...
SubInACL.exe can be downloaded from http://www.microsoft.com/en-us/download/details.aspx?id=23510 here subinacl.msi
CapaInstaller Scripting Library will search for SubInACL.exe in these locations:
...
Because registry access is redirected when running 32-bit applications on 64-bit OS and since SubInACL.exe does not support 64-bit registry access the registry functions are based on SetACL.exe.
SetACL.exe is included with the CapaInstaller Client installation media.
...