Generated by JEB on 2019/02/01

PE: C:\Windows\System32\DDACLSys.dll Base=0x180000000 SHA-256=3495E1478C3FB6E81646468BEB4ADE9E34E84936341C6835FDB127F207532EA4
PDB: DDACLSys.pdb GUID={43979E86-9CED-B8FF-33B1965C42736B97} Age=1

227 located named symbols:
0x180004750: "`string'" ??_C@_0BJ@GOCLBIBI@Ignoring?50x?$CFx?5error?5code?$AA@
0x1800027B4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800041C0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180002A80: "__cdecl FindPESection" _FindPESection
0x1800043D0: "`string'" ??_C@_1BK@GPDLOAFO@?$AAD?$AAD?$AAA?$AAC?$AAL?$AAS?$AAy?$AAs?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x180006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004200: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x1800022B4: "__cdecl CRT_INIT" _CRT_INIT
0x180004470: "`string'" ??_C@_0BM@BDCELABI@Volume?5?$CFlS?5has?5other?5OS?5?$CFd?5?$AA@
0x180004230: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002CE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800041A0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180004190: "__cdecl _imp_FindNextVolumeW" __imp_FindNextVolumeW
0x180004820: "`string'" ??_C@_0BL@CEBLGKDI@Failed?5to?5get?5SD?0?5error?5?$CFd?$AA@
0x1800015C0: "private: unsigned long __cdecl CResDDACL::ResetDirectoryTreeSecurity(unsigned short * __ptr64,unsigned short const * __ptr64) __ptr64" ?ResetDirectoryTreeSecurity@CResDDACL@@AEAAKPEAGPEBG@Z
0x180001388: "private: unsigned long __cdecl CResDDACL::HasOtherOSVersion(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?HasOtherOSVersion@CResDDACL@@AEAAKPEBGPEAH@Z
0x180005294: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x1800051E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800041F8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800042A8: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x180004370: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004460: "`string'" ??_C@_1M@FFGHOEMJ@?$AAW?$AAi?$AAn?$AAN?$AAT?$AA?$AA@
0x1800041B8: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x1800042D8: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x1800047C0: "`string'" ??_C@_0DC@HNNKLJDA@Volume?5is?5not?5Fixed?5or?5removable@
0x180002A6D: "__cdecl XcptFilter" _XcptFilter
0x180004378: "__cdecl _xc_a" __xc_a
0x180004444: "`string'" ??_C@_05MMGMFDFP@Info?7?$AA@
0x180002A67: "__cdecl callnewh" _callnewh
0x180004438: "`string'" ??_C@_08IJAMDLAD@Warning?7?$AA@
0x180002CBB: memcpy
0x180001C2C: "public: unsigned long __cdecl CResDDACL::HandleEachVolume(int,unsigned short const * __ptr64) __ptr64" ?HandleEachVolume@CResDDACL@@QEAAKHPEBG@Z
0x180004358: "__cdecl _imp_memset" __imp_memset
0x1800041D0: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x180002C25: "__cdecl initterm" _initterm
0x180004730: "`string'" ??_C@_0BK@LNDILFBK@Volume?5is?5Removable?5Drive?$AA@
0x18000521C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800065C8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004298: "__cdecl _imp_Sleep" __imp_Sleep
0x180004398: "__cdecl _xi_z" __xi_z
0x180004158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800027AE: "__cdecl _C_specific_handler" __C_specific_handler
0x180001060: "private: unsigned long __cdecl CResDDACL::CreateLogFile(void) __ptr64" ?CreateLogFile@CResDDACL@@AEAAKXZ
0x1800045C0: "`string'" ??_C@_1BFC@OPJCCNCN@?$AAD?$AA?3?$AAA?$AAI?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AAI?$AAO?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB@
0x180004BD0: "`string'" ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1800014AC: "private: unsigned long __cdecl CResDDACL::HasXPDefaultDACL(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?HasXPDefaultDACL@CResDDACL@@AEAAKPEBGPEAH@Z
0x180002A61: malloc
0x1800041E0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180004268: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180004178: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x180002C60: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005258: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180002A73: "__cdecl amsg_exit" _amsg_exit
0x180004310: "__cdecl _imp__callnewh" __imp__callnewh
0x1800019A8: "private: unsigned long __cdecl CResDDACL::TestACL(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?TestACL@CResDDACL@@AEAAKPEBGPEAH@Z
0x180004BD8: "`string'" ??_C@_0CF@HCGKFKBD@Error?5process?5volume?5?$CFlS?0?5Error?5@
0x180004170: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180004270: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004160: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800047F8: "`string'" ??_C@_0CB@JBJEPPGO@Failed?5to?5convert?5SDDL?0?5Error?5?$CFd@
0x180004238: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004840: "`string'" ??_C@_0BN@IFEEPEIB@Failed?5to?5get?5DACL?0?5error?5?$CFd?$AA@
0x1800065B8: "__cdecl _native_startup_lock" __native_startup_lock
0x180002120: DllMain
0x180001714: "private: unsigned long __cdecl CResDDACL::IsVolumeSystem(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?IsVolumeSystem@CResDDACL@@AEAAKPEBGPEAH@Z
0x180004AE0: "`string'" ??_C@_1M@OAMLNNNM@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x180004330: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1800047A8: "`string'" ??_C@_0BD@CELHFBED@Volume?5is?5not?5ntfs?$AA@
0x180004348: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800043F0: "`string'" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180004288: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004218: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004490: "`string'" ??_C@_0BA@GEBMGBKK@DACL?5is?5missing?$AA@
0x1800042C0: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x180001B14: "public: unsigned long __cdecl CResDDACL::Initialize(void) __ptr64" ?Initialize@CResDDACL@@QEAAKXZ
0x180004148: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180002240: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180006000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002C40: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180004450: "`string'" ??_C@_1BA@HLGGGPNC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x180005320: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180004B10: "`string'" ??_C@_1CC@OKKIFLHO@?$AAW?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x18000530C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180004228: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180002B20: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800052A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800048E8: "`string'" ??_C@_0BB@FCEKCFAI@Volume?5is?5system?$AA@
0x180004400: "`string'" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x180002220: "unsigned long __cdecl DDACLSys_Offline_Specialize(struct _SYSPREP_OS_OFFLINE * __ptr64)" ?DDACLSys_Offline_Specialize@@YAKPEAU_SYSPREP_OS_OFFLINE@@@Z
0x1800024F0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004318: "__cdecl _imp__initterm" __imp__initterm
0x180004AC0: "`string'" ??_C@_1BK@BHBNHDAL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x180001A64: "private: unsigned long __cdecl CResDDACL::ReadSystemPartition(unsigned short * __ptr64) __ptr64" ?ReadSystemPartition@CResDDACL@@AEAAKPEAG@Z
0x180004168: "__cdecl _imp_FindFirstVolumeW" __imp_FindFirstVolumeW
0x18000213C: "unsigned long __cdecl CallFixACL(int,unsigned short const * __ptr64,struct HKEY__ * __ptr64)" ?CallFixACL@@YAKHPEBGPEAUHKEY__@@@Z
0x180004BB8: "`string'" ??_C@_0BC@NOGPLEKA@Mount?5Point?5are?5?3?$AA@
0x180005280: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004140: SHLWAPI_NULL_THUNK_DATA
0x1800065A8: "__cdecl _onexitend" __onexitend
0x180004A80: "`string'" ??_C@_0CG@LMJLIJIH@Failed?5to?5Apply?5Default?5ACL?4?5Err@
0x180004368: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004220: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800044A0: "`string'" ??_C@_0BH@EJHOJEPD@SDDL?5for?5Volume?5is?5?$CFlS?$AA@
0x180004C28: "`string'" ??_C@_0CF@IMPAFAFL@SysPrep?5Disabled?5key?5found?0?5valu@
0x1800042C8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004388: "__cdecl _xi_a" __xi_a
0x1800042B0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004120: "__cdecl _imp_SetNamedSecurityInfoW" __imp_SetNamedSecurityInfoW
0x1800042E0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800052E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180002964: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1800065D0: "__cdecl pRawDllMain" _pRawDllMain
0x180004180: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800048A0: "`string'" ??_C@_0BL@HILKEBML@Failed?5to?5allocated?5memory?$AA@
0x180002238: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180004338: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180004138: "__cdecl _imp_IsOS" __imp_IsOS
0x180002790: "__cdecl _security_check_cookie" __security_check_cookie
0x180004380: "__cdecl _xc_z" __xc_z
0x180001E90: "public: unsigned long __cdecl CResDDACL::EnumerateVolume(int) __ptr64" ?EnumerateVolume@CResDDACL@@QEAAKH@Z
0x180001F78: "public: void __cdecl CResDDACL::ReadSysPrepOptOutKey(int * __ptr64) __ptr64" ?ReadSysPrepOptOutKey@CResDDACL@@QEAAXPEAH@Z
0x180005244: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180004240: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004208: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800042B8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004AA8: "`string'" ??_C@_0BE@JEIDFOEI@Default?5ACL?5Applied?$AA@
0x1800041F0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180004900: "`string'" ??_C@_0BF@NGDHILKJ@Volume?5is?5not?5system?$AA@
0x180004860: "`string'" ??_C@_0CG@JCBNNNOO@SetNamedSecurityInfo?5Failed?0?5err@
0x180004290: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180004780: "`string'" ??_C@_0P@MHEGODLO@Volume?5is?5ntfs?$AA@
0x180004BA0: "`string'" ??_C@_0BD@DPGLKPIG@Volume?5name?5is?5?$CFlS?$AA@
0x1800052D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000444C: "`string'" ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x180004250: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800043A0: "__cdecl _guard_fids_table" __guard_fids_table
0x180004360: msvcrt_NULL_THUNK_DATA
0x180004020: "__cdecl load_config_used" _load_config_used
0x1800041C8: "__cdecl _imp_GetVolumePathNamesForVolumeNameW" __imp_GetVolumePathNamesForVolumeNameW
0x180005230: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800011DC: "public: void __cdecl CResDDACL::logPrintA(unsigned long,char const * __ptr64,...) __ptr64" ?logPrintA@CResDDACL@@QEAAXKPEBDZZ
0x1800048C0: "`string'" ??_C@_0CG@CGHINGLO@Failed?5to?5query?5Device?5Name?0?5err@
0x180001030: "public: virtual __cdecl CResDDACL::~CResDDACL(void) __ptr64" ??1CResDDACL@@UEAA@XZ
0x180004770: "`string'" ??_C@_19FMGGNPBF@?$AAn?$AAt?$AAf?$AAs?$AA?$AA@
0x18000526C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180004128: "__cdecl _imp_GetNamedSecurityInfoW" __imp_GetNamedSecurityInfoW
0x180004320: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004210: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002034: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180004918: "`string'" ??_C@_0CC@LPAEEBMN@Volume?5?$CFlS?5has?5Default?5XP?5DACL?5?$CF@
0x1800020A8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180004280: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004248: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004718: "`string'" ??_C@_0BG@MDEONHGM@Volume?5is?5Fixed?5Drive?$AA@
0x180004960: "`string'" ??_C@_1BBO@GOFGCKGB@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AAI?$AAO?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ@
0x180002A5B: free
0x180004410: "`string'" ??_C@_0BK@CDGPNFBN@?$CF02u?1?$CF02u?5?$CF02u?3?$CF02u?3?$CF02u?7?$AA@
0x180004278: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800041B0: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x180002C30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800042F0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180005208: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180001000: "public: virtual void * __ptr64 __cdecl CResDDACL::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCResDDACL@@UEAAPEAXI@Z
0x180004350: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004328: "__cdecl _imp_memcpy" __imp_memcpy
0x1800042D0: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x180004888: "`string'" ??_C@_0BG@KBGPBMBM@Failed?5to?5open?5Volume?$AA@
0x1800042E8: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1800065A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUmgnzigzUwwzxonrtUwwzxohbhUlyquivUznwGEUhgwzucOlyq@DDACLSys" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUmgnzigzUwwzxonrtUwwzxohbhUlyquivUznwGEUhgwzucOlyq@DDACLSys
0x180006008: "__cdecl _security_cookie" __security_cookie
0x180004260: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800041D8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800041E8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800051F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180004188: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1800065B0: "__cdecl _onexitbegin" __onexitbegin
0x180004790: "`string'" ??_C@_0BE@MNADOBDE@Volume?5is?5read?5only?$AA@
0x180004B70: "`string'" ??_C@_0CJ@GDGBBKJD@Failed?5to?5get?5system?5partition?0?5@
0x180004340: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180004B38: "`string'" ??_C@_0DF@BIMDHENG@Migrating?5Data?5Drive?5ACL?5is?5disa@
0x180004150: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004940: "`string'" ??_C@_0BF@PMIOMHGJ@Applying?5Default?5ACL?$AA@
0x180004258: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002B50: "__cdecl _security_init_cookie" __security_init_cookie
0x18000442C: "`string'" ??_C@_06FEKKIFBI@Error?7?$AA@
0x1800051CC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800042F8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180001000: "public: virtual void * __ptr64 __cdecl CResDDACL::`vector deleting destructor'(unsigned int) __ptr64" ??_ECResDDACL@@UEAAPEAXI@Z
0x180004308: "__cdecl _imp_malloc" __imp_malloc
0x180004130: ADVAPI32_NULL_THUNK_DATA
0x180004198: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1800027F0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800065C0: "__cdecl _native_startup_state" __native_startup_state
0x180004C00: "`string'" ??_C@_1CE@PJFDFHIF@?$AAD?$AAD?$AAA?$AAC?$AAL?$AAS?$AAy?$AAs?$AA_?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800044C0: "`string'" ??_C@_1PG@DNKHOJCM@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS@
0x1800041A8: "__cdecl _imp_FindVolumeClose" __imp_FindVolumeClose
0x180004AF0: "`string'" ??_C@_1CA@BCILKFEE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180004010: "const CResDDACL::`vftable'" ??_7CResDDACL@@6B@
0x180002210: "unsigned long __cdecl DDACLSys_Specialize(int)" ?DDACLSys_Specialize@@YAKH@Z
0x180004BCC: "`string'" ??_C@_03JJAMEDDM@?$CFlS?$AA@
0x1800052F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004300: "__cdecl _imp_free" __imp_free
0x180002AD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800042A0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800052BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180002CC1: memset
0x180005334: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]