Generated by JEB on 2019/08/01

PE: C:\Windows\System32\nsisvc.dll Base=0x180000000 SHA-256=BC3EC88DC49A4A933EFC28FCF8A3281ECFB39AF53AC17176B6FB74624DF7E299
PDB: nsisvc.pdb GUID={76587D4C-F356-8919-B78343BB4F482624} Age=1

258 located named symbols:
0x180004110: NsiServiceCleanup
0x180002A0C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180005D30: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180005E78: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x1800025E0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180007144: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002CDD: "__cdecl _imp_load_NsiDeregisterChangeNotificationEx" __imp_load_NsiDeregisterChangeNotificationEx
0x180008018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000A008: "__cdecl _imp_NsiSetParameterEx" __imp_NsiSetParameterEx
0x1800086C8: HeapHandle
0x180005FA0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180001D50: RpcNsiRegisterChangeNotification
0x180002630: "__cdecl CRT_INIT" _CRT_INIT
0x180005D78: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180005C58: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x180005BE8: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180008708: RpcServerInitialized
0x180005BE0: "__cdecl _imp_RpcServerSubscribeForNotification" __imp_RpcServerSubscribeForNotification
0x1800042E0: WppControlCallback
0x1800019D0: NsipClientDisconnectCallback
0x180002DE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005C38: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x180007088: NSI_NULL_THUNK_DATA_DLB
0x1800086D0: NotificationCleanupEvent
0x180005E50: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180006720: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003C00: RpcNsiGetAllParameters
0x180005C98: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180005C18: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x180002550: WppInitUm
0x180005DB8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180005EB0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002C10: NdrServerCall2
0x180005DC8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180005C30: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x180005E10: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x18000A020: "__cdecl _imp_NsiDeregisterChangeNotificationEx" __imp_NsiDeregisterChangeNotificationEx
0x18000A038: NSI_NULL_THUNK_DATA_DLA
0x180005E38: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180005EB8: "__cdecl _xc_a" __xc_a
0x1800086E0: DeregisterListLock
0x180005D18: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180006F38: "__cdecl _DELAY_IMPORT_DESCRIPTOR_NSI_dll" __DELAY_IMPORT_DESCRIPTOR_NSI_dll
0x1800020D0: ServiceMain
0x180005F64: "__cdecl _guard_iat_table" __guard_iat_table
0x180002D2B: memcpy
0x180003EA0: RpcNsiSetAllParameters
0x180005C80: "__cdecl _imp_memset" __imp_memset
0x180005DB0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800029CB: "__cdecl initterm" _initterm
0x180007220: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180005ED0: "__cdecl _xi_z" __xi_z
0x180005CD0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180005E60: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180002D13: "__cdecl _C_specific_handler" __C_specific_handler
0x180002040: MIDL_user_free
0x180005D38: "__cdecl _imp_InterlockedPopEntrySList" __imp_InterlockedPopEntrySList
0x180005D08: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180008620: WPP_REGISTRATION_GUIDS
0x180008680: NotificationWaitHandle
0x180001B30: MALLOC
0x180005CF8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180002D68: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005FB8: WPP_ebb7696e17343590ac7ae916ea26d1e3_Traceguids
0x180006708: WPP_e2670473e4053796f5fe3be1d0f71338_Traceguids
0x1800085E0: WPP_MAIN_CB
0x180002CCB: "__cdecl _imp_load_NsiGetAllParametersEx" __imp_load_NsiGetAllParametersEx
0x180008610: NsiSvcHostGlobalData
0x180006718: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180007234: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x180008608: NsiServiceWaitObject
0x1800022B0: NsiStartRpcServer
0x18000A000: "__cdecl _imp_NsiGetParameterEx" __imp_NsiGetParameterEx
0x180002620: SvchostPushServiceGlobals
0x180001360: NsipFreePendingChangeList
0x180005E48: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180005DA0: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1800028C4: "__cdecl decode_pointer" _decode_pointer
0x180001AB0: NsipUnsubscribeAndCompleteAsyncCall
0x18000725C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0
0x180005CE8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180001010: RpcNsiDeregisterChangeNotification
0x180005D80: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800029D8: DllMain
0x180005E20: api-ms-win-core-util-l1-1-0_NULL_THUNK_DATA
0x1800024A0: NsiServiceInitialize
0x180005C20: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x180005C70: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005E80: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005D60: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180005E08: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180002764: "__cdecl _DllMainCRTStartup" __DllMainCRTStartup
0x180005CD8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180002D44: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005E90: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180005C78: "__cdecl _imp_memcmp" __imp_memcmp
0x180005D40: "__cdecl _imp_InterlockedPushEntrySList" __imp_InterlockedPushEntrySList
0x180002C00: Ndr64AsyncServerCallAll
0x1800072C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180005D70: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800071BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x180006718: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180005BF0: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x180002210: NsiServiceUpdateStatus
0x180002CEF: "__cdecl _imp_load_NsiSetAllParametersEx" __imp_load_NsiSetAllParametersEx
0x1800085D0: "__cdecl _hmod__NSI_dll" __hmod__NSI_dll
0x180003A00: RpcNsiEnumerateObjectsAllParameters
0x180002BE0: NdrAsyncServerCall
0x1800071D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000A030: "__cdecl _imp_NsiRegisterChangeNotificationEx" __imp_NsiRegisterChangeNotificationEx
0x1800040A0: WPP_SF_
0x180005D10: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180006F58: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180008618: NsiServiceStopEvent
0x180002720: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180002BF0: NdrServerCallAll
0x180005C90: "__cdecl _imp__initterm" __imp__initterm
0x180004220: NsiServiceControlHandler
0x180005BD8: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x180005CC8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800072AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180005FB0: "__cdecl _sz_NSI_dll" __sz_NSI_dll
0x180005CA0: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x180005EA8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005C88: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x180005D68: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002CA7: "__cdecl _imp_load_NsiSetParameterEx" __imp_load_NsiSetParameterEx
0x18000A018: "__cdecl _imp_NsiGetAllParametersEx" __imp_NsiGetAllParametersEx
0x180005DE8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180005EC8: "__cdecl _xi_a" __xi_a
0x180005DE0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005CB8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180005BF8: "__cdecl _imp_RpcServerUseProtseqW" __imp_RpcServerUseProtseqW
0x180008000: WPP_GLOBAL_Control
0x1800071E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800040C8: WPP_SF_D
0x180005DF8: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x180005E00: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x180005E18: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180007194: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180005DC0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800028A0: "__cdecl _security_check_cookie" __security_check_cookie
0x180005EC0: "__cdecl _xc_z" __xc_z
0x180005D88: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800085D8: NsiServiceHandle
0x180005F78: "NSI server endpoint" ??_C@_1CI@MNKDMKBF@?$AAN?$AAS?$AAI?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AAe?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x180004280: WppCleanupUm
0x180002250: NsiServiceNotifyStart
0x180007248: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x180005DD8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180002C28: "__cdecl _tailMerge_nsi_dll" __tailMerge_nsi_dll
0x180005D28: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180005E58: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180005CA8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180005D00: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180005E40: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180008640: NsiServiceStatus
0x180005F70: "NSI" ??_C@_17MKMMJNKH@?$AAN?$AAS?$AAI?$AA?$AA@
0x180008028: "__cdecl _dllonexit_data" __dllonexit_data
0x180005D98: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180005ED8: "__cdecl _guard_fids_table" __guard_fids_table
0x180002D01: "__cdecl _imp_load_NsiGetParameterEx" __imp_load_NsiGetParameterEx
0x180005070: "__cdecl load_config_used" _load_config_used
0x180005DF0: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x1800086A0: NsiKernelClientNotificationListLock
0x180007284: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180005CC0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180005CB0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180006030: "D:(A;;GRGWGX;;;WD)(A;;GRGWGX;;;R" ??_C@_1BIA@HPNEIGOF@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAR@
0x180003874: NsiStopRpcServer
0x180005C28: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x180005BD0: "__cdecl _imp_RpcSsContextLockExclusive" __imp_RpcSsContextLockExclusive
0x180001B60: RpcNsiRequestChangeNotification
0x180005D58: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180005E88: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005D90: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005E70: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800028D4: "__cdecl encoded_null" _encoded_null
0x180005D48: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180005E98: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006720: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180005C50: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x180002020: MIDL_user_allocate
0x180002A00: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002D1F: memcmp
0x180005E28: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180005C00: "__cdecl _imp_RpcServerUnregisterIfEx" __imp_RpcServerUnregisterIfEx
0x1800071A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180007180: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000A028: "__cdecl _imp_NsiSetAllParametersEx" __imp_NsiSetAllParametersEx
0x180001F30: NOTIFICATION_HANDLE_rundown
0x1800029BF: "__cdecl initterm_e" _initterm_e
0x180005C08: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x180005E68: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x180008720: NsiRpcSubscribeLock
0x180005EA0: ntdll_NULL_THUNK_DATA
0x180005C68: "__cdecl _imp_memcpy" __imp_memcpy
0x180002CB9: "__cdecl _imp_load_NsiEnumerateObjectsAllParametersEx" __imp_load_NsiEnumerateObjectsAllParametersEx
0x18000720C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180008010: "__cdecl _security_cookie" __security_cookie
0x180005C48: "__cdecl _imp_RpcServerUnsubscribeForNotification" __imp_RpcServerUnsubscribeForNotification
0x18000A010: "__cdecl _imp_NsiEnumerateObjectsAllParametersEx" __imp_NsiEnumerateObjectsAllParametersEx
0x180006FB0: NSI_NULL_THUNK_DATA_DLN
0x180005CF0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180005D20: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000716C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180005D50: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x180007130: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x1800012F0: NsipDeregisterAndFreeNotificationContext
0x180001230: CleanupNotificationThread
0x1800066F8: WPP_ThisDir_CTLGUID_NETIO
0x180002C1C: "__cdecl _imp_load_NsiRegisterChangeNotificationEx" __imp_load_NsiRegisterChangeNotificationEx
0x180005C40: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180005CE0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003FA0: RpcNsiSetParameter
0x1800028E4: "__cdecl _security_init_cookie" __security_init_cookie
0x180007270: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x1800013F0: RpcNsiParameterChange
0x180002050: NsiSecurityCallBack
0x180005E30: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180007298: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x1800066F0: WNF_NSI_SERVICE_STATUS
0x180007158: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180005C60: RPCRT4_NULL_THUNK_DATA
0x180002A50: "__cdecl _report_gsfailure" __report_gsfailure
0x180005DA8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180008670: NsiKernelClientNotificationList
0x180003D40: RpcNsiGetParameter
0x1800071F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180005C10: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180005DD0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180002D37: memset
0x1800072D4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180008660: DeregisterList

[JEB Decompiler by PNF Software]