Generated by JEB on 2019/08/01

PE: C:\Windows\System32\VaultCmd.exe Base=0x140000000 SHA-256=9E68FCF6FD1104BBD1CA47BB36347ABC621329924F880B75793638AF04DC607E
PDB: VaultCmd.pdb GUID={BAAD7114-6F1F-6118-F23152A7C2EF675B} Age=1

384 located named symbols:
0x140005178: "__cdecl _imp_VaultOpenVault" __imp_VaultOpenVault
0x140004614: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400051D8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1400042E8: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x140003940: LocWriteMsgIO
0x140008658: "struct HINSTANCE__ * __ptr64 __ptr64 g_hVaultCli" ?g_hVaultCli@@3PEAUHINSTANCE__@@EA
0x140005758: "/list" ??_C@_1M@IDBLGKND@?$AA?1?$AAl?$AAi?$AAs?$AAt?$AA?$AA@
0x14000631C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400049FA: "__cdecl o___p___wargv" _o___p___wargv
0x1400042D0: "__cdecl get_startup_commit_mode" _get_startup_commit_mode
0x140006150: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x140005638: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x140008040: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x140008008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140002C28: "unsigned long __cdecl ConvertGuidStringToGuid(unsigned short * __ptr64,struct _GUID * __ptr64)" ?ConvertGuidStringToGuid@@YAKPEAGPEAU_GUID@@@Z
0x140004A36: "__cdecl o__configthreadlocale" _o__configthreadlocale
0x140004350: "__cdecl _scrt_get_dyn_tls_dtor_callback" __scrt_get_dyn_tls_dtor_callback
0x140005278: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140005560: "/identity" ??_C@_1BE@BLGODFAE@?$AA?1?$AAi?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$AA@
0x140005188: VAULTCLI_NULL_THUNK_DATA
0x1400049BE: "__cdecl c_exit" _c_exit
0x140004CA0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003888: "unsigned long __cdecl ConvertGuidToString(struct _GUID const * __ptr64,unsigned short * __ptr64,unsigned long)" ?ConvertGuidToString@@YAKPEBU_GUID@@PEAGK@Z
0x140004B90: "__cdecl vsnwprintf" _vsnwprintf
0x140004AC6: exit
0x1400053C8: "__cdecl _imp__o___acrt_iob_func" __imp__o___acrt_iob_func
0x140005348: "__cdecl _imp__seh_filter_exe" __imp__seh_filter_exe
0x1400054C8: "__cdecl _xp_a" __xp_a
0x140004580: "__cdecl RTC_Initialize" _RTC_Initialize
0x140005318: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x140001510: "void __cdecl AddCreds(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?AddCreds@@YAXPEAPEAG0H@Z
0x140005398: "__cdecl _imp_terminate" __imp_terminate
0x140005D88: "__cdecl _rtc_taa" __rtc_taa
0x1400062E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1400042D0: "__cdecl get_startup_thread_locale_mode" _get_startup_thread_locale_mode
0x1400053E0: "__cdecl _imp__initterm_e" __imp__initterm_e
0x140005210: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140005400: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x140004990: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x140005430: "__cdecl _imp_CredFree" __imp_CredFree
0x1400042FC: "__cdecl _vcrt_initialize" __vcrt_initialize
0x140005330: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x140004A96: "__cdecl o__seh_filter_exe" _o__seh_filter_exe
0x140005478: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140005250: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140005D78: "__cdecl _rtc_iaa" __rtc_iaa
0x140005360: "__cdecl _imp__o___stdio_common_vswprintf" __imp__o___stdio_common_vswprintf
0x140005480: "__cdecl _xc_a" __xc_a
0x140002EAC: "unsigned long __cdecl InterpretStringAsGivenType(unsigned short * __ptr64,enum VAULT_ELEMENT_TYPE,unsigned char,struct _VAULT_ITEM_ELEMENT * __ptr64)" ?InterpretStringAsGivenType@@YAKPEAGW4VAULT_ELEMENT_TYPE@@EPEAU_VAULT_ITEM_ELEMENT@@@Z
0x1400053D0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x140008650: "unsigned long (__cdecl* __ptr64 g_fpVaultTriggerSync)(unsigned short * __ptr64)" ?g_fpVaultTriggerSync@@3P6AKPEAG@ZEA
0x140005448: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x140008020: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x1400051F8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140004A42: "__cdecl configure_wide_argv" _configure_wide_argv
0x1400053C0: "__cdecl _imp__o___p___argc" __imp__o___p___argc
0x140001AC0: "void __cdecl PrintVaultVariantInBuffer(struct _VAULT_VARIANT * __ptr64,unsigned short * __ptr64,unsigned long)" ?PrintVaultVariantInBuffer@@YAXPEAU_VAULT_VARIANT@@PEAGK@Z
0x140008018: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x140005270: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140004C7D: memcpy
0x140005228: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140005408: "__cdecl _imp_memset" __imp_memset
0x1400042FC: "__cdecl _acrt_initialize" __acrt_initialize
0x1400053B8: "__cdecl _imp___p___wargv" __imp___p___wargv
0x1400049A6: "__cdecl initterm" _initterm
0x140004A72: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x140006254: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140008670: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140004B38: wprintf
0x1400054C0: "__cdecl _xi_z" __xi_z
0x140004A5A: "__cdecl exit" _exit
0x1400051B0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140008648: "struct HINSTANCE__ * __ptr64 __ptr64 g_hModuleHandle" ?g_hModuleHandle@@3PEAUHINSTANCE__@@EA
0x140005130: USERENV_NULL_THUNK_DATA
0x140005148: "__cdecl _imp_VaultGetInformation" __imp_VaultGetInformation
0x140004ADE: "__cdecl _C_specific_handler" __C_specific_handler
0x140005390: "__cdecl _imp__o_exit" __imp__o_exit
0x140005618: Vault_Protection_Dpapi
0x1400051E0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140005358: "__cdecl _imp__set_fmode" __imp__set_fmode
0x140005338: "__cdecl _imp__o__initialize_wide_environment" __imp__o__initialize_wide_environment
0x140004164: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x140005388: "__cdecl _imp__wtoi" __imp__wtoi
0x1400044C4: "__cdecl _scrt_initialize_mta" __scrt_initialize_mta
0x1400032C4: "int __cdecl GetOptionData(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetOptionData@@YAHPEAPEAG0HPEAG0@Z
0x140004C1C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140004098: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x140004A2A: "__cdecl cexit" _cexit
0x140003F68: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x140005768: "/listschema" ??_C@_1BI@LNMGCBOK@?$AA?1?$AAl?$AAi?$AAs?$AAt?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AA?$AA@
0x140005310: "__cdecl _imp__configure_wide_argv" __imp__configure_wide_argv
0x1400042FC: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x140005410: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x140004AD2: terminate
0x1400055F8: Vault_Schema_DomainPassword
0x1400052E8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140006164: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140004A36: "__cdecl configthreadlocale" _configthreadlocale
0x140004528: "__cdecl _scrt_set_unhandled_exception_filter" __scrt_set_unhandled_exception_filter
0x140005668: "Attribute: %ws|0x%08x|%d " ??_C@_1DE@HIJNKAAE@?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AA?3?$AA?7?$AA?$CF?$AAw?$AAs?$AA?$HM?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$HM?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x1400057F0: "%08lX-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GE@PJOKKCLH@?$AA?$CF?$AA0?$AA8?$AAl?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1400055C0: "/savedBy" ??_C@_1BC@CIBOEEEO@?$AA?1?$AAs?$AAa?$AAv?$AAe?$AAd?$AAB?$AAy?$AA?$AA@
0x140005738: "VaultCli.dll" ??_C@_1BK@NJKBFDNP@?$AAV?$AAa?$AAu?$AAl?$AAt?$AAC?$AAl?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140004A42: "__cdecl o__configure_wide_argv" _o__configure_wide_argv
0x140006308: "__cdecl _IMPORT_DESCRIPTOR_VAULTCLI" __IMPORT_DESCRIPTOR_VAULTCLI
0x140004A06: "__cdecl o___p__commode" _o___p__commode
0x140004310: "__cdecl initialize_denormal_control" _initialize_denormal_control
0x140005390: "__cdecl _imp_exit" __imp_exit
0x1400023D8: "void __cdecl ListSchemas(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ListSchemas@@YAXPEAPEAG0H@Z
0x1400052E0: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400041F0: atexit
0x140005578: "/sid" ??_C@_19BLEDGHGB@?$AA?1?$AAs?$AAi?$AAd?$AA?$AA@
0x140005588: "/addcreds" ??_C@_1BE@DJEFPMGH@?$AA?1?$AAa?$AAd?$AAd?$AAc?$AAr?$AAe?$AAd?$AAs?$AA?$AA@
0x1400049CA: "__cdecl register_thread_local_exe_atexit_callback" _register_thread_local_exe_atexit_callback
0x140005658: "%f" ??_C@_15HBBGCAG@?$AA?$CF?$AAf?$AA?$AA@
0x1400042FC: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x1400051C8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140005A10: "Error loading resource: 0x%08x " ??_C@_1EA@KNKFBJCG@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAl?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?6?$AA?$AA@
0x1400054D8: "__cdecl _xt_a" __xt_a
0x1400080A0: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x140005280: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140005548: "/resource" ??_C@_1BE@KJKICMBB@?$AA?1?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x140005128: "__cdecl _imp_LookupAppContainerDisplayName" __imp_LookupAppContainerDisplayName
0x1400045D0: "__cdecl RTC_Terminate" _RTC_Terminate
0x1400062F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140005378: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400053A0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140008660: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUezfogUxlnnlmUlyquivUznwGEUkxsOlyq@VaultCommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUezfogUxlnnlmUlyquivUznwGEUkxsOlyq@VaultCommon
0x1400052C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140005248: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400051B8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140005440: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x140004BF8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1400010C0: "void __cdecl DeleteCreds(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?DeleteCreds@@YAXPEAPEAG0H@Z
0x140002678: "void __cdecl ListCreds(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ListCreds@@YAXPEAPEAG0H@Z
0x1400042DC: "__cdecl get_startup_file_mode" _get_startup_file_mode
0x140008014: "__cdecl _isa_enabled" __isa_enabled
0x140005290: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140004A72: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x1400042D0: "__cdecl _scrt_stub_for_initialize_mta" __scrt_stub_for_initialize_mta
0x140008048: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x1400053C0: "__cdecl _imp___p___argc" __imp___p___argc
0x1400042FC: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x1400052A0: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x1400054B0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x140006204: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140005428: "__cdecl _imp_CredMarshalCredentialW" __imp_CredMarshalCredentialW
0x140003358: IsVisibleVault
0x1400061C8: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x1400051E8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400049EE: "__cdecl o___p___argc" _o___p___argc
0x140005438: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA
0x1400049E2: "__cdecl _acrt_iob_func" __acrt_iob_func
0x1400053E8: "__cdecl _imp__initterm" __imp__initterm
0x140006290: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x1400053A8: "__cdecl _imp__o___stdio_common_vfwprintf" __imp__o___stdio_common_vfwprintf
0x1400062B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400056A0: "Unable to find resource" ??_C@_1DA@BDHECBPN@?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAi?$AAn?$AAd?$AA?5?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x140005120: CRYPT32_NULL_THUNK_DATA
0x140005318: "__cdecl _imp__o__crt_atexit" __imp__o__crt_atexit
0x140005648: "%hu" ??_C@_17JDANJBDN@?$AA?$CF?$AAh?$AAu?$AA?$AA@
0x140001A44: StringCchPrintfW
0x14000431C: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x140005860: "Error(%#x): failed to construct " ??_C@_1GG@LCDADNKL@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?5@
0x140005320: "__cdecl _imp__exit" __imp__exit
0x140003FB8: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x140005470: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400055E8: Vault_CredmanVault_ID
0x140004360: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x140005288: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400042FC: "__cdecl should_initialize_environment" _should_initialize_environment
0x140005138: "__cdecl _imp_VaultAddItem" __imp_VaultAddItem
0x1400056D0: "/listcreds" ??_C@_1BG@DKNAOFNO@?$AA?1?$AAl?$AAi?$AAs?$AAt?$AAc?$AAr?$AAe?$AAd?$AAs?$AA?$AA@
0x140005460: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140005380: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x140004A8A: "__cdecl register_onexit_function" _register_onexit_function
0x1400042D0: "__cdecl _scrt_exe_initialize_mta" __scrt_exe_initialize_mta
0x1400051A0: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x140005858: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x1400052F8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140005498: "__cdecl _xi_a" __xi_a
0x140005780: "Error while loading resources" ??_C@_1DM@HIMKMIFM@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAw?$AAh?$AAi?$AAl?$AAe?$AA?5?$AAl?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x1400052A8: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1400051A8: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x140003464: wmain
0x140003F28: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x140003168: "unsigned long __cdecl GetGuidFromSchemaName(struct _GUID,unsigned short * __ptr64,struct _GUID * __ptr64)" ?GetGuidFromSchemaName@@YAKU_GUID@@PEAGPEAU1@@Z
0x1400049EE: "__cdecl _p___argc" __p___argc
0x1400055A0: "/authenticator" ??_C@_1BO@HCPADHOI@?$AA?1?$AAa?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x140005420: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140004A4E: "__cdecl o__crt_atexit" _o__crt_atexit
0x140005168: "__cdecl _imp_VaultGetItemType" __imp_VaultGetItemType
0x1400042D0: "__cdecl get_startup_new_mode" _get_startup_new_mode
0x1400044D0: "__cdecl _scrt_is_managed_app" __scrt_is_managed_app
0x140004540: "__cdecl _scrt_unhandled_exception_filter" __scrt_unhandled_exception_filter
0x140004A2A: "__cdecl o__cexit" _o__cexit
0x140005140: "__cdecl _imp_VaultEnumerateItemTypes" __imp_VaultEnumerateItemTypes
0x140004A66: "__cdecl o__get_initial_wide_environment" _o__get_initial_wide_environment
0x140005660: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x1400053F0: "__cdecl _imp__register_thread_local_exe_atexit_callback" __imp__register_thread_local_exe_atexit_callback
0x140002D50: "unsigned long __cdecl GetGuidFromVaultName(unsigned short * __ptr64,struct _GUID * __ptr64)" ?GetGuidFromVaultName@@YAKPEAGPEAU_GUID@@@Z
0x140004AD2: "__cdecl o_terminate" _o_terminate
0x140006240: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400062A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1400053B0: "__cdecl _imp__o___p__commode" __imp__o___p__commode
0x140004310: "__cdecl initialize_invalid_parameter_handler" _initialize_invalid_parameter_handler
0x1400047D0: "__cdecl _isa_available_init" __isa_available_init
0x1400042C4: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x1400061DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140005D80: "__cdecl _rtc_izz" __rtc_izz
0x140003F00: "__cdecl _security_check_cookie" __security_check_cookie
0x140005190: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x140005490: "__cdecl _xc_z" __xc_z
0x1400061F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140005298: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140005230: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1400053A8: "__cdecl _imp___stdio_common_vfwprintf" __imp___stdio_common_vfwprintf
0x140004AEC: fwprintf
0x1400053C8: "__cdecl _imp___acrt_iob_func" __imp___acrt_iob_func
0x140005650: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x14000339C: "void __cdecl GetAction(unsigned short * __ptr64,enum Action * __ptr64)" ?GetAction@@YAXPEAGPEAW4Action@@@Z
0x1400052F0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140005310: "__cdecl _imp__o__configure_wide_argv" __imp__o__configure_wide_argv
0x140005268: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x140005200: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400057C0: "0123456789ABCDEF" ??_C@_1CC@JPENPCAM@?$AA0?$AA1?$AA2?$AA3?$AA4?$AA5?$AA6?$AA7?$AA8?$AA9?$AAA?$AAB?$AAC?$AAD?$AAE?$AAF?$AA?$AA@
0x140005350: "__cdecl _imp__set_app_type" __imp__set_app_type
0x1400051F0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140005150: "__cdecl _imp_VaultCloseVault" __imp_VaultCloseVault
0x140008628: "struct ResourceStrings g_rs" ?g_rs@@3UResourceStrings@@A
0x1400059C0: "Error(%#x): string composition f" ??_C@_1FA@FMAOBMLA@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf@
0x1400052D8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400054D0: "__cdecl _xp_z" __xp_z
0x140005350: "__cdecl _imp__o__set_app_type" __imp__o__set_app_type
0x140005358: "__cdecl _imp__o__set_fmode" __imp__o__set_fmode
0x140005118: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x14000627C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140002C78: "unsigned long __cdecl ConvertByteStringToByteArray(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ConvertByteStringToByteArray@@YAKPEBGPEAPEAEPEAK@Z
0x1400052B8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140005D90: "__cdecl _rtc_tzz" __rtc_tzz
0x1400054E8: "__cdecl _guard_fids_table" __guard_fids_table
0x140005010: "__cdecl load_config_used" _load_config_used
0x140004A12: "__cdecl o___stdio_common_vfwprintf" _o___stdio_common_vfwprintf
0x14000618C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x140004ABA: "__cdecl set_new_mode" _set_new_mode
0x1400058D0: "Error(%#x): start of conversion " ??_C@_1HK@PLFBFLFJ@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAc?$AAo?$AAn?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5@
0x140004A5A: "__cdecl o__exit" _o__exit
0x1400054B8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x140002088: "void __cdecl ListVaults(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ListVaults@@YAXPEAPEAG0H@Z
0x1400061B4: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x140005628: Vault_Schema_DomainExtended
0x140005308: "__cdecl _imp__configthreadlocale" __imp__configthreadlocale
0x1400062CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400055D8: Vault_DefaultVault_ID
0x140004340: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x140005158: "__cdecl _imp_VaultRemoveItem" __imp_VaultRemoveItem
0x140002B60: WriteMsg
0x140005240: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140001A44: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1400052C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400052B0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000613C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x140004A06: "__cdecl _p__commode" __p__commode
0x140005368: "__cdecl _imp__o__set_new_mode" __imp__o__set_new_mode
0x140005338: "__cdecl _imp__initialize_wide_environment" __imp__initialize_wide_environment
0x140005170: "__cdecl _imp_VaultEnumerateVaults" __imp_VaultEnumerateVaults
0x140005718: "/sync" ??_C@_1M@FLIDPPPO@?$AA?1?$AAs?$AAy?$AAn?$AAc?$AA?$AA@
0x140005218: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1400052D0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140005360: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x140004A8A: "__cdecl o__register_onexit_function" _o__register_onexit_function
0x140001E20: "void __cdecl DisplayItem(void * __ptr64,struct _VAULT_ITEM)" ?DisplayItem@@YAXPEAXU_VAULT_ITEM@@@Z
0x140008030: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x140004310: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140005260: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1400042FC: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x140005328: "__cdecl _imp__get_initial_wide_environment" __imp__get_initial_wide_environment
0x140005458: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1400049E2: "__cdecl o___acrt_iob_func" _o___acrt_iob_func
0x140005734: ":" ??_C@_13EBCNDICG@?$AA?3?$AA?$AA@
0x140006268: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x1400056E8: "/all" ??_C@_19LAKEOIGL@?$AA?1?$AAa?$AAl?$AAl?$AA?$AA@
0x140005238: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400049B2: "__cdecl initterm_e" _initterm_e
0x140004138: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x140005530: "/credtype" ??_C@_1BE@KLIPNEIK@?$AA?1?$AAc?$AAr?$AAe?$AAd?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x140004AA2: "__cdecl o__set_app_type" _o__set_app_type
0x140005388: "__cdecl _imp__o__wtoi" __imp__o__wtoi
0x140005258: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x140005468: ntdll_NULL_THUNK_DATA
0x140005370: "__cdecl _imp_memcpy" __imp_memcpy
0x140004A96: "__cdecl seh_filter_exe" _seh_filter_exe
0x140005308: "__cdecl _imp__o__configthreadlocale" __imp__o__configthreadlocale
0x140005418: "__cdecl _imp_FreeSid" __imp_FreeSid
0x140005368: "__cdecl _imp__set_new_mode" __imp__set_new_mode
0x140004AC6: "__cdecl o_exit" _o_exit
0x140005640: "%hd" ??_C@_17HLKIKBMH@?$AA?$CF?$AAh?$AAd?$AA?$AA@
0x140008000: "__cdecl _security_cookie" __security_cookie
0x140002304: "void __cdecl ListSchemasInVault(struct _VAULT_ITEM_SCHEMA * __ptr64,unsigned long)" ?ListSchemasInVault@@YAXPEAU_VAULT_ITEM_SCHEMA@@K@Z
0x140004370: "__cdecl _scrt_fastfail" __scrt_fastfail
0x140004ABA: "__cdecl o__set_new_mode" _o__set_new_mode
0x140006128: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x1400037D4: "void __cdecl ConvertByteArrayToString(unsigned char * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?ConvertByteArrayToString@@YAXPEAEKPEAGK@Z
0x140005380: "__cdecl _imp__o__wsetlocale" __imp__o__wsetlocale
0x140005208: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400061A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140005220: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x1400053D8: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x140001008: "unsigned long __cdecl GetMarshalledUserNameFromCertHash(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetMarshalledUserNameFromCertHash@@YAKPEAGPEAPEAG@Z
0x140005950: "Error(%#x): memory allocation (%" ??_C@_1GG@IBCJBNJB@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$CI?$AA?$CF?$AA?$CD?$AAx?$AA?$CJ?$AA?3?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AA?$CF@
0x140005728: "DPAPI" ??_C@_1M@BPOOOGE@?$AAD?$AAP?$AAA?$AAP?$AAI?$AA?$AA@
0x140008010: "__cdecl _isa_available" __isa_available
0x140006178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l1-1-0
0x140003A94: VLocWriteMsg
0x1400051C0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140003C04: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x140005330: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x140008624: "__cdecl _favor" __favor
0x140005198: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x1400053B0: "__cdecl _imp___p__commode" __imp___p__commode
0x140004210: "__cdecl _security_init_cookie" __security_init_cookie
0x1400049FA: "__cdecl _p___wargv" __p___wargv
0x140005300: "__cdecl _imp__cexit" __imp__cexit
0x140005340: "__cdecl _imp__o__register_onexit_function" __imp__o__register_onexit_function
0x140005378: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x140005450: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x140004A7E: "__cdecl initialize_wide_environment" _initialize_wide_environment
0x140004AAE: "__cdecl set_fmode" _set_fmode
0x1400054E0: "__cdecl _xt_z" __xt_z
0x140003ED0: wmainCRTStartup
0x140005180: "__cdecl _imp_VaultFree" __imp_VaultFree
0x1400051D0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140002B8C: WriteErrorMsg
0x140005340: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x1400056F8: "/listproperties" ??_C@_1CA@MMNPMAJB@?$AA?1?$AAl?$AAi?$AAs?$AAt?$AAp?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x140005160: "__cdecl _imp_VaultEnumerateItems" __imp_VaultEnumerateItems
0x140001CD8: "void __cdecl PrintVaultItemElement(struct _VAULT_ITEM_ELEMENT,enum ElementType)" ?PrintVaultItemElement@@YAXU_VAULT_ITEM_ELEMENT@@W4ElementType@@@Z
0x140004680: "__cdecl _report_gsfailure" __report_gsfailure
0x140004A4E: "__cdecl crt_atexit" _crt_atexit
0x140003BF4: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x140004198: "__cdecl onexit" _onexit
0x140008668: "__cdecl _dyn_tls_dtor_callback" __dyn_tls_dtor_callback
0x1400028B8: "void __cdecl ListProperties(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ListProperties@@YAXPEAPEAG0H@Z
0x140005398: "__cdecl _imp__o_terminate" __imp__o_terminate
0x140005328: "__cdecl _imp__o__get_initial_wide_environment" __imp__o__get_initial_wide_environment
0x140008090: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x140001D84: "unsigned long __cdecl AllocAndLoadStringHelper(unsigned long,unsigned short * __ptr64 * __ptr64)" ?AllocAndLoadStringHelper@@YAKKPEAPEAG@Z
0x140004A7E: "__cdecl o__initialize_wide_environment" _o__initialize_wide_environment
0x140005320: "__cdecl _imp__o__exit" __imp__o__exit
0x1400053B8: "__cdecl _imp__o___p___wargv" __imp__o___p___wargv
0x140004A1E: "__cdecl _stdio_common_vswprintf" __stdio_common_vswprintf
0x140004A12: "__cdecl _stdio_common_vfwprintf" __stdio_common_vfwprintf
0x140004A66: "__cdecl get_initial_wide_environment" _get_initial_wide_environment
0x1400053F8: "__cdecl _imp__c_exit" __imp__c_exit
0x14000622C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140005300: "__cdecl _imp__o__cexit" __imp__o__cexit
0x140004A1E: "__cdecl o___stdio_common_vswprintf" _o___stdio_common_vswprintf
0x140005510: "/deletecreds" ??_C@_1BK@MJMGAGJF@?$AA?1?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AAc?$AAr?$AAe?$AAd?$AAs?$AA?$AA@
0x140004AAE: "__cdecl o__set_fmode" _o__set_fmode
0x1400042D0: "__cdecl _scrt_initialize_winrt" __scrt_initialize_winrt
0x140006218: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x140004AA2: "__cdecl set_app_type" _set_app_type
0x140005348: "__cdecl _imp__o__seh_filter_exe" __imp__o__seh_filter_exe
0x140002FF0: "unsigned long __cdecl GetItemElementFromSchema(struct _GUID,struct _GUID,unsigned short * __ptr64,enum VAULT_SCHEMA_ELEMENT_ID,struct _VAULT_ITEM_ELEMENT * __ptr64)" ?GetItemElementFromSchema@@YAKU_GUID@@0PEAGW4VAULT_SCHEMA_ELEMENT_ID@@PEAU_VAULT_ITEM_ELEMENT@@@Z
0x1400049D6: memset
0x140006330: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140005608: Vault_Schema_DomainCertificate
0x140008038: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]