sleestak_payload_1.dll
v10.0.19041.1
64-bit
Windows NT
Analyzed
Exported functions 125
InitErrors
#17 · 0x7c90
PostError
#18 · 0xaac0
InitSSAutoEnterThread
#19 · 0x7dd0
UpdateError
#20 · 0x7f00
CloseCtrs
#21 · 0x8d90
LoadStringRC
#22 · 0x4f90
ReOpenMetaDataWithMemory
#23 · 0x9540
#24 · 0xaf50
CollectCtrs
#25 · 0x8c60
CorDllMainWorker
#26 · 0x7b80
EEDllGetClassObjectFromClass
#27 · 0x9ef0
GetPrivateContextsPerfCounters
#28 · 0x5700
GetProcessExecutableHeap
#29 · 0x7940
GetStartupFlags
#30 · 0x49e0
GetTargetForVTableEntry
#31 · 0x1a70
GetTokenForVTableEntry
#32 · 0x17c0
LogHelp_LogAssert
#33 · 0x8020
LogHelp_NoGuiOnAssert
#34 · 0x8170
LogHelp_TerminateOnAssert
#35 · 0x82a0
OpenCtrs
#36 · 0x8b60
SetTargetForVTableEntry
#37 · 0x1920
CLRCreateInstance
#38 · 0xb080
CallFunctionShim
#39 · 0x6cf0
ClrCreateManagedInstance
#40 · 0x54d0
CoEEShutDownCOM
#41 · 0x53a0
CoInitializeCor
#42 · 0x4d30
CoInitializeEE
#43 · 0x4ad0
CoUninitializeCor
#44 · 0x4e60
CoUninitializeEE
#45 · 0x4c00
CorBindToCurrentRuntime
#46 · 0x66e0
CorBindToRuntime
#47 · 0x6200
CorBindToRuntimeByCfg
#48 · 0x6080
CorBindToRuntimeByPath
#49 · 0x84f0
CorBindToRuntimeByPathEx
#50 · 0x8600
CorBindToRuntimeEx
#51 · 0x6380
CorBindToRuntimeHost
#52 · 0x6510
CorExitProcess
#53 · 0x7450
CorGetSvc
#54 · 0x8860
CorIsLatestSvc
#55 · 0x8960
CorMarkThreadInThreadPool
#56 · 0x5630
CorTickleSvc
#57 · 0x8a70
CreateConfigStream
#58 · 0x7340
CreateDebuggingInterfaceFromVersion
#59 · 0x6a90
CreateInterface
#60 · 0xafe0
DllCanUnloadNow
#61 · 0x1e90
DllGetClassObject
#62 · 0x1d70
DllRegisterServer
#63 · 0x1fc0
DllUnregisterServer
#64 · 0x2130
EEDllRegisterServer
#65 · 0x9b40
EEDllUnregisterServer
#66 · 0x9c70
GetAssemblyMDImport
#67 · 0x9da0
GetCLRMetaHost
#68 · 0xaeb0
GetCORRequiredVersion
#69 · 0x5a70
GetCORRootDirectory
#70 · 0x83d0
GetCORSystemDirectory
#71 · 0x5830
GetCORVersion
#72 · 0x5950
GetCompileInfo
#73 · 0x5270
GetFileVersion
#74 · 0x1c30
GetHashFromAssemblyFile
#75 · 0x23e0
GetHashFromAssemblyFileW
#76 · 0x2580
GetHashFromBlob
#77 · 0x2720
GetHashFromFile
#78 · 0x28a0
GetHashFromFileW
#79 · 0x2a40
GetHashFromHandle
#80 · 0x2be0
GetHostConfigurationFile
#81 · 0x7a30
GetMetaDataInternalInterface
#82 · 0x93c0
GetMetaDataInternalInterfaceFromPublic
#83 · 0x9270
GetMetaDataPublicInterfaceFromInternal
#84 · 0x9120
GetPermissionRequests
#85 · 0x9990
GetRealProcAddress
#86 · 0x6ec0
GetRequestedRuntimeInfo
#87 · 0x5b90
GetRequestedRuntimeVersion
#88 · 0x5de0
GetRequestedRuntimeVersionForCLSID
#89 · 0x5f20
GetVersionFromProcess
#90 · 0x6bb0
GetXMLElement
#91 · 0x7010
GetXMLElementAttribute
#92 · 0x7110
GetXMLObject
#93 · 0x7240
IEE
#94 · 0x8ea0
LoadLibraryShim
#95 · 0x6960
LoadLibraryWithPolicyShim
#96 · 0x8720
LoadStringRCEx
#97 · 0x50f0
LockClrVersion
#98 · 0xd070
MetaDataGetDispenser
#99 · 0x8fd0
ND_CopyObjDst
#100 · 0xa990
ND_CopyObjSrc
#101 · 0xa860
ND_RI2
#102 · 0xa120
ND_RI4
#103 · 0xa220
ND_RI8
#104 · 0xa320
ND_RU1
#105 · 0xa020
ND_WI2
#106 · 0xa530
ND_WI4
#107 · 0xa640
ND_WI8
#108 · 0xa750
ND_WU1
#109 · 0xa420
ReOpenMetaDataWithMemoryEx
#110 · 0x9690
RunDll32ShimW
#111 · 0x6820
RuntimeOSHandle
#112 · 0x7800
RuntimeOpenImage
#113 · 0x7590
RuntimeReleaseHandle
#114 · 0x76d0
StrongNameCompareAssemblies
#115 · 0x2d80
StrongNameErrorInfo
#116 · 0x22a0
StrongNameFreeBuffer
#117 · 0x2ef0
StrongNameGetBlob
#118 · 0x3050
StrongNameGetBlobFromImage
#119 · 0x31c0
StrongNameGetPublicKey
#120 · 0x3350
StrongNameHashSize
#121 · 0x3510
StrongNameKeyDelete
#122 · 0x3670
StrongNameKeyGen
#123 · 0x37c0
StrongNameKeyGenEx
#124 · 0x3950
StrongNameKeyInstall
#125 · 0x3b10
StrongNameSignatureGeneration
#126 · 0x3c80
StrongNameSignatureGenerationEx
#127 · 0x3e00
StrongNameSignatureSize
#128 · 0x3fa0
StrongNameSignatureVerification
#129 · 0x4110
StrongNameSignatureVerificationEx
#130 · 0x4280
StrongNameSignatureVerificationFromImage
#131 · 0x43f0
StrongNameTokenFromAssembly
#132 · 0x4580
StrongNameTokenFromAssemblyEx
#133 · 0x46f0
StrongNameTokenFromPublicKey
#134 · 0x48b0
TranslateSecurityAttributes
#135 · 0x9800
_CorDllMain
#136 · 0x1bd0
_CorExeMain
#137 · 0xabd0
_CorExeMain2
#138 · 0xad20
_CorImageUnloading
#139 · 0x139a0
_CorValidateImage
#140 · 0x137d0
#142 · 0x1670
No function matches your filter.
Imported DLLs & functions 125
KERNEL32.dll
125
AcquireSRWLockExclusive
0x180047040
CloseHandle
0x180046d50
CreateEventW
0x180046e58
CreateFileMappingW
0x180046cf8
CreateFileW
0x180046ce0
CreateMutexW
0x180046d58
CreateSemaphoreW
0x180046e70
CreateToolhelp32Snapshot
0x180046d70
DebugBreak
0x180046e38
DecodePointer
0x180046f00
DeleteCriticalSection
0x180046c88
DisableThreadLibraryCalls
0x180046d28
EncodePointer
0x180046ef8
EnterCriticalSection
0x180046c60
ExitProcess
0x180046d30
FindClose
0x180046dc8
FindFirstFileW
0x180046dc0
FlsAlloc
0x180046f50
FlsFree
0x180046f60
FlsGetValue
0x180046f58
FlsSetValue
0x180046f18
FlushFileBuffers
0x180047038
FormatMessageW
0x180046e08
FreeEnvironmentStringsW
0x180046e48
FreeLibrary
0x180046c90
GetACP
0x180046e20
GetCommandLineA
0x180046f10
GetConsoleCP
0x180047000
GetConsoleMode
0x180047008
GetCPInfo
0x180046e28
GetCurrentProcess
0x180046d68
GetCurrentProcessId
0x180046ee0
GetCurrentThreadId
0x180046f68
GetDateFormatW
0x180046db8
GetEnvironmentStringsW
0x180046e40
GetEnvironmentVariableW
0x180046cb8
GetFileAttributesExW
0x180046dd0
GetFileAttributesW
0x180046cc8
GetFileSize
0x180046cf0
GetFileType
0x180046f88
GetFullPathNameW
0x180046ca8
GetLastError
0x180046cb0
GetLocalTime
0x180046da8
GetModuleFileNameA
0x180046fa0
GetModuleFileNameW
0x180046cc0
GetModuleHandleExW
0x180046f70
GetModuleHandleW
0x180046cd8
GetOEMCP
0x180046fd0
GetProcAddress
0x180046c80
GetProcessHeap
0x180046ea0
GetStartupInfoW
0x180046f98
GetStdHandle
0x180046f80
GetStringTypeW
0x180046de0
GetSystemDefaultLCID
0x180046ee8
GetSystemDirectoryW
0x180046d78
GetSystemInfo
0x180046d18
GetSystemTimeAsFileTime
0x180046fb0
GetTickCount
0x180046fb8
GetTimeFormatW
0x180046db0
GetVersionExW
0x180046c78
GetWindowsDirectoryW
0x180046d10
HeapAlloc
0x180046e98
HeapCreate
0x180046d98
HeapDestroy
0x180046da0
HeapFree
0x180046ea8
HeapReAlloc
0x180046fd8
HeapSetInformation
0x180046f78
HeapSize
0x180046fe0
HeapValidate
0x180046ed8
InitializeCriticalSection
0x180046c70
InitializeCriticalSectionAndSpinCount
0x180046f90
IsDBCSLeadByte
0x180046e30
IsDBCSLeadByteEx
0x180046dd8
IsValidCodePage
0x180046fc8
LCMapStringW
0x180046ef0
LeaveCriticalSection
0x180046c68
LoadLibraryExA
0x180046ff0
LoadLibraryExW
0x180046d20
LoadLibraryW
0x180046d08
LocalFree
0x180046e18
lstrlenW
0x180046e10
MapViewOfFile
0x180046d00
MultiByteToWideChar
0x180046c98
OutputDebugStringA
0x180046fc0
OutputDebugStringW
0x180046e00
QueryActCtxW
0x180046e50
QueryPerformanceCounter
0x180046fa8
RaiseException
0x180046df0
ReadConsoleW
0x180047030
ReadFile
0x180046d88
ReadProcessMemory
0x180046d80
ReleaseMutex
0x180046d48
ReleaseSemaphore
0x180046e78
ReleaseSRWLockExclusive
0x180046f08
ResetEvent
0x180046e68
RtlCaptureContext
0x180046f30
RtlLookupFunctionEntry
0x180046f20
RtlPcToFileHeader
0x180046ff8
RtlUnwindEx
0x180046f28
RtlVirtualUnwind
0x180046f38
SetErrorMode
0x180046cd0
SetEvent
0x180046e60
SetFilePointer
0x180047010
SetLastError
0x180046ce8
SetStdHandle
0x180047020
SetThreadStackGuarantee
0x180047018
SetUnhandledExceptionFilter
0x180046f48
Sleep
0x180046fe8
SleepEx
0x180046eb8
TerminateProcess
0x180046df8
TlsAlloc
0x180046e88
TlsFree
0x180046e90
TlsGetValue
0x180046de8
TlsSetValue
0x180046e80
UnhandledExceptionFilter
0x180046f40
UnmapViewOfFile
0x180046d60
VirtualAlloc
0x180046ec0
VirtualFree
0x180046ec8
VirtualProtect
0x180046d38
VirtualQuery
0x180046ed0
WaitForSingleObject
0x180046d40
WaitForSingleObjectEx
0x180046eb0
WideCharToMultiByte
0x180046ca0
WriteConsoleW
0x180047028
WriteFile
0x180046d90
No function matches your filter.