Generated by JEB on 2019/08/01

PE: C:\Windows\System32\lstelemetry.dll Base=0x180000000 SHA-256=BFBCBCFD3DC2B3777C6530F277EB33745EF5966CD329C462AABF466FDD65F55C
PDB: lstelemetry.pdb GUID={35B4DF0B-1B15-28B6-0E42D427D9B64358} Age=1

226 located named symbols:
0x1800052A0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180003FDC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800052A8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800039AC: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180005238: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x180006870: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x1800080A0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180008048: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005188: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800043BE: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180004408: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x18000439A: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1800044C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005518: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180005308: "__cdecl _xp_a" __xp_a
0x180005240: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180004414: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x180003F3C: "__cdecl RTC_Initialize" _RTC_Initialize
0x180004408: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x1800064A0: "__cdecl _rtc_taa" __rtc_taa
0x180005278: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180005158: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180005288: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x18000435C: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x180004408: "__cdecl _vcrt_initialize" __vcrt_initialize
0x180005248: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x1800010A0: "__cdecl TlgWrite" _TlgWrite
0x1800052D0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180006490: "__cdecl _rtc_iaa" __rtc_iaa
0x180004408: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x1800052D8: "__cdecl _xc_a" __xc_a
0x180005370: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180005230: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180008060: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180005468: "ThresholdTestLSID" ??_C@_1CE@KMKJBEIH@?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAT?$AAe?$AAs?$AAt?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180008058: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x1800044A5: memcpy
0x1800052B0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x1800033C0: "unsigned long __cdecl LogTSLSTelemetryEvent(enum TelemetryLogLevel,enum TelemetryEventType,struct _RdsTelemetryCommonData * __ptr64,struct _RDLSTelemetryData * __ptr64)" ?LogTSLSTelemetryEvent@@YAKW4TelemetryLogLevel@@W4TelemetryEventType@@PEAU_RdsTelemetryCommonData@@PEAU_RDLSTelemetryData@@@Z
0x180005290: "__cdecl _imp_memset" __imp_memset
0x180004408: "__cdecl _acrt_initialize" __acrt_initialize
0x180004376: "__cdecl initterm" _initterm
0x1800043E2: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180006898: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180008B78: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005300: "__cdecl _xi_z" __xi_z
0x180005138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800043FA: "__cdecl _C_specific_handler" __C_specific_handler
0x1800015B0: "unsigned long __cdecl UpdateRDLSTelemetryCommonData(unsigned short * __ptr64,unsigned short * __ptr64)" ?UpdateRDLSTelemetryCommonData@@YAKPEAG0@Z
0x180004408: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180003D94: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x1800051D0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180004444: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800043A6: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180003CC8: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x1800043B2: "__cdecl cexit" _cexit
0x180003B98: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180004408: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180005298: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x1800043CA: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x180001280: "unsigned long __cdecl GetLicensingTelemetryCommonData(struct _RdsTelemetryCommonData * __ptr64,int)" ?GetLicensingTelemetryCommonData@@YAKPEAU_RdsTelemetryCommonData@@H@Z
0x1800039C0: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180004408: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180003B44: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x1800043D6: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x1800051E0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004408: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x180005140: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800012D0: "unsigned long __cdecl InitRDLSTelemetryCommonData(unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int)" ?InitRDLSTelemetryCommonData@@YAKKPEAG000H@Z
0x180005258: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180005318: "__cdecl _xt_a" __xt_a
0x1800080E4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x180005198: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180005258: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18000114C: DllMain
0x180005440: "ThresholdTestLSPID" ??_C@_1CG@KFAEIAOM@?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAT?$AAe?$AAs?$AAt?$AAL?$AAS?$AAP?$AAI?$AAD?$AA?$AA@
0x180004408: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180001140: "__cdecl TlgDefineProvider_annotation__Tlgg_hRDSTSLSTelemetryProviderProv" _TlgDefineProvider_annotation__Tlgg_hRDSTSLSTelemetryProviderProv
0x180003F80: "__cdecl RTC_Terminate" _RTC_Terminate
0x180005260: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800051E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005178: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180006884: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180005130: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800052C0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180004420: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800043D6: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x180008054: "__cdecl _isa_enabled" __isa_enabled
0x180005190: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800043E2: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x1800080A8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180004408: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x1800051A8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x1800052F0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x1800068AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180003A74: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180003880: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005280: "__cdecl _imp__initterm" __imp__initterm
0x180006924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180005418: "ThresholdTestSKU" ??_C@_1CC@PDCOKDAK@?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAT?$AAe?$AAs?$AAt?$AAS?$AAK?$AAU?$AA?$AA@
0x180006960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800043BE: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x1800039D4: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180003490: "unsigned long __cdecl LogTSLSTelemetryRDSEvent(enum TelemetryLogLevel,enum TelemetryEventType,struct _RDLSTelemetryData * __ptr64)" ?LogTSLSTelemetryRDSEvent@@YAKW4TelemetryLogLevel@@W4TelemetryEventType@@PEAU_RDLSTelemetryData@@@Z
0x180003BE8: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x1800052C8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003DD8: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x180005180: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005118: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180005218: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800052E8: "__cdecl _xi_a" __xi_a
0x1800051B0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180005120: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180003AC0: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x1800039F8: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x1800043B2: "__cdecl o__cexit" _o__cexit
0x1800043EE: "__cdecl seh_filter_dll" _seh_filter_dll
0x180005238: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180005378: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800068E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000694C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180005370: "__cdecl pRawDllMain" _pRawDllMain
0x180004190: "__cdecl _isa_available_init" __isa_available_init
0x180004350: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x180006498: "__cdecl _rtc_izz" __rtc_izz
0x1800038D0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800053A0: "Software\Microsoft\TermServLicen" ??_C@_1EK@CFANJDAM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAS?$AAe?$AAr?$AAv?$AAL?$AAi?$AAc?$AAe?$AAn@
0x1800052E0: "__cdecl _xc_z" __xc_z
0x1800068C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800051A0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004408: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180001240: "unsigned long __cdecl UnregisterLicensingTelemetry(void)" ?UnregisterLicensingTelemetry@@YAKXZ
0x180006166: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x180005208: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180005380: "MSFT_TEST_CERT" ??_C@_1BO@FHGDEKLN@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAT?$AAE?$AAS?$AAT?$AA_?$AAC?$AAE?$AAR?$AAT?$AA?$AA@
0x180005148: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180003A90: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x1800043EE: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x1800043A6: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800011A0: "unsigned long __cdecl RegisterAndEnableLicensingTelemetry(void)" ?RegisterAndEnableLicensingTelemetry@@YAKXZ
0x180005200: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180005310: "__cdecl _xp_z" __xp_z
0x180006910: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800051C0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800064A8: "__cdecl _rtc_tzz" __rtc_tzz
0x180005328: "__cdecl _guard_fids_table" __guard_fids_table
0x180005010: "__cdecl load_config_used" _load_config_used
0x1800052F8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180003DC8: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180005170: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800051F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800051B8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000685C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180004408: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x180005240: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x180005160: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1800051F8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180008070: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180003FD0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004408: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180004414: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x1800068FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180004382: "__cdecl initterm_e" _initterm_e
0x180003D68: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180003B7C: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x180005250: "__cdecl _imp_memcpy" __imp_memcpy
0x180004408: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180005268: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180008040: "__cdecl _security_cookie" __security_cookie
0x1800051C8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180003DE8: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180006848: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180005150: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180006938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180005168: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x180005270: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x180005220: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180008050: "__cdecl _isa_available" __isa_available
0x180005128: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800034F4: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x1800051D8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180005248: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180008664: "__cdecl _favor" __favor
0x1800053F0: "ThresholdTestOSPID" ??_C@_1CG@NCJKFCBM@?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAT?$AAe?$AAs?$AAt?$AAO?$AAS?$AAP?$AAI?$AAD?$AA?$AA@
0x1800038F8: "__cdecl _security_init_cookie" __security_init_cookie
0x180005228: "__cdecl _imp__cexit" __imp__cexit
0x180005320: "__cdecl _xt_z" __xt_z
0x1800052B8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180003A38: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x180003ADC: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180004040: "__cdecl _report_gsfailure" __report_gsfailure
0x1800034E4: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180008090: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180005230: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180005210: "__cdecl _imp_GetVersion" __imp_GetVersion
0x1800068D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180005220: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x180005228: "__cdecl _imp__o__cexit" __imp__o__cexit
0x1800043CA: "__cdecl execute_onexit_table" _execute_onexit_table
0x18000438E: memset
0x180006974: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180008078: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]