 w2k_lsa_auth

 Timestamp is ffffffff (Sun Feb  7 06:28:15 2106)

 Preferred load address is 10000000

 Start         Length     Name                   Class
 0001:00000000 00001d4cH .text$mn                CODE
 0002:00000000 000000d0H .idata$5                DATA
 0002:000000d0 00000004H .00cfg                  DATA
 0002:000000d4 00000004H .CRT$XCA                DATA
 0002:000000d8 00000004H .CRT$XCZ                DATA
 0002:000000dc 00000004H .CRT$XIA                DATA
 0002:000000e0 00000004H .CRT$XIZ                DATA
 0002:000000e4 00000004H .CRT$XPA                DATA
 0002:000000e8 00000004H .CRT$XPZ                DATA
 0002:000000ec 00000004H .CRT$XTA                DATA
 0002:000000f0 00000008H .CRT$XTZ                DATA
 0002:000000f4 00000000H .gfids$y                DATA
 0002:000000f8 00000ba0H .rdata                  DATA
 0002:00000c98 00000004H .rdata$sxdata           DATA
 0002:00000c9c 0000028cH .rdata$zzzdbg           DATA
 0002:00000f28 00000004H .rtc$IAA                DATA
 0002:00000f2c 00000004H .rtc$IZZ                DATA
 0002:00000f30 00000004H .rtc$TAA                DATA
 0002:00000f34 00000004H .rtc$TZZ                DATA
 0002:00000f38 00000088H .xdata$x                DATA
 0002:00000fc0 000000f8H .edata                  DATA
 0002:000010b8 000000a0H .idata$2                DATA
 0002:00001158 00000014H .idata$3                DATA
 0002:0000116c 000000d0H .idata$4                DATA
 0002:0000123c 0000044aH .idata$6                DATA
 0003:00000000 00000018H .data                   DATA
 0003:00000018 000005acH .bss                    DATA
 0004:00000000 00000060H .rsrc$01                DATA
 0004:00000060 00000338H .rsrc$02                DATA

  Address         Publics by Value              Rva+Base       Lib:Object

 0000:00000000       ___arm64x_native_entrypoint 00000000     <absolute>
 0000:00000000       ___guard_eh_cont_count     00000000     <absolute>
 0000:00000000       ___hybrid_code_map         00000000     <absolute>
 0000:00000000       ___guard_iat_table         00000000     <absolute>
 0000:00000000       ___AbsoluteZero            00000000     <absolute>
 0000:00000000       ___arm64x_extra_rfe_table_size 00000000     <absolute>
 0000:00000000       ___hybrid_auxiliary_iat    00000000     <absolute>
 0000:00000000       ___volatile_metadata       00000000     <absolute>
 0000:00000000       ___arm64x_extra_rfe_table  00000000     <absolute>
 0000:00000000       ___x64_code_ranges_to_entry_points 00000000     <absolute>
 0000:00000000       ___guard_fids_count        00000000     <absolute>
 0000:00000000       ___guard_iat_count         00000000     <absolute>
 0000:00000000       ___x64_code_ranges_to_entry_points_count 00000000     <absolute>
 0000:00000000       ___guard_longjmp_table     00000000     <absolute>
 0000:00000000       ___enclave_config          00000000     <absolute>
 0000:00000000       ___arm64x_redirection_metadata 00000000     <absolute>
 0000:00000000       ___dynamic_value_reloc_table 00000000     <absolute>
 0000:00000000       ___hybrid_code_map_count   00000000     <absolute>
 0000:00000000       ___guard_fids_table        00000000     <absolute>
 0000:00000000       ___guard_longjmp_count     00000000     <absolute>
 0000:00000000       ___guard_eh_cont_table     00000000     <absolute>
 0000:00000000       ___arm64x_redirection_metadata_count 00000000     <absolute>
 0000:00000001       ___safe_se_handler_count   00000001     <absolute>
 0000:00000100       ___guard_flags             00000100     <absolute>
 0000:00000000       ___ImageBase               10000000     <linker-defined>
 0001:00000000       _BuildEncryptionKey        10001000 f   NativeCreds.obj
 0001:00000094       _BuildKerberosTime         10001094 f   NativeCreds.obj
 0001:000001b7       _BuildPrincipal            100011b7 f   NativeCreds.obj
 0001:00000313       _BuildTicket               10001313 f   NativeCreds.obj
 0001:00000387       _BuildTicketFlags          10001387 f   NativeCreds.obj
 0001:000003f3       _ConcatenateUnicodeStrings 100013f3 f   NativeCreds.obj
 0001:000004e6       _JNI_OnLoad@8              100014e6 f   NativeCreds.obj
 0001:000008eb       _JNI_OnUnload@8            100018eb f   NativeCreds.obj
 0001:00000996       _Java_sun_security_krb5_Credentials_acquireDefaultNativeCreds@12 10001996 f   NativeCreds.obj
 0001:00000e0c       _PackageConnectLookup      10001e0c f   NativeCreds.obj
 0001:00000e6b       _ShowLastError             10001e6b f   NativeCreds.obj
 0001:00000ed3       _ShowNTError               10001ed3 f   NativeCreds.obj
 0001:00000ee9       _ThrowOOME                 10001ee9 f   NativeCreds.obj
 0001:00000f0a       ___local_stdio_printf_options 10001f0a f i NativeCreds.obj
 0001:00000f10       __vfprintf_l               10001f10 f i NativeCreds.obj
 0001:00000f34       __vswprintf_c_l            10001f34 f i NativeCreds.obj
 0001:00000f63       _printf                    10001f63 f i NativeCreds.obj
 0001:00000f81       _swprintf                  10001f81 f i NativeCreds.obj
 0001:00000f9d       _Java_sun_security_krb5_Config_getWindowsDirectory@12 10001f9d f   WindowsDirectory.obj
 0001:00000ffe       _LsaNtStatusToWinError@4   10001ffe f   advapi32:ADVAPI32.dll
 0001:00001004       _LsaLookupAuthenticationPackage@12 10002004 f   Secur32:Secur32.dll
 0001:0000100a       _LsaFreeReturnBuffer@4     1000200a f   Secur32:Secur32.dll
 0001:00001010       _LsaCallAuthenticationPackage@28 10002010 f   Secur32:Secur32.dll
 0001:00001016       _LsaConnectUntrusted@4     10002016 f   Secur32:Secur32.dll
 0001:0000101c       _htonl@4                   1000201c f   wsock32:WSOCK32.dll
 0001:00001022       @__security_check_cookie@4 10002022 f   MSVCRT:secchk.obj
 0001:00001373       __DllMainCRTStartup@12     10002373 f   MSVCRT:dll_dllmain.obj
 0001:00001396       ___raise_securityfailure   10002396 f   MSVCRT:gs_report.obj
 0001:000013be       ___report_gsfailure        100023be f   MSVCRT:gs_report.obj
 0001:00001504       ___security_init_cookie    10002504 f   MSVCRT:gs_support.obj
 0001:0000154f       _DllMain@12                1000254f f   MSVCRT:dll_dllmain_stub.obj
 0001:00001571       ?__scrt_initialize_type_info@@YAXXZ 10002571 f   MSVCRT:tncleanup.obj
 0001:0000157d       ?__scrt_uninitialize_type_info@@YAXXZ 1000257d f   MSVCRT:tncleanup.obj
 0001:00001589       ___local_stdio_scanf_options 10002589 f i MSVCRT:default_local_stdio_options.obj
 0001:0000158f       ___scrt_initialize_default_local_stdio_options 1000258f f   MSVCRT:default_local_stdio_options.obj
 0001:000015f0       ___scrt_acquire_startup_lock 100025f0 f   MSVCRT:utility.obj
 0001:00001622       ___scrt_dllmain_after_initialize_c 10002622 f   MSVCRT:utility.obj
 0001:0000164d       ___scrt_dllmain_before_initialize_c 1000264d f   MSVCRT:utility.obj
 0001:0000165b       ___scrt_dllmain_crt_thread_attach 1000265b f   MSVCRT:utility.obj
 0001:0000167a       ___scrt_dllmain_crt_thread_detach 1000267a f   MSVCRT:utility.obj
 0001:00001687       ___scrt_dllmain_exception_filter 10002687 f   MSVCRT:utility.obj
 0001:000016bb       ___scrt_dllmain_uninitialize_c 100026bb f   MSVCRT:utility.obj
 0001:000016de       ___scrt_dllmain_uninitialize_critical 100026de f   MSVCRT:utility.obj
 0001:000016eb       ___scrt_initialize_crt     100026eb f   MSVCRT:utility.obj
 0001:00001724       ___scrt_initialize_onexit_tables 10002724 f   MSVCRT:utility.obj
 0001:000017ab       ___scrt_is_nonwritable_in_current_image 100027ab f   MSVCRT:utility.obj
 0001:0000183f       ___scrt_release_startup_lock 1000283f f   MSVCRT:utility.obj
 0001:0000185c       ___scrt_uninitialize_crt   1000285c f   MSVCRT:utility.obj
 0001:00001884       ___scrt_get_dyn_tls_init_callback 10002884 f   MSVCRT:dyn_tls_init.obj
 0001:0000188a       ___scrt_fastfail           1000288a f   MSVCRT:utility_desktop.obj
 0001:000019a4       __crt_debugger_hook        100029a4 f   MSVCRT:utility_desktop.obj
 0001:000019ac       __RTC_Initialize           100029ac f   MSVCRT:initsect.obj
 0001:000019d8       __RTC_Terminate            100029d8 f   MSVCRT:initsect.obj
 0001:00001a10       __SEH_prolog4              10002a10 f   MSVCRT:sehprolg4.obj
 0001:00001a54       __SEH_epilog4              10002a54 f   MSVCRT:sehprolg4.obj
 0001:00001a68       __except_handler4          10002a68 f   MSVCRT:chandler4gs.obj
 0001:00001a97       @_guard_check_icall_nop@4  10002a97 f i MSVCRT:guard_support.obj
 0001:00001a9a       ___isa_available_init      10002a9a f   MSVCRT:cpu_disp.obj
 0001:00001c6a       __get_startup_argv_mode    10002c6a f   MSVCRT:argv_mode.obj
 0001:00001c6e       ___scrt_is_ucrt_dll_in_use 10002c6e f   MSVCRT:ucrt_detection.obj
 0001:00001c7a       _memcpy                    10002c7a f   vcruntime:VCRUNTIME140.dll
 0001:00001c80       ___std_type_info_destroy_list 10002c80 f   vcruntime:VCRUNTIME140.dll
 0001:00001c86       _memset                    10002c86 f   vcruntime:VCRUNTIME140.dll
 0001:00001c8c       __except_handler4_common   10002c8c f   vcruntime:VCRUNTIME140.dll
 0001:00001c92       _strlen                    10002c92 f   ucrt:api-ms-win-crt-string-l1-1-0.dll
 0001:00001c98       __initterm                 10002c98 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001c9e       __initterm_e               10002c9e f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001ca4       __seh_filter_dll           10002ca4 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001caa       __configure_narrow_argv    10002caa f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001cb0       __initialize_narrow_environment 10002cb0 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001cb6       __initialize_onexit_table  10002cb6 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001cbc       __execute_onexit_table     10002cbc f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001cc2       __cexit                    10002cc2 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001cc8       _IsProcessorFeaturePresent@4 10002cc8 f   kernel32:KERNEL32.dll
 0001:00001cce       ___scrt_stub_for_acrt_uninitialize_critical 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___scrt_stub_for_acrt_uninitialize 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___scrt_stub_for_acrt_thread_attach 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___acrt_thread_attach      10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___vcrt_thread_attach      10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___acrt_thread_detach      10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___scrt_stub_for_acrt_initialize 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___scrt_stub_for_acrt_thread_detach 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___acrt_initialize         10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___vcrt_initialize         10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___acrt_uninitialize       10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___vcrt_thread_detach      10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___acrt_uninitialize_critical 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___vcrt_uninitialize       10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cce       ___vcrt_uninitialize_critical 10002cce f   MSVCRT:ucrt_stubs.obj
 0001:00001cd1       __is_c_termination_complete 10002cd1 f   MSVCRT:ucrt_stubs.obj
 0001:00001cd1       ___scrt_stub_for_is_c_termination_complete 10002cd1 f   MSVCRT:ucrt_stubs.obj
 0001:00001cd4       __filter_x86_sse2_floating_point_exception_default 10002cd4 f   MSVCRT:x86_exception_filter.obj
 0001:00001cd4       __filter_x86_sse2_floating_point_exception 10002cd4 f   MSVCRT:x86_exception_filter.obj
 0002:00000000       __imp__LsaNtStatusToWinError@4 10003000     advapi32:ADVAPI32.dll
 0002:00000004       \177ADVAPI32_NULL_THUNK_DATA 10003004     advapi32:ADVAPI32.dll
 0002:00000008       __imp__IsDebuggerPresent@0 10003008     kernel32:KERNEL32.dll
 0002:0000000c       __imp__InitializeSListHead@4 1000300c     kernel32:KERNEL32.dll
 0002:00000010       __imp__DisableThreadLibraryCalls@4 10003010     kernel32:KERNEL32.dll
 0002:00000014       __imp__GetCurrentThreadId@0 10003014     kernel32:KERNEL32.dll
 0002:00000018       __imp__CompareFileTime@8   10003018     kernel32:KERNEL32.dll
 0002:0000001c       __imp__GetLastError@0      1000301c     kernel32:KERNEL32.dll
 0002:00000020       __imp__GetSystemTimeAsFileTime@4 10003020     kernel32:KERNEL32.dll
 0002:00000024       __imp__LocalAlloc@8        10003024     kernel32:KERNEL32.dll
 0002:00000028       __imp__LocalFree@4         10003028     kernel32:KERNEL32.dll
 0002:0000002c       __imp__FormatMessageW@28   1000302c     kernel32:KERNEL32.dll
 0002:00000030       __imp__FileTimeToSystemTime@8 10003030     kernel32:KERNEL32.dll
 0002:00000034       __imp__GetWindowsDirectoryW@8 10003034     kernel32:KERNEL32.dll
 0002:00000038       __imp__GetSystemWindowsDirectoryW@8 10003038     kernel32:KERNEL32.dll
 0002:0000003c       __imp__GetCurrentProcessId@0 1000303c     kernel32:KERNEL32.dll
 0002:00000040       __imp__QueryPerformanceCounter@4 10003040     kernel32:KERNEL32.dll
 0002:00000044       __imp__IsProcessorFeaturePresent@4 10003044     kernel32:KERNEL32.dll
 0002:00000048       __imp__TerminateProcess@8  10003048     kernel32:KERNEL32.dll
 0002:0000004c       __imp__GetCurrentProcess@0 1000304c     kernel32:KERNEL32.dll
 0002:00000050       __imp__SetUnhandledExceptionFilter@4 10003050     kernel32:KERNEL32.dll
 0002:00000054       __imp__UnhandledExceptionFilter@4 10003054     kernel32:KERNEL32.dll
 0002:00000058       \177KERNEL32_NULL_THUNK_DATA 10003058     kernel32:KERNEL32.dll
 0002:0000005c       __imp__LsaConnectUntrusted@4 1000305c     Secur32:Secur32.dll
 0002:00000060       __imp__LsaLookupAuthenticationPackage@12 10003060     Secur32:Secur32.dll
 0002:00000064       __imp__LsaFreeReturnBuffer@4 10003064     Secur32:Secur32.dll
 0002:00000068       __imp__LsaCallAuthenticationPackage@28 10003068     Secur32:Secur32.dll
 0002:0000006c       \177Secur32_NULL_THUNK_DATA 1000306c     Secur32:Secur32.dll
 0002:00000070       __imp__memset              10003070     vcruntime:VCRUNTIME140.dll
 0002:00000074       __imp___except_handler4_common 10003074     vcruntime:VCRUNTIME140.dll
 0002:00000078       __imp____std_type_info_destroy_list 10003078     vcruntime:VCRUNTIME140.dll
 0002:0000007c       __imp__memcpy              1000307c     vcruntime:VCRUNTIME140.dll
 0002:00000080       \177VCRUNTIME140_NULL_THUNK_DATA 10003080     vcruntime:VCRUNTIME140.dll
 0002:00000084       __imp__htonl@4             10003084     wsock32:WSOCK32.dll
 0002:00000088       \177WSOCK32_NULL_THUNK_DATA 10003088     wsock32:WSOCK32.dll
 0002:0000008c       __imp___cexit              1000308c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000090       __imp___seh_filter_dll     10003090     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000094       __imp___configure_narrow_argv 10003094     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000098       __imp___execute_onexit_table 10003098     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:0000009c       __imp___initterm_e         1000309c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a0       __imp___initterm           100030a0     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a4       __imp___initialize_narrow_environment 100030a4     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a8       __imp___initialize_onexit_table 100030a8     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000ac       \177api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA 100030ac     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000b0       __imp____acrt_iob_func     100030b0     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b4       __imp____stdio_common_vfprintf 100030b4     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b8       __imp____stdio_common_vswprintf 100030b8     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000bc       \177api-ms-win-crt-stdio-l1-1-0_NULL_THUNK_DATA 100030bc     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000c0       __imp__wcsncpy             100030c0     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c4       __imp__wcslen              100030c4     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c8       __imp__strlen              100030c8     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000cc       \177api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA 100030cc     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000d0       ___guard_check_icall_fptr  100030d0     MSVCRT:guard_support.obj
 0002:000000d4       ___xc_a                    100030d4     MSVCRT:initializers.obj
 0002:000000d8       ___xc_z                    100030d8     MSVCRT:initializers.obj
 0002:000000dc       ___xi_a                    100030dc     MSVCRT:initializers.obj
 0002:000000e0       ___xi_z                    100030e0     MSVCRT:initializers.obj
 0002:000000e4       ___xp_a                    100030e4     MSVCRT:initializers.obj
 0002:000000e8       ___xp_z                    100030e8     MSVCRT:initializers.obj
 0002:000000ec       ___xt_a                    100030ec     MSVCRT:initializers.obj
 0002:000000f0       ___xt_z                    100030f0     MSVCRT:initializers.obj
 0002:000000f8       ??_C@_0CA@MAAHMEAA@sun?1security?1krb5?1internal?1Krb5@ 100030f8     NativeCreds.obj
 0002:00000118       ??_C@_0BJ@ONBLC@LSA?3?5Couldn?8t?5find?5Krb5?6@ 10003118     NativeCreds.obj
 0002:00000134       ??_C@_01POHCFINO@Z@        10003134     NativeCreds.obj
 0002:00000138       ??_C@_05KOLFGEDA@DEBUG@    10003138     NativeCreds.obj
 0002:00000140       ??_C@_0BO@HKKMKLPH@LSA?3?5Krb5?5has?5no?5DEBUG?5field?6@ 10003140     NativeCreds.obj
 0002:00000160       ??_C@_0CC@HHHDDMMJ@sun?1security?1krb5?1internal?1Tick@ 10003160     NativeCreds.obj
 0002:00000184       ??_C@_0BL@GBEIKIJJ@LSA?3?5Couldn?8t?5find?5Ticket?6@ 10003184     NativeCreds.obj
 0002:000001a0       ??_C@_0BD@NPHBGKOJ@LSA?3?5Found?5Ticket?6@ 100031a0     NativeCreds.obj
 0002:000001b4       ??_C@_0BM@FJBDPNKL@LSA?3?5Made?5NewWeakGlobalRef?6@ 100031b4     NativeCreds.obj
 0002:000001d0       ??_C@_0CA@JFAAMJED@sun?1security?1krb5?1PrincipalName@ 100031d0     NativeCreds.obj
 0002:000001f0       ??_C@_0CC@IGIMKEMM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 100031f0     NativeCreds.obj
 0002:00000214       ??_C@_0BK@GHFICIAG@LSA?3?5Found?5PrincipalName?6@ 10003214     NativeCreds.obj
 0002:00000230       ??_C@_0CA@PAIDIBIN@sun?1security?1krb5?1EncryptionKey@ 10003230     NativeCreds.obj
 0002:00000250       ??_C@_0CC@PKDFMIDD@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 10003250     NativeCreds.obj
 0002:00000274       ??_C@_0BK@BLOBEEPJ@LSA?3?5Found?5EncryptionKey?6@ 10003274     NativeCreds.obj
 0002:00000290       ??_C@_0CH@CHOCOAEA@sun?1security?1krb5?1internal?1Tick@ 10003290     NativeCreds.obj
 0002:000002b8       ??_C@_0CA@EMAINPN@LSA?3?5Couldn?8t?5find?5TicketFlags?6@ 100032b8     NativeCreds.obj
 0002:000002d8       ??_C@_0BI@HAKKBGJG@LSA?3?5Found?5TicketFlags?6@ 100032d8     NativeCreds.obj
 0002:000002f0       ??_C@_0CI@JKANDJAE@sun?1security?1krb5?1internal?1Kerb@ 100032f0     NativeCreds.obj
 0002:00000318       ??_C@_0CB@GDPEGAMP@LSA?3?5Couldn?8t?5find?5KerberosTime@ 10003318     NativeCreds.obj
 0002:0000033c       ??_C@_0BJ@LJOALCIE@LSA?3?5Found?5KerberosTime?6@ 1000333c     NativeCreds.obj
 0002:00000358       ??_C@_0BB@FLFAIHG@java?1lang?1String@ 10003358     NativeCreds.obj
 0002:0000036c       ??_C@_0BL@BGKPEEPI@LSA?3?5Couldn?8t?5find?5String?6@ 1000336c     NativeCreds.obj
 0002:00000388       ??_C@_0BD@KIJGIGII@LSA?3?5Found?5String?6@ 10003388     NativeCreds.obj
 0002:0000039c       ??_C@_05GBDANG@?$CI?$FLB?$CJV@ 1000339c     NativeCreds.obj
 0002:000003a4       ??_C@_06FALKBLGB@?$DMinit?$DO@ 100033a4     NativeCreds.obj
 0002:000003ac       ??_C@_0CH@CEEKCGJO@LSA?3?5Couldn?8t?5find?5Ticket?5const@ 100033ac     NativeCreds.obj
 0002:000003d4       ??_C@_0BP@ONIFIACG@LSA?3?5Found?5Ticket?5constructor?6@ 100033d4     NativeCreds.obj
 0002:000003f4       ??_C@_0CJ@OCAKIDDP@?$CI?$FLLjava?1lang?1String?$DLLjava?1lang?1@ 100033f4     NativeCreds.obj
 0002:00000420       ??_C@_0CO@KFILNLLM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 10003420     NativeCreds.obj
 0002:00000450       ??_C@_0CG@BJFEPGAO@LSA?3?5Found?5PrincipalName?5constr@ 10003450     NativeCreds.obj
 0002:00000478       ??_C@_06BDDFOFAP@?$CII?$FLB?$CJV@ 10003478     NativeCreds.obj
 0002:00000480       ??_C@_0CO@KNCIDOBE@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 10003480     NativeCreds.obj
 0002:000004b0       ??_C@_0CG@BBPHBDKG@LSA?3?5Found?5EncryptionKey?5constr@ 100034b0     NativeCreds.obj
 0002:000004d8       ??_C@_0CM@BLPDNPGC@LSA?3?5Couldn?8t?5find?5TicketFlags?5@ 100034d8     NativeCreds.obj
 0002:00000504       ??_C@_0CE@NDIPGHBE@LSA?3?5Found?5TicketFlags?5construc@ 10003504     NativeCreds.obj
 0002:00000528       ??_C@_0BG@IKDDPPGD@?$CILjava?1lang?1String?$DL?$CJV@ 10003528     NativeCreds.obj
 0002:00000540       ??_C@_0CN@FGFKFHHG@LSA?3?5Couldn?8t?5find?5KerberosTime@ 10003540     NativeCreds.obj
 0002:00000570       ??_C@_0CF@OPPEPPMH@LSA?3?5Found?5KerberosTime?5constru@ 10003570     NativeCreds.obj
 0002:00000598       ??_C@_0CB@CGFFPHE@LSA?3?5Finished?5OnLoad?5processing@ 10003598     NativeCreds.obj
 0002:000005c0       ??_C@_0BMC@HPGKICPC@?$CILsun?1security?1krb5?1internal?1Ti@ 100035c0     NativeCreds.obj
 0002:00000784       ??_C@_0DO@EFFGMMEG@LSA?3?5Couldn?8t?5find?5sun?4security@ 10003784     NativeCreds.obj
 0002:000007c4       ??_C@_0CB@EHGDGLDH@LSA?3?5Found?5KrbCreds?5constructor@ 100037c4     NativeCreds.obj
 0002:000007e8       ??_C@_0CF@LMFMNKOO@LSA?3?5Got?5handle?5to?5Kerberos?5pac@ 100037e8     NativeCreds.obj
 0002:00000810       ??_C@_0BK@LHGHINFG@LSA?3?5Response?5size?5is?5?$CFd?6@ 10003810     NativeCreds.obj
 0002:0000082c       ??_C@_0BN@HFCMCMJP@LsaCallAuthenticationPackage@ 1000382c     NativeCreds.obj
 0002:0000084c       ??_C@_0BA@HOOKBKLM@Protocol?5status@ 1000384c     NativeCreds.obj
 0002:0000085c       ??_C@_0CG@BNMCCPEA@LSA?3?5TICKET?5SessionKey?5KeyType?5@ 1000385c     NativeCreds.obj
 0002:00000884       ??_C@_0BM@PMFBHKAH@LSA?3?5Valid?5etype?5found?3?5?$CFd?6@ 10003884     NativeCreds.obj
 0002:000008a0       ??_C@_0ED@ENPOMDNM@LSA?3?5MS?5TGT?5in?5cache?5is?5invalid@ 100038a0     NativeCreds.obj
 0002:000008e4       ??_C@_0BO@JMBJFFMC@ConstructTicketRequest?5status@ 100038e4     NativeCreds.obj
 0002:00000904       ??_C@_0CB@JAMPMMEM@LSA?3?5Response?5size?5is?5?$CFd?5for?5?$CFd@ 10003904     NativeCreds.obj
 0002:00000928       ??_C@_0CK@NMHODGIB@LSA?3?5Response?5etype?5is?5?$CFd?5for?5?$CF@ 10003928     NativeCreds.obj
 0002:00000954       ??_C@_1BA@PCNIOLBA@?$AAk?$AAr?$AAb?$AAt?$AAg?$AAt?$AA?1@ 10003954     NativeCreds.obj
 0002:00000964       ??_C@_0CB@EAICCFNK@Can?8t?5allocate?5memory?5for?5ticke@ 10003964     NativeCreds.obj
 0002:00000988       ??_C@_0BE@EAEONKAL@LsaConnectUntrusted@ 10003988     NativeCreds.obj
 0002:0000099c       ??_C@_08DEIMIBAF@Kerberos@ 1000399c     NativeCreds.obj
 0002:000009a8       ??_C@_0BP@OOIEHDKO@LsaLookupAuthenticationPackage@ 100039a8     NativeCreds.obj
 0002:000009c8       ??_C@_0CF@EDKDHEBD@LSA?3?5Error?5calling?5function?5?$CFs?3@ 100039c8     NativeCreds.obj
 0002:000009f0       ??_C@_0CD@FALAEFFE@LSA?3?5FormatMessage?5failed?5with?5@ 100039f0     NativeCreds.obj
 0002:00000a14       ??_C@_07NGGFFIFC@LSA?3?5?$CFS@ 10003a14     NativeCreds.obj
 0002:00000a1c       ??_C@_0CA@HOHAFDNF@Can?8t?5allocate?5memory?5for?5realm@ 10003a1c     NativeCreds.obj
 0002:00000a3c       ??_C@_0BN@GMKMIDMN@LSA?3?5Principal?5domain?5is?5?$CFS?6@ 10003a3c     NativeCreds.obj
 0002:00000a5c       ??_C@_0BG@KJEAEOON@LSA?3?5Name?5type?5is?5?$CFx?6@ 10003a5c     NativeCreds.obj
 0002:00000a74       ??_C@_0BH@HBDBBNHO@LSA?3?5Name?5count?5is?5?$CFx?6@ 10003a74     NativeCreds.obj
 0002:00000a8c       ??_C@_0DA@HIADNNPN@LSA?3?5Can?8t?5allocate?5String?5arra@ 10003a8c     NativeCreds.obj
 0002:00000abc       ??_C@_0CC@JPDKOOFK@LSA?3?5Session?5key?5all?5zero?4?5Stop@ 10003abc     NativeCreds.obj
 0002:00000ae0       ??_C@_1M@HJLEHBOL@?$AA?$CF?$AA2?$AA?4?$AA2?$AAd@ 10003ae0     NativeCreds.obj
 0002:00000af0       ??_C@_1EG@KKOCIAIL@?$AA?$CF?$AAl?$AAd?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs@ 10003af0     NativeCreds.obj
 0002:00000b38       ??_C@_08HPFMLNAK@LSA?3?5?$CFS?6@ 10003b38     NativeCreds.obj
 0002:00000b44       ??_C@_0BL@ENCPOIKC@java?1lang?1OutOfMemoryError@ 10003b44     NativeCreds.obj
 0002:00000b60       __pDefaultRawDllMain       10003b60     MSVCRT:dll_dllmain.obj
 0002:00000b60       __pRawDllMain              10003b60     MSVCRT:dll_dllmain.obj
 0002:00000be0       __load_config_used         10003be0     MSVCRT:loadcfg.obj
 0002:00000c98       ___safe_se_handler_table   10003c98     <linker-defined>
 0002:00000f28       ___rtc_iaa                 10003f28     MSVCRT:initsect.obj
 0002:00000f2c       ___rtc_izz                 10003f2c     MSVCRT:initsect.obj
 0002:00000f30       ___rtc_taa                 10003f30     MSVCRT:initsect.obj
 0002:00000f34       ___rtc_tzz                 10003f34     MSVCRT:initsect.obj
 0002:000010b8       __IMPORT_DESCRIPTOR_ADVAPI32 100040b8     advapi32:ADVAPI32.dll
 0002:000010cc       __IMPORT_DESCRIPTOR_Secur32 100040cc     Secur32:Secur32.dll
 0002:000010e0       __IMPORT_DESCRIPTOR_KERNEL32 100040e0     kernel32:KERNEL32.dll
 0002:000010f4       __IMPORT_DESCRIPTOR_WSOCK32 100040f4     wsock32:WSOCK32.dll
 0002:00001108       __IMPORT_DESCRIPTOR_VCRUNTIME140 10004108     vcruntime:VCRUNTIME140.dll
 0002:0000111c       __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0 1000411c     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:00001130       __IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0 10004130     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:00001144       __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0 10004144     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00001158       __NULL_IMPORT_DESCRIPTOR   10004158     advapi32:ADVAPI32.dll
 0003:00000000       ___security_cookie_complement 10005000     MSVCRT:gs_cookie.obj
 0003:00000004       ___security_cookie         10005004     MSVCRT:gs_cookie.obj
 0003:00000008       ___scrt_native_dllmain_reason 10005008     MSVCRT:utility.obj
 0003:00000010       ___isa_enabled             10005010     MSVCRT:cpu_disp.obj
 0003:00000014       ___scrt_ucrt_dll_is_in_use 10005014     MSVCRT:ucrt_stubs.obj
 0003:00000018       _ticketClass               10005018     NativeCreds.obj
 0003:0000001c       _principalNameClass        1000501c     NativeCreds.obj
 0003:00000020       _encryptionKeyClass        10005020     NativeCreds.obj
 0003:00000024       _ticketFlagsClass          10005024     NativeCreds.obj
 0003:00000028       _kerberosTimeClass         10005028     NativeCreds.obj
 0003:0000002c       _javaLangStringClass       1000502c     NativeCreds.obj
 0003:00000030       _ticketConstructor         10005030     NativeCreds.obj
 0003:00000034       _principalNameConstructor  10005034     NativeCreds.obj
 0003:00000038       _encryptionKeyConstructor  10005038     NativeCreds.obj
 0003:0000003c       _ticketFlagsConstructor    1000503c     NativeCreds.obj
 0003:00000040       _kerberosTimeConstructor   10005040     NativeCreds.obj
 0003:00000044       _krbcredsConstructor       10005044     NativeCreds.obj
 0003:00000048       _native_debug              10005048     NativeCreds.obj
 0003:00000578       ?__type_info_root_node@@3U__type_info_node@@A 10005578     MSVCRT:tncleanup.obj
 0003:00000580       ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA 10005580     MSVCRT:default_local_stdio_options.obj
 0003:00000588       ___scrt_current_native_startup_state 10005588     MSVCRT:utility.obj
 0003:0000058c       ___scrt_native_startup_lock 1000558c     MSVCRT:utility.obj
 0003:000005ac       ___scrt_debugger_hook_flag 100055ac     MSVCRT:utility_desktop.obj
 0003:000005b0       ___isa_available           100055b0     MSVCRT:cpu_disp.obj
 0003:000005b4       ___favor                   100055b4     MSVCRT:cpu_disp.obj
 0003:000005b8       ?_OptionsStorage@?1??__local_stdio_printf_options@@9@9 100055b8     <common>
 0003:000005c0       ___dyn_tls_init_callback   100055c0     <common>

 entry point at        0001:00001373

 Static symbols

 0000:ffff8000       .debug$S                   10000000     w2k_lsa_auth.exp
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     advapi32:ADVAPI32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     wsock32:WSOCK32.dll
 0001:00000440       _ConstructTicketRequest    10001440 f   NativeCreds.obj
 0001:00001033       ?dllmain_crt_dispatch@@YGHQAUHINSTANCE__@@KQAX@Z 10002033 f   MSVCRT:dll_dllmain.obj
 0001:00001086       ?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 10002086 f   MSVCRT:dll_dllmain.obj
 0001:0000118d       ?dllmain_crt_process_detach@@YAH_N@Z 1000218d f   MSVCRT:dll_dllmain.obj
 0001:0000123d       ?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 1000223d f   MSVCRT:dll_dllmain.obj
 0001:00001348       ?dllmain_raw@@YGHQAUHINSTANCE__@@KQAX@Z 10002348 f   MSVCRT:dll_dllmain.obj
 0001:000014b7       ___get_entropy             100024b7 f   MSVCRT:gs_support.obj
 0001:000015ac       ?find_pe_section@@YAPAU_IMAGE_SECTION_HEADER@@QAEI@Z 100025ac f   MSVCRT:utility.obj
 0001:00001a10       $$000000                   10002a10     MSVCRT:sehprolg4.obj
 0002:00000b64       _GS_ExceptionPointers      10003b64     MSVCRT:gs_report.obj
 0002:00000f38       __sehtable$?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 10003f38     MSVCRT:dll_dllmain.obj
 0002:00000f58       __sehtable$?dllmain_crt_process_detach@@YAH_N@Z 10003f58     MSVCRT:dll_dllmain.obj
 0002:00000f80       __sehtable$?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 10003f80     MSVCRT:dll_dllmain.obj
 0002:00000fa0       __sehtable$___scrt_is_nonwritable_in_current_image 10003fa0     MSVCRT:utility.obj
 0002:00000fc0       .edata                     10003fc0     w2k_lsa_auth.exp
 0002:00000fe8       rgpv                       10003fe8     w2k_lsa_auth.exp
 0002:00000ff8       rgszName                   10003ff8     w2k_lsa_auth.exp
 0002:00001008       rgwOrd                     10004008     w2k_lsa_auth.exp
 0002:00001010       szName                     10004010     w2k_lsa_auth.exp
 0002:00001021       $N00001                    10004021     w2k_lsa_auth.exp
 0002:0000102f       $N00002                    1000402f     w2k_lsa_auth.exp
 0002:0000103f       $N00003                    1000403f     w2k_lsa_auth.exp
 0002:00001075       $N00004                    10004075     w2k_lsa_auth.exp
 0002:00001254       .idata$6                   10004254     advapi32:ADVAPI32.dll
 0002:000012d0       .idata$6                   100042d0     Secur32:Secur32.dll
 0002:00001392       .idata$6                   10004392     kernel32:KERNEL32.dll
 0002:000013a0       .idata$6                   100043a0     wsock32:WSOCK32.dll
 0002:000013fa       .idata$6                   100043fa     vcruntime:VCRUNTIME140.dll
 0002:00001518       .idata$6                   10004518     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:0000153a       .idata$6                   1000453a     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:0000155a       .idata$6                   1000455a     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0003:00000050       ?szMsgBuf@?1??ShowLastError@@9@9 10005050     NativeCreds.obj
 0003:00000250       ?__proc_attached@@3HA      10005250     MSVCRT:dll_dllmain.obj
 0003:00000258       _GS_ExceptionRecord        10005258     MSVCRT:gs_report.obj
 0003:000002a8       _GS_ContextRecord          100052a8     MSVCRT:gs_report.obj
 0003:00000590       ?is_initialized_as_dll@@3_NA 10005590     MSVCRT:utility.obj
 0003:00000591       ?module_local_atexit_table_initialized@@3_NA 10005591     MSVCRT:utility.obj
 0003:00000594       ?module_local_atexit_table@@3U_onexit_table_t@@A 10005594     MSVCRT:utility.obj
 0003:000005a0       ?module_local_at_quick_exit_table@@3U_onexit_table_t@@A 100055a0     MSVCRT:utility.obj
 0004:00000060       $R000000                   10006060     w2k_lsa_auth.dll.res
