Generated by JEB on 2019/08/01

PE: C:\Windows\System32\Locator.exe Base=0x140000000 SHA-256=8B5743D4ACF8C571F039F83464672306D9F899E4C8512FAB9538807C43DF4A67
PDB: locator.pdb GUID={9A8ABDA1-4246-9981-81B0944F1F130A19} Age=1

120 located named symbols:
0x14000105C: "void __cdecl SetSvcStatus(void)" ?SetSvcStatus@@YAXXZ
0x14000186C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400010A0: "void __cdecl LocatorControl(unsigned long)" ?LocatorControl@@YAXK@Z
0x140001680: "__cdecl FindPESection" _FindPESection
0x140001008: "void __cdecl StopLocator(char * __ptr64,long)" ?StopLocator@@YAXPEADJ@Z
0x140002668: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140002200: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140003030: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140002158: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140002300: "rpclocator" ??_C@_1BG@GFGCMMAE@?$AAr?$AAp?$AAc?$AAl?$AAo?$AAc?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x140001A40: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003068: "__cdecl commode" _commode
0x1400010F0: "void __cdecl LocatorServiceMain(unsigned long,char * __ptr64 * __ptr64)" ?LocatorServiceMain@@YAXKPEAPEAD@Z
0x140002198: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140001550: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140002290: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140003074: "__cdecl fmode" _fmode
0x1400011C4: main
0x1400015AE: "__cdecl XcptFilter" _XcptFilter
0x140002298: "__cdecl _xc_a" __xc_a
0x140002188: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14000183F: "__cdecl initterm" _initterm
0x14000271C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140003648: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400021A8: "__cdecl _imp_Sleep" __imp_Sleep
0x1400022C8: "__cdecl _xi_z" __xi_z
0x140002120: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000184B: "__cdecl _C_specific_handler" __C_specific_handler
0x140001663: "__cdecl amsg_exit" _amsg_exit
0x140002148: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x140002210: "__cdecl _imp_exit" __imp_exit
0x1400021E0: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x140002130: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140002160: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140003608: "struct _SERVICE_STATUS ssServiceStatus" ?ssServiceStatus@@3U_SERVICE_STATUS@@A
0x140003638: "__cdecl _native_startup_lock" __native_startup_lock
0x140001590: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140002238: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140002278: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002140: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140002128: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002228: "__cdecl _imp__commode" __imp__commode
0x140002248: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140002150: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140002190: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140001730: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400014F0: mainCRTStartup
0x1400026B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140003070: "__cdecl newmode" _newmode
0x140002240: "__cdecl _imp__initterm" __imp__initterm
0x140002208: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140001670: "__cdecl setargv" _setargv
0x140003628: "__cdecl _onexitend" __onexitend
0x140002218: "__cdecl _imp__exit" __imp__exit
0x140002288: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140002168: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003600: "struct SERVICE_STATUS_HANDLE__ * __ptr64 __ptr64 sshServiceHandle" ?sshServiceHandle@@3PEAUSERVICE_STATUS_HANDLE__@@EA
0x1400021C8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400022B0: "__cdecl _xi_a" __xi_a
0x1400021B8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001670: "__cdecl matherr" _matherr
0x1400026CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140002690: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0
0x140001520: "__cdecl _security_check_cookie" __security_check_cookie
0x1400022A8: "__cdecl _xc_z" __xc_z
0x140002170: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140002220: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400021C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400021D8: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x1400021E8: "__cdecl _imp_RegisterServiceCtrlHandlerW" __imp_RegisterServiceCtrlHandlerW
0x140002180: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400022D0: "__cdecl _guard_fids_table" __guard_fids_table
0x140002260: msvcrt_NULL_THUNK_DATA
0x140002010: "__cdecl load_config_used" _load_config_used
0x1400035F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuxlnUikxUolxzgliUmhhvieviUhixUlyquivUznwGEUolxzglikxsOlyq@locator" __@@_PchSym_@00@KxulyqvxgPillgKxuxlnUikxUolxzgliUmhhvieviUhixUlyquivUznwGEUolxzglikxsOlyq@locator
0x1400021F8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140002270: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140002178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000306C: "__cdecl dowildcard" _dowildcard
0x140002268: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001860: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400015BC: RtlpImageNtHeader
0x140002138: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140002258: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140002280: ntdll_NULL_THUNK_DATA
0x1400026F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140003028: "__cdecl _security_cookie" __security_cookie
0x140003020: "__cdecl _defaultmatherr" __defaultmatherr
0x1400026A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140003630: "__cdecl _onexitbegin" __onexitbegin
0x140002118: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001764: "__cdecl _security_init_cookie" __security_init_cookie
0x140002250: "__cdecl _imp__cexit" __imp__cexit
0x14000267C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x140001618: "__cdecl get_image_app_type" _get_image_app_type
0x140002654: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400021D0: "__cdecl _imp_StartServiceCtrlDispatcherW" __imp_StartServiceCtrlDispatcherW
0x1400035F8: "void * __ptr64 __ptr64 MainThreadEvent" ?MainThreadEvent@@3PEAXEA
0x1400018B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400021F0: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA
0x140003640: "__cdecl _native_startup_state" __native_startup_state
0x140002230: "__cdecl _imp__fmode" __imp__fmode
0x1400026E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400016D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400021B0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400021A0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x140002708: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140002730: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]