leechcore.dll

v2.22.4.90 64-bit Windows NT Analyzed
Description
LeechCore Memory Acquisition Library
Authors
Copyright (c) Ulf Frisk 2018-2025
File size
6.0 MB
Uploaded
2026-08-09 23:56
Views
57
SHA-256
82de97889457a969e90a3297f0bc52bb

Exported functions 44

LcAllocScatter1 #1 · 0x1c260
LcAllocScatter2 #2 · 0x1c310
LcAllocScatter3 #3 · 0x1c3d0
LcClose #4 · 0x1c530
LcCommand #5 · 0x1c640
LcCreate #6 · 0x1c8d0
LcCreateEx #7 · 0x1c8e0
LcDeviceParameterGet #8 · 0x1e0e0
LcDeviceParameterGetNumeric #9 · 0x1e160
LcGetOption #10 · 0x1e180
LcMemFree #11 · 0x1e400
LcMemMap_AddRange #12 · 0x26830
LcMemMap_GetMaxAddress #13 · 0x269f0
LcMemMap_IsInitialized #14 · 0x26bb0
LcRead #15 · 0x1e410
LcReadScatter #16 · 0x1ee90
LcSetOption #17 · 0x1eff0
LcWrite #18 · 0x1f150
LcWriteScatter #19 · 0x1f2c0
WinUsb_AbortPipe #20 · 0x29760
WinUsb_AbortPipeAsync #21 · 0x52b1e
WinUsb_ControlTransfer #22 · 0x52b24
WinUsb_FlushPipe #23 · 0x29766
WinUsb_Free #24 · 0x29736
WinUsb_GetAdjustedFrameNumber #25 · 0x52b2a
WinUsb_GetAssociatedInterface #26 · 0x52b30
WinUsb_GetCurrentAlternateSetting #27 · 0x52b36
WinUsb_GetCurrentFrameNumber #28 · 0x52b3c
WinUsb_GetDescriptor #29 · 0x52b42
WinUsb_GetOverlappedResult #30 · 0x2976c
WinUsb_GetPipePolicy #31 · 0x52b48
WinUsb_GetPowerPolicy #32 · 0x52b4e
WinUsb_Initialize #33 · 0x29730
WinUsb_ParseConfigurationDescriptor #34 · 0x52b54
WinUsb_ParseDescriptors #35 · 0x52b5a
WinUsb_QueryDeviceInformation #36 · 0x52b60
WinUsb_QueryInterfaceSettings #37 · 0x2973c
WinUsb_QueryPipe #38 · 0x29742
WinUsb_ReadPipe #39 · 0x2974e
WinUsb_ResetPipe #40 · 0x2975a
WinUsb_SetCurrentAlternateSetting #41 · 0x52b66
WinUsb_SetPipePolicy #42 · 0x29748
WinUsb_SetPowerPolicy #43 · 0x52b6c
WinUsb_WritePipe #44 · 0x29754

Imported DLLs & functions 263

ADVAPI32.dll 13
AdjustTokenPrivileges 0x1807b7000
CloseServiceHandle 0x1807b7008
ControlService 0x1807b7010
CreateServiceA 0x1807b7018
DeleteService 0x1807b7020
LookupPrivilegeValueA 0x1807b7028
OpenProcessToken 0x1807b7030
OpenSCManagerA 0x1807b7038
OpenServiceA 0x1807b7040
RegCloseKey 0x1807b7048
RegOpenKeyA 0x1807b7050
RegQueryValueExA 0x1807b7058
StartServiceA 0x1807b7060
api-ms-win-crt-convert-l1-1-0.dll 4
_itoa_s 0x1807b7660
atoi 0x1807b7668
strtoul 0x1807b7670
strtoull 0x1807b7678
api-ms-win-crt-heap-l1-1-0.dll 4
calloc 0x1807b7688
free 0x1807b7690
malloc 0x1807b7698
realloc 0x1807b76a0
api-ms-win-crt-runtime-l1-1-0.dll 8
_cexit 0x1807b76b0
_configure_narrow_argv 0x1807b76b8
_execute_onexit_table 0x1807b76c0
_initialize_narrow_environment 0x1807b76c8
_initialize_onexit_table 0x1807b76d0
_initterm 0x1807b76d8
_initterm_e 0x1807b76e0
_seh_filter_dll 0x1807b76e8
api-ms-win-crt-stdio-l1-1-0.dll 14
__acrt_iob_func 0x1807b76f8
__stdio_common_vfprintf 0x1807b7700
__stdio_common_vsnprintf_s 0x1807b7708
__stdio_common_vsnwprintf_s 0x1807b7710
__stdio_common_vsprintf 0x1807b7718
__stdio_common_vsprintf_s 0x1807b7720
__stdio_common_vswprintf_s 0x1807b7728
_fseeki64 0x1807b7730
_ftelli64 0x1807b7738
fclose 0x1807b7740
fopen_s 0x1807b7748
fread 0x1807b7750
fwrite 0x1807b7758
getchar 0x1807b7760
api-ms-win-crt-string-l1-1-0.dll 13
_stricmp 0x1807b7770
_strnicmp 0x1807b7778
_wcsicmp 0x1807b7780
strcat_s 0x1807b7788
strcmp 0x1807b7790
strcpy_s 0x1807b7798
strncat_s 0x1807b77a0
strncpy 0x1807b77a8
strncpy_s 0x1807b77b0
strtok_s 0x1807b77b8
wcscpy_s 0x1807b77c0
wcsncat_s 0x1807b77c8
wcsncpy_s 0x1807b77d0
api-ms-win-crt-utility-l1-1-0.dll 2
rand 0x1807b77e0
srand 0x1807b77e8
credui.dll 2
CredUIPromptForWindowsCredentialsW 0x1807b77f8
CredUnPackAuthenticationBufferW 0x1807b7800
IPHLPAPI.DLL 4
FreeMibTable 0x1807b7070
GetAdaptersAddresses 0x1807b7078
GetAdaptersInfo 0x1807b7080
GetIpForwardTable2 0x1807b7088
KERNEL32.dll 104
AcquireSRWLockExclusive 0x1807b7098
AcquireSRWLockShared 0x1807b70a0
CloseHandle 0x1807b70a8
CreateDirectoryA 0x1807b70b0
CreateEventA 0x1807b70b8
CreateEventW 0x1807b70c0
CreateFileA 0x1807b70c8
CreateFileW 0x1807b70d0
CreateThread 0x1807b70d8
CreateToolhelp32Snapshot 0x1807b70e0
DeleteCriticalSection 0x1807b70e8
DeviceIoControl 0x1807b70f0
EnterCriticalSection 0x1807b70f8
FindClose 0x1807b7100
FindFirstFileA 0x1807b7108
FindNextFileA 0x1807b7110
FlushInstructionCache 0x1807b7118
FreeLibrary 0x1807b7120
GetComputerNameW 0x1807b7128
GetConsoleScreenBufferInfo 0x1807b7130
GetCurrentDirectoryA 0x1807b7138
GetCurrentProcess 0x1807b7140
GetCurrentProcessId 0x1807b7148
GetCurrentThreadId 0x1807b7150
GetEnvironmentVariableA 0x1807b7158
GetFileAttributesA 0x1807b7160
GetFileType 0x1807b7168
GetLastError 0x1807b7170
GetLocalTime 0x1807b7178
GetModuleFileNameA 0x1807b7180
GetPrivateProfileIntA 0x1807b7188
GetPrivateProfileStringA 0x1807b7190
GetProcAddress 0x1807b7198
GetProcessHeap 0x1807b71a0
GetStdHandle 0x1807b71a8
GetSystemDirectoryA 0x1807b71b0
GetSystemInfo 0x1807b71b8
GetSystemTimeAsFileTime 0x1807b71c0
GetTempPathA 0x1807b71c8
GetThreadContext 0x1807b71d0
GetTickCount 0x1807b71d8
GetTickCount64 0x1807b71e0
HeapAlloc 0x1807b71e8
HeapCreate 0x1807b71f0
HeapDestroy 0x1807b71f8
HeapFree 0x1807b7200
HeapReAlloc 0x1807b7208
InitializeCriticalSection 0x1807b7210
InitializeSListHead 0x1807b7218
InitializeSRWLock 0x1807b7220
IsDebuggerPresent 0x1807b7228
IsProcessorFeaturePresent 0x1807b7230
K32EnumProcesses 0x1807b7238
K32GetMappedFileNameW 0x1807b7240
K32GetModuleFileNameExA 0x1807b7248
LeaveCriticalSection 0x1807b7250
LoadLibraryA 0x1807b7258
LocalAlloc 0x1807b7260
LocalFree 0x1807b7268
MultiByteToWideChar 0x1807b7270
OpenProcess 0x1807b7278
OpenThread 0x1807b7280
OutputDebugStringW 0x1807b7288
QueryPerformanceCounter 0x1807b7290
QueryPerformanceFrequency 0x1807b7298
ReadConsoleA 0x1807b72a0
ReadFile 0x1807b72a8
ReadProcessMemory 0x1807b72b0
ReleaseSRWLockExclusive 0x1807b72b8
ReleaseSRWLockShared 0x1807b72c0
ResetEvent 0x1807b72c8
ResumeThread 0x1807b72d0
RtlCaptureContext 0x1807b72d8
RtlLookupFunctionEntry 0x1807b72e0
RtlVirtualUnwind 0x1807b72e8
SetConsoleTextAttribute 0x1807b72f0
SetDllDirectoryA 0x1807b72f8
SetEvent 0x1807b7300
SetFilePointerEx 0x1807b7308
SetThreadContext 0x1807b7310
SetThreadPriority 0x1807b7318
SetUnhandledExceptionFilter 0x1807b7320
Sleep 0x1807b7328
SuspendThread 0x1807b7330
SwitchToThread 0x1807b7338
TerminateProcess 0x1807b7340
Thread32First 0x1807b7348
Thread32Next 0x1807b7350
TryEnterCriticalSection 0x1807b7358
UnhandledExceptionFilter 0x1807b7360
VerifyVersionInfoW 0x1807b7370
VerSetConditionMask 0x1807b7368
VirtualAlloc 0x1807b7378
VirtualFree 0x1807b7380
VirtualProtect 0x1807b7388
VirtualQuery 0x1807b7390
VirtualQueryEx 0x1807b7398
WaitForMultipleObjects 0x1807b73a0
WaitForSingleObject 0x1807b73a8
WideCharToMultiByte 0x1807b73b0
WriteConsoleW 0x1807b73b8
WriteFile 0x1807b73c0
WritePrivateProfileStringA 0x1807b73c8
WriteProcessMemory 0x1807b73d0
ole32.dll 1
CoTaskMemFree 0x1807b7810
RPCRT4.dll 7
NdrClientCall3 0x1807b73e0
RpcBindingFree 0x1807b73e8
RpcBindingFromStringBindingA 0x1807b73f0
RpcBindingSetAuthInfoExA 0x1807b73f8
RpcBindingSetAuthInfoExW 0x1807b7400
RpcStringBindingComposeA 0x1807b7408
RpcStringFreeA 0x1807b7410
Secur32.dll 3
LsaConnectUntrusted 0x1807b7458
LsaDeregisterLogonProcess 0x1807b7460
LsaLookupAuthenticationPackage 0x1807b7468
SETUPAPI.dll 6
SetupDiDestroyDeviceInfoList 0x1807b7420
SetupDiEnumDeviceInterfaces 0x1807b7428
SetupDiGetClassDevsA 0x1807b7430
SetupDiGetClassDevsW 0x1807b7438
SetupDiGetDeviceInterfaceDetailA 0x1807b7440
SetupDiGetDeviceInterfaceDetailW 0x1807b7448
VCRUNTIME140.dll 10
__C_specific_handler 0x1807b7478
__std_type_info_destroy_list 0x1807b7480
memcmp 0x1807b7488
memcpy 0x1807b7490
memmove 0x1807b7498
memset 0x1807b74a0
strchr 0x1807b74a8
strrchr 0x1807b74b0
strstr 0x1807b74b8
wcsstr 0x1807b74c0
WINUSB.DLL 25
WinUsb_AbortPipe 0x1807b74d0
WinUsb_AbortPipeAsync 0x1807b74d8
WinUsb_ControlTransfer 0x1807b74e0
WinUsb_FlushPipe 0x1807b74e8
WinUsb_Free 0x1807b74f0
WinUsb_GetAdjustedFrameNumber 0x1807b74f8
WinUsb_GetAssociatedInterface 0x1807b7500
WinUsb_GetCurrentAlternateSetting 0x1807b7508
WinUsb_GetCurrentFrameNumber 0x1807b7510
WinUsb_GetDescriptor 0x1807b7518
WinUsb_GetOverlappedResult 0x1807b7520
WinUsb_GetPipePolicy 0x1807b7528
WinUsb_GetPowerPolicy 0x1807b7530
WinUsb_Initialize 0x1807b7538
WinUsb_ParseConfigurationDescriptor 0x1807b7540
WinUsb_ParseDescriptors 0x1807b7548
WinUsb_QueryDeviceInformation 0x1807b7550
WinUsb_QueryInterfaceSettings 0x1807b7558
WinUsb_QueryPipe 0x1807b7560
WinUsb_ReadPipe 0x1807b7568
WinUsb_ResetPipe 0x1807b7570
WinUsb_SetCurrentAlternateSetting 0x1807b7578
WinUsb_SetPipePolicy 0x1807b7580
WinUsb_SetPowerPolicy 0x1807b7588
WinUsb_WritePipe 0x1807b7590
wpcap.dll 20
pcap_activate 0x1807b7820
pcap_close 0x1807b7828
pcap_compile 0x1807b7830
pcap_create 0x1807b7838
pcap_findalldevs 0x1807b7840
pcap_freealldevs 0x1807b7848
pcap_freecode 0x1807b7850
pcap_geterr 0x1807b7858
pcap_getevent 0x1807b7860
pcap_next_ex 0x1807b7868
pcap_sendpacket 0x1807b7870
pcap_set_buffer_size 0x1807b7878
pcap_set_immediate_mode 0x1807b7880
pcap_set_promisc 0x1807b7888
pcap_set_snaplen 0x1807b7890
pcap_set_timeout 0x1807b7898
pcap_setdirection 0x1807b78a0
pcap_setfilter 0x1807b78a8
pcap_setmintocopy 0x1807b78b0
pcap_setnonblock 0x1807b78b8
WS2_32.dll 23
closesocket 0x1807b7610
connect 0x1807b7618
freeaddrinfo 0x1807b7638
getaddrinfo 0x1807b7640
gethostname 0x1807b7620
htonl 0x1807b7628
htons 0x1807b7630
inet_addr 0x1807b75a8
inet_ntop 0x1807b7648
inet_pton 0x1807b7650
ioctlsocket 0x1807b75a0
ntohl 0x1807b75c8
ntohs 0x1807b75d0
recv 0x1807b75d8
recvfrom 0x1807b75e0
select 0x1807b75e8
send 0x1807b75f0
sendto 0x1807b75f8
setsockopt 0x1807b7600
socket 0x1807b7608
WSACleanup 0x1807b75c0
WSAGetLastError 0x1807b75b0
WSAStartup 0x1807b75b8