backend.dll - backend

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	backend.dll
size	5241344 (0x4ffa00)
md5	ede88295b9d8e052f55271faad983c9a

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x78
blocks_in_file	1
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x78

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 24 00 00                           |mode.$..        |

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	9
TimeDateStamp	0x7f6e12c3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2122
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x3f0c00
SizeOfInitializedData	0x10e600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x34fb20
BaseOfCode	0x1000
BaseOfData	0
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x519000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x4140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3f0b7f	0x3f0c00	R-X CODE
.rdata	0x3f2000	0x92bfc	0x92c00	R-- IDATA
.data	0x485000	0x1914c	0x6600	RW- IDATA
.00cfg	0x49f000	4	0x200	R-- IDATA
.rodata	0x4a0000	0x80	0x200	R-X CODE
.tls	0x4a1000	0xa5	0x200	RW- IDATA
.voltbl	0x4a2000	0x15c	0x200	---
.rsrc	0x4a3000	0x58108	0x58200	R-- IDATA
.reloc	0x4fc000	0x1ccac	0x1ce00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x47fdd7	0x177
IMPORT	0x47ff4e	0x12c
RESOURCE	0x4a3000	0x58108
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4fc000	0x1ccac
DEBUG	0x47c3ac	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x47c2b0	0x18
LOAD_CONFIG	0x3f2760	0xbc
Bound_IAT	0	0
IAT	0x4804f8	0x47c
Delay_IAT	0x47fd64	0x40
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x104a1000	0x104a10a4	0x1048b690	0x1047fd34	0	0x400000

show previews

type	name	size
CURSOR	#1	16940
CURSOR	#2	9644
CURSOR	#3	4268
CURSOR	#4	16940
CURSOR	#5	9644
CURSOR	#6	4268
CURSOR	#7	16940
CURSOR	#8	9644
CURSOR	#9	4268
CURSOR	#10	16940
CURSOR	#11	9644
CURSOR	#12	4268
CURSOR	#13	16940
CURSOR	#14	9644
CURSOR	#15	4268
CURSOR	#16	16940
CURSOR	#17	9644
CURSOR	#18	4268
CURSOR	#19	4268
CURSOR	#20	4268
CURSOR	#21	4268
CURSOR	#22	4268
CURSOR	#23	4268
CURSOR	#24	4268
CURSOR	#25	4268
CURSOR	#26	4268
CURSOR	#27	4268
CURSOR	#28	4268
CURSOR	#29	4268
CURSOR	#30	16940
CURSOR	#31	9644
CURSOR	#32	4268
CURSOR	#33	16940
CURSOR	#34	9644
CURSOR	#35	4268
CURSOR	#36	16940
CURSOR	#37	9644
CURSOR	#38	4268
CURSOR	#39	16940
CURSOR	#40	9644
CURSOR	#41	4268
GROUP_CURSOR	#40790	48
GROUP_CURSOR	#40791	48
GROUP_CURSOR	#40792	48
GROUP_CURSOR	#40793	48
GROUP_CURSOR	#40794	48
GROUP_CURSOR	#40795	48
GROUP_CURSOR	#40796	20
GROUP_CURSOR	#40797	20
GROUP_CURSOR	#40798	20
GROUP_CURSOR	#40799	20
GROUP_CURSOR	#40800	20
GROUP_CURSOR	#40801	20
GROUP_CURSOR	#40802	20
GROUP_CURSOR	#40803	20
GROUP_CURSOR	#40804	20
GROUP_CURSOR	#40805	20
GROUP_CURSOR	#40806	20
GROUP_CURSOR	#40807	48
GROUP_CURSOR	#40808	48
GROUP_CURSOR	#40809	48
GROUP_CURSOR	#40810	48
VERSION	#1	1216

module_name	hint	ord	function_name
ADVAPI32.dll	129		ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll	240		DuplicateToken
ADVAPI32.dll	289		EventRegister
ADVAPI32.dll	291		EventUnregister
ADVAPI32.dll	292		EventWrite
ADVAPI32.dll	368		GetTokenInformation
ADVAPI32.dll	369		GetTraceEnableFlags
ADVAPI32.dll	370		GetTraceEnableLevel
ADVAPI32.dll	371		GetTraceLoggerHandle
ADVAPI32.dll	398		InitializeAcl
ADVAPI32.dll	399		InitializeSecurityDescriptor
ADVAPI32.dll	533		OpenProcessToken
ADVAPI32.dll	603		RegCloseKey
ADVAPI32.dll	612		RegCreateKeyExW
ADVAPI32.dll	634		RegEnumKeyExW
ADVAPI32.dll	652		RegOpenKeyExW
ADVAPI32.dll	659		RegQueryInfoKeyW
ADVAPI32.dll	664		RegQueryValueExA
ADVAPI32.dll	665		RegQueryValueExW
ADVAPI32.dll	693		RegisterTraceGuidsW
ADVAPI32.dll	744		SetSecurityDescriptorDacl
ADVAPI32.dll	803		SystemFunction036
ADVAPI32.dll	806		TraceEvent
ADVAPI32.dll	821		UnregisterTraceGuids
KERNEL32.dll			AcquireSRWLockExclusive
KERNEL32.dll	21		AllocConsole
KERNEL32.dll	37		AttachConsole
KERNEL32.dll	113		CallbackMayRunLong
KERNEL32.dll	115		CancelIo
KERNEL32.dll	137		CloseHandle
KERNEL32.dll	143		CloseThreadpool
KERNEL32.dll	149		CloseThreadpoolWork
KERNEL32.dll	158		CompareStringW
KERNEL32.dll	159		ConnectNamedPipe
KERNEL32.dll	189		CreateDirectoryW
KERNEL32.dll	194		CreateEventW
KERNEL32.dll	198		CreateFileA
KERNEL32.dll	203		CreateFileMappingW
KERNEL32.dll	206		CreateFileW
KERNEL32.dll	211		CreateIoCompletionPort
KERNEL32.dll	223		CreateNamedPipeW
KERNEL32.dll	246		CreateThread
KERNEL32.dll	247		CreateThreadpool
KERNEL32.dll	252		CreateThreadpoolWork
KERNEL32.dll	255		CreateToolhelp32Snapshot
KERNEL32.dll	268		DecodePointer
KERNEL32.dll	275		DeleteCriticalSection
KERNEL32.dll	280		DeleteFileW
KERNEL32.dll	288		DeviceIoControl
KERNEL32.dll	302		DuplicateHandle
KERNEL32.dll	304		EncodePointer
KERNEL32.dll	308		EnterCriticalSection
KERNEL32.dll	343		EnumSystemLocalesW
KERNEL32.dll	353		ExitProcess
KERNEL32.dll	354		ExitThread
KERNEL32.dll	357		ExpandEnvironmentStringsW
KERNEL32.dll	365		FileTimeToSystemTime
KERNEL32.dll	376		FindClose
KERNEL32.dll	382		FindFirstFileExW
KERNEL32.dll	399		FindNextFileW
KERNEL32.dll	413		FlsAlloc
KERNEL32.dll	416		FlsSetValue
KERNEL32.dll	418		FlushFileBuffers
KERNEL32.dll	419		FlushInstructionCache
KERNEL32.dll	425		FormatMessageA
KERNEL32.dll	426		FormatMessageW
KERNEL32.dll	429		FreeEnvironmentStringsW
KERNEL32.dll	430		FreeLibrary
KERNEL32.dll	431		FreeLibraryAndExitThread
KERNEL32.dll	437		GetACP
KERNEL32.dll	452		GetCPInfo
KERNEL32.dll	473		GetCommandLineA
KERNEL32.dll	474		GetCommandLineW
KERNEL32.dll	482		GetComputerNameW
KERNEL32.dll	511		GetConsoleMode
KERNEL32.dll	515		GetConsoleOutputCP
KERNEL32.dll	532		GetCurrentDirectoryW
KERNEL32.dll	538		GetCurrentProcess
KERNEL32.dll	539		GetCurrentProcessId
KERNEL32.dll	542		GetCurrentThread
KERNEL32.dll	543		GetCurrentThreadId
KERNEL32.dll	548		GetDateFormatW
KERNEL32.dll	562		GetDriveTypeW
KERNEL32.dll	570		GetEnvironmentStringsW
KERNEL32.dll	572		GetEnvironmentVariableW
KERNEL32.dll	581		GetFileAttributesExW
KERNEL32.dll	584		GetFileAttributesW
KERNEL32.dll	586		GetFileInformationByHandle
KERNEL32.dll	591		GetFileSizeEx
KERNEL32.dll	593		GetFileType
KERNEL32.dll	604		GetFullPathNameW
KERNEL32.dll	612		GetLastError
KERNEL32.dll	613		GetLocalTime
KERNEL32.dll	616		GetLocaleInfoW
KERNEL32.dll	631		GetModuleFileNameW
KERNEL32.dll	632		GetModuleHandleA
KERNEL32.dll	634		GetModuleHandleExW
KERNEL32.dll	635		GetModuleHandleW
KERNEL32.dll	648		GetNativeSystemInfo
KERNEL32.dll	666		GetOEMCP
KERNEL32.dll	689		GetProcAddress
KERNEL32.dll	695		GetProcessHeap
KERNEL32.dll	697		GetProcessId
KERNEL32.dll	705		GetProcessTimes
KERNEL32.dll	710		GetProductInfo
KERNEL32.dll	717		GetQueuedCompletionStatus
KERNEL32.dll	723		GetStartupInfoW
KERNEL32.dll	725		GetStdHandle
KERNEL32.dll	730		GetStringTypeW
KERNEL32.dll	734		GetSystemDefaultLCID
KERNEL32.dll	739		GetSystemDirectoryW
KERNEL32.dll	741		GetSystemFirmwareTable
KERNEL32.dll	742		GetSystemInfo
KERNEL32.dll	748		GetSystemTimeAsFileTime
KERNEL32.dll	750		GetSystemTimes
KERNEL32.dll	761		GetTempPathW
KERNEL32.dll	762		GetThreadContext
KERNEL32.dll	767		GetThreadId
KERNEL32.dll	770		GetThreadLocale
KERNEL32.dll	772		GetThreadPriority
KERNEL32.dll	778		GetTickCount
KERNEL32.dll	783		GetTimeFormatW
KERNEL32.dll	785		GetTimeZoneInformation
KERNEL32.dll	789		GetUserDefaultLCID
KERNEL32.dll	798		GetVersionExW
KERNEL32.dll	809		GetWindowsDirectoryW
KERNEL32.dll	829		GlobalMemoryStatusEx
KERNEL32.dll	848		HeapSetInformation
KERNEL32.dll	860		InitOnceExecuteOnce
KERNEL32.dll	862		InitializeConditionVariable
KERNEL32.dll	866		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	870		InitializeSListHead
KERNEL32.dll	879		InterlockedFlushSList
KERNEL32.dll	898		IsDebuggerPresent
KERNEL32.dll	905		IsProcessorFeaturePresent
KERNEL32.dll	911		IsValidCodePage
KERNEL32.dll	913		IsValidLocale
KERNEL32.dll	917		IsWow64Process
KERNEL32.dll	937		K32GetPerformanceInfo
KERNEL32.dll	940		K32GetProcessMemoryInfo
KERNEL32.dll	944		K32QueryWorkingSet
KERNEL32.dll	945		K32QueryWorkingSetEx
KERNEL32.dll	949		LCMapStringW
KERNEL32.dll	961		LeaveCriticalSection
KERNEL32.dll	966		LoadLibraryExA
KERNEL32.dll	967		LoadLibraryExW
KERNEL32.dll	968		LoadLibraryW
KERNEL32.dll	979		LocalFree
KERNEL32.dll	994		MapViewOfFile
KERNEL32.dll	1011		MultiByteToWideChar
KERNEL32.dll	1039		OpenProcess
KERNEL32.dll	1046		OpenThread
KERNEL32.dll	1050		OutputDebugStringA
KERNEL32.dll	1061		PostQueuedCompletionStatus
KERNEL32.dll	1070		Process32FirstW
KERNEL32.dll	1072		Process32NextW
KERNEL32.dll	1103		QueryPerformanceCounter
KERNEL32.dll	1104		QueryPerformanceFrequency
KERNEL32.dll	1108		QueryThreadCycleTime
KERNEL32.dll	1124		RaiseException
KERNEL32.dll	1138		ReadConsoleW
KERNEL32.dll	1141		ReadFile
KERNEL32.dll	1144		ReadProcessMemory
KERNEL32.dll	1204		ReleaseSRWLockExclusive
KERNEL32.dll	1211		RemoveDirectoryW
KERNEL32.dll	1224		ResetEvent
KERNEL32.dll	1231		ResumeThread
KERNEL32.dll	1233		RtlCaptureStackBackTrace
KERNEL32.dll	1237		RtlUnwind
KERNEL32.dll	1259		SetConsoleCtrlHandler
KERNEL32.dll	1291		SetCurrentDirectoryW
KERNEL32.dll	1298		SetEndOfFile
KERNEL32.dll	1302		SetEnvironmentVariableW
KERNEL32.dll	1304		SetEvent
KERNEL32.dll	1311		SetFileAttributesW
KERNEL32.dll	1317		SetFilePointerEx
KERNEL32.dll	1332		SetLastError
KERNEL32.dll	1354		SetProcessWorkingSetSize
KERNEL32.dll	1358		SetStdHandle
KERNEL32.dll	1378		SetThreadPriority
KERNEL32.dll	1385		SetThreadpoolThreadMaximum
KERNEL32.dll	1386		SetThreadpoolThreadMinimum
KERNEL32.dll	1393		SetUnhandledExceptionFilter
KERNEL32.dll	1409		Sleep
KERNEL32.dll	1411		SleepConditionVariableSRW
KERNEL32.dll	1416		SubmitThreadpoolWork
KERNEL32.dll	1417		SuspendThread
KERNEL32.dll	1420		SystemTimeToFileTime
KERNEL32.dll	1421		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	1424		TerminateProcess
KERNEL32.dll	1442		TlsAlloc
KERNEL32.dll	1443		TlsFree
KERNEL32.dll	1444		TlsGetValue
KERNEL32.dll	1445		TlsSetValue
KERNEL32.dll	1449		TryAcquireSRWLockExclusive
KERNEL32.dll	1453		TzSpecificLocalTimeToSystemTime
KERNEL32.dll	1457		UnhandledExceptionFilter
KERNEL32.dll	1460		UnmapViewOfFile
KERNEL32.dll	1467		UnregisterWaitEx
KERNEL32.dll	1477		VerSetConditionMask
KERNEL32.dll	1481		VerifyVersionInfoW
KERNEL32.dll	1482		VirtualAlloc
KERNEL32.dll	1485		VirtualFree
KERNEL32.dll	1488		VirtualProtect
KERNEL32.dll	1490		VirtualQuery
KERNEL32.dll	1491		VirtualQueryEx
KERNEL32.dll	1497		WaitForMultipleObjects
KERNEL32.dll	1499		WaitForSingleObject
KERNEL32.dll	1500		WaitForSingleObjectEx
KERNEL32.dll	1504		WaitForThreadpoolWorkCallbacks
KERNEL32.dll	1506		WaitNamedPipeW
KERNEL32.dll	1507		WakeAllConditionVariable
KERNEL32.dll	1508		WakeConditionVariable
KERNEL32.dll	1538		WideCharToMultiByte
KERNEL32.dll	1557		WriteConsoleW
KERNEL32.dll	1558		WriteFile
pdh.dll	1		PdhAddCounterW
pdh.dll	3		PdhAddEnglishCounterW
pdh.dll	13		PdhCloseQuery
pdh.dll	14		PdhCollectQueryData
pdh.dll	42		PdhFormatFromRawValue
pdh.dll	44		PdhGetCounterInfoW
pdh.dll	66		PdhGetRawCounterArrayW
pdh.dll	80		PdhOpenQueryW
pdh.dll	87		PdhRemoveCounter
dbghelp.dll	53		SymCleanup
dbghelp.dll	90		SymFromAddr
dbghelp.dll	109		SymGetLineFromAddr64
dbghelp.dll	134		SymGetSearchPathW
dbghelp.dll	160		SymInitialize
dbghelp.dll	189		SymSetOptions
dbghelp.dll	195		SymSetSearchPathW
dxgi.dll	4		CreateDXGIFactory1
WS2_32.dll		111
WS2_32.dll		115
WS2_32.dll		57
ole32.dll	39		CoCreateGuid
ole32.dll	93		CoInitialize
ole32.dll	94		CoInitializeEx
ole32.dll	116		CoRegisterInitializeSpy
ole32.dll	128		CoRevokeInitializeSpy
ole32.dll	137		CoTaskMemFree
ole32.dll	141		CoUninitialize
IPHLPAPI.DLL	68		GetAdaptersInfo
SHLWAPI.dll	127		PathMatchSpecW
SHLWAPI.dll	199		SHGetValueW
SHELL32.dll	8		CommandLineToArgvW
SHELL32.dll	335		SHGetFolderPathW
SHELL32.dll	345		SHGetKnownFolderPath
VERSION.dll	7		GetFileVersionInfoSizeW
VERSION.dll	8		GetFileVersionInfoW
VERSION.dll	16		VerQueryValueW
USER32.dll	118		CreateWindowExW
USER32.dll	167		DefWindowProcW
USER32.dll	181		DestroyWindow
USER32.dll	189		DispatchMessageW
USER32.dll	432		GetQueueStatus
USER32.dll	453		GetSystemMetrics
USER32.dll	485		GetWindowLongW
USER32.dll	588		KillTimer
USER32.dll	656		MsgWaitForMultipleObjectsEx
USER32.dll	679		PeekMessageW
USER32.dll	683		PostMessageW
USER32.dll	684		PostQuitMessage
USER32.dll	730		RegisterClassExW
USER32.dll	869		SetTimer
USER32.dll	881		SetWindowLongW
USER32.dll	933		TranslateMessage
USER32.dll	944		UnregisterClassW
WINMM.dll	144		timeBeginPeriod
WINMM.dll	145		timeEndPeriod
WINMM.dll	148		timeGetTime
CRYPT32.dll	230		CryptUnprotectData

ord	entry_va	function_name
1	0x171cb0	??0CommandDispatcher@backend@@QAE@ABV01@@Z
2	0x171ca0	??0CommandDispatcher@backend@@QAE@XZ
3	0x10d50	??1CommandDispatcher@backend@@UAE@XZ
4	0x171c90	??4CommandDispatcher@backend@@QAEAAV01@ABV01@@Z
5	0x4154fc	??_7CommandDispatcher@backend@@6B@
6	0x246500	GetHandleVerifier
7	0x116ee0	LarkMain
8	0x117160	ServiceMain

module_name	backend.dll
flags	0
timestamp	0
version	0.0
ordinal_base	0
nFunctions	9
nNames	8
Names(8)	0x47fe2f
Functions(9)	0x47fe0b
NameOrdinals(8)	0x47fe4f

StringTable 040904b0

CompanyName	Beijing Feishu Technology Co., Ltd.
FileDescription	backend
FileVersion	6.2.0.72
InternalName	backend
LegalCopyright	Copyright(C) 2022 Beijing Feishu Technology Co., Ltd. All rights reserved.
OriginalFilename	backend.dll
ProductName	backend
ProductVersion	6.2.0.72
CompanyShortName	Beijing Feishu Technology Co., Ltd.
ProductShortName	backend
LastChange	e98e6f21168a55e7ba57202f56323911cd9d31d1-refs/branch-heads/4044@{#883}
Official Build	1

VS_FIXEDFILEINFO

FileVersion	6.2.0.72
ProductVersion	6.2.0.72
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	5235760	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x48b690

backend.dll-

MZ Header

DOS stub

PE Header

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

backend.dll
-