wintrust.dll

Description: Microsoft Trust Verification APIs

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.22621.5040

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7b34182f97911f2291ac0148e535a870

File Size: 288.6 KB

Uploaded At: Dec. 3, 2025, 2:37 a.m.

Views: 9

Exported Functions

  • CryptCATVerifyMember (Ordinal: 1, Address: 0x1f7f0)
  • CryptSIPGetInfo (Ordinal: 2, Address: 0x1a250)
  • CryptSIPGetRegWorkingFlags (Ordinal: 3, Address: 0x1a240)
  • GenericChainCertificateTrust (Ordinal: 4, Address: 0x255c0)
  • GenericChainFinalProv (Ordinal: 5, Address: 0x25860)
  • HTTPSCertificateTrust (Ordinal: 6, Address: 0x25e10)
  • SetMessageDigestInfo (Ordinal: 7, Address: 0x27140)
  • SoftpubDefCertInit (Ordinal: 8, Address: 0x27c50)
  • SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x27e30)
  • SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x27d20)
  • WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0xbd80)
  • AddPersonalTrustDBPages (Ordinal: 12, Address: 0x27e70)
  • CatalogCompactHashDatabase (Ordinal: 13, Address: 0x1ba40)
  • ConfigCiFinalPolicy (Ordinal: 14, Address: 0x2a8a0)
  • ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x2a4d0)
  • CryptCATAdminAcquireContext2 (Ordinal: 16, Address: 0x1fee0)
  • CryptCATAdminAcquireContext (Ordinal: 17, Address: 0x1feb0)
  • CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x20020)
  • CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 19, Address: 0x20c70)
  • CryptCATAdminCalcHashFromFileHandle (Ordinal: 20, Address: 0x20c20)
  • CryptCATAdminEnumCatalogFromHash (Ordinal: 21, Address: 0x20780)
  • CryptCATAdminPauseServiceForBackup (Ordinal: 22, Address: 0x20be0)
  • CryptCATAdminReleaseCatalogContext (Ordinal: 23, Address: 0x20a50)
  • CryptCATAdminReleaseContext (Ordinal: 24, Address: 0x1ffd0)
  • CryptCATAdminRemoveCatalog (Ordinal: 25, Address: 0x20300)
  • CryptCATAdminResolveCatalogPath (Ordinal: 26, Address: 0x20ad0)
  • CryptCATAllocSortedMemberInfo (Ordinal: 27, Address: 0x1f5c0)
  • CryptCATCDFClose (Ordinal: 28, Address: 0x21ba0)
  • CryptCATCDFEnumAttributes (Ordinal: 29, Address: 0x226d0)
  • CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 30, Address: 0x22700)
  • CryptCATCDFEnumCatAttributes (Ordinal: 31, Address: 0x21de0)
  • CryptCATCDFEnumMembers (Ordinal: 32, Address: 0x223f0)
  • CryptCATCDFEnumMembersByCDFTag (Ordinal: 33, Address: 0x22480)
  • CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 34, Address: 0x22440)
  • CryptCATCDFOpen (Ordinal: 35, Address: 0x216b0)
  • CryptCATCatalogInfoFromContext (Ordinal: 36, Address: 0x209b0)
  • CryptCATClose (Ordinal: 37, Address: 0x1f080)
  • CryptCATEnumerateAttr (Ordinal: 38, Address: 0x1faf0)
  • CryptCATEnumerateCatAttr (Ordinal: 39, Address: 0x1f4a0)
  • CryptCATEnumerateMember (Ordinal: 40, Address: 0x1fa30)
  • CryptCATFreeSortedMemberInfo (Ordinal: 41, Address: 0x1f680)
  • CryptCATGetAttrInfo (Ordinal: 42, Address: 0x1f840)
  • CryptCATGetCatAttrInfo (Ordinal: 43, Address: 0x1f210)
  • CryptCATGetMemberInfo (Ordinal: 44, Address: 0x1f510)
  • CryptCATHandleFromStore (Ordinal: 45, Address: 0x16e00)
  • CryptCATOpen (Ordinal: 46, Address: 0x1ef40)
  • CryptCATPersistStore (Ordinal: 47, Address: 0x1f1d0)
  • CryptCATPutAttrInfo (Ordinal: 48, Address: 0x1f8c0)
  • CryptCATPutCatAttrInfo (Ordinal: 49, Address: 0x1f280)
  • CryptCATPutMemberInfo (Ordinal: 50, Address: 0x1f6c0)
  • CryptCATStoreFromHandle (Ordinal: 51, Address: 0x16e00)
  • CryptSIPCreateIndirectData (Ordinal: 52, Address: 0x19990)
  • CryptSIPGetCaps (Ordinal: 53, Address: 0x19b00)
  • CryptSIPGetSealedDigest (Ordinal: 54, Address: 0x19b80)
  • CryptSIPGetSignedDataMsg (Ordinal: 55, Address: 0x197e0)
  • CryptSIPPutSignedDataMsg (Ordinal: 56, Address: 0x19890)
  • CryptSIPRemoveSignedDataMsg (Ordinal: 57, Address: 0x19920)
  • CryptSIPVerifyIndirectData (Ordinal: 58, Address: 0x19a20)
  • DllRegisterServer (Ordinal: 59, Address: 0x117e0)
  • DllUnregisterServer (Ordinal: 60, Address: 0x11820)
  • DriverCleanupPolicy (Ordinal: 61, Address: 0x2be60)
  • DriverFinalPolicy (Ordinal: 62, Address: 0x2bf80)
  • DriverInitializePolicy (Ordinal: 63, Address: 0x2bca0)
  • FindCertsByIssuer (Ordinal: 64, Address: 0x2d160)
  • GetAuthenticodeSha256Hash (Ordinal: 65, Address: 0x29f20)
  • HTTPSFinalProv (Ordinal: 66, Address: 0x26060)
  • IsCatalogFile (Ordinal: 67, Address: 0x23ea0)
  • MsCatConstructHashTag (Ordinal: 68, Address: 0x245d0)
  • MsCatFreeHashTag (Ordinal: 69, Address: 0x24660)
  • OfficeCleanupPolicy (Ordinal: 70, Address: 0x2d4f0)
  • OfficeInitializePolicy (Ordinal: 71, Address: 0x2d4f0)
  • OpenPersonalTrustDBDialog (Ordinal: 72, Address: 0x27f50)
  • OpenPersonalTrustDBDialogEx (Ordinal: 73, Address: 0x27e90)
  • SoftpubAuthenticode (Ordinal: 74, Address: 0x2e180)
  • SoftpubCheckCert (Ordinal: 75, Address: 0x2e1b0)
  • SoftpubCleanup (Ordinal: 76, Address: 0x2e1d0)
  • SoftpubDllRegisterServer (Ordinal: 77, Address: 0x2e310)
  • SoftpubDllUnregisterServer (Ordinal: 78, Address: 0x2e540)
  • SoftpubDumpStructure (Ordinal: 79, Address: 0x2e6a0)
  • SoftpubInitialize (Ordinal: 80, Address: 0x2f870)
  • SoftpubLoadMessage (Ordinal: 81, Address: 0x2fa10)
  • SoftpubLoadSignature (Ordinal: 82, Address: 0x26240)
  • TrustDecode (Ordinal: 83, Address: 0x14fb0)
  • TrustFindIssuerCertificate (Ordinal: 84, Address: 0x14aa0)
  • TrustFreeDecode (Ordinal: 85, Address: 0x15050)
  • TrustIsCertificateSelfSigned (Ordinal: 86, Address: 0x14d40)
  • TrustOpenStores (Ordinal: 87, Address: 0x14c20)
  • WTHelperCertCheckValidSignature (Ordinal: 88, Address: 0x16e20)
  • WTHelperCertIsSelfSigned (Ordinal: 89, Address: 0xbc50)
  • WTHelperCheckCertUsage (Ordinal: 90, Address: 0x16a80)
  • WTHelperGetAgencyInfo (Ordinal: 91, Address: 0x169f0)
  • WTHelperGetFileHandle (Ordinal: 92, Address: 0x167f0)
  • WTHelperGetFileHash (Ordinal: 93, Address: 0x15870)
  • WTHelperGetFileName (Ordinal: 94, Address: 0x16830)
  • WTHelperGetKnownUsages (Ordinal: 95, Address: 0x16d80)
  • WTHelperGetProvCertFromChain (Ordinal: 96, Address: 0x167c0)
  • WTHelperGetProvPrivateDataFromChain (Ordinal: 97, Address: 0x16720)
  • WTHelperGetProvSignerFromChain (Ordinal: 98, Address: 0x16780)
  • WTHelperIsChainedToMicrosoft (Ordinal: 99, Address: 0x16ee0)
  • WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 100, Address: 0x16e50)
  • WTHelperIsInRootStore (Ordinal: 101, Address: 0x16be0)
  • WTHelperOpenKnownStores (Ordinal: 102, Address: 0x168c0)
  • WTHelperProvDataFromStateData (Ordinal: 103, Address: 0x16e00)
  • WVTAsn1CatMemberInfo2Decode (Ordinal: 104, Address: 0x134a0)
  • WVTAsn1CatMemberInfo2Encode (Ordinal: 105, Address: 0x13400)
  • WVTAsn1CatMemberInfoDecode (Ordinal: 106, Address: 0x13350)
  • WVTAsn1CatMemberInfoEncode (Ordinal: 107, Address: 0x13230)
  • WVTAsn1CatNameValueDecode (Ordinal: 108, Address: 0x13280)
  • WVTAsn1CatNameValueEncode (Ordinal: 109, Address: 0x131d0)
  • WVTAsn1IntentToSealAttributeDecode (Ordinal: 110, Address: 0x13610)
  • WVTAsn1IntentToSealAttributeEncode (Ordinal: 111, Address: 0x13540)
  • WVTAsn1SealingSignatureAttributeDecode (Ordinal: 112, Address: 0x136f0)
  • WVTAsn1SealingSignatureAttributeEncode (Ordinal: 113, Address: 0x13570)
  • WVTAsn1SealingTimestampAttributeDecode (Ordinal: 114, Address: 0x137e0)
  • WVTAsn1SealingTimestampAttributeEncode (Ordinal: 115, Address: 0x13790)
  • WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 116, Address: 0x12aa0)
  • WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 117, Address: 0x12a70)
  • WVTAsn1SpcIndirectDataContentDecode (Ordinal: 118, Address: 0x12470)
  • WVTAsn1SpcIndirectDataContentEncode (Ordinal: 119, Address: 0x123a0)
  • WVTAsn1SpcLinkDecode (Ordinal: 120, Address: 0x12ed0)
  • WVTAsn1SpcLinkEncode (Ordinal: 121, Address: 0x12e90)
  • WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 122, Address: 0x129f0)
  • WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 123, Address: 0x129c0)
  • WVTAsn1SpcPeImageDataDecode (Ordinal: 124, Address: 0x13000)
  • WVTAsn1SpcPeImageDataEncode (Ordinal: 125, Address: 0x12f70)
  • WVTAsn1SpcSigInfoDecode (Ordinal: 126, Address: 0x13140)
  • WVTAsn1SpcSigInfoEncode (Ordinal: 127, Address: 0x130e0)
  • WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 128, Address: 0x127d0)
  • WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 129, Address: 0x12620)
  • WVTAsn1SpcSpOpusInfoDecode (Ordinal: 130, Address: 0x12d90)
  • WVTAsn1SpcSpOpusInfoEncode (Ordinal: 131, Address: 0x12cc0)
  • WVTAsn1SpcStatementTypeDecode (Ordinal: 132, Address: 0x12bd0)
  • WVTAsn1SpcStatementTypeEncode (Ordinal: 133, Address: 0x12b30)
  • WinVerifyTrust (Ordinal: 134, Address: 0x15810)
  • WinVerifyTrustEx (Ordinal: 135, Address: 0x15750)
  • WintrustAddActionID (Ordinal: 136, Address: 0x138b0)
  • WintrustAddDefaultForUsage (Ordinal: 137, Address: 0x152b0)
  • WintrustCertificateTrust (Ordinal: 138, Address: 0xf890)
  • WintrustCryptSIPGetCaps (Ordinal: 139, Address: 0x17b00)
  • WintrustCryptSIPGetSealedDigest (Ordinal: 140, Address: 0x17b80)
  • WintrustCryptSIPLoad (Ordinal: 141, Address: 0x17aa0)
  • WintrustCryptSIPRetrieveSubjectGuid (Ordinal: 142, Address: 0x17a00)
  • WintrustGetDefaultForUsage (Ordinal: 143, Address: 0x154c0)
  • WintrustGetRegPolicyFlags (Ordinal: 144, Address: 0x14730)
  • WintrustLoadFunctionPointers (Ordinal: 145, Address: 0x13ab0)
  • WintrustRemoveActionID (Ordinal: 146, Address: 0x13a30)
  • WintrustSetDefaultIncludePEPageHashes (Ordinal: 147, Address: 0x1a380)
  • WintrustSetRegPolicyFlags (Ordinal: 148, Address: 0x147c0)
  • mscat32DllRegisterServer (Ordinal: 149, Address: 0x1bd50)
  • mscat32DllUnregisterServer (Ordinal: 150, Address: 0x1bd50)
  • mssip32DllRegisterServer (Ordinal: 151, Address: 0x19ec0)
  • mssip32DllUnregisterServer (Ordinal: 152, Address: 0x1a100)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAccessAllowedAceEx (Address: 0x47640020)
  • AddAce (Address: 0x47640010)
  • AllocateAndInitializeSid (Address: 0x47640074)
  • ChangeServiceConfigA (Address: 0x47640078)
  • CloseServiceHandle (Address: 0x47640068)
  • ControlService (Address: 0x4764007c)
  • ConvertStringSidToSidW (Address: 0x47640008)
  • CopySid (Address: 0x4764003c)
  • CryptAcquireContextA (Address: 0x476400a4)
  • CryptAcquireContextW (Address: 0x476400dc)
  • CryptCreateHash (Address: 0x4764000c)
  • CryptDestroyHash (Address: 0x4764002c)
  • CryptGetHashParam (Address: 0x47640030)
  • CryptHashData (Address: 0x47640028)
  • CryptReleaseContext (Address: 0x476400ac)
  • CryptSetProvParam (Address: 0x476400e0)
  • EqualSid (Address: 0x47640064)
  • EventRegister (Address: 0x476400d0)
  • EventUnregister (Address: 0x476400d4)
  • EventWrite (Address: 0x476400a8)
  • FreeSid (Address: 0x47640088)
  • GetAce (Address: 0x47640004)
  • GetAclInformation (Address: 0x47640000)
  • GetFileSecurityW (Address: 0x47640014)
  • GetLengthSid (Address: 0x47640044)
  • GetSecurityDescriptorDacl (Address: 0x4764004c)
  • GetSidIdentifierAuthority (Address: 0x47640058)
  • GetSidSubAuthority (Address: 0x47640038)
  • GetSidSubAuthorityCount (Address: 0x47640034)
  • GetTokenInformation (Address: 0x47640094)
  • InitializeAcl (Address: 0x4764001c)
  • InitializeSecurityDescriptor (Address: 0x47640018)
  • IsValidSid (Address: 0x47640040)
  • LookupAccountSidW (Address: 0x47640024)
  • OpenProcessToken (Address: 0x47640084)
  • OpenSCManagerW (Address: 0x4764006c)
  • OpenServiceW (Address: 0x47640090)
  • OpenThreadToken (Address: 0x47640054)
  • QueryServiceConfigA (Address: 0x47640070)
  • QueryServiceStatus (Address: 0x47640060)
  • RegCloseKey (Address: 0x476400b8)
  • RegCreateKeyExW (Address: 0x476400c0)
  • RegDeleteKeyExW (Address: 0x476400bc)
  • RegEnumKeyExA (Address: 0x476400a0)
  • RegEnumValueA (Address: 0x476400d8)
  • RegGetValueW (Address: 0x4764005c)
  • RegOpenKeyExA (Address: 0x4764009c)
  • RegOpenKeyExW (Address: 0x476400c8)
  • RegQueryInfoKeyA (Address: 0x47640098)
  • RegQueryValueExA (Address: 0x476400b0)
  • RegQueryValueExW (Address: 0x476400cc)
  • RegSetValueExA (Address: 0x476400b4)
  • RegSetValueExW (Address: 0x476400c4)
  • SetFileSecurityW (Address: 0x47640048)
  • SetSecurityDescriptorDacl (Address: 0x47640050)
  • StartServiceA (Address: 0x47640080)
  • StartServiceW (Address: 0x4764008c)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x47640518)
  • BCryptCreateHash (Address: 0x47640504)
  • BCryptDestroyHash (Address: 0x476404fc)
  • BCryptDestroyKey (Address: 0x47640508)
  • BCryptFinishHash (Address: 0x476404f8)
  • BCryptGetProperty (Address: 0x47640510)
  • BCryptHashData (Address: 0x47640500)
  • BCryptOpenAlgorithmProvider (Address: 0x47640514)
  • BCryptVerifySignature (Address: 0x4764050c)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x4764015c)
  • CertAddStoreToCollection (Address: 0x476401d8)
  • CertCloseStore (Address: 0x476401ec)
  • CertCompareCertificate (Address: 0x47640198)
  • CertCompareCertificateName (Address: 0x476401d0)
  • CertCompareIntegerBlob (Address: 0x476401b4)
  • CertComparePublicKeyInfo (Address: 0x476401f8)
  • CertControlStore (Address: 0x47640230)
  • CertCreateCertificateChainEngine (Address: 0x476401fc)
  • CertCreateCertificateContext (Address: 0x4764017c)
  • CertCreateContext (Address: 0x47640134)
  • CertCreateCTLContext (Address: 0x47640170)
  • CertDeleteCertificateFromStore (Address: 0x47640158)
  • CertDuplicateCertificateContext (Address: 0x47640210)
  • CertDuplicateStore (Address: 0x4764020c)
  • CertEnumCertificatesInStore (Address: 0x47640160)
  • CertFindAttribute (Address: 0x47640118)
  • CertFindCertificateInStore (Address: 0x476400f0)
  • CertFindExtension (Address: 0x476401d4)
  • CertFindRDNAttr (Address: 0x47640194)
  • CertFindSubjectInCTL (Address: 0x47640168)
  • CertFindSubjectInSortedCTL (Address: 0x47640128)
  • CertFreeCertificateChain (Address: 0x476401f0)
  • CertFreeCertificateChainEngine (Address: 0x476401e4)
  • CertFreeCertificateContext (Address: 0x47640208)
  • CertFreeCTLContext (Address: 0x47640200)
  • CertGetCertificateChain (Address: 0x476401e0)
  • CertGetCertificateContextProperty (Address: 0x476400f8)
  • CertGetEnhancedKeyUsage (Address: 0x476401dc)
  • CertGetIssuerCertificateFromStore (Address: 0x47640204)
  • CertGetNameStringW (Address: 0x47640174)
  • CertGetSubjectCertificateFromStore (Address: 0x47640154)
  • CertOIDToAlgId (Address: 0x476400e8)
  • CertOpenStore (Address: 0x476401f4)
  • CertOpenSystemStoreA (Address: 0x47640180)
  • CertRDNValueToStrW (Address: 0x47640190)
  • CertSetCertificateContextProperty (Address: 0x47640188)
  • CertVerifyCertificateChainPolicy (Address: 0x476400f4)
  • CertVerifySubjectCertificateContext (Address: 0x476401a0)
  • CertVerifyTimeValidity (Address: 0x476401b8)
  • CertVerifyValidityNesting (Address: 0x476401bc)
  • CryptDecodeObject (Address: 0x47640234)
  • CryptDecodeObjectEx (Address: 0x476401cc)
  • CryptEncodeObject (Address: 0x47640114)
  • CryptEncodeObjectEx (Address: 0x4764011c)
  • CryptEnumOIDInfo (Address: 0x476400fc)
  • CryptExportPublicKeyInfo (Address: 0x47640184)
  • CryptFindOIDInfo (Address: 0x47640110)
  • CryptHashCertificate2 (Address: 0x4764018c)
  • CryptImportPublicKeyInfoEx2 (Address: 0x47640150)
  • CryptInstallOIDFunctionAddress (Address: 0x47640224)
  • CryptMemFree (Address: 0x47640144)
  • CryptMsgClose (Address: 0x476401a8)
  • CryptMsgControl (Address: 0x47640148)
  • CryptMsgDuplicate (Address: 0x47640138)
  • CryptMsgEncodeAndSignCTL (Address: 0x4764013c)
  • CryptMsgGetParam (Address: 0x4764014c)
  • CryptMsgOpenToDecode (Address: 0x4764016c)
  • CryptMsgUpdate (Address: 0x47640164)
  • CryptMsgVerifyCountersignatureEncodedEx (Address: 0x47640140)
  • CryptQueryObject (Address: 0x476401e8)
  • CryptRegisterOIDFunction (Address: 0x47640220)
  • CryptSIPAddProvider (Address: 0x4764010c)
  • CryptSIPLoad (Address: 0x47640104)
  • CryptSIPRemoveProvider (Address: 0x47640108)
  • CryptSIPRetrieveSubjectGuid (Address: 0x47640100)
  • CryptSIPRetrieveSubjectGuidForCatalogFile (Address: 0x4764012c)
  • CryptStringToBinaryW (Address: 0x47640124)
  • CryptUnregisterOIDFunction (Address: 0x47640218)
  • CryptVerifyMessageSignature (Address: 0x47640178)
  • I_CryptCreateLruCache (Address: 0x476401a4)
  • I_CryptCreateLruEntry (Address: 0x476401ac)
  • I_CryptFindLruEntryData (Address: 0x476401c0)
  • I_CryptFlushLruCache (Address: 0x47640238)
  • I_CryptFreeLruCache (Address: 0x4764019c)
  • I_CryptGetAsn1Decoder (Address: 0x4764022c)
  • I_CryptGetAsn1Encoder (Address: 0x47640214)
  • I_CryptGetDefaultCryptProv (Address: 0x47640120)
  • I_CryptGetTls (Address: 0x47640130)
  • I_CryptInsertLruEntry (Address: 0x476401b0)
  • I_CryptInstallAsn1Module (Address: 0x4764021c)
  • I_CryptReadTrustedPublisherDWORDValueFromRegistry (Address: 0x476400ec)
  • I_CryptReleaseLruEntry (Address: 0x476401c4)
  • I_CryptRemoveLruEntry (Address: 0x476401c8)
  • I_CryptUninstallAsn1Module (Address: 0x47640228)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x4764028c)
  • AcquireSRWLockShared (Address: 0x47640248)
  • CloseHandle (Address: 0x47640280)
  • CloseThreadpoolTimer (Address: 0x47640290)
  • CompareFileTime (Address: 0x47640334)
  • CreateDirectoryW (Address: 0x476403a4)
  • CreateEventA (Address: 0x47640398)
  • CreateFileMappingA (Address: 0x476403bc)
  • CreateFileMappingW (Address: 0x47640318)
  • CreateFileW (Address: 0x47640384)
  • CreateMutexA (Address: 0x4764039c)
  • CreateMutexExW (Address: 0x47640244)
  • CreateSemaphoreExW (Address: 0x47640314)
  • CreateThreadpoolTimer (Address: 0x4764038c)
  • DebugBreak (Address: 0x47640258)
  • DeleteCriticalSection (Address: 0x47640328)
  • DisableThreadLibraryCalls (Address: 0x4764026c)
  • DuplicateHandle (Address: 0x476403e8)
  • EnterCriticalSection (Address: 0x4764030c)
  • ExpandEnvironmentStringsA (Address: 0x476402f0)
  • ExpandEnvironmentStringsW (Address: 0x4764035c)
  • FileTimeToSystemTime (Address: 0x47640380)
  • FindClose (Address: 0x476403cc)
  • FindFirstFileW (Address: 0x476403c4)
  • FindNextFileW (Address: 0x476403c8)
  • FindResourceExA (Address: 0x476402a8)
  • FindResourceW (Address: 0x476403ec)
  • FlushViewOfFile (Address: 0x47640394)
  • FormatMessageW (Address: 0x476402c8)
  • FreeLibrary (Address: 0x47640274)
  • FreeResource (Address: 0x476402a0)
  • GetCurrentDirectoryW (Address: 0x476403dc)
  • GetCurrentProcess (Address: 0x47640304)
  • GetCurrentProcessId (Address: 0x4764024c)
  • GetCurrentThread (Address: 0x47640390)
  • GetCurrentThreadId (Address: 0x476403f0)
  • GetDateFormatA (Address: 0x4764036c)
  • GetEnvironmentVariableA (Address: 0x47640264)
  • GetFileAttributesExW (Address: 0x476402d4)
  • GetFileAttributesW (Address: 0x476403d0)
  • GetFileInformationByHandle (Address: 0x476403e4)
  • GetFileSize (Address: 0x47640374)
  • GetFileSizeEx (Address: 0x476403ac)
  • GetLastError (Address: 0x476402c0)
  • GetLocalTime (Address: 0x47640370)
  • GetModuleFileNameA (Address: 0x4764031c)
  • GetModuleFileNameW (Address: 0x476402f8)
  • GetModuleHandleA (Address: 0x47640340)
  • GetModuleHandleExA (Address: 0x476402a4)
  • GetModuleHandleExW (Address: 0x47640300)
  • GetModuleHandleW (Address: 0x47640254)
  • GetPrivateProfileStringW (Address: 0x476402fc)
  • GetProcAddress (Address: 0x47640240)
  • GetProcessHeap (Address: 0x47640250)
  • GetSystemDirectoryW (Address: 0x476403d4)
  • GetSystemInfo (Address: 0x476403b8)
  • GetSystemTimeAsFileTime (Address: 0x476402d8)
  • GetTickCount (Address: 0x47640354)
  • GetTickCount64 (Address: 0x476403d8)
  • GetTimeFormatA (Address: 0x47640368)
  • HeapAlloc (Address: 0x47640388)
  • HeapFree (Address: 0x47640310)
  • InitializeCriticalSection (Address: 0x4764032c)
  • InitializeCriticalSectionEx (Address: 0x476402e8)
  • IsDebuggerPresent (Address: 0x4764025c)
  • LeaveCriticalSection (Address: 0x476402ec)
  • LoadLibraryA (Address: 0x476402b4)
  • LoadLibraryExA (Address: 0x476402e4)
  • LoadLibraryExW (Address: 0x47640338)
  • LoadLibraryW (Address: 0x4764027c)
  • LoadResource (Address: 0x476402b0)
  • LocalAlloc (Address: 0x476403f4)
  • LocalFree (Address: 0x47640320)
  • LocalReAlloc (Address: 0x47640378)
  • LockResource (Address: 0x476402ac)
  • lstrlenA (Address: 0x476402f4)
  • lstrlenW (Address: 0x4764033c)
  • MapViewOfFile (Address: 0x476403c0)
  • MultiByteToWideChar (Address: 0x476402bc)
  • OpenSemaphoreW (Address: 0x47640284)
  • OutputDebugStringA (Address: 0x47640360)
  • OutputDebugStringW (Address: 0x47640294)
  • QueryPerformanceCounter (Address: 0x47640350)
  • ReadFile (Address: 0x476402c4)
  • ReleaseMutex (Address: 0x476402cc)
  • ReleaseSemaphore (Address: 0x47640308)
  • ReleaseSRWLockExclusive (Address: 0x476402b8)
  • ReleaseSRWLockShared (Address: 0x47640260)
  • ResetEvent (Address: 0x47640298)
  • SetEndOfFile (Address: 0x47640364)
  • SetEvent (Address: 0x47640268)
  • SetFileAttributesW (Address: 0x476403a8)
  • SetFilePointer (Address: 0x476402d0)
  • SetFilePointerEx (Address: 0x476403b0)
  • SetLastError (Address: 0x47640330)
  • SetThreadpoolTimer (Address: 0x47640270)
  • SetUnhandledExceptionFilter (Address: 0x47640348)
  • SizeofResource (Address: 0x4764029c)
  • Sleep (Address: 0x47640324)
  • SystemTimeToFileTime (Address: 0x4764037c)
  • TerminateProcess (Address: 0x4764034c)
  • UnhandledExceptionFilter (Address: 0x47640344)
  • UnmapViewOfFile (Address: 0x476403b4)
  • VirtualUnlock (Address: 0x476403e0)
  • WaitForMultipleObjectsEx (Address: 0x476403a0)
  • WaitForSingleObject (Address: 0x476402dc)
  • WaitForSingleObjectEx (Address: 0x47640288)
  • WaitForThreadpoolTimerCallbacks (Address: 0x476402e0)
  • WideCharToMultiByte (Address: 0x47640278)
  • WriteFile (Address: 0x47640358)
MSASN1.dll
  • ASN1_CloseModule (Address: 0x4764049c)
  • ASN1_CreateModule (Address: 0x47640414)
  • ASN1_Decode (Address: 0x47640400)
  • ASN1_Encode (Address: 0x47640418)
  • ASN1_FreeDecoded (Address: 0x47640408)
  • ASN1_FreeEncoded (Address: 0x47640404)
  • ASN1_SetEncoderOption (Address: 0x476403fc)
  • ASN1BERDecBitString (Address: 0x476404b8)
  • ASN1BERDecBool (Address: 0x47640468)
  • ASN1BERDecChar16String (Address: 0x476404a8)
  • ASN1BERDecCharString (Address: 0x47640410)
  • ASN1BERDecEndOfContents (Address: 0x47640464)
  • ASN1BERDecExplicitTag (Address: 0x47640440)
  • ASN1BERDecNotEndOfContents (Address: 0x4764045c)
  • ASN1BERDecNull (Address: 0x4764041c)
  • ASN1BERDecObjectIdentifier2 (Address: 0x476404a0)
  • ASN1BERDecOctetString (Address: 0x47640458)
  • ASN1BERDecOctetString2 (Address: 0x476404c4)
  • ASN1BERDecOpenType2 (Address: 0x4764042c)
  • ASN1BERDecPeekTag (Address: 0x47640444)
  • ASN1BERDecS32Val (Address: 0x476404b0)
  • ASN1BERDecU32Val (Address: 0x47640420)
  • ASN1BERDecUTCTime (Address: 0x476404bc)
  • ASN1BEREncBitString (Address: 0x47640450)
  • ASN1BEREncBool (Address: 0x47640490)
  • ASN1BEREncChar16String (Address: 0x476404c0)
  • ASN1BEREncCharString (Address: 0x47640484)
  • ASN1BEREncEndOfContents (Address: 0x47640488)
  • ASN1BEREncExplicitTag (Address: 0x47640460)
  • ASN1BEREncNull (Address: 0x47640494)
  • ASN1BEREncObjectIdentifier2 (Address: 0x47640480)
  • ASN1BEREncOctetString (Address: 0x47640498)
  • ASN1BEREncOpenType (Address: 0x476404ac)
  • ASN1BEREncRemoveZeroBits (Address: 0x47640430)
  • ASN1BEREncS32 (Address: 0x47640478)
  • ASN1BEREncU32 (Address: 0x47640454)
  • ASN1bitstring_cmp (Address: 0x47640434)
  • ASN1bitstring_free (Address: 0x4764040c)
  • ASN1CEREncBeginBlk (Address: 0x47640424)
  • ASN1CEREncEndBlk (Address: 0x47640428)
  • ASN1CEREncFlushBlkElement (Address: 0x4764047c)
  • ASN1CEREncNewBlkElement (Address: 0x4764048c)
  • ASN1CEREncUTCTime (Address: 0x4764044c)
  • ASN1char16string_free (Address: 0x47640448)
  • ASN1charstring_free (Address: 0x476404b4)
  • ASN1DecRealloc (Address: 0x47640470)
  • ASN1DecSetError (Address: 0x4764043c)
  • ASN1EncSetError (Address: 0x47640474)
  • ASN1Free (Address: 0x476404a4)
  • ASN1objectidentifier_free (Address: 0x4764046c)
  • ASN1octetstring_free (Address: 0x47640438)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x47640528)
  • __dllonexit (Address: 0x47640568)
  • _amsg_exit (Address: 0x4764057c)
  • _callnewh (Address: 0x47640584)
  • _errno (Address: 0x47640590)
  • _except_handler4_common (Address: 0x47640574)
  • _initterm (Address: 0x47640578)
  • _itow_s (Address: 0x47640598)
  • _lock (Address: 0x47640570)
  • _ltoa (Address: 0x47640524)
  • _memicmp (Address: 0x4764053c)
  • _onexit (Address: 0x47640564)
  • _purecall (Address: 0x476405a8)
  • _stricmp (Address: 0x47640540)
  • _unlock (Address: 0x4764056c)
  • _vsnprintf (Address: 0x47640520)
  • _vsnwprintf (Address: 0x476405b0)
  • _wcsicmp (Address: 0x4764059c)
  • _wcsnicmp (Address: 0x47640544)
  • _wtol (Address: 0x47640548)
  • _XcptFilter (Address: 0x47640580)
  • atol (Address: 0x476405a0)
  • bsearch (Address: 0x47640530)
  • free (Address: 0x4764058c)
  • malloc (Address: 0x47640588)
  • memcmp (Address: 0x47640558)
  • memcpy (Address: 0x4764055c)
  • memcpy_s (Address: 0x476405ac)
  • memmove (Address: 0x47640560)
  • memmove_s (Address: 0x476405a4)
  • memset (Address: 0x476405b4)
  • qsort (Address: 0x47640554)
  • qsort_s (Address: 0x47640550)
  • towupper (Address: 0x4764054c)
  • wcscat_s (Address: 0x47640594)
  • wcschr (Address: 0x47640534)
  • wcsrchr (Address: 0x4764052c)
  • wcstol (Address: 0x47640538)
ntdll.dll
  • LdrResSearchResource (Address: 0x476405f0)
  • NtQuerySystemInformation (Address: 0x476405e4)
  • RtlAllocateHeap (Address: 0x476405cc)
  • RtlAppendUnicodeStringToString (Address: 0x476405c0)
  • RtlCompareUnicodeString (Address: 0x476405c4)
  • RtlCreateUnicodeString (Address: 0x476405d4)
  • RtlEqualUnicodeString (Address: 0x476405bc)
  • RtlFreeHeap (Address: 0x476405ec)
  • RtlFreeUnicodeString (Address: 0x476405e0)
  • RtlGetVersion (Address: 0x476405d0)
  • RtlImageNtHeaderEx (Address: 0x476405d8)
  • RtlInitUnicodeString (Address: 0x476405dc)
  • RtlNtStatusToDosError (Address: 0x476405e8)
  • RtlStringFromGUID (Address: 0x476405c8)
RPCRT4.dll
  • NdrClientCall2 (Address: 0x476404d8)
  • RpcBindingFree (Address: 0x476404dc)
  • RpcBindingFromStringBindingW (Address: 0x476404e0)
  • RpcBindingSetAuthInfoExW (Address: 0x476404d0)
  • RpcEpResolveBinding (Address: 0x476404e4)
  • RpcStringBindingComposeW (Address: 0x476404cc)
  • RpcStringFreeW (Address: 0x476404d4)
USER32.dll
  • GetDesktopWindow (Address: 0x476404ec)
  • MessageBoxA (Address: 0x476404f0)