Generated by JEB on 2019/08/01

PE: C:\Windows\System32\TapiSysprep.dll Base=0x180000000 SHA-256=4548F9D00F58ED7E4232D4EB70DFB0032A1B7921C0FB814C87EFA5EEE383F230
PDB: tapisysprep.pdb GUID={3F999C2A-6177-9C68-9BD337D8FEB8749C} Age=1

112 located named symbols:
0x1800035E0: "TapiSysPrep.dll:RemoveLocations:" ??_C@_0DL@GOLEOMMP@TapiSysPrep?4dll?3RemoveLocations?3@
0x180001D6C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001B70: "__cdecl FindPESection" _FindPESection
0x180004010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000164C: "__cdecl CRT_INIT" _CRT_INIT
0x180003168: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001FD0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800031D0: "__cdecl _imp_CurrentIP" __imp_CurrentIP
0x180003310: "RetainTapiLocations" ??_C@_1CI@OJBPEIMO@?$AAR?$AAe?$AAt?$AAa?$AAi?$AAn?$AAT?$AAa?$AAp?$AAi?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180001008: ConstructPartialMsgW
0x180003228: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003420: "TapiSysPrep.dll:RetainTapiLocati" ??_C@_0FA@FFGAEFDH@TapiSysPrep?4dll?3RetainTapiLocati@
0x180001B54: "__cdecl XcptFilter" _XcptFilter
0x180003230: "__cdecl _xc_a" __xc_a
0x180003580: "RemoveLocations" ??_C@_1CA@LFDKJIPB@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180001D3C: "__cdecl initterm" _initterm
0x1800045C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003198: "__cdecl _imp_Sleep" __imp_Sleep
0x180003250: "__cdecl _xi_z" __xi_z
0x180003158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001D48: "__cdecl _C_specific_handler" __C_specific_handler
0x180003118: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180001F5C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003120: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180001B60: "__cdecl amsg_exit" _amsg_exit
0x1800031D8: "__cdecl _imp_ConstructPartialMsgVW" __imp_ConstructPartialMsgVW
0x180003340: "printscan\tapi\sysprep\tapisyspr" ??_C@_1EK@GMCABGOJ@?$AAp?$AAr?$AAi?$AAn?$AAt?$AAs?$AAc?$AAa?$AAn?$AA?2?$AAt?$AAa?$AAp?$AAi?$AA?2?$AAs?$AAy?$AAs?$AAp?$AAr?$AAe?$AAp?$AA?2?$AAt?$AAa?$AAp?$AAi?$AAs?$AAy?$AAs?$AAp?$AAr@
0x1800033D0: "TapiSysPrep.dll:RetainTapiLocati" ??_C@_0ED@LMEABKOH@TapiSysPrep?4dll?3RetainTapiLocati@
0x180003180: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180003390: "TapiSysPrep.dll:RetainTapiLocati" ??_C@_0EA@ELHABGCD@TapiSysPrep?4dll?3RetainTapiLocati@
0x1800045B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001D30: DllMain
0x180003620: "TapiSysPrep.dll:RemoveLocations:" ??_C@_0DK@FGGCKGJA@TapiSysPrep?4dll?3RemoveLocations?3@
0x1800031F0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800035A0: "TapiSysPrep.dll:RemoveLocations:" ??_C@_0DM@GNKAFBD@TapiSysPrep?4dll?3RemoveLocations?3@
0x180003150: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800031B0: KERNEL32_NULL_THUNK_DATA
0x1800031B8: "__cdecl _imp_SHDeleteKeyW" __imp_SHDeleteKeyW
0x1800031A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180004000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001F38: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003ACC: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180003AB8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800031A8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001C20: "__cdecl ValidateImageBase" _ValidateImageBase
0x180001890: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800031F8: "__cdecl _imp__initterm" __imp__initterm
0x1800031C0: SHLWAPI_NULL_THUNK_DATA
0x1800045A0: "__cdecl _onexitend" __onexitend
0x180003220: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003188: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003500: "Software\Microsoft\Windows\Curre" ??_C@_1HM@PBOGGAJN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180003240: "__cdecl _xi_a" __xi_a
0x180003190: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000338C: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x180001338: RemoveLocations
0x1800045C8: "__cdecl pRawDllMain" _pRawDllMain
0x180003280: "TapiConfigured" ??_C@_1BO@OONKMAD@?$AAT?$AAa?$AAp?$AAi?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAe?$AAd?$AA?$AA@
0x180001B30: "__cdecl _security_check_cookie" __security_check_cookie
0x180003238: "__cdecl _xc_z" __xc_z
0x180003160: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800015E0: TapiSysPrepClean
0x180003258: "__cdecl _guard_fids_table" __guard_fids_table
0x180003218: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x1800031E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003148: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003140: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001D60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001030: RetainTapiLocations
0x180003210: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004008: "__cdecl _security_cookie" __security_cookie
0x180003128: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800045A8: "__cdecl _onexitbegin" __onexitbegin
0x180003170: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800032A0: "Software\Microsoft\Windows\Curre" ??_C@_1GM@IHGJIHPH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180003AF4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180003130: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180001C54: "__cdecl _security_init_cookie" __security_init_cookie
0x1800034C0: "TapiSysPrep.dll:RetainTapiLocati" ??_C@_0DB@IBDIJBCN@TapiSysPrep?4dll?3RetainTapiLocati@
0x1800031C8: "__cdecl _imp_WdsSetupLogMessageW" __imp_WdsSetupLogMessageW
0x180003AA4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003200: "__cdecl _imp_malloc" __imp_malloc
0x180003138: ADVAPI32_NULL_THUNK_DATA
0x180001DB0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800045B8: "__cdecl _native_startup_state" __native_startup_state
0x1800031E0: WDSCORE_NULL_THUNK_DATA
0x180003470: "TapiSysPrep.dll:RetainTapiLocati" ??_C@_0EJ@FNNNNACD@TapiSysPrep?4dll?3RetainTapiLocati@
0x180003208: "__cdecl _imp_free" __imp_free
0x180001BC0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003AE0: "__cdecl _IMPORT_DESCRIPTOR_WDSCORE" __IMPORT_DESCRIPTOR_WDSCORE
0x180003B08: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]