rascal.dll

v2.4.0.7 32-bit Windows Analyzed
Description
Rascal Anti-Cheat for Metin2 [File deleted after analysis due to size limit > 20MB]
Authors
Copyright (C) 2025 Rascal Anti-Cheat by tokuc.
File size
24.1 MB
Uploaded
2026-10-11 15:14
Views
7
SHA-256
3d8950bdfe7e856435c52d3b2f1d7937

Exported functions 11

FunctionProtect #1 · 0x97c00
GetClientCount #2 · 0x9a5a0
GetDiscordName #3 · 0x9a690
GetRascalThreadID #4 · 0x97d40
InitializeRascal #5 · 0x9c9c0
RascalCallback #6 · 0x97ef0
RascalProtectRTypes #7 · 0x97f90
RascalSessionRespond #8 · 0x36b30
RascalSessionRespondEx #9 · 0x36b00
WLog #10 · 0x97e40
getunknown #11 · 0x97e70

Imported DLLs & functions 413

ADVAPI32.dll 38
AdjustTokenPrivileges 0x112103dc
ChangeServiceConfigA 0x112103c4
CloseServiceHandle 0x112103cc
ControlService 0x11210420
ConvertStringSecurityDescriptorToSecurityDescriptorA 0x112103ec
CredFree 0x1121043c
CredReadA 0x11210434
CredWriteA 0x11210438
CryptAcquireContextA 0x112103b4
CryptCreateHash 0x1121041c
CryptDestroyHash 0x11210410
CryptGenRandom 0x11210424
CryptGetHashParam 0x11210408
CryptHashData 0x11210418
CryptReleaseContext 0x11210400
DeregisterEventSource 0x11210428
GetTokenInformation 0x112103e0
GetUserNameA 0x112103d0
LookupPrivilegeValueA 0x112103d8
OpenProcessToken 0x112103d4
OpenSCManagerA 0x112103c8
OpenServiceA 0x112103b8
OpenServiceW 0x1121040c
QueryServiceStatusEx 0x112103bc
RegCloseKey 0x11210448
RegCreateKeyExA 0x11210440
RegEnumKeyExW 0x112103fc
RegGetValueW 0x112103f4
RegisterEventSourceA 0x11210404
RegOpenKeyExA 0x1121042c
RegOpenKeyExW 0x112103f8
RegOpenKeyW 0x112103f0
RegQueryValueExA 0x11210444
RegSetValueExA 0x11210430
ReportEventA 0x11210414
SetKernelObjectSecurity 0x112103e4
SetSecurityInfo 0x112103e8
StartServiceA 0x112103c0
bcrypt.dll 8
BCryptCloseAlgorithmProvider 0x11210520
BCryptCreateHash 0x11210518
BCryptDestroyHash 0x1121050c
BCryptFinishHash 0x1121051c
BCryptGenRandom 0x11210508
BCryptGetProperty 0x11210510
BCryptHashData 0x11210514
BCryptOpenAlgorithmProvider 0x11210524
CRYPT32.dll 24
CertAddCertificateContextToStore 0x1121059c
CertCloseStore 0x11210590
CertCreateCertificateChainEngine 0x11210564
CertEnumCertificatesInStore 0x11210598
CertFindCertificateInStore 0x112105b4
CertFindExtension 0x11210568
CertFreeCertificateChain 0x11210588
CertFreeCertificateChainEngine 0x11210560
CertFreeCertificateContext 0x112105a0
CertFreeCRLContext 0x11210570
CertFreeCTLContext 0x1121056c
CertGetCertificateChain 0x1121055c
CertGetNameStringA 0x1121057c
CertGetNameStringW 0x11210584
CertOpenStore 0x11210580
CryptBinaryToStringA 0x112105ac
CryptDecodeObjectEx 0x11210574
CryptMsgClose 0x112105a4
CryptMsgGetParam 0x1121058c
CryptProtectData 0x11210558
CryptQueryObject 0x11210594
CryptStringToBinaryA 0x112105a8
CryptUnprotectData 0x112105b0
PFXImportCertStore 0x11210578
dbghelp.dll 1
SymInitialize 0x11210500
discord_game_sdk.dll 1
DiscordCreate 0x11210658
gdiplus.dll 23
GdipAlloc 0x11210674
GdipCloneBrush 0x11210690
GdipCloneImage 0x11210684
GdipCreateFont 0x1121067c
GdipCreateFontFamilyFromName 0x112106ac
GdipCreateFromHWND 0x1121068c
GdipCreateFromHWNDICM 0x112106a0
GdipCreateSolidFill 0x11210680
GdipDeleteBrush 0x11210670
GdipDeleteFont 0x112106a4
GdipDeleteFontFamily 0x11210664
GdipDeleteGraphics 0x112106b0
GdipDisposeImage 0x112106b4
GdipDrawImageRectI 0x11210678
GdipDrawString 0x112106a8
GdipFree 0x11210698
GdipGetGenericFontFamilySansSerif 0x11210694
GdipGetImageHeight 0x11210668
GdipGetImageWidth 0x1121069c
GdipLoadImageFromStream 0x11210660
GdipLoadImageFromStreamICM 0x1121066c
GdiplusShutdown 0x11210688
GdiplusStartup 0x112106b8
IPHLPAPI.DLL 6
FreeMibTable 0x112104b8
GetAdaptersAddresses 0x112104bc
GetAdaptersInfo 0x112104b0
GetIfTable2 0x112104b4
if_nametoindex 0x112104c0
SendARP 0x112104ac
KERNEL32.dll 201
AcquireSRWLockExclusive 0x1121029c
AddVectoredExceptionHandler 0x11210220
CloseHandle 0x112102f0
CompareStringEx 0x11210250
CompareStringW 0x1121010c
CreateDirectoryW 0x11210190
CreateEventA 0x11210024
CreateFileA 0x112102c8
CreateFileMappingA 0x112102ec
CreateFileW 0x112102bc
CreateMutexA 0x11210000
CreateProcessA 0x112101dc
CreateProcessW 0x11210018
CreateThread 0x112101a0
CreateToolhelp32Snapshot 0x112101e8
DecodePointer 0x11210304
DeleteCriticalSection 0x112102fc
DeleteFileW 0x112100b8
DeviceIoControl 0x112102cc
DisableThreadLibraryCalls 0x1121000c
EncodePointer 0x11210280
EnterCriticalSection 0x112101c0
EnumSystemFirmwareTables 0x1121008c
EnumSystemLocalesW 0x112100f8
ExitProcess 0x11210144
ExitThread 0x11210004
FileTimeToSystemTime 0x1121012c
FindClose 0x112102c0
FindFirstFileA 0x11210028
FindFirstFileExW 0x1121002c
FindFirstFileW 0x112102c4
FindNextFileA 0x11210034
FindNextFileW 0x1121018c
FlushFileBuffers 0x11210118
FlushInstructionCache 0x11210084
FormatMessageA 0x112102b0
FreeEnvironmentStringsW 0x112100d0
FreeLibrary 0x11210080
FreeLibraryAndExitThread 0x1121013c
GetACP 0x112100e0
GetActiveProcessorCount 0x11210060
GetCommandLineA 0x112100d8
GetCommandLineW 0x11210110
GetConsoleMode 0x11210128
GetConsoleOutputCP 0x11210120
GetCPInfo 0x1121024c
GetCurrentDirectoryW 0x112100f0
GetCurrentProcess 0x1121025c
GetCurrentProcessId 0x112102e8
GetCurrentThread 0x112101d4
GetCurrentThreadId 0x112101b0
GetDateFormatW 0x11210114
GetDriveTypeW 0x11210138
GetEnvironmentStringsW 0x112100d4
GetEnvironmentVariableA 0x11210230
GetExitCodeThread 0x112100a8
GetFileAttributesA 0x112100b4
GetFileAttributesExW 0x1121005c
GetFileAttributesW 0x11210270
GetFileInformationByHandle 0x11210134
GetFileSizeEx 0x112101cc
GetFileType 0x11210228
GetFinalPathNameByHandleA 0x112100ac
GetFullPathNameW 0x11210030
GetLastError 0x11210310
GetLocaleInfoEx 0x1121027c
GetLocaleInfoW 0x11210104
GetLogicalDriveStringsA 0x112100bc
GetModuleFileNameA 0x112101d0
GetModuleFileNameW 0x112101bc
GetModuleHandleA 0x112102dc
GetModuleHandleExA 0x112101c4
GetModuleHandleExW 0x1121009c
GetModuleHandleW 0x11210268
GetNativeSystemInfo 0x11210258
GetOEMCP 0x112100dc
GetProcAddress 0x112102d8
GetProcessHeap 0x112102f8
GetProcessId 0x112102b8
GetStartupInfoW 0x11210168
GetStdHandle 0x1121022c
GetStringTypeW 0x112102ac
GetSystemDirectoryW 0x11210214
GetSystemFirmwareTable 0x1121006c
GetSystemTimeAsFileTime 0x11210254
GetSystemWow64DirectoryW 0x1121020c
GetTempPathW 0x11210274
GetThreadContext 0x11210198
GetThreadGroupAffinity 0x11210090
GetThreadId 0x11210040
GetThreadTimes 0x112101e0
GetTickCount 0x112102e0
GetTickCount64 0x11210290
GetTimeFormatW 0x11210320
GetTimeZoneInformation 0x112100f4
GetUserDefaultLCID 0x112100fc
GetUserDefaultLocaleName 0x112100c4
GetVolumeInformationW 0x112102b4
HeapAlloc 0x11210308
HeapCreate 0x11210180
HeapFree 0x11210260
HeapReAlloc 0x1121030c
HeapSize 0x11210314
InitializeConditionVariable 0x11210238
InitializeCriticalSection 0x112101b4
InitializeCriticalSectionAndSpinCount 0x11210158
InitializeCriticalSectionEx 0x11210318
InitializeSListHead 0x1121017c
InterlockedFlushSList 0x1121015c
InterlockedPushEntrySList 0x11210160
IsDebuggerPresent 0x11210248
IsProcessorFeaturePresent 0x1121016c
IsValidCodePage 0x112100e4
IsValidLocale 0x11210100
IsWow64Process 0x1121021c
K32EnumDeviceDrivers 0x112102d4
K32EnumProcesses 0x11210068
K32GetDeviceDriverBaseNameA 0x11210074
K32GetDeviceDriverFileNameW 0x112102d0
K32GetModuleFileNameExA 0x112100b0
K32GetModuleFileNameExW 0x112101fc
K32GetProcessImageFileNameA 0x112100a0
LCMapStringEx 0x11210278
LCMapStringW 0x11210108
LeaveCriticalSection 0x112101b8
LoadLibraryA 0x11210010
LoadLibraryExW 0x11210094
LocalFree 0x11210300
lstrlenW 0x11210218
MapViewOfFile 0x112102e4
Module32FirstW 0x1121019c
Module32NextW 0x11210194
MoveFileExA 0x11210234
MultiByteToWideChar 0x11210210
OpenEventA 0x11210020
OpenFileMappingA 0x11210044
OpenMutexA 0x11210038
OpenProcess 0x112101ec
OpenThread 0x112101d8
OutputDebugStringW 0x11210244
PeekNamedPipe 0x11210224
Process32First 0x11210200
Process32FirstW 0x11210014
Process32Next 0x112101e4
Process32NextW 0x11210008
QueryDosDeviceA 0x112100a4
QueryFullProcessImageNameA 0x1121003c
QueryPerformanceCounter 0x112102a8
QueryPerformanceFrequency 0x112102a4
RaiseException 0x11210240
ReadConsoleW 0x11210124
ReadFile 0x1121004c
ReleaseSRWLockExclusive 0x112102a0
RemoveVectoredExceptionHandler 0x11210264
ReplaceFileW 0x11210064
ResumeThread 0x112101a8
RtlUnwind 0x11210164
SetConsoleCtrlHandler 0x11210140
SetEndOfFile 0x112100e8
SetEnvironmentVariableW 0x112100cc
SetEvent 0x112101a4
SetFilePointerEx 0x1121011c
SetLastError 0x1121031c
SetStdHandle 0x112100ec
SetThreadContext 0x11210048
SetThreadGroupAffinity 0x11210078
SetUnhandledExceptionFilter 0x11210174
Sleep 0x1121026c
SleepConditionVariableCS 0x11210184
SleepConditionVariableSRW 0x11210294
SleepEx 0x1121023c
SuspendThread 0x112101ac
SystemTimeToTzSpecificLocalTime 0x11210130
TerminateProcess 0x11210170
TerminateThread 0x11210098
Thread32First 0x112101f4
Thread32Next 0x112101f8
TlsAlloc 0x11210154
TlsFree 0x11210148
TlsGetValue 0x11210150
TlsSetValue 0x1121014c
TryAcquireSRWLockExclusive 0x11210298
UnhandledExceptionFilter 0x11210178
UnmapViewOfFile 0x112102f4
VerifyVersionInfoW 0x11210088
VerSetConditionMask 0x1121007c
VirtualAlloc 0x1121001c
VirtualFree 0x11210070
VirtualProtect 0x112101c8
VirtualQuery 0x11210204
WaitForMultipleObjects 0x11210188
WaitForSingleObject 0x112101f0
WaitForSingleObjectEx 0x11210284
WakeAllConditionVariable 0x11210288
WakeConditionVariable 0x1121028c
WideCharToMultiByte 0x11210208
Wow64DisableWow64FsRedirection 0x11210054
Wow64RevertWow64FsRedirection 0x11210058
WriteConsoleW 0x112100c8
WriteFile 0x11210050
WTSGetActiveConsoleSessionId 0x112100c0
MPR.dll 2
WNetEnumResourceA 0x11210650
WNetOpenEnumA 0x1121064c
ntdll.dll 10
NtAdjustPrivilegesToken 0x11210544
NtDuplicateObject 0x11210534
NtOpenProcess 0x11210530
NtOpenProcessToken 0x11210548
NtProtectVirtualMemory 0x11210540
NtQueryInformationProcess 0x11210538
NtQueryInformationThread 0x11210550
NtQuerySystemInformation 0x1121052c
RtlAdjustPrivilege 0x1121054c
RtlCreateUserThread 0x1121053c
ole32.dll 4
CoCreateInstance 0x11210458
CoInitializeEx 0x1121045c
CoUninitialize 0x11210464
CreateStreamOnHGlobal 0x11210460
OLEAUT32.dll 4
SysFreeString 0x11210474
SysStringLen 0x11210478
VariantClear 0x11210470
VariantInit 0x1121046c
Secur32.dll 1
InitSecurityInterfaceA 0x112106c0
SETUPAPI.dll 6
SetupDiDestroyDeviceInfoList 0x112104d0
SetupDiEnumDeviceInfo 0x112104cc
SetupDiGetClassDevsA 0x112104c8
SetupDiGetClassDevsW 0x112104d4
SetupDiGetDeviceRegistryPropertyA 0x112104d8
SetupDiGetDeviceRegistryPropertyW 0x112104dc
SHELL32.dll 1
SHFileOperationW 0x11210450
USER32.dll 34
CreateWindowExA 0x11210330
CreateWindowExW 0x1121034c
DefWindowProcA 0x112103ac
DestroyWindow 0x11210350
DispatchMessageA 0x11210370
EnumChildWindows 0x11210390
EnumWindows 0x112103a8
GetClassNameA 0x11210374
GetClientRect 0x1121035c
GetCursorPos 0x11210364
GetMessageA 0x1121036c
GetMonitorInfoA 0x11210338
GetWindowLongA 0x112103a0
GetWindowRect 0x11210368
GetWindowTextA 0x1121037c
GetWindowThreadProcessId 0x11210388
IsWindow 0x11210394
IsWindowVisible 0x1121038c
KillTimer 0x11210360
LoadCursorA 0x11210354
LoadIconA 0x11210328
MonitorFromPoint 0x11210358
PeekMessageA 0x11210384
PostThreadMessageA 0x11210378
RegisterClassA 0x11210334
SendMessageA 0x1121032c
SetTimer 0x11210340
SetWindowLongA 0x11210398
SetWindowsHookExA 0x1121039c
ShowWindow 0x11210344
SystemParametersInfoA 0x11210348
TranslateMessage 0x11210380
UnhookWindowsHookEx 0x112103a4
ValidateRect 0x1121033c
VERSION.dll 3
GetFileVersionInfoExW 0x11210484
GetFileVersionInfoSizeExW 0x11210480
VerQueryValueA 0x11210488
wevtapi.dll 4
EvtClose 0x112104f8
EvtNext 0x112104f4
EvtQuery 0x112104f0
EvtRender 0x112104ec
WINTRUST.dll 6
CryptCATAdminAcquireContext 0x11210498
CryptCATAdminCalcHashFromFileHandle 0x112104a0
CryptCATAdminEnumCatalogFromHash 0x1121049c
CryptCATAdminReleaseCatalogContext 0x11210490
CryptCATAdminReleaseContext 0x11210494
WinVerifyTrust 0x112104a4
WS2_32.dll 35
__WSAFDIsSet 0x112105f8
accept 0x112105cc
bind 0x112105d0
closesocket 0x112105d4
connect 0x112105d8
freeaddrinfo 0x11210604
getaddrinfo 0x11210600
gethostname 0x1121060c
getpeername 0x112105dc
getsockname 0x11210634
getsockopt 0x11210628
htonl 0x11210644
htons 0x112105e4
inet_addr 0x1121062c
ioctlsocket 0x11210610
listen 0x11210608
ntohs 0x11210630
recv 0x112105e8
recvfrom 0x11210640
select 0x112105fc
send 0x11210624
sendto 0x1121063c
setsockopt 0x112105ec
socket 0x112105f0
WSACleanup 0x112105c8
WSACloseEvent 0x11210620
WSACreateEvent 0x1121061c
WSAEnumNetworkEvents 0x11210618
WSAEventSelect 0x112105e0
WSAGetLastError 0x112105c0
WSAIoctl 0x11210638
WSAResetEvent 0x11210614
WSASetLastError 0x112105f4
WSAStartup 0x112105c4
WSAWaitForMultipleEvents 0x112105bc
WTSAPI32.dll 1
WTSSendMessageA 0x112104e4