Generated by JEB on 2019/08/01

PE: C:\Windows\System32\dssec.dll Base=0x180000000 SHA-256=0545DB257587D44DFD281194B4000C5EE6861B25A2F9528BD50549CA2099AC6A
PDB: dssec.pdb GUID={BDE189EC-8934-E8F9-E687741DC02AC809} Age=1

478 located named symbols:
0x1800098A0: "public: virtual long __cdecl CDsSecurity::QueryContextMenu(struct HMENU__ * __ptr64,unsigned int,unsigned int,unsigned int,unsigned int) __ptr64" ?QueryContextMenu@CDsSecurity@@UEAAJPEAUHMENU__@@IIII@Z
0x18000F898: "struct HINSTANCE__ * __ptr64 __ptr64 g_hAclEditDll" ?g_hAclEditDll@@3PEAUHINSTANCE__@@EA
0x18000B4A0: "__cdecl _imp_LockResource" __imp_LockResource
0x18000A544: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000A810: "__cdecl FindPESection" _FindPESection
0x1800094B8: "public: virtual void * __ptr64 __cdecl CDsSecurity::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDsSecurity@@UEAAPEAXI@Z
0x180009980: "public: virtual long __cdecl CDsSecurity::InvokeCommand(struct _CMINVOKECOMMANDINFO * __ptr64) __ptr64" ?InvokeCommand@CDsSecurity@@UEAAJPEAU_CMINVOKECOMMANDINFO@@@Z
0x18000B9C0: "unsigned short const * const c_szStructuralObjectClass" ?c_szStructuralObjectClass@@3QBGB
0x180009258: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000BF40: "(objectClass=*)" ??_C@_1CA@CGKDPGGM@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CK?$AA?$CJ?$AA?$AA@
0x18000B520: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18000B760: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18000CF08: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000B018: "const CDsSecurityClassFactory::`vftable'{for `IClassFactory'}" ??_7CDsSecurityClassFactory@@6BIClassFactory@@@
0x18000CD8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180003FD8: "long __cdecl GetDomainSid(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?GetDomainSid@@YAJPEBGPEAPEAX@Z
0x18000F2C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000B910: IID_IShellExtInit
0x180008A70: "private: long __cdecl CSchemaCache::GetPropertiesForNClasses(struct _GUID const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetPropertiesForNClasses@CSchemaCache@@AEAAJPEBU_GUID@@PEBGPEAU_DPA@@1PEAPEAU3@@Z
0x18000BBE8: "unsigned short const * const c_szLDAPDisplayName" ?c_szLDAPDisplayName@@3QBGB
0x18000B778: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x180002500: "public: virtual unsigned long __cdecl CDSSecurityInfo::Release(void) __ptr64" ?Release@CDSSecurityInfo@@UEAAKXZ
0x18000B268: "__cdecl tls_used" _tls_used
0x18000B0E0: "const CDsSecurity::`vftable'{for `IContextMenu'}" ??_7CDsSecurity@@6BIContextMenu@@@
0x180009F4C: "__cdecl CRT_INIT" _CRT_INIT
0x18000B540: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000B528: "__cdecl _imp_TlsGetValue" __imp_TlsGetValue
0x18000B6E0: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x18000AAB0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180009610: ?Initialize@CDsSecurity@@UEAAJPEFBU_ITEMIDLIST@@PEAUIDataObject@@PEAUHKEY__@@@Z
0x18000B2A8: "__cdecl _imp_ADsEncodeBinaryData" __imp_ADsEncodeBinaryData
0x18000C500: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x18000CDB4: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180004480: "[thunk]:public: virtual unsigned long __cdecl CDSSecurityInfo::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CDSSecurityInfo@@WBA@EAAKXZ
0x18000B360: "__cdecl _imp_PropertySheetW" __imp_PropertySheetW
0x18000B538: "__cdecl _imp_TlsAlloc" __imp_TlsAlloc
0x1800010C0: DllGetClassObject
0x18000B6A8: "__cdecl _imp_MapGenericMask" __imp_MapGenericMask
0x18000B308: "__cdecl _imp_AuthzInitializeResourceManager" __imp_AuthzInitializeResourceManager
0x18000B2C0: "__cdecl _imp_FreeInheritedFromArray" __imp_FreeInheritedFromArray
0x18000B048: "const CDSSecurityInfo::`vftable'{for `ISecurityObjectTypeInfo'}" ??_7CDSSecurityInfo@@6BISecurityObjectTypeInfo@@@
0x18000B468: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800025E0: "public: virtual long __cdecl CDSSecurityInfo::GetObjectInformation(struct _SI_OBJECT_INFO * __ptr64) __ptr64" ?GetObjectInformation@CDSSecurityInfo@@UEAAJPEAU_SI_OBJECT_INFO@@@Z
0x18000B5C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18000B788: ole32_NULL_THUNK_DATA
0x1800099C0: "public: virtual long __cdecl CDsSecurity::GetCommandString(unsigned __int64,unsigned int,unsigned int * __ptr64,char * __ptr64,unsigned int) __ptr64" ?GetCommandString@CDsSecurity@@UEAAJ_KIPEAIPEADI@Z
0x18000B798: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004A30: "int __cdecl _LocalFreeCB(void * __ptr64,void * __ptr64)" ?_LocalFreeCB@@YAHPEAX0@Z
0x18000B5F8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000B4D0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x18000BB48: "unsigned short const * const c_szRightsGuid" ?c_szRightsGuid@@3QBGB
0x18000B040: "const CDSSecurityInfo::`vftable'{for `CUnknown'}" ??_7CDSSecurityInfo@@6BCUnknown@@@
0x18000B978: IID_IEffectivePermission
0x18000C190: "__cdecl GUID_109ba8ec_92f0_11d0_a790_00c04fd8d5a8" _GUID_109ba8ec_92f0_11d0_a790_00c04fd8d5a8
0x180003510: "public: virtual long __cdecl CDSSecurityInfo::GetInheritSource(unsigned long,struct _ACL * __ptr64,struct _INHERITED_FROMW * __ptr64 * __ptr64) __ptr64" ?GetInheritSource@CDSSecurityInfo@@UEAAJKPEAU_ACL@@PEAPEAU_INHERITED_FROMW@@@Z
0x18000C504: "__cdecl tls_end" _tls_end
0x1800094B8: "public: virtual void * __ptr64 __cdecl CDsSecurity::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDsSecurity@@UEAAPEAXI@Z
0x18000B6D0: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x18000A7F5: "__cdecl XcptFilter" _XcptFilter
0x18000B6C0: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x18000B2A0: "__cdecl _imp_ADsOpenObject" __imp_ADsOpenObject
0x18000B7A0: "__cdecl _xc_a" __xc_a
0x18000B720: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18000B930: CLSID_DsDisplaySpecifier
0x18000BB18: "unsigned short const * const c_szSDProperty" ?c_szSDProperty@@3QBGB
0x18000C0C0: "defaultSecurityDescriptor" ??_C@_1DE@IGCHDCHB@?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1800040C4: "long __cdecl GetRootDomainSid(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?GetRootDomainSid@@YAJPEBGPEAPEAX@Z
0x18000B378: COMCTL32_NULL_THUNK_DATA
0x180002300: "private: long __cdecl CDSSecurityInfo::Init3(void) __ptr64" ?Init3@CDSSecurityInfo@@AEAAJXZ
0x180009B1C: EnablePrivileges
0x18000BEE8: "ldap_get_valuesW" ??_C@_0BB@ILICEONM@ldap_get_valuesW?$AA@
0x180008DD4: "long __cdecl StringCbPrintfExW(unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,unsigned short const * __ptr64,...)" ?StringCbPrintfExW@@YAJPEAG_KPEAPEAGPEA_KKPEBGZZ
0x18000AA8D: memcpy
0x18000B3F0: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x18000472C: "unsigned long __cdecl IsSpecificNonCanonicalSD(void * __ptr64)" ?IsSpecificNonCanonicalSD@@YAKPEAX@Z
0x180009A10: "[thunk]:public: virtual void * __ptr64 __cdecl CDsSecurity::`vector deleting destructor'`adjustor{24}' (unsigned int) __ptr64" ??_ECDsSecurity@@WBI@EAAPEAXI@Z
0x180001E48: "private: long __cdecl CDSSecurityInfo::Init2(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Init2@CDSSecurityInfo@@AEAAJPEBG0@Z
0x18000B408: "__cdecl _imp_CLSIDFromString" __imp_CLSIDFromString
0x18000B750: "__cdecl _imp_memset" __imp_memset
0x18000B5E8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180008C40: OpenDSObject
0x18000A9CF: "__cdecl initterm" _initterm
0x18000F000: "struct _SI_INHERIT_TYPE * g_siDSInheritTypes" ?g_siDSInheritTypes@@3PAU_SI_INHERIT_TYPE@@A
0x18000B310: "__cdecl _imp_AuthzFreeContext" __imp_AuthzFreeContext
0x180003B00: DSCreateISecurityInfoObjectEx
0x18000B068: "const CDSSecurityInfo::`vftable'{for `IEffectivePermission'}" ??_7CDSSecurityInfo@@6BIEffectivePermission@@@
0x18000CE40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000F8E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000B618: "__cdecl _imp_Sleep" __imp_Sleep
0x18000B7C0: "__cdecl _xi_z" __xi_z
0x18000B358: "__cdecl _imp_DPA_Create" __imp_DPA_Create
0x18000C110: "CN=Windows NT" ??_C@_1BM@NIHALEKI@?$AAC?$AAN?$AA?$DN?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?$AA@
0x180006B10: "private: static unsigned long __cdecl CSchemaCache::SchemaPropertyThread(void * __ptr64)" ?SchemaPropertyThread@CSchemaCache@@CAKPEAX@Z
0x18000B110: "const CDsSecurity::`vftable'{for `IShellPropSheetExt'}" ??_7CDsSecurity@@6BIShellPropSheetExt@@@
0x18000B438: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000174C: "private: long __cdecl CDSSecurityInfo::GetAuxClassList(void) __ptr64" ?GetAuxClassList@CDSSecurityInfo@@AEAAJXZ
0x18000A9DB: "__cdecl _C_specific_handler" __C_specific_handler
0x1800044D0: "[thunk]:public: virtual unsigned long __cdecl CDsSecurity::Release`adjustor{8}' (void) __ptr64" ?Release@CDsSecurity@@W7EAAKXZ
0x18000B388: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x18000C1D0: "DsDisplaySpecOptions" ??_C@_1CK@HMGPBCI@?$AAD?$AAs?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAS?$AAp?$AAe?$AAc?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18000B088: "const CDSSecurityInfo::`vftable'{for `ISecurityInformation'}" ??_7CDSSecurityInfo@@6BISecurityInformation@@@
0x18000B5D8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180003098: "private: unsigned long __cdecl CDSSecurityInfo::CheckObjectAccess(void) __ptr64" ?CheckObjectAccess@CDSSecurityInfo@@AEAAKXZ
0x18000573C: "public: long __cdecl CSchemaCache::GetObjectTypeList(struct _GUID * __ptr64,struct _DPA * __ptr64,unsigned short const * __ptr64,unsigned long,struct _OBJECT_TYPE_LIST * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetObjectTypeList@CSchemaCache@@QEAAJPEAU_GUID@@PEAU_DPA@@PEBGKPEAPEAU_OBJECT_TYPE_LIST@@PEAK@Z
0x18000B2F8: "__cdecl _imp_AuthzAccessCheck" __imp_AuthzAccessCheck
0x18000B450: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180004BB0: "int __cdecl Schema_ComparePropDisplayName(void * __ptr64,void * __ptr64,__int64)" ?Schema_ComparePropDisplayName@@YAHPEAX0_J@Z
0x18000BE98: "ldap_openW" ??_C@_0L@JPFEAEAH@ldap_openW?$AA@
0x18000B578: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000AA2C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000B318: "__cdecl _imp_AuthzInitializeContextFromSid" __imp_AuthzInitializeContextFromSid
0x1800093D0: "public: virtual long __cdecl CDsSecurityClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CDsSecurityClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x1800010A0: DllCanUnloadNow
0x18000BD50: "unsigned short const * const c_szGUIDFormat" ?c_szGUIDFormat@@3QBGB
0x1800072D0: Schema_GetObjectID
0x180005260: "public: unsigned short const * __ptr64 __cdecl CSchemaCache::GetClassNameW(struct _GUID const * __ptr64) __ptr64" ?GetClassNameW@CSchemaCache@@QEAAPEBGPEBU_GUID@@@Z
0x18000B9F0: "unsigned short const * const c_szObjectClass" ?c_szObjectClass@@3QBGB
0x18000BFD8: "__cdecl GUID_c8f93dd0_4ae0_11cf_9e73_00aa004a5691" _GUID_c8f93dd0_4ae0_11cf_9e73_00aa004a5691
0x18000B5B0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000B660: "__cdecl _imp_DeleteAce" __imp_DeleteAce
0x18000317C: "int __cdecl SkipLocalGroup(unsigned short const * __ptr64,void * __ptr64)" ?SkipLocalGroup@@YAHPEBGPEAX@Z
0x18000BF6C: ">" ??_C@_13MOEPKPHB@?$AA?$DO?$AA?$AA@
0x18000B380: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x1800050AC: "public: __cdecl CSchemaCache::~CSchemaCache(void) __ptr64" ??1CSchemaCache@@QEAA@XZ
0x18000CDF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000C1B0: "DsObjectNames" ??_C@_1BM@LLCFAACG@?$AAD?$AAs?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AAs?$AA?$AA@
0x18000A801: "__cdecl amsg_exit" _amsg_exit
0x18000B950: IID_IClassFactory
0x180009330: "public: virtual unsigned long __cdecl CDsSecurityClassFactory::AddRef(void) __ptr64" ?AddRef@CDsSecurityClassFactory@@UEAAKXZ
0x18000B3D8: "__cdecl _imp_InsertMenuItemW" __imp_InsertMenuItemW
0x180004490: "[thunk]:public: virtual unsigned long __cdecl CDSSecurityInfo::Release`adjustor{16}' (void) __ptr64" ?Release@CDSSecurityInfo@@WBA@EAAKXZ
0x18000C0F8: "CN=Services" ??_C@_1BI@MAIICPII@?$AAC?$AAN?$AA?$DN?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x18000BD90: "unsigned short const * const c_szNetApi32" ?c_szNetApi32@@3QBGB
0x1800015E8: "public: virtual void * __ptr64 __cdecl CDSSecurityInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDSSecurityInfo@@UEAAPEAXI@Z
0x18000BEA8: "ldap_unbind" ??_C@_0M@GBFFPFNJ@ldap_unbind?$AA@
0x18000BCD8: "unsigned short const * const c_szPropertyFilter" ?c_szPropertyFilter@@3QBGB
0x18000F8BC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUhvxfirgbUxlnnlmUlyquivUznwGEUkxsOlyq@common" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUhvxfirgbUxlnnlmUlyquivUznwGEUkxsOlyq@common
0x18000B368: "__cdecl _imp_DPA_DeletePtr" __imp_DPA_DeletePtr
0x180002C40: "public: virtual long __cdecl CDSSecurityInfo::PropertySheetPageCallback(struct HWND__ * __ptr64,unsigned int,enum _SI_PAGE_TYPE) __ptr64" ?PropertySheetPageCallback@CDSSecurityInfo@@UEAAJPEAUHWND__@@IW4_SI_PAGE_TYPE@@@Z
0x18000B8F0: GUID_NULL
0x18000B518: "__cdecl _imp_TlsSetValue" __imp_TlsSetValue
0x18000B3D0: OLEAUT32_NULL_THUNK_DATA
0x180009A64: "public: long __cdecl CUnknown::HandleQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64,struct INTERFACES const * __ptr64,int) __ptr64" ?HandleQueryInterface@CUnknown@@QEAAJAEBU_GUID@@PEAPEAXPEBUINTERFACES@@H@Z
0x18000B0D8: "const CDsSecurity::`vftable'{for `CUnknown'}" ??_7CDsSecurity@@6BCUnknown@@@
0x18000B410: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x18000B5F0: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18000B740: "__cdecl _imp_tolower" __imp_tolower
0x18000F050: "struct _SI_ACCESS * g_siDSAccesses" ?g_siDSAccesses@@3PAU_SI_ACCESS@@A
0x18000B580: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x1800094FC: "public: virtual __cdecl CDsSecurity::~CDsSecurity(void) __ptr64" ??1CDsSecurity@@UEAA@XZ
0x18000B698: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x18000B440: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000BBD0: "unsigned short const * const c_szDisplayName" ?c_szDisplayName@@3QBGB
0x18000B328: "__cdecl _imp_DPA_DestroyCallback" __imp_DPA_DestroyCallback
0x1800088A0: "private: long __cdecl CSchemaCache::GetChildClassesForNClasses(struct _GUID const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetChildClassesForNClasses@CSchemaCache@@AEAAJPEBU_GUID@@PEBGPEAU_DPA@@1PEAPEAU3@@Z
0x18000BF10: "ldap_value_freeW" ??_C@_0BB@IODIJNJP@ldap_value_freeW?$AA@
0x180009C98: MsgPopup
0x18000B500: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180003240: "public: virtual long __cdecl CDSSecurityInfo::GetEffectivePermission(struct _GUID const * __ptr64,void * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct _OBJECT_TYPE_LIST * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetEffectivePermission@CDSSecurityInfo@@UEAAJPEBU_GUID@@PEAXPEBG1PEAPEAU_OBJECT_TYPE_LIST@@PEAKPEAPEAK4@Z
0x18000B6B8: "__cdecl _imp_InitializeSid" __imp_InitializeSid
0x18000F8D8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001008: DllMain
0x18000BD78: "unsigned short const * const c_szAclUI" ?c_szAclUI@@3QBGB
0x18000CDDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000B320: AUTHZ_NULL_THUNK_DATA
0x18000B6C8: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000B748: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000F8B8: "long g_cRefCount" ?g_cRefCount@@3JA
0x180004B50: "int __cdecl Schema_CompareTempDisplayName(void * __ptr64,void * __ptr64,__int64)" ?Schema_CompareTempDisplayName@@YAHPEAX0_J@Z
0x18000B590: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000B4A8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000B4C8: api-ms-win-core-libraryloader-l1-2-1_NULL_THUNK_DATA
0x18000C070: "ADsOpenObjectFlags" ??_C@_1CG@EADDMKKP@?$AAA?$AAD?$AAs?$AAO?$AAp?$AAe?$AAn?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180009390: "public: virtual long __cdecl CDsSecurityClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDsSecurityClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000F2D8: "struct _GENERIC_MAPPING g_DSMap" ?g_DSMap@@3U_GENERIC_MAPPING@@A
0x18000B390: KERNEL32_NULL_THUNK_DATA
0x1800044B0: "[thunk]:public: virtual void * __ptr64 __cdecl CDSSecurityInfo::`vector deleting destructor'`adjustor{24}' (unsigned int) __ptr64" ??_ECDSSecurityInfo@@WBI@EAAPEAXI@Z
0x18000B610: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x18000B430: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180002B60: "public: virtual long __cdecl CDSSecurityInfo::GetInheritTypes(struct _SI_INHERIT_TYPE * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetInheritTypes@CDSSecurityInfo@@UEAAJPEAPEAU_SI_INHERIT_TYPE@@PEAK@Z
0x180002650: "unsigned long __cdecl RemoveRedundantPermissions(void * __ptr64 * __ptr64,struct _GUID const * __ptr64)" ?RemoveRedundantPermissions@@YAKPEAPEAXPEBU_GUID@@@Z
0x18000F2B4: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000AA08: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000F880: "__cdecl tls_index" _tls_index
0x18000B780: "__cdecl _imp_ReleaseStgMedium" __imp_ReleaseStgMedium
0x18000C4FC: "__cdecl tls_start" _tls_start
0x18000B7D0: "__cdecl _xl_z" __xl_z
0x18000B690: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18000CEE0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18000BFA0: "__cdecl GUID_d592aed4_f420_11d0_a36e_00c04fb950dc" _GUID_d592aed4_f420_11d0_a36e_00c04fb950dc
0x18000B4F8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000B5E0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000CE18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x1800085F4: "private: long __cdecl CSchemaCache::GetExtendedRightsForNClasses(unsigned short const * __ptr64,struct _GUID const * __ptr64,struct _DPA * __ptr64,struct _DPA * __ptr64,struct _DPA * __ptr64 * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetExtendedRightsForNClasses@CSchemaCache@@AEAAJPEBGPEBU_GUID@@PEAU_DPA@@2PEAPEAU3@3@Z
0x18000B338: "__cdecl _imp_DPA_Sort" __imp_DPA_Sort
0x18000A8C0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800015E8: "public: virtual void * __ptr64 __cdecl CDSSecurityInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDSSecurityInfo@@UEAAPEAXI@Z
0x18000B2D0: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x18000B940: IID_IUnknown
0x18000B668: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x18000CD50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000BA68: "unsigned short const * const c_szERContainer" ?c_szERContainer@@3QBGB
0x18000BED0: "ldap_first_entry" ??_C@_0BB@BLMAOMEM@ldap_first_entry?$AA@
0x18000B998: "unsigned short const * const c_szObjectClassCategory" ?c_szObjectClassCategory@@3QBGB
0x18000B960: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180001254: "long __cdecl ThreadCoInitialize(void)" ?ThreadCoInitialize@@YAJXZ
0x18000CF1C: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x18000B470: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180002B20: "public: virtual long __cdecl CDSSecurityInfo::MapGeneric(struct _GUID const * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?MapGeneric@CDSSecurityInfo@@UEAAJPEBU_GUID@@PEAEPEAK@Z
0x18000B5A8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18000B5D0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18000B608: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x1800027B0: "public: virtual long __cdecl CDSSecurityInfo::GetSecurity(unsigned long,void * __ptr64 * __ptr64,int) __ptr64" ?GetSecurity@CDSSecurityInfo@@UEAAJKPEAPEAXH@Z
0x180002D3C: "long __cdecl SetSecurityInfoMask(struct IUnknown * __ptr64,unsigned long)" ?SetSecurityInfoMask@@YAJPEAUIUnknown@@K@Z
0x18000B6A0: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x18000A190: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B708: "__cdecl _imp__initterm" __imp__initterm
0x18000C098: "(schemaIdGuid=%s)" ??_C@_1CE@HGIDIKHK@?$AA?$CI?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAI?$AAd?$AAG?$AAu?$AAi?$AAd?$AA?$DN?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x180004C00: "int __cdecl Schema_CompareER(void * __ptr64,void * __ptr64,__int64)" ?Schema_CompareER@@YAHPEAX0_J@Z
0x1800094F0: "public: virtual long __cdecl CDsSecurity::ReplacePage(unsigned int,int (__cdecl*)(struct _PSP * __ptr64,__int64),__int64) __ptr64" ?ReplacePage@CDsSecurity@@UEAAJIP6AHPEAU_PSP@@_J@Z1@Z
0x18000B3E8: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x18000BF00: "ldap_msgfree" ??_C@_0N@IHCDPDIF@ldap_msgfree?$AA@
0x18000CDC8: "__cdecl _IMPORT_DESCRIPTOR_AUTHZ" __IMPORT_DESCRIPTOR_AUTHZ
0x18000F8A0: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x180004480: "[thunk]:public: virtual unsigned long __cdecl CDsSecurity::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CDsSecurity@@WBA@EAAKXZ
0x18000BA48: "unsigned short const * const c_szRootDsePath" ?c_szRootDsePath@@3QBGB
0x180004B00: "int __cdecl Schema_CompareLdapName(void const * __ptr64,void const * __ptr64,__int64)" ?Schema_CompareLdapName@@YAHPEBX0_J@Z
0x18000B670: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x18000B370: "__cdecl _imp_DestroyPropertySheetPage" __imp_DestroyPropertySheetPage
0x18000CE2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000BDB0: "unsigned short const * const c_szDllName" ?c_szDllName@@3QBGB
0x1800011D4: "unsigned long __cdecl WaitOnThread(void * __ptr64 * __ptr64)" ?WaitOnThread@@YAKPEAPEAX@Z
0x18000BB60: "unsigned short const * const c_szSchemaIDGUID" ?c_szSchemaIDGUID@@3QBGB
0x18000F8A8: "class CSchemaCache * __ptr64 __ptr64 g_pSchemaCache" ?g_pSchemaCache@@3PEAVCSchemaCache@@EA
0x18000F8C8: "__cdecl _onexitend" __onexitend
0x18000B4E8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18000B658: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000CDA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1
0x18000B790: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800044F0: "long __cdecl StringCbCopyExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCbCopyExW@@YAJPEAG_KPEBGPEAPEAGPEA_KK@Z
0x18000B4B8: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x18000B508: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000B400: USER32_NULL_THUNK_DATA
0x18000BD60: "unsigned short const * const c_szFilterFile" ?c_szFilterFile@@3QBGB
0x18000BE28: "1.2.840.113556.1.4.529" ??_C@_1CO@JMOBGNLI@?$AA1?$AA?4?$AA2?$AA?4?$AA8?$AA4?$AA0?$AA?4?$AA1?$AA1?$AA3?$AA5?$AA5?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA5?$AA2?$AA9?$AA?$AA@
0x18000F2B0: "__cdecl Init_global_epoch" _Init_global_epoch
0x18000B3A0: "__cdecl _imp_SafeArrayUnaccessData" __imp_SafeArrayUnaccessData
0x18000B650: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000B7B0: "__cdecl _xi_a" __xi_a
0x18000B3E0: "__cdecl _imp_RegisterClipboardFormatW" __imp_RegisterClipboardFormatW
0x18000B640: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180002DF0: "private: static long __cdecl CDSSecurityInfo::DSReadObjectSecurity(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,__int64)" ?DSReadObjectSecurity@CDSSecurityInfo@@CAJPEBGKPEAPEAX_J@Z
0x18000B6D8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180006B80: "private: long __cdecl CSchemaCache::BuildInheritTypeArray(unsigned long) __ptr64" ?BuildInheritTypeArray@CSchemaCache@@AEAAJK@Z
0x18000BD5C: "unsigned short const * const c_szClassKey" ?c_szClassKey@@3QBGB
0x180008314: "private: long __cdecl CSchemaCache::GetPropertiesForOneClass(struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetPropertiesForOneClass@CSchemaCache@@AEAAJPEBU_GUID@@PEBG1PEAPEAU_DPA@@@Z
0x18000BF8C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000CD3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000A6F8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000F8F0: "__cdecl pRawDllMain" _pRawDllMain
0x180004A50: "void * __ptr64 __cdecl _Merge(unsigned int,void * __ptr64,void * __ptr64,__int64)" ?_Merge@@YAPEAXIPEAX0_J@Z
0x18000B3C0: "__cdecl _imp_VariantClear" __imp_VariantClear
0x18000CD14: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x18000BAC8: "unsigned short const * const c_szSchemaContext" ?c_szSchemaContext@@3QBGB
0x1800028F0: "public: virtual long __cdecl CDSSecurityInfo::SetSecurity(unsigned long,void * __ptr64) __ptr64" ?SetSecurity@CDSSecurityInfo@@UEAAJKPEAX@Z
0x18000B5B8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18000492C: "unsigned long __cdecl GetADsOpenObjectFlags(void)" ?GetADsOpenObjectFlags@@YAKXZ
0x18000B2D8: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x18000B768: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x18000A430: "__cdecl _security_check_cookie" __security_check_cookie
0x180009A30: "public: virtual void * __ptr64 __cdecl CUnknown::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUnknown@@UEAAPEAXI@Z
0x18000B7A8: "__cdecl _xc_z" __xc_z
0x18000CD28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000B550: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000BE58: "rootDomainNamingContext" ??_C@_1DA@BJANLJGF@?$AAr?$AAo?$AAo?$AAt?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x18000B498: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800044A0: "[thunk]:public: virtual long __cdecl CDSSecurityInfo::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDSSecurityInfo@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x180002500: "public: virtual unsigned long __cdecl CDsSecurity::Release(void) __ptr64" ?Release@CDsSecurity@@UEAAKXZ
0x18000B418: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000B638: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180006AA0: "private: static unsigned long __cdecl CSchemaCache::SchemaClassThread(void * __ptr64)" ?SchemaClassThread@CSchemaCache@@CAKPEAX@Z
0x1800012A4: "void __cdecl ThreadCoUninitialize(void)" ?ThreadCoUninitialize@@YAXXZ
0x18000B458: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18000B6E8: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x18000BEB8: "ldap_search_ext_sW" ??_C@_0BD@HAGNEKMK@ldap_search_ext_sW?$AA@
0x1800044E0: "[thunk]:public: virtual long __cdecl CDSSecurityInfo::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDSSecurityInfo@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x1800052D8: "public: long __cdecl CSchemaCache::GetAccessRights(struct _GUID const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64,unsigned short const * __ptr64,unsigned long,struct _ACCESS_INFO * __ptr64 * __ptr64) __ptr64" ?GetAccessRights@CSchemaCache@@QEAAJPEBU_GUID@@PEBGPEAU_DPA@@1KPEAPEAU_ACCESS_INFO@@@Z
0x18000B5A0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000B988: IID_ISecurityObjectTypeInfo
0x18000BC10: "unsigned short const * const c_szERFilterFormat" ?c_szERFilterFormat@@3QBGB
0x18000BA90: "unsigned short const * const c_szConfigContext" ?c_szConfigContext@@3QBGB
0x180005AE4: "private: struct _IdCacheEntry * __ptr64 __cdecl CSchemaCache::LookupID(struct _DPA * __ptr64,unsigned short const * __ptr64) __ptr64" ?LookupID@CSchemaCache@@AEAAPEAU_IdCacheEntry@@PEAU_DPA@@PEBG@Z
0x18000CEA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000B560: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000B2E0: "__cdecl _imp_LsaClose" __imp_LsaClose
0x18000B7D8: "__cdecl _guard_fids_table" __guard_fids_table
0x180001620: "long __cdecl DeleteParents(struct _DPA * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?DeleteParents@@YAJPEAU_DPA@@PEBG1@Z
0x18000BAF0: "unsigned short const * const c_szSDRightsProp" ?c_szSDRightsProp@@3QBGB
0x18000B758: msvcrt_NULL_THUNK_DATA
0x18000B160: "__cdecl load_config_used" _load_config_used
0x18000BE18: "Dummy" ??_C@_1M@EOJMLNDL@?$AAD?$AAu?$AAm?$AAm?$AAy?$AA?$AA@
0x18000CE68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000B330: "__cdecl _imp_DPA_Search" __imp_DPA_Search
0x1800044D0: "[thunk]:public: virtual unsigned long __cdecl CDSSecurityInfo::Release`adjustor{8}' (void) __ptr64" ?Release@CDSSecurityInfo@@W7EAAKXZ
0x180009570: "public: virtual long __cdecl CDsSecurity::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDsSecurity@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000C210: CLSID_Pathname
0x18000CF30: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18000B728: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180009E84: "unsigned long __cdecl vFormatStringID(unsigned short * __ptr64 * __ptr64,struct HINSTANCE__ * __ptr64,unsigned int,char * __ptr64 * __ptr64)" ?vFormatStringID@@YAKPEAPEAGPEAUHINSTANCE__@@IPEAPEAD@Z
0x18000BE88: "wldap32.dll" ??_C@_0M@CDHLALNO@wldap32?4dll?$AA@
0x180007660: "long __cdecl Schema_Search(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64 * __ptr64,int)" ?Schema_Search@@YAJPEBG0PEAPEAU_DPA@@H@Z
0x18000B348: "__cdecl _imp_DPA_Destroy" __imp_DPA_Destroy
0x18000B158: "const CUnknown::`vftable'" ??_7CUnknown@@6B@
0x18000B480: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800024E0: "public: virtual unsigned long __cdecl CDsSecurity::AddRef(void) __ptr64" ?AddRef@CDsSecurity@@UEAAKXZ
0x180002CE0: "private: static unsigned long __cdecl CDSSecurityInfo::InitThread(void * __ptr64)" ?InitThread@CDSSecurityInfo@@CAKPEAX@Z
0x180009A30: "public: virtual void * __ptr64 __cdecl CUnknown::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUnknown@@UEAAPEAXI@Z
0x18000B490: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1800091D8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000B4C0: "__cdecl _imp_LoadLibraryA" __imp_LoadLibraryA
0x180005BA0: "private: int __cdecl CSchemaCache::GetListObjectEnforced(void) __ptr64" ?GetListObjectEnforced@CSchemaCache@@AEAAHXZ
0x18000B588: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000B558: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000B628: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x18000B298: "__cdecl _imp_FreeADsMem" __imp_FreeADsMem
0x18000BB80: "unsigned short const * const c_szValidAccesses" ?c_szValidAccesses@@3QBGB
0x1800044C0: "[thunk]:public: virtual unsigned long __cdecl CDSSecurityInfo::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CDSSecurityInfo@@W7EAAKXZ
0x18000C160: "__cdecl GUID_1ab4a8c0_6a0b_11d2_ad49_00c04fa31a86" _GUID_1ab4a8c0_6a0b_11d2_ad49_00c04fa31a86
0x18000B598: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000B010: "const CDsSecurityClassFactory::`vftable'{for `CUnknown'}" ??_7CDsSecurityClassFactory@@6BCUnknown@@@
0x180004638: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x18000A9F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000B4D8: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1800078B8: "private: long __cdecl CSchemaCache::GetExtendedRightsForOneClass(unsigned short const * __ptr64,struct _GUID const * __ptr64,struct _DPA * __ptr64,struct _DPA * __ptr64 * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetExtendedRightsForOneClass@CSchemaCache@@AEAAJPEBGPEBU_GUID@@PEAU_DPA@@PEAPEAU3@3@Z
0x18000B648: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18000B2B8: "__cdecl _imp_GetInheritanceSourceW" __imp_GetInheritanceSourceW
0x18000B3F8: "__cdecl _imp_SetCursor" __imp_SetCursor
0x18000B340: "__cdecl _imp_DPA_Merge" __imp_DPA_Merge
0x180002540: "public: virtual long __cdecl CDSSecurityInfo::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDSSecurityInfo@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000B6F0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180003EFC: "void * __ptr64 __cdecl GetLSAConnection(unsigned short const * __ptr64,unsigned long)" ?GetLSAConnection@@YAPEAXPEBGK@Z
0x18000CD78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000B2C8: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x1800046C4: "int __cdecl ENCCompareSids(void * __ptr64,struct _ACE_HEADER * __ptr64)" ?ENCCompareSids@@YAHPEAXPEAU_ACE_HEADER@@@Z
0x18000B2B0: ACTIVEDS_NULL_THUNK_DATA
0x18000B2E8: "__cdecl _imp_ConvertStringSDToSDDomainW" __imp_ConvertStringSDToSDDomainW
0x18000C1A0: "__cdecl GUID_fd8256d0_fd15_11ce_abc4_02608c9e7553" _GUID_fd8256d0_fd15_11ce_abc4_02608c9e7553
0x180009D94: "int __cdecl LoadStringAlloc(unsigned short * __ptr64 * __ptr64,struct HINSTANCE__ * __ptr64,unsigned int)" ?LoadStringAlloc@@YAHPEAPEAGPEAUHINSTANCE__@@I@Z
0x18000BA08: "unsigned short const * const c_szLinkID" ?c_szLinkID@@3QBGB
0x18000B398: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x18000BD18: "unsigned short const * const c_szClassFilter" ?c_szClassFilter@@3QBGB
0x18000B730: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000B138: "const CDsSecurity::`vftable'{for `IShellExtInit'}" ??_7CDsSecurity@@6BIShellExtInit@@@
0x18000B770: ntdll_NULL_THUNK_DATA
0x18000B700: "__cdecl _imp_memcpy" __imp_memcpy
0x18000B680: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18000A454: "__cdecl Init_thread_footer" _Init_thread_footer
0x180001410: "[thunk]:public: virtual void * __ptr64 __cdecl CDsSecurityClassFactory::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECDsSecurityClassFactory@@W7EAAPEAXI@Z
0x18000F884: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUhvxfirgbUwhhvxUlyquivUznwGEUkxsOlyq@dssec" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUhvxfirgbUwhhvxUlyquivUznwGEUkxsOlyq@dssec
0x18000BF60: "<SID=" ??_C@_1M@GHHAMOJO@?$AA?$DM?$AAS?$AAI?$AAD?$AA?$DN?$AA?$AA@
0x18000B6B0: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18000CD64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180003C70: DSCreateISecurityInfoObject
0x180001AFC: "public: long __cdecl CDSSecurityInfo::Init(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,long (__cdecl*)(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,__int64),long (__cdecl*)(unsigned short const * __ptr64,unsigned long,void * __ptr64,__int64),__int64) __ptr64" ?Init@CDSSecurityInfo@@QEAAJPEBG0000KP6AJ0KPEAPEAX_J@ZP6AJ0KPEAX2@Z2@Z
0x1800012D8: "long __cdecl _CreateSecurityPage(struct ISecurityInformation * __ptr64,struct _PSP * __ptr64 * __ptr64)" ?_CreateSecurityPage@@YAJPEAUISecurityInformation@@PEAPEAU_PSP@@@Z
0x18000F2B8: "__cdecl _security_cookie" __security_cookie
0x18000F2D0: "unsigned long g_tls" ?g_tls@@3KA
0x18000B568: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000C200: IID_IADsObjectOptions
0x18000BDF0: CLSID_DsSecurity
0x180001420: "public: virtual __cdecl CDSSecurityInfo::~CDSSecurityInfo(void) __ptr64" ??1CDSSecurityInfo@@UEAA@XZ
0x18000B448: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000B920: IID_IShellPropSheetExt
0x18000B460: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000B678: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180002F00: "private: static long __cdecl CDSSecurityInfo::DSWriteObjectSecurity(unsigned short const * __ptr64,unsigned long,void * __ptr64,__int64)" ?DSWriteObjectSecurity@CDSSecurityInfo@@CAJPEBGKPEAX_J@Z
0x18000CE04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000B420: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x18000B3C8: "__cdecl _imp_VariantInit" __imp_VariantInit
0x18000B7C8: "__cdecl _xl_a" __xl_a
0x18000BF70: "instanceType" ??_C@_1BK@BFEOIDDP@?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000B4B0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x180009820: "public: virtual long __cdecl CDsSecurity::AddPages(int (__cdecl*)(struct _PSP * __ptr64,__int64),__int64) __ptr64" ?AddPages@CDsSecurity@@UEAAJP6AHPEAU_PSP@@_J@Z1@Z
0x18000B3B8: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x18000119C: "public: virtual void * __ptr64 __cdecl CDsSecurityClassFactory::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDsSecurityClassFactory@@UEAAPEAXI@Z
0x1800094F0: "public: virtual long __cdecl CDsSecurityClassFactory::LockServer(int) __ptr64" ?LockServer@CDsSecurityClassFactory@@UEAAJH@Z
0x18000F8D0: "__cdecl _onexitbegin" __onexitbegin
0x1800044C0: "[thunk]:public: virtual unsigned long __cdecl CDsSecurity::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CDsSecurity@@W7EAAKXZ
0x18000739C: "long __cdecl AddClassOrAttributeToCache(struct IDirectorySearch * __ptr64,void * __ptr64,int,struct _DPA * __ptr64)" ?AddClassOrAttributeToCache@@YAJPEAUIDirectorySearch@@PEAXHPEAU_DPA@@@Z
0x1800054C4: "public: long __cdecl CSchemaCache::GetDefaultSD(struct _GUID * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?GetDefaultSD@CSchemaCache@@QEAAJPEAU_GUID@@PEAX1PEAPEAX@Z
0x1800024E0: "public: virtual unsigned long __cdecl CDSSecurityInfo::AddRef(void) __ptr64" ?AddRef@CDSSecurityInfo@@UEAAKXZ
0x18000B738: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000B900: IID_IContextMenu
0x18000B428: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000B4F0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180004490: "[thunk]:public: virtual unsigned long __cdecl CDsSecurity::Release`adjustor{16}' (void) __ptr64" ?Release@CDsSecurity@@WBA@EAAKXZ
0x18000B478: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x18000B290: "__cdecl _imp_ADsGetObject" __imp_ADsGetObject
0x18000A4C4: "__cdecl Init_thread_header" _Init_thread_header
0x18000CEF4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000B300: "__cdecl _imp_AuthzFreeResourceManager" __imp_AuthzFreeResourceManager
0x18000B570: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000BF28: "LdapMapErrorToWin32" ??_C@_0BE@MHAIEGPK@LdapMapErrorToWin32?$AA@
0x18000671C: "private: unsigned int __cdecl CSchemaCache::AddTempListToAccessList(struct _DPA * __ptr64,struct _SI_ACCESS * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,unsigned long,int) __ptr64" ?AddTempListToAccessList@CSchemaCache@@AEAAIPEAU_DPA@@PEAPEAU_SI_ACCESS@@PEAPEAGPEA_KKKH@Z
0x18000A8F4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000BF90: "__cdecl GUID_e798de2c_22e4_11d0_84fe_00c04fd8d503" _GUID_e798de2c_22e4_11d0_84fe_00c04fd8d503
0x180003CC0: DSCreateSecurityPage
0x18000CD00: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000B6F8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18000C000: "Software\Microsoft\Windows\Curre" ??_C@_1GK@CJEHLMPO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18000B710: "__cdecl _imp_malloc" __imp_malloc
0x18000B2F0: ADVAPI32_NULL_THUNK_DATA
0x18000CECC: "__cdecl _IMPORT_DESCRIPTOR_ACTIVEDS" __IMPORT_DESCRIPTOR_ACTIVEDS
0x18000B964: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x180004A5C: "unsigned short * __ptr64 __cdecl GetFilterFilePath(void)" ?GetFilterFilePath@@YAPEAGXZ
0x18000A580: "__cdecl _report_gsfailure" __report_gsfailure
0x180008054: "private: long __cdecl CSchemaCache::GetChildClassesForOneClass(struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64 * __ptr64) __ptr64" ?GetChildClassesForOneClass@CSchemaCache@@AEAAJPEBU_GUID@@PEBG1PEAPEAU_DPA@@@Z
0x18000B5C8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18000CE54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x18000BA18: "unsigned short const * const c_szAttributeSecurityGuid" ?c_szAttributeSecurityGuid@@3QBGB
0x18000F8E0: "__cdecl _native_startup_state" __native_startup_state
0x18000B688: "__cdecl _imp_IsValidAcl" __imp_IsValidAcl
0x18000BBA0: "unsigned short const * const c_szDisplayID" ?c_szDisplayID@@3QBGB
0x18000B488: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180002990: "public: virtual long __cdecl CDSSecurityInfo::GetAccessRights(struct _GUID const * __ptr64,unsigned long,struct _SI_ACCESS * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?GetAccessRights@CDSSecurityInfo@@UEAAJPEBU_GUID@@KPEAPEAU_SI_ACCESS@@PEAK2@Z
0x180009A20: "[thunk]:public: virtual long __cdecl CDsSecurity::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDsSecurity@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x18000906C: "long __cdecl StringCbCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCbCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x180001D4C: "long __cdecl GetDsDcAddress(unsigned short * __ptr64 * __ptr64)" ?GetDsDcAddress@@YAJPEAPEAG@Z
0x180009350: "public: virtual unsigned long __cdecl CDsSecurityClassFactory::Release(void) __ptr64" ?Release@CDsSecurityClassFactory@@UEAAKXZ
0x18000B510: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x180007150: Schema_BindToObject
0x18000B548: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180006360: "private: long __cdecl CSchemaCache::EnumVariantList(struct tagVARIANT * __ptr64,struct _DPA * __ptr64,unsigned long,struct IDsDisplaySpecifier * __ptr64,unsigned short const * __ptr64) __ptr64" ?EnumVariantList@CSchemaCache@@AEAAJPEAUtagVARIANT@@PEAU_DPA@@KPEAUIDsDisplaySpecifier@@PEBG@Z
0x180004C44: "public: __cdecl CSchemaCache::CSchemaCache(unsigned short const * __ptr64) __ptr64" ??0CSchemaCache@@QEAA@PEBG@Z
0x18000119C: "public: virtual void * __ptr64 __cdecl CDsSecurityClassFactory::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDsSecurityClassFactory@@UEAAPEAXI@Z
0x18000B3B0: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18000C130: "CN=Directory Service" ??_C@_1CK@IDNJDNOL@?$AAC?$AAN?$AA?$DN?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x180009A00: "[thunk]:public: virtual long __cdecl CDsSecurity::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CDsSecurity@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x18000B3A8: "__cdecl _imp_SafeArrayAccessData" __imp_SafeArrayAccessData
0x18000B968: IID_ISecurityInformation
0x18000BE00: "computer" ??_C@_1BC@JMBKJGPD@?$AAc?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AA?$AA@
0x18000CEB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180005DBC: "private: long __cdecl CSchemaCache::BuildAccessArray(struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _DPA * __ptr64,unsigned long,struct _SI_ACCESS * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?BuildAccessArray@CSchemaCache@@AEAAJPEBU_GUID@@PEBG1PEAU_DPA@@KPEAPEAU_SI_ACCESS@@PEAK4@Z
0x18000B718: "__cdecl _imp_free" __imp_free
0x18000A860: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000B620: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000B630: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x18000B530: "__cdecl _imp_TlsFree" __imp_TlsFree
0x18000B350: "__cdecl _imp_DPA_InsertPtr" __imp_DPA_InsertPtr
0x180001378: "long __cdecl _EditSecurity(struct HWND__ * __ptr64,struct ISecurityInformation * __ptr64)" ?_EditSecurity@@YAJPEAUHWND__@@PEAUISecurityInformation@@@Z
0x18000B4E0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000CE7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180005B3C: "public: long __cdecl CSchemaCache::LookupClassID(unsigned short const * __ptr64,struct _GUID * __ptr64) __ptr64" ?LookupClassID@CSchemaCache@@QEAAJPEBGPEAU_GUID@@@Z
0x180003D60: DSEditSecurity
0x18000B600: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000CE90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000AA99: memset
0x18000CF44: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]