roguardian.dll

vUnknown 32-bit Unknown OS Analyzed
Description
—
Authors
Unknown
File size
1.7 MB
Uploaded
2026-05-23 21:46
Views
70
SHA-256
87b0461ea81a01624eb5ef2b54d1c87c

Exported functions 3

Init #1 · 0x482d0
RoGuardianAnchor #2 · 0x133f0
RoGuardianPreload #3 · 0x47d90

Imported DLLs & functions 265

ADVAPI32.dll 15
AllocateAndInitializeSid 0x6d775540
CheckTokenMembership 0x6d775544
CryptAcquireContextA 0x6d775548
CryptCreateHash 0x6d77554c
CryptDestroyHash 0x6d775550
CryptDestroyKey 0x6d775554
CryptGetHashParam 0x6d775558
CryptHashData 0x6d77555c
CryptImportKey 0x6d775560
CryptReleaseContext 0x6d775564
CryptSetHashParam 0x6d775568
FreeSid 0x6d77556c
RegCloseKey 0x6d775570
RegOpenKeyExA 0x6d775574
RegQueryValueExA 0x6d775578
CRYPT32.dll 1
CryptStringToBinaryA 0x6d775580
GDI32.dll 5
CreateCompatibleDC 0x6d775588
CreateDIBSection 0x6d77558c
DeleteDC 0x6d775590
DeleteObject 0x6d775594
SelectObject 0x6d775598
gdiplus.dll 29
GdipAlloc 0x6d7755a0
GdipCloneBrush 0x6d7755a4
GdipCloneImage 0x6d7755a8
GdipCreateFont 0x6d7755ac
GdipCreateFontFamilyFromName 0x6d7755b0
GdipCreateFromHDC 0x6d7755b4
GdipCreatePen1 0x6d7755b8
GdipCreateSolidFill 0x6d7755bc
GdipDeleteBrush 0x6d7755c0
GdipDeleteFont 0x6d7755c4
GdipDeleteFontFamily 0x6d7755c8
GdipDeleteGraphics 0x6d7755cc
GdipDeletePen 0x6d7755d0
GdipDisposeImage 0x6d7755d4
GdipDrawImageRectI 0x6d7755d8
GdipDrawRectangleI 0x6d7755dc
GdipDrawString 0x6d7755e0
GdipFillRectangleI 0x6d7755e4
GdipFree 0x6d7755e8
GdipGetImageHeight 0x6d7755ec
GdipGetImageWidth 0x6d7755f0
GdipLoadImageFromStream 0x6d7755f4
GdiplusShutdown 0x6d77560c
GdiplusStartup 0x6d775610
GdipMeasureString 0x6d7755f8
GdipSetCompositingMode 0x6d7755fc
GdipSetCompositingQuality 0x6d775600
GdipSetInterpolationMode 0x6d775604
GdipSetSmoothingMode 0x6d775608
IPHLPAPI.DLL 3
IcmpCloseHandle 0x6d775618
IcmpCreateFile 0x6d77561c
IcmpSendEcho 0x6d775620
KERNEL32.dll 90
CheckRemoteDebuggerPresent 0x6d775628
CloseHandle 0x6d77562c
CreateDirectoryA 0x6d775630
CreateEventA 0x6d775634
CreateFileA 0x6d775638
CreateThread 0x6d77563c
CreateToolhelp32Snapshot 0x6d775640
DeleteCriticalSection 0x6d775644
DeleteFileA 0x6d775648
DisableThreadLibraryCalls 0x6d77564c
DuplicateHandle 0x6d775650
EnterCriticalSection 0x6d775654
ExitProcess 0x6d775658
FindClose 0x6d77565c
FindFirstFileA 0x6d775660
FindNextFileA 0x6d775664
FindResourceA 0x6d775668
FlushInstructionCache 0x6d77566c
FormatMessageA 0x6d775670
FreeLibrary 0x6d775674
GetCurrentProcess 0x6d775678
GetCurrentProcessId 0x6d77567c
GetCurrentThread 0x6d775680
GetCurrentThreadId 0x6d775684
GetFileAttributesA 0x6d775688
GetFileAttributesExA 0x6d77568c
GetLastError 0x6d775690
GetLocalTime 0x6d775694
GetModuleFileNameA 0x6d775698
GetModuleHandleA 0x6d77569c
GetModuleHandleExA 0x6d7756a0
GetModuleHandleW 0x6d7756a4
GetProcAddress 0x6d7756a8
GetProcessId 0x6d7756ac
GetProcessTimes 0x6d7756b0
GetSystemDirectoryA 0x6d7756b4
GetSystemInfo 0x6d7756b8
GetSystemTimeAsFileTime 0x6d7756bc
GetThreadId 0x6d7756c0
GetTickCount 0x6d7756c4
GetWindowsDirectoryA 0x6d7756c8
GlobalAlloc 0x6d7756cc
GlobalFree 0x6d7756d0
GlobalLock 0x6d7756d4
GlobalUnlock 0x6d7756d8
InitializeConditionVariable 0x6d7756dc
InitializeCriticalSection 0x6d7756e0
IsBadReadPtr 0x6d7756e4
IsDBCSLeadByteEx 0x6d7756e8
IsDebuggerPresent 0x6d7756ec
LeaveCriticalSection 0x6d7756f0
LoadLibraryA 0x6d7756f4
LoadLibraryW 0x6d7756f8
LoadResource 0x6d7756fc
LocalFree 0x6d775700
LockResource 0x6d775704
Module32FirstW 0x6d775708
Module32NextW 0x6d77570c
MoveFileExA 0x6d775710
MultiByteToWideChar 0x6d775714
OpenProcess 0x6d775718
OpenThread 0x6d77571c
Process32FirstW 0x6d775720
Process32NextW 0x6d775724
QueryFullProcessImageNameA 0x6d775728
QueryPerformanceCounter 0x6d77572c
QueryPerformanceFrequency 0x6d775730
ReadFile 0x6d775734
SetEvent 0x6d775738
SetLastError 0x6d77573c
SetThreadPriority 0x6d775740
SetUnhandledExceptionFilter 0x6d775744
SizeofResource 0x6d775748
Sleep 0x6d77574c
SleepConditionVariableCS 0x6d775750
SuspendThread 0x6d775754
TerminateProcess 0x6d775758
Thread32First 0x6d77575c
Thread32Next 0x6d775760
TlsAlloc 0x6d775764
TlsFree 0x6d775768
TlsGetValue 0x6d77576c
TlsSetValue 0x6d775770
TryEnterCriticalSection 0x6d775774
VirtualProtect 0x6d775778
VirtualQuery 0x6d77577c
WaitForSingleObject 0x6d775780
WakeAllConditionVariable 0x6d775784
WakeConditionVariable 0x6d775788
WideCharToMultiByte 0x6d77578c
msvcrt.dll 65
__mb_cur_max 0x6d775794
__setusermatherr 0x6d775798
_amsg_exit 0x6d77579c
_errno 0x6d7757a0
_fdopen 0x6d775894
_fileno 0x6d775890
_fstat64 0x6d7757a4
_initterm 0x6d7757a8
_iob 0x6d7757ac
_lock 0x6d7757b0
_lseeki64 0x6d7757b4
_read 0x6d77588c
_stricmp 0x6d7757b8
_strtoi64 0x6d775884
_strtoui64 0x6d775880
_unlock 0x6d7757bc
_wfopen 0x6d7757c0
_write 0x6d775888
abort 0x6d7757c4
atoi 0x6d7757c8
calloc 0x6d7757cc
fclose 0x6d7757d0
fflush 0x6d7757d4
fopen 0x6d7757d8
fputc 0x6d7757dc
fputs 0x6d7757e0
free 0x6d7757e4
fwrite 0x6d7757e8
getc 0x6d7757ec
getenv 0x6d7757f0
isalnum 0x6d7757f4
isspace 0x6d7757f8
iswctype 0x6d7757fc
isxdigit 0x6d775800
localeconv 0x6d775804
malloc 0x6d775808
memchr 0x6d77580c
memcmp 0x6d775810
memcpy 0x6d775814
memmove 0x6d775818
memset 0x6d77581c
realloc 0x6d775820
setlocale 0x6d775824
setvbuf 0x6d775828
strchr 0x6d77582c
strcmp 0x6d775830
strcoll 0x6d775834
strerror 0x6d775838
strftime 0x6d77583c
strlen 0x6d775840
strncmp 0x6d775844
strncpy 0x6d775848
strtol 0x6d77584c
strtoul 0x6d775850
strxfrm 0x6d775854
tolower 0x6d775858
toupper 0x6d77585c
towlower 0x6d775860
towupper 0x6d775864
ungetc 0x6d775868
vfprintf 0x6d77586c
wcscoll 0x6d775870
wcsftime 0x6d775874
wcslen 0x6d775878
wcsxfrm 0x6d77587c
ole32.dll 1
CreateStreamOnHGlobal 0x6d77589c
SHELL32.dll 1
ShellExecuteExA 0x6d7758a4
USER32.dll 44
BeginPaint 0x6d7758ac
CallNextHookEx 0x6d7758b0
CallWindowProcA 0x6d7758b4
ClientToScreen 0x6d7758b8
CreateWindowExA 0x6d7758bc
DefWindowProcA 0x6d7758c0
DestroyWindow 0x6d7758c4
DispatchMessageA 0x6d7758c8
EndPaint 0x6d7758cc
EnumChildWindows 0x6d7758d0
EnumWindows 0x6d7758d4
GetClientRect 0x6d7758d8
GetDC 0x6d7758dc
GetForegroundWindow 0x6d7758e0
GetKeyboardState 0x6d7758e4
GetMessageA 0x6d7758e8
GetPropA 0x6d7758ec
GetSystemMetrics 0x6d7758f0
GetWindowLongA 0x6d7758f4
GetWindowRect 0x6d7758f8
GetWindowTextA 0x6d7758fc
GetWindowThreadProcessId 0x6d775900
IsIconic 0x6d775904
IsWindow 0x6d775908
IsWindowVisible 0x6d77590c
LoadCursorA 0x6d775910
MessageBoxA 0x6d775914
PeekMessageA 0x6d775918
PostMessageA 0x6d77591c
PostQuitMessage 0x6d775920
PostThreadMessageA 0x6d775924
RegisterClassA 0x6d775928
ReleaseDC 0x6d77592c
RemovePropA 0x6d775930
SetPropA 0x6d775934
SetTimer 0x6d775938
SetWindowLongA 0x6d77593c
SetWindowPos 0x6d775940
SetWindowsHookExA 0x6d775944
ShowWindow 0x6d775948
ToUnicode 0x6d77594c
TranslateMessage 0x6d775950
UpdateLayeredWindow 0x6d775954
wsprintfA 0x6d775958
WINHTTP.dll 11
WinHttpCloseHandle 0x6d775960
WinHttpConnect 0x6d775964
WinHttpCrackUrl 0x6d775968
WinHttpOpen 0x6d77596c
WinHttpOpenRequest 0x6d775970
WinHttpQueryDataAvailable 0x6d775974
WinHttpQueryHeaders 0x6d775978
WinHttpReadData 0x6d77597c
WinHttpReceiveResponse 0x6d775980
WinHttpSendRequest 0x6d775984
WinHttpSetTimeouts 0x6d775988