http://bugs.winehq.org/show_bug.cgi?id=9685
--- Comment #15 from EA Durbin ead1234@hotmail.com 2007-09-25 00:30:19 --- when punkbuster calls CryptQueryObject() the values passed in are:
dwObjectType = CERT_QUERY_OBJECT_FILE pvObject = pointer to "c:/windows/system32/PnkBstrA.exe" dwExpectedContentTypeFlags = CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED_EMBED dwExpectedFormatTypeFlags = CERT_QUERY_FORMAT_FLAG_BINARY