Generated by JEB on 2019/08/01

PE: C:\Windows\System32\avrt.dll Base=0x180000000 SHA-256=46C2A7D1A3C838F77CCC5B5A52546FB4B80F7925DAACC63081B296712C6F3293
PDB: avrt.pdb GUID={36C716A7-0C89-5C37-969ADB05FADE0C14} Age=1

129 located named symbols:
0x180003188: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180003C68: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003430: "SystemResponsiveness" ??_C@_1CK@NLOJAMBF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAe?$AAs?$AAp?$AAo?$AAn?$AAs?$AAi?$AAv?$AAe?$AAn?$AAe?$AAs?$AAs?$AA?$AA@
0x180005018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001FF0: AvSetMmMaxThreadCharacteristicsW
0x180001F60: AvRtCreateThreadOrderingGroupExA
0x180001ED0: WppControlCallback
0x180001BB0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800031C0: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x180001470: AiTaskIndexConnect
0x180003C7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180003228: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x1800055C8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuzexlivUigUzeigUlyquivUznwGEUzrOlyq@avrt" __@@_PchSym_@00@KxulyqvxgPillgKxuzexlivUigUzeigUlyquivUznwGEUzrOlyq@avrt
0x1800010D0: WppInitUm
0x180003240: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001F60: AvRtJoinThreadOrderingGroup
0x180003200: "__cdecl _imp_LdrDisableThreadCalloutsForDll" __imp_LdrDisableThreadCalloutsForDll
0x180005590: AipIsMmcssEnabled
0x180001A2C: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x180001F60: AvRtWaitOnThreadOrderingGroup
0x180003190: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180001AEE: RtlUnhandledExceptionFilter
0x180001ACA: RtlCaptureContext
0x180005598: WPP_REGISTRATION_GUIDS
0x1800031B0: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180003160: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180001B20: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001F60: AvRtLeaveThreadOrderingGroup
0x1800055A0: WPP_MAIN_CB
0x1800013E0: AvQuerySystemResponsiveness
0x1800031F8: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x180003168: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180003180: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180001010: AvrtDllInitialize
0x180003148: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180003178: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180001460: AvCreateTaskIndex
0x1800031F0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003138: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180001AFC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800031D0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180003010: AiThreadConnectFileName
0x180001FC0: AvSetMmMaxThreadCharacteristicsA
0x1800021DC: AiStartMmcssService
0x180001F60: AvRtCreateThreadOrderingGroupExW
0x180002018: WPP_SF_
0x180003380: WPP_ThisDir_CTLGUID_MmcssTrace
0x180003140: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180003CA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180003390: WPP_c8ad101e7d13340595a7080f3479fcfb_Traceguids
0x180003348: "\Device\MMCSS\TaskIndex" ??_C@_1DA@PAGDFNKF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAM?$AAC?$AAS?$AAS?$AA?2?$AAT?$AAa?$AAs?$AAk?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x180003208: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x180003238: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180001AD6: RtlLookupFunctionEntry
0x180001ABE: NtTerminateProcess
0x180003000: AiTaskIndexConnectFileName
0x180003218: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180001630: AiCreateMmcssTaskIndexOrThreadClient
0x180003318: "\Device\MMCSS\MmThread" ??_C@_1CO@KECPIKDA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAM?$AAC?$AAS?$AAS?$AA?2?$AAM?$AAm?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
0x1800023DC: WPP_SF_dd
0x180002080: AiCheckServiceEnabled
0x1800031A8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180005000: WPP_GLOBAL_Control
0x18000233C: WPP_SF_D
0x180002040: WPP_SF_d
0x180001840: "__cdecl _security_check_cookie" __security_check_cookie
0x180001160: WppCleanupUm
0x180003CB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x180001430: AvSetMmThreadCharacteristicsA
0x180001F80: AvQueryTaskIndexValue
0x180001510: AvSetMmThreadCharacteristicsW
0x1800011C0: AvTaskIndexYield
0x180001770: AvSetMmThreadPriority
0x1800031C8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1800012C0: AvRevertMmThreadCharacteristics
0x180003248: "__cdecl _guard_fids_table" __guard_fids_table
0x180003030: "__cdecl load_config_used" _load_config_used
0x180003220: "__cdecl _imp_NtClose" __imp_NtClose
0x180001240: AvSetMultimediaMode
0x1800031E8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003210: "__cdecl _imp_RtlMultiByteToUnicodeN" __imp_RtlMultiByteToUnicodeN
0x180001050: "__cdecl AvrtDllInitialize" _AvrtDllInitialize
0x1800031E0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001710: RtlStringCbCopyW
0x180001B90: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800031A0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1800031D8: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x180003230: ntdll_NULL_THUNK_DATA
0x180001390: AvThreadOpenTaskIndex
0x180003170: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1800032B0: WPP_1f79d35a6e073f9dc35effd3bf8b3927_Traceguids
0x180003198: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180005010: "__cdecl _security_cookie" __security_cookie
0x180003158: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800033A0: "Software\Microsoft\Windows NT\Cu" ??_C@_1IM@PKMLLGBH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180003C90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180001540: AiThreadConnect
0x180001F60: AvRtDeleteThreadOrderingGroup
0x1800012F0: AvTaskIndexYieldCancel
0x180003150: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800019E0: "__cdecl _security_init_cookie" __security_init_cookie
0x180001AE2: RtlVirtualUnwind
0x180001890: "__cdecl _report_gsfailure" __report_gsfailure
0x180001330: AiConvertAnsiToUnicode
0x1800031B8: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1800017C0: AiIoctl
0x180001F60: AvRtCreateThreadOrderingGroup
0x180002384: WPP_SF_SD
0x180003460: "MMCSS" ??_C@_1M@LFBCBMIF@?$AAM?$AAM?$AAC?$AAS?$AAS?$AA?$AA@
0x180001864: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180003CCC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]