Generated by JEB on 2019/08/01
PE: C:\Windows\System32\samcli.dll Base=0x180000000 SHA-256=8B2E673C80837113A598A5BDD5C6E8A44A7CAE97C53CEE587DF56FB9FA761588
PDB: samcli.pdb GUID={EE4DC5B1-28DC-3787-8FFD0DF00E561F65} Age=1
523 located named symbols:
0x18000F540: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x18000546C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001870: UaspOpenDomain
0x18000D510: NetUserSetGroups
0x1800151B8: "__cdecl _imp_LsaLookupSids2" __imp_LsaLookupSids2
0x180004E3C: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180015200: "__cdecl _imp_NetpIsRemote" __imp_NetpIsRemote
0x180013628: "__cdecl _hmod__DNSAPI_dll" __hmod__DNSAPI_dll
0x180015218: "__cdecl _imp_NetApiBufferAllocate" __imp_NetApiBufferAllocate
0x180015210: "__cdecl _imp_NetpIsDomainNameValid" __imp_NetpIsDomainNameValid
0x180004740: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000F318: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180011DB8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000F230: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x180011CC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180015150: "__cdecl _imp_SamEnumerateGroupsInDomain" __imp_SamEnumerateGroupsInDomain
0x180009EE0: NetGroupEnum
0x180013060: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180013008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000F260: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x180005E84: "__cdecl _imp_load_SamValidatePassword" __imp_load_SamValidatePassword
0x180009AC0: DisplayRelocationRoutine
0x180015198: "__cdecl _imp_ChangeAccountPasswordW" __imp_ChangeAccountPasswordW
0x18000BE68: NetpValidatePasswordReset_CopyInputFields
0x18000F1B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180005EA8: "__cdecl _imp_load_SamEnumerateDomainsInSamServer" __imp_load_SamEnumerateDomainsInSamServer
0x180005842: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180005FEC: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180009B40: NetGetDisplayInformationIndex
0x18000F330: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000DE28: UserpGetInfoExtended
0x180001380: UaspAccountControlToFlags
0x180015048: "__cdecl _imp_SamGetGroupsForUser" __imp_SamGetGroupsForUser
0x1800060C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000EF9C: NetpGetElapsedSeconds
0x180005DF4: "__cdecl _imp_load_SamEnumerateGroupsInDomain" __imp_load_SamEnumerateGroupsInDomain
0x180005E96: "__cdecl _imp_load_SamOpenDomain" __imp_load_SamOpenDomain
0x1800059AC: "__cdecl _imp_load_DnsValidateName_W" __imp_load_DnsValidateName_W
0x18000F2D8: "__cdecl _imp_RtlSecondsSince1970ToTime" __imp_RtlSecondsSince1970ToTime
0x18000F3C8: "__cdecl _xp_a" __xp_a
0x18000F238: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x1800150B8: "__cdecl _imp_SamAddMemberToGroup" __imp_SamAddMemberToGroup
0x180005FF8: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x18000F650: "Negotiate" ??_C@_1BE@ELFOBFGL@?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAe?$AA?$AA@
0x180015038: "__cdecl _imp_SamOpenUser" __imp_SamOpenUser
0x1800053CC: "__cdecl RTC_Initialize" _RTC_Initialize
0x18000FF98: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180005FEC: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x18000B760: NetUserGetInternetIdentityInfo
0x18000ACFC: GrouppGetInfo
0x180010390: "__cdecl _rtc_taa" __rtc_taa
0x18000F2E0: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x18000F290: "__cdecl _imp__initterm_e" __imp__initterm_e
0x18000F980: UserpUasSamTable
0x18000F178: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000F358: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x18000F298: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x1800057EC: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x18000F278: "__cdecl _imp_wcschr" __imp_wcschr
0x180005896: "__cdecl _imp_load_DnsNameCompare_W" __imp_load_DnsNameCompare_W
0x180002DB0: NetUserEnum
0x180005FEC: "__cdecl _vcrt_initialize" __vcrt_initialize
0x18000F240: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x180001A40: UaspGetDomainId
0x180005BB9: "__cdecl _imp_load_LsaLookupSids" __imp_load_LsaLookupSids
0x18000F348: "__cdecl _imp_RtlQueryInformationAcl" __imp_RtlQueryInformationAcl
0x180005F5C: "__cdecl _imp_load_SamSetSecurityObject" __imp_load_SamSetSecurityObject
0x18000F390: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005B95: "__cdecl _imp_load_LsaLookupSids2" __imp_load_LsaLookupSids2
0x1800087C0: NetLocalGroupDelMember
0x180010380: "__cdecl _rtc_iaa" __rtc_iaa
0x180005FEC: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x18000F398: "__cdecl _xc_a" __xc_a
0x1800087D0: NetLocalGroupDelMembers
0x18000E09C: UserpGetUserPriv
0x18000F508: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x18000F210: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x18000F228: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x18000B9F0: NetValidatePasswordPolicy
0x180013020: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x18000B0F0: GrouppRelocationRoutine
0x180015078: "__cdecl _imp_SamSetInformationDomain" __imp_SamSetInformationDomain
0x180015098: "__cdecl _imp_SamOpenDomain" __imp_SamOpenDomain
0x180005FA4: "__cdecl _imp_load_SamQueryInformationUser" __imp_load_SamQueryInformationUser
0x180013018: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x1800094DC: AliaspOpenAlias
0x18000B008: GrouppOpenGroup
0x180005F14: "__cdecl _imp_load_SamCreateUser2InDomain" __imp_load_SamCreateUser2InDomain
0x18000F4E0: "__cdecl _guard_iat_table" __guard_iat_table
0x1800060A5: memcpy
0x18000C2F0: UaspLSASetServerRole
0x180005FB6: "__cdecl _imp_load_SamSetInformationUser" __imp_load_SamSetInformationUser
0x18000F2A0: "__cdecl _imp_memset" __imp_memset
0x180005AF8: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x180005FEC: "__cdecl _acrt_initialize" __acrt_initialize
0x180005806: "__cdecl initterm" _initterm
0x18000E230: UserpRelocationRoutine
0x18000F530: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x180005866: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180011D04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000CF00: NetUserModalsSet
0x180013658: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005EDE: "__cdecl _imp_load_SamSetInformationDomain" __imp_load_SamSetInformationDomain
0x18000F300: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x18000F3C0: "__cdecl _xi_z" __xi_z
0x18000F158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180015118: "__cdecl _imp_SamQueryInformationAlias" __imp_SamQueryInformationAlias
0x18000DD24: UserpGetDacl
0x180015008: "__cdecl _imp_DnsNameCompare_W" __imp_DnsNameCompare_W
0x18000588A: "__cdecl _C_specific_handler" __C_specific_handler
0x180005FEC: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x18000F550: "__cdecl _sz_api_ms_win_security_lsapolicy_l1_1_0_dll" __sz_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180015228: netutils_NULL_THUNK_DATA_DLA
0x180011648: netutils_NULL_THUNK_DATA_DLB
0x180011058: netutils_NULL_THUNK_DATA_DLN
0x180015138: "__cdecl _imp_SamQueryInformationGroup" __imp_SamQueryInformationGroup
0x180005224: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x180008540: NetLocalGroupAdd
0x180006044: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001800: NetpCopyDataToBuffer
0x18000582A: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180005158: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x180005BEF: "__cdecl _imp_load_NetpIsRemote" __imp_load_NetpIsRemote
0x180005836: "__cdecl cexit" _cexit
0x180005028: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180005CB0: "__cdecl _imp_load_SamEnumerateAliasesInDomain" __imp_load_SamEnumerateAliasesInDomain
0x180005DE2: "__cdecl _imp_load_SamSetInformationGroup" __imp_load_SamSetInformationGroup
0x180005FEC: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x18000F2A8: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18000584E: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000CBB0: NetUserGetGroups
0x180004E50: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180005CC2: "__cdecl _imp_load_SamDeleteAlias" __imp_load_SamDeleteAlias
0x180011CF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180005D9A: "__cdecl _imp_load_SamQueryDisplayInformation" __imp_load_SamQueryDisplayInformation
0x18000FF90: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800150C8: "__cdecl _imp_SamDeleteAlias" __imp_SamDeleteAlias
0x18000C570: NetUserAdd
0x180005FEC: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180004FD4: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x18000585A: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x180013630: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x180005FEC: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x18000F160: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000F248: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180005DAC: "__cdecl _imp_load_SamGetDisplayEnumerationIndex" __imp_load_SamGetDisplayEnumerationIndex
0x18000F3D8: "__cdecl _xt_a" __xt_a
0x1800130A4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x18000F1A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180015090: "__cdecl _imp_SamEnumerateDomainsInSamServer" __imp_SamEnumerateDomainsInSamServer
0x18000F248: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x180005D1C: "__cdecl _imp_load_SamGetMembersInAlias" __imp_load_SamGetMembersInAlias
0x180005D2E: "__cdecl _imp_load_SamLookupNamesInDomain" __imp_load_SamLookupNamesInDomain
0x180005A49: "__cdecl _imp_load_FreeContextBuffer" __imp_load_FreeContextBuffer
0x180015190: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x180005D52: "__cdecl _imp_load_SamOpenAlias" __imp_load_SamOpenAlias
0x180006004: DllMain
0x18000AB54: GrouppChangeMember
0x180005C31: "__cdecl _tailMerge_samlib_dll" __tailMerge_samlib_dll
0x180005FEC: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x1800151A0: SspiCli_NULL_THUNK_DATA_DLA
0x180005410: "__cdecl RTC_Terminate" _RTC_Terminate
0x180009E80: NetGroupAddUser
0x18000F258: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000F268: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180009ED0: NetGroupDelUser
0x18000F1E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005EBA: "__cdecl _imp_load_SamConnect" __imp_load_SamConnect
0x18000F198: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180005B04: "__cdecl _tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll" __tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180005E06: "__cdecl _imp_load_SamCreateGroupInDomain" __imp_load_SamCreateGroupInDomain
0x18000F150: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180015168: "__cdecl _imp_SamDeleteGroup" __imp_SamDeleteGroup
0x180006020: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000F4F0: UaspBuiltinAuthority
0x18000585A: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x18000ED24: NetpMemoryAllocate
0x18000F820: SamFieldDescription
0x180013014: "__cdecl _isa_enabled" __isa_enabled
0x18000F2B0: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180005E4E: "__cdecl _imp_load_SamSetMemberAttributesOfGroup" __imp_load_SamSetMemberAttributesOfGroup
0x180011DE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000F1B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005D64: "__cdecl _imp_load_SamRemoveMemberFromAlias" __imp_load_SamRemoveMemberFromAlias
0x18000F370: "__cdecl _imp_RtlTimeToSecondsSince1980" __imp_RtlTimeToSecondsSince1980
0x180010DCC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180005866: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x18000FF90: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180013068: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180015158: "__cdecl _imp_SamCreateGroupInDomain" __imp_SamCreateGroupInDomain
0x1800151E0: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x180010D4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_DNSAPI_dll" __DELAY_IMPORT_DESCRIPTOR_DNSAPI_dll
0x180011658: SspiCli_NULL_THUNK_DATA_DLB
0x180005F02: "__cdecl _imp_load_SamRemoveMemberFromForeignDomain" __imp_load_SamRemoveMemberFromForeignDomain
0x18000ED3C: NetpGetComputerNameEx2
0x180005A55: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x1800150A0: "__cdecl _imp_SamValidatePassword" __imp_SamValidatePassword
0x18000F378: "__cdecl _imp_RtlGetAce" __imp_RtlGetAce
0x180005FEC: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x180015088: "__cdecl _imp_SamConnect" __imp_SamConnect
0x18000F1C8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x18000F3B0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180005DBE: "__cdecl _imp_load_SamQueryInformationGroup" __imp_load_SamQueryInformationGroup
0x180011D18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180004800: NetpNtStatusToApiStatus
0x18000F5F0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000587E: wcsncpy_s
0x180010E0C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800150E0: "__cdecl _imp_SamCreateAliasInDomain" __imp_SamCreateAliasInDomain
0x180004F04: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180004D10: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005C01: "__cdecl _imp_load_NetpwNameCompare" __imp_load_NetpwNameCompare
0x18000F288: "__cdecl _imp__initterm" __imp__initterm
0x1800015A0: NetUserModalsGet
0x180005FDA: "__cdecl _imp_load_LsaQueryInformationPolicy" __imp_load_LsaQueryInformationPolicy
0x180011D90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180015050: "__cdecl _imp_SamDeleteUser" __imp_SamDeleteUser
0x18000E394: UserpSetDacl
0x18000C0D0: NetpValidate_CopyOutputPersistedFields
0x180015128: "__cdecl _imp_SamQueryDisplayInformation" __imp_SamQueryDisplayInformation
0x180011DCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180013638: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x18000C3B0: UaspOpenDomainWithDomainName
0x180015188: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x180001970: UserpOpenUser
0x180015068: "__cdecl _imp_SamRemoveMemberFromForeignDomain" __imp_SamRemoveMemberFromForeignDomain
0x180005842: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x180004E64: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180008800: NetLocalGroupEnum
0x18000AFC0: GrouppMemberRelocationRoutine
0x180005078: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x18000F388: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800151C8: "__cdecl _imp_LsaLookupNames2" __imp_LsaLookupNames2
0x180005268: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x18000F1A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800059CA: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x18000F610: "users" ??_C@_1M@ICNGPMII@?$AAu?$AAs?$AAe?$AAr?$AAs?$AA?$AA@
0x180008D80: NetLocalGroupSetInfo
0x180005F92: "__cdecl _imp_load_SamQuerySecurityObject" __imp_load_SamQuerySecurityObject
0x18000F520: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x18000F338: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005921: "__cdecl _imp_load_DsGetDcNameW" __imp_load_DsGetDcNameW
0x18000F118: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x1800151A8: "__cdecl _imp_LsaLookupSids" __imp_LsaLookupSids
0x1800150B0: "__cdecl _imp_SamQueryInformationDomain" __imp_SamQueryInformationDomain
0x180015030: "__cdecl _imp_SamRidToSid" __imp_SamRidToSid
0x18000F218: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000F3A8: "__cdecl _xi_a" __xi_a
0x18000F1D0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1800096D0: AliaspRelocationRoutine
0x18000F120: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180004F50: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x18000F138: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180015148: "__cdecl _imp_SamSetInformationGroup" __imp_SamSetInformationGroup
0x180005D0A: "__cdecl _imp_load_SamFreeMemory" __imp_load_SamFreeMemory
0x1800095A0: AliaspOpenAliasInDomain
0x180004E88: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x180015000: "__cdecl _imp_DnsValidateName_W" __imp_DnsValidateName_W
0x18000F2B8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180005C25: "__cdecl _imp_load_SamQueryInformationDomain" __imp_load_SamQueryInformationDomain
0x1800151F8: logoncli_NULL_THUNK_DATA_DLA
0x180011630: logoncli_NULL_THUNK_DATA_DLB
0x180011028: logoncli_NULL_THUNK_DATA_DLN
0x18000F350: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x180015208: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180005836: "__cdecl o__cexit" _o__cexit
0x1800150E8: "__cdecl _imp_SamFreeMemory" __imp_SamFreeMemory
0x180005872: "__cdecl seh_filter_dll" _seh_filter_dll
0x18000F230: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180005ECC: "__cdecl _imp_load_SamLookupDomainInSamServer" __imp_load_SamLookupDomainInSamServer
0x18000F4F8: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180011D54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800014F0: UaspOpenSam
0x180011DA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180015120: "__cdecl _imp_SamGetCompatibilityMode" __imp_SamGetCompatibilityMode
0x18000F508: "__cdecl pRawDllMain" _pRawDllMain
0x180015070: "__cdecl _imp_SamEnumerateUsersInDomain" __imp_SamEnumerateUsersInDomain
0x180005620: "__cdecl _isa_available_init" __isa_available_init
0x18000EDF8: NetpGetDomainNameExExEx
0x1800151E8: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLA
0x180015058: "__cdecl _imp_SamGetAliasMembership" __imp_SamGetAliasMembership
0x180011678: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLB
0x1800057E0: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x180011018: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLN
0x180010388: "__cdecl _rtc_izz" __rtc_izz
0x1800151B0: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x18000F310: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x180010D8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180004D60: "__cdecl _security_check_cookie" __security_check_cookie
0x180015170: "__cdecl _imp_SamOpenGroup" __imp_SamOpenGroup
0x18000F3A0: "__cdecl _xc_z" __xc_z
0x1800023F0: NetLocalGroupGetMembers
0x180011CDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000F1C0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180005FC8: "__cdecl _imp_load_NetApiBufferAllocate" __imp_load_NetApiBufferAllocate
0x18000DCC4: UserpDeltaTimeToSeconds
0x180005FEC: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180015108: "__cdecl _imp_SamOpenAlias" __imp_SamOpenAlias
0x1800059BE: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x18000F2F0: "__cdecl _imp_RtlTimeToSecondsSince1970" __imp_RtlTimeToSecondsSince1970
0x18000CA40: NetUserDel
0x1800150F8: "__cdecl _imp_SamLookupNamesInDomain" __imp_SamLookupNamesInDomain
0x18000A4D0: NetGroupGetInfo
0x18000DC30: NetpSamRidToSid
0x18000F208: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000A920: NetGroupSetInfo
0x18000F170: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180004F20: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180005872: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180013640: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x18000F128: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000582A: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800150D0: "__cdecl _imp_SamSetInformationAlias" __imp_SamSetInformationAlias
0x180005F38: "__cdecl _imp_load_SamDeleteUser" __imp_load_SamDeleteUser
0x18000F200: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180010D6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x180005D40: "__cdecl _imp_load_SamAddMemberToAlias" __imp_load_SamAddMemberToAlias
0x18000F3D0: "__cdecl _xp_z" __xp_z
0x180005CE6: "__cdecl _imp_load_SamCloseHandle" __imp_load_SamCloseHandle
0x18000592D: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x180015140: "__cdecl _imp_SamLookupIdsInDomain" __imp_SamLookupIdsInDomain
0x180011D7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000F1E0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800151D8: "__cdecl _imp_LsaClose" __imp_LsaClose
0x180010398: "__cdecl _rtc_tzz" __rtc_tzz
0x18000C7C0: NetUserChangePassword
0x18000F3E8: "__cdecl _guard_fids_table" __guard_fids_table
0x180005E60: "__cdecl _imp_load_SamAddMemberToGroup" __imp_load_SamAddMemberToGroup
0x18000F010: "__cdecl load_config_used" _load_config_used
0x18000F320: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x180010FD0: SspiCli_NULL_THUNK_DATA_DLN
0x180013648: "__cdecl _hmod__api_ms_win_security_lsapolicy_l1_1_0_dll" __hmod__api_ms_win_security_lsapolicy_l1_1_0_dll
0x1800029C0: NetUserGetInfo
0x18000F5F8: "localhost" ??_C@_1BE@JDLPANCI@?$AAl?$AAo?$AAc?$AAa?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x18000F140: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000F130: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180015020: "__cdecl _imp_SamSetInformationUser" __imp_SamSetInformationUser
0x18000F3B8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180013650: "__cdecl _hmod__SAMLIB_dll" __hmod__SAMLIB_dll
0x180008FE0: AliaspFreeSidList
0x180015178: "__cdecl _imp_SamSetMemberAttributesOfGroup" __imp_SamSetMemberAttributesOfGroup
0x18000F360: "__cdecl _imp_RtlGetNtProductType" __imp_RtlGetNtProductType
0x180005258: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x1800150C0: "__cdecl _imp_SamEnumerateAliasesInDomain" __imp_SamEnumerateAliasesInDomain
0x18000F190: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000F340: "__cdecl _imp_NtClose" __imp_NtClose
0x180005F6E: "__cdecl _imp_load_SamOpenUser" __imp_load_SamOpenUser
0x180009038: AliaspGetInfo
0x1800150D8: "__cdecl _imp_SamCloseHandle" __imp_SamCloseHandle
0x18000F1F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000F1D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000F2C0: "__cdecl _imp_RtlRunEncodeUnicodeString" __imp_RtlRunEncodeUnicodeString
0x180011CB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x18000B90C: NetUserIsRemote
0x180005BA7: "__cdecl _imp_load_LsaFreeMemory" __imp_load_LsaFreeMemory
0x18000F2F8: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x18000F2E8: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x180015018: "__cdecl _imp_SamQueryInformationUser" __imp_SamQueryInformationUser
0x180015080: "__cdecl _imp_SamLookupDomainInSamServer" __imp_SamLookupDomainInSamServer
0x180005FEC: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x180015100: "__cdecl _imp_SamAddMemberToAlias" __imp_SamAddMemberToAlias
0x180009734: AliaspSetMembers
0x180015130: "__cdecl _imp_SamGetDisplayEnumerationIndex" __imp_SamGetDisplayEnumerationIndex
0x18000F238: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x18000F180: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x18000F1F8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000BCF0: NetValidatePasswordPolicyFree
0x18000FF98: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000E430: UserpSetInfo
0x180004780: NetpCopyStringToBuffer
0x180013030: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180005460: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000F260: "__cdecl _imp__o_wcsncpy_s" __imp__o_wcsncpy_s
0x180005FEC: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180005FF8: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180015040: "__cdecl _imp_SamSetSecurityObject" __imp_SamSetSecurityObject
0x18000F630: "admins" ??_C@_1O@LEALOKBI@?$AAa?$AAd?$AAm?$AAi?$AAn?$AAs?$AA?$AA@
0x180005EF0: "__cdecl _imp_load_SamEnumerateUsersInDomain" __imp_load_SamEnumerateUsersInDomain
0x18000BD7C: NetpValidatePasswordChange_CopyInputFields
0x180005D76: "__cdecl _imp_load_SamQueryInformationAlias" __imp_load_SamQueryInformationAlias
0x180008CD0: NetLocalGroupGetInfo
0x180011D68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180009EA0: NetGroupDel
0x1800151C0: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x180005E72: "__cdecl _imp_load_SamRemoveMemberFromGroup" __imp_load_SamRemoveMemberFromGroup
0x180015060: "__cdecl _imp_SamCreateUser2InDomain" __imp_SamCreateUser2InDomain
0x1800151F0: "__cdecl _imp_DsGetDcNameW" __imp_DsGetDcNameW
0x18000DBA8: UserpComputeSamPrefMaxLen
0x180005812: "__cdecl initterm_e" _initterm_e
0x18000F640: "local" ??_C@_1M@GFKCHEPI@?$AAl?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x1800051F8: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180010DAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x18000C254: UaspGetAllowedAce
0x180005BCB: "__cdecl _imp_load_LsaLookupNames2" __imp_load_LsaLookupNames2
0x18000500C: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x18000F500: "\\*" ??_C@_17CMJHEBMJ@?$AA?2?$AA?2?$AA?$CK?$AA?$AA@
0x18000F380: ntdll_NULL_THUNK_DATA
0x18000F250: "__cdecl _imp_memcpy" __imp_memcpy
0x18000B170: GrouppSetUsers
0x180005D88: "__cdecl _imp_load_SamGetCompatibilityMode" __imp_load_SamGetCompatibilityMode
0x180005FEC: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x18000F2C8: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180005AE6: "__cdecl _imp_load_GetUserNameExW" __imp_load_GetUserNameExW
0x18000F368: "__cdecl _imp_NtImpersonateAnonymousToken" __imp_NtImpersonateAnonymousToken
0x180013000: "__cdecl _security_cookie" __security_cookie
0x180005C13: "__cdecl _imp_load_NetpIsDomainNameValid" __imp_load_NetpIsDomainNameValid
0x180009210: AliaspMemberRelocationRoutine
0x180005278: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180005F26: "__cdecl _imp_load_SamGetAliasMembership" __imp_load_SamGetAliasMembership
0x180015160: "__cdecl _imp_SamGetMembersInGroup" __imp_SamGetMembersInGroup
0x180011CA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180004860: AliaspPackBuf
0x180009C60: NetGroupAdd
0x18000F168: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180011D2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000F188: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x1800151D0: "__cdecl _imp_LsaSetInformationPolicy" __imp_LsaSetInformationPolicy
0x18000F280: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x180008EF0: NetLocalGroupSetMembers
0x180005F4A: "__cdecl _imp_load_SamGetGroupsForUser" __imp_load_SamGetGroupsForUser
0x18000F270: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180013010: "__cdecl _isa_available" __isa_available
0x180001010: NetQueryDisplayInformation
0x18000F148: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004984: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x18000F240: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180013624: "__cdecl _favor" __favor
0x180004D88: "__cdecl _security_init_cookie" __security_init_cookie
0x1800150F0: "__cdecl _imp_SamGetMembersInAlias" __imp_SamGetMembersInAlias
0x180015220: "__cdecl _imp_NetpwNameCompare" __imp_NetpwNameCompare
0x18000F220: "__cdecl _imp__cexit" __imp__cexit
0x180009280: AliaspNamesToSids
0x18000F620: "guests" ??_C@_1O@IHJFEMNH@?$AAg?$AAu?$AAe?$AAs?$AAt?$AAs?$AA?$AA@
0x18000F258: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x180001B90: NetUserGetLocalGroups
0x180005AD4: "__cdecl _imp_load_ChangeAccountPasswordW" __imp_load_ChangeAccountPasswordW
0x180015028: "__cdecl _imp_SamQuerySecurityObject" __imp_SamQuerySecurityObject
0x1800150A8: "__cdecl _imp_SamRemoveMemberFromGroup" __imp_SamRemoveMemberFromGroup
0x18000F3E0: "__cdecl _xt_z" __xt_z
0x180010DEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll" __DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll
0x180004EC8: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x18000F328: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180015110: "__cdecl _imp_SamRemoveMemberFromAlias" __imp_SamRemoveMemberFromAlias
0x18000C238: NetpNtStatusToApiStatus_Access
0x180004F6C: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180005F80: "__cdecl _imp_load_SamRidToSid" __imp_load_SamRidToSid
0x1800054D0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000DA50: NetUserSetInfo
0x180004974: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180005B83: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x180005CD4: "__cdecl _imp_load_SamSetInformationAlias" __imp_load_SamSetInformationAlias
0x180008710: NetLocalGroupDel
0x180005E2A: "__cdecl _imp_load_SamDeleteGroup" __imp_load_SamDeleteGroup
0x180005DD0: "__cdecl _imp_load_SamLookupIdsInDomain" __imp_load_SamLookupIdsInDomain
0x180013050: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x18000F580: "__cdecl _sz_SAMLIB_dll" __sz_SAMLIB_dll
0x1800086C0: NetLocalGroupAddMember
0x180005CF8: "__cdecl _imp_load_SamCreateAliasInDomain" __imp_load_SamCreateAliasInDomain
0x180010FB0: SAMLIB_NULL_THUNK_DATA_DLN
0x1800116D0: SAMLIB_NULL_THUNK_DATA_DLB
0x180015180: SAMLIB_NULL_THUNK_DATA_DLA
0x1800058A2: "__cdecl _tailMerge_dnsapi_dll" __tailMerge_dnsapi_dll
0x18000F670: UserUasSamTable
0x180005E3C: "__cdecl _imp_load_SamOpenGroup" __imp_load_SamOpenGroup
0x180008F14: AliaspChangeMember
0x180004680: NetpAllocateEnumBufferEx
0x18000EF18: NetpAliasMemberToPriv
0x180005BDD: "__cdecl _imp_load_LsaSetInformationPolicy" __imp_load_LsaSetInformationPolicy
0x18000F308: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1800086E0: NetLocalGroupAddMembers
0x18000F228: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x18000F2D0: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x180011D40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000F510: "__cdecl _sz_DNSAPI_dll" __sz_DNSAPI_dll
0x18000F270: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x18000F220: "__cdecl _imp__o__cexit" __imp__o__cexit
0x180005E18: "__cdecl _imp_load_SamGetMembersInGroup" __imp_load_SamGetMembersInGroup
0x180015010: DNSAPI_NULL_THUNK_DATA_DLA
0x180011620: DNSAPI_NULL_THUNK_DATA_DLB
0x180010E40: DNSAPI_NULL_THUNK_DATA_DLN
0x18000587E: "__cdecl o_wcsncpy_s" _o_wcsncpy_s
0x1800032A0: UserpGetInfo
0x18000BF58: NetpValidate_CopyInputPersistedFields
0x18000584E: "__cdecl execute_onexit_table" _execute_onexit_table
0x18000A5B0: NetGroupGetUsers
0x18000581E: memset
0x180011DF4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000AB30: NetGroupSetUsers
0x180013038: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
[JEB Decompiler by PNF Software]