certcli.dll

Description: Microsoft® Active Directory Certificate Services Client

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 23410c7694a461325e0985a66b6efc60

File Size: 483.0 KB

Uploaded At: Dec. 1, 2025, 7:23 a.m.

Views: 33

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CSPrintAssert (Ordinal: 201, Address: 0x6c08e)
CSPrintError (Ordinal: 202, Address: 0x6c0a7)
DbgPrintf (Ordinal: 203, Address: 0x6c1d3)
DbgPrintfInit (Ordinal: 204, Address: 0x6c1ed)
DbgIsSSActive (Ordinal: 205, Address: 0x6c182)
myHResultToString_old (Ordinal: 206, Address: 0x6c695)
myGetErrorMessageText (Ordinal: 207, Address: 0x6c548)
myHResultToStringRaw_old (Ordinal: 208, Address: 0x6c673)
CAAccessCheck (Ordinal: 209, Address: 0x6c7f6)
(Ordinal: 210, Address: 0xb550)
CAAccessCheckEx (Ordinal: 211, Address: 0x6c81b)
CAAddCACertificateType (Ordinal: 212, Address: 0x6c849)
myFreeColumnDisplayNames (Ordinal: 213, Address: 0x6c4bb)
myRobustLdapBind (Ordinal: 214, Address: 0x6d913)
myIsDelayLoadHResult (Ordinal: 215, Address: 0x6c6b6)
myHExceptionCode (Ordinal: 216, Address: 0x6c610)
myJetHResult (Ordinal: 217, Address: 0x6c6cf)
myModifyVirtualRootsAndFileShares (Ordinal: 218, Address: 0x6c71c)
(Ordinal: 219, Address: 0xd1d0)
(Ordinal: 220, Address: 0xd260)
(Ordinal: 221, Address: 0xd2f0)
CAAddCACertificateTypeEx (Ordinal: 222, Address: 0x6c880)
DecodeFileW (Ordinal: 223, Address: 0x6c21c)
CACertTypeAccessCheck (Ordinal: 224, Address: 0x6c8b6)
EncodeToFileW (Ordinal: 225, Address: 0x6c272)
CACertTypeAccessCheckEx (Ordinal: 226, Address: 0x6c8eb)
CACertTypeAuthzAccessCheck (Ordinal: 227, Address: 0x6c925)
CACertTypeGetSecurity (Ordinal: 228, Address: 0x6c95d)
CACertTypeQuery (Ordinal: 229, Address: 0x6c98a)
CACertTypeRegisterQuery (Ordinal: 230, Address: 0x6c9b9)
CACertTypeSetSecurity (Ordinal: 231, Address: 0x6c9ee)
CACertTypeUnregisterQuery (Ordinal: 232, Address: 0x6ca25)
CACloneCertType (Ordinal: 233, Address: 0x6ca56)
CACloseCA (Ordinal: 234, Address: 0x6ca77)
CACloseCertType (Ordinal: 235, Address: 0x6ca98)
CACountCAs (Ordinal: 236, Address: 0x6caba)
CACountCertTypes (Ordinal: 237, Address: 0x6cadd)
CACreateAutoEnrollmentObjectEx (Ordinal: 238, Address: 0x6cb14)
CACreateCertType (Ordinal: 239, Address: 0x6cb4b)
myAddShare (Ordinal: 240, Address: 0x6c38a)
(Ordinal: 241, Address: 0x11df0)
DbgLogStringInit (Ordinal: 242, Address: 0x6c1bd)
CACreateLocalAutoEnrollmentObject (Ordinal: 243, Address: 0x6cb85)
CACreateNewCA (Ordinal: 244, Address: 0x6cbbc)
WszToMultiByteIntegerBuf (Ordinal: 245, Address: 0x6c373)
WszToMultiByteInteger (Ordinal: 246, Address: 0x6c34e)
myGetErrorMessageText1 (Ordinal: 247, Address: 0x6c526)
myGetErrorMessageTextEx (Ordinal: 248, Address: 0x6c56c)
myCAPropGetDisplayName (Ordinal: 249, Address: 0x6c3ad)
myCAPropInfoUnmarshal (Ordinal: 250, Address: 0x6c3ee)
myCAPropInfoLookup (Ordinal: 251, Address: 0x6c3cc)
myRobustLdapBindEx (Ordinal: 252, Address: 0x6d932)
caTranslateFileTimePeriodToPeriodUnits (Ordinal: 253, Address: 0x6d8bd)
myCryptBinaryToString (Ordinal: 254, Address: 0x6c410)
myCryptBinaryToStringA (Ordinal: 255, Address: 0x6c433)
myCryptStringToBinary (Ordinal: 256, Address: 0x6c455)
myCryptStringToBinaryA (Ordinal: 257, Address: 0x6c478)
myOIDHashOIDToString (Ordinal: 258, Address: 0x6c73d)
myLogExceptionInit (Ordinal: 259, Address: 0x6c6ee)
myHExceptionCodePrint (Ordinal: 260, Address: 0x6c632)
DbgPrintfW (Ordinal: 261, Address: 0x6c204)
IsASPEnabledInIIS (Ordinal: 262, Address: 0x6c290)
EnableASPInIIS (Ordinal: 263, Address: 0x6c237)
IsISAPIExtensionEnabled (Ordinal: 264, Address: 0x6c2d6)
EnableISAPIExtension (Ordinal: 265, Address: 0x6c258)
myGetSidFromDomain (Ordinal: 266, Address: 0x6c5c7)
IsASPEnabledInIIS_New (Ordinal: 267, Address: 0x6c2b2)
CADCSetCertTypePropertyEx (Ordinal: 268, Address: 0x6cbeb)
CADeleteCA (Ordinal: 269, Address: 0x6cc17)
CADeleteCAEx (Ordinal: 270, Address: 0x6cc36)
CADeleteCertType (Ordinal: 271, Address: 0x6cc5b)
CADeleteCertTypeEx (Ordinal: 272, Address: 0x6cc86)
CADeleteLocalAutoEnrollmentObject (Ordinal: 273, Address: 0x6ccc2)
CAEnumCertTypes (Ordinal: 274, Address: 0x6ccfb)
CAEnumCertTypesEx (Ordinal: 275, Address: 0x6cd24)
CAEnumCertTypesForCA (Ordinal: 276, Address: 0x6cd52)
CAEnumCertTypesForCAEx (Ordinal: 277, Address: 0x6cd85)
CAEnumFirstCA (Ordinal: 278, Address: 0x6cdb1)
CAEnumNextCA (Ordinal: 279, Address: 0x6cdd3)
CAEnumNextCertType (Ordinal: 280, Address: 0x6cdfa)
CAFindByCertType (Ordinal: 281, Address: 0x6ce25)
CAFindByIssuerDN (Ordinal: 282, Address: 0x6ce4e)
CAFindByName (Ordinal: 283, Address: 0x6ce73)
CAFindCertTypeByName (Ordinal: 284, Address: 0x6ce9c)
CAFreeCAProperty (Ordinal: 285, Address: 0x6cec9)
CAFreeCertTypeExtensions (Ordinal: 286, Address: 0x6cefa)
CAFreeCertTypeProperty (Ordinal: 287, Address: 0x6cf31)
CAGetCACertificate (Ordinal: 288, Address: 0x6cf80)
CAGetCAExpiration (Ordinal: 289, Address: 0x6cfac)
CAGetCAFlags (Ordinal: 290, Address: 0x6cfd2)
CAGetCAProperty (Ordinal: 291, Address: 0x6cff6)
CAGetCASecurity (Ordinal: 292, Address: 0x6d01d)
CAGetCertTypeExpiration (Ordinal: 293, Address: 0x6d072)
CAGetCertTypeExtensions (Ordinal: 294, Address: 0x6d0a9)
CAGetCertTypeExtensionsEx (Ordinal: 295, Address: 0x6d0e2)
CAGetCertTypeFlags (Ordinal: 296, Address: 0x6d116)
CAGetCertTypeFlagsEx (Ordinal: 297, Address: 0x6d145)
CAGetCertTypeKeySpec (Ordinal: 298, Address: 0x6d176)
CAGetCertTypeProperty (Ordinal: 299, Address: 0x6d1a8)
CAGetCertTypePropertyEx (Ordinal: 300, Address: 0x6d1dd)
CAGetDN (Ordinal: 301, Address: 0x6d204)
CAInstallDefaultCertType (Ordinal: 302, Address: 0x6d22c)
CAInstallDefaultCertTypeEx (Ordinal: 303, Address: 0x6d267)
CAIsCertTypeCurrent (Ordinal: 304, Address: 0x6d29d)
CAIsCertTypeCurrentEx (Ordinal: 305, Address: 0x6d2ce)
CAOIDAdd (Ordinal: 306, Address: 0x6d328)
CAOIDAddEx (Ordinal: 307, Address: 0x6d343)
CAOIDCreateNew (Ordinal: 308, Address: 0x6d364)
CAOIDCreateNewEx (Ordinal: 309, Address: 0x6d38b)
CAOIDDelete (Ordinal: 310, Address: 0x6d3af)
CAOIDDeleteEx (Ordinal: 311, Address: 0x6d3d0)
CAOIDFreeLdapURL (Ordinal: 312, Address: 0x6d3f6)
CAOIDFreeProperty (Ordinal: 313, Address: 0x6d420)
CAOIDGetLdapURL (Ordinal: 314, Address: 0x6d449)
CAOIDGetProperty (Ordinal: 315, Address: 0x6d471)
CAOIDGetPropertyEx (Ordinal: 316, Address: 0x6d49c)
CAOIDSetProperty (Ordinal: 317, Address: 0x6d4c7)
CAOIDSetPropertyEx (Ordinal: 318, Address: 0x6d4f2)
CARemoveCACertificateType (Ordinal: 319, Address: 0x6d526)
CARemoveCACertificateTypeEx (Ordinal: 320, Address: 0x6d563)
CASetCACertificate (Ordinal: 321, Address: 0x6d599)
CASetCAExpiration (Ordinal: 322, Address: 0x6d5c5)
CASetCAFlags (Ordinal: 323, Address: 0x6d5eb)
CASetCAProperty (Ordinal: 324, Address: 0x6d60f)
CASetCASecurity (Ordinal: 325, Address: 0x6d636)
CASetCertTypeExpiration (Ordinal: 326, Address: 0x6d665)
CASetCertTypeExtension (Ordinal: 327, Address: 0x6d69b)
CASetCertTypeFlags (Ordinal: 328, Address: 0x6d6cc)
CASetCertTypeFlagsEx (Ordinal: 329, Address: 0x6d6fb)
CASetCertTypeKeySpec (Ordinal: 330, Address: 0x6d72c)
CASetCertTypeProperty (Ordinal: 331, Address: 0x6d75e)
CASetCertTypePropertyEx (Ordinal: 332, Address: 0x6d793)
CAUpdateCA (Ordinal: 333, Address: 0x6d7bd)
CAUpdateCAEx (Ordinal: 334, Address: 0x6d7dc)
CAUpdateCertType (Ordinal: 335, Address: 0x6d801)
CAUpdateCertTypeEx (Ordinal: 336, Address: 0x6d82c)
DllCanUnloadNow (Ordinal: 337, Address: 0x1f90)
DllGetClassObject (Ordinal: 338, Address: 0x1fd0)
DllMain (Ordinal: 339, Address: 0x1df0)
DllRegisterServer (Ordinal: 340, Address: 0x2050)
DllUnregisterServer (Ordinal: 341, Address: 0x2050)
myDoesDSExist@209 (Ordinal: 342, Address: 0x6d8db)
mySanitizeName (Ordinal: 349, Address: 0x6c779)
mySanitizedNameToDSName (Ordinal: 350, Address: 0x6c79d)
mySanitizedNameToShortName (Ordinal: 351, Address: 0x6c7c4)
myRevertSanitizeName (Ordinal: 352, Address: 0x6c75e)
myGenerateGuidString (Ordinal: 353, Address: 0x6c503)
myGenerateGuidSerialNumber (Ordinal: 354, Address: 0x6c4e2)
mylstrcmpiL (Ordinal: 355, Address: 0x6c7dc)
myHGetLastError (Ordinal: 356, Address: 0x6c64e)
CSPrintErrorLineFile (Ordinal: 357, Address: 0x6c0ea)
CSPrintErrorLineFile2 (Ordinal: 358, Address: 0x6c0c9)
CSPrintErrorLineFileData (Ordinal: 359, Address: 0x6c135)
CSPrintErrorLineFileData2 (Ordinal: 360, Address: 0x6c110)
CAGetAccessRights (Ordinal: 361, Address: 0x6cf61)
CAIsValid (Ordinal: 362, Address: 0x6d313)
CAGetCertTypeAccessRights (Ordinal: 363, Address: 0x6d04e)
CAIsCertTypeValid (Ordinal: 364, Address: 0x6d2fd)
(Ordinal: 365, Address: 0x11de0)
DbgLogStringInit2 (Ordinal: 366, Address: 0x6c1a0)
(Ordinal: 367, Address: 0x18560)
RemoveISAPIExtension (Ordinal: 368, Address: 0x6c2f7)
RemoveVDir (Ordinal: 369, Address: 0x6c30e)
SplitConfigString (Ordinal: 370, Address: 0x6c32c)
AddOrRemoveOCSPISAPIExtension (Ordinal: 371, Address: 0x6c056)
myGetTargetMachineDomainDnsName (Ordinal: 373, Address: 0x6c5f3)
(Ordinal: 374, Address: 0x11500)
myNetLogonUser (Ordinal: 375, Address: 0x6d8f6)
CertcliGetDetailedCertcliVersionString (Ordinal: 390, Address: 0x6c168)
myGetHashAlgorithmOIDInfoFromSignatureAlgorithm (Ordinal: 391, Address: 0x6c5a8)
myEnablePrivilege (Ordinal: 392, Address: 0x6c496)
CAGetConfigStringFromUIPicker (Ordinal: 491, Address: 0xb640)

Imported DLLs & Functions

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatA (Address: 0x18004fd20)
GetDateFormatW (Address: 0x18004fd18)
GetTimeFormatA (Address: 0x18004fd30)
GetTimeFormatW (Address: 0x18004fd28)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x18004fd40)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004fd50)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004fd60)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004fd88)
RaiseException (Address: 0x18004fd90)
SetLastError (Address: 0x18004fd70)
SetUnhandledExceptionFilter (Address: 0x18004fd78)
UnhandledExceptionFilter (Address: 0x18004fd80)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18004fde0)
CreateFileW (Address: 0x18004fdc8)
FileTimeToLocalFileTime (Address: 0x18004fdd8)
GetFileSize (Address: 0x18004fdc0)
LocalFileTimeToFileTime (Address: 0x18004fdd0)
ReadFile (Address: 0x18004fdb8)
SetEndOfFile (Address: 0x18004fda8)
SetFilePointer (Address: 0x18004fda0)
WriteFile (Address: 0x18004fdb0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004fdf0)
DuplicateHandle (Address: 0x18004fdf8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004fe10)
HeapAlloc (Address: 0x18004fe18)
HeapFree (Address: 0x18004fe08)

api-ms-win-core-heap-l2-1-0.dll

GlobalFree (Address: 0x18004fe30)
LocalAlloc (Address: 0x18004fe28)
LocalFree (Address: 0x18004fe40)
LocalReAlloc (Address: 0x18004fe38)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x18004fe58)
RegisterWaitForSingleObject (Address: 0x18004fe60)
UnregisterWait (Address: 0x18004fe50)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18004fe88)
FindResourceExW (Address: 0x18004fe78)
FreeLibrary (Address: 0x18004fea0)
GetModuleFileNameW (Address: 0x18004feb0)
GetModuleHandleW (Address: 0x18004fea8)
GetProcAddress (Address: 0x18004fe90)
LoadLibraryExW (Address: 0x18004fe98)
LoadResource (Address: 0x18004fe70)
LoadStringW (Address: 0x18004feb8)
SizeofResource (Address: 0x18004fe80)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004fed0)
GetACP (Address: 0x18004fec8)
GetLocaleInfoW (Address: 0x18004fed8)
IdnToUnicode (Address: 0x18004fee0)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x18004fef0)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetSystemDefaultUILanguage (Address: 0x18004ff08)
GetUserDefaultUILanguage (Address: 0x18004ff00)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18004ff20)
MapViewOfFile (Address: 0x18004ff18)
UnmapViewOfFile (Address: 0x18004ff28)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18004ff38)
GetCommandLineW (Address: 0x18004ff48)
SearchPathW (Address: 0x18004ff40)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004ff60)
GetCurrentProcessId (Address: 0x18004ff70)
GetCurrentThread (Address: 0x18004ff80)
GetCurrentThreadId (Address: 0x18004ff58)
OpenProcessToken (Address: 0x18004ff68)
TerminateProcess (Address: 0x18004ff78)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18004ff90)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004ffa0)

api-ms-win-core-psapi-l1-1-0.dll

K32GetProcessImageFileNameW (Address: 0x18004ffb0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004ffc0)
RegCreateKeyExW (Address: 0x18004fff8)
RegDeleteValueW (Address: 0x18004ffd0)
RegEnumKeyExW (Address: 0x18004ffc8)
RegGetValueW (Address: 0x18004ffd8)
RegOpenKeyExW (Address: 0x18004ffe8)
RegQueryInfoKeyW (Address: 0x18004ffe0)
RegQueryValueExW (Address: 0x18004fff0)
RegSetValueExW (Address: 0x180050000)

api-ms-win-core-registry-l2-1-0.dll

RegConnectRegistryW (Address: 0x180050010)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180050020)
RtlLookupFunctionEntry (Address: 0x180050028)
RtlVirtualUnwind (Address: 0x180050030)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x180050040)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180050058)
FoldStringW (Address: 0x180050050)
MultiByteToWideChar (Address: 0x180050060)
WideCharToMultiByte (Address: 0x180050068)

api-ms-win-core-string-l2-1-0.dll

CharLowerW (Address: 0x180050080)
CharNextW (Address: 0x180050078)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180050098)
lstrcmpW (Address: 0x180050090)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x1800500c0)
DeleteCriticalSection (Address: 0x1800500b8)
EnterCriticalSection (Address: 0x1800500c8)
InitializeCriticalSection (Address: 0x1800500b0)
LeaveCriticalSection (Address: 0x1800500d0)
SetEvent (Address: 0x1800500d8)
WaitForSingleObjectEx (Address: 0x1800500a8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800500e8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180050108)
GetLocalTime (Address: 0x180050120)
GetSystemDirectoryW (Address: 0x180050100)
GetSystemTimeAsFileTime (Address: 0x1800500f8)
GetTickCount (Address: 0x180050118)
GetVersionExW (Address: 0x180050110)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180050130)
SystemTimeToFileTime (Address: 0x180050138)

api-ms-win-eventlog-legacy-l1-1-0.dll

DeregisterEventSource (Address: 0x180050158)
RegisterEventSourceW (Address: 0x180050150)
ReportEventW (Address: 0x180050148)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x180050178)
CreateWellKnownSid (Address: 0x180050190)
EqualSid (Address: 0x180050188)
FreeSid (Address: 0x180050170)
GetTokenInformation (Address: 0x180050180)
ImpersonateLoggedOnUser (Address: 0x180050198)
RevertToSelf (Address: 0x180050168)

api-ms-win-security-logon-l1-1-0.dll

LogonUserExW (Address: 0x1800501a8)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x1800501b8)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1800501d8)
OpenSCManagerW (Address: 0x1800501d0)
OpenServiceW (Address: 0x1800501e0)
StartServiceW (Address: 0x1800501c8)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfigW (Address: 0x1800501f0)
QueryServiceConfigW (Address: 0x1800501f8)

api-ms-win-service-private-l1-1-0.dll

WaitServiceState (Address: 0x180050208)

api-ms-win-service-winsvc-l1-1-0.dll

ControlService (Address: 0x180050218)

certca.dll

(Address: 0x1800502e8)
(Address: 0x180050228)
(Address: 0x180050230)
(Address: 0x180050238)
(Address: 0x180050240)
(Address: 0x180050248)
(Address: 0x180050250)
(Address: 0x180050258)
(Address: 0x180050260)
(Address: 0x180050268)
(Address: 0x180050270)
(Address: 0x180050278)
(Address: 0x180050280)
(Address: 0x180050288)
(Address: 0x180050290)
(Address: 0x180050298)
(Address: 0x1800502a0)
(Address: 0x1800502a8)
(Address: 0x1800502b0)
(Address: 0x1800502b8)
(Address: 0x1800502c0)
(Address: 0x1800502c8)
(Address: 0x1800502d0)
(Address: 0x1800502d8)
(Address: 0x1800502e0)

CRYPT32.dll

CertAddCertificateLinkToStore (Address: 0x18004fa70)
CertCloseStore (Address: 0x18004fae8)
CertComparePublicKeyInfo (Address: 0x18004fa60)
CertCreateCertificateContext (Address: 0x18004fad0)
CertDuplicateCertificateContext (Address: 0x18004faf8)
CertEnumCertificatesInStore (Address: 0x18004fa78)
CertFindCertificateInStore (Address: 0x18004fac8)
CertFindExtension (Address: 0x18004faa0)
CertFreeCertificateChain (Address: 0x18004fad8)
CertFreeCertificateContext (Address: 0x18004faf0)
CertGetCertificateChain (Address: 0x18004fae0)
CertGetCertificateContextProperty (Address: 0x18004faa8)
CertGetEnhancedKeyUsage (Address: 0x18004fa88)
CertGetIntendedKeyUsage (Address: 0x18004fa80)
CertGetNameStringW (Address: 0x18004fa68)
CertNameToStrW (Address: 0x18004fa28)
CertOpenStore (Address: 0x18004fb00)
CertSetStoreProperty (Address: 0x18004fac0)
CertStrToNameW (Address: 0x18004fb08)
CryptAcquireCertificatePrivateKey (Address: 0x18004fab8)
CryptDecodeObject (Address: 0x18004fa50)
CryptDecodeObjectEx (Address: 0x18004fa48)
CryptEncodeObjectEx (Address: 0x18004fa38)
CryptExportPublicKeyInfoEx (Address: 0x18004fa30)
CryptFindOIDInfo (Address: 0x18004fab0)
CryptHashCertificate (Address: 0x18004fa98)
CryptHashPublicKeyInfo (Address: 0x18004fa90)
CryptImportPublicKeyInfo (Address: 0x18004fa00)
CryptImportPublicKeyInfoEx2 (Address: 0x18004f9f8)
CryptMsgClose (Address: 0x18004fa08)
CryptMsgGetParam (Address: 0x18004fa10)
CryptMsgOpenToDecode (Address: 0x18004fa20)
CryptMsgUpdate (Address: 0x18004fa18)
CryptSignMessage (Address: 0x18004fa58)
CryptStringToBinaryW (Address: 0x18004fa40)

CRYPTSP.dll

CryptAcquireContextW (Address: 0x18004fb50)
CryptContextAddRef (Address: 0x18004fb88)
CryptCreateHash (Address: 0x18004fb60)
CryptDecrypt (Address: 0x18004fb40)
CryptDestroyHash (Address: 0x18004fb18)
CryptDestroyKey (Address: 0x18004fb20)
CryptDuplicateKey (Address: 0x18004fb68)
CryptEncrypt (Address: 0x18004fb38)
CryptExportKey (Address: 0x18004fb30)
CryptGetHashParam (Address: 0x18004fb78)
CryptGetKeyParam (Address: 0x18004fba8)
CryptGetProvParam (Address: 0x18004fb28)
CryptGetUserKey (Address: 0x18004fb90)
CryptHashData (Address: 0x18004fb70)
CryptReleaseContext (Address: 0x18004fbb0)
CryptSetHashParam (Address: 0x18004fb58)
CryptSetKeyParam (Address: 0x18004fb48)
CryptSetProvParam (Address: 0x18004fb80)
CryptSignHashW (Address: 0x18004fb98)
CryptVerifySignatureW (Address: 0x18004fba0)

msvcrt.dll

__C_specific_handler (Address: 0x180050468)
__CxxFrameHandler3 (Address: 0x180050380)
__dllonexit (Address: 0x180050420)
__isascii (Address: 0x1800503a0)
_amsg_exit (Address: 0x1800503e0)
_callnewh (Address: 0x180050338)
_CxxThrowException (Address: 0x1800503b8)
_errno (Address: 0x180050438)
_initterm (Address: 0x1800503f0)
_lock (Address: 0x180050410)
_onexit (Address: 0x180050428)
_purecall (Address: 0x180050460)
_strnicmp (Address: 0x1800503d8)
_unlock (Address: 0x180050418)
_vsnprintf (Address: 0x180050368)
_vsnwprintf (Address: 0x1800504a8)
_wcsicmp (Address: 0x180050308)
_wcsnicmp (Address: 0x180050320)
_wtoi (Address: 0x180050378)
_XcptFilter (Address: 0x1800503d0)
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z (Address: 0x180050328)
??_V@YAXPEAX@Z (Address: 0x1800503f8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180050310)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180050318)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180050390)
??1exception@@UEAA@XZ (Address: 0x180050398)
??1type_info@@UEAA@XZ (Address: 0x180050430)
??3@YAXPEAX@Z (Address: 0x1800503e8)
?terminate@@YAXXZ (Address: 0x180050408)
?what@exception@@UEBAPEBDXZ (Address: 0x1800503a8)
atoi (Address: 0x1800502f8)
bsearch (Address: 0x1800504c8)
free (Address: 0x180050470)
isdigit (Address: 0x180050360)
iswalpha (Address: 0x180050458)
iswdigit (Address: 0x180050300)
iswlower (Address: 0x1800504b0)
iswspace (Address: 0x180050388)
iswupper (Address: 0x1800504b8)
iswxdigit (Address: 0x180050350)
isxdigit (Address: 0x180050400)
malloc (Address: 0x180050480)
memcmp (Address: 0x180050370)
memcpy (Address: 0x1800503c0)
memcpy_s (Address: 0x180050488)
memmove (Address: 0x1800503c8)
memset (Address: 0x1800503b0)
realloc (Address: 0x180050440)
strchr (Address: 0x180050340)
strcmp (Address: 0x180050448)
swscanf (Address: 0x180050450)
towlower (Address: 0x1800504c0)
towupper (Address: 0x180050498)
wcschr (Address: 0x1800504a0)
wcscmp (Address: 0x1800504d0)
wcscspn (Address: 0x180050358)
wcsncmp (Address: 0x180050490)
wcsncpy_s (Address: 0x180050478)
wcsrchr (Address: 0x180050348)
wcsstr (Address: 0x180050330)

ntdll.dll

EtwTraceMessage (Address: 0x1800504e0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18004fc30)
CStdStubBuffer_Connect (Address: 0x18004fc70)
CStdStubBuffer_CountRefs (Address: 0x18004fc80)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18004fc40)
CStdStubBuffer_DebugServerRelease (Address: 0x18004fc08)
CStdStubBuffer_Disconnect (Address: 0x18004fbe0)
CStdStubBuffer_Invoke (Address: 0x18004fc50)
CStdStubBuffer_IsIIDSupported (Address: 0x18004fc68)
CStdStubBuffer_QueryInterface (Address: 0x18004fc18)
IUnknown_AddRef_Proxy (Address: 0x18004fc48)
IUnknown_QueryInterface_Proxy (Address: 0x18004fbf8)
IUnknown_Release_Proxy (Address: 0x18004fc28)
NdrClientCall3 (Address: 0x18004fca0)
NdrCStdStubBuffer_Release (Address: 0x18004fc58)
NdrDllCanUnloadNow (Address: 0x18004fc60)
NdrDllGetClassObject (Address: 0x18004fc78)
NdrOleAllocate (Address: 0x18004fc10)
NdrOleFree (Address: 0x18004fc38)
RpcBindingFree (Address: 0x18004fc20)
RpcBindingFromStringBindingW (Address: 0x18004fbc0)
RpcBindingSetAuthInfoExW (Address: 0x18004fc90)
RpcBindingSetAuthInfoW (Address: 0x18004fbe8)
RpcCancelThreadEx (Address: 0x18004fbf0)
RpcEpResolveBinding (Address: 0x18004fc98)
RpcExceptionFilter (Address: 0x18004fc88)
RpcMgmtInqServerPrincNameW (Address: 0x18004fc00)
RpcNetworkIsProtseqValidW (Address: 0x18004fbd0)
RpcStringBindingComposeW (Address: 0x18004fbc8)
RpcStringFreeW (Address: 0x18004fbd8)

WLDAP32.dll

(Address: 0x18004fcb8)
(Address: 0x18004fcc0)
(Address: 0x18004fcc8)
(Address: 0x18004fcd0)
(Address: 0x18004fcd8)
(Address: 0x18004fce0)
(Address: 0x18004fce8)
(Address: 0x18004fcf0)
(Address: 0x18004fcf8)
(Address: 0x18004fd00)
(Address: 0x18004fcb0)
(Address: 0x18004fd08)