TrustedInstaller.exe.txt

!This program cannot be run in DOS mode.
<Rich
.text
`.rdata
@.data
.pdata
@.rsrc
@.reloc
L$xH
T$xL
AVH
VWAVH
t$HA
yhL
L$PH3
x UATAUAVAWH
tjH
yQL
tLL
unH
yxL
A_A^A]A\]
HcH
x AVH
l$hH
t$pH
UVWATAUAVAWH
yEL
uCH
A_A^A]A\_^]
s WH
L$PH3
L$PH
L$PH
L$XH3
D$0H!\$0H
L$pD
L$pH
AVH
uqH
|$ UATAUAVAWH
A_A^A]A\]
L$pA
uBH
tGf
UWATAUAWH
D$ H!9H
L!d$8A
L$PH
uVD;l$0sOD
xgH
t$HH
L$PH
A_A]A\_]
AVH
xHL
HcH
HcH
UWATAUAVH
HcH
HcR
tiH
HcQ
HcH
HcH
HcH
A^A]A\_]
xEH
HcH
HcA
HcA
tfH
HcH
HcH
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
APH
HcP
HcH
HcH
HcH
HcH
9qptH
H!t$(L
t$HH
D$xH
D$pH
LcP
T$pL
PHH
D$xH
T$xI
HcP
HcH
HcH
HcH
HcH
sXH
shH
spH
HcH
HcH
HcH
HcH
HcH
HcP
HcP
SXH
HcH
KhH
HcH
HcH
HcH
HcH
LcP
T$pL
SUVWATAUAVAWH
D$pL
L$pH
A_A^A]A\_^][
8Q`u6L
IXI9Q
LcB
WAVAWH
x AVH
T$PH
T$XH
x AVH
t$PH
x AVH
USVWATAUAVAWH
EoH
D$XL
D$PA
HcH
HcH
A_A^A]A\_^[]
SUVWATAUAVAWH
L$PD
l$HD
L$pf
A_A^A]A\_^][
@SUVATAUAVAWH
D$PL
T$HH
L$HL
HcH
HcH
L$HH
L$PH3
`A_A^A]A\^][
ATAVAWH
t-9xDt(
D$pA
T$pM
t$XH
0A_A^A\
UVAVH
@SUVWAVH
uLH
WATAUAVAWH
T$XH
ueH
t$hH
A_A^A]A\_
WATAUAVAWH
uNH
tkL
hxH;
xeH
GXH
GXH
WhH
A_A^A]A\_
VWATAUAWH
FhL
D!x0H
FXH
LcB
0A_A]A\_^
x AVH
ypL
t$PH
WAVAWH
t$PH
@USVWATAUAVAWH
EoH
HcH
FXH
FXH
VhH
FXH
LcB
A_A^A]A\_^[]
\$ UVWH
@SUVWATAUAVAWH
D$XH
T$PM
L$XL
L$XH
xA_A^A]A\_^][
UATAVH
tmH
HcH
HcH
HcH
HcH
HcH
HcH
|$ UAVAWH
yCL
HcA
l$ t"H
HcH
HcH
l$XH
l$ VWATAVAWH
|$0HcH
uaH
HcQ
H9|$0tWL
kHI
A_A^A\_^
s WH
l$pH
t$xH
KHH
HcH
HcH
x AVH
t$PH
x AVH
t$PH
GHI9
x ATAVAWH
uhH
l$HH
t$PH
A_A^A\
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
tfH
HcH
HcH
HcA
HcA
tfH
HcH
HcH
HcA
tfH
HcH
HcH
HcA
HcP
HcP
HcH
HcH
HcH
HcH
HcA
HcA
HcA
HcH
HcH
HcA
tXI
HcH
HcH
HcA
AXH
HcH
HcH
KHH
HcH
HcH
x AVH
VWAWH
H!t$8L
@USVWATAUAWH
uhH
A_A]A\_^[]
@SUVWH
tmI
HcH
IHH
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
tfH
HcH
HcH
HcA
HcH
HcH
GPH
GHH
GPHcH
T9LH
GHH
HcH
D9PH
GPHcH
T9LH
GHH
GPH
HcH
D9PH
GPHcH
HcH
UVWATAVH
tdH
tKH
ugH
uZH
CXH
HcQ
HcH
HcH
HcH
PA^A\_^]
UWAWH
OHH
HcH
t$pH
UWATH
t$ UWATH
HcH
HcH
HcH
HcH
@USVWATAUAVAWH
ygH
hA_A^A]A\_^[]
tEH
HcH
UVWH
x UATAUAVAWH
D$pD
fD9<Au
t$XH
D$HE3
D$pH
D$hL
L$pH
L$hH
L$pH
L$xH
A_A^A]A\]
x ATAVAWH
uhH
l$HH
t$PH
A_A^A\
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcA
HcP
HcP
HcH
HcH
tfH
HcH
HcH
HcA
uiH
L$ SVWH
L$XL+
\$ UVWAVAWH
D$ fD
OxH
\$ UVWH
D$HE3
WATAUAVAWH
tdA
tUA
D$pH
ChH
CxH
uSH
sHI
A_A^A]A\_
HcC
D$pH
D$PH
t$pH
t$pH
D$HL
D$HH
D$HH
D$HL
D$HL
uHH
uHH
uHH
uRH
D$xL
uRH
D$xH
t$XH
UVWATAUAVAWH
fD9K
F0D8#ubD8c
`A_A^A]A\_^]
WATAUAVAWH
uBE
t#E9V0t
E9V0u
$tkD
l$HH
t$PD
A_A^A]A\_
VWAVH
UATAUAVAWH
fD;h
fD9t
D$LH
L$DH
D$PH
L$HH
D$T9p
fD90t,
D$@fD
D$DH
A_A^A]A\]
@USVWATAUAVAWH
uPH
ueL
uPE
L$PE
A_A^A]A\_^[]
l$ VWATAVAWH
kHI
A_A^A\_^
UWATAVAWH
D!t$$H
T$$D!t$ H
HcD$$H
Lct$ I
A_A^A\_]
uHH
t$PH
WATAUAVAWH
RxH
fE9,Pu
L9o@t
H9wH
wHL
L$XE3
WHM
t;E8(t6H
L$XM
AxH;
tGM
tBE8(t=H
L$XM
tEM
t@fE9(t:H
fE9,hu
t$hH
A_A^A]A\_
VWAVH
vPH
l$PD
UVWATAUAVAWH
tJI
A_A^A]A\_^]
tVH
OpH
x AVH
tEH
tDH
WAVAWH
l$HH
t$PH
h UAVAWH
L$DH
D$PH
D$PH;
L$PD9
T$PL;
D$DH
uHH
uHH
{ ATAVAWH
fD9&u#L
t$PH
A_A^A\
l$ VWAVH
l$hH
UVWH
WAVAWH
rMfD9?w
C9fD9?u-
u3fD
l$HH
t$PH
@SUVWATAUAVAWH
D$PD
tRH
D$HH
tNH
L$PH3
hA_A^A]A\_^][
\$ VWATAVAWH
L$HH3
PA_A^A\_^
@USVWATAUAVAWH
uiD
tED
MpD
xA_A^A]A\_^[]
UVWATAUAVAWH
vqH
uWA
tNH
C D8U
tAA
A_A^A]A\_^]
UVWATAUAVAWH
ETf
MXf
SHUTDOWN_REASON_UNKNOWN
SHUTDOWN_REASON_ERROR
SHUTDOWN_REASON_AUTOSTOP
SHUTDOWN_REASON_NOTIFICATION:STOP
SHUTDOWN_REASON_NOTIFICATION:SHUTDOWN
SHUTDOWN_REASON_NOTIFICATION:PRESHUTDOWN
SHUTDOWN_REASON_NOTIFICATION:UNKNOWN
Invalid Shutdown Reason
IdleMinutes
SOFTWARE\Microsoft\TrustedInstaller
Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ReservesRebootPending
Ending TrustedInstaller finalization.
Starting TrustedInstaller initialization.
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\TiRunning
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress
TrustedInstaller
EpL
D$PH
D$XH
(D$PH
D$xH
D$xH
tLD
EpH
E@D+EhH
EpH
D+EhH
UhD
uKI;
sFI
A_A^A]A\_^]
AFH
QXH
QhH
QpH
tWH
tGH
t}SVWH
UVWAVAWH
SHH
SHH
@SUVWAVH
OHE
uHH
\$ UVWAVAWH
uDH
t$ WH
t$XH
VWAVH
urH
VWAVH
urH
[ UVWAVAWH
t$PH
uOH
pA_A^_^]
uvH
uOH
WAVAWH
L$pD
D$hI
D$pD
l$XH
\$ UVWAVAWH
upE
ugD8=
uOH
thL
uTE
MpH3
@SVWH
tKH
toH
SXH
CPH
|$ UATAUAVAWH
A_A^A]A\]
VWAVH
urH
t$ WH
tiH
t$XH
p WATAVH
upH
uSH
d$HH
T$HH
t$PH
tfH
tAH
x AVH
PDH
UVWATAUAVAWH
d$HE
D$8~6D8d$H
D8d$H
D8d$Ht"H
D8d$Ht
D9d$4t
A_A^A]A\_^]
h UAVAWH
tNL
SWH
x UATAUAVAWH
uTH
A_A^A]A\]
UVWAVAWH
D$HH
tVI
t$PH
yTH
H!_(H!_0H!_8H!_@3
t$ WAVAWH
l$PH
t$XH
UVWAVAWH
D$HH
tVI
t$PH
yTH
H!\$8H!\$@D
VWATAVAWH
A_A^A\_^
OHH
D$HH
L$HH3
UVWH
trH
tNH
D$hM
xKH
L$ SUVWH
L$ SVWH
K SUVWH
xiHc
@veH
tKH
UWATAVAWH
T$TH
IpI
H!D$8L
xwH
tfH
A_A^A\_]
x UATAUAVAWH
uDH
uZH
l$PE
l$PE
l$PD
f93tyH
f94Au
t$XL
H9D$x
H9D$x
t$dL
L$dD
t$pE
uCH
tpH
D$hD
tGH
tyH
uaH
ygH
A_A^A]A\]
tKH
D$HA
L$ USVWATAUAVAWH
L95Ri
wWu
tBL
t$PL
t$HD
t$PL
t$HD
A_A^A]A\_^[]
K SUVWH
t$PH
t$PH
thH
UVWATAUAVAWH
tyH
PA_A^A]A\_^]
UVWAVAWH
uPM
PA_A^_^]
UWATH
t$xH
l$ VWAVH
taH
fD9tE
l$xH
UWAVH
D$XM
H!\$PH
D$PH
tnH
L$PA
L$PH
L$XH3
@USWATAUAVAWH
pA_A^A]A\_[]
xZI
@SVWH
Ht8H
l$XH
rBL
WATAUAVAWH
@swH;
tIH;
A_A^A]A\_H
tOH
9CPt4H
CPE3
HcP
HcP
HcH
HcH
WATAUAVAWH
F Hk
toHkN XH
LkF XH
XLk
F(Ik
L(PH
A_A^A]A\_
t$ WH
tFH
(H9+u0H
t$HH
t$ WATAUAVAWH
l$PI
tFH
T$PH
fD9,ku
fG9,|u
sPH
t$hH
A_A^A]A\_
t$ WATAUAVAWH
L$PH
tHH
T$PH
fA9LE
sSH
t$hH
A_A^A]A\_
L$ SWH
T$HH
T$Hf9:u
T$HL
D$PH
VATAUAVAWH
fE9e
tIH
fD9$hu
L$pA
D$`fB
0A_A^A]A\^
x AVH
fD94Gu
x ATAVAWH
fD9 t
t$PH
A_A^A\
f94Au
uFH
t$PH
l$ VWAVH
zuGH
l$hH
QeH
H!\$PD
H!\$HD
H!\$8H!\$0H!\$(H!\$ H
VWATAVAWH
d$PH
L$PH
tGH
fD9dE
A_A^A\_^
@USVWAVH
s.fD;1u}
tZfD;1uT
t4fD;1u.
t$ WH
D$XH
uFH
L$PH
L$XH3
t$ UWAUAVAWH
uGH
vfH
uDH
vhI
sHI
A_A^A]_]
f94Gu
s WAUAVH
D$DH
uLH
L$HH3
t$ UWAVH
uTH
VWAVH
H!l$(E3
uzH
xCH
uaH
l$pH
tuH
HcH
HcH
tfH
HcH
HcH
HcA
HcA
UVWH
yuH
D$XL
D$XH9D$`
VWAVH
t$HL
D$pH
SqH
D$hH
L$pH3
tYI
AfA;
fB9,Cu
tkf9
tfL
tGD
l$HH
t$PH
UATAUAVAWH
uwH
fD9,Au
A_A^A]A\]
@USVWATAUAVAWH
uwM
tZL
tJH
A_A^A]A\_^[]
@USVWATAUAVAWH
EPL
D$PH
L$HH
MPH3
A_A^A]A\_^[]
t$ UWAVH
@SVWH
L$HH3
x ATAVAWH
t$pH
H9\$hu
uVH
uAH
T$hH
t$PH
A_A^A\
WAVAWH
t$pH
t$xL
t$ UWAVH
>@uiH
L$XH
D$HH
D$PH
L$pH
L$PL
D$XH
L$HH
p WH
D$PH
L$HL
L$xD
D$PH
L$HH
JeH
D$PA
UATAUAVAWH
D$dE
tIM
D4XI
D$PA
D$HH
D$LH
D$PH
D$TH
D$pH
A_A^A]A\]
t$HH
t!eH
uxHc
uTL+
@SVWH
L$hH
L$pH
utH
M H1E
H3E H3E
L$PH
D$PH
u0HcH<H
8csm
ntelA
GenuD
ineI
uPH
sUA
McP
HcH
HcH
Failed to register class factory No:%d
Failed to resume suspended COM objects.
Failed to disconnect context from COM.
Running in standalone mode, skipping any startup processing.
Waiting for reboot to continue processing
Failed during startup processing, continuing with Trusted Installer execution
Startup processing complete, Trusted Installer will now wait around for a little while to see if any clients show up.
Failed to create startup processing thread.
Startup: A system shutdown was initiated while waiting for startup to complete
Startup: Attempting to terminate the startup thread.
Startup: Failed attempting to terminate the startup thread.
Startup: Failed preparing for shutdown processing
Startup: Startup processing completed.  Allowing shutdown to proceed
Startup: Failed to wait on startup thread.  Wait result: 0x%x
Startup: Failed to indicate reboot in progress to CBS.
Startup processing thread terminated normally
Failed to wait on startup thread.  Wait result: 0x%x
Failed getting startup thread result
Starting the TrustedInstaller main loop.
Custom TI Idle time set to %u minutes
Running under Setup's First boot, setting idle time to %u minutes
Custom TI Idle time set to %u seconds, due to: reboot-in-progress
Failed to set Trusted Installer status to SERVICE_RUNNING.
TrustedInstaller service starts successfully.
Failed to create context switcher.
Failed to initialize all COM objects, ignore the failure since service is shutting down or about to enter shutdown processing.
Failed to initialize all COM objects.
Failed to check whether reserves are waiting for a reboot
Failed re-registering for Winlogon notifications after resume.
Failed a critical portion of startup processing.
TI: started and RebootPending volatile key indicates that a reboot is pending, skip startup processing.
TI: Startup Processing completes, release startup processing lock.
Running under Setup's OOBE boot, will wait for Winlogon CreateSession notifications before auto-stopping
Trusted Installer signaled for shutdown, going to exit.
A system shutdown was initiated while idle scavenging was running
Failed preparing for shutdown processing
Failed to stop scavenging
Failed to wait for shutdown event... shutting down.
TI: Rejected an auto-stop attempt, because WinLogon CreateSession notification has not been called (will not report again) 
Trusted Installer cannot stop right now, because the system shutdown it was waiting for has started.
Failed registering for a pre-shutdown restart, Trusted Installer will stay running.
Trusted Installer successfully registered to be restarted for pre-shutdown.
Trusted Installer is shutting down because: %S
Failed to execute shutdown processing.
Failed to disconnect all objects.
Ending the TrustedInstaller main loop.
How could our shutdown event not be initialized by the time that a control message shows up?
onecore\base\cbs\ti\ti.cpp
How is the service handle null during stop/shutdown control?
How is the service handle null during interrogation?
TI: the computer is suspending
Trusted Installer sent unknown service control command.
Starting TrustedInstaller finalization.
Ending TrustedInstaller finalization.
Starting TrustedInstaller initialization.
Failed to create shutdown event.
Failed to create servicing event.
Failed to initialize CBS Core.
Failed to initialize SxS.
Failed to initialize WRP integrity check and repair.
Unable to initialize GenValObj.dll
Failed initializing for winlogon notifications
Ending TrustedInstaller initialization.
TI: --- Initializing Trusted Installer ---
Failed to create TiRunning key.
TI: It looks like TI crashed or was interrupted last time it was started
TI: a client is starting TI after TI terminated due to a preshutdown notification
Failed to query if reboot is pending, continuing anyway.
TrustedInstaller terminated with pending operations.
Failed to register Trusted Installer with service control manager, Trusted Installer service will shutdown now.
Failed checking for AnticipateShutdownProcessingNeeded
Failed to initialize COM.
Failed to initialize COM security.
Failed to enable termination on heap corruption, continuing anyway.
Failed to access COM GlobalOptions object
Failed to set COM GlobalOptions, exception handling still in place.
Failed to set COM unmarshaling policy to strong
vTiStartupProcessingLock
TiLock
TIScavenge
-standalone
-Embedding
SYSTEM\CurrentControlSet\Control\MiniNt
Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\AnticipateShutdownProcessingNeeded
TiAttemptedInitialization
SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager
Start
SYSTEM\CurrentControlSet\Services\TrustedInstaller
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version
AutoRepairNeeded
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing
ScavengeTask
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\
ApplicabilityState
CurrentState
CCbsPublicSessionClassFactory
GenValObj.exe
h%s TEMP="%s\" -Embedding
%s TEMP="%s" -Embedding
Local\{2ADA1CEA-5D4C-406E-A72D-173CD7698257}
SysNtfy.dll
%hs(%u)\%hs!%p: 
%hs!%p: 
(caller: %p) 
%hs(%d) tid(%x) %08X %ws
Msg:[%ws] 
CallContext:[%hs] 
[%hs(%hs)]
kernelbase.dll
ntdll.dll
WinlogonNotifyLock
system32\
winlogon.exe
System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller
CreateSession
Events
Startup: received notification that startup processing completed and a restart has been initiated.
Startup: received notification that startup processing completed, allowing user to logon
SafeToEndReserveScenario
SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator
.Local\SM0:%d:%d:%hs
neutral
CbsLogMonitorProvider
NumCBSPersistLogs
\CbsPersist_*.*
%ws\%ws
wdscore.dll
COMPONENT_BASED_SERVICING_LOGFILE
EnableLog
LogPath
SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration
Logs\CBS
\CBS.log
CBSLogMaxInMB
CBSLogHardMaxInMB
System\CurrentControlSet\Services\TrustedInstaller
%ws\CbsPersist_%02d%02d%02d%02d%02d%02d.log
.CBSLogCompress
COMPONENT_BASED_SERVICING_LOGLEVEL
Sev
Msg
Err
Uid
MobileStore
WorkingDirectory
SYSTEM\Setup
SystemSetupInProgress
OOBEInProgress
TrustedInstaller FOD
TrustedInstaller FOD Enumerate
LCU Reservicing
TrustedInstaller ACR
TrustedInstaller MCR
wusa
AutomaticUpdates
CbsCheckLock
Software\Microsoft\Tracing
MaintenanceFlags
SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide
PublisherPolicyChangeTime
LastScavengeCookie
none
S%s%c%s%c%s%c%s%c%s
assemblyIdentity
name
language
epublicKeyToken
processorArchitecture
version
MUI
VS_VERSION_INFO
StringFileInfo
CompanyName
Microsoft Corporation
FileDescription
Windows Modules Installer
FileVersion
10.0.19041.4355 (WinBuild.160101.0800)
InternalName
TrustedInstaller.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
TrustedInstaller.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
VarFileInfo
Translation
MUI
MUI
en-US
SubC
"Microsoft Window
SubC
Failed deleting TiRunning key
Starting the Trusted Installer in standalone mode based on command-line switch: %S
Failed to execute service.
Failed attempting to get the system boot time
Failed converting filetime to local file time
Failed converting local filetime to system time
TI: Last boot time: %04d-%02d-%02d %02d:%02d:%02d.%03d
Failed to open RebootPending key.
Failed to create RebootPending key.
Reboot mark set
Failed to delete RebootPending key.
Reboot mark cleared
Failed to create AnticipateShutdownProcessingNeeded key.
TI: Anticipating that shutdown processing will be required.
Failed to read AnticipateShutdownProcessingNeeded key.
Failed to change the Trusted Installer to an auto start service, hopefully the auto-start registry key is already set.
Failed to open TrustedInstaller service to change config, hopefully the auto-start registry key is already set.
Failed to to mark the pending reboot.
Failed to set Trusted Installer status to accept preshutdown controls.
Failed to check if reserves are waiting on a reboot
Failed to change Trusted Installer to demand-start service.
Not setting Trusted Installer to demand start because reserves are waiting on a reboot
Failed to to unmark the pending reboot.
Clearing reboot required, because all pended operations were cancelled
TI: CBS has signaled that a reboot is required.
TI: CBS has queried the current reboot required state: %d
Setup in progress, aborting startup processing checks.
Failed to open TrustedInstaller service to query and change config.
Failed to get current configuration of TrustedInstaller service.
Startup: Failed registering for Winlogon notifications, continuing without it.
Startup: Failed to get worker process
Startup: Failed initializing for create session notification.
Startup: Servicing Stack update applied, finishing startup process.
Startup: Servicing Stack update applied with other pending operations, restarting TiWorker for further processing.
Keeping Trusted Installer as auto-start
Failed during startup processing and a reboot is still required.
Aborted processing startup actions, requiring shutdown processing and will try startup processing again in the future.
Startup processing completed.
Failed to initiate restart... we'll just have to hope for the best.
Registering for pre-shutdown notification to complete the pended operation
No startup processing executed. Reserves are waiting for a reboot.
No startup processing required, TrustedInstaller service was not set as autostart
NonStart: Windows is in Safe Mode.
Unable to detect if system is in Safe Mode
Failed to change Trusted Installer to demand-start service via the registry.
Failed to change the Trusted Installer to a demand start service via SvcChangeConfig.
Failed to get worker process.
Starting shutdown processing in TrustedInstaller service.
Failed to call Shutdown Processing on Worker process.
Fallback servicing stack directory path being retrieved...
Failed to get servicing path.
szFileName
onecore\base\cbs\ti\ticore.cpp
Failed to allocate string for hardcoded servicing stack directory.
Fallback servicing stack directory path: %S
Get fallback servicing stack directory failed.
Failed to open servicing stack version registry key.
Failed to enumerate all servicing stack versions.
Failed to expand path to servicing stack directory: %S
FileVersionFromString is only supposed to fail with E_INVALIDARG.
Failed to find servicing stack from store.
pCbsWorker
A restart has been initiated
Failed to indicate reboot in progress to CBS.
allocating Cbs class factory
ppFactory
Failed to allocate class factory for service:%d
Failed to create CBS worker, crashed?
Failed to create CBS worker - waiting for a second and trying again
Failed to initialize TiWorker.
Failed to allocate worker stream
Failed to marshall worker process
Failed to unmarshall worker stream
TI: It looks like TiWorker crashed, attempting to restart it. TI probably cannot autostop or be stopped due to an incorrect instance count.
Terminate call on TiWorker returns non-S_OK.
pbRebootRequired
Invalid pointer ppvObject
<Failed to resume asynchronous session
Exec: Failed to create the thread to resume multi-phase installation.
Exec: Failed to create the thread to terminate TiWorker..
Failed to convert updateID
WU creates the package, AppID:%S, UpdateID:%S, revision: %u
Failed to create package.
Failed to get worker session.
Session Initialized without client ID.
Failed to allocate client string
Failed to allocate boot drive.
Failed to allocate ImageWindir
Failed to allocate ExtStageDir
Failed to allocate new Ti Package
Failed to initialize TiPackage.
Failed to create internal CBS package
Failed to CreatePackage using worker session
Failed to OpenPackage using worker session
Failed to query worker package.
Failed to EnumeratePackages using worker session
Failed to CreateCbsIdentity using worker session
Failed to GetStatus using worker session
Failed to get task allocator for Trusted Installer.
Failed to GetSessionId using worker session
Failed to GetProperty using worker session
Failed to AddPhaseBreak using worker session
Cannot finalize a session that has been finalized.
Failed to FinalizeEx using worker session
Failed to resume the session after servicing stack update.
Failed to get worker session from the stream after stack update.
Failed to create worker session.
Client has not called session Initialized yet.
Failed to set enhanced options.
Failed to call add source
Failed to initialize CBS session.
Failed to allocate new Ti UIHandler
Failed to get session ID.
Failed to open existing session: %S
Not able to set CbsHandler
Failed to marshal the new TiSession.
Failed to reset position in the worker session stream.
Failed to resume the session after SSU
Failed to Add Source using worker session
Failed to allocate string
Failed to allocate resource
Failed to get directory
Failed to query servicing processor
Failed to call Process on TiWorker session
A servicing stack update was installed on its own via IServicingProcessor::Process.  We need another download/install to get the LCU
Failed to call QuerySessionStatus on TiWorker session
Failed to call WritePackageFileList on TiWorker session
Failed to allocate new CbsIdleHander
Cannot run idle scavenging/repair, a reboot is pending
Failed to read AutoRepairNeeded.
Maint: Nothing to do, so skipping
Warning: Failed to execute idle scavenge/repair start. Error code: 0X%x
Signaling IdleScavenge and/or repair complete.
Warning: Unable to mark idle scavenging/repair complete. Error code: 0X%x
Idle scavenging/repair requested
Failed to query TaskHandler services for scavenge/repair status callback
Idle scavenge/repair is waiting for StartupProcessing to complete
Idle scavenge/repair timed out waiting for Startup Processing to complete
Idle scavenging/repair begins
Failed to create idle scavenging/repair thread.
Signaling IdleScavenge and/or repair complete, without starting maintenance
Warning: Unable to mark idle scavenging/repair complete.
Idle scavenging/repair stop signaled.
Warning: Failed to execute idle scavenge/repair stop. Error code: 0X%x
Client failed admin check.
Failed to create worker SxS store
Failed to create worker SxS store.
Index out of bound.
Array size too big
m_ulSize == 0
On allocating cbs array
Index of element to insert exceeds the number of elements.
Failed inserting element io cbs array
Failed adding element to cbs array
onecore\base\cbs\util\inc\CbsArray.h
tO|F
pOwnerSession
onecore\base\cbs\ti\cbstipackage.cpp
The package is neither a regular package nor a normal package.
pWorkerPackage == NULL
Failed to duplicate the applicability stream.
szApplicabilityStream == NULL
Failed to duplicate application ID.
NULL Identity
Failed to process package string
Failed to allocate identity.
Failed to load from string: %S
Failed to call EvaluateApplicability on internal CBS package.
Read out cached applicability from TiLight for package: %S, ApplicableState: %d, CurrentState:%d
Failed to create internal CBS Package
TiPackage: Failed to query client UI handler.
dwHostedService == TI_CLASS_CBS_SESSION || dwHostedService == TI_CLASS_SXS_STORE
onecore\base\cbs\ti\cbspublicclassfactory.cpp
Invalid ppvObject passed in.
Aggregation not supported.
Unsupported interface.
Failed to create session.
Unexpected COM service request
ppSession
Failed to allocate new CBS Session.
Failed to add new TiSession to collection
Failed to get client token.
Failed to start TiWorker.
Failed to create a worker session
Failed to get class factory for service: %u
dwHostedService > TI_CLASS_CBS_SESSION && dwHostedService <= TI_CLASS_VALIDATION
TI: Startup still running, not able to create object:%u
Caller that requires service %d does not have admin privilege.
Failed to get genvalobj interface
Failed to ping TiWorker, looks like TiWorker crashed, re-launch it
Failed to create IAdminGenuineCheck
Failed to create IAdminGenuineCheck from cached classfactory
Failed to query IAdminGenuineCheck
Failed to get size of system dir
Failed to allocate memory for system dir path
Failed to get system directory
Failed to backslash-terminate system directory: %S
Failed to alloc program string
Failed to get temp path
Failed to alloc command line string
Failed to create genvalobj activation event
Could not create protected process GenValObj.exe
GenValObj.exe died unexpectedly. exitcode: %d
GenValObj.exe died unexpectedly
failed to get genvalobj classfactory
failed to signal genvalobj registration event
onecore\base\cbs\ti\cbssysntfywrapper.cpp
Could not load SysNtfy DLL from path: %S.  Continuing without Winlogon notification.
Failed to load SysNtfy DLL: %S
SysNotifyStartServer
Failed to get proc address for SysNotifyStartServer.
SysNotifyStopServer
Failed to get proc address for SysNotifyStopServer.
hSysNtfyDll
Failed registering for Winlogon notifications
Failed unregistering for Winlogon notifications
Exception
ReturnHr
LogHr
FailFast
RaiseFailFastException
wil
RtlNtStatusToDosErrorNoTeb
RtlDllShutdownInProgress
RtlDisownModuleHeapAllocation
RtlQueryFeatureConfiguration
RtlRegisterFeatureConfigurationChangeNotification
RtlUnregisterFeatureConfigurationChangeNotification
RtlNotifyFeatureUsage
NtQueryWnfStateData
NtUpdateWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
onecore\internal\sdk\inc\wil\opensource\wil\resource.h
WilError_03
onecore\internal\sdk\inc\wil\Staging.h
WilStaging_02
oldState != TI_STATE_INACTIVE
onecore\base\cbs\ti\tiwinlogonnotification.cpp
oldState != TI_STATE_STOPPED
Failed to create startup processing event.
Failed getting system32 directory
Failed appending winlogon.exe to path
Winlogon: Running under Setup, skipping registration for Notifications
Winlogon: Running on Mobile, skipping registration for Notifications
Winlogon: No winlogon available, skipping registration for Notifications
Winlogon: Registering for CreateSession notifications
Failed to open online TrustedInstaller's winlogon notification key.
Failed to register for Winlogon Notifications: Events: CreateSession
Winlogon: Loading SysNotify DLL
Failed to load SysNtfy DLL, continuing without Winlogon Notification support.
Winlogon: Starting notify server 
TrustedInstaller
Failed registering Winlogon notification
Failed registration for Winlogon notification, continuing without it.
Winlogon: Simplifying Winlogon CreateSession notifications
Winlogon: Deregistering for CreateSession notifications
Failed static unregister for winlogon notification
Winlogon: Stopping notify server
Failed unregistering Winlogon notification
Winlogon: Unloading SysNotify DLL
Winlogon: TiCoreOnCreateSession has been called
Startup: Failed waiting for startup processing to complete, allowing user to logon while processing continues.
Startup: TiCoreOnCreateSession called with no context.
Startup: Failed getting localized progress string
Startup: received notification that startup processing completed and a restart has been initiated.
Startup: received notification that startup processing completed, allowing user to logon
Failed to initiate restart.
Failed to get worker process
Failed to initialize update reserves
Failed to set SafeToEndReserveScenario.
Aut
Aul
Aud
AuT
AuL
AuD
%hs [HRESULT = 0x%08x - %hs]
Failed to allocate delete search string for backup logs directory path: %ws
Failed to allocate delete search string for backup logs path.
Failed to allocate path for oldest backup log.
Failed to delete oldest backup log.
Wds logger is already initialized
Failed to get windows directory for WDSCORE DLL path.
Failed to allocate relative path to WDSCORE DLL.
Failed to ensure Wds path ended with a backslash: %ws
Failed to concat full path to WDSCORE DLL
Failed to allocate Wds path from windows directory: %ws
Failed to allocate full path to WDSCORE DLL.
Could not load WDSCORE DLL from path: %ws.  Continuing without text file logging.
Failed to load WDSCORE DLL: %ws
WdsSetupLogInit
Failed to get proc address for WdsSetupLogInit.
WdsGenericSetupLogInit
Failed to get proc address for WdsGenericSetupLogInit.
WdsGetSetupLog
Failed to get proc address for WdsGetSetupLog.
WdsSetupLogDestroy
Failed to get proc address for WdsSetupLogDestroy.
WdsSetupLogMessageA
Failed to get proc address for WdsSetupLogMessageA.
ConstructPartialMsgVA
Failed to get proc address for ConstructPartialMsgVA.
CurrentIP
Failed to get proc address for CurrentIP.
Failed to allocate log file name: %ws
Failed to get log path from: %ws
Failed to allocate log directory from windows directory: %ws
Failed to ensure log directory ended with a backslash: %ws
Failed to concat CBS name on to log directory: %ws
Failed to store log path argument: %ws
Failed to add log name log directory: %ws
Failed to ensure that logging directory exists: %ws
Failed to move log: %ws to backup log: %ws, continuing anyway.
Could not allocate a backup name for the log file: %ws, we'll just continue with our current log file.
WDS logging is not enabled in the registry, continuing without logging.
Failed to initialize logging with dll: %ws, log directory: %ws
Failed to initialize logging with DLL: %ws, log file: %ws
Failed to acquire log manager
Failed to configure logging settings
WdsLogRegisterProvider
Failed to add CbsLogMonitor provider
Failed to register CbsLogMonitor provider
Failed to delete extra backup log files.
WdsLogUnRegisterProvider
onecore\base\cbs\util\cbsutil.cpp
Failed to locate Mobile Store key, so we're not running on a mobile device.
CBSWdsLog
%hs [HRESULT = 0x%08x]
CBSWdsLogLight
Assertion failed in %hs(%i)
Assertion failed in %hs(%i)
ASSERT: %hs
Assert failed to build string.
ASSERT: Assert failed to build string.
onecore\base\cbs\util\cbsreg.cpp
Failed to open the registry root: n/a, key: %S.
Failed to get process token to set privileges into.
psczValue
Failed to determine size of string.
Failed to convert cchValue to DWORD
Failed initial query of value to get type, size, and value of registry value: %S
Failed to query value to get type and size of registry root: n/a, value: %S
Registry value is not a string type.
Failed to allocate string to read registry value: %S
Failed to query registry value: %S
pdwValue
Registry value is not a DWORD type.
pdwlValue
Registry value is not a QWORD type.
szValue
Failed to create key: %S
Failed to open key: %S
Failed to convert size_t to DWORD
Failed to set registry value: %S
szValueName
Failed to RegEnumValue.
Registry value for %S is not a string type.
Failed to allocate string to enum registry value: %S
Failed to enum value after it already existed once.
Invalid array index
Lock: New lock added: %S, level: %u, total lock:%Iu
Lock: Lock removed: %ws, level: %u, total lock:%Iu
Lock: Error, not able to find the lock information
Lock: Error found, inverse lock order, current lock held: %S, level: %d, lock attempted: %S,  level: %d. This will lead to a potential deadlock
Lock: Warning: Current thread already holds lock: '%S', and is trying to acquire lock: '%S'
Lock: Error found, LeaveCriticalSection is called by the wrong thread. Owner thread: %d, current thread: %d
Index of element to remove exceeds number of the element.
pscz
onecore\base\cbs\util\cbsstr.cpp
string size too big
Failed to get size of existing string
szAppend
Failed to get size of destination string.
Failed to concat string.
szAppend2
Failed to concat second string.
szFormat
*szFormat
ppscz
failed to allocate string to format: %S
Failed to allocate string to format: %S
Failed to format string.
Failed to allocate new string
Failed to copy source string to destination
psz
Failed to copy new string.
pMalloc
Failed to get length of passed in string
Failed to allocate new string.
pcch
psczPath
Failed to concat backslash onto string.
szPath
onecore\base\cbs\util\cbssvc.cpp
phService
Failed to connect to service control manager.
Failed to open service: %S
hService
ppConfig
Failed to allocate space for sevice config.
Failed to query service configuration.
Failed change service configuration.
onecore\base\cbs\util\cbsfile.cpp
psczDirectory
Invalid path.
Failed to allocate directory string
Failed to get attributes for file: %S
szRelativePath
Failed to allocate space for expanded path.
Failed to expand environment variables in string: %S
Failed to re-allocate more space for expanded path.
Failed to allocate buffer for expanded path.
Failed to allocate space for full path.
Failed to get full path for string: %S
Failed to re-allocate more space for full path.
Failed to allocate buffer for full path.
Cannot find parent for path: %S.
Failed to copy parent of path: %S
Failed to create path: %S
Failed to create file: %S
Failed creating file %S
Failed NTFS compressing file %S
Failed to allocate memory for modified privilege tokens.
Failed to adjust token privileges after resizing to accommodate modified privileges.
Failed to adjust token privileges.
Failed to allocate memory for privilege tokens.
Failed to set privileges.
Failed to revert to self.  Killing process.
Failed to get user token to test for admin credentials.
Failed administrator access check.
Failed to determine credentials for access check.
Failed to enable shutdown privileges.
Failed restart attempt.
Failed to disable shutdown privilege
phToken
onecore\base\cbs\util\cbscom.cpp
Failed to check RPC context.
Failed to impersonate client.
Failed to get user security token
Failed to reset the stream.
Failed to release marshalled data.
!m_pStream
Failed to create stream.
Failed to marshall update session.
Failed to seek stream.
Failed getting maintenance flags.
Failed getting PublisherPolicyChangeTime.
Failed getting LastScavengeCookie.
Failed updating maintenance flags.
Internal Error: Invalid Internal State
onecore\base\cbs\util\cbsstatemap.cpp
onecore\base\cbs\util\cbspath.cpp
Failed to allocate windir string
Failed to allocate sub folder path
onecore\base\cbs\util\cbsacl.cpp
paa
0 == paa->fDenyAccess
0 == paa->dwAccessMask
Failed to get SID for account: %S
Failed to allocate SID to check membership.
Failed to check membership
onecore\base\cbs\identityutil\cbsidentityutil.cpp
Invalid character in name: %S
Empty name is not valid.
szOut
Failed to copy language string to normalized string.
Invalid public key token or insufficient buffer for public key token: %S
Invalid public key token provided: %S
Failed to copy processor to normalized buffer.
Failed to copy version to buffer.
Invalid empty field found in version: %S
Numeric overflow in version: %S
Invalid non-digit found in version: %S
Number of fields found did not match expected number of fields in version: %S
Failed to coerce string.
Failed to shred identity.
Invalid delimiter: %wc.
Too many delimiters in string id.
Identity missing language.
Identity contains invalid public key token: %*.*ws.
szName
psczStringId
Failed to validate component name: %S
Failed to normalize public key token: %S
Failed to normalize language: %S
Failed to normalize processor: %S
Failed to normalize version: %S
Failed to allocate string for string id.
Failed to allocate empty string for blank string identity.
szStart
szTag
szBuffer
No tag found
No quote found
Value too long
Failed to copy string
szPackageManifest
psczIdentity
Failed to find assemblyidentity.
Failed to copy name
Failed to copy language
Failed to copy publicKeyToken
Failed to copy processorArchitecture
Failed to copy version
Invalid argument ppvObject
Invalid argument: pbIsNull
Invalid argument: pIdentity
Invalid argument: pbIsEqual
Unknown interface to compare against.
Failed to test InternalIsEqualbyAttribute
onecore\base\cbs\identityutil\cbsidentity.cpp
pIsEqual
szPublicKeyToken
szProcessor
szLanguage
szVersion
Invalid argument: szName
Failed to allocate identity name
Invalid argument: szIdentity
Failed to copy identity: %S
Failed to shred identity: %S
Failed to load identity from attributes.
Invalid argument: pszIdentity
Failed to allocate string for name
Failed to public allocate string for string id: %S
tO|F
onecore\base\lstring\lunicode_string.cpp
RtlInitLUnicodeStringFromNullTerminatedString
cch <= (((((SIZE_T)~((SIZE_T)0)) - (((SIZE_T)~((SIZE_T)0)) % sizeof(WCHAR))) / sizeof(WCHAR)) - 1)
*** Assertion failed: %s
***   Source File: %s, line %ld
<unknown>
ETW0
Assert
assertVersion
rva
timestamp
imageSize
imageName
count
totalHits
ModuleCollection
GlobalCollection
TelemetryAssert
sPO
TelemetryAssertDiagTrack
RSDS
wDj
TrustedInstaller.pdb
GCTL
.text
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.rdata$brc
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gehcont
.gfids
.rdata
.rdata$zETW0
.rdata$zETW1
.rdata$zETW2
.rdata$zETW9
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.idata$2
.idata$3
.idata$4
.idata$6
.data$brc
.data
.bss
.pdata
.rsrc$01
.rsrc$02
wDj
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll
_o___p___argc
_o___p___wargv
_o___p__commode
_o___stdio_common_vsprintf
_o___stdio_common_vswprintf
_o__callnewh
_o__cexit
_o__configthreadlocale
_o__configure_wide_argv
_o__crt_atexit
_o__errno
_o__exit
_o__get_initial_wide_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__wcsicmp
_o_exit
_o_free
_o_malloc
_o_terminate
_o_toupper
_o_wcstoul
__C_specific_handler
memset
api-ms-win-crt-private-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
Sleep
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoDisconnectContext
CreateThread
GetLastError
WaitForMultipleObjectsEx
SetServiceStatus
TerminateThread
WaitForSingleObject
GetExitCodeThread
CloseHandle
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
CoCreateInstance
RegOpenKeyExW
CoSuspendClassObjects
SetEvent
CreateEventW
RegCreateKeyExW
RegCloseKey
RegisterServiceCtrlHandlerExW
ExitProcess
CoInitializeEx
CoInitializeSecurity
HeapSetInformation
CoUninitialize
RegDeleteKeyW
lstrcmpW
StartServiceCtrlDispatcherW
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseServiceHandle
GetTickCount64
GetOsSafeBootMode
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
CoTaskMemFree
StringFromCLSID
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
GetCurrentProcessId
GetSystemDirectoryW
GetTempPathW
CreateProcessW
WaitForMultipleObjects
GetExitCodeProcess
CoGetClassObject
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleExW
GetModuleFileNameA
DebugBreak
GetModuleHandleW
IsDebuggerPresent
OutputDebugStringW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetLastError
ReleaseSemaphore
ReleaseMutex
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
WaitForSingleObjectEx
InitializeCriticalSectionEx
OpenSemaphoreW
CreateThreadpoolTimer
CreateMutexExW
CreateSemaphoreExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-service-core-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-registry-l2-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-libraryloader-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll
I_ScRegisterPreshutdownRestart
api-ms-win-service-private-l1-1-1.dll
NtQuerySystemInformation
NtClose
ntdll.dll
wcsstr
wcsrchr
wcschr
CompareFileTime
FindFirstFileW
FindNextFileW
OutputDebugStringA
GetEnvironmentVariableW
FindClose
DeleteFileW
GetWindowsDirectoryW
MoveFileExW
GetSystemTime
RegQueryValueExW
RegEnumValueW
OpenProcessToken
RegSetValueExW
EventUnregister
EventRegister
OpenServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenSCManagerW
CreateDirectoryW
GetFullPathNameW
ExpandEnvironmentStringsW
DeviceIoControl
CreateFileW
GetFileAttributesW
GetFileAttributesExW
GetCurrentThread
GetSystemWindowsDirectoryW
InitiateSystemShutdownExW
RevertToSelf
AdjustTokenPrivileges
OpenThreadToken
CoImpersonateClient
CoMarshalInterface
CoGetCallContext
CoReleaseMarshalData
CreateStreamOnHGlobal
ImpersonateSelf
CoUnmarshalInterface
CoRevertToSelf
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LocalAlloc
api-ms-win-core-processenvironment-l1-1-0.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-security-base-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-io-l1-1-0.dll
api-ms-win-core-shutdown-l1-1-0.dll
RtlRaiseStatus
DbgPrintEx
EventSetInformation
EventProviderEnabled
EventWriteTransfer
GetTickCount
wcscmp
memcmp
memcpy
memmove
Nfm
eylA
oOb<4qAi
f@YU
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 20110
Washington1
Redmond1
Microsoft Corporation1
Microsoft Windows0
Z2}kNS
nEiW
I<g{eA
$Microsoft Ireland Operations Limited1
P0N0L
Fhttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl%200a
U0S0Q
Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0
Lzq%
SU"S
5JFG
OH9H
Gvxw
EFMo~Qz
7aFP
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 20110
O0M0K
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
N0L0J
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
TlP0X
R!s4Z
sNA
Kbz
qKW
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 2011
,kFW/z2QL08dc4lbBgMXl6UAw/mHIbdiu5Vot3s3DWPY=0Z
http://www.microsoft.com/windows0
lxkYt 
?Rjx
DjA
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A935-03E0-D9471%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A935-03E0-D9471%0#
Microsoft Time-Stamp Service0
pUE
K~Jc
b:ef
\iBN
X0V0T
Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l
Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
6Yr?d
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
lNu
SqZ
s=CN
U0S0Q
3http://www.microsoft.com/pkiops/Docs/Repository.htm0
O0M0K
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
N0L0J
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
>NGdx
fg:SM
xSu$W
as.,k{n?,
J>f;O
Lro
ctH,
WITd
!TkjE
als
Af=i
tt[j
pcSM
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A935-03E0-D9471%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
R7GN
zFM8r
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
~e>qJ
aqQ
wRR
pfa
wlv