Generated by JEB on 2019/08/01

PE: C:\Windows\System32\icacls.exe Base=0x140000000 SHA-256=8DFC26EEFC94BD4FA35736444D8D9703AA2D3802D17896835F9EA9DE136A68C8
PDB: icacls.pdb GUID={93F62690-061F-1B1A-048D990D257F5194} Age=1

357 located named symbols:
0x14000608C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140007190: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140007900: "FILE_WRITE_EA" ??_C@_1BM@LGNAPBIB@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAE?$AAA?$AA?$AA@
0x140001704: "unsigned long __cdecl RemoveSid(enum EDIT_TYPE,struct _ACL * __ptr64,void * __ptr64)" ?RemoveSid@@YAKW4EDIT_TYPE@@PEAU_ACL@@PEAX@Z
0x1400071D8: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x140007C38: "/Inheritance" ??_C@_1BK@DLIILNMM@?$AA?1?$AAI?$AAn?$AAh?$AAe?$AAr?$AAi?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x140005EB0: "__cdecl FindPESection" _FindPESection
0x1400074D0: "__cdecl _imp_RtlIsPackageSid" __imp_RtlIsPackageSid
0x1400074C8: "__cdecl _imp_RtlReleaseRelativeName" __imp_RtlReleaseRelativeName
0x1400072C8: "__cdecl _imp_AddAce" __imp_AddAce
0x1400084B0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400062E6: "__cdecl local_unwind" _local_unwind
0x140007330: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA
0x140005EA0: "__cdecl wsetargv" _wsetargv
0x140007A80: "(I)" ??_C@_17EFCDOCGF@?$AA?$CI?$AAI?$AA?$CJ?$AA?$AA@
0x140004640: "unsigned long __cdecl ModifyRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?ModifyRoutine@@YAKPEBG0HKPEAD@Z
0x14000A4C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140007428: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x140007360: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140007620: "REA" ??_C@_17PBODHAKK@?$AAR?$AAE?$AAA?$AA?$AA@
0x140007238: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140007300: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x140006310: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400079F8: "NW" ??_C@_15CNLFACFL@?$AAN?$AAW?$AA?$AA@
0x140007AB0: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x14000273C: "unsigned short * __ptr64 __cdecl ReadLine(struct _iobuf * __ptr64)" ?ReadLine@@YAPEAGPEAU_iobuf@@@Z
0x140007664: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x14000A508: "__cdecl commode" _commode
0x140007158: "__cdecl _imp_GetFileType" __imp_GetFileType
0x14000760C: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x140007668: "(OI)" ??_C@_19EFCPLPPM@?$AA?$CI?$AAO?$AAI?$AA?$CJ?$AA?$AA@
0x1400084D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1400071C8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1400073A8: "__cdecl _imp_wcschr" __imp_wcschr
0x1400071A8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140005D80: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400074F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140007AA0: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x140007AF0: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14000AAA8: "void * __ptr64 __ptr64 StdError" ?StdError@@3PEAXEA
0x14000A514: "__cdecl fmode" _fmode
0x1400071F8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140007418: "__cdecl _imp__wcsdup" __imp__wcsdup
0x1400073A0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140007AB8: "wb" ??_C@_15MJDFFMKN@?$AAw?$AAb?$AA?$AA@
0x140007458: "__cdecl _imp_fgetwc" __imp_fgetwc
0x1400075B8: "R" ??_C@_13LPLPOHMK@?$AAR?$AA?$AA@
0x14000A000: ?SimpleAccessMap@@3PAU<unnamed-type-SimpleAccessMap>@@A
0x140007298: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x140001ED0: "unsigned long __cdecl GetFileSacl(unsigned short const * __ptr64,struct _ACL * __ptr64 * __ptr64,unsigned long)" ?GetFileSacl@@YAKPEBGPEAPEAU_ACL@@K@Z
0x140001260: "unsigned long __cdecl ProcessError(unsigned long,unsigned long,unsigned short const * __ptr64)" ?ProcessError@@YAKKKPEBG@Z
0x140005DDE: "__cdecl XcptFilter" _XcptFilter
0x140007500: "__cdecl _xc_a" __xc_a
0x140001E1C: "unsigned long __cdecl GetFileDacl(unsigned short const * __ptr64,struct _ACL * __ptr64 * __ptr64,unsigned long)" ?GetFileDacl@@YAKPEBGPEAPEAU_ACL@@K@Z
0x1400075D4: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x140007348: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x140007178: "__cdecl _imp_FindClose" __imp_FindClose
0x140007768: "MAXIMUM_ALLOWED" ??_C@_1CA@KJKMDJAM@?$AAM?$AAA?$AAX?$AAI?$AAM?$AAU?$AAM?$AA_?$AAA?$AAL?$AAL?$AAO?$AAW?$AAE?$AAD?$AA?$AA@
0x1400071B0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400075CC: "MA" ??_C@_15NOFDHILG@?$AAM?$AAA?$AA?$AA@
0x14000764C: "DE" ??_C@_15HGDOLOCJ@?$AAD?$AAE?$AA?$AA@
0x140007210: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400062F2: memcpy
0x14000606F: "__cdecl initterm" _initterm
0x140008604: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000AAD8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140007268: "__cdecl _imp_Sleep" __imp_Sleep
0x1400075E4: "GE" ??_C@_15PAKKMMIH@?$AAG?$AAE?$AA?$AA@
0x140007530: "__cdecl _xi_z" __xi_z
0x14000763C: "RA" ??_C@_15CMNDMIPI@?$AAR?$AAA?$AA?$AA@
0x140007140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1400077E8: "GENERIC_ALL" ??_C@_1BI@FLNBGEHO@?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAA?$AAL?$AAL?$AA?$AA@
0x140005D38: "__cdecl _C_specific_handler" __C_specific_handler
0x140001008: "void __cdecl PrintString(void * __ptr64,unsigned short const * __ptr64)" ?PrintString@@YAXPEAXPEBG@Z
0x140007698: "(IO)" ??_C@_19FFBJFFGG@?$AA?$CI?$AAI?$AAO?$AA?$CJ?$AA?$AA@
0x140007AAC: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140007A94: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x140003660: "unsigned long __cdecl SaveRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?SaveRoutine@@YAKPEBG0HKPEAD@Z
0x140007A00: "NO_READ_UP" ??_C@_1BG@NACABGCN@?$AAN?$AAO?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAU?$AAP?$AA?$AA@
0x1400071A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140007460: "__cdecl _imp__wperror" __imp__wperror
0x140001520: "unsigned long __cdecl ConvertAccessToMask(unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?ConvertAccessToMask@@YAKPEBGPEAEPEAK@Z
0x14000627C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140007590: "Out of memory " ??_C@_0P@HKFKDJCC@Out?5of?5memory?6?$AA@
0x140007260: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140007588: "%*s" ??_C@_17PEPGGFIG@?$AA?$CF?$AA?$CK?$AAs?$AA?$AA@
0x1400072B8: "__cdecl _imp_DeleteAce" __imp_DeleteAce
0x140007408: "__cdecl _imp__ultow" __imp__ultow
0x140001DA4: "unsigned long __cdecl GetFileSecurityDescriptor(unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned long)" ?GetFileSecurityDescriptor@@YAKPEBGPEAPEAXK@Z
0x140008500: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140005E93: "__cdecl amsg_exit" _amsg_exit
0x140007980: "FILE_READ_ATTRIBUTES" ??_C@_1CK@PNEHGFCP@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAA?$AAT?$AAT?$AAR?$AAI?$AAB?$AAU?$AAT?$AAE?$AAS?$AA?$AA@
0x140001488: "unsigned long __cdecl CreateAce(struct _ACE_HEADER * __ptr64 * __ptr64,unsigned long,void * __ptr64,unsigned char,unsigned long)" ?CreateAce@@YAKPEAPEAU_ACE_HEADER@@KPEAXEK@Z
0x1400078E0: "FILE_READ_EA" ??_C@_1BK@MLCDFLJO@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAE?$AAA?$AA?$AA@
0x1400075AC: "M" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x140007738: "ACCESS_SYSTEM_SECURITY" ??_C@_1CO@MMGNHLIE@?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x140004034: "unsigned long __cdecl Restore(unsigned short const * __ptr64,struct STRING_ARRAY * __ptr64,struct STRING_ARRAY * __ptr64,unsigned long,unsigned short const * __ptr64)" ?Restore@@YAKPEBGPEAUSTRING_ARRAY@@1K0@Z
0x140007390: "__cdecl _imp_exit" __imp_exit
0x1400042E0: "unsigned long __cdecl FindSidRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?FindSidRoutine@@YAKPEBG0HKPEAD@Z
0x140007258: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x140007B34: "/?" ??_C@_15BAIPABEI@?$AA?1?$AA?$DP?$AA?$AA@
0x14000765C: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x140007A68: "N" ??_C@_13KFHAAPON@?$AAN?$AA?$AA@
0x1400073E0: "__cdecl _imp_fputws" __imp_fputws
0x140007584: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x1400073F8: "__cdecl _imp__local_unwind" __imp__local_unwind
0x140007150: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400076D0: "READ_CONTROL" ??_C@_1BK@GAPFFLDI@?$AAR?$AAE?$AAA?$AAD?$AA_?$AAC?$AAO?$AAN?$AAT?$AAR?$AAO?$AAL?$AA?$AA@
0x1400074E0: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x140007228: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400076AC: "ME" ??_C@_15FBDBOPOB@?$AAM?$AAE?$AA?$AA@
0x1400077A8: "GENERIC_WRITE" ??_C@_1BM@JNDNNLM@?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA?$AA@
0x140001968: "unsigned long __cdecl GrantAccess(struct _ACL * __ptr64 * __ptr64,struct EDIT * __ptr64)" ?GrantAccess@@YAKPEAPEAU_ACL@@PEAUEDIT@@@Z
0x14000AAC8: "__cdecl _native_startup_lock" __native_startup_lock
0x140007A74: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x140007BC8: "/substitute" ??_C@_1BI@KCDLCBEB@?$AA?1?$AAs?$AAu?$AAb?$AAs?$AAt?$AAi?$AAt?$AAu?$AAt?$AAe?$AA?$AA@
0x140005DC0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400085B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140007438: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400073C0: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x1400072F0: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x140007400: "__cdecl _imp_realloc" __imp_realloc
0x1400073F0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140007490: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400071E8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400072D0: "__cdecl _imp_SetSecurityAccessMask" __imp_SetSecurityAccessMask
0x140007148: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140007340: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x140006258: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140007420: "__cdecl _imp__commode" __imp__commode
0x1400079E0: "NO_WRITE_UP" ??_C@_1BI@COBHPIKA@?$AAN?$AAO?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAU?$AAP?$AA?$AA@
0x140007470: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400072E8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x140007230: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400084C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x14000862C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x1400073B0: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x140007A6C: "(" ??_C@_13LLDNKHDC@?$AA?$CI?$AA?$AA@
0x140007B18: "I can't handle that yet " ??_C@_0BJ@KJPMLMEK@I?5can?8t?5handle?5that?5yet?6?$AA@
0x140007C54: "/T" ??_C@_15PMKIHBEK@?$AA?1?$AAT?$AA?$AA@
0x140007688: "(NP)" ??_C@_19KNFMOMDB@?$AA?$CI?$AAN?$AAP?$AA?$CJ?$AA?$AA@
0x140005F60: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000AAA0: "void * __ptr64 __ptr64 StdOutput" ?StdOutput@@3PEAXEA
0x140007628: "WEA" ??_C@_17LJADHOMO@?$AAW?$AAE?$AAA?$AA?$AA@
0x140007180: "__cdecl _imp_GetFinalPathNameByHandleW" __imp_GetFinalPathNameByHandleW
0x140007BB0: "/Restore" ??_C@_1BC@JLPFEPKD@?$AA?1?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x1400074A8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x140007920: "FILE_EXECUTE/FILE_TRAVERSE" ??_C@_1DG@BLLBAPPB@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA?1?$AAF?$AAI?$AAL?$AAE?$AA_?$AAT?$AAR?$AAA?$AAV?$AAE?$AAR?$AAS?$AAE?$AA?$AA@
0x1400085DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140007580: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1400071D0: "__cdecl _imp_LocalSize" __imp_LocalSize
0x14000A510: "__cdecl newmode" _newmode
0x140007C90: "what? Flags == %08x " ??_C@_0BG@HMPDPBGC@what?$DP?5?5Flags?5?$DN?$DN?5?$CF08x?6?$AA@
0x140002D80: "unsigned long __cdecl WalkPatternV(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long (__cdecl*)(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64),char * __ptr64)" ?WalkPatternV@@YAKPEBG0KP6AK00HKPEAD@Z1@Z
0x140007450: "__cdecl _imp__initterm" __imp__initterm
0x140007388: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400010E8: "void __cdecl PrintSpaces(void * __ptr64,unsigned short)" ?PrintSpaces@@YAXPEAXG@Z
0x140007130: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400071F0: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x140008564: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x14000AAB8: "__cdecl _onexitend" __onexitend
0x1400072A0: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x1400073D8: "__cdecl _imp__exit" __imp__exit
0x140007890: "FILE_APPEND_DATA/FILE_ADD_SUBDIR" ??_C@_1EO@GFNHOHIM@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAA?$AAP?$AAP?$AAE?$AAN?$AAD?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?1?$AAF?$AAI?$AAL?$AAE?$AA_?$AAA?$AAD?$AAD?$AA_?$AAS?$AAU?$AAB?$AAD?$AAI?$AAR@
0x1400074F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140007170: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x140007220: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140007118: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x1400074A0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140007288: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140007518: "__cdecl _xi_a" __xi_a
0x140007278: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140007644: "WA" ??_C@_15HMBOFJEL@?$AAW?$AAA?$AA?$AA@
0x140005EA0: "__cdecl matherr" _matherr
0x140004C68: wmain
0x1400072F8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140002860: "void __cdecl PrintMask(unsigned long,unsigned short,int,unsigned long)" ?PrintMask@@YAXKGHK@Z
0x140007654: "Rc" ??_C@_15CGOIKPEN@?$AAR?$AAc?$AA?$AA@
0x1400075C0: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x1400075F4: "RD" ??_C@_15BLANDIMK@?$AAR?$AAD?$AA?$AA@
0x140008514: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140003430: "unsigned long __cdecl DisplayRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?DisplayRoutine@@YAKPEBG0HKPEAD@Z
0x1400075EC: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x14000A270: ?RightsMap@@3PAU<unnamed-type-RightsMap>@@A
0x140001B0C: "unsigned long __cdecl SetIntegrity(struct _ACL * __ptr64 * __ptr64,struct EDIT * __ptr64)" ?SetIntegrity@@YAKPEAPEAU_ACL@@PEAUEDIT@@@Z
0x140007AA4: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x140007120: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x140001F8C: "unsigned long __cdecl ConvertIntegrityToMask(unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?ConvertIntegrityToMask@@YAKPEBGPEAPEAXPEAEPEAK@Z
0x140007B60: "/setowner" ??_C@_1BE@BHEBEIFC@?$AA?1?$AAs?$AAe?$AAt?$AAo?$AAw?$AAn?$AAe?$AAr?$AA?$AA@
0x140007708: "WRITE_OWNER" ??_C@_1BI@BFLLPMKE@?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAO?$AAW?$AAN?$AAE?$AAR?$AA?$AA@
0x1400085A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140005D50: "__cdecl _security_check_cookie" __security_check_cookie
0x140007678: "(CI)" ??_C@_19BCIAKKLD@?$AA?$CI?$AAC?$AAI?$AA?$CJ?$AA?$AA@
0x140007510: "__cdecl _xc_z" __xc_z
0x140008550: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140007240: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140007C28: "/Remove" ??_C@_1BA@FEGIPP@?$AA?1?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x140008618: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0
0x140007410: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400017DC: "unsigned long __cdecl DenyAccess(struct _ACL * __ptr64 * __ptr64,struct EDIT * __ptr64)" ?DenyAccess@@YAKPEAPEAU_ACL@@PEAUEDIT@@@Z
0x140007280: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400076F0: "WRITE_DAC" ??_C@_1BE@JIKFMNKD@?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAD?$AAA?$AAC?$AA?$AA@
0x140007AE8: "rb" ??_C@_15JJPIMNBO@?$AAr?$AAb?$AA?$AA@
0x140007208: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x1400071B8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140007958: "FILE_DELETE_CHILD" ??_C@_1CE@FEPHEBBH@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AA_?$AAC?$AAH?$AAI?$AAL?$AAD?$AA?$AA@
0x140007318: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x1400012C4: "void * __ptr64 __cdecl MyOpenFile(unsigned short const * __ptr64,unsigned long,unsigned long)" ?MyOpenFile@@YAPEAXPEBGKK@Z
0x140006330: "__cdecl _chkstk" __chkstk
0x140007A18: "NR" ??_C@_15BKGLPCGJ@?$AAN?$AAR?$AA?$AA@
0x140007168: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x1400076C0: "DELETE" ??_C@_1O@LPPHHL@?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AA?$AA@
0x140007C6C: "/C" ??_C@_15DBGGBOGM@?$AA?1?$AAC?$AA?$AA@
0x140007720: "SYNCHRONIZE" ??_C@_1BI@ICMPFHAF@?$AAS?$AAY?$AAN?$AAC?$AAH?$AAR?$AAO?$AAN?$AAI?$AAZ?$AAE?$AA?$AA@
0x1400077C8: "GENERIC_EXECUTE" ??_C@_1CA@DFJKLMIK@?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA?$AA@
0x140007250: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140007538: "__cdecl _guard_fids_table" __guard_fids_table
0x1400073D0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140007480: msvcrt_NULL_THUNK_DATA
0x140007010: "__cdecl load_config_used" _load_config_used
0x140007BA0: "/reset" ??_C@_1O@NELAKFBI@?$AA?1?$AAr?$AAe?$AAs?$AAe?$AAt?$AA?$AA@
0x140007378: "__cdecl _imp_printf" __imp_printf
0x14000853C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x140007C64: "/L" ??_C@_15GJAFAODK@?$AA?1?$AAL?$AA?$AA@
0x140004220: "unsigned long __cdecl SetOwnerRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?SetOwnerRoutine@@YAKPEBG0HKPEAD@Z
0x140008528: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14000AAB0: "unsigned long processedFilesSuccess" ?processedFilesSuccess@@3KA
0x140007634: "DC" ??_C@_15FDFFOBPF@?$AAD?$AAC?$AA?$AA@
0x140007B40: "/dbg" ??_C@_19BFEPAAHO@?$AA?1?$AAd?$AAb?$AAg?$AA?$AA@
0x140007370: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400074B8: "__cdecl _imp_RtlIsCapabilitySid" __imp_RtlIsCapabilitySid
0x1400074C0: "__cdecl _imp_NtClose" __imp_NtClose
0x140007308: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x140007A3C: "NX" ??_C@_15HFNGBCAN@?$AAN?$AAX?$AA?$AA@
0x140007488: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140007248: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000A50C: "__cdecl dowildcard" _dowildcard
0x14000AA94: "unsigned char sidFound" ?sidFound@@3EA
0x1400072A8: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x1400075A8: "F" ??_C@_13GAMECHAC@?$AAF?$AA?$AA@
0x140007430: "__cdecl _imp_fclose" __imp_fclose
0x14000499C: "unsigned long __cdecl Modify(unsigned short * __ptr64,unsigned long,struct EDIT_ARRAY * __ptr64)" ?Modify@@YAKPEAGKPEAUEDIT_ARRAY@@@Z
0x140007398: "__cdecl _imp_feof" __imp_feof
0x140001160: "unsigned long __cdecl printmessage(unsigned long,void * __ptr64,unsigned long,...)" ?printmessage@@YAKKPEAXKZZ
0x140002C4C: "void __cdecl PrintAce(struct _ACE_HEADER * __ptr64,int,unsigned long)" ?PrintAce@@YAXPEAU_ACE_HEADER@@HK@Z
0x1400074B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140006080: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140007200: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140007440: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140005DEC: RtlpImageNtHeader
0x140007A78: ":" ??_C@_13EBCNDICG@?$AA?3?$AA?$AA@
0x140007350: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x140007A88: "(CR)" ??_C@_19HLJBFIOL@?$AA?$CI?$AAC?$AAR?$AA?$CJ?$AA?$AA@
0x14000858C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1400075C4: "AS" ??_C@_15FDIBCHNJ@?$AAA?$AAS?$AA?$AA@
0x1400071E0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140007A70: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x1400073B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140007380: "__cdecl _imp__wfopen" __imp__wfopen
0x140007788: "GENERIC_READ" ??_C@_1BK@IAFNFHJM@?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAR?$AAE?$AAA?$AAD?$AA?$AA@
0x140003374: "unsigned long __cdecl WalkPattern(unsigned short const * __ptr64,unsigned long,unsigned long (__cdecl*)(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64),...)" ?WalkPattern@@YAKPEBGKP6AK00HKPEAD@ZZZ
0x1400074E8: ntdll_NULL_THUNK_DATA
0x140007478: "__cdecl _imp_memcpy" __imp_memcpy
0x140007290: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x140007800: "FILE_READ_DATA/FILE_LIST_DIRECTO" ??_C@_1EG@CAMHAGDC@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?1?$AAF?$AAI?$AAL?$AAE?$AA_?$AAL?$AAI?$AAS?$AAT?$AA_?$AAD?$AAI?$AAR?$AAE?$AAC?$AAT?$AAO@
0x140007320: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x140004400: "unsigned long __cdecl VerifyRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?VerifyRoutine@@YAKPEBG0HKPEAD@Z
0x140007338: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1400075BC: "W" ??_C@_13IIGBBHPI@?$AAW?$AA?$AA@
0x140007A48: "INTERNAL ERROR" ??_C@_1BO@OBIFANAG@?$AAI?$AAN?$AAT?$AAE?$AAR?$AAN?$AAA?$AAL?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x14000A4B8: "__cdecl _security_cookie" __security_cookie
0x1400076B4: "HI" ??_C@_15ELCKMBOK@?$AAH?$AAI?$AA?$AA@
0x140006330: "__cdecl alloca_probe" _alloca_probe
0x140007BF0: "/Setintegritylevel" ??_C@_1CG@PGKILIAD@?$AA?1?$AAS?$AAe?$AAt?$AAi?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AAl?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140007198: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400071C0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140007C18: "/Deny" ??_C@_1M@MFBMPFCA@?$AA?1?$AAD?$AAe?$AAn?$AAy?$AA?$AA@
0x1400072E0: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x14000A4B0: "__cdecl _defaultmatherr" __defaultmatherr
0x1400084EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140007600: "WDAC" ??_C@_19KHMPOILF@?$AAW?$AAD?$AAA?$AAC?$AA?$AA@
0x140007160: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1400072B0: "__cdecl _imp_CopySid" __imp_CopySid
0x140007A98: "\*" ??_C@_15PKPONJIK@?$AA?2?$AA?$CK?$AA?$AA@
0x14000AAC0: "__cdecl _onexitbegin" __onexitbegin
0x1400079B0: "FILE_WRITE_ATTRIBUTES" ??_C@_1CM@NMGCOKDO@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAA?$AAT?$AAT?$AAR?$AAI?$AAB?$AAU?$AAT?$AAE?$AAS?$AA?$AA@
0x140007A20: "NO_EXECUTE_UP" ??_C@_1BM@IGJMLDOK@?$AAN?$AAO?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA_?$AAU?$AAP?$AA?$AA@
0x1400037B0: "unsigned long __cdecl RestoreProcessInputFile(struct _iobuf * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,struct SID_ARRAY & __ptr64,struct SID_ARRAY & __ptr64)" ?RestoreProcessInputFile@@YAKPEAU_iobuf@@PEBG1KAEAUSID_ARRAY@@2@Z
0x140007138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000A070: ?SpecificAccessMap@@3PAU<unnamed-type-SpecificAccessMap>@@A
0x140007B90: "/verify" ??_C@_1BA@NNEPKGGC@?$AA?1?$AAv?$AAe?$AAr?$AAi?$AAf?$AAy?$AA?$AA@
0x140007128: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140007BE0: "/Grant" ??_C@_1O@MJBBLIAI@?$AA?1?$AAG?$AAr?$AAa?$AAn?$AAt?$AA?$AA@
0x1400075B0: "RX" ??_C@_15BMCNAON@?$AAR?$AAX?$AA?$AA@
0x140005F94: "__cdecl _security_init_cookie" __security_init_cookie
0x1400073E8: "__cdecl _imp__cexit" __imp__cexit
0x14000AA98: "unsigned long processedFilesFailed" ?processedFilesFailed@@3KA
0x140005E48: "__cdecl get_image_app_type" _get_image_app_type
0x14000849C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140007358: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x140007B78: "/findsid" ??_C@_1BC@NLIJALEJ@?$AA?1?$AAf?$AAi?$AAn?$AAd?$AAs?$AAi?$AAd?$AA?$AA@
0x140007328: "__cdecl _imp_SetSecurityInfo" __imp_SetSecurityInfo
0x140005D20: wmainCRTStartup
0x1400073C8: "__cdecl _imp_malloc" __imp_malloc
0x140004560: "unsigned long __cdecl ResetRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,char * __ptr64)" ?ResetRoutine@@YAKPEBG0HKPEAD@Z
0x140007188: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1400075DC: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x140007614: "AD" ??_C@_15JOEPEIPP@?$AAA?$AAD?$AA?$AA@
0x140002128: "unsigned long __cdecl ConvertNameToSid(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?ConvertNameToSid@@YAKPEBGPEAPEAX@Z
0x1400076A4: "LW" ??_C@_15GAHNKDFA@?$AAL?$AAW?$AA?$AA@
0x140007310: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x14000AA90: "unsigned long Debug" ?Debug@@3KA
0x140007B50: "/save" ??_C@_1M@DODDAKEK@?$AA?1?$AAs?$AAa?$AAv?$AAe?$AA?$AA@
0x1400060D0: "__cdecl _report_gsfailure" __report_gsfailure
0x14000A220: ?InheritanceMap@@3PAU<unnamed-type-InheritanceMap>@@A
0x140007498: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x1400075A0: ": " ??_C@_15ELOONFKJ@?$AA?3?$AA?5?$AA?$AA@
0x14000AAD0: "__cdecl _native_startup_state" __native_startup_state
0x1400072C0: "__cdecl _imp_IsValidAcl" __imp_IsValidAcl
0x140002350: "unsigned long __cdecl ConvertSidToName(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ConvertSidToName@@YAKPEAXPEAPEAG@Z
0x140007848: "FILE_WRITE_DATA/FILE_ADD_FILE" ??_C@_1DM@LPKFLAJH@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?1?$AAF?$AAI?$AAL?$AAE?$AA_?$AAA?$AAD?$AAD?$AA_?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x140007AC0: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140007C5C: "/Q" ??_C@_15MLHGIBHI@?$AA?1?$AAQ?$AA?$AA@
0x140007448: "__cdecl _imp__fmode" __imp__fmode
0x140007630: "X" ??_C@_13NAACAHKO@?$AAX?$AA?$AA@
0x140007C78: "Prefix: " ??_C@_1BC@MMIJIMHG@?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AA?3?$AA?5?$AA?$AA@
0x1400072D8: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x140001BD0: "unsigned long __cdecl RemoveInheritance(struct _ACL * __ptr64)" ?RemoveInheritance@@YAKPEAU_ACL@@@Z
0x1400085F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140001C74: "unsigned long __cdecl MySetNamedSecurityInfo(unsigned short const * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64,unsigned long)" ?MySetNamedSecurityInfo@@YAKPEBGW4_SE_OBJECT_TYPE@@KPEAX2PEAU_ACL@@3K@Z
0x1400025A0: "unsigned long __cdecl EnablePrivilege(unsigned short const * __ptr64)" ?EnablePrivilege@@YAKPEBG@Z
0x140007468: "__cdecl _imp_calloc" __imp_calloc
0x140007368: "__cdecl _imp_free" __imp_free
0x140005F00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140007270: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140007218: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1400074D8: "__cdecl _imp_RtlDosPathNameToRelativeNtPathName_U" __imp_RtlDosPathNameToRelativeNtPathName_U
0x140008578: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400085C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140008640: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]