Generated by JEB on 2019/08/01
PE: C:\Windows\System32\setspn.exe Base=0x140000000 SHA-256=CF095DBD04EBAB55B598E0F27C88304571EDC70F41156567C1700B70CD5E728B
PDB: setspn.pdb GUID={DAB9E666-EB41-5B82-DBA6E015B7E54C4E} Age=1
279 located named symbols:
0x140005AA0: "LookupHostSpn" ??_C@_1BM@CLJICFLH@?$AAL?$AAo?$AAo?$AAk?$AAu?$AAp?$AAH?$AAo?$AAs?$AAt?$AAS?$AAp?$AAn?$AA?$AA@
0x140004574: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140005240: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140004860: "__cdecl FindPESection" _FindPESection
0x140003EAC: LocWriteMsgIO
0x1400063F0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140004850: "__cdecl wsetargv" _wsetargv
0x1400063DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-downlevel-shlwapi-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-downlevel-shlwapi-l1-1-1
0x140007010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400053B8: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x1400053A0: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x1400052D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140005118: "__cdecl _imp_DsUnBindW" __imp_DsUnBindW
0x1400054A0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x140005808: "DS_NAME_NO_ERROR" ??_C@_1CC@GDLJHCMJ@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAN?$AAO?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x140004B40: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140005158: "__cdecl _imp_ldap_search_abandon_page" __imp_ldap_search_abandon_page
0x140005A50: "AddRemoveSpn" ??_C@_1BK@NNOAIKBA@?$AAA?$AAd?$AAd?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAS?$AAp?$AAn?$AA?$AA@
0x140005A08: "AddSpn" ??_C@_1O@KNIBKBG@?$AAA?$AAd?$AAd?$AAS?$AAp?$AAn?$AA?$AA@
0x140005830: "DS_NAME_ERROR_RESOLVING" ??_C@_1DA@GKNFIAMH@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAR?$AAE?$AAS?$AAO?$AAL?$AAV?$AAI?$AAN?$AAG?$AA?$AA@
0x140005524: "
" ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x140005140: NTDSAPI_NULL_THUNK_DATA
0x1400075C0: "__cdecl commode" _commode
0x1400063A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x140005410: "__cdecl _imp_wcsncat_s" __imp_wcsncat_s
0x140005278: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140005458: "__cdecl _imp_wcschr" __imp_wcschr
0x140005B10: "Error initializing localized out" ??_C@_0CN@FJEEHBO@Error?5initializing?5localized?5out@
0x140001008: FindDupSPNFromList
0x140002C14: LookupHostSpn
0x1400041FC: LocWriteMsg
0x140004730: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400054B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400075CC: "__cdecl fmode" _fmode
0x1400052A8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140005428: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1400051C0: "__cdecl _imp_ldap_err2stringW" __imp_ldap_err2stringW
0x1400057F8: "%#x/%d" ??_C@_1O@COMBNIMC@?$AA?$CF?$AA?$CD?$AAx?$AA?1?$AA?$CF?$AAd?$AA?$AA@
0x14000478E: "__cdecl XcptFilter" _XcptFilter
0x1400054C0: "__cdecl _xc_a" __xc_a
0x14000219C: GetDsNameErrorString
0x140005190: "__cdecl _imp_ldap_search_init_pageW" __imp_ldap_search_init_pageW
0x140005730: "ldap_get_next_page_s" ??_C@_1CK@JNPIJAGJ@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAg?$AAe?$AAt?$AA_?$AAn?$AAe?$AAx?$AAt?$AA_?$AAp?$AAa?$AAg?$AAe?$AA_?$AAs?$AA?$AA@
0x1400051E8: "__cdecl _imp_ldap_openW" __imp_ldap_openW
0x140005148: "__cdecl _imp_ldap_get_next_page_s" __imp_ldap_get_next_page_s
0x1400051F0: "__cdecl _imp_ldap_next_attributeW" __imp_ldap_next_attributeW
0x140005760: "%ws
" ??_C@_19PBJPFIJP@?$AA?$CF?$AAw?$AAs?$AA?6?$AA?$AA@
0x1400059D8: "DsGetDcNameWithAccountW" ??_C@_1DA@GMMAAMMJ@?$AAD?$AAs?$AAG?$AAe?$AAt?$AAD?$AAc?$AAN?$AAa?$AAm?$AAe?$AAW?$AAi?$AAt?$AAh?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAW?$AA?$AA@
0x140005260: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400014A4: FindDupSPNs
0x1400052C0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140004B16: memcpy
0x1400051E0: "__cdecl _imp_ldap_first_attributeW" __imp_ldap_first_attributeW
0x140005280: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140007610: ModuleHandle
0x140005170: "__cdecl _imp_ldap_next_entry" __imp_ldap_next_entry
0x140005388: logoncli_NULL_THUNK_DATA
0x140001FB8: GetErrorDescription
0x140005480: "__cdecl _imp_memset" __imp_memset
0x140004A1F: "__cdecl initterm" _initterm
0x1400062D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140007E88: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140005338: "__cdecl _imp_Sleep" __imp_Sleep
0x1400054F0: "__cdecl _xi_z" __xi_z
0x140005448: "__cdecl _imp___iob_func" __imp___iob_func
0x140005228: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140005378: api-ms-win-downlevel-shlwapi-l1-1-1_NULL_THUNK_DATA
0x140004A2B: "__cdecl _C_specific_handler" __C_specific_handler
0x14000552C: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x140005248: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140005380: "__cdecl _imp_DsGetDcNameWithAccountW" __imp_DsGetDcNameWithAccountW
0x1400051F8: "__cdecl _imp_ldap_msgfree" __imp_ldap_msgfree
0x140005180: "__cdecl _imp_ldap_connect" __imp_ldap_connect
0x140004AAC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140005680: "ldap_search_sW" ??_C@_1BO@BDLEDBFK@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAs?$AAe?$AAa?$AAr?$AAc?$AAh?$AA_?$AAs?$AAW?$AA?$AA@
0x140005598: "ldap_initW(%ws, %ld)" ??_C@_1CK@EIJNOPBO@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAi?$AAn?$AAi?$AAt?$AAW?$AA?$CI?$AA?$CF?$AAw?$AAs?$AA?0?$AA?5?$AA?$CF?$AAl?$AAd?$AA?$CJ?$AA?$AA@
0x140005330: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140005B40: "HOST" ??_C@_19KPNAOCDA@?$AAH?$AAO?$AAS?$AAT?$AA?$AA@
0x140004843: "__cdecl amsg_exit" _amsg_exit
0x140005A18: "%s@%s" ??_C@_1M@BOLAPCPJ@?$AA?$CF?$AAs?$AA?$EA?$AA?$CF?$AAs?$AA?$AA@
0x1400052E8: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x140005368: "__cdecl _imp_StrCmpW" __imp_StrCmpW
0x140005608: "ldap_get_optionW" ??_C@_1CC@GPCICJDM@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAg?$AAe?$AAt?$AA_?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAW?$AA?$AA@
0x1400053E8: "__cdecl _imp_exit" __imp_exit
0x1400051B8: "__cdecl _imp_ldap_get_optionW" __imp_ldap_get_optionW
0x140005328: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400075D0: pRootDN
0x140007600: fNoProgress
0x140005470: "__cdecl _imp_towlower" __imp_towlower
0x1400056A0: "ldap_first_entry" ??_C@_1CC@IJDGPBID@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAf?$AAi?$AAr?$AAs?$AAt?$AA_?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x140005230: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400057A0: "calloc (%ld)" ??_C@_1BK@FJGOIDLG@?$AAc?$AAa?$AAl?$AAl?$AAo?$AAc?$AA?5?$AA?$CI?$AA?$CF?$AAl?$AAd?$AA?$CJ?$AA?$AA@
0x140005D10: "Error loading resource: 0x%08x
" ??_C@_1EA@KNKFBJCG@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAl?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?6?$AA?$AA@
0x1400052E0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140007E78: "__cdecl _native_startup_lock" __native_startup_lock
0x140004770: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400063C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140005468: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400053E0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140005310: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140005660: "objectClass=*" ??_C@_1BM@LBAGCIDJ@?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CK?$AA?$AA@
0x140003C00: ShowErrorMsg
0x140005298: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140005A28: "%s/%s.%s" ??_C@_1BC@BDPNFLEA@?$AA?$CF?$AAs?$AA?1?$AA?$CF?$AAs?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x14000245C: AddSpn
0x140005220: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140004A88: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140005418: "__cdecl _imp__snwprintf_s" __imp__snwprintf_s
0x140005370: "__cdecl _imp_StrChrW" __imp_StrChrW
0x1400053F0: "__cdecl _imp__commode" __imp__commode
0x1400051D8: "__cdecl _imp_ldap_unbind" __imp_ldap_unbind
0x140005438: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140005588: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1400052C8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400062B0: "__cdecl _IMPORT_DESCRIPTOR_WLDAP32" __IMPORT_DESCRIPTOR_WLDAP32
0x140004910: "__cdecl ValidateImageBase" _ValidateImageBase
0x140003E00: LocInitializeIO
0x14000629C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140005940: "DS_NAME_ERROR_NO_SYNTACTICAL_MAP" ??_C@_1EK@GFPIAKG@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAN?$AAO?$AA_?$AAS?$AAY?$AAN?$AAT?$AAA?$AAC?$AAT?$AAI?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAP@
0x140005520: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140005250: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400075C8: "__cdecl newmode" _newmode
0x140004A58: "__cdecl _acrt_iob_func" __acrt_iob_func
0x140005430: "__cdecl _imp__initterm" __imp__initterm
0x140005390: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140006378: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400017F0: StringCchPrintfW
0x140005B60: "Error(%#x): failed to construct " ??_C@_1GG@LCDADNKL@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?5@
0x1400051D0: "__cdecl _imp_ldap_count_valuesW" __imp_ldap_count_valuesW
0x140005138: "__cdecl _imp_DsFreeNameResultW" __imp_DsFreeNameResultW
0x140001130: ProcessEntry
0x140007E68: "__cdecl _onexitend" __onexitend
0x1400053F8: "__cdecl _imp__exit" __imp__exit
0x1400054B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140001870: QuerySingleAttribute
0x140005890: "DS_NAME_ERROR_NOT_UNIQUE" ??_C@_1DC@PALFLDMP@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAN?$AAO?$AAT?$AA_?$AAU?$AAN?$AAI?$AAQ?$AAU?$AAE?$AA?$AA@
0x1400052D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140005498: netutils_NULL_THUNK_DATA
0x140005400: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x140001DA4: GetRootDN
0x140005B50: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140003BA4: LocWriteStringMsg
0x140005360: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400054D8: "__cdecl _xi_a" __xi_a
0x140005348: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140004850: "__cdecl matherr" _matherr
0x1400030F0: Usage
0x140003128: wmain
0x140005168: "__cdecl _imp_LdapGetLastError" __imp_LdapGetLastError
0x140005490: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x140005580: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140006300: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140005128: "__cdecl _imp_DsWriteAccountSpnW" __imp_DsWriteAccountSpnW
0x1400053C8: "__cdecl _imp_towupper" __imp_towupper
0x140006364: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140004550: "__cdecl _security_check_cookie" __security_check_cookie
0x140005208: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x1400054D0: "__cdecl _xc_z" __xc_z
0x1400063B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1400052F0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140005770: "rootDomainNamingContext" ??_C@_1DA@BJANLJGF@?$AAr?$AAo?$AAo?$AAt?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x140005188: "__cdecl _imp_ldap_unbind_s" __imp_ldap_unbind_s
0x140005200: WLDAP32_NULL_THUNK_DATA
0x140005160: "__cdecl _imp_ldap_memfreeW" __imp_ldap_memfreeW
0x140005408: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140006314: "__cdecl _IMPORT_DESCRIPTOR_netutils" __IMPORT_DESCRIPTOR_netutils
0x140005358: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400052B8: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x140005268: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140005258: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140004B60: "__cdecl _chkstk" __chkstk
0x140003CEC: ShowLdapErrorMsg
0x140005900: "DS_NAME_ERROR_DOMAIN_ONLY" ??_C@_1DE@BBFEAJHP@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAD?$AAO?$AAM?$AAA?$AAI?$AAN?$AA_?$AAO?$AAN?$AAL?$AAY?$AA?$AA@
0x140005CC0: "Error(%#x): string composition f" ??_C@_1FA@FMAOBMLA@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf@
0x140005320: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140005700: "ldap_search_init_pageW" ??_C@_1CO@OGLCOLJB@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAs?$AAe?$AAa?$AAr?$AAc?$AAh?$AA_?$AAi?$AAn?$AAi?$AAt?$AA_?$AAp?$AAa?$AAg?$AAe?$AAW?$AA?$AA@
0x140005530: "servicePrincipalName" ??_C@_1CK@GCBPLCMN@?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000633C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140005300: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400051A0: "__cdecl _imp_ldap_bind_sW" __imp_ldap_bind_sW
0x1400054F8: "__cdecl _guard_fids_table" __guard_fids_table
0x1400053D8: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140005488: msvcrt_NULL_THUNK_DATA
0x140005010: "__cdecl load_config_used" _load_config_used
0x140005130: "__cdecl _imp_DsCrackNamesW" __imp_DsCrackNamesW
0x140005BD0: "Error(%#x): start of conversion " ??_C@_1HK@PLFBFLFJ@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAc?$AAo?$AAn?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5@
0x140004000: VLocWriteStringMsg
0x1400056C8: "%ws=%ws" ??_C@_1BA@OBGCAPPB@?$AA?$CF?$AAw?$AAs?$AA?$DN?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14000638C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x140005AC0: "(sAMAccountName=%s)" ??_C@_1CI@PGNENBBB@?$AA?$CI?$AAs?$AAA?$AAM?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x1400053A8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140003BCC: WriteMsg
0x140005290: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400055E8: "ldap_bind_sW" ??_C@_1BK@PPKINLMO@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAb?$AAi?$AAn?$AAd?$AA_?$AAs?$AAW?$AA?$AA@
0x140005308: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400052F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400075C4: "__cdecl dowildcard" _dowildcard
0x140005B04: ":
" ??_C@_15IEGBJKPD@?$AA?3?$AA?6?$AA?$AA@
0x140005A70: "ldap_open" ??_C@_1BE@NMKOAMEI@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x140005318: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400062C4: "__cdecl _IMPORT_DESCRIPTOR_logoncli" __IMPORT_DESCRIPTOR_logoncli
0x1400051C8: "__cdecl _imp_ldap_initW" __imp_ldap_initW
0x140004A40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400052B0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140005350: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x14000479C: RtlpImageNtHeader
0x1400056D8: "StringCchPrintfW" ??_C@_1CC@LHIHFAJE@?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAP?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?$AA@
0x140003BA4: WriteStringMsg
0x14000222C: FindDomainForAccount
0x140005288: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140005150: "__cdecl _imp_ldap_get_valuesW" __imp_ldap_get_valuesW
0x140005560: "Error loading resource: 0x%08x
" ??_C@_0CA@IIHFOEDA@Error?5loading?5resource?3?50x?$CF08x?6?$AA@
0x1400055C8: "ldap_connect" ??_C@_1BK@BLHMNMNO@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140005460: "__cdecl _imp_fprintf" __imp_fprintf
0x1400053B0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400052A0: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x140005398: "__cdecl _imp_fwprintf" __imp_fwprintf
0x140005630: "defaultNamingContext" ??_C@_1CK@PLPKJNOD@?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAN?$AAa?$AAm?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1400054A8: ntdll_NULL_THUNK_DATA
0x140005478: "__cdecl _imp_memcpy" __imp_memcpy
0x140005AE8: "ldap_search_s" ??_C@_1BM@FBNNAJDL@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAs?$AAe?$AAa?$AAr?$AAc?$AAh?$AA_?$AAs?$AA?$AA@
0x140004A7C: "__cdecl _iob_func" __iob_func
0x140007008: "__cdecl _security_cookie" __security_cookie
0x140004B60: "__cdecl alloca_probe" _alloca_probe
0x140005270: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140007000: "__cdecl _defaultmatherr" __defaultmatherr
0x140006288: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140007E70: "__cdecl _onexitbegin" __onexitbegin
0x140005C50: "Error(%#x): memory allocation (%" ??_C@_1GG@IBCJBNJB@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AA?$CF@
0x140005420: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140005178: "__cdecl _imp_ldap_first_entry" __imp_ldap_first_entry
0x1400040C8: VLocWriteMsg
0x140005218: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140005210: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140004944: "__cdecl _security_init_cookie" __security_init_cookie
0x1400051A8: "__cdecl _imp_ldap_value_freeW" __imp_ldap_value_freeW
0x140005198: "__cdecl _imp_ldap_get_dnW" __imp_ldap_get_dnW
0x140005440: "__cdecl _imp__cexit" __imp__cexit
0x140005A88: "ldap_bind" ??_C@_1BE@EPNOLNFP@?$AAl?$AAd?$AAa?$AAp?$AA_?$AAb?$AAi?$AAn?$AAd?$AA?$AA@
0x1400047F8: "__cdecl get_image_app_type" _get_image_app_type
0x140006274: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140004520: wmainCRTStartup
0x140005990: "<<Unknown>>" ??_C@_1BI@CDDKDAMD@?$AA?$DM?$AA?$DM?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$DO?$AA?$AA@
0x140005238: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1400057D8: "%#x/%d -> %s" ??_C@_1BK@DOBAJKDL@?$AA?$CF?$AA?$CD?$AAx?$AA?1?$AA?$CF?$AAd?$AA?5?$AA?9?$AA?$DO?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x140005860: "DS_NAME_ERROR_NOT_FOUND" ??_C@_1DA@NIMGNOFG@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAN?$AAO?$AAT?$AA_?$AAF?$AAO?$AAU?$AAN?$AAD?$AA?$AA@
0x1400045B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400059A8: "FindDomainForAccount" ??_C@_1CK@IPAPOJNG@?$AAF?$AAi?$AAn?$AAd?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAF?$AAo?$AAr?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140007E80: "__cdecl _native_startup_state" __native_startup_state
0x1400057C0: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140006404: "__cdecl _IMPORT_DESCRIPTOR_NTDSAPI" __IMPORT_DESCRIPTOR_NTDSAPI
0x140005120: "__cdecl _imp_DsBindW" __imp_DsBindW
0x1400058C8: "DS_NAME_ERROR_NO_MAPPING" ??_C@_1DC@EBCPOMKG@?$AAD?$AAS?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAN?$AAO?$AA_?$AAM?$AAA?$AAP?$AAP?$AAI?$AAN?$AAG?$AA?$AA@
0x1400053D0: "__cdecl _imp__fmode" __imp__fmode
0x1400075D8: RootServiceClass
0x14000287C: AddRemoveSpn
0x1400051B0: "__cdecl _imp_ldap_search_sW" __imp_ldap_search_sW
0x140006350: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400053C0: "__cdecl _imp_calloc" __imp_calloc
0x140005450: "__cdecl _imp_free" __imp_free
0x1400048B0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140005340: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140005A40: "%s/%s" ??_C@_1M@BHHLEAOO@?$AA?$CF?$AAs?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x1400062EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x140006328: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140004B22: memset
0x140006418: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]