Generated by JEB on 2019/08/01

PE: C:\Windows\System32\nsi.dll Base=0x180000000 SHA-256=28176CB9C7E4436BDD29C5CAACB82EF981AEA4DC5780B46A272FD12A96720B97
PDB: nsi.pdb GUID={B964E076-702A-359E-D8C4E857C5B8DAF4} Age=1

100 located named symbols:
0x180003130: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180004590: g_NsiHeap
0x180003B78: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180001B60: NsiGetAllParameters
0x180004008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003168: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x180004010: g_NsiAsyncDeviceHandle
0x1800022C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003128: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180002BF0: NsiSetAllPersistentParametersWithMask
0x180002690: NsiGetParameterEx
0x180003BA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800031F0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004018: g_NsiDeviceHandle
0x180003160: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180001380: NsiIoctl
0x1800021BC: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x1800031D8: "__cdecl _imp_memset" __imp_memset
0x180003198: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x18000227E: RtlUnhandledExceptionFilter
0x18000225A: RtlCaptureContext
0x180002610: NsiEnumerateObjectsAllParametersEx
0x180003148: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180003140: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180002990: NsiEnumerateObjectsAllPersistentParametersWithMask
0x1800011F0: NsiSetAllParameters
0x1800031D0: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x180003188: "__cdecl _imp_CreateEventA" __imp_CreateEventA
0x180003120: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002AF0: NsiGetAllPersistentParametersWithMask
0x1800011B0: NsiSetParameterEx
0x1800031C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003180: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180003118: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800012B0: NsiDeregisterChangeNotificationEx
0x1800031A8: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180003BF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001540: NsiAllocateAndGetTable
0x180001010: NsiRequestChangeNotification
0x180003150: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800031E8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002266: RtlLookupFunctionEntry
0x18000224E: NtTerminateProcess
0x1800031A0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180002A80: NsiFreePersistentDataWithMaskTable
0x180003BC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180001FD0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800026D0: NsiSetObjectSecurity
0x180003170: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180003158: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180003290: "\\.\Nsi" ??_C@_1BA@NEGGIMKP@?$AA?2?$AA?2?$AA?4?$AA?2?$AAN?$AAs?$AAi?$AA?$AA@
0x1800012F0: NsiRegisterChangeNotificationEx
0x1800010F0: NsiSetParameter
0x1800031F8: "__cdecl _guard_fids_table" __guard_fids_table
0x180003010: "__cdecl load_config_used" _load_config_used
0x180002950: NsiDeregisterChangeNotification
0x180003BDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180002710: NsiAllocateAndGetPersistentDataWithMaskTable
0x180003178: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800031C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180001270: NsiSetAllParametersEx
0x1800031B8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001D30: NsiEnumerateObjectsAllParameters
0x1800022A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003BB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800031B0: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x1800031E0: ntdll_NULL_THUNK_DATA
0x180003C04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180004000: "__cdecl _security_cookie" __security_cookie
0x180003138: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003B8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002650: NsiGetObjectSecurity
0x180001F40: DllInitialize
0x180002170: "__cdecl _security_init_cookie" __security_init_cookie
0x180002272: RtlVirtualUnwind
0x180001980: NsiGetParameter
0x180002020: "__cdecl _report_gsfailure" __report_gsfailure
0x180001EB0: NsiFreeTable
0x180002B90: NsiRegisterChangeNotification
0x180001050: NsiRequestChangeNotificationEx
0x180001340: NsiGetAllParametersEx
0x180003190: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180001FF4: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x1800010B0: NsiCancelChangeNotification
0x18000228A: memset
0x180003C18: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]