DLL Loaded: 00007FFB28290000 C:\Windows\System32\cryptbase.dll
DLL Loaded: 00007FFB27D10000 C:\Windows\System32\dpapi.dll
Thread 140C created, Entry: <synawudfbiousb.$LN9_1>
Thread 968 created, Entry: <synawudfbiousb.StartAddress>
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
readFromPipe
Thread 840 created, Entry: ntdll.00007FFB2C3D2DC0
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
Thread 808 created, Entry: <synawudfbiousb.sub_7FFB0BEF9534>
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0BFFCAC0 (00007FFB0BFFCAC0)!
Thread FAC created, Entry: ntdll.00007FFB2C3D2DC0
CryptCreateHash alg: 800C
BCryptOpenAlgorithmProvider Algo: L"SHA256" Ptr: 0000000000000000
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 02 65 4c 1a dd a3 57 65 13 84 c7 98 38 4e 5e d9 
0010 c7 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 
0020 a2 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a 
0030 c0 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 
0040 56 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 
0050 21 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 
0060 18 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 
0070 c6 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 
0080 8f 12 90 7e 4b 95 09 0e fa a2 e3 17 07 e9 74 d8 
0090 33 a2 42 20 00 9a 33 ca 70 1c b9 3f 02 6e 78 a2 
00a0 ca 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 17 00 00 00 20 00 00 00 ab 9d fd ba 74 25 29 93 
0010 9d 2d 5d f4 77 ec 90 2e 13 b8 21 1a 19 70 1e 50 
0020 2f f5 6e 6e 25 ae 8c 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 dd f4 04 74 
0050 f0 7a e4 e0 79 d1 f1 9f ae bd a8 ef 1e fa 18 c2 
0060 6a 76 ae a5 aa bf c3 4f 12 94 8c 8f 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 a5 58 ed 0f 31 33 45 63 
00a0 c8 8a d5 53 d9 e4 6e 20 5d 54 3b 83 99 cf 9b ef 
00b0 9e a8 aa c5 eb fb 20 a2 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 17 00 00 00 00 01 00 00 01 00 00 00 fc ff ff ff 
0010 ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 
0020 00 00 00 00 01 00 00 00 ff ff ff ff 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 4b 60 d2 27 3e 3c ce 3b f6 b0 53 cc b0 06 1d 65 
0060 bc 86 98 76 55 bd eb b3 e7 93 3a aa d8 35 c6 5a 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 96 c2 98 d8 45 39 a1 f4 a0 33 eb 2d 
00a0 81 7d 03 77 f2 40 a4 63 e5 e6 bc f8 47 42 2c e1 
00b0 f2 d1 17 6b 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 f5 51 bf 37 68 40 b6 cb 
00e0 ce 5e 31 6b 57 33 ce 2b 16 9e 0f 7c 4a eb e7 8e 
00f0 9b 7f 1a fe e2 42 e3 4f 00 00 00 00 00 00 00 00 
0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0110 00 00 00 00 00 00 00 00 00 00 00 00 51 25 63 fc 
0120 c2 ca b9 f3 84 9e 17 a7 ad fa e6 bc ff ff ff ff 
0130 ff ff ff ff 00 00 00 00 ff ff ff ff 00 00 00 00 
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0160 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 
0170 00 00 00 00 00 00 00 00 01 00 00 00 ff ff ff ff 
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
01a0 00 00 00 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 20 00 00 00 17 00 00 00 ce d6 b5 fe bc 99 3f 0c 
0010 9b 05 fa 6e f0 9b 42 6f 18 98 f6 10 53 53 86 a3 
0020 74 55 66 76 6f 17 71 5f 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 ca ce f4 5f 
0050 49 fd cc d0 87 e3 50 1d 75 26 b8 65 81 67 bd ac 
0060 68 4b 6f 4f b0 99 00 ab 91 55 61 3e 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 48 00 00 00 30 46 02 21 00 92 a1 f8 3a d4 45 57 
00a0 cb 82 0f 2f 07 0f af 87 e5 1c 82 9d 85 29 28 ab 
00b0 9e aa 0d 23 31 9e a8 25 5e 02 21 00 8d 98 5c ba 
00c0 0c 62 39 a5 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 
00d0 5a d6 8c f8 20 dd 93 f6 45 a0 59 53 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptCreateHash alg: 800C
BCryptOpenAlgorithmProvider Algo: L"ECDH_P256" Ptr: 0000000000000000
BCryptOpenAlgorithmProvider Algo: L"ECDSA_P256" Ptr: 0000000000000000
CryptCreateHash alg: 800C
CryptHashData 00000226778AAE60 00007FFB27CD4870
0000 20 00 00 00 17 00 00 00 ce d6 b5 fe bc 99 3f 0c 
0010 9b 05 fa 6e f0 9b 42 6f 18 98 f6 10 53 53 86 a3 
0020 74 55 66 76 6f 17 71 5f 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 ca ce f4 5f 
0050 49 fd cc d0 87 e3 50 1d 75 26 b8 65 81 67 bd ac 
0060 68 4b 6f 4f b0 99 00 ab 91 55 61 3e 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 00000226778AAE60 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AAE60 00007FFB27CD4870
DumpGot
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
BCryptOpenAlgorithmProvider Algo: L"ECDH_P256" Ptr: 0000000000000000
BCryptOpenAlgorithmProvider Algo: L"ECDSA_P256" Ptr: 0000000000000000
BCryptImportKeyPair \\\
Type: L"ECCPUBLICBLOB" \\\
Data len: 778AAE60hex
[rsp+28]
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 
CryptDecodeObject struct type ???
0000 30 46 02 21 00 92 a1 f8 3a d4 45 57 cb 82 0f 2f 
0010 07 0f af 87 e5 1c 82 9d 85 29 28 ab 9e aa 0d 23 
0020 31 9e a8 25 5e 02 21 00 8d 98 5c ba 0c 62 39 a5 
0030 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 5a d6 8c f8 
0040 20 dd 93 f6 45 a0 59 53 
Decoded
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptDecodeObject struct type ???
0000 30 46 02 21 00 92 a1 f8 3a d4 45 57 cb 82 0f 2f 
0010 07 0f af 87 e5 1c 82 9d 85 29 28 ab 9e aa 0d 23 
0020 31 9e a8 25 5e 02 21 00 8d 98 5c ba 0c 62 39 a5 
0030 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 5a d6 8c f8 
0040 20 dd 93 f6 45 a0 59 53 
Decoded
0000 20 00 00 00 00 00 00 00 80 e2 8a 77 26 02 00 00 
0010 20 00 00 00 00 00 00 00 a0 e2 8a 77 26 02 00 00 
0020 5e 25 a8 9e 31 23 0d aa 9e ab 28 29 85 9d 82 1c 
0030 e5 87 af 0f 07 2f 0f 82 cb 57 45 d4 3a f8 a1 92 
0040 53 59 a0 45 f6 93 dd 20 f8 8c d6 5a 75 d7 62 b7 
0050 29 57 a9 14 c0 20 cf 31 a5 39 62 0c ba 5c 98 8d 
BCryptVerfySignature
0000 5d 6c 0e 35 e8 3e 4d 4d 10 65 af d5 44 67 f7 c4 
0010 f3 9f 7e 34 2b 58 a1 57 ec cf 68 18 ad 89 6c 2d 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 71 7c d7 2d 
0010 09 62 bc 4a 28 46 13 8d bb 2c 24 19 25 12 a7 64 
0020 07 06 5f 38 38 46 13 9d 4b ec 20 33 
BCryptOpenAlgorithmProvider Algo: L"RC2" Ptr: 0000000000000000
CryptCreateHash alg: 8009
CryptHashData 00000226778ACDC0 00007FFB27CD4870
0000 47 57 4b 56 69 72 74 75 61 6c 42 6f 78 00 30 00 
CryptGetHashParam type : 2 ptr: 00000226778ACDC0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 00000226778ACDC0 00007FFB27CD4870
DumpGot
0000 bc 41 9d fc 39 c9 ba 69 a7 4d 5d 60 0a c3 5b 7b 
0010 1a fb 2b 52 e5 d2 4a 23 04 58 67 c8 3a 98 aa 9a 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 71 7c d7 2d 
0010 09 62 bc 4a 28 46 13 8d bb 2c 24 19 25 12 a7 64 
0020 07 06 5f 38 38 46 13 9d 4b ec 20 33 
CryptCreateHash alg: 8009
CryptHashData 00000226778ACDC0 00007FFB27CD4870
0000 bc 41 9d fc 39 c9 ba 69 a7 4d 5d 60 0a c3 5b 7b 
0010 1a fb 2b 52 e5 d2 4a 23 04 58 67 c8 3a 98 aa 9a 
0020 47 57 4b 56 69 72 74 75 61 6c 42 6f 78 00 30 00 
CryptGetHashParam type : 2 ptr: 00000226778ACDC0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 00000226778ACDC0 00007FFB27CD4870
DumpGot
0000 48 78 02 70 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 
0010 39 e0 bf 8f 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptCreateHash alg: 8009
CryptHashData 00000226778ACEE0 00007FFB27CD4870
0000 47 57 4b 5f 53 49 47 4e 3a 4c 76 b7 6a 97 98 1d 
0010 12 74 24 7e 16 66 10 e7 7f 4d 9c 9d 07 d3 c7 28 
0020 e5 32 91 6b dd 28 b4 54 
CryptGetHashParam type : 2 ptr: 00000226778ACEE0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 00000226778ACEE0 00007FFB27CD4870
DumpGot
0000 eb 1e 63 25 2c e0 c6 bb 08 38 88 5d 0d 1e 52 86 
0010 4e 89 7f 7b 41 cb 8d e4 dd 34 17 16 09 ef db e5 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptCreateHash alg: 8009
CryptHashData 00000226778ACEE0 00007FFB27CD4870
0000 eb 1e 63 25 2c e0 c6 bb 08 38 88 5d 0d 1e 52 86 
0010 4e 89 7f 7b 41 cb 8d e4 dd 34 17 16 09 ef db e5 
0020 47 57 4b 5f 53 49 47 4e 3a 4c 76 b7 6a 97 98 1d 
0030 12 74 24 7e 16 66 10 e7 7f 4d 9c 9d 07 d3 c7 28 
0040 e5 32 91 6b dd 28 b4 54 
CryptGetHashParam type : 2 ptr: 00000226778ACEE0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 00000226778ACEE0 00007FFB27CD4870
DumpGot
0000 b7 01 5b e1 65 8f 48 d0 d3 95 4b 2c 79 fe 66 b5 
0010 45 47 38 bd f3 a9 d4 ec e6 2e cf 7d d0 dd ba ba 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 b7 01 5b e1 
0010 65 8f 48 d0 d3 95 4b 2c 79 fe 66 b5 45 47 38 bd 
0020 f3 a9 d4 ec e6 2e cf 7d d0 dd ba ba 
CryptCreateHash alg: 8009
CryptHashData 00000226778AAE60 00007FFB27CD4870
0000 65 4c 1a dd a3 57 65 13 84 c7 98 38 4e 5e d9 c7 
0010 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 a2 
0020 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a c0 
0030 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 56 
0040 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 21 
0050 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 18 
0060 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 c6 
0070 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 8f 
CryptGetHashParam type : 2 ptr: 00000226778AAE60 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 00000226778AAE60 00007FFB27CD4870
DumpGot
0000 12 90 7e 4b 95 09 0e fa a2 e3 17 07 e9 74 d8 33 
0010 a2 42 20 00 9a 33 ca 70 1c b9 3f 02 6e 78 a2 ca 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
BCryptOpenAlgorithmProvider Algo: L"AES" Ptr: 0000000000000000
CryptDecrypt: len - 112
0000 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 a2 
0010 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a c0 
0020 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 56 
0030 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 21 
0040 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 18 
0050 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 c6 
0060 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 8f 
Decrypted:
0000 ab 9d fd ba 74 25 29 93 9d 2d 5d f4 77 ec 90 2e 
0010 13 b8 21 1a 19 70 1e 50 2f f5 6e 6e 25 ae 8c 00 
0020 dd f4 04 74 f0 7a e4 e0 79 d1 f1 9f ae bd a8 ef 
0030 1e fa 18 c2 6a 76 ae a5 aa bf c3 4f 12 94 8c 8f 
0040 94 f5 52 49 8e de 72 ff fa 1f 04 b9 68 23 72 09 
0050 20 6c 86 b7 2f f9 99 dc ce d1 2d b8 06 4c 87 d6 
0060 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 
CryptGenRandom 4
Generated
0000 5f 3a 22 af 
CryptGenRandom 28
Generated
0000 5e 01 9c ef f8 9e 43 e7 79 57 5b fd 5b a2 75 ea 
0010 97 91 d6 50 28 d9 62 17 c4 92 f1 a0 
CryptHashData 00000226778AA120 00007FFB27CD4870
0000 01 00 00 3f 03 03 af 22 3a 5f 5e 01 9c ef f8 9e 
0010 43 e7 79 57 5b fd 5b a2 75 ea 97 91 d6 50 28 d9 
0020 62 17 c4 92 f1 a0 07 00 00 00 00 00 00 00 00 04 
0030 c0 05 00 3d 00 00 0a 00 04 00 02 00 17 00 0b 00 
0040 02 01 00 
CryptGetHashParam type : 4 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 00000226778AA120 00007FFB27CD4870
DumpGot
0000 6c 5c e0 07 6d 1b d4 18 25 2b 2c 31 03 1b e4 92 
0010 41 81 6f 09 ed 5a db df c5 05 f1 e9 22 06 65 7a 
Thread 968 exit
Thread 808 exit
Thread 140C exit
DLL Unloaded: 00007FFB28810000 powrprof.dll
DLL Unloaded: 00007FFB28890000 shcore.dll
DLL Unloaded: 00007FFB29250000 windows.storage.dll
DLL Unloaded: 00007FFB2A720000 shell32.dll
DLL Unloaded: 00007FFB2A6C0000 shlwapi.dll
DLL Unloaded: 00007FFB28800000 msasn1.dll
DLL Unloaded: 00007FFB27D10000 dpapi.dll
DLL Unloaded: 00007FFB29030000 crypt32.dll
DLL Unloaded: 00007FFB2BF70000 setupapi.dll
Could not delete breakpoint 00007FFB15206154! (DeleteBPX)
DLL Unloaded: 00007FFB0BEE0000 synawudfbiousb.dll
DLL Unloaded: 00007FFB25250000 wudfx.dll
Thread 7E0 exit
Thread 288 exit
Thread 1368 exit
Thread 818 exit
Thread FAC exit
Thread 618 exit
Thread 840 exit
Process stopped with exit code 0x0
Saving database to C:\Users\Test\Desktop\release\x64\db\WUDFHost.exe.dd64 531ms
Debugging stopped!
Database file: C:\Users\Test\Desktop\release\x64\db\WUDFHost.exe.dd64
Process Started: 00007FF7A0630000 C:\Windows\System32\WUDFHost.exe
Loading database from C:\Users\Test\Desktop\release\x64\db\WUDFHost.exe.dd64 1062ms
DLL Loaded: 00007FFB2C3A0000 C:\Windows\System32\ntdll.dll
Thread 15D8 created, Entry: <ntdll.DbgUiRemoteBreakin>
DLL Loaded: 00007FFB29E00000 C:\Windows\System32\kernel32.dll
DLL Loaded: 00007FFB28C10000 C:\Windows\System32\KernelBase.dll
DLL Loaded: 00007FFB2A180000 C:\Windows\System32\rpcrt4.dll
DLL Loaded: 00007FFB29A90000 C:\Windows\System32\combase.dll
DLL Loaded: 00007FFB28A60000 C:\Windows\System32\ucrtbase.dll
DLL Loaded: 00007FFB28FC0000 C:\Windows\System32\bcryptprimitives.dll
DLL Loaded: 00007FFB2A2B0000 C:\Windows\System32\sechost.dll
DLL Loaded: 00007FFB27400000 C:\Windows\System32\devobj.dll
DLL Loaded: 00007FFB29200000 C:\Windows\System32\cfgmgr32.dll
DLL Loaded: 00007FFB26610000 C:\Windows\System32\WUDFPlatform.dll
DLL Loaded: 00007FFB2BEC0000 C:\Windows\System32\advapi32.dll
DLL Loaded: 00007FFB2BC40000 C:\Windows\System32\msvcrt.dll
DLL Loaded: 00007FFB28470000 C:\Windows\System32\sspicli.dll
Attach breakpoint reached!
Thread 15D8 exit
Thread C60 created, Entry: ntdll.00007FFB2C3D2DC0
DLL Loaded: 00007FFB28880000 C:\Windows\System32\kernel.appcore.dll
Thread BAC created, Entry: ntdll.00007FFB2C3D2DC0
Thread 81C created, Entry: ntdll.00007FFB2C3D2DC0
Thread 1714 created, Entry: ntdll.00007FFB2C3D2DC0
Thread 1204 created, Entry: ntdll.00007FFB2C3D2DC0
DLL Loaded: 00007FFB22650000 C:\Windows\System32\winusb.dll
MemRead failed on breakpoint address00007FFB10466154!
DLL Loaded: 00007FFB07140000 C:\Windows\System32\drivers\UMDF\synaWudfBioUsb.dll
DLL Loaded: 00007FFB2A580000 C:\Windows\System32\ole32.dll
DLL Loaded: 00007FFB2A4D0000 C:\Windows\System32\gdi32.dll
DLL Loaded: 00007FFB28E30000 C:\Windows\System32\gdi32full.dll
DLL Loaded: 00007FFB2BD50000 C:\Windows\System32\user32.dll
DLL Loaded: 00007FFB289E0000 C:\Windows\System32\win32u.dll
DLL Loaded: 00007FFB2A720000 C:\Windows\System32\shell32.dll
DLL Loaded: 00007FFB29250000 C:\Windows\System32\windows.storage.dll
DLL Loaded: 00007FFB28810000 C:\Windows\System32\powrprof.dll
DLL Loaded: 00007FFB2A6C0000 C:\Windows\System32\shlwapi.dll
DLL Loaded: 00007FFB28890000 C:\Windows\System32\SHCore.dll
DLL Loaded: 00007FFB28860000 C:\Windows\System32\profapi.dll
DLL Loaded: 00007FFB29030000 C:\Windows\System32\crypt32.dll
DLL Loaded: 00007FFB28800000 C:\Windows\System32\msasn1.dll
DLL Loaded: 00007FFB2BF70000 C:\Windows\System32\setupapi.dll
DLL Loaded: 00007FFB28740000 C:\Windows\System32\bcrypt.dll
DLL Loaded: 00007FFB25250000 C:\Windows\System32\WUDFx.dll
DLL Loaded: 00007FFB29930000 C:\Windows\System32\oleaut32.dll
DLL Loaded: 00007FFB28940000 C:\Windows\System32\msvcp_win.dll
DLL Loaded: 00007FFB28270000 C:\Windows\System32\cryptsp.dll
DLL Loaded: 00007FFB27CD0000 C:\Windows\System32\rsaenh.dll
DLL Loaded: 00007FFB27F50000 C:\Windows\System32\userenv.dll
BCryptOpenAlgorithmProvider Algo: ??? Ptr: 0000000000000000
DLL Loaded: 00007FFB28290000 C:\Windows\System32\cryptbase.dll
DLL Loaded: 00007FFB27D10000 C:\Windows\System32\dpapi.dll
Thread 9BC created, Entry: <synawudfbiousb.$LN9_1>
Thread DFC created, Entry: ntdll.00007FFB2C3D2DC0
Thread 1224 created, Entry: <synawudfbiousb.sub_7FFB07159534>
Thread 1684 created, Entry: <synawudfbiousb.StartAddress>
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
0000 00 00 f0 b0 5e 54 a4 00 00 00 06 07 01 30 00 01 
0010 00 00 26 85 88 42 45 3b 00 23 00 00 00 00 01 00 
0020 00 00 00 00 00 07 ab ab ab ab ab ab ab ab ab ab 
0030 ab ab ab ab ab ab ee fe ee fe ee fe ee fe ee fe 
0040 00 00 00 00 
$sarg4=0000024780B86CC0 (2506125503680d)
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
CryptCreateHash alg: 800C
BCryptOpenAlgorithmProvider Algo: L"SHA256" Ptr: 0000000000000000
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 00 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 6e 34 0b 9c ff b3 7a 98 9c a5 44 e6 bb 78 0a 2c 
0010 78 90 1d 3f b3 37 38 76 85 11 a3 06 17 af a0 1d 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 02 65 4c 1a dd a3 57 65 13 84 c7 98 38 4e 5e d9 
0010 c7 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 
0020 a2 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a 
0030 c0 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 
0040 56 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 
0050 21 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 
0060 18 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 
0070 c6 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 
0080 8f 12 90 7e 4b 95 09 0e fa a2 e3 17 07 e9 74 d8 
0090 33 a2 42 20 00 9a 33 ca 70 1c b9 3f 02 6e 78 a2 
00a0 ca 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 c8 38 d8 e1 db f5 04 53 04 1a c5 a7 b4 0b 2f 1e 
0010 f2 7d 7e 1b fd 48 da a9 42 06 59 f3 3b 07 a7 e3 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 17 00 00 00 20 00 00 00 ab 9d fd ba 74 25 29 93 
0010 9d 2d 5d f4 77 ec 90 2e 13 b8 21 1a 19 70 1e 50 
0020 2f f5 6e 6e 25 ae 8c 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 dd f4 04 74 
0050 f0 7a e4 e0 79 d1 f1 9f ae bd a8 ef 1e fa 18 c2 
0060 6a 76 ae a5 aa bf c3 4f 12 94 8c 8f 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 a5 58 ed 0f 31 33 45 63 
00a0 c8 8a d5 53 d9 e4 6e 20 5d 54 3b 83 99 cf 9b ef 
00b0 9e a8 aa c5 eb fb 20 a2 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 ed 52 bb 71 b3 d9 0c 00 86 ad 64 0d 45 76 c7 32 
0010 b6 d5 d3 39 2d 89 5e 65 4b 60 6a 82 6a e5 bd 0c 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 17 00 00 00 00 01 00 00 01 00 00 00 fc ff ff ff 
0010 ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 
0020 00 00 00 00 01 00 00 00 ff ff ff ff 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 4b 60 d2 27 3e 3c ce 3b f6 b0 53 cc b0 06 1d 65 
0060 bc 86 98 76 55 bd eb b3 e7 93 3a aa d8 35 c6 5a 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 96 c2 98 d8 45 39 a1 f4 a0 33 eb 2d 
00a0 81 7d 03 77 f2 40 a4 63 e5 e6 bc f8 47 42 2c e1 
00b0 f2 d1 17 6b 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 f5 51 bf 37 68 40 b6 cb 
00e0 ce 5e 31 6b 57 33 ce 2b 16 9e 0f 7c 4a eb e7 8e 
00f0 9b 7f 1a fe e2 42 e3 4f 00 00 00 00 00 00 00 00 
0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0110 00 00 00 00 00 00 00 00 00 00 00 00 51 25 63 fc 
0120 c2 ca b9 f3 84 9e 17 a7 ad fa e6 bc ff ff ff ff 
0130 ff ff ff ff 00 00 00 00 ff ff ff ff 00 00 00 00 
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0160 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 
0170 00 00 00 00 00 00 00 00 01 00 00 00 ff ff ff ff 
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
01a0 00 00 00 00 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 ec 5d 90 0e 5a 79 58 6d 2c db ee c6 22 40 c6 89 
0010 9d 37 47 5e 0f 46 bb 9e fd 3f 5a 4f 32 e8 27 d2 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 53 41 e6 b2 64 69 79 a7 0e 57 65 30 07 a1 f3 10 
0010 16 94 21 ec 9b dd 9f 1a 56 48 f7 5a de 00 5a f1 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 53 41 e6 b2 64 69 79 a7 0e 57 65 30 07 a1 f3 10 
0010 16 94 21 ec 9b dd 9f 1a 56 48 f7 5a de 00 5a f1 
CryptCreateHash alg: 800C
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 20 00 00 00 17 00 00 00 ce d6 b5 fe bc 99 3f 0c 
0010 9b 05 fa 6e f0 9b 42 6f 18 98 f6 10 53 53 86 a3 
0020 74 55 66 76 6f 17 71 5f 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 ca ce f4 5f 
0050 49 fd cc d0 87 e3 50 1d 75 26 b8 65 81 67 bd ac 
0060 68 4b 6f 4f b0 99 00 ab 91 55 61 3e 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 48 00 00 00 30 46 02 21 00 92 a1 f8 3a d4 45 57 
00a0 cb 82 0f 2f 07 0f af 87 e5 1c 82 9d 85 29 28 ab 
00b0 9e aa 0d 23 31 9e a8 25 5e 02 21 00 8d 98 5c ba 
00c0 0c 62 39 a5 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 
00d0 5a d6 8c f8 20 dd 93 f6 45 a0 59 53 00 00 00 00 
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 d7 b7 f6 53 2b f4 a3 4f 4f 41 90 fe ad 55 1c e6 
0010 2a ba 54 08 e5 30 60 e6 36 1c 35 6a 77 1d c7 7b 
CryptCreateHash alg: 800C
BCryptOpenAlgorithmProvider Algo: L"ECDH_P256" Ptr: 0000000000000000
BCryptOpenAlgorithmProvider Algo: L"ECDSA_P256" Ptr: 0000000000000000
CryptCreateHash alg: 800C
CryptHashData 0000024780B89170 00007FFB27CD4870
0000 20 00 00 00 17 00 00 00 ce d6 b5 fe bc 99 3f 0c 
0010 9b 05 fa 6e f0 9b 42 6f 18 98 f6 10 53 53 86 a3 
0020 74 55 66 76 6f 17 71 5f 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 ca ce f4 5f 
0050 49 fd cc d0 87 e3 50 1d 75 26 b8 65 81 67 bd ac 
0060 68 4b 6f 4f b0 99 00 ab 91 55 61 3e 00 00 00 00 
0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptGetHashParam type : 4 ptr: 0000024780B89170 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B89170 00007FFB27CD4870
DumpGot
0000 5d 6c 0e 35 e8 3e 4d 4d 10 65 af d5 44 67 f7 c4 
0010 f3 9f 7e 34 2b 58 a1 57 ec cf 68 18 ad 89 6c 2d 
BCryptOpenAlgorithmProvider Algo: L"ECDH_P256" Ptr: 0000000000000000
BCryptOpenAlgorithmProvider Algo: L"ECDSA_P256" Ptr: 0000000000000000
BCryptImportKeyPair \\\
Type: L"ECCPUBLICBLOB" \\\
Data len: 80B89170hex
[rsp+28]
0000 45 43 53 31 20 00 00 00 f7 27 65 3b 4e 16 ce 06 
0010 65 a6 89 4d 7f 3a 30 d7 d0 a0 be 31 0d 12 92 a7 
0020 43 67 1f df 69 f6 a8 d3 a8 55 38 f8 b6 be c5 0d 
0030 6e ef 8b d5 f4 d0 7a 88 62 43 c5 8b 23 93 94 8d 
0040 f7 61 a8 47 21 a6 ca 94 
CryptDecodeObject struct type ???
0000 30 46 02 21 00 92 a1 f8 3a d4 45 57 cb 82 0f 2f 
0010 07 0f af 87 e5 1c 82 9d 85 29 28 ab 9e aa 0d 23 
0020 31 9e a8 25 5e 02 21 00 8d 98 5c ba 0c 62 39 a5 
0030 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 5a d6 8c f8 
0040 20 dd 93 f6 45 a0 59 53 
Decoded
0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
CryptDecodeObject struct type ???
0000 30 46 02 21 00 92 a1 f8 3a d4 45 57 cb 82 0f 2f 
0010 07 0f af 87 e5 1c 82 9d 85 29 28 ab 9e aa 0d 23 
0020 31 9e a8 25 5e 02 21 00 8d 98 5c ba 0c 62 39 a5 
0030 31 cf 20 c0 14 a9 57 29 b7 62 d7 75 5a d6 8c f8 
0040 20 dd 93 f6 45 a0 59 53 
Decoded
0000 20 00 00 00 00 00 00 00 90 c5 b8 80 47 02 00 00 
0010 20 00 00 00 00 00 00 00 b0 c5 b8 80 47 02 00 00 
0020 5e 25 a8 9e 31 23 0d aa 9e ab 28 29 85 9d 82 1c 
0030 e5 87 af 0f 07 2f 0f 82 cb 57 45 d4 3a f8 a1 92 
0040 53 59 a0 45 f6 93 dd 20 f8 8c d6 5a 75 d7 62 b7 
0050 29 57 a9 14 c0 20 cf 31 a5 39 62 0c ba 5c 98 8d 
BCryptVerfySignature
0000 5d 6c 0e 35 e8 3e 4d 4d 10 65 af d5 44 67 f7 c4 
0010 f3 9f 7e 34 2b 58 a1 57 ec cf 68 18 ad 89 6c 2d 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 71 7c d7 2d 
0010 09 62 bc 4a 28 46 13 8d bb 2c 24 19 25 12 a7 64 
0020 07 06 5f 38 38 46 13 9d 4b ec 20 33 
BCryptOpenAlgorithmProvider Algo: L"RC2" Ptr: 0000000000000000
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B0D0 00007FFB27CD4870
0000 47 57 4b 56 69 72 74 75 61 6c 42 6f 78 00 30 00 
CryptGetHashParam type : 2 ptr: 0000024780B8B0D0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B0D0 00007FFB27CD4870
DumpGot
0000 bc 41 9d fc 39 c9 ba 69 a7 4d 5d 60 0a c3 5b 7b 
0010 1a fb 2b 52 e5 d2 4a 23 04 58 67 c8 3a 98 aa 9a 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 71 7c d7 2d 
0010 09 62 bc 4a 28 46 13 8d bb 2c 24 19 25 12 a7 64 
0020 07 06 5f 38 38 46 13 9d 4b ec 20 33 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B0D0 00007FFB27CD4870
0000 bc 41 9d fc 39 c9 ba 69 a7 4d 5d 60 0a c3 5b 7b 
0010 1a fb 2b 52 e5 d2 4a 23 04 58 67 c8 3a 98 aa 9a 
0020 47 57 4b 56 69 72 74 75 61 6c 42 6f 78 00 30 00 
CryptGetHashParam type : 2 ptr: 0000024780B8B0D0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B0D0 00007FFB27CD4870
DumpGot
0000 48 78 02 70 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 
0010 39 e0 bf 8f 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B1F0 00007FFB27CD4870
0000 47 57 4b 5f 53 49 47 4e 3a 4c 76 b7 6a 97 98 1d 
0010 12 74 24 7e 16 66 10 e7 7f 4d 9c 9d 07 d3 c7 28 
0020 e5 32 91 6b dd 28 b4 54 
CryptGetHashParam type : 2 ptr: 0000024780B8B1F0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B1F0 00007FFB27CD4870
DumpGot
0000 eb 1e 63 25 2c e0 c6 bb 08 38 88 5d 0d 1e 52 86 
0010 4e 89 7f 7b 41 cb 8d e4 dd 34 17 16 09 ef db e5 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B1F0 00007FFB27CD4870
0000 eb 1e 63 25 2c e0 c6 bb 08 38 88 5d 0d 1e 52 86 
0010 4e 89 7f 7b 41 cb 8d e4 dd 34 17 16 09 ef db e5 
0020 47 57 4b 5f 53 49 47 4e 3a 4c 76 b7 6a 97 98 1d 
0030 12 74 24 7e 16 66 10 e7 7f 4d 9c 9d 07 d3 c7 28 
0040 e5 32 91 6b dd 28 b4 54 
CryptGetHashParam type : 2 ptr: 0000024780B8B1F0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B1F0 00007FFB27CD4870
DumpGot
0000 b7 01 5b e1 65 8f 48 d0 d3 95 4b 2c 79 fe 66 b5 
0010 45 47 38 bd f3 a9 d4 ec e6 2e cf 7d d0 dd ba ba 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 b7 01 5b e1 
0010 65 8f 48 d0 d3 95 4b 2c 79 fe 66 b5 45 47 38 bd 
0020 f3 a9 d4 ec e6 2e cf 7d d0 dd ba ba 
CryptCreateHash alg: 8009
CryptHashData 0000024780B89170 00007FFB27CD4870
0000 65 4c 1a dd a3 57 65 13 84 c7 98 38 4e 5e d9 c7 
0010 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 a2 
0020 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a c0 
0030 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 56 
0040 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 21 
0050 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 18 
0060 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 c6 
0070 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 8f 
CryptGetHashParam type : 2 ptr: 0000024780B89170 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B89170 00007FFB27CD4870
DumpGot
0000 12 90 7e 4b 95 09 0e fa a2 e3 17 07 e9 74 d8 33 
0010 a2 42 20 00 9a 33 ca 70 1c b9 3f 02 6e 78 a2 ca 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 48 78 02 70 
0010 5e 5a c4 a9 93 1c 44 aa 4d 32 25 22 39 e0 bf 8f 
0020 0c 85 4d de 49 0c cc f6 87 ef ad 9c 
BCryptOpenAlgorithmProvider Algo: L"AES" Ptr: 0000000000000000
CryptDecrypt: len - 112
0000 33 5c ed 15 55 3c f5 f4 de 14 a0 f2 59 68 00 a2 
0010 a0 98 58 c2 06 67 d5 c1 06 e3 bf e6 6a ec 6a c0 
0020 2d b2 d8 77 d9 0e c4 12 e3 ab 48 ab aa b4 b9 56 
0030 75 30 69 9d 0a c3 d9 bb ff de 42 11 bd 34 03 21 
0040 cf a2 8d 3c 1b e4 ba f0 1f f4 40 69 6f b4 78 18 
0050 f3 2d 6b 22 80 86 64 31 14 34 2a 81 2c cc d7 c6 
0060 62 f3 9e 5f 78 a6 39 d3 db 57 c3 30 d4 dd 12 8f 
Decrypted:
0000 ab 9d fd ba 74 25 29 93 9d 2d 5d f4 77 ec 90 2e 
0010 13 b8 21 1a 19 70 1e 50 2f f5 6e 6e 25 ae 8c 00 
0020 dd f4 04 74 f0 7a e4 e0 79 d1 f1 9f ae bd a8 ef 
0030 1e fa 18 c2 6a 76 ae a5 aa bf c3 4f 12 94 8c 8f 
0040 94 f5 52 49 8e de 72 ff fa 1f 04 b9 68 23 72 09 
0050 20 6c 86 b7 2f f9 99 dc ce d1 2d b8 06 4c 87 d6 
0060 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 
CryptGenRandom 4
Generated
0000 43 9c 8f 07 
CryptGenRandom 28
Generated
0000 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 40 
0010 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 01 00 00 3f 03 03 07 8f 9c 43 52 a2 57 85 d7 38 
0010 fc cb 6b e8 3a 03 50 b9 13 40 20 88 27 c5 9e b5 
0020 eb 8d 4a a8 09 91 07 00 00 00 00 00 00 00 00 04 
0030 c0 05 00 3d 00 00 0a 00 04 00 02 00 17 00 0b 00 
0040 02 01 00 
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 02 00 00 2d 03 03 01 80 41 dc 01 65 b5 a9 a6 5a 
0010 68 fe 31 35 58 fd cc 37 85 08 60 c6 b2 f8 d7 de 
0020 13 db 71 be 09 e9 07 54 4c 53 01 65 b5 a9 c0 05 
0030 00 
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 0d 00 00 04 01 40 00 00 
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 0e 00 00 00 
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 0b 00 00 c0 00 00 b8 00 00 b8 52 a2 17 00 00 00 
0010 20 00 00 00 ab 9d fd ba 74 25 29 93 9d 2d 5d f4 
0020 77 ec 90 2e 13 b8 21 1a 19 70 1e 50 2f f5 6e 6e 
0030 25 ae 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 
0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0050 00 00 00 00 00 00 00 00 dd f4 04 74 f0 7a e4 e0 
0060 79 d1 f1 9f ae bd a8 ef 1e fa 18 c2 6a 76 ae a5 
0070 aa bf c3 4f 12 94 8c 8f 00 00 00 00 00 00 00 00 
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
00a0 00 00 00 00 a5 58 ed 0f 31 33 45 63 c8 8a d5 53 
00b0 d9 e4 6e 20 5d 54 3b 83 99 cf 9b ef 9e a8 aa c5 
00c0 eb fb 20 a2 
BCryptGenerateKeyPair ptr: 5555555100000130
BCryptExportKey L"ECCPRIVATEBLOB"
len: D32BBFEE68
BCryptExportKey L"ECCPRIVATEBLOB"
Exported: len unknown
0000 45 43 4b 32 20 00 00 00 47 2e cb 88 ab 9b cd 7c 
0010 20 9c c7 6c 40 31 d1 db d4 04 61 6a 69 1e 95 5a 
0020 a1 5d 29 b0 45 a1 d1 20 23 bb 90 70 f1 e6 c9 1c 
0030 cd 62 40 2f 19 71 dd 59 d6 07 48 7d 64 a6 d1 5a 
0040 e6 4e 93 52 11 4e 26 14 94 7b d0 b0 92 70 28 72 
0050 11 c7 5a 4d 50 94 97 a8 f1 21 27 06 fd c5 a5 8b 
0060 62 47 79 90 e8 6a d1 9d 
BCryptImportKeyPair \\\
Type: L"ECCPRIVATEBLOB" \\\
Data len: 80B8C780hex
[rsp+28]
0000 45 43 4b 32 20 00 00 00 47 2e cb 88 ab 9b cd 7c 
0010 20 9c c7 6c 40 31 d1 db d4 04 61 6a 69 1e 95 5a 
0020 a1 5d 29 b0 45 a1 d1 20 23 bb 90 70 f1 e6 c9 1c 
0030 cd 62 40 2f 19 71 dd 59 d6 07 48 7d 64 a6 d1 5a 
0040 e6 4e 93 52 11 4e 26 14 94 7b d0 b0 92 70 28 72 
0050 11 c7 5a 4d 50 94 97 a8 f1 21 27 06 fd c5 a5 8b 
0060 62 47 79 90 e8 6a d1 9d 
BCryptImportKeyPair \\\
Type: L"ECCPUBLICBLOB" \\\
Data len: 80B8C5C0hex
[rsp+28]
0000 45 43 4b 31 20 00 00 00 5f 71 17 6f 76 66 55 74 
0010 a3 86 53 53 10 f6 98 18 6f 42 9b f0 6e fa 05 9b 
0020 0c 3f 99 bc fe b5 d6 ce 3e 61 55 91 ab 00 99 b0 
0030 4f 6f 4b 68 ac bd 67 81 65 b8 26 75 1d 50 e3 87 
0040 d0 cc fd 49 5f f4 ce ca 
BCryptSecretAgreement
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 10 00 00 41 04 47 2e cb 88 ab 9b cd 7c 20 9c c7 
0010 6c 40 31 d1 db d4 04 61 6a 69 1e 95 5a a1 5d 29 
0020 b0 45 a1 d1 20 23 bb 90 70 f1 e6 c9 1c cd 62 40 
0030 2f 19 71 dd 59 d6 07 48 7d 64 a6 d1 5a e6 4e 93 
0040 52 11 4e 26 14 
BCryptDeriveKey kdf: L"TLS_PRF"
Derived:
0000 0f 29 77 b0 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 
0010 d0 2f 7a 9c 48 f6 45 d6 d5 de d9 40 3f 54 47 26 
0020 d7 07 a3 4b e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 6b 65 79 20 65 78 70 61 6e 73 69 6f 6e 07 8f 9c 
0010 43 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 
0020 40 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 01 80 41 
0030 dc 01 65 b5 a9 a6 5a 68 fe 31 35 58 fd cc 37 85 
0040 08 60 c6 b2 f8 d7 de 13 db 71 be 09 e9 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 94 e9 c6 47 da ac d0 1f 53 12 5e 4a 5f 95 39 9f 
0010 47 e0 71 96 4c a5 9b 75 c6 7f 13 57 f9 f5 18 0e 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 94 e9 c6 47 da ac d0 1f 53 12 5e 4a 5f 95 39 9f 
0010 47 e0 71 96 4c a5 9b 75 c6 7f 13 57 f9 f5 18 0e 
0020 6b 65 79 20 65 78 70 61 6e 73 69 6f 6e 07 8f 9c 
0030 43 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 
0040 40 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 01 80 41 
0050 dc 01 65 b5 a9 a6 5a 68 fe 31 35 58 fd cc 37 85 
0060 08 60 c6 b2 f8 d7 de 13 db 71 be 09 e9 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 57 10 20 9f 6f 06 93 ae bd 72 48 58 6c d8 ea e4 
0010 44 a6 77 e6 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 94 e9 c6 47 da ac d0 1f 53 12 5e 4a 5f 95 39 9f 
0010 47 e0 71 96 4c a5 9b 75 c6 7f 13 57 f9 f5 18 0e 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 47 71 0a af 81 09 42 15 62 70 ff 6a 77 b7 6e e1 
0010 77 11 60 b5 35 08 33 4c c0 a2 ca 2d 17 9b 2b 91 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 47 71 0a af 81 09 42 15 62 70 ff 6a 77 b7 6e e1 
0010 77 11 60 b5 35 08 33 4c c0 a2 ca 2d 17 9b 2b 91 
0020 6b 65 79 20 65 78 70 61 6e 73 69 6f 6e 07 8f 9c 
0030 43 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 
0040 40 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 01 80 41 
0050 dc 01 65 b5 a9 a6 5a 68 fe 31 35 58 fd cc 37 85 
0060 08 60 c6 b2 f8 d7 de 13 db 71 be 09 e9 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 3c 55 56 96 70 1c 6c 4e 96 72 16 9c d0 0e 05 c9 
0010 31 72 14 d0 28 18 51 89 17 49 60 8d 2d dd b0 0c 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 47 71 0a af 81 09 42 15 62 70 ff 6a 77 b7 6e e1 
0010 77 11 60 b5 35 08 33 4c c0 a2 ca 2d 17 9b 2b 91 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 d1 70 6a ce e6 0f 62 e7 33 ee 60 9d 51 1c 83 16 
0010 e4 34 3a be e7 ed 8f 6f b7 a0 fa ca 36 3a 1d ab 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 d1 70 6a ce e6 0f 62 e7 33 ee 60 9d 51 1c 83 16 
0010 e4 34 3a be e7 ed 8f 6f b7 a0 fa ca 36 3a 1d ab 
0020 6b 65 79 20 65 78 70 61 6e 73 69 6f 6e 07 8f 9c 
0030 43 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 
0040 40 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 01 80 41 
0050 dc 01 65 b5 a9 a6 5a 68 fe 31 35 58 fd cc 37 85 
0060 08 60 c6 b2 f8 d7 de 13 db 71 be 09 e9 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 53 e2 81 f8 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 
0010 66 0f 0a 1e b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 d1 70 6a ce e6 0f 62 e7 33 ee 60 9d 51 1c 83 16 
0010 e4 34 3a be e7 ed 8f 6f b7 a0 fa ca 36 3a 1d ab 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 05 e5 b9 96 05 02 20 c8 7c 0d ec 31 7b db 1d 4b 
0010 32 f5 c0 47 b2 d8 ab 5d 3a f6 7e db fc 57 3f 46 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8C740 00007FFB27CD4870
0000 05 e5 b9 96 05 02 20 c8 7c 0d ec 31 7b db 1d 4b 
0010 32 f5 c0 47 b2 d8 ab 5d 3a f6 7e db fc 57 3f 46 
0020 6b 65 79 20 65 78 70 61 6e 73 69 6f 6e 07 8f 9c 
0030 43 52 a2 57 85 d7 38 fc cb 6b e8 3a 03 50 b9 13 
0040 40 20 88 27 c5 9e b5 eb 8d 4a a8 09 91 01 80 41 
0050 dc 01 65 b5 a9 a6 5a 68 fe 31 35 58 fd cc 37 85 
0060 08 60 c6 b2 f8 d7 de 13 db 71 be 09 e9 
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8C740 00007FFB27CD4870
DumpGot
0000 25 44 f2 42 9a 9e 23 48 2a ca bf 6b fe 83 5c ee 
0010 79 6a a5 73 61 d7 3c 60 5a de be 5e e3 75 bc d0 
INT3 breakpoint at <advapi32.CryptDuplicateHash> (00007FFB2BEEE360)!
CryptDuplicateHash 0000024780B88430 ->
INT3 breakpoint at cryptsp.00007FFB2827636B (00007FFB2827636B)!
CryptDuplicateHash end 
0000024780B8A900
CryptGetHashParam type : 4 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
0000 e9 e1 9c ce 6c 83 51 e0 0f 23 a6 3d 21 3b 76 06 
0010 ee c0 02 94 e1 dd 48 53 a4 4b 01 62 82 7f 38 9f 
BCryptImportKeyPair \\\
Type: L"ECCPRIVATEBLOB" \\\
Data len: 80B8B0F0hex
[rsp+28]
0000 45 43 53 32 20 00 00 00 00 8c ae 25 6e 6e f5 2f 
0010 50 1e 70 19 1a 21 b8 13 2e 90 ec 77 f4 5d 2d 9d 
0020 93 29 25 74 ba fd 9d ab 8f 8c 94 12 4f c3 bf aa 
0030 a5 ae 76 6a c2 18 fa 1e ef a8 bd ae 9f f1 d1 79 
0040 e0 e4 7a f0 74 04 f4 dd d6 87 4c 06 b8 2d d1 ce 
0050 dc 99 f9 2f b7 86 6c 20 09 72 23 68 b9 04 1f fa 
0060 ff 72 de 8e 49 52 f5 94 
BCryptSignHash
0000 e9 e1 9c ce 6c 83 51 e0 0f 23 a6 3d 21 3b 76 06 
0010 ee c0 02 94 e1 dd 48 53 a4 4b 01 62 82 7f 38 9f 
CryptEncodeObject ??? len unkown!
0000 20 00 00 00 b0 5e 00 00 70 b6 b8 80 47 02 00 00 
0010 20 00 00 00 00 00 00 00 c0 b6 b8 80 47 02 00 00 
0020 00 a9 b8 80 47 02 00 00 f8 a5 b8 80 47 02 00 00 
0030 f8 b0 b8 80 47 02 00 00 00 00 00 00 d3 00 00 00 
Encoded
0000 30 45 02 21 00 ad 3c d8 74 86 e2 8d ca 63 0b 8b 
0010 02 4e ad b4 56 05 06 0d c0 ab 0d ce c3 5d 08 04 
0020 70 98 6a 21 a0 02 20 20 b6 cb be 32 93 ef 02 45 
0030 cc 94 f5 8d 56 ab ec 99 83 2a 6e 12 b6 4d 18 30 
0040 fb fa 8d 40 c1 29 1a 
CryptHashData 0000024780B88430 00007FFB27CD4870
0000 0f 00 00 47 30 45 02 21 00 ad 3c d8 74 86 e2 8d 
0010 ca 63 0b 8b 02 4e ad b4 56 05 06 0d c0 ab 0d ce 
0020 c3 5d 08 04 70 98 6a 21 a0 02 20 20 b6 cb be 32 
0030 93 ef 02 45 cc 94 f5 8d 56 ab ec 99 83 2a 6e 12 
0040 b6 4d 18 30 fb fa 8d 40 c1 29 1a 
INT3 breakpoint at <advapi32.CryptDuplicateHash> (00007FFB2BEEE360)!
CryptDuplicateHash 0000024780B88430 ->
INT3 breakpoint at cryptsp.00007FFB2827636B (00007FFB2827636B)!
CryptDuplicateHash end 
0000024780B8B040
CryptGetHashParam type : 4 ptr: 0000024780B8B040 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B8B040 00007FFB27CD4870
DumpGot
0000 e3 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 
0010 93 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B750 00007FFB27CD4870
0000 63 6c 69 65 6e 74 20 66 69 6e 69 73 68 65 64 e3 
0010 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 93 
0020 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptGetHashParam type : 2 ptr: 0000024780B8B750 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B750 00007FFB27CD4870
DumpGot
0000 75 ab a5 3c 90 d1 bb e3 7a ea 4c 35 00 7d f0 0b 
0010 4a 6e 06 b5 6b 3f 94 0a 52 be ac 3c cd 38 1f 37 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B750 00007FFB27CD4870
0000 75 ab a5 3c 90 d1 bb e3 7a ea 4c 35 00 7d f0 0b 
0010 4a 6e 06 b5 6b 3f 94 0a 52 be ac 3c cd 38 1f 37 
0020 63 6c 69 65 6e 74 20 66 69 6e 69 73 68 65 64 e3 
0030 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 93 
0040 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptGetHashParam type : 2 ptr: 0000024780B8B750 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B750 00007FFB27CD4870
DumpGot
0000 79 82 f1 bb 54 7d db 67 2e 30 73 29 dd 21 fe 07 
0010 e8 ad 91 09 27 99 7b c0 79 67 41 d9 54 26 46 6c 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 57 10 20 9f 
0010 6f 06 93 ae bd 72 48 58 6c d8 ea e4 44 a6 77 e6 
0020 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8CAC0 00007FFB27CD4870
0000 16 03 03 00 10 
CryptHashData 0000024780B8CAC0 00007FFB27CD4870
0000 14 00 00 0c 79 82 f1 bb 54 7d db 67 2e 30 73 29 
CryptGetHashParam type : 2 ptr: 0000024780B8CAC0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8CAC0 00007FFB27CD4870
DumpGot
0000 d8 32 91 55 3e f6 6a 05 88 fb 57 ce 80 39 9b 4c 
0010 ee 61 1b 1c 11 91 41 84 7f ad 01 c2 9b c8 82 99 
CryptGenRandom 16
Generated
0000 09 a1 69 1a 8f 76 22 7e 3a 2a 36 23 44 d8 4f 4a 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 53 e2 81 f8 
0010 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 66 0f 0a 1e 
0020 b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptEncrypt: len - 64
0000 14 00 00 0c 79 82 f1 bb 54 7d db 67 2e 30 73 29 
0010 d8 32 91 55 3e f6 6a 05 88 fb 57 ce 80 39 9b 4c 
0020 ee 61 1b 1c 11 91 41 84 7f ad 01 c2 9b c8 82 99 
0030 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 
Encrypted:
0000 4b 24 b0 f8 2e 03 cc 1d f6 d9 2d 48 0b b9 43 96 
0010 bc c1 96 16 37 63 38 b7 2c 3e c9 71 ef 5c aa da 
0020 4e cc 88 72 4b a6 a4 ea 1a d1 21 a9 20 c9 b1 bf 
0030 4c a7 40 eb fd 56 da 3f 63 df d1 80 08 2d 37 05 
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 25 44 f2 42 
0010 9a 9e 23 48 2a ca bf 6b fe 83 5c ee 79 6a a5 73 
0020 61 d7 3c 60 5a de be 5e e3 75 bc d0 
CryptDecrypt: len - 64
0000 ec 49 38 d1 af ea ed 8f a0 e2 8b a6 67 5f 7d 41 
0010 03 e9 da dd cf 06 77 7f f9 2c 7d b6 b1 63 07 6e 
0020 e3 0b 91 98 f8 92 4e dc de 26 41 f3 2e fd 66 a1 
0030 72 4a 0d ed 6a 9a 6f d8 18 a6 20 fb 2f 13 08 3b 
Decrypted:
0000 14 00 00 0c da e8 86 9e ba 95 cb 1b 4d 72 ac e4 
0010 3d a1 0d df eb 65 8d b4 59 72 e4 2e c0 8c 1c 26 
0020 32 57 dc 6b f5 96 a5 8e 62 23 dc 4d 11 dc ff 46 
0030 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 3c 55 56 96 
0010 70 1c 6c 4e 96 72 16 9c d0 0e 05 c9 31 72 14 d0 
0020 28 18 51 89 17 49 60 8d 2d dd b0 0c 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8B0E0 00007FFB27CD4870
0000 16 03 03 00 10 
CryptHashData 0000024780B8B0E0 00007FFB27CD4870
0000 14 00 00 0c da e8 86 9e ba 95 cb 1b 4d 72 ac e4 
CryptGetHashParam type : 2 ptr: 0000024780B8B0E0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8B0E0 00007FFB27CD4870
DumpGot
0000 3d a1 0d df eb 65 8d b4 59 72 e4 2e c0 8c 1c 26 
0010 32 57 dc 6b f5 96 a5 8e 62 23 dc 4d 11 dc ff 46 
CryptGetHashParam type : 4 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 20 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B88430 00007FFB27CD4870
DumpGot
0000 e3 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 
0010 93 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8A900 00007FFB27CD4870
0000 73 65 72 76 65 72 20 66 69 6e 69 73 68 65 64 e3 
0010 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 93 
0020 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptGetHashParam type : 2 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
0000 1c fb 1d e6 2d 07 c9 e3 11 0d 9b 5b 77 66 aa 32 
0010 61 f2 3f ad e7 01 70 81 a2 4e 5c ac 8a 4e 7d 0b 
CryptImportKey
0000 08 02 00 00 02 66 00 00 30 00 00 00 0f 29 77 b0 
0010 6a 86 20 b4 5d 63 9b 93 1c bd a3 34 d0 2f 7a 9c 
0020 48 f6 45 d6 d5 de d9 40 3f 54 47 26 d7 07 a3 4b 
0030 e9 a6 4b 7e 8a 1b 8b 55 e4 85 49 02 
CryptCreateHash alg: 8009
CryptHashData 0000024780B8A900 00007FFB27CD4870
0000 1c fb 1d e6 2d 07 c9 e3 11 0d 9b 5b 77 66 aa 32 
0010 61 f2 3f ad e7 01 70 81 a2 4e 5c ac 8a 4e 7d 0b 
0020 73 65 72 76 65 72 20 66 69 6e 69 73 68 65 64 e3 
0030 43 ea ec 11 63 55 bc 32 c9 c0 60 58 86 8b ee 93 
0040 a6 ca 12 fb 1c c1 c0 65 19 6b ff 3c 02 b5 80 
CryptGetHashParam type : 2 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B8A900 00007FFB27CD4870
DumpGot
0000 da e8 86 9e ba 95 cb 1b 4d 72 ac e4 32 cc 97 18 
0010 2c fe 93 9e b2 0c 54 b3 f4 35 5e b1 38 96 44 ba 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 57 10 20 9f 
0010 6f 06 93 ae bd 72 48 58 6c d8 ea e4 44 a6 77 e6 
0020 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptCreateHash alg: 8009
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 17 03 03 00 0a 
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 08 5c 20 00 80 07 00 00 00 04 
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
0000 90 21 2e 3b 5e 62 a1 d2 3e 51 28 2e a6 95 6a cf 
0010 18 a5 aa 64 45 92 1e 1e 6b 0d 64 57 c9 7a 2e e5 
CryptGenRandom 16
Generated
0000 33 77 02 98 37 3c b2 68 be f3 2a 34 35 e3 0e 8f 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 53 e2 81 f8 
0010 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 66 0f 0a 1e 
0020 b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptEncrypt: len - 48
0000 08 5c 20 00 80 07 00 00 00 04 90 21 2e 3b 5e 62 
0010 a1 d2 3e 51 28 2e a6 95 6a cf 18 a5 aa 64 45 92 
0020 1e 1e 6b 0d 64 57 c9 7a 2e e5 05 05 05 05 05 05 
Encrypted:
0000 7e 62 23 cb b5 6d 8c c3 fb dc 65 e3 9e cb 4a 84 
0010 e4 e4 3e e6 38 7f 4e df bc 62 76 a5 23 46 83 b2 
0020 32 45 39 56 4c 33 b0 06 30 93 15 40 10 ed 49 c2 
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 25 44 f2 42 
0010 9a 9e 23 48 2a ca bf 6b fe 83 5c ee 79 6a a5 73 
0020 61 d7 3c 60 5a de be 5e e3 75 bc d0 
CryptDecrypt: len - 48
0000 06 5c 0b 6e a4 93 3b a4 00 ba d1 e6 f2 12 12 4d 
0010 e5 5f a5 9c 56 11 c2 32 d2 d2 20 69 ec 2a c8 7f 
0020 2f bb b1 31 f0 21 6f 6d 2b ff 85 84 b7 5a 5e b4 
Decrypted:
0000 00 00 a7 9b 72 db 7d 3d 7b e2 c8 f9 5f ec ae 74 
0010 59 68 0a a8 52 da 12 f3 a0 c6 bc de 2b 47 5a 9d 
0020 9e 2f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 3c 55 56 96 
0010 70 1c 6c 4e 96 72 16 9c d0 0e 05 c9 31 72 14 d0 
0020 28 18 51 89 17 49 60 8d 2d dd b0 0c 
CryptCreateHash alg: 8009
CryptHashData 0000024780B884D0 00007FFB27CD4870
0000 17 03 03 00 02 
CryptHashData 0000024780B884D0 00007FFB27CD4870
0000 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B884D0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B884D0 00007FFB27CD4870
DumpGot
0000 a7 9b 72 db 7d 3d 7b e2 c8 f9 5f ec ae 74 59 68 
0010 0a a8 52 da 12 f3 a0 c6 bc de 2b 47 5a 9d 9e 2f 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 57 10 20 9f 
0010 6f 06 93 ae bd 72 48 58 6c d8 ea e4 44 a6 77 e6 
0020 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptCreateHash alg: 8009
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 17 03 03 00 06 
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 07 80 20 00 80 04 
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
0000 ec 9b a7 66 29 4d 6d bc 4a 30 e8 fd de 3f 23 49 
0010 b2 8d 8b c0 cd a0 61 38 f3 a1 de a1 b6 d3 51 be 
CryptGenRandom 16
Generated
0000 3a d8 4d 4e a6 7b 37 60 3f 41 75 9e 6f f3 67 39 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 53 e2 81 f8 
0010 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 66 0f 0a 1e 
0020 b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptEncrypt: len - 48
0000 07 80 20 00 80 04 ec 9b a7 66 29 4d 6d bc 4a 30 
0010 e8 fd de 3f 23 49 b2 8d 8b c0 cd a0 61 38 f3 a1 
0020 de a1 b6 d3 51 be 09 09 09 09 09 09 09 09 09 09 
Encrypted:
0000 95 c1 44 d9 90 7e c6 0e 7f e2 d8 9b fc 5d 9d db 
0010 78 ec 46 21 40 eb f4 d4 13 7d 2e 2d 7f bf 77 52 
0020 23 4d 35 25 68 fa 92 2f ec 44 04 5b a5 cb 7e 60 
readFromPipe
INT3 breakpoint at synawudfbiousb.00007FFB0725CAC0 (00007FFB0725CAC0)!
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 25 44 f2 42 
0010 9a 9e 23 48 2a ca bf 6b fe 83 5c ee 79 6a a5 73 
0020 61 d7 3c 60 5a de be 5e e3 75 bc d0 
CryptDecrypt: len - 48
0000 18 96 92 63 af e9 a2 3d 66 72 d7 90 f7 b7 f1 ab 
0010 33 56 2e 15 11 b6 b4 64 14 de eb 46 2e a6 ad 1b 
0020 cc 7d 50 db 72 98 40 49 17 f3 c5 c2 bb ea 98 59 
Decrypted:
0000 00 00 02 00 00 00 8a fb bf da e1 5f 15 7f 95 a6 
0010 8d 42 aa c9 00 2e 1c 74 9c db d0 c4 17 48 3f 5e 
0020 ec 05 5f d2 67 aa 09 09 09 09 09 09 09 09 09 09 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 3c 55 56 96 
0010 70 1c 6c 4e 96 72 16 9c d0 0e 05 c9 31 72 14 d0 
0020 28 18 51 89 17 49 60 8d 2d dd b0 0c 
CryptCreateHash alg: 8009
CryptHashData 0000024780B884D0 00007FFB27CD4870
0000 17 03 03 00 06 
CryptHashData 0000024780B884D0 00007FFB27CD4870
0000 00 00 02 00 00 00 
CryptGetHashParam type : 2 ptr: 0000024780B884D0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B884D0 00007FFB27CD4870
DumpGot
0000 8a fb bf da e1 5f 15 7f 95 a6 8d 42 aa c9 00 2e 
0010 1c 74 9c db d0 c4 17 48 3f 5e ec 05 5f d2 67 aa 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 57 10 20 9f 
0010 6f 06 93 ae bd 72 48 58 6c d8 ea e4 44 a6 77 e6 
0020 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptCreateHash alg: 8009
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 17 03 03 00 01 
CryptHashData 0000024780B890C0 00007FFB27CD4870
0000 75 
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B890C0 00007FFB27CD4870
DumpGot
0000 86 9a 43 05 3f 58 d7 74 0f 47 26 33 f3 bc 0a 9e 
0010 a4 ff f4 f3 03 12 f5 d4 de f4 e7 c4 5c 15 7d dd 
CryptGenRandom 16
Generated
0000 f5 d3 bf de a7 31 55 cc 70 60 86 ee 8e 2c 62 71 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 53 e2 81 f8 
0010 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 66 0f 0a 1e 
0020 b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptEncrypt: len - 48
0000 75 86 9a 43 05 3f 58 d7 74 0f 47 26 33 f3 bc 0a 
0010 9e a4 ff f4 f3 03 12 f5 d4 de f4 e7 c4 5c 15 7d 
0020 dd 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 
Thread 17E0 created, Entry: ntdll.00007FFB2C3D2DC0
Encrypted:
0000 97 e6 52 ab aa 29 24 e9 c6 df 9b 70 9e 7f 01 54 
0010 62 c8 41 53 00 de 4a c7 4e 24 29 02 4a 9f 05 0c 
0020 33 6b b0 04 ed 6d 90 ea 7e ec 29 c8 f7 6b df fb 
CryptImportKey
0000 08 02 00 00 02 66 00 00 20 00 00 00 57 10 20 9f 
0010 6f 06 93 ae bd 72 48 58 6c d8 ea e4 44 a6 77 e6 
0020 8a e9 e3 21 38 1d a4 6e 30 db 51 c8 
CryptCreateHash alg: 8009
CryptHashData 0000024780B89AC0 00007FFB27CD4870
0000 17 03 03 00 01 
CryptHashData 0000024780B89AC0 00007FFB27CD4870
0000 75 
CryptGetHashParam type : 2 ptr: 0000024780B89AC0 00007FFB27CD4870
DumpGot
CryptGetHashParam type : 2 ptr: 0000024780B89AC0 00007FFB27CD4870
DumpGot
0000 86 9a 43 05 3f 58 d7 74 0f 47 26 33 f3 bc 0a 9e 
0010 a4 ff f4 f3 03 12 f5 d4 de f4 e7 c4 5c 15 7d dd 
CryptGenRandom 16
Generated
0000 5d 7e aa 4b a2 84 13 cf 7d 0f d4 ff c7 ac e1 e6 
CryptImportKey
0000 08 02 00 00 10 66 00 00 20 00 00 00 53 e2 81 f8 
0010 3f 89 c9 fe 86 0d f0 79 68 ab 79 c8 66 0f 0a 1e 
0020 b2 47 0c 14 35 8a ee c8 67 9b a6 a9 
CryptEncrypt: len - 48
0000 75 86 9a 43 05 3f 58 d7 74 0f 47 26 33 f3 bc 0a 
0010 9e a4 ff f4 f3 03 12 f5 d4 de f4 e7 c4 5c 15 7d 
0020 dd 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 
Encrypted:
0000 35 89 2b 57 97 0a cd 7a 78 61 44 bc 61 e4 4b 0b 
0010 6d 00 05 38 7b de 56 34 c6 d6 8c c1 b7 35 d0 0a 
0020 00 74 8d 64 f5 a8 b7 e1 9c 8e f0 b8 26 14 18 f0 
