rsaenh.dll

Description: Microsoft Enhanced Cryptographic Provider

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8dbb1d81a0a5cdf2323aad90bd6e49f9

File Size: 215.0 KB

Uploaded At: Dec. 1, 2025, 7:38 a.m.

Views: 6

Exported Functions

CPAcquireContext (Ordinal: 1, Address: 0x6bc0)
CPCreateHash (Ordinal: 2, Address: 0x3750)
CPDecrypt (Ordinal: 3, Address: 0x185e0)
CPDeriveKey (Ordinal: 4, Address: 0x1b480)
CPDestroyHash (Ordinal: 5, Address: 0x4b10)
CPDestroyKey (Ordinal: 6, Address: 0x4c90)
CPDuplicateHash (Ordinal: 7, Address: 0x19f00)
CPDuplicateKey (Ordinal: 8, Address: 0x1bcf0)
CPEncrypt (Ordinal: 9, Address: 0x186a0)
CPExportKey (Ordinal: 10, Address: 0x4e90)
CPGenKey (Ordinal: 11, Address: 0x1410)
CPGenRandom (Ordinal: 12, Address: 0x69c0)
CPGetHashParam (Ordinal: 13, Address: 0x4860)
CPGetKeyParam (Ordinal: 14, Address: 0x65f0)
CPGetProvParam (Ordinal: 15, Address: 0x1bf80)
CPGetUserKey (Ordinal: 16, Address: 0x9240)
CPHashData (Ordinal: 17, Address: 0x6240)
CPHashSessionKey (Ordinal: 18, Address: 0x1a0f0)
CPImportKey (Ordinal: 19, Address: 0x1860)
CPReleaseContext (Ordinal: 20, Address: 0x66d0)
CPSetHashParam (Ordinal: 21, Address: 0x12e0)
CPSetKeyParam (Ordinal: 22, Address: 0x1cfc0)
CPSetProvParam (Ordinal: 23, Address: 0x1dab0)
CPSignHash (Ordinal: 24, Address: 0x21160)
CPVerifySignature (Ordinal: 25, Address: 0x4500)
DllRegisterServer (Ordinal: 26, Address: 0x18400)
DllUnregisterServer (Ordinal: 27, Address: 0x184b0)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x168027430)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x168027440)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x168027458)
SetLastError (Address: 0x168027450)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1680274a0)
DeleteFileW (Address: 0x1680274b0)
FindClose (Address: 0x168027488)
FindFirstFileExW (Address: 0x168027478)
FindNextFileW (Address: 0x168027468)
GetFileSize (Address: 0x168027490)
GetTempFileNameW (Address: 0x168027480)
ReadFile (Address: 0x168027498)
RemoveDirectoryW (Address: 0x168027470)
WriteFile (Address: 0x1680274a8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1680274c0)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x1680274d0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1680274e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x168027508)
HeapAlloc (Address: 0x1680274f8)
HeapFree (Address: 0x1680274f0)
HeapReAlloc (Address: 0x168027500)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x168027520)
LocalFree (Address: 0x168027518)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x168027530)
FreeLibrary (Address: 0x168027560)
GetModuleFileNameW (Address: 0x168027548)
GetModuleHandleW (Address: 0x168027550)
GetProcAddress (Address: 0x168027540)
LoadLibraryExA (Address: 0x168027558)
LoadStringW (Address: 0x168027538)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x168027570)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1680275a8)
MapViewOfFile (Address: 0x1680275a0)
UnmapViewOfFile (Address: 0x168027598)
VirtualAlloc (Address: 0x168027588)
VirtualProtect (Address: 0x168027590)
VirtualQuery (Address: 0x168027580)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1680275d0)
GetCurrentThread (Address: 0x1680275c8)
OpenProcessToken (Address: 0x1680275b8)
OpenThreadToken (Address: 0x1680275d8)
SetThreadStackGuarantee (Address: 0x1680275c0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1680275f8)
RegCreateKeyExA (Address: 0x1680275f0)
RegOpenKeyExA (Address: 0x1680275e8)
RegQueryValueExA (Address: 0x168027608)
RegSetValueExA (Address: 0x168027600)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x168027618)
WideCharToMultiByte (Address: 0x168027620)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenA (Address: 0x168027630)
lstrlenW (Address: 0x168027638)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x168027658)
AcquireSRWLockShared (Address: 0x168027660)
DeleteCriticalSection (Address: 0x168027680)
EnterCriticalSection (Address: 0x168027678)
InitializeCriticalSection (Address: 0x168027690)
InitializeSRWLock (Address: 0x168027648)
LeaveCriticalSection (Address: 0x168027688)
ReleaseSRWLockExclusive (Address: 0x168027650)
ReleaseSRWLockShared (Address: 0x168027668)
TryAcquireSRWLockExclusive (Address: 0x168027670)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1680276a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1680276c0)
GetSystemInfo (Address: 0x1680276b8)
GetTickCount (Address: 0x1680276b0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1680276e8)
CreateThreadpoolTimer (Address: 0x1680276d0)
SetThreadpoolTimer (Address: 0x1680276d8)
WaitForThreadpoolTimerCallbacks (Address: 0x1680276e0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x168027708)
EventSetInformation (Address: 0x168027700)
EventUnregister (Address: 0x1680276f8)
EventWriteTransfer (Address: 0x168027710)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x168027730)
AllocateAndInitializeSid (Address: 0x168027788)
EqualSid (Address: 0x1680277a0)
FreeSid (Address: 0x1680277b0)
GetAce (Address: 0x168027790)
GetAclInformation (Address: 0x168027758)
GetLengthSid (Address: 0x168027760)
GetSecurityDescriptorControl (Address: 0x1680277c8)
GetSecurityDescriptorDacl (Address: 0x168027720)
GetSecurityDescriptorGroup (Address: 0x168027768)
GetSecurityDescriptorLength (Address: 0x168027740)
GetSecurityDescriptorOwner (Address: 0x1680277b8)
GetSecurityDescriptorSacl (Address: 0x168027748)
GetSidIdentifierAuthority (Address: 0x168027770)
GetSidSubAuthority (Address: 0x168027728)
GetSidSubAuthorityCount (Address: 0x1680277d0)
GetTokenInformation (Address: 0x168027778)
InitializeAcl (Address: 0x168027780)
InitializeSecurityDescriptor (Address: 0x1680277a8)
IsValidSid (Address: 0x168027798)
MakeSelfRelativeSD (Address: 0x1680277c0)
PrivilegeCheck (Address: 0x168027750)
SetSecurityDescriptorDacl (Address: 0x168027738)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x168027840)
BCryptCreateHash (Address: 0x168027848)
BCryptDecrypt (Address: 0x168027870)
BCryptDestroyHash (Address: 0x168027838)
BCryptDestroyKey (Address: 0x168027878)
BCryptDuplicateHash (Address: 0x168027830)
BCryptDuplicateKey (Address: 0x168027858)
BCryptEncrypt (Address: 0x168027860)
BCryptExportKey (Address: 0x1680277f0)
BCryptFinalizeKeyPair (Address: 0x1680277e0)
BCryptFinishHash (Address: 0x168027868)
BCryptGenerateKeyPair (Address: 0x1680277e8)
BCryptGenerateSymmetricKey (Address: 0x168027850)
BCryptGetProperty (Address: 0x168027810)
BCryptHashData (Address: 0x168027820)
BCryptImportKeyPair (Address: 0x1680277f8)
BCryptOpenAlgorithmProvider (Address: 0x168027828)
BCryptSetProperty (Address: 0x168027800)
BCryptSignHash (Address: 0x168027818)
BCryptVerifySignature (Address: 0x168027808)

ntdll.dll

__C_specific_handler (Address: 0x1680278a0)
__chkstk (Address: 0x168027980)
_strlwr (Address: 0x168027898)
_vsnwprintf (Address: 0x168027970)
EtwGetTraceEnableFlags (Address: 0x168027920)
EtwGetTraceEnableLevel (Address: 0x168027908)
EtwGetTraceLoggerHandle (Address: 0x168027910)
EtwRegisterTraceGuidsW (Address: 0x168027900)
EtwTraceMessage (Address: 0x168027958)
EtwUnregisterTraceGuids (Address: 0x168027928)
memcmp (Address: 0x168027988)
memcpy (Address: 0x168027990)
memset (Address: 0x168027938)
NtClose (Address: 0x168027890)
NtCreateFile (Address: 0x1680278c8)
NtQueryInformationToken (Address: 0x1680278b8)
NtTerminateProcess (Address: 0x168027930)
RtlAllocateHeap (Address: 0x1680278f0)
RtlCaptureContext (Address: 0x168027978)
RtlDllShutdownInProgress (Address: 0x168027918)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x168027960)
RtlFreeHeap (Address: 0x1680278a8)
RtlImageNtHeader (Address: 0x1680278f8)
RtlLookupFunctionEntry (Address: 0x168027968)
RtlNtStatusToDosError (Address: 0x1680278b0)
RtlReleaseRelativeName (Address: 0x1680278c0)
RtlUnhandledExceptionFilter (Address: 0x168027940)
RtlVirtualUnwind (Address: 0x168027948)
strchr (Address: 0x1680278e8)
strcpy_s (Address: 0x1680278d8)
swprintf_s (Address: 0x168027888)
wcscat_s (Address: 0x1680278d0)
wcscmp (Address: 0x168027998)
wcscpy_s (Address: 0x168027950)
wcsncpy_s (Address: 0x1680278e0)