Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_microsoft-windows-e..-unifiedwritefilter_31bf3856ad364e35_10.0.17763.1_none_8d008931dff416a6\UwfServicingShell.exe Base=0x140000000 SHA-256=2D96E06C8329B4B0CF55A22A5B740EF90EA4C5B2463761542783C744D19A8A1F
PDB: UwfServicingShell.pdb GUID={121AC7CE-BF15-9783-9D0B33A279D4443A} Age=1

318 located named symbols:
0x140005B80: "UWF Servicing completed successf" ??_C@_1EK@BIAALEP@?$AAU?$AAW?$AAF?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf@
0x140002FD4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140004300: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1400032C0: "__cdecl FindPESection" _FindPESection
0x140004FE0: "Status" ??_C@_1O@GGDILBNB@?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140004780: "SYSTEM\CurrentControlSet\Service" ??_C@_1JO@KGLNDGMP@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140005240: "Failed to flush key" ??_C@_1CI@JHIJGJIE@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAl?$AAu?$AAs?$AAh?$AA?5?$AAk?$AAe?$AAy?$AA?$AA@
0x140002C40: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140004418: samcli_NULL_THUNK_DATA
0x1400032B0: "__cdecl wsetargv" _wsetargv
0x140005668: "Failed to query UWF settings" ??_C@_1DK@FIAAFPLN@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x1400049D0: "SystemRoot" ??_C@_1BG@FIGGICF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x140007070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400043C0: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140004A90: "%s\System32\%s" ??_C@_1BO@DNBHMHLN@?$AA?$CF?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140004138: "__cdecl tls_used" _tls_used
0x140005088: "UwfUserName" ??_C@_1BI@KKKHNLDK@?$AAU?$AAw?$AAf?$AAU?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140004208: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140005460: "SeShutdownPrivilege" ??_C@_1CI@NKKEIBLI@?$AAS?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140004408: "__cdecl _imp_NetUserSetInfo" __imp_NetUserSetInfo
0x1400036E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140004A28: "'SystemRoot' path is too long" ??_C@_1DM@NCNMPBAD@?$AA?8?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?8?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5?$AAi?$AAs?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAl?$AAo?$AAn?$AAg?$AA?$AA@
0x140004E90: "Failed to create process for run" ??_C@_1GE@LMMILBAE@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAr?$AAu?$AAn@
0x14000602C: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x140007630: "__cdecl commode" _commode
0x140005C90: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x140002138: "long __cdecl UwfServicingFlushRegKeys(enum UWFSERVICING_MODULE_ID,struct UWFSERVICING_KEY_DESC * __ptr64 const,unsigned long)" ?UwfServicingFlushRegKeys@@YAJW4UWFSERVICING_MODULE_ID@@QEAUUWFSERVICING_KEY_DESC@@K@Z
0x1400050A0: "SYSTEM\CurrentControlSet\Service" ??_C@_1IK@IJMOBCPJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140004258: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x140005848: UwfServicingSvcGenInfo
0x140004F38: "/c %s" ??_C@_1M@DMCDLML@?$AA?1?$AAc?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x140005178: "UwfUpdateAgent" ??_C@_1BO@IMMMEFFL@?$AAU?$AAw?$AAf?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAg?$AAe?$AAn?$AAt?$AA?$AA@
0x140003190: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140004428: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000763C: "__cdecl fmode" _fmode
0x1400041C8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140006030: "__cdecl tls_end" _tls_end
0x1400031EE: "__cdecl XcptFilter" _XcptFilter
0x140004430: "__cdecl _xc_a" __xc_a
0x140006478: "__cdecl _IMPORT_DESCRIPTOR_samcli" __IMPORT_DESCRIPTOR_samcli
0x1400041F8: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140002840: "public: unsigned long __cdecl mslib::EventLogger<class UwfEtwProvider>::Log(struct _EVENT_DESCRIPTOR const & __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)const __ptr64" ?Log@?$EventLogger@VUwfEtwProvider@@@mslib@@QEBAKAEBU_EVENT_DESCRIPTOR@@PEBG1K@Z
0x140001EE8: "long __cdecl UwfServicingLog(enum UWFSERVICING_MODULE_ID,enum UWFSERVICING_LOG_TYPE,unsigned long,unsigned short const * __ptr64,...)" ?UwfServicingLog@@YAJW4UWFSERVICING_MODULE_ID@@W4UWFSERVICING_LOG_TYPE@@KPEBGZZ
0x140004AB0: "SCRNSAVE.EXE" ??_C@_1BK@CGKOIDEB@?$AAS?$AAC?$AAR?$AAN?$AAS?$AAA?$AAV?$AAE?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x140005420: "Failed to query process info" ??_C@_1DK@KOEGKAEO@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x1400051E0: "UwfservicingScr" ??_C@_1CA@IKOLCDLD@?$AAU?$AAw?$AAf?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAc?$AAr?$AA?$AA@
0x1400054D0: "Failed to adjust priviliges info" ??_C@_1EC@IENMOMPJ@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAd?$AAj?$AAu?$AAs?$AAt?$AA?5?$AAp?$AAr?$AAi?$AAv?$AAi?$AAl?$AAi?$AAg?$AAe?$AAs?$AA?5?$AAi?$AAn?$AAf?$AAo@
0x1400055C8: "UpdatedSettings" ??_C@_1CA@LNGIIBJB@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x140001BA8: "long __cdecl UwfServicingGetStatus(enum UWFSERVICING_STATUS * __ptr64)" ?UwfServicingGetStatus@@YAJPEAW4UWFSERVICING_STATUS@@@Z
0x140004AD0: "Control Panel\Desktop" ??_C@_1CM@FDDKAFMM@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x1400044A8: "__cdecl _guard_iat_table" __guard_iat_table
0x1400041E0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400044B0: "__cdecl _sz_USER32_dll" __sz_USER32_dll
0x140004388: "__cdecl _imp_memset" __imp_memset
0x140006330: USER32_NULL_THUNK_DATA_DLN
0x140009008: USER32_NULL_THUNK_DATA_DLA
0x14000347F: "__cdecl initterm" _initterm
0x140006358: USER32_NULL_THUNK_DATA_DLB
0x14000643C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140007750: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400042C0: "__cdecl _imp_Sleep" __imp_Sleep
0x140004460: "__cdecl _xi_z" __xi_z
0x140004198: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140004C38: "ScreenSaverIsSecure" ??_C@_1CI@DFOPIPHP@?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAS?$AAa?$AAv?$AAe?$AAr?$AAI?$AAs?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1400051C0: "UwfservicingSvc" ??_C@_1CA@DBFFIAGB@?$AAU?$AAw?$AAf?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAv?$AAc?$AA?$AA@
0x14000348B: "__cdecl _C_specific_handler" __C_specific_handler
0x140004E10: "'SystemRoot' is too long, while " ??_C@_1GM@DCIBHIAP@?$AA?8?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?8?$AA?5?$AAi?$AAs?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAl?$AAo?$AAn?$AAg?$AA?0?$AA?5?$AAw?$AAh?$AAi?$AAl?$AAe?$AA?5@
0x1400042B0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x140004918: "explorer.exe" ??_C@_1BK@BPIGMGKF@?$AAe?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400053C8: "UwfEnabled" ??_C@_1BG@KGGKBHAB@?$AAU?$AAw?$AAf?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140002418: "private: long __cdecl UwfServicingFailurePolicy::DoSystemRestart(void) __ptr64" ?DoSystemRestart@UwfServicingFailurePolicy@@AEAAJXZ
0x1400049E8: "Failed to query 'SystemRoot'" ??_C@_1DK@JMCLKPBF@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AA?8?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?8?$AA?$AA@
0x1400052C8: "Failed to disable servicing" ??_C@_1DI@GCFJNBPA@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x1400041B0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140004240: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140003658: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140004990: "Failed to set global shell name" ??_C@_1EA@KHLJHEKC@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?5?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?5?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x140004270: api-ms-win-core-registry-l1-1-1_NULL_THUNK_DATA
0x1400064A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140004250: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1400032A3: "__cdecl amsg_exit" _amsg_exit
0x140005C8C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140002594: "private: long __cdecl UwfServicingFailurePolicy::getFilterState(bool,bool * __ptr64) __ptr64" ?getFilterState@UwfServicingFailurePolicy@@AEAAJ_NPEA_N@Z
0x140006450: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-rtcore-ntuser-window-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-rtcore-ntuser-window-l1-1-0
0x140004F48: "cmd.exe" ??_C@_1BA@DBKIDAPL@?$AAc?$AAm?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400043A0: "__cdecl _imp_exit" __imp_exit
0x140004858: "UwfServicingShell.exe" ??_C@_1CM@NPAMGBCH@?$AAU?$AAw?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140005338: "DoSystemRestart failed" ??_C@_1CO@KAFKINFN@?$AAD?$AAo?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140005878: UwfServicingShellGenError
0x140005888: UwfServicingWinUpdtGenInfo
0x140004410: "__cdecl _imp_NetUserGetInfo" __imp_NetUserGetInfo
0x1400044C0: "Software\Microsoft\Windows NT\Cu" ??_C@_1GM@NFOGLLJA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400056B0: "SYSTEM\CurrentControlSet\Service" ??_C@_1IE@GNDIBCAM@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140004B00: "Failed to read current screen sa" ??_C@_1FC@DLOIFFHO@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAa?$AAd?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAs?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?5?$AAs?$AAa@
0x140004260: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x140005070: "Information" ??_C@_1BI@NIHBLACF@?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400041A0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400059C0: "Exit: Failed to get write filter" ??_C@_1EO@CGKBLEDE@?$AAE?$AAx?$AAi?$AAt?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAw?$AAr?$AAi?$AAt?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr@
0x140004BE0: "Failed to set the servicing scre" ??_C@_1FC@LPJKFPHB@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAc?$AAr?$AAe@
0x140004200: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140007740: "__cdecl _native_startup_lock" __native_startup_lock
0x140004D30: "Failed reading global shell name" ??_C@_1EC@MHIPCKAM@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?5?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?5?$AAn?$AAa?$AAm?$AAe@
0x140005798: "ServicingModeEnabled" ??_C@_1CK@GLBKOIMB@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140005490: "Failed to query priviliges info" ??_C@_1EA@LEDOCDLC@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAp?$AAr?$AAi?$AAv?$AAi?$AAl?$AAi?$AAg?$AAe?$AAs?$AA?5?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x140005300: "termServicingState failed" ??_C@_1DE@NKANEMGO@?$AAt?$AAe?$AAr?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1400031D0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400043E8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140004370: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140004E80: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140004288: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400041C0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140007728: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUvnyvwwvwUhbhUfduUfduhvierxrmtUlyquivUznwGEUkivxlnkOlyq@UwfServicing" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUvnyvwwvwUhbhUfduUfduhvierxrmtUlyquivUznwGEUkivxlnkOlyq@UwfServicing
0x140004F60: "Failed to create process for run" ??_C@_1HK@ELICCKJL@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAr?$AAu?$AAn@
0x1400064C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1400042C8: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x140004180: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140005200: "Failed to open key for flushing" ??_C@_1EA@FHLBNDEF@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAf?$AAl?$AAu?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?$AA@
0x140004310: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x140005198: "UwfservicingShell" ??_C@_1CE@FHDBNIL@?$AAU?$AAw?$AAf?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140003634: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140007658: "__cdecl tls_index" _tls_index
0x140005740: "Failed to create UWF settings re" ??_C@_1FI@NEGDOLKA@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?5?$AAr?$AAe@
0x140004360: "__cdecl _imp__commode" __imp__commode
0x140006028: "__cdecl tls_start" _tls_start
0x140004358: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140004470: "__cdecl _xl_z" __xl_z
0x140005568: "Failed to get UWF filter state" ??_C@_1DO@FGLNNDDG@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x1400058C8: UWF_ETW_PROVIDER
0x140006504: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1400041E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000648C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x1400043D8: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x140004C60: "Failed to set the servicing scre" ??_C@_1GG@CEGBGAAL@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAc?$AAr?$AAe@
0x140005C8C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140003370: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400041D8: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x140006414: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140005828: UwfServicingScrGenInfo
0x140004320: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x1400042A0: api-ms-win-core-shutdown-l1-1-0_NULL_THUNK_DATA
0x14000267C: "private: long __cdecl UwfServicingFailurePolicy::getUwfConfigRegPath(bool,unsigned short * __ptr64,long) __ptr64" ?getUwfConfigRegPath@UwfServicingFailurePolicy@@AEAAJ_NPEAGJ@Z
0x1400042A8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x140006304: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1400042D0: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x140007638: "__cdecl newmode" _newmode
0x1400043B8: "__cdecl _imp__initterm" __imp__initterm
0x140005270: "UWF Servicing encountered a crit" ??_C@_1FG@EGLAONFC@?$AAU?$AAW?$AAF?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?5?$AAa?$AA?5?$AAc?$AAr?$AAi?$AAt@
0x1400043A8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140001300: "int __cdecl RunServicingModeScreensaver(void)" ?RunServicingModeScreensaver@@YAHXZ
0x140004190: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400064F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140006388: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1400063D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1
0x140007640: "__cdecl _hmod__USER32_dll" __hmod__USER32_dll
0x140005520: "InitiateSystemShutdownExW failed" ??_C@_1EC@MFBLJCNE@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAE?$AAx?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140007730: "__cdecl _onexitend" __onexitend
0x140004330: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x140004A68: "UwfServicingScr.scr" ??_C@_1CI@FGIIDCIC@?$AAU?$AAw?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAc?$AAr?$AA?4?$AAs?$AAc?$AAr?$AA?$AA@
0x1400023D0: "public: virtual long __cdecl UwfServicingFailurePolicy::GetFilterState(bool * __ptr64,bool * __ptr64) __ptr64" ?GetFilterState@UwfServicingFailurePolicy@@UEAAJPEA_N0@Z
0x140004398: "__cdecl _imp__exit" __imp__exit
0x140004420: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400041F0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140004400: netutils_NULL_THUNK_DATA
0x1400046B0: "SYSTEM\CurrentControlSet\Service" ??_C@_1IM@EEDFJOAI@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140007080: "__cdecl Init_global_epoch" _Init_global_epoch
0x1400042F0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140004448: "__cdecl _xi_a" __xi_a
0x1400058E0: "Failed to query servicing status" ??_C@_1EC@JCIGDBGD@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs@
0x1400042E8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140004170: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400032B0: "__cdecl matherr" _matherr
0x14000101C: wmain
0x140004338: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1400043F8: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x1400034C2: "__cdecl _tailMerge_user32_dll" __tailMerge_user32_dll
0x140005824: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1400063C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400058B8: UwfServicingXmgrGenError
0x1400015D8: "int __cdecl RunDefaultShell(void)" ?RunDefaultShell@@YAHXZ
0x140001C70: "long __cdecl UwfServicingSetStatus(enum UWFSERVICING_STATUS)" ?UwfServicingSetStatus@@YAJW4UWFSERVICING_STATUS@@@Z
0x140004378: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x140005898: UwfServicingWinUpdtGenError
0x1400064B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-0
0x140002FB0: "__cdecl _security_check_cookie" __security_check_cookie
0x140004440: "__cdecl _xc_z" __xc_z
0x140004218: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140005A70: "Exit: Failed to commit device un" ??_C@_1GO@GFAGMHOC@?$AAE?$AAx?$AAi?$AAt?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAi?$AAt?$AA?5?$AAd?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAu?$AAn@
0x140004368: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000117C: "int __cdecl FixUpShellRegistryKeys(void)" ?FixUpShellRegistryKeys@@YAHXZ
0x140006464: "__cdecl _IMPORT_DESCRIPTOR_netutils" __IMPORT_DESCRIPTOR_netutils
0x1400042E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400062E4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USER32_dll" __DELAY_IMPORT_DESCRIPTOR_USER32_dll
0x140001E34: "long __cdecl UwfServicingEnableServicingUser(bool)" ?UwfServicingEnableServicingUser@@YAJ_N@Z
0x140004298: "__cdecl _imp_InitiateSystemShutdownExW" __imp_InitiateSystemShutdownExW
0x140004348: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x1400059A0: "FilterState" ??_C@_1BI@GEMDICOC@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x140004160: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x140003700: "__cdecl _chkstk" __chkstk
0x140004B58: "SavedUserScr" ??_C@_1BK@BGGFEDIA@?$AAS?$AAa?$AAv?$AAe?$AAd?$AAU?$AAs?$AAe?$AAr?$AAS?$AAc?$AAr?$AA?$AA@
0x14000185C: "int __cdecl RunMasterServicingScript(void)" ?RunMasterServicingScript@@YAHXZ
0x140005AE0: "Exit: Failed to enable write fil" ??_C@_1EI@HKIIJCGH@?$AAE?$AAx?$AAi?$AAt?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAw?$AAr?$AAi?$AAt?$AAe?$AA?5?$AAf?$AAi?$AAl@
0x140005868: UwfServicingShellGenInfo
0x140005C38: "EnableLUA" ??_C@_1BE@PBGLAGDD@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAU?$AAA?$AA?$AA@
0x140004290: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140005130: "UWF-Servicing" ??_C@_1BM@LDHPMJFJ@?$AAU?$AAW?$AAF?$AA?9?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x1400022E0: "public: virtual long __cdecl UwfServicingFailurePolicy::EnableFilter(bool) __ptr64" ?EnableFilter@UwfServicingFailurePolicy@@UEAAJ_N@Z
0x140006400: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140004228: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140004478: "__cdecl _guard_fids_table" __guard_fids_table
0x1400043E0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x1400043F0: msvcrt_NULL_THUNK_DATA
0x140004030: "__cdecl load_config_used" _load_config_used
0x140004178: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140004168: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140004EF8: "UwfServicingMasterScript.cmd" ??_C@_1DK@CGMGKEDA@?$AAU?$AAw?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAM?$AAa?$AAs?$AAt?$AAe?$AAr?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?4?$AAc?$AAm?$AAd?$AA?$AA@
0x140004888: "Shell" ??_C@_1M@JLDCNMKN@?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x1400058A8: UwfServicingXmgrGenInfo
0x14000639C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x140004268: "__cdecl _imp_RegSetKeyValueW" __imp_RegSetKeyValueW
0x1400043C8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140004530: "Software\Microsoft\Windows Embed" ??_C@_1GE@FBDOJFIJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAE?$AAm?$AAb?$AAe?$AAd@
0x140005838: UwfServicingScrGenError
0x140001994: "long __cdecl UwfServicingRegCopyValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UwfServicingRegCopyValue@@YAJPEAUHKEY__@@PEBG1011@Z
0x140004278: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140004220: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140007634: "__cdecl dowildcard" _dowildcard
0x1400053E0: "Failed to set UWF filter state" ??_C@_1DO@KMPOKDCD@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x140004010: "const UwfServicingFailurePolicy::`vftable'" ??_7UwfServicingFailurePolicy@@6B@
0x140004308: "__cdecl _imp_EventWrite" __imp_EventWrite
0x1400048F0: "SavedGlobalShell" ??_C@_1CC@MMIPCFMA@?$AAS?$AAa?$AAv?$AAe?$AAd?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140004280: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140004820: "Failed to lock work station" ??_C@_1DI@KILLAPAP@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAc?$AAk?$AA?5?$AAw?$AAo?$AAr?$AAk?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140005C90: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1400055A8: "CurrentSettings" ??_C@_1CA@PMMIMEAO@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x140005150: "UwfServicingXmgr" ??_C@_1CC@CEHHLHLI@?$AAU?$AAw?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAX?$AAm?$AAg?$AAr?$AA?$AA@
0x1400034A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400041D0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1400031FC: RtlpImageNtHeader
0x140004318: "__cdecl _imp_GetDesktopWindow" __imp_GetDesktopWindow
0x140005858: UwfServicingSvcGenError
0x140004CD0: "Failed to invoke the servicing s" ??_C@_1FI@PAACJMKP@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAv?$AAo?$AAk?$AAe?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAs@
0x140004940: "Failed to read global shell name" ??_C@_1EC@IKLKOJKK@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAa?$AAd?$AA?5?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?5?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?5?$AAn?$AAa?$AAm?$AAe@
0x1400063B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1400041B8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400043D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400034B6: "__cdecl _imp_load_LockWorkStation" __imp_load_LockWorkStation
0x140001D7C: "long __cdecl UwfServicingGetUserName(unsigned short * __ptr64 * __ptr64)" ?UwfServicingGetUserName@@YAJPEAPEAG@Z
0x140005C50: "Failed to restore LUA control" ??_C@_1DM@BEFMOIJB@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAL?$AAU?$AAA?$AA?5?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x140003544: "__cdecl Init_thread_footer" _Init_thread_footer
0x140006518: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140002768: "private: long __cdecl UwfServicingFailurePolicy::termServicingState(void) __ptr64" ?termServicingState@UwfServicingFailurePolicy@@AEAAJXZ
0x140007068: "__cdecl _security_cookie" __security_cookie
0x140003700: "__cdecl alloca_probe" _alloca_probe
0x1400041A8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140005930: "Unknown Servicing state or bad d" ??_C@_1GO@LNEJCPML@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAe?$AA?5?$AAo?$AAr?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAd@
0x140007060: "__cdecl _defaultmatherr" __defaultmatherr
0x140006374: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140004468: "__cdecl _xl_a" __xl_a
0x140004328: api-ms-win-rtcore-ntuser-window-l1-1-0_NULL_THUNK_DATA
0x140001AAC: "long __cdecl UwfServicingRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?UwfServicingRegGetValue@@YAJPEAUHKEY__@@PEBG1PEAKPEAPEAX2@Z
0x140005B30: "Exit: Failed to disable UWF acco" ??_C@_1EI@BPMBAJI@?$AAE?$AAx?$AAi?$AAt?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAa?$AAc?$AAc?$AAo@
0x140004230: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140007738: "__cdecl _onexitbegin" __onexitbegin
0x140004740: "UwfServicingFlushRegKeys Failed" ??_C@_1EA@LFNLGAFN@?$AAU?$AAw?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAF?$AAl?$AAu?$AAs?$AAh?$AAR?$AAe?$AAg?$AAK?$AAe?$AAy?$AAs?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140005370: "Failed to get UWF settings regis" ??_C@_1FC@NOHGKNHK@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs@
0x140004188: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400035B4: "__cdecl Init_thread_header" _Init_thread_header
0x140004238: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400021FC: "public: long __cdecl UwfServicingFailurePolicy::HandleCriticalError(long,bool) __ptr64" ?HandleCriticalError@UwfServicingFailurePolicy@@QEAAJJ_N@Z
0x1400033A4: "__cdecl _security_init_cookie" __security_init_cookie
0x140001D20: "long __cdecl UwfServicingSetStatusEx(enum UWFSERVICING_STATUS,enum UWFSERVICING_STATUS_INFO)" ?UwfServicingSetStatusEx@@YAJW4UWFSERVICING_STATUS@@W4UWFSERVICING_STATUS_INFO@@@Z
0x140004FF0: "SYSTEM\CurrentControlSet\Service" ??_C@_1HM@KNEEIEON@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140004390: "__cdecl _imp__cexit" __imp__cexit
0x1400029A8: "long __cdecl UwfServicingTransition(bool,struct UWF_CONFIG_INTERFACE * __ptr64)" ?UwfServicingTransition@@YAJ_NPEAUUWF_CONFIG_INTERFACE@@@Z
0x140005BD0: "UWF Servicing completed with err" ??_C@_1EI@CADGLJMM@?$AAU?$AAW?$AAF?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAe?$AAr?$AAr@
0x140004248: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140003258: "__cdecl get_image_app_type" _get_image_app_type
0x140006360: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140002F80: wmainCRTStartup
0x1400043B0: "__cdecl _imp_malloc" __imp_malloc
0x1400042F8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1400048A0: "Failed to set current user shell" ??_C@_1EM@HPMPHJEK@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAs?$AAh?$AAe?$AAl?$AAl@
0x140004D80: "Failed getting value of 'SystemR" ??_C@_1IC@JDCLFHFO@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAg?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?5?$AAo?$AAf?$AA?5?$AA?8?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR@
0x140004340: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x1400055F0: "SYSTEM\CurrentControlSet\Service" ??_C@_1HG@MPDIEHMC@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140003010: "__cdecl _report_gsfailure" __report_gsfailure
0x140004620: "Software\Microsoft\Windows\Curre" ??_C@_1IC@HGHACFLN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140005A10: "Exit: Failed to query write filt" ??_C@_1FC@LPENJPLI@?$AAE?$AAx?$AAi?$AAt?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAw?$AAr?$AAi?$AAt?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAt@
0x1400057D0: "Failed to set UWF servicing filt" ??_C@_1FC@LJFNOKCK@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAU?$AAW?$AAF?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAt@
0x140007748: "__cdecl _native_startup_state" __native_startup_state
0x140001010: "public: virtual long __cdecl UwfServicingFailurePolicy::CommitHklmValueByName(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?CommitHklmValueByName@UwfServicingFailurePolicy@@UEAAJPEBG0@Z
0x1400045A0: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140005C18: "SavedEnableLUA" ??_C@_1BO@HIJJNJEN@?$AAS?$AAa?$AAv?$AAe?$AAd?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAU?$AAA?$AA?$AA@
0x140004B80: "Failed to save current screen sa" ??_C@_1FC@FFLIFEGJ@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAa?$AAv?$AAe?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAs?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?5?$AAs?$AAa@
0x140004350: "__cdecl _imp__fmode" __imp__fmode
0x140009000: "__cdecl _imp_LockWorkStation" __imp_LockWorkStation
0x140006428: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140004380: "__cdecl _imp_free" __imp_free
0x140003310: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400042D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140004210: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1400064DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400042B8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1400063EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400036C6: memset
0x14000652C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]