Generated by JEB on 2019/02/01

PE: C:\Windows\System32\KdsCli.dll Base=0x180000000 SHA-256=C9B4B8AF9BE4B63DFC25D158D00DE3AE3F04976BB129C23CAC45F6ECF7EDF5C3
PDB: KdsCli.pdb GUID={003CF770-0906-7BA2-A69850D61D26A8DB} Age=1

539 located named symbols:
0x180014640: g_MachineFullDcRpcCache
0x18000F5C0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000F958: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180010758: "`string'" ??_C@_0DM@CAHPNJLF@onecore?2ds?2security?2keyman?2sidke@
0x18000FE70: "`string'" ??_C@_0DK@GDBAJPDH@onecore?2ds?2security?2keyman?2sidke@
0x18000FB78: "`string'" ??_C@_1CA@CGKDPGGM@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CK?$AA?$CJ?$AA?$AA@
0x18000E560: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18001233C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180012314: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18000FAF8: "`string'" ??_C@_0DF@NPBKBFCP@onecore?2ds?2security?2keyman?2sidke@
0x18000BC60: SIDKeyProtect
0x18000FE48: KdsSvcInvalidMRK
0x180010D28: WPP_7a810d74fb663fa763476e0773cd764a_Traceguids
0x18000AAD0: GetKdsKeyCycleDuration
0x180014068: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180009BE0: UnlockRpcCache
0x18000FF60: "`string'" ??_C@_1CE@PHPKCCPE@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAP?$AAr?$AAo?$AAv?$AAR?$AAo?$AAo?$AAt?$AAK?$AAe?$AAy?$AA?$AA@
0x180010058: "`string'" ??_C@_1CM@CENFELGA@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAP?$AAu?$AAb?$AAl?$AAi?$AAc?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18000F4B0: "__cdecl _imp_ldap_search_ext_sW" __imp_ldap_search_ext_sW
0x18000F4A8: "__cdecl _imp_ldap_set_optionW" __imp_ldap_set_optionW
0x18000F650: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800100B8: "`string'" ??_C@_1BO@PPMMGENH@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAK?$AAD?$AAF?$AAP?$AAa?$AAr?$AAa?$AAm?$AA?$AA@
0x1800106A0: "`string'" ??_C@_1BG@ICLLCBCI@?$AAP?$AAu?$AAb?$AAl?$AAi?$AAc?$AAK?$AAe?$AAy?$AA?2?$AA?$AA@
0x180004C64: ValidateKDFParam
0x18000F8E0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180008E84: GetDomainControllerInfo
0x1800023F0: WppControlCallback
0x18000EAC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000F5A8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000FDE0: WPP_2d0764f1ee4a33c0f59eb4d6eaf30e76_Traceguids
0x18000F598: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x18000B7F0: KdsGetGmsaPasswordBasedOnKeyId
0x180014698: g_ulAdditionalProbeSize
0x18000F850: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x18000F920: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18000F6C0: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180010D40: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800048A0: FreeRootKeyMetaDataList
0x1800086A0: GenerateEphemeralKeyPair
0x180012224: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000F878: bcrypt_NULL_THUNK_DATA
0x18000B064: "__cdecl GenerateGmsaPassword" _GenerateGmsaPassword
0x18000F600: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000F8D0: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x18000F8C0: "__cdecl _imp_wcschr" __imp_wcschr
0x180010088: "`string'" ??_C@_1CO@CBEFDDEC@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAP?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18000F988: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180007694: DeleteFolder
0x1800106E4: "`string'" ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x180010700: "`string'" ??_C@_0DJ@OLGHGLGD@onecore?2ds?2security?2keyman?2sidke@
0x18000F898: "__cdecl _imp__ui64tow_s" __imp__ui64tow_s
0x180010C90: g_rgbObjSID
0x18000FF28: "`string'" ??_C@_1BO@EHIBKKFO@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAI?$AAD?$AA?$AA@
0x18000F508: "__cdecl _imp_ldap_modify_sW" __imp_ldap_modify_sW
0x180010C80: g_rgbObjDescriptor
0x18000FDB0: "`string'" ??_C@_1CK@JMHIIEDF@?$AAc?$AAn?$AA?$DN?$AAM?$AAa?$AAs?$AAt?$AAe?$AAr?$AA?5?$AAR?$AAo?$AAo?$AAt?$AA?5?$AAK?$AAe?$AAy?$AAs?$AA?0?$AA?$AA@
0x1800145F0: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180010928: "`string'" ??_C@_08DBOEHLEI@ntStatus?$AA@
0x1800096C8: AddCacheEntry
0x180010D00: EveryoneSid
0x180010238: WPP_dc038cab65ba32fb6b7058578e48acef_Traceguids
0x18000AADC: IsLowbox
0x18001229C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x18000F848: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x18000E0DC: GetLatestKey
0x180010228: "`string'" ??_C@_0M@FEBOFLAN@ulLdapError?$AA@
0x18000F7B8: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18000F5A0: "__cdecl _imp_FindClose" __imp_FindClose
0x180010B18: "`string'" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x180008CF4: StringCchCopyW
0x18000F4F0: "__cdecl _imp_ldap_next_attributeW" __imp_ldap_next_attributeW
0x180001C7C: GenerateSingleValueBervalAttribute
0x18000F7B0: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA
0x180009C20: SIDKeyProvAlloc
0x18000F5F0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000F710: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x18000FE38: KdsSvcMRKCreationFailure
0x18000F5B0: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x18000FAA8: "__cdecl _guard_iat_table" __guard_iat_table
0x18000FFB0: "`string'" ??_C@_1CG@PIDMJOOC@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAU?$AAs?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180010200: "`string'" ??_C@_1BI@BPINKHAJ@?$AA?$CI?$AA?$CG?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x1800106B8: "`string'" ??_C@_1BI@FHOPDCHN@?$AAP?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?2?$AA?$AA@
0x18000AF7C: WPP_SF__HEX_
0x18000EA9B: memcpy
0x18000F4C0: "__cdecl _imp_ldap_first_attributeW" __imp_ldap_first_attributeW
0x18000B324: "__cdecl GetGmsaPasswordForInterval" _GetGmsaPasswordForInterval
0x18000F4C8: "__cdecl _imp_ldap_next_entry" __imp_ldap_next_entry
0x18000DF58: GetLatestSidKey
0x18000FC00: "`string'" ??_C@_1CO@PCIAMFLN@?$AAO?$AAU?$AA?$DN?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AAs?$AA?0?$AA?$AA@
0x18000F820: "__cdecl _imp_BCryptDeriveKey" __imp_BCryptDeriveKey
0x180010130: "`string'" ??_C@_1FA@EFJCAAMF@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAE?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAD?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG@
0x18000F950: "__cdecl _imp_memset" __imp_memset
0x180010B20: "`string'" ??_C@_0EA@EKIGKGAD@onecore?2ds?2security?2keyman?2sidke@
0x180010CB0: "`string'" ??_C@_0EC@OINJAGEK@onecore?2ds?2security?2keyman?2sidke@
0x18000FB48: "`string'" ??_C@_0BE@MJDMKHMN@LDAP_NO_SUCH_OBJECT?$AA@
0x18000FAD0: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x18000E957: "__cdecl _imp_load_RpcBindingFree" __imp_load_RpcBindingFree
0x1800121FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000F6D8: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x18000F8B0: "__cdecl _imp_NtRollbackTransaction" __imp_NtRollbackTransaction
0x18000F558: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180009C78: ConvertStrToUlong
0x18000F960: "__cdecl _imp_wcscmp" __imp_wcscmp
0x18000F448: "__cdecl _imp_CryptUnprotectData" __imp_CryptUnprotectData
0x18000F930: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000EA00: "__cdecl _C_specific_handler" __C_specific_handler
0x180002810: MIDL_user_free
0x18000F6B0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000F760: "__cdecl _imp_AddAccessAllowedAce" __imp_AddAccessAllowedAce
0x180016070: netutils_NULL_THUNK_DATA_DLA
0x180011B90: netutils_NULL_THUNK_DATA_DLB
0x180011A20: netutils_NULL_THUNK_DATA_DLN
0x18000F5D8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800146D0: WPP_REGISTRATION_GUIDS
0x18000E896: "__cdecl _imp_load_UuidToStringW" __imp_load_UuidToStringW
0x18000E93F: "__cdecl _imp_load_RpcBindingSetAuthInfoExW" __imp_load_RpcBindingSetAuthInfoExW
0x18000942C: UpdateCachedBindingToMachineDC
0x180001D64: DeleteAttrsList
0x18000F480: "__cdecl _imp_ldap_msgfree" __imp_ldap_msgfree
0x18000F5D0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000EA40: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180010B88: "`string'" ??_C@_1BI@NNGJONND@?$AAK?$AAe?$AAy?$AAD?$AAa?$AAt?$AAa?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18000FE18: KdsSvcInvalidSrvConfig
0x1800105E0: "`string'" ??_C@_0DP@HACNIDP@onecore?2ds?2security?2keyman?2sidke@
0x18000590C: GenerateServerConfigAttributes
0x18000F6A0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1800146A0: WPP_MAIN_CB
0x180012274: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180010890: "`string'" ??_C@_19KPNAOCDA@?$AAH?$AAO?$AAS?$AAT?$AA?$AA@
0x1800108D8: "`string'" ??_C@_0DK@GFLIJDBB@onecore?2ds?2security?2keyman?2sidke@
0x180010D38: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000F970: "__cdecl _imp_GetBasicProfileFolderPath" __imp_GetBasicProfileFolderPath
0x18000F978: profapi_NULL_THUNK_DATA
0x180010248: "`string'" ??_C@_0DM@HABFKHAG@onecore?2ds?2security?2keyman?2sidke@
0x1800101C0: "`string'" ??_C@_1EA@PEACMJBA@?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAP?$AAr?$AAo?$AAv?$AAR?$AAo?$AAo?$AAt?$AAK?$AAe?$AAy?$AA?$CJ?$AA?$AA@
0x1800121AC: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x18000FEB0: "`string'" ??_C@_1CK@OFPFIPLC@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAK?$AAD?$AAF?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAI?$AAD?$AA?$AA@
0x180005FA0: GetSIDKeyCacheFolder
0x180009DD8: OpenCallerToken
0x1800107E0: "`string'" ??_C@_1BG@HPKCIHOF@?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18000E94B: "__cdecl _imp_load_RpcEpResolveBinding" __imp_load_RpcEpResolveBinding
0x18001192C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180005670: GetDefaultServerConfig
0x180010110: "`string'" ??_C@_1BC@INJIBENO@?$AAc?$AAn?$AA?$DN?$AA?$CF?$AAs?$AA?0?$AA?$CF?$AAs?$AA?$AA@
0x180007410: FindKeyForOfflineUsage
0x18000FEE0: "`string'" ??_C@_1CE@CHAEOONG@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAR?$AAo?$AAo?$AAt?$AAK?$AAe?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180010A40: "`string'" ??_C@_0EF@IHFLFNBC@onecore?2ds?2security?2keyman?2sidke@
0x1800145F8: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x18000F6B8: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x180010828: "`string'" ??_C@_1CC@MMGMOOPO@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA5?$AA6?$AAA?$AA_?$AAC?$AAO?$AAN?$AAC?$AAA?$AAT?$AA?$AA@
0x180002818: McGenEventWriteUM
0x18000F730: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x18000F568: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000F610: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x18000F640: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000B050: KdsGetEpochLength
0x180016050: RPCRT4_NULL_THUNK_DATA_DLA
0x180011B38: RPCRT4_NULL_THUNK_DATA_DLB
0x18000FE00: Microsoft_Windows_KdsSvcKeywords
0x18000F840: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180002640: DllMain
0x180011A00: RPCRT4_NULL_THUNK_DATA_DLN
0x18000CC58: ClientComputeL2Key
0x18000FAB0: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x180016000: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x18000A344: ValidateSIDKeyID
0x1800122B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000FC40: "`string'" ??_C@_1BO@GINNJIBG@?$AAd?$AAN?$AAS?$AAH?$AAo?$AAs?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$CF?$AAs?$AA?$AA@
0x18000F8B8: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18000F748: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000F8F0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000A800: GetCachedMachineDomainInfo
0x18000F678: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000A3A0: ValidateClientKEKInfo
0x18000F620: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180002958: McTemplateU0jz
0x18000F560: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000F7C0: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x1800146C8: Microsoft_Windows_KdsSvcEnableBits
0x180009C50: SIDKeyProvFree
0x18000EA20: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180009D20: GenerateObjGuid
0x18000F940: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000F4E0: "__cdecl _imp_ldap_unbind" __imp_ldap_unbind
0x180010B08: WPP_4c5382d06a8f34534fd2130659aa7fe8_Traceguids
0x1800011F0: GetLdapBinding
0x18000F7E0: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180010AA8: "`string'" ??_C@_0DL@DFPMAGPF@onecore?2ds?2security?2keyman?2sidke@
0x18000FAE8: "`string'" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180012364: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000F658: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18001215C: "__cdecl _IMPORT_DESCRIPTOR_WLDAP32" __IMPORT_DESCRIPTOR_WLDAP32
0x18000FDF0: WPP_ThisDir_CTLGUID_KDSPROVCtlGuid
0x18000F938: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x180010D38: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000F7F8: "__cdecl _imp_BCryptSecretAgreement" __imp_BCryptSecretAgreement
0x18000F790: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x180016048: "__cdecl _imp_RpcEpResolveBinding" __imp_RpcEpResolveBinding
0x180010218: "`string'" ??_C@_0M@LGBEGMKM@NTE_BAD_KEY?$AA@
0x180010658: "`string'" ??_C@_08KOCHCJLB@dwReturn?$AA@
0x1800107F8: "`string'" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x180012170: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180014010: KdsSvcOperational_Context
0x18000FAE0: "`string'" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180010914: "`string'" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x180001000: WPP_SF_
0x18000F5E8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180010BB0: "`string'" ??_C@_1CO@DLHKNHOP@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA5?$AA?$AA@
0x18000F698: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18000FC30: "`string'" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x18000F6A8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001198C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180016030: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180010BA0: "`string'" ??_C@_19KGIKMJCK@?$AAS?$AAD?$AAD?$AAL?$AA?$AA@
0x180016028: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x18000B7E0: KdsGetGmsaPasswordBasedOnTimestamp
0x18000A9E0: GetFullDCName
0x18000F880: "__cdecl _imp__ultow_s" __imp__ultow_s
0x180012350: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180014600: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x1800122D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-2" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-2
0x18000F728: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x18000FF08: "`string'" ??_C@_1BM@OKPHCHHA@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000AE18: GetCachedBCryptHandle
0x18000F778: api-ms-win-security-base-private-l1-1-0_NULL_THUNK_DATA
0x180010C20: "`string'" ??_C@_1EO@PDBHJFDD@?$AA?$HL?$AA3?$AA4?$AAe?$AA4?$AA9?$AA1?$AA2?$AAd?$AA?9?$AAf?$AA7?$AA7?$AA0?$AA?9?$AA4?$AAf?$AA4?$AA9?$AA?9?$AAb?$AA0?$AA2?$AA0?$AA?9?$AA9?$AA6?$AAd?$AAd?$AA7?$AA4?$AAc@
0x18000F458: CRYPT32_NULL_THUNK_DATA
0x18000F720: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x18000F498: "__cdecl _imp_ldap_count_valuesW" __imp_ldap_count_valuesW
0x180010180: "`string'" ??_C@_1BC@EEKPJHJP@?$AA?$CI?$AA?$CF?$AAs?$AA?$DM?$AA?$DN?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x180001DA8: AddADObject
0x180002F20: CreateRootKey
0x18000F808: "__cdecl _imp_BCryptSetProperty" __imp_BCryptSetProperty
0x18000F980: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180001B98: GenerateSingleValueStrAttribute
0x18000F4D0: "__cdecl _imp_ldap_count_entries" __imp_ldap_count_entries
0x18000F470: "__cdecl _imp_RtlAsn1GetModuleHandle" __imp_RtlAsn1GetModuleHandle
0x180010668: "`string'" ??_C@_1DE@LCALHDMM@?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?2?$AAK?$AAd?$AAs?$AAK?$AAe?$AAy?$AA?2?$AA?$AA@
0x18000F7D8: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180010D20: "`string'" ??_C@_04HIBGFPH@NULL?$AA@
0x18000F648: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000E96F: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x18000F758: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000F908: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x18000B7F8: CNG_AesKeyWrap
0x1800103A0: rgbDHParam
0x18000FAC0: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x18000F8D8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000E8BA: "__cdecl _imp_load_DsGetDcNameW" __imp_load_DsGetDcNameW
0x18000F838: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x1800108A0: "`string'" ??_C@_1BC@NPFHFLNO@?$AA?$CF?$AAs?$AA?1?$AA?$CF?$AAs?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x1800107C8: "`string'" ??_C@_1BG@DHGBBHDO@?$AAP?$AAr?$AAi?$AAv?$AAK?$AAe?$AAy?$AAV?$AAa?$AAl?$AA?$AA@
0x18000F6F0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000F6E0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000F540: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000F8E8: "__cdecl _imp_RtlUnicodeStringToInteger" __imp_RtlUnicodeStringToInteger
0x18000F4B8: "__cdecl _imp_LdapGetLastError" __imp_LdapGetLastError
0x180010BE0: "`string'" ??_C@_1CO@LEBIEALI@?$AA1?$AA?4?$AA3?$AA?4?$AA6?$AA?4?$AA1?$AA?4?$AA4?$AA?4?$AA1?$AA?4?$AA3?$AA1?$AA1?$AA?4?$AA7?$AA4?$AA?4?$AA1?$AA?4?$AA1?$AA?$AA@
0x1800048F8: AddRootMetaDataToSortedList
0x18000E518: SidKeyDebugTraceError
0x18000F768: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180002E08: GetRootKeyDN
0x180016060: logoncli_NULL_THUNK_DATA_DLA
0x180011B68: logoncli_NULL_THUNK_DATA_DLB
0x180011A10: logoncli_NULL_THUNK_DATA_DLN
0x180005B30: SetServerConfig
0x180006300: GetSIDKeyFileName
0x180016068: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180010808: "`string'" ??_C@_1BO@BAMLBNFK@?$AAK?$AAD?$AAS?$AA?5?$AAp?$AAu?$AAb?$AAl?$AAi?$AAc?$AA?5?$AAk?$AAe?$AAy?$AA?$AA@
0x180005720: GetServerConfig
0x180014000: WPP_GLOBAL_Control
0x18000A4DC: ValidateSIDKey
0x18000FE6C: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800121E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180008340: GenerateSecretAgreementPrivateKey
0x180001020: WPP_SF_D
0x18000A0A0: GetUserSidStr
0x1800046F0: GetAllRootKeys
0x1800106E8: "`string'" ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180016038: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x180001640: GetDCInfo
0x1800108B8: "`string'" ??_C@_1BK@BPGFLIHL@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAi?$AAp?$AA_?$AAt?$AAc?$AAp?$AA?$AA@
0x18000FB98: "`string'" ??_C@_1DG@JEEBFMIB@?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x18000F858: "__cdecl _imp_BCryptKeyDerivation" __imp_BCryptKeyDerivation
0x18000F780: "__cdecl _imp_LsaLookupUserAccountType" __imp_LsaLookupUserAccountType
0x180012288: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000F7A0: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x18001196C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x18000E5B0: "__cdecl _security_check_cookie" __security_check_cookie
0x180007D30: GenerateKDFContext
0x18000F828: "__cdecl _imp_BCryptExportKey" __imp_BCryptExportKey
0x1800121C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180010D10: WPP_fbe9c54d4bc23a062a131cd95979f672_Traceguids
0x18000F660: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000F4D8: "__cdecl _imp_ldap_value_free_len" __imp_ldap_value_free_len
0x18000F528: WLDAP32_NULL_THUNK_DATA
0x18000F8F8: "__cdecl _imp_RtlMakeSelfRelativeSD" __imp_RtlMakeSelfRelativeSD
0x18000E963: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x18000F4E8: "__cdecl _imp_ldap_memfreeW" __imp_ldap_memfreeW
0x180007B04: ParseBCryptKDFParam
0x18000F6E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000F928: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x18000F788: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA
0x18000F530: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800105B0: WPP_0a914b3f944a3846d83e0d8fddc3b412_Traceguids
0x180012300: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-private-l1-1-0
0x18000ABC0: GetKey
0x18000F5E0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000F588: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180010918: "`string'" ??_C@_0P@OLMLMBJL@GetLastError?$CI?$CJ?$AA@
0x18000F770: "__cdecl _imp_IsValidRelativeSecurityDescriptor" __imp_IsValidRelativeSecurityDescriptor
0x18000F468: "__cdecl _imp_RtlAsn1EncodeAndAllocate" __imp_RtlAsn1EncodeAndAllocate
0x18000FE28: KdsSvcOperational
0x18000E9F4: "__cdecl _imp_load_I_RpcExceptionFilter" __imp_load_I_RpcExceptionFilter
0x18000FC60: "`string'" ??_C@_1CE@OEKOHCPI@?$AAd?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AAu?$AAi?$AAs?$AAh?$AAe?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000F580: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18000F690: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18001194C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x18000F460: "__cdecl _imp_RtlAsn1DecodeAndAllocate" __imp_RtlAsn1DecodeAndAllocate
0x18000F6F8: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x18000E8C6: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x18000F450: "__cdecl _imp_CryptBinaryToStringW" __imp_CryptBinaryToStringW
0x180012210: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180007000: FindAndReadSIDKeyInCache
0x18000F670: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000F798: "__cdecl _imp_LsaClose" __imp_LsaClose
0x18000F518: "__cdecl _imp_ldap_bind_sW" __imp_ldap_bind_sW
0x18000F990: "__cdecl _guard_fids_table" __guard_fids_table
0x18000F888: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18000F478: NTASN1_NULL_THUNK_DATA
0x18000B560: "__cdecl GetGmsaPasswordForKeyID" _GetGmsaPasswordForKeyID
0x18000C56C: ConvertSIDToSD
0x18000DB0C: GetSpecifiedSidKey
0x180014620: g_MachineDefaultDcRpcCache
0x18000F340: "__cdecl load_config_used" _load_config_used
0x180012184: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000F548: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180007E10: GenerateDerivedKey
0x18000F538: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800023C0: McGenEventUnregister
0x180014660: g_pwszDomainDNSName
0x180012238: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180010850: "`string'" ??_C@_0DP@JAJCJDKP@onecore?2ds?2security?2keyman?2sidke@
0x180010CF8: "`string'" ??_C@_07LIGHCBDC@hrCache?$AA@
0x1800020D0: GetKDSSrvConfigPath
0x180007910: DeleteAllCachedKeys
0x180010198: "`string'" ??_C@_1BA@DKKALPBN@?$AA?$CI?$AAc?$AAn?$AA?$DN?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x180016020: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x18000FCA0: "`string'" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x18000F7E8: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x1800100D8: "`string'" ??_C@_1DG@HCMBAAFB@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAS?$AAe?$AAc?$AAr?$AAe?$AAt?$AAA?$AAg?$AAr?$AAe?$AAe?$AAm?$AAe?$AAn?$AAt?$AAP?$AAa?$AAr?$AAa?$AAm?$AA?$AA@
0x18000F618: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000FFE0: "`string'" ??_C@_1CK@IPFODMAF@?$AAn?$AAT?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x18000F680: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180008150: TestServerConfig
0x18000F870: "__cdecl _imp_BCryptGenRandom" __imp_BCryptGenRandom
0x18000F860: "__cdecl _imp_BCryptGenerateSymmetricKey" __imp_BCryptGenerateSymmetricKey
0x18000F668: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180010CA0: g_rgbObjSDDL
0x18000F918: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000F6C8: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x18000F330: g_ObjBlobSDDL
0x18000F708: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x180014608: g_RPCHandleCacheLock
0x18000CA10: ParseSidKeyResult
0x180016010: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x18000F688: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180010D40: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180010390: "`string'" ??_C@_09GLEFCHME@ulLdapErr?$AA@
0x18000F490: "__cdecl _imp_ldap_initW" __imp_ldap_initW
0x18000FF48: "`string'" ??_C@_1BI@PHJBOPCE@?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x18000FD10: "`string'" ??_C@_1KA@CODPHDCC@?$AAc?$AAn?$AA?$DN?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAD?$AAi?$AAs?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc@
0x180002CE0: FreeRootKeyConfig
0x180002800: MIDL_user_allocate
0x18000EA10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000FB30: "`string'" ??_C@_02FLHDKHAB@hr?$AA@
0x18000F488: "__cdecl _imp_ldap_add_sW" __imp_ldap_add_sW
0x18000F608: "__cdecl _imp_CreateFileTransactedW" __imp_CreateFileTransactedW
0x18000F830: "__cdecl _imp_BCryptGenerateKeyPair" __imp_BCryptGenerateKeyPair
0x18000E805: "__cdecl _imp_load_UuidFromStringW" __imp_load_UuidFromStringW
0x180010620: "`string'" ??_C@_1BO@JPHDMIB@?$AA?2?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x18000A210: GetCurrentL0ID
0x18000F7C8: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18001224C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800122EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0
0x18000F818: "__cdecl _imp_BCryptDestroySecret" __imp_BCryptDestroySecret
0x180010AE8: "`string'" ??_C@_1BM@HGECHLDA@?$AAG?$AAM?$AAS?$AAA?$AA?5?$AAP?$AAA?$AAS?$AAS?$AAW?$AAO?$AAR?$AAD?$AA?$AA@
0x18000F4A0: "__cdecl _imp_ldap_get_valuesW" __imp_ldap_get_valuesW
0x18000F7A8: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x180002D60: FreeRootKey
0x1800106F0: LocalSystem
0x1800105C0: rgbKDFParam
0x18000DC4C: GetSpecifiedKey
0x18000F7F0: "__cdecl _imp_BCryptImportKey" __imp_BCryptImportKey
0x180016058: "__cdecl _imp_DsGetDcNameW" __imp_DsGetDcNameW
0x180010360: "`string'" ??_C@_1CG@GKFGHMMK@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA1?$AA0?$AA8?$AA_?$AAC?$AAT?$AAR?$AA_?$AAH?$AAM?$AAA?$AAC?$AA?$AA@
0x180009AE0: GetAndLockCachedRPCBinding
0x18000A1C0: GetCurrentTimeInULL
0x18000F900: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18000FBD0: "`string'" ??_C@_1CK@PLPKJNOD@?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x18000FE58: KdsSvcCreateMRK
0x18000F968: ntdll_NULL_THUNK_DATA
0x18000FCB0: "`string'" ??_C@_1FO@CFIMBNEF@?$AAc?$AAn?$AA?$DN?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAD?$AAi?$AAs?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc@
0x18000F948: "__cdecl _imp_memcpy" __imp_memcpy
0x18000F440: "__cdecl _imp_CryptProtectData" __imp_CryptProtectData
0x18000FE68: Microsoft_Windows_KdsSvcLevels
0x1800010B4: WPP_SF_SSS
0x18000F910: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x18000FB60: "`string'" ??_C@_0BH@JFGFKJK@LDAP_NO_SUCH_ATTRIBUTE?$AA@
0x18000FF88: "`string'" ??_C@_1CC@LJGJGOIJ@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18000F8A8: "__cdecl _imp_NtCreateTransaction" __imp_NtCreateTransaction
0x180012260: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000E450: WPP_SF_sDsd
0x180014060: "__cdecl _security_cookie" __security_cookie
0x18000F890: "__cdecl _imp__wtoi64" __imp__wtoi64
0x180014668: g_pwszForestName
0x1800089A0: GenerateSIDPublicKeyBlob
0x180008884: GenerateSecretAgreementPubKey
0x18000F5C8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000F5F8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000F750: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180010290: "`string'" ??_C@_1MO@NPNFEPDI@?$AA?$CI?$AA?$CG?$AA?$CI?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAP?$AAr?$AAo?$AAv?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAC@
0x180012198: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002290: McGenControlCallbackV2
0x18000E811: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x18000FFD8: "`string'" ??_C@_15BLKEKDJI@?$AAc?$AAn?$AA?$AA@
0x18000F5B8: "__cdecl _imp_FindFirstFileExW" __imp_FindFirstFileExW
0x1800122C4: "__cdecl _IMPORT_DESCRIPTOR_profapi" __IMPORT_DESCRIPTOR_profapi
0x18000A2D0: GetIntervalStartTime
0x18000F740: "__cdecl _imp_CopySid" __imp_CopySid
0x18000E9E8: "__cdecl _imp_load_NdrClientCall3" __imp_load_NdrClientCall3
0x1800106DC: "`string'" ??_C@_15PKPONJIK@?$AA?2?$AA?$CK?$AA?$AA@
0x18000F810: "__cdecl _imp_BCryptImportKeyPair" __imp_BCryptImportKeyPair
0x180008AC8: GenerateSecretFromSecretAgreement
0x1800090C0: KdsCreateClientBinding
0x180010798: "`string'" ??_C@_1CK@EALPIICH@?$AAS?$AAe?$AAc?$AAr?$AAe?$AAt?$AAA?$AAg?$AAr?$AAe?$AAe?$AAm?$AAe?$AAn?$AAt?$AAP?$AAa?$AAr?$AAa?$AAm?$AA?$AA@
0x18000FC88: "`string'" ??_C@_1BI@FGOHDJFC@?$AAm?$AAs?$AAD?$AAS?$AA?9?$AAi?$AAs?$AAR?$AAO?$AAD?$AAC?$AA?$AA@
0x18000F500: "__cdecl _imp_ldap_first_entry" __imp_ldap_first_entry
0x18000F550: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000F628: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000F8C8: "__cdecl _imp_NtCommitTransaction" __imp_NtCommitTransaction
0x1800049E0: GetAllRootKeysMetaData
0x18000F868: "__cdecl _imp_BCryptFinalizeKeyPair" __imp_BCryptFinalizeKeyPair
0x180009668: FindCachedRPCHandle
0x18000E8AE: "__cdecl _imp_load_RpcStringBindingComposeW" __imp_load_RpcStringBindingComposeW
0x18000E5E8: "__cdecl _security_init_cookie" __security_init_cookie
0x1800106D0: "`string'" ??_C@_09NEKHPDOE@rpcStatus?$AA@
0x18000F510: "__cdecl _imp_ldap_value_freeW" __imp_ldap_value_freeW
0x18000F800: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x18000F520: "__cdecl _imp_ber_free" __imp_ber_free
0x18000F718: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x18000BA0C: CNG_AesKeyUnwrap
0x18000E88A: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x18000EAA7: wcscmp
0x18000F7D0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180010B60: "`string'" ??_C@_1CG@HHCKKMCI@?$AAR?$AAf?$AAc?$AA3?$AA5?$AA6?$AA5?$AAK?$AAe?$AAy?$AAW?$AAr?$AAa?$AAp?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x180004660: GetRootKey
0x180007AB4: FreeBCryptBuffers
0x180002394: McGenEventRegister
0x180016018: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x18000F590: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180010388: "`string'" ??_C@_15IEFEGGPE@?$AAD?$AAH?$AA?$AA@
0x180010650: "`string'" ??_C@_06DJIHEMFI@status?$AA@
0x18000F578: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000E8A2: "__cdecl _imp_load_RpcBindingFromStringBindingW" __imp_load_RpcBindingFromStringBindingW
0x18000A260: GetCurrentIntervalID
0x18000E6C0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000F8A0: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x180001F28: GetSidKeyServicePath
0x180012328: "__cdecl _IMPORT_DESCRIPTOR_NTASN1" __IMPORT_DESCRIPTOR_NTASN1
0x18000F700: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x1800064D8: GetSIDKeyFileNameFilter
0x1800021B0: GetMRKPath
0x180010740: "`string'" ??_C@_1BI@MBAFNJLM@?$AAK?$AAD?$AAS?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x18000D774: GetKeyFromKdsService
0x180010010: "`string'" ??_C@_1EC@OIOGMMKA@?$AAm?$AAs?$AAK?$AAd?$AAs?$AA?9?$AAS?$AAe?$AAc?$AAr?$AAe?$AAt?$AAA?$AAg?$AAr?$AAe?$AAe?$AAm?$AAe?$AAn?$AAt?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAI?$AAD@
0x180010640: "`string'" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180005810: ValidateSrvConfig
0x180006630: WriteSIDKeyInCache
0x18000F638: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000AFD0: KdsGetKeyStartTime
0x180016008: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180010C10: "`string'" ??_C@_17HNFFEAHN@?$AAS?$AAI?$AAD?$AA?$AA@
0x1800101A8: "`string'" ??_C@_1BC@KIJEAJAA@?$AA?$CI?$AA?$CF?$AAs?$AA?$DO?$AA?$DN?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x18000F738: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x1800121D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004C40: FreeServerConfig
0x18000115C: WPP_SF_Sd
0x180010A88: "`string'" ??_C@_1BM@JBKFHMPN@?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180016040: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x18000F4F8: "__cdecl _imp_ldap_get_values_lenW" __imp_ldap_get_values_lenW
0x18000C1B0: SIDKeyUnprotect
0x18000F630: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180002470: KdsCliShutDown
0x18000F6D0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000E5D0: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180002888: McTemplateU0q
0x180001054: WPP_SF_S
0x1800028E0: McTemplateU0z
0x18000F310: g_ObjBlobDescriptor
0x18000EAA1: memset
0x180012378: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000FB38: "`string'" ??_C@_08DEENFCPO@ulReturn?$AA@
0x18000F570: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]