F8: g_pfnAllocate
0x180014660: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WINHTTP_dll" __DELAY_IMPORT_DESCRIPTOR_WINHTTP_dll
0x180008BD0: "__cdecl alloca_probe" _alloca_probe
0x180011E10: "RootDirUrl" ??_C@_1BG@GGMJJPIG@?$AAR?$AAo?$AAo?$AAt?$AAD?$AAi?$AAr?$AAU?$AAr?$AAl?$AA?$AA@
0x180011AD8: "__cdecl _imp_EvtIntReportEventAndSourceAsync" __imp_EvtIntReportEventAndSourceAsync
0x180007E28: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180011548: "__cdecl _imp_I_CryptReleaseLruEntry" __imp_I_CryptReleaseLruEntry
0x180014A34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x1800116D0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800114E8: "__cdecl _imp_CryptInitOIDFunctionSet" __imp_CryptInitOIDFunctionSet
0x1800116E8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000E7B4: RegOpenAppContainerHKCU
0x180014930: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLB
0x180011A08: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800063A8: I_CertSrvLogoffFunction
0x180014A84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180011720: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x1800119C0: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x1800116B8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1800178E0: g_fTestHpkp
0x180011A78: "__cdecl _imp_CopySid" __imp_CopySid
0x1800124F0: "CryptnetPreFetchBeforeNextUpdate" ??_C@_1GA@GHBPGHFC@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAP?$AAr?$AAe?$AAF?$AAe?$AAt?$AAc?$AAh?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAN?$AAe?$AAx?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe@
0x1800178D0: "int g_fLastHasNetworkCost" ?g_fLastHasNetworkCost@@3HA
0x180012C50: "Microsoft-Windows-CAPI2" ??_C@_1DA@PBDCKGPH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAC?$AAA?$AAP?$AAI?$AA2?$AA?$AA@
0x180011840: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800115B8: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x18000E73C: RegCreateAppContainerKeyExU
0x1800119A8: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180011578: "__cdecl _imp_CryptQueryObject" __imp_CryptQueryObject
0x180011A10: "__cdecl _imp_ImpersonateSelf" __imp_ImpersonateSelf
0x1800089A1: "__cdecl _imp_load_CryptRetrieveObjectByUrlW" __imp_load_CryptRetrieveObjectByUrlW
0x1800031E0: I_UrlCacheBytesToWStr
0x180017080: "__cdecl _isa_available" __isa_available
0x1800114C8: "__cdecl _imp_CertFindAttribute" __imp_CertFindAttribute
0x180017750: "void * __ptr64 __ptr64 hServerStopEvent" ?hServerStopEvent@@3PEAXEA
0x1800128C0: "__cdecl _sz_profapi_dll" __sz_profapi_dll
0x180011628: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800117C0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180008576: bsearch
0x180014778: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x180017720: "void * __ptr64 __ptr64 hToBeRunJobEvent" ?hToBeRunJobEvent@@3PEAXEA
0x180011728: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x180007534: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x180011828: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x180011838: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180011958: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x1800176A4: "__cdecl _favor" __favor
0x180006C00: CryptnetUrlCacheSvcServiceStart
0x180007938: "__cdecl _security_init_cookie" __security_init_cookie
0x1800178C0: "void * __ptr64 __ptr64 hPreFetchJobLruCache" ?hPreFetchJobLruCache@@3PEAXEA
0x180012BA0: "long * rglRetrySecondsForRetrievalPreFetchError" ?rglRetrySecondsForRetrievalPreFetchError@@3PAJA
0x1800120E8: "HpkpMinDeltaUpdateSeconds" ??_C@_1DE@GJFGBKBD@?$AAH?$AAp?$AAk?$AAp?$AAM?$AAi?$AAn?$AAD?$AAe?$AAl?$AAt?$AAa?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x180011AA8: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180011990: "__cdecl _imp__cexit" __imp__cexit
0x180011490: "__cdecl _imp_CertAddEncodedCertificateToStore" __imp_CertAddEncodedCertificateToStore
0x180017708: g_pfnFree
0x180014790: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA_DLN
0x180014918: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA_DLB
0x180019090: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA_DLA
0x1800116C0: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x180011A38: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x180019068: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLA
0x1800146C0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_profapi_dll" __DELAY_IMPORT_DESCRIPTOR_profapi_dll
0x180011B80: "__cdecl _xt_z" __xt_z
0x180012CA8: "PinRulesLastError" ??_C@_1CE@ECEFJPBN@?$AAP?$AAi?$AAn?$AAR?$AAu?$AAl?$AAe?$AAs?$AAL?$AAa?$AAs?$AAt?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x180008689: "__cdecl _tailMerge_api_ms_win_service_core_l1_1_0_dll" __tailMerge_api_ms_win_service_core_l1_1_0_dll
0x1800119F8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800116A0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180017900: "struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64 __ptr64 pRetrievalPreFetchJobTail" ?pRetrievalPreFetchJobTail@@3PEAU_CUCS_PRE_FETCH_JOB_ENTRY@@EA
0x180007A78: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x1800070E0: UpdatePreFetchParaFromRegistry
0x180014AAC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180011908: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x18000C128: "void __cdecl RetryPreFetchJob(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64,struct _FILETIME * __ptr64,unsigned long)" ?RetryPreFetchJob@@YAXPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@PEAU_FILETIME@@K@Z
0x180011670: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180012D18: "0.1" ??_C@_03NKBOLEBK@0?41?$AA@
0x1800115E0: RPCRT4_NULL_THUNK_DATA
0x180007B1C: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180008080: "__cdecl _report_gsfailure" __report_gsfailure
0x180007524: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x18000FF14: RegOpenHKCUEx
0x180011888: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180014738: WINHTTP_NULL_THUNK_DATA_DLN
0x180019030: "__cdecl _imp_WinHttpCrackUrl" __imp_WinHttpCrackUrl
0x180003AE0: CreateUrlCacheDir
0x1800170D0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180012E68: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x18000665C: SafeAllocaInitialize
0x180005430: I_CryptGetLowIntegrityUserPath
0x18000FE04: GetUserTextualSidHKCU
0x180019018: "__cdecl _imp_I_CryptNetSetUrlCachePreFetchInfo" __imp_I_CryptNetSetUrlCachePreFetchInfo
0x180011470: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180012028: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1800117E0: "__cdecl _imp_ExitThread" __imp_ExitThread
0x180011FA8: "\Microsoft\CryptnetFlushCache\" ??_C@_1DO@EOOFHHOC@?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAn?$AAe?$AAt?$AAF?$AAl?$AAu?$AAs?$AAh?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?2?$AA?$AA@
0x180005E90: "int __cdecl CreateToBeRunJobThread(struct HINSTANCE__ * __ptr64 * __ptr64)" ?CreateToBeRunJobThread@@YAHPEAPEAUHINSTANCE__@@@Z
0x1800127C0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x180011580: "__cdecl _imp_CryptMemFree" __imp_CryptMemFree
0x180008522: "__cdecl _stdio_common_vswprintf" __stdio_common_vswprintf
0x180012728: "MaxUrlRetrievalByteCount" ??_C@_1DC@FDCEJDMF@?$AAM?$AAa?$AAx?$AAU?$AAr?$AAl?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAa?$AAl?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1800074A0: InternalVerifyStackAvailable
0x180014C50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800117B8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180017760: "struct SERVICE_STATUS_HANDLE__ * __ptr64 __ptr64 sshStatusHandle" ?sshStatusHandle@@3PEAUSERVICE_STATUS_HANDLE__@@EA
0x180011F78: "PinRulesSyncDeltaTime" ??_C@_1CM@BOPLNJBJ@?$AAP?$AAi?$AAn?$AAR?$AAu?$AAl?$AAe?$AAs?$AAS?$AAy?$AAn?$AAc?$AAD?$AAe?$AAl?$AAt?$AAa?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180011988: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x18000E450: SafeAllocaAllocateFromHeap
0x18000AC88: CertLogoffStop
0x18000C808: CryptnetUrlCacheSvcServiceStop
0x180014B24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800115A8: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x1800119A8: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x180003E80: "unsigned long __cdecl ToBeRunJobThreadProc(void * __ptr64)" ?ToBeRunJobThreadProc@@YAKPEAX@Z
0x180011990: "__cdecl _imp__o__cexit" __imp__o__cexit
0x180008522: "__cdecl o___stdio_common_vswprintf" _o___stdio_common_vswprintf
0x180011900: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180011540: "__cdecl _imp_I_CryptWalkAllLruCacheEntries" __imp_I_CryptWalkAllLruCacheEntries
0x18000B578: "void __cdecl FreeRetrievalPreFetchJobInfo(struct _CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO * __ptr64)" ?FreeRetrievalPreFetchJobInfo@@YAXPEAU_CUCS_RETRIEVAL_PRE_FETCH_JOB_INFO@@@Z
0x1800025B0: "int __cdecl UpdatePreFetchJobCacheFile(struct _CUCS_PRE_FETCH_JOB_ENTRY * __ptr64)" ?UpdatePreFetchJobCacheFile@@YAHPEAU_CUCS_PRE_FETCH_JOB_ENTRY@@@Z
0x1800117C8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180011648: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x1800118F0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180005280: I_CryptRecursiveCreateLowIntegrityDirectory
0x180014B9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180008546: "__cdecl execute_onexit_table" _execute_onexit_table
0x1800033D0: I_UrlCacheCreateFile
0x1800084FE: memset
0x180014CDC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180008174: "__cdecl _report_securityfailure" __report_securityfailure
0x180011690: "__cdecl _imp_ReadFile" __imp_ReadFile
0x1800170B8: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]