 w2k_lsa_auth

 Timestamp is ffffffff (Sun Feb  7 06:28:15 2106)

 Preferred load address is 10000000

 Start         Length     Name                   Class
 0001:00000000 00001d70H .text$mn                CODE
 0002:00000000 000000d0H .idata$5                DATA
 0002:000000d0 00000004H .00cfg                  DATA
 0002:000000d4 00000004H .CRT$XCA                DATA
 0002:000000d8 00000004H .CRT$XCZ                DATA
 0002:000000dc 00000004H .CRT$XIA                DATA
 0002:000000e0 00000004H .CRT$XIZ                DATA
 0002:000000e4 00000004H .CRT$XPA                DATA
 0002:000000e8 00000004H .CRT$XPZ                DATA
 0002:000000ec 00000004H .CRT$XTA                DATA
 0002:000000f0 00000010H .CRT$XTZ                DATA
 0002:000000f4 00000000H .gfids$y                DATA
 0002:00000100 00000c50H .rdata                  DATA
 0002:00000d50 00000004H .rdata$sxdata           DATA
 0002:00000d54 0000028cH .rdata$zzzdbg           DATA
 0002:00000fe0 00000004H .rtc$IAA                DATA
 0002:00000fe4 00000004H .rtc$IZZ                DATA
 0002:00000fe8 00000004H .rtc$TAA                DATA
 0002:00000fec 00000004H .rtc$TZZ                DATA
 0002:00000ff0 00000080H .xdata$x                DATA
 0002:00001070 000000f8H .edata                  DATA
 0002:00001168 000000a0H .idata$2                DATA
 0002:00001208 00000014H .idata$3                DATA
 0002:0000121c 000000d0H .idata$4                DATA
 0002:000012ec 0000044aH .idata$6                DATA
 0003:00000000 00000018H .data                   DATA
 0003:00000018 000005b4H .bss                    DATA
 0004:00000000 00000060H .rsrc$01                DATA
 0004:00000060 00000328H .rsrc$02                DATA

  Address         Publics by Value              Rva+Base       Lib:Object

 0000:00000000       ___guard_fids_count        00000000     <absolute>
 0000:00000000       ___volatile_metadata       00000000     <absolute>
 0000:00000000       ___hybrid_code_map         00000000     <absolute>
 0000:00000000       ___guard_fids_table        00000000     <absolute>
 0000:00000000       ___enclave_config          00000000     <absolute>
 0000:00000000       ___hybrid_auxiliary_iat    00000000     <absolute>
 0000:00000000       ___hybrid_code_map_count   00000000     <absolute>
 0000:00000000       ___guard_longjmp_count     00000000     <absolute>
 0000:00000000       ___dynamic_value_reloc_table 00000000     <absolute>
 0000:00000000       ___guard_longjmp_table     00000000     <absolute>
 0000:00000000       ___guard_iat_table         00000000     <absolute>
 0000:00000000       ___guard_iat_count         00000000     <absolute>
 0000:00000001       ___safe_se_handler_count   00000001     <absolute>
 0000:00000100       ___guard_flags             00000100     <absolute>
 0000:00000000       ___ImageBase               10000000     <linker-defined>
 0001:00000000       _BuildEncryptionKey        10001000 f   NativeCreds.obj
 0001:00000094       _BuildKerberosTime         10001094 f   NativeCreds.obj
 0001:000001b7       _BuildPrincipal            100011b7 f   NativeCreds.obj
 0001:00000313       _BuildTicket               10001313 f   NativeCreds.obj
 0001:000003be       _BuildTicketFlags          100013be f   NativeCreds.obj
 0001:0000042a       _ConcatenateUnicodeStrings 1000142a f   NativeCreds.obj
 0001:0000051d       _JNI_OnLoad@8              1000151d f   NativeCreds.obj
 0001:000009bd       _JNI_OnUnload@8            100019bd f   NativeCreds.obj
 0001:00000a7f       _Java_sun_security_krb5_Credentials_acquireDefaultNativeCreds@12 10001a7f f   NativeCreds.obj
 0001:00000ef5       _PackageConnectLookup      10001ef5 f   NativeCreds.obj
 0001:00000f54       _ShowLastError             10001f54 f   NativeCreds.obj
 0001:00000fbc       _ShowNTError               10001fbc f   NativeCreds.obj
 0001:00000fd2       _ThrowOOME                 10001fd2 f   NativeCreds.obj
 0001:00000ff3       ___local_stdio_printf_options 10001ff3 f i NativeCreds.obj
 0001:00000ff9       __vfprintf_l               10001ff9 f i NativeCreds.obj
 0001:0000101d       __vswprintf_c_l            1000201d f i NativeCreds.obj
 0001:0000104c       _printf                    1000204c f i NativeCreds.obj
 0001:0000106a       _swprintf                  1000206a f i NativeCreds.obj
 0001:00001086       _Java_sun_security_krb5_Config_getWindowsDirectory@12 10002086 f   WindowsDirectory.obj
 0001:000010e7       _LsaNtStatusToWinError@4   100020e7 f   advapi32:ADVAPI32.dll
 0001:000010ed       _LsaLookupAuthenticationPackage@12 100020ed f   Secur32:Secur32.dll
 0001:000010f3       _LsaFreeReturnBuffer@4     100020f3 f   Secur32:Secur32.dll
 0001:000010f9       _LsaCallAuthenticationPackage@28 100020f9 f   Secur32:Secur32.dll
 0001:000010ff       _LsaConnectUntrusted@4     100020ff f   Secur32:Secur32.dll
 0001:00001105       _htonl@4                   10002105 f   wsock32:WSOCK32.dll
 0001:0000110b       @__security_check_cookie@4 1000210b f   MSVCRT:secchk.obj
 0001:0000143c       __DllMainCRTStartup@12     1000243c f   MSVCRT:dll_dllmain.obj
 0001:0000145f       ___raise_securityfailure   1000245f f   MSVCRT:gs_report.obj
 0001:00001487       ___report_gsfailure        10002487 f   MSVCRT:gs_report.obj
 0001:000015cd       ___security_init_cookie    100025cd f   MSVCRT:gs_support.obj
 0001:00001618       _DllMain@12                10002618 f   MSVCRT:dll_dllmain_stub.obj
 0001:0000163a       ?__scrt_initialize_type_info@@YAXXZ 1000263a f   MSVCRT:tncleanup.obj
 0001:00001646       ?__scrt_uninitialize_type_info@@YAXXZ 10002646 f   MSVCRT:tncleanup.obj
 0001:00001652       ___local_stdio_scanf_options 10002652 f i MSVCRT:default_local_stdio_options.obj
 0001:00001658       ___scrt_initialize_default_local_stdio_options 10002658 f   MSVCRT:default_local_stdio_options.obj
 0001:000016b9       ___scrt_acquire_startup_lock 100026b9 f   MSVCRT:utility.obj
 0001:000016eb       ___scrt_dllmain_after_initialize_c 100026eb f   MSVCRT:utility.obj
 0001:00001716       ___scrt_dllmain_before_initialize_c 10002716 f   MSVCRT:utility.obj
 0001:00001724       ___scrt_dllmain_crt_thread_attach 10002724 f   MSVCRT:utility.obj
 0001:00001743       ___scrt_dllmain_crt_thread_detach 10002743 f   MSVCRT:utility.obj
 0001:00001750       ___scrt_dllmain_exception_filter 10002750 f   MSVCRT:utility.obj
 0001:00001784       ___scrt_dllmain_uninitialize_c 10002784 f   MSVCRT:utility.obj
 0001:000017a7       ___scrt_dllmain_uninitialize_critical 100027a7 f   MSVCRT:utility.obj
 0001:000017b4       ___scrt_initialize_crt     100027b4 f   MSVCRT:utility.obj
 0001:000017ed       ___scrt_initialize_onexit_tables 100027ed f   MSVCRT:utility.obj
 0001:00001892       ___scrt_is_nonwritable_in_current_image 10002892 f   MSVCRT:utility.obj
 0001:00001926       ___scrt_release_startup_lock 10002926 f   MSVCRT:utility.obj
 0001:00001943       ___scrt_uninitialize_crt   10002943 f   MSVCRT:utility.obj
 0001:0000196b       ___scrt_get_dyn_tls_init_callback 1000296b f   MSVCRT:dyn_tls_init.obj
 0001:00001971       ___scrt_fastfail           10002971 f   MSVCRT:utility_desktop.obj
 0001:00001a8b       __crt_debugger_hook        10002a8b f   MSVCRT:utility_desktop.obj
 0001:00001a93       __RTC_Initialize           10002a93 f   MSVCRT:initsect.obj
 0001:00001abf       __RTC_Terminate            10002abf f   MSVCRT:initsect.obj
 0001:00001af0       __SEH_prolog4              10002af0 f   MSVCRT:sehprolg4.obj
 0001:00001b36       __SEH_epilog4              10002b36 f   MSVCRT:sehprolg4.obj
 0001:00001b4b       __except_handler4          10002b4b f   MSVCRT:chandler4gs.obj
 0001:00001b6e       @_guard_check_icall_nop@4  10002b6e f i MSVCRT:guard_support.obj
 0001:00001b6f       ___isa_available_init      10002b6f f   MSVCRT:cpu_disp.obj
 0001:00001d06       __get_startup_argv_mode    10002d06 f   MSVCRT:argv_mode.obj
 0001:00001d0a       ___scrt_is_ucrt_dll_in_use 10002d0a f   MSVCRT:ucrt_detection.obj
 0001:00001d16       _memcpy                    10002d16 f   vcruntime:VCRUNTIME140.dll
 0001:00001d1c       ___std_type_info_destroy_list 10002d1c f   vcruntime:VCRUNTIME140.dll
 0001:00001d22       _memset                    10002d22 f   vcruntime:VCRUNTIME140.dll
 0001:00001d28       __except_handler4_common   10002d28 f   vcruntime:VCRUNTIME140.dll
 0001:00001d2e       _strlen                    10002d2e f   ucrt:api-ms-win-crt-string-l1-1-0.dll
 0001:00001d34       __initterm                 10002d34 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d3a       __initterm_e               10002d3a f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d40       __seh_filter_dll           10002d40 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d46       __configure_narrow_argv    10002d46 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d4c       __initialize_narrow_environment 10002d4c f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d52       __initialize_onexit_table  10002d52 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d58       __execute_onexit_table     10002d58 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d5e       __cexit                    10002d5e f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d64       _IsProcessorFeaturePresent@4 10002d64 f   kernel32:KERNEL32.dll
 0001:00001d6a       ___acrt_thread_attach      10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___vcrt_uninitialize       10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___acrt_uninitialize       10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___acrt_uninitialize_critical 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___scrt_stub_for_acrt_initialize 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___vcrt_thread_detach      10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___vcrt_initialize         10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___acrt_initialize         10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___scrt_stub_for_acrt_uninitialize_critical 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___vcrt_uninitialize_critical 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___acrt_thread_detach      10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___scrt_stub_for_acrt_uninitialize 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___scrt_stub_for_acrt_thread_attach 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___scrt_stub_for_acrt_thread_detach 10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6a       ___vcrt_thread_attach      10002d6a f   MSVCRT:ucrt_stubs.obj
 0001:00001d6d       ___scrt_stub_for_is_c_termination_complete 10002d6d f   MSVCRT:ucrt_stubs.obj
 0001:00001d6d       __is_c_termination_complete 10002d6d f   MSVCRT:ucrt_stubs.obj
 0002:00000000       __imp__LsaNtStatusToWinError@4 10003000     advapi32:ADVAPI32.dll
 0002:00000004       \177ADVAPI32_NULL_THUNK_DATA 10003004     advapi32:ADVAPI32.dll
 0002:00000008       __imp__IsDebuggerPresent@0 10003008     kernel32:KERNEL32.dll
 0002:0000000c       __imp__InitializeSListHead@4 1000300c     kernel32:KERNEL32.dll
 0002:00000010       __imp__DisableThreadLibraryCalls@4 10003010     kernel32:KERNEL32.dll
 0002:00000014       __imp__GetCurrentThreadId@0 10003014     kernel32:KERNEL32.dll
 0002:00000018       __imp__CompareFileTime@8   10003018     kernel32:KERNEL32.dll
 0002:0000001c       __imp__GetLastError@0      1000301c     kernel32:KERNEL32.dll
 0002:00000020       __imp__GetSystemTimeAsFileTime@4 10003020     kernel32:KERNEL32.dll
 0002:00000024       __imp__LocalAlloc@8        10003024     kernel32:KERNEL32.dll
 0002:00000028       __imp__LocalFree@4         10003028     kernel32:KERNEL32.dll
 0002:0000002c       __imp__FormatMessageW@28   1000302c     kernel32:KERNEL32.dll
 0002:00000030       __imp__FileTimeToSystemTime@8 10003030     kernel32:KERNEL32.dll
 0002:00000034       __imp__GetWindowsDirectoryW@8 10003034     kernel32:KERNEL32.dll
 0002:00000038       __imp__GetSystemWindowsDirectoryW@8 10003038     kernel32:KERNEL32.dll
 0002:0000003c       __imp__GetCurrentProcessId@0 1000303c     kernel32:KERNEL32.dll
 0002:00000040       __imp__QueryPerformanceCounter@4 10003040     kernel32:KERNEL32.dll
 0002:00000044       __imp__IsProcessorFeaturePresent@4 10003044     kernel32:KERNEL32.dll
 0002:00000048       __imp__TerminateProcess@8  10003048     kernel32:KERNEL32.dll
 0002:0000004c       __imp__GetCurrentProcess@0 1000304c     kernel32:KERNEL32.dll
 0002:00000050       __imp__SetUnhandledExceptionFilter@4 10003050     kernel32:KERNEL32.dll
 0002:00000054       __imp__UnhandledExceptionFilter@4 10003054     kernel32:KERNEL32.dll
 0002:00000058       \177KERNEL32_NULL_THUNK_DATA 10003058     kernel32:KERNEL32.dll
 0002:0000005c       __imp__LsaFreeReturnBuffer@4 1000305c     Secur32:Secur32.dll
 0002:00000060       __imp__LsaLookupAuthenticationPackage@12 10003060     Secur32:Secur32.dll
 0002:00000064       __imp__LsaConnectUntrusted@4 10003064     Secur32:Secur32.dll
 0002:00000068       __imp__LsaCallAuthenticationPackage@28 10003068     Secur32:Secur32.dll
 0002:0000006c       \177Secur32_NULL_THUNK_DATA 1000306c     Secur32:Secur32.dll
 0002:00000070       __imp___except_handler4_common 10003070     vcruntime:VCRUNTIME140.dll
 0002:00000074       __imp__memset              10003074     vcruntime:VCRUNTIME140.dll
 0002:00000078       __imp__memcpy              10003078     vcruntime:VCRUNTIME140.dll
 0002:0000007c       __imp____std_type_info_destroy_list 1000307c     vcruntime:VCRUNTIME140.dll
 0002:00000080       \177VCRUNTIME140_NULL_THUNK_DATA 10003080     vcruntime:VCRUNTIME140.dll
 0002:00000084       __imp__htonl@4             10003084     wsock32:WSOCK32.dll
 0002:00000088       \177WSOCK32_NULL_THUNK_DATA 10003088     wsock32:WSOCK32.dll
 0002:0000008c       __imp___execute_onexit_table 1000308c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000090       __imp___configure_narrow_argv 10003090     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000094       __imp___initialize_narrow_environment 10003094     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000098       __imp___seh_filter_dll     10003098     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:0000009c       __imp___initterm_e         1000309c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a0       __imp___initterm           100030a0     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a4       __imp___initialize_onexit_table 100030a4     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a8       __imp___cexit              100030a8     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000ac       \177api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA 100030ac     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000b0       __imp____acrt_iob_func     100030b0     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b4       __imp____stdio_common_vswprintf 100030b4     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b8       __imp____stdio_common_vfprintf 100030b8     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000bc       \177api-ms-win-crt-stdio-l1-1-0_NULL_THUNK_DATA 100030bc     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000c0       __imp__strlen              100030c0     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c4       __imp__wcsncpy             100030c4     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c8       __imp__wcslen              100030c8     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000cc       \177api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA 100030cc     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000d0       ___guard_check_icall_fptr  100030d0     MSVCRT:guard_support.obj
 0002:000000d4       ___xc_a                    100030d4     MSVCRT:initializers.obj
 0002:000000d8       ___xc_z                    100030d8     MSVCRT:initializers.obj
 0002:000000dc       ___xi_a                    100030dc     MSVCRT:initializers.obj
 0002:000000e0       ___xi_z                    100030e0     MSVCRT:initializers.obj
 0002:000000e4       ___xp_a                    100030e4     MSVCRT:initializers.obj
 0002:000000e8       ___xp_z                    100030e8     MSVCRT:initializers.obj
 0002:000000ec       ___xt_a                    100030ec     MSVCRT:initializers.obj
 0002:000000f0       ___xt_z                    100030f0     MSVCRT:initializers.obj
 0002:00000100       ??_C@_0CA@MAAHMEAA@sun?1security?1krb5?1internal?1Krb5@ 10003100     NativeCreds.obj
 0002:00000120       ??_C@_0BJ@ONBLC@LSA?3?5Couldn?8t?5find?5Krb5?6@ 10003120     NativeCreds.obj
 0002:0000013c       ??_C@_01POHCFINO@Z@        1000313c     NativeCreds.obj
 0002:00000140       ??_C@_05KOLFGEDA@DEBUG@    10003140     NativeCreds.obj
 0002:00000148       ??_C@_0BO@HKKMKLPH@LSA?3?5Krb5?5has?5no?5DEBUG?5field?6@ 10003148     NativeCreds.obj
 0002:00000168       ??_C@_0CC@HHHDDMMJ@sun?1security?1krb5?1internal?1Tick@ 10003168     NativeCreds.obj
 0002:0000018c       ??_C@_0BL@GBEIKIJJ@LSA?3?5Couldn?8t?5find?5Ticket?6@ 1000318c     NativeCreds.obj
 0002:000001a8       ??_C@_0BD@NPHBGKOJ@LSA?3?5Found?5Ticket?6@ 100031a8     NativeCreds.obj
 0002:000001bc       ??_C@_0BM@FJBDPNKL@LSA?3?5Made?5NewWeakGlobalRef?6@ 100031bc     NativeCreds.obj
 0002:000001d8       ??_C@_0CA@JFAAMJED@sun?1security?1krb5?1PrincipalName@ 100031d8     NativeCreds.obj
 0002:000001f8       ??_C@_0CC@IGIMKEMM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 100031f8     NativeCreds.obj
 0002:0000021c       ??_C@_0BK@GHFICIAG@LSA?3?5Found?5PrincipalName?6@ 1000321c     NativeCreds.obj
 0002:00000238       ??_C@_0BL@FEIPNCJB@sun?1security?1util?1DerValue@ 10003238     NativeCreds.obj
 0002:00000254       ??_C@_0BN@IMBPDDME@LSA?3?5Couldn?8t?5find?5DerValue?6@ 10003254     NativeCreds.obj
 0002:00000274       ??_C@_0BF@NGEKFHJH@LSA?3?5Found?5DerValue?6@ 10003274     NativeCreds.obj
 0002:0000028c       ??_C@_0CA@PAIDIBIN@sun?1security?1krb5?1EncryptionKey@ 1000328c     NativeCreds.obj
 0002:000002ac       ??_C@_0CC@PKDFMIDD@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 100032ac     NativeCreds.obj
 0002:000002d0       ??_C@_0BK@BLOBEEPJ@LSA?3?5Found?5EncryptionKey?6@ 100032d0     NativeCreds.obj
 0002:000002ec       ??_C@_0CH@CHOCOAEA@sun?1security?1krb5?1internal?1Tick@ 100032ec     NativeCreds.obj
 0002:00000314       ??_C@_0CA@EMAINPN@LSA?3?5Couldn?8t?5find?5TicketFlags?6@ 10003314     NativeCreds.obj
 0002:00000334       ??_C@_0BI@HAKKBGJG@LSA?3?5Found?5TicketFlags?6@ 10003334     NativeCreds.obj
 0002:0000034c       ??_C@_0CI@JKANDJAE@sun?1security?1krb5?1internal?1Kerb@ 1000334c     NativeCreds.obj
 0002:00000374       ??_C@_0CB@GDPEGAMP@LSA?3?5Couldn?8t?5find?5KerberosTime@ 10003374     NativeCreds.obj
 0002:00000398       ??_C@_0BJ@LJOALCIE@LSA?3?5Found?5KerberosTime?6@ 10003398     NativeCreds.obj
 0002:000003b4       ??_C@_0BB@FLFAIHG@java?1lang?1String@ 100033b4     NativeCreds.obj
 0002:000003c8       ??_C@_0BL@BGKPEEPI@LSA?3?5Couldn?8t?5find?5String?6@ 100033c8     NativeCreds.obj
 0002:000003e4       ??_C@_0BD@KIJGIGII@LSA?3?5Found?5String?6@ 100033e4     NativeCreds.obj
 0002:000003f8       ??_C@_05GBDANG@?$CI?$FLB?$CJV@ 100033f8     NativeCreds.obj
 0002:00000400       ??_C@_06FALKBLGB@?$DMinit?$DO@ 10003400     NativeCreds.obj
 0002:00000408       ??_C@_0CJ@OMBJPAOB@LSA?3?5Couldn?8t?5find?5DerValue?5con@ 10003408     NativeCreds.obj
 0002:00000434       ??_C@_0CB@PPLABLED@LSA?3?5Found?5DerValue?5constructor@ 10003434     NativeCreds.obj
 0002:00000458       ??_C@_0CA@ENJPEMDC@?$CILsun?1security?1util?1DerValue?$DL?$CJV@ 10003458     NativeCreds.obj
 0002:00000478       ??_C@_0CH@CEEKCGJO@LSA?3?5Couldn?8t?5find?5Ticket?5const@ 10003478     NativeCreds.obj
 0002:000004a0       ??_C@_0BP@ONIFIACG@LSA?3?5Found?5Ticket?5constructor?6@ 100034a0     NativeCreds.obj
 0002:000004c0       ??_C@_0CJ@OCAKIDDP@?$CI?$FLLjava?1lang?1String?$DLLjava?1lang?1@ 100034c0     NativeCreds.obj
 0002:000004ec       ??_C@_0CO@KFILNLLM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 100034ec     NativeCreds.obj
 0002:0000051c       ??_C@_0CG@BJFEPGAO@LSA?3?5Found?5PrincipalName?5constr@ 1000351c     NativeCreds.obj
 0002:00000544       ??_C@_06BDDFOFAP@?$CII?$FLB?$CJV@ 10003544     NativeCreds.obj
 0002:0000054c       ??_C@_0CO@KNCIDOBE@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 1000354c     NativeCreds.obj
 0002:0000057c       ??_C@_0CG@BBPHBDKG@LSA?3?5Found?5EncryptionKey?5constr@ 1000357c     NativeCreds.obj
 0002:000005a4       ??_C@_0CM@BLPDNPGC@LSA?3?5Couldn?8t?5find?5TicketFlags?5@ 100035a4     NativeCreds.obj
 0002:000005d0       ??_C@_0CE@NDIPGHBE@LSA?3?5Found?5TicketFlags?5construc@ 100035d0     NativeCreds.obj
 0002:000005f4       ??_C@_0BG@IKDDPPGD@?$CILjava?1lang?1String?$DL?$CJV@ 100035f4     NativeCreds.obj
 0002:0000060c       ??_C@_0CN@FGFKFHHG@LSA?3?5Couldn?8t?5find?5KerberosTime@ 1000360c     NativeCreds.obj
 0002:0000063c       ??_C@_0CF@OPPEPPMH@LSA?3?5Found?5KerberosTime?5constru@ 1000363c     NativeCreds.obj
 0002:00000664       ??_C@_0CB@CGFFPHE@LSA?3?5Finished?5OnLoad?5processing@ 10003664     NativeCreds.obj
 0002:00000688       ??_C@_0BMC@HPGKICPC@?$CILsun?1security?1krb5?1internal?1Ti@ 10003688     NativeCreds.obj
 0002:0000084c       ??_C@_0DO@EFFGMMEG@LSA?3?5Couldn?8t?5find?5sun?4security@ 1000384c     NativeCreds.obj
 0002:0000088c       ??_C@_0CB@EHGDGLDH@LSA?3?5Found?5KrbCreds?5constructor@ 1000388c     NativeCreds.obj
 0002:000008b0       ??_C@_0CF@LMFMNKOO@LSA?3?5Got?5handle?5to?5Kerberos?5pac@ 100038b0     NativeCreds.obj
 0002:000008d8       ??_C@_0BK@LHGHINFG@LSA?3?5Response?5size?5is?5?$CFd?6@ 100038d8     NativeCreds.obj
 0002:000008f4       ??_C@_0BN@HFCMCMJP@LsaCallAuthenticationPackage@ 100038f4     NativeCreds.obj
 0002:00000914       ??_C@_0BA@HOOKBKLM@Protocol?5status@ 10003914     NativeCreds.obj
 0002:00000924       ??_C@_0CG@BNMCCPEA@LSA?3?5TICKET?5SessionKey?5KeyType?5@ 10003924     NativeCreds.obj
 0002:0000094c       ??_C@_0BM@PMFBHKAH@LSA?3?5Valid?5etype?5found?3?5?$CFd?6@ 1000394c     NativeCreds.obj
 0002:00000968       ??_C@_0ED@ENPOMDNM@LSA?3?5MS?5TGT?5in?5cache?5is?5invalid@ 10003968     NativeCreds.obj
 0002:000009ac       ??_C@_0BO@JMBJFFMC@ConstructTicketRequest?5status@ 100039ac     NativeCreds.obj
 0002:000009cc       ??_C@_0CB@JAMPMMEM@LSA?3?5Response?5size?5is?5?$CFd?5for?5?$CFd@ 100039cc     NativeCreds.obj
 0002:000009f0       ??_C@_0CK@NMHODGIB@LSA?3?5Response?5etype?5is?5?$CFd?5for?5?$CF@ 100039f0     NativeCreds.obj
 0002:00000a1c       ??_C@_1BA@PCNIOLBA@?$AAk?$AAr?$AAb?$AAt?$AAg?$AAt?$AA?1@ 10003a1c     NativeCreds.obj
 0002:00000a2c       ??_C@_0CB@EAICCFNK@Can?8t?5allocate?5memory?5for?5ticke@ 10003a2c     NativeCreds.obj
 0002:00000a50       ??_C@_0BE@EAEONKAL@LsaConnectUntrusted@ 10003a50     NativeCreds.obj
 0002:00000a64       ??_C@_08DEIMIBAF@Kerberos@ 10003a64     NativeCreds.obj
 0002:00000a70       ??_C@_0BP@OOIEHDKO@LsaLookupAuthenticationPackage@ 10003a70     NativeCreds.obj
 0002:00000a90       ??_C@_0CF@EDKDHEBD@LSA?3?5Error?5calling?5function?5?$CFs?3@ 10003a90     NativeCreds.obj
 0002:00000ab8       ??_C@_0CD@FALAEFFE@LSA?3?5FormatMessage?5failed?5with?5@ 10003ab8     NativeCreds.obj
 0002:00000adc       ??_C@_07NGGFFIFC@LSA?3?5?$CFS@ 10003adc     NativeCreds.obj
 0002:00000ae4       ??_C@_0CA@HOHAFDNF@Can?8t?5allocate?5memory?5for?5realm@ 10003ae4     NativeCreds.obj
 0002:00000b04       ??_C@_0BN@GMKMIDMN@LSA?3?5Principal?5domain?5is?5?$CFS?6@ 10003b04     NativeCreds.obj
 0002:00000b24       ??_C@_0BG@KJEAEOON@LSA?3?5Name?5type?5is?5?$CFx?6@ 10003b24     NativeCreds.obj
 0002:00000b3c       ??_C@_0BH@HBDBBNHO@LSA?3?5Name?5count?5is?5?$CFx?6@ 10003b3c     NativeCreds.obj
 0002:00000b54       ??_C@_0DA@HIADNNPN@LSA?3?5Can?8t?5allocate?5String?5arra@ 10003b54     NativeCreds.obj
 0002:00000b84       ??_C@_0CC@JPDKOOFK@LSA?3?5Session?5key?5all?5zero?4?5Stop@ 10003b84     NativeCreds.obj
 0002:00000ba8       ??_C@_1M@HJLEHBOL@?$AA?$CF?$AA2?$AA?4?$AA2?$AAd@ 10003ba8     NativeCreds.obj
 0002:00000bb8       ??_C@_1EG@KKOCIAIL@?$AA?$CF?$AAl?$AAd?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs@ 10003bb8     NativeCreds.obj
 0002:00000c00       ??_C@_08HPFMLNAK@LSA?3?5?$CFS?6@ 10003c00     NativeCreds.obj
 0002:00000c0c       ??_C@_0BL@ENCPOIKC@java?1lang?1OutOfMemoryError@ 10003c0c     NativeCreds.obj
 0002:00000c28       __pDefaultRawDllMain       10003c28     MSVCRT:dll_dllmain.obj
 0002:00000c28       __pRawDllMain              10003c28     MSVCRT:dll_dllmain.obj
 0002:00000cb0       __load_config_used         10003cb0     MSVCRT:loadcfg.obj
 0002:00000d50       ___safe_se_handler_table   10003d50     <linker-defined>
 0002:00000fe0       ___rtc_iaa                 10003fe0     MSVCRT:initsect.obj
 0002:00000fe4       ___rtc_izz                 10003fe4     MSVCRT:initsect.obj
 0002:00000fe8       ___rtc_taa                 10003fe8     MSVCRT:initsect.obj
 0002:00000fec       ___rtc_tzz                 10003fec     MSVCRT:initsect.obj
 0002:00001168       __IMPORT_DESCRIPTOR_ADVAPI32 10004168     advapi32:ADVAPI32.dll
 0002:0000117c       __IMPORT_DESCRIPTOR_Secur32 1000417c     Secur32:Secur32.dll
 0002:00001190       __IMPORT_DESCRIPTOR_KERNEL32 10004190     kernel32:KERNEL32.dll
 0002:000011a4       __IMPORT_DESCRIPTOR_WSOCK32 100041a4     wsock32:WSOCK32.dll
 0002:000011b8       __IMPORT_DESCRIPTOR_VCRUNTIME140 100041b8     vcruntime:VCRUNTIME140.dll
 0002:000011cc       __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0 100041cc     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000011e0       __IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0 100041e0     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000011f4       __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0 100041f4     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00001208       __NULL_IMPORT_DESCRIPTOR   10004208     advapi32:ADVAPI32.dll
 0003:00000000       ___security_cookie_complement 10005000     MSVCRT:gs_cookie.obj
 0003:00000004       ___security_cookie         10005004     MSVCRT:gs_cookie.obj
 0003:00000008       ___scrt_native_dllmain_reason 10005008     MSVCRT:utility.obj
 0003:00000010       ___isa_enabled             10005010     MSVCRT:cpu_disp.obj
 0003:00000014       ___scrt_ucrt_dll_is_in_use 10005014     MSVCRT:ucrt_stubs.obj
 0003:00000018       _derValueClass             10005018     NativeCreds.obj
 0003:0000001c       _ticketClass               1000501c     NativeCreds.obj
 0003:00000020       _principalNameClass        10005020     NativeCreds.obj
 0003:00000024       _encryptionKeyClass        10005024     NativeCreds.obj
 0003:00000028       _ticketFlagsClass          10005028     NativeCreds.obj
 0003:0000002c       _kerberosTimeClass         1000502c     NativeCreds.obj
 0003:00000030       _javaLangStringClass       10005030     NativeCreds.obj
 0003:00000034       _derValueConstructor       10005034     NativeCreds.obj
 0003:00000038       _ticketConstructor         10005038     NativeCreds.obj
 0003:0000003c       _principalNameConstructor  1000503c     NativeCreds.obj
 0003:00000040       _encryptionKeyConstructor  10005040     NativeCreds.obj
 0003:00000044       _ticketFlagsConstructor    10005044     NativeCreds.obj
 0003:00000048       _kerberosTimeConstructor   10005048     NativeCreds.obj
 0003:0000004c       _krbcredsConstructor       1000504c     NativeCreds.obj
 0003:00000050       _native_debug              10005050     NativeCreds.obj
 0003:00000580       ?__type_info_root_node@@3U__type_info_node@@A 10005580     MSVCRT:tncleanup.obj
 0003:00000588       ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA 10005588     MSVCRT:default_local_stdio_options.obj
 0003:00000590       ___scrt_current_native_startup_state 10005590     MSVCRT:utility.obj
 0003:00000594       ___scrt_native_startup_lock 10005594     MSVCRT:utility.obj
 0003:000005b4       ___scrt_debugger_hook_flag 100055b4     MSVCRT:utility_desktop.obj
 0003:000005b8       ___isa_available           100055b8     MSVCRT:cpu_disp.obj
 0003:000005bc       ___favor                   100055bc     MSVCRT:cpu_disp.obj
 0003:000005c0       ?_OptionsStorage@?1??__local_stdio_printf_options@@9@9 100055c0     <common>
 0003:000005c8       ___dyn_tls_init_callback   100055c8     <common>

 entry point at        0001:0000143c

 Static symbols

 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     wsock32:WSOCK32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     w2k_lsa_auth.exp
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     advapi32:ADVAPI32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0001:00000477       _ConstructTicketRequest    10001477 f   NativeCreds.obj
 0001:0000111c       ?dllmain_crt_dispatch@@YGHQAUHINSTANCE__@@KQAX@Z 1000211c f   MSVCRT:dll_dllmain.obj
 0001:0000116f       ?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 1000216f f   MSVCRT:dll_dllmain.obj
 0001:00001279       ?dllmain_crt_process_detach@@YAH_N@Z 10002279 f   MSVCRT:dll_dllmain.obj
 0001:0000130b       ?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 1000230b f   MSVCRT:dll_dllmain.obj
 0001:00001411       ?dllmain_raw@@YGHQAUHINSTANCE__@@KQAX@Z 10002411 f   MSVCRT:dll_dllmain.obj
 0001:00001580       ___get_entropy             10002580 f   MSVCRT:gs_support.obj
 0001:00001675       ?find_pe_section@@YAPAU_IMAGE_SECTION_HEADER@@QAEI@Z 10002675 f   MSVCRT:utility.obj
 0001:00001af0       $$000000                   10002af0     MSVCRT:sehprolg4.obj
 0002:00000c2c       _GS_ExceptionPointers      10003c2c     MSVCRT:gs_report.obj
 0002:00000ff0       __sehtable$?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 10003ff0     MSVCRT:dll_dllmain.obj
 0002:00001010       __sehtable$?dllmain_crt_process_detach@@YAH_N@Z 10004010     MSVCRT:dll_dllmain.obj
 0002:00001030       __sehtable$?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 10004030     MSVCRT:dll_dllmain.obj
 0002:00001050       __sehtable$___scrt_is_nonwritable_in_current_image 10004050     MSVCRT:utility.obj
 0002:00001070       .edata                     10004070     w2k_lsa_auth.exp
 0002:00001098       rgpv                       10004098     w2k_lsa_auth.exp
 0002:000010a8       rgszName                   100040a8     w2k_lsa_auth.exp
 0002:000010b8       rgwOrd                     100040b8     w2k_lsa_auth.exp
 0002:000010c0       szName                     100040c0     w2k_lsa_auth.exp
 0002:000010d1       $N00001                    100040d1     w2k_lsa_auth.exp
 0002:000010df       $N00002                    100040df     w2k_lsa_auth.exp
 0002:000010ef       $N00003                    100040ef     w2k_lsa_auth.exp
 0002:00001125       $N00004                    10004125     w2k_lsa_auth.exp
 0002:00001304       .idata$6                   10004304     advapi32:ADVAPI32.dll
 0002:00001380       .idata$6                   10004380     Secur32:Secur32.dll
 0002:00001442       .idata$6                   10004442     kernel32:KERNEL32.dll
 0002:00001450       .idata$6                   10004450     wsock32:WSOCK32.dll
 0002:000014aa       .idata$6                   100044aa     vcruntime:VCRUNTIME140.dll
 0002:000015c8       .idata$6                   100045c8     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000015ea       .idata$6                   100045ea     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:0000160a       .idata$6                   1000460a     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0003:00000058       ?szMsgBuf@?1??ShowLastError@@9@9 10005058     NativeCreds.obj
 0003:00000258       ?__proc_attached@@3HA      10005258     MSVCRT:dll_dllmain.obj
 0003:00000260       _GS_ExceptionRecord        10005260     MSVCRT:gs_report.obj
 0003:000002b0       _GS_ContextRecord          100052b0     MSVCRT:gs_report.obj
 0003:00000598       ?is_initialized_as_dll@@3_NA 10005598     MSVCRT:utility.obj
 0003:00000599       ?module_local_atexit_table_initialized@@3_NA 10005599     MSVCRT:utility.obj
 0003:0000059c       ?module_local_atexit_table@@3U_onexit_table_t@@A 1000559c     MSVCRT:utility.obj
 0003:000005a8       ?module_local_at_quick_exit_table@@3U_onexit_table_t@@A 100055a8     MSVCRT:utility.obj
 0004:00000060       $R000000                   10006060     w2k_lsa_auth.dll.res
