Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cryptbase.dll Base=0x180000000 SHA-256=F53C04CF0EE4943D4EA82D94604CB46816BEB53545D3357C718D2A46516B1BDB
PDB: cryptbase.pdb GUID={E9998E59-8056-E0AE-AE5EA6DDC91A20EF} Age=1

140 located named symbols:
0x180007590: ErrorSessionKey
0x180003210: EncryptPartialBlock
0x180007588: g_hKsecDD
0x180002230: "__cdecl CryptBaseInitialize" _CryptBaseInitialize
0x180002530: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180005D3C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180007008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002090: desparityonkey
0x180004160: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180004220: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800029B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180004B30: Sel
0x180001140: des
0x180005360: LocalSessionKey
0x180005408: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180005D50: "__cdecl _IMPORT_DESCRIPTOR_bcryptPrimitives" __IMPORT_DESCRIPTOR_bcryptPrimitives
0x180004240: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180009010: "__cdecl _imp_I_RpcBindingIsServerLocal" __imp_I_RpcBindingIsServerLocal
0x1800027EB: "__cdecl _imp_load_I_RpcMapWin32Status" __imp_load_I_RpcMapWin32Status
0x180007580: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x1800053A8: "\IPC$" ??_C@_1M@CMEOLBBK@?$AA?2?$AAI?$AAP?$AAC?$AA$?$AA?$AA@
0x180004228: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x180004294: "__cdecl _guard_iat_table" __guard_iat_table
0x180004330: Spbox
0x1800041F8: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x180005DA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180002888: "__cdecl _imp_load_RpcBindingToStringBindingW" __imp_load_RpcBindingToStringBindingW
0x180004140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180004218: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x180004210: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x18000292C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800053B8: "\Device\Srv2" ??_C@_1BK@EJAEEIGG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAS?$AAr?$AAv?$AA2?$AA?$AA@
0x1800041C0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180005404: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180003590: ValidateDataKey
0x1800041A0: "__cdecl _imp_ProcessPrng" __imp_ProcessPrng
0x180005A14: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180004148: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004150: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001FB0: InitKeyLM
0x180009048: RPCRT4_NULL_THUNK_DATA_DLA
0x180005B88: RPCRT4_NULL_THUNK_DATA_DLB
0x180005AA0: RPCRT4_NULL_THUNK_DATA_DLN
0x1800042C0: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x1800041D8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002908: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800041A8: bcryptPrimitives_NULL_THUNK_DATA
0x1800041E0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180005DC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180004158: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005404: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180005370: "\Device\LanmanRedirector\" ??_C@_1DE@DIPAKJOG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?2?$AA?$AA@
0x180004200: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180005A34: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800053D8: "\Device\LanmanServer" ??_C@_1CK@OIDEAOK@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x180009038: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x180003030: DecryptDataLength
0x180005DB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180004238: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004168: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180004198: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004188: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004128: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800041B8: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x180005D78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001970: deskey
0x180002580: "__cdecl _security_check_cookie" __security_check_cookie
0x180004170: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800028F4: "__cdecl _imp_load_NDRCContextBinding" __imp_load_NDRCContextBinding
0x180004190: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004118: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180002FF0: AdvanceDataKey
0x180009030: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x180005350: "KGS!@#$%" ??_C@_08IFGHPOIE@KGS?$CB?$EA?$CD$?$CF?$AA@
0x1800028E2: "__cdecl _imp_load_RpcRevertToSelf" __imp_load_RpcRevertToSelf
0x180004180: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004248: "__cdecl _guard_fids_table" __guard_fids_table
0x1800042A0: "\Device\KsecDD" ??_C@_1BO@BAEMGIAB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAK?$AAs?$AAe?$AAc?$AAD?$AAD?$AA?$AA@
0x180004010: "__cdecl load_config_used" _load_config_used
0x180004130: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180004120: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180002200: CryptBaseInitialize
0x180009018: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x180003104: DecryptPartialBlock
0x180004208: "__cdecl _imp_NtClose" __imp_NtClose
0x1800041D0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002270: SystemFunction040
0x180002310: SystemFunction041
0x180005340: double_shift
0x1800041B0: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x180009028: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1800041C8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180005408: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180002990: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800030A0: DecryptFullBlock
0x180009000: "__cdecl _imp_I_RpcMapWin32Status" __imp_I_RpcMapWin32Status
0x18000289A: "__cdecl _imp_load_I_RpcBindingIsClientLocal" __imp_load_I_RpcBindingIsClientLocal
0x1800031AC: EncryptDataLength
0x180001010: SystemFunction036
0x180002CE0: SystemFunction034
0x180004230: ntdll_NULL_THUNK_DATA
0x180007000: "__cdecl _security_cookie" __security_cookie
0x1800041E8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x180005D64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800027F7: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x180001070: DES_ECB_LM
0x180002C90: SystemFunction028
0x180002450: SystemFunction029
0x180009020: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x180002876: "__cdecl _imp_load_I_RpcBindingIsServerLocal" __imp_load_I_RpcBindingIsServerLocal
0x180009008: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180004138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800025C4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800028AC: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x1800026A0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800041F0: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x1800028BE: "__cdecl _imp_load_RpcStringBindingParseW" __imp_load_RpcStringBindingParseW
0x180005330: DESParityTable
0x1800032D0: SystemFunction004
0x180003450: SystemFunction005
0x180001040: SystemFunction002
0x1800024E0: SystemFunction003
0x180003680: SystemFunction001
0x1800028D0: "__cdecl _imp_load_RpcImpersonateClient" __imp_load_RpcImpersonateClient
0x180005D8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180009040: "__cdecl _imp_NDRCContextBinding" __imp_NDRCContextBinding
0x1800025A4: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x1800023A0: EncryptMemoryInitialize
0x180005DDC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]