rotkc.dll

vUnknown 64-bit Unknown OS Analyzed
Description
—
Authors
Unknown
File size
14.8 MB
Uploaded
2026-10-07 15:43
Views
8
SHA-256
61b214bbfc5d0b9f30b3f34cf958a4a8

Exported functions 0

No exported functions.

Imported DLLs & functions 323

ADVAPI32.dll 22
AdjustTokenPrivileges 0x1403cb030
CredFree 0x1403cb020
CredReadW 0x1403cb018
CryptAcquireContextW 0x1403cb000
CryptCreateHash 0x1403cb068
CryptDecrypt 0x1403cb098
CryptDestroyHash 0x1403cb060
CryptDestroyKey 0x1403cb070
CryptEnumProvidersW 0x1403cb050
CryptExportKey 0x1403cb090
CryptGenRandom 0x1403cb048
CryptGetProvParam 0x1403cb080
CryptGetUserKey 0x1403cb088
CryptReleaseContext 0x1403cb040
CryptSetHashParam 0x1403cb078
CryptSignHashW 0x1403cb058
DeregisterEventSource 0x1403cb008
LookupPrivilegeValueW 0x1403cb028
OpenProcessToken 0x1403cb038
RegGetValueA 0x1403cb010
RegisterEventSourceW 0x1403cb0a8
ReportEventW 0x1403cb0a0
api-ms-win-crt-convert-l1-1-0.dll 4
atoi 0x1403cb870
strtol 0x1403cb868
strtoul 0x1403cb860
wcstoul 0x1403cb878
api-ms-win-crt-environment-l1-1-0.dll 1
getenv 0x1403cb888
api-ms-win-crt-filesystem-l1-1-0.dll 1
_stat64i32 0x1403cb898
api-ms-win-crt-heap-l1-1-0.dll 5
_callnewh 0x1403cb8a8
calloc 0x1403cb8b0
free 0x1403cb8b8
malloc 0x1403cb8c8
realloc 0x1403cb8c0
api-ms-win-crt-math-l1-1-0.dll 1
ceilf 0x1403cb8d8
api-ms-win-crt-runtime-l1-1-0.dll 18
_beginthreadex 0x1403cb8e8
_cexit 0x1403cb940
_configure_narrow_argv 0x1403cb910
_crt_atexit 0x1403cb938
_errno 0x1403cb970
_execute_onexit_table 0x1403cb930
_exit 0x1403cb900
_initialize_narrow_environment 0x1403cb918
_initialize_onexit_table 0x1403cb920
_initterm 0x1403cb948
_initterm_e 0x1403cb950
_register_onexit_function 0x1403cb928
_seh_filter_dll 0x1403cb908
abort 0x1403cb8f0
raise 0x1403cb958
signal 0x1403cb8f8
strerror_s 0x1403cb960
terminate 0x1403cb968
api-ms-win-crt-stdio-l1-1-0.dll 20
__acrt_iob_func 0x1403cb988
__stdio_common_vfprintf 0x1403cb980
__stdio_common_vsprintf 0x1403cb9b0
__stdio_common_vsprintf_s 0x1403cb9f8
__stdio_common_vswprintf 0x1403cb990
_fileno 0x1403cb9d0
_get_osfhandle 0x1403cba10
_setmode 0x1403cba18
_wfopen 0x1403cb9f0
fclose 0x1403cb998
feof 0x1403cb9a0
ferror 0x1403cb9a8
fflush 0x1403cb9b8
fgets 0x1403cb9c0
fopen 0x1403cb9e8
fputs 0x1403cb9c8
fread 0x1403cb9d8
fseek 0x1403cb9e0
ftell 0x1403cba00
fwrite 0x1403cba08
api-ms-win-crt-string-l1-1-0.dll 16
_wcsicmp 0x1403cba68
_wcsnicmp 0x1403cba60
isdigit 0x1403cba40
isspace 0x1403cba80
strcat_s 0x1403cba30
strcmp 0x1403cba98
strcpy_s 0x1403cba28
strcspn 0x1403cba48
strlen 0x1403cba70
strncmp 0x1403cbaa0
strncpy 0x1403cba88
strncpy_s 0x1403cba38
strnlen 0x1403cba78
strspn 0x1403cba50
tolower 0x1403cba90
wcslen 0x1403cba58
api-ms-win-crt-time-l1-1-0.dll 2
_gmtime64_s 0x1403cbab8
_time64 0x1403cbab0
api-ms-win-crt-utility-l1-1-0.dll 2
qsort 0x1403cbad0
rand 0x1403cbac8
CRYPT32.dll 8
CertCloseStore 0x1403cb0c0
CertDuplicateCertificateContext 0x1403cb0e8
CertEnumCertificatesInStore 0x1403cb0c8
CertFindCertificateInStore 0x1403cb0f0
CertFreeCertificateContext 0x1403cb0b8
CertGetCertificateContextProperty 0x1403cb0d8
CertOpenStore 0x1403cb0e0
CertOpenSystemStoreW 0x1403cb0d0
IPHLPAPI.DLL 1
GetAdaptersAddresses 0x1403cb100
KERNEL32.dll 110
AcquireSRWLockExclusive 0x1403cb218
AcquireSRWLockShared 0x1403cb368
AddVectoredExceptionHandler 0x1403cb2a8
CheckRemoteDebuggerPresent 0x1403cb298
CloseHandle 0x1403cb188
CompareFileTime 0x1403cb230
CreateEventW 0x1403cb200
CreateFileW 0x1403cb1c0
CreateSemaphoreA 0x1403cb3d8
CreateThread 0x1403cb220
CreateToolhelp32Snapshot 0x1403cb168
DeleteCriticalSection 0x1403cb3c8
DeleteFileW 0x1403cb328
DeviceIoControl 0x1403cb1b8
EnterCriticalSection 0x1403cb3b8
FindClose 0x1403cb250
FindFirstFileW 0x1403cb470
FindNextFileW 0x1403cb238
FlushInstructionCache 0x1403cb198
FormatMessageA 0x1403cb3f8
FreeLibrary 0x1403cb3e8
GetACP 0x1403cb3a8
GetCommandLineW 0x1403cb1e8
GetComputerNameW 0x1403cb2d0
GetConsoleMode 0x1403cb408
GetCurrentProcess 0x1403cb130
GetCurrentProcessId 0x1403cb190
GetCurrentThread 0x1403cb2b0
GetCurrentThreadId 0x1403cb150
GetEnvironmentVariableW 0x1403cb330
GetExitCodeThread 0x1403cb170
GetFileAttributesExW 0x1403cb300
GetFileType 0x1403cb340
GetLastError 0x1403cb180
GetLocaleInfoEx 0x1403cb110
GetModuleFileNameW 0x1403cb248
GetModuleHandleExW 0x1403cb1f0
GetModuleHandleW 0x1403cb1d8
GetPrivateProfileIntW 0x1403cb240
GetProcAddress 0x1403cb1c8
GetProcessIdOfThread 0x1403cb138
GetProcessTimes 0x1403cb288
GetStdHandle 0x1403cb338
GetSystemDirectoryA 0x1403cb3e0
GetSystemFirmwareTable 0x1403cb1a8
GetSystemInfo 0x1403cb268
GetSystemTime 0x1403cb2e8
GetSystemTimeAsFileTime 0x1403cb390
GetSystemWindowsDirectoryW 0x1403cb2d8
GetTempPathW 0x1403cb320
GetThreadContext 0x1403cb450
GetVolumeInformationW 0x1403cb2c0
GetVolumePathNameW 0x1403cb2c8
GetWindowsDirectoryW 0x1403cb310
HeapAlloc 0x1403cb458
HeapCreate 0x1403cb478
HeapFree 0x1403cb468
HeapReAlloc 0x1403cb460
InitializeCriticalSection 0x1403cb3b0
InitializeSListHead 0x1403cb438
InitializeSRWLock 0x1403cb358
InitOnceBeginInitialize 0x1403cb118
InitOnceComplete 0x1403cb120
IsDebuggerPresent 0x1403cb290
K32EnumProcessModules 0x1403cb278
LeaveCriticalSection 0x1403cb3c0
LoadLibraryA 0x1403cb3f0
LoadLibraryExW 0x1403cb318
LoadLibraryW 0x1403cb400
LocalFree 0x1403cb228
lstrlenW 0x1403cb2f0
Module32FirstW 0x1403cb308
MultiByteToWideChar 0x1403cb2f8
OpenProcess 0x1403cb258
OpenThread 0x1403cb1a0
Process32FirstW 0x1403cb440
Process32NextW 0x1403cb260
QueryFullProcessImageNameW 0x1403cb270
QueryPerformanceCounter 0x1403cb430
ReadConsoleA 0x1403cb418
ReadConsoleW 0x1403cb420
ReadProcessMemory 0x1403cb1d0
ReleaseSemaphore 0x1403cb3d0
ReleaseSRWLockExclusive 0x1403cb208
ReleaseSRWLockShared 0x1403cb360
ResumeThread 0x1403cb160
RtlVirtualUnwind 0x1403cb350
SetConsoleMode 0x1403cb410
SetEvent 0x1403cb210
SetLastError 0x1403cb1b0
SetThreadContext 0x1403cb448
Sleep 0x1403cb178
SleepConditionVariableSRW 0x1403cb128
SuspendThread 0x1403cb158
SystemTimeToFileTime 0x1403cb2e0
Thread32First 0x1403cb148
Thread32Next 0x1403cb140
TlsAlloc 0x1403cb370
TlsFree 0x1403cb388
TlsGetValue 0x1403cb378
TlsSetValue 0x1403cb380
TryAcquireSRWLockExclusive 0x1403cb2b8
VirtualAlloc 0x1403cb398
VirtualFree 0x1403cb3a0
VirtualProtect 0x1403cb2a0
VirtualQuery 0x1403cb280
WaitForSingleObject 0x1403cb1f8
WakeAllConditionVariable 0x1403cb428
WideCharToMultiByte 0x1403cb1e0
WriteFile 0x1403cb348
MSVCP140.dll 40
_Cnd_broadcast 0x1403cb4e0
_Cnd_do_broadcast_at_thread_exit 0x1403cb4b8
_Cnd_register_at_thread_exit 0x1403cb5a0
_Cnd_unregister_at_thread_exit 0x1403cb560
_Cnd_wait 0x1403cb5a8
_Mtx_lock 0x1403cb4b0
_Mtx_unlock 0x1403cb4d8
_Query_perf_counter 0x1403cb4c8
_Query_perf_frequency 0x1403cb490
_Thrd_detach 0x1403cb5b8
_Thrd_id 0x1403cb4c0
_Thrd_join 0x1403cb4d0
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x1403cb4e8
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x1403cb570
?__ExceptionPtrCreate@@YAXPEAX@Z 0x1403cb568
?__ExceptionPtrCurrentException@@YAXPEAX@Z 0x1403cb590
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x1403cb588
?__ExceptionPtrRethrow@@YAXPEBX@Z 0x1403cb598
?__ExceptionPtrToBool@@YA_NPEBX@Z 0x1403cb580
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z 0x1403cb550
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ 0x1403cb540
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1403cb528
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z 0x1403cb530
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1403cb520
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1403cb518
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1403cb508
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ 0x1403cb510
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z 0x1403cb5c0
?_ReportUnobservedException@details@Concurrency@@YAXXZ 0x1403cb4f8
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ 0x1403cb548
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z 0x1403cb500
?_Syserror_map@std@@YAPEBDH@Z 0x1403cb4a8
?_Throw_Cpp_error@std@@YAXH@Z 0x1403cb498
?_Winerror_map@std@@YAHH@Z 0x1403cb5b0
?_Xbad_function_call@std@@YAXXZ 0x1403cb578
?_Xlength_error@std@@YAXPEBD@Z 0x1403cb488
?_Xout_of_range@std@@YAXPEBD@Z 0x1403cb4a0
??0task_continuation_context@Concurrency@@AEAA@XZ 0x1403cb558
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ 0x1403cb4f0
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ 0x1403cb538
SETUPAPI.dll 4
SetupDiDestroyDeviceInfoList 0x1403cb5d0
SetupDiEnumDeviceInterfaces 0x1403cb5e8
SetupDiGetClassDevsW 0x1403cb5e0
SetupDiGetDeviceInterfaceDetailW 0x1403cb5d8
SHELL32.dll 1
CommandLineToArgvW 0x1403cb5f8
USER32.dll 7
EnumWindows 0x1403cb610
FindWindowW 0x1403cb608
GetProcessWindowStation 0x1403cb628
GetUserObjectInformationW 0x1403cb630
GetWindowThreadProcessId 0x1403cb620
IsWindowVisible 0x1403cb618
MessageBoxW 0x1403cb638
VCRUNTIME140_1.dll 1
__CxxFrameHandler4 0x1403cb6e8
VCRUNTIME140.dll 19
__C_specific_handler 0x1403cb6c0
__C_specific_handler_noexcept 0x1403cb680
__current_exception 0x1403cb660
__current_exception_context 0x1403cb668
__std_exception_copy 0x1403cb6a8
__std_exception_destroy 0x1403cb6a0
__std_terminate 0x1403cb6b0
__std_type_info_destroy_list 0x1403cb678
_CxxThrowException 0x1403cb670
_purecall 0x1403cb6b8
memchr 0x1403cb648
memcmp 0x1403cb698
memcpy 0x1403cb6c8
memmove 0x1403cb688
memset 0x1403cb6d0
strchr 0x1403cb690
strrchr 0x1403cb658
strstr 0x1403cb650
wcsstr 0x1403cb6d8
WINHTTP.dll 13
WinHttpCloseHandle 0x1403cb748
WinHttpConnect 0x1403cb768
WinHttpCrackUrl 0x1403cb770
WinHttpOpen 0x1403cb718
WinHttpOpenRequest 0x1403cb730
WinHttpQueryHeaders 0x1403cb720
WinHttpReadData 0x1403cb728
WinHttpReceiveResponse 0x1403cb738
WinHttpSendRequest 0x1403cb750
WinHttpSetOption 0x1403cb710
WinHttpSetStatusCallback 0x1403cb760
WinHttpSetTimeouts 0x1403cb758
WinHttpTimeToSystemTime 0x1403cb740
WS2_32.dll 27
closesocket 0x1403cb788
connect 0x1403cb780
gethostbyaddr 0x1403cb838
gethostbyname 0x1403cb7f8
getpeername 0x1403cb7a0
getservbyname 0x1403cb848
getservbyport 0x1403cb840
getsockname 0x1403cb7d0
getsockopt 0x1403cb7d8
htonl 0x1403cb818
htons 0x1403cb820
inet_addr 0x1403cb828
inet_ntoa 0x1403cb830
ioctlsocket 0x1403cb7b8
ntohs 0x1403cb7e0
recv 0x1403cb7f0
recvfrom 0x1403cb798
select 0x1403cb7e8
send 0x1403cb7c0
sendto 0x1403cb790
setsockopt 0x1403cb7a8
shutdown 0x1403cb7b0
socket 0x1403cb7c8
WSACleanup 0x1403cb808
WSAGetLastError 0x1403cb810
WSASetLastError 0x1403cb850
WSAStartup 0x1403cb800