(Add a hijacked dll, cryptbase.dll and IPHLPAPI.dll are actually the same file, responsible for calling riched32.dll, in other words, cryptbase.dll can be changed to any dll name that can be hijacked, and riched32.dll can be successfully called.
If it fails, you can rename IPHLPAPI.dll to CRYPTSP.dll or ALT.dll to try.)