Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ksuser.dll Base=0x180000000 SHA-256=83E260597B6C3313815967A708CED0EA880E922E5B5845D85E52DB5849A63C8D
PDB: ksuser.pdb GUID={BEFACCD4-9195-0E8E-DE2C5AA23A1DB26A} Age=1

136 located named symbols:
0x18000217C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001F80: "__cdecl FindPESection" _FindPESection
0x180003210: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180003AD0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003A1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001A5C: "__cdecl CRT_INIT" _CRT_INIT
0x180003190: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800023F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001550: KsCreatePin2
0x18000187C: CreateObjectHandle
0x1800032B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001F64: "__cdecl XcptFilter" _XcptFilter
0x1800032B8: "__cdecl _xc_a" __xc_a
0x180003238: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x180003170: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180003180: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1800023CD: memcpy
0x180003280: "__cdecl _imp_memset" __imp_memset
0x18000214C: "__cdecl initterm" _initterm
0x180003AA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800055C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800031E8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800032D8: "__cdecl _xi_z" __xi_z
0x180003138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002158: "__cdecl _C_specific_handler" __C_specific_handler
0x180003160: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180003150: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000236C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800039F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180001F70: "__cdecl amsg_exit" _amsg_exit
0x180001008: KsiCreateObjectType
0x180003140: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180003188: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001270: KsCreateClock
0x1800055B0: "__cdecl _native_startup_lock" __native_startup_lock
0x1800015A0: KsCreateTopologyNode2
0x180002140: DllMain
0x180001300: KsCreateTopologyNode
0x180003260: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800031D0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003130: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180005000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002348: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003228: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180003198: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180002030: "__cdecl ValidateImageBase" _ValidateImageBase
0x180003178: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x180003168: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180001CA0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180003248: "__cdecl _imp__initterm" __imp__initterm
0x180001510: KsCreateClock2
0x1800055A0: "__cdecl _onexitend" __onexitend
0x180003290: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800032A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800031A0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003220: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180003298: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180003208: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800032C8: "__cdecl _xi_a" __xi_a
0x180003200: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003230: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180003A08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180003460: "_FSENVOPT" ??_C@_1BE@BMPFOECN@?$AA_?$AAF?$AAS?$AAE?$AAN?$AAV?$AAO?$AAP?$AAT?$AA?$AA@
0x1800055C8: "__cdecl pRawDllMain" _pRawDllMain
0x1800039E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180001F40: "__cdecl _security_check_cookie" __security_check_cookie
0x1800032C0: "__cdecl _xc_z" __xc_z
0x1800031B0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003118: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800031F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003158: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800031E0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180003ABC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800031C0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800032E0: "__cdecl _guard_fids_table" __guard_fids_table
0x180003288: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x180003488: IID_IDeviceBroker
0x180003A44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800012B0: KsCreatePin
0x180003A30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180003270: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800031D8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800031B8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800031C8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002170: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003A6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180003278: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800032A0: ntdll_NULL_THUNK_DATA
0x180003268: "__cdecl _imp_memcpy" __imp_memcpy
0x180003218: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180005008: "__cdecl _security_cookie" __security_cookie
0x180003148: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003A58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180003120: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1800055A8: "__cdecl _onexitbegin" __onexitbegin
0x180001230: KsCreateAllocator
0x180003128: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180002064: "__cdecl _security_init_cookie" __security_init_cookie
0x1800039CC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003240: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180003250: "__cdecl _imp_malloc" __imp_malloc
0x180001330: KsiCreateObjectType2
0x1800021C0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800055B8: "__cdecl _native_startup_state" __native_startup_state
0x180003478: CLSID_DeviceBroker
0x180003A94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003258: "__cdecl _imp_free" __imp_free
0x1800014D0: KsCreateAllocator2
0x180001FD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800031F0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800031A8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180003A80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800023D9: memset
0x180003AE4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]