 w2k_lsa_auth

 Timestamp is 6a16388f (Tue May 26 20:19:27 2026)

 Preferred load address is 10000000

 Start         Length     Name                   Class
 0001:00000000 00001e27H .text$mn                CODE
 0002:00000000 000000d0H .idata$5                DATA
 0002:000000d0 00000008H .00cfg                  DATA
 0002:000000d8 00000004H .CRT$XCA                DATA
 0002:000000dc 00000004H .CRT$XCZ                DATA
 0002:000000e0 00000004H .CRT$XIA                DATA
 0002:000000e4 00000004H .CRT$XIZ                DATA
 0002:000000e8 00000004H .CRT$XPA                DATA
 0002:000000ec 00000004H .CRT$XPZ                DATA
 0002:000000f0 00000004H .CRT$XTA                DATA
 0002:000000f4 00000004H .CRT$XTZ                DATA
 0002:000000f8 00000000H .gfids$y                DATA
 0002:000000f8 00000c88H .rdata                  DATA
 0002:00000d80 00000000H .rdata$CastGuardVftablesA DATA
 0002:00000d80 00000000H .rdata$CastGuardVftablesC DATA
 0002:00000d80 00000004H .rdata$sxdata           DATA
 0002:00000d84 00000064H .rdata$voltmd           DATA
 0002:00000de8 000002f4H .rdata$zzzdbg           DATA
 0002:000010dc 00000004H .rtc$IAA                DATA
 0002:000010e0 00000004H .rtc$IZZ                DATA
 0002:000010e4 00000004H .rtc$TAA                DATA
 0002:000010e8 00000008H .rtc$TZZ                DATA
 0002:000010f0 00000090H .xdata$x                DATA
 0002:00001180 000000f8H .edata                  DATA
 0002:00001278 000000a0H .idata$2                DATA
 0002:00001318 00000014H .idata$3                DATA
 0002:0000132c 000000d0H .idata$4                DATA
 0002:000013fc 0000044aH .idata$6                DATA
 0003:00000000 00000018H .data                   DATA
 0003:00000018 000005b4H .bss                    DATA
 0004:00000000 00000060H .rsrc$01                DATA
 0004:00000060 00000380H .rsrc$02                DATA

  Address         Publics by Value              Rva+Base       Lib:Object

 0000:00000000       ___AbsoluteZero            00000000     <absolute>
 0000:00000000       ___arm64x_extra_rfe_table  00000000     <absolute>
 0000:00000000       ___arm64x_extra_rfe_table_size 00000000     <absolute>
 0000:00000000       ___arm64x_native_entrypoint 00000000     <absolute>
 0000:00000000       ___arm64x_redirection_metadata 00000000     <absolute>
 0000:00000000       ___arm64x_redirection_metadata_count 00000000     <absolute>
 0000:00000000       ___dynamic_value_reloc_table 00000000     <absolute>
 0000:00000000       ___enclave_config          00000000     <absolute>
 0000:00000000       ___guard_check_icall_a64n_fptr 00000000     <absolute>
 0000:00000000       ___guard_eh_cont_count     00000000     <absolute>
 0000:00000000       ___guard_eh_cont_table     00000000     <absolute>
 0000:00000000       ___guard_fids_count        00000000     <absolute>
 0000:00000000       ___guard_fids_table        00000000     <absolute>
 0000:00000000       ___guard_iat_count         00000000     <absolute>
 0000:00000000       ___guard_iat_table         00000000     <absolute>
 0000:00000000       ___guard_longjmp_count     00000000     <absolute>
 0000:00000000       ___guard_longjmp_table     00000000     <absolute>
 0000:00000000       ___hybrid_auxiliary_iat    00000000     <absolute>
 0000:00000000       ___hybrid_auxiliary_iat_copy 00000000     <absolute>
 0000:00000000       ___hybrid_code_map         00000000     <absolute>
 0000:00000000       ___hybrid_code_map_count   00000000     <absolute>
 0000:00000000       ___x64_code_ranges_to_entry_points 00000000     <absolute>
 0000:00000000       ___x64_code_ranges_to_entry_points_count 00000000     <absolute>
 0000:00000001       ___safe_se_handler_count   00000001     <absolute>
 0000:00000100       ___guard_flags             00000100     <absolute>
 0000:00000000       ___ImageBase               10000000     <linker-defined>
 0001:00000000       _BuildEncryptionKey        10001000 f   NativeCreds.obj
 0001:00000094       _BuildKerberosTime         10001094 f   NativeCreds.obj
 0001:000001b7       _BuildPrincipal            100011b7 f   NativeCreds.obj
 0001:0000030c       _BuildTicket               1000130c f   NativeCreds.obj
 0001:000003b4       _BuildTicketFlags          100013b4 f   NativeCreds.obj
 0001:00000420       _ConcatenateUnicodeStrings 10001420 f   NativeCreds.obj
 0001:00000513       _JNI_OnLoad@8              10001513 f   NativeCreds.obj
 0001:000009b3       _JNI_OnUnload@8            100019b3 f   NativeCreds.obj
 0001:00000a75       _Java_sun_security_krb5_Credentials_acquireDefaultNativeCreds@12 10001a75 f   NativeCreds.obj
 0001:00000f02       _PackageConnectLookup      10001f02 f   NativeCreds.obj
 0001:00000f61       _ShowLastError             10001f61 f   NativeCreds.obj
 0001:00000fc9       _ShowNTError               10001fc9 f   NativeCreds.obj
 0001:00000fdf       _ThrowOOME                 10001fdf f   NativeCreds.obj
 0001:00001000       ___local_stdio_printf_options 10002000 f i NativeCreds.obj
 0001:00001006       __vfprintf_l               10002006 f i NativeCreds.obj
 0001:0000102a       __vswprintf_c_l            1000202a f i NativeCreds.obj
 0001:00001059       _printf                    10002059 f i NativeCreds.obj
 0001:00001077       _swprintf                  10002077 f i NativeCreds.obj
 0001:00001093       _Java_sun_security_krb5_Config_getWindowsDirectory@12 10002093 f   WindowsDirectory.obj
 0001:000010f4       _LsaNtStatusToWinError@4   100020f4 f   advapi32:ADVAPI32.dll
 0001:000010fa       _LsaLookupAuthenticationPackage@12 100020fa f   Secur32:Secur32.dll
 0001:00001100       _LsaFreeReturnBuffer@4     10002100 f   Secur32:Secur32.dll
 0001:00001106       _LsaCallAuthenticationPackage@28 10002106 f   Secur32:Secur32.dll
 0001:0000110c       _LsaConnectUntrusted@4     1000210c f   Secur32:Secur32.dll
 0001:00001112       _htonl@4                   10002112 f   wsock32:WSOCK32.dll
 0001:00001118       @__security_check_cookie@4 10002118 f   MSVCRT:secchk.obj
 0001:00001466       __DllMainCRTStartup@12     10002466 f   MSVCRT:dll_dllmain.obj
 0001:00001489       ___raise_securityfailure   10002489 f   MSVCRT:gs_report.obj
 0001:000014b1       ___report_gsfailure        100024b1 f   MSVCRT:gs_report.obj
 0001:000015f8       ___security_init_cookie    100025f8 f   MSVCRT:gs_support.obj
 0001:00001643       _DllMain@12                10002643 f   MSVCRT:dll_dllmain_stub.obj
 0001:00001665       ?__scrt_initialize_type_info@@YAXXZ 10002665 f   MSVCRT:tncleanup.obj
 0001:00001671       ?__scrt_uninitialize_type_info@@YAXXZ 10002671 f   MSVCRT:tncleanup.obj
 0001:0000167d       ___local_stdio_scanf_options 1000267d f i MSVCRT:default_local_stdio_options.obj
 0001:00001683       ___scrt_initialize_default_local_stdio_options 10002683 f   MSVCRT:default_local_stdio_options.obj
 0001:000016e4       ___scrt_acquire_startup_lock 100026e4 f   MSVCRT:utility.obj
 0001:00001716       ___scrt_dllmain_after_initialize_c 10002716 f   MSVCRT:utility.obj
 0001:00001741       ___scrt_dllmain_before_initialize_c 10002741 f   MSVCRT:utility.obj
 0001:0000174f       ___scrt_dllmain_crt_thread_attach 1000274f f   MSVCRT:utility.obj
 0001:0000176e       ___scrt_dllmain_crt_thread_detach 1000276e f   MSVCRT:utility.obj
 0001:0000177b       ___scrt_dllmain_exception_filter 1000277b f   MSVCRT:utility.obj
 0001:000017af       ___scrt_dllmain_uninitialize_c 100027af f   MSVCRT:utility.obj
 0001:000017d2       ___scrt_dllmain_uninitialize_critical 100027d2 f   MSVCRT:utility.obj
 0001:000017df       ___scrt_initialize_crt     100027df f   MSVCRT:utility.obj
 0001:00001818       ___scrt_initialize_onexit_tables 10002818 f   MSVCRT:utility.obj
 0001:0000189f       ___scrt_is_nonwritable_in_current_image 1000289f f   MSVCRT:utility.obj
 0001:00001933       ___scrt_release_startup_lock 10002933 f   MSVCRT:utility.obj
 0001:00001950       ___scrt_uninitialize_crt   10002950 f   MSVCRT:utility.obj
 0001:00001978       ___scrt_get_dyn_tls_init_callback 10002978 f   MSVCRT:dyn_tls_init.obj
 0001:0000197e       ___scrt_fastfail           1000297e f   MSVCRT:utility_desktop.obj
 0001:00001a99       __crt_debugger_hook        10002a99 f   MSVCRT:utility_desktop.obj
 0001:00001aa1       __RTC_Initialize           10002aa1 f   MSVCRT:initsect.obj
 0001:00001acd       __RTC_Terminate            10002acd f   MSVCRT:initsect.obj
 0001:00001b00       __SEH_prolog4              10002b00 f   MSVCRT:sehprolg4.obj
 0001:00001b45       __except_handler4          10002b45 f   MSVCRT:chandler4gs.obj
 0001:00001b74       @_guard_check_icall_nop@4  10002b74 f i MSVCRT:guard_support.obj
 0001:00001b77       ___isa_available_init      10002b77 f   MSVCRT:cpu_disp.obj
 0001:00001d4b       __get_startup_argv_mode    10002d4b f   MSVCRT:argv_mode.obj
 0001:00001d4f       ___scrt_is_ucrt_dll_in_use 10002d4f f   MSVCRT:ucrt_detection.obj
 0001:00001d5b       _memcpy                    10002d5b f   vcruntime:VCRUNTIME140.dll
 0001:00001d61       ___std_type_info_destroy_list 10002d61 f   vcruntime:VCRUNTIME140.dll
 0001:00001d67       _memset                    10002d67 f   vcruntime:VCRUNTIME140.dll
 0001:00001d6d       __except_handler4_common   10002d6d f   vcruntime:VCRUNTIME140.dll
 0001:00001d73       _strlen                    10002d73 f   ucrt:api-ms-win-crt-string-l1-1-0.dll
 0001:00001d79       __initterm                 10002d79 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d7f       __initterm_e               10002d7f f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d85       __seh_filter_dll           10002d85 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d8b       __configure_narrow_argv    10002d8b f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d91       __initialize_narrow_environment 10002d91 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d97       __initialize_onexit_table  10002d97 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001d9d       __execute_onexit_table     10002d9d f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001da3       __cexit                    10002da3 f   ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0001:00001da9       ___acrt_initialize         10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___acrt_thread_attach      10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___acrt_thread_detach      10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___acrt_uninitialize       10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___acrt_uninitialize_critical 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___scrt_stub_for_acrt_initialize 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___scrt_stub_for_acrt_thread_attach 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___scrt_stub_for_acrt_thread_detach 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___scrt_stub_for_acrt_uninitialize 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___scrt_stub_for_acrt_uninitialize_critical 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___vcrt_initialize         10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___vcrt_thread_attach      10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___vcrt_thread_detach      10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___vcrt_uninitialize       10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001da9       ___vcrt_uninitialize_critical 10002da9 f   MSVCRT:ucrt_stubs.obj
 0001:00001dac       ___scrt_stub_for_is_c_termination_complete 10002dac f   MSVCRT:ucrt_stubs.obj
 0001:00001dac       __is_c_termination_complete 10002dac f   MSVCRT:ucrt_stubs.obj
 0001:00001daf       __filter_x86_sse2_floating_point_exception 10002daf f   MSVCRT:x86_exception_filter.obj
 0001:00001daf       __filter_x86_sse2_floating_point_exception_default 10002daf f   MSVCRT:x86_exception_filter.obj
 0002:00000000       __imp__LsaNtStatusToWinError@4 10003000     advapi32:ADVAPI32.dll
 0002:00000004       \177ADVAPI32_NULL_THUNK_DATA 10003004     advapi32:ADVAPI32.dll
 0002:00000008       __imp__IsDebuggerPresent@0 10003008     kernel32:KERNEL32.dll
 0002:0000000c       __imp__InitializeSListHead@4 1000300c     kernel32:KERNEL32.dll
 0002:00000010       __imp__DisableThreadLibraryCalls@4 10003010     kernel32:KERNEL32.dll
 0002:00000014       __imp__GetCurrentThreadId@0 10003014     kernel32:KERNEL32.dll
 0002:00000018       __imp__CompareFileTime@8   10003018     kernel32:KERNEL32.dll
 0002:0000001c       __imp__GetLastError@0      1000301c     kernel32:KERNEL32.dll
 0002:00000020       __imp__GetSystemTimeAsFileTime@4 10003020     kernel32:KERNEL32.dll
 0002:00000024       __imp__LocalAlloc@8        10003024     kernel32:KERNEL32.dll
 0002:00000028       __imp__LocalFree@4         10003028     kernel32:KERNEL32.dll
 0002:0000002c       __imp__FormatMessageW@28   1000302c     kernel32:KERNEL32.dll
 0002:00000030       __imp__FileTimeToSystemTime@8 10003030     kernel32:KERNEL32.dll
 0002:00000034       __imp__GetWindowsDirectoryW@8 10003034     kernel32:KERNEL32.dll
 0002:00000038       __imp__GetSystemWindowsDirectoryW@8 10003038     kernel32:KERNEL32.dll
 0002:0000003c       __imp__GetCurrentProcessId@0 1000303c     kernel32:KERNEL32.dll
 0002:00000040       __imp__QueryPerformanceCounter@4 10003040     kernel32:KERNEL32.dll
 0002:00000044       __imp__IsProcessorFeaturePresent@4 10003044     kernel32:KERNEL32.dll
 0002:00000048       __imp__TerminateProcess@8  10003048     kernel32:KERNEL32.dll
 0002:0000004c       __imp__GetCurrentProcess@0 1000304c     kernel32:KERNEL32.dll
 0002:00000050       __imp__SetUnhandledExceptionFilter@4 10003050     kernel32:KERNEL32.dll
 0002:00000054       __imp__UnhandledExceptionFilter@4 10003054     kernel32:KERNEL32.dll
 0002:00000058       \177KERNEL32_NULL_THUNK_DATA 10003058     kernel32:KERNEL32.dll
 0002:0000005c       __imp__LsaConnectUntrusted@4 1000305c     Secur32:Secur32.dll
 0002:00000060       __imp__LsaLookupAuthenticationPackage@12 10003060     Secur32:Secur32.dll
 0002:00000064       __imp__LsaFreeReturnBuffer@4 10003064     Secur32:Secur32.dll
 0002:00000068       __imp__LsaCallAuthenticationPackage@28 10003068     Secur32:Secur32.dll
 0002:0000006c       \177Secur32_NULL_THUNK_DATA 1000306c     Secur32:Secur32.dll
 0002:00000070       __imp__memset              10003070     vcruntime:VCRUNTIME140.dll
 0002:00000074       __imp___except_handler4_common 10003074     vcruntime:VCRUNTIME140.dll
 0002:00000078       __imp____std_type_info_destroy_list 10003078     vcruntime:VCRUNTIME140.dll
 0002:0000007c       __imp__memcpy              1000307c     vcruntime:VCRUNTIME140.dll
 0002:00000080       \177VCRUNTIME140_NULL_THUNK_DATA 10003080     vcruntime:VCRUNTIME140.dll
 0002:00000084       __imp__htonl@4             10003084     wsock32:WSOCK32.dll
 0002:00000088       \177WSOCK32_NULL_THUNK_DATA 10003088     wsock32:WSOCK32.dll
 0002:0000008c       __imp___cexit              1000308c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000090       __imp___seh_filter_dll     10003090     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000094       __imp___configure_narrow_argv 10003094     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00000098       __imp___execute_onexit_table 10003098     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:0000009c       __imp___initterm_e         1000309c     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a0       __imp___initterm           100030a0     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a4       __imp___initialize_narrow_environment 100030a4     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000a8       __imp___initialize_onexit_table 100030a8     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000ac       \177api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA 100030ac     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:000000b0       __imp____acrt_iob_func     100030b0     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b4       __imp____stdio_common_vfprintf 100030b4     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000b8       __imp____stdio_common_vswprintf 100030b8     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000bc       \177api-ms-win-crt-stdio-l1-1-0_NULL_THUNK_DATA 100030bc     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:000000c0       __imp__wcsncpy             100030c0     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c4       __imp__wcslen              100030c4     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000c8       __imp__strlen              100030c8     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000cc       \177api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA 100030cc     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000000d0       ___guard_check_icall_fptr  100030d0     MSVCRT:guard_support.obj
 0002:000000d4       ___castguard_check_failure_os_handled_fptr 100030d4     MSVCRT:guard_support.obj
 0002:000000d8       ___xc_a                    100030d8     MSVCRT:initializers.obj
 0002:000000dc       ___xc_z                    100030dc     MSVCRT:initializers.obj
 0002:000000e0       ___xi_a                    100030e0     MSVCRT:initializers.obj
 0002:000000e4       ___xi_z                    100030e4     MSVCRT:initializers.obj
 0002:000000e8       ___xp_a                    100030e8     MSVCRT:initializers.obj
 0002:000000ec       ___xp_z                    100030ec     MSVCRT:initializers.obj
 0002:000000f0       ___xt_a                    100030f0     MSVCRT:initializers.obj
 0002:000000f4       ___xt_z                    100030f4     MSVCRT:initializers.obj
 0002:000000f8       ??_C@_0CA@MAAHMEAA@sun?1security?1krb5?1internal?1Krb5@ 100030f8     NativeCreds.obj
 0002:00000118       ??_C@_0BJ@ONBLC@LSA?3?5Couldn?8t?5find?5Krb5?6@ 10003118     NativeCreds.obj
 0002:00000134       ??_C@_01POHCFINO@Z@        10003134     NativeCreds.obj
 0002:00000138       ??_C@_05KOLFGEDA@DEBUG@    10003138     NativeCreds.obj
 0002:00000140       ??_C@_0BO@HKKMKLPH@LSA?3?5Krb5?5has?5no?5DEBUG?5field?6@ 10003140     NativeCreds.obj
 0002:00000160       ??_C@_0CC@HHHDDMMJ@sun?1security?1krb5?1internal?1Tick@ 10003160     NativeCreds.obj
 0002:00000184       ??_C@_0BL@GBEIKIJJ@LSA?3?5Couldn?8t?5find?5Ticket?6@ 10003184     NativeCreds.obj
 0002:000001a0       ??_C@_0BD@NPHBGKOJ@LSA?3?5Found?5Ticket?6@ 100031a0     NativeCreds.obj
 0002:000001b4       ??_C@_0BM@FJBDPNKL@LSA?3?5Made?5NewWeakGlobalRef?6@ 100031b4     NativeCreds.obj
 0002:000001d0       ??_C@_0CA@JFAAMJED@sun?1security?1krb5?1PrincipalName@ 100031d0     NativeCreds.obj
 0002:000001f0       ??_C@_0CC@IGIMKEMM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 100031f0     NativeCreds.obj
 0002:00000214       ??_C@_0BK@GHFICIAG@LSA?3?5Found?5PrincipalName?6@ 10003214     NativeCreds.obj
 0002:00000230       ??_C@_0BL@FEIPNCJB@sun?1security?1util?1DerValue@ 10003230     NativeCreds.obj
 0002:0000024c       ??_C@_0BN@IMBPDDME@LSA?3?5Couldn?8t?5find?5DerValue?6@ 1000324c     NativeCreds.obj
 0002:0000026c       ??_C@_0BF@NGEKFHJH@LSA?3?5Found?5DerValue?6@ 1000326c     NativeCreds.obj
 0002:00000284       ??_C@_0CA@PAIDIBIN@sun?1security?1krb5?1EncryptionKey@ 10003284     NativeCreds.obj
 0002:000002a4       ??_C@_0CC@PKDFMIDD@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 100032a4     NativeCreds.obj
 0002:000002c8       ??_C@_0BK@BLOBEEPJ@LSA?3?5Found?5EncryptionKey?6@ 100032c8     NativeCreds.obj
 0002:000002e4       ??_C@_0CH@CHOCOAEA@sun?1security?1krb5?1internal?1Tick@ 100032e4     NativeCreds.obj
 0002:0000030c       ??_C@_0CA@EMAINPN@LSA?3?5Couldn?8t?5find?5TicketFlags?6@ 1000330c     NativeCreds.obj
 0002:0000032c       ??_C@_0BI@HAKKBGJG@LSA?3?5Found?5TicketFlags?6@ 1000332c     NativeCreds.obj
 0002:00000344       ??_C@_0CI@JKANDJAE@sun?1security?1krb5?1internal?1Kerb@ 10003344     NativeCreds.obj
 0002:0000036c       ??_C@_0CB@GDPEGAMP@LSA?3?5Couldn?8t?5find?5KerberosTime@ 1000336c     NativeCreds.obj
 0002:00000390       ??_C@_0BJ@LJOALCIE@LSA?3?5Found?5KerberosTime?6@ 10003390     NativeCreds.obj
 0002:000003ac       ??_C@_0BB@FLFAIHG@java?1lang?1String@ 100033ac     NativeCreds.obj
 0002:000003c0       ??_C@_0BL@BGKPEEPI@LSA?3?5Couldn?8t?5find?5String?6@ 100033c0     NativeCreds.obj
 0002:000003dc       ??_C@_0BD@KIJGIGII@LSA?3?5Found?5String?6@ 100033dc     NativeCreds.obj
 0002:000003f0       ??_C@_05GBDANG@?$CI?$FLB?$CJV@ 100033f0     NativeCreds.obj
 0002:000003f8       ??_C@_06FALKBLGB@?$DMinit?$DO@ 100033f8     NativeCreds.obj
 0002:00000400       ??_C@_0CJ@OMBJPAOB@LSA?3?5Couldn?8t?5find?5DerValue?5con@ 10003400     NativeCreds.obj
 0002:0000042c       ??_C@_0CB@PPLABLED@LSA?3?5Found?5DerValue?5constructor@ 1000342c     NativeCreds.obj
 0002:00000450       ??_C@_0CA@ENJPEMDC@?$CILsun?1security?1util?1DerValue?$DL?$CJV@ 10003450     NativeCreds.obj
 0002:00000470       ??_C@_0CH@CEEKCGJO@LSA?3?5Couldn?8t?5find?5Ticket?5const@ 10003470     NativeCreds.obj
 0002:00000498       ??_C@_0BP@ONIFIACG@LSA?3?5Found?5Ticket?5constructor?6@ 10003498     NativeCreds.obj
 0002:000004b8       ??_C@_0CJ@OCAKIDDP@?$CI?$FLLjava?1lang?1String?$DLLjava?1lang?1@ 100034b8     NativeCreds.obj
 0002:000004e4       ??_C@_0CO@KFILNLLM@LSA?3?5Couldn?8t?5find?5PrincipalNam@ 100034e4     NativeCreds.obj
 0002:00000514       ??_C@_0CG@BJFEPGAO@LSA?3?5Found?5PrincipalName?5constr@ 10003514     NativeCreds.obj
 0002:0000053c       ??_C@_06BDDFOFAP@?$CII?$FLB?$CJV@ 1000353c     NativeCreds.obj
 0002:00000544       ??_C@_0CO@KNCIDOBE@LSA?3?5Couldn?8t?5find?5EncryptionKe@ 10003544     NativeCreds.obj
 0002:00000574       ??_C@_0CG@BBPHBDKG@LSA?3?5Found?5EncryptionKey?5constr@ 10003574     NativeCreds.obj
 0002:0000059c       ??_C@_0CM@BLPDNPGC@LSA?3?5Couldn?8t?5find?5TicketFlags?5@ 1000359c     NativeCreds.obj
 0002:000005c8       ??_C@_0CE@NDIPGHBE@LSA?3?5Found?5TicketFlags?5construc@ 100035c8     NativeCreds.obj
 0002:000005ec       ??_C@_0BG@IKDDPPGD@?$CILjava?1lang?1String?$DL?$CJV@ 100035ec     NativeCreds.obj
 0002:00000604       ??_C@_0CN@FGFKFHHG@LSA?3?5Couldn?8t?5find?5KerberosTime@ 10003604     NativeCreds.obj
 0002:00000634       ??_C@_0CF@OPPEPPMH@LSA?3?5Found?5KerberosTime?5constru@ 10003634     NativeCreds.obj
 0002:0000065c       ??_C@_0CB@CGFFPHE@LSA?3?5Finished?5OnLoad?5processing@ 1000365c     NativeCreds.obj
 0002:00000680       ??_C@_0BMC@HPGKICPC@?$CILsun?1security?1krb5?1internal?1Ti@ 10003680     NativeCreds.obj
 0002:00000844       ??_C@_0DO@EFFGMMEG@LSA?3?5Couldn?8t?5find?5sun?4security@ 10003844     NativeCreds.obj
 0002:00000884       ??_C@_0CB@EHGDGLDH@LSA?3?5Found?5KrbCreds?5constructor@ 10003884     NativeCreds.obj
 0002:000008a8       ??_C@_0CF@LMFMNKOO@LSA?3?5Got?5handle?5to?5Kerberos?5pac@ 100038a8     NativeCreds.obj
 0002:000008d0       ??_C@_0BK@LHGHINFG@LSA?3?5Response?5size?5is?5?$CFd?6@ 100038d0     NativeCreds.obj
 0002:000008ec       ??_C@_0BN@HFCMCMJP@LsaCallAuthenticationPackage@ 100038ec     NativeCreds.obj
 0002:0000090c       ??_C@_0BA@HOOKBKLM@Protocol?5status@ 1000390c     NativeCreds.obj
 0002:0000091c       ??_C@_0CG@BNMCCPEA@LSA?3?5TICKET?5SessionKey?5KeyType?5@ 1000391c     NativeCreds.obj
 0002:00000944       ??_C@_0BM@PMFBHKAH@LSA?3?5Valid?5etype?5found?3?5?$CFd?6@ 10003944     NativeCreds.obj
 0002:00000960       ??_C@_0ED@ENPOMDNM@LSA?3?5MS?5TGT?5in?5cache?5is?5invalid@ 10003960     NativeCreds.obj
 0002:000009a4       ??_C@_0BO@JMBJFFMC@ConstructTicketRequest?5status@ 100039a4     NativeCreds.obj
 0002:000009c4       ??_C@_0CB@JAMPMMEM@LSA?3?5Response?5size?5is?5?$CFd?5for?5?$CFd@ 100039c4     NativeCreds.obj
 0002:000009e8       ??_C@_0CK@NMHODGIB@LSA?3?5Response?5etype?5is?5?$CFd?5for?5?$CF@ 100039e8     NativeCreds.obj
 0002:00000a14       ??_C@_1BA@PCNIOLBA@?$AAk?$AAr?$AAb?$AAt?$AAg?$AAt?$AA?1@ 10003a14     NativeCreds.obj
 0002:00000a24       ??_C@_0CB@EAICCFNK@Can?8t?5allocate?5memory?5for?5ticke@ 10003a24     NativeCreds.obj
 0002:00000a48       ??_C@_0BE@EAEONKAL@LsaConnectUntrusted@ 10003a48     NativeCreds.obj
 0002:00000a5c       ??_C@_08DEIMIBAF@Kerberos@ 10003a5c     NativeCreds.obj
 0002:00000a68       ??_C@_0BP@OOIEHDKO@LsaLookupAuthenticationPackage@ 10003a68     NativeCreds.obj
 0002:00000a88       ??_C@_0CF@EDKDHEBD@LSA?3?5Error?5calling?5function?5?$CFs?3@ 10003a88     NativeCreds.obj
 0002:00000ab0       ??_C@_0CD@FALAEFFE@LSA?3?5FormatMessage?5failed?5with?5@ 10003ab0     NativeCreds.obj
 0002:00000ad4       ??_C@_07NGGFFIFC@LSA?3?5?$CFS@ 10003ad4     NativeCreds.obj
 0002:00000adc       ??_C@_0CA@HOHAFDNF@Can?8t?5allocate?5memory?5for?5realm@ 10003adc     NativeCreds.obj
 0002:00000afc       ??_C@_0BN@GMKMIDMN@LSA?3?5Principal?5domain?5is?5?$CFS?6@ 10003afc     NativeCreds.obj
 0002:00000b1c       ??_C@_0BG@KJEAEOON@LSA?3?5Name?5type?5is?5?$CFx?6@ 10003b1c     NativeCreds.obj
 0002:00000b34       ??_C@_0BH@HBDBBNHO@LSA?3?5Name?5count?5is?5?$CFx?6@ 10003b34     NativeCreds.obj
 0002:00000b4c       ??_C@_0DA@HIADNNPN@LSA?3?5Can?8t?5allocate?5String?5arra@ 10003b4c     NativeCreds.obj
 0002:00000b7c       ??_C@_0CC@JPDKOOFK@LSA?3?5Session?5key?5all?5zero?4?5Stop@ 10003b7c     NativeCreds.obj
 0002:00000ba0       ??_C@_1M@HJLEHBOL@?$AA?$CF?$AA2?$AA?4?$AA2?$AAd@ 10003ba0     NativeCreds.obj
 0002:00000bb0       ??_C@_1EG@KKOCIAIL@?$AA?$CF?$AAl?$AAd?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAs@ 10003bb0     NativeCreds.obj
 0002:00000bf8       ??_C@_08HPFMLNAK@LSA?3?5?$CFS?6@ 10003bf8     NativeCreds.obj
 0002:00000c04       ??_C@_0BL@ENCPOIKC@java?1lang?1OutOfMemoryError@ 10003c04     NativeCreds.obj
 0002:00000c20       __pDefaultRawDllMain       10003c20     MSVCRT:dll_dllmain.obj
 0002:00000c20       __pRawDllMain              10003c20     MSVCRT:dll_dllmain.obj
 0002:00000c30       __load_config_used         10003c30     MSVCRT:loadcfg.obj
 0002:00000d80       ___safe_se_handler_table   10003d80     <linker-defined>
 0002:00000d84       ___volatile_metadata       10003d84     <linker-defined>
 0002:000010dc       ___rtc_iaa                 100040dc     MSVCRT:initsect.obj
 0002:000010e0       ___rtc_izz                 100040e0     MSVCRT:initsect.obj
 0002:000010e4       ___rtc_taa                 100040e4     MSVCRT:initsect.obj
 0002:000010e8       ___rtc_tzz                 100040e8     MSVCRT:initsect.obj
 0002:00001278       __IMPORT_DESCRIPTOR_ADVAPI32 10004278     advapi32:ADVAPI32.dll
 0002:0000128c       __IMPORT_DESCRIPTOR_Secur32 1000428c     Secur32:Secur32.dll
 0002:000012a0       __IMPORT_DESCRIPTOR_KERNEL32 100042a0     kernel32:KERNEL32.dll
 0002:000012b4       __IMPORT_DESCRIPTOR_WSOCK32 100042b4     wsock32:WSOCK32.dll
 0002:000012c8       __IMPORT_DESCRIPTOR_VCRUNTIME140 100042c8     vcruntime:VCRUNTIME140.dll
 0002:000012dc       __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0 100042dc     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000012f0       __IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0 100042f0     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:00001304       __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0 10004304     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0002:00001318       __NULL_IMPORT_DESCRIPTOR   10004318     advapi32:ADVAPI32.dll
 0003:00000000       ___security_cookie_complement 10005000     MSVCRT:gs_cookie.obj
 0003:00000004       ___security_cookie         10005004     MSVCRT:gs_cookie.obj
 0003:00000008       ___scrt_native_dllmain_reason 10005008     MSVCRT:utility.obj
 0003:00000010       ___isa_enabled             10005010     MSVCRT:cpu_disp.obj
 0003:00000014       ___scrt_ucrt_dll_is_in_use 10005014     MSVCRT:ucrt_stubs.obj
 0003:00000018       _derValueClass             10005018     NativeCreds.obj
 0003:0000001c       _ticketClass               1000501c     NativeCreds.obj
 0003:00000020       _principalNameClass        10005020     NativeCreds.obj
 0003:00000024       _encryptionKeyClass        10005024     NativeCreds.obj
 0003:00000028       _ticketFlagsClass          10005028     NativeCreds.obj
 0003:0000002c       _kerberosTimeClass         1000502c     NativeCreds.obj
 0003:00000030       _javaLangStringClass       10005030     NativeCreds.obj
 0003:00000034       _derValueConstructor       10005034     NativeCreds.obj
 0003:00000038       _ticketConstructor         10005038     NativeCreds.obj
 0003:0000003c       _principalNameConstructor  1000503c     NativeCreds.obj
 0003:00000040       _encryptionKeyConstructor  10005040     NativeCreds.obj
 0003:00000044       _ticketFlagsConstructor    10005044     NativeCreds.obj
 0003:00000048       _kerberosTimeConstructor   10005048     NativeCreds.obj
 0003:0000004c       _krbcredsConstructor       1000504c     NativeCreds.obj
 0003:00000050       _native_debug              10005050     NativeCreds.obj
 0003:00000580       ?__type_info_root_node@@3U__type_info_node@@A 10005580     MSVCRT:tncleanup.obj
 0003:00000588       ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA 10005588     MSVCRT:default_local_stdio_options.obj
 0003:00000590       ___scrt_current_native_startup_state 10005590     MSVCRT:utility.obj
 0003:00000594       ___scrt_native_startup_lock 10005594     MSVCRT:utility.obj
 0003:000005b4       ___scrt_debugger_hook_flag 100055b4     MSVCRT:utility_desktop.obj
 0003:000005b8       ___isa_available           100055b8     MSVCRT:cpu_disp.obj
 0003:000005bc       ___favor                   100055bc     MSVCRT:cpu_disp.obj
 0003:000005c0       ?_OptionsStorage@?1??__local_stdio_printf_options@@9@9 100055c0     <common>
 0003:000005c8       ___dyn_tls_init_callback   100055c8     <common>

 entry point at        0001:00001466

 Static symbols

 0000:ffff8000       .debug$S                   10000000     w2k_lsa_auth.exp
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     vcruntime:VCRUNTIME140.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     Secur32:Secur32.dll
 0000:ffff8000       .debug$S                   10000000     advapi32:ADVAPI32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     kernel32:KERNEL32.dll
 0000:ffff8000       .debug$S                   10000000     wsock32:WSOCK32.dll
 0001:0000046d       _ConstructTicketRequest    1000146d f   NativeCreds.obj
 0001:00001126       ?dllmain_crt_dispatch@@YGHQAUHINSTANCE__@@KQAX@Z 10002126 f   MSVCRT:dll_dllmain.obj
 0001:00001179       ?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 10002179 f   MSVCRT:dll_dllmain.obj
 0001:00001280       ?dllmain_crt_process_detach@@YAH_N@Z 10002280 f   MSVCRT:dll_dllmain.obj
 0001:00001330       ?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 10002330 f   MSVCRT:dll_dllmain.obj
 0001:0000143b       ?dllmain_raw@@YGHQAUHINSTANCE__@@KQAX@Z 1000243b f   MSVCRT:dll_dllmain.obj
 0001:000015ab       ___get_entropy             100025ab f   MSVCRT:gs_support.obj
 0001:000016a0       ?find_pe_section@@YAPAU_IMAGE_SECTION_HEADER@@QAEI@Z 100026a0 f   MSVCRT:utility.obj
 0001:00001b00       $$000000                   10002b00     MSVCRT:sehprolg4.obj
 0002:00000c24       _GS_ExceptionPointers      10003c24     MSVCRT:gs_report.obj
 0002:000010f0       __sehtable$?dllmain_crt_process_attach@@YAHQAUHINSTANCE__@@QAX@Z 100040f0     MSVCRT:dll_dllmain.obj
 0002:00001110       __sehtable$?dllmain_crt_process_detach@@YAH_N@Z 10004110     MSVCRT:dll_dllmain.obj
 0002:00001138       __sehtable$?dllmain_dispatch@@YAHQAUHINSTANCE__@@KQAX@Z 10004138     MSVCRT:dll_dllmain.obj
 0002:00001158       __sehtable$___scrt_is_nonwritable_in_current_image 10004158     MSVCRT:utility.obj
 0002:00001180       .edata                     10004180     w2k_lsa_auth.exp
 0002:000011a8       rgpv                       100041a8     w2k_lsa_auth.exp
 0002:000011b8       rgszName                   100041b8     w2k_lsa_auth.exp
 0002:000011c8       rgwOrd                     100041c8     w2k_lsa_auth.exp
 0002:000011d0       szName                     100041d0     w2k_lsa_auth.exp
 0002:000011e1       $N00001                    100041e1     w2k_lsa_auth.exp
 0002:000011ef       $N00002                    100041ef     w2k_lsa_auth.exp
 0002:000011ff       $N00003                    100041ff     w2k_lsa_auth.exp
 0002:00001235       $N00004                    10004235     w2k_lsa_auth.exp
 0002:00001414       .idata$6                   10004414     advapi32:ADVAPI32.dll
 0002:00001490       .idata$6                   10004490     Secur32:Secur32.dll
 0002:00001552       .idata$6                   10004552     kernel32:KERNEL32.dll
 0002:00001560       .idata$6                   10004560     wsock32:WSOCK32.dll
 0002:000015ba       .idata$6                   100045ba     vcruntime:VCRUNTIME140.dll
 0002:000016d8       .idata$6                   100046d8     ucrt:api-ms-win-crt-string-l1-1-0.dll
 0002:000016fa       .idata$6                   100046fa     ucrt:api-ms-win-crt-stdio-l1-1-0.dll
 0002:0000171a       .idata$6                   1000471a     ucrt:api-ms-win-crt-runtime-l1-1-0.dll
 0003:00000058       ?szMsgBuf@?1??ShowLastError@@9@9 10005058     NativeCreds.obj
 0003:00000258       ?__proc_attached@@3HA      10005258     MSVCRT:dll_dllmain.obj
 0003:00000260       _GS_ExceptionRecord        10005260     MSVCRT:gs_report.obj
 0003:000002b0       _GS_ContextRecord          100052b0     MSVCRT:gs_report.obj
 0003:00000598       ?is_initialized_as_dll@@3_NA 10005598     MSVCRT:utility.obj
 0003:00000599       ?module_local_atexit_table_initialized@@3_NA 10005599     MSVCRT:utility.obj
 0003:0000059c       ?module_local_atexit_table@@3U_onexit_table_t@@A 1000559c     MSVCRT:utility.obj
 0003:000005a8       ?module_local_at_quick_exit_table@@3U_onexit_table_t@@A 100055a8     MSVCRT:utility.obj
 0004:00000060       $R000000                   10006060     w2k_lsa_auth.dll.res
