Generated by JEB on 2019/08/01
PE: C:\Windows\System32\openfiles.exe Base=0x140000000 SHA-256=4B27C43035B1C35D4F3185709F7D097BB52751A066180F4979A5AD49FF8C5A62
PDB: OpnFiles.pdb GUID={CA138CC7-55A9-C391-6D7554B534575899} Age=1
487 located named symbols:
0x140007134: WNetSaveLastError
0x140013900: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline
0x14000FBF0: "\StringFileInfo\%04x%04x\Interna" ??_C@_1EM@LGBMMPEJ@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa@
0x14000B940: DynArrayRemove
0x14000838C: StringCompareExW
0x14000D568: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000F4D8: "__cdecl _imp_?GetData@CHString@@IEBAPEAUCHStringData@@XZ" __imp_?GetData@CHString@@IEBAPEAUCHStringData@@XZ
0x14000F530: "__cdecl _imp_wcstod" __imp_wcstod
0x14000F300: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x140006520: "void __cdecl FormatFileName(unsigned short * __ptr64,unsigned long,long)" ?FormatFileName@@YAXPEAGKJ@Z
0x14000D980: "__cdecl FindPESection" _FindPESection
0x140012000: "__vectorcall ??_R0?AVCHeap_Exception@" ??_R0?AVCHeap_Exception@@@8
0x14000F1D0: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x14000C4F4: "__cdecl _ShowAsTable" __ShowAsTable
0x14000B6C0: DynArrayAppendDWORD
0x14000998C: CloseConnection
0x140010E88: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x14000FC80: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x14000D970: "__cdecl wsetargv" _wsetargv
0x140012040: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140004800: "int __cdecl GetHostName(unsigned short * __ptr64)" ?GetHostName@@YAHPEAG@Z
0x14000F5C8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000F400: "__cdecl _imp_CharUpperW" __imp_CharUpperW
0x140010E4C: "__cdecl _IMPORT_DESCRIPTOR_MPR" __IMPORT_DESCRIPTOR_MPR
0x14000F4C0: "__cdecl _imp_??0CHString@@QEAA@PEBG@Z" __imp_??0CHString@@QEAA@PEBG@Z
0x14000F200: "__cdecl _imp_GetConsoleScreenBufferInfo" __imp_GetConsoleScreenBufferInfo
0x14000F378: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140007ADC: FindString2
0x14000D4E8: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000F1C0: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x14000F640: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x14000D168: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x14000DCD0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000F3E0: "__cdecl _imp_StrChrIW" __imp_StrChrIW
0x14000F178: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x14000F2F8: "__cdecl _imp_CompareStringA" __imp_CompareStringA
0x14000FAC8: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x14000FAF0: "|%s|" ??_C@_19ONMJPOOG@?$AA?$HM?$AA?$CF?$AAs?$AA?$HM?$AA?$AA@
0x140008D5C: FreeMemory
0x14000F568: "__cdecl _imp_wcstoul" __imp_wcstoul
0x14000135C: "int __cdecl ProcessLocal(unsigned long,unsigned short const * __ptr64 * __ptr64 const)" ?ProcessLocal@@YAHKQEAPEBG@Z
0x14000F950: "UnknownTypeIdx" ??_C@_1BO@FBGPAPHB@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AAT?$AAy?$AAp?$AAe?$AAI?$AAd?$AAx?$AA?$AA@
0x140012620: "__cdecl commode" _commode
0x14000F660: "__cdecl _imp_NetServerGetInfo" __imp_NetServerGetInfo
0x14000F458: "__cdecl _imp_WSALookupServiceBeginW" __imp_WSALookupServiceBeginW
0x14000B8A8: DynArrayAddColumns
0x14000F320: "__cdecl _imp_GetFileType" __imp_GetFileType
0x14000D174: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x14000FCA8: ""%s"" ??_C@_19GBMGDAIM@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?$AA@
0x14000F430: VERSION_NULL_THUNK_DATA
0x14000F540: "__cdecl _imp__memicmp" __imp__memicmp
0x14000F450: "__cdecl _imp_GetAddrInfoW" __imp_GetAddrInfoW
0x1400038F4: DisconnectOpenFile
0x14000B27C: "__cdecl _DynArrayGetItem" __DynArrayGetItem
0x14000D850: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000F688: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000FB80: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x14001262C: "__cdecl fmode" _fmode
0x14000F390: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140010EC4: "__cdecl _IMPORT_DESCRIPTOR_srvcli" __IMPORT_DESCRIPTOR_srvcli
0x140007BDC: TrimString2
0x14000F2A8: "__cdecl _imp_HeapValidate" __imp_HeapValidate
0x14000FB0C: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x1400096C8: GetTargetVersion
0x14000FBB8: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14000CBCC: "__cdecl _ShowAsList" __ShowAsList
0x140008FE8: GetBufferSize
0x1400136B0: "unsigned short * szTypeName" ?szTypeName@@3PAGA
0x14000D8AE: "__cdecl XcptFilter" _XcptFilter
0x14000F690: "__cdecl _xc_a" __xc_a
0x14000BD50: DynArrayGetItemType2
0x14000BDA4: PrepareString
0x140007D00: AdjustStringLength
0x14000F718: "SHOW_STATUS" ??_C@_1BI@BFLGGCFC@?$AAS?$AAH?$AAO?$AAW?$AA_?$AAS?$AAT?$AAA?$AAT?$AAU?$AAS?$AA?$AA@
0x14000ABBC: MatchOption
0x14000F248: "__cdecl _imp_FindClose" __imp_FindClose
0x14000F288: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x14000F3C8: "__cdecl _imp_StrStrIW" __imp_StrStrIW
0x1400049EC: "struct tagBLOB * __ptr64 __cdecl GetXYDataEnt(unsigned long,unsigned short * __ptr64,struct _GUID * __ptr64,unsigned short * __ptr64)" ?GetXYDataEnt@@YAPEAUtagBLOB@@KPEAGPEAU_GUID@@0@Z
0x14000B9AC: DynArrayGetCount2
0x140007088: SaveLastError
0x140007638: AsFloat
0x14000D831: "__cdecl callnewh" _callnewh
0x14000F438: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x140010DB8: "__stdcall CT??_R0?AVCHeap_Exception@@" _CT??_R0?AVCHeap_Exception@@@84
0x140007370: IsWin2KOrLater
0x1400078A4: FindChar2
0x14000DC2C: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x14000F5A0: "__cdecl _imp_memset" __imp_memset
0x14000BA2C: DynArrayItemAsSystemTime
0x14000DB3F: "__cdecl initterm" _initterm
0x140007430: GetResString
0x14000FC40: ".EXE" ??_C@_19GAILEKPG@?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x14000F470: "__cdecl _imp_WSALookupServiceNextW" __imp_WSALookupServiceNextW
0x1400138F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000F340: "__cdecl _imp_Sleep" __imp_Sleep
0x14000F6C0: "__cdecl _xi_z" __xi_z
0x14000F980: "%ws" ??_C@_17EEOGHOKP@?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14000F548: "__cdecl _imp___iob_func" __imp___iob_func
0x14000F348: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140006CA4: GetInternalTemporaryBuffer
0x14000DB4B: "__cdecl _C_specific_handler" __C_specific_handler
0x14000F308: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x140004B00: "int __cdecl DoLocalOpenFiles(unsigned long,int,int,unsigned short const * __ptr64)" ?DoLocalOpenFiles@@YAHKHHPEBG@Z
0x14000AE00: ReleaseAllocatedMemory
0x14000F8B0: "
" ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x14000F730: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x14000790C: InString
0x14000F2B0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000F6FC: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x140002CD0: "int __cdecl ProcessOptions(unsigned long,unsigned short const * __ptr64 * __ptr64 const,int * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int * __ptr64)" ?ProcessOptions@@YAHKQEAPEBGPEAHPEAPEAG2222221@Z
0x14000F4B8: "__cdecl _imp_??4CHString@@QEAAAEBV0@PEBG@Z" __imp_??4CHString@@QEAAAEBV0@PEBG@Z
0x14000D825: malloc
0x14000266C: "int __cdecl ProcessOptions(unsigned long,unsigned short const * __ptr64 * __ptr64 const,int * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int * __ptr64,int * __ptr64,int * __ptr64)" ?ProcessOptions@@YAHKQEAPEBGPEAHPEAPEAG222111@Z
0x140009338: IsValidServer
0x14000F190: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000F238: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x14000DBC8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140010EB0: "__cdecl _IMPORT_DESCRIPTOR_VERSION" __IMPORT_DESCRIPTOR_VERSION
0x14000FB28: cwszNullString
0x14000F4E8: "__cdecl _imp_??YCHString@@QEAAAEBV0@PEBG@Z" __imp_??YCHString@@QEAAAEBV0@PEBG@Z
0x140013280: "struct _LIST_ENTRY ProcessListHead" ?ProcessListHead@@3U_LIST_ENTRY@@A
0x14000F5F8: "__cdecl _imp__wgetcwd" __imp__wgetcwd
0x140005360: "void __cdecl DumpHandles(unsigned long,int,int)" ?DumpHandles@@YAXKHH@Z
0x14000F618: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x140007290: ReleaseGlobals
0x14000B4E0: DynArrayRemoveAll
0x14000B5C4: DynArrayAppendString
0x14000F198: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14000D963: "__cdecl amsg_exit" _amsg_exit
0x14000F5E8: "__cdecl _imp__callnewh" __imp__callnewh
0x14000B904: DynArrayAppendString2
0x14000F8A0: "%s%s%s" ??_C@_1O@JBBHAGJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x14000F2E8: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x14000A288: VerifyParserOptions
0x140008724: ShowMessageEx
0x14000F9E8: "SELF" ??_C@_19OJMOKLLN@?$AAS?$AAE?$AAL?$AAF?$AA?$AA@
0x140007F88: IsConsoleHandle
0x14000F940: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x14000F5B8: "__cdecl _imp_exit" __imp_exit
0x14000F328: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14000B794: DynArrayAppendDouble
0x14000FB04: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x140010DE0: "__cdecl TI1?AVCHeap_Exception@@" _TI1?AVCHeap_Exception@@
0x14000FC70: "%f" ??_C@_15HBBGCAG@?$AA?$CF?$AAf?$AA?$AA@
0x140012640: "struct _UNICODE_STRING UnknownTypeIndex" ?UnknownTypeIndex@@3U_UNICODE_STRING@@A
0x140013290: "void * __ptr64 __ptr64 hStdHandle" ?hStdHandle@@3PEAXEA
0x14000FAE8: "%s " ??_C@_17GMPJMPF@?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x14000F218: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x14000F3B8: "__cdecl _imp_WNetGetLastErrorW" __imp_WNetGetLastErrorW
0x14000F250: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400132AE: "unsigned char fAnonymousToo" ?fAnonymousToo@@3EA
0x14000F310: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x140003DA4: "int __cdecl DoQuery(unsigned short * __ptr64,int,unsigned short * __ptr64,int)" ?DoQuery@@YAHPEAGH0H@Z
0x14000FCB4: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x14000F4E0: "__cdecl _imp_?Left@CHString@@QEBA?AV1@H@Z" __imp_?Left@CHString@@QEBA?AV1@H@Z
0x1400138E8: "__cdecl _native_startup_lock" __native_startup_lock
0x14000F3D8: "__cdecl _imp_StrStrW" __imp_StrStrW
0x14000FA68: "REMOTE INTERACTIVE LOGON" ??_C@_1DC@HOPKEFAL@?$AAR?$AAE?$AAM?$AAO?$AAT?$AAE?$AA?5?$AAI?$AAN?$AAT?$AAE?$AAR?$AAA?$AAC?$AAT?$AAI?$AAV?$AAE?$AA?5?$AAL?$AAO?$AAG?$AAO?$AAN?$AA?$AA@
0x14000F3F0: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x140005F84: "int __cdecl GetCompleteFileName(unsigned short const * __ptr64,unsigned short * __ptr64,struct DriveTypeInfo * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?GetCompleteFileName@@YAHPEBGPEAGPEAUDriveTypeInfo@@K00PEAH@Z
0x14000FC98: "%s:" ??_C@_17DJGLCLAO@?$AA?$CF?$AAs?$AA?3?$AA?$AA@
0x140009424: IsValidIPAddress
0x14000D890: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000BAA8: DynArrayItemAsStringEx
0x14000F590: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000F620: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002054: "int __cdecl ProcessOptions(unsigned long,unsigned short const * __ptr64 * __ptr64 const,unsigned short * __ptr64 * __ptr64)" ?ProcessOptions@@YAHKQEAPEBGPEAPEAG@Z
0x140007FE0: IsConsoleFile
0x14000F3A0: KERNEL32_NULL_THUNK_DATA
0x14000F3B0: "__cdecl _imp_WNetAddConnection2W" __imp_WNetAddConnection2W
0x14000F330: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000D180: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140010E74: "__cdecl _IMPORT_DESCRIPTOR_framedynos" __IMPORT_DESCRIPTOR_framedynos
0x14000DBA4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000FCC0: "__cdecl _real@bff0000000000000" __real@bff0000000000000
0x1400132B0: "unsigned short * SearchName" ?SearchName@@3PAGA
0x14000F3D0: "__cdecl _imp_StrChrW" __imp_StrChrW
0x14000F9C8: "ANONYMOUS LOGON" ??_C@_1CA@NKFDDABO@?$AAA?$AAN?$AAO?$AAN?$AAY?$AAM?$AAO?$AAU?$AAS?$AA?5?$AAL?$AAO?$AAG?$AAO?$AAN?$AA?$AA@
0x14000F580: "__cdecl _imp__commode" __imp__commode
0x140012050: "struct _AFPROTOCOLS * afp" ?afp@@3PAU_AFPROTOCOLS@@A
0x140010E9C: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x14000C308: "__cdecl _DisplayTextWrapped" __DisplayTextWrapped
0x14000F560: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000F668: "__cdecl _imp_NetFileEnum" __imp_NetFileEnum
0x140010DFC: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14000CED0: "__cdecl _ShowAsCSV" __ShowAsCSV
0x14000FA20: "RESTRICTED" ??_C@_1BG@OCCAHMJC@?$AAR?$AAE?$AAS?$AAT?$AAR?$AAI?$AAC?$AAT?$AAE?$AAD?$AA?$AA@
0x14000F220: "__cdecl _imp_GetLogicalDrives" __imp_GetLogicalDrives
0x14000F370: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000DA30: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000FB14: "" ??_C@_13EDGMBIFK@?$AA?$AH?$AA?$AA@
0x140008EE0: ReallocateMemory
0x1400076F0: AsLong
0x140009170: IsLocalSystem
0x14000F638: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x14000F3C0: MPR_NULL_THUNK_DATA
0x14000F6F0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x14000F928: "GlobalFlag" ??_C@_1BG@OGBFMEDC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x140002248: "int __cdecl ProcessOptions(unsigned long,unsigned short const * __ptr64 * __ptr64 const,int * __ptr64,int * __ptr64,int * __ptr64,int * __ptr64)" ?ProcessOptions@@YAHKQEAPEBGPEAH111@Z
0x14000F2A0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140012060: "struct _GUID AddressGuid" ?AddressGuid@@3U_GUID@@A
0x14000F1E8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140007B94: StringLengthInBytes
0x14000F338: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140012628: "__cdecl newmode" _newmode
0x14000F520: "__cdecl _imp__fileno" __imp__fileno
0x14000DB68: "__cdecl _acrt_iob_func" __acrt_iob_func
0x14000F598: "__cdecl _imp__initterm" __imp__initterm
0x14000BBE0: DynArrayItem2
0x14000F5C0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400019EC: "int __cdecl ProcessDisconnect(unsigned long,unsigned short const * __ptr64 * __ptr64 const)" ?ProcessDisconnect@@YAHKQEAPEBG@Z
0x14000B9F4: DynArrayItem
0x14000F260: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000FC50: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x14000F478: "__cdecl _imp_GetNameInfoW" __imp_GetNameInfoW
0x14000F280: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x140003874: StringCchPrintfW
0x14000F3E8: SHLWAPI_NULL_THUNK_DATA
0x14000FC60: cszParserSignature
0x14000F7E8: "x86" ??_C@_17NIABIIAO@?$AAx?$AA8?$AA6?$AA?$AA@
0x1400138D8: "__cdecl _onexitend" __onexitend
0x14000F1B0: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x14000F5B0: "__cdecl _imp__exit" __imp__exit
0x140008A48: GetPassword
0x14000F680: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000F4F8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x14000D530: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x14000F240: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x14000F358: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000F410: USER32_NULL_THUNK_DATA
0x14000F9A0: "BATCH" ??_C@_1M@CPAKIJEN@?$AAB?$AAA?$AAT?$AAC?$AAH?$AA?$AA@
0x14000F610: netutils_NULL_THUNK_DATA
0x14000FCB8: "__cdecl _real@bf800000" __real@bf800000
0x14000F1B8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x14000F318: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x14000F528: "__cdecl _imp_wcstol" __imp_wcstol
0x14000B728: DynArrayAppendFloat
0x140009A60: EstablishConnection
0x14000F6A8: "__cdecl _xi_a" __xi_a
0x14000FB48: " \/[]:|<>+=;,?$#()!@^"`{}*%" ??_C@_1DI@HNOIKCEE@?$AA?5?$AA?2?$AA?1?$AA?$FL?$AA?$FN?$AA?3?$AA?$HM?$AA?$DM?$AA?$DO?$AA?$CL?$AA?$DN?$AA?$DL?$AA?0?$AA?$DP?$AA$?$AA?$CD?$AA?$CI?$AA?$CJ?$AA?$CB?$AA?$EA?$AA?$FO?$AA?$CC?$AA?$GA?$AA?$HL?$AA?$HN?$AA?$CK?$AA?$CF?$AA?$AA@
0x14000F388: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14000D970: "__cdecl matherr" _matherr
0x140007EEC: Replicate
0x14000101C: wmain
0x140013278: "struct _SYSTEM_OBJECTTYPE_INFORMATION * __ptr64 __ptr64 ObjectInformation" ?ObjectInformation@@3PEAU_SYSTEM_OBJECTTYPE_INFORMATION@@EA
0x140009E80: PrepareUsageHelperText
0x14000F608: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x140001408: "int __cdecl ProcessQuery(unsigned long,unsigned short const * __ptr64 * __ptr64 const)" ?ProcessQuery@@YAHKQEAPEBG@Z
0x14000FC78: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14000F7F0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14000B800: DynArrayAppendRow
0x14000D728: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x14000F578: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x14000F898: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x14000380C: "unsigned long __cdecl CheckSystemType64(unsigned short * __ptr64)" ?CheckSystemType64@@YAKPEAG@Z
0x14000F230: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x14000F678: srvcli_NULL_THUNK_DATA
0x14000F2F0: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x140012630: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUfgrohUlkvmurovhUlyquivUznwGEUkxsOlyq@OpnFiles" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUfgrohUlkvmurovhUlyquivUznwGEUkxsOlyq@OpnFiles
0x14000D1C0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x14000FB08: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x14000F3F8: SspiCli_NULL_THUNK_DATA
0x14000F000: "const type_info::`vftable'" ??_7type_info@@6B@
0x14000F428: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x14000D500: "__cdecl _security_check_cookie" __security_check_cookie
0x14000F2E0: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x14000F6A0: "__cdecl _xc_z" __xc_z
0x14000F708: "PARSER2" ??_C@_08GGDLMLHN@PARSER2?$AA?$AA@
0x1400083E0: ShowMessage
0x140009040: IsUserAdmin
0x140013298: "struct _CONSOLE_SCREEN_BUFFER_INFO screenBufferInfo" ?screenBufferInfo@@3U_CONSOLE_SCREEN_BUFFER_INFO@@A
0x14000DB98: "__cdecl CxxThrowException" _CxxThrowException
0x14000F970: "%c:" ??_C@_17DKLNCJJF@?$AA?$CF?$AAc?$AA?3?$AA?$AA@
0x14000F570: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000F508: "__cdecl _imp_fflush" __imp_fflush
0x140010ED8: "__cdecl _IMPORT_DESCRIPTOR_netutils" __IMPORT_DESCRIPTOR_netutils
0x14000F380: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000F298: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x14000FC8C: ", " ??_C@_15JOGBDECP@?$AA?0?$AA?5?$AA?$AA@
0x14000F1F8: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x14000F2B8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400097AC: ConnectServer2
0x14000DCF0: "__cdecl _chkstk" __chkstk
0x14000F468: "__cdecl _imp_FreeAddrInfoW" __imp_FreeAddrInfoW
0x14000FB88: "\\%s" ??_C@_19JDDPIMDB@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1400034D4: "unsigned long __cdecl GetCPUInfo(unsigned short * __ptr64)" ?GetCPUInfo@@YAKPEAG@Z
0x14000F978: "%s\" ??_C@_17CHCGIDNB@?$AA?$CF?$AAs?$AA?2?$AA?$AA@
0x14000D530: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x14000F538: "__cdecl _imp__errno" __imp__errno
0x14000F290: "__cdecl _imp_HeapSize" __imp_HeapSize
0x14000F440: "__cdecl _imp_WSAGetLastError" __imp_WSAGetLastError
0x1400138D0: g_bWinsockLoaded
0x14000813C: StringCopyW
0x14000F9F8: "Authenticated Users" ??_C@_1CI@DEMONIBK@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAU?$AAs?$AAe?$AAr?$AAs?$AA?$AA@
0x1400080AC: StringCopyA
0x14000B2B8: "__cdecl _DynArrayAppend" __DynArrayAppend
0x14000FAFC: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x14000F418: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x14000F990: "DIALUP" ??_C@_1O@EDJPFOGJ@?$AAD?$AAI?$AAA?$AAL?$AAU?$AAP?$AA?$AA@
0x14000F2D8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1400071E8: ShowLastError
0x14000F6C8: "__cdecl _guard_fids_table" __guard_fids_table
0x14000F4C8: "__cdecl _imp_??1CHString@@QEAA@XZ" __imp_??1CHString@@QEAA@XZ
0x14000F4A0: "__cdecl _imp_??0CHString@@QEAA@XZ" __imp_??0CHString@@QEAA@XZ
0x14000B4B0: CreateDynamicArray
0x14000F600: msvcrt_NULL_THUNK_DATA
0x14000F070: "__cdecl load_config_used" _load_config_used
0x14000FBA8: "\\%s\%s" ??_C@_1BA@MAEPBKLL@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14000F518: "__cdecl _imp__get_osfhandle" __imp__get_osfhandle
0x14000F2D0: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x14000FB30: "localhost" ??_C@_1BE@JDLPANCI@?$AAl?$AAo?$AAc?$AAa?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x14000FB20: cszSignature
0x140008E3C: AllocateMemory
0x14000F4D0: "__cdecl _imp_??4CHString@@QEAAAEBV0@AEBV0@@Z" __imp_??4CHString@@QEAAAEBV0@AEBV0@@Z
0x14000F740: "\/"[]:|<>+=;,?@" ??_C@_1CA@KDEBJBGA@?$AA?2?$AA?1?$AA?$CC?$AA?$FL?$AA?$FN?$AA?3?$AA?$HM?$AA?$DM?$AA?$DO?$AA?$CL?$AA?$DN?$AA?$DL?$AA?0?$AA?$DP?$AA?$EA?$AA?$AA@
0x14000F8C0: "SYSTEM\CurrentControlSet\Control" ??_C@_1GC@JHOBCLGJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140010E38: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x14000F020: "unsigned short * __ptr64 * PNT_AUTHORITY_USERS" ?PNT_AUTHORITY_USERS@@3PAPEAGA
0x14000F5D0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140007A34: FindOneOf2
0x140012650: "struct _TYPE_COUNT * TypeCounts" ?TypeCounts@@3PAU_TYPE_COUNT@@A
0x14000F408: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140003874: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000F278: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x14000F890: "%ld" ??_C@_17OADJODNB@?$AA?$CF?$AAl?$AAd?$AA?$AA@
0x14000F628: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000F368: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140012624: "__cdecl dowildcard" _dowildcard
0x14000F208: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x14000F488: "__cdecl _imp_?Format@CHString@@QEAAXPEBGZZ" __imp_?Format@CHString@@QEAAXPEBGZZ
0x14000D83D: free
0x140001010: "public: __cdecl CHeap_Exception::~CHeap_Exception(void) __ptr64" ??1CHeap_Exception@@QEAA@XZ
0x14000F210: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x1400138D4: g_bInitialized
0x14000F630: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000F9B0: "INTERACTIVE" ??_C@_1BI@MJBABKMI@?$AAI?$AAN?$AAT?$AAE?$AAR?$AAA?$AAC?$AAT?$AAI?$AAV?$AAE?$AA?$AA@
0x14000F770: "HARDWARE\DESCRIPTION\SYSTEM\CENT" ??_C@_1FO@KMLNIGJ@?$AAH?$AAA?$AAR?$AAD?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAD?$AAE?$AAS?$AAC?$AAR?$AAI?$AAP?$AAT?$AAI?$AAO?$AAN?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAE?$AAN?$AAT@
0x140001010: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000F228: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x14000D8BC: RtlpImageNtHeader
0x14000F6F8: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x14000B350: "__cdecl _DynArrayFreeItemValue" __DynArrayFreeItemValue
0x14000B658: DynArrayAppendLong
0x140006C38: GetInternalTemporaryBufferRef
0x14000F360: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000B548: DestroyDynamicArray
0x1400081F0: StringConcatW
0x14000FCA0: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x14000FB98: "IPC$" ??_C@_19INGAAIIO@?$AAI?$AAP?$AAC?$AA$?$AA?$AA@
0x14000F510: "__cdecl _imp_fprintf" __imp_fprintf
0x14000F5D8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140012070: "struct _GUID HostnameGuid" ?HostnameGuid@@3U_GUID@@A
0x14000F268: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x14000F270: "__cdecl _imp_GetTimeFormatW" __imp_GetTimeFormatW
0x14000AEB0: DoParseParam2
0x14000F658: ntdll_NULL_THUNK_DATA
0x14000FC68: cwszOptionChars
0x140010EEC: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x140010E60: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x14000DB8C: "__cdecl _iob_func" __iob_func
0x14000F1F0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x140007468: GetResString2FromModule
0x14000FC88: "=" ??_C@_13NMPKAAJP@?$AA?$DN?$AA?$AA@
0x14000F1D8: "__cdecl _imp_FreeSid" __imp_FreeSid
0x140006B48: InitGlobals
0x14000F550: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x140012038: "__cdecl _security_cookie" __security_cookie
0x14000F188: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14000DCF0: "__cdecl alloca_probe" _alloca_probe
0x14000F480: WS2_32_NULL_THUNK_DATA
0x14000A588: ParseAndSaveOptionValue
0x14000F460: "__cdecl _imp_WSALookupServiceEnd" __imp_WSALookupServiceEnd
0x140008DE8: CheckMemory
0x14000F1C8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x14000F258: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000F398: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140012030: "__cdecl _defaultmatherr" __defaultmatherr
0x14000FA38: "TERMINAL SERVER USER" ??_C@_1CK@PNJCHALM@?$AAT?$AAE?$AAR?$AAM?$AAI?$AAN?$AAA?$AAL?$AA?5?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?5?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x14000F3A8: "__cdecl _imp_WNetCancelConnection2W" __imp_WNetCancelConnection2W
0x14000F988: "\*" ??_C@_15PKPONJIK@?$AA?2?$AA?$CK?$AA?$AA@
0x1400138E0: "__cdecl _onexitbegin" __onexitbegin
0x14000F420: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x14000FB18: "
" ??_C@_15IABLJNFO@?$AA?6?$AA?6?$AA?$AA@
0x14000F4A8: "__cdecl _imp_?Mid@CHString@@QEBA?AV1@HH@Z" __imp_?Mid@CHString@@QEBA?AV1@HH@Z
0x1400137B0: "void * __ptr64 __ptr64 ProcessId" ?ProcessId@@3PEAXEA
0x14000F558: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140006E90: GetReason
0x14000F350: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000F2C0: "__cdecl _imp_ReadConsoleW" __imp_ReadConsoleW
0x140006ED0: SetReason
0x14000A1C4: ExtractMainOption
0x140010E10: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x14000F180: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400077C4: IsNumeric
0x14000892C: GetAsUnicodeString2
0x14000DA64: "__cdecl _security_init_cookie" __security_init_cookie
0x14000BC28: DynArrayItemAsString2
0x14000F5A8: "__cdecl _imp__cexit" __imp__cexit
0x14000F650: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x14000D918: "__cdecl get_image_app_type" _get_image_app_type
0x14000ACD4: MatchOptionEx
0x140004E88: "int __cdecl RtlQuerySystemDebugInformation(void)" ?RtlQuerySystemDebugInformation@@YAHXZ
0x140009510: GetHostByIPAddr
0x140010E24: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000BF28: GetValue
0x1400082FC: StringCompareW
0x14000D4D0: wmainCRTStartup
0x14000F5F0: "__cdecl _imp_malloc" __imp_malloc
0x14000F1E0: ADVAPI32_NULL_THUNK_DATA
0x140010DA8: "__cdecl CTA1?AVCHeap_Exception@@" _CTA1?AVCHeap_Exception@@
0x140013268: "struct _SYSTEM_PROCESS_INFORMATION * __ptr64 __ptr64 ProcessInformation" ?ProcessInformation@@3PEAU_SYSTEM_PROCESS_INFORMATION@@EA
0x14000F1A8: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x14000F6F4: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x14000D5B0: "__cdecl _report_gsfailure" __report_gsfailure
0x14000F7D0: "Identifier" ??_C@_1BG@IEICLFFJ@?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x1400138F0: "__cdecl _native_startup_state" __native_startup_state
0x14000F648: "__cdecl _imp_RtlVerifyVersionInfo" __imp_RtlVerifyVersionInfo
0x14000F888: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x14000F670: "__cdecl _imp_NetFileClose" __imp_NetFileClose
0x14000BC78: DynArraySetString
0x14000FAA0: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14000F500: "__cdecl _imp_wcstok" __imp_wcstok
0x14000F490: "__cdecl _imp_?Find@CHString@@QEBAHPEBG@Z" __imp_?Find@CHString@@QEBAHPEBG@Z
0x140009104: IsUNCFormat
0x14000B3D0: "__cdecl _DynArrayFind" __DynArrayFind
0x14000F588: "__cdecl _imp__fmode" __imp__fmode
0x140006650: "int __cdecl GetProcessOwner(unsigned short * __ptr64,unsigned long)" ?GetProcessOwner@@YAHPEAGK@Z
0x14000507C: "unsigned char __cdecl LoadSystemHandles(void)" ?LoadSystemHandles@@YAEXZ
0x140013270: "struct _SYSTEM_HANDLE_INFORMATION_EX * __ptr64 __ptr64 HandleInformation" ?HandleInformation@@3PEAU_SYSTEM_HANDLE_INFORMATION_EX@@EA
0x14000F4B0: "__cdecl _imp_?Mid@CHString@@QEBA?AV1@H@Z" __imp_?Mid@CHString@@QEBA?AV1@H@Z
0x140005034: "void * __ptr64 __cdecl BufferAlloc(unsigned __int64 * __ptr64)" ?BufferAlloc@@YAPEAXPEA_K@Z
0x14000F760: "/?"<>|" ??_C@_1O@FFFKAPEF@?$AA?1?$AA?$DP?$AA?$CC?$AA?$DM?$AA?$DO?$AA?$HM?$AA?$AA@
0x14000F5E0: "__cdecl _imp_free" __imp_free
0x14000D9D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140006F4C: SetReason2
0x14000F868: "\PIPE\srvsvc" ??_C@_1BK@OLJJHPAL@?$AA?2?$AAP?$AAI?$AAP?$AAE?$AA?2?$AAs?$AAr?$AAv?$AAs?$AAv?$AAc?$AA?$AA@
0x14000F1A0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140007224: ShowLastErrorEx
0x14000F4F0: framedynos_NULL_THUNK_DATA
0x1400051F8: "unsigned char __cdecl LoadSystemProcesses(void)" ?LoadSystemProcesses@@YAEXZ
0x14000F448: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x14000DCB6: memset
0x140010F00: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000F498: "__cdecl _imp_?Right@CHString@@QEBA?AV1@H@Z" __imp_?Right@CHString@@QEBA?AV1@H@Z
0x14000F2C8: "__cdecl _imp_ReadFile" __imp_ReadFile
[JEB Decompiler by PNF Software]