certcli.dll

Description: Microsoft® Active Directory Certificate Services Client

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 40af883bf1aecec83714d933c46dfa0c

File Size: 347.0 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CSPrintAssert (Ordinal: 201, Address: 0x49fae)
CSPrintError (Ordinal: 202, Address: 0x49fc7)
DbgPrintf (Ordinal: 203, Address: 0x4a0f3)
DbgPrintfInit (Ordinal: 204, Address: 0x4a10d)
DbgIsSSActive (Ordinal: 205, Address: 0x4a0a2)
myHResultToString_old (Ordinal: 206, Address: 0x4a5b5)
myGetErrorMessageText (Ordinal: 207, Address: 0x4a468)
myHResultToStringRaw_old (Ordinal: 208, Address: 0x4a593)
CAAccessCheck (Ordinal: 209, Address: 0x4a716)
(Ordinal: 210, Address: 0x1eed0)
CAAccessCheckEx (Ordinal: 211, Address: 0x4a73b)
CAAddCACertificateType (Ordinal: 212, Address: 0x4a769)
myFreeColumnDisplayNames (Ordinal: 213, Address: 0x4a3db)
myRobustLdapBind (Ordinal: 214, Address: 0x4b815)
myIsDelayLoadHResult (Ordinal: 215, Address: 0x4a5d6)
myHExceptionCode (Ordinal: 216, Address: 0x4a530)
myJetHResult (Ordinal: 217, Address: 0x4a5ef)
myModifyVirtualRootsAndFileShares (Ordinal: 218, Address: 0x4a63c)
(Ordinal: 219, Address: 0x20310)
(Ordinal: 220, Address: 0x20380)
(Ordinal: 221, Address: 0x203f0)
CAAddCACertificateTypeEx (Ordinal: 222, Address: 0x4a7a0)
DecodeFileW (Ordinal: 223, Address: 0x4a13c)
CACertTypeAccessCheck (Ordinal: 224, Address: 0x4a7d6)
EncodeToFileW (Ordinal: 225, Address: 0x4a192)
CACertTypeAccessCheckEx (Ordinal: 226, Address: 0x4a80b)
CACertTypeAuthzAccessCheck (Ordinal: 227, Address: 0x4a845)
CACertTypeGetSecurity (Ordinal: 228, Address: 0x4a87d)
CACertTypeQuery (Ordinal: 229, Address: 0x4a8aa)
CACertTypeRegisterQuery (Ordinal: 230, Address: 0x4a8d9)
CACertTypeSetSecurity (Ordinal: 231, Address: 0x4a90e)
CACertTypeUnregisterQuery (Ordinal: 232, Address: 0x4a945)
CACloneCertType (Ordinal: 233, Address: 0x4a976)
CACloseCA (Ordinal: 234, Address: 0x4a997)
CACloseCertType (Ordinal: 235, Address: 0x4a9b8)
CACountCAs (Ordinal: 236, Address: 0x4a9da)
CACountCertTypes (Ordinal: 237, Address: 0x4a9fd)
CACreateAutoEnrollmentObjectEx (Ordinal: 238, Address: 0x4aa34)
CACreateCertType (Ordinal: 239, Address: 0x4aa6b)
myAddShare (Ordinal: 240, Address: 0x4a2aa)
(Ordinal: 241, Address: 0x247c0)
DbgLogStringInit (Ordinal: 242, Address: 0x4a0dd)
CACreateLocalAutoEnrollmentObject (Ordinal: 243, Address: 0x4aaa5)
CACreateNewCA (Ordinal: 244, Address: 0x4aadc)
WszToMultiByteIntegerBuf (Ordinal: 245, Address: 0x4a293)
WszToMultiByteInteger (Ordinal: 246, Address: 0x4a26e)
myGetErrorMessageText1 (Ordinal: 247, Address: 0x4a446)
myGetErrorMessageTextEx (Ordinal: 248, Address: 0x4a48c)
myCAPropGetDisplayName (Ordinal: 249, Address: 0x4a2cd)
myCAPropInfoUnmarshal (Ordinal: 250, Address: 0x4a30e)
myCAPropInfoLookup (Ordinal: 251, Address: 0x4a2ec)
myRobustLdapBindEx (Ordinal: 252, Address: 0x4b834)
caTranslateFileTimePeriodToPeriodUnits (Ordinal: 253, Address: 0x4b7dd)
myCryptBinaryToString (Ordinal: 254, Address: 0x4a330)
myCryptBinaryToStringA (Ordinal: 255, Address: 0x4a353)
myCryptStringToBinary (Ordinal: 256, Address: 0x4a375)
myCryptStringToBinaryA (Ordinal: 257, Address: 0x4a398)
myOIDHashOIDToString (Ordinal: 258, Address: 0x4a65d)
myLogExceptionInit (Ordinal: 259, Address: 0x4a60e)
myHExceptionCodePrint (Ordinal: 260, Address: 0x4a552)
DbgPrintfW (Ordinal: 261, Address: 0x4a124)
IsASPEnabledInIIS (Ordinal: 262, Address: 0x4a1b0)
EnableASPInIIS (Ordinal: 263, Address: 0x4a157)
IsISAPIExtensionEnabled (Ordinal: 264, Address: 0x4a1f6)
EnableISAPIExtension (Ordinal: 265, Address: 0x4a178)
myGetSidFromDomain (Ordinal: 266, Address: 0x4a4e7)
IsASPEnabledInIIS_New (Ordinal: 267, Address: 0x4a1d2)
CADCSetCertTypePropertyEx (Ordinal: 268, Address: 0x4ab0b)
CADeleteCA (Ordinal: 269, Address: 0x4ab37)
CADeleteCAEx (Ordinal: 270, Address: 0x4ab56)
CADeleteCertType (Ordinal: 271, Address: 0x4ab7b)
CADeleteCertTypeEx (Ordinal: 272, Address: 0x4aba6)
CADeleteLocalAutoEnrollmentObject (Ordinal: 273, Address: 0x4abe2)
CAEnumCertTypes (Ordinal: 274, Address: 0x4ac1b)
CAEnumCertTypesEx (Ordinal: 275, Address: 0x4ac44)
CAEnumCertTypesForCA (Ordinal: 276, Address: 0x4ac72)
CAEnumCertTypesForCAEx (Ordinal: 277, Address: 0x4aca5)
CAEnumFirstCA (Ordinal: 278, Address: 0x4acd1)
CAEnumNextCA (Ordinal: 279, Address: 0x4acf3)
CAEnumNextCertType (Ordinal: 280, Address: 0x4ad1a)
CAFindByCertType (Ordinal: 281, Address: 0x4ad45)
CAFindByIssuerDN (Ordinal: 282, Address: 0x4ad6e)
CAFindByName (Ordinal: 283, Address: 0x4ad93)
CAFindCertTypeByName (Ordinal: 284, Address: 0x4adbc)
CAFreeCAProperty (Ordinal: 285, Address: 0x4ade9)
CAFreeCertTypeExtensions (Ordinal: 286, Address: 0x4ae1a)
CAFreeCertTypeProperty (Ordinal: 287, Address: 0x4ae51)
CAGetCACertificate (Ordinal: 288, Address: 0x4aea0)
CAGetCAExpiration (Ordinal: 289, Address: 0x4aecc)
CAGetCAFlags (Ordinal: 290, Address: 0x4aef2)
CAGetCAProperty (Ordinal: 291, Address: 0x4af16)
CAGetCASecurity (Ordinal: 292, Address: 0x4af3d)
CAGetCertTypeExpiration (Ordinal: 293, Address: 0x4af92)
CAGetCertTypeExtensions (Ordinal: 294, Address: 0x4afc9)
CAGetCertTypeExtensionsEx (Ordinal: 295, Address: 0x4b002)
CAGetCertTypeFlags (Ordinal: 296, Address: 0x4b036)
CAGetCertTypeFlagsEx (Ordinal: 297, Address: 0x4b065)
CAGetCertTypeKeySpec (Ordinal: 298, Address: 0x4b096)
CAGetCertTypeProperty (Ordinal: 299, Address: 0x4b0c8)
CAGetCertTypePropertyEx (Ordinal: 300, Address: 0x4b0fd)
CAGetDN (Ordinal: 301, Address: 0x4b124)
CAInstallDefaultCertType (Ordinal: 302, Address: 0x4b14c)
CAInstallDefaultCertTypeEx (Ordinal: 303, Address: 0x4b187)
CAIsCertTypeCurrent (Ordinal: 304, Address: 0x4b1bd)
CAIsCertTypeCurrentEx (Ordinal: 305, Address: 0x4b1ee)
CAOIDAdd (Ordinal: 306, Address: 0x4b248)
CAOIDAddEx (Ordinal: 307, Address: 0x4b263)
CAOIDCreateNew (Ordinal: 308, Address: 0x4b284)
CAOIDCreateNewEx (Ordinal: 309, Address: 0x4b2ab)
CAOIDDelete (Ordinal: 310, Address: 0x4b2cf)
CAOIDDeleteEx (Ordinal: 311, Address: 0x4b2f0)
CAOIDFreeLdapURL (Ordinal: 312, Address: 0x4b316)
CAOIDFreeProperty (Ordinal: 313, Address: 0x4b340)
CAOIDGetLdapURL (Ordinal: 314, Address: 0x4b369)
CAOIDGetProperty (Ordinal: 315, Address: 0x4b391)
CAOIDGetPropertyEx (Ordinal: 316, Address: 0x4b3bc)
CAOIDSetProperty (Ordinal: 317, Address: 0x4b3e7)
CAOIDSetPropertyEx (Ordinal: 318, Address: 0x4b412)
CARemoveCACertificateType (Ordinal: 319, Address: 0x4b446)
CARemoveCACertificateTypeEx (Ordinal: 320, Address: 0x4b483)
CASetCACertificate (Ordinal: 321, Address: 0x4b4b9)
CASetCAExpiration (Ordinal: 322, Address: 0x4b4e5)
CASetCAFlags (Ordinal: 323, Address: 0x4b50b)
CASetCAProperty (Ordinal: 324, Address: 0x4b52f)
CASetCASecurity (Ordinal: 325, Address: 0x4b556)
CASetCertTypeExpiration (Ordinal: 326, Address: 0x4b585)
CASetCertTypeExtension (Ordinal: 327, Address: 0x4b5bb)
CASetCertTypeFlags (Ordinal: 328, Address: 0x4b5ec)
CASetCertTypeFlagsEx (Ordinal: 329, Address: 0x4b61b)
CASetCertTypeKeySpec (Ordinal: 330, Address: 0x4b64c)
CASetCertTypeProperty (Ordinal: 331, Address: 0x4b67e)
CASetCertTypePropertyEx (Ordinal: 332, Address: 0x4b6b3)
CAUpdateCA (Ordinal: 333, Address: 0x4b6dd)
CAUpdateCAEx (Ordinal: 334, Address: 0x4b6fc)
CAUpdateCertType (Ordinal: 335, Address: 0x4b721)
CAUpdateCertTypeEx (Ordinal: 336, Address: 0x4b74c)
DllCanUnloadNow (Ordinal: 337, Address: 0x178b0)
DllGetClassObject (Ordinal: 338, Address: 0x178e0)
DllMain (Ordinal: 339, Address: 0x17810)
DllRegisterServer (Ordinal: 340, Address: 0x17930)
DllUnregisterServer (Ordinal: 341, Address: 0x17930)
myDoesDSExist@209 (Ordinal: 342, Address: 0x4b852)
mySanitizeName (Ordinal: 349, Address: 0x4a699)
mySanitizedNameToDSName (Ordinal: 350, Address: 0x4a6bd)
mySanitizedNameToShortName (Ordinal: 351, Address: 0x4a6e4)
myRevertSanitizeName (Ordinal: 352, Address: 0x4a67e)
myGenerateGuidString (Ordinal: 353, Address: 0x4a423)
myGenerateGuidSerialNumber (Ordinal: 354, Address: 0x4a402)
mylstrcmpiL (Ordinal: 355, Address: 0x4a6fc)
myHGetLastError (Ordinal: 356, Address: 0x4a56e)
CSPrintErrorLineFile (Ordinal: 357, Address: 0x4a00a)
CSPrintErrorLineFile2 (Ordinal: 358, Address: 0x49fe9)
CSPrintErrorLineFileData (Ordinal: 359, Address: 0x4a055)
CSPrintErrorLineFileData2 (Ordinal: 360, Address: 0x4a030)
CAGetAccessRights (Ordinal: 361, Address: 0x4ae81)
CAIsValid (Ordinal: 362, Address: 0x4b233)
CAGetCertTypeAccessRights (Ordinal: 363, Address: 0x4af6e)
CAIsCertTypeValid (Ordinal: 364, Address: 0x4b21d)
(Ordinal: 365, Address: 0x24740)
DbgLogStringInit2 (Ordinal: 366, Address: 0x4a0c0)
(Ordinal: 367, Address: 0x29570)
RemoveISAPIExtension (Ordinal: 368, Address: 0x4a217)
RemoveVDir (Ordinal: 369, Address: 0x4a22e)
SplitConfigString (Ordinal: 370, Address: 0x4a24c)
AddOrRemoveOCSPISAPIExtension (Ordinal: 371, Address: 0x49f76)
myGetTargetMachineDomainDnsName (Ordinal: 373, Address: 0x4a513)
(Ordinal: 374, Address: 0x23c10)
myNetLogonUser (Ordinal: 375, Address: 0x4b7f8)
CertcliGetDetailedCertcliVersionString (Ordinal: 390, Address: 0x4a088)
myGetHashAlgorithmOIDInfoFromSignatureAlgorithm (Ordinal: 391, Address: 0x4a4c8)
myEnablePrivilege (Ordinal: 392, Address: 0x4a3b6)
CAGetConfigStringFromUIPicker (Ordinal: 491, Address: 0x1ef60)

Imported DLLs & Functions

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatA (Address: 0x5abce190)
GetDateFormatW (Address: 0x5abce198)
GetTimeFormatA (Address: 0x5abce19c)
GetTimeFormatW (Address: 0x5abce194)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x5abce1a4)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x5abce1ac)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x5abce1b4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x5abce1c4)
RaiseException (Address: 0x5abce1c0)
SetLastError (Address: 0x5abce1bc)
SetUnhandledExceptionFilter (Address: 0x5abce1cc)
UnhandledExceptionFilter (Address: 0x5abce1c8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x5abce1d4)
CreateFileW (Address: 0x5abce1e8)
FileTimeToLocalFileTime (Address: 0x5abce1f0)
GetFileSize (Address: 0x5abce1e4)
LocalFileTimeToFileTime (Address: 0x5abce1d8)
ReadFile (Address: 0x5abce1e0)
SetEndOfFile (Address: 0x5abce1ec)
SetFilePointer (Address: 0x5abce1f4)
WriteFile (Address: 0x5abce1dc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x5abce200)
DuplicateHandle (Address: 0x5abce1fc)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x5abce210)
HeapAlloc (Address: 0x5abce208)
HeapFree (Address: 0x5abce20c)

api-ms-win-core-heap-l2-1-0.dll

GlobalFree (Address: 0x5abce224)
LocalAlloc (Address: 0x5abce21c)
LocalFree (Address: 0x5abce218)
LocalReAlloc (Address: 0x5abce220)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x5abce230)
RegisterWaitForSingleObject (Address: 0x5abce22c)
UnregisterWait (Address: 0x5abce234)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x5abce254)
FindResourceExW (Address: 0x5abce250)
FreeLibrary (Address: 0x5abce25c)
GetModuleFileNameW (Address: 0x5abce258)
GetModuleHandleW (Address: 0x5abce24c)
GetProcAddress (Address: 0x5abce244)
LoadLibraryExW (Address: 0x5abce248)
LoadResource (Address: 0x5abce240)
LoadStringW (Address: 0x5abce260)
SizeofResource (Address: 0x5abce23c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x5abce270)
GetACP (Address: 0x5abce268)
GetLocaleInfoW (Address: 0x5abce26c)
IdnToUnicode (Address: 0x5abce274)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x5abce27c)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetSystemDefaultUILanguage (Address: 0x5abce288)
GetUserDefaultUILanguage (Address: 0x5abce284)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x5abce298)
MapViewOfFile (Address: 0x5abce294)
UnmapViewOfFile (Address: 0x5abce290)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x5abce2a4)
GetCommandLineW (Address: 0x5abce2a0)
SearchPathW (Address: 0x5abce2a8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x5abce2b4)
GetCurrentProcessId (Address: 0x5abce2c0)
GetCurrentThread (Address: 0x5abce2b0)
GetCurrentThreadId (Address: 0x5abce2c4)
OpenProcessToken (Address: 0x5abce2bc)
TerminateProcess (Address: 0x5abce2b8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x5abce2cc)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x5abce2d4)

api-ms-win-core-psapi-l1-1-0.dll

K32GetProcessImageFileNameW (Address: 0x5abce2dc)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x5abce2fc)
RegCreateKeyExW (Address: 0x5abce2f4)
RegDeleteValueW (Address: 0x5abce304)
RegEnumKeyExW (Address: 0x5abce2e8)
RegGetValueW (Address: 0x5abce2f8)
RegOpenKeyExW (Address: 0x5abce2f0)
RegQueryInfoKeyW (Address: 0x5abce300)
RegQueryValueExW (Address: 0x5abce2e4)
RegSetValueExW (Address: 0x5abce2ec)

api-ms-win-core-registry-l2-1-0.dll

RegConnectRegistryW (Address: 0x5abce30c)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x5abce314)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x5abce320)
FoldStringW (Address: 0x5abce328)
MultiByteToWideChar (Address: 0x5abce31c)
WideCharToMultiByte (Address: 0x5abce324)

api-ms-win-core-string-l2-1-0.dll

CharLowerW (Address: 0x5abce330)
CharNextW (Address: 0x5abce334)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x5abce340)
lstrcmpW (Address: 0x5abce33c)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x5abce35c)
DeleteCriticalSection (Address: 0x5abce34c)
EnterCriticalSection (Address: 0x5abce350)
InitializeCriticalSection (Address: 0x5abce360)
LeaveCriticalSection (Address: 0x5abce348)
SetEvent (Address: 0x5abce354)
WaitForSingleObjectEx (Address: 0x5abce358)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x5abce368)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x5abce384)
GetLocalTime (Address: 0x5abce37c)
GetSystemDirectoryW (Address: 0x5abce380)
GetSystemTimeAsFileTime (Address: 0x5abce374)
GetTickCount (Address: 0x5abce378)
GetVersionExW (Address: 0x5abce370)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x5abce390)
SystemTimeToFileTime (Address: 0x5abce38c)

api-ms-win-eventlog-legacy-l1-1-0.dll

DeregisterEventSource (Address: 0x5abce398)
RegisterEventSourceW (Address: 0x5abce3a0)
ReportEventW (Address: 0x5abce39c)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x5abce3bc)
CreateWellKnownSid (Address: 0x5abce3a8)
EqualSid (Address: 0x5abce3ac)
FreeSid (Address: 0x5abce3b8)
GetTokenInformation (Address: 0x5abce3b0)
ImpersonateLoggedOnUser (Address: 0x5abce3c0)
RevertToSelf (Address: 0x5abce3b4)

api-ms-win-security-logon-l1-1-0.dll

LogonUserExW (Address: 0x5abce3c8)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x5abce3d0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x5abce3dc)
OpenSCManagerW (Address: 0x5abce3e0)
OpenServiceW (Address: 0x5abce3d8)
StartServiceW (Address: 0x5abce3e4)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfigW (Address: 0x5abce3f0)
QueryServiceConfigW (Address: 0x5abce3ec)

api-ms-win-service-private-l1-1-0.dll

WaitServiceState (Address: 0x5abce3f8)

api-ms-win-service-winsvc-l1-1-0.dll

ControlService (Address: 0x5abce400)

certca.dll

(Address: 0x5abce408)
(Address: 0x5abce40c)
(Address: 0x5abce410)
(Address: 0x5abce414)
(Address: 0x5abce418)
(Address: 0x5abce41c)
(Address: 0x5abce420)
(Address: 0x5abce424)
(Address: 0x5abce428)
(Address: 0x5abce42c)
(Address: 0x5abce430)
(Address: 0x5abce434)
(Address: 0x5abce438)
(Address: 0x5abce43c)
(Address: 0x5abce440)
(Address: 0x5abce444)
(Address: 0x5abce448)
(Address: 0x5abce44c)
(Address: 0x5abce450)
(Address: 0x5abce454)
(Address: 0x5abce458)
(Address: 0x5abce45c)
(Address: 0x5abce460)
(Address: 0x5abce464)
(Address: 0x5abce468)

CRYPT32.dll

CertAddCertificateLinkToStore (Address: 0x5abce03c)
CertCloseStore (Address: 0x5abce078)
CertComparePublicKeyInfo (Address: 0x5abce034)
CertCreateCertificateContext (Address: 0x5abce06c)
CertDuplicateCertificateContext (Address: 0x5abce080)
CertEnumCertificatesInStore (Address: 0x5abce040)
CertFindCertificateInStore (Address: 0x5abce068)
CertFindExtension (Address: 0x5abce054)
CertFreeCertificateChain (Address: 0x5abce070)
CertFreeCertificateContext (Address: 0x5abce07c)
CertGetCertificateChain (Address: 0x5abce074)
CertGetCertificateContextProperty (Address: 0x5abce058)
CertGetEnhancedKeyUsage (Address: 0x5abce048)
CertGetIntendedKeyUsage (Address: 0x5abce044)
CertGetNameStringW (Address: 0x5abce038)
CertNameToStrW (Address: 0x5abce018)
CertOpenStore (Address: 0x5abce084)
CertSetStoreProperty (Address: 0x5abce064)
CertStrToNameW (Address: 0x5abce088)
CryptAcquireCertificatePrivateKey (Address: 0x5abce060)
CryptDecodeObject (Address: 0x5abce02c)
CryptDecodeObjectEx (Address: 0x5abce028)
CryptEncodeObjectEx (Address: 0x5abce020)
CryptExportPublicKeyInfoEx (Address: 0x5abce01c)
CryptFindOIDInfo (Address: 0x5abce05c)
CryptHashCertificate (Address: 0x5abce050)
CryptHashPublicKeyInfo (Address: 0x5abce04c)
CryptImportPublicKeyInfo (Address: 0x5abce004)
CryptImportPublicKeyInfoEx2 (Address: 0x5abce000)
CryptMsgClose (Address: 0x5abce008)
CryptMsgGetParam (Address: 0x5abce00c)
CryptMsgOpenToDecode (Address: 0x5abce014)
CryptMsgUpdate (Address: 0x5abce010)
CryptSignMessage (Address: 0x5abce030)
CryptStringToBinaryW (Address: 0x5abce024)

CRYPTSP.dll

CryptAcquireContextW (Address: 0x5abce0a8)
CryptContextAddRef (Address: 0x5abce0c8)
CryptCreateHash (Address: 0x5abce0ac)
CryptDecrypt (Address: 0x5abce0a4)
CryptDestroyHash (Address: 0x5abce094)
CryptDestroyKey (Address: 0x5abce0d8)
CryptDuplicateKey (Address: 0x5abce0dc)
CryptEncrypt (Address: 0x5abce0a0)
CryptExportKey (Address: 0x5abce09c)
CryptGetHashParam (Address: 0x5abce0bc)
CryptGetKeyParam (Address: 0x5abce0d4)
CryptGetProvParam (Address: 0x5abce098)
CryptGetUserKey (Address: 0x5abce0c4)
CryptHashData (Address: 0x5abce0b4)
CryptReleaseContext (Address: 0x5abce090)
CryptSetHashParam (Address: 0x5abce0b8)
CryptSetKeyParam (Address: 0x5abce0b0)
CryptSetProvParam (Address: 0x5abce0c0)
CryptSignHashW (Address: 0x5abce0cc)
CryptVerifySignatureW (Address: 0x5abce0d0)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x5abce490)
__dllonexit (Address: 0x5abce4f4)
__isascii (Address: 0x5abce548)
_amsg_exit (Address: 0x5abce4d0)
_callnewh (Address: 0x5abce51c)
_CxxThrowException (Address: 0x5abce4a8)
_errno (Address: 0x5abce50c)
_except_handler4_common (Address: 0x5abce500)
_initterm (Address: 0x5abce4d8)
_lock (Address: 0x5abce4ec)
_onexit (Address: 0x5abce4f8)
_purecall (Address: 0x5abce470)
_strnicmp (Address: 0x5abce4a4)
_unlock (Address: 0x5abce4f0)
_vsnprintf (Address: 0x5abce4a0)
_vsnwprintf (Address: 0x5abce498)
_wcsicmp (Address: 0x5abce4c4)
_wcsnicmp (Address: 0x5abce4fc)
_wtoi (Address: 0x5abce54c)
_XcptFilter (Address: 0x5abce4cc)
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z (Address: 0x5abce4e8)
??_V@YAXPAX@Z (Address: 0x5abce4b4)
??0exception@@QAE@ABQBD@Z (Address: 0x5abce534)
??0exception@@QAE@ABQBDH@Z (Address: 0x5abce53c)
??0exception@@QAE@ABV0@@Z (Address: 0x5abce538)
??1exception@@UAE@XZ (Address: 0x5abce49c)
??1type_info@@UAE@XZ (Address: 0x5abce508)
??3@YAXPAX@Z (Address: 0x5abce4d4)
?terminate@@YAXXZ (Address: 0x5abce4e4)
?what@exception@@UBEPBDXZ (Address: 0x5abce4dc)
atoi (Address: 0x5abce4c0)
bsearch (Address: 0x5abce550)
free (Address: 0x5abce474)
isdigit (Address: 0x5abce4b0)
iswalpha (Address: 0x5abce488)
iswdigit (Address: 0x5abce504)
iswlower (Address: 0x5abce528)
iswspace (Address: 0x5abce4ac)
iswupper (Address: 0x5abce524)
iswxdigit (Address: 0x5abce540)
isxdigit (Address: 0x5abce480)
malloc (Address: 0x5abce47c)
memcmp (Address: 0x5abce514)
memcpy (Address: 0x5abce4bc)
memcpy_s (Address: 0x5abce48c)
memmove (Address: 0x5abce4c8)
memset (Address: 0x5abce554)
realloc (Address: 0x5abce510)
strchr (Address: 0x5abce4b8)
swscanf (Address: 0x5abce484)
towlower (Address: 0x5abce520)
towupper (Address: 0x5abce52c)
wcschr (Address: 0x5abce494)
wcscspn (Address: 0x5abce544)
wcsncmp (Address: 0x5abce530)
wcsncpy_s (Address: 0x5abce478)
wcsrchr (Address: 0x5abce518)
wcsstr (Address: 0x5abce4e0)

ntdll.dll

EtwTraceMessage (Address: 0x5abce55c)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x5abce110)
CStdStubBuffer_Connect (Address: 0x5abce13c)
CStdStubBuffer_CountRefs (Address: 0x5abce118)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x5abce100)
CStdStubBuffer_DebugServerRelease (Address: 0x5abce124)
CStdStubBuffer_Disconnect (Address: 0x5abce128)
CStdStubBuffer_Invoke (Address: 0x5abce150)
CStdStubBuffer_IsIIDSupported (Address: 0x5abce140)
CStdStubBuffer_QueryInterface (Address: 0x5abce11c)
IUnknown_AddRef_Proxy (Address: 0x5abce154)
IUnknown_QueryInterface_Proxy (Address: 0x5abce144)
IUnknown_Release_Proxy (Address: 0x5abce114)
NdrClientCall4 (Address: 0x5abce148)
NdrCStdStubBuffer_Release (Address: 0x5abce12c)
NdrDllCanUnloadNow (Address: 0x5abce14c)
NdrDllGetClassObject (Address: 0x5abce0f4)
NdrOleAllocate (Address: 0x5abce120)
NdrOleFree (Address: 0x5abce10c)
RpcBindingFree (Address: 0x5abce130)
RpcBindingFromStringBindingW (Address: 0x5abce0e8)
RpcBindingSetAuthInfoExW (Address: 0x5abce134)
RpcBindingSetAuthInfoW (Address: 0x5abce104)
RpcCancelThreadEx (Address: 0x5abce0fc)
RpcEpResolveBinding (Address: 0x5abce0e4)
RpcExceptionFilter (Address: 0x5abce138)
RpcMgmtInqServerPrincNameW (Address: 0x5abce108)
RpcNetworkIsProtseqValidW (Address: 0x5abce0f0)
RpcStringBindingComposeW (Address: 0x5abce0ec)
RpcStringFreeW (Address: 0x5abce0f8)

WLDAP32.dll

(Address: 0x5abce188)
(Address: 0x5abce184)
(Address: 0x5abce180)
(Address: 0x5abce17c)
(Address: 0x5abce178)
(Address: 0x5abce174)
(Address: 0x5abce170)
(Address: 0x5abce16c)
(Address: 0x5abce168)
(Address: 0x5abce164)
(Address: 0x5abce160)
(Address: 0x5abce15c)