Generated by JEB on 2019/08/01

PE: C:\Windows\System32\polstore.dll Base=0x180000000 SHA-256=ACAB061F48844F596043FBC53BE42F897D349CD5F0054718F7F517803DE9ECB7
PDB: polstore.pdb GUID={34B92E91-D9B5-0041-1E98C4153E50C402} Age=1

891 located named symbols:
0x18004F780: "__cdecl _hmod__WS2_32_dll" __hmod__WS2_32_dll
0x18001CD20: RegDeleteNFAData
0x18004F0B0: NegPolDNAttributes
0x180047F70: WPP_f9860e6513cb33a6f3839da7f022512c_Traceguids
0x18002E300: IpsecAllocMem
0x180047D40: "ipsecISAKMPPolicy" ??_C@_1CE@JJMLBPDH@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180047C38: "CN=ipsecNFA" ??_C@_1BI@HFFEJDCB@?$AAC?$AAN?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAF?$AAA?$AA?$AA@
0x180045D34: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000AC70: DirCreateNFAData
0x180020BD0: ConvertGuidToPolicyStringEx
0x180015D80: WMIEnumPolicyObjectsEx
0x1800473D0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180045F00: "__cdecl FindPESection" _FindPESection
0x18002D110: ValidateFilterDataDeletion
0x180004920: StringCchCatW
0x1800476A0: "__cdecl _sz_WLDAP32_dll" __sz_WLDAP32_dll
0x1800395A0: CopyIpsecNegPolData
0x180048B40: "(objectClass=*)" ??_C@_1CA@CGKDPGGM@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CK?$AA?$CJ?$AA?$AA@
0x18002D310: ValidatePolicyDataDeletion
0x180045740: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180047278: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18004DA54: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180016350: MarshallCommonFilterSpecInfo
0x18004F798: "__cdecl _hmod__ACTIVEDS_dll" __hmod__ACTIVEDS_dll
0x1800284D0: IPSecImportPolicies
0x180035C20: FreeFilterReferences
0x1800530B8: "__cdecl _imp_ldap_delete_sW" __imp_ldap_delete_sW
0x180012FC0: RegDeletePolicyData
0x1800463BB: "__cdecl _tailMerge_oleaut32_dll" __tailMerge_oleaut32_dll
0x180048620: "%04d%02d%02d%02d%02d%02d.000000+" ??_C@_1EI@CBMENIKE@?$AA?$CF?$AA0?$AA4?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?4?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$CL@
0x18002E4A0: IPSecCopyAuthMethod
0x18004F1C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800263B0: IPSecDeleteNFAData
0x18002E520: IPSecFreeMulNegPolData
0x1800477A0: "whenChanged" ??_C@_1BI@DJAFIECJ@?$AAw?$AAh?$AAe?$AAn?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAd?$AA?$AA@
0x180001070: DirEnumPolicyData
0x1800478A0: "ipsecPolicy" ??_C@_1BI@KOAMOAJE@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180001C80: DirCreatePolicyData
0x18004582C: "__cdecl CRT_INIT" _CRT_INIT
0x180046859: "__cdecl _imp_load_ldap_count_valuesW" __imp_load_ldap_count_valuesW
0x18003F950: UnmarshallFilterObject
0x18003C8D0: UnMarshallFilterObject
0x1800368A0: UnMarshallWMIFilterObject
0x180053100: "__cdecl _imp_ldap_set_optionW" __imp_ldap_set_optionW
0x1800471E8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18004F110: NFADNAttributes
0x180047800: "ipsecNFAReference" ??_C@_1CE@HHHJJAIB@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAF?$AAA?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1800251F0: WppControlCallback
0x1800486F0: "IPSEC_GP_REFRESH_EVENT" ??_C@_1CO@NAHLHGIN@?$AAI?$AAP?$AAS?$AAE?$AAC?$AA_?$AAG?$AAP?$AA_?$AAR?$AAE?$AAF?$AAR?$AAE?$AAS?$AAH?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA?$AA@
0x180022480: AddValueToMultiSz
0x180046B90: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180032330: WMIWriteMultiValuedString
0x1800462EE: "__cdecl _imp_load_StartServiceW" __imp_load_StartServiceW
0x18000ED10: DirAddNFAReferenceToFilterObject
0x180031A10: CloneDirectoryNFAObjectEx
0x180053160: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x180053018: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x18000E060: DirAddNFAReferenceToPolicyObject
0x180020510: WMIEnumNFAObjectsEx
0x18002DAA0: VerifyPolicyDataExistence
0x180018A30: WMIEnumFilterDataEx
0x18004F830: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUklohglivUlyquivUznwGEUkivxlnkOlyq@polstore" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUklohglivUlyquivUznwGEUkivxlnkOlyq@polstore
0x180047F10: "RSOP_IPSECPolicySetting.id=" ??_C@_1DI@KFIPEMBO@?$AAR?$AAS?$AAO?$AAP?$AA_?$AAI?$AAP?$AAS?$AAE?$AAC?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?4?$AAi?$AAd?$AA?$DN?$AA?$AA@
0x180046263: "__cdecl _imp_load_QueryServiceStatus" __imp_load_QueryServiceStatus
0x180006AB0: DirGetFilterObject
0x1800172F0: RegDeleteFilterData
0x180047E90: "RSOP_IPSECPolicySetting" ??_C@_1DA@BGEAILNG@?$AAR?$AAS?$AAO?$AAP?$AA_?$AAI?$AAP?$AAS?$AAE?$AAC?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x18002E300: IPSecAllocPolMem
0x180048A90: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HK@HFCGGMJL@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180048A48: WPP_d2cc584822c032002c333bba26518ae7_Traceguids
0x1800484D8: WPP_351d85dfa725369b532937c79c86e7b5_Traceguids
0x18004F7F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUrkhvxhsiUlyquivUznwGEUkivxlnkOlyq@ipsecshr" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUrkhvxhsiUlyquivUznwGEUkivxlnkOlyq@ipsecshr
0x18002E690: IPSecFreeMulISAKMPData
0x180045780: NsuStringLenW
0x180040C50: UnmarshallFilterSpec
0x180047368: "__cdecl _imp__mkgmtime" __imp__mkgmtime
0x1800473F0: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800276D0: DirOpenPolicyStore
0x180048508: WPP_285735a7a6a53f350d562a9d0c230cfa_Traceguids
0x180036200: UnMarshallWMIPolicyObject
0x180048FA8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18002BD80: ExportPolicyDataToFile
0x180047238: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180047D30: WPP_9dbd3ea5b5133d7f5ce0afc47226b62d_Traceguids
0x1800465AA: "__cdecl _imp_load_SafeArrayPutElement" __imp_load_SafeArrayPutElement
0x180047A90: "ipsecNegotiationPolicyAction" ??_C@_1DK@BALICKMN@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180046986: "__cdecl _imp_load_SafeArrayGetElement" __imp_load_SafeArrayGetElement
0x18000F280: DirDeleteNFAReferenceInNegPolObject
0x180012300: RegEnumPolicyObjects
0x180048B88: "DsRoleGetPrimaryDomainInformatio" ??_C@_0CC@KDCDMGPP@DsRoleGetPrimaryDomainInformatio@
0x18004F170: ISAKMPDNAttributes
0x180047328: "__cdecl _imp_wcschr" __imp_wcschr
0x1800472A0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180047418: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180048A58: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x18004D140: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x180053190: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x180053180: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x18004D178: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x18004D000: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x180042540: UnMarshallRegistryFilterObject
0x18004D010: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x180038F40: CopyIpsecISAKMPData
0x180016D60: RegEnumFilterObjects
0x180053070: "__cdecl _imp_SafeArrayGetElement" __imp_SafeArrayGetElement
0x1800530B0: "__cdecl _imp_ldap_modify_sW" __imp_ldap_modify_sW
0x1800463AF: "__cdecl _imp_load_VariantInit" __imp_load_VariantInit
0x1800417B0: ConvertLegacyFilterToFilter
0x18003A220: CheckAndSetExtendedError
0x18000AFE0: DirMarshallNFAObject
0x180033FD0: "void __cdecl CreatePolstoreGPOInfo(struct _GROUP_POLICY_OBJECTW const * __ptr64,unsigned int,unsigned int,struct _GPO_INFO * __ptr64)" ?CreatePolstoreGPOInfo@@YAXPEBU_GROUP_POLICY_OBJECTW@@IIPEAU_GPO_INFO@@@Z
0x18004DB44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x18002A480: RegUpdatePolicy
0x18002CC30: ValidateNegPolData
0x1800466F6: "__cdecl _imp_load_ldap_initW" __imp_load_ldap_initW
0x1800531A0: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180010310: DirSetISAKMPData
0x180045EE7: "__cdecl XcptFilter" _XcptFilter
0x180053000: "__cdecl _imp_ADsOpenObject" __imp_ADsOpenObject
0x180047420: "__cdecl _xc_a" __xc_a
0x1800473A0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x180043470: RegstoreQueryValue
0x180047AD0: "ipsecNegotiationPolicyType" ??_C@_1DG@FPIDDDLB@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180004AA0: StringCbCopyW
0x18001F840: RegGetNFAExistingNegPolRef
0x18004CD9C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x180033D90: "unsigned long __cdecl GenerateIPSECPolicy(unsigned long,int * __ptr64,unsigned short const * __ptr64,struct _RSOP_TARGET * __ptr64,struct _RSOP_TARGET * __ptr64)" ?GenerateIPSECPolicy@@YAKKPEAHPEBGPEAU_RSOP_TARGET@@2@Z
0x180048668: "cn=Microsoft" ??_C@_1BK@HDLJIECG@?$AAc?$AAn?$AA?$DN?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?$AA@
0x18002E350: IPSecAllocPolStr
0x180048688: "cn=Windows" ??_C@_1BG@PCOPBJJK@?$AAc?$AAn?$AA?$DN?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x1800331C0: WPP_SF_SSSSD
0x180048548: WPP_0bcdf3f52d8739aa5668852a92fa565e_Traceguids
0x180015B80: WMIEnumPolicyDataEx
0x180004A10: StringCchCopyW
0x180047E38: "ActivePolicy" ??_C@_1BK@PGBGNFAG@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180029580: DirBackPropIncChangesForNFAToPolicy
0x180048C08: WPP_f3101f336913318462ab1753f44a8e1f_Traceguids
0x180028E20: AllocateLDAPStringValue
0x1800471A0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180046199: "__cdecl lock" _lock
0x180004830: StringCbCatW
0x180028590: IPSecClearWMIStore
0x180001630: UnMarshallPolicyObject2
0x180034E80: IpsecAllocStr
0x18003E6C0: UnmarshallPolicyObject
0x18003BB20: UnMarshallPolicyObject
0x180023D20: ConvertCryptoBundle
0x1800475A0: "__cdecl _guard_iat_table" __guard_iat_table
0x180046B68: memcpy
0x18002AAB0: RegUpdateNFA
0x1800471A8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800260C0: IPSecDeleteNegPolData
0x180053090: "__cdecl _imp_ldap_next_entry" __imp_ldap_next_entry
0x180004B30: DirEnumFilterData
0x1800473B0: "__cdecl _imp_memset" __imp_memset
0x1800484F8: WPP_71989d294c4a3f60dbd023f3be8830e4_Traceguids
0x18000A590: DirEnumNFAObjects
0x180053140: "__cdecl _imp_htonl" __imp_htonl
0x1800460BF: "__cdecl initterm" _initterm
0x18002E600: IPSecFreeFilterSpecs
0x1800476B0: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x1800144C0: RegAssignPolicy
0x1800236F0: RegMarshallISAKMPObject
0x18004DAF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18004F7E0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800472B8: "__cdecl _imp_Sleep" __imp_Sleep
0x18001A1E0: RegMarshallNegPolObject
0x180047448: "__cdecl _xi_z" __xi_z
0x1800472C8: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180028740: IPSecChooseDriverBootMode
0x18004F7B8: "long g_Mem_lModuleInitCount" ?g_Mem_lModuleInitCount@@3JA
0x180047158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18002B950: ExportPoliciesToFile
0x180046998: "__cdecl _imp_load_SafeArrayAccessData" __imp_load_SafeArrayAccessData
0x18002C200: ExportFilterDataToFile
0x180047400: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180032A80: ReadPolicyObjectFromDirectoryEx
0x1800460CB: "__cdecl _C_specific_handler" __C_specific_handler
0x180047290: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x180026C70: IPSecDeleteISAKMPData
0x18002B5C0: DirDeletePolicyBeforeImport
0x18003AD10: ReadNFAObjectsFromDirectory
0x180018C20: WMIEnumFilterObjectsEx
0x180029D30: RegBackPropIncChangesForISAKMPToPolicy
0x18002A610: RegGetPolicyReferencesForNFA
0x1800531C8: netutils_NULL_THUNK_DATA_DLA
0x18004D2D0: netutils_NULL_THUNK_DATA_DLB
0x180047340: "__cdecl _imp__onexit" __imp__onexit
0x18004D048: netutils_NULL_THUNK_DATA_DLN
0x1800478B8: "cn=ipsecPolicy" ??_C@_1BO@FOIFELCO@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180044710: PersistNegPolObject
0x180047E80: WPP_a13dd1890032358467eae095107014a9_Traceguids
0x180047188: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180039F60: LdapOpenSecure
0x18004F7F8: WPP_REGISTRATION_GUIDS
0x180048000: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x1800045A0: DirGetPolicyData
0x180041750: GenGUIDFromRegFilterReference
0x180047358: "__cdecl _imp__wtol" __imp__wtol
0x18002E360: IPSecFreePolStr
0x180053168: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180053128: "__cdecl _imp_ldap_msgfree" __imp_ldap_msgfree
0x180048F80: CLSID_WbemLocator
0x180046300: "__cdecl _imp_load_ControlService" __imp_load_ControlService
0x180047180: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800489F0: "%04d%02d%02d%02d%02d%02d" ??_C@_1DC@JMPBDJDG@?$AA?$CF?$AA0?$AA4?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x180047240: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180053108: "__cdecl _imp_ldap_connect" __imp_ldap_connect
0x180046A6C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800078B0: DirSetNegPolData
0x1800419F0: UnMarshallRegistryPolicyObject
0x18000F7F0: DirRemovePolicyReferenceFromISAKMPObject
0x1800484E8: WPP_a0eef8d299563ceaad6370cb34955f50_Traceguids
0x180040870: FreeIpsecNegPolData
0x1800037E0: DirGetPolicyExistingISAKMPRef
0x180044CC0: PersistISAKMPObject
0x180048488: WPP_3a945d49fa693bda945f2f656f584b34_Traceguids
0x18002CBA0: ValidateISAKMPData
0x180047248: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18004645E: "__cdecl _imp_load_VariantClear" __imp_load_VariantClear
0x18002F210: PersistNFAObjectEx
0x180047FB0: WPP_627d4317f864309bb11760bb4d24cb57_Traceguids
0x180041750: GenGUIDFromRegISAKMPReference
0x180047F80: WPP_1adfb27daa5c3e80d672eb5e4f94fbc3_Traceguids
0x180053058: "__cdecl _imp_SafeArrayCreate" __imp_SafeArrayCreate
0x180019680: RegEnumNegPolData
0x180047288: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18004F800: WPP_MAIN_CB
0x180048558: "ClassName" ??_C@_1BE@OHBKGNPL@?$AAC?$AAl?$AAa?$AAs?$AAs?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18003EB70: UnmarshallNFAObject
0x18003C1C0: UnMarshallNFAObject
0x180047FA0: WPP_95f5c00f7fda337a6f6211614a176116_Traceguids
0x18004DB6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180047228: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180045EF3: "__cdecl amsg_exit" _amsg_exit
0x18000EB40: DirUpdateFilterReferenceInNFAObject
0x180022DE0: RegEnumISAKMPData
0x180048FA0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180046793: "__cdecl _imp_load_LdapGetLastError" __imp_load_LdapGetLastError
0x180006380: DirMarshallFilterObject
0x18004F760: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x18004F788: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x180016610: MarshallV1FilterSpecBuffer
0x18004F7BC: "class CMemMgr g_IPSecMemoryManager" ?g_IPSecMemoryManager@@3VCMemMgr@@A
0x180048A60: "Kerberos" ??_C@_1BC@KFNANHG@?$AAK?$AAe?$AAr?$AAb?$AAe?$AAr?$AAo?$AAs?$AA?$AA@
0x18004CD7C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WS2_32_dll" __DELAY_IMPORT_DESCRIPTOR_WS2_32_dll
0x180007B90: DirDeleteNegPolData
0x1800290D0: IPSecIsDomainPolicyAssigned
0x180047300: "__cdecl _imp__lock" __imp__lock
0x18001EE90: ConvertGuidToFilterString
0x18004616C: atexit
0x18002E480: IPSecCopyISAKMPData
0x180019CD0: RegCreateNegPolData
0x1800216A0: RegAddFilterReferenceToNFAObject
0x1800329C0: AllocPolBstrStr
0x180035EC0: FreeIpsecPolicyObjects
0x180034C90: "long __cdecl WriteDirectoryPolicyToWMI(unsigned short const * __ptr64,struct _GPO_INFO * __ptr64,struct IWbemServices * __ptr64)" ?WriteDirectoryPolicyToWMI@@YAJPEBGPEAU_GPO_INFO@@PEAUIWbemServices@@@Z
0x180041FE0: UnMarshallRegistryNFAObject
0x180047BF0: WPP_818ce18e93c739a9188fe4a5f611ce5c_Traceguids
0x1800469AA: "__cdecl _imp_load_SafeArrayUnaccessData" __imp_load_SafeArrayUnaccessData
0x18004F7B0: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x18002E2F0: IPSecFreeNegPolData
0x180053048: "__cdecl _imp_SafeArrayPutElement" __imp_SafeArrayPutElement
0x18002C550: ExportNegPolDataToFile
0x180047268: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18002D700: ValidateNFAData
0x180047170: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18002AE90: ImportPoliciesFromFile
0x1800074A0: DirEnumNegPolObjects
0x1800451C0: CopyDSToFQRegString
0x180047680: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x180035D40: FreeIpsecFilterObjects
0x18002D520: ValidatePolicyData
0x18000FF00: DirEnumISAKMPObjects
0x18004D028: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x180047FE0: WPP_499c5bd862cf312c4b961324f7e04857_Traceguids
0x1800471F8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18004D158: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x180047928: WPP_508a356a88ad3a87aa69f9b3d4d53f86_Traceguids
0x1800461B1: "__cdecl _dllonexit" __dllonexit
0x1800531A8: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x18001FCA0: ConvertGuidToPolicyString
0x1800468D7: "__cdecl _imp_load_ldap_delete_sW" __imp_load_ldap_delete_sW
0x180032700: DeleteWMIClassObject
0x180047F48: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x180048BB0: "DsRoleFreeMemory" ??_C@_0BB@KCCKBBBG@DsRoleFreeMemory?$AA@
0x18004F7D0: "__cdecl _native_startup_lock" __native_startup_lock
0x180041750: GenGUIDFromRegNegPolReference
0x180025D10: IPSecEnumNegPolData
0x180025280: DllMain
0x1800468B3: "__cdecl _imp_load_ldap_add_sW" __imp_load_ldap_add_sW
0x180048B68: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x1800050F0: DirSetFilterData
0x1800468A1: "__cdecl _imp_load_ldap_value_free_len" __imp_load_ldap_value_free_len
0x180046AD0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18004DAB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180047378: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180047318: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000DDD0: DirGetNFAObject
0x1800473C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800471C8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180047858: "CN=ipsecISAKMPPolicy" ??_C@_1CK@ENHLKBIO@?$AAC?$AAN?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180025670: IPSecCreatePolicyData
0x18002F8D0: PersistFilterObjectEx
0x180053138: "__cdecl _imp_ntohl" __imp_ntohl
0x180053130: WLDAP32_NULL_THUNK_DATA_DLA
0x18004CEA8: ADVAPI32_NULL_THUNK_DATA_DLN
0x180047B60: "cn=ipsecNegotiationPolicy" ??_C@_1DE@ELOFIJKL@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18004D1F0: ADVAPI32_NULL_THUNK_DATA_DLB
0x180053028: ADVAPI32_NULL_THUNK_DATA_DLA
0x180047160: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180026F10: IPSecOpenPolicyStore
0x1800477E8: "ipsecData" ??_C@_1BE@NHNPGNMK@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18004F1B0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180046A48: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180047650: "__cdecl _sz_WS2_32_dll" __sz_WS2_32_dll
0x180042FB0: UnMarshallRegistryISAKMPObject
0x180047660: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x1800473F8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18003A870: ReadPolicyObjectFromDirectory
0x18004CFC8: WS2_32_NULL_THUNK_DATA_DLN
0x180047388: "__cdecl _imp_memcmp" __imp_memcmp
0x18004D1B8: WS2_32_NULL_THUNK_DATA_DLB
0x180053148: WS2_32_NULL_THUNK_DATA_DLA
0x18002DF10: RegVerifyPolicyDataExistence
0x180053110: "__cdecl _imp_ldap_unbind" __imp_ldap_unbind
0x1800358C0: FreeIpsecFilterObject
0x18004CFD8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x180025A50: IPSecCreateFilterData
0x18002EBA0: PersistPolicyObjectEx
0x180048610: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18004F768: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x18004D1D0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180053158: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x18000F0B0: DirAddNFAReferenceToNegPolObject
0x18004DB94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800471E0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180038D50: CopyIpsecAuthMethod
0x180048748: "LDAP://CN=User," ??_C@_1CA@JNJLIABA@?$AAL?$AAD?$AAA?$AAP?$AA?3?$AA?1?$AA?1?$AAC?$AAN?$AA?$DN?$AAU?$AAs?$AAe?$AAr?$AA?0?$AA?$AA@
0x18000A970: DirGetNFADNsForPolicy
0x180021D50: RegDeleteNFAReferenceInFilterObject
0x180048498: WPP_9275d73de66830e26d75556b9dc97df9_Traceguids
0x180047C80: WPP_b110164fae70365838477f33a4ac36be_Traceguids
0x180040050: UnmarshallNegPolObject
0x18003CE70: UnMarshallNegPolObject
0x1800226E0: DeleteValueFromMultiSz
0x1800467DB: "__cdecl _imp_load_ldap_bind_sW" __imp_load_ldap_bind_sW
0x180034210: "long __cdecl CreateChildPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CreateChildPath@@YAJPEBG0PEAPEAG@Z
0x1800104B0: DirDeleteISAKMPData
0x180047230: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180047918: "(" ??_C@_13LLDNKHDC@?$AA?$CI?$AA?$AA@
0x180048FA0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180045FB0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800231E0: RegCreateISAKMPData
0x180047D00: "ipsecFilterReference" ??_C@_1CK@NHJDJBKG@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18004686B: "__cdecl _imp_load_ldap_get_values_lenW" __imp_load_ldap_get_values_lenW
0x180047824: "{" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x18002E450: IPSecCopyNegPolData
0x180004A10: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18004CDFC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll" __DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll
0x1800181B0: MarshallFilterSpecBuffer
0x180047FC0: WPP_e3e4b480e944330bd3581ef838165002_Traceguids
0x180036170: Win32FromWmiHresult
0x180011910: DirGetISAKMPObject
0x18002CD10: ValidateISAKMPDataDeletion
0x18004D220: WLDAP32_NULL_THUNK_DATA_DLB
0x18004DAA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180021490: RegAddPolicyReferenceToNFAObject
0x180047380: "__cdecl _imp_time" __imp_time
0x1800476D0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180046702: "__cdecl _tailMerge_wldap32_dll" __tailMerge_wldap32_dll
0x180032EB0: WPP_SF_
0x18000E230: DirRemoveNFAReferenceFromPolicyObject
0x180048518: WPP_c2d5714284633543909d6fc25d6b0314_Traceguids
0x180047190: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800471C0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180047270: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18004CE5C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180035FB0: GenTimeStringToTimeT
0x1800402E0: UnmarshallISAKMPObject
0x18003D560: UnMarshallISAKMPObject
0x18002CF10: ValidateNegPolDataDeletion
0x1800485F0: WPP_2ccac6dc6ef0362fe1ed7ac47cb3a39e_Traceguids
0x180047298: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180045A70: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180047320: "__cdecl _imp__initterm" __imp__initterm
0x18002E3C0: IPSecFreeISAKMPData
0x180047EF8: WPP_01fe6fa8e7cd3db484fa47c9e818745c_Traceguids
0x180028C60: FreeLDAPModWs
0x180047980: "(objectclass=ipsecFilter)" ??_C@_1DE@MKNDGFHL@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$CJ?$AA?$AA@
0x180047690: "__cdecl _sz_ACTIVEDS_dll" __sz_ACTIVEDS_dll
0x18004F060: FilterDNAttributes
0x18004DB80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18004F7A8: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x180009AB0: DirGetNegPolObject
0x18004F010: PolicyDNAttributes
0x180047740: "ipsecName" ??_C@_1BE@GLEGDJAH@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18004F770: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x18001D1C0: RegEnumNFAData
0x1800479B8: "cn=ipsecFilter" ??_C@_1BO@MJCONJPC@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x18000D230: DirGetNFAExistingFilterRef
0x180046974: "__cdecl _imp_load_SafeArrayGetUBound" __imp_load_SafeArrayGetUBound
0x180047C68: "cn=ipsecNFA" ??_C@_1BI@DBNPPJI@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAF?$AAA?$AA?$AA@
0x18004DA7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18004791C: "))" ??_C@_15LDKEOKBG@?$AA?$CJ?$AA?$CJ?$AA?$AA@
0x180042A20: UnMarshallRegistryNegPolObject
0x18002E6A0: IPSecFreeMulNFAData
0x1800030C0: DirSetPolicyData
0x180048C18: WPP_af32fe9f2c1c3a6d91daf6975cbaea25_Traceguids
0x180038490: FlushRegSaveKey
0x18004D208: ACTIVEDS_NULL_THUNK_DATA_DLB
0x180053010: ACTIVEDS_NULL_THUNK_DATA_DLA
0x180001E40: DirMarshallPolicyObject
0x18004CE90: ACTIVEDS_NULL_THUNK_DATA_DLN
0x18002E590: IPSecFreeMulFilterData
0x1800530D0: "__cdecl _imp_ldap_count_valuesW" __imp_ldap_count_valuesW
0x18004F7C0: "__cdecl _onexitend" __onexitend
0x1800267D0: IPSecEnumISAKMPData
0x1800472E8: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18002E4B0: IPSecFreeMulPolicyData
0x1800461A5: "__cdecl unlock" _unlock
0x1800099D0: DirGetNegPolData
0x180047410: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180035C20: FreeNegPolReferences
0x180053088: "__cdecl _imp_ldap_count_entries" __imp_ldap_count_entries
0x1800465C8: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x180035730: FreeIpsecPolicyObject
0x18000F450: DirAddPolicyReferenceToISAKMPObject
0x18000C820: DirSetNFAData
0x180047200: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800468F5: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x180048008: "CN=IP Security,CN=System" ??_C@_1DC@DBINLMGP@?$AAC?$AAN?$AA?$DN?$AAI?$AAP?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?0?$AAC?$AAN?$AA?$DN?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x18004CD5C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll" __DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll
0x1800352B0: ValidateIpsecFilterData
0x1800483B8: WPP_424d0471e4553da774796b906ff5c026_Traceguids
0x180035C20: FreeNFAReferences
0x180009D00: GenerateSpecificNegPolQuery
0x180026D70: IPSecGetISAKMPData
0x18000EEE0: DirDeleteNFAReferenceInFilterObject
0x1800109F0: DirMarshallAddISAKMPObject
0x180047370: "__cdecl _imp_wcstol" __imp_wcstol
0x1800232D0: RegDeleteISAKMPData
0x1800476C0: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x18004650D: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x1800469BC: "__cdecl _imp_load_DsGetDcNameW" __imp_load_DsGetDcNameW
0x180046598: "__cdecl _imp_load_SafeArrayCreate" __imp_load_SafeArrayCreate
0x180033420: "unsigned long __cdecl ProcessIPSECPolicyEx(unsigned long,void * __ptr64,struct HKEY__ * __ptr64,struct _GROUP_POLICY_OBJECTW * __ptr64,struct _GROUP_POLICY_OBJECTW * __ptr64,unsigned __int64,int * __ptr64,unsigned long (__cdecl*)(int,unsigned short * __ptr64),struct IWbemServices * __ptr64,long * __ptr64)" ?ProcessIPSECPolicyEx@@YAKKPEAXPEAUHKEY__@@PEAU_GROUP_POLICY_OBJECTW@@2_KPEAHP6AKHPEAG@ZPEAUIWbemServices@@PEAJ@Z
0x180053078: "__cdecl _imp_SafeArrayUnaccessData" __imp_SafeArrayUnaccessData
0x18000E400: DirAddPolicyReferenceToNFAObject
0x18000F620: DirAddISAKMPReferenceToPolicyObject
0x1800472E0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180047438: "__cdecl _xi_a" __xi_a
0x18002E680: IPSecFreeFilterSpec
0x1800472D8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180047148: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800025F0: ConvertGuidToDirISAKMPString
0x180047390: "__cdecl _imp__unlock" __imp__unlock
0x1800530F8: "__cdecl _imp_LdapGetLastError" __imp_LdapGetLastError
0x18004F7A0: "__cdecl _hmod__WLDAP32_dll" __hmod__WLDAP32_dll
0x1800472F0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18004F790: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x1800484C8: WPP_2aa9f46fb46f34f519e40a92850f730f_Traceguids
0x180041660: FreeRsopInfo
0x1800531B8: logoncli_NULL_THUNK_DATA_DLA
0x18004D300: logoncli_NULL_THUNK_DATA_DLB
0x18004D038: logoncli_NULL_THUNK_DATA_DLN
0x1800531C0: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180053020: "__cdecl _imp_RegSaveKeyW" __imp_RegSaveKeyW
0x180048958: IID_IDirectoryObject
0x180032EE0: WPP_SF_DD
0x180047A18: WPP_25ecfd52dc983cceb53c066094430819_Traceguids
0x18001B2A0: WMIEnumNegPolDataEx
0x180053178: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1800486A0: "cn=ipsec" ??_C@_1BC@IAIBOJDF@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AA?$AA@
0x1800406D0: FreeIpsecFilterData
0x18001B810: WMIGetNegPolDataEx
0x1800245A0: WMIEnumISAKMPDataEx
0x180048BC8: WPP_3199695ae561347e00dfdb596ddab69a_Traceguids
0x180021FE0: RegAddNFAReferenceToNegPolObject
0x18004F000: WPP_GLOBAL_Control
0x18002E4B0: FreeMulIpsecPolicyData
0x1800485EC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18004DB1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18001AD50: MarshallNegPolBuffer
0x18002C6E0: ImportNegPolDataFromFile
0x180030CB0: CloneDirectoryPolicyObjectEx
0x180024180: RegGetISAKMPData
0x180001030: WPP_SF_d
0x180001030: WPP_SF_D
0x18004F7E8: "__cdecl pRawDllMain" _pRawDllMain
0x18004631E: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x180040AF0: FreeIpsecPolicyData
0x180047A28: "CN=ipsecNegotiationPolicy" ??_C@_1DE@EDEJFCDL@?$AAC?$AAN?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180046647: "__cdecl _imp_load_RegSaveKeyW" __imp_load_RegSaveKeyW
0x1800382B0: EnablePrivilege
0x180047310: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180053038: "__cdecl _imp_VariantClear" __imp_VariantClear
0x1800355C0: FreeIpsecNFAObject
0x180047828: "}" ??_C@_13EHOOFIKC@?$AA?$HN?$AA?$AA@
0x18004626F: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x180047610: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x1800475B0: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x180012550: RegSetPolicyData
0x180023F60: MarshallISAKMPBuffer
0x1800484A8: WPP_fe2e51d426803750156bae07f650345c_Traceguids
0x180027C80: IPSecClosePolicyStore
0x180025760: IPSecDeletePolicyData
0x18000A2F0: DirEnumNFAData
0x18002A860: RegGetNFAReferencesForFilter
0x180045510: RegWriteMultiValuedString
0x18000CB50: DirMarshallSetNFAObject
0x18001F440: RegGetNFAExistingFilterRef
0x18004DB58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180035CC0: FreeIpsecNFAObjects
0x180047CC0: "ipsecNegotiationPolicyReference" ??_C@_1EA@MFCIPANJ@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18001AE80: RegGetNegPolData
0x18004CE1C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180045D10: "__cdecl _security_check_cookie" __security_check_cookie
0x180047430: "__cdecl _xc_z" __xc_z
0x180047208: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001C600: RegSetNFAData
0x180022940: RegAddPolicyReferenceToISAKMPObject
0x1800471B8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180024B10: WMIGetISAKMPDataEx
0x1800530C8: "__cdecl _imp_ldap_value_free_len" __imp_ldap_value_free_len
0x180013320: RegMarshallPolicyObject
0x1800343A0: "long __cdecl RetrieveIPSECAttribString(struct _ads_attr_info const * __ptr64,unsigned __int64,unsigned short * __ptr64)" ?RetrieveIPSECAttribString@@YAJPEBU_ads_attr_info@@_KPEAG@Z
0x1800080D0: DirMarshallAddNegPolObject
0x1800468E9: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x18000FBA0: DirRemoveFilterReferenceInNFAObject
0x180048838: WPP_b174f1bec0af371c9500ceadbfcd5947_Traceguids
0x180040920: FreeIpsecNFAData
0x18004CCFC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x180018990: FreeSpecBuffer
0x1800412C0: UnmarshallAuthMethods
0x180047B10: "(objectclass=ipsecNegotiationPol" ??_C@_1EK@JPGDIKDN@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl@
0x180021200: RegRemoveNFAReferenceFromPolicyObject
0x18000BD50: ConvertGuidToDirNegPolString
0x180048580: "creationTime" ??_C@_1BK@CODDIDAM@?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180053150: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800472D0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800479E0: "(&(objectclass=ipsecFilter)" ??_C@_1DI@MLAOECM@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$CJ?$AA?$AA@
0x1800485B0: "precedence" ??_C@_1BG@PJFJLJGH@?$AAp?$AAr?$AAe?$AAc?$AAe?$AAd?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1800467FF: "__cdecl _imp_load_ldap_msgfree" __imp_load_ldap_msgfree
0x180043680: PersistPolicyObject
0x18003A1D0: LdapSearchHelper
0x1800371C0: UnMarshallWMIISAKMPObject
0x1800473E8: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180048F90: IID_IWbemLocator
0x180047138: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180011B60: GenerateSpecificISAKMPQuery
0x180047198: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180047FF0: WPP_cd939cfecf5c312c1d91756e7a5994ad_Traceguids
0x1800266F0: IPSecGetNegPolData
0x180047F50: WPP_8c7b65e14ae23e4fbcd2af31a9cf5473_Traceguids
0x180047770: "ipsecID" ??_C@_1BA@BLEOCLBA@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAD?$AA?$AA@
0x18004639D: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x180044250: PersistFilterObject
0x18001B490: WMIEnumNegPolObjectsEx
0x180010E80: DirMarshallSetISAKMPObject
0x18004687D: "__cdecl _imp_load_ldap_count_values_len" __imp_load_ldap_count_values_len
0x180047E58: "PolicyAgent" ??_C@_1BI@PKNNGCIA@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAA?$AAg?$AAe?$AAn?$AAt?$AA?$AA@
0x180048A28: "creationtime" ??_C@_1BK@GBGOIANM@?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AAt?$AAi?$AAm?$AAe?$AA?$AA@
0x180047308: "__cdecl _imp__wremove" __imp__wremove
0x180028F30: AllocateLDAPBinaryValue
0x1800389A0: CopyIpsecNFAData
0x180047718: "distinguishedName" ??_C@_1CE@OEKOHCPI@?$AAd?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AAu?$AAi?$AAs?$AAh?$AAe?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18004CE3C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x1800467C9: "__cdecl _imp_load_ldap_unbind" __imp_load_ldap_unbind
0x18000E970: DirAddFilterReferenceToNFAObject
0x180019DC0: RegDeleteNegPolData
0x1800469C8: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x180047280: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180024790: WMIEnumISAKMPObjectsEx
0x180047218: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180053118: "__cdecl _imp_ldap_bind_sW" __imp_ldap_bind_sW
0x180047948: "CN=ipsecFilter" ??_C@_1BO@BOEJACFG@?$AAC?$AAN?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x180047450: "__cdecl _guard_fids_table" __guard_fids_table
0x1800259C0: IPSecSetFilterData
0x180034E40: IpsecFreeMem
0x1800072F0: DirEnumNegPolData
0x180025C10: IPSecDeleteFilterData
0x18003E4D0: DeepCpyRsopInfo
0x180046781: "__cdecl _imp_load_LdapMapErrorToWin32" __imp_load_LdapMapErrorToWin32
0x180038580: GUIDFromStringW
0x1800473B8: msvcrt_NULL_THUNK_DATA
0x1800467B7: "__cdecl _imp_load_ldap_connect" __imp_load_ldap_connect
0x18003B1D0: ReadFilterObjectsFromDirectory
0x180047830: "CN=ipsecPolicy" ??_C@_1BO@IJOCJAIK@?$AAC?$AAN?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18004CD3C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x180047010: "__cdecl load_config_used" _load_config_used
0x180025580: IPSecSetPolicyData
0x180048B60: "(|" ??_C@_15IECLMGCD@?$AA?$CI?$AA?$HM?$AA?$AA@
0x180046811: "__cdecl _imp_load_ldap_first_entry" __imp_load_ldap_first_entry
0x18003E310: ComputePrimaryDomainName
0x180047DE0: "(&(objectclass=ipsecISAKMPPolicy" ??_C@_1EE@BPGFJHGK@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy@
0x180039A00: CopyIpsecPolicyData
0x1800530A8: "__cdecl _imp_ldap_count_values_len" __imp_ldap_count_values_len
0x180047150: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180047140: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180053188: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x180047DB0: "cn=ipsecISAKMPPolicy" ??_C@_1CK@FJKIHCOP@?$AAc?$AAn?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1800314A0: CloneDirectoryFilterObjectEx
0x18004CD1C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x180047BA0: "(&(objectclass=ipsecNegotiationP" ??_C@_1EO@POACEBHK@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP@
0x180017710: RegMarshallFilterObject
0x180046823: "__cdecl _imp_load_ldap_next_entry" __imp_load_ldap_next_entry
0x18004CFB0: WLDAP32_NULL_THUNK_DATA_DLN
0x1800218F0: RegUpdateFilterReferenceInNFAObject
0x180048948: CLSID_Pathname
0x1800262B0: IPSecSetNFAData
0x1800472A8: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x18000FD50: DirEnumISAKMPData
0x180016FB0: RegSetFilterData
0x1800390D0: CopyIpsecFilterData
0x1800414F0: UnmarshallAltAuthMethods
0x18004F7F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUkzhglivUlyquivUznwGEUkivxlnkOlyq@pastore" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUkzhglivUlyquivUznwGEUkivxlnkOlyq@pastore
0x180047350: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18002A230: RegGetPolicyReferencesForISAKMP
0x18002DC60: RegGetNFAReferencesForPolicy
0x18000C290: DirMarshallAddNFAObject
0x1800471B0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180032E10: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800473C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180048600: WPP_2bd8e203a7d23da8ff46602d267aba4c_Traceguids
0x180047210: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180053008: "__cdecl _imp_FreeADsMem" __imp_FreeADsMem
0x180047C50: "ipsecNFA" ??_C@_1BC@ICNLGHBF@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAF?$AAA?$AA?$AA@
0x1800473E0: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x180008780: DirMarshallSetNegPolObject
0x180035F40: IsStringInArray
0x1800464FB: "__cdecl _imp_load_htonl" __imp_load_htonl
0x180036CE0: UnMarshallWMINegPolObject
0x180019830: RegEnumNegPolObjects
0x18002B2C0: RegDeletePolicy
0x180037C60: WMIstoreQueryValue
0x180027E70: IPSecAssignPolicy
0x180033350: WPP_SF_SSd
0x18000F9D0: DirUpdateISAKMPReferenceInPolicyObject
0x180047118: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180047A60: "ipsecNegotiationPolicy" ??_C@_1CO@DIHGBIDG@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1800473D8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180053198: "__cdecl _imp_ControlService" __imp_ControlService
0x180048FA8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800530E0: "__cdecl _imp_ldap_initW" __imp_ldap_initW
0x180047888: "objectClass" ??_C@_1BI@PHJBOPCE@?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x18002B7E0: DirDeleteDynamicDefaultNegPolData
0x180046190: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180046B5C: memcmp
0x180022F90: RegEnumISAKMPObjects
0x180046519: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x180039940: ReallocatePolMem
0x18002E470: IPSecCopyFilterSpec
0x1800461D2: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x1800530C0: "__cdecl _imp_ldap_add_sW" __imp_ldap_add_sW
0x1800485C8: "SOMID" ??_C@_1M@COMHKOLD@?$AAS?$AAO?$AAM?$AAI?$AAD?$AA?$AA@
0x18004688F: "__cdecl _imp_load_ldap_value_freeW" __imp_load_ldap_value_freeW
0x1800466E4: "__cdecl _imp_load_FreeADsMem" __imp_load_FreeADsMem
0x18000E5D0: DirAddNegPolReferenceToNFAObject
0x1800530F0: "__cdecl _imp_LdapMapErrorToWin32" __imp_LdapMapErrorToWin32
0x180026890: IPSecSetISAKMPData
0x180048B70: "dsrole.dll" ??_C@_1BG@EPPAHADL@?$AAd?$AAs?$AAr?$AAo?$AAl?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18004DAE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180047758: "description" ??_C@_1BI@MFBGCOGB@?$AAd?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180014B90: RegUnassignPolicy
0x180048570: "name" ??_C@_19HHIIBINK@?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x1800305B0: PersistISAKMPObjectEx
0x18003B800: ReadISAKMPObjectsFromDirectory
0x180029FB0: RegBackPropIncChangesForNFAToPolicy
0x180053098: "__cdecl _imp_ldap_get_valuesW" __imp_ldap_get_valuesW
0x180015530: RegPingPASvcForActivePolicy
0x1800283F0: IPSecGetAssignedPolicyData
0x180035E40: FreeIpsecISAKMPObjects
0x180047EC8: WPP_72b14e329e2435bd492658662f18ee10_Traceguids
0x18002FEE0: PersistNegPolObjectEx
0x1800467A5: "__cdecl _imp_load_ldap_set_optionW" __imp_load_ldap_set_optionW
0x1800261C0: IPSecCreateNFAData
0x180029BC0: CopyReferences
0x18002E440: IPSecCopyPolicyData
0x180043BB0: PersistNFAObject
0x1800531B0: "__cdecl _imp_DsGetDcNameW" __imp_DsGetDcNameW
0x180047850: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x1800485D8: "__RELPATH" ??_C@_1BE@BBMMGHJC@?$AA_?$AA_?$AAR?$AAE?$AAL?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x180023CB0: MapBundleToBYTE
0x180047D70: "(objectclass=ipsecISAKMPPolicy)" ??_C@_1EA@BAOEALAH@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$CJ?$AA?$AA@
0x18004CDBC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x18004643A: "__cdecl _imp_load_SysAllocString" __imp_load_SysAllocString
0x180047338: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18002BF40: ImportPolicyDataFromFile
0x180031710: CloneDirectoryNegPolObjectEx
0x18001D850: RegMarshallNFAObject
0x180047408: ntdll_NULL_THUNK_DATA
0x180047348: "__cdecl _imp_memcpy" __imp_memcpy
0x1800297A0: DirUpdatePolicy
0x18003DAB0: GenerateQuery
0x180004CE0: DirEnumFilterObjects
0x180047780: "ipsecDataType" ??_C@_1BM@NNIANNBA@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAD?$AAa?$AAt?$AAa?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18001E750: MarshallAuthMethods
0x18000DB00: DirGetNFAExistingNegPolRef
0x180032570: LogBlobPropertyEx
0x180028630: IsRegvalueExist
0x18002E490: IPSecCopyNFAData
0x18004DACC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180033050: WPP_SF_SSSS
0x18004F1B8: "__cdecl _security_cookie" __security_cookie
0x180047260: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180048F70: WPP_ee32c7f7588337cc0ac943cd1d7a07f1_Traceguids
0x1800359D0: FreeIpsecNegPolObject
0x180039330: CopyIpsecFilterSpec
0x180015110: RegGetPolicyData
0x180031D10: CloneDirectoryISAKMPObjectEx
0x180053030: "__cdecl _imp_SafeArrayGetUBound" __imp_SafeArrayGetUBound
0x180046835: "__cdecl _imp_load_ldap_count_entries" __imp_load_ldap_count_entries
0x180047178: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800293B0: DirBackPropIncChangesForISAKMPToPolicy
0x180019A80: RegSetNegPolData
0x180046251: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x180047EC0: "id" ??_C@_15NFICGAJK@?$AAi?$AAd?$AA?$AA@
0x18004DA90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180014060: RegGetPolicyExistingISAKMPRef
0x180046470: "__cdecl _imp_load_ntohl" __imp_load_ntohl
0x180022B50: RegRemovePolicyReferenceFromISAKMPObject
0x180053050: "__cdecl _imp_VariantInit" __imp_VariantInit
0x18002E710: PersistWMIObject
0x1800485A0: "GPOID" ??_C@_1M@LFFJKFCI@?$AAG?$AAP?$AAO?$AAI?$AAD?$AA?$AA@
0x180053060: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x180047258: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18004F7C8: "__cdecl _onexitbegin" __onexitbegin
0x180027EE0: IPSecUnassignPolicy
0x18001D450: RegEnumNFAObjects
0x180011270: DirMarshallISAKMPObject
0x1800299B0: DirUpdateNFA
0x1800472F8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800530E8: "__cdecl _imp_ldap_first_entry" __imp_ldap_first_entry
0x180047C00: "(&(objectclass=ipsecNFA)" ??_C@_1DC@IKCNAAPD@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAN?$AAF?$AAA?$AA?$CJ?$AA?$AA@
0x18000D510: GenerateSpecificNFAQuery
0x180047168: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800471D0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x1800475E0: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x180016BB0: RegEnumFilterData
0x1800486B8: "IPSEC_POLICY_CHANGE_EVENT" ??_C@_1DE@IJGHKMGH@?$AAI?$AAP?$AAS?$AAE?$AAC?$AA_?$AAP?$AAO?$AAL?$AAI?$AAC?$AAY?$AA_?$AAC?$AAH?$AAA?$AAN?$AAG?$AAE?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA?$AA@
0x180029200: RegGetAssignedPolicyData
0x180005EA0: DirMarshallSetFilterObject
0x1800279B0: FileOpenPolicyStore
0x1800478E0: "(&(objectclass=ipsecPolicy)" ??_C@_1DI@DPDMALPM@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$CJ?$AA?$AA@
0x1800473A8: "__cdecl _imp__itow" __imp__itow
0x180047220: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180013AB0: ConvertGuidToISAKMPString
0x180002B30: DirMarshallAddPolicyObject
0x180045FE4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800530D8: "__cdecl _imp_ldap_value_freeW" __imp_ldap_value_freeW
0x180025DD0: IPSecSetNegPolData
0x180008D60: DirMarshallNegPolObject
0x180032090: CopyDSToFQWMIString
0x18002E460: IPSecCopyFilterData
0x18003B4E0: ReadNegPolObjectsFromDirectory
0x180039D50: CrackDomainName
0x180012150: RegEnumPolicyData
0x180012B00: RegCreatePolicyData
0x1800450F0: CopyBinaryValue
0x180035DC0: FreeIpsecNegPolObjects
0x18004DA40: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180048938: IID_IADsPathname
0x180046659: "__cdecl _imp_load_ADsOpenObject" __imp_load_ADsOpenObject
0x18002E3B0: IPSecFreeFilterData
0x180047938: WPP_ThisDir_CTLGUID_IpsecPolStore
0x18004F828: g_PresentTimestamp
0x180047120: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x1800468C5: "__cdecl _imp_load_ldap_modify_sW" __imp_load_ldap_modify_sW
0x180047330: "__cdecl _imp_malloc" __imp_malloc
0x180039870: FreeMulIpsecISAKMPData
0x18004DA68: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180018FA0: WMIGetFilterDataEx
0x180026550: IPSecGetFilterData
0x1800477B8: "ipsecISAKMPReference" ??_C@_1CK@EDJKENIF@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAI?$AAS?$AAA?$AAK?$AAM?$AAP?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1800476E0: "(objectclass=ipsecPolicy)" ??_C@_1DE@PJFPIKKL@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAc?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAi?$AAp?$AAs?$AAe?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$CJ?$AA?$AA@
0x18001BEF0: RegCreateNFAData
0x18002C390: ImportFilterDataFromFile
0x18000D030: DirDeleteNFAData
0x180047130: RPCRT4_NULL_THUNK_DATA
0x1800397C0: FreeIpsecFilterSpec
0x180014E50: PingPolicyAgentSvc
0x180020250: WMIEnumNFADataEx
0x180045D70: "__cdecl _report_gsfailure" __report_gsfailure
0x1800349E0: "unsigned long __cdecl WriteIPSECPolicyToRegistry(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?WriteIPSECPolicyToRegistry@@YAKPEBG00@Z
0x180048040: ",DC=" ??_C@_19GPEOOAHO@?$AA?0?$AAD?$AAC?$AA?$DN?$AA?$AA@
0x180047C90: "ipsecOwnersReference" ??_C@_1CK@BDPKODDE@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18000B810: ConvertGuidToDirFilterString
0x180028420: IPSecExportPolicies
0x1800460D8: "__cdecl onexit" _onexit
0x1800467ED: "__cdecl _imp_load_ldap_search_sW" __imp_load_ldap_search_sW
0x180004060: ConvertGuidToDirPolicyString
0x180025900: IPSecEnumFilterData
0x1800344E0: "long __cdecl RetrieveIPSECPolicyFromDS(struct _GROUP_POLICY_OBJECTW const * __ptr64,unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64,unsigned __int64)" ?RetrieveIPSECPolicyFromDS@@YAJPEBU_GROUP_POLICY_OBJECTW@@PEAG_K1212@Z
0x18004F7D8: "__cdecl _native_startup_state" __native_startup_state
0x18004CDDC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ACTIVEDS_dll" __DELAY_IMPORT_DESCRIPTOR_ACTIVEDS_dll
0x18000E7A0: DirUpdateNegPolReferenceInNFAObject
0x180018570: RegGetFilterData
0x180031F40: CloneNFAReferencesDSToWMI
0x180030AD0: PersistComnRSOPPolicySettings
0x180046665: "__cdecl _tailMerge_activeds_dll" __tailMerge_activeds_dll
0x1800221F0: RegDeleteNFAReferenceInNegPolObject
0x180001220: DirEnumPolicyObjects
0x18004644C: "__cdecl _imp_load_SysFreeString" __imp_load_SysFreeString
0x180053170: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18003A4F0: OpenDirectoryServerHandle
0x180047360: "__cdecl _imp__snwscanf_s" __imp__snwscanf_s
0x180048720: "LDAP://CN=Machine," ??_C@_1CG@GEANKIMP@?$AAL?$AAD?$AAA?$AAP?$AA?3?$AA?1?$AA?1?$AAC?$AAN?$AA?$DN?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?0?$AA?$AA@
0x180035B30: FreeIpsecISAKMPObject
0x180048A78: WPP_68beee1889a33f9e15a57017d1238bfb_Traceguids
0x180016100: GetAddressSubnets
0x180046847: "__cdecl _imp_load_ldap_get_valuesW" __imp_load_ldap_get_valuesW
0x18004CF00: OLEAUT32_NULL_THUNK_DATA_DLN
0x1800471D8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x1800461C6: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x180053080: OLEAUT32_NULL_THUNK_DATA_DLA
0x18004D190: OLEAUT32_NULL_THUNK_DATA_DLB
0x18002AC40: RegGetNFAReferencesForNegPol
0x180003A70: GenerateSpecificPolicyQuery
0x180047128: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x1800254C0: IPSecEnumPolicyData
0x180048B10: "ForceKerberosOverride" ??_C@_1CM@JJPDJLFI@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAK?$AAe?$AAr?$AAb?$AAe?$AAr?$AAo?$AAs?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x180006D00: GenerateSpecificFilterQuery
0x18001DF90: MarshallNFABuffer
0x180053120: "__cdecl _imp_ldap_search_sW" __imp_ldap_search_sW
0x18002E430: IPSecFreeNFAData
0x18004647C: "__cdecl _tailMerge_ws2_32_dll" __tailMerge_ws2_32_dll
0x180053068: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18001E8E0: ConvertGuidToNegPolString
0x180026A70: IPSecCreateISAKMPData
0x180027F40: ComputeDirLocationName
0x180053040: "__cdecl _imp_SafeArrayAccessData" __imp_SafeArrayAccessData
0x180047E28: WPP_6563be3c182c34f02e965e9dffbab8be_Traceguids
0x18004DB30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800053D0: DirDeleteFilterData
0x1800483A8: WPP_978c390a25593b796172acfbac28d386_Traceguids
0x1800375D0: UnMarshallWMINFAObject
0x180046312: "__cdecl _imp_load_ChangeServiceConfigW" __imp_load_ChangeServiceConfigW
0x180047250: "__cdecl _imp_RegRestoreKeyW" __imp_RegRestoreKeyW
0x180017200: RegCreateFilterData
0x1800139E0: MarshallPolicyBuffer
0x180021B40: RegAddNFAReferenceToFilterObject
0x180032FC0: WPP_SF_SD
0x180047398: "__cdecl _imp_free" __imp_free
0x180045F50: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180020FF0: RegAddNFAReferenceToPolicyObject
0x1800472C0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180047968: "ipsecFilter" ??_C@_1BI@DJKHHCEI@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x180017D60: MarshallFilterBuffer
0x1800530A0: "__cdecl _imp_ldap_get_values_lenW" __imp_ldap_get_values_lenW
0x1800471F0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180005910: DirMarshallAddFilterObject
0x18002C8F0: ImportNFADataFromFile
0x1800472B0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800270E0: RegOpenPolicyStore
0x18004DB08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800032F0: DirMarshallSetPolicyObject
0x1800465BC: "__cdecl _imp_load_RegConnectRegistryW" __imp_load_RegConnectRegistryW
0x180032F40: WPP_SF_S
0x180034F60: StartPolicyAgentSvcIfNeeded
0x180046B74: memset
0x180026430: IPSecEnumNFAData
0x18004DBA8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18004F778: "__cdecl _hmod__OLEAUT32_dll" __hmod__OLEAUT32_dll
0x180025EC0: IPSecCreateNegPolData
0x18002E2E0: IPSecFreePolicyData
0x180047640: "__cdecl _sz_OLEAUT32_dll" __sz_OLEAUT32_dll
0x180025390: CreateIWbemServices

[JEB Decompiler by PNF Software]