Generated by JEB on 2019/08/01

PE: C:\Windows\System32\spwinsat.dll Base=0x180000000 SHA-256=C68929EB8E9701BAD5DD17DA531CB3A9A841ABEA846F77FF40C3B97511260E46
PDB: spwinsat.pdb GUID={8B7128F8-8EDC-6E6A-F190FD870FC93082} Age=1

131 located named symbols:
0x18000226C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002070: "__cdecl FindPESection" _FindPESection
0x180003700: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EK@DLKJENHG@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x1800032E0: "RemoveAllKeysExceptMoobeKey" ??_C@_1DI@IBGBDFDF@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAA?$AAl?$AAl?$AAK?$AAe?$AAy?$AAs?$AAE?$AAx?$AAc?$AAe?$AAp?$AAt?$AAM?$AAo?$AAo?$AAb?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
0x180005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001B4C: "__cdecl CRT_INIT" _CRT_INIT
0x1800031B0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800024E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003218: "__cdecl _imp_CurrentIP" __imp_CurrentIP
0x180003560: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EN@NBGGGHNB@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003140: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x180001008: "struct tagLOG_PARTIAL_MSG * __ptr64 __cdecl ConstructPartialMsgW(unsigned long,char const * __ptr64,...)" ?ConstructPartialMsgW@@YAPEAUtagLOG_PARTIAL_MSG@@KPEBDZZ
0x180003120: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x180003288: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003648: "Sysprep_Clean_WinSAT" ??_C@_1CK@HHNHLJPF@?$AAS?$AAy?$AAs?$AAp?$AAr?$AAe?$AAp?$AA_?$AAC?$AAl?$AAe?$AAa?$AAn?$AA_?$AAW?$AAi?$AAn?$AAS?$AAA?$AAT?$AA?$AA@
0x180002054: "__cdecl XcptFilter" _XcptFilter
0x180003290: "__cdecl _xc_a" __xc_a
0x180003460: "DeleteDataStoreFilesMatchingSpec" ??_C@_1EM@HJNIPEAD@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAD?$AAa?$AAt?$AAa?$AAS?$AAt?$AAo?$AAr?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AAM?$AAa?$AAt?$AAc?$AAh?$AAi?$AAn?$AAg?$AAS?$AAp?$AAe?$AAc@
0x1800031B8: "__cdecl _imp_FindClose" __imp_FindClose
0x1800031E8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180003270: "__cdecl _imp_memset" __imp_memset
0x18000223C: "__cdecl initterm" _initterm
0x1800055C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800031D8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800032B0: "__cdecl _xi_z" __xi_z
0x180003190: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002248: "__cdecl _C_specific_handler" __C_specific_handler
0x1800031C8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180003148: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000245C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003680: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0ED@DBCFLEAK@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003600: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EF@DBDNDCDD@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180002060: "__cdecl amsg_exit" _amsg_exit
0x180003220: "__cdecl _imp_ConstructPartialMsgVW" __imp_ConstructPartialMsgVW
0x180001348: "long __cdecl DeleteDataStoreFilesMatchingSpecifier(unsigned short const * __ptr64)" ?DeleteDataStoreFilesMatchingSpecifier@@YAJPEBG@Z
0x1800031A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800055B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180002230: DllMain
0x1800033C0: "spwinsat.dll::RemoveAllKeysExcep" ??_C@_0EK@HBMMFDJL@spwinsat?4dll?3?3RemoveAllKeysExcep@
0x180003258: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180003230: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180003168: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003208: KERNEL32_NULL_THUNK_DATA
0x1800031F8: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x1800031E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180005000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002438: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003DF8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180003170: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003138: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180002120: "__cdecl ValidateImageBase" _ValidateImageBase
0x180003510: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EI@JBFIMMGO@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x1800016E0: "unsigned long __cdecl Sysprep_Clean_WinSAT(void)" ?Sysprep_Clean_WinSAT@@YAKXZ
0x1800031F0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180001D90: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180003238: "__cdecl _imp__initterm" __imp__initterm
0x180003750: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EM@DPENMONH@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x1800055A0: "__cdecl _onexitend" __onexitend
0x180003280: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800031C0: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x1800031A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003370: "spwinsat.dll::RemoveAllKeysExcep" ??_C@_0EJ@KMBPIMDK@spwinsat?4dll?3?3RemoveAllKeysExcep@
0x1800037E0: "*initial*.xml" ??_C@_1BM@FOBEEABG@?$AA?$CK?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AA?$CK?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x1800032A0: "__cdecl _xi_a" __xi_a
0x180003158: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000336C: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x1800055C8: "__cdecl pRawDllMain" _pRawDllMain
0x180002030: "__cdecl _security_check_cookie" __security_check_cookie
0x180003298: "__cdecl _xc_z" __xc_z
0x180003160: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800010B0: "void __cdecl RemoveAllKeysExceptMoobeKey(struct HKEY__ * __ptr64)" ?RemoveAllKeysExceptMoobeKey@@YAXPEAUHKEY__@@@Z
0x180003200: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800031D0: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180003320: "base\winsat\sysprep-dll\spwinsat" ??_C@_1EK@CAEKKFKD@?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAw?$AAi?$AAn?$AAs?$AAa?$AAt?$AA?2?$AAs?$AAy?$AAs?$AAp?$AAr?$AAe?$AAp?$AA?9?$AAd?$AAl?$AAl?$AA?2?$AAs?$AAp?$AAw?$AAi?$AAn?$AAs?$AAa?$AAt@
0x1800032B8: "__cdecl _guard_fids_table" __guard_fids_table
0x180003278: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x180003248: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800035B0: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EK@FFIIMFIL@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180001030: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180003180: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003188: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003118: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800034F8: "%ws%ws%ws" ??_C@_1BE@MFOEGDMN@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180002260: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003410: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EJ@KIJGHMIP@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003250: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180005008: "__cdecl _security_cookie" __security_cookie
0x1800055A8: "__cdecl _onexitbegin" __onexitbegin
0x180003268: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800036C8: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0DC@DGOLCFJN@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003198: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003E0C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180003128: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002154: "__cdecl _security_init_cookie" __security_init_cookie
0x1800034B0: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0EB@NGAMCBLK@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003210: "__cdecl _imp_WdsSetupLogMessageW" __imp_WdsSetupLogMessageW
0x180003130: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180003DE4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800037A0: "spwinsat.dll::Sysprep_Clean_WinS" ??_C@_0DM@KMABBMJC@spwinsat?4dll?3?3Sysprep_Clean_WinS@
0x180003260: "__cdecl _imp_malloc" __imp_malloc
0x180003150: ADVAPI32_NULL_THUNK_DATA
0x1800022B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800055B8: "__cdecl _native_startup_state" __native_startup_state
0x180003228: WDSCORE_NULL_THUNK_DATA
0x180003800: "*recent*.xml" ??_C@_1BK@JIIGOLGE@?$AA?$CK?$AAr?$AAe?$AAc?$AAe?$AAn?$AAt?$AA?$CK?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x180003240: "__cdecl _imp_free" __imp_free
0x1800020C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003E20: "__cdecl _IMPORT_DESCRIPTOR_WDSCORE" __IMPORT_DESCRIPTOR_WDSCORE
0x1800024BD: memset
0x180003E34: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]