PDB Symbols - cngprovider.dll (0xF3A2926C127F54EA50B568587F1AE96A8553A267F229226052CAE811F867B155)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cngprovider.dll Base=0x180000000 SHA-256=F3A2926C127F54EA50B568587F1AE96A8553A267F229226052CAE811F867B155
PDB: cngprovider.pdb GUID={8CB5CF64-879B-0D25-F094158CC910A25D} Age=1

510 located named symbols:
0x18000BFC0: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x18000C2D8: "Unique Name" ??_C@_1BI@EJLGBNL@?$AAU?$AAn?$AAi?$AAq?$AAu?$AAe?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000B888: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180007D4C: "__cdecl drr_GetCertificateInformation" _drr_GetCertificateInformation
0x180009294: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000B6A8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000B730: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x1800096B0: "__cdecl FindPESection" _FindPESection
0x18000B958: "__cdecl _imp__lfind_s" __imp__lfind_s
0x18000D2AC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000D0B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x1800012F8: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x18000F060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000B618: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000B970: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x18000BCB0: "B" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x18000BCC0: "ForceRemove" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180003720: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x180008D7C: "__cdecl CRT_INIT" _CRT_INIT
0x18000B758: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003E60: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x180005040: "public: virtual long __cdecl CCCNGProvider::CloseStore(void) __ptr64" ?CloseStore@CCCNGProvider@@UEAAJXZ
0x180003204: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180008CE4: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180005AE0: "public: virtual long __cdecl CCCNGProvider::GetTokens(unsigned long,unsigned long * __ptr64,struct DRR_ROAMING_TOKEN_SET * __ptr64 * __ptr64) __ptr64" ?GetTokens@CCCNGProvider@@UEAAJKPEAKPEAPEAUDRR_ROAMING_TOKEN_SET@@@Z
0x1800038C0: WppControlCallback
0x180009A60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000B530: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18000BFF0: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x18000B678: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000B570: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x18000D07C: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x18000BFA0: "__cdecl GUID_435eb1b8_b681_4569_b862_551e13764315" _GUID_435eb1b8_b681_4569_b862_551e13764315
0x1800081A0: "__cdecl drr_BaseNameFilter_Dpapi" _drr_BaseNameFilter_Dpapi
0x18000BF28: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18000B2F0: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x18000BCA4: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x180003B20: DllGetClassObject
0x18000682C: "private: unsigned long __cdecl CCCNGProvider::GetLastChangeTime(struct _FILETIME * __ptr64,unsigned char * __ptr64) __ptr64" ?GetLastChangeTime@CCCNGProvider@@AEAAKPEAU_FILETIME@@PEAE@Z
0x180008D30: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x180001290: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x18000D1BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000D11C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x1800077BC: "__cdecl drr_SecureZeroFile" _drr_SecureZeroFile
0x18000B6D0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000CFB8: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18000BDD0: "TypeLib" ??_C@_1BA@JIHHIEDE@?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?$AA@
0x180003544: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CCCNGProvider> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCCCNGProvider@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000131C: "long __cdecl ATL::AtlHresultFromWin32(unsigned long)" ?AtlHresultFromWin32@ATL@@YAJK@Z
0x18000B568: "__cdecl _imp_UnRegisterTypeLib" __imp_UnRegisterTypeLib
0x180006820: "public: virtual long __cdecl CCCNGProvider::GetSupportedFilters(struct DRR_SUPPORTED_FILTER_SET * __ptr64 * __ptr64) __ptr64" ?GetSupportedFilters@CCCNGProvider@@UEAAJPEAPEAUDRR_SUPPORTED_FILTER_SET@@@Z
0x18000B4F8: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x18000BBF0: "API-MS-Win-Core-LocalRegistry-L1" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x18000BA18: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000B010: "__cdecl _imp__recalloc" __imp__recalloc
0x1800025D8: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEAGH@Z
0x18000B828: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1800012A8: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x18000C2F0: "OpaqueTransport" ??_C@_1CA@NCCKFGCC@?$AAO?$AAp?$AAa?$AAq?$AAu?$AAe?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x180003814: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x180003814: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18000B668: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180001330: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x1800017C4: "public: int __cdecl ATL::CRegParser::CParseBuffer::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@CParseBuffer@CRegParser@ATL@@QEAAHPEBGH@Z
0x180009691: "__cdecl XcptFilter" _XcptFilter
0x18000B518: "__cdecl _imp_CertAddSerializedElementToStore" __imp_CertAddSerializedElementToStore
0x18000BA20: "__cdecl _xc_a" __xc_a
0x18000BC58: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000D180: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x18000B640: "__cdecl _imp_FindClose" __imp_FindClose
0x18000B728: "__cdecl _imp_SetThreadLocale" __imp_SetThreadLocale
0x1800012D0: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x180009969: "__cdecl lock" _lock
0x18000B9E0: "__cdecl _imp_NCryptOpenStorageProvider" __imp_NCryptOpenStorageProvider
0x18000B4E8: "__cdecl _imp_CryptHashData" __imp_CryptHashData
0x1800018F0: "public: virtual long __cdecl ATL::CRegObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRegObject@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180003400: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CCCNGProvider> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCCCNGProvider@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180009685: "__cdecl callnewh" _callnewh
0x18000B660: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180001718: "public: long __cdecl ATL::CExpansionVector::ClearReplacements(void) __ptr64" ?ClearReplacements@CExpansionVector@ATL@@QEAAJXZ
0x18000BB90: "__cdecl _guard_iat_table" __guard_iat_table
0x18000B4F0: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x180009A32: memcpy
0x180003D90: "public: virtual long __cdecl ATL::CAtlModuleT<class CCNGProviderModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCCNGProviderModule@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x18000B6F0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000B8F8: "__cdecl _imp_memset" __imp_memset
0x18000986F: "__cdecl initterm" _initterm
0x18000B8A8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000D234: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000F7D0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000B848: "__cdecl _imp_Sleep" __imp_Sleep
0x18000BDE0: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x18000BA60: "__cdecl _xi_z" __xi_z
0x18000B608: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000B5C0: USERENV_NULL_THUNK_DATA
0x180004068: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x180009256: "__cdecl _C_specific_handler" __C_specific_handler
0x18000B8E8: "__cdecl _imp__onexit" __imp__onexit
0x18000F658: WPP_REGISTRATION_GUIDS
0x18000D270: "__cdecl _IMPORT_DESCRIPTOR_DSROLE" __IMPORT_DESCRIPTOR_DSROLE
0x1800095C8: malloc
0x18000B6B8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000BFB0: "__cdecl GUID_b3179149_2b99_48b2_b44b_11aa2034c1a3" _GUID_b3179149_2b99_48b2_b44b_11aa2034c1a3
0x18000BF60: "Module_Raw" ??_C@_1BG@JBACFMF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAR?$AAa?$AAw?$AA?$AA@
0x18000B7C8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800099BC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000C310: GUID_ATLVer70
0x180001920: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x180003AF0: DllCanUnloadNow
0x18000B7A8: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18000BBD8: CLSID_StdComponentCategoriesMgr
0x18000BDA8: "SYSTEM" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x18000B808: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000F630: WPP_MAIN_CB
0x180004520: "long __cdecl ATL::AtlLoadTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,struct ITypeLib * __ptr64 * __ptr64)" ?AtlLoadTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBGPEAPEAGPEAPEAUITypeLib@@@Z
0x1800019C0: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegObject@ATL@@UEAAPEAXI@Z
0x18000D158: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000B790: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000969D: "__cdecl amsg_exit" _amsg_exit
0x18000B940: "__cdecl _imp__callnewh" __imp__callnewh
0x18000BC78: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x18000F7AC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUxivwilznfgroUlyquivUznwGEUkivxlnkOlyq@credroamutil" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUxivwilznfgroUlyquivUznwGEUkivxlnkOlyq@credroamutil
0x18000C010: "\Required Categories" ??_C@_1CK@IFBKBFAA@?$AA?2?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000BCA8: "M" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x180005170: "public: virtual long __cdecl CCCNGProvider::AddToken(struct DRR_ROAMING_TOKEN * __ptr64) __ptr64" ?AddToken@CCCNGProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@@Z
0x18000D1A8: "__cdecl _IMPORT_DESCRIPTOR_ncrypt" __IMPORT_DESCRIPTOR_ncrypt
0x18000BF90: GUID_NULL
0x18000B558: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18000B910: "__cdecl _imp__lock" __imp__lock
0x18000B5A0: OLEAUT32_NULL_THUNK_DATA
0x1800033E0: "public: virtual long __cdecl CCCNGProvider::SetFilterOptions(struct DRR_FILTER_OPTIONS const * __ptr64) __ptr64" ?SetFilterOptions@CCCNGProvider@@UEAAJPEBUDRR_FILTER_OPTIONS@@@Z
0x18000B588: "__cdecl _imp_LoadTypeLib" __imp_LoadTypeLib
0x18000B318: "const CCNGProviderModule::`vftable'" ??_7CCNGProviderModule@@6B@
0x180009668: atexit
0x18000F6B0: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x18000B648: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x18000B820: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180003814: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18000B140: "const ATL::CComObjectCached<class ATL::CComClassFactory>::`vftable'" ??_7?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x18000B7D8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000B898: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000BBA0: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x18000B628: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000B8A0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1800081F0: "__cdecl drr_BaseNameFilter_KeyContainer" _drr_BaseNameFilter_KeyContainer
0x180001920: "public: virtual long __cdecl CCCNGProvider::CompareTokens(struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64,int * __ptr64) __ptr64" ?CompareTokens@CCCNGProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@0PEAH@Z
0x18000B0B0: ?_entries@?1??_GetEntries@CCCNGProvider@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x18000C448: "1.2.840.113556.1.5.284.2" ??_C@_0BJ@JHGLHABJ@1?42?4840?4113556?41?45?4284?42?$AA@
0x18000B768: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180009981: "__cdecl _dllonexit" __dllonexit
0x18000B510: "__cdecl _imp_CryptHashCertificate" __imp_CryptHashCertificate
0x18000BE48: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000F7B0: "__cdecl _native_startup_lock" __native_startup_lock
0x1800039C8: DllMain
0x180007598: "private: unsigned long __cdecl CCCNGProvider::_drr_NgKspOpenKeyByTokenId(struct DRR_ID * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?_drr_NgKspOpenKeyByTokenId@CCCNGProvider@@AEAAKPEAUDRR_ID@@PEA_K@Z
0x18000B798: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x18000D0F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000B980: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000B960: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18000D0E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x180006740: "public: virtual long __cdecl CCCNGProvider::HasBeenModified(struct DRR_PROV_VER_INFO * __ptr64,int * __ptr64) __ptr64" ?HasBeenModified@CCCNGProvider@@UEAAJPEAUDRR_PROV_VER_INFO@@PEAH@Z
0x18000B918: "__cdecl _imp_realloc" __imp_realloc
0x18000B9A0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000B7E0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000B720: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C2C0: "Modified" ??_C@_1BC@LJMDACDF@?$AAM?$AAo?$AAd?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?$AA@
0x18000B560: KERNEL32_NULL_THUNK_DATA
0x180003320: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18000B610: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008CF0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000B8C8: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180003800: "public: virtual unsigned long __cdecl ATL::CComObject<class CCCNGProvider>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCCCNGProvider@@@ATL@@UEAAKXZ
0x18000B4E0: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x18000987B: "__cdecl errno" _errno
0x18000F050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180009998: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003E74: "long __cdecl ATL::AtlRegisterTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64)" ?AtlRegisterTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBG@Z
0x18000BFE0: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x18000BA00: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000B8D8: "__cdecl _imp_memcmp" __imp_memcmp
0x180008380: DRR_SecureFreeRoamingToken
0x180003790: "public: virtual unsigned long __cdecl ATL::CComObject<class CCCNGProvider>::Release(void) __ptr64" ?Release@?$CComObject@VCCCNGProvider@@@ATL@@UEAAKXZ
0x180008BEC: "__cdecl drr_AddGuidToList" _drr_AddGuidToList
0x1800019C0: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegObject@ATL@@UEAAPEAXI@Z
0x18000C550: "Microsoft\Crypto\RSA\" ??_C@_1CM@BBJNBFHL@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?2?$AAR?$AAS?$AAA?$AA?2?$AA?$AA@
0x18000B5F8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18000D284: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18000C320: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000BCF0: "Delete" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x18000B770: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000BCD8: "NoRemove" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x18000B9F0: "__cdecl _imp_NCryptGetProperty" __imp_NCryptGetProperty
0x180001A00: "public: virtual long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@UEAAJPEBG0@Z
0x18000B7B0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180009760: "__cdecl ValidateImageBase" _ValidateImageBase
0x180007A9C: "__cdecl drr_DupStringN" _drr_DupStringN
0x18000B708: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180008ABC: DRR_GetRoamingTokenFromSet
0x18000B630: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x180007304: "private: unsigned long __cdecl CCCNGProvider::_drr_NgKspCreateRoamingTokenByNameMap(unsigned __int64,struct DRR_ROAMING_TOKEN * __ptr64,int,struct DRR_ROAMING_TOKEN * __ptr64 * __ptr64) __ptr64" ?_drr_NgKspCreateRoamingTokenByNameMap@CCCNGProvider@@AEAAK_KPEAUDRR_ROAMING_TOKEN@@HPEAPEAU2@@Z
0x18000BE00: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18000D090: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180007978: "__cdecl drr_FindFirstByType" _drr_FindFirstByType
0x1800048BC: WPP_SF_
0x18000D25C: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x1800089A4: DRR_CreateDirectory
0x18000B6F8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18000C528: "Microsoft\Protect\" ??_C@_1CG@MIMEPGDA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AA?2?$AA?$AA@
0x18000B818: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x180008FC0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B928: "__cdecl _imp__initterm" __imp__initterm
0x18000D248: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180001E2C: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG@Z
0x18000B5E8: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18000227C: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x18000F5F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUdrmxivwUxmtUlyquivUznwGEUkivxlnkOlyq@cngprovider" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUdrmxivwUxmtUlyquivUznwGEUkivxlnkOlyq@cngprovider
0x1800013EC: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180009550: "__cdecl recalloc" _recalloc
0x18000BD00: "Component Categories" ??_C@_1CK@OEKPKBNA@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000B700: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18000D0CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000B538: CRYPT32_NULL_THUNK_DATA
0x1800033A0: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x180007B0C: "__cdecl drr_GetKeyContainerNameFromCertificate" _drr_GetKeyContainerNameFromCertificate
0x18000BD88: "SAM" ??_C@_17OMAOINJK@?$AAS?$AAA?$AAM?$AA?$AA@
0x18000F7C0: "__cdecl _onexitend" __onexitend
0x18000BE18: "HKPD" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x180003E40: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x180009975: "__cdecl unlock" _unlock
0x180001C74: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x18000BA10: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000CFB0: "__cdecl _pobjMap_CCCNGProvider" __pobjMap_CCCNGProvider
0x18000B650: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18000C32C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18000B760: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000B5B0: USER32_NULL_THUNK_DATA
0x18000B900: "__cdecl _imp__lsearch_s" __imp__lsearch_s
0x18000B8B8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1800036A0: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x18000B9B8: "__cdecl _imp_NCryptFreeObject" __imp_NCryptFreeObject
0x18000B868: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000BA50: "__cdecl _xi_a" __xi_a
0x18000BF08: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18000B860: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000B600: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180003330: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000B908: "__cdecl _imp__unlock" __imp__unlock
0x18000F600: "long (__cdecl* __ptr64 ATL::_pPerfRegFunc)(struct HINSTANCE__ * __ptr64)" ?_pPerfRegFunc@ATL@@3P6AJPEAUHINSTANCE__@@@ZEA
0x18000B8C0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000BCAC: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x18000BD78: "Mime" ??_C@_19HLLLM@?$AAM?$AAi?$AAm?$AAe?$AA?$AA@
0x18000BE98: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x18000B5D0: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000B5A8: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x180009894: "__cdecl invoke_watson" _invoke_watson
0x180003680: "public: virtual long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000F048: WPP_GLOBAL_Control
0x18000C08C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000D144: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000B9C8: "__cdecl _imp_NCryptExportKey" __imp_NCryptExportKey
0x18000F618: "public: static struct _GUID ATL::CAtlModule::m_libid" ?m_libid@CAtlModule@ATL@@2U_GUID@@A
0x18000C040: "CLSID\" ??_C@_1O@FHBGLCIO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x18000C0B0: WPP_ThisDir_CTLGUID_CtlGuid
0x1800048E0: WPP_SF_D
0x18000B6D8: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x180009448: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000F7D8: "__cdecl pRawDllMain" _pRawDllMain
0x180003D30: DllUnregisterServer
0x1800033D0: "public: static long __cdecl CCCNGProvider::UpdateRegistry(int)" ?UpdateRegistry@CCCNGProvider@@SAJH@Z
0x18000B8F0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18000F710: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180001C30: "public: virtual long __cdecl ATL::CRegObject::ClearReplacements(void) __ptr64" ?ClearReplacements@CRegObject@ATL@@UEAAJXZ
0x180008CD8: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180006CA4: "long __cdecl _drr_GetCNGStringProperty(unsigned __int64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?_drr_GetCNGStringProperty@@YAJ_KPEBGPEAPEAG@Z
0x18000B830: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180009270: "__cdecl _security_check_cookie" __security_check_cookie
0x18000F7A8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18000BA48: "__cdecl _xc_z" __xc_z
0x18000B548: "__cdecl _imp_DsRoleGetPrimaryDomainInformation" __imp_DsRoleGetPrimaryDomainInformation
0x180006E0C: "private: unsigned long __cdecl CCCNGProvider::_drr_NgKspLoad(void) __ptr64" ?_drr_NgKspLoad@CCCNGProvider@@AEAAKXZ
0x18000D1F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000B778: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000C0A0: LIBID_DIMSROAMLib
0x18000B718: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000B9B0: "__cdecl _imp_NCryptEnumKeys" __imp_NCryptEnumKeys
0x180008860: "__cdecl drr_GetFileNameFromId" _drr_GetFileNameFromId
0x1800083B8: DRR_AddRoamingTokenToSet
0x18000B5B8: "__cdecl _imp_GetUserProfileDirectoryW" __imp_GetUserProfileDirectoryW
0x18000B4D8: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x18000B110: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x18000B5E0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000B858: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000BE38: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18000BE70: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x18000B6C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180008B90: ComparePrivKeys
0x18000B500: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x180009A80: "__cdecl _chkstk" __chkstk
0x18000B680: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x18000BD60: "Hardware" ??_C@_1BC@MAICEHGI@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x18000152C: "public: int __cdecl ATL::CExpansionVector::Add(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Add@CExpansionVector@ATL@@QEAAHPEBG0@Z
0x18000B920: "__cdecl _imp__errno" __imp__errno
0x180009888: "__cdecl invalid_parameter" _invalid_parameter
0x18000995D: realloc
0x18000F660: "class CCNGProviderModule _AtlModule" ?_AtlModule@@3VCCNGProviderModule@@A
0x18000BD90: "SECURITY" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x18000B690: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18000F760: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x180008250: "__cdecl drr_BaseNameFilter_Certificate" _drr_BaseNameFilter_Certificate
0x18000B7F8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800047F8: "public: virtual __cdecl ATL::CAtlModule::~CAtlModule(void) __ptr64" ??1CAtlModule@ATL@@UEAA@XZ
0x180004920: "public: virtual long __cdecl CCCNGProvider::OpenStore(struct DRR_CRED_FILTER_SET * __ptr64) __ptr64" ?OpenStore@CCCNGProvider@@UEAAJPEAUDRR_CRED_FILTER_SET@@@Z
0x180001920: "public: virtual long __cdecl CCCNGProvider::ResolveConflict(struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64 * __ptr64) __ptr64" ?ResolveConflict@CCCNGProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@0PEAPEAU2@@Z
0x18000B870: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x18000BE28: "HKDD" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x1800048B0: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x18000B800: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18000D20C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000B788: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000BA68: "__cdecl _guard_fids_table" __guard_fids_table
0x18000B968: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18000B810: "__cdecl _imp_CharNextW" __imp_CharNextW
0x18000B9A8: msvcrt_NULL_THUNK_DATA
0x18000B3D0: "__cdecl load_config_used" _load_config_used
0x18000D16C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180001910: "public: virtual unsigned long __cdecl ATL::CRegObject::AddRef(void) __ptr64" ?AddRef@CRegObject@ATL@@UEAAKXZ
0x18000D1D0: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180007A24: "__cdecl drr_FindNextByType" _drr_FindNextByType
0x18000BC48: "RegDeleteKeyExW" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x18000D2C0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18000F610: "public: static bool ATL::CAtlBaseModule::m_bInitFailed" ?m_bInitFailed@CAtlBaseModule@ATL@@2_NA
0x18000C5B0: "Microsoft\SystemCertificates\My\" ??_C@_1FK@BDALGPPH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAs?$AA?2?$AAM?$AAy?$AA?2@
0x18000BDF0: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x18000C610: "Microsoft\SystemCertificates\Req" ??_C@_1GE@HAEGBHMC@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAs?$AA?2?$AAR?$AAe?$AAq@
0x18000B930: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000C090: "APPID" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x18000192C: "public: virtual __cdecl ATL::CRegObject::~CRegObject(void) __ptr64" ??1CRegObject@ATL@@UEAA@XZ
0x18000B710: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000375C: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000375C: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000C340: "Microsoft Smart Card Key Storage" ??_C@_1FE@DJIHBEMA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAm?$AAa?$AAr?$AAt?$AA?5?$AAC?$AAa?$AAr?$AAd?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe@
0x180002798: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x18000B7E8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000B780: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005140: "public: virtual long __cdecl CCCNGProvider::GetDpapiMkGuids(struct GUID_LIST * __ptr64 * __ptr64) __ptr64" ?GetDpapiMkGuids@CCCNGProvider@@UEAAJPEAPEAUGUID_LIST@@@Z
0x1800095BC: free
0x18000B550: DSROLE_NULL_THUNK_DATA
0x18000B7F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800046C8: "public: long __cdecl ATL::CAtlComModule::UnregisterServer(int,struct _GUID const * __ptr64) __ptr64" ?UnregisterServer@CAtlComModule@ATL@@QEAAJHPEBU_GUID@@@Z
0x18000B9D0: "__cdecl _imp_NCryptFreeBuffer" __imp_NCryptFreeBuffer
0x1800095B0: "__cdecl purecall" _purecall
0x18000B7B8: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180008070: "__cdecl drr_IsGuidString" _drr_IsGuidString
0x18000C0C0: "Microsoft Enhanced Cryptographic" ??_C@_1FO@GBKEFGLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAd?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc@
0x18000F000: "__cdecl _objMap_CCCNGProvider" __objMap_CCCNGProvider
0x18000BDB8: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180003320: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000B738: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180009A26: memcmp
0x180005830: "public: virtual long __cdecl CCCNGProvider::GetToken(struct DRR_ID * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64 * __ptr64) __ptr64" ?GetToken@CCCNGProvider@@UEAAJPEAUDRR_ID@@PEAPEAUDRR_ROAMING_TOKEN@@@Z
0x180003430: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectCached<class ATL::CComClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000C000: "__cdecl GUID_0002e012_0000_0000_c000_000000000046" _GUID_0002e012_0000_0000_c000_000000000046
0x18000B948: "__cdecl _imp_bsearch_s" __imp_bsearch_s
0x18000C580: "Microsoft\Crypto\DSS\" ??_C@_1CM@HFDDEHEE@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?2?$AAD?$AAS?$AAS?$AA?2?$AA?$AA@
0x18000D194: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000B6E0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000375C: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000F608: "long (__cdecl* __ptr64 ATL::_pPerfUnRegFunc)(void)" ?_pPerfUnRegFunc@ATL@@3P6AJXZEA
0x180008950: DRR_GetUserAppDataPath
0x18000B578: "__cdecl _imp_RegisterTypeLib" __imp_RegisterTypeLib
0x180003850: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CCCNGProvider>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCCCNGProvider@@@ATL@@UEAAPEAXI@Z
0x18000B5C8: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x18000C678: WPP_95596e7e712e3fe1e6dccd93cce9e794_Traceguids
0x180003770: "public: virtual long __cdecl ATL::CComObject<class CCCNGProvider>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCCCNGProvider@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000B8B0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180003DC0: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x18000B598: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x18000B938: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000BA08: ntdll_NULL_THUNK_DATA
0x1800085B4: "__cdecl drr_CreateRoamingToken" _drr_CreateRoamingToken
0x18000B8E0: "__cdecl _imp_memcpy" __imp_memcpy
0x180005160: "public: virtual long __cdecl CCCNGProvider::SetDpapiMkGuids(struct GUID_LIST * __ptr64) __ptr64" ?SetDpapiMkGuids@CCCNGProvider@@UEAAJPEAUGUID_LIST@@@Z
0x18000B890: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000D0A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000C3A0: "Microsoft Base Smart Card Crypto" ??_C@_1FE@NOLICOFB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAB?$AAa?$AAs?$AAe?$AA?5?$AAS?$AAm?$AAa?$AAr?$AAt?$AA?5?$AAC?$AAa?$AAr?$AAd?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo@
0x18000B520: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x18000B880: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18000F058: "__cdecl _security_cookie" __security_cookie
0x18000B7A0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180009A80: "__cdecl alloca_probe" _alloca_probe
0x18000B6B0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000B6C0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000B9C0: "__cdecl _imp_NCryptDeleteKey" __imp_NCryptDeleteKey
0x18000D108: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000B5F0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x18000C270: "Microsoft Software Key Storage P" ??_C@_1FA@OAAKELHB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?5?$AAP@
0x18000B018: "const ATL::CComObject<class CCCNGProvider>::`vftable'" ??_7?$CComObject@VCCCNGProvider@@@ATL@@6B@
0x18000C400: "Microsoft Platform Crypto Provid" ??_C@_1EG@LKLLOCAK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd@
0x18000B540: "__cdecl _imp_DsRoleFreeMemory" __imp_DsRoleFreeMemory
0x18000B580: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x18000B7C0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000F7C8: "__cdecl _onexitbegin" __onexitbegin
0x18000BEC0: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x18000BF50: "Module" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x180008BD0: CompareGUIDs
0x18000BC98: "AppID" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x18000B9F8: ncrypt_NULL_THUNK_DATA
0x180003950: "public: virtual void * __ptr64 __cdecl CCNGProviderModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCNGProviderModule@@UEAAPEAXI@Z
0x18000B620: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000B740: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180002F30: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18000BD30: "FileType" ??_C@_1BC@NKMMNMGL@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000D298: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000B9D8: "__cdecl _imp_NCryptImportKey" __imp_NCryptImportKey
0x18000B7D0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000BFD0: CLSID_StdGlobalInterfaceTable
0x180006820: "public: virtual long __cdecl CCCNGProvider::ValidateFilter(struct DRR_CRED_FILTER,int * __ptr64) __ptr64" ?ValidateFilter@CCCNGProvider@@UEAAJUDRR_CRED_FILTER@@PEAH@Z
0x180009794: "__cdecl _security_init_cookie" __security_init_cookie
0x18000C260: WPP_5829d134ae99319160cce5be3d651f10_Traceguids
0x18000C050: "\Implemented Categories" ??_C@_1DA@BIHALFED@?$AA?2?$AAI?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000D068: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000B8D0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18000B638: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18000B250: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x18000B5D8: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18000BD48: "Interface" ??_C@_1BE@EKPAFMCP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x18000B9E8: "__cdecl _imp_NCryptOpenKey" __imp_NCryptOpenKey
0x180003850: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CCCNGProvider>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCCCNGProvider@@@ATL@@UEAAPEAXI@Z
0x18000B978: "__cdecl _imp_malloc" __imp_malloc
0x18000B990: "__cdecl _imp__purecall" __imp__purecall
0x18000B508: ADVAPI32_NULL_THUNK_DATA
0x18000B6A0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18000B670: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000B658: "__cdecl _imp_GetFileTime" __imp_GetFileTime
0x180002328: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEAGPEAPEAG@Z
0x1800092D0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000B878: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x18000B838: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800095D4: "__cdecl onexit" _onexit
0x18000BF78: "REGISTRY" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x18000B950: "__cdecl _imp_qsort_s" __imp_qsort_s
0x180001920: ?GetObjectDescription@?$CComCoClass@VCCNGProvider@@$1?CLSID_CCNGProvider@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18000F7B8: "__cdecl _native_startup_state" __native_startup_state
0x18000849C: DRR_WriteFile
0x18000F5F8: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x18000B0E0: "const ATL::CRegObject::`vftable'" ??_7CRegObject@ATL@@6B@
0x18000BE10: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18000B6E8: "__cdecl _imp_LoadResource" __imp_LoadResource
0x18000B528: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180001920: "public: virtual unsigned long __cdecl ATL::CRegObject::Release(void) __ptr64" ?Release@CRegObject@ATL@@UEAAKXZ
0x18000BED8: "HKEY_PERFORMANCE_DATA" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18000BCB8: "Val" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x18000B748: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000BC88: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180003C50: DllRegisterServer
0x180001A7C: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x18000B590: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18000B290: "protected: static unsigned short const * __ptr64 const * const ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1QBQEBGB
0x18000D220: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000B170: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x18000C080: ".tlb" ??_C@_19ILOCMLCJ@?$AA?4?$AAt?$AAl?$AAb?$AA?$AA@
0x18000CFA8: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x180007604: WPP_SF_SD
0x18000768C: WPP_SF_sD
0x180003950: "public: virtual void * __ptr64 __cdecl CCNGProviderModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCNGProviderModule@@UEAAPEAXI@Z
0x18000B988: "__cdecl _imp_free" __imp_free
0x180009700: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000B850: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180007704: WPP_SF_sS
0x1800078CC: "__cdecl drr_GetPathByType" _drr_GetPathByType
0x18000B998: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000B750: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000B688: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x18000D130: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18000B840: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180008290: DRR_InsertGrowableArray
0x18000D1E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180009A3E: memset
0x18000D2D4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180008528: DRR_ReadFile
0x18000B698: "__cdecl _imp_ReadFile" __imp_ReadFile
0x180005650: "public: virtual long __cdecl CCCNGProvider::DeleteToken(struct DRR_ID * __ptr64) __ptr64" ?DeleteToken@CCCNGProvider@@UEAAJPEAUDRR_ID@@@Z

[JEB Decompiler by PNF Software]