Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ntmarta.dll Base=0x180000000 SHA-256=5866CCE48652967B7251B2D4E0569650429ECCDAE19582D7E61008BA8F84C87F
PDB: ntmarta.pdb GUID={7A88238A-AE1C-9FDC-C1CCEAD495AC94AF} Age=1

1247 located named symbols:
0x180003CF0: "unsigned long __cdecl MartaGetNT4NodeSD(void * __ptr64,void * __ptr64,void * __ptr64,int,struct _GENERIC_MAPPING * __ptr64,unsigned long)" ?MartaGetNT4NodeSD@@YAKPEAX00HPEAU_GENERIC_MAPPING@@K@Z
0x180011D3C: "unsigned long __cdecl DoTrusteesMatch(unsigned short * __ptr64,struct _TRUSTEE_W * __ptr64,struct _TRUSTEE_W * __ptr64,int * __ptr64)" ?DoTrusteesMatch@@YAKPEAGPEAU_TRUSTEE_W@@1PEAH@Z
0x180007108: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800229F0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180022E40: "__cdecl _imp_GetSecurityDescriptorOwner" __imp_GetSecurityDescriptorOwner
0x1800077BC: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180007F45: "__cdecl _tailMerge_dsparse_dll" __tailMerge_dsparse_dll
0x1800235A0: "__cdecl _sz_api_ms_win_eventlog_legacy_l1_1_0_dll" __sz_api_ms_win_eventlog_legacy_l1_1_0_dll
0x1800233F0: "__cdecl _sz_WLDAP32_dll" __sz_WLDAP32_dll
0x180022F98: "__cdecl _imp_RtlReleaseRelativeName" __imp_RtlReleaseRelativeName
0x18001B4F0: AccProvSetAccessRights
0x180023B08: "(objectClass=*)" ??_C@_1CA@CGKDPGGM@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CK?$AA?$CJ?$AA?$AA@
0x180022AC8: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x180006BC0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180013F30: "void __cdecl FreeAToAccessStruct(void * __ptr64)" ?FreeAToAccessStruct@@YAXPEAX@Z
0x180027F08: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180022ED0: "__cdecl _imp_NtQueryDirectoryObject" __imp_NtQueryDirectoryObject
0x180022C30: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x18001F290: AccFreeIndexArray
0x18001D52C: "unsigned long __cdecl OpenRegistryObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?OpenRegistryObject@@YAKPEAGKPEAPEAX@Z
0x180027D3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180004620: SetEntriesInAclW
0x18002E260: "__cdecl _imp_GetPrinterW" __imp_GetPrinterW
0x180023D00: "CategoryMessageFile" ??_C@_1CI@GDJEBBOF@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x180008C44: "__cdecl _imp_load_SetPrinterW" __imp_load_SetPrinterW
0x18002A6B4: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x18001C0E0: "public: unsigned long __cdecl CMemberCheck::Init(void) __ptr64" ?Init@CMemberCheck@@QEAAKXZ
0x18002A0C8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180008BCC: IsGetPrinterWPresent
0x180022CB0: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x180022F40: "__cdecl _imp_NtOpenProcess" __imp_NtOpenProcess
0x18002E1D0: "__cdecl _imp_BuildTrusteeWithObjectsAndSidW" __imp_BuildTrusteeWithObjectsAndSidW
0x180023E88: "rightsGuid" ??_C@_1BG@KKNBGDHO@?$AAr?$AAi?$AAg?$AAh?$AAt?$AAs?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x180022A48: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18002E0A8: "__cdecl _imp_ldap_search_ext_sW" __imp_ldap_search_ext_sW
0x18000845C: "__cdecl _imp_load_ldap_count_valuesW" __imp_load_ldap_count_valuesW
0x18002E0C8: "__cdecl _imp_ldap_set_optionW" __imp_ldap_set_optionW
0x180022AF8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180007C66: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180022D80: "__cdecl _imp_SetSecurityDescriptorControl" __imp_SetSecurityDescriptorControl
0x180008C6C: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x18000C4A0: "unsigned long __cdecl MartaOpenDsObjectNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenDsObjectNamedObject@@YAKPEBGKPEAPEAX@Z
0x18002A900: "struct _ACTRL_OBJ_ID_CACHE * __ptr64 * grgIdGuidCache" ?grgIdGuidCache@@3PAPEAU_ACTRL_OBJ_ID_CACHE@@A
0x180023880: "ext-ms-win-printer-winspool-l1-1" ??_C@_1EG@IAJGBDN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAp?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAp?$AAo?$AAo?$AAl?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x18002E180: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x18002A758: "__cdecl _hmod__api_ms_win_security_lsalookup_l2_1_0_dll" __hmod__api_ms_win_security_lsalookup_l2_1_0_dll
0x18000801E: "__cdecl _imp_load_NetShareGetInfo" __imp_load_NetShareGetInfo
0x180022D58: "__cdecl _imp_DsUnBindW" __imp_DsUnBindW
0x180022F88: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180006C70: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x18001C1CC: "unsigned long __cdecl InsertAndContinueWorkerThread(struct _NTMARTA_WRKR_INFO * __ptr64)" ?InsertAndContinueWorkerThread@@YAKPEAU_NTMARTA_WRKR_INFO@@@Z
0x180008E50: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180022CC0: "__cdecl _imp__o_wcstoul" __imp__o_wcstoul
0x1800229C8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180017FFC: "unsigned long __cdecl AccctrlpLoadCacheFromSchema(struct ldap * __ptr64,unsigned short * __ptr64)" ?AccctrlpLoadCacheFromSchema@@YAKPEAUldap@@PEAG@Z
0x18002E140: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x1800028C0: "void __cdecl MartaInitializeSetContext(enum _SE_OBJECT_TYPE,struct _MARTA_SET_FUNCTION_CONTEXT * __ptr64)" ?MartaInitializeSetContext@@YAXW4_SE_OBJECT_TYPE@@PEAU_MARTA_SET_FUNCTION_CONTEXT@@@Z
0x180010104: "public: unsigned long __cdecl CAccessList::GetExplicitEntries(struct _TRUSTEE_W * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long * __ptr64,struct _ACTRL_ACCESS_ENTRYW * __ptr64 * __ptr64) __ptr64" ?GetExplicitEntries@CAccessList@@QEAAKPEAU_TRUSTEE_W@@PEAGKPEAKPEAPEAU_ACTRL_ACCESS_ENTRYW@@@Z
0x180023B98: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x180008596: "__cdecl _imp_load_SamOpenDomain" __imp_load_SamOpenDomain
0x18001B8F4: "private: unsigned long __cdecl CMemberCheck::CheckGroup(void * __ptr64,int * __ptr64,unsigned long) __ptr64" ?CheckGroup@CMemberCheck@@AEAAKPEAXPEAHK@Z
0x18001585C: "unsigned long __cdecl DspSplitPath(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?DspSplitPath@@YAKPEAGPEAPEAG1@Z
0x180026E58: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA_DLN
0x18000846E: "__cdecl _imp_load_QueryServiceStatus" __imp_load_QueryServiceStatus
0x1800067D0: "unsigned long __cdecl MartaReopenFileContext(void * __ptr64,unsigned long)" ?MartaReopenFileContext@@YAKPEAXK@Z
0x180026CB0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_printer_winspool_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_printer_winspool_l1_1_0_dll
0x18001C8A4: "unsigned long __cdecl NtProvGetBasePathsForFilePath(unsigned short * __ptr64,enum _SE_OBJECT_TYPE,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ?NtProvGetBasePathsForFilePath@@YAKPEAGW4_SE_OBJECT_TYPE@@PEAKPEAPEAPEAG@Z
0x180023028: "__cdecl _xp_a" __xp_a
0x180005E40: "unsigned long __cdecl MartaConvertFileContextToNtName(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaConvertFileContextToNtName@@YAKPEAXPEAPEAG@Z
0x180022C38: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180006320: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x180022CC0: "__cdecl _imp_wcstoul" __imp_wcstoul
0x1800053F0: "unsigned long __cdecl MartaSetFileRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetFileRights@@YAKPEAXK0@Z
0x18002E050: "__cdecl _imp_SamOpenUser" __imp_SamOpenUser
0x1800221E0: MartaGetNameFromContext
0x18000797C: "__cdecl RTC_Initialize" _RTC_Initialize
0x180022C28: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x180022DE0: "__cdecl _imp_MapGenericMask" __imp_MapGenericMask
0x1800238D0: "ext-ms-win-printer-winspool-l1-1" ??_C@_1EG@LALFAGFI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAp?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAp?$AAo?$AAo?$AAl?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180024100: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180008C6C: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x1800089BC: "__cdecl _tailMerge_ext_ms_win_ntuser_misc_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_misc_l1_1_0_dll
0x18002E208: "__cdecl _imp_QueryServiceObjectSecurity" __imp_QueryServiceObjectSecurity
0x180006C64: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x1800089B0: "__cdecl _imp_load_GetUserObjectSecurity" __imp_load_GetUserObjectSecurity
0x180002670: AccRewriteSetHandleRights
0x18001D0AC: "unsigned long __cdecl ReadPrinterPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadPrinterPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180024628: "__cdecl _rtc_taa" __rtc_taa
0x180027E04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180022F38: "__cdecl _imp_NtOpenMutant" __imp_NtOpenMutant
0x1800062E0: "unsigned long __cdecl MartaGetFileTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetFileTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x180022D10: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180022A30: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800235D0: "__cdecl _sz_api_ms_win_security_trustee_l1_1_0_dll" __sz_api_ms_win_security_trustee_l1_1_0_dll
0x180017F2C: "int __cdecl AccctrlpInsertGuidNode(struct _ACTRL_OBJ_ID_CACHE * __ptr64 * __ptr64,struct _ACTRL_OBJ_ID_CACHE * __ptr64)" ?AccctrlpInsertGuidNode@@YAHPEAPEAU_ACTRL_OBJ_ID_CACHE@@PEAU1@@Z
0x180004F70: "unsigned long __cdecl MartaGetFileDesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long)" ?MartaGetFileDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HK@Z
0x1800207F0: "unsigned long __cdecl ReadServicePropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadServicePropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022D18: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x18002E1D8: api-ms-win-security-trustee-l1-1-0_NULL_THUNK_DATA_DLA
0x180027590: api-ms-win-security-trustee-l1-1-0_NULL_THUNK_DATA_DLB
0x180007BE8: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x180022CD8: "__cdecl _imp_wcschr" __imp_wcschr
0x180023F30: "\??" ??_C@_17MFDAJLJA@?$AA?2?$AA?$DP?$AA?$DP?$AA?$AA@
0x180022D90: "__cdecl _imp_AddAuditAccessObjectAce" __imp_AddAuditAccessObjectAce
0x180026EC8: api-ms-win-security-trustee-l1-1-0_NULL_THUNK_DATA_DLN
0x180008C6C: "__cdecl _vcrt_initialize" __vcrt_initialize
0x180022BC0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180022C40: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x18000C050: "unsigned long __cdecl MartaCloseDsObjectContext(void * __ptr64)" ?MartaCloseDsObjectContext@@YAKPEAX@Z
0x180023BC8: " %ws %ws" ??_C@_1BI@LLBFLLCK@?$AA?$AN?$AA?6?$AA?7?$AA?$CF?$AAw?$AAs?$AA?7?$AA?7?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18001E780: "unsigned long __cdecl SetRegistrySecurityInfo(void * __ptr64,unsigned long,unsigned short * __ptr64,void * __ptr64)" ?SetRegistrySecurityInfo@@YAKPEAXKPEAG0@Z
0x18000869F: "__cdecl _imp_load_LsaLookupSids" __imp_load_LsaLookupSids
0x18000802A: "__cdecl _tailMerge_srvcli_dll" __tailMerge_srvcli_dll
0x180022FE8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180023FAC: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x180027410: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x18002E210: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x18002E1F8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x180027430: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x180001A84: "unsigned long __cdecl MartaConvertRegistryKeyContextToName(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaConvertRegistryKeyContextToName@@YAKPEAXPEAPEAG@Z
0x180027DC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x180026EE8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x180026F00: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x180023410: "__cdecl _sz_srvcli_dll" __sz_srvcli_dll
0x180022A88: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180022C68: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18000C220: "unsigned long __cdecl MartaGetKernelProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetKernelProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180022E38: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x18002A8F0: RWmiGuidHandle
0x1800083A8: "__cdecl _imp_load_LookupAccountSidW" __imp_load_LookupAccountSidW
0x180005690: "unsigned long __cdecl MartaGetDefaultDesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long)" ?MartaGetDefaultDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HK@Z
0x180026FA0: srvcli_NULL_THUNK_DATA_DLN
0x180024618: "__cdecl _rtc_iaa" __rtc_iaa
0x180008B2C: "__cdecl _imp_load_OpenWindowStationW" __imp_load_OpenWindowStationW
0x180008809: "__cdecl _tailMerge_api_ms_win_eventlog_legacy_l1_1_0_dll" __tailMerge_api_ms_win_eventlog_legacy_l1_1_0_dll
0x180008C6C: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x1800273E8: srvcli_NULL_THUNK_DATA_DLB
0x18002E2B0: srvcli_NULL_THUNK_DATA_DLA
0x18002A718: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180023FA0: "\*.*" ??_C@_19CFMCKEMN@?$AA?2?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x180007FC4: "__cdecl _imp_load_ldap_initW" __imp_load_ldap_initW
0x18000DFE0: "unsigned long __cdecl MartaGetWindowRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetWindowRights@@YAKPEAXKPEAPEAX@Z
0x18002E218: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x18001CE9C: "unsigned long __cdecl NtProvSetRightsList(struct _ACTRL_ALISTW * __ptr64,struct _ACTRL_ALISTW * __ptr64,unsigned long * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64 * __ptr64)" ?NtProvSetRightsList@@YAKPEAU_ACTRL_ALISTW@@0PEAKPEAPEAU_ACTRL_RIGHTS_INFO@@@Z
0x18001D730: "unsigned long __cdecl PropagateRegRightsDeep(void * __ptr64,void * __ptr64,unsigned long,struct HKEY__ * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long,void * __ptr64,class CSList & __ptr64)" ?PropagateRegRightsDeep@@YAKPEAX0KPEAUHKEY__@@PEAK2K0AEAVCSList@@@Z
0x18001C11C: "public: unsigned long __cdecl CMemberCheck::IsMemberOf(struct _TRUSTEE_NODE * __ptr64,int * __ptr64) __ptr64" ?IsMemberOf@CMemberCheck@@QEAAKPEAU_TRUSTEE_NODE@@PEAH@Z
0x180026E80: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLN
0x180026E68: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x18002E178: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x180027448: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLB
0x180027550: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x18002E190: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLA
0x180022B50: "__cdecl _imp_RegSetKeySecurity" __imp_RegSetKeySecurity
0x180022E20: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x180022FF0: "__cdecl _xc_a" __xc_a
0x180022A60: "__cdecl _imp_OpenJobObjectW" __imp_OpenJobObjectW
0x180022CD0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x180001EB0: "unsigned long __cdecl MartaFindNextRegistryKey(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaFindNextRegistryKey@@YAKPEAXKPEAPEAX@Z
0x18000CB00: "unsigned long __cdecl MartaAddRefFileContext(void * __ptr64)" ?MartaAddRefFileContext@@YAKPEAX@Z
0x180026A70: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x180022BD0: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x180022F20: "__cdecl _imp_RtlConvertSharedToExclusive" __imp_RtlConvertSharedToExclusive
0x18000C250: "unsigned long __cdecl MartaGetDsObjectTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetDsObjectTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x180013FB8: "unsigned long __cdecl GetNodeForGuid(class CSList & __ptr64,struct _GUID * __ptr64,struct _ACCLIST_ATOACCESS * __ptr64 * __ptr64)" ?GetNodeForGuid@@YAKAEAVCSList@@PEAU_GUID@@PEAPEAU_ACCLIST_ATOACCESS@@@Z
0x180023FF8: "NAME '" ??_C@_1O@DPNAANPO@?$AAN?$AAA?$AAM?$AAE?$AA?5?$AA?8?$AA?$AA@
0x18002E0F8: "__cdecl _imp_ldap_openW" __imp_ldap_openW
0x180027EE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0
0x18001CA50: "unsigned long __cdecl NtProvSetAccessRightsWorkerThread(void * __ptr64)" ?NtProvSetAccessRightsWorkerThread@@YAKPEAX@Z
0x1800229B0: "__cdecl _imp_FindClose" __imp_FindClose
0x18000BE80: "public: unsigned long __cdecl CDsObjectContext::InitializeByName(unsigned short const * __ptr64,unsigned long) __ptr64" ?InitializeByName@CDsObjectContext@@QEAAKPEBGK@Z
0x18000C6B0: "unsigned long __cdecl MartaSetDsObjectRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetDsObjectRights@@YAKPEAXK0@Z
0x1800233B0: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180022BF0: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x180022C20: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x18000DAA0: "unsigned long __cdecl MartaOpenServiceHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenServiceHandleObject@@YAKPEAXKPEAPEAX@Z
0x18000DAA0: "unsigned long __cdecl MartaOpenWMIGuidHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenWMIGuidHandleObject@@YAKPEAXKPEAPEAX@Z
0x18002A0E0: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180023E48: "CN=Extended-Rights," ??_C@_1CI@LEHPHGOP@?$AAC?$AAN?$AA?$DN?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AA?9?$AAR?$AAi?$AAg?$AAh?$AAt?$AAs?$AA?0?$AA?$AA@
0x180005B20: "unsigned long __cdecl MartaGetFileParentContext(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetFileParentContext@@YAKPEAXKPEAPEAX@Z
0x180015948: "unsigned long __cdecl GetSDForDSObj(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?GetSDForDSObj@@YAKPEAGKPEAPEAX@Z
0x18002E048: "__cdecl _imp_SamOpenDomain" __imp_SamOpenDomain
0x180022DD0: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x1800143C4: "unsigned long __cdecl InsertAtoANode(class CSList & __ptr64,struct _GUID * __ptr64,struct _ACE_HEADER * __ptr64,unsigned long)" ?InsertAtoANode@@YAKAEAVCSList@@PEAU_GUID@@PEAU_ACE_HEADER@@K@Z
0x180015A30: "unsigned long __cdecl PingDSObj(unsigned short const * __ptr64)" ?PingDSObj@@YAKPEBG@Z
0x180023638: "ext-ms-win-ntuser-misc-l1-2-0" ??_C@_1DM@BDNJLNEB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA0?$AA?$AA@
0x1800085BA: "__cdecl _imp_load_SamQueryInformationUser" __imp_load_SamQueryInformationUser
0x18002A0D8: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x180007C4E: "__cdecl callnewh" _callnewh
0x180022C80: "__cdecl _imp__o_malloc" __imp__o_malloc
0x180007FE8: "__cdecl _imp_load_ldap_unbind_s" __imp_load_ldap_unbind_s
0x180022330: MartaGetDesiredAccess
0x18002E270: "__cdecl _imp_SetPrinterW" __imp_SetPrinterW
0x1800239C0: "ext-ms-win-printer-winspool-l1-1" ??_C@_1EG@IHGLPGGK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAp?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAp?$AAo?$AAo?$AAl?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180022D20: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180023310: "__cdecl _guard_iat_table" __guard_iat_table
0x180023F48: "\\?\" ??_C@_19MJCDBCKE@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$AA@
0x180022F68: "__cdecl _imp_NtOpenJobObject" __imp_NtOpenJobObject
0x180008E35: memcpy
0x18001FA10: AccRewriteGetHandleRights
0x180022720: MartaFindFirst
0x180022EA0: "__cdecl _imp_RtlConvertSidToUnicodeString" __imp_RtlConvertSidToUnicodeString
0x18002E0E0: "__cdecl _imp_ldap_next_entry" __imp_ldap_next_entry
0x1800025E0: SetSecurityInfo
0x180005220: AccctrlFreeIdNameCache
0x18002A0F0: "struct _GENERIC_MAPPING gFileGenMap" ?gFileGenMap@@3U_GENERIC_MAPPING@@A
0x1800033E0: GetSecurityInfo
0x180022D30: "__cdecl _imp_memset" __imp_memset
0x1800086B1: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x180008C6C: "__cdecl _acrt_initialize" __acrt_initialize
0x180022BC8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180022A00: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x180007C06: "__cdecl initterm" _initterm
0x180023DE0: "extendedAttributeInfo" ??_C@_1CM@JBCCFBEN@?$AAe?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x180023420: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x18000FDD0: "public: unsigned long __cdecl CAccessList::GetExplicitAccess(struct _TRUSTEE_W * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExplicitAccess@CAccessList@@QEAAKPEAU_TRUSTEE_W@@PEAGPEAK2@Z
0x180007C96: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180022F10: "__cdecl _imp_RtlValidAcl" __imp_RtlValidAcl
0x180027E54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18002A7F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180022A50: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x18000DFF0: "unsigned long __cdecl MartaOpenWindowNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenWindowNamedObject@@YAKPEBGKPEAPEAX@Z
0x180022F78: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x180026CF8: DSPARSE_NULL_THUNK_DATA_DLN
0x180023020: "__cdecl _xi_z" __xi_z
0x180011F8C: "unsigned long __cdecl MapNt4SidToNt5Sid(unsigned short * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?MapNt4SidToNt5Sid@@YAKPEAGPEAXPEAPEAX@Z
0x180022998: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000C220: "unsigned long __cdecl MartaGetLMShareProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetLMShareProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180022D28: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180020580: "unsigned long __cdecl MartaGetGuid(unsigned short * __ptr64,enum _SE_OBJECT_TYPE,struct _GUID * __ptr64)" ?MartaGetGuid@@YAKPEAGW4_SE_OBJECT_TYPE@@PEAU_GUID@@@Z
0x180007C2A: "__cdecl _C_specific_handler" __C_specific_handler
0x1800062D0: "unsigned long __cdecl MartaAddRefKernelContext(void * __ptr64)" ?MartaAddRefKernelContext@@YAKPEAX@Z
0x18000D790: "unsigned long __cdecl MartaCloseLMShareContext(void * __ptr64)" ?MartaCloseLMShareContext@@YAKPEAX@Z
0x1800064DC: "unsigned long __cdecl MartaFillExplicitEntries(struct _ACL * __ptr64,unsigned char * __ptr64,unsigned long)" ?MartaFillExplicitEntries@@YAKPEAU_ACL@@PEAEK@Z
0x180022CE0: "__cdecl _imp___stdio_common_vswprintf_s" __imp___stdio_common_vswprintf_s
0x18000440C: "unsigned long __cdecl GetCurrentToken(void * __ptr64 * __ptr64)" ?GetCurrentToken@@YAKPEAPEAX@Z
0x180008C6C: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180023510: "__cdecl _sz_api_ms_win_security_lsapolicy_l1_1_0_dll" __sz_api_ms_win_security_lsapolicy_l1_1_0_dll
0x18002E298: netutils_NULL_THUNK_DATA_DLA
0x1800273F8: netutils_NULL_THUNK_DATA_DLB
0x180008BCC: IsOpenPrinterWPresent
0x180026F88: netutils_NULL_THUNK_DATA_DLN
0x180020268: AccctrlLookupRightsByName
0x180015580: "unsigned long __cdecl BindToDSObject(unsigned short * __ptr64,unsigned short * __ptr64,struct ldap * __ptr64 * __ptr64)" ?BindToDSObject@@YAKPEAG0PEAPEAUldap@@@Z
0x180023700: "__cdecl _sz_ext_ms_win_ntuser_misc_l1_1_0_dll" __sz_ext_ms_win_ntuser_misc_l1_1_0_dll
0x18000E9F0: "public: unsigned long __cdecl CAccessList::AddSD(void * __ptr64,unsigned long,unsigned short * __ptr64) __ptr64" ?AddSD@CAccessList@@QEAAKPEAXKPEAG@Z
0x1800083BA: "__cdecl _imp_load_UuidToStringW" __imp_load_UuidToStringW
0x180023330: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x180013A00: "int __cdecl CompInheritProps(void * __ptr64,void * __ptr64)" ?CompInheritProps@@YAHPEAX0@Z
0x18000D7B0: "unsigned long __cdecl MartaOpenLMShareNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenLMShareNamedObject@@YAKPEBGKPEAPEAX@Z
0x180011720: "private: unsigned long __cdecl CAccessList::SizeCompressedListAsAcl(struct _ACCLIST_CNODE * __ptr64,unsigned long,unsigned long * __ptr64,int) __ptr64" ?SizeCompressedListAsAcl@CAccessList@@AEAAKPEAU_ACCLIST_CNODE@@KPEAKH@Z
0x180006230: "unsigned long __cdecl MartaCloseFileContext(void * __ptr64)" ?MartaCloseFileContext@@YAKPEAX@Z
0x18002A7B8: "__cdecl _hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll" __hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x180010428: "private: unsigned long __cdecl CAccessList::GetTrusteeNode(struct _TRUSTEE_W * __ptr64,unsigned long,struct _TRUSTEE_NODE * __ptr64 * __ptr64) __ptr64" ?GetTrusteeNode@CAccessList@@AEAAKPEAU_TRUSTEE_W@@KPEAPEAU_TRUSTEE_NODE@@@Z
0x18000765C: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x180007CC6: malloc
0x180022C70: "__cdecl _imp__wtol" __imp__wtol
0x18002E1F0: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18002E0A0: "__cdecl _imp_ldap_msgfree" __imp_ldap_msgfree
0x180022A18: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800240A0: "Timer" ??_C@_1M@EEEEDEMN@?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
0x180015C94: "unsigned long __cdecl ReadAllDSObjPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadAllDSObjPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x18001AE10: AccProvIsObjectAccessible
0x18000CB00: "unsigned long __cdecl MartaAddRefRegistryKeyContext(void * __ptr64)" ?MartaAddRefRegistryKeyContext@@YAKPEAX@Z
0x1800235F8: "ext-ms-win-ntuser-misc-l1-1-0" ??_C@_1DM@JNFGLKKC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x180022B60: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18002E120: "__cdecl _imp_ldap_connect" __imp_ldap_connect
0x180012670: AccConvertAccessToSecurityDescriptor
0x180008DBC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18002A780: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x1800135D0: AccctrlLookupName
0x180019418: "unsigned long __cdecl ReadWmiGuidPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadWmiGuidPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180007C36: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180007590: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x180007C5A: "__cdecl cexit" _cexit
0x180003910: "unsigned long __cdecl MartaGetRightsFromContext(void * __ptr64,struct _MARTA_GET_FUNCTION_CONTEXT * __ptr64,unsigned long,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?MartaGetRightsFromContext@@YAKPEAXPEAU_MARTA_GET_FUNCTION_CONTEXT@@KPEAPEAX2PEAPEAU_ACL@@32@Z
0x18001A8F0: AccProvHandleIsObjectAccessible
0x180007CBA: "__cdecl o_free" _o_free
0x18000685C: "unsigned long __cdecl I_MartaFileNtOpenFile(struct _UNICODE_STRING * __ptr64,void * __ptr64,unsigned long,struct _FILE_CONTEXT * __ptr64)" ?I_MartaFileNtOpenFile@@YAKPEAU_UNICODE_STRING@@PEAXKPEAU_FILE_CONTEXT@@@Z
0x1800122B0: "unsigned long __cdecl ParseName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ParseName@@YAKPEAGPEAPEAG1@Z
0x180007460: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x18001E8C8: "int __cdecl MartaResetTree(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,struct _MARTA_SET_FUNCTION_CONTEXT * __ptr64,struct _GENERIC_MAPPING * __ptr64,unsigned long,unsigned long,unsigned long,enum _PROGRESS_INVOKE_SETTING * __ptr64,void (__cdecl*)(unsigned short * __ptr64,unsigned long,enum _PROGRESS_INVOKE_SETTING * __ptr64,void * __ptr64,int),void * __ptr64,int,int)" ?MartaResetTree@@YAHPEAG0KKPEAX1111PEAU_MARTA_SET_FUNCTION_CONTEXT@@PEAU_GENERIC_MAPPING@@KKKPEAW4_PROGRESS_INVOKE_SETTING@@P6AX0K41H@Z1HH@Z
0x180022B68: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18000C220: "unsigned long __cdecl MartaGetWMIGuidProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetWMIGuidProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180023CD8: "EventMessageFile" ??_C@_1CC@JONFAEOP@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x1800062D0: "unsigned long __cdecl MartaAddRefPrinterContext(void * __ptr64)" ?MartaAddRefPrinterContext@@YAKPEAX@Z
0x180008C6C: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180022D38: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x180007C7E: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x180026C90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x1800077D0: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180023320: "MACHINE" ??_C@_1BA@INBMCOAP@?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180007E42: "__cdecl _imp_load_ldap_search_ext_sW" __imp_load_ldap_search_ext_sW
0x180027DA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180012B10: AccGetAccessForTrustee
0x180022B70: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180022C10: "__cdecl _imp__callnewh" __imp__callnewh
0x180019ACC: "unsigned long __cdecl AccProvpGetAccessInfoPerObjectType(enum _SE_OBJECT_TYPE,int,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _ACTRL_ACCESS_INFOW * __ptr64 * __ptr64,unsigned long * __ptr64,struct _ACTRL_CONTROL_INFOW * __ptr64 * __ptr64,unsigned long * __ptr64)" ?AccProvpGetAccessInfoPerObjectType@@YAKW4_SE_OBJECT_TYPE@@HPEAG1PEAKPEAPEAU_ACTRL_ACCESS_INFOW@@2PEAPEAU_ACTRL_CONTROL_INFOW@@2@Z
0x1800139C0: "int __cdecl CompGuids(void * __ptr64,void * __ptr64)" ?CompGuids@@YAHPEAX0@Z
0x18000CBC8: "unsigned long __cdecl OpenWmiGuidObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?OpenWmiGuidObject@@YAKPEAGKPEAPEAX@Z
0x1800240FC: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000CCF4: "unsigned long __cdecl RWmipSendWmiKMRequest(unsigned long,void * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64)" ?RWmipSendWmiKMRequest@@YAKKPEAXKKPEAK@Z
0x18000E0E4: "public: unsigned long __cdecl CWindowContext::Release(void) __ptr64" ?Release@CWindowContext@@QEAAKXZ
0x180006714: "public: unsigned long __cdecl CKernelContext::InitializeByName(unsigned short const * __ptr64,unsigned long) __ptr64" ?InitializeByName@CKernelContext@@QEAAKPEBGK@Z
0x180007F27: "__cdecl _imp_load_ldap_modify_ext_sW" __imp_load_ldap_modify_ext_sW
0x1800226B0: MartaFindNext
0x180008C32: "__cdecl _imp_load_GetPrinterW" __imp_load_GetPrinterW
0x180013F90: "void __cdecl FreePropagationFailureListEntry(void * __ptr64)" ?FreePropagationFailureListEntry@@YAXPEAX@Z
0x180023AA8: "1.2.840.113556.1.4.801" ??_C@_1CO@IPJIPBIN@?$AA1?$AA?4?$AA2?$AA?4?$AA8?$AA4?$AA0?$AA?4?$AA1?$AA1?$AA3?$AA5?$AA5?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA8?$AA0?$AA1?$AA?$AA@
0x18002A748: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x1800059D0: "unsigned long __cdecl MartaFindFirstFile(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaFindFirstFile@@YAKPEAXKPEAPEAX@Z
0x18002A720: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x180005370: "unsigned long __cdecl MartaGetFileProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetFileProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180020874: "unsigned long __cdecl ReadServiceRights(struct SC_HANDLE__ * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadServiceRights@@YAKPEAUSC_HANDLE__@@PEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x1800275B0: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLB
0x18000DCF8: "public: unsigned long __cdecl CServiceContext::GetServiceRights(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?GetServiceRights@CServiceContext@@QEAAKKPEAPEAX@Z
0x180008C6C: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180018540: "struct _ACTRL_OBJ_ID_CACHE * __ptr64 __cdecl AccctrlpLookupGuidInCache(struct _GUID * __ptr64)" ?AccctrlpLookupGuidInCache@@YAPEAU_ACTRL_OBJ_ID_CACHE@@PEAU_GUID@@@Z
0x180023F78: "\??\" ??_C@_19JHEHLFPM@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
0x1800088AC: "__cdecl _imp_load_BuildTrusteeWithSidW" __imp_load_BuildTrusteeWithSidW
0x18000C230: "unsigned long __cdecl MartaGetDsObjectRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetDsObjectRights@@YAKPEAXKPEAPEAX@Z
0x18000740C: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x18002AC20: "struct _ACTRL_OBJ_ID_CACHE * __ptr64 * grgIdNameCache" ?grgIdNameCache@@3PAPEAU_ACTRL_OBJ_ID_CACHE@@A
0x18002A8D0: "int bIdCacheLockInitialized" ?bIdCacheLockInitialized@@3HA
0x18001428C: "unsigned long __cdecl InitializeEvents(void)" ?InitializeEvents@@YAKXZ
0x18002A800: gWrkrLock
0x180008134: "__cdecl _imp_load_NetShareSetInfo" __imp_load_NetShareSetInfo
0x1800076E8: atexit
0x18002A860: gCacheLock
0x1800222C0: MartaReopenContext
0x180026A50: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x1800010E0: AccGetSidFromToken
0x180022C88: "__cdecl _imp__o_qsort" __imp__o_qsort
0x180007C8A: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x18001E7B0: "void __cdecl MartaInitializeGetContext(enum _SE_OBJECT_TYPE,struct _MARTA_GET_FUNCTION_CONTEXT * __ptr64)" ?MartaInitializeGetContext@@YAXW4_SE_OBJECT_TYPE@@PEAU_MARTA_GET_FUNCTION_CONTEXT@@@Z
0x180023D48: "CategoryCount" ??_C@_1BM@ONAKAGDM@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x180022C98: "__cdecl _imp_towlower" __imp_towlower
0x180023730: "__cdecl _sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x180010658: "public: unsigned long __cdecl CSList::Insert(void * __ptr64) __ptr64" ?Insert@CSList@@QEAAKPEAX@Z
0x180017D30: "unsigned long __cdecl UpdateFileSDByPath(void * __ptr64,unsigned short * __ptr64,void * __ptr64,void * __ptr64,unsigned long,int,void * __ptr64 * __ptr64)" ?UpdateFileSDByPath@@YAKPEAXPEAG00KHPEAPEAX@Z
0x1800054B8: AccctrlInitializeRightsCache
0x180005730: "unsigned long __cdecl MartaCloseKernelContext(void * __ptr64)" ?MartaCloseKernelContext@@YAKPEAX@Z
0x180022C90: "__cdecl _imp_tolower" __imp_tolower
0x18002A760: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x180011614: "private: unsigned long __cdecl CAccessList::ShrinkList(struct _ACTRL_ACCESS_ENTRY_LISTW * __ptr64,unsigned long,struct _ACTRL_ACCESS_ENTRY_LISTW * __ptr64 * __ptr64) __ptr64" ?ShrinkList@CAccessList@@AEAAKPEAU_ACTRL_ACCESS_ENTRY_LISTW@@KPEAPEAU2@@Z
0x180022B78: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180008C6C: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x18000E1EC: "public: __cdecl CMemberCheck::~CMemberCheck(void) __ptr64" ??1CMemberCheck@@QEAA@XZ
0x180022E58: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x18001B3B0: AccProvRevokeAuditRights
0x1800229A0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180023970: "ext-ms-win-printer-winspool-l1-1" ??_C@_1EG@BKLMMOND@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAp?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAp?$AAo?$AAo?$AAl?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180022C50: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180022F50: "__cdecl _imp_NtOpenSemaphore" __imp_NtOpenSemaphore
0x180005620: "unsigned long __cdecl MartaReopenRegistryKeyOrigContext(void * __ptr64,unsigned long)" ?MartaReopenRegistryKeyOrigContext@@YAKPEAXK@Z
0x180022D60: api-ms-win-security-activedirectoryclient-l1-1-0_NULL_THUNK_DATA
0x18000D1D0: "void __cdecl LdapFreeUrlComponents(struct _LDAP_URL_COMPONENTS * __ptr64)" ?LdapFreeUrlComponents@@YAXPEAU_LDAP_URL_COMPONENTS@@@Z
0x180026F10: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x180023038: "__cdecl _xt_a" __xt_a
0x18002A710: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x180022FB8: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x180022AA8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800274C0: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x18002E220: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x180022C50: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x180008280: "__cdecl _imp_load_SetServiceObjectSecurity" __imp_load_SetServiceObjectSecurity
0x1800086D5: "__cdecl _imp_load_SamGetMembersInAlias" __imp_load_SamGetMembersInAlias
0x18001BC5C: "private: unsigned long __cdecl CMemberCheck::GetDomainInfo(void * __ptr64) __ptr64" ?GetDomainInfo@CMemberCheck@@AEAAKPEAX@Z
0x1800024E0: "unsigned long __cdecl MartaCloseRegistryKeyContext(void * __ptr64)" ?MartaCloseRegistryKeyContext@@YAKPEAX@Z
0x180003CB8: "int __cdecl MartaIsAclNt5Style(struct _ACL * __ptr64)" ?MartaIsAclNt5Style@@YAHPEAU_ACL@@@Z
0x1800042F0: "int __cdecl MartaEqualAce(struct _ACE_HEADER * __ptr64,struct _ACE_HEADER * __ptr64,struct _ACE_HEADER * __ptr64,int,int * __ptr64)" ?MartaEqualAce@@YAHPEAU_ACE_HEADER@@00HPEAH@Z
0x1800088B8: "__cdecl _tailMerge_api_ms_win_security_trustee_l1_1_0_dll" __tailMerge_api_ms_win_security_trustee_l1_1_0_dll
0x18001492C: "unsigned long __cdecl SetAccessListLookupServer(unsigned short * __ptr64,class CAccessList & __ptr64)" ?SetAccessListLookupServer@@YAKPEAGAEAVCAccessList@@@Z
0x18002E028: RPCRT4_NULL_THUNK_DATA_DLA
0x180027350: RPCRT4_NULL_THUNK_DATA_DLB
0x180024058: "Process" ??_C@_1BA@NMDNJJOO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1800081F5: "__cdecl _imp_load_QueryServiceObjectSecurity" __imp_load_QueryServiceObjectSecurity
0x1800086C3: "__cdecl _imp_load_SamOpenAlias" __imp_load_SamOpenAlias
0x180008C78: DllMain
0x180026D18: RPCRT4_NULL_THUNK_DATA_DLN
0x180008A3B: "__cdecl _imp_load_SetUserObjectSecurity" __imp_load_SetUserObjectSecurity
0x180008505: "__cdecl _tailMerge_samlib_dll" __tailMerge_samlib_dll
0x180008C6C: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180023A78: "DS" ??_C@_15DEMLGGK@?$AAD?$AAS?$AA?$AA@
0x1800233C0: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x18002E020: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x180010884: "public: unsigned long __cdecl CSList::InsertIfUnique(void * __ptr64,int (__cdecl*)(void * __ptr64,void * __ptr64)) __ptr64" ?InsertIfUnique@CSList@@QEAAKPEAXP6AH00@Z@Z
0x1800079C0: "__cdecl RTC_Terminate" _RTC_Terminate
0x180013A30: "int __cdecl CompProps(void * __ptr64,void * __ptr64)" ?CompProps@@YAHPEAX0@Z
0x180007F03: "__cdecl _imp_load_ldap_value_free_len" __imp_load_ldap_value_free_len
0x180019830: "unsigned long __cdecl AccProvHandleGrantAccessRights(void * __ptr64,enum _SE_OBJECT_TYPE,struct _ACTRL_ALISTW * __ptr64,struct _ACTRL_ALISTW * __ptr64,struct _ACTRL_OVERLAPPED * __ptr64)" ?AccProvHandleGrantAccessRights@@YAKPEAXW4_SE_OBJECT_TYPE@@PEAU_ACTRL_ALISTW@@2PEAU_ACTRL_OVERLAPPED@@@Z
0x180022F80: "__cdecl _imp_RtlSubAuthorityCountSid" __imp_RtlSubAuthorityCountSid
0x180013A40: "int __cdecl CompTrusteeToTrusteeNode(void * __ptr64,void * __ptr64)" ?CompTrusteeToTrusteeNode@@YAHPEAX0@Z
0x180019FB0: AccProvGetAllRights
0x180015F7C: "unsigned long __cdecl SetDSObjSecurityInfo(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?SetDSObjSecurityInfo@@YAKPEAGK0PEAXKPEAK2@Z
0x180022C60: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180022CA0: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180026E38: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLN
0x1800185D8: "unsigned long __cdecl AccctrlpNewNameGuidNode(unsigned short * __ptr64,struct _GUID * __ptr64,struct _ACTRL_OBJ_ID_CACHE * __ptr64 * __ptr64)" ?AccctrlpNewNameGuidNode@@YAKPEAGPEAU_GUID@@PEAPEAU_ACTRL_OBJ_ID_CACHE@@@Z
0x180022CE8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18001AB10: AccProvHandleRevokeAuditRights
0x180022AE8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180022B88: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180008584: "__cdecl _imp_load_SamConnect" __imp_load_SamConnect
0x180022A80: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18002AF40: "struct _ACTRL_RIGHTS_CACHE * __ptr64 * grgRightsNameCache" ?grgRightsNameCache@@3PAPEAU_ACTRL_RIGHTS_CACHE@@A
0x18001609C: "unsigned long __cdecl ConvertFileHandleToName(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ConvertFileHandleToName@@YAKPEAXPEAPEAG@Z
0x18000860E: "__cdecl _tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll" __tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180005C40: "unsigned long __cdecl MartaOpenFileNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenFileNamedObject@@YAKPEBGKPEAPEAX@Z
0x180017CE0: "unsigned long __cdecl SetFilePropertyRights(void * __ptr64,unsigned long,unsigned short * __ptr64,void * __ptr64)" ?SetFilePropertyRights@@YAKPEAXKPEAG0@Z
0x18002E128: WLDAP32_NULL_THUNK_DATA_DLA
0x1800229D0: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x18000C6BC: "unsigned long __cdecl StampSD(unsigned short * __ptr64,unsigned long,unsigned long,void * __ptr64,struct ldap * __ptr64)" ?StampSD@@YAKPEAGKKPEAXPEAUldap@@@Z
0x180023850: "__cdecl _sz_ext_ms_win_printer_winspool_l1_1_0_dll" __sz_ext_ms_win_printer_winspool_l1_1_0_dll
0x180008A4D: "__cdecl _imp_load_CloseWindowStation" __imp_load_CloseWindowStation
0x1800177D4: "unsigned long __cdecl ReadFileSD(void * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?ReadFileSD@@YAKPEAXKKPEAPEAX@Z
0x1800141E0: "unsigned long __cdecl GetOrderTypeForAccessEntry(unsigned short * __ptr64,struct _ACTRL_ACCESS_ENTRYW * __ptr64,unsigned long)" ?GetOrderTypeForAccessEntry@@YAKPEAGPEAU_ACTRL_ACCESS_ENTRYW@@K@Z
0x180022980: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006C7C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180004C10: "unsigned long __cdecl MartaAddExplicitEntryToAcl(unsigned char * __ptr64 * __ptr64,struct _EXPLICIT_ACCESS_W * __ptr64,struct _MARTA_ACCESS_INFO * __ptr64)" ?MartaAddExplicitEntryToAcl@@YAKPEAPEAEPEAU_EXPLICIT_ACCESS_W@@PEAU_MARTA_ACCESS_INFO@@@Z
0x18001A850: AccProvHandleIsAccessAudited
0x180022A08: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x1800058D0: "unsigned long __cdecl MartaGetKernelTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetKernelTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x1800058A0: "unsigned long __cdecl MartaSetKernelRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetKernelRights@@YAKPEAXK0@Z
0x180008D98: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180022BB0: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x18000DC50: "unsigned long __cdecl MartaGetRegistryKeyParentName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaGetRegistryKeyParentName@@YAKPEAGPEAPEAG@Z
0x180013C70: "void __cdecl DelTrusteeNode(void * __ptr64)" ?DelTrusteeNode@@YAXPEAX@Z
0x18001D038: "unsigned long __cdecl OpenPrinterObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?OpenPrinterObject@@YAKPEAGKPEAPEAX@Z
0x180019E80: AccProvCancelOperation
0x1800233D0: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x1800206EC: "unsigned long __cdecl OpenServiceObject(unsigned short * __ptr64,unsigned long,struct SC_HANDLE__ * __ptr64 * __ptr64)" ?OpenServiceObject@@YAKPEAGKPEAPEAUSC_HANDLE__@@@Z
0x180005840: "unsigned long __cdecl MartaOpenKernelHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenKernelHandleObject@@YAKPEAXKPEAPEAX@Z
0x180007C8A: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x1800199C0: "unsigned long __cdecl AccProvpDoTrusteeAccessCalculations(class CAccessList * __ptr64,struct _TRUSTEE_W * __ptr64,struct _TRUSTEE_ACCESSW * __ptr64)" ?AccProvpDoTrusteeAccessCalculations@@YAKPEAVCAccessList@@PEAU_TRUSTEE_W@@PEAU_TRUSTEE_ACCESSW@@@Z
0x180022CF8: "__cdecl _imp_memcmp" __imp_memcmp
0x180008949: "__cdecl _imp_load_BuildTrusteeWithObjectsAndSidW" __imp_load_BuildTrusteeWithObjectsAndSidW
0x180006974: "public: unsigned long __cdecl CServiceContext::InitializeByName(unsigned short const * __ptr64,unsigned long) __ptr64" ?InitializeByName@CServiceContext@@QEAAKPEBGK@Z
0x18002E0F0: "__cdecl _imp_ldap_unbind" __imp_ldap_unbind
0x180012C00: AccGetExplicitEntries
0x1800068F0: "unsigned long __cdecl MartaOpenServiceNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenServiceNamedObject@@YAKPEBGKPEAPEAX@Z
0x18000DDB0: "unsigned long __cdecl MartaOpenWMIGuidNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenWMIGuidNamedObject@@YAKPEBGKPEAPEAX@Z
0x18000C220: "unsigned long __cdecl MartaGetServiceProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetServiceProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180022B58: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x180022C68: "__cdecl _imp__o__wcsnicmp" __imp__o__wcsnicmp
0x18002A0D4: "__cdecl _isa_enabled" __isa_enabled
0x18000C9E8: "unsigned long __cdecl I_GetPhysicalNameInformation(void * __ptr64,struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION * __ptr64 * __ptr64)" ?I_GetPhysicalNameInformation@@YAKPEAXPEAPEAU_FILE_NETWORK_PHYSICAL_NAME_INFORMATION@@@Z
0x180013480: AccSetEntriesInAList
0x1800087FD: "__cdecl _imp_load_RegisterEventSourceW" __imp_load_RegisterEventSourceW
0x180026E28: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x180016AC8: "unsigned long __cdecl MakeSDSelfRelative(void * __ptr64,void * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,int,int)" ?MakeSDSelfRelative@@YAKPEAXPEAPEAXPEAPEAU_ACL@@2HH@Z
0x180006C70: "void __cdecl operator delete(void * __ptr64,unsigned __int64)" ??3@YAXPEAX_K@Z
0x18000D694: "public: unsigned long __cdecl CLMShareContext::GetLMShareRights(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?GetLMShareRights@CLMShareContext@@QEAAKKPEAPEAX@Z
0x18002A768: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x18000C220: "unsigned long __cdecl MartaGetPrinterProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetPrinterProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x180027360: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180022E60: "__cdecl _imp_CreatePrivateObjectSecurityWithMultipleInheritance" __imp_CreatePrivateObjectSecurityWithMultipleInheritance
0x18002E138: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x180022E78: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x1800062D0: "unsigned long __cdecl MartaAddRefDsObjectContext(void * __ptr64)" ?MartaAddRefDsObjectContext@@YAKPEAX@Z
0x180027F30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180022B00: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180022BA0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18001C4E0: "int __cdecl NtProvFindWorkerItem(void * __ptr64,void * __ptr64)" ?NtProvFindWorkerItem@@YAHPEAX0@Z
0x180023DB8: "extendedClassInfo" ??_C@_1CE@DHEFDICJ@?$AAe?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAC?$AAl?$AAa?$AAs?$AAs?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x180006C14: "public: __cdecl CSList::~CSList(void) __ptr64" ??1CSList@@QEAA@XZ
0x18000BE70: EventNameFree
0x180026C10: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_registry_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_registry_l2_1_0_dll
0x18000800C: "__cdecl _imp_load_ldap_bind_sW" __imp_load_ldap_bind_sW
0x180005730: "unsigned long __cdecl MartaCloseWMIGuidContext(void * __ptr64)" ?MartaCloseWMIGuidContext@@YAKPEAX@Z
0x180001A0C: "unsigned long __cdecl I_MartaRegGetParentString(unsigned short * __ptr64)" ?I_MartaRegGetParentString@@YAKPEAG@Z
0x180026BD0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180007C96: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x1800240FC: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800127D0: AccConvertAclToAccess
0x18002A6B8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180013634: AccctrlLookupSid
0x18000877E: "__cdecl _tailMerge_api_ms_win_core_registry_l2_1_0_dll" __tailMerge_api_ms_win_core_registry_l2_1_0_dll
0x180016740: "unsigned long __cdecl IsFilePathLocalOrLM(unsigned short * __ptr64)" ?IsFilePathLocalOrLM@@YAKPEAG@Z
0x18001AA30: AccProvHandleRevokeAccessRights
0x180007EF1: "__cdecl _imp_load_ldap_get_values_lenW" __imp_load_ldap_get_values_lenW
0x18001124C: "private: unsigned long __cdecl CAccessList::RemoveTrustee(struct _TRUSTEE_W * __ptr64) __ptr64" ?RemoveTrustee@CAccessList@@AEAAKPEAU_TRUSTEE_W@@@Z
0x180006B40: "unsigned long __cdecl MartaCloseServiceContext(void * __ptr64)" ?MartaCloseServiceContext@@YAKPEAX@Z
0x18000D60C: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180026A90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll" __DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll
0x180022E50: "__cdecl _imp_AddAccessAllowedAceEx" __imp_AddAccessAllowedAceEx
0x18002E130: "__cdecl _imp_IIDFromString" __imp_IIDFromString
0x180022AE0: "__cdecl _imp_TerminateThread" __imp_TerminateThread
0x180008C6C: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x18000CCF4: "unsigned long __cdecl WmipSendWmiKMRequest(unsigned long,void * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64)" ?WmipSendWmiKMRequest@@YAKKPEAXKKPEAK@Z
0x18002E040: "__cdecl _imp_SamConnect" __imp_SamConnect
0x180022F90: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180022FC0: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x180011938: "unsigned long __cdecl AccpDoSidLookup(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?AccpDoSidLookup@@YAKPEAG0PEAPEAX@Z
0x180023920: "ext-ms-win-printer-winspool-l1-1" ??_C@_1EG@KCAAKJLG@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAp?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAp?$AAo?$AAo?$AAl?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180022B18: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x180023010: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180022410: MartaOpenNamedObject
0x180027370: WLDAP32_NULL_THUNK_DATA_DLB
0x180027D64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800111C0: "public: void * __ptr64 __cdecl CSList::NextData(void) __ptr64" ?NextData@CSList@@QEAAPEAXXZ
0x18001FC70: "unsigned long __cdecl AccDsReadAndInsertExtendedRights(struct ldap * __ptr64)" ?AccDsReadAndInsertExtendedRights@@YAKPEAUldap@@@Z
0x18002A8C8: bWrkrLockInitialized
0x180024068: "Section" ??_C@_1BA@LHDKDEEN@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180013910: "int __cdecl CompAndMarkCompressNode(void * __ptr64,void * __ptr64)" ?CompAndMarkCompressNode@@YAHPEAX0@Z
0x180022EB8: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x180023A70: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180007E4E: "__cdecl _tailMerge_wldap32_dll" __tailMerge_wldap32_dll
0x18001B270: AccProvRevokeAccessRights
0x180002984: "unsigned long __cdecl SetErrorChecks(enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64,void * __ptr64)" ?SetErrorChecks@@YAKW4_SE_OBJECT_TYPE@@KPEAX1PEAU_ACL@@21@Z
0x180022E30: "__cdecl _imp_EqualDomainSid" __imp_EqualDomainSid
0x180006330: "unsigned long __cdecl MartaGetRegistryKeyProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetRegistryKeyProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x18002E240: "__cdecl _imp_CloseWindowStation" __imp_CloseWindowStation
0x180022EF0: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x180026CD0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180024090: "Thread" ??_C@_1O@CDOGJPJJ@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
0x1800050E0: "unsigned long __cdecl MartaGetFileRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetFileRights@@YAKPEAXKPEAPEAX@Z
0x18002E248: "__cdecl _imp_OpenWindowStationW" __imp_OpenWindowStationW
0x18002E170: "__cdecl _imp_LookupAccountNameLocalW" __imp_LookupAccountNameLocalW
0x180007CC6: "__cdecl o_malloc" _o_malloc
0x18000EAB0: "private: unsigned long __cdecl CAccessList::AddSubList(struct _ACCLIST_CNODE * __ptr64,class CSList & __ptr64,unsigned long) __ptr64" ?AddSubList@CAccessList@@AEAAKPEAU_ACCLIST_CNODE@@AEAVCSList@@K@Z
0x18000733C: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180023B50: "\WmiGuid\" ??_C@_1BE@BICDJNGE@?$AA?2?$AAW?$AAm?$AAi?$AAG?$AAu?$AAi?$AAd?$AA?2?$AA?$AA@
0x180007090: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180022870: MartaGetParentName
0x18000DA10: "public: unsigned long __cdecl CPrinterContext::InitializeByName(unsigned short const * __ptr64,unsigned long) __ptr64" ?InitializeByName@CPrinterContext@@QEAAKPEBGK@Z
0x180022D08: "__cdecl _imp__initterm" __imp__initterm
0x180027E7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180023570: "__cdecl _sz_api_ms_win_core_registry_l2_1_0_dll" __sz_api_ms_win_core_registry_l2_1_0_dll
0x1800111E0: "public: unsigned long __cdecl CSList::Remove(void * __ptr64) __ptr64" ?Remove@CSList@@QEAAKPEAX@Z
0x180022988: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800063A0: GetExplicitEntriesFromAclW
0x180027F1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18002A740: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x18000C220: "unsigned long __cdecl MartaGetDsObjectProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetDsObjectProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x18002A750: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x18000ED64: "public: unsigned long __cdecl CAccessList::BuildSDForAccessList(void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long) __ptr64" ?BuildSDForAccessList@CAccessList@@QEAAKPEAPEAXPEAKK@Z
0x18002E238: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLA
0x180023E70: "displayName" ??_C@_1BI@LKHJNJMH@?$AAd?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180023F38: "%ws%ws" ??_C@_1O@PEBEJIFE@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180017C60: "unsigned long __cdecl SetAndPropagateFilePropertyRightsByHandle(void * __ptr64,unsigned short * __ptr64,class CAccessList & __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SetAndPropagateFilePropertyRightsByHandle@@YAKPEAXPEAGAEAVCAccessList@@PEAK3@Z
0x180027E2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180013BB0: "unsigned long __cdecl ConvertToAutoInheritSD(void * __ptr64,void * __ptr64,int,struct _GENERIC_MAPPING * __ptr64,void * __ptr64 * __ptr64)" ?ConvertToAutoInheritSD@@YAKPEAX0HPEAU_GENERIC_MAPPING@@PEAPEAX@Z
0x180008AD8: IsOpenWindowStationWPresent
0x180022CB8: "__cdecl _imp__o_wcstol" __imp__o_wcstol
0x18000DA80: "unsigned long __cdecl MartaClosePrinterContext(void * __ptr64)" ?MartaClosePrinterContext@@YAKPEAX@Z
0x18000F7AC: "private: unsigned long __cdecl CAccessList::ConvertAclToAccess(unsigned long,struct _ACL * __ptr64,unsigned short * __ptr64,int) __ptr64" ?ConvertAclToAccess@CAccessList@@AEAAKKPEAU_ACL@@PEAGH@Z
0x180008414: "__cdecl _imp_load_ldap_openW" __imp_load_ldap_openW
0x180022C28: "__cdecl _imp__o__crt_atexit" __imp__o__crt_atexit
0x180007C66: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x180022DD8: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x18000FC28: "private: unsigned long __cdecl CAccessList::CopyAccessEntry(struct _ACTRL_ACCESS_ENTRYW * __ptr64,struct _ACTRL_ACCESS_ENTRYW * __ptr64) __ptr64" ?CopyAccessEntry@CAccessList@@AEAAKPEAU_ACTRL_ACCESS_ENTRYW@@0@Z
0x1800275E0: ext-ms-win-printer-winspool-l1-1-0_NULL_THUNK_DATA_DLB
0x180016070: "unsigned long __cdecl UnBindFromDSObject(struct ldap * __ptr64 * __ptr64)" ?UnBindFromDSObject@@YAKPEAPEAUldap@@@Z
0x18002E278: ext-ms-win-printer-winspool-l1-1-0_NULL_THUNK_DATA_DLA
0x180026F68: ext-ms-win-printer-winspool-l1-1-0_NULL_THUNK_DATA_DLN
0x1800077E4: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180023B88: "CONFIG" ??_C@_1O@BAHOLLMK@?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18002E0D8: "__cdecl _imp_ldap_count_valuesW" __imp_ldap_count_valuesW
0x1800011B0: AccTreeResetNamedSecurityInfo
0x180022D40: "__cdecl _imp_DsFreeNameResultW" __imp_DsFreeNameResultW
0x18000E21C: "public: unsigned long __cdecl CAccessList::AddAccessLists(unsigned long,struct _ACTRL_ALISTW * __ptr64,int,int) __ptr64" ?AddAccessLists@CAccessList@@QEAAKKPEAU_ACTRL_ALISTW@@HH@Z
0x180022EF8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x180022AB0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1800074B0: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x180023338: "USERS" ??_C@_1M@ILFCOMPO@?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180022FE0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18002E0E8: "__cdecl _imp_ldap_count_entries" __imp_ldap_count_entries
0x18000DBCC: "public: unsigned long __cdecl CPrinterContext::Release(void) __ptr64" ?Release@CPrinterContext@@QEAAKXZ
0x18002A7D0: "__cdecl _hmod__ext_ms_win_printer_winspool_l1_1_0_dll" __hmod__ext_ms_win_printer_winspool_l1_1_0_dll
0x180007818: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x1800229E8: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x1800149D0: "public: unsigned long __cdecl CAccessList::SetLookupServer(unsigned short * __ptr64) __ptr64" ?SetLookupServer@CAccessList@@QEAAKPEAG@Z
0x180001910: "unsigned long __cdecl MartaGetFileNameFromContext(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaGetFileNameFromContext@@YAKPEAG0PEAXPEAPEAG@Z
0x180022AF0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001D13C: "unsigned long __cdecl ReadPrinterRights(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadPrinterRights@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x1800080B5: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x1800086E7: "__cdecl _imp_load_LookupAccountNameLocalW" __imp_load_LookupAccountNameLocalW
0x18001FF48: "unsigned long __cdecl AccctrlpInsertRightsNode(struct _GUID * __ptr64,unsigned short * __ptr64)" ?AccctrlpInsertRightsNode@@YAKPEAU_GUID@@PEAG@Z
0x180019244: "unsigned long __cdecl OpenWmiGuidObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64,enum _MARTA_KERNEL_TYPE * __ptr64)" ?OpenWmiGuidObject@@YAKPEAGKPEAPEAXPEAW4_MARTA_KERNEL_TYPE@@@Z
0x18002E160: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x180022DA8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1800063B0: AccRewriteGetExplicitEntriesFromAcl
0x18002E000: "__cdecl _imp_DsGetRdnW" __imp_DsGetRdnW
0x18000DC30: "unsigned long __cdecl MartaGetRegistryKeyNameFromContext(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaGetRegistryKeyNameFromContext@@YAKPEAG0PEAXPEAPEAG@Z
0x180022CB8: "__cdecl _imp_wcstol" __imp_wcstol
0x18001ABF0: AccProvHandleSetAccessRights
0x1800234C0: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x180022FB0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000831D: "__cdecl _imp_load_DsGetDcNameW" __imp_load_DsGetDcNameW
0x180007CA2: "__cdecl register_onexit_function" _register_onexit_function
0x180007C42: "__cdecl o___stdio_common_vswprintf_s" _o___stdio_common_vswprintf_s
0x180018BA0: ActrlHashGuid
0x18000DAA0: "unsigned long __cdecl MartaOpenPrinterHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenPrinterHandleObject@@YAKPEAXKPEAPEAX@Z
0x180006340: "unsigned long __cdecl MartaGetRegistryKeyTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetRegistryKeyTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x180026C70: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_misc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_misc_l1_1_0_dll
0x180022950: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180001C00: "unsigned long __cdecl MartaOpenRegistryKeyNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenRegistryKeyNamedObject@@YAKPEBGKPEAPEAX@Z
0x180022F58: "__cdecl _imp_NtOpenThread" __imp_NtOpenThread
0x18002E1A8: "__cdecl _imp_LsaLookupSids" __imp_LsaLookupSids
0x180022BF8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180023008: "__cdecl _xi_a" __xi_a
0x180022B20: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180022BE0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180022790: MartaCloseContext
0x180022958: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180007388: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x180022970: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800085CC: "__cdecl _imp_load_SamFreeMemory" __imp_load_SamFreeMemory
0x180011E30: "unsigned long __cdecl GetDesiredAccess(enum _SECURITY_OPEN_TYPE,unsigned long)" ?GetDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@K@Z
0x180017894: "unsigned long __cdecl SetAndPropagateFilePropertyRights(unsigned short * __ptr64,unsigned short * __ptr64,class CAccessList & __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,void * __ptr64)" ?SetAndPropagateFilePropertyRights@@YAKPEAG0AEAVCAccessList@@PEAK2PEAX@Z
0x1800072C0: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x18002A728: "__cdecl _hmod__WLDAP32_dll" __hmod__WLDAP32_dll
0x180022C90: "__cdecl _imp__o_tolower" __imp__o_tolower
0x18002A8D8: "struct _ACTRL_ID_MEM * __ptr64 __ptr64 gpMemCleanupList" ?gpMemCleanupList@@3PEAU_ACTRL_ID_MEM@@EA
0x180022E68: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180008B4A: "__cdecl _tailMerge_ext_ms_win_printer_winspool_l1_1_0_dll" __tailMerge_ext_ms_win_printer_winspool_l1_1_0_dll
0x180007C72: "__cdecl o__crt_atexit" _o__crt_atexit
0x180026F28: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLN
0x18002E288: logoncli_NULL_THUNK_DATA_DLA
0x180027458: logoncli_NULL_THUNK_DATA_DLB
0x18001DDA8: "unsigned long __cdecl ReadRegistryRights(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadRegistryRights@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180026F78: logoncli_NULL_THUNK_DATA_DLN
0x18002E290: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180004E40: "int __cdecl MartaIsExplicitAclCanonical(struct _ACL * __ptr64,unsigned long * __ptr64)" ?MartaIsExplicitAclCanonical@@YAHPEAU_ACL@@PEAK@Z
0x18000889A: "__cdecl _imp_load_DeregisterEventSource" __imp_load_DeregisterEventSource
0x18002E200: "__cdecl _imp_SetServiceObjectSecurity" __imp_SetServiceObjectSecurity
0x180007C5A: "__cdecl o__cexit" _o__cexit
0x1800240E8: "appliesTo" ??_C@_1BE@FONPDEBG@?$AAa?$AAp?$AAp?$AAl?$AAi?$AAe?$AAs?$AAT?$AAo?$AA?$AA@
0x18002E1E8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18002E058: "__cdecl _imp_SamFreeMemory" __imp_SamFreeMemory
0x18002A8CC: bCacheLockInitialized
0x180006A44: "unsigned long __cdecl StandardContextParseName(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?StandardContextParseName@@YAKPEBGPEAPEAG1@Z
0x180007CAE: "__cdecl seh_filter_dll" _seh_filter_dll
0x18002A8C0: ghDll
0x180022C30: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x18000D878: "public: unsigned long __cdecl CLMShareContext::Release(void) __ptr64" ?Release@CLMShareContext@@QEAAKXZ
0x18000F32C: "private: unsigned long __cdecl CAccessList::CompressList(unsigned long,struct _ACCLIST_CNODE * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CompressList@CAccessList@@AEAAKKPEAPEAU_ACCLIST_CNODE@@PEAK@Z
0x180023A80: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180027DB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180027E90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180011B24: "unsigned long __cdecl ConvertStringToSid(unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?ConvertStringToSid@@YAKPEAGPEAPEAX@Z
0x180022AA0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180012330: AccConvertAccessMaskToActrlAccess
0x1800194A0: "unsigned long __cdecl AccGetBufferOfSizeW(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?AccGetBufferOfSizeW@@YAKPEAG0KPEAPEAG@Z
0x18000E89C: "public: unsigned long __cdecl CAccessList::AddOwnerGroup(unsigned long,struct _TRUSTEE_W * __ptr64,struct _TRUSTEE_W * __ptr64) __ptr64" ?AddOwnerGroup@CAccessList@@QEAAKKPEAU_TRUSTEE_W@@0@Z
0x180022E70: "__cdecl _imp_NtQueryVolumeInformationFile" __imp_NtQueryVolumeInformationFile
0x180006624: "unsigned long __cdecl MartaGetAceToEntrySize(struct _ACE_HEADER * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?MartaGetAceToEntrySize@@YAKPEAU_ACE_HEADER@@PEAK1@Z
0x180003F60: "unsigned long __cdecl MartaCompareAndMarkInheritedAces(struct _ACL * __ptr64,struct _ACL * __ptr64,int,int * __ptr64)" ?MartaCompareAndMarkInheritedAces@@YAKPEAU_ACL@@0HPEAH@Z
0x1800233B0: "__cdecl pRawDllMain" _pRawDllMain
0x1800237B0: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@OAMAPFNA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x18001DE88: "unsigned long __cdecl ReadRegistrySecurityInfo(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?ReadRegistrySecurityInfo@@YAKPEAXKPEAPEAX@Z
0x180008201: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x180023FB0: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180023540: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x18001E640: "unsigned long __cdecl SetAndPropagateRegistryPropertyRightsByHandle(struct HKEY__ * __ptr64,class CAccessList & __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SetAndPropagateRegistryPropertyRightsByHandle@@YAKPEAUHKEY__@@AEAVCAccessList@@PEAK2@Z
0x180023490: "__cdecl _sz_api_ms_win_security_lsalookup_l2_1_0_dll" __sz_api_ms_win_security_lsalookup_l2_1_0_dll
0x18001994C: "unsigned long __cdecl AccProvpDoAccessAuditedCalculations(class CAccessList * __ptr64,unsigned short const * __ptr64,struct _TRUSTEE_W * __ptr64,unsigned long,int * __ptr64,int * __ptr64)" ?AccProvpDoAccessAuditedCalculations@@YAKPEAVCAccessList@@PEBGPEAU_TRUSTEE_W@@KPEAH3@Z
0x18000CEFC: "int __cdecl LdapCrackUrl(unsigned short const * __ptr64,struct _LDAP_URL_COMPONENTS * __ptr64)" ?LdapCrackUrl@@YAHPEBGPEAU_LDAP_URL_COMPONENTS@@@Z
0x1800229C0: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x180022DB8: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x18000847A: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x180014F10: "unsigned long __cdecl AccDsReadExtendedRights(struct ldap * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ?AccDsReadExtendedRights@@YAKPEAUldap@@PEAKPEAPEAPEAG2@Z
0x1800058D0: "unsigned long __cdecl MartaGetServiceTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetServiceTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x18002E268: "__cdecl _imp_OpenPrinterW" __imp_OpenPrinterW
0x180023460: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x18001A560: AccProvHandleGetAccessInfoPerObjectType
0x180023430: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x180023E10: "configurationNamingContext" ??_C@_1DG@JEEBFMIB@?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x180007A1C: "__cdecl _isa_available_init" __isa_available_init
0x180014A98: "unsigned long __cdecl WritePropagationFailureList(unsigned long,class CSList & __ptr64,void * __ptr64)" ?WritePropagationFailureList@@YAKKAEAVCSList@@PEAX@Z
0x18002E1B8: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLA
0x180006CBC: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180027518: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLB
0x18000D360: "unsigned long __cdecl LdapParseCrackedHost(unsigned short const * __ptr64,struct _LDAP_URL_COMPONENTS * __ptr64)" ?LdapParseCrackedHost@@YAKPEBGPEAU_LDAP_URL_COMPONENTS@@@Z
0x180022640: MartaGetParentContext
0x180007BDC: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x180026EA8: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLN
0x180022F18: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x180022D68: "__cdecl _imp_GetSecurityDescriptorGroup" __imp_GetSecurityDescriptorGroup
0x180024620: "__cdecl _rtc_izz" __rtc_izz
0x1800052C0: AccctrlFreeRightsCache
0x1800058D0: "unsigned long __cdecl MartaGetPrinterTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetPrinterTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x18000DE50: "unsigned long __cdecl MartaSetWMIGuidRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetWMIGuidRights@@YAKPEAXK0@Z
0x18000FD68: "private: void __cdecl CAccessList::FreeCompressedList(struct _ACCLIST_CNODE * __ptr64,unsigned long) __ptr64" ?FreeCompressedList@CAccessList@@AEAAXPEAU_ACCLIST_CNODE@@K@Z
0x18001E54C: "unsigned long __cdecl SetAndPropagateRegistryPropertyRights(unsigned short * __ptr64,unsigned short * __ptr64,class CAccessList & __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SetAndPropagateRegistryPropertyRights@@YAKPEAG0AEAVCAccessList@@PEAK2@Z
0x180023F20: "\%ws" ??_C@_19GBGGKPHG@?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180006C00: AccProvGetCapabilities
0x18002E198: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x180026AF0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x1800070E0: "__cdecl _security_check_cookie" __security_check_cookie
0x18002E030: "__cdecl _imp_SamOpenGroup" __imp_SamOpenGroup
0x180023000: "__cdecl _xc_z" __xc_z
0x18000D484: "unsigned long __cdecl LdapParseCrackedScopeAndFilter(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _LDAP_URL_COMPONENTS * __ptr64)" ?LdapParseCrackedScopeAndFilter@@YAKPEBG0PEAU_LDAP_URL_COMPONENTS@@@Z
0x180027D50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180022B10: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180023C00: "System\CurrentControlSet\Service" ??_C@_1IM@DHOIBOOK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18002E0B0: "__cdecl _imp_ldap_value_free_len" __imp_ldap_value_free_len
0x180022E10: "__cdecl _imp_CreatePrivateObjectSecurityEx" __imp_CreatePrivateObjectSecurityEx
0x180024008: "'" ??_C@_13ODFOLHGE@?$AA?8?$AA?$AA@
0x18002E088: "__cdecl _imp_ldap_unbind_s" __imp_ldap_unbind_s
0x1800055D8: "unsigned long __cdecl I_MartaRegInitContext(struct _REG_CONTEXT * __ptr64 * __ptr64)" ?I_MartaRegInitContext@@YAKPEAPEAU_REG_CONTEXT@@@Z
0x180008292: "__cdecl _imp_load_LookupAccountNameW" __imp_load_LookupAccountNameW
0x180022C70: "__cdecl _imp__o__wtol" __imp__o__wtol
0x180022DB0: "__cdecl _imp_AddAccessAllowedObjectAce" __imp_AddAccessAllowedObjectAce
0x180008C6C: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x18002E258: "__cdecl _imp_ClosePrinter" __imp_ClosePrinter
0x18002E070: "__cdecl _imp_SamOpenAlias" __imp_SamOpenAlias
0x180022E18: "__cdecl _imp_GetKernelObjectSecurity" __imp_GetKernelObjectSecurity
0x1800080A9: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x18002E2A0: "__cdecl _imp_NetShareGetInfo" __imp_NetShareGetInfo
0x180026B10: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x18001DC04: "unsigned long __cdecl ReadRegistryPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadRegistryPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022A58: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180022DA0: "__cdecl _imp_AddAccessDeniedObjectAce" __imp_AddAccessDeniedObjectAce
0x180022BE8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18002A100: "struct _SID WORLD_SID" ?WORLD_SID@@3U_SID@@A
0x180019F00: AccProvGetAccessInfoPerObjectType
0x180007F15: "__cdecl _imp_load_ldap_msgfree" __imp_load_ldap_msgfree
0x180027560: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLB
0x180022F28: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x180022A20: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180007358: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180017E90: "unsigned long __cdecl AccctrlpDsStrGuidToGuid(unsigned short * __ptr64,struct _GUID * __ptr64)" ?AccctrlpDsStrGuidToGuid@@YAKPEAGPEAU_GUID@@@Z
0x18002E158: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x180026AD0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_srvcli_dll" __DELAY_IMPORT_DESCRIPTOR_srvcli_dll
0x180007CAE: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180022960: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180007C36: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x18001BFC0: "private: unsigned long __cdecl CMemberCheck::GetSidTypeMultiple(long,void * __ptr64 * __ptr64,struct _LSA_TRANSLATED_NAME * __ptr64 * __ptr64) __ptr64" ?GetSidTypeMultiple@CMemberCheck@@AEAAKJPEAPEAXPEAPEAU_LSA_TRANSLATED_NAME@@@Z
0x180022560: MartaGetProperties
0x18000FF94: "public: unsigned long __cdecl CAccessList::GetExplicitAudits(struct _TRUSTEE_W * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExplicitAudits@CAccessList@@QEAAKPEAU_TRUSTEE_W@@PEAGPEAK2@Z
0x18001C560: "unsigned long __cdecl NtProvGetAccessListForHandle(void * __ptr64,enum _SE_OBJECT_TYPE,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList * __ptr64 * __ptr64)" ?NtProvGetAccessListForHandle@@YAKPEAXW4_SE_OBJECT_TYPE@@PEAU_ACTRL_RIGHTS_INFO@@KPEAPEAVCAccessList@@@Z
0x18002A788: "__cdecl _hmod__api_ms_win_core_registry_l2_1_0_dll" __hmod__api_ms_win_core_registry_l2_1_0_dll
0x180027ECC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-activedirectoryclient-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-activedirectoryclient-l1-1-0
0x180023400: "__cdecl _sz_DSPARSE_dll" __sz_DSPARSE_dll
0x18001D310: "unsigned long __cdecl ConvertRegHandleToName(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ConvertRegHandleToName@@YAKPEAUHKEY__@@PEAPEAG@Z
0x18001A2E0: AccProvGetTrusteesAccess
0x18000DAA0: "unsigned long __cdecl MartaOpenWindowHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenWindowHandleObject@@YAKPEAXKPEAPEAX@Z
0x1800229A8: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180022C08: api-ms-win-core-url-l1-1-0_NULL_THUNK_DATA
0x180014E90: "void __cdecl AccDsFreeExtendedRights(unsigned long,unsigned short * __ptr64 * __ptr64 const,unsigned short * __ptr64 * __ptr64 const)" ?AccDsFreeExtendedRights@@YAXKQEAPEAG0@Z
0x180015374: "unsigned long __cdecl AccDsReadSchemaInfo(struct ldap * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ?AccDsReadSchemaInfo@@YAKPEAUldap@@PEAKPEAPEAPEAG12@Z
0x180008146: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x18002A798: "__cdecl _hmod__api_ms_win_security_trustee_l1_1_0_dll" __hmod__api_ms_win_security_trustee_l1_1_0_dll
0x18001889C: AccctrlLookupIdName
0x18000EB14: "private: unsigned long __cdecl CAccessList::BuildAcl(struct _ACCLIST_CNODE * __ptr64,unsigned long,struct _ACL * __ptr64,unsigned long,int * __ptr64) __ptr64" ?BuildAcl@CAccessList@@AEAAKPEAU_ACCLIST_CNODE@@KPEAU_ACL@@KPEAH@Z
0x180022250: MartaReopenOrigContext
0x180008B3E: "__cdecl _imp_load_ClosePrinter" __imp_load_ClosePrinter
0x18001C3B0: "unsigned long __cdecl NtProvDoSet(unsigned short const * __ptr64,enum _SE_OBJECT_TYPE,class CAccessList * __ptr64,struct _ACTRL_OVERLAPPED * __ptr64,unsigned long)" ?NtProvDoSet@@YAKPEBGW4_SE_OBJECT_TYPE@@PEAVCAccessList@@PEAU_ACTRL_OVERLAPPED@@K@Z
0x180022AD8: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x180023A98: "LDAP://" ??_C@_1BA@MKHJNDJL@?$AAL?$AAD?$AAA?$AAP?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x18001C2AC: "unsigned long __cdecl NtProvDoHandleSet(void * __ptr64,enum _SE_OBJECT_TYPE,class CAccessList * __ptr64,struct _ACTRL_OVERLAPPED * __ptr64,unsigned long)" ?NtProvDoHandleSet@@YAKPEAXW4_SE_OBJECT_TYPE@@PEAVCAccessList@@PEAU_ACTRL_OVERLAPPED@@K@Z
0x18001E0A0: "unsigned long __cdecl SetAndPropRegRights(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64,void * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SetAndPropRegRights@@YAKPEAUHKEY__@@PEAGKPEAX2PEAK3@Z
0x18001F3B0: AccGetInheritanceSource
0x180007DB7: "__cdecl _imp_load_IIDFromString" __imp_load_IIDFromString
0x180022C10: "__cdecl _imp__o__callnewh" __imp__o__callnewh
0x180022E00: "__cdecl _imp_GetPrivateObjectSecurity" __imp_GetPrivateObjectSecurity
0x180023D68: "distinguishedName" ??_C@_1CE@OEKOHCPI@?$AAd?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AAu?$AAi?$AAs?$AAh?$AAe?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180023358: "CURRENT_USER" ??_C@_1BK@BPNFBNKN@?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180022B98: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180026B70: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x180023378: "CLASSES_ROOT" ??_C@_1BK@JEIPMFAJ@?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180004F40: "unsigned long __cdecl MartaSetRegistryKeyRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetRegistryKeyRights@@YAKPEAXK0@Z
0x1800224F0: MartaGetRights
0x180023030: "__cdecl _xp_z" __xp_z
0x180008426: "__cdecl _imp_load_ldap_unbind" __imp_load_ldap_unbind
0x180023B28: "\\.\WMIDataDevice" ??_C@_1CE@GMGHJOGN@?$AA?2?$AA?2?$AA?4?$AA?2?$AAW?$AAM?$AAI?$AAD?$AAa?$AAt?$AAa?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1800084F9: "__cdecl _imp_load_SamCloseHandle" __imp_load_SamCloseHandle
0x180018D5C: "unsigned long __cdecl GetKernelSecurityInfo(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?GetKernelSecurityInfo@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180008329: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x180027E68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180027F44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x180019620: "unsigned long __cdecl ReadSharePropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadSharePropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022B30: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000DE7C: "public: unsigned long __cdecl CWindowContext::GetWindowRights(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?GetWindowRights@CWindowContext@@QEAAKKPEAPEAX@Z
0x18002E1B0: "__cdecl _imp_LsaClose" __imp_LsaClose
0x180024630: "__cdecl _rtc_tzz" __rtc_tzz
0x18002E098: "__cdecl _imp_ldap_bind_sW" __imp_ldap_bind_sW
0x180023048: "__cdecl _guard_fids_table" __guard_fids_table
0x180022CA8: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x1800106BC: "private: unsigned long __cdecl CAccessList::InsertEntryInAcl(struct _ACTRL_ACCESS_ENTRYW * __ptr64,struct _GUID * __ptr64,struct _ACL * __ptr64) __ptr64" ?InsertEntryInAcl@CAccessList@@AEAAKPEAU_ACTRL_ACCESS_ENTRYW@@PEAU_GUID@@PEAU_ACL@@@Z
0x180007ECD: "__cdecl _imp_load_LdapMapErrorToWin32" __imp_load_LdapMapErrorToWin32
0x180007FFA: "__cdecl _imp_load_ldap_connect" __imp_load_ldap_connect
0x180026B30: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x1800220D0: "__cdecl load_config_used" _load_config_used
0x18001DF44: "unsigned long __cdecl RegGetDesiredAccess(enum _SECURITY_OPEN_TYPE,unsigned long)" ?RegGetDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@K@Z
0x180007EDF: "__cdecl _imp_load_ldap_first_entry" __imp_load_ldap_first_entry
0x180022E98: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x18002A778: "__cdecl _hmod__api_ms_win_security_lsapolicy_l1_1_0_dll" __hmod__api_ms_win_security_lsapolicy_l1_1_0_dll
0x180022D48: "__cdecl _imp_DsCrackNamesW" __imp_DsCrackNamesW
0x18002E148: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLA
0x18000CE58: "int __cdecl LdapBindWithOptionalRediscover(struct ldap * __ptr64,unsigned short * __ptr64)" ?LdapBindWithOptionalRediscover@@YAHPEAUldap@@PEAG@Z
0x18000D22C: "unsigned long __cdecl LdapParseCrackedAttributeList(unsigned short const * __ptr64,struct _LDAP_URL_COMPONENTS * __ptr64)" ?LdapParseCrackedAttributeList@@YAKPEBGPEAU_LDAP_URL_COMPONENTS@@@Z
0x180005780: "unsigned long __cdecl MartaGetKernelRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetKernelRights@@YAKPEAXKPEAPEAX@Z
0x180022978: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180022968: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180026C30: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_eventlog_legacy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_eventlog_legacy_l1_1_0_dll
0x180007CD4: swprintf_s
0x1800240B0: "Job" ??_C@_17EKANHMLE@?$AAJ?$AAo?$AAb?$AA?$AA@
0x18000C7D4: "public: unsigned long __cdecl CDsObjectContext::SetDsObjectRights(unsigned long,void * __ptr64) __ptr64" ?SetDsObjectRights@CDsObjectContext@@QEAAKKPEAX@Z
0x18000C270: "unsigned long __cdecl MartaGetDsParentName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaGetDsParentName@@YAKPEAGPEAPEAG@Z
0x180023A88: "ldap://" ??_C@_1BA@EHEOAIBG@?$AAl?$AAd?$AAa?$AAp?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x180019388: "unsigned long __cdecl ReadKernelPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadKernelPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180026B90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x180023018: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x18000844A: "__cdecl _imp_load_ldap_next_entry" __imp_load_ldap_next_entry
0x180001990: "unsigned long __cdecl MartaGetRegistryKeyParentContext(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetRegistryKeyParentContext@@YAKPEAXKPEAPEAX@Z
0x18001BF50: "unsigned long __cdecl GetDomainName(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetDomainName@@YAKPEAXPEAPEAG@Z
0x180026E18: WLDAP32_NULL_THUNK_DATA_DLN
0x18001C6DC: "unsigned long __cdecl NtProvGetAccessListForObject(unsigned short * __ptr64,enum _SE_OBJECT_TYPE,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList * __ptr64 * __ptr64)" ?NtProvGetAccessListForObject@@YAKPEAGW4_SE_OBJECT_TYPE@@PEAU_ACTRL_RIGHTS_INFO@@KPEAPEAVCAccessList@@@Z
0x18002A770: "__cdecl _hmod__SAMLIB_dll" __hmod__SAMLIB_dll
0x18000C220: "unsigned long __cdecl MartaGetWindowProperties(void * __ptr64,struct _MARTA_OBJECT_PROPERTIES * __ptr64)" ?MartaGetWindowProperties@@YAKPEAXPEAU_MARTA_OBJECT_PROPERTIES@@@Z
0x18001D488: "unsigned long __cdecl GetRegistryParentRights(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?GetRegistryParentRights@@YAKPEAGKPEAPEAX@Z
0x180027E18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180022BA8: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x18002E2A8: "__cdecl _imp_NetShareSetInfo" __imp_NetShareSetInfo
0x180022C88: "__cdecl _imp_qsort" __imp_qsort
0x18001954C: "unsigned long __cdecl PingLmShare(unsigned short const * __ptr64)" ?PingLmShare@@YAKPEBG@Z
0x180013CD0: "int __cdecl DoPropertiesMatch(unsigned short * __ptr64,unsigned short * __ptr64)" ?DoPropertiesMatch@@YAHPEAG0@Z
0x180022E28: "__cdecl _imp_DestroyPrivateObjectSecurity" __imp_DestroyPrivateObjectSecurity
0x180006B90: "unsigned long __cdecl MartaSetServiceRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetServiceRights@@YAKPEAXK0@Z
0x180022E08: "__cdecl _imp_SetKernelObjectSecurity" __imp_SetKernelObjectSecurity
0x180007808: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180023C90: "%SystemRoot%\system32\ntmarta.dl" ??_C@_1EE@CIIMPHHB@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAn?$AAt?$AAm?$AAa?$AAr?$AAt?$AAa?$AA?4?$AAd?$AAl@
0x180022F08: "__cdecl _imp_NtSetSecurityObject" __imp_NtSetSecurityObject
0x180004D20: "unsigned long __cdecl MartaCompareAcesAndMarkMasks(unsigned char * __ptr64,unsigned long * __ptr64,struct _EXPLICIT_ACCESS_W * __ptr64,struct _MARTA_ACCESS_INFO * __ptr64,int)" ?MartaCompareAcesAndMarkMasks@@YAKPEAEPEAKPEAU_EXPLICIT_ACCESS_W@@PEAU_MARTA_ACCESS_INFO@@H@Z
0x180022A68: api-ms-win-core-job-l2-1-0_NULL_THUNK_DATA
0x180002554: "unsigned long __cdecl I_MartaRegDupString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?I_MartaRegDupString@@YAKPEBGPEAPEAG@Z
0x18000DB90: "unsigned long __cdecl MartaSetPrinterRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetPrinterRights@@YAKPEAXK0@Z
0x180019804: "public: void * __ptr64 __cdecl CAccessList::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAccessList@@QEAAPEAXI@Z
0x18002A8E0: "int bRightsCacheLockInitialized" ?bRightsCacheLockInitialized@@3HA
0x18000578C: "public: unsigned long __cdecl CKernelContext::GetKernelRights(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?GetKernelRights@CKernelContext@@QEAAKKPEAPEAX@Z
0x180022A78: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180022E88: "__cdecl _imp_NtClose" __imp_NtClose
0x1800058D0: "unsigned long __cdecl MartaGetWMIGuidTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetWMIGuidTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x1800085A8: "__cdecl _imp_load_SamOpenUser" __imp_load_SamOpenUser
0x18000DC10: "unsigned long __cdecl MartaGetRegistryKey64DesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long)" ?MartaGetRegistryKey64DesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HK@Z
0x180023AD8: "nTSecurityDescriptor" ??_C@_1CK@IPFODMAF@?$AAn?$AAT?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x18002E038: "__cdecl _imp_SamCloseHandle" __imp_SamCloseHandle
0x180022A70: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1800200C8: "unsigned long __cdecl AccctrlpLoadRightsCacheFromSchema(struct ldap * __ptr64,unsigned short * __ptr64)" ?AccctrlpLoadRightsCacheFromSchema@@YAKPEAUldap@@PEAG@Z
0x1800140C4: "unsigned long __cdecl GetNodeForProperty(class CSList & __ptr64,unsigned short * __ptr64,struct _ACCLIST_NODE * __ptr64 * __ptr64)" ?GetNodeForProperty@@YAKAEAVCSList@@PEAGPEAPEAU_ACCLIST_NODE@@@Z
0x18002E188: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x180024010: "\BaseNamedObjects" ??_C@_1CE@NPBNEBGN@?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x18000C6BC: "unsigned long __cdecl MartaStampSD(unsigned short * __ptr64,unsigned long,unsigned long,void * __ptr64,struct ldap * __ptr64)" ?MartaStampSD@@YAKPEAGKKPEAXPEAUldap@@@Z
0x180022B90: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180022FD0: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x180022B28: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180022EB0: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1800164C4: "unsigned long __cdecl GetFileParentRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?GetFileParentRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KPEAPEAU_ACL@@2PEAPEAX@Z
0x180027D14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180008602: "__cdecl _imp_load_LsaFreeMemory" __imp_load_LsaFreeMemory
0x18001462C: "unsigned long __cdecl MakeSDAbsolute(void * __ptr64,unsigned long,void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64)" ?MakeSDAbsolute@@YAKPEAXKPEAPEAX00@Z
0x180015B90: "unsigned long __cdecl PingDSObjByNameRes(unsigned short * __ptr64,struct DS_NAME_RESULTW * __ptr64)" ?PingDSObjByNameRes@@YAKPEAGPEAUDS_NAME_RESULTW@@@Z
0x180022EC0: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x180022EA8: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x18001B5EC: "private: unsigned long __cdecl CMemberCheck::CheckAlias(void * __ptr64,int * __ptr64,unsigned long) __ptr64" ?CheckAlias@CMemberCheck@@AEAAKPEAXPEAHK@Z
0x18002E078: "__cdecl _imp_SamQueryInformationUser" __imp_SamQueryInformationUser
0x1800062D0: "unsigned long __cdecl MartaAddRefLMShareContext(void * __ptr64)" ?MartaAddRefLMShareContext@@YAKPEAX@Z
0x180008C6C: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x18000D7A0: "unsigned long __cdecl MartaGetLMShareRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetLMShareRights@@YAKPEAXKPEAPEAX@Z
0x180024048: "Mutant" ??_C@_1O@FBKOCLFA@?$AAM?$AAu?$AAt?$AAa?$AAn?$AAt?$AA?$AA@
0x180022DF8: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x180008C60: ApiSetQueryApiSetPresence
0x180022EE8: "__cdecl _imp_NtQuerySecurityObject" __imp_NtQuerySecurityObject
0x180007CBA: free
0x18002E150: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x180012FD0: AccLookupAccountSid
0x180023EE8: "\Device\LanmanRedirector" ??_C@_1DC@HPJECOGA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x18001A7D0: AccProvHandleGetTrusteesAccess
0x180022C38: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x180022DC8: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x18000E71C: "public: unsigned long __cdecl CAccessList::AddAcl(struct _ACL * __ptr64,struct _ACL * __ptr64,void * __ptr64,void * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long) __ptr64" ?AddAcl@CAccessList@@QEAAKPEAU_ACL@@0PEAX1KPEAGK@Z
0x180023F58: "SymbolicLink" ??_C@_1BK@KDPOKCA@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
0x18000573C: "public: unsigned long __cdecl CKernelContext::Release(void) __ptr64" ?Release@CKernelContext@@QEAAKXZ
0x180004ED0: "unsigned long __cdecl MartaReopenRegistryKeyContext(void * __ptr64,unsigned long)" ?MartaReopenRegistryKeyContext@@YAKPEAXK@Z
0x180022F30: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x180022A38: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180026AB0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_DSPARSE_dll" __DELAY_IMPORT_DESCRIPTOR_DSPARSE_dll
0x18002E018: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180022B80: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180022B40: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180024100: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18002E118: "__cdecl _imp_ldap_initW" __imp_ldap_initW
0x180007CA2: "__cdecl o__register_onexit_function" _o__register_onexit_function
0x18002E1C0: "__cdecl _imp_BuildImpersonateTrusteeW" __imp_BuildImpersonateTrusteeW
0x180023B80: "sub" ??_C@_17HCMCBFBP@?$AAs?$AAu?$AAb?$AA?$AA@
0x18002A120: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180022A98: "__cdecl _imp_OpenFileMappingW" __imp_OpenFileMappingW
0x180007A10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180022A90: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180008E29: memcmp
0x180022CB0: "__cdecl _imp__o_wcsncpy_s" __imp__o_wcsncpy_s
0x180007DC3: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x180022CC8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180008C6C: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180006320: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180008152: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x180008402: "__cdecl _imp_load_ldap_value_freeW" __imp_load_ldap_value_freeW
0x180007D2C: "__cdecl _imp_load_UuidFromStringW" __imp_load_UuidFromStringW
0x180013370: AccLookupAccountTrustee
0x180007C42: "__cdecl _stdio_common_vswprintf_s" __stdio_common_vswprintf_s
0x180022E80: "__cdecl _imp_NtQueryObject" __imp_NtQueryObject
0x18002E0D0: "__cdecl _imp_LdapMapErrorToWin32" __imp_LdapMapErrorToWin32
0x180027EB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180027D78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800058D0: "unsigned long __cdecl MartaGetLMShareTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetLMShareTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x18001FB40: AccRewriteGetNamedRights
0x180023EA0: "(objectClass=controlAccessRight)" ??_C@_1EC@GNCGEOL@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$CJ@
0x18002A000: "struct _ACC_MARTA_FUNCTIONS MartaFuncs" ?MartaFuncs@@3U_ACC_MARTA_FUNCTIONS@@A
0x180007F39: "__cdecl _imp_load_DsGetRdnW" __imp_load_DsGetRdnW
0x18002E108: "__cdecl _imp_ldap_get_valuesW" __imp_ldap_get_valuesW
0x18001A1A0: AccProvGetOperationResults
0x18002E1A0: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x180008C20: "__cdecl _imp_load_OpenPrinterW" __imp_load_OpenPrinterW
0x180007FD6: "__cdecl _imp_load_ldap_set_optionW" __imp_load_ldap_set_optionW
0x18002E008: DSPARSE_NULL_THUNK_DATA_DLA
0x18002E1C8: "__cdecl _imp_BuildTrusteeWithSidW" __imp_BuildTrusteeWithSidW
0x180004630: AccRewriteSetEntriesInAcl
0x180023398: "\REGISTRY\" ??_C@_1BG@OKCBELMP@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AA?$AA@
0x18002E280: "__cdecl _imp_DsGetDcNameW" __imp_DsGetDcNameW
0x1800114C4: "public: unsigned long __cdecl CAccessList::RevokeTrusteeAccess(unsigned long,struct _ACTRL_ALISTW * __ptr64,unsigned short * __ptr64) __ptr64" ?RevokeTrusteeAccess@CAccessList@@QEAAKKPEAU_ACTRL_ALISTW@@PEAG@Z
0x180017F84: "int __cdecl AccctrlpInsertIdNameNode(struct _ACTRL_OBJ_ID_CACHE * __ptr64 * __ptr64,struct _ACTRL_OBJ_ID_CACHE * __ptr64)" ?AccctrlpInsertIdNameNode@@YAHPEAPEAU_ACTRL_OBJ_ID_CACHE@@PEAU1@@Z
0x180022CA0: "__cdecl _imp__o_wcscat_s" __imp__o_wcscat_s
0x180007C12: "__cdecl initterm_e" _initterm_e
0x180013D0C: "int __cdecl EqualSecurityDescriptors(void * __ptr64,void * __ptr64)" ?EqualSecurityDescriptors@@YAHPEAX0@Z
0x180007630: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180018750: AccctrlLookupGuid
0x180023760: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@FIHMJCLF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x180019730: "unsigned long __cdecl SetShareSecurityInfo(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,void * __ptr64)" ?SetShareSecurityInfo@@YAKPEAGK0PEAX@Z
0x180022FC8: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x180006690: "unsigned long __cdecl MartaOpenKernelNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenKernelNamedObject@@YAKPEBGKPEAPEAX@Z
0x180007444: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x1800058E0: "struct _ACC_MARTA_FUNCTIONS * __ptr64 __cdecl GetMartaExtensionInterface(void)" ?GetMartaExtensionInterface@@YAPEAU_ACC_MARTA_FUNCTIONS@@XZ
0x180017370: "unsigned long __cdecl ReadFilePropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadFilePropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022FD8: ntdll_NULL_THUNK_DATA
0x18000DB00: "unsigned long __cdecl MartaOpenPrinterNamedObject(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenPrinterNamedObject@@YAKPEBGKPEAPEAX@Z
0x18001457C: "unsigned long __cdecl LookupTrusteeNodeInformation(unsigned short * __ptr64,struct _TRUSTEE_NODE * __ptr64,unsigned long)" ?LookupTrusteeNodeInformation@@YAKPEAGPEAU_TRUSTEE_NODE@@K@Z
0x180022C58: "__cdecl _imp_memcpy" __imp_memcpy
0x180007C4E: "__cdecl o__callnewh" _o__callnewh
0x180005530: "unsigned long __cdecl MartaOpenRegistryKeyHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenRegistryKeyHandleObject@@YAKPEAXKPEAPEAX@Z
0x180022DF0: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x1800086F3: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x1800062D0: "unsigned long __cdecl MartaAddRefServiceContext(void * __ptr64)" ?MartaAddRefServiceContext@@YAKPEAX@Z
0x180004490: "unsigned long __cdecl MartaGetRegistryKeyDesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long)" ?MartaGetRegistryKeyDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HK@Z
0x180023B68: "base" ??_C@_19FEGIJLLP@?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x180022EC8: "__cdecl _imp_NtOpenDirectoryObject" __imp_NtOpenDirectoryObject
0x180008C6C: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x18000FCAC: "protected: struct _CSLIST_NODE * __ptr64 __cdecl CSList::FindNode(void * __ptr64,int (__cdecl*)(void * __ptr64,void * __ptr64)) __ptr64" ?FindNode@CSList@@IEAAPEAU_CSLIST_NODE@@PEAXP6AH00@Z@Z
0x180008A59: "__cdecl _tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x180022CA8: "__cdecl _imp__o_wcscpy_s" __imp__o_wcscpy_s
0x18001ACF0: AccProvIsAccessAudited
0x18001D010: "unsigned long __cdecl ClosePrinterObject(void * __ptr64)" ?ClosePrinterObject@@YAKPEAX@Z
0x180023F88: ":\$Extend" ??_C@_1BE@BAJDLGDP@?$AA?3?$AA?2?$AA$?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AA?$AA@
0x180022BB8: "__cdecl _imp_OpenWaitableTimerW" __imp_OpenWaitableTimerW
0x180027DDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180023678: "ext-ms-win-ntuser-misc-l1-5-0" ??_C@_1DM@BJBMLEFI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA5?$AA?9?$AA0?$AA?$AA@
0x180005780: "unsigned long __cdecl MartaGetWMIGuidRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetWMIGuidRights@@YAKPEAXKPEAPEAX@Z
0x18000C78C: "public: unsigned long __cdecl CDsObjectContext::Release(void) __ptr64" ?Release@CDsObjectContext@@QEAAKXZ
0x1800205AC: "unsigned long __cdecl MartaTrusteeSidAndGuidSize(struct _TRUSTEE_W * __ptr64,int,void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?MartaTrusteeSidAndGuidSize@@YAKPEAU_TRUSTEE_W@@HPEAPEAXPEAK2@Z
0x180022940: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x1800062D0: "unsigned long __cdecl MartaAddRefWMIGuidContext(void * __ptr64)" ?MartaAddRefWMIGuidContext@@YAKPEAX@Z
0x18002A0C0: "__cdecl _security_cookie" __security_cookie
0x18000D8CC: "public: unsigned long __cdecl CPrinterContext::GetPrinterRights(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?GetPrinterRights@CPrinterContext@@QEAAKKPEAPEAX@Z
0x1800058D0: "unsigned long __cdecl MartaGetWindowTypeProperties(struct _MARTA_OBJECT_TYPE_PROPERTIES * __ptr64)" ?MartaGetWindowTypeProperties@@YAKPEAU_MARTA_OBJECT_TYPE_PROPERTIES@@@Z
0x180022D98: "__cdecl _imp_AddAccessDeniedAceEx" __imp_AddAccessDeniedAceEx
0x180007828: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180022CE0: "__cdecl _imp__o___stdio_common_vswprintf_s" __imp__o___stdio_common_vswprintf_s
0x180006B4C: "public: unsigned long __cdecl CServiceContext::Release(void) __ptr64" ?Release@CServiceContext@@QEAAKXZ
0x180015DCC: "unsigned long __cdecl ReadDSObjSecDesc(struct ldap * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?ReadDSObjSecDesc@@YAKPEAUldap@@PEAGKPEAPEAX@Z
0x18002E068: "__cdecl _imp_SamGetMembersInGroup" __imp_SamGetMembersInGroup
0x180027570: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA_DLB
0x180027D28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x1800229E0: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x180008438: "__cdecl _imp_load_ldap_count_entries" __imp_load_ldap_count_entries
0x180022A10: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180020988: "unsigned long __cdecl ReadWindowPropertyRights(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadWindowPropertyRights@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022C00: "__cdecl _imp_UrlUnescapeW" __imp_UrlUnescapeW
0x18000CE28: "void * __ptr64 __cdecl WmipAllocEvent(void)" ?WmipAllocEvent@@YAPEAXXZ
0x180022A28: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000CB20: "unsigned long __cdecl MartaGetFileParentName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?MartaGetFileParentName@@YAKPEAGPEAPEAG@Z
0x180022F48: "__cdecl _imp_NtOpenSection" __imp_NtOpenSection
0x180022D78: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180006380: "unsigned long __cdecl MartaGetRegistryKey32DesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long)" ?MartaGetRegistryKey32DesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HK@Z
0x18001C500: "void __cdecl NtProvFreeWorkerItem(void * __ptr64)" ?NtProvFreeWorkerItem@@YAXPEAX@Z
0x1800081E3: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x180027D8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180022A40: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x180007D38: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x180013B10: "int __cdecl CompTrustees(void * __ptr64,void * __ptr64)" ?CompTrustees@@YAHPEAX0@Z
0x180022D00: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x180023348: "USER" ??_C@_19KGHAHCFG@?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x18002A790: "__cdecl _hmod__api_ms_win_eventlog_legacy_l1_1_0_dll" __hmod__api_ms_win_eventlog_legacy_l1_1_0_dll
0x180023B78: "one" ??_C@_17KNBAPLJK@?$AAo?$AAn?$AAe?$AA?$AA@
0x180027EF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-url-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-url-l1-1-0
0x18000FCFC: "private: unsigned long __cdecl CAccessList::FreeAEList(struct _ACTRL_ACCESS_ENTRY_LISTW * __ptr64) __ptr64" ?FreeAEList@CAccessList@@AEAAKPEAU_ACTRL_ACCESS_ENTRY_LISTW@@@Z
0x1800229D8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18002E228: "__cdecl _imp_SetUserObjectSecurity" __imp_SetUserObjectSecurity
0x180022D70: "__cdecl _imp_CopySid" __imp_CopySid
0x180005424: AccctrlInitializeIdNameCache
0x180006320: "unsigned long __cdecl MartaReopenFileOrigContext(void * __ptr64,unsigned long)" ?MartaReopenFileOrigContext@@YAKPEAXK@Z
0x180022B48: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800112B8: "public: unsigned long __cdecl CAccessList::RemoveTrusteeFromAccess(unsigned long,struct _TRUSTEE_W * __ptr64,unsigned short * __ptr64) __ptr64" ?RemoveTrusteeFromAccess@CAccessList@@QEAAKKPEAU_TRUSTEE_W@@PEAG@Z
0x180022CF0: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x1800166D0: "unsigned long __cdecl IsFileContainer(void * __ptr64,int * __ptr64)" ?IsFileContainer@@YAKPEAXPEAH@Z
0x180022EE0: "__cdecl _imp_NtQuerySymbolicLinkObject" __imp_NtQuerySymbolicLinkObject
0x18002A0D0: "__cdecl _isa_available" __isa_available
0x180021010: "unsigned long __cdecl MartaManualPropagation(void * __ptr64,unsigned long,void * __ptr64,struct _GENERIC_MAPPING * __ptr64,int,int,struct _MARTA_SET_FUNCTION_CONTEXT * __ptr64,int)" ?MartaManualPropagation@@YAKPEAXK0PEAU_GENERIC_MAPPING@@HHPEAU_MARTA_SET_FUNCTION_CONTEXT@@H@Z
0x1800175DC: "unsigned long __cdecl ReadFileRights(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadFileRights@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x18000C060: "unsigned long __cdecl MartaConvertDsObjectNameToGuid(unsigned short const * __ptr64,struct _GUID * __ptr64)" ?MartaConvertDsObjectNameToGuid@@YAKPEBGPEAU_GUID@@@Z
0x1800058F0: "unsigned long __cdecl MartaOpenFileHandleObject(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaOpenFileHandleObject@@YAKPEAXKPEAPEAX@Z
0x1800044A0: "unsigned long __cdecl MartaGetRegistryKeyDesiredAccess(enum _SECURITY_OPEN_TYPE,int,unsigned long,unsigned long)" ?MartaGetRegistryKeyDesiredAccess@@YAKW4_SECURITY_OPEN_TYPE@@HKK@Z
0x18002E0C0: "__cdecl _imp_ldap_first_entry" __imp_ldap_first_entry
0x180005F90: "unsigned long __cdecl MartaFindNextFile(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaFindNextFile@@YAKPEAXKPEAPEAX@Z
0x1800229F8: "__cdecl _imp_GetFileInformationByHandleEx" __imp_GetFileInformationByHandleEx
0x18002E090: "__cdecl _imp_ldap_modify_ext_sW" __imp_ldap_modify_ext_sW
0x180022990: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180022AB8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x1800234D0: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x180026B50: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll
0x180006D04: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x180022800: MartaAddRefContext
0x18000C8B4: "unsigned long __cdecl I_ComparePhysicalNameInformation(int * __ptr64,struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION * __ptr64,struct _UNICODE_STRING const * __ptr64,void * __ptr64)" ?I_ComparePhysicalNameInformation@@YAKPEAHPEAU_FILE_NETWORK_PHYSICAL_NAME_INFORMATION@@PEBU_UNICODE_STRING@@PEAX@Z
0x180022C78: "__cdecl _imp__o_free" __imp__o_free
0x180022B38: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180022C40: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x18002A714: "__cdecl _favor" __favor
0x180016D84: "unsigned long __cdecl PropagateFileRightsDeep(void * __ptr64,void * __ptr64,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long,void * __ptr64,class CSList & __ptr64)" ?PropagateFileRightsDeep@@YAKPEAX0KPEAG1PEAK2K0AEAVCSList@@@Z
0x18002A110: "struct _GENERIC_MAPPING gRegGenMapping" ?gRegGenMapping@@3U_GENERIC_MAPPING@@A
0x180007708: "__cdecl _security_init_cookie" __security_init_cookie
0x18002E100: "__cdecl _imp_ldap_value_freeW" __imp_ldap_value_freeW
0x18002E060: "__cdecl _imp_SamGetMembersInAlias" __imp_SamGetMembersInAlias
0x180023D90: "subschemaSubentry" ??_C@_1CE@PCGGNMAN@?$AAs?$AAu?$AAb?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAS?$AAu?$AAb?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x18000895C: IsGetUserObjectSecurityPresent
0x1800062D0: "unsigned long __cdecl MartaAddRefWindowContext(void * __ptr64)" ?MartaAddRefWindowContext@@YAKPEAX@Z
0x180022C18: "__cdecl _imp__cexit" __imp__cexit
0x180002150: "unsigned long __cdecl MartaFindFirstRegistryKey(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaFindFirstRegistryKey@@YAKPEAXKPEAPEAX@Z
0x180022C48: "__cdecl _imp__o__register_onexit_function" __imp__o__register_onexit_function
0x18001E82C: "int __cdecl MartaIsSDNT5Style(void * __ptr64)" ?MartaIsSDNT5Style@@YAHPEAX@Z
0x180014464: "unsigned long __cdecl InsertPropagationFailureEntry(class CSList & __ptr64,unsigned long,unsigned long,unsigned short * __ptr64)" ?InsertPropagationFailureEntry@@YAKAEAVCSList@@KKPEAG@Z
0x1800108CC: "private: unsigned long __cdecl CAccessList::MarshalAccessList(unsigned long,struct _ACTRL_ALISTW * __ptr64 * __ptr64) __ptr64" ?MarshalAccessList@CAccessList@@AEAAKKPEAPEAU_ACTRL_ALISTW@@@Z
0x180022DC0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x180022C60: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x180022D88: "__cdecl _imp_AddAuditAccessAceEx" __imp_AddAuditAccessAceEx
0x180022ED8: "__cdecl _imp_NtOpenSymbolicLinkObject" __imp_NtOpenSymbolicLinkObject
0x1800083CC: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x180008E1D: wcscmp
0x180022F00: "__cdecl _imp_RtlGetFullPathName_U" __imp_RtlGetFullPathName_U
0x18002E168: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA_DLA
0x1800186D8: "void __cdecl AccctrlpRemoveIdNameNode(struct _ACTRL_OBJ_ID_CACHE * __ptr64 * __ptr64,struct _ACTRL_OBJ_ID_CACHE * __ptr64)" ?AccctrlpRemoveIdNameNode@@YAXPEAPEAU_ACTRL_OBJ_ID_CACHE@@PEAU1@@Z
0x18000D840: "unsigned long __cdecl MartaSetLMShareRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetLMShareRights@@YAKPEAXK0@Z
0x180018BD0: ActrlHashIdName
0x180014E60: CNodeCompare
0x18000DFD0: "unsigned long __cdecl MartaCloseWindowContext(void * __ptr64)" ?MartaCloseWindowContext@@YAKPEAX@Z
0x18001113C: "public: unsigned long __cdecl CAccessList::MarshalAccessLists(unsigned long,struct _ACTRL_ALISTW * __ptr64 * __ptr64,struct _ACTRL_ALISTW * __ptr64 * __ptr64) __ptr64" ?MarshalAccessLists@CAccessList@@QEAAKKPEAPEAU_ACTRL_ALISTW@@0@Z
0x180023040: "__cdecl _xt_z" __xt_z
0x1800223A0: MartaSetRights
0x18001B7DC: "private: unsigned long __cdecl CMemberCheck::CheckDomainUsers(void * __ptr64,int * __ptr64,int * __ptr64) __ptr64" ?CheckDomainUsers@CMemberCheck@@AEAAKPEAXPEAH1@Z
0x18001A650: AccProvHandleGetAllRights
0x180002FB0: "int __cdecl MartaUpdateTree(unsigned long,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,struct _MARTA_SET_FUNCTION_CONTEXT * __ptr64,struct _GENERIC_MAPPING * __ptr64)" ?MartaUpdateTree@@YAHKPEAX000PEAU_MARTA_SET_FUNCTION_CONTEXT@@PEAU_GENERIC_MAPPING@@@Z
0x18002E010: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x180022C80: "__cdecl _imp_malloc" __imp_malloc
0x180008888: "__cdecl _imp_load_ReportEventW" __imp_load_ReportEventW
0x180026BB0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll" __DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll
0x180026C50: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_trustee_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_trustee_l1_1_0_dll
0x180007300: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x180022C98: "__cdecl _imp__o_towlower" __imp__o_towlower
0x180024078: "Semaphore" ??_C@_1BE@NPGPGCB@?$AAS?$AAe?$AAm?$AAa?$AAp?$AAh?$AAo?$AAr?$AAe?$AA?$AA@
0x180018E80: "unsigned long __cdecl OpenKernelObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64,enum _MARTA_KERNEL_TYPE * __ptr64)" ?OpenKernelObject@@YAKPEAGKPEAPEAXPEAW4_MARTA_KERNEL_TYPE@@@Z
0x180022E90: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x18002B4C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUmgnzigzUmvdhixUlyquivUznwGEUzxokxsOlyq@ntmarta" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUmgnzigzUmvdhixUlyquivUznwGEUzxokxsOlyq@ntmarta
0x1800229B8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18002A738: "__cdecl _hmod__srvcli_dll" __hmod__srvcli_dll
0x180022C48: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x18000DA90: "unsigned long __cdecl MartaGetPrinterRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetPrinterRights@@YAKPEAXKPEAPEAX@Z
0x180002C10: AccRewriteSetNamedRights
0x180005DC0: "unsigned long __cdecl I_MartaFileGetNtParentString(unsigned short * __ptr64)" ?I_MartaFileGetNtParentString@@YAKPEAG@Z
0x180022F60: "__cdecl _imp_NtOpenTimer" __imp_NtOpenTimer
0x1800073A4: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180023A74: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x18000DDA0: "unsigned long __cdecl MartaGetServiceRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetServiceRights@@YAKPEAXKPEAPEAX@Z
0x180007170: "__cdecl _report_gsfailure" __report_gsfailure
0x180018588: "struct _ACTRL_OBJ_ID_CACHE * __ptr64 __cdecl AccctrlpLookupNameInCache(unsigned short * __ptr64)" ?AccctrlpLookupNameInCache@@YAPEAU_ACTRL_OBJ_ID_CACHE@@PEAG@Z
0x180023D28: "TypesSupported" ??_C@_1BO@CHOLPGLN@?$AAT?$AAy?$AAp?$AAe?$AAs?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x180026BF0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x180022948: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x180023FD8: "PROPERTY-GUID '" ??_C@_1CA@ILHEFNBF@?$AAP?$AAR?$AAO?$AAP?$AAE?$AAR?$AAT?$AAY?$AA?9?$AAG?$AAU?$AAI?$AAD?$AA?5?$AA?8?$AA?$AA@
0x180023BE0: "AclPropagation" ??_C@_1BO@GPFHECFA@?$AAA?$AAc?$AAl?$AAP?$AAr?$AAo?$AAp?$AAa?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180007C72: "__cdecl crt_atexit" _crt_atexit
0x180006CF4: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180022FA8: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x18001A3F0: AccProvGrantAccessRights
0x1800118F0: "unsigned long __cdecl AccessMaskForAccessEntry(struct _ACTRL_ACCESS_ENTRYW * __ptr64,enum _SE_OBJECT_TYPE)" ?AccessMaskForAccessEntry@@YAKPEAU_ACTRL_ACCESS_ENTRYW@@W4_SE_OBJECT_TYPE@@@Z
0x18000868D: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x180007690: "__cdecl onexit" _onexit
0x1800083DE: "__cdecl _imp_load_ldap_search_sW" __imp_load_ldap_search_sW
0x18000BDE0: EventGuidToName
0x180013C30: "void __cdecl DelAcclistNode(void * __ptr64)" ?DelAcclistNode@@YAXPEAX@Z
0x180024038: "Event" ??_C@_1M@JJBFPLJB@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x18002A7B0: "__cdecl _hmod__ext_ms_win_ntuser_misc_l1_1_0_dll" __hmod__ext_ms_win_ntuser_misc_l1_1_0_dll
0x18000E080: "unsigned long __cdecl MartaSetWindowRights(void * __ptr64,unsigned long,void * __ptr64)" ?MartaSetWindowRights@@YAKPEAXK0@Z
0x18002A700: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180022DE8: "__cdecl _imp_ConvertToAutoInheritPrivateObjectSecurity" __imp_ConvertToAutoInheritPrivateObjectSecurity
0x180012CC0: AccLookupAccountName
0x180015D20: "unsigned long __cdecl ReadDSObjPropertyRights(unsigned short * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?ReadDSObjPropertyRights@@YAKPEAGPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180023500: "__cdecl _sz_SAMLIB_dll" __sz_SAMLIB_dll
0x180016BFC: "unsigned long __cdecl OpenFileObject(unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64,int)" ?OpenFileObject@@YAKPEAGKPEAPEAXH@Z
0x18002E1E0: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180022B08: "__cdecl _imp_ExitThread" __imp_ExitThread
0x180020220: "struct _ACTRL_RIGHTS_CACHE * __ptr64 __cdecl AccctrlpLookupClassGuidInCache(struct _GUID * __ptr64)" ?AccctrlpLookupClassGuidInCache@@YAPEAU_ACTRL_RIGHTS_CACHE@@PEAU_GUID@@@Z
0x180018D5C: "unsigned long __cdecl GetWmiGuidSecurityInfo(void * __ptr64,struct _ACTRL_RIGHTS_INFO * __ptr64,unsigned long,class CAccessList & __ptr64)" ?GetWmiGuidSecurityInfo@@YAKPEAXPEAU_ACTRL_RIGHTS_INFO@@KAEAVCAccessList@@@Z
0x180022480: MartaOpenHandleObject
0x1800275C8: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLB
0x18002E250: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLA
0x180026D70: SAMLIB_NULL_THUNK_DATA_DLN
0x1800274D0: SAMLIB_NULL_THUNK_DATA_DLB
0x18002E080: SAMLIB_NULL_THUNK_DATA_DLA
0x180026F40: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLN
0x18002A730: "__cdecl _hmod__DSPARSE_dll" __hmod__DSPARSE_dll
0x180027DF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180002A90: SetNamedSecurityInfoW
0x1800085DE: "__cdecl _imp_load_SamOpenGroup" __imp_load_SamOpenGroup
0x1800273B0: DSPARSE_NULL_THUNK_DATA_DLB
0x1800083F0: "__cdecl _imp_load_ldap_get_valuesW" __imp_load_ldap_get_valuesW
0x180023FB8: "CLASS-GUID '" ??_C@_1BK@EJPIFIGD@?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?9?$AAG?$AAU?$AAI?$AAD?$AA?5?$AA?8?$AA?$AA@
0x180022F70: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x180022AC0: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180003690: GetNamedSecurityInfoW
0x1800081D1: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x180022D50: "__cdecl _imp_DsBindWithSpnExW" __imp_DsBindWithSpnExW
0x180023BB8: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180018C38: "unsigned long __cdecl GetKernelSecurityInfo(void * __ptr64,unsigned long,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?GetKernelSecurityInfo@@YAKPEAXKPEAPEAU_ACL@@1PEAPEAX@Z
0x1800136BC: "unsigned long __cdecl AceToAccessEntry(struct _ACE_HEADER * __ptr64,unsigned long,enum _SE_OBJECT_TYPE,enum _MARTA_KERNEL_TYPE,struct _ACTRL_ACCESS_ENTRYW * __ptr64)" ?AceToAccessEntry@@YAKPEAU_ACE_HEADER@@KW4_SE_OBJECT_TYPE@@W4_MARTA_KERNEL_TYPE@@PEAU_ACTRL_ACCESS_ENTRYW@@@Z
0x18002E110: "__cdecl _imp_ldap_search_sW" __imp_ldap_search_sW
0x18000895C: IsSetUserObjectSecurityPresent
0x18002A090: "class CSList gWrkrList" ?gWrkrList@@3VCSList@@A
0x180022C20: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180022E48: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x1800118CC: "long __cdecl ULongLongMult(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?ULongLongMult@@YAJ_K0PEA_K@Z
0x180027EA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000829E: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll
0x1800236B8: "ext-ms-win-ntuser-misc-l1-5-1" ??_C@_1DM@KBKANDDN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA?$AA@
0x180022CF0: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x1800124B0: AccConvertAccessToSD
0x180012870: AccConvertSDToAccess
0x18000C528: "unsigned long __cdecl MartaReadDSObjSecDesc(struct ldap * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaReadDSObjSecDesc@@YAKPEAUldap@@PEAGKPEAPEAX@Z
0x180022C18: "__cdecl _imp__o__cexit" __imp__o__cexit
0x1800085F0: "__cdecl _imp_load_SamGetMembersInGroup" __imp_load_SamGetMembersInGroup
0x180022C78: "__cdecl _imp_free" __imp_free
0x180001014: "unsigned long __cdecl MartaGetSidFromName(unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?MartaGetSidFromName@@YAKPEAGPEAPEAX@Z
0x18002E0B8: "__cdecl _imp_ldap_get_values_lenW" __imp_ldap_get_values_lenW
0x180022AD0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180022FA0: "__cdecl _imp_RtlDosPathNameToRelativeNtPathName_U" __imp_RtlDosPathNameToRelativeNtPathName_U
0x18000E128: "public: __cdecl CAccessList::CAccessList(void) __ptr64" ??0CAccessList@@QEAA@XZ
0x18002E230: "__cdecl _imp_GetUserObjectSecurity" __imp_GetUserObjectSecurity
0x180027E40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180023800: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@PCHFFKDO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x180022BD8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800240B8: "<Unkown Registry Root>" ??_C@_1CO@KIENEHBF@?$AA?$DM?$AAU?$AAn?$AAk?$AAo?$AAw?$AAn?$AA?5?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAR?$AAo?$AAo?$AAt?$AA?$DO?$AA?$AA@
0x18000DF38: "public: unsigned long __cdecl CWindowContext::InitializeByName(unsigned short const * __ptr64,unsigned long) __ptr64" ?InitializeByName@CWindowContext@@QEAAKPEBGK@Z
0x180007C7E: "__cdecl execute_onexit_table" _execute_onexit_table
0x1800225D0: MartaGetTypeProperties
0x180004570: "unsigned long __cdecl MartaGetRegistryKeyRights(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?MartaGetRegistryKeyRights@@YAKPEAXKPEAPEAX@Z
0x1800228E0: MartaConvertNameToGuid
0x180008772: "__cdecl _imp_load_RegConnectRegistryW" __imp_load_RegConnectRegistryW
0x180015618: "unsigned long __cdecl DspBindAndCrackEx(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,enum DS_NAME_FORMAT,struct DS_NAME_RESULTW * __ptr64 * __ptr64)" ?DspBindAndCrackEx@@YAKPEAG0KW4DS_NAME_FORMAT@@PEAPEAUDS_NAME_RESULTW@@@Z
0x18000E194: "public: __cdecl CAccessList::~CAccessList(void) __ptr64" ??1CAccessList@@QEAA@XZ
0x180007C1E: memset
0x180027F58: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180008937: "__cdecl _imp_load_BuildImpersonateTrusteeW" __imp_load_BuildImpersonateTrusteeW
0x18002A128: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]