Generated by JEB on 2019/08/01

PE: C:\Windows\System32\msisip.dll Base=0x180000000 SHA-256=F9A9AC6D02062CC59DEE1BF4A7DACD253E930031C88DD99F9582274EAF731827
PDB: msisip.pdb GUID={44390403-B7F9-D250-3016456E9ED2F73A} Age=1

207 located named symbols:
0x180003A6C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002E70: "unsigned __int64 __cdecl GetProvider(struct SIP_SUBJECTINFO_ * __ptr64,struct HINSTANCE__ * __ptr64)" ?GetProvider@@YA_KPEAUSIP_SUBJECTINFO_@@PEAUHINSTANCE__@@@Z
0x180003880: "__cdecl FindPESection" _FindPESection
0x180006930: "SHA384" ??_C@_1O@KOBLHLEG@?$AAS?$AAH?$AAA?$AA3?$AA8?$AA4?$AA?$AA@
0x18000540C: "public: int __cdecl CDataReaderCoordinator::ReturnBuffer(void) __ptr64" ?ReturnBuffer@CDataReaderCoordinator@@QEAAHXZ
0x180001010: "int __cdecl MsiSIPVerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64)" ?MsiSIPVerifyIndirectData@@YAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x180008010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800068B0: "MsiSIPIsMyTypeOfFile" ??_C@_1CK@LGNNNMBA@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAI?$AAs?$AAM?$AAy?$AAT?$AAy?$AAp?$AAe?$AAO?$AAf?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x180006440: "1.3.6.1.4.1.311.2.1.30" ??_C@_0BH@DIGBLLJB@1?43?46?41?44?41?4311?42?41?430?$AA@
0x180006300: "CryptDestroyHash" ??_C@_0BB@INPNJGML@CryptDestroyHash?$AA@
0x18000333C: "__cdecl CRT_INIT" _CRT_INIT
0x180006168: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003816: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180006330: "CryptCreateHash" ??_C@_0BA@IEJOIHIJ@CryptCreateHash?$AA@
0x180003090: "int __cdecl MsiSIPIsMyTypeOfFile(unsigned short * __ptr64,struct _GUID * __ptr64)" ?MsiSIPIsMyTypeOfFile@@YAHPEAGPEAU_GUID@@@Z
0x180003D80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800019F0: "int __cdecl DigestStorageMetadataHelper(struct HINSTANCE__ * __ptr64,struct HINSTANCE__ * __ptr64,struct IStorage & __ptr64,bool,unsigned __int64)" ?DigestStorageMetadataHelper@@YAHPEAUHINSTANCE__@@0AEAUIStorage@@_N_K@Z
0x180006960: "Microsoft Base Cryptographic Pro" ??_C@_1FG@GAFGNOGK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAB?$AAa?$AAs?$AAe?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AA?5?$AAP?$AAr?$AAo@
0x1800016B0: "int __cdecl GetStreamFromStorage(struct IStorage & __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?GetStreamFromStorage@@YAHAEAUIStorage@@PEBGPEAEPEAK@Z
0x180001E70: "int __cdecl DigestStorageContentHelper(struct HINSTANCE__ * __ptr64,struct HINSTANCE__ * __ptr64,struct IStorage & __ptr64,bool,unsigned __int64)" ?DigestStorageContentHelper@@YAHPEAUHINSTANCE__@@0AEAUIStorage@@_N_K@Z
0x1800032F0: "public: __cdecl CDataReaderCoordinator::~CDataReaderCoordinator(void) __ptr64" ??1CDataReaderCoordinator@@QEAA@XZ
0x1800061B0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180006280: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800068E0: "CryptSIPAddProvider" ??_C@_0BE@JNBOPKBJ@CryptSIPAddProvider?$AA@
0x180003865: "__cdecl XcptFilter" _XcptFilter
0x180006288: "__cdecl _xc_a" __xc_a
0x180006470: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800064BC: " " ??_C@_01CLKCMJKC@?5?$AA@
0x180003D5D: memcpy
0x180003CCC: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180006268: "__cdecl _imp_memset" __imp_memset
0x1800061A0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180003A3F: "__cdecl initterm" _initterm
0x1800085D0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800061D8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800062A8: "__cdecl _xi_z" __xi_z
0x180006138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002510: "int __cdecl GetSortedStorageElements(struct HINSTANCE__ * __ptr64,struct IStorage & __ptr64,unsigned int * __ptr64,struct tagSTATSTG * __ptr64 * __ptr64)" ?GetSortedStorageElements@@YAHPEAUHINSTANCE__@@AEAUIStorage@@PEAIPEAPEAUtagSTATSTG@@@Z
0x180003A4B: "__cdecl _C_specific_handler" __C_specific_handler
0x180006208: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180004718: "public: struct IStorage * __ptr64 * __ptr64 __cdecl CComPointer<struct IStorage>::operator&(void) __ptr64" ??I?$CComPointer@UIStorage@@@@QEAAPEAPEAUIStorage@@XZ
0x180003C68: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180006318: "CryptGetHashParam" ??_C@_0BC@BNEOPJAJ@CryptGetHashParam?$AA@
0x1800017E0: "public: __cdecl CComPointer<struct IStorage>::~CComPointer<struct IStorage>(void) __ptr64" ??1?$CComPointer@UIStorage@@@@QEAA@XZ
0x180003871: "__cdecl amsg_exit" _amsg_exit
0x180006188: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x1800023E0: "public: unsigned long __cdecl CDataReaderCoordinator::Restart(unsigned long,struct IStream * __ptr64) __ptr64" ?Restart@CDataReaderCoordinator@@QEAAKKPEAUIStream@@@Z
0x180002D00: "int __cdecl DecodeSIPVersion(struct _CRYPTOAPI_BLOB * __ptr64,unsigned long * __ptr64)" ?DecodeSIPVersion@@YAHPEAU_CRYPTOAPI_BLOB@@PEAK@Z
0x180006210: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180006128: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180002C40: "public: unsigned long __cdecl CDataReaderCoordinator::Init(void) __ptr64" ?Init@CDataReaderCoordinator@@QEAAKXZ
0x1800085C0: "__cdecl _native_startup_lock" __native_startup_lock
0x180003C38: DllMain
0x180006220: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180006150: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800061F0: KERNEL32_NULL_THUNK_DATA
0x180006420: "CryptHashData" ??_C@_0O@DAIMODJH@CryptHashData?$AA@
0x1800061A8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003C44: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001DC0: "int __cdecl VerifySubjectGUID(struct HINSTANCE__ * __ptr64,struct _GUID * __ptr64)" ?VerifySubjectGUID@@YAHPEAUHINSTANCE__@@PEAU_GUID@@@Z
0x180006260: "__cdecl _imp_memcmp" __imp_memcmp
0x1800064A8: "CryptEncodeObject" ??_C@_0BC@LHLNNOLL@CryptEncodeObject?$AA@
0x180006170: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180006190: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800063F0: "StgOpenStorage" ??_C@_0P@EHIHKBGH@StgOpenStorage?$AA@
0x180003930: "__cdecl ValidateImageBase" _ValidateImageBase
0x180002490: "void __cdecl FreeSortedStorageElements(struct HINSTANCE__ * __ptr64,struct tagSTATSTG * __ptr64,unsigned long)" ?FreeSortedStorageElements@@YAXPEAUHINSTANCE__@@PEAUtagSTATSTG@@K@Z
0x180006920: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x1800061E0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180003580: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180006250: "__cdecl _imp__initterm" __imp__initterm
0x180006878: "MsiSIPRemoveSignedDataMsg" ??_C@_1DE@LIMAFILM@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x180006180: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180007680: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004860: "int __cdecl MsiSIPCreateIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64)" ?MsiSIPCreateIndirectData@@YAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x1800067D8: "MsiSIPPutSignedDataMsg" ??_C@_1CO@OEFMNGOE@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAP?$AAu?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x18000474C: "unsigned long __cdecl CopySerializedSipIndirectData(unsigned long,unsigned char * __ptr64,char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,struct SIP_INDIRECT_DATA_ * __ptr64)" ?CopySerializedSipIndirectData@@YAKKPEAEPEADK0KPEAUSIP_INDIRECT_DATA_@@@Z
0x1800085B0: "__cdecl _onexitend" __onexitend
0x1800061C8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180006278: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180001D20: "struct IStorage * __ptr64 __cdecl GetStorageFromSubject(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64,bool)" ?GetStorageFromSubject@@YAPEAUIStorage@@PEAUSIP_SUBJECTINFO_@@KPEAUHINSTANCE__@@_N@Z
0x180006430: "CoTaskMemFree" ??_C@_0O@MIBPKJDN@CoTaskMemFree?$AA@
0x180006120: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180006410: "CoInitialize" ??_C@_0N@JGHNIJDF@CoInitialize?$AA@
0x180006298: "__cdecl _xi_a" __xi_a
0x180006158: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800085D8: "__cdecl pRawDllMain" _pRawDllMain
0x180005610: DllUnregisterServer
0x180002FA0: "public: void __cdecl CDataReaderCoordinator::ReleaseResources(void) __ptr64" ?ReleaseResources@CDataReaderCoordinator@@QEAAXXZ
0x180001CF0: "void __cdecl MyCoUninitialize(struct HINSTANCE__ * __ptr64,bool)" ?MyCoUninitialize@@YAXPEAUHINSTANCE__@@_N@Z
0x180003830: "__cdecl _security_check_cookie" __security_check_cookie
0x180006290: "__cdecl _xc_z" __xc_z
0x1800061D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800017E0: "public: __cdecl CComPointer<struct IStream>::~CComPointer<struct IStream>(void) __ptr64" ??1?$CComPointer@UIStream@@@@QEAA@XZ
0x180006840: "MsiSIPVerifyIndirectData" ??_C@_1DC@GIILIEFK@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAI?$AAn?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180006340: "crypt32.dll" ??_C@_1BI@MIELKEKL@?$AAc?$AAr?$AAy?$AAp?$AAt?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180006218: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180001810: "public: struct IStream * __ptr64 * __ptr64 __cdecl CComPointer<struct IStream>::operator&(void) __ptr64" ??I?$CComPointer@UIStream@@@@QEAAPEAPEAUIStream@@XZ
0x180006160: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180006198: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800063C8: "ole32.dll" ??_C@_1BE@DPMNNGMJ@?$AAo?$AAl?$AAe?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180006458: "CryptDecodeObject" ??_C@_0BC@BLLJKDDA@CryptDecodeObject?$AA@
0x180001650: "unsigned long __cdecl SipOidAlgIdToAlgId(struct HINSTANCE__ * __ptr64,char const * __ptr64)" ?SipOidAlgIdToAlgId@@YAKPEAUHINSTANCE__@@PEBD@Z
0x1800062B0: "__cdecl _guard_fids_table" __guard_fids_table
0x180006270: msvcrt_NULL_THUNK_DATA
0x180006010: "__cdecl load_config_used" _load_config_used
0x180006940: "CryptAcquireContextW" ??_C@_0BF@JHHBLAOM@CryptAcquireContextW?$AA@
0x1800054B4: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x180006238: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180006148: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800052C0: "int __cdecl PutStreamInStorage(struct IStorage & __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long)" ?PutStreamInStorage@@YAHAEAUIStorage@@PEBGPEAEK@Z
0x180005150: "int __cdecl MsiSIPRemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long)" ?MsiSIPRemoveSignedDataMsg@@YAHPEAUSIP_SUBJECTINFO_@@K@Z
0x180006490: "CryptReleaseContext" ??_C@_0BE@FBIJLPPP@CryptReleaseContext?$AA@
0x180006140: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003854: "__cdecl _std_terminate" __std_terminate
0x1800067A8: "MsiSIPGetSignedDataMsg" ??_C@_1CO@CDDMBGCM@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAG?$AAe?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x180003A60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003D51: memcmp
0x180002EA0: "protected: static unsigned long __cdecl CDataReaderCoordinator::StreamReaderThread(void * __ptr64)" ?StreamReaderThread@CDataReaderCoordinator@@KAKPEAX@Z
0x180008020: "struct _GUID gMSI" ?gMSI@@3U_GUID@@A
0x180006240: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180006248: "__cdecl _imp_memcpy" __imp_memcpy
0x180006258: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180008008: "__cdecl _security_cookie" __security_cookie
0x1800061F8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800061B8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180006118: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800061C0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1800085B8: "__cdecl _onexitbegin" __onexitbegin
0x1800019B0: "public: class CComPointer<struct IStorage> & __ptr64 __cdecl CComPointer<struct IStorage>::operator=(struct IStorage * __ptr64) __ptr64" ??4?$CComPointer@UIStorage@@@@QEAAAEAV0@PEAUIStorage@@@Z
0x1800063E0: "CoUninitialize" ??_C@_0P@EGMOFMDE@CoUninitialize?$AA@
0x180006130: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180005438: "long __cdecl StringCbCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCbCopyA@@YAJPEAD_KPEBD@Z
0x18000766C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180006200: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800061E8: "__cdecl _imp_CreateSemaphoreW" __imp_CreateSemaphoreW
0x180003964: "__cdecl _security_init_cookie" __security_init_cookie
0x180002A80: "void __cdecl InsSortStatStg(struct tagSTATSTG * __ptr64,unsigned long,unsigned int,unsigned int)" ?InsSortStatStg@@YAXPEAUtagSTATSTG@@KII@Z
0x180007658: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180001440: "unsigned char * __ptr64 __cdecl DigestStorage(struct HINSTANCE__ * __ptr64,struct HINSTANCE__ * __ptr64,struct IStorage & __ptr64,unsigned __int64,char const * __ptr64,enum hashTypeEnum,unsigned long * __ptr64)" ?DigestStorage@@YAPEAEPEAUHINSTANCE__@@0AEAUIStorage@@_KPEBDW4hashTypeEnum@@PEAK@Z
0x180006228: "__cdecl _imp_malloc" __imp_malloc
0x180003AB0: "__cdecl _report_gsfailure" __report_gsfailure
0x180001840: "int __cdecl MsiSIPGetSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?MsiSIPGetSignedDataMsg@@YAHPEAUSIP_SUBJECTINFO_@@PEAKK1PEAE@Z
0x180006400: "IsEqualGUID" ??_C@_0M@JKHCMLHC@IsEqualGUID?$AA@
0x180002730: "void __cdecl QSortStatStg(struct tagSTATSTG * __ptr64,unsigned long,unsigned int,unsigned int)" ?QSortStatStg@@YAXPEAUtagSTATSTG@@KII@Z
0x1800068F8: "CryptSIPRemoveProvider" ??_C@_0BH@COHGNOED@CryptSIPRemoveProvider?$AA@
0x1800085C8: "__cdecl _native_startup_state" __native_startup_state
0x180006910: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1800053B8: "int __cdecl RemoveSignatureFromStorage(struct IStorage & __ptr64,unsigned long)" ?RemoveSignatureFromStorage@@YAHAEAUIStorage@@K@Z
0x180005510: DllRegisterServer
0x180001E20: "int __cdecl MyCoInitialize(struct HINSTANCE__ * __ptr64,bool * __ptr64)" ?MyCoInitialize@@YAHPEAUHINSTANCE__@@PEA_N@Z
0x180006790: "MSISIP.DLL" ??_C@_1BG@DAFFGOKB@?$AAM?$AAS?$AAI?$AAS?$AAI?$AAP?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180006230: "__cdecl _imp_free" __imp_free
0x1800038D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006808: "MsiSIPCreateIndirectData" ??_C@_1DC@JHNHJLIA@?$AAM?$AAs?$AAi?$AAS?$AAI?$AAP?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180004F90: "int __cdecl MsiSIPPutSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,unsigned char * __ptr64)" ?MsiSIPPutSignedDataMsg@@YAHPEAUSIP_SUBJECTINFO_@@KPEAKKPEAE@Z
0x180003D69: memset
0x180007694: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180006358: "CryptFindOIDInfo" ??_C@_0BB@CPKCECHJ@CryptFindOIDInfo?$AA@

[JEB Decompiler by PNF Software]