DingTalkSnippingToolAgent.dll

v1.0.0.1 64-bit Windows NT Analyzed
Description
钉钉截图助手代理
Authors
Copyright (C) 2022
File size
173.1 KB
Uploaded
2025-12-02 14:41
Views
39
SHA-256
3d200ce6786aec934c22ab2f830dc2e2

Exported functions 1

GetDingTalkSnipingToolAgent #1 · 0x17b10

Imported DLLs & functions 142

_callnewh 0x18001b2b0
free 0x18001b2a8
malloc 0x18001b298
realloc 0x18001b2a0
_cexit 0x18001b2e8
_configure_narrow_argv 0x18001b2d8
_crt_atexit 0x18001b2c0
_execute_onexit_table 0x18001b318
_initialize_narrow_environment 0x18001b310
_initialize_onexit_table 0x18001b2d0
_initterm 0x18001b2f8
_initterm_e 0x18001b300
_invalid_parameter_noinfo_noreturn 0x18001b308
_register_onexit_function 0x18001b2c8
_seh_filter_dll 0x18001b2e0
abort 0x18001b2f0
?Base64EncodeWrapper@dtfbase@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV23@@Z 0x18001b328
??0CommandLine@base@@QEAA@AEBVFilePath@1@@Z 0x18001b360
??0FilePath@base@@QEAA@XZ 0x18001b468
??0LaunchOptions@base@@QEAA@XZ 0x18001b380
??0LogMessage@logging@@QEAA@PEBDHH@Z 0x18001b480
??0Process@base@@QEAA@PEAX@Z 0x18001b3f0
??1CommandLine@base@@QEAA@XZ 0x18001b368
??1FilePath@base@@QEAA@XZ 0x18001b460
??1LaunchOptions@base@@QEAA@XZ 0x18001b338
??1LogMessage@logging@@QEAA@XZ 0x18001b478
??1Process@base@@QEAA@XZ 0x18001b3e8
??4FilePath@base@@QEAAAEAV01@AEBV01@@Z 0x18001b458
??4Process@base@@QEAAAEAV01@$$QEAV01@@Z 0x18001b390
??6std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@PEB_W@Z 0x18001b430
?Append@FilePath@base@@QEBA?AV12@V?$BasicStringPiece@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@Z 0x18001b418
?AppendSwitchASCII@CommandLine@base@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z 0x18001b378
?AppendSwitchPath@CommandLine@base@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVFilePath@2@@Z 0x18001b370
?AsUTF8Unsafe@FilePath@base@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ 0x18001b448
?clear@FilePath@base@@QEAAXXZ 0x18001b450
?Close@Process@base@@QEAAXXZ 0x18001b3b0
?CloseHandle@HandleTraits@win@base@@SA_NPEAX@Z 0x18001b408
?DirName@FilePath@base@@QEBA?AV12@XZ 0x18001b420
?From@DictionaryValue@base@@SA?AV?$scoped_ptr@VDictionaryValue@base@@U?$default_delete@VDictionaryValue@base@@@std@@@@V?$scoped_ptr@VValue@base@@U?$default_delete@VValue@base@@@std@@@@@Z 0x18001b388
?FromUTF8Unsafe@FilePath@base@@SA?AV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z 0x18001b440
?Get@PathService@base@@SA_NHPEAVFilePath@2@@Z 0x18001b350
?GetProgramCounter@tracked_objects@@YAPEBXXZ 0x18001b410
?GetString@DictionaryValue@base@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV34@@Z 0x18001b398
?Handle@Process@base@@QEBAPEAXXZ 0x18001b3c0
?Int64ToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z 0x18001b3c8
?IntToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z 0x18001b3d8
?IsValid@Process@base@@QEBA_NXZ 0x18001b488
?LaunchProcess@base@@YA?AVProcess@1@AEBVCommandLine@1@AEBULaunchOptions@1@@Z 0x18001b340
?PathExists@base@@YA_NAEBVFilePath@1@@Z 0x18001b358
?Pid@Process@base@@QEBAKXZ 0x18001b3b8
?Read@JSONReader@base@@SA?AV?$scoped_ptr@VValue@base@@U?$default_delete@VValue@base@@@std@@@@AEBV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@Z 0x18001b3d0
?SetJobObjectLimitFlags@base@@YA_NPEAXK@Z 0x18001b348
?ShouldCreateLogMessage@logging@@YA_NH@Z 0x18001b3a8
?StartTracking@VerifierTraits@win@base@@SAXPEAXPEBX11@Z 0x18001b400
?StopTracking@VerifierTraits@win@base@@SAXPEAXPEBX11@Z 0x18001b3f8
?stream@LogMessage@logging@@QEAAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ 0x18001b438
?SysWideToUTF8@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z 0x18001b470
?Terminate@Process@base@@QEBA_NH_N@Z 0x18001b3e0
?value@FilePath@base@@QEBAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ 0x18001b428
?WaitForInstance@internal@base@@YA_JPEA_J@Z 0x18001b3a0
CreateServiceHost 0x18001b4a8
DestroyServiceHost 0x18001b4a0
InitIPCCoreRuntime 0x18001b498
CloseHandle 0x18001b0d0
CreateEventW 0x18001b0c8
CreateJobObjectW 0x18001b028
DeleteCriticalSection 0x18001b010
GetCurrentProcess 0x18001b070
GetCurrentProcessId 0x18001b058
GetCurrentThreadId 0x18001b050
GetLastError 0x18001b000
GetModuleHandleW 0x18001b0c0
GetProcAddress 0x18001b0b8
GetSystemTimeAsFileTime 0x18001b048
InitializeCriticalSectionAndSpinCount 0x18001b008
InitializeSListHead 0x18001b0b0
InitOnceBeginInitialize 0x18001b040
InitOnceComplete 0x18001b038
IsDebuggerPresent 0x18001b090
IsProcessorFeaturePresent 0x18001b078
OutputDebugStringW 0x18001b0d8
QueryPerformanceCounter 0x18001b060
RegisterWaitForSingleObject 0x18001b030
RtlCaptureContext 0x18001b0a8
RtlLookupFunctionEntry 0x18001b0a0
RtlVirtualUnwind 0x18001b098
SetLastError 0x18001b018
SetUnhandledExceptionFilter 0x18001b080
TerminateProcess 0x18001b068
UnhandledExceptionFilter 0x18001b088
UnregisterWaitEx 0x18001b020
_Cnd_destroy_in_situ 0x18001b200
_Cnd_init_in_situ 0x18001b1f8
_Cnd_signal 0x18001b170
_Cnd_wait 0x18001b178
_Mtx_destroy_in_situ 0x18001b1e0
_Mtx_init_in_situ 0x18001b1d8
_Mtx_lock 0x18001b1e8
_Mtx_unlock 0x18001b1f0
_Xtime_get_ticks 0x18001b1c0
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x18001b208
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x18001b108
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x18001b138
?_Throw_C_error@std@@YAXH@Z 0x18001b168
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x18001b130
?_Xbad_function_call@std@@YAXXZ 0x18001b160
?_Xlength_error@std@@YAXPEBD@Z 0x18001b1d0
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x18001b120
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x18001b118
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x18001b158
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18001b0e8
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18001b110
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18001b150
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z 0x18001b100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z 0x18001b0f8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z 0x18001b180
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x18001b0f0
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x18001b1b8
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x18001b1b0
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x18001b128
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x18001b1a8
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x18001b148
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x18001b140
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x18001b1a0
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x18001b198
?uncaught_exception@std@@YA_NXZ 0x18001b1c8
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x18001b190
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x18001b188
__CxxFrameHandler4 0x18001b288
__C_specific_handler 0x18001b258
__std_exception_copy 0x18001b240
__std_exception_destroy 0x18001b218
__std_terminate 0x18001b270
__std_type_info_compare 0x18001b220
__std_type_info_destroy_list 0x18001b260
__std_type_info_name 0x18001b228
_CxxThrowException 0x18001b230
_purecall 0x18001b268
memcmp 0x18001b238
memcpy 0x18001b278
memmove 0x18001b248
memset 0x18001b250