Generated by JEB on 2019/08/01

PE: C:\Windows\System32\oobe\oobeldr.exe Base=0x140000000 SHA-256=4F424DC5E0C16CBBAC4A12C3750297F0F58697E102FB2001C655868ED829274F
PDB: oobeldr.pdb GUID={8CAB2F2C-3441-6EB0-6C4DC550F27E62CB} Age=1

599 located named symbols:
0x14000BD00: "In-use cached unattend file for " ??_C@_1HO@CMNEAEFO@?$AAI?$AAn?$AA?9?$AAu?$AAs?$AAe?$AA?5?$AAc?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAo?$AAr?$AA?5@
0x14000575C: ParseUncPath
0x14000B588: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x14000C7C0: "ConstructPartialMsgVA" ??_C@_0BG@HIFPNDJH@ConstructPartialMsgVA?$AA@
0x14000C430: "OOBE UI requested a switch into " ??_C@_1HK@DNCGEPLG@?$AAO?$AAO?$AAB?$AAE?$AA?5?$AAU?$AAI?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAa?$AA?5?$AAs?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?5?$AAi?$AAn?$AAt?$AAo?$AA?5@
0x14000B558: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140005650: BuildPathHr
0x140003CFC: AllocateString
0x14000CD10: "\\?\UNC" ??_C@_1BA@BFGBFLGI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x140009EFC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000B310: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x14000C690: "Parsing the command line failed." ??_C@_1GC@BAGBNEEC@?$AAP?$AAa?$AAr?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4@
0x14000B7F0: "api-ms-win-eventing-provider-l1-" ??_C@_1FA@IOGJNGGM@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9@
0x140009D10: "__cdecl FindPESection" _FindPESection
0x14000B270: "__cdecl _imp_UnattendCtxDeserializeWithResults" __imp_UnattendCtxDeserializeWithResults
0x14000B290: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x14000B880: tskLaunchOobeId
0x14000FD20: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x14000FBB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140011000: Microsoft_Windows_OobeLdr_Context
0x14000C240: "Running custom msoobe from First" ??_C@_1GM@ENBBNBDE@?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?5?$AAm?$AAs?$AAo?$AAo?$AAb?$AAe?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAF?$AAi?$AAr?$AAs?$AAt@
0x140009D00: "__cdecl wsetargv" _wsetargv
0x14000E340: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1HM@LMMFBDMI@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14000B370: "__cdecl _imp_PowerCreateRequest" __imp_PowerCreateRequest
0x14000BFF0: "Found no unattend file for %s pa" ??_C@_1GG@FILMFKCK@?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAn?$AAo?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AA?$CF?$AAs?$AA?5?$AAp?$AAa@
0x14000B1D8: "__cdecl _imp_ProcessActionQueue" __imp_ProcessActionQueue
0x1400110D0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14000B9F0: "oobeldr.exe" ??_C@_1BI@POOEOIIM@?$AAo?$AAo?$AAb?$AAe?$AAl?$AAd?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000B5C0: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x14000B668: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000E4B0: Microsoft_Windows_Deplorch
0x14000E110: "LoadSMISettings: failed to deser" ??_C@_1IM@MGNAHFGO@?$AAL?$AAo?$AAa?$AAd?$AAS?$AAM?$AAI?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAs?$AAe?$AAr@
0x14000B1A8: "__cdecl tls_used" _tls_used
0x14000D9D0: "Password" ??_C@_1BC@LBMJCFCO@?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x1400117E0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbUkpvbrmhghUoryUlyquivUznwGEUhgwzucOlyq@pkeyinsts" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbUkpvbrmhghUoryUlyquivUznwGEUhgwzucOlyq@pkeyinsts
0x140004E4C: RegDeleteRecursive
0x14000B3F0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14000BCC0: "%windir%\panther\unattend.xml" ??_C@_1DM@INMBGCHH@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAp?$AAa?$AAn?$AAt?$AAh?$AAe?$AAr?$AA?2?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x14000D1E0: "Found existing file at [%s]; del" ??_C@_1FI@PIBMLMPG@?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAe?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAa?$AAt?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?$DL?$AA?5?$AAd?$AAe?$AAl@
0x140009B04: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000E9C0: "ExecuteCommandFromValue:Invalid " ??_C@_1FG@HMCALOHH@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5@
0x140009470: "int __cdecl FbeExecuteExtensions(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,int)" ?FbeExecuteExtensions@@YAHPEAUHKEY__@@PEBGPEAKH@Z
0x140008108: "long __cdecl CleanTempUnattendRegistrySpace(void)" ?CleanTempUnattendRegistrySpace@@YAJXZ
0x1400047A4: FileExists
0x1400060BC: "long __cdecl OrchestrateSetPassStatus(unsigned short const * __ptr64,enum _DEPLOYMENT_PASS_STATUS)" ?OrchestrateSetPassStatus@@YAJPEBGW4_DEPLOYMENT_PASS_STATUS@@@Z
0x14000A290: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400090F8: "unsigned long __cdecl pExecuteCommand(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?pExecuteCommand@@YAKPEBG0@Z
0x14000C990: "FindFirstFileNameW" ??_C@_0BD@OGFDEFBL@FindFirstFileNameW?$AA@
0x14000C760: "WdsGenericSetupLogInit" ??_C@_0BH@OICHNGNB@WdsGenericSetupLogInit?$AA@
0x140004180: CopyResetFile
0x14000B2E0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14000C9A8: "FindNextFileNameW" ??_C@_0BC@MEIACHKG@FindNextFileNameW?$AA@
0x14000EFE0: "FbeExecuteExtensions: Found Excl" ??_C@_1IE@OJMOCDLF@?$AAF?$AAb?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAE?$AAx?$AAc?$AAl@
0x14000F4A4: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x14000FCF8: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x14000D9E8: "AdministratorPassword" ??_C@_1CM@NJGMPMPN@?$AAA?$AAd?$AAm?$AAi?$AAn?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAo?$AAr?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x14000E968: "EtwEventEnabled" ??_C@_0BA@MIAFEPPA@EtwEventEnabled?$AA@
0x14000CE30: "SetupShutdownRequired" ??_C@_1CM@BBLNDNNG@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x14000CD20: "CreatePath: Unable to create [%s" ??_C@_1FM@OFCLJDAE@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AA?$FL?$AA?$CF?$AAs@
0x14000DE00: "An unattend GC requested that im" ??_C@_1MC@IGJAJBLM@?$AAA?$AAn?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAG?$AAC?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAt?$AAh?$AAa?$AAt?$AA?5?$AAi?$AAm@
0x14000B598: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x14000FC58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1
0x140011128: "__cdecl commode" _commode
0x14000B458: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x14000EAB0: "ExecuteCommandFromValue: Ignorin" ??_C@_1JM@MPOINPKP@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AAI?$AAg?$AAn?$AAo?$AAr?$AAi?$AAn@
0x14000B470: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x14000FC94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14000FB2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x14000CFD0: "Unable to delete existing file a" ??_C@_1EO@CHPEPMFA@?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAe?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAa@
0x140011780: g_WdsNativeLibLog
0x14000C360: "OOBE UI failed with exit code [0" ??_C@_1EK@MLLAJNOC@?$AAO?$AAO?$AAB?$AAE?$AA?5?$AAU?$AAI?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAe?$AAx?$AAi?$AAt?$AA?5?$AAc?$AAo?$AAd?$AAe?$AA?5?$AA?$FL?$AA0@
0x14000B360: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x14000CE10: "System\Setup" ??_C@_1BK@DBNBIMPE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x14000B5C8: "__cdecl _imp_wcschr" __imp_wcschr
0x14000B4C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x14000B448: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x14000DA70: "%windir%\system32\oobe\winsetup." ??_C@_1EI@LCDEEIFL@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAo?$AAo?$AAb?$AAe?$AA?2?$AAw?$AAi?$AAn?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?4@
0x14000C630: "/system" ??_C@_1BA@BGNJFNA@?$AA?1?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x140009BE0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000B6C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000EF80: "FbeExecuteExtensions: Processed " ??_C@_1FM@KPKNENEG@?$AAF?$AAb?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAe?$AAd?$AA?5@
0x14000B840: "EventWrite" ??_C@_0L@JMEHOADM@EventWrite?$AA@
0x14000FCBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x14000EB50: "ExecuteCommandFromValue: Executi" ??_C@_1GI@EHAANJDI@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi@
0x140011134: "__cdecl fmode" _fmode
0x14000B4D0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x14000B680: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x14000B3A0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x14000D6B8: "ForceShutdownNow" ??_C@_1CC@IOIKADMG@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAN?$AAo?$AAw?$AA?$AA@
0x140001874: wWinMain
0x14000BE30: "Running %s pass with discovered " ??_C@_1GM@OODGAMDH@?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AA?$CF?$AAs?$AA?5?$AAp?$AAa?$AAs?$AAs?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAd?$AAi?$AAs?$AAc?$AAo?$AAv?$AAe?$AAr?$AAe?$AAd?$AA?5@
0x14000F4A8: "__cdecl tls_end" _tls_end
0x140006654: OrchestrateRegisterOOBEFailure
0x140009C3E: "__cdecl XcptFilter" _XcptFilter
0x14000B6D0: "__cdecl _xc_a" __xc_a
0x14000B890: Microsoft_Windows_OobeLdrLevels
0x14000B3F8: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x14000B7C8: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000C710: "oobeSystem" ??_C@_1BG@HNJJNBMA@?$AAo?$AAo?$AAb?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14000C948: "MessageBoxW" ??_C@_0M@DLDCCGNP@MessageBoxW?$AA@
0x14000D720: "<Reseal>" ??_C@_1BC@KHOGNNHF@?$AA?$DM?$AAR?$AAe?$AAs?$AAe?$AAa?$AAl?$AA?$DO?$AA?$AA@
0x14000CBB0: "DeleteFileEx: Unable to delete [" ??_C@_1GA@BJHEKIBJ@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AA?$FL@
0x1400116C8: PfnEventUnregister
0x14000B408: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14000C120: "Unattend Reseal setting changed " ??_C@_1GO@DPECENKK@?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAR?$AAe?$AAs?$AAe?$AAa?$AAl?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAh?$AAa?$AAn?$AAg?$AAe?$AAd?$AA?5@
0x14000E090: "LoadSMISettings: failing on inva" ??_C@_1HE@ECPBNHJP@?$AAL?$AAo?$AAa?$AAd?$AAS?$AAM?$AAI?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAo?$AAn?$AA?5?$AAi?$AAn?$AAv?$AAa@
0x14000B2D8: "__cdecl _imp_FindClose" __imp_FindClose
0x1400116D0: McGenPreVista
0x14000511C: StringCchCopyW
0x1400110B8: g_ProviderRegistrationMicrosoft_Windows_Deplorch
0x14000B350: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14000A0B7: "__cdecl lock" _lock
0x140004840: FlushFile
0x14000E078: "%s\%s.%s" ??_C@_1BC@IFPDMNNO@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x14000B3D0: "__cdecl _imp_WritePrivateProfileStringW" __imp_WritePrivateProfileStringW
0x14000C8A0: "onecore\base\ntsetup\lib\unatten" ??_C@_1HC@PLEDFMHN@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAl?$AAi?$AAb?$AA?2?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn@
0x14000C060: "A reboot has been requested for " ??_C@_1FK@FJJHMNEG@?$AAA?$AA?5?$AAr?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?5?$AAh?$AAa?$AAs?$AA?5?$AAb?$AAe?$AAe?$AAn?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5@
0x14000E400: "ActionQueueCookie" ??_C@_1CE@NFDAPBBO@?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAC?$AAo?$AAo?$AAk?$AAi?$AAe?$AA?$AA@
0x14000B7A4: "__cdecl _guard_iat_table" __guard_iat_table
0x14000B3E8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400056AC: FormFullPathName
0x14000B3A8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x14000B8D8: tskOobeLdrProcessUnattendId
0x14000D698: "Audit" ??_C@_1M@KAILELML@?$AAA?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
0x14000B5D0: "__cdecl _imp_memset" __imp_memset
0x14000B320: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x140009ECF: "__cdecl initterm" _initterm
0x14000D600: Microsoft_Windows_DeplorchKeywords
0x14000FB40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140011868: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000D7E0: "unattend\settings[pass=%s]\compo" ??_C@_1OA@MDINPNNE@?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?2?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$FL?$AAp?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CF?$AAs?$AA?$FN?$AA?2?$AAc?$AAo?$AAm?$AAp?$AAo@
0x14000B520: "__cdecl _imp_Sleep" __imp_Sleep
0x14000B728: "__cdecl _xi_z" __xi_z
0x14000E928: "State" ??_C@_1M@LAGHHMEN@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14000B208: "__cdecl _imp_UnattendFreeResults" __imp_UnattendFreeResults
0x140004AD4: RegGetString
0x14000B2B8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000B688: "__cdecl _imp_wcscmp" __imp_wcscmp
0x140009EDB: "__cdecl _C_specific_handler" __C_specific_handler
0x140004D08: RegSetDword
0x1400073B8: "long __cdecl RunSMIDataPass(struct _UNATTEND_CONTEXT const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64 * __ptr64,unsigned __int64 * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?RunSMIDataPass@@YAJPEBU_UNATTEND_CONTEXT@@PEBG1PEAPEAPEBGPEA_KPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x14000B4C8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x14000D6E0: "Microsoft-Windows-Deployment" ??_C@_1DK@CCIEOKPP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAD?$AAe?$AAp?$AAl?$AAo?$AAy?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x14000CB40: "DeleteFileEx: Trying to set back" ??_C@_1GG@IIHDJFOG@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAT?$AAr?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAb?$AAa?$AAc?$AAk@
0x14000E428: "smiengine.dll" ??_C@_1BM@EEHMEKOK@?$AAs?$AAm?$AAi?$AAe?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140011700: Microsoft_Windows_OobeLdrEnableBits
0x14000B5F8: "__cdecl _imp__onexit" __imp__onexit
0x14000B340: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000CE08: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x14000C738: "unsigned char const * const `unsigned long __cdecl EnableManifestedProviderForMicrosoftTelemetry(unsigned __int64)'::`2'::Traits" ?Traits@?1??EnableManifestedProviderForMicrosoftTelemetry@@YAK_K@Z@4QBEB
0x14000B1E0: ActionQueue_NULL_THUNK_DATA
0x1400039E4: UnattendInitializeLogEx2
0x14000B278: "__cdecl _imp_UnattendFindFileFromCmdLine" __imp_UnattendFindFileFromCmdLine
0x1400071B4: GetSetupTimer
0x14000B330: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x14000B468: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000A1FC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000E070: "uaq" ??_C@_17GOEGKEGE@?$AAu?$AAa?$AAq?$AA?$AA@
0x14000CEF0: "Updating pass status for [%s] to" ??_C@_1HO@NLEGFLEI@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAa?$AAs?$AAs?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAt?$AAo@
0x14000D608: Microsoft_Windows_DeplorchLevels
0x14000D160: "Source and destination paths are" ??_C@_1IA@GDOJDHMP@?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAd?$AAe?$AAs?$AAt?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAp?$AAa?$AAt?$AAh?$AAs?$AA?5?$AAa?$AAr?$AAe@
0x14000FC80: "__cdecl _IMPORT_DESCRIPTOR_ActionQueue" __IMPORT_DESCRIPTOR_ActionQueue
0x14000DED0: "One or more unattend GCs request" ??_C@_1KC@NBNAOMPA@?$AAO?$AAn?$AAe?$AA?5?$AAo?$AAr?$AA?5?$AAm?$AAo?$AAr?$AAe?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAG?$AAC?$AAs?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt@
0x14000BD80: "We're in the middle of [%s], but" ??_C@_1KC@DGKIKEFO@?$AAW?$AAe?$AA?8?$AAr?$AAe?$AA?5?$AAi?$AAn?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAm?$AAi?$AAd?$AAd?$AAl?$AAe?$AA?5?$AAo?$AAf?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?0?$AA?5?$AAb?$AAu?$AAt@
0x140006C2C: StartOrContinueSetupTimer
0x14000B698: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x14000B4B8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000B860: "EventUnregister" ??_C@_0BA@FAKLIPIC@EventUnregister?$AA@
0x14000C300: "Failed to end OOBE transition UX" ??_C@_1FI@ICHOJKJK@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAn?$AAd?$AA?5?$AAO?$AAO?$AAB?$AAE?$AA?5?$AAt?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAU?$AAX@
0x14000B478: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x140009CF3: "__cdecl amsg_exit" _amsg_exit
0x14000C800: "%windir%\Panther\UnattendGC" ??_C@_1DI@MEGHDGIK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAP?$AAa?$AAn?$AAt?$AAh?$AAe?$AAr?$AA?2?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAG?$AAC?$AA?$AA@
0x14000CD00: "%s%s%s" ??_C@_1O@JBBHAGJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x14000B870: LaunchOobeStop
0x14000D240: "Couldn't delete existing file [%" ??_C@_1EG@GDOJHNHB@?$AAC?$AAo?$AAu?$AAl?$AAd?$AAn?$AA?8?$AAt?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAe?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AA?$FL?$AA?$CF@
0x14000C620: "/quiet" ??_C@_1O@GJPLNLOD@?$AA?1?$AAq?$AAu?$AAi?$AAe?$AAt?$AA?$AA@
0x14000B7B0: IID_IClassFactory
0x140008A34: "long __cdecl OrchestrateUpdateImageState(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?OrchestrateUpdateImageState@@YAJPEAUHKEY__@@0PEBG@Z
0x14000E290: "SMI data results dump: Descripti" ??_C@_1FA@OGPLNFBO@?$AAS?$AAM?$AAI?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAr?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?3?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi@
0x14000B238: "__cdecl _imp_UnattendCtxReplaceMatchedNodesWithText" __imp_UnattendCtxReplaceMatchedNodesWithText
0x14000E6F0: "IMAGE_STATE_COMPLETE" ??_C@_1CK@FGKIFNPE@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAC?$AAO?$AAM?$AAP?$AAL?$AAE?$AAT?$AAE?$AA?$AA@
0x14000B658: "__cdecl _imp_exit" __imp_exit
0x14000E2E0: "SMI data results dump: Context d" ??_C@_1GA@PJGBJMFP@?$AAS?$AAM?$AAI?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAr?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?3?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?5?$AAd@
0x14000B1F8: "__cdecl _imp_UnattendCtxOpenNode" __imp_UnattendCtxOpenNode
0x14000B610: "__cdecl _imp__lock" __imp__lock
0x14000B1F0: OLEAUT32_NULL_THUNK_DATA
0x14000B280: UNATTEND_NULL_THUNK_DATA
0x140009BA4: atexit
0x14000E938: "EtwEventRegister" ??_C@_0BB@DHHHEAKO@EtwEventRegister?$AA@
0x14000DBB0: "Pass has failed status; system i" ??_C@_1GO@NLNOOFCF@?$AAP?$AAa?$AAs?$AAs?$AA?5?$AAh?$AAa?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$DL?$AA?5?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAi@
0x14000B288: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x14000B628: "__cdecl _imp__wcmdln" __imp__wcmdln
0x14000B908: tskRunOobeLdrId
0x14000B4E8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x14000B378: api-ms-win-core-kernel32-legacy-l1-1-1_NULL_THUNK_DATA
0x14000C918: "user32.dll" ??_C@_1BG@OILDLIOJ@?$AAu?$AAs?$AAe?$AAr?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000B488: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x14000CE60: "AuditBoot" ??_C@_1BE@OLOLOOKB@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x14000B578: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x14000B210: "__cdecl _imp_UnattendFindAnswerFileWithResults" __imp_UnattendFindAnswerFileWithResults
0x14000B2C8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x14000B550: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1400117D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUhpforyUhixUlyquivUznwGEUhgwzucOlyq@skulib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUhpforyUhixUlyquivUznwGEUhgwzucOlyq@skulib
0x1400117E4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUlkpgllohUoryhUurihgyllgPvcgUhixUlyquivUznwGEUkxsOlyq@firstboot_ext" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUlkpgllohUoryhUurihgyllgPvcgUhixUlyquivUznwGEUkxsOlyq@firstboot_ext
0x14000BB30: "There was an error while process" ??_C@_1HM@OFBMIAHA@?$AAT?$AAh?$AAe?$AAr?$AAe?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAa?$AAn?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAw?$AAh?$AAi?$AAl?$AAe?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
0x14000B410: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000A0CF: "__cdecl _dllonexit" __dllonexit
0x14000B220: "__cdecl _imp_UnattendCtxGetFlagByNode" __imp_UnattendCtxGetFlagByNode
0x14000B918: OobeLdrProcessUnattendStopExecuted
0x14000B240: "__cdecl _imp_UnattendCtxCommitModify" __imp_UnattendCtxCommitModify
0x14000EDB0: "ExecuteCommandFromValue: %s is e" ??_C@_1ME@JACNNLLN@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAe@
0x140011848: "__cdecl _native_startup_lock" __native_startup_lock
0x14000DB00: "StartLow" ??_C@_1BC@LKGCJIOI@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAL?$AAo?$AAw?$AA?$AA@
0x140004048: MsgBox
0x140009C20: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000FCE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x14000B5E0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14000B630: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400110B0: g_ProviderRegistrationMicrosoft_Windows_OobeLdr
0x14000D520: "Called script [%s] to handle fat" ??_C@_1FC@OFLHGABD@?$AAC?$AAa?$AAl?$AAl?$AAe?$AAd?$AA?5?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAt?$AAo?$AA?5?$AAh?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?5?$AAf?$AAa?$AAt@
0x14000B4A0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000B3B8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x14000B3C8: api-ms-win-core-libraryloader-l1-2-1_NULL_THUNK_DATA
0x14000FBA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x14000B2F8: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x140011704: McGenTracingSupportInit
0x1400035E8: McTemplateMofU0q
0x14000B518: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x14000B2A8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000B590: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x14000A1D8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000BAB0: "User input error was detected in" ??_C@_1HM@DIGNIGCF@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAi?$AAn?$AAp?$AAu?$AAt?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAd?$AAe?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?5?$AAi?$AAn@
0x1400116C0: "__cdecl tls_index" _tls_index
0x140005E0C: "long __cdecl OrchestrateShutdownBeforeLogon(int)" ?OrchestrateShutdownBeforeLogon@@YAJH@Z
0x140003768: McGenEventTracingUnregister2
0x14000E590: "IMAGE_STATE_GENERALIZE_RESEAL_TO" ??_C@_1EO@HOFCKBLH@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAG?$AAE?$AAN?$AAE?$AAR?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA_?$AAR?$AAE?$AAS?$AAE?$AAA?$AAL?$AA_?$AAT?$AAO@
0x14000B618: "__cdecl _imp__commode" __imp__commode
0x14000B898: LaunchOobeStart
0x14000D680: "auditUser" ??_C@_1BE@JLIBHMOF@?$AAa?$AAu?$AAd?$AAi?$AAt?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x14000D3D0: "Specified unattend file [%s] doe" ??_C@_1FI@LMCDMCPJ@?$AAS?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAd?$AAo?$AAe@
0x14000F4A0: "__cdecl tls_start" _tls_start
0x14000C200: "System\Setup\FirstBoot\Oobe" ??_C@_1DI@EAGOPMEA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAF?$AAi?$AAr?$AAs?$AAt?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAO?$AAo?$AAb?$AAe?$AA?$AA@
0x14000B640: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000B738: "__cdecl _xl_z" __xl_z
0x1400091F4: "int __cdecl pExecuteCommandFromValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,__int64)" ?pExecuteCommandFromValue@@YAHPEAUHKEY__@@PEBG_J@Z
0x14000C728: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x14000B400: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000B4F8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x14000CEA0: "System\Setup\Status\ChildComplet" ??_C@_1EI@CNNABGNJ@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?2?$AAC?$AAh?$AAi?$AAl?$AAd?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt@
0x140009AB0: wWinMainCRTStartup
0x140009DC0: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000C750: "WdsSetupLogInit" ??_C@_0BA@EGFDPMGD@WdsSetupLogInit?$AA@
0x1400051A4: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x14000B6B0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x14000B308: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x14000CAE0: "DeleteFileEx: hardlink given to " ??_C@_1FE@NMMDLJAB@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAh?$AAa?$AAr?$AAd?$AAl?$AAi?$AAn?$AAk?$AA?5?$AAg?$AAi?$AAv?$AAe?$AAn?$AA?5?$AAt?$AAo?$AA?5@
0x14000FB54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140011828: "protected: static struct CEtwProviderT<void>::CETWApiSet CEtwProviderT<void>::g_etwApi" ?g_etwApi@?$CEtwProviderT@X@@1UCETWApiSet@1@A
0x14000D8C0: "unattend\settings[pass=%s]\compo" ??_C@_1NI@IDCHIAJK@?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?2?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$FL?$AAp?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CF?$AAs?$AA?$FN?$AA?2?$AAc?$AAo?$AAm?$AAp?$AAo@
0x14000B7C0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140003578: McTemplateMofU0
0x14000B8F8: OobeLdrProcessUnattendUsingFile
0x14000B338: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14000B8A8: OobeLdrProcessUnattendStopFailedToExecute
0x14000B380: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x14000B4B0: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x14000B4E0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x14000E998: IID_ISettingsEngine
0x14000B510: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x140011770: g_FindFirstFileName
0x140011130: "__cdecl newmode" _newmode
0x14000B638: "__cdecl _imp__initterm" __imp__initterm
0x14000B660: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14000B260: "__cdecl _imp_UnattendFreeNode" __imp_UnattendFreeNode
0x140003DD4: AllocateExpand
0x14000C4B0: "OOBE UI requested restart" ??_C@_1DE@LKEIHDGN@?$AAO?$AAO?$AAB?$AAE?$AA?5?$AAU?$AAI?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140004DFC: RegSetString
0x14000B8C8: Microsoft_Windows_OobeLdrKeywords
0x14000B2B0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140004C2C: RegGetDword
0x140005EF8: "long __cdecl OrchestrateIsAuditBootEx2(struct HKEY__ * __ptr64,int,int * __ptr64)" ?OrchestrateIsAuditBootEx2@@YAJPEAUHKEY__@@HPEAH@Z
0x14000B3B0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x14000E7D0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GM@FNOAOLDJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000C3B0: "Converting exit code 0x%08X to E" ??_C@_1HM@JEDMMBKO@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAx?$AAi?$AAt?$AA?5?$AAc?$AAo?$AAd?$AAe?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AAt?$AAo?$AA?5?$AAE@
0x14000E8F0: "Setup\State" ??_C@_1BI@BOKHLGAB@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14000B5A0: api-ms-win-shcore-obsolete-l1-1-0_NULL_THUNK_DATA
0x14000B540: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x14000FCD0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x140006A2C: "long __cdecl OrchestratePostProcessSettingsInCtx(struct _UNATTEND_CONTEXT const * __ptr64,unsigned short const * __ptr64)" ?OrchestratePostProcessSettingsInCtx@@YAJPEBU_UNATTEND_CONTEXT@@PEBG@Z
0x14000ED30: "ExecuteCommandFromValue: Failed " ??_C@_1HI@IHPMFDM@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14000D020: "Unable to delete existing direct" ??_C@_1FC@JNNNOEBJ@?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAe?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt@
0x14000EE80: "FbeExecuteExtensions: Processing" ??_C@_1HK@PHDMHDEB@?$AAF?$AAb?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg@
0x14000E240: "SMI data results dump: Source = " ??_C@_1EG@KGHBFICN@?$AAS?$AAM?$AAI?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAr?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?3?$AA?5?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AA?$DN?$AA?5@
0x140011858: "__cdecl _onexitend" __onexitend
0x14000B650: "__cdecl _imp__exit" __imp__exit
0x14000A0C3: "__cdecl unlock" _unlock
0x14000FD0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1
0x14000B6C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000B418: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000B948: "OOBETransitionUXEndEvent" ??_C@_1DC@MBDGFNI@?$AAO?$AAO?$AAB?$AAE?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AAU?$AAX?$AAE?$AAn?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x14000B6A0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140005C40: BuildPath
0x1400110E0: "__cdecl Init_global_epoch" _Init_global_epoch
0x14000B548: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14000B710: "__cdecl _xi_a" __xi_a
0x14000E9A8: CLSID_SettingsEngine
0x14000D080: "Caching copy of unattend file: [" ??_C@_1HE@PAAGAANL@?$AAC?$AAa?$AAc?$AAh?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAp?$AAy?$AA?5?$AAo?$AAf?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?3?$AA?5?$AA?$FL@
0x1400117C0: Microsoft_Windows_DeplorchEnableBits
0x14000B538: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140009D00: "__cdecl matherr" _matherr
0x140007C88: "long __cdecl UnattendResultsFromSMIDataResults(struct ISettingsResult * __ptr64 * __ptr64,unsigned __int64,unsigned short const * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?UnattendResultsFromSMIDataResults@@YAJPEAPEAUISettingsResult@@_KPEBGPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x14000B608: "__cdecl _imp__unlock" __imp__unlock
0x14000C7A8: "WdsSetupLogMessageW" ??_C@_0BE@PMAMNFBG@WdsSetupLogMessageW?$AA@
0x14000C914: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x14000B298: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x14000DC90: "Successfully applied data-only s" ??_C@_1GG@EGCHHDNH@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AAa?$AAp?$AAp?$AAl?$AAi?$AAe?$AAd?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?9?$AAo?$AAn?$AAl?$AAy?$AA?5?$AAs@
0x14000B248: "__cdecl _imp_UnattendCtxCancelModify" __imp_UnattendCtxCancelModify
0x14000C858: "<unknown>" ??_C@_1BE@ELICABCK@?$AA?$DM?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$AA@
0x140007A8C: "long __cdecl LoadSMISettings(struct ISettingsContext * __ptr64,struct ITargetInfo * __ptr64,struct IStream * __ptr64,unsigned short const * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?LoadSMISettings@@YAJPEAUISettingsContext@@PEAUITargetInfo@@PEAUIStream@@PEBGPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x14000E470: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14000C7D8: "ConstructPartialMsgVW" ??_C@_0BG@GEMHGGEA@ConstructPartialMsgVW?$AA@
0x14000E4C0: "GeneralizationState" ??_C@_1CI@JDHNDED@?$AAG?$AAe?$AAn?$AAe?$AAr?$AAa?$AAl?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14000FC08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14000C0C0: "A shutdown has been requested fo" ??_C@_1FO@DONHMNME@?$AAA?$AA?5?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?5?$AAh?$AAa?$AAs?$AA?5?$AAb?$AAe?$AAe?$AAn?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAf?$AAo@
0x14000624C: "long __cdecl OrchestrateCacheUnattend(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?OrchestrateCacheUnattend@@YAJPEBG0@Z
0x14000E578: "setup.exe" ??_C@_1BE@PALHGNFE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000B600: "__cdecl _imp___dllonexit" __imp___dllonexit
0x14000E720: "OrchestrateUpdateImageState: Upd" ??_C@_1IK@OADGJKHF@?$AAO?$AAr?$AAc?$AAh?$AAe?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAm?$AAa?$AAg?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AAU?$AAp?$AAd@
0x14000523C: PrepareUnicodePath
0x14000FBCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x14000B500: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x14000B5B8: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x140009AE0: "__cdecl _security_check_cookie" __security_check_cookie
0x14000C7F0: "CurrentIP" ??_C@_09BJNIHBEK@CurrentIP?$AA@
0x14000EBC0: "ExecuteCommandFromValue: Command" ??_C@_1KC@KMHIJI@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x14000B708: "__cdecl _xc_z" __xc_z
0x14000FBE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x14000B428: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14000DA18: "ProductKey" ??_C@_1BG@DJPMEOGD@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAK?$AAe?$AAy?$AA?$AA@
0x14000B398: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14000EA30: "ExecuteCommandFromValue: Ignorin" ??_C@_1HK@CDMHGLHC@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AAI?$AAg?$AAn?$AAo?$AAr?$AAi?$AAn@
0x14000BC70: "%windir%\system32\sysprep\syspre" ??_C@_1EM@HFOKNOLP@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAs?$AAy?$AAs?$AAp?$AAr?$AAe?$AAp?$AA?2?$AAs?$AAy?$AAs?$AAp?$AAr?$AAe@
0x1400116D8: PfnEventWrite
0x140005F60: "long __cdecl OrchestrateNextBootAsAudit(int)" ?OrchestrateNextBootAsAudit@@YAJH@Z
0x14000CC10: "DeleteFileEx: Unable to clear ou" ??_C@_1IC@EOLNBKDF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAl?$AAe?$AAa?$AAr?$AA?5?$AAo?$AAu@
0x14000E7B0: "ImageState" ??_C@_1BG@FKLEHGHC@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14000B5D8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000E460: "wcm://" ??_C@_1O@MAJFOJLL@?$AAw?$AAc?$AAm?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x14000D740: "ProcessResealSetting: Reseal mod" ??_C@_1JK@CENLPCJI@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAs?$AAe?$AAa?$AAl?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAR?$AAe?$AAs?$AAe?$AAa?$AAl?$AA?5?$AAm?$AAo?$AAd@
0x14000B530: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000C838: "wdscore.dll" ??_C@_1BI@LOLJMEGL@?$AAw?$AAd?$AAs?$AAc?$AAo?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000BBB0: "OobeExePerf" ??_C@_1BI@KFBPPDME@?$AAO?$AAo?$AAb?$AAe?$AAE?$AAx?$AAe?$AAP?$AAe?$AAr?$AAf?$AA?$AA@
0x14000E650: "IMAGE_STATE_SPECIALIZE_RESEAL_TO" ??_C@_1EO@CEOLAJON@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAS?$AAP?$AAE?$AAC?$AAI?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA_?$AAR?$AAE?$AAS?$AAE?$AAA?$AAL?$AA_?$AAT?$AAO@
0x14000E840: "%windir%" ??_C@_1BC@CGIBIBCK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?$AA@
0x14000B348: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400059BC: StrAllocatingPrintf
0x1400117D4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUwvkolixsUhixUlyquivUznwGEUkxsOlyq@DeplOrch" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUwvkolixsUhixUlyquivUznwGEUkxsOlyq@DeplOrch
0x14000A2B0: "__cdecl _chkstk" __chkstk
0x1400014B0: McGenEventTracingRegister
0x140005464: CreatePath
0x14000B268: "__cdecl _imp_UnattendCtxSerialize" __imp_UnattendCtxSerialize
0x14000D100: "Couldn't create destination dire" ??_C@_1FG@IBHDJDKC@?$AAC?$AAo?$AAu?$AAl?$AAd?$AAn?$AA?8?$AAt?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAd?$AAe?$AAs?$AAt?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAi?$AAr?$AAe@
0x14000D4D0: "%windir%\Setup\Scripts\ErrorHand" ??_C@_1FA@BDOGDKNC@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AAs?$AA?2?$AAE?$AAr?$AAr?$AAo?$AAr?$AAH?$AAa?$AAn?$AAd@
0x14000B300: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x14000B4A8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x14000FC6C: "__cdecl _IMPORT_DESCRIPTOR_UNATTEND" __IMPORT_DESCRIPTOR_UNATTEND
0x14000B318: "__cdecl _imp_CopyFileExW" __imp_CopyFileExW
0x14000FC30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000B438: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x14000B740: "__cdecl _guard_fids_table" __guard_fids_table
0x14000B5F0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x14000E540: "IMAGE_STATE_UNDEPLOYABLE" ??_C@_1DC@LJIKGBN@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAU?$AAN?$AAD?$AAE?$AAP?$AAL?$AAO?$AAY?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14000B690: msvcrt_NULL_THUNK_DATA
0x14000B0A0: "__cdecl load_config_used" _load_config_used
0x14000D480: "System\Setup\Status\UnattendPass" ??_C@_1EG@BAEAMEDA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?2?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAP?$AAa?$AAs?$AAs@
0x140007A10: "void __cdecl FreeSMISettingsInterfaces(struct ISettingsEngine * __ptr64,struct ISettingsContext * __ptr64,struct ITargetInfo * __ptr64,unsigned long)" ?FreeSMISettingsInterfaces@@YAXPEAUISettingsEngine@@PEAUISettingsContext@@PEAUITargetInfo@@K@Z
0x14000C790: "WdsSetupLogMessageA" ??_C@_0BE@OAJEGAMB@WdsSetupLogMessageA?$AA@
0x140004928: RegSetBinEx
0x14000B230: "__cdecl _imp_UnattendCtxBeginModify" __imp_UnattendCtxBeginModify
0x14000FC44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-shcore-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-shcore-obsolete-l1-1-0
0x14000E1A0: "UnattendResultsFromSMIDataResult" ??_C@_1JC@MEMBMIDG@?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AAF?$AAr?$AAo?$AAm?$AAS?$AAM?$AAI?$AAD?$AAa?$AAt?$AAa?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt@
0x14000FCA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14000B4F0: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x1400116C4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUlkpgllohUllyvowiUhixUlyquivUznwGEUkxsOlyq@oobeldr" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUlkpgllohUllyvowiUhixUlyquivUznwGEUkxsOlyq@oobeldr
0x14000B258: "__cdecl _imp_UnattendAddResults" __imp_UnattendAddResults
0x14000B670: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14000BF20: "Successfully completed RunSMIPas" ??_C@_1FE@FMMILLCA@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAR?$AAu?$AAn?$AAS?$AAM?$AAI?$AAP?$AAa?$AAs@
0x14000C570: "Parsing the following command li" ??_C@_1FC@BJMOHDJN@?$AAP?$AAa?$AAr?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAf?$AAo?$AAl?$AAl?$AAo?$AAw?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAl?$AAi@
0x140005B14: StringCchCopyNExW
0x14000B250: "__cdecl _imp_UnattendCtxSerializeSettingsStream" __imp_UnattendCtxSerializeSettingsStream
0x140003804: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x14000B388: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400087E0: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000B490: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000B430: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000C970: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14001112C: "__cdecl dowildcard" _dowildcard
0x14000C190: "%windir%\system32\oobe\msoobe.ex" ??_C@_1EE@PHLJBMII@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAo?$AAo?$AAb?$AAe?$AA?2?$AAm?$AAs?$AAo?$AAo?$AAb?$AAe?$AA?4?$AAe?$AAx@
0x14000DC20: "Applying data-only settings over" ??_C@_1GG@DFIADDJD@?$AAA?$AAp?$AAp?$AAl?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?9?$AAo?$AAn?$AAl?$AAy?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?5?$AAo?$AAv?$AAe?$AAr@
0x14000D628: "offlineServicing" ??_C@_1CC@OILJLBFF@?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x14000B1D0: "__cdecl _imp_GenerateActionQueue" __imp_GenerateActionQueue
0x14000D590: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GK@MMHBEFCL@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000BC20: "Status for unattend pass [%s] = " ??_C@_1EK@DNGMAGIL@?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAp?$AAa?$AAs?$AAs?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AA?$DN?$AA?5@
0x14000B498: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000B200: "__cdecl _imp_UnattendCtxGetEnumValueByNode" __imp_UnattendCtxGetEnumValueByNode
0x14000D430: "Error expanding Unattend dest pa" ??_C@_1FA@HECDHMKH@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAe?$AAx?$AAp?$AAa?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAd?$AAe?$AAs?$AAt?$AA?5?$AAp?$AAa@
0x14000DAB8: "UnattendErrorFromResults" ??_C@_0BJ@OICDMEKC@UnattendErrorFromResults?$AA@
0x140003E74: MsgBoxStr
0x140009BC4: "__cdecl _std_terminate" __std_terminate
0x1400051A4: StringCchCopyNW
0x140004A28: RegExists
0x14000E630: "audit.exe" ??_C@_1BE@FNHKEEEF@?$AAa?$AAu?$AAd?$AAi?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140009EF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000B3E0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x14000C878: "UnattendLogWV" ??_C@_1BM@PPHHDPAK@?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAL?$AAo?$AAg?$AAW?$AAV?$AA?$AA@
0x14000B5E8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140009C4C: RtlpImageNtHeader
0x14000C850: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x1400117DC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbrmhgUoryUlyquivUznwGEUhgwzucOlyq@pkeyinst" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbrmhgUoryUlyquivUznwGEUhgwzucOlyq@pkeyinst
0x14000E448: "DllGetClassObject" ??_C@_0BC@JDLGBILA@DllGetClassObject?$AA@
0x14000C778: "WdsSetupLogDestroy" ??_C@_0BD@EHPFJNKD@WdsSetupLogDestroy?$AA@
0x14000FB7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x14000B390: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140011048: PfnEventRegister
0x14000B218: "__cdecl _imp_UnattendCtxCleanup" __imp_UnattendCtxCleanup
0x14000BEF0: "OOBE" ??_C@_19GNCDBIIN@?$AAO?$AAO?$AAB?$AAE?$AA?$AA@
0x14000BA10: "Parsing command line arguments.." ??_C@_1EE@KDICIFLO@?$AAP?$AAa?$AAr?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAa?$AAr?$AAg?$AAu?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?4?$AA?4@
0x14000C640: "oobeldr.exe must be called with " ??_C@_1FA@INGDPIEJ@?$AAo?$AAo?$AAb?$AAe?$AAl?$AAd?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAm?$AAu?$AAs?$AAt?$AA?5?$AAb?$AAe?$AA?5?$AAc?$AAa?$AAl?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5@
0x14000B580: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x14000BF80: "Failed to complete RunSMIPass fo" ??_C@_1GK@DAFBCCJI@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAR?$AAu?$AAn?$AAS?$AAM?$AAI?$AAP?$AAa?$AAs?$AAs?$AA?5?$AAf?$AAo@
0x14000E950: "EtwEventUnregister" ??_C@_0BD@JDHMJNFM@EtwEventUnregister?$AA@
0x14000CA60: "DeleteFileEx: Unable to get full" ??_C@_1HO@MMJLMIKH@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAf?$AAu?$AAl?$AAl@
0x14000B678: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000C930: "GetForegroundWindow" ??_C@_0BE@IIKKNMMA@GetForegroundWindow?$AA@
0x14000B980: "<empty>" ??_C@_1BA@BJHHGHEK@?$AA?$DM?$AAe?$AAm?$AAp?$AAt?$AAy?$AA?$DO?$AA?$AA@
0x14000B6B8: ntdll_NULL_THUNK_DATA
0x140007574: "long __cdecl RunSMIActionPass(struct _UNATTEND_CONTEXT const * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64 * __ptr64,unsigned __int64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?RunSMIActionPass@@YAJPEBU_UNATTEND_CONTEXT@@PEBGHPEAPEBG_KPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x1400082DC: "long __cdecl GetSetActionQueueCookie(int,unsigned long * __ptr64)" ?GetSetActionQueueCookie@@YAJHPEAK@Z
0x14000A0E8: "__cdecl Init_thread_footer" _Init_thread_footer
0x14000BF00: "OobeSystemPerf" ??_C@_1BO@NEFJHILF@?$AAO?$AAo?$AAb?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAe?$AAr?$AAf?$AA?$AA@
0x14000E860: "Software\Microsoft\Windows\Curre" ??_C@_1IG@FMMIFIBP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000B8E8: Microsoft_Windows_OobeLdr
0x14000D610: "windowsPE" ??_C@_1BE@IBBOGJGJ@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAP?$AAE?$AA?$AA@
0x14000C870: "[%S] %S" ??_C@_07EKKPINLM@?$FL?$CFS?$FN?5?$CFS?$AA@
0x14000B368: "__cdecl _imp_PowerSetRequest" __imp_PowerSetRequest
0x14000B568: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x14000FB68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x14000CE78: "System\Setup\Status" ??_C@_1CI@EDJKIOEK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140004274: DeleteFileEx2
0x14000D6A8: "Mode" ??_C@_19OBGHODPD@?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14000B5A8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x14000B560: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x1400110C8: "__cdecl _security_cookie" __security_cookie
0x14000CCD8: "Flush took %u ms." ??_C@_1CE@CLNCGACJ@?$AAF?$AAl?$AAu?$AAs?$AAh?$AA?5?$AAt?$AAo?$AAo?$AAk?$AA?5?$AA?$CF?$AAu?$AA?5?$AAm?$AAs?$AA?4?$AA?$AA@
0x14000B460: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14000A2B0: "__cdecl alloca_probe" _alloca_probe
0x14000DD00: "Failed to apply data-only settin" ??_C@_1HA@DNONLKEL@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAp?$AAp?$AAl?$AAy?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?9?$AAo?$AAn?$AAl?$AAy?$AA?5?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn@
0x14000B420: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x14000D998: "unattend\settings[pass=%s]" ??_C@_1DG@FEEHCLI@?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?2?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$FL?$AAp?$AAa?$AAs?$AAs?$AA?$DN?$AA?$CF?$AAs?$AA?$FN?$AA?$AA@
0x14000DB40: "StopHigh" ??_C@_1BC@LKLCJINH@?$AAS?$AAt?$AAo?$AAp?$AAH?$AAi?$AAg?$AAh?$AA?$AA@
0x14000C1D8: "Launching [%s]..." ??_C@_1CE@OCIOIME@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAi?$AAn?$AAg?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?4?$AA?4?$AA?4?$AA?$AA@
0x14000CF70: "Deleting cached copy of unattend" ??_C@_1GA@PGGDLDME@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAc?$AAo?$AAp?$AAy?$AA?5?$AAo?$AAf?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd@
0x14000B2D0: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x14000B328: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140007F74: "long __cdecl UnattendResultsFromSMIActionResults(struct IUnattendActionResultSet * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?UnattendResultsFromSMIActionResults@@YAJPEAUIUnattendActionResultSet@@PEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x14000DFE0: "Execution of unattend GCs failed" ??_C@_1IO@GGAMHLEP@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAo?$AAf?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAG?$AAC?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x14000B358: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400110C0: "__cdecl _defaultmatherr" __defaultmatherr
0x14000B928: RunOobeLdrStop
0x14000FB90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140001370: McGenControlCallbackV2
0x14000B2A0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x14000B730: "__cdecl _xl_a" __xl_a
0x14000C2B0: "Failed to launch [%s]; hr = 0x%x" ??_C@_1EC@PDOGHAFE@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?$DL?$AA?5?$AAh?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAx@
0x14000B3C0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x14000B2E8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x14000DD70: "Calling into RunSMIActionPass to" ??_C@_1II@NCDOCIGN@?$AAC?$AAa?$AAl?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAi?$AAn?$AAt?$AAo?$AA?5?$AAR?$AAu?$AAn?$AAS?$AAM?$AAI?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAP?$AAa?$AAs?$AAs?$AA?5?$AAt?$AAo@
0x14000B850: "EventRegister" ??_C@_0O@BAMBGLIE@EventRegister?$AA@
0x14000EA18: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x14000D650: "generalize" ??_C@_1BG@NDGGEKGG@?$AAg?$AAe?$AAn?$AAe?$AAr?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x14000B440: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140011860: "__cdecl _onexitbegin" __onexitbegin
0x14000D2E0: "Couldn't form canonical path nam" ??_C@_1IG@EDHBMOJC@?$AAC?$AAo?$AAu?$AAl?$AAd?$AAn?$AA?8?$AAt?$AA?5?$AAf?$AAo?$AAr?$AAm?$AA?5?$AAc?$AAa?$AAn?$AAo?$AAn?$AAi?$AAc?$AAa?$AAl?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5?$AAn?$AAa?$AAm@
0x14000C5D0: "Explicit unattend was requested:" ??_C@_1EM@LJKGJMCD@?$AAE?$AAx?$AAp?$AAl?$AAi?$AAc?$AAi?$AAt?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAe?$AAd?$AA?3@
0x14000E910: "State.ini" ??_C@_1BE@HGIGAEMF@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?4?$AAi?$AAn?$AAi?$AA?$AA@
0x14000B5B0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000DB30: "StopLow" ??_C@_1BA@NMOBHAIL@?$AAS?$AAt?$AAo?$AAp?$AAL?$AAo?$AAw?$AA?$AA@
0x14000B2C0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000E480: "/settings/component/" ??_C@_1CK@OKOGPBF@?$AA?1?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?1?$AAc?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?1?$AA?$AA@
0x14000C4F0: "Failed to expand environment var" ??_C@_1HE@PBHDDNGP@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAx?$AAp?$AAa?$AAn?$AAd?$AA?5?$AAe?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?5?$AAv?$AAa?$AAr@
0x14000B450: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x14000BBD0: "OOBELdr.exe exiting with code [0" ??_C@_1FA@CFCHFAKO@?$AAO?$AAO?$AAB?$AAE?$AAL?$AAd?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAe?$AAx?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAc?$AAo?$AAd?$AAe?$AA?5?$AA?$FL?$AA0@
0x14000A158: "__cdecl Init_thread_header" _Init_thread_header
0x140011778: g_WdsLibLog
0x14000B3D8: api-ms-win-core-privateprofile-l1-1-0_NULL_THUNK_DATA
0x140003E98: MsgBoxStrV
0x14000EF00: "FbeExecuteExtensions: Processing" ??_C@_1HI@DDEDOPKK@?$AAF?$AAb?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg@
0x140011050: Microsoft_Windows_Deplorch_Context
0x14000B480: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x14000DA30: "*SENSITIVE*DATA*DELETED*" ??_C@_1DC@HBPJBHJK@?$AA?$CK?$AAS?$AAE?$AAN?$AAS?$AAI?$AAT?$AAI?$AAV?$AAE?$AA?$CK?$AAD?$AAA?$AAT?$AAA?$AA?$CK?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AAD?$AA?$CK?$AA?$AA@
0x140009DF4: "__cdecl _security_init_cookie" __security_init_cookie
0x14000B990: "OOBELdr.exe launched with comman" ??_C@_1FO@BKJCLMLP@?$AAO?$AAO?$AAB?$AAE?$AAL?$AAd?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn@
0x14000E978: "EtwEventWrite" ??_C@_0O@MJPOMPOC@EtwEventWrite?$AA@
0x14000B648: "__cdecl _imp__cexit" __imp__cexit
0x14000CD80: "CreatePath: Unable to create par" ??_C@_1IG@HCLNMHAA@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAp?$AAa?$AAr@
0x14000E3C0: "%windir%\panther\actionqueue" ??_C@_1DK@BAPADGKM@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAp?$AAa?$AAn?$AAt?$AAh?$AAe?$AAr?$AA?2?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAq?$AAu?$AAe?$AAu?$AAe?$AA?$AA@
0x140003AD8: UnattendLogW
0x1400040F8: LibLog
0x140009CA8: "__cdecl get_image_app_type" _get_image_app_type
0x14000C9C0: "DeleteFileEx: Unable to allocate" ??_C@_1JG@NHOALAOF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAe@
0x140007BB8: "long __cdecl ApplySMISettings(struct ISettingsEngine * __ptr64,struct ISettingsContext * __ptr64,struct ITargetInfo * __ptr64,unsigned short const * __ptr64 * __ptr64 * __ptr64,unsigned __int64 * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64)" ?ApplySMISettings@@YAJPEAUISettingsEngine@@PEAUISettingsContext@@PEAUITargetInfo@@PEAPEAPEBGPEA_KPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x14000FB18: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000A272: wcscmp
0x14000D668: "specialize" ??_C@_1BG@GKLAPFBG@?$AAs?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x14000B938: OobeLdrProcessUnattendStart
0x14000B228: "__cdecl _imp_UnattendMarkPassUsedInCtx" __imp_UnattendMarkPassUsedInCtx
0x140011820: "private: static class CEtwProviderT<void> CChkMacroETWLoggerT<class CEmptyType>::g_chkMacroETWProvider" ?g_chkMacroETWProvider@?$CChkMacroETWLoggerT@VCEmptyType@@@@0V?$CEtwProviderT@X@@A
0x14000D370: "Error expanding Unattend source " ??_C@_1FE@OHFPOIHC@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAe?$AAx?$AAp?$AAa?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5@
0x140003B00: UnattendLogWV
0x1400058F8: StrDupe
0x14000E5E0: "IMAGE_STATE_GENERALIZE_RESEAL_TO" ??_C@_1EM@POLMGCN@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAG?$AAE?$AAN?$AAE?$AAR?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA_?$AAR?$AAE?$AAS?$AAE?$AAA?$AAL?$AA_?$AAT?$AAO@
0x140004F0C: WdsExecuteApplication
0x14000DAD8: "SYSTEM\Setup\Timers" ??_C@_1CI@DKCJJNOJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAT?$AAi?$AAm?$AAe?$AAr?$AAs?$AA?$AA@
0x14000B6A8: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x140003464: McTemplateMofU0zz
0x140004700: DirectoryExists
0x140009F40: "__cdecl _report_gsfailure" __report_gsfailure
0x14000B570: "__cdecl _imp_TraceEvent" __imp_TraceEvent
0x14000B4D8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140009B10: "__cdecl onexit" _onexit
0x14000DF80: "Successfully completed execution" ??_C@_1FK@LFPGCPLA@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAe?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn@
0x140011850: "__cdecl _native_startup_state" __native_startup_state
0x14000C958: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400061D8: "int __cdecl OrchestrateIsValidPass(unsigned short const * __ptr64)" ?OrchestrateIsValidPass@@YAHPEBG@Z
0x140003690: McTemplateMofU0z
0x14000D290: "Couldn't copy file from [%s] to " ??_C@_1EK@JNNFGBKE@?$AAC?$AAo?$AAu?$AAl?$AAd?$AAn?$AA?8?$AAt?$AA?5?$AAc?$AAo?$AAp?$AAy?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAt?$AAo?$AA?5@
0x14000B8B8: RunOobeLdrStart
0x140001200: McGenControlCallback
0x14000CC98: "Flushing registry to disk..." ??_C@_1DK@CFBBJAAP@?$AAF?$AAl?$AAu?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAi?$AAs?$AAk?$AA?4?$AA?4?$AA?4?$AA?$AA@
0x14000B620: "__cdecl _imp__fmode" __imp__fmode
0x140011768: g_FindNextFileName
0x14000BEA0: "Cached unattend file, returned: " ??_C@_1EK@LOKFBDMB@?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?0?$AA?5?$AAr?$AAe?$AAt?$AAu?$AAr?$AAn?$AAe?$AAd?$AA?3?$AA?5@
0x14000C6F8: "auditSystem" ??_C@_1BI@JGFACJDA@?$AAa?$AAu?$AAd?$AAi?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14000B1E8: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x14000FC1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140009D60: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000BA60: "Successfully ran oobeSystem pass" ??_C@_1EE@HINPHFJM@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AAr?$AAa?$AAn?$AA?5?$AAo?$AAo?$AAb?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAp?$AAa?$AAs?$AAs@
0x14000B528: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14000E6A0: "IMAGE_STATE_SPECIALIZE_RESEAL_TO" ??_C@_1EM@BOCJCCJM@?$AAI?$AAM?$AAA?$AAG?$AAE?$AA_?$AAS?$AAT?$AAA?$AAT?$AAE?$AA_?$AAS?$AAP?$AAE?$AAC?$AAI?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA_?$AAR?$AAE?$AAS?$AAE?$AAA?$AAL?$AA_?$AAT?$AAO@
0x14000FD34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-privateprofile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-privateprofile-l1-1-0
0x14000EC70: "ExecuteCommandFromValue: %s is l" ??_C@_1LO@LNFLJFDK@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAr?$AAo?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAl@
0x14000DB60: "Current pass status for [%s] is " ??_C@_1EO@JBIGMGJD@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAp?$AAa?$AAs?$AAs?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAi?$AAs?$AA?5@
0x14000F070: "FbeExecuteExtensions: Running Ex" ??_C@_1HA@OMKKJKNN@?$AAF?$AAb?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAE?$AAx@
0x14000B2F0: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x14000604C: "long __cdecl OrchestrateSetCompletionStatus(unsigned short const * __ptr64,enum _COMPLETION_STATUS)" ?OrchestrateSetCompletionStatus@@YAJPEBGW4_COMPLETION_STATUS@@@Z
0x14000B508: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x14000D578: "OOBEFailure" ??_C@_1BI@JCNNEPBA@?$AAO?$AAO?$AAB?$AAE?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x14000FBF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x14000A266: memset
0x14000FD48: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000E4F0: "System\Setup\Status\SysprepStatu" ??_C@_1EE@LGFDLBMC@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAp?$AAr?$AAe?$AAp?$AAS?$AAt?$AAa?$AAt?$AAu@
0x14000DB18: "StartHigh" ??_C@_1BE@FKLDKMHK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAH?$AAi?$AAg?$AAh?$AA?$AA@

[JEB Decompiler by PNF Software]