Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winsrv.dll Base=0x180000000 SHA-256=601B32297E6159FC82A93633A93CE240A1D20A06CB22AF8E332E3DEC6513B65F
PDB: winsrv.pdb GUID={C5368B4C-69C0-CE0B-3A26A39808E2D653} Age=1

170 located named symbols:
0x180007030: ext-ms-win-rtcore-ntuser-mininit-l1-1-0_NULL_THUNK_DATA_DLA
0x180003170: MinUserServerApiDispatchTable
0x180001050: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180003D1C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001820: DefaultProcessShutdown
0x180003330: "__cdecl _imp_NtOpenProcess" __imp_NtOpenProcess
0x180003358: "__cdecl _imp_NtReadVirtualMemory" __imp_NtReadVirtualMemory
0x180003218: CSRSRV_NULL_THUNK_DATA
0x1800032B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003210: "__cdecl _imp_CsrUnlockProcess" __imp_CsrUnlockProcess
0x180001317: "__cdecl _tailMerge_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll" __tailMerge_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll
0x1800015D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003470: "ext-ms-win-rtcore-ntuser-mininit" ??_C@_1FA@NFGLAPOI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAr?$AAt?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAn?$AAi?$AAn?$AAi?$AAt@
0x180003628: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800055B8: ghIdlePowerThread
0x1800033A8: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x180003338: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x1800033B0: "__cdecl _imp_RtlCreateTagHeap" __imp_RtlCreateTagHeap
0x1800031D0: "__cdecl _imp_CsrDereferenceProcess" __imp_CsrDereferenceProcess
0x1800033D8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800013B0: "__cdecl _imp_load_UserCreateSystemThreads" __imp_load_UserCreateSystemThreads
0x18000147C: "__cdecl _imp_load_UserServerDllInitializationExt" __imp_load_UserServerDllInitializationExt
0x180003B54: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll
0x180003B74: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_winsrv_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_winsrv_l1_1_0_dll
0x180003290: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180001B40: IsConhost
0x18000342C: "__cdecl _guard_iat_table" __guard_iat_table
0x180003C88: ext-ms-win-rtcore-ntuser-mininit-l1-1-0_NULL_THUNK_DATA_DLB
0x1800013C2: "__cdecl _imp_load_RegisterSessionWorkerThread" __imp_load_RegisterSessionWorkerThread
0x180003138: UserServerApiDispatchTable
0x1800033C0: "__cdecl _imp_memset" __imp_memset
0x1800033A0: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x1800035FC: "%S " ??_C@_03NNECAHIM@?$CFS?6?$AA@
0x180003DA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180003258: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180003318: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x1800031A8: "__cdecl _imp_BaseGetProcessCrtlRoutine" __imp_BaseGetProcessCrtlRoutine
0x180003280: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180003270: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180001D70: UserClientShutdownProcesses
0x180003348: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x180001540: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003368: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x180003320: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180003CB0: ext-ms-win-core-winsrv-l1-1-0_NULL_THUNK_DATA_DLB
0x1800031D8: "__cdecl _imp_CsrGetProcessLuid" __imp_CsrGetProcessLuid
0x1800013D4: IsUserMinInitializePresent
0x180003588: "TMP" ??_C@_19BCJMGOHA@?$AAT?$AAM?$AAP?$AA?$AA?$AA?$AA@
0x180003620: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800031C8: "__cdecl _imp_CsrCallServerFromServer" __imp_CsrCallServerFromServer
0x1800031F0: "__cdecl _imp_CsrShutdownProcesses" __imp_CsrShutdownProcesses
0x1800055A0: ghSessionInitializedEvent
0x180003260: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180005590: "__cdecl _hmod__ext_ms_win_core_winsrv_l1_1_0_dll" __hmod__ext_ms_win_core_winsrv_l1_1_0_dll
0x1800032B0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800031B8: "__cdecl _imp_CsrLockProcessByClientId" __imp_CsrLockProcessByClientId
0x1800031B0: BASESRV_NULL_THUNK_DATA
0x180003440: "__cdecl _sz_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll" __sz_ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll
0x1800032D0: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180003398: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180007028: "__cdecl _imp_UserMinInitialize" __imp_UserMinInitialize
0x1800032A0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180001E10: UserHardError
0x18000151C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800031E0: "__cdecl _imp_CsrLockedReferenceProcess" __imp_CsrLockedReferenceProcess
0x180001D10: UserClientShutdown
0x1800034C0: "ext-ms-win-core-winsrv-l1-1-0" ??_C@_1DM@KCMIDMMJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAr?$AAv?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x180003E0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800032C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003208: "__cdecl _imp_CsrImpersonateClient" __imp_CsrImpersonateClient
0x180003620: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180003380: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180003D6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800035C8: "Failed to open process: %x " ??_C@_0BM@NHMIFCFG@Failed?5to?5open?5process?3?5?$CFx?6?$AA@
0x180003288: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180003B94: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180007008: ext-ms-win-core-winsrv-l1-1-0_NULL_THUNK_DATA_DLA
0x180003DF8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180001CC0: SrvExitWindowsEx
0x180003600: "%Id (0x%Ix) " ??_C@_0N@FOFJHEDB@?$CFId?5?$CI0x?$CFIx?$CJ?6?$AA@
0x180001090: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x1800033D0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800032A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800055B0: ghSessionThread
0x180003308: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003BC0: ext-ms-win-core-winsrv-l1-1-0_NULL_THUNK_DATA_DLN
0x180003300: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003240: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180003D80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800020B0: UserSessionThread
0x180003500: "__cdecl _sz_ext_ms_win_core_winsrv_l1_1_0_dll" __sz_ext_ms_win_core_winsrv_l1_1_0_dll
0x180003DD0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1800031F8: "__cdecl _imp_CsrExecServerThread" __imp_CsrExecServerThread
0x1800010C0: "__cdecl _security_check_cookie" __security_check_cookie
0x180007000: "__cdecl _imp_UserServerDllInitializationExt" __imp_UserServerDllInitializationExt
0x1800032E0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003598: "MINSRV!" ??_C@_1BA@IFLEIGBH@?$AAM?$AAI?$AAN?$AAS?$AAR?$AAV?$AA?$CB?$AA?$AA@
0x1800032F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003610: MinUserServerApiServerValidTable
0x180003230: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180001428: IsUserServerDllInitializationExtPresent
0x180003278: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180003618: UserServerApiServerValidTable
0x180001488: "__cdecl _tailMerge_ext_ms_win_core_winsrv_l1_1_0_dll" __tailMerge_ext_ms_win_core_winsrv_l1_1_0_dll
0x1800032D8: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x180007020: "__cdecl _imp_CompositorNotifyExitWindows" __imp_CompositorNotifyExitWindows
0x180003DE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x1800032F0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800033E0: "__cdecl _guard_fids_table" __guard_fids_table
0x180003030: "__cdecl load_config_used" _load_config_used
0x180003248: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180003238: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180003370: "__cdecl _imp_RtlCreateUserThread" __imp_RtlCreateUserThread
0x180003328: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x180003298: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180003360: "__cdecl _imp_NtClose" __imp_NtClose
0x1800055A8: ghSessionThreadShutdownEvent
0x180001396: "__cdecl _imp_load_CompositorNotifyExitWindows" __imp_load_CompositorNotifyExitWindows
0x180003390: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800032E8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180001510: ApiSetQueryApiSetPresence
0x180002030: UserIdlePowerThread
0x180003388: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003628: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800015B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180007018: "__cdecl _imp_RegisterSessionWorkerThread" __imp_RegisterSessionWorkerThread
0x180003DBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000130B: "__cdecl _imp_load_UserMinInitialize" __imp_load_UserMinInitialize
0x1800031C0: "__cdecl _imp_CsrRevertToSelf" __imp_CsrRevertToSelf
0x1800033C8: ntdll_NULL_THUNK_DATA
0x180003D30: "__cdecl _IMPORT_DESCRIPTOR_CSRSRV" __IMPORT_DESCRIPTOR_CSRSRV
0x1800035A8: " HardError Status = 0x%x " ??_C@_0BM@OBMJHGMI@?6?6HardError?6?6Status?5?$DN?50x?$CFx?6?$AA@
0x180003D44: "__cdecl _IMPORT_DESCRIPTOR_BASESRV" __IMPORT_DESCRIPTOR_BASESRV
0x180003220: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180005000: "__cdecl _security_cookie" __security_cookie
0x180001BD0: SrvEndTask
0x1800032C8: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x1800031E8: "__cdecl _imp_CsrAddStaticServerThread" __imp_CsrAddStaticServerThread
0x180003268: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003D58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180003310: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x1800021C0: "__cdecl ExitWindowsEx" _ExitWindowsEx
0x180001BB0: SrvCreateSystemThreads
0x180001970: InternalCreateCallbackThread
0x180003250: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800010E4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800035E8: "Parameter[%d] = " ??_C@_0BB@NFECANFD@Parameter?$FL?$CFd?$FN?5?$DN?5?$AA@
0x180005598: MinSrvDllTag
0x1800011C0: "__cdecl _report_gsfailure" __report_gsfailure
0x180003228: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x180007010: "__cdecl _imp_UserCreateSystemThreads" __imp_UserCreateSystemThreads
0x180003BE8: ext-ms-win-rtcore-ntuser-mininit-l1-1-0_NULL_THUNK_DATA_DLN
0x1800033B8: "__cdecl _imp_NtWaitForMultipleObjects" __imp_NtWaitForMultipleObjects
0x180003200: "__cdecl _imp_CsrQueryApiPort" __imp_CsrQueryApiPort
0x180003350: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x180005580: "__cdecl _hmod__ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll" __hmod__ext_ms_win_rtcore_ntuser_mininit_l1_1_0_dll
0x180003340: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x180003D94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180001010: UserServerDllInitialization
0x180003378: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x1800015A1: memset
0x180003E20: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]