dingtalk_elf.dll - Online Dependency Analysis & Download

Description

dingtalk_elf Module

Authors

File size

213.6 KB

Uploaded

2025-12-02 14:41

Views

SHA-256

21067031ef0b5d0a43dfd01ef0ffd815

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported functions 49

??0DingTalkProtect@dt_protect@@QEAA@XZ #1 · 0x6730

??1DingTalkProtect@dt_protect@@QEAA@XZ #2 · 0x1b540

??4DingTalkProtect@dt_protect@@QEAAAEAV01@AEBV01@@Z #3 · 0x6730

?ClearAntiThreadReasonList@DingTalkProtect@dt_protect@@SAXXZ #4 · 0x1b550

?ClearDebugDeniedFile@DingTalkProtect@dt_protect@@SAXXZ #5 · 0x1b570

?ClearDebugProtectCostTimeList@DingTalkProtect@dt_protect@@SAXXZ #6 · 0x1b590

?ClearDutterGPUCrashCount@DingTalkProtect@dt_protect@@SAXXZ #7 · 0x1b5b0

?ClearThirdPartyCrashPath@DingTalkProtect@dt_protect@@SAXXZ #8 · 0x1b5d0

?Execute@DingTalkProtect@dt_protect@@SA_NXZ #9 · 0x1b5f0

?ExecuteV2@DingTalkProtect@dt_protect@@SA_NXZ #10 · 0x1b630

?GetAndCleanConflictingFile@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #11 · 0x1b670

?GetAndClearThirdPartyCrashPath@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #12 · 0x1b6c0

?GetAntiThreadReasonList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #13 · 0x1b710

?GetBlackList@DingTalkProtect@dt_protect@@SA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ #14 · 0x1b740

?GetBlockModuleList@DingTalkProtect@dt_protect@@SA?AV?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ #15 · 0x1b770

?GetDebugDeniedFile@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #16 · 0x1b7a0

?GetDebugProtectCostTimeList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #17 · 0x1b7d0

?GetDebugProtectDeniedInfo@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #18 · 0x1b800

?GetDebugProtectEnable@DingTalkProtect@dt_protect@@SA_NXZ #19 · 0x1b830

?GetDenyList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #20 · 0x1b850

?GetDllCheckResult@DingTalkProtect@dt_protect@@SA?AW4ModuleType@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #21 · 0x1b880

?GetDutterGPUCrashCount@DingTalkProtect@dt_protect@@SAHXZ #22 · 0x1b8b0

?GetForceOpenDebugProtectSwitch@DingTalkProtect@dt_protect@@SA_NXZ #23 · 0x1b8d0

?GetGrayDenyList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #24 · 0x1b8f0

?GetLocalDenyList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #25 · 0x1b920

?GetManualOperateDebugProtect@DingTalkProtect@dt_protect@@SA_NXZ #26 · 0x1b950

?GetSubjectDenyList@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #27 · 0x1b970

?GetThirdPartyCrashPath@DingTalkProtect@dt_protect@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ #28 · 0x1b9a0

?IsLaunchAppInDebugMode@DingTalkProtect@dt_protect@@SA_NXZ #29 · 0x1b9d0

?ManualOperateDebugProtect@DingTalkProtect@dt_protect@@SAX_N@Z #30 · 0x1b9f0

?SetAntiInjectRepairIAT@DingTalkProtect@dt_protect@@SAX_N@Z #31 · 0x1ba10

?SetAntiRemoteThreadEnable@DingTalkProtect@dt_protect@@SAX_N@Z #32 · 0x1ba30

?SetBlackList@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #33 · 0x1ba50

?SetConflictModuleDetectCallback@DingTalkProtect@dt_protect@@SAXV?$function@$$A6AXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z@std@@@Z #34 · 0x1ba70

?SetDebugProtectEnable@DingTalkProtect@dt_protect@@SAX_N@Z #35 · 0x1bb00

?SetDutterGPUCrashCount@DingTalkProtect@dt_protect@@SAXH@Z #36 · 0x1bb20

?SetEnableSafeMode@DingTalkProtect@dt_protect@@SAX_N@Z #37 · 0x1bb40

?SetEncryptBlackListSwitch@DingTalkProtect@dt_protect@@SAX_N@Z #38 · 0x1bb60

?SetFixAntiInjectCrashSwitch@DingTalkProtect@dt_protect@@SAX_N@Z #39 · 0x1bb80

?SetFixAntiThreadCrashSwitch@DingTalkProtect@dt_protect@@SAX_N@Z #40 · 0x1bba0

?SetFixHookFailedSwitch@DingTalkProtect@dt_protect@@SAX_N@Z #41 · 0x1bbc0

?SetForceOpenDebugProtectSwitch@DingTalkProtect@dt_protect@@SAX_N@Z #42 · 0x1bbe0

?SetGrayDenyList@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #43 · 0x1bc00

?SetLaunchStatus@DingTalkProtect@dt_protect@@SAX_N@Z #44 · 0x1bc20

?SetLocalDenyList@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #45 · 0x1bc40

?SetSubjectDenyList@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #46 · 0x1bc60

?SetSwitchV4@DingTalkProtect@dt_protect@@SAX_N@Z #47 · 0x1bc80

?SetThirdPartyCrashPath@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #48 · 0x1bca0

?SetWhiteList@DingTalkProtect@dt_protect@@SAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z #49 · 0x1bcc0

Imported DLLs & functions 217

api-ms-win-crt-convert-l1-1-0.dll 2

_wtol 0x180020588

wcstol 0x180020590

api-ms-win-crt-environment-l1-1-0.dll 1

_wputenv_s 0x1800205a0

api-ms-win-crt-filesystem-l1-1-0.dll 2

_lock_file 0x1800205b8

_unlock_file 0x1800205b0

api-ms-win-crt-heap-l1-1-0.dll 5

_callnewh 0x1800205d0

_recalloc 0x1800205d8

calloc 0x1800205e0

free 0x1800205e8

malloc 0x1800205c8

api-ms-win-crt-math-l1-1-0.dll 1

ceilf 0x1800205f8

api-ms-win-crt-runtime-l1-1-0.dll 15

_beginthreadex 0x180020610

_cexit 0x180020678

_configure_narrow_argv 0x180020648

_crt_atexit 0x180020638

_errno 0x180020628

_execute_onexit_table 0x180020668

_initialize_narrow_environment 0x180020650

_initialize_onexit_table 0x180020658

_initterm 0x180020640

_initterm_e 0x180020608

_invalid_parameter_noinfo 0x180020630

_invalid_parameter_noinfo_noreturn 0x180020620

_register_onexit_function 0x180020660

_seh_filter_dll 0x180020670

terminate 0x180020618

api-ms-win-crt-stdio-l1-1-0.dll 17

__stdio_common_vsnwprintf_s 0x1800206a0

__stdio_common_vswprintf_s 0x1800206a8

_fseeki64 0x180020708

_get_stream_buffer_pointers 0x180020688

fclose 0x180020690

fflush 0x180020698

fgetc 0x180020700

fgetpos 0x1800206f8

fgetwc 0x1800206d0

fputc 0x1800206f0

fputwc 0x1800206c8

fread 0x1800206e8

fsetpos 0x1800206e0

fwrite 0x1800206d8

setvbuf 0x1800206c0

ungetc 0x1800206b8

ungetwc 0x1800206b0

api-ms-win-crt-string-l1-1-0.dll 6

_wcsicmp 0x180020740

strnlen 0x180020738

tolower 0x180020728

towlower 0x180020720

wcsnlen 0x180020730

wmemcpy_s 0x180020718

KERNEL32.dll 81

CloseHandle 0x180020000

ContinueDebugEvent 0x180020108

CopyFileW 0x1800201d8

CreateEventW 0x180020268

CreateFileMappingW 0x1800200b0

CreateFileW 0x1800200e0

DebugActiveProcessStop 0x180020118

DeleteCriticalSection 0x180020210

EnterCriticalSection 0x180020158

FindResourceExW 0x180020190

FindResourceW 0x1800201b8

FlushInstructionCache 0x180020080

GetCommandLineW 0x1800200d0

GetCurrentProcess 0x180020050

GetCurrentProcessId 0x180020168

GetCurrentThread 0x180020058

GetCurrentThreadId 0x180020060

GetFileAttributesW 0x1800200e8

GetFileSize 0x1800200a8

GetLastError 0x180020008

GetModuleFileNameW 0x180020198

GetModuleHandleW 0x1800200c0

GetPrivateProfileStringW 0x1800201c8

GetProcAddress 0x1800200c8

GetProcessHeap 0x180020148

GetProcessId 0x180020178

GetSystemDefaultLangID 0x1800201f8

GetSystemTimeAsFileTime 0x180020228

GetThreadContext 0x180020070

GetTickCount 0x180020180

GetUserDefaultLangID 0x1800201f0

HeapAlloc 0x180020128

HeapDestroy 0x180020120

HeapFree 0x180020138

HeapReAlloc 0x180020130

HeapSize 0x180020140

InitializeCriticalSection 0x180020150

InitializeCriticalSectionAndSpinCount 0x180020208

InitializeSListHead 0x180020220

IsDebuggerPresent 0x1800200f8

IsProcessorFeaturePresent 0x180020238

LeaveCriticalSection 0x180020160

LoadLibraryW 0x1800201c0

LoadResource 0x1800201a0

LocalFree 0x180020280

LockResource 0x1800201a8

MapViewOfFile 0x180020188

MultiByteToWideChar 0x1800201e0

OpenProcess 0x180020028

OutputDebugStringW 0x180020100

QueryPerformanceCounter 0x180020230

RaiseException 0x180020200

ReadFile 0x1800200f0

ReadProcessMemory 0x180020040

ResetEvent 0x180020278

ResumeThread 0x180020020

RtlCaptureContext 0x180020260

RtlLookupFunctionEntry 0x180020258

RtlVirtualUnwind 0x180020250

SetEnvironmentVariableW 0x1800200d8

SetEvent 0x180020218

SetLastError 0x180020010

SetThreadContext 0x180020078

SetUnhandledExceptionFilter 0x180020240

SizeofResource 0x1800201b0

SuspendThread 0x180020068

TerminateProcess 0x180020018

TerminateThread 0x180020170

UnhandledExceptionFilter 0x180020248

UnmapViewOfFile 0x1800200b8

VirtualAlloc 0x180020088

VirtualFree 0x180020098

VirtualProtect 0x180020090

VirtualProtectEx 0x180020030

VirtualQuery 0x1800200a0

VirtualQueryEx 0x180020038

WaitForDebugEvent 0x180020110

WaitForSingleObjectEx 0x180020270

WideCharToMultiByte 0x1800201e8

WritePrivateProfileStringW 0x1800201d0

WriteProcessMemory 0x180020048

MSVCP140.dll 64

_Cnd_broadcast 0x180020308

_Cnd_destroy_in_situ 0x1800202f8

_Cnd_do_broadcast_at_thread_exit 0x180020310

_Cnd_init_in_situ 0x1800202f0

_Cnd_wait 0x180020300

_Mtx_destroy_in_situ 0x1800202d8

_Mtx_init_in_situ 0x1800202d0

_Mtx_lock 0x1800202e0

_Mtx_unlock 0x1800202e8

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z 0x180020480

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x180020358

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x180020378

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x180020330

?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ 0x1800203d8

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ 0x1800203a0

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ 0x1800203d0

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x180020398

?_Throw_C_error@std@@YAXH@Z 0x180020318

?_Throw_Cpp_error@std@@YAXH@Z 0x180020320

?_Xbad_function_call@std@@YAXXZ 0x180020478

?_Xinvalid_argument@std@@YAXPEBD@Z 0x1800202b8

?_Xlength_error@std@@YAXPEBD@Z 0x1800202c0

?_Xout_of_range@std@@YAXPEBD@Z 0x1800202c8

??0_Lockit@std@@QEAA@H@Z 0x1800202a8

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x180020418

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x180020400

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x180020468

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x180020438

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x180020420

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ 0x1800203b8

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x180020380

??1_Lockit@std@@QEAA@XZ 0x1800202b0

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x180020408

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800203f0

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x180020470

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180020440

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180020428

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ 0x1800203c0

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180020388

??Bid@locale@std@@QEAA_KXZ 0x180020328

?always_noconv@codecvt_base@std@@QEBA_NXZ 0x180020338

?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z 0x180020460

?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ 0x1800203c8

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ 0x180020390

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A 0x180020298

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x180020290

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z 0x180020340

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x180020360

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z 0x180020348

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x180020368

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z 0x180020448

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z 0x180020450

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z 0x180020410

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x1800203f8

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ 0x1800202a0

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x180020488

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ 0x180020458

?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z 0x180020350

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z 0x180020370

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z 0x180020430

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z 0x1800203e0

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x1800203a8

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z 0x1800203e8

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x1800203b0

OLEAUT32.dll 3

SysAllocString 0x180020498

SysFreeString 0x1800204a0

VariantClear 0x1800204a8

PSAPI.DLL 3

GetMappedFileNameW 0x1800204c8

GetModuleBaseNameW 0x1800204c0

GetModuleFileNameExW 0x1800204b8

SHELL32.dll 2

SHCreateDirectoryExW 0x1800204d8

SHGetFolderPathW 0x1800204e0

SHLWAPI.dll 1

PathFileExistsW 0x1800204f0

USER32.dll 1

MessageBoxW 0x180020500

VCRUNTIME140_1.dll 1

__CxxFrameHandler4 0x180020578

VCRUNTIME140.dll 12

__C_specific_handler 0x180020558

__std_exception_copy 0x180020510

__std_exception_destroy 0x180020518

__std_terminate 0x180020548

__std_type_info_destroy_list 0x180020530

_CxxThrowException 0x180020520

memcmp 0x180020528

memcpy 0x180020560

memmove 0x180020538

memset 0x180020550

wcsrchr 0x180020568

wcsstr 0x180020540