wintrust.dll

Description: Microsoft Trust Verification APIs

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.22621.5040

Architecture: Unknown (0x1c4)

Operating System: Windows NT

SHA256: f4a90359f6e105ff5bff862d54a80377

File Size: 277.6 KB

Uploaded At: Dec. 3, 2025, 2:36 a.m.

Views: 9

Exported Functions

  • CryptCATVerifyMember (Ordinal: 1, Address: 0x1d1f1)
  • CryptSIPGetInfo (Ordinal: 2, Address: 0x18c71)
  • CryptSIPGetRegWorkingFlags (Ordinal: 3, Address: 0x18c61)
  • GenericChainCertificateTrust (Ordinal: 4, Address: 0x22041)
  • GenericChainFinalProv (Ordinal: 5, Address: 0x222a1)
  • HTTPSCertificateTrust (Ordinal: 6, Address: 0x22801)
  • SetMessageDigestInfo (Ordinal: 7, Address: 0x23b81)
  • SoftpubDefCertInit (Ordinal: 8, Address: 0x242a1)
  • SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x24431)
  • SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x24351)
  • WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0xc131)
  • AddPersonalTrustDBPages (Ordinal: 12, Address: 0x24471)
  • CatalogCompactHashDatabase (Ordinal: 13, Address: 0x19ed1)
  • ConfigCiFinalPolicy (Ordinal: 14, Address: 0x26791)
  • ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x26511)
  • CryptCATAdminAcquireContext (Ordinal: 16, Address: 0x1d901)
  • CryptCATAdminAcquireContext2 (Ordinal: 17, Address: 0x1d921)
  • CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x1da21)
  • CryptCATAdminCalcHashFromFileHandle (Ordinal: 19, Address: 0x1e391)
  • CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 20, Address: 0x1e3e1)
  • CryptCATAdminEnumCatalogFromHash (Ordinal: 21, Address: 0x1dfa1)
  • CryptCATAdminPauseServiceForBackup (Ordinal: 22, Address: 0x1e361)
  • CryptCATAdminReleaseCatalogContext (Ordinal: 23, Address: 0x1e221)
  • CryptCATAdminReleaseContext (Ordinal: 24, Address: 0x1d9c1)
  • CryptCATAdminRemoveCatalog (Ordinal: 25, Address: 0x1dc51)
  • CryptCATAdminResolveCatalogPath (Ordinal: 26, Address: 0x1e2a1)
  • CryptCATAllocSortedMemberInfo (Ordinal: 27, Address: 0x1d031)
  • CryptCATCDFClose (Ordinal: 28, Address: 0x1efe1)
  • CryptCATCDFEnumAttributes (Ordinal: 29, Address: 0x1f971)
  • CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 30, Address: 0x1f991)
  • CryptCATCDFEnumCatAttributes (Ordinal: 31, Address: 0x1f1e1)
  • CryptCATCDFEnumMembers (Ordinal: 32, Address: 0x1f701)
  • CryptCATCDFEnumMembersByCDFTag (Ordinal: 33, Address: 0x1f771)
  • CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 34, Address: 0x1f741)
  • CryptCATCDFOpen (Ordinal: 35, Address: 0x1eb81)
  • CryptCATCatalogInfoFromContext (Ordinal: 36, Address: 0x1e191)
  • CryptCATClose (Ordinal: 37, Address: 0x1cb41)
  • CryptCATEnumerateAttr (Ordinal: 38, Address: 0x1d4d1)
  • CryptCATEnumerateCatAttr (Ordinal: 39, Address: 0x1ced1)
  • CryptCATEnumerateMember (Ordinal: 40, Address: 0x1d431)
  • CryptCATFreeSortedMemberInfo (Ordinal: 41, Address: 0x1d0d1)
  • CryptCATGetAttrInfo (Ordinal: 42, Address: 0x1d241)
  • CryptCATGetCatAttrInfo (Ordinal: 43, Address: 0x1ccc1)
  • CryptCATGetMemberInfo (Ordinal: 44, Address: 0x1cf41)
  • CryptCATHandleFromStore (Ordinal: 45, Address: 0x11261)
  • CryptCATOpen (Ordinal: 46, Address: 0x1ca61)
  • CryptCATPersistStore (Ordinal: 47, Address: 0x1cc91)
  • CryptCATPutAttrInfo (Ordinal: 48, Address: 0x1d2d1)
  • CryptCATPutCatAttrInfo (Ordinal: 49, Address: 0x1cd31)
  • CryptCATPutMemberInfo (Ordinal: 50, Address: 0x1d101)
  • CryptCATStoreFromHandle (Ordinal: 51, Address: 0x11261)
  • CryptSIPCreateIndirectData (Ordinal: 52, Address: 0x184c1)
  • CryptSIPGetCaps (Ordinal: 53, Address: 0x18631)
  • CryptSIPGetSealedDigest (Ordinal: 54, Address: 0x186a1)
  • CryptSIPGetSignedDataMsg (Ordinal: 55, Address: 0x18301)
  • CryptSIPPutSignedDataMsg (Ordinal: 56, Address: 0x183b1)
  • CryptSIPRemoveSignedDataMsg (Ordinal: 57, Address: 0x18441)
  • CryptSIPVerifyIndirectData (Ordinal: 58, Address: 0x18551)
  • DllRegisterServer (Ordinal: 59, Address: 0x114a1)
  • DllUnregisterServer (Ordinal: 60, Address: 0x114e1)
  • DriverCleanupPolicy (Ordinal: 61, Address: 0x27871)
  • DriverFinalPolicy (Ordinal: 62, Address: 0x27941)
  • DriverInitializePolicy (Ordinal: 63, Address: 0x276f1)
  • FindCertsByIssuer (Ordinal: 64, Address: 0x28751)
  • GetAuthenticodeSha256Hash (Ordinal: 65, Address: 0x260f1)
  • HTTPSFinalProv (Ordinal: 66, Address: 0x22aa1)
  • IsCatalogFile (Ordinal: 67, Address: 0x20d21)
  • MsCatConstructHashTag (Ordinal: 68, Address: 0x213e1)
  • MsCatFreeHashTag (Ordinal: 69, Address: 0x21451)
  • OfficeCleanupPolicy (Ordinal: 70, Address: 0x23b81)
  • OfficeInitializePolicy (Ordinal: 71, Address: 0x23b81)
  • OpenPersonalTrustDBDialog (Ordinal: 72, Address: 0x24541)
  • OpenPersonalTrustDBDialogEx (Ordinal: 73, Address: 0x24491)
  • SoftpubAuthenticode (Ordinal: 74, Address: 0x29681)
  • SoftpubCheckCert (Ordinal: 75, Address: 0x296a1)
  • SoftpubCleanup (Ordinal: 76, Address: 0x296c1)
  • SoftpubDllRegisterServer (Ordinal: 77, Address: 0x297c1)
  • SoftpubDllUnregisterServer (Ordinal: 78, Address: 0x29971)
  • SoftpubDumpStructure (Ordinal: 79, Address: 0x29aa1)
  • SoftpubInitialize (Ordinal: 80, Address: 0x2aa11)
  • SoftpubLoadMessage (Ordinal: 81, Address: 0x2ab91)
  • SoftpubLoadSignature (Ordinal: 82, Address: 0x22c41)
  • TrustDecode (Ordinal: 83, Address: 0x147f1)
  • TrustFindIssuerCertificate (Ordinal: 84, Address: 0x14371)
  • TrustFreeDecode (Ordinal: 85, Address: 0x14891)
  • TrustIsCertificateSelfSigned (Ordinal: 86, Address: 0x145a1)
  • TrustOpenStores (Ordinal: 87, Address: 0x144b1)
  • WTHelperCertCheckValidSignature (Ordinal: 88, Address: 0x16321)
  • WTHelperCertIsSelfSigned (Ordinal: 89, Address: 0xc031)
  • WTHelperCheckCertUsage (Ordinal: 90, Address: 0x16051)
  • WTHelperGetAgencyInfo (Ordinal: 91, Address: 0x15fc1)
  • WTHelperGetFileHandle (Ordinal: 92, Address: 0x15e11)
  • WTHelperGetFileHash (Ordinal: 93, Address: 0x14fc1)
  • WTHelperGetFileName (Ordinal: 94, Address: 0x15e41)
  • WTHelperGetKnownUsages (Ordinal: 95, Address: 0x162b1)
  • WTHelperGetProvCertFromChain (Ordinal: 96, Address: 0x15df1)
  • WTHelperGetProvPrivateDataFromChain (Ordinal: 97, Address: 0x15d61)
  • WTHelperGetProvSignerFromChain (Ordinal: 98, Address: 0x15db1)
  • WTHelperIsChainedToMicrosoft (Ordinal: 99, Address: 0x163d1)
  • WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 100, Address: 0x16341)
  • WTHelperIsInRootStore (Ordinal: 101, Address: 0x16171)
  • WTHelperOpenKnownStores (Ordinal: 102, Address: 0x15eb1)
  • WTHelperProvDataFromStateData (Ordinal: 103, Address: 0x11261)
  • WVTAsn1CatMemberInfo2Decode (Ordinal: 104, Address: 0x13231)
  • WVTAsn1CatMemberInfo2Encode (Ordinal: 105, Address: 0x131c1)
  • WVTAsn1CatMemberInfoDecode (Ordinal: 106, Address: 0x130f1)
  • WVTAsn1CatMemberInfoEncode (Ordinal: 107, Address: 0x13011)
  • WVTAsn1CatNameValueDecode (Ordinal: 108, Address: 0x13051)
  • WVTAsn1CatNameValueEncode (Ordinal: 109, Address: 0x12fd1)
  • WVTAsn1IntentToSealAttributeDecode (Ordinal: 110, Address: 0x13351)
  • WVTAsn1IntentToSealAttributeEncode (Ordinal: 111, Address: 0x132c1)
  • WVTAsn1SealingSignatureAttributeDecode (Ordinal: 112, Address: 0x133c1)
  • WVTAsn1SealingSignatureAttributeEncode (Ordinal: 113, Address: 0x132f1)
  • WVTAsn1SealingTimestampAttributeDecode (Ordinal: 114, Address: 0x13501)
  • WVTAsn1SealingTimestampAttributeEncode (Ordinal: 115, Address: 0x134c1)
  • WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 116, Address: 0x127c1)
  • WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 117, Address: 0x12791)
  • WVTAsn1SpcIndirectDataContentDecode (Ordinal: 118, Address: 0x12091)
  • WVTAsn1SpcIndirectDataContentEncode (Ordinal: 119, Address: 0x12011)
  • WVTAsn1SpcLinkDecode (Ordinal: 120, Address: 0x12b81)
  • WVTAsn1SpcLinkEncode (Ordinal: 121, Address: 0x12b51)
  • WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 122, Address: 0x12711)
  • WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 123, Address: 0x126f1)
  • WVTAsn1SpcPeImageDataDecode (Ordinal: 124, Address: 0x12ca1)
  • WVTAsn1SpcPeImageDataEncode (Ordinal: 125, Address: 0x12c21)
  • WVTAsn1SpcSigInfoDecode (Ordinal: 126, Address: 0x12e61)
  • WVTAsn1SpcSigInfoEncode (Ordinal: 127, Address: 0x12e11)
  • WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 128, Address: 0x123d1)
  • WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 129, Address: 0x12281)
  • WVTAsn1SpcSpOpusInfoDecode (Ordinal: 130, Address: 0x12a31)
  • WVTAsn1SpcSpOpusInfoEncode (Ordinal: 131, Address: 0x12981)
  • WVTAsn1SpcStatementTypeDecode (Ordinal: 132, Address: 0x128b1)
  • WVTAsn1SpcStatementTypeEncode (Ordinal: 133, Address: 0x12841)
  • WinVerifyTrust (Ordinal: 134, Address: 0x14f51)
  • WinVerifyTrustEx (Ordinal: 135, Address: 0x14e81)
  • WintrustAddActionID (Ordinal: 136, Address: 0x135d1)
  • WintrustAddDefaultForUsage (Ordinal: 137, Address: 0x14ab1)
  • WintrustCertificateTrust (Ordinal: 138, Address: 0xf9c1)
  • WintrustCryptSIPGetCaps (Ordinal: 139, Address: 0x16d01)
  • WintrustCryptSIPGetSealedDigest (Ordinal: 140, Address: 0x16d71)
  • WintrustCryptSIPLoad (Ordinal: 141, Address: 0x16cb1)
  • WintrustCryptSIPRetrieveSubjectGuid (Ordinal: 142, Address: 0x16c31)
  • WintrustGetDefaultForUsage (Ordinal: 143, Address: 0x14c71)
  • WintrustGetRegPolicyFlags (Ordinal: 144, Address: 0x14041)
  • WintrustLoadFunctionPointers (Ordinal: 145, Address: 0x13791)
  • WintrustRemoveActionID (Ordinal: 146, Address: 0x13721)
  • WintrustSetDefaultIncludePEPageHashes (Ordinal: 147, Address: 0x18d81)
  • WintrustSetRegPolicyFlags (Ordinal: 148, Address: 0x140c1)
  • mscat32DllRegisterServer (Ordinal: 149, Address: 0x19e91)
  • mscat32DllUnregisterServer (Ordinal: 150, Address: 0x19e91)
  • mssip32DllRegisterServer (Ordinal: 151, Address: 0x18a21)
  • mssip32DllUnregisterServer (Ordinal: 152, Address: 0x18b81)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAccessAllowedAceEx (Address: 0x4763c024)
  • AddAce (Address: 0x4763c014)
  • AllocateAndInitializeSid (Address: 0x4763c084)
  • ChangeServiceConfigA (Address: 0x4763c088)
  • CloseServiceHandle (Address: 0x4763c078)
  • ControlService (Address: 0x4763c08c)
  • ConvertStringSidToSidW (Address: 0x4763c010)
  • CopySid (Address: 0x4763c058)
  • CryptAcquireContextA (Address: 0x4763c0b0)
  • CryptAcquireContextW (Address: 0x4763c034)
  • CryptCreateHash (Address: 0x4763c040)
  • CryptDestroyHash (Address: 0x4763c048)
  • CryptGetHashParam (Address: 0x4763c04c)
  • CryptHashData (Address: 0x4763c044)
  • CryptReleaseContext (Address: 0x4763c0b4)
  • CryptSetProvParam (Address: 0x4763c030)
  • EqualSid (Address: 0x4763c074)
  • EventRegister (Address: 0x4763c0d8)
  • EventUnregister (Address: 0x4763c0dc)
  • EventWrite (Address: 0x4763c03c)
  • FreeSid (Address: 0x4763c094)
  • GetAce (Address: 0x4763c00c)
  • GetAclInformation (Address: 0x4763c008)
  • GetFileSecurityW (Address: 0x4763c018)
  • GetLengthSid (Address: 0x4763c060)
  • GetSecurityDescriptorDacl (Address: 0x4763c0e0)
  • GetSidIdentifierAuthority (Address: 0x4763c068)
  • GetSidSubAuthority (Address: 0x4763c054)
  • GetSidSubAuthorityCount (Address: 0x4763c050)
  • GetTokenInformation (Address: 0x4763c0a0)
  • InitializeAcl (Address: 0x4763c020)
  • InitializeSecurityDescriptor (Address: 0x4763c01c)
  • IsValidSid (Address: 0x4763c05c)
  • LookupAccountSidW (Address: 0x4763c028)
  • OpenProcessToken (Address: 0x4763c000)
  • OpenSCManagerW (Address: 0x4763c07c)
  • OpenServiceW (Address: 0x4763c09c)
  • OpenThreadToken (Address: 0x4763c064)
  • QueryServiceConfigA (Address: 0x4763c080)
  • QueryServiceStatus (Address: 0x4763c070)
  • RegCloseKey (Address: 0x4763c0c0)
  • RegCreateKeyExW (Address: 0x4763c0c8)
  • RegDeleteKeyExW (Address: 0x4763c0c4)
  • RegEnumKeyExA (Address: 0x4763c0ac)
  • RegEnumValueA (Address: 0x4763c038)
  • RegGetValueW (Address: 0x4763c06c)
  • RegOpenKeyExA (Address: 0x4763c0a8)
  • RegOpenKeyExW (Address: 0x4763c0d0)
  • RegQueryInfoKeyA (Address: 0x4763c0a4)
  • RegQueryValueExA (Address: 0x4763c0b8)
  • RegQueryValueExW (Address: 0x4763c0d4)
  • RegSetValueExA (Address: 0x4763c0bc)
  • RegSetValueExW (Address: 0x4763c0cc)
  • SetFileSecurityW (Address: 0x4763c004)
  • SetSecurityDescriptorDacl (Address: 0x4763c02c)
  • StartServiceA (Address: 0x4763c090)
  • StartServiceW (Address: 0x4763c098)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x4763c4f4)
  • BCryptCreateHash (Address: 0x4763c504)
  • BCryptDestroyHash (Address: 0x4763c4fc)
  • BCryptDestroyKey (Address: 0x4763c4f0)
  • BCryptFinishHash (Address: 0x4763c4f8)
  • BCryptGetProperty (Address: 0x4763c508)
  • BCryptHashData (Address: 0x4763c500)
  • BCryptOpenAlgorithmProvider (Address: 0x4763c510)
  • BCryptVerifySignature (Address: 0x4763c50c)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x4763c15c)
  • CertAddStoreToCollection (Address: 0x4763c1cc)
  • CertCloseStore (Address: 0x4763c1e0)
  • CertCompareCertificate (Address: 0x4763c198)
  • CertCompareCertificateName (Address: 0x4763c1c4)
  • CertCompareIntegerBlob (Address: 0x4763c234)
  • CertComparePublicKeyInfo (Address: 0x4763c1ec)
  • CertControlStore (Address: 0x4763c220)
  • CertCreateCertificateChainEngine (Address: 0x4763c1f0)
  • CertCreateCertificateContext (Address: 0x4763c17c)
  • CertCreateContext (Address: 0x4763c134)
  • CertCreateCTLContext (Address: 0x4763c170)
  • CertDeleteCertificateFromStore (Address: 0x4763c158)
  • CertDuplicateCertificateContext (Address: 0x4763c200)
  • CertDuplicateStore (Address: 0x4763c1fc)
  • CertEnumCertificatesInStore (Address: 0x4763c160)
  • CertFindAttribute (Address: 0x4763c118)
  • CertFindCertificateInStore (Address: 0x4763c0f0)
  • CertFindExtension (Address: 0x4763c1c8)
  • CertFindRDNAttr (Address: 0x4763c194)
  • CertFindSubjectInCTL (Address: 0x4763c168)
  • CertFindSubjectInSortedCTL (Address: 0x4763c128)
  • CertFreeCertificateChain (Address: 0x4763c1e4)
  • CertFreeCertificateChainEngine (Address: 0x4763c1d8)
  • CertFreeCertificateContext (Address: 0x4763c1f8)
  • CertFreeCTLContext (Address: 0x4763c1f4)
  • CertGetCertificateChain (Address: 0x4763c1d4)
  • CertGetCertificateContextProperty (Address: 0x4763c0f8)
  • CertGetEnhancedKeyUsage (Address: 0x4763c1d0)
  • CertGetIssuerCertificateFromStore (Address: 0x4763c228)
  • CertGetNameStringW (Address: 0x4763c174)
  • CertGetSubjectCertificateFromStore (Address: 0x4763c154)
  • CertOIDToAlgId (Address: 0x4763c0e8)
  • CertOpenStore (Address: 0x4763c1e8)
  • CertOpenSystemStoreA (Address: 0x4763c180)
  • CertRDNValueToStrW (Address: 0x4763c190)
  • CertSetCertificateContextProperty (Address: 0x4763c188)
  • CertVerifyCertificateChainPolicy (Address: 0x4763c0f4)
  • CertVerifySubjectCertificateContext (Address: 0x4763c238)
  • CertVerifyTimeValidity (Address: 0x4763c230)
  • CertVerifyValidityNesting (Address: 0x4763c22c)
  • CryptDecodeObject (Address: 0x4763c224)
  • CryptDecodeObjectEx (Address: 0x4763c1c0)
  • CryptEncodeObject (Address: 0x4763c114)
  • CryptEncodeObjectEx (Address: 0x4763c11c)
  • CryptEnumOIDInfo (Address: 0x4763c0fc)
  • CryptExportPublicKeyInfo (Address: 0x4763c184)
  • CryptFindOIDInfo (Address: 0x4763c110)
  • CryptHashCertificate2 (Address: 0x4763c18c)
  • CryptImportPublicKeyInfoEx2 (Address: 0x4763c150)
  • CryptInstallOIDFunctionAddress (Address: 0x4763c214)
  • CryptMemFree (Address: 0x4763c144)
  • CryptMsgClose (Address: 0x4763c13c)
  • CryptMsgControl (Address: 0x4763c148)
  • CryptMsgDuplicate (Address: 0x4763c138)
  • CryptMsgEncodeAndSignCTL (Address: 0x4763c19c)
  • CryptMsgGetParam (Address: 0x4763c14c)
  • CryptMsgOpenToDecode (Address: 0x4763c16c)
  • CryptMsgUpdate (Address: 0x4763c164)
  • CryptMsgVerifyCountersignatureEncodedEx (Address: 0x4763c140)
  • CryptQueryObject (Address: 0x4763c1dc)
  • CryptRegisterOIDFunction (Address: 0x4763c210)
  • CryptSIPAddProvider (Address: 0x4763c10c)
  • CryptSIPLoad (Address: 0x4763c104)
  • CryptSIPRemoveProvider (Address: 0x4763c108)
  • CryptSIPRetrieveSubjectGuid (Address: 0x4763c100)
  • CryptSIPRetrieveSubjectGuidForCatalogFile (Address: 0x4763c12c)
  • CryptStringToBinaryW (Address: 0x4763c124)
  • CryptUnregisterOIDFunction (Address: 0x4763c208)
  • CryptVerifyMessageSignature (Address: 0x4763c178)
  • I_CryptCreateLruCache (Address: 0x4763c1a8)
  • I_CryptCreateLruEntry (Address: 0x4763c1ac)
  • I_CryptFindLruEntryData (Address: 0x4763c1b4)
  • I_CryptFlushLruCache (Address: 0x4763c1a0)
  • I_CryptFreeLruCache (Address: 0x4763c1a4)
  • I_CryptGetAsn1Decoder (Address: 0x4763c21c)
  • I_CryptGetAsn1Encoder (Address: 0x4763c204)
  • I_CryptGetDefaultCryptProv (Address: 0x4763c120)
  • I_CryptGetTls (Address: 0x4763c130)
  • I_CryptInsertLruEntry (Address: 0x4763c1b0)
  • I_CryptInstallAsn1Module (Address: 0x4763c20c)
  • I_CryptReadTrustedPublisherDWORDValueFromRegistry (Address: 0x4763c0ec)
  • I_CryptReleaseLruEntry (Address: 0x4763c1b8)
  • I_CryptRemoveLruEntry (Address: 0x4763c1bc)
  • I_CryptUninstallAsn1Module (Address: 0x4763c218)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x4763c28c)
  • AcquireSRWLockShared (Address: 0x4763c254)
  • CloseHandle (Address: 0x4763c3a8)
  • CloseThreadpoolTimer (Address: 0x4763c290)
  • CompareFileTime (Address: 0x4763c344)
  • CreateDirectoryW (Address: 0x4763c324)
  • CreateEventA (Address: 0x4763c394)
  • CreateFileMappingA (Address: 0x4763c3c0)
  • CreateFileMappingW (Address: 0x4763c3a4)
  • CreateFileW (Address: 0x4763c2e0)
  • CreateMutexA (Address: 0x4763c398)
  • CreateMutexExW (Address: 0x4763c250)
  • CreateSemaphoreExW (Address: 0x4763c320)
  • CreateThreadpoolTimer (Address: 0x4763c244)
  • DebugBreak (Address: 0x4763c264)
  • DeleteCriticalSection (Address: 0x4763c338)
  • DisableThreadLibraryCalls (Address: 0x4763c278)
  • DuplicateHandle (Address: 0x4763c3ec)
  • EnterCriticalSection (Address: 0x4763c318)
  • ExpandEnvironmentStringsA (Address: 0x4763c300)
  • ExpandEnvironmentStringsW (Address: 0x4763c358)
  • FileTimeToSystemTime (Address: 0x4763c380)
  • FindClose (Address: 0x4763c3d0)
  • FindFirstFileW (Address: 0x4763c3c8)
  • FindNextFileW (Address: 0x4763c3cc)
  • FindResourceExA (Address: 0x4763c2b4)
  • FindResourceW (Address: 0x4763c3ac)
  • FlushViewOfFile (Address: 0x4763c360)
  • FormatMessageW (Address: 0x4763c2a0)
  • FreeLibrary (Address: 0x4763c280)
  • FreeResource (Address: 0x4763c2ac)
  • GetCurrentDirectoryW (Address: 0x4763c3e0)
  • GetCurrentProcess (Address: 0x4763c314)
  • GetCurrentProcessId (Address: 0x4763c258)
  • GetCurrentThread (Address: 0x4763c388)
  • GetCurrentThreadId (Address: 0x4763c2cc)
  • GetDateFormatA (Address: 0x4763c36c)
  • GetEnvironmentVariableA (Address: 0x4763c270)
  • GetFileAttributesExW (Address: 0x4763c2e4)
  • GetFileAttributesW (Address: 0x4763c3d4)
  • GetFileInformationByHandle (Address: 0x4763c3e8)
  • GetFileSize (Address: 0x4763c374)
  • GetFileSizeEx (Address: 0x4763c3b0)
  • GetLastError (Address: 0x4763c29c)
  • GetLocalTime (Address: 0x4763c370)
  • GetModuleFileNameA (Address: 0x4763c32c)
  • GetModuleFileNameW (Address: 0x4763c308)
  • GetModuleHandleA (Address: 0x4763c38c)
  • GetModuleHandleExA (Address: 0x4763c2b0)
  • GetModuleHandleExW (Address: 0x4763c2fc)
  • GetModuleHandleW (Address: 0x4763c260)
  • GetPrivateProfileStringW (Address: 0x4763c30c)
  • GetProcAddress (Address: 0x4763c24c)
  • GetProcessHeap (Address: 0x4763c25c)
  • GetSystemDirectoryW (Address: 0x4763c3d8)
  • GetSystemInfo (Address: 0x4763c3bc)
  • GetSystemTimeAsFileTime (Address: 0x4763c2e8)
  • GetTickCount64 (Address: 0x4763c3dc)
  • GetTimeFormatA (Address: 0x4763c368)
  • HeapAlloc (Address: 0x4763c248)
  • HeapFree (Address: 0x4763c31c)
  • InitializeCriticalSection (Address: 0x4763c33c)
  • InitializeCriticalSectionEx (Address: 0x4763c2f0)
  • IsDebuggerPresent (Address: 0x4763c268)
  • LeaveCriticalSection (Address: 0x4763c2f8)
  • LoadLibraryA (Address: 0x4763c2c0)
  • LoadLibraryExA (Address: 0x4763c2f4)
  • LoadLibraryExW (Address: 0x4763c3a0)
  • LoadLibraryW (Address: 0x4763c288)
  • LoadResource (Address: 0x4763c2bc)
  • LocalAlloc (Address: 0x4763c328)
  • LocalFree (Address: 0x4763c330)
  • LocalReAlloc (Address: 0x4763c378)
  • LockResource (Address: 0x4763c2b8)
  • lstrlenA (Address: 0x4763c304)
  • lstrlenW (Address: 0x4763c390)
  • MapViewOfFile (Address: 0x4763c3c4)
  • MultiByteToWideChar (Address: 0x4763c2c8)
  • OpenSemaphoreW (Address: 0x4763c26c)
  • OutputDebugStringA (Address: 0x4763c35c)
  • OutputDebugStringW (Address: 0x4763c294)
  • ReadFile (Address: 0x4763c2d0)
  • ReleaseMutex (Address: 0x4763c2c4)
  • ReleaseSemaphore (Address: 0x4763c310)
  • ReleaseSRWLockExclusive (Address: 0x4763c298)
  • ReleaseSRWLockShared (Address: 0x4763c240)
  • ResetEvent (Address: 0x4763c2a4)
  • SetEndOfFile (Address: 0x4763c364)
  • SetEvent (Address: 0x4763c274)
  • SetFileAttributesW (Address: 0x4763c2d8)
  • SetFilePointer (Address: 0x4763c2dc)
  • SetFilePointerEx (Address: 0x4763c3b4)
  • SetLastError (Address: 0x4763c340)
  • SetThreadpoolTimer (Address: 0x4763c2ec)
  • SetUnhandledExceptionFilter (Address: 0x4763c34c)
  • SizeofResource (Address: 0x4763c2a8)
  • Sleep (Address: 0x4763c334)
  • SystemTimeToFileTime (Address: 0x4763c37c)
  • TerminateProcess (Address: 0x4763c350)
  • UnhandledExceptionFilter (Address: 0x4763c348)
  • UnmapViewOfFile (Address: 0x4763c3b8)
  • VirtualUnlock (Address: 0x4763c3e4)
  • WaitForMultipleObjectsEx (Address: 0x4763c39c)
  • WaitForSingleObject (Address: 0x4763c2d4)
  • WaitForSingleObjectEx (Address: 0x4763c27c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x4763c384)
  • WideCharToMultiByte (Address: 0x4763c284)
  • WriteFile (Address: 0x4763c354)
MSASN1.dll
  • ASN1_CloseModule (Address: 0x4763c4a0)
  • ASN1_CreateModule (Address: 0x4763c40c)
  • ASN1_Decode (Address: 0x4763c3f8)
  • ASN1_Encode (Address: 0x4763c400)
  • ASN1_FreeDecoded (Address: 0x4763c41c)
  • ASN1_FreeEncoded (Address: 0x4763c3fc)
  • ASN1_SetEncoderOption (Address: 0x4763c3f4)
  • ASN1BERDecBitString (Address: 0x4763c4bc)
  • ASN1BERDecBool (Address: 0x4763c46c)
  • ASN1BERDecChar16String (Address: 0x4763c4ac)
  • ASN1BERDecCharString (Address: 0x4763c408)
  • ASN1BERDecEndOfContents (Address: 0x4763c468)
  • ASN1BERDecExplicitTag (Address: 0x4763c444)
  • ASN1BERDecNotEndOfContents (Address: 0x4763c460)
  • ASN1BERDecNull (Address: 0x4763c410)
  • ASN1BERDecObjectIdentifier2 (Address: 0x4763c4a4)
  • ASN1BERDecOctetString (Address: 0x4763c45c)
  • ASN1BERDecOctetString2 (Address: 0x4763c418)
  • ASN1BERDecOpenType2 (Address: 0x4763c430)
  • ASN1BERDecPeekTag (Address: 0x4763c448)
  • ASN1BERDecS32Val (Address: 0x4763c4b4)
  • ASN1BERDecU32Val (Address: 0x4763c414)
  • ASN1BERDecUTCTime (Address: 0x4763c424)
  • ASN1BEREncBitString (Address: 0x4763c454)
  • ASN1BEREncBool (Address: 0x4763c494)
  • ASN1BEREncChar16String (Address: 0x4763c420)
  • ASN1BEREncCharString (Address: 0x4763c488)
  • ASN1BEREncEndOfContents (Address: 0x4763c48c)
  • ASN1BEREncExplicitTag (Address: 0x4763c464)
  • ASN1BEREncNull (Address: 0x4763c498)
  • ASN1BEREncObjectIdentifier2 (Address: 0x4763c484)
  • ASN1BEREncOctetString (Address: 0x4763c49c)
  • ASN1BEREncOpenType (Address: 0x4763c4b0)
  • ASN1BEREncRemoveZeroBits (Address: 0x4763c434)
  • ASN1BEREncS32 (Address: 0x4763c47c)
  • ASN1BEREncU32 (Address: 0x4763c458)
  • ASN1bitstring_cmp (Address: 0x4763c438)
  • ASN1bitstring_free (Address: 0x4763c404)
  • ASN1CEREncBeginBlk (Address: 0x4763c428)
  • ASN1CEREncEndBlk (Address: 0x4763c42c)
  • ASN1CEREncFlushBlkElement (Address: 0x4763c480)
  • ASN1CEREncNewBlkElement (Address: 0x4763c490)
  • ASN1CEREncUTCTime (Address: 0x4763c450)
  • ASN1char16string_free (Address: 0x4763c44c)
  • ASN1charstring_free (Address: 0x4763c4b8)
  • ASN1DecRealloc (Address: 0x4763c474)
  • ASN1DecSetError (Address: 0x4763c440)
  • ASN1EncSetError (Address: 0x4763c478)
  • ASN1Free (Address: 0x4763c4a8)
  • ASN1objectidentifier_free (Address: 0x4763c470)
  • ASN1octetstring_free (Address: 0x4763c43c)
msvcrt.dll
  • __C_specific_handler (Address: 0x4763c58c)
  • __CxxFrameHandler3 (Address: 0x4763c52c)
  • __dllonexit (Address: 0x4763c55c)
  • _amsg_exit (Address: 0x4763c564)
  • _callnewh (Address: 0x4763c56c)
  • _errno (Address: 0x4763c594)
  • _initterm (Address: 0x4763c560)
  • _itow_s (Address: 0x4763c59c)
  • _lock (Address: 0x4763c520)
  • _ltoa (Address: 0x4763c528)
  • _memicmp (Address: 0x4763c540)
  • _onexit (Address: 0x4763c518)
  • _purecall (Address: 0x4763c5b0)
  • _stricmp (Address: 0x4763c544)
  • _unlock (Address: 0x4763c5bc)
  • _vsnprintf (Address: 0x4763c524)
  • _vsnwprintf (Address: 0x4763c5b8)
  • _wcsicmp (Address: 0x4763c5a0)
  • _wcsnicmp (Address: 0x4763c548)
  • _wtol (Address: 0x4763c54c)
  • _XcptFilter (Address: 0x4763c57c)
  • atol (Address: 0x4763c5a4)
  • bsearch (Address: 0x4763c578)
  • free (Address: 0x4763c590)
  • malloc (Address: 0x4763c570)
  • memcmp (Address: 0x4763c574)
  • memcpy (Address: 0x4763c568)
  • memcpy_s (Address: 0x4763c5b4)
  • memmove (Address: 0x4763c588)
  • memmove_s (Address: 0x4763c5ac)
  • memset (Address: 0x4763c584)
  • qsort (Address: 0x4763c534)
  • qsort_s (Address: 0x4763c554)
  • strcmp (Address: 0x4763c580)
  • strlen (Address: 0x4763c558)
  • towupper (Address: 0x4763c550)
  • wcscat_s (Address: 0x4763c598)
  • wcschr (Address: 0x4763c538)
  • wcscmp (Address: 0x4763c53c)
  • wcslen (Address: 0x4763c51c)
  • wcsrchr (Address: 0x4763c530)
  • wcstol (Address: 0x4763c5a8)
ntdll.dll
  • LdrResSearchResource (Address: 0x4763c5d4)
  • NtQuerySystemInformation (Address: 0x4763c5f0)
  • RtlAllocateHeap (Address: 0x4763c5d8)
  • RtlAppendUnicodeStringToString (Address: 0x4763c5c8)
  • RtlCaptureContext (Address: 0x4763c604)
  • RtlCompareUnicodeString (Address: 0x4763c5cc)
  • RtlCreateUnicodeString (Address: 0x4763c5e0)
  • RtlEqualUnicodeString (Address: 0x4763c5c4)
  • RtlFreeHeap (Address: 0x4763c5f8)
  • RtlFreeUnicodeString (Address: 0x4763c5ec)
  • RtlGetVersion (Address: 0x4763c5dc)
  • RtlImageNtHeaderEx (Address: 0x4763c5e4)
  • RtlInitUnicodeString (Address: 0x4763c5e8)
  • RtlLookupFunctionEntry (Address: 0x4763c600)
  • RtlNtStatusToDosError (Address: 0x4763c5f4)
  • RtlStringFromGUID (Address: 0x4763c5d0)
  • RtlVirtualUnwind (Address: 0x4763c5fc)
RPCRT4.dll
  • NdrClientCall2 (Address: 0x4763c4cc)
  • RpcBindingFree (Address: 0x4763c4c8)
  • RpcBindingFromStringBindingW (Address: 0x4763c4d4)
  • RpcBindingSetAuthInfoExW (Address: 0x4763c4d0)
  • RpcEpResolveBinding (Address: 0x4763c4c4)
  • RpcStringBindingComposeW (Address: 0x4763c4d8)
  • RpcStringFreeW (Address: 0x4763c4dc)
USER32.dll
  • GetDesktopWindow (Address: 0x4763c4e8)
  • MessageBoxA (Address: 0x4763c4e4)