certca.dll

Description: Microsoft® Active Directory Certificate Services CA

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 815c7d65257a7916d92f8ed8fe4b4392

File Size: 639.0 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CAFindByName (Ordinal: 401, Address: 0x81b00)
  • CAFindByCertType (Ordinal: 402, Address: 0x81910)
  • CAFindByIssuerDN (Ordinal: 403, Address: 0x819f0)
  • CAEnumFirstCA (Ordinal: 404, Address: 0x81850)
  • CAEnumNextCA (Ordinal: 405, Address: 0x818b0)
  • CACreateNewCA (Ordinal: 406, Address: 0x815b0)
  • CAUpdateCA (Ordinal: 407, Address: 0x827d0)
  • CAUpdateCAEx (Ordinal: 408, Address: 0x827f0)
  • CADeleteCA (Ordinal: 409, Address: 0x81660)
  • CADeleteCAEx (Ordinal: 410, Address: 0x81680)
  • CACountCAs (Ordinal: 411, Address: 0x81540)
  • CACloseCA (Ordinal: 412, Address: 0x814e0)
  • CAGetCAProperty (Ordinal: 413, Address: 0x81e20)
  • CAFreeCAProperty (Ordinal: 414, Address: 0x81c80)
  • CASetCAProperty (Ordinal: 415, Address: 0x82580)
  • CAGetCACertificate (Ordinal: 416, Address: 0x81d60)
  • CASetCACertificate (Ordinal: 417, Address: 0x824c0)
  • CAGetCAExpiration (Ordinal: 418, Address: 0x81da0)
  • CASetCAExpiration (Ordinal: 419, Address: 0x82500)
  • CAGetCASecurity (Ordinal: 420, Address: 0x81e90)
  • CASetCASecurity (Ordinal: 421, Address: 0x825d0)
  • CAAccessCheck (Ordinal: 422, Address: 0x80930)
  • CAAccessCheckEx (Ordinal: 423, Address: 0x80970)
  • CAEnumCertTypesForCA (Ordinal: 424, Address: 0x817d0)
  • CAEnumCertTypesForCAEx (Ordinal: 425, Address: 0x817f0)
  • CAAddCACertificateType (Ordinal: 426, Address: 0x809b0)
  • CAAddCACertificateTypeEx (Ordinal: 427, Address: 0x809d0)
  • CARemoveCACertificateType (Ordinal: 428, Address: 0x823d0)
  • CARemoveCACertificateTypeEx (Ordinal: 429, Address: 0x823f0)
  • CAGetCAFlags (Ordinal: 430, Address: 0x81de0)
  • CASetCAFlags (Ordinal: 431, Address: 0x82540)
  • CAGetDN (Ordinal: 432, Address: 0x82110)
  • CAEnumCertTypes (Ordinal: 433, Address: 0x81740)
  • CAEnumCertTypesEx (Ordinal: 434, Address: 0x817a0)
  • CAFindCertTypeByName (Ordinal: 435, Address: 0x81c50)
  • CACreateCertType (Ordinal: 436, Address: 0x81580)
  • CAUpdateCertType (Ordinal: 437, Address: 0x82840)
  • CAUpdateCertTypeEx (Ordinal: 438, Address: 0x82860)
  • CADeleteCertType (Ordinal: 439, Address: 0x816d0)
  • CADeleteCertTypeEx (Ordinal: 440, Address: 0x816f0)
  • CACloneCertType (Ordinal: 441, Address: 0x80b80)
  • CAEnumNextCertType (Ordinal: 442, Address: 0x818e0)
  • CACountCertTypes (Ordinal: 443, Address: 0x81560)
  • CACloseCertType (Ordinal: 444, Address: 0x81510)
  • CAGetCertTypeProperty (Ordinal: 445, Address: 0x82070)
  • CAGetCertTypePropertyEx (Ordinal: 446, Address: 0x820c0)
  • CASetCertTypeProperty (Ordinal: 447, Address: 0x82760)
  • CASetCertTypePropertyEx (Ordinal: 448, Address: 0x827b0)
  • CADCSetCertTypePropertyEx (Ordinal: 449, Address: 0x81600)
  • CAFreeCertTypeProperty (Ordinal: 450, Address: 0x81cd0)
  • CAGetCertTypeExtensions (Ordinal: 451, Address: 0x81f70)
  • CAGetCertTypeExtensionsEx (Ordinal: 452, Address: 0x81f90)
  • CAFreeCertTypeExtensions (Ordinal: 453, Address: 0x81cb0)
  • CASetCertTypeExtension (Ordinal: 454, Address: 0x82660)
  • CAGetCertTypeKeySpec (Ordinal: 455, Address: 0x82030)
  • CASetCertTypeKeySpec (Ordinal: 456, Address: 0x82720)
  • CAGetCertTypeExpiration (Ordinal: 457, Address: 0x81f30)
  • CASetCertTypeExpiration (Ordinal: 458, Address: 0x82610)
  • CAGetCertTypeFlags (Ordinal: 459, Address: 0x81fd0)
  • CAGetCertTypeFlagsEx (Ordinal: 460, Address: 0x81ff0)
  • CASetCertTypeFlags (Ordinal: 461, Address: 0x826b0)
  • CASetCertTypeFlagsEx (Ordinal: 462, Address: 0x826d0)
  • CAInstallDefaultCertType (Ordinal: 463, Address: 0x82130)
  • CAInstallDefaultCertTypeEx (Ordinal: 464, Address: 0x82150)
  • CAIsCertTypeCurrent (Ordinal: 465, Address: 0x82180)
  • CAIsCertTypeCurrentEx (Ordinal: 466, Address: 0x821a0)
  • CACertTypeGetSecurity (Ordinal: 467, Address: 0x80b00)
  • CACertTypeSetSecurity (Ordinal: 468, Address: 0x80b40)
  • CACertTypeAccessCheck (Ordinal: 469, Address: 0x80aa0)
  • CACertTypeAccessCheckEx (Ordinal: 470, Address: 0x80ac0)
  • CACertTypeAuthzAccessCheck (Ordinal: 471, Address: 0x80ae0)
  • CAOIDCreateNew (Ordinal: 472, Address: 0x803c0)
  • CAOIDCreateNewEx (Ordinal: 473, Address: 0x803e0)
  • CAOIDSetProperty (Ordinal: 474, Address: 0x80670)
  • CAOIDSetPropertyEx (Ordinal: 475, Address: 0x80690)
  • CAOIDAdd (Ordinal: 476, Address: 0x80360)
  • CAOIDAddEx (Ordinal: 477, Address: 0x80380)
  • CAOIDDelete (Ordinal: 478, Address: 0x80420)
  • CAOIDDeleteEx (Ordinal: 479, Address: 0x80440)
  • CAOIDGetProperty (Ordinal: 480, Address: 0x80600)
  • CAOIDGetPropertyEx (Ordinal: 481, Address: 0x80620)
  • CAOIDFreeProperty (Ordinal: 482, Address: 0x80480)
  • CAOIDGetLdapURL (Ordinal: 483, Address: 0x804a0)
  • CAOIDFreeLdapURL (Ordinal: 484, Address: 0x80480)
  • CACertTypeRegisterQuery (Ordinal: 485, Address: 0x829a0)
  • CACertTypeQuery (Ordinal: 486, Address: 0x82970)
  • CACertTypeUnregisterQuery (Ordinal: 487, Address: 0x82c60)
  • CACreateLocalAutoEnrollmentObject (Ordinal: 488, Address: 0x83140)
  • CADeleteLocalAutoEnrollmentObject (Ordinal: 489, Address: 0x831e0)
  • CACreateAutoEnrollmentObjectEx (Ordinal: 490, Address: 0x830a0)
  • CAEnumCertTypesEx2 (Ordinal: 491, Address: 0x81770)
  • CAFindCertTypeByName2 (Ordinal: 492, Address: 0x81be0)
  • (Ordinal: 601, Address: 0x6c5b0)
  • (Ordinal: 602, Address: 0x6c470)
  • (Ordinal: 603, Address: 0x6c680)
  • (Ordinal: 604, Address: 0x6c510)
  • (Ordinal: 701, Address: 0x79df0)
  • (Ordinal: 702, Address: 0x79f30)
  • (Ordinal: 703, Address: 0x7a9a0)
  • (Ordinal: 704, Address: 0x67bb0)
  • (Ordinal: 705, Address: 0x67c80)
  • (Ordinal: 706, Address: 0x7ce60)
  • (Ordinal: 707, Address: 0x7c440)
  • (Ordinal: 708, Address: 0x7ce40)
  • (Ordinal: 801, Address: 0x7b7b0)
  • (Ordinal: 802, Address: 0x6c1a0)
  • (Ordinal: 803, Address: 0x7b9c0)
  • (Ordinal: 804, Address: 0x7ce80)
  • (Ordinal: 805, Address: 0x7c950)
  • (Ordinal: 806, Address: 0x7cec0)
  • (Ordinal: 807, Address: 0x6cc00)
  • (Ordinal: 808, Address: 0x7afc0)
  • (Ordinal: 809, Address: 0x7b190)
  • (Ordinal: 810, Address: 0x6cc00)
  • (Ordinal: 811, Address: 0x7a790)
  • (Ordinal: 812, Address: 0x7b4c0)
  • (Ordinal: 813, Address: 0x7b440)
  • (Ordinal: 814, Address: 0x7c410)
  • (Ordinal: 815, Address: 0x7c460)
  • (Ordinal: 816, Address: 0x6c070)
  • (Ordinal: 817, Address: 0x6c750)
  • (Ordinal: 818, Address: 0x6c0f0)
  • (Ordinal: 819, Address: 0x7b9f0)
  • (Ordinal: 820, Address: 0x6c1e0)
  • (Ordinal: 821, Address: 0x80080)
  • (Ordinal: 822, Address: 0x7cf10)
  • (Ordinal: 823, Address: 0x7c980)
  • (Ordinal: 824, Address: 0x7aec0)
  • (Ordinal: 825, Address: 0x6cbf0)
  • (Ordinal: 826, Address: 0x6cbf0)
  • (Ordinal: 827, Address: 0x6cbe0)
  • (Ordinal: 828, Address: 0x6cbe0)
  • (Ordinal: 829, Address: 0x7dbc0)
  • (Ordinal: 830, Address: 0x6cbf0)
  • (Ordinal: 831, Address: 0x6fa30)
  • (Ordinal: 832, Address: 0x6fbc0)
  • (Ordinal: 833, Address: 0x6fc00)
  • (Ordinal: 834, Address: 0x6f960)
  • (Ordinal: 835, Address: 0x6ea60)
  • (Ordinal: 836, Address: 0x6ea20)
  • (Ordinal: 837, Address: 0x704c0)
  • (Ordinal: 838, Address: 0x6c1c0)
  • (Ordinal: 839, Address: 0x67be0)
  • (Ordinal: 840, Address: 0x7a130)
  • (Ordinal: 841, Address: 0x7a150)
  • (Ordinal: 842, Address: 0x67cd0)
  • (Ordinal: 843, Address: 0x81d00)
  • (Ordinal: 844, Address: 0x823a0)
  • (Ordinal: 845, Address: 0x81ed0)
  • (Ordinal: 846, Address: 0x82370)
  • (Ordinal: 847, Address: 0x7a750)
  • (Ordinal: 848, Address: 0x6cbf0)
  • (Ordinal: 849, Address: 0x6cbe0)
  • (Ordinal: 850, Address: 0x6cbc0)
  • (Ordinal: 851, Address: 0x6cbe0)
  • (Ordinal: 852, Address: 0x7dd10)
  • (Ordinal: 853, Address: 0x83310)
  • (Ordinal: 854, Address: 0x6d880)
  • (Ordinal: 855, Address: 0x6de60)
  • (Ordinal: 856, Address: 0x6ccd0)
  • (Ordinal: 857, Address: 0x6c160)
  • (Ordinal: 858, Address: 0x6cc90)
  • (Ordinal: 859, Address: 0x7a110)
  • CCFindCertificateBuildFilter (Ordinal: 860, Address: 0x6c3b0)
  • CCFindCertificateFreeFilter (Ordinal: 861, Address: 0x6c3d0)
  • CCFindCertificateFromFilter (Ordinal: 862, Address: 0x6c400)
  • CCGetCertNameList (Ordinal: 863, Address: 0x6c440)
  • CCFreeStringArray (Ordinal: 864, Address: 0x6c420)
  • (Ordinal: 865, Address: 0x6d4c0)
  • (Ordinal: 866, Address: 0x6dba0)
  • (Ordinal: 867, Address: 0x6d760)
  • (Ordinal: 868, Address: 0x6e880)
  • (Ordinal: 869, Address: 0x6ca00)
  • (Ordinal: 870, Address: 0x6ff10)
  • (Ordinal: 871, Address: 0x700b0)
  • (Ordinal: 872, Address: 0x72230)
  • (Ordinal: 873, Address: 0x7cac0)
  • (Ordinal: 874, Address: 0x7ce20)
  • (Ordinal: 875, Address: 0x6ff30)

Imported DLLs & Functions

api-ms-win-core-console-l1-1-0.dll
  • WriteConsoleW (Address: 0x10097118)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatW (Address: 0x10097124)
  • GetTimeFormatW (Address: 0x10097120)
api-ms-win-core-debug-l1-1-0.dll
  • IsDebuggerPresent (Address: 0x10097134)
  • OutputDebugStringA (Address: 0x1009712c)
  • OutputDebugStringW (Address: 0x10097130)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1009713c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10097144)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10097158)
  • SetLastError (Address: 0x1009714c)
  • SetUnhandledExceptionFilter (Address: 0x10097150)
  • UnhandledExceptionFilter (Address: 0x10097154)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x10097170)
  • CreateFileW (Address: 0x10097164)
  • DeleteFileW (Address: 0x1009718c)
  • FileTimeToLocalFileTime (Address: 0x10097174)
  • GetFileAttributesW (Address: 0x10097178)
  • GetFileSize (Address: 0x10097160)
  • GetFileType (Address: 0x10097188)
  • GetFullPathNameW (Address: 0x10097168)
  • GetTempFileNameW (Address: 0x10097184)
  • LocalFileTimeToFileTime (Address: 0x1009717c)
  • ReadFile (Address: 0x1009716c)
  • WriteFile (Address: 0x10097180)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x10097194)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1009719c)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100971a4)
  • HeapAlloc (Address: 0x100971ac)
  • HeapFree (Address: 0x100971a8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x100971b4)
  • LocalFree (Address: 0x100971bc)
  • LocalReAlloc (Address: 0x100971b8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x100971e4)
  • FindResourceExW (Address: 0x100971d8)
  • FreeLibrary (Address: 0x100971dc)
  • GetModuleHandleW (Address: 0x100971e0)
  • GetProcAddress (Address: 0x100971d4)
  • LoadLibraryExW (Address: 0x100971c8)
  • LoadResource (Address: 0x100971cc)
  • LoadStringW (Address: 0x100971d0)
  • LockResource (Address: 0x100971c4)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x100971ec)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10097200)
  • GetACP (Address: 0x100971f8)
  • GetLocaleInfoW (Address: 0x100971fc)
  • IdnToUnicode (Address: 0x100971f4)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • GetSystemDefaultUILanguage (Address: 0x10097208)
  • GetUserDefaultUILanguage (Address: 0x1009720c)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1009721c)
  • MapViewOfFile (Address: 0x10097214)
  • UnmapViewOfFile (Address: 0x10097218)
api-ms-win-core-processenvironment-l1-1-0.dll
  • GetCommandLineW (Address: 0x10097224)
  • GetEnvironmentVariableW (Address: 0x10097230)
  • GetStdHandle (Address: 0x1009722c)
  • SearchPathW (Address: 0x10097228)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x10097250)
  • GetCurrentProcess (Address: 0x1009724c)
  • GetCurrentProcessId (Address: 0x10097238)
  • GetCurrentThread (Address: 0x1009723c)
  • GetCurrentThreadId (Address: 0x10097254)
  • OpenProcessToken (Address: 0x10097248)
  • OpenThreadToken (Address: 0x10097244)
  • TerminateProcess (Address: 0x10097240)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1009725c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10097264)
api-ms-win-core-psapi-l1-1-0.dll
  • K32GetProcessImageFileNameW (Address: 0x1009726c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x10097278)
  • RegCreateKeyExW (Address: 0x1009728c)
  • RegDeleteKeyExW (Address: 0x1009727c)
  • RegDeleteValueW (Address: 0x10097274)
  • RegEnumKeyExW (Address: 0x10097284)
  • RegGetValueW (Address: 0x1009729c)
  • RegOpenCurrentUser (Address: 0x10097298)
  • RegOpenKeyExW (Address: 0x10097294)
  • RegQueryInfoKeyW (Address: 0x10097288)
  • RegQueryValueExW (Address: 0x10097280)
  • RegSetValueExW (Address: 0x10097290)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x100972a4)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x100972ac)
  • FoldStringW (Address: 0x100972b8)
  • MultiByteToWideChar (Address: 0x100972b0)
  • WideCharToMultiByte (Address: 0x100972b4)
api-ms-win-core-string-l2-1-0.dll
  • CharLowerW (Address: 0x100972c0)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrlenW (Address: 0x100972c8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100972d8)
  • DeleteCriticalSection (Address: 0x100972e8)
  • EnterCriticalSection (Address: 0x100972e0)
  • InitializeCriticalSection (Address: 0x100972d4)
  • LeaveCriticalSection (Address: 0x100972dc)
  • ReleaseSRWLockExclusive (Address: 0x100972d0)
  • WaitForSingleObject (Address: 0x100972e4)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x100972f4)
  • SleepConditionVariableSRW (Address: 0x100972f8)
  • WakeAllConditionVariable (Address: 0x100972f0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x10097308)
  • GetLocalTime (Address: 0x10097318)
  • GetSystemDirectoryW (Address: 0x10097300)
  • GetSystemTime (Address: 0x10097310)
  • GetSystemTimeAsFileTime (Address: 0x10097314)
  • GetTickCount (Address: 0x10097304)
  • GetVersionExW (Address: 0x1009730c)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x10097320)
  • SystemTimeToFileTime (Address: 0x10097324)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1009732c)
  • EncodePointer (Address: 0x10097330)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x10097354)
  • AccessCheckByType (Address: 0x10097380)
  • AddAccessAllowedAce (Address: 0x1009733c)
  • AddAccessAllowedObjectAce (Address: 0x10097338)
  • AddAce (Address: 0x10097378)
  • AdjustTokenPrivileges (Address: 0x1009734c)
  • AllocateAndInitializeSid (Address: 0x10097388)
  • CheckTokenMembership (Address: 0x10097390)
  • CopySid (Address: 0x100973c4)
  • CreateWellKnownSid (Address: 0x100973a4)
  • DeleteAce (Address: 0x10097398)
  • DuplicateToken (Address: 0x1009738c)
  • EqualSid (Address: 0x100973a8)
  • FreeSid (Address: 0x10097394)
  • GetAce (Address: 0x100973b4)
  • GetAclInformation (Address: 0x1009736c)
  • GetLengthSid (Address: 0x10097348)
  • GetSecurityDescriptorControl (Address: 0x10097368)
  • GetSecurityDescriptorDacl (Address: 0x10097384)
  • GetSecurityDescriptorGroup (Address: 0x1009737c)
  • GetSecurityDescriptorLength (Address: 0x10097340)
  • GetSecurityDescriptorOwner (Address: 0x100973c8)
  • GetSidIdentifierAuthority (Address: 0x10097358)
  • GetSidLengthRequired (Address: 0x10097360)
  • GetSidSubAuthority (Address: 0x10097344)
  • GetSidSubAuthorityCount (Address: 0x10097364)
  • GetTokenInformation (Address: 0x100973ac)
  • ImpersonateLoggedOnUser (Address: 0x100973a0)
  • InitializeAcl (Address: 0x10097350)
  • InitializeSid (Address: 0x1009735c)
  • IsValidSecurityDescriptor (Address: 0x100973c0)
  • MakeAbsoluteSD (Address: 0x100973b0)
  • MakeSelfRelativeSD (Address: 0x100973b8)
  • RevertToSelf (Address: 0x1009739c)
  • SetSecurityDescriptorControl (Address: 0x10097370)
  • SetSecurityDescriptorDacl (Address: 0x10097374)
  • SetSecurityDescriptorGroup (Address: 0x100973cc)
  • SetSecurityDescriptorOwner (Address: 0x100973bc)
api-ms-win-security-logon-l1-1-0.dll
  • LogonUserExW (Address: 0x100973d4)
CRYPT32.dll
  • CertAddEncodedCTLToStore (Address: 0x10097024)
  • CertCloseStore (Address: 0x10097060)
  • CertCreateCertificateChainEngine (Address: 0x10097064)
  • CertCreateCertificateContext (Address: 0x1009708c)
  • CertDeleteCTLFromStore (Address: 0x1009701c)
  • CertDuplicateCertificateContext (Address: 0x10097044)
  • CertEnumCertificatesInStore (Address: 0x10097078)
  • CertFindCTLInStore (Address: 0x10097020)
  • CertFindExtension (Address: 0x10097090)
  • CertFreeCertificateChain (Address: 0x10097040)
  • CertFreeCertificateChainEngine (Address: 0x1009705c)
  • CertFreeCertificateContext (Address: 0x10097004)
  • CertGetCertificateChain (Address: 0x10097038)
  • CertGetCertificateContextProperty (Address: 0x10097008)
  • CertGetCRLContextProperty (Address: 0x10097018)
  • CertGetEnhancedKeyUsage (Address: 0x1009706c)
  • CertGetIntendedKeyUsage (Address: 0x10097058)
  • CertGetNameStringW (Address: 0x10097000)
  • CertNameToStrW (Address: 0x10097074)
  • CertOpenStore (Address: 0x10097068)
  • CertVerifyCertificateChainPolicy (Address: 0x1009703c)
  • CryptBinaryToStringA (Address: 0x10097050)
  • CryptBinaryToStringW (Address: 0x10097054)
  • CryptDecodeObjectEx (Address: 0x10097034)
  • CryptEncodeObject (Address: 0x10097014)
  • CryptEncodeObjectEx (Address: 0x10097070)
  • CryptEnumOIDInfo (Address: 0x1009700c)
  • CryptFindOIDInfo (Address: 0x1009707c)
  • CryptFormatObject (Address: 0x10097010)
  • CryptFreeOIDFunctionAddress (Address: 0x10097088)
  • CryptGetOIDFunctionAddress (Address: 0x10097084)
  • CryptHashCertificate (Address: 0x10097030)
  • CryptHashPublicKeyInfo (Address: 0x1009702c)
  • CryptInitOIDFunctionSet (Address: 0x10097080)
  • CryptMsgEncodeAndSignCTL (Address: 0x10097028)
  • CryptStringToBinaryA (Address: 0x10097048)
  • CryptStringToBinaryW (Address: 0x1009704c)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10097500)
  • __dllonexit (Address: 0x100974ec)
  • __iob_func (Address: 0x100973e0)
  • __isascii (Address: 0x10097480)
  • _amsg_exit (Address: 0x100973f8)
  • _callnewh (Address: 0x1009740c)
  • _CxxThrowException (Address: 0x100973e8)
  • _errno (Address: 0x10097438)
  • _except_handler4_common (Address: 0x100974f8)
  • _initterm (Address: 0x10097400)
  • _lock (Address: 0x10097504)
  • _onexit (Address: 0x100974f0)
  • _purecall (Address: 0x10097414)
  • _swab (Address: 0x100974b4)
  • _unlock (Address: 0x100974e8)
  • _vsnprintf (Address: 0x1009745c)
  • _vsnwprintf (Address: 0x1009744c)
  • _wcsicmp (Address: 0x10097468)
  • _wcsnicmp (Address: 0x10097494)
  • _wfopen_s (Address: 0x100974ac)
  • _wgetenv (Address: 0x1009743c)
  • _wtoi (Address: 0x10097478)
  • _wtol (Address: 0x100974dc)
  • _XcptFilter (Address: 0x100973f4)
  • ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z (Address: 0x1009741c)
  • ??_V@YAXPAX@Z (Address: 0x10097460)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10097408)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x10097404)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1009747c)
  • ??1exception@@UAE@XZ (Address: 0x100973dc)
  • ??1type_info@@UAE@XZ (Address: 0x100974f4)
  • ??3@YAXPAX@Z (Address: 0x10097418)
  • ?what@exception@@UBEPBDXZ (Address: 0x100973e4)
  • atoi (Address: 0x1009749c)
  • bsearch (Address: 0x100974e4)
  • fclose (Address: 0x10097430)
  • ferror (Address: 0x100974a8)
  • fflush (Address: 0x1009742c)
  • fopen (Address: 0x10097434)
  • fprintf (Address: 0x10097424)
  • fputws (Address: 0x100974a4)
  • free (Address: 0x100973fc)
  • fseek (Address: 0x10097440)
  • ftell (Address: 0x10097444)
  • fwprintf (Address: 0x100974b0)
  • fwrite (Address: 0x10097448)
  • getenv (Address: 0x10097458)
  • isdigit (Address: 0x10097498)
  • iswalpha (Address: 0x10097450)
  • iswdigit (Address: 0x10097474)
  • iswlower (Address: 0x100974c8)
  • iswspace (Address: 0x1009746c)
  • iswupper (Address: 0x100974c0)
  • iswxdigit (Address: 0x10097470)
  • isxdigit (Address: 0x10097484)
  • malloc (Address: 0x10097410)
  • memcmp (Address: 0x100974fc)
  • memcpy (Address: 0x100973ec)
  • memmove (Address: 0x100973f0)
  • memset (Address: 0x10097508)
  • strchr (Address: 0x10097454)
  • strcspn (Address: 0x10097420)
  • strncmp (Address: 0x100974a0)
  • strrchr (Address: 0x100974d4)
  • swscanf (Address: 0x10097488)
  • towlower (Address: 0x100974c4)
  • towupper (Address: 0x100974cc)
  • vfwprintf (Address: 0x100974b8)
  • wcschr (Address: 0x10097464)
  • wcscspn (Address: 0x10097428)
  • wcsncmp (Address: 0x100974d0)
  • wcsrchr (Address: 0x1009748c)
  • wcsstr (Address: 0x10097490)
  • wcstok (Address: 0x100974d8)
  • wcstol (Address: 0x100974e0)
  • wcstoul (Address: 0x100974bc)
ntdll.dll
  • RtlFindMessage (Address: 0x10097524)
  • RtlFreeUnicodeString (Address: 0x10097510)
  • RtlInitUTF8String (Address: 0x10097518)
  • RtlNtStatusToDosError (Address: 0x1009751c)
  • RtlUTF8StringToUnicodeString (Address: 0x10097514)
  • RtlValidRelativeSecurityDescriptor (Address: 0x10097520)
RPCRT4.dll
  • UuidCreate (Address: 0x10097098)
WLDAP32.dll
  • (Address: 0x100970fc)
  • (Address: 0x100970a8)
  • (Address: 0x100970a4)
  • (Address: 0x100970a0)
  • (Address: 0x10097110)
  • (Address: 0x1009710c)
  • (Address: 0x10097108)
  • (Address: 0x10097104)
  • (Address: 0x10097100)
  • (Address: 0x100970d4)
  • (Address: 0x100970b0)
  • (Address: 0x100970b4)
  • (Address: 0x100970b8)
  • (Address: 0x100970bc)
  • (Address: 0x100970c0)
  • (Address: 0x100970c4)
  • (Address: 0x100970c8)
  • (Address: 0x100970cc)
  • (Address: 0x100970d0)
  • (Address: 0x100970ac)
  • (Address: 0x100970d8)
  • (Address: 0x100970dc)
  • (Address: 0x100970e0)
  • (Address: 0x100970e4)
  • (Address: 0x100970e8)
  • (Address: 0x100970ec)
  • (Address: 0x100970f0)
  • (Address: 0x100970f4)
  • (Address: 0x100970f8)