Generated by JEB on 2019/08/01
PE: C:\Windows\System32\cacls.exe Base=0x140000000 SHA-256=C81018F19C8C104E568D5168C7CA7011FAA9C7BA7310510B303E54A7FAFCE84C
PDB: cacls.pdb GUID={D254347B-FE36-7200-65595F090CE96C1F} Age=1
328 located named symbols:
0x140005304: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140006278: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1400061E8: "__cdecl _imp_AccTreeResetNamedSecurityInfo" __imp_AccTreeResetNamedSecurityInfo
0x140005710: "__cdecl FindPESection" _FindPESection
0x1400068C0: "FILE_GENERIC_READ" ??_C@_0BC@GMNABHGN@FILE_GENERIC_READ?$AA@
0x140006588: "__cdecl _imp_RtlReleaseRelativeName" __imp_RtlReleaseRelativeName
0x140001E84: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1400063B8: "__cdecl _imp_AddAce" __imp_AddAce
0x140007060: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140006720: "Revoke" ??_C@_1O@MEIHCNHA@?$AAR?$AAe?$AAv?$AAo?$AAk?$AAe?$AA?$AA@
0x140006418: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA
0x140005700: "__cdecl wsetargv" _wsetargv
0x140004DC8: "unsigned long __cdecl DisplayDACL(unsigned short * __ptr64,int,unsigned long)" ?DisplayDACL@@YAKPEAGHK@Z
0x140009010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140006460: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140006310: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140006400: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x140006668: "*.*" ??_C@_17ECHFBE@?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x1400068F0: "FILE_GENERIC_EXECUTE" ??_C@_0BF@IAPBJHNL@FILE_GENERIC_EXECUTE?$AA@
0x1400059F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000182C: "private: unsigned long __cdecl CDaclWrap::_FillNewAcl(struct _ACL * __ptr64,struct _ACL * __ptr64,int) __ptr64" ?_FillNewAcl@CDaclWrap@@AEAAKPEAU_ACL@@0H@Z
0x140006758: "P" ??_C@_13BFLGCPEB@?$AAP?$AA?$AA@
0x1400066CC: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x1400095C0: "__cdecl commode" _commode
0x1400069C8: "
" ??_C@_02PHMGELLB@?6?6?$AA@
0x1400067B0: ""%s"" ??_C@_19GBMGDAIM@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?$AA@
0x140007178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x140007100: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1400062C0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1400064B8: "__cdecl _imp_wcschr" __imp_wcschr
0x1400062A0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x1400055E0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400065B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140006648: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1400095CC: "__cdecl fmode" _fmode
0x1400062E0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140006528: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1400064B0: "__cdecl _imp_fgetws" __imp_fgetws
0x1400071F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x140006730: "R" ??_C@_13LPLPOHMK@?$AAR?$AA?$AA@
0x140006658: "\*.*" ??_C@_19CFMCKEMN@?$AA?2?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x1400029B0: "private: void * __ptr64 __cdecl CFileSecurity::OpenFile(unsigned long) __ptr64" ?OpenFile@CFileSecurity@@AEAAPEAXK@Z
0x140006398: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x140001F24: "public: __cdecl CFileEnumerate::~CFileEnumerate(void) __ptr64" ??1CFileEnumerate@@QEAA@XZ
0x14000563E: "__cdecl XcptFilter" _XcptFilter
0x1400065B8: "__cdecl _xc_a" __xc_a
0x140006970: "FILE_DELETE_CHILD" ??_C@_0BC@BBPHDJDF@FILE_DELETE_CHILD?$AA@
0x1400068B0: "GENERIC_ALL" ??_C@_0M@IAEDAMCF@GENERIC_ALL?$AA@
0x140006798: " " ??_C@_01CLKCMJKC@?5?$AA@
0x1400066DC: "S:" ??_C@_15FLLBDMMA@?$AAS?$AA?3?$AA?$AA@
0x140006940: "FILE_READ_EA" ??_C@_0N@CNBJBELP@FILE_READ_EA?$AA@
0x140006260: "__cdecl _imp_FindClose" __imp_FindClose
0x1400068A0: "GENERIC_EXECUTE" ??_C@_0BA@JNPFDOEE@GENERIC_EXECUTE?$AA@
0x1400062A8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400068D8: "FILE_GENERIC_WRITE" ??_C@_0BD@OFPOCHAM@FILE_GENERIC_WRITE?$AA@
0x140006928: "FILE_APPEND_DATA" ??_C@_0BB@NIGHGJAO@FILE_APPEND_DATA?$AA@
0x140001124: "public: unsigned long __cdecl CAccount::GetAccountSid(struct _SID * __ptr64 * __ptr64) __ptr64" ?GetAccountSid@CAccount@@QEAAKPEAPEAU_SID@@@Z
0x1400055CD: "__cdecl callnewh" _callnewh
0x1400062F8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400059C6: memcpy
0x1400064D0: "__cdecl _imp__vsnwprintf_s" __imp__vsnwprintf_s
0x1400026DC: "private: unsigned long __cdecl CFileEnumerate::_DownDir(unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?_DownDir@CFileEnumerate@@AEAAKPEAPEAGPEAH@Z
0x1400069B8: "%*s%s
" ??_C@_06NMOHOLHK@?$CF?$CKs?$CFs?6?$AA@
0x140006540: "__cdecl _imp_memset" __imp_memset
0x1400067C0: "STANDARD_RIGHTS_ALL" ??_C@_0BE@OLACNDDL@STANDARD_RIGHTS_ALL?$AA@
0x140006288: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x1400058CF: "__cdecl initterm" _initterm
0x1400071DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140009600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140006360: "__cdecl _imp_Sleep" __imp_Sleep
0x1400065E8: "__cdecl _xi_z" __xi_z
0x1400066BC: "L" ??_C@_13PHJMHGG@?$AAL?$AA?$AA@
0x140006498: "__cdecl _imp___iob_func" __imp___iob_func
0x140006220: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140003A9C: "unsigned long __cdecl ModifyAces(unsigned short * __ptr64,enum MODE,unsigned long,unsigned short * __ptr64 * __ptr64 const,int,long * __ptr64 const,long * __ptr64 const)" ?ModifyAces@@YAKPEAGW4MODE@@KQEAPEAGHQEAJ3@Z
0x1400058DB: "__cdecl _C_specific_handler" __C_specific_handler
0x140006350: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x140001008: "public: __cdecl CAccount::~CAccount(void) __ptr64" ??1CAccount@@QEAA@XZ
0x1400025F0: "private: unsigned long __cdecl CFileEnumerate::_NextDir(unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?_NextDir@CFileEnumerate@@AEAAKPEAPEAGPEAH@Z
0x1400061F0: NTMARTA_NULL_THUNK_DATA
0x1400055C1: malloc
0x140006298: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1400067D4: "DELETE" ??_C@_06FKDAMKFP@DELETE?$AA@
0x140001A94: "public: unsigned long __cdecl CDumpSecurity::Init(void) __ptr64" ?Init@CDumpSecurity@@QEAAKXZ
0x140006268: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x14000595C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140001604: "private: unsigned long __cdecl CDaclWrap::_SetAllowedAce(struct _ACL * __ptr64,unsigned long,struct _SID * __ptr64,int) __ptr64" ?_SetAllowedAce@CDaclWrap@@AEAAKPEAU_ACL@@KPEAU_SID@@H@Z
0x14000670C: "E" ??_C@_13HCHBIIOM@?$AAE?$AA?$AA@
0x140006628: "\\?\Volume" ??_C@_1BG@CPJCOMEA@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x140001D64: "public: long __cdecl CDumpSecurity::GetNextAce(struct _ACE_HEADER * __ptr64 * __ptr64) __ptr64" ?GetNextAce@CDumpSecurity@@QEAAJPEAPEAU_ACE_HEADER@@@Z
0x1400036CC: "unsigned long __cdecl DisplayInfo(unsigned short * __ptr64,unsigned long)" ?DisplayInfo@@YAKPEAGK@Z
0x140006508: "__cdecl _imp_ferror" __imp_ferror
0x1400041B0: "void __cdecl TreeResetSDDLCallback(unsigned short * __ptr64,unsigned long,enum _PROGRESS_INVOKE_SETTING * __ptr64,void * __ptr64,int)" ?TreeResetSDDLCallback@@YAXPEAGKPEAW4_PROGRESS_INVOKE_SETTING@@PEAXH@Z
0x140006500: "__cdecl _imp_fwprintf_s" __imp_fwprintf_s
0x140006348: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1400095D0: "unsigned short * __ptr64 __ptr64 g_pszSDDL" ?g_pszSDDL@@3PEAGEA
0x1400070C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1400056F3: "__cdecl amsg_exit" _amsg_exit
0x140006478: "__cdecl _imp__callnewh" __imp__callnewh
0x1400066AC: "M" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x140006518: "__cdecl _imp_exit" __imp_exit
0x140006338: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400022EC: "private: unsigned long __cdecl CFileEnumerate::_NextLocal(unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?_NextLocal@CFileEnumerate@@AEAAKPEAPEAGPEAH@Z
0x140006790: "N" ??_C@_13KFHAAPON@?$AAN?$AA?$AA@
0x1400069C0: "%s " ??_C@_17GMPJMPF@?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x140006238: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140006578: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x140006300: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140002D44: "void __cdecl usage(void)" ?usage@@YAXXZ
0x140002B74: "void __cdecl vfcprintf(struct _iobuf * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?vfcprintf@@YAXPEAU_iobuf@@PEBGPEAD@Z
0x140004CDC: "unsigned long __cdecl DisplaySDDL(unsigned short * __ptr64,int,unsigned long)" ?DisplaySDDL@@YAKPEAGHK@Z
0x1400095F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140006700: "Edit" ??_C@_19PLOBJMHF@?$AAE?$AAd?$AAi?$AAt?$AA?$AA@
0x140005620: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140007114: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x1400064D8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400064E8: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x140006438: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140006738: "Grant" ??_C@_1M@PIIPMLIO@?$AAG?$AAr?$AAa?$AAn?$AAt?$AA?$AA@
0x140006558: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140001718: "private: unsigned long __cdecl CDaclWrap::_SetDeniedAce(struct _ACL * __ptr64,unsigned long,struct _SID * __ptr64,int) __ptr64" ?_SetDeniedAce@CDaclWrap@@AEAAKPEAU_ACL@@KPEAU_SID@@H@Z
0x1400062D0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400063D0: "__cdecl _imp_SetSecurityAccessMask" __imp_SetSecurityAccessMask
0x140006218: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140004F58: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140004274: "unsigned long __cdecl SetDACLFromSDDL(unsigned short * __ptr64,enum MODE,unsigned long,unsigned short * __ptr64)" ?SetDACLFromSDDL@@YAKPEAGW4MODE@@K0@Z
0x140005938: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140006690: "Tree" ??_C@_19BGDOLOIO@?$AAT?$AAr?$AAe?$AAe?$AA?$AA@
0x140006538: "__cdecl _imp__commode" __imp__commode
0x140006440: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400012DC: "private: unsigned long __cdecl CDaclWrap::_GetNewAclSize(unsigned long * __ptr64,struct _ACL * __ptr64,int) __ptr64" ?_GetNewAclSize@CDaclWrap@@AEAAKPEAKPEAU_ACL@@H@Z
0x1400063E8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x140006318: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140007088: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x1400067AC: "
" ??_C@_01EEMJAFIK@?6?$AA@
0x1400067A8: ":" ??_C@_01JLIPDDHJ@?3?$AA@
0x1400057C0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140001DFC: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140006598: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1400066A0: "Mount" ??_C@_1M@DIBJBGGG@?$AAM?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1400071B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140006620: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140006280: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x140006340: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140006358: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1400095C8: "__cdecl newmode" _newmode
0x140005908: "__cdecl _acrt_iob_func" __acrt_iob_func
0x1400066C0: "SDDL" ??_C@_19KGIKMJCK@?$AAS?$AAD?$AAD?$AAL?$AA?$AA@
0x140002D00: "void __cdecl cprintf(unsigned short const * __ptr64,...)" ?cprintf@@YAXPEBGZZ
0x1400064F8: "__cdecl _imp__initterm" __imp__initterm
0x140006458: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400066FC: "c" ??_C@_13PHCIHIAO@?$AAc?$AA?$AA@
0x140006230: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400067F0: "WRITE_DAC" ??_C@_09KBPNIALE@WRITE_DAC?$AA@
0x140006988: "FILE_READ_ATTRIBUTES" ??_C@_0BF@IHEBLOA@FILE_READ_ATTRIBUTES?$AA@
0x140007128: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400063D8: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x1400095E0: "__cdecl _onexitend" __onexitend
0x140006450: "__cdecl _imp__exit" __imp__exit
0x1400065A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140004688: "void __cdecl printface(struct _ACE_HEADER * __ptr64,int,unsigned long)" ?printface@@YAXPEAU_ACE_HEADER@@HK@Z
0x140006258: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x140006308: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140006640: "}\" ??_C@_15HIFKPAFJ@?$AA?$HN?$AA?2?$AA?$AA@
0x140007074: "__cdecl _IMPORT_DESCRIPTOR_NTMARTA" __IMPORT_DESCRIPTOR_NTMARTA
0x140006710: "Deny" ??_C@_19DHOGBPLA@?$AAD?$AAe?$AAn?$AAy?$AA?$AA@
0x140006208: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x140006568: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140006488: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x140006688: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140006870: "MAXIMUM_ALLOWED" ??_C@_0BA@HIILABHL@MAXIMUM_ALLOWED?$AA@
0x1400023F4: "private: unsigned long __cdecl CFileEnumerate::_InitDir(unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?_InitDir@CFileEnumerate@@AEAAKPEAPEAGPEAH@Z
0x140006380: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400065D0: "__cdecl _xi_a" __xi_a
0x140006370: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140006410: "__cdecl _imp_SetNamedSecurityInfoW" __imp_SetNamedSecurityInfoW
0x140005700: "__cdecl matherr" _matherr
0x140002E58: wmain
0x1400063F0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x14000671C: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x140006858: "ACCESS_SYSTEM_SECURITY" ??_C@_0BH@KPFNKPFO@ACCESS_SYSTEM_SECURITY?$AA@
0x140006010: "char * __ptr64 * aRightsStr" ?aRightsStr@@3PAPEADA
0x14000679C: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x140003934: "unsigned long __cdecl ConfirmReplaceDACL(void)" ?ConfirmReplaceDACL@@YAKXZ
0x140007164: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140006678: ".OCP" ??_C@_19PPJNADML@?$AA?4?$AAO?$AAC?$AAP?$AA?$AA@
0x1400054B8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140006820: "STANDARD_RIGHTS_REQUIRED" ??_C@_0BJ@FKPFFIEH@STANDARD_RIGHTS_REQUIRED?$AA@
0x14000664C: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x140002FF8: "unsigned long __cdecl GetCmdLineArgs(int,unsigned short * __ptr64 * __ptr64 const,unsigned long * __ptr64,long * __ptr64 const,long * __ptr64 const,enum MODE * __ptr64)" ?GetCmdLineArgs@@YAKHQEAPEAGPEAKQEAJ2PEAW4MODE@@@Z
0x140006200: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x140004F98: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140006670: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x1400064E0: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x14000718C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140006890: "GENERIC_WRITE" ??_C@_0O@DKHPBJPE@GENERIC_WRITE?$AA@
0x1400052E0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400061F8: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x1400065C8: "__cdecl _xc_z" __xc_z
0x14000709C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140006320: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400021D4: "public: unsigned long __cdecl CFileEnumerate::Next(unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?Next@CFileEnumerate@@QEAAKPEAPEAGPEAH@Z
0x140006908: "FILE_READ_DATA" ??_C@_0P@MGDAJKIL@FILE_READ_DATA?$AA@
0x140007204: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0
0x140006840: "SPECIFIC_RIGHTS_ALL" ??_C@_0BE@NNMOOGFH@SPECIFIC_RIGHTS_ALL?$AA@
0x1400063A0: "__cdecl _imp_GetKernelObjectSecurity" __imp_GetKernelObjectSecurity
0x140006950: "FILE_WRITE_EA" ??_C@_0O@KMLMGIMI@FILE_WRITE_EA?$AA@
0x1400064F0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140006378: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400062F0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x1400062B0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140006408: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x140002838: "public: unsigned long __cdecl CFileSecurity::SetFS(int,class CDaclWrap * __ptr64,int) __ptr64" ?SetFS@CFileSecurity@@QEAAKHPEAVCDaclWrap@@H@Z
0x140005A10: "__cdecl _chkstk" __chkstk
0x140006270: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x140006918: "FILE_WRITE_DATA" ??_C@_0BA@PPPNMJAI@FILE_WRITE_DATA?$AA@
0x140006960: "FILE_EXECUTE" ??_C@_0N@GCOKKDKC@FILE_EXECUTE?$AA@
0x140002D6C: "int __cdecl IsAclSupported(unsigned short const * __ptr64)" ?IsAclSupported@@YAHPEBG@Z
0x140006250: "__cdecl _imp_GetVolumePathNameW" __imp_GetVolumePathNameW
0x140001048: "public: unsigned long __cdecl CAccount::GetAccountName(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetAccountName@CAccount@@QEAAKPEAPEAG@Z
0x140006330: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400065F0: "__cdecl _guard_fids_table" __guard_fids_table
0x140006530: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140006548: msvcrt_NULL_THUNK_DATA
0x1400060E0: "__cdecl load_config_used" _load_config_used
0x1400064A8: "__cdecl _imp_printf" __imp_printf
0x1400070D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x14000678C: "C" ??_C@_13FHBKNHDA@?$AAC?$AA?$AA@
0x140001F68: "private: unsigned long __cdecl CFileEnumerate::_ialize(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?_ialize@CFileEnumerate@@AEAAKPEAGPEAPEAGPEAH@Z
0x14000713C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400063E0: "__cdecl _imp_SetKernelObjectSecurity" __imp_SetKernelObjectSecurity
0x140006468: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400069A0: "FILE_WRITE_ATTRIBUTES" ??_C@_0BG@EAHOCAEJ@FILE_WRITE_ATTRIBUTES?$AA@
0x140006580: "__cdecl _imp_NtClose" __imp_NtClose
0x1400063F8: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x140006550: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140006328: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140004B68: "unsigned long __cdecl ApplyDACL(unsigned short * __ptr64,enum MODE,unsigned long,int,class CDaclWrap * __ptr64)" ?ApplyDACL@@YAKPEAGW4MODE@@KHPEAVCDaclWrap@@@Z
0x1400095C4: "__cdecl dowildcard" _dowildcard
0x140006780: "%s
" ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14000669C: "t" ??_C@_13DKOGBHCI@?$AAt?$AA?$AA@
0x140006788: "F" ??_C@_13GAMECHAC@?$AAF?$AA?$AA@
0x1400055B5: free
0x140006570: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400066D0: "SDDL:" ??_C@_1M@BCEFAIHD@?$AAS?$AAD?$AAD?$AAL?$AA?3?$AA?$AA@
0x140006760: "Dir (%s) =
" ??_C@_1BK@OHJGOICG@?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?5?$AA?$DN?$AA?5?$AA?6?$AA?$AA@
0x1400058F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400069CC: "%*s" ??_C@_03HIJPJGOM@?$CF?$CKs?$AA@
0x1400062E8: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x14000564C: RtlpImageNtHeader
0x140006420: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1400070EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1400062C8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400064C0: "__cdecl _imp_fprintf" __imp_fprintf
0x140006470: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400062D8: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x140006510: "__cdecl _imp_fwprintf" __imp_fwprintf
0x1400065A0: ntdll_NULL_THUNK_DATA
0x140006490: "__cdecl _imp_memcpy" __imp_memcpy
0x1400063B0: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x140006810: "SYNCHRONIZE" ??_C@_0M@PGJGCCNK@SYNCHRONIZE?$AA@
0x14000412C: "void __cdecl DisplayApplyDACLMsg(unsigned short * __ptr64,int,unsigned long)" ?DisplayApplyDACLMsg@@YAXPEAGHK@Z
0x1400095D8: "unsigned long dwProgressCounter" ?dwProgressCounter@@3KA
0x14000592C: "__cdecl _iob_func" __iob_func
0x140006800: "WRITE_OWNER" ??_C@_0M@OEMAHDKA@WRITE_OWNER?$AA@
0x140001214: "public: unsigned long __cdecl CDaclWrap::BuildAcl(struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64,unsigned char,int) __ptr64" ?BuildAcl@CDaclWrap@@QEAAKPEAPEAU_ACL@@PEAU2@EH@Z
0x140006428: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x140006794: "W" ??_C@_13IIGBBHPI@?$AAW?$AA?$AA@
0x140006744: "G" ??_C@_13NIHIEAGH@?$AAG?$AA?$AA@
0x140009008: "__cdecl _security_cookie" __security_cookie
0x140004A10: "unsigned long __cdecl printmessage(struct _iobuf * __ptr64,unsigned long,...)" ?printmessage@@YAKPEAU_iobuf@@KZZ
0x140005A10: "__cdecl alloca_probe" _alloca_probe
0x140006248: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x140006290: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400067A4: "\" ??_C@_01KICIPPFI@?2?$AA@
0x1400062B8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140006390: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x140006A40: "__cdecl _xmm@ffffffffffffffff0000000000000000" __xmm@ffffffffffffffff0000000000000000
0x140009000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400070B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140006240: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1400095E8: "__cdecl _onexitbegin" __onexitbegin
0x140006228: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400066B0: "Link" ??_C@_19IJIONFBP@?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
0x140006210: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x1400057F4: "__cdecl _security_init_cookie" __security_init_cookie
0x140006448: "__cdecl _imp__cexit" __imp__cexit
0x1400056A8: "__cdecl get_image_app_type" _get_image_app_type
0x1400063C0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x140004F24: "int __cdecl _snwprintf_s<8>(unsigned short (& __ptr64)[8],unsigned __int64,unsigned short const * __ptr64,...)" ??$_snwprintf_s@$07@@YAHAEAY07G_KPEBGZZ
0x14000704C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140006430: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x1400063A8: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x140006520: "__cdecl _imp_wprintf" __imp_wprintf
0x1400052B0: wmainCRTStartup
0x140006480: "__cdecl _imp_malloc" __imp_malloc
0x1400063C8: "__cdecl _imp_QuerySecurityAccessMask" __imp_QuerySecurityAccessMask
0x1400069D0: "unsigned long * aRights" ?aRights@@3PAKA
0x140005340: "__cdecl _report_gsfailure" __report_gsfailure
0x140006560: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x1400066E8: "Continue" ??_C@_1BC@KAMKBBFP@?$AAC?$AAo?$AAn?$AAt?$AAi?$AAn?$AAu?$AAe?$AA?$AA@
0x140006748: "rePlace" ??_C@_1BA@CKIFKHIG@?$AAr?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AA?$AA@
0x1400095F8: "__cdecl _native_startup_state" __native_startup_state
0x1400067E0: "READ_CONTROL" ??_C@_0N@LHHPNLKB@READ_CONTROL?$AA@
0x1400064C8: "__cdecl _imp__fmode" __imp__fmode
0x140006388: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x1400071C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400064A0: "__cdecl _imp_free" __imp_free
0x140005760: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140006368: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140006590: "__cdecl _imp_RtlDosPathNameToRelativeNtPathName_U" __imp_RtlDosPathNameToRelativeNtPathName_U
0x140006880: "GENERIC_READ" ??_C@_0N@INABCMMB@GENERIC_READ?$AA@
0x140007150: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400071A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400059D2: memset
0x140007218: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]