Generated by JEB on 2019/08/01

PE: C:\Windows\Installer\$PatchCache$\Managed\07E464739B0BFFD946A9BC1E96AB6D75\8.100.25984\fil20426d4f0685a463925032611ce81f76 Base=0x140000000 SHA-256=12FBB787F08EEC37B15425C36ED7EC20A10DC7567D444908DD0FC46D240C6AF5
PDB: CertMgr.pdb GUID={9626285E-603E-41E1-A9593F43BF4A5917} Age=1

365 located named symbols:
0x14000F0A0: "__cdecl _imp_CertEnumCertificatesInStore" __imp_CertEnumCertificatesInStore
0x140001448: "2.5.29.21" ??_C@_09CMDDBBHF@2?45?429?421?$AA@
0x140009B3C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000D6C8: "int g_fAll" ?g_fAll@@3HA
0x140001188: "2.16.840.1.113730.1.13" ??_C@_0BH@FGNBNFEE@2?416?4840?41?4113730?41?413?$AA@
0x14000F048: "__cdecl _imp_CertDeleteCTLFromStore" __imp_CertDeleteCTLFromStore
0x140009F20: "__cdecl FindPESection" _FindPESection
0x14000F080: "__cdecl _imp_CryptMsgGetParam" __imp_CryptMsgGetParam
0x140002940: AddCertStore
0x140001628: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x14000D6E8: "unsigned long g_dwItem" ?g_dwItem@@3KA
0x140003CA8: SetEKUProperty
0x140001368: "2.5.29.35" ??_C@_09EJJNLOEG@2?45?429?435?$AA@
0x1400014C4: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x140009F10: "__cdecl wsetargv" _wsetargv
0x14000B010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14000B5F0: "char * g_szNULL" ?g_szNULL@@3PADA
0x14000F330: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000D708: "unsigned short * __ptr64 __ptr64 g_wszSrcStoreLocation" ?g_wszSrcStoreLocation@@3PEAGEA
0x14000F1F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400013B8: "2.5.29.8" ??_C@_08EBLOBGAO@2?45?429?48?$AA@
0x140001240: " '" ??_C@_1M@BAHJBBFP@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?8?$AA?$AA@
0x140006F48: PrintAuxCertProperties
0x14000F110: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x140008A24: DisplayKeyAttrExtension
0x14000F140: "__cdecl _imp_CryptSIPLoad" __imp_CryptSIPLoad
0x14000F1C0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14000D260: "unsigned short * wszBuffer7" ?wszBuffer7@@3PAGA
0x14000CE60: "unsigned short * wszBuffer6" ?wszBuffer6@@3PAGA
0x1400044FC: DisplayCTLAndPrompt
0x14000441C: DisplayCRLAndPrompt
0x1400014A8: " [%d,%d] %s " ??_C@_0BB@HLLCBDDK@?5?5?5?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?6?$AA@
0x14000C660: "unsigned short * wszBuffer5" ?wszBuffer5@@3PAGA
0x14000B630: "unsigned short * g_wszBuffer" ?g_wszBuffer@@3PAGA
0x14000CA60: "unsigned short * wszBuffer4" ?wszBuffer4@@3PAGA
0x14000B5D0: "__cdecl commode" _commode
0x140003FD8: FindCRLInStore
0x140001308: " [%d,%d] %s (%S)" ??_C@_0BC@PHKLHKPI@?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?5?$CI?$CFS?$CJ?$AA@
0x14000BE60: "unsigned short * wszBuffer3" ?wszBuffer3@@3PAGA
0x14000D678: "unsigned short * __ptr64 __ptr64 g_wszCertEncodingType" ?g_wszCertEncodingType@@3PEAGEA
0x140008DB4: DisplayAuthorityKeyId2Extension
0x140001128: "2.16.840.1.113730.1.4" ??_C@_0BG@KALGPCGG@2?416?4840?41?4113730?41?44?$AA@
0x14000C260: "unsigned short * wszBuffer2" ?wszBuffer2@@3PAGA
0x14000F290: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14000F008: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x140009DF0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140001254: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x140001270: "1.3.6.1.4.1.311.10.2" ??_C@_0BF@KGDKCJDM@1?43?46?41?44?41?4311?410?42?$AA@
0x14000BA48: "unsigned short * g_wszSHA1" ?g_wszSHA1@@3PAGA
0x1400086F0: DisplayKeyUsage
0x14000B5DC: "__cdecl fmode" _fmode
0x14000B600: "unsigned short * g_wszUnKnown" ?g_wszUnKnown@@3PAGA
0x14000F138: "__cdecl _imp_CertFreeCRLContext" __imp_CertFreeCRLContext
0x140005700: DisplayCRL
0x140005368: DisplayCTL
0x14000704C: DecodeAndDisplayCtlUsage
0x14000D6E0: "unsigned short * __ptr64 __ptr64 g_wszSha1Hash" ?g_wszSha1Hash@@3PEAGEA
0x14000124C: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x1400011CC: "%d" ??_C@_02DPKJAMEF@?$CFd?$AA@
0x140009E4E: "__cdecl XcptFilter" _XcptFilter
0x14000F130: "__cdecl _imp_CryptGetOIDFunctionAddress" __imp_CryptGetOIDFunctionAddress
0x140001008: "__cdecl _xc_a" __xc_a
0x1400012DC: " " ??_C@_01CLKCMJKC@?5?$AA@
0x140006CA0: DisplayThumbprint
0x14000D6A0: "unsigned short * __ptr64 __ptr64 g_wszDesStoreName" ?g_wszDesStoreName@@3PEAGEA
0x14000D6F8: "unsigned long g_cbHash" ?g_cbHash@@3KA
0x14000F2A8: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x14000F098: "__cdecl _imp_CertDuplicateCRLContext" __imp_CertDuplicateCRLContext
0x14000F068: "__cdecl _imp_CertDuplicateCTLContext" __imp_CertDuplicateCTLContext
0x140001238: " " ??_C@_17MEDFOIMI@?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x14000F120: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x140005E10: OpenSipStore
0x140001158: "2.16.840.1.113730.1.8" ??_C@_0BG@MADLNGK@2?416?4840?41?4113730?41?48?$AA@
0x14000A18E: memcpy
0x14000F1A0: "__cdecl _imp_CryptUIDlgCertMgr" __imp_CryptUIDlgCertMgr
0x140001260: " [%d,%d] %s " ??_C@_0O@NCLPOMFJ@?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?6?$AA@
0x140005A5C: DisplaySignerInfo
0x14000F3B0: "__cdecl _imp_memset" __imp_memset
0x14000F170: "__cdecl _imp_CryptFindOIDInfo" __imp_CryptFindOIDInfo
0x14000A0DA: "__cdecl initterm" _initterm
0x14000F018: "__cdecl _imp_CryptHashPublicKeyInfo" __imp_CryptHashPublicKeyInfo
0x14000D868: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140009B30: wprintf
0x14000F250: "__cdecl _imp_Sleep" __imp_Sleep
0x140002EDC: PutCertStore
0x140001038: "__cdecl _xi_z" __xi_z
0x14000F298: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x14000F230: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000623C: GetBase64Decoded
0x14000A0E6: "__cdecl _C_specific_handler" __C_specific_handler
0x1400012CC: "%s " ??_C@_03OFAPEBGM@?$CFs?6?$AA@
0x14000F030: "__cdecl _imp_CryptMsgGetAndVerifySigner" __imp_CryptMsgGetAndVerifySigner
0x14000F108: "__cdecl _imp_CertFindCTLInStore" __imp_CertFindCTLInStore
0x1400013E8: "2.5.29.4" ??_C@_08ONALFJAC@2?45?429?44?$AA@
0x1400011D8: "%s (%S) " ??_C@_08MKOHJBNE@?$CFs?5?$CI?$CFS?$CJ?6?$AA@
0x1400013A8: "2.5.29.7" ??_C@_08MGCGAKMB@2?45?429?47?$AA@
0x14000F318: "__cdecl _imp__wtol" __imp__wtol
0x140001328: " [%d,%d] %s (%S) %S " ??_C@_0BG@LGKGNJDI@?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?5?$CI?$CFS?$CJ?5?$CFS?6?$AA@
0x14000A118: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400012F0: " [%d,%d] %s (%S) " ??_C@_0BD@CGBFPFPG@?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?5?$CI?$CFS?$CJ?5?$AA@
0x140009468: IDSwcsicmp
0x14000F090: "__cdecl _imp_CertFreeCTLContext" __imp_CertFreeCTLContext
0x140003F20: SetNameProperty
0x14000D680: "unsigned short * __ptr64 __ptr64 g_wszCertCN" ?g_wszCertCN@@3PEAGEA
0x14000F1A8: CRYPTUI_NULL_THUNK_DATA
0x140001478: " [%d] %s" ??_C@_0M@ILKCFCFB@?5?5?5?5?$FL?$CFd?$FN?5?$CFs?$AA@
0x140009F04: "__cdecl amsg_exit" _amsg_exit
0x14000F168: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x14000F340: "__cdecl _imp_exit" __imp_exit
0x14000F1C8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14000F3B8: "__cdecl _imp_strcmp" __imp_strcmp
0x140001228: " %02X" ??_C@_1M@PHKJPIGK@?$AA?5?$AA?$CF?$AA0?$AA2?$AAX?$AA?$AA@
0x14000F000: "__cdecl _imp_CryptAcquireContextA" __imp_CryptAcquireContextA
0x1400012B8: " [%d] " ??_C@_1BE@MNNFKDCM@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?5?$AA?$AA@
0x14000F0B0: "__cdecl _imp_CertEnumCTLsInStore" __imp_CertEnumCTLsInStore
0x1400014D0: "{%08lX-%04hX-%04hX-%02X%02X-%02X" ??_C@_1GM@BMMJPLMJ@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAl?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAh?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAh?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX@
0x14000D668: "unsigned short * __ptr64 __ptr64 g_wszDesStoreLocation" ?g_wszDesStoreLocation@@3PEAGEA
0x1400011C0: "2.5.29.37" ??_C@_09HLKLNMME@2?45?429?437?$AA@
0x14000F220: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400014BC: " %02X" ??_C@_05OFBGOFBN@?5?$CF02X?$AA@
0x14000F0A8: "__cdecl _imp_CertGetCTLContextProperty" __imp_CertGetCTLContextProperty
0x1400040E4: MoveItem
0x14000F028: "__cdecl _imp_CryptEncodeObject" __imp_CryptEncodeObject
0x140003B00: SaveStore
0x14000D858: "__cdecl _native_startup_lock" __native_startup_lock
0x1400013C8: "2.5.29.17" ??_C@_09HICPAIKK@2?45?429?417?$AA@
0x140004968: DisplayCertStore
0x14000F0C8: "__cdecl _imp_CertGetCRLContextProperty" __imp_CertGetCRLContextProperty
0x140009E30: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000F388: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14000F308: "__cdecl _imp_realloc" __imp_realloc
0x14000F368: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140006B4C: DisplayAltName
0x14000F248: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000F0E8: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x14000F2B0: KERNEL32_NULL_THUNK_DATA
0x1400013D8: "2.5.29.18" ??_C@_09PPLHBEGF@2?45?429?418?$AA@
0x14000F278: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1400089BC: DisplayAltNameExtension
0x14000476C: BuildCRLList
0x14000A0F4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140009214: GuidText
0x14000F3A0: "__cdecl _imp_memcmp" __imp_memcmp
0x14000F378: "__cdecl _imp__commode" __imp__commode
0x14000F180: "__cdecl _imp_CertDeleteCRLFromStore" __imp_CertDeleteCRLFromStore
0x14000F358: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000F3C8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14000F0F0: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x14000F190: "__cdecl _imp_CertDeleteCertificateFromStore" __imp_CertDeleteCertificateFromStore
0x140008FDC: FormatBasicConstraints2
0x14000F118: "__cdecl _imp_CertGetPublicKeyLength" __imp_CertGetPublicKeyLength
0x14000F258: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000D6D0: "unsigned short * __ptr64 __ptr64 g_wszEKU" ?g_wszEKU@@3PEAGEA
0x1400011D0: " " ??_C@_01EEMJAFIK@?6?$AA@
0x140008174: DisplaySpcLink
0x140009FD0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140004870: BuildCTLList
0x140001428: "2.5.4.3" ??_C@_07FBAAFAAA@2?45?44?43?$AA@
0x140001358: "2.5.29.1" ??_C@_08JAHMKNEH@2?45?429?41?$AA@
0x14000D710: "void * __ptr64 __ptr64 g_hMsg" ?g_hMsg@@3PEAXEA
0x14000F150: "__cdecl _imp_CryptFreeOIDFunctionAddress" __imp_CryptFreeOIDFunctionAddress
0x14000B5D8: "__cdecl newmode" _newmode
0x14000F360: "__cdecl _imp__initterm" __imp__initterm
0x14000F338: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400063B0: OpenEncodedCert
0x14000B628: "void * __ptr64 __ptr64 hFormatFuncSet" ?hFormatFuncSet@@3PEAXEA
0x14000F2D8: "__cdecl _imp_scanf" __imp_scanf
0x14000F280: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000F178: "__cdecl _imp_CertAddCTLContextToStore" __imp_CertAddCTLContextToStore
0x14000D670: "unsigned short * __ptr64 __ptr64 g_wszSrcStoreName" ?g_wszSrcStoreName@@3PEAGEA
0x140001088: "2.5.29.19" ??_C@_09OGKMCFCE@2?45?429?419?$AA@
0x1400012A0: "1.2.840.113549.1.9.5" ??_C@_0BF@HLHJPPOD@1?42?4840?4113549?41?49?45?$AA@
0x140001140: "2.16.840.1.113730.1.7" ??_C@_0BG@ILJLKBKF@2?416?4840?41?4113730?41?47?$AA@
0x140008594: DisplayBasicConstraintsExtension
0x140008BC0: DisplayCrlDistPointsExtension
0x14000D6D8: "struct HINSTANCE__ * __ptr64 __ptr64 hModule" ?hModule@@3PEAUHINSTANCE__@@EA
0x14000F198: CRYPT32_NULL_THUNK_DATA
0x14000F070: "__cdecl _imp_CertAddCRLContextToStore" __imp_CertAddCRLContextToStore
0x1400095C4: RetrieveBLOBFromFile
0x14000D848: "__cdecl _onexitend" __onexitend
0x14000F348: "__cdecl _imp__exit" __imp__exit
0x140008078: DisplayCommonNameExtension
0x140001000: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140005974: PrintCrlEntries
0x14000F218: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000F2C8: USER32_NULL_THUNK_DATA
0x14000B020: "unsigned long g_dwDesStoreFlag" ?g_dwDesStoreFlag@@3KA
0x14000D6B8: "unsigned long g_dwDesStoreOpenFlag" ?g_dwDesStoreOpenFlag@@3KA
0x140007F5C: DisplaySMIMECapabilitiesExtension
0x140001020: "__cdecl _xi_a" __xi_a
0x140007684: PrintExtensions
0x14000F0D0: "__cdecl _imp_CertAddEncodedCTLToStore" __imp_CertAddEncodedCTLToStore
0x14000F1E8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140009F10: "__cdecl matherr" _matherr
0x140001B7C: Usage
0x140001210: " " ??_C@_1O@OKKEOOJG@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140001740: wmain
0x14000D6EC: "int g_fSrcSystemStore" ?g_fSrcSystemStore@@3HA
0x14000F0D8: "__cdecl _imp_CertGetCRLFromStore" __imp_CertGetCRLFromStore
0x14000F2E8: "__cdecl _imp_strtok" __imp_strtok
0x140001220: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x140009428: DisplaySerialNumber
0x14000433C: DisplayCertAndPrompt
0x140009CF0: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x14000F310: "__cdecl _imp_towupper" __imp_towupper
0x14000420C: DeleteItem
0x14000A1A6: strcmp
0x1400010F8: "2.16.840.1.113730.1.2" ??_C@_0BG@PGOMFFOA@2?416?4840?41?4113730?41?42?$AA@
0x140006460: OpenEncodedCTL
0x140006300: OpenEncodedCRL
0x1400012D0: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x14000D718: "char * __ptr64 __ptr64 g_szDesStoreProvider" ?g_szDesStoreProvider@@3PEADEA
0x140001458: " [%d] %s (%S)" ??_C@_0BB@CNLBNICB@?5?5?5?5?$FL?$CFd?$FN?5?$CFs?5?$CI?$CFS?$CJ?$AA@
0x140009B00: "__cdecl _security_check_cookie" __security_check_cookie
0x140001018: "__cdecl _xc_z" __xc_z
0x14000265C: OpenGenericStore
0x1400013F8: "2.5.29.10" ??_C@_09DHGOJOGN@2?45?429?410?$AA@
0x14000F380: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000F1F0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140001110: "2.16.840.1.113730.1.3" ??_C@_0BG@OPPHGEKB@2?416?4840?41?4113730?41?43?$AA@
0x1400088D0: DisplayCRLReason
0x14000D6F0: "unsigned char * __ptr64 __ptr64 g_pbHash" ?g_pbHash@@3PEAEEA
0x14000F268: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x14000F078: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x14000F288: "__cdecl _imp_GetModuleHandleA" __imp_GetModuleHandleA
0x14000F200: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x14000F060: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x14000F2A0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x14000615C: Base64ToBytesW
0x1400012E0: " [%d] %s " ??_C@_0N@OGAICLLK@?5?5?5?5?$FL?$CFd?$FN?5?$CFs?6?$AA@
0x14000F3C0: msvcrt_NULL_THUNK_DATA
0x140001550: "__cdecl load_config_used" _load_config_used
0x14000F2F0: "__cdecl _imp_printf" __imp_printf
0x14000D660: "int g_fSaveAs7" ?g_fSaveAs7@@3HA
0x14000F418: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x14000F158: "__cdecl _imp_CertRDNValueToStrA" __imp_CertRDNValueToStrA
0x140001340: " [%d,%d] %s (%S) %s " ??_C@_0BG@IOOLJPNI@?5?5?$FL?$CFd?0?$CFd?$FN?5?$CFs?5?$CI?$CFS?$CJ?5?$CFs?6?$AA@
0x14000B024: "unsigned long g_dwMsgAndCertEncodingType" ?g_dwMsgAndCertEncodingType@@3KA
0x14000F404: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x14000934C: TestNoCopyDecodeObject
0x14000F328: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400010E0: "2.16.840.1.113730.1.1" ??_C@_0BG@NNMBAGCD@2?416?4840?41?4113730?41?41?$AA@
0x14000F038: "__cdecl _imp_CertSaveStore" __imp_CertSaveStore
0x14000F2B8: "__cdecl _imp_LoadStringA" __imp_LoadStringA
0x14000F2C0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400016C0: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140008F18: DisplayBits
0x140009504: WSZtoSZ
0x14000F270: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x14000F240: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000F208: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000B5D4: "__cdecl dowildcard" _dowildcard
0x14000D728: "unsigned short * __ptr64 __ptr64 g_wszDesStoreOpenFlag" ?g_wszDesStoreOpenFlag@@3PEAGEA
0x140001398: "2.5.29.2" ??_C@_08LLFBPOIE@2?45?429?42?$AA@
0x14000D6C0: "unsigned short * __ptr64 __ptr64 g_wszSrcStoreProvider" ?g_wszSrcStoreProvider@@3PEAGEA
0x140001470: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140009B24: free
0x14000BA30: "unsigned short * g_wszMD5" ?g_wszMD5@@3PAGA
0x1400070DC: DisplaySignature
0x14000F238: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400045DC: BuildCertList
0x14000A1B4: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000A182: memcmp
0x140009E5C: RtlpImageNtHeader
0x1400010B0: "1.3.6.1.4.1.311.2.1.27" ??_C@_0BH@HGOCEHGB@1?43?46?41?44?41?4311?42?41?427?$AA@
0x140001378: "2.5.29.31" ??_C@_09CNPBHLEC@2?45?429?431?$AA@
0x14000F210: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000D6A8: "int g_fUndocumented" ?g_fUndocumented@@3HA
0x14000F160: "__cdecl _imp_CertEnumCertificateContextProperties" __imp_CertEnumCertificateContextProperties
0x140004B6C: DisplayCert
0x14000B5E0: "int g_fMulti" ?g_fMulti@@3HA
0x14000F148: "__cdecl _imp_CryptStringToBinaryA" __imp_CryptStringToBinaryA
0x14000D6FC: "unsigned long g_dwAction" ?g_dwAction@@3KA
0x14000F320: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140001418: "2.5.29.32" ??_C@_09GNMCIIB@2?45?429?432?$AA@
0x14000D698: "unsigned short * __ptr64 __ptr64 g_wszName" ?g_wszName@@3PEAGEA
0x140006510: WSZtoBLOB
0x14000F42C: "__cdecl _IMPORT_DESCRIPTOR_CRYPTUI" __IMPORT_DESCRIPTOR_CRYPTUI
0x14000F3A8: "__cdecl _imp_memcpy" __imp_memcpy
0x1400012D4: "%02X" ??_C@_04JFFKLGJF@?$CF02X?$AA@
0x14000B018: "unsigned long g_dwCertEncodingType" ?g_dwCertEncodingType@@3KA
0x140001408: "2.5.29.15" ??_C@_09EKBJGKCI@2?45?429?415?$AA@
0x14000D690: "char * __ptr64 __ptr64 g_szSrcStoreProvider" ?g_szSrcStoreProvider@@3PEADEA
0x1400011E8: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x14000F0E0: "__cdecl _imp_CryptInstallOIDFunctionAddress" __imp_CryptInstallOIDFunctionAddress
0x140001258: "' " ??_C@_15DLCJILLG@?$AA?8?$AA?6?$AA?$AA@
0x140008E90: DisplayAnyString
0x14000F058: "__cdecl _imp_CertRDNValueToStrW" __imp_CertRDNValueToStrW
0x14000B008: "__cdecl _security_cookie" __security_cookie
0x14000F100: "__cdecl _imp_CertAddCertificateContextToStore" __imp_CertAddCertificateContextToStore
0x1400011A0: "CryptDllFormatObject" ??_C@_0BF@JIMBAIFE@CryptDllFormatObject?$AA@
0x14000F260: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000F088: "__cdecl _imp_CryptInitOIDFunctionSet" __imp_CryptInitOIDFunctionSet
0x14000B000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400083A0: DisplayPoliciesExtension
0x14000D850: "__cdecl _onexitbegin" __onexitbegin
0x14000607C: Base64ToBytes
0x14000F0F8: "__cdecl _imp_CryptSIPRetrieveSubjectGuid" __imp_CryptSIPRetrieveSubjectGuid
0x14000D688: "int g_fDesSystemStore" ?g_fDesSystemStore@@3HA
0x14000F020: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x14000351C: DeleteCertStore
0x14000F2F8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000F1B8: "__cdecl _imp_CreateFileMappingA" __imp_CreateFileMappingA
0x14000F228: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000F188: "__cdecl _imp_CryptMsgClose" __imp_CryptMsgClose
0x14000D700: "unsigned long g_dwSrcStoreOpenFlag" ?g_dwSrcStoreOpenFlag@@3KA
0x1400092C0: AllocAndGetMsgParam
0x14000F3DC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001488: " [%d] %s" ??_C@_0O@FPNGNONE@?5?5?5?5?5?5?$FL?$CFd?$FN?5?$CFs?$AA@
0x14000B01C: "unsigned long g_dwSrcStoreFlag" ?g_dwSrcStoreFlag@@3KA
0x14000BA60: "unsigned short * wszBuffer" ?wszBuffer@@3PAGA
0x14000A004: "__cdecl _security_init_cookie" __security_init_cookie
0x1400011B8: "," ??_C@_01IHBHIGKO@?0?$AA@
0x14000F350: "__cdecl _imp__cexit" __imp__cexit
0x14000F128: "__cdecl _imp_CertAddEncodedCertificateToStore" __imp_CertAddEncodedCertificateToStore
0x140009EB8: "__cdecl get_image_app_type" _get_image_app_type
0x1400094BC: IDSwprintf
0x1400084DC: DisplayBasicConstraints2Extension
0x14000F3F0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400087C0: DisplayKeyUsageRestrictionExtension
0x14000F1B0: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x14000D6BC: "int g_fSameSrcDes" ?g_fSameSrcDes@@3HA
0x140006D20: FileTimeText
0x140009708: OpenAndWriteToFile
0x14000F2E0: "__cdecl _imp_wprintf" __imp_wprintf
0x140001170: "2.16.840.1.113730.1.12" ??_C@_0BH@EPMKOEAF@2?416?4840?41?4113730?41?412?$AA@
0x140009AD0: wmainCRTStartup
0x140001388: "2.5.29.14" ??_C@_09FDACFLGJ@2?45?429?414?$AA@
0x14000F040: "__cdecl _imp_CertAddEncodedCRLToStore" __imp_CertAddEncodedCRLToStore
0x1400021C8: CheckParameter
0x14000F390: "__cdecl _imp_malloc" __imp_malloc
0x14000D6B0: "unsigned short * __ptr64 __ptr64 g_wszDesStoreProvider" ?g_wszDesStoreProvider@@3PEAGEA
0x14000F010: ADVAPI32_NULL_THUNK_DATA
0x14000F1D0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x14000D720: "unsigned short * __ptr64 __ptr64 g_wszSrcStoreOpenFlag" ?g_wszSrcStoreOpenFlag@@3PEAGEA
0x140001430: "1.2.840.113549.1.9.15" ??_C@_0BG@JMEAKAFH@1?42?4840?4113549?41?49?415?$AA@
0x14000F1E0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x14000F398: "__cdecl _imp_vwprintf" __imp_vwprintf
0x140001320: " 0x%08X" ??_C@_07INKJFDJP@?50x?$CF08X?$AA@
0x140009B78: "__cdecl _report_gsfailure" __report_gsfailure
0x14000F300: "__cdecl _imp__wasctime" __imp__wasctime
0x140001098: "1.3.6.1.4.1.311.2.1.10" ??_C@_0BH@DLOFGPPP@1?43?46?41?44?41?4311?42?41?410?$AA@
0x140007364: DecodeName
0x14000D860: "__cdecl _native_startup_state" __native_startup_state
0x14000F0C0: "__cdecl _imp_CryptMsgUpdate" __imp_CryptMsgUpdate
0x140001498: " [%d,*] %s " ??_C@_0BA@JGIABPKJ@?5?5?5?5?5?$FL?$CFd?0?$CK?$FN?5?$CFs?6?$AA@
0x14000F0B8: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x140001288: "1.2.840.113549.1.9.6" ??_C@_0BF@FAFEKMCA@1?42?4840?4113549?41?49?46?$AA@
0x1400010C8: "1.3.6.1.4.1.311.2.1.26" ??_C@_0BH@GPPJHGCA@1?43?46?41?44?41?4311?42?41?426?$AA@
0x14000F370: "__cdecl _imp__fmode" __imp__fmode
0x1400066B0: PrintBytes
0x14000F1D8: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x140001204: "%s " ??_C@_04ILNEAJIO@?$CFs?5?6?$AA@
0x14000F050: "__cdecl _imp_CryptMsgOpenToDecode" __imp_CryptMsgOpenToDecode
0x140001DA8: ParseSwitch
0x14000F2D0: "__cdecl _imp_free" __imp_free
0x140009F70: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400067D8: PrintAttributes
0x1400011F8: " [%d] %s " ??_C@_0L@CJLEEMNJ@?5?5?$FL?$CFd?$FN?5?$CFs?6?$AA@
0x14000A19A: memset
0x14000F440: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140008218: DisplaySpcSpAgencyExtension

[JEB Decompiler by PNF Software]