Generated by JEB on 2019/08/01
PE: C:\Windows\System32\EsdSip.dll Base=0x180000000 SHA-256=09A7B432CE6E933F2DE122FB500F07A616FB4885482BFA4FE840A1CA782EE0E1
PDB: esdsip.pdb GUID={62D24F38-477F-8847-8762B8A572E5ECB4} Age=1
175 located named symbols:
0x180002700: ParseUncPath
0x1800025F4: BuildPathHr
0x180004588: "\\?\UNC" ??_C@_1BA@BFGBFLGI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x1800032EC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800044B0: "EsdSipDelSignature" ??_C@_1CG@ILNPHFHE@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAD?$AAe?$AAl?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x180003100: "__cdecl FindPESection" _FindPESection
0x180004570: "SHA384" ??_C@_1O@KOBLHLEG@?$AAS?$AAH?$AAA?$AA3?$AA8?$AA4?$AA?$AA@
0x180004C8C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004528: "1.3.6.1.4.1.311.2.1.30" ??_C@_0BH@DIGBLLJB@1?43?46?41?44?41?4311?42?41?430?$AA@
0x180002BDC: "__cdecl CRT_INIT" _CRT_INIT
0x180004218: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800012E0: "int __cdecl EsdSipGetSignature(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?EsdSipGetSignature@@YAHPEAUSIP_SUBJECTINFO_@@PEAKK1PEAE@Z
0x180002260: FileExists
0x180003580: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800041E8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800043A0: "Microsoft Base Cryptographic Pro" ??_C@_1FG@GAFGNOGK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAB?$AAa?$AAs?$AAe?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AA?5?$AAP?$AAr?$AAo@
0x180004438: "EsdSipPutSignature" ??_C@_1CG@GEMGKLKO@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAP?$AAu?$AAt?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x180001450: "int __cdecl EsdSipPutSignature(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,unsigned char * __ptr64)" ?EsdSipPutSignature@@YAHPEAUSIP_SUBJECTINFO_@@KPEAKKPEAE@Z
0x1800042D8: "__cdecl _imp_wcschr" __imp_wcschr
0x1800044D8: "EsdSipIsMyFileType" ??_C@_1CG@DCJOOBGP@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAI?$AAs?$AAM?$AAy?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180004118: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x180004318: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800042E0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1800030E4: "__cdecl XcptFilter" _XcptFilter
0x180004320: "__cdecl _xc_a" __xc_a
0x1800022FC: StringCchCopyW
0x180004138: "__cdecl _imp_CryptHashData" __imp_CryptHashData
0x180004120: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x180003549: memcpy
0x180002650: FormFullPathName
0x1800042C8: "__cdecl _imp_memset" __imp_memset
0x180004168: "__cdecl _imp_CryptFindOIDInfo" __imp_CryptFindOIDInfo
0x1800032BF: "__cdecl initterm" _initterm
0x1800065C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004200: "__cdecl _imp_Sleep" __imp_Sleep
0x180004340: "__cdecl _xi_z" __xi_z
0x180004240: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800042E8: "__cdecl _imp_wcscmp" __imp_wcscmp
0x1800032CB: "__cdecl _C_specific_handler" __C_specific_handler
0x180004260: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180004598: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x1800034DC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001E5C: "public: __cdecl CMyFileInfo::~CMyFileInfo(void) __ptr64" ??1CMyFileInfo@@QEAA@XZ
0x180001C20: "int __cdecl EsdSipVerifyHash(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64)" ?EsdSipVerifyHash@@YAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x180001030: DllCanUnloadNow
0x1800042F8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x1800030F0: "__cdecl amsg_exit" _amsg_exit
0x180001EF8: "public: bool __cdecl CMyFileInfo::Open(struct SIP_SUBJECTINFO_ * __ptr64,bool) __ptr64" ?Open@CMyFileInfo@@QEAA_NPEAUSIP_SUBJECTINFO_@@_N@Z
0x180004170: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x180001710: "int __cdecl EsdSipCreateHash(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64)" ?EsdSipCreateHash@@YAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x180001AF4: "int __cdecl DecodeSIPVersion(struct _CRYPTOAPI_BLOB * __ptr64,unsigned long * __ptr64)" ?DecodeSIPVersion@@YAHPEAU_CRYPTOAPI_BLOB@@PEAK@Z
0x180004540: guidESDSIP
0x1800041E0: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180002B34: StrStartsWithIC
0x1800041C8: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x180004250: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004158: "__cdecl _imp_CryptEncodeObject" __imp_CryptEncodeObject
0x1800065B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001010: DllMain
0x180004290: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004230: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004288: KERNEL32_NULL_THUNK_DATA
0x1800041A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180004130: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x180006000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800034B8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800042C0: "__cdecl _imp_memcmp" __imp_memcmp
0x180004C50: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180004210: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800031B0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004300: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180004560: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x180004580: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180004278: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180002E20: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004298: "__cdecl _imp__initterm" __imp__initterm
0x1800021DC: "unsigned long __cdecl SipOidAlgIdToAlgId(char const * __ptr64)" ?SipOidAlgIdToAlgId@@YAKPEBD@Z
0x180004188: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180004190: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180004178: CRYPT32_NULL_THUNK_DATA
0x180001E90: "public: bool __cdecl CMyFileInfo::Open(unsigned short const * __ptr64,bool) __ptr64" ?Open@CMyFileInfo@@QEAA_NPEBG_N@Z
0x1800065A0: "__cdecl _onexitend" __onexitend
0x180004310: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004258: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800028A4: BuildPath
0x180004330: "__cdecl _xi_a" __xi_a
0x180004228: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180001F94: "public: bool __cdecl CMyFileInfo::Write(unsigned __int64,unsigned long,void * __ptr64) __ptr64" ?Write@CMyFileInfo@@QEAA_N_KKPEAX@Z
0x180004488: "EsdSipVerifyHash" ??_C@_1CC@DFMGADJI@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1800043F8: "EsdSip.dll" ??_C@_1BG@LGLKAEAP@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180004460: "EsdSipCreateHash" ??_C@_1CC@OEGKCCCA@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1800065C8: "__cdecl pRawDllMain" _pRawDllMain
0x1800011B0: DllUnregisterServer
0x18000241C: PrepareUnicodePath
0x1800030C0: "__cdecl _security_check_cookie" __security_check_cookie
0x180004328: "__cdecl _xc_z" __xc_z
0x180004140: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x180004220: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004198: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180004128: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x180004280: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800041F8: "__cdecl _imp_SetFilePointerEx" __imp_SetFilePointerEx
0x180004348: "__cdecl _guard_fids_table" __guard_fids_table
0x1800042F0: msvcrt_NULL_THUNK_DATA
0x180004010: "__cdecl load_config_used" _load_config_used
0x180004520: "MSWIM" ??_C@_07BHGOIGBH@MSWIM?$AA?$AA?$AA@
0x1800011D0: "int __cdecl EsdSipIsMyFileType(unsigned short * __ptr64,struct _GUID * __ptr64)" ?EsdSipIsMyFileType@@YAHPEAGPEAU_GUID@@@Z
0x180004C64: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180004410: "EsdSipGetSignature" ??_C@_1CG@GJDMPEMN@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAG?$AAe?$AAt?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x1800042B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180002778: StringCchCopyNExW
0x1800020DC: "int __cdecl GetWimFileHash(class CMyFileInfo & __ptr64,unsigned __int64,unsigned __int64,class CCryptHash & __ptr64,unsigned int,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetWimFileHash@@YAHAEAVCMyFileInfo@@_K1AEAVCCryptHash@@IPEAEKPEAK@Z
0x1800041A8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180004180: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004208: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800041D8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180001170: "int __cdecl EsdSipGetCaps(struct SIP_SUBJECTINFO_ * __ptr64,struct _SIP_CAP_SET_V3 * __ptr64)" ?EsdSipGetCaps@@YAHPEAUSIP_SUBJECTINFO_@@PEAU_SIP_CAP_SET_V3@@@Z
0x180004238: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002384: StringCchCopyNW
0x1800032E0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000353D: memcmp
0x1800041B8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1800042D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004308: ntdll_NULL_THUNK_DATA
0x1800042B8: "__cdecl _imp_memcpy" __imp_memcpy
0x180004500: "EsdSipGetCaps" ??_C@_1BM@BEFEDLKP@?$AAE?$AAs?$AAd?$AAS?$AAi?$AAp?$AAG?$AAe?$AAt?$AAC?$AAa?$AAp?$AAs?$AA?$AA@
0x1800015D0: "int __cdecl EsdSipDelSignature(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long)" ?EsdSipDelSignature@@YAHPEAUSIP_SUBJECTINFO_@@K@Z
0x180006008: "__cdecl _security_cookie" __security_cookie
0x180004268: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x1800041F0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800041B0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180004270: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1800065A8: "__cdecl _onexitbegin" __onexitbegin
0x180004248: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004C78: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800031E4: "__cdecl _security_init_cookie" __security_init_cookie
0x180004C3C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003561: wcscmp
0x180001F40: "public: bool __cdecl CMyFileInfo::Read(unsigned long,void * __ptr64) __ptr64" ?Read@CMyFileInfo@@QEAA_NKPEAX@Z
0x180002A70: StrDupe
0x1800042A0: "__cdecl _imp_malloc" __imp_malloc
0x180004148: ADVAPI32_NULL_THUNK_DATA
0x180004160: "__cdecl _imp_CryptSIPAddProvider" __imp_CryptSIPAddProvider
0x1800041D0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180003330: "__cdecl _report_gsfailure" __report_gsfailure
0x1800065B8: "__cdecl _native_startup_state" __native_startup_state
0x180004150: "__cdecl _imp_CryptSIPRemoveProvider" __imp_CryptSIPRemoveProvider
0x180004550: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180001FF0: "bool __cdecl WimFileHashReadLoop(class CMyFileInfo & __ptr64,unsigned __int64,class CCryptHash & __ptr64,unsigned char * __ptr64,unsigned long)" ?WimFileHashReadLoop@@YA_NAEAVCMyFileInfo@@_KAEAVCCryptHash@@PEAEK@Z
0x180001040: DllRegisterServer
0x1800042A8: "__cdecl _imp_free" __imp_free
0x180003150: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003555: memset
0x180004CA0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800041C0: "__cdecl _imp_ReadFile" __imp_ReadFile
[JEB Decompiler by PNF Software]