wintrust.dll
Description: Microsoft Trust Verification APIs
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.22621.5040
Architecture: 32-bit
Operating System: Windows NT
SHA256: 7b34182f97911f2291ac0148e535a870
File Size: 288.6 KB
Uploaded At: Dec. 3, 2025, 2:37 a.m.
Views: 9
Exported Functions
- CryptCATVerifyMember (Ordinal: 1, Address: 0x1f7f0)
- CryptSIPGetInfo (Ordinal: 2, Address: 0x1a250)
- CryptSIPGetRegWorkingFlags (Ordinal: 3, Address: 0x1a240)
- GenericChainCertificateTrust (Ordinal: 4, Address: 0x255c0)
- GenericChainFinalProv (Ordinal: 5, Address: 0x25860)
- HTTPSCertificateTrust (Ordinal: 6, Address: 0x25e10)
- SetMessageDigestInfo (Ordinal: 7, Address: 0x27140)
- SoftpubDefCertInit (Ordinal: 8, Address: 0x27c50)
- SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x27e30)
- SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x27d20)
- WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0xbd80)
- AddPersonalTrustDBPages (Ordinal: 12, Address: 0x27e70)
- CatalogCompactHashDatabase (Ordinal: 13, Address: 0x1ba40)
- ConfigCiFinalPolicy (Ordinal: 14, Address: 0x2a8a0)
- ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x2a4d0)
- CryptCATAdminAcquireContext2 (Ordinal: 16, Address: 0x1fee0)
- CryptCATAdminAcquireContext (Ordinal: 17, Address: 0x1feb0)
- CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x20020)
- CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 19, Address: 0x20c70)
- CryptCATAdminCalcHashFromFileHandle (Ordinal: 20, Address: 0x20c20)
- CryptCATAdminEnumCatalogFromHash (Ordinal: 21, Address: 0x20780)
- CryptCATAdminPauseServiceForBackup (Ordinal: 22, Address: 0x20be0)
- CryptCATAdminReleaseCatalogContext (Ordinal: 23, Address: 0x20a50)
- CryptCATAdminReleaseContext (Ordinal: 24, Address: 0x1ffd0)
- CryptCATAdminRemoveCatalog (Ordinal: 25, Address: 0x20300)
- CryptCATAdminResolveCatalogPath (Ordinal: 26, Address: 0x20ad0)
- CryptCATAllocSortedMemberInfo (Ordinal: 27, Address: 0x1f5c0)
- CryptCATCDFClose (Ordinal: 28, Address: 0x21ba0)
- CryptCATCDFEnumAttributes (Ordinal: 29, Address: 0x226d0)
- CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 30, Address: 0x22700)
- CryptCATCDFEnumCatAttributes (Ordinal: 31, Address: 0x21de0)
- CryptCATCDFEnumMembers (Ordinal: 32, Address: 0x223f0)
- CryptCATCDFEnumMembersByCDFTag (Ordinal: 33, Address: 0x22480)
- CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 34, Address: 0x22440)
- CryptCATCDFOpen (Ordinal: 35, Address: 0x216b0)
- CryptCATCatalogInfoFromContext (Ordinal: 36, Address: 0x209b0)
- CryptCATClose (Ordinal: 37, Address: 0x1f080)
- CryptCATEnumerateAttr (Ordinal: 38, Address: 0x1faf0)
- CryptCATEnumerateCatAttr (Ordinal: 39, Address: 0x1f4a0)
- CryptCATEnumerateMember (Ordinal: 40, Address: 0x1fa30)
- CryptCATFreeSortedMemberInfo (Ordinal: 41, Address: 0x1f680)
- CryptCATGetAttrInfo (Ordinal: 42, Address: 0x1f840)
- CryptCATGetCatAttrInfo (Ordinal: 43, Address: 0x1f210)
- CryptCATGetMemberInfo (Ordinal: 44, Address: 0x1f510)
- CryptCATHandleFromStore (Ordinal: 45, Address: 0x16e00)
- CryptCATOpen (Ordinal: 46, Address: 0x1ef40)
- CryptCATPersistStore (Ordinal: 47, Address: 0x1f1d0)
- CryptCATPutAttrInfo (Ordinal: 48, Address: 0x1f8c0)
- CryptCATPutCatAttrInfo (Ordinal: 49, Address: 0x1f280)
- CryptCATPutMemberInfo (Ordinal: 50, Address: 0x1f6c0)
- CryptCATStoreFromHandle (Ordinal: 51, Address: 0x16e00)
- CryptSIPCreateIndirectData (Ordinal: 52, Address: 0x19990)
- CryptSIPGetCaps (Ordinal: 53, Address: 0x19b00)
- CryptSIPGetSealedDigest (Ordinal: 54, Address: 0x19b80)
- CryptSIPGetSignedDataMsg (Ordinal: 55, Address: 0x197e0)
- CryptSIPPutSignedDataMsg (Ordinal: 56, Address: 0x19890)
- CryptSIPRemoveSignedDataMsg (Ordinal: 57, Address: 0x19920)
- CryptSIPVerifyIndirectData (Ordinal: 58, Address: 0x19a20)
- DllRegisterServer (Ordinal: 59, Address: 0x117e0)
- DllUnregisterServer (Ordinal: 60, Address: 0x11820)
- DriverCleanupPolicy (Ordinal: 61, Address: 0x2be60)
- DriverFinalPolicy (Ordinal: 62, Address: 0x2bf80)
- DriverInitializePolicy (Ordinal: 63, Address: 0x2bca0)
- FindCertsByIssuer (Ordinal: 64, Address: 0x2d160)
- GetAuthenticodeSha256Hash (Ordinal: 65, Address: 0x29f20)
- HTTPSFinalProv (Ordinal: 66, Address: 0x26060)
- IsCatalogFile (Ordinal: 67, Address: 0x23ea0)
- MsCatConstructHashTag (Ordinal: 68, Address: 0x245d0)
- MsCatFreeHashTag (Ordinal: 69, Address: 0x24660)
- OfficeCleanupPolicy (Ordinal: 70, Address: 0x2d4f0)
- OfficeInitializePolicy (Ordinal: 71, Address: 0x2d4f0)
- OpenPersonalTrustDBDialog (Ordinal: 72, Address: 0x27f50)
- OpenPersonalTrustDBDialogEx (Ordinal: 73, Address: 0x27e90)
- SoftpubAuthenticode (Ordinal: 74, Address: 0x2e180)
- SoftpubCheckCert (Ordinal: 75, Address: 0x2e1b0)
- SoftpubCleanup (Ordinal: 76, Address: 0x2e1d0)
- SoftpubDllRegisterServer (Ordinal: 77, Address: 0x2e310)
- SoftpubDllUnregisterServer (Ordinal: 78, Address: 0x2e540)
- SoftpubDumpStructure (Ordinal: 79, Address: 0x2e6a0)
- SoftpubInitialize (Ordinal: 80, Address: 0x2f870)
- SoftpubLoadMessage (Ordinal: 81, Address: 0x2fa10)
- SoftpubLoadSignature (Ordinal: 82, Address: 0x26240)
- TrustDecode (Ordinal: 83, Address: 0x14fb0)
- TrustFindIssuerCertificate (Ordinal: 84, Address: 0x14aa0)
- TrustFreeDecode (Ordinal: 85, Address: 0x15050)
- TrustIsCertificateSelfSigned (Ordinal: 86, Address: 0x14d40)
- TrustOpenStores (Ordinal: 87, Address: 0x14c20)
- WTHelperCertCheckValidSignature (Ordinal: 88, Address: 0x16e20)
- WTHelperCertIsSelfSigned (Ordinal: 89, Address: 0xbc50)
- WTHelperCheckCertUsage (Ordinal: 90, Address: 0x16a80)
- WTHelperGetAgencyInfo (Ordinal: 91, Address: 0x169f0)
- WTHelperGetFileHandle (Ordinal: 92, Address: 0x167f0)
- WTHelperGetFileHash (Ordinal: 93, Address: 0x15870)
- WTHelperGetFileName (Ordinal: 94, Address: 0x16830)
- WTHelperGetKnownUsages (Ordinal: 95, Address: 0x16d80)
- WTHelperGetProvCertFromChain (Ordinal: 96, Address: 0x167c0)
- WTHelperGetProvPrivateDataFromChain (Ordinal: 97, Address: 0x16720)
- WTHelperGetProvSignerFromChain (Ordinal: 98, Address: 0x16780)
- WTHelperIsChainedToMicrosoft (Ordinal: 99, Address: 0x16ee0)
- WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 100, Address: 0x16e50)
- WTHelperIsInRootStore (Ordinal: 101, Address: 0x16be0)
- WTHelperOpenKnownStores (Ordinal: 102, Address: 0x168c0)
- WTHelperProvDataFromStateData (Ordinal: 103, Address: 0x16e00)
- WVTAsn1CatMemberInfo2Decode (Ordinal: 104, Address: 0x134a0)
- WVTAsn1CatMemberInfo2Encode (Ordinal: 105, Address: 0x13400)
- WVTAsn1CatMemberInfoDecode (Ordinal: 106, Address: 0x13350)
- WVTAsn1CatMemberInfoEncode (Ordinal: 107, Address: 0x13230)
- WVTAsn1CatNameValueDecode (Ordinal: 108, Address: 0x13280)
- WVTAsn1CatNameValueEncode (Ordinal: 109, Address: 0x131d0)
- WVTAsn1IntentToSealAttributeDecode (Ordinal: 110, Address: 0x13610)
- WVTAsn1IntentToSealAttributeEncode (Ordinal: 111, Address: 0x13540)
- WVTAsn1SealingSignatureAttributeDecode (Ordinal: 112, Address: 0x136f0)
- WVTAsn1SealingSignatureAttributeEncode (Ordinal: 113, Address: 0x13570)
- WVTAsn1SealingTimestampAttributeDecode (Ordinal: 114, Address: 0x137e0)
- WVTAsn1SealingTimestampAttributeEncode (Ordinal: 115, Address: 0x13790)
- WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 116, Address: 0x12aa0)
- WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 117, Address: 0x12a70)
- WVTAsn1SpcIndirectDataContentDecode (Ordinal: 118, Address: 0x12470)
- WVTAsn1SpcIndirectDataContentEncode (Ordinal: 119, Address: 0x123a0)
- WVTAsn1SpcLinkDecode (Ordinal: 120, Address: 0x12ed0)
- WVTAsn1SpcLinkEncode (Ordinal: 121, Address: 0x12e90)
- WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 122, Address: 0x129f0)
- WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 123, Address: 0x129c0)
- WVTAsn1SpcPeImageDataDecode (Ordinal: 124, Address: 0x13000)
- WVTAsn1SpcPeImageDataEncode (Ordinal: 125, Address: 0x12f70)
- WVTAsn1SpcSigInfoDecode (Ordinal: 126, Address: 0x13140)
- WVTAsn1SpcSigInfoEncode (Ordinal: 127, Address: 0x130e0)
- WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 128, Address: 0x127d0)
- WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 129, Address: 0x12620)
- WVTAsn1SpcSpOpusInfoDecode (Ordinal: 130, Address: 0x12d90)
- WVTAsn1SpcSpOpusInfoEncode (Ordinal: 131, Address: 0x12cc0)
- WVTAsn1SpcStatementTypeDecode (Ordinal: 132, Address: 0x12bd0)
- WVTAsn1SpcStatementTypeEncode (Ordinal: 133, Address: 0x12b30)
- WinVerifyTrust (Ordinal: 134, Address: 0x15810)
- WinVerifyTrustEx (Ordinal: 135, Address: 0x15750)
- WintrustAddActionID (Ordinal: 136, Address: 0x138b0)
- WintrustAddDefaultForUsage (Ordinal: 137, Address: 0x152b0)
- WintrustCertificateTrust (Ordinal: 138, Address: 0xf890)
- WintrustCryptSIPGetCaps (Ordinal: 139, Address: 0x17b00)
- WintrustCryptSIPGetSealedDigest (Ordinal: 140, Address: 0x17b80)
- WintrustCryptSIPLoad (Ordinal: 141, Address: 0x17aa0)
- WintrustCryptSIPRetrieveSubjectGuid (Ordinal: 142, Address: 0x17a00)
- WintrustGetDefaultForUsage (Ordinal: 143, Address: 0x154c0)
- WintrustGetRegPolicyFlags (Ordinal: 144, Address: 0x14730)
- WintrustLoadFunctionPointers (Ordinal: 145, Address: 0x13ab0)
- WintrustRemoveActionID (Ordinal: 146, Address: 0x13a30)
- WintrustSetDefaultIncludePEPageHashes (Ordinal: 147, Address: 0x1a380)
- WintrustSetRegPolicyFlags (Ordinal: 148, Address: 0x147c0)
- mscat32DllRegisterServer (Ordinal: 149, Address: 0x1bd50)
- mscat32DllUnregisterServer (Ordinal: 150, Address: 0x1bd50)
- mssip32DllRegisterServer (Ordinal: 151, Address: 0x19ec0)
- mssip32DllUnregisterServer (Ordinal: 152, Address: 0x1a100)
Imported DLLs & Functions
ADVAPI32.dll
- AddAccessAllowedAceEx (Address: 0x47640020)
- AddAce (Address: 0x47640010)
- AllocateAndInitializeSid (Address: 0x47640074)
- ChangeServiceConfigA (Address: 0x47640078)
- CloseServiceHandle (Address: 0x47640068)
- ControlService (Address: 0x4764007c)
- ConvertStringSidToSidW (Address: 0x47640008)
- CopySid (Address: 0x4764003c)
- CryptAcquireContextA (Address: 0x476400a4)
- CryptAcquireContextW (Address: 0x476400dc)
- CryptCreateHash (Address: 0x4764000c)
- CryptDestroyHash (Address: 0x4764002c)
- CryptGetHashParam (Address: 0x47640030)
- CryptHashData (Address: 0x47640028)
- CryptReleaseContext (Address: 0x476400ac)
- CryptSetProvParam (Address: 0x476400e0)
- EqualSid (Address: 0x47640064)
- EventRegister (Address: 0x476400d0)
- EventUnregister (Address: 0x476400d4)
- EventWrite (Address: 0x476400a8)
- FreeSid (Address: 0x47640088)
- GetAce (Address: 0x47640004)
- GetAclInformation (Address: 0x47640000)
- GetFileSecurityW (Address: 0x47640014)
- GetLengthSid (Address: 0x47640044)
- GetSecurityDescriptorDacl (Address: 0x4764004c)
- GetSidIdentifierAuthority (Address: 0x47640058)
- GetSidSubAuthority (Address: 0x47640038)
- GetSidSubAuthorityCount (Address: 0x47640034)
- GetTokenInformation (Address: 0x47640094)
- InitializeAcl (Address: 0x4764001c)
- InitializeSecurityDescriptor (Address: 0x47640018)
- IsValidSid (Address: 0x47640040)
- LookupAccountSidW (Address: 0x47640024)
- OpenProcessToken (Address: 0x47640084)
- OpenSCManagerW (Address: 0x4764006c)
- OpenServiceW (Address: 0x47640090)
- OpenThreadToken (Address: 0x47640054)
- QueryServiceConfigA (Address: 0x47640070)
- QueryServiceStatus (Address: 0x47640060)
- RegCloseKey (Address: 0x476400b8)
- RegCreateKeyExW (Address: 0x476400c0)
- RegDeleteKeyExW (Address: 0x476400bc)
- RegEnumKeyExA (Address: 0x476400a0)
- RegEnumValueA (Address: 0x476400d8)
- RegGetValueW (Address: 0x4764005c)
- RegOpenKeyExA (Address: 0x4764009c)
- RegOpenKeyExW (Address: 0x476400c8)
- RegQueryInfoKeyA (Address: 0x47640098)
- RegQueryValueExA (Address: 0x476400b0)
- RegQueryValueExW (Address: 0x476400cc)
- RegSetValueExA (Address: 0x476400b4)
- RegSetValueExW (Address: 0x476400c4)
- SetFileSecurityW (Address: 0x47640048)
- SetSecurityDescriptorDacl (Address: 0x47640050)
- StartServiceA (Address: 0x47640080)
- StartServiceW (Address: 0x4764008c)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x47640518)
- BCryptCreateHash (Address: 0x47640504)
- BCryptDestroyHash (Address: 0x476404fc)
- BCryptDestroyKey (Address: 0x47640508)
- BCryptFinishHash (Address: 0x476404f8)
- BCryptGetProperty (Address: 0x47640510)
- BCryptHashData (Address: 0x47640500)
- BCryptOpenAlgorithmProvider (Address: 0x47640514)
- BCryptVerifySignature (Address: 0x4764050c)
CRYPT32.dll
- CertAddCertificateContextToStore (Address: 0x4764015c)
- CertAddStoreToCollection (Address: 0x476401d8)
- CertCloseStore (Address: 0x476401ec)
- CertCompareCertificate (Address: 0x47640198)
- CertCompareCertificateName (Address: 0x476401d0)
- CertCompareIntegerBlob (Address: 0x476401b4)
- CertComparePublicKeyInfo (Address: 0x476401f8)
- CertControlStore (Address: 0x47640230)
- CertCreateCertificateChainEngine (Address: 0x476401fc)
- CertCreateCertificateContext (Address: 0x4764017c)
- CertCreateContext (Address: 0x47640134)
- CertCreateCTLContext (Address: 0x47640170)
- CertDeleteCertificateFromStore (Address: 0x47640158)
- CertDuplicateCertificateContext (Address: 0x47640210)
- CertDuplicateStore (Address: 0x4764020c)
- CertEnumCertificatesInStore (Address: 0x47640160)
- CertFindAttribute (Address: 0x47640118)
- CertFindCertificateInStore (Address: 0x476400f0)
- CertFindExtension (Address: 0x476401d4)
- CertFindRDNAttr (Address: 0x47640194)
- CertFindSubjectInCTL (Address: 0x47640168)
- CertFindSubjectInSortedCTL (Address: 0x47640128)
- CertFreeCertificateChain (Address: 0x476401f0)
- CertFreeCertificateChainEngine (Address: 0x476401e4)
- CertFreeCertificateContext (Address: 0x47640208)
- CertFreeCTLContext (Address: 0x47640200)
- CertGetCertificateChain (Address: 0x476401e0)
- CertGetCertificateContextProperty (Address: 0x476400f8)
- CertGetEnhancedKeyUsage (Address: 0x476401dc)
- CertGetIssuerCertificateFromStore (Address: 0x47640204)
- CertGetNameStringW (Address: 0x47640174)
- CertGetSubjectCertificateFromStore (Address: 0x47640154)
- CertOIDToAlgId (Address: 0x476400e8)
- CertOpenStore (Address: 0x476401f4)
- CertOpenSystemStoreA (Address: 0x47640180)
- CertRDNValueToStrW (Address: 0x47640190)
- CertSetCertificateContextProperty (Address: 0x47640188)
- CertVerifyCertificateChainPolicy (Address: 0x476400f4)
- CertVerifySubjectCertificateContext (Address: 0x476401a0)
- CertVerifyTimeValidity (Address: 0x476401b8)
- CertVerifyValidityNesting (Address: 0x476401bc)
- CryptDecodeObject (Address: 0x47640234)
- CryptDecodeObjectEx (Address: 0x476401cc)
- CryptEncodeObject (Address: 0x47640114)
- CryptEncodeObjectEx (Address: 0x4764011c)
- CryptEnumOIDInfo (Address: 0x476400fc)
- CryptExportPublicKeyInfo (Address: 0x47640184)
- CryptFindOIDInfo (Address: 0x47640110)
- CryptHashCertificate2 (Address: 0x4764018c)
- CryptImportPublicKeyInfoEx2 (Address: 0x47640150)
- CryptInstallOIDFunctionAddress (Address: 0x47640224)
- CryptMemFree (Address: 0x47640144)
- CryptMsgClose (Address: 0x476401a8)
- CryptMsgControl (Address: 0x47640148)
- CryptMsgDuplicate (Address: 0x47640138)
- CryptMsgEncodeAndSignCTL (Address: 0x4764013c)
- CryptMsgGetParam (Address: 0x4764014c)
- CryptMsgOpenToDecode (Address: 0x4764016c)
- CryptMsgUpdate (Address: 0x47640164)
- CryptMsgVerifyCountersignatureEncodedEx (Address: 0x47640140)
- CryptQueryObject (Address: 0x476401e8)
- CryptRegisterOIDFunction (Address: 0x47640220)
- CryptSIPAddProvider (Address: 0x4764010c)
- CryptSIPLoad (Address: 0x47640104)
- CryptSIPRemoveProvider (Address: 0x47640108)
- CryptSIPRetrieveSubjectGuid (Address: 0x47640100)
- CryptSIPRetrieveSubjectGuidForCatalogFile (Address: 0x4764012c)
- CryptStringToBinaryW (Address: 0x47640124)
- CryptUnregisterOIDFunction (Address: 0x47640218)
- CryptVerifyMessageSignature (Address: 0x47640178)
- I_CryptCreateLruCache (Address: 0x476401a4)
- I_CryptCreateLruEntry (Address: 0x476401ac)
- I_CryptFindLruEntryData (Address: 0x476401c0)
- I_CryptFlushLruCache (Address: 0x47640238)
- I_CryptFreeLruCache (Address: 0x4764019c)
- I_CryptGetAsn1Decoder (Address: 0x4764022c)
- I_CryptGetAsn1Encoder (Address: 0x47640214)
- I_CryptGetDefaultCryptProv (Address: 0x47640120)
- I_CryptGetTls (Address: 0x47640130)
- I_CryptInsertLruEntry (Address: 0x476401b0)
- I_CryptInstallAsn1Module (Address: 0x4764021c)
- I_CryptReadTrustedPublisherDWORDValueFromRegistry (Address: 0x476400ec)
- I_CryptReleaseLruEntry (Address: 0x476401c4)
- I_CryptRemoveLruEntry (Address: 0x476401c8)
- I_CryptUninstallAsn1Module (Address: 0x47640228)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x4764028c)
- AcquireSRWLockShared (Address: 0x47640248)
- CloseHandle (Address: 0x47640280)
- CloseThreadpoolTimer (Address: 0x47640290)
- CompareFileTime (Address: 0x47640334)
- CreateDirectoryW (Address: 0x476403a4)
- CreateEventA (Address: 0x47640398)
- CreateFileMappingA (Address: 0x476403bc)
- CreateFileMappingW (Address: 0x47640318)
- CreateFileW (Address: 0x47640384)
- CreateMutexA (Address: 0x4764039c)
- CreateMutexExW (Address: 0x47640244)
- CreateSemaphoreExW (Address: 0x47640314)
- CreateThreadpoolTimer (Address: 0x4764038c)
- DebugBreak (Address: 0x47640258)
- DeleteCriticalSection (Address: 0x47640328)
- DisableThreadLibraryCalls (Address: 0x4764026c)
- DuplicateHandle (Address: 0x476403e8)
- EnterCriticalSection (Address: 0x4764030c)
- ExpandEnvironmentStringsA (Address: 0x476402f0)
- ExpandEnvironmentStringsW (Address: 0x4764035c)
- FileTimeToSystemTime (Address: 0x47640380)
- FindClose (Address: 0x476403cc)
- FindFirstFileW (Address: 0x476403c4)
- FindNextFileW (Address: 0x476403c8)
- FindResourceExA (Address: 0x476402a8)
- FindResourceW (Address: 0x476403ec)
- FlushViewOfFile (Address: 0x47640394)
- FormatMessageW (Address: 0x476402c8)
- FreeLibrary (Address: 0x47640274)
- FreeResource (Address: 0x476402a0)
- GetCurrentDirectoryW (Address: 0x476403dc)
- GetCurrentProcess (Address: 0x47640304)
- GetCurrentProcessId (Address: 0x4764024c)
- GetCurrentThread (Address: 0x47640390)
- GetCurrentThreadId (Address: 0x476403f0)
- GetDateFormatA (Address: 0x4764036c)
- GetEnvironmentVariableA (Address: 0x47640264)
- GetFileAttributesExW (Address: 0x476402d4)
- GetFileAttributesW (Address: 0x476403d0)
- GetFileInformationByHandle (Address: 0x476403e4)
- GetFileSize (Address: 0x47640374)
- GetFileSizeEx (Address: 0x476403ac)
- GetLastError (Address: 0x476402c0)
- GetLocalTime (Address: 0x47640370)
- GetModuleFileNameA (Address: 0x4764031c)
- GetModuleFileNameW (Address: 0x476402f8)
- GetModuleHandleA (Address: 0x47640340)
- GetModuleHandleExA (Address: 0x476402a4)
- GetModuleHandleExW (Address: 0x47640300)
- GetModuleHandleW (Address: 0x47640254)
- GetPrivateProfileStringW (Address: 0x476402fc)
- GetProcAddress (Address: 0x47640240)
- GetProcessHeap (Address: 0x47640250)
- GetSystemDirectoryW (Address: 0x476403d4)
- GetSystemInfo (Address: 0x476403b8)
- GetSystemTimeAsFileTime (Address: 0x476402d8)
- GetTickCount (Address: 0x47640354)
- GetTickCount64 (Address: 0x476403d8)
- GetTimeFormatA (Address: 0x47640368)
- HeapAlloc (Address: 0x47640388)
- HeapFree (Address: 0x47640310)
- InitializeCriticalSection (Address: 0x4764032c)
- InitializeCriticalSectionEx (Address: 0x476402e8)
- IsDebuggerPresent (Address: 0x4764025c)
- LeaveCriticalSection (Address: 0x476402ec)
- LoadLibraryA (Address: 0x476402b4)
- LoadLibraryExA (Address: 0x476402e4)
- LoadLibraryExW (Address: 0x47640338)
- LoadLibraryW (Address: 0x4764027c)
- LoadResource (Address: 0x476402b0)
- LocalAlloc (Address: 0x476403f4)
- LocalFree (Address: 0x47640320)
- LocalReAlloc (Address: 0x47640378)
- LockResource (Address: 0x476402ac)
- lstrlenA (Address: 0x476402f4)
- lstrlenW (Address: 0x4764033c)
- MapViewOfFile (Address: 0x476403c0)
- MultiByteToWideChar (Address: 0x476402bc)
- OpenSemaphoreW (Address: 0x47640284)
- OutputDebugStringA (Address: 0x47640360)
- OutputDebugStringW (Address: 0x47640294)
- QueryPerformanceCounter (Address: 0x47640350)
- ReadFile (Address: 0x476402c4)
- ReleaseMutex (Address: 0x476402cc)
- ReleaseSemaphore (Address: 0x47640308)
- ReleaseSRWLockExclusive (Address: 0x476402b8)
- ReleaseSRWLockShared (Address: 0x47640260)
- ResetEvent (Address: 0x47640298)
- SetEndOfFile (Address: 0x47640364)
- SetEvent (Address: 0x47640268)
- SetFileAttributesW (Address: 0x476403a8)
- SetFilePointer (Address: 0x476402d0)
- SetFilePointerEx (Address: 0x476403b0)
- SetLastError (Address: 0x47640330)
- SetThreadpoolTimer (Address: 0x47640270)
- SetUnhandledExceptionFilter (Address: 0x47640348)
- SizeofResource (Address: 0x4764029c)
- Sleep (Address: 0x47640324)
- SystemTimeToFileTime (Address: 0x4764037c)
- TerminateProcess (Address: 0x4764034c)
- UnhandledExceptionFilter (Address: 0x47640344)
- UnmapViewOfFile (Address: 0x476403b4)
- VirtualUnlock (Address: 0x476403e0)
- WaitForMultipleObjectsEx (Address: 0x476403a0)
- WaitForSingleObject (Address: 0x476402dc)
- WaitForSingleObjectEx (Address: 0x47640288)
- WaitForThreadpoolTimerCallbacks (Address: 0x476402e0)
- WideCharToMultiByte (Address: 0x47640278)
- WriteFile (Address: 0x47640358)
MSASN1.dll
- ASN1_CloseModule (Address: 0x4764049c)
- ASN1_CreateModule (Address: 0x47640414)
- ASN1_Decode (Address: 0x47640400)
- ASN1_Encode (Address: 0x47640418)
- ASN1_FreeDecoded (Address: 0x47640408)
- ASN1_FreeEncoded (Address: 0x47640404)
- ASN1_SetEncoderOption (Address: 0x476403fc)
- ASN1BERDecBitString (Address: 0x476404b8)
- ASN1BERDecBool (Address: 0x47640468)
- ASN1BERDecChar16String (Address: 0x476404a8)
- ASN1BERDecCharString (Address: 0x47640410)
- ASN1BERDecEndOfContents (Address: 0x47640464)
- ASN1BERDecExplicitTag (Address: 0x47640440)
- ASN1BERDecNotEndOfContents (Address: 0x4764045c)
- ASN1BERDecNull (Address: 0x4764041c)
- ASN1BERDecObjectIdentifier2 (Address: 0x476404a0)
- ASN1BERDecOctetString (Address: 0x47640458)
- ASN1BERDecOctetString2 (Address: 0x476404c4)
- ASN1BERDecOpenType2 (Address: 0x4764042c)
- ASN1BERDecPeekTag (Address: 0x47640444)
- ASN1BERDecS32Val (Address: 0x476404b0)
- ASN1BERDecU32Val (Address: 0x47640420)
- ASN1BERDecUTCTime (Address: 0x476404bc)
- ASN1BEREncBitString (Address: 0x47640450)
- ASN1BEREncBool (Address: 0x47640490)
- ASN1BEREncChar16String (Address: 0x476404c0)
- ASN1BEREncCharString (Address: 0x47640484)
- ASN1BEREncEndOfContents (Address: 0x47640488)
- ASN1BEREncExplicitTag (Address: 0x47640460)
- ASN1BEREncNull (Address: 0x47640494)
- ASN1BEREncObjectIdentifier2 (Address: 0x47640480)
- ASN1BEREncOctetString (Address: 0x47640498)
- ASN1BEREncOpenType (Address: 0x476404ac)
- ASN1BEREncRemoveZeroBits (Address: 0x47640430)
- ASN1BEREncS32 (Address: 0x47640478)
- ASN1BEREncU32 (Address: 0x47640454)
- ASN1bitstring_cmp (Address: 0x47640434)
- ASN1bitstring_free (Address: 0x4764040c)
- ASN1CEREncBeginBlk (Address: 0x47640424)
- ASN1CEREncEndBlk (Address: 0x47640428)
- ASN1CEREncFlushBlkElement (Address: 0x4764047c)
- ASN1CEREncNewBlkElement (Address: 0x4764048c)
- ASN1CEREncUTCTime (Address: 0x4764044c)
- ASN1char16string_free (Address: 0x47640448)
- ASN1charstring_free (Address: 0x476404b4)
- ASN1DecRealloc (Address: 0x47640470)
- ASN1DecSetError (Address: 0x4764043c)
- ASN1EncSetError (Address: 0x47640474)
- ASN1Free (Address: 0x476404a4)
- ASN1objectidentifier_free (Address: 0x4764046c)
- ASN1octetstring_free (Address: 0x47640438)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x47640528)
- __dllonexit (Address: 0x47640568)
- _amsg_exit (Address: 0x4764057c)
- _callnewh (Address: 0x47640584)
- _errno (Address: 0x47640590)
- _except_handler4_common (Address: 0x47640574)
- _initterm (Address: 0x47640578)
- _itow_s (Address: 0x47640598)
- _lock (Address: 0x47640570)
- _ltoa (Address: 0x47640524)
- _memicmp (Address: 0x4764053c)
- _onexit (Address: 0x47640564)
- _purecall (Address: 0x476405a8)
- _stricmp (Address: 0x47640540)
- _unlock (Address: 0x4764056c)
- _vsnprintf (Address: 0x47640520)
- _vsnwprintf (Address: 0x476405b0)
- _wcsicmp (Address: 0x4764059c)
- _wcsnicmp (Address: 0x47640544)
- _wtol (Address: 0x47640548)
- _XcptFilter (Address: 0x47640580)
- atol (Address: 0x476405a0)
- bsearch (Address: 0x47640530)
- free (Address: 0x4764058c)
- malloc (Address: 0x47640588)
- memcmp (Address: 0x47640558)
- memcpy (Address: 0x4764055c)
- memcpy_s (Address: 0x476405ac)
- memmove (Address: 0x47640560)
- memmove_s (Address: 0x476405a4)
- memset (Address: 0x476405b4)
- qsort (Address: 0x47640554)
- qsort_s (Address: 0x47640550)
- towupper (Address: 0x4764054c)
- wcscat_s (Address: 0x47640594)
- wcschr (Address: 0x47640534)
- wcsrchr (Address: 0x4764052c)
- wcstol (Address: 0x47640538)
ntdll.dll
- LdrResSearchResource (Address: 0x476405f0)
- NtQuerySystemInformation (Address: 0x476405e4)
- RtlAllocateHeap (Address: 0x476405cc)
- RtlAppendUnicodeStringToString (Address: 0x476405c0)
- RtlCompareUnicodeString (Address: 0x476405c4)
- RtlCreateUnicodeString (Address: 0x476405d4)
- RtlEqualUnicodeString (Address: 0x476405bc)
- RtlFreeHeap (Address: 0x476405ec)
- RtlFreeUnicodeString (Address: 0x476405e0)
- RtlGetVersion (Address: 0x476405d0)
- RtlImageNtHeaderEx (Address: 0x476405d8)
- RtlInitUnicodeString (Address: 0x476405dc)
- RtlNtStatusToDosError (Address: 0x476405e8)
- RtlStringFromGUID (Address: 0x476405c8)
RPCRT4.dll
- NdrClientCall2 (Address: 0x476404d8)
- RpcBindingFree (Address: 0x476404dc)
- RpcBindingFromStringBindingW (Address: 0x476404e0)
- RpcBindingSetAuthInfoExW (Address: 0x476404d0)
- RpcEpResolveBinding (Address: 0x476404e4)
- RpcStringBindingComposeW (Address: 0x476404cc)
- RpcStringFreeW (Address: 0x476404d4)
USER32.dll
- GetDesktopWindow (Address: 0x476404ec)
- MessageBoxA (Address: 0x476404f0)