Generated by JEB on 2019/02/01

PE: C:\Windows\System32\OobeFldr.dll Base=0x180000000 SHA-256=50287B9430B6752C40952078BD06E2B9F1BA6A30E653438E819D0D3775E27560
PDB: OobeFldr.pdb GUID={4EDE8E73-F2EE-0B5E-6E66A3522535BB82} Age=1

46 located named symbols:
0x180003008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002150: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800012A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800021B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002470: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180002118: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001010: "void __cdecl ShowWelcomeCenter(struct HWND__ * __ptr64,struct HINSTANCE__ * __ptr64,char * __ptr64,int)" ?ShowWelcomeCenter@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEADH@Z
0x180002120: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002140: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180002178: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002130: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180002148: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180002434: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001020: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x1800021A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002138: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800021A0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180002198: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000245C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001050: "__cdecl _security_check_cookie" __security_check_cookie
0x180002158: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002190: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180002188: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002484: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180002168: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800021B8: "__cdecl _guard_fids_table" __guard_fids_table
0x180002010: "__cdecl load_config_used" _load_config_used
0x180002128: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002180: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180002160: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002170: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001010: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003000: "__cdecl _security_cookie" __security_cookie
0x180002498: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002110: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001070: "__cdecl _security_init_cookie" __security_init_cookie
0x180001140: "__cdecl _report_gsfailure" __report_gsfailure
0x180002448: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800024AC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]