swsignwrapper.dll

Description: swsignwrapper

Version: 2.3.23.1215

Architecture: 32-bit

Operating System: Windows NT

SHA256: 330579af8d08434a9cf1c4b748659bf6

File Size: 477.0 KB

Uploaded At: Dec. 4, 2025, 6:13 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

??0CRF_OESPlugins@@QAE@ABV0@@Z (Ordinal: 1, Address: 0x2f50)
??0CRF_OESPlugins@@QAE@XZ (Ordinal: 2, Address: 0x27a90)
??1CRF_OESPlugins@@QAE@XZ (Ordinal: 3, Address: 0x27d30)
??4CRF_OESPlugins@@QAEAAV0@ABV0@@Z (Ordinal: 4, Address: 0x3390)
?CheckServerStatus@CRF_OESPlugins@@QAE_NXZ (Ordinal: 5, Address: 0x296d0)
?CloseRPCServer@CRF_OESPlugins@@QAE_NXZ (Ordinal: 6, Address: 0x296f0)
?GetOESPlugin@CRF_OESPlugins@@QAEPAVCRF_OESPlugin@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Ordinal: 7, Address: 0x2bac0)
?GetOESPlugins@CRF_OESPlugins@@QAE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ (Ordinal: 8, Address: 0x2bf60)
?Init@CRF_OESPlugins@@QAE_N_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z (Ordinal: 9, Address: 0x2d4e0)
?KillServer@CRF_OESPlugins@@QAE_NXZ (Ordinal: 10, Address: 0x2dcb0)
?SetCheckImage@CRF_OESPlugins@@QAEXP6A_NPAEI@Z@Z (Ordinal: 11, Address: 0xd130)
?SetLog@CRF_OESPlugins@@QAEXP6AXHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z (Ordinal: 12, Address: 0xd4d0)
?SetOESPluginPath@CRF_OESPlugins@@QAEHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Ordinal: 13, Address: 0x2dec0)
?SetScanOESPath@CRF_OESPlugins@@QAEX_N@Z (Ordinal: 14, Address: 0xd4e0)
?UnLoadOESPlugin@CRF_OESPlugins@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Ordinal: 15, Address: 0x2e090)
?addOESPluginPtr@CRF_OESPlugins@@AAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Ordinal: 16, Address: 0x2e690)
?initLoadOESPath@CRF_OESPlugins@@AAEHXZ (Ordinal: 17, Address: 0x2fa40)

Imported DLLs & Functions

api-ms-win-crt-convert-l1-1-0.dll

atoi (Address: 0x10061174)
atol (Address: 0x10061170)

api-ms-win-crt-environment-l1-1-0.dll

__p__environ (Address: 0x1006117c)

api-ms-win-crt-filesystem-l1-1-0.dll

_access (Address: 0x1006118c)
_findclose (Address: 0x10061190)
_findfirst64i32 (Address: 0x10061188)
_findnext64i32 (Address: 0x10061184)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x1006119c)
free (Address: 0x100611a0)
malloc (Address: 0x10061198)

api-ms-win-crt-locale-l1-1-0.dll

localeconv (Address: 0x100611a8)

api-ms-win-crt-math-l1-1-0.dll

_dclass (Address: 0x100611b4)
modf (Address: 0x100611b0)

api-ms-win-crt-runtime-l1-1-0.dll

_beginthreadex (Address: 0x100611ec)
_cexit (Address: 0x100611bc)
_configure_narrow_argv (Address: 0x100611c0)
_crt_atexit (Address: 0x100611d0)
_execute_onexit_table (Address: 0x100611dc)
_initialize_narrow_environment (Address: 0x100611c4)
_initialize_onexit_table (Address: 0x100611e8)
_initterm (Address: 0x100611cc)
_initterm_e (Address: 0x100611d8)
_invalid_parameter_noinfo_noreturn (Address: 0x100611d4)
_register_onexit_function (Address: 0x100611e4)
_seh_filter_dll (Address: 0x100611c8)
terminate (Address: 0x100611e0)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x100611f8)
__stdio_common_vfprintf (Address: 0x100611f4)
__stdio_common_vsnprintf_s (Address: 0x10061214)
__stdio_common_vsprintf (Address: 0x10061210)
__stdio_common_vsscanf (Address: 0x10061218)
fclose (Address: 0x100611fc)
fgets (Address: 0x10061200)
fopen (Address: 0x10061204)
fread (Address: 0x10061208)
fseek (Address: 0x1006120c)

api-ms-win-crt-string-l1-1-0.dll

isalnum (Address: 0x10061220)
isspace (Address: 0x10061224)

api-ms-win-crt-time-l1-1-0.dll

_localtime64 (Address: 0x10061234)
_time64 (Address: 0x10061230)
strftime (Address: 0x1006122c)

irpc.dll

??0IRPCParams@@QAE@XZ (Address: 0x10061258)
??1IRPCParams@@QAE@XZ (Address: 0x1006125c)
?AddKeyValueBool@IRPCParams@@QAEXPBD_N@Z (Address: 0x10061294)
?AddKeyValueInt@IRPCParams@@QAEXPBDH@Z (Address: 0x10061274)
?AddKeyValueStream@IRPCParams@@QAEXPBD0J@Z (Address: 0x1006127c)
?AddKeyValueString@IRPCParams@@QAEXPBD0@Z (Address: 0x10061278)
?AddString@IRPCParams@@QAEXPBD@Z (Address: 0x10061288)
?CreateClient@@YAPAVIClient@@XZ (Address: 0x1006128c)
?DestroyClient@@YAXPAVIClient@@@Z (Address: 0x10061290)
?GetBool@IRPCValue@@QAE_NXZ (Address: 0x10061280)
?GetInt@IRPCValue@@QAEHXZ (Address: 0x1006126c)
?GetList@IRPCValue@@QAEPBV?$vector@PAVIRPCValue@@V?$allocator@PAVIRPCValue@@@std@@@std@@XZ (Address: 0x10061244)
?GetMap@IRPCParams@@QAEPAVIRPCValue@@PBD@Z (Address: 0x10061264)
?GetStream@IRPCValue@@QAEPBDAAJ@Z (Address: 0x10061240)
?GetString@IRPCValue@@QAEPBDXZ (Address: 0x1006123c)
?GetValue@IRPCParams@@QAEPAVIRPCValue@@H@Z (Address: 0x10061260)
?IsBool@IRPCValue@@QAE_NXZ (Address: 0x10061284)
?IsInt@IRPCValue@@QAE_NXZ (Address: 0x10061248)
?IsList@IRPCValue@@QAE_NXZ (Address: 0x10061254)
?IsStream@IRPCValue@@QAE_NXZ (Address: 0x10061250)
?IsString@IRPCValue@@QAE_NXZ (Address: 0x1006124c)
?MapSize@IRPCParams@@QAEHXZ (Address: 0x10061270)
?ParamsSize@IRPCParams@@QAEHXZ (Address: 0x10061268)

KERNEL32.dll

CloseHandle (Address: 0x10061094)
CreateEventW (Address: 0x1006102c)
CreateProcessA (Address: 0x10061080)
CreateToolhelp32Snapshot (Address: 0x10061064)
DeleteCriticalSection (Address: 0x10061098)
DisableThreadLibraryCalls (Address: 0x10061004)
EnterCriticalSection (Address: 0x100610a0)
FormatMessageA (Address: 0x10061044)
FreeLibrary (Address: 0x10061054)
GetCurrentProcess (Address: 0x1006101c)
GetCurrentProcessId (Address: 0x10061010)
GetCurrentThreadId (Address: 0x1006100c)
GetExitCodeProcess (Address: 0x10061084)
GetLastError (Address: 0x10061090)
GetModuleFileNameA (Address: 0x10061070)
GetModuleHandleA (Address: 0x1006106c)
GetModuleHandleW (Address: 0x10061028)
GetProcAddress (Address: 0x10061050)
GetSystemTimeAsFileTime (Address: 0x10061008)
InitializeCriticalSection (Address: 0x100610a4)
InitializeCriticalSectionAndSpinCount (Address: 0x1006103c)
InitializeSListHead (Address: 0x10061000)
IsDebuggerPresent (Address: 0x10061014)
IsProcessorFeaturePresent (Address: 0x10061018)
LeaveCriticalSection (Address: 0x1006109c)
LoadLibraryA (Address: 0x1006104c)
LocalFree (Address: 0x10061048)
OpenProcess (Address: 0x10061074)
Process32FirstW (Address: 0x10061060)
Process32NextW (Address: 0x1006105c)
QueryPerformanceCounter (Address: 0x10061078)
ResetEvent (Address: 0x10061034)
SetDllDirectoryA (Address: 0x10061040)
SetEvent (Address: 0x10061038)
SetThreadErrorMode (Address: 0x10061058)
SetUnhandledExceptionFilter (Address: 0x10061020)
Sleep (Address: 0x1006107c)
TerminateProcess (Address: 0x10061088)
UnhandledExceptionFilter (Address: 0x10061024)
WaitForSingleObject (Address: 0x1006108c)
WaitForSingleObjectEx (Address: 0x10061030)
WideCharToMultiByte (Address: 0x10061068)

libcrypto-kso-1_1.dll

ASN1_GENERALIZEDTIME_free (Address: 0x100612e0)
ASN1_INTEGER_get (Address: 0x100612e8)
ASN1_INTEGER_to_BN (Address: 0x100612ec)
ASN1_OBJECT_free (Address: 0x100612d4)
ASN1_STRING_data (Address: 0x100612dc)
ASN1_STRING_length (Address: 0x100612d8)
ASN1_STRING_to_UTF8 (Address: 0x1006135c)
ASN1_TIME_to_generalizedtime (Address: 0x100612e4)
ASN1_TYPE_free (Address: 0x100612cc)
ASN1_TYPE_get (Address: 0x100612d0)
AUTHORITY_INFO_ACCESS_free (Address: 0x100612f8)
BASIC_CONSTRAINTS_free (Address: 0x10061304)
BIO_free (Address: 0x100612b4)
BIO_new (Address: 0x100612b0)
BIO_s_mem (Address: 0x100612bc)
BIO_write (Address: 0x100612b8)
BN_bn2hex (Address: 0x100612c4)
BN_free (Address: 0x100612c0)
CRL_DIST_POINTS_free (Address: 0x100612fc)
CRYPTO_free (Address: 0x100612ac)
d2i_ASN1_SEQUENCE_ANY (Address: 0x100612c8)
d2i_PKCS7 (Address: 0x1006134c)
d2i_X509 (Address: 0x1006133c)
EVP_get_digestbyname (Address: 0x10061354)
GENERAL_NAME_get0_value (Address: 0x10061300)
OBJ_obj2nid (Address: 0x100612f0)
OBJ_obj2txt (Address: 0x10061358)
OPENSSL_sk_free (Address: 0x100612a4)
OPENSSL_sk_num (Address: 0x1006129c)
OPENSSL_sk_pop_free (Address: 0x100612a8)
OPENSSL_sk_value (Address: 0x100612a0)
PEM_read_bio_X509 (Address: 0x100612f4)
PKCS7_free (Address: 0x10061350)
PKCS7_get_signer_info (Address: 0x10061348)
X509_ALGOR_get0 (Address: 0x10061340)
X509_digest (Address: 0x10061344)
X509_get_ext_d2i (Address: 0x10061308)
X509_get_issuer_name (Address: 0x10061330)
X509_get_serialNumber (Address: 0x10061334)
X509_get_subject_name (Address: 0x1006132c)
X509_get_version (Address: 0x10061338)
X509_get0_pubkey_bitstr (Address: 0x1006131c)
X509_get0_tbs_sigalg (Address: 0x10061320)
X509_getm_notAfter (Address: 0x10061324)
X509_getm_notBefore (Address: 0x10061328)
X509_NAME_entry_count (Address: 0x10061318)
X509_NAME_ENTRY_get_data (Address: 0x1006130c)
X509_NAME_ENTRY_get_object (Address: 0x10061310)
X509_NAME_get_entry (Address: 0x10061314)

MSVCP140.dll

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100610c4)
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x10061128)
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100610d8)
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100610c0)
?_Xbad_alloc@std@@YAXXZ (Address: 0x100610ec)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x10061108)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1006110c)
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100610d0)
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10061100)
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x100610cc)
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100610e0)
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100610d4)
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100610fc)
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100610c8)
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100610dc)
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z (Address: 0x100610f8)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x100610f4)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z (Address: 0x1006112c)
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x100610e4)
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x100610e8)
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100610bc)
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z (Address: 0x100610f0)
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100610b8)
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x10061120)
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x100610b4)
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x10061118)
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x1006111c)
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100610b0)
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100610ac)
?uncaught_exception@std@@YA_NXZ (Address: 0x10061114)
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z (Address: 0x10061124)
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x10061110)
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x10061104)

VCRUNTIME140.dll

__current_exception (Address: 0x10061160)
__current_exception_context (Address: 0x10061164)
__CxxFrameHandler3 (Address: 0x10061144)
__std_exception_copy (Address: 0x10061138)
__std_exception_destroy (Address: 0x1006113c)
__std_terminate (Address: 0x10061154)
__std_type_info_destroy_list (Address: 0x10061134)
_CxxThrowException (Address: 0x10061140)
_except_handler4_common (Address: 0x10061168)
_purecall (Address: 0x10061158)
memchr (Address: 0x1006115c)
memcpy (Address: 0x10061148)
memmove (Address: 0x1006114c)
memset (Address: 0x10061150)