DingTalkSnippingToolAgent.dll

Description: 钉钉截图助手代理

Authors: Copyright (C) 2022

Version: 1.0.0.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 3d200ce6786aec934c22ab2f830dc2e2

File Size: 173.1 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Exported Functions

  • GetDingTalkSnipingToolAgent (Ordinal: 1, Address: 0x17b10)

Imported DLLs & Functions

api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x18001b2b0)
  • free (Address: 0x18001b2a8)
  • malloc (Address: 0x18001b298)
  • realloc (Address: 0x18001b2a0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x18001b2e8)
  • _configure_narrow_argv (Address: 0x18001b2d8)
  • _crt_atexit (Address: 0x18001b2c0)
  • _execute_onexit_table (Address: 0x18001b318)
  • _initialize_narrow_environment (Address: 0x18001b310)
  • _initialize_onexit_table (Address: 0x18001b2d0)
  • _initterm (Address: 0x18001b2f8)
  • _initterm_e (Address: 0x18001b300)
  • _invalid_parameter_noinfo_noreturn (Address: 0x18001b308)
  • _register_onexit_function (Address: 0x18001b2c8)
  • _seh_filter_dll (Address: 0x18001b2e0)
  • abort (Address: 0x18001b2f0)
dt_foundation.dll
  • ?Base64EncodeWrapper@dtfbase@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV23@@Z (Address: 0x18001b328)
dtfbase.dll
  • ??0CommandLine@base@@QEAA@AEBVFilePath@1@@Z (Address: 0x18001b360)
  • ??0FilePath@base@@QEAA@XZ (Address: 0x18001b468)
  • ??0LaunchOptions@base@@QEAA@XZ (Address: 0x18001b380)
  • ??0LogMessage@logging@@QEAA@PEBDHH@Z (Address: 0x18001b480)
  • ??0Process@base@@QEAA@PEAX@Z (Address: 0x18001b3f0)
  • ??1CommandLine@base@@QEAA@XZ (Address: 0x18001b368)
  • ??1FilePath@base@@QEAA@XZ (Address: 0x18001b460)
  • ??1LaunchOptions@base@@QEAA@XZ (Address: 0x18001b338)
  • ??1LogMessage@logging@@QEAA@XZ (Address: 0x18001b478)
  • ??1Process@base@@QEAA@XZ (Address: 0x18001b3e8)
  • ??4FilePath@base@@QEAAAEAV01@AEBV01@@Z (Address: 0x18001b458)
  • ??4Process@base@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x18001b390)
  • ??6std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@PEB_W@Z (Address: 0x18001b430)
  • ?Append@FilePath@base@@QEBA?AV12@V?$BasicStringPiece@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@Z (Address: 0x18001b418)
  • ?AppendSwitchASCII@CommandLine@base@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z (Address: 0x18001b378)
  • ?AppendSwitchPath@CommandLine@base@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVFilePath@2@@Z (Address: 0x18001b370)
  • ?AsUTF8Unsafe@FilePath@base@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ (Address: 0x18001b448)
  • ?clear@FilePath@base@@QEAAXXZ (Address: 0x18001b450)
  • ?Close@Process@base@@QEAAXXZ (Address: 0x18001b3b0)
  • ?CloseHandle@HandleTraits@win@base@@SA_NPEAX@Z (Address: 0x18001b408)
  • ?DirName@FilePath@base@@QEBA?AV12@XZ (Address: 0x18001b420)
  • ?From@DictionaryValue@base@@SA?AV?$scoped_ptr@VDictionaryValue@base@@U?$default_delete@VDictionaryValue@base@@@std@@@@V?$scoped_ptr@VValue@base@@U?$default_delete@VValue@base@@@std@@@@@Z (Address: 0x18001b388)
  • ?FromUTF8Unsafe@FilePath@base@@SA?AV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Address: 0x18001b440)
  • ?Get@PathService@base@@SA_NHPEAVFilePath@2@@Z (Address: 0x18001b350)
  • ?GetProgramCounter@tracked_objects@@YAPEBXXZ (Address: 0x18001b410)
  • ?GetString@DictionaryValue@base@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV34@@Z (Address: 0x18001b398)
  • ?Handle@Process@base@@QEBAPEAXXZ (Address: 0x18001b3c0)
  • ?Int64ToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z (Address: 0x18001b3c8)
  • ?IntToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z (Address: 0x18001b3d8)
  • ?IsValid@Process@base@@QEBA_NXZ (Address: 0x18001b488)
  • ?LaunchProcess@base@@YA?AVProcess@1@AEBVCommandLine@1@AEBULaunchOptions@1@@Z (Address: 0x18001b340)
  • ?PathExists@base@@YA_NAEBVFilePath@1@@Z (Address: 0x18001b358)
  • ?Pid@Process@base@@QEBAKXZ (Address: 0x18001b3b8)
  • ?Read@JSONReader@base@@SA?AV?$scoped_ptr@VValue@base@@U?$default_delete@VValue@base@@@std@@@@AEBV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@Z (Address: 0x18001b3d0)
  • ?SetJobObjectLimitFlags@base@@YA_NPEAXK@Z (Address: 0x18001b348)
  • ?ShouldCreateLogMessage@logging@@YA_NH@Z (Address: 0x18001b3a8)
  • ?StartTracking@VerifierTraits@win@base@@SAXPEAXPEBX11@Z (Address: 0x18001b400)
  • ?StopTracking@VerifierTraits@win@base@@SAXPEAXPEBX11@Z (Address: 0x18001b3f8)
  • ?stream@LogMessage@logging@@QEAAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ (Address: 0x18001b438)
  • ?SysWideToUTF8@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z (Address: 0x18001b470)
  • ?Terminate@Process@base@@QEBA_NH_N@Z (Address: 0x18001b3e0)
  • ?value@FilePath@base@@QEBAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18001b428)
  • ?WaitForInstance@internal@base@@YA_JPEA_J@Z (Address: 0x18001b3a0)
ipc_core.dll
  • CreateServiceHost (Address: 0x18001b4a8)
  • DestroyServiceHost (Address: 0x18001b4a0)
  • InitIPCCoreRuntime (Address: 0x18001b498)
KERNEL32.dll
  • CloseHandle (Address: 0x18001b0d0)
  • CreateEventW (Address: 0x18001b0c8)
  • CreateJobObjectW (Address: 0x18001b028)
  • DeleteCriticalSection (Address: 0x18001b010)
  • GetCurrentProcess (Address: 0x18001b070)
  • GetCurrentProcessId (Address: 0x18001b058)
  • GetCurrentThreadId (Address: 0x18001b050)
  • GetLastError (Address: 0x18001b000)
  • GetModuleHandleW (Address: 0x18001b0c0)
  • GetProcAddress (Address: 0x18001b0b8)
  • GetSystemTimeAsFileTime (Address: 0x18001b048)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18001b008)
  • InitializeSListHead (Address: 0x18001b0b0)
  • InitOnceBeginInitialize (Address: 0x18001b040)
  • InitOnceComplete (Address: 0x18001b038)
  • IsDebuggerPresent (Address: 0x18001b090)
  • IsProcessorFeaturePresent (Address: 0x18001b078)
  • OutputDebugStringW (Address: 0x18001b0d8)
  • QueryPerformanceCounter (Address: 0x18001b060)
  • RegisterWaitForSingleObject (Address: 0x18001b030)
  • RtlCaptureContext (Address: 0x18001b0a8)
  • RtlLookupFunctionEntry (Address: 0x18001b0a0)
  • RtlVirtualUnwind (Address: 0x18001b098)
  • SetLastError (Address: 0x18001b018)
  • SetUnhandledExceptionFilter (Address: 0x18001b080)
  • TerminateProcess (Address: 0x18001b068)
  • UnhandledExceptionFilter (Address: 0x18001b088)
  • UnregisterWaitEx (Address: 0x18001b020)
MSVCP140.dll
  • _Cnd_destroy_in_situ (Address: 0x18001b200)
  • _Cnd_init_in_situ (Address: 0x18001b1f8)
  • _Cnd_signal (Address: 0x18001b170)
  • _Cnd_wait (Address: 0x18001b178)
  • _Mtx_destroy_in_situ (Address: 0x18001b1e0)
  • _Mtx_init_in_situ (Address: 0x18001b1d8)
  • _Mtx_lock (Address: 0x18001b1e8)
  • _Mtx_unlock (Address: 0x18001b1f0)
  • _Xtime_get_ticks (Address: 0x18001b1c0)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18001b208)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18001b108)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18001b138)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x18001b168)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18001b130)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x18001b160)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001b1d0)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18001b120)
  • ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x18001b118)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18001b158)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18001b0e8)
  • ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18001b110)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18001b150)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18001b100)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18001b0f8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18001b180)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18001b0f0)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18001b1b8)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18001b1b0)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18001b128)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18001b1a8)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18001b148)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18001b140)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18001b1a0)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18001b198)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x18001b1c8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18001b190)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18001b188)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x18001b288)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x18001b258)
  • __std_exception_copy (Address: 0x18001b240)
  • __std_exception_destroy (Address: 0x18001b218)
  • __std_terminate (Address: 0x18001b270)
  • __std_type_info_compare (Address: 0x18001b220)
  • __std_type_info_destroy_list (Address: 0x18001b260)
  • __std_type_info_name (Address: 0x18001b228)
  • _CxxThrowException (Address: 0x18001b230)
  • _purecall (Address: 0x18001b268)
  • memcmp (Address: 0x18001b238)
  • memcpy (Address: 0x18001b278)
  • memmove (Address: 0x18001b248)
  • memset (Address: 0x18001b250)