Generated by JEB on 2019/08/01

PE: C:\Windows\System32\csrss.exe Base=0x140000000 SHA-256=FB40ED0FFA6BC795923A941DAB6B7D6B43583D0F152A6DF4D8953D2C1A0CB417
PDB: csrss.pdb GUID={B15357E3-6F5E-ECAB-BEF200DE7D6D4B11} Age=1

51 located named symbols:
0x140002464: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140003008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140002148: "__cdecl _imp_RtlSetUnhandledExceptionFilter" __imp_RtlSetUnhandledExceptionFilter
0x140002128: CSRSRV_NULL_THUNK_DATA
0x140001720: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140002198: "__cdecl _imp_isspace" __imp_isspace
0x140002168: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1400021B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140001350: main
0x1400021C4: "__cdecl _guard_iat_table" __guard_iat_table
0x14000162C: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x140002120: "__cdecl _imp_CsrServerInitialization" __imp_CsrServerInitialization
0x1400016EE: RtlUnhandledExceptionFilter
0x140002170: "__cdecl _imp_NtTerminateThread" __imp_NtTerminateThread
0x1400016CA: RtlCaptureContext
0x140002188: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x140002140: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x140002178: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140001010: NtProcessStartup
0x1400021A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400016D6: RtlLookupFunctionEntry
0x1400016BE: NtTerminateProcess
0x140002190: "__cdecl _imp_RtlNormalizeProcessParams" __imp_RtlNormalizeProcessParams
0x140001460: "__cdecl _security_check_cookie" __security_check_cookie
0x140002180: "__cdecl _imp_RtlFreeAnsiString" __imp_RtlFreeAnsiString
0x140002118: "__cdecl _imp_CsrUnhandledExceptionFilter" __imp_CsrUnhandledExceptionFilter
0x1400021B8: "__cdecl _guard_fids_table" __guard_fids_table
0x140002010: "__cdecl load_config_used" _load_config_used
0x140002130: "__cdecl _imp_NtSetInformationProcess" __imp_NtSetInformationProcess
0x140002138: "__cdecl _imp_RtlSetHeapInformation" __imp_RtlSetHeapInformation
0x140002150: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140002158: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001700: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140002160: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x1400021A0: ntdll_NULL_THUNK_DATA
0x140002478: "__cdecl _IMPORT_DESCRIPTOR_CSRSRV" __IMPORT_DESCRIPTOR_CSRSRV
0x140003000: "__cdecl _security_cookie" __security_cookie
0x1400015E0: "__cdecl _security_init_cookie" __security_init_cookie
0x1400016E2: RtlVirtualUnwind
0x140001030: NtProcessStartup_AfterSecurityCookieInitialized
0x140001490: "__cdecl _report_gsfailure" __report_gsfailure
0x14000248C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]