Generated by JEB on 2019/08/01

PE: C:\Windows\System32\change.exe Base=0x140000000 SHA-256=17CAC86C16CF40741B5E0FD87FF02830694E1DA2715F75E18231867B79E6DF45
PDB: change.pdb GUID={C1237D2A-BB08-B1FE-CDE64DB3C9D75623} Age=1

165 located named symbols:
0x1400036B8: " %s" ??_C@_17ENEANJDH@?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x14000286C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002680: "__cdecl FindPESection" _FindPESection
0x140003278: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003208: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400036C0: " | %s" ??_C@_1M@KHPDHONP@?$AA?5?$AA?$HM?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x140002B10: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140005048: "__cdecl commode" _commode
0x1400031C0: "__cdecl _imp_GetFileType" __imp_GetFileType
0x1400032C0: "__cdecl _imp_wcschr" __imp_wcschr
0x140003150: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002550: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140003348: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140005054: "__cdecl fmode" _fmode
0x140003180: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1400032F8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140001008: main
0x1400032F0: "__cdecl _imp__ultoa" __imp__ultoa
0x1400025AE: "__cdecl XcptFilter" _XcptFilter
0x140003350: "__cdecl _xc_a" __xc_a
0x1400031A8: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140001D8C: My_wprintf
0x1400033C0: "System\CurrentControlSet\Control" ??_C@_1IE@PFDBFJLF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140003330: "__cdecl _imp_memset" __imp_memset
0x14000283F: "__cdecl initterm" _initterm
0x140005600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140003218: "__cdecl _imp_Sleep" __imp_Sleep
0x140003380: "__cdecl _xi_z" __xi_z
0x140003328: "__cdecl _imp___iob_func" __imp___iob_func
0x140003130: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140003610: "ErrorOutFromResource:GetResource" ??_C@_1IK@HELNDLNO@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAO?$AAu?$AAt?$AAF?$AAr?$AAo?$AAm?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?3?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe@
0x1400031C8: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x14000284B: "__cdecl _C_specific_handler" __C_specific_handler
0x1400036B4: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140002AED: memmove
0x140001B30: FindMsg
0x140002A8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140001994: ErrorPrintf
0x1400034F0: "GetResourceStringFromUtilDll: In" ??_C@_1IM@LKEOIJAK@?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAr?$AAo?$AAm?$AAU?$AAt?$AAi?$AAl?$AAD?$AAl?$AAl?$AA?3?$AA?5?$AAI?$AAn@
0x140002663: "__cdecl amsg_exit" _amsg_exit
0x140001EE0: MassageCommandLine
0x140003288: "__cdecl _imp_exit" __imp_exit
0x1400036A0: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x140003BA4: "__cdecl _IMPORT_DESCRIPTOR_REGAPI" __IMPORT_DESCRIPTOR_REGAPI
0x140003128: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000369C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x1400055F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140003310: "__cdecl _imp_setlocale" __imp_setlocale
0x140002590: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400032E0: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x1400032B0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400031F0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140003220: KERNEL32_NULL_THUNK_DATA
0x140003188: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002A68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140003320: "__cdecl _imp__commode" __imp__commode
0x1400032A0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140001A78: PutStdErr
0x140003210: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140003170: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140003308: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x140002730: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400024F0: mainCRTStartup
0x1400055D8: NtDllHandle
0x1400031B8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140005050: "__cdecl newmode" _newmode
0x1400055D0: pProgList
0x140002A38: "__cdecl _acrt_iob_func" __acrt_iob_func
0x1400032A8: "__cdecl _imp__initterm" __imp__initterm
0x140003280: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140002670: "__cdecl setargv" _setargv
0x140003160: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140003758: "NTDLL" ??_C@_1M@OJAIJKMJ@?$AAN?$AAT?$AAD?$AAL?$AAL?$AA?$AA@
0x140001DD0: My_fwprintf
0x1400055E0: "__cdecl _onexitend" __onexitend
0x140003290: "__cdecl _imp__exit" __imp__exit
0x140003340: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003238: REGAPI_NULL_THUNK_DATA
0x140003118: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003248: USER32_NULL_THUNK_DATA
0x140003228: "__cdecl _imp_RegFreeUtilityCommandList" __imp_RegFreeUtilityCommandList
0x140003300: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x1400033B8: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140003368: "__cdecl _xi_a" __xi_a
0x1400031F8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002670: "__cdecl matherr" _matherr
0x1400031A0: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x1400032D8: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x140002520: "__cdecl _security_check_cookie" __security_check_cookie
0x140003140: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x140003360: "__cdecl _xc_z" __xc_z
0x1400032C8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003200: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140003168: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x1400031D0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400016D0: ExecProgram
0x140003178: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x140003388: "__cdecl _guard_fids_table" __guard_fids_table
0x1400032E8: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140003338: msvcrt_NULL_THUNK_DATA
0x140003010: "__cdecl load_config_used" _load_config_used
0x140003448: "CHANGE" ??_C@_1O@NGALLLIG@?$AAC?$AAH?$AAA?$AAN?$AAG?$AAE?$AA?$AA@
0x140003458: "utildll.dll" ??_C@_1BI@OFICJFJG@?$AAu?$AAt?$AAi?$AAl?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140003BB8: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140003230: "__cdecl _imp_RegQueryUtilityCommandList" __imp_RegQueryUtilityCommandList
0x140001600: ErrorOutFromResource
0x140003270: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140003768: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x140003240: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400031E8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400031E0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000504C: "__cdecl dowildcard" _dowildcard
0x140005620: MsgBuf
0x140003250: "__cdecl _imp_vfwprintf" __imp_vfwprintf
0x140003138: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140002860: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400025BC: RtlpImageNtHeader
0x1400031B0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400033B0: ".OCP" ??_C@_04EMDMLPCB@?4OCP?$AA@
0x140003268: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140003148: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x140003258: "__cdecl _imp_fwprintf" __imp_fwprintf
0x140002A5C: "__cdecl _iob_func" __iob_func
0x140005008: "__cdecl _security_cookie" __security_cookie
0x140003190: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400031D8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x140003198: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1400055E8: "__cdecl _onexitbegin" __onexitbegin
0x140001DF8: My_vfwprintf
0x1400036D0: " } " ??_C@_17LLKKLMLL@?$AA?5?$AA?$HN?$AA?6?$AA?$AA@
0x140003120: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140003BCC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140002764: "__cdecl _security_init_cookie" __security_init_cookie
0x140003580: "GetResourceStringFromUtilDll: Lo" ??_C@_1IM@NKKDFGJP@?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAr?$AAo?$AAm?$AAU?$AAt?$AAi?$AAl?$AAD?$AAl?$AAl?$AA?3?$AA?5?$AAL?$AAo@
0x140003470: "GetResourceStringFromUtilDll: Lo" ??_C@_1HI@PNJKHAPO@?$AAG?$AAe?$AAt?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAr?$AAo?$AAm?$AAU?$AAt?$AAi?$AAl?$AAD?$AAl?$AAl?$AA?3?$AA?5?$AAL?$AAo@
0x140003298: "__cdecl _imp__cexit" __imp__cexit
0x140002618: "__cdecl get_image_app_type" _get_image_app_type
0x140003BE0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400032D0: "__cdecl _imp_memmove" __imp_memmove
0x140003260: "__cdecl _imp_malloc" __imp_malloc
0x1400028B0: "__cdecl _report_gsfailure" __report_gsfailure
0x140003158: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x1400055F8: "__cdecl _native_startup_state" __native_startup_state
0x1400032B8: "__cdecl _imp__fmode" __imp__fmode
0x1400036A8: "%s {" ??_C@_19CMEMOLMF@?$AA?$CF?$AAs?$AA?5?$AA?$HL?$AA?$AA@
0x140003318: "__cdecl _imp_free" __imp_free
0x1400026D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000152C: GetResourceStringFromUtilDll
0x1400036E0: "{ErrorPrintf(): LoadString faile" ??_C@_1HC@PAPHOGPH@?$AA?$HL?$AAE?$AAr?$AAr?$AAo?$AAr?$AAP?$AAr?$AAi?$AAn?$AAt?$AAf?$AA?$CI?$AA?$CJ?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140002AF9: memset
0x140003BF4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]