rgle.dll
Description:
Authors:
Version: 1.0.0.0
Architecture: 64-bit
Operating System: Windows
SHA256: a1867e7461bffce2a5515d050093f17a
File Size: 4.7 MB
Uploaded At: July 6, 2026, 1:09 a.m.
Views: 22
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- init_ipc_server (Ordinal: 1, Address: 0x72b74)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x1803ad020)
- CreateWellKnownSid (Address: 0x1803ad040)
- GetTokenInformation (Address: 0x1803ad038)
- GetWindowsAccountDomainSid (Address: 0x1803ad048)
- ImpersonateLoggedOnUser (Address: 0x1803ad060)
- LookupPrivilegeValueW (Address: 0x1803ad018)
- OpenProcessToken (Address: 0x1803ad010)
- OpenThreadToken (Address: 0x1803ad050)
- RegCloseKey (Address: 0x1803ad008)
- RegEnumKeyExW (Address: 0x1803ad028)
- RegOpenKeyExW (Address: 0x1803ad030)
- RegQueryValueExW (Address: 0x1803ad000)
- RevertToSelf (Address: 0x1803ad058)
api-ms-win-crt-convert-l1-1-0.dll
- strtoull (Address: 0x1803ad600)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x1803ad620)
- calloc (Address: 0x1803ad628)
- free (Address: 0x1803ad618)
- malloc (Address: 0x1803ad610)
api-ms-win-crt-math-l1-1-0.dll
- ceil (Address: 0x1803ad640)
- modf (Address: 0x1803ad648)
- pow (Address: 0x1803ad638)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x1803ad6b0)
- _configure_narrow_argv (Address: 0x1803ad678)
- _crt_atexit (Address: 0x1803ad6a8)
- _execute_onexit_table (Address: 0x1803ad6a0)
- _initialize_narrow_environment (Address: 0x1803ad680)
- _initialize_onexit_table (Address: 0x1803ad690)
- _initterm (Address: 0x1803ad658)
- _initterm_e (Address: 0x1803ad660)
- _register_onexit_function (Address: 0x1803ad698)
- _seh_filter_dll (Address: 0x1803ad670)
- abort (Address: 0x1803ad668)
- terminate (Address: 0x1803ad688)
api-ms-win-crt-string-l1-1-0.dll
- _stricmp (Address: 0x1803ad6d0)
- strcmp (Address: 0x1803ad6c8)
- strcpy_s (Address: 0x1803ad6c0)
- wcsncmp (Address: 0x1803ad6d8)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x1803ad708)
- BCryptCreateHash (Address: 0x1803ad760)
- BCryptDecrypt (Address: 0x1803ad710)
- BCryptDestroyHash (Address: 0x1803ad700)
- BCryptDestroyKey (Address: 0x1803ad6f8)
- BCryptEncrypt (Address: 0x1803ad758)
- BCryptExportKey (Address: 0x1803ad750)
- BCryptFinalizeKeyPair (Address: 0x1803ad748)
- BCryptFinishHash (Address: 0x1803ad740)
- BCryptGenerateKeyPair (Address: 0x1803ad738)
- BCryptGenRandom (Address: 0x1803ad768)
- BCryptGetProperty (Address: 0x1803ad730)
- BCryptHashData (Address: 0x1803ad728)
- BCryptImportKey (Address: 0x1803ad778)
- BCryptImportKeyPair (Address: 0x1803ad720)
- BCryptOpenAlgorithmProvider (Address: 0x1803ad6f0)
- BCryptSetProperty (Address: 0x1803ad770)
- BCryptSignHash (Address: 0x1803ad718)
- BCryptVerifySignature (Address: 0x1803ad6e8)
CRYPT32.dll
- CertCloseStore (Address: 0x1803ad070)
- CertDuplicateCertificateContext (Address: 0x1803ad100)
- CertEnumCertificatesInStore (Address: 0x1803ad0c8)
- CertFindCertificateInStore (Address: 0x1803ad0f8)
- CertFreeCertificateChain (Address: 0x1803ad0f0)
- CertFreeCertificateContext (Address: 0x1803ad0d0)
- CertGetCertificateChain (Address: 0x1803ad0e8)
- CertGetCertificateContextProperty (Address: 0x1803ad0e0)
- CertGetNameStringW (Address: 0x1803ad0d8)
- CertNameToStrW (Address: 0x1803ad0c0)
- CryptAcquireCertificatePrivateKey (Address: 0x1803ad0b8)
- CryptDecodeObject (Address: 0x1803ad0b0)
- CryptFindOIDInfo (Address: 0x1803ad080)
- CryptFormatObject (Address: 0x1803ad0a8)
- CryptImportPublicKeyInfoEx2 (Address: 0x1803ad0a0)
- CryptMsgClose (Address: 0x1803ad098)
- CryptMsgGetParam (Address: 0x1803ad090)
- CryptQueryObject (Address: 0x1803ad088)
- PFXImportCertStore (Address: 0x1803ad078)
KERNEL32.dll
- AddVectoredExceptionHandler (Address: 0x1803ad4a0)
- CancelIoEx (Address: 0x1803ad258)
- CancelSynchronousIo (Address: 0x1803ad270)
- CancelThreadpoolIo (Address: 0x1803ad3a8)
- CloseHandle (Address: 0x1803ad210)
- CloseThreadpoolIo (Address: 0x1803ad280)
- CloseThreadpoolWork (Address: 0x1803ad348)
- ConnectNamedPipe (Address: 0x1803ad250)
- CreateEventExW (Address: 0x1803ad468)
- CreateEventW (Address: 0x1803ad4c0)
- CreateFileW (Address: 0x1803ad390)
- CreateIoCompletionPort (Address: 0x1803ad388)
- CreateNamedPipeW (Address: 0x1803ad260)
- CreateThread (Address: 0x1803ad420)
- CreateThreadpoolIo (Address: 0x1803ad398)
- CreateThreadpoolTimer (Address: 0x1803ad328)
- CreateThreadpoolWork (Address: 0x1803ad340)
- DebugBreak (Address: 0x1803ad560)
- DecodePointer (Address: 0x1803ad5d0)
- DeleteCriticalSection (Address: 0x1803ad2e0)
- DeleteFileW (Address: 0x1803ad3b0)
- DeviceIoControl (Address: 0x1803ad3b8)
- DuplicateHandle (Address: 0x1803ad240)
- EncodePointer (Address: 0x1803ad5c8)
- EnterCriticalSection (Address: 0x1803ad2f0)
- ExpandEnvironmentStringsW (Address: 0x1803ad3c0)
- FileTimeToSystemTime (Address: 0x1803ad2a8)
- FindClose (Address: 0x1803ad3c8)
- FindFirstFileExW (Address: 0x1803ad3d0)
- FlsAlloc (Address: 0x1803ad4a8)
- FlsGetValue (Address: 0x1803ad4b0)
- FlsSetValue (Address: 0x1803ad4b8)
- FlushInstructionCache (Address: 0x1803ad4f0)
- FlushProcessWriteBuffers (Address: 0x1803ad478)
- FormatMessageW (Address: 0x1803ad1a8)
- FreeLibrary (Address: 0x1803ad3d8)
- GetConsoleMode (Address: 0x1803ad1c0)
- GetConsoleOutputCP (Address: 0x1803ad1f0)
- GetCPInfo (Address: 0x1803ad370)
- GetCPInfoExW (Address: 0x1803ad1b8)
- GetCurrentProcess (Address: 0x1803ad248)
- GetCurrentProcessId (Address: 0x1803ad288)
- GetCurrentProcessorNumberEx (Address: 0x1803ad450)
- GetCurrentThread (Address: 0x1803ad2c8)
- GetCurrentThreadId (Address: 0x1803ad278)
- GetDynamicTimeZoneInformation (Address: 0x1803ad440)
- GetEnabledXStateFeatures (Address: 0x1803ad538)
- GetEnvironmentVariableW (Address: 0x1803ad470)
- GetExitCodeProcess (Address: 0x1803ad218)
- GetFileAttributesExW (Address: 0x1803ad3e0)
- GetFileInformationByHandleEx (Address: 0x1803ad3e8)
- GetFileType (Address: 0x1803ad1c8)
- GetFullPathNameW (Address: 0x1803ad360)
- GetLargePageMinimum (Address: 0x1803ad590)
- GetLastError (Address: 0x1803ad1b0)
- GetLocaleInfoEx (Address: 0x1803ad2b8)
- GetLogicalProcessorInformation (Address: 0x1803ad580)
- GetLogicalProcessorInformationEx (Address: 0x1803ad588)
- GetLongPathNameW (Address: 0x1803ad368)
- GetModuleFileNameW (Address: 0x1803ad3f0)
- GetModuleHandleExW (Address: 0x1803ad520)
- GetModuleHandleW (Address: 0x1803ad518)
- GetNumaHighestNodeNumber (Address: 0x1803ad5b0)
- GetOverlappedResult (Address: 0x1803ad3f8)
- GetProcAddress (Address: 0x1803ad380)
- GetProcessAffinityMask (Address: 0x1803ad528)
- GetProcessGroupAffinity (Address: 0x1803ad5b8)
- GetProcessHeap (Address: 0x1803ad120)
- GetProcessId (Address: 0x1803ad238)
- GetProcessTimes (Address: 0x1803ad220)
- GetStdHandle (Address: 0x1803ad1f8)
- GetSystemInfo (Address: 0x1803ad578)
- GetSystemTime (Address: 0x1803ad2b0)
- GetSystemTimeAsFileTime (Address: 0x1803ad550)
- GetThreadContext (Address: 0x1803ad4e0)
- GetThreadPriority (Address: 0x1803ad430)
- GetTickCount64 (Address: 0x1803ad2c0)
- GetTimeZoneInformation (Address: 0x1803ad448)
- GlobalMemoryStatusEx (Address: 0x1803ad570)
- HeapAlloc (Address: 0x1803ad110)
- HeapCreate (Address: 0x1803ad5d8)
- HeapDestroy (Address: 0x1803ad5e0)
- HeapFree (Address: 0x1803ad118)
- InitializeConditionVariable (Address: 0x1803ad320)
- InitializeContext (Address: 0x1803ad530)
- InitializeCriticalSection (Address: 0x1803ad318)
- InitializeCriticalSectionAndSpinCount (Address: 0x1803ad170)
- InitializeCriticalSectionEx (Address: 0x1803ad558)
- InitializeSListHead (Address: 0x1803ad148)
- InterlockedFlushSList (Address: 0x1803ad158)
- IsDebuggerPresent (Address: 0x1803ad198)
- IsProcessInJob (Address: 0x1803ad5a8)
- IsProcessorFeaturePresent (Address: 0x1803ad140)
- K32EnumProcesses (Address: 0x1803ad230)
- K32GetProcessMemoryInfo (Address: 0x1803ad5c0)
- LeaveCriticalSection (Address: 0x1803ad300)
- LoadLibraryExW (Address: 0x1803ad400)
- LocalAlloc (Address: 0x1803ad378)
- LocalFree (Address: 0x1803ad2e8)
- MultiByteToWideChar (Address: 0x1803ad200)
- OpenProcess (Address: 0x1803ad228)
- OpenThread (Address: 0x1803ad268)
- QueryInformationJobObject (Address: 0x1803ad510)
- QueryPerformanceCounter (Address: 0x1803ad310)
- QueryPerformanceFrequency (Address: 0x1803ad358)
- QueryUnbiasedInterruptTime (Address: 0x1803ad408)
- RaiseException (Address: 0x1803ad168)
- RaiseFailFastException (Address: 0x1803ad290)
- ReadConsoleW (Address: 0x1803ad1d8)
- ReadFile (Address: 0x1803ad1d0)
- ResetEvent (Address: 0x1803ad460)
- ResumeThread (Address: 0x1803ad428)
- RtlCaptureContext (Address: 0x1803ad490)
- RtlLookupFunctionEntry (Address: 0x1803ad128)
- RtlPcToFileHeader (Address: 0x1803ad160)
- RtlRestoreContext (Address: 0x1803ad498)
- RtlUnwindEx (Address: 0x1803ad150)
- RtlVirtualUnwind (Address: 0x1803ad488)
- SetEvent (Address: 0x1803ad458)
- SetFileInformationByHandle (Address: 0x1803ad410)
- SetLastError (Address: 0x1803ad1a0)
- SetThreadContext (Address: 0x1803ad4e8)
- SetThreadErrorMode (Address: 0x1803ad418)
- SetThreadpoolTimer (Address: 0x1803ad330)
- SetThreadPriority (Address: 0x1803ad438)
- SetUnhandledExceptionFilter (Address: 0x1803ad138)
- SetXStateFeaturesMask (Address: 0x1803ad540)
- Sleep (Address: 0x1803ad2d8)
- SleepConditionVariableCS (Address: 0x1803ad2f8)
- SleepEx (Address: 0x1803ad568)
- StartThreadpoolIo (Address: 0x1803ad3a0)
- SubmitThreadpoolWork (Address: 0x1803ad350)
- SuspendThread (Address: 0x1803ad4d8)
- SwitchToThread (Address: 0x1803ad4d0)
- SystemTimeToFileTime (Address: 0x1803ad2a0)
- TerminateProcess (Address: 0x1803ad4c8)
- TlsAlloc (Address: 0x1803ad178)
- TlsFree (Address: 0x1803ad190)
- TlsGetValue (Address: 0x1803ad180)
- TlsSetValue (Address: 0x1803ad188)
- TzSpecificLocalTimeToSystemTime (Address: 0x1803ad298)
- UnhandledExceptionFilter (Address: 0x1803ad130)
- VirtualAlloc (Address: 0x1803ad4f8)
- VirtualAllocExNuma (Address: 0x1803ad5a0)
- VirtualFree (Address: 0x1803ad508)
- VirtualProtect (Address: 0x1803ad500)
- VirtualQuery (Address: 0x1803ad548)
- VirtualUnlock (Address: 0x1803ad598)
- WaitForMultipleObjectsEx (Address: 0x1803ad338)
- WaitForSingleObject (Address: 0x1803ad2d0)
- WaitForSingleObjectEx (Address: 0x1803ad480)
- WakeConditionVariable (Address: 0x1803ad308)
- WideCharToMultiByte (Address: 0x1803ad208)
- WriteConsoleW (Address: 0x1803ad1e8)
- WriteFile (Address: 0x1803ad1e0)
ncrypt.dll
- NCryptCreatePersistedKey (Address: 0x1803ad7e8)
- NCryptDecrypt (Address: 0x1803ad790)
- NCryptDeleteKey (Address: 0x1803ad7b0)
- NCryptDeriveKey (Address: 0x1803ad7f0)
- NCryptEncrypt (Address: 0x1803ad800)
- NCryptExportKey (Address: 0x1803ad7a8)
- NCryptFinalizeKey (Address: 0x1803ad7f8)
- NCryptFreeObject (Address: 0x1803ad7b8)
- NCryptGetProperty (Address: 0x1803ad7d8)
- NCryptImportKey (Address: 0x1803ad7a0)
- NCryptOpenKey (Address: 0x1803ad798)
- NCryptOpenStorageProvider (Address: 0x1803ad7e0)
- NCryptSecretAgreement (Address: 0x1803ad788)
- NCryptSetProperty (Address: 0x1803ad7d0)
- NCryptSignHash (Address: 0x1803ad7c8)
- NCryptVerifySignature (Address: 0x1803ad7c0)
ole32.dll
- CoCreateGuid (Address: 0x1803ad838)
- CoGetApartmentType (Address: 0x1803ad818)
- CoInitializeEx (Address: 0x1803ad828)
- CoTaskMemAlloc (Address: 0x1803ad820)
- CoTaskMemFree (Address: 0x1803ad830)
- CoUninitialize (Address: 0x1803ad810)
- CoWaitForMultipleHandles (Address: 0x1803ad840)
Secur32.dll
- GetUserNameExW (Address: 0x1803ad5f0)