Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winnsi.dll Base=0x180000000 SHA-256=2624FEA2040AB5D42EF2FC6CD0085B415282434148F9AAC5B96D1583DC56017B
PDB: winnsi.pdb GUID={B6C1C260-7ECD-61D4-2C56D6BD7D507A41} Age=1

185 located named symbols:
0x1800020AC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004BC8: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180005CAC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180007008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004AA8: "__cdecl _imp_NsiSetParameterEx" __imp_NsiSetParameterEx
0x180007608: HeapHandle
0x180004D98: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180001CFC: "__cdecl CRT_INIT" _CRT_INIT
0x180004BE8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180004B08: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x1800023C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001010: NsiRpcDeregisterChangeNotification
0x180004CA8: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x180004AF8: "__cdecl _imp_RpcAsyncCancelCall" __imp_RpcAsyncCancelCall
0x180004B50: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180004C18: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180004CE8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001050: NsiRpcDeregisterChangeNotificationEx
0x180004DF8: NPI_MS_NDIS_MODULEID
0x180004C90: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x180004CF0: "__cdecl _xc_a" __xc_a
0x180002C00: NsiRpcEnumerateObjectsAllParameters
0x180004BB0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180004B38: "__cdecl _imp_memset" __imp_memset
0x180004C38: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000208B: "__cdecl initterm" _initterm
0x180005D88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180004D08: "__cdecl _xi_z" __xi_z
0x180004B60: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001CF0: "__cdecl _C_specific_handler" __C_specific_handler
0x180003A30: MIDL_user_free
0x180004BA8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180005CD4: "__cdecl _IMPORT_DESCRIPTOR_NSI" __IMPORT_DESCRIPTOR_NSI
0x180004B90: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180004C20: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180002350: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001CD0: NsiDisconnectFromServer
0x180005D9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x180001410: NsiRpcRegisterChangeNotification
0x180004AB8: "__cdecl _imp_NsiGetParameterEx" __imp_NsiGetParameterEx
0x180004C48: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180001F84: "__cdecl decode_pointer" _decode_pointer
0x1800030C0: NsiRpcGetAllParametersEx
0x180005DC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0
0x180004B80: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004BF8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001AB0: NsiConnectToServer
0x180003958: NsiStartWorkerThread
0x180002278: DllMain
0x180004CA0: api-ms-win-core-util-l1-1-0_NULL_THUNK_DATA
0x1800022C4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180004B30: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004CB0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002FE0: NsiRpcGetAllParameters
0x180004BD8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004C88: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180001E24: "__cdecl _DllMainCRTStartup" __DllMainCRTStartup
0x1800039DC: PrepareRpcAsyncState
0x180004B78: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180001C70: InitializeNsiRpcClient
0x180004BF0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003930: NsiServiceStatusChangeCallback
0x180004C40: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180005D38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x180005D24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180004BA0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180004AD8: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180001DE0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004B48: "__cdecl _imp__initterm" __imp__initterm
0x180004AE0: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800034B0: NsiRpcSetAllParameters
0x180004B70: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180004B58: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x180003530: NsiRpcSetAllParametersEx
0x180004CE0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004B40: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x180004BE0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180004AB0: "__cdecl _imp_NsiGetAllParametersEx" __imp_NsiGetAllParametersEx
0x180007610: NotificationListHead
0x180004C68: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004D00: "__cdecl _xi_a" __xi_a
0x180004C60: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004CC0: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x1800019D0: RegisterNsiSvcRestartNotification
0x180005D4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180004AF0: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x180004C78: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x180004C80: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x180002B90: NsiReregisterNotificationWorker
0x180004C98: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180005D10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180004C28: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180001F60: "__cdecl _security_check_cookie" __security_check_cookie
0x180004CF8: "__cdecl _xc_z" __xc_z
0x1800012C0: NsiWorkerThread
0x180004C00: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003790: NsiRpcSetParameterEx
0x1800036D0: NsiRpcSetParameter
0x180005DB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x180004C58: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004BB8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180004B98: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180007028: "__cdecl _dllonexit_data" __dllonexit_data
0x180004C10: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004D10: "__cdecl _guard_fids_table" __guard_fids_table
0x180004040: "__cdecl load_config_used" _load_config_used
0x180004C70: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180004CD0: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x180004AE8: "__cdecl _imp_RpcBindingSetAuthInfoW" __imp_RpcBindingSetAuthInfoW
0x180004B10: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x180003260: NsiRpcGetParameter
0x180004B20: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180004BD0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180004CB8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004C08: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180001F94: "__cdecl encoded_null" _encoded_null
0x180004B00: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180004CC8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003320: NsiRpcGetParameterEx
0x180001B70: MIDL_user_allocate
0x1800020A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180005CFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180004AA0: "__cdecl _imp_NsiSetAllParametersEx" __imp_NsiSetAllParametersEx
0x18000207F: "__cdecl initterm_e" _initterm_e
0x180004CD8: ntdll_NULL_THUNK_DATA
0x180002860: NsiReregisterChangeNotification
0x180007620: NsiRecoveryObj
0x180001480: NsiRpcRegisterChangeNotificationEx
0x180005D74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180007000: "__cdecl _security_cookie" __security_cookie
0x1800075E0: NotificationListLock
0x180004AC0: "__cdecl _imp_NsiGetAllParameters" __imp_NsiGetAllParameters
0x180004B88: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004BC0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180005CE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180005C98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x180004B68: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001C00: DeregisterNsiSvcRestartNotification
0x180001FA4: "__cdecl _security_init_cookie" __security_init_cookie
0x180004AC8: "__cdecl _imp_NsiEnumerateObjectsAllParameters" __imp_NsiEnumerateObjectsAllParameters
0x180005C84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x180004DB0: "Security=Impersonation Dynamic T" ??_C@_1EI@COBFOBIL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$DN?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AA?5?$AAT@
0x180001B90: CleanupNsiRpcClient
0x180004D90: WNF_NSI_SERVICE_STATUS
0x180005CC0: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180004B28: RPCRT4_NULL_THUNK_DATA
0x180004AD0: NSI_NULL_THUNK_DATA
0x1800020F0: "__cdecl _report_gsfailure" __report_gsfailure
0x180004C30: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180004B18: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x1800027D0: NsiCompletePendingRpcCall
0x1800039A8: NsiStopWorkerThread
0x180005D60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004C50: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800022B6: memset
0x180005DD8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]