rsaenh.dll

Description: Microsoft Enhanced Cryptographic Provider

Version: 10.0.19041.6093

Architecture: 32-bit

Operating System: Windows NT

SHA256: a8d8a41344eb78255f0f6c146fb3c97b

File Size: 191.7 KB

Uploaded At: Dec. 1, 2025, 8:03 a.m.

Views: 21

Exported Functions

CPAcquireContext (Ordinal: 1, Address: 0xa090)
CPCreateHash (Ordinal: 2, Address: 0x8420)
CPDecrypt (Ordinal: 3, Address: 0xbc80)
CPDeriveKey (Ordinal: 4, Address: 0x1d170)
CPDestroyHash (Ordinal: 5, Address: 0xaba0)
CPDestroyKey (Ordinal: 6, Address: 0x8b40)
CPDuplicateHash (Ordinal: 7, Address: 0x1c840)
CPDuplicateKey (Ordinal: 8, Address: 0x1d9a0)
CPEncrypt (Ordinal: 9, Address: 0x1bc60)
CPExportKey (Ordinal: 10, Address: 0x8d90)
CPGenKey (Ordinal: 11, Address: 0x52b0)
CPGenRandom (Ordinal: 12, Address: 0xb2a0)
CPGetHashParam (Ordinal: 13, Address: 0x57d0)
CPGetKeyParam (Ordinal: 14, Address: 0xb040)
CPGetProvParam (Ordinal: 15, Address: 0x1db90)
CPGetUserKey (Ordinal: 16, Address: 0xc9d0)
CPHashData (Ordinal: 17, Address: 0x5cc0)
CPHashSessionKey (Ordinal: 18, Address: 0x1c9c0)
CPImportKey (Ordinal: 19, Address: 0x6480)
CPReleaseContext (Ordinal: 20, Address: 0xafd0)
CPSetHashParam (Ordinal: 21, Address: 0x5fb0)
CPSetKeyParam (Ordinal: 22, Address: 0x1eb50)
CPSetProvParam (Ordinal: 23, Address: 0x1f5f0)
CPSignHash (Ordinal: 24, Address: 0x21550)
CPVerifySignature (Ordinal: 25, Address: 0x5540)
DllRegisterServer (Ordinal: 26, Address: 0x1bb00)
DllUnregisterServer (Ordinal: 27, Address: 0x1bb80)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x68027000)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x68027008)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x68027014)
SetLastError (Address: 0x68027010)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x68027038)
DeleteFileW (Address: 0x68027040)
FindClose (Address: 0x6802702c)
FindFirstFileExW (Address: 0x68027024)
FindNextFileW (Address: 0x6802701c)
GetFileSize (Address: 0x68027030)
GetTempFileNameW (Address: 0x68027028)
ReadFile (Address: 0x68027034)
RemoveDirectoryW (Address: 0x68027020)
WriteFile (Address: 0x6802703c)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x68027048)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x68027050)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x68027058)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x6802706c)
HeapAlloc (Address: 0x68027064)
HeapFree (Address: 0x68027060)
HeapReAlloc (Address: 0x68027068)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x68027078)
LocalFree (Address: 0x68027074)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x68027094)
FreeLibrary (Address: 0x6802708c)
GetModuleFileNameW (Address: 0x68027084)
GetModuleHandleW (Address: 0x68027098)
GetProcAddress (Address: 0x68027080)
LoadLibraryExA (Address: 0x68027090)
LoadStringW (Address: 0x68027088)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x680270a0)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x680270b8)
MapViewOfFile (Address: 0x680270b4)
UnmapViewOfFile (Address: 0x680270a8)
VirtualAlloc (Address: 0x680270ac)
VirtualProtect (Address: 0x680270bc)
VirtualQuery (Address: 0x680270b0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x680270d0)
GetCurrentThread (Address: 0x680270c4)
OpenProcessToken (Address: 0x680270cc)
OpenThreadToken (Address: 0x680270c8)
SetThreadStackGuarantee (Address: 0x680270d4)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x680270e8)
RegCreateKeyExA (Address: 0x680270e4)
RegOpenKeyExA (Address: 0x680270ec)
RegQueryValueExA (Address: 0x680270e0)
RegSetValueExA (Address: 0x680270dc)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x680270f4)
WideCharToMultiByte (Address: 0x680270f8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenA (Address: 0x68027104)
lstrlenW (Address: 0x68027100)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x6802712c)
AcquireSRWLockShared (Address: 0x68027118)
DeleteCriticalSection (Address: 0x6802710c)
EnterCriticalSection (Address: 0x68027114)
InitializeCriticalSection (Address: 0x68027128)
InitializeSRWLock (Address: 0x68027110)
LeaveCriticalSection (Address: 0x68027130)
ReleaseSRWLockExclusive (Address: 0x68027120)
ReleaseSRWLockShared (Address: 0x6802711c)
TryAcquireSRWLockExclusive (Address: 0x68027124)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x68027138)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x68027140)
GetSystemInfo (Address: 0x68027144)
GetTickCount (Address: 0x6802714c)
GetVersionExA (Address: 0x68027148)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x68027154)
CreateThreadpoolTimer (Address: 0x6802715c)
SetThreadpoolTimer (Address: 0x68027158)
WaitForThreadpoolTimerCallbacks (Address: 0x68027160)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x6802716c)
EventSetInformation (Address: 0x68027170)
EventUnregister (Address: 0x68027174)
EventWriteTransfer (Address: 0x68027168)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x680271c4)
AllocateAndInitializeSid (Address: 0x6802719c)
EqualSid (Address: 0x68027190)
FreeSid (Address: 0x680271b0)
GetAce (Address: 0x6802718c)
GetAclInformation (Address: 0x68027194)
GetLengthSid (Address: 0x680271bc)
GetSecurityDescriptorControl (Address: 0x680271a4)
GetSecurityDescriptorDacl (Address: 0x68027184)
GetSecurityDescriptorGroup (Address: 0x680271d4)
GetSecurityDescriptorLength (Address: 0x680271c0)
GetSecurityDescriptorOwner (Address: 0x680271a8)
GetSecurityDescriptorSacl (Address: 0x68027188)
GetSidIdentifierAuthority (Address: 0x680271cc)
GetSidSubAuthority (Address: 0x680271a0)
GetSidSubAuthorityCount (Address: 0x68027198)
GetTokenInformation (Address: 0x680271d0)
InitializeAcl (Address: 0x680271b8)
InitializeSecurityDescriptor (Address: 0x680271b4)
IsValidSid (Address: 0x680271ac)
MakeSelfRelativeSD (Address: 0x680271c8)
PrivilegeCheck (Address: 0x68027180)
SetSecurityDescriptorDacl (Address: 0x6802717c)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x68027204)
BCryptCreateHash (Address: 0x68027208)
BCryptDecrypt (Address: 0x68027224)
BCryptDestroyHash (Address: 0x6802721c)
BCryptDestroyKey (Address: 0x68027214)
BCryptDuplicateHash (Address: 0x68027218)
BCryptDuplicateKey (Address: 0x680271f4)
BCryptEncrypt (Address: 0x68027228)
BCryptExportKey (Address: 0x680271dc)
BCryptFinalizeKeyPair (Address: 0x680271ec)
BCryptFinishHash (Address: 0x68027220)
BCryptGenerateKeyPair (Address: 0x68027210)
BCryptGenerateSymmetricKey (Address: 0x6802720c)
BCryptGetProperty (Address: 0x680271fc)
BCryptHashData (Address: 0x68027200)
BCryptImportKeyPair (Address: 0x680271e0)
BCryptOpenAlgorithmProvider (Address: 0x680271f8)
BCryptSetProperty (Address: 0x680271e4)
BCryptSignHash (Address: 0x680271f0)
BCryptVerifySignature (Address: 0x680271e8)

ntdll.dll

_alloca_probe (Address: 0x6802729c)
_strlwr (Address: 0x68027234)
_vsnwprintf (Address: 0x6802723c)
EtwGetTraceEnableFlags (Address: 0x68027278)
EtwGetTraceEnableLevel (Address: 0x6802726c)
EtwGetTraceLoggerHandle (Address: 0x68027270)
EtwRegisterTraceGuidsW (Address: 0x68027268)
EtwTraceMessage (Address: 0x6802728c)
EtwUnregisterTraceGuids (Address: 0x6802727c)
memcmp (Address: 0x680272a0)
memcpy (Address: 0x680272a4)
memset (Address: 0x680272a8)
NtClose (Address: 0x68027240)
NtCreateFile (Address: 0x68027250)
NtQueryInformationToken (Address: 0x68027244)
NtTerminateProcess (Address: 0x68027280)
RtlAllocateHeap (Address: 0x6802725c)
RtlDllShutdownInProgress (Address: 0x68027274)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x68027294)
RtlFreeHeap (Address: 0x68027238)
RtlImageNtHeader (Address: 0x68027260)
RtlNtStatusToDosError (Address: 0x68027248)
RtlReleaseRelativeName (Address: 0x6802724c)
RtlUnhandledExceptionFilter (Address: 0x68027298)
RtlUnwind (Address: 0x68027290)
strchr (Address: 0x68027264)
strcpy_s (Address: 0x68027254)
swprintf_s (Address: 0x68027230)
wcscat_s (Address: 0x68027284)
wcscpy_s (Address: 0x68027288)
wcsncpy_s (Address: 0x68027258)