C:\Users\Admin\Desktop\工作\LVFS\1\2\3\4\LVFS-newest\LVFClient2\x64\Release\LVFClient2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c.exe
Resource
win10v2004-20231215-en
General
-
Target
433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c
-
Size
2.6MB
-
MD5
293098ffc3d7541c697e0ebc3551c829
-
SHA1
f5eda93e99fdb5c50324e637a9b23c26394a97f1
-
SHA256
433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c
-
SHA512
ecba78579d537b275cfadd0181ee5ab7b5bcfc4768352f11987fbdd681212057000738e91c1ca904f821ebe8b60a3dcafb2220eb1832c8ed468c60ff3eca92ed
-
SSDEEP
49152:hYO3C05DdBaSzOIlh96dkaJ1EUVqUls388LAbbaNeFq4kcA5k5:n3CQoSXlhtaJ98cXo0qD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c
Files
-
433d54d9a713b473163e5f4206c4a8da7ac2039628d17ab2151f50b35302cd1c.exe windows:5 windows x64 arch:x64
a8a7ff107ea6fbc8863cb31139ffb0d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
FileTimeToSystemTime
VirtualAllocEx
VirtualFreeEx
TerminateProcess
GetExitCodeProcess
CreateRemoteThread
SetLastError
WriteProcessMemory
WaitForSingleObject
lstrlenW
CreateProcessW
LoadLibraryA
OpenMutexW
GetDiskFreeSpaceExW
GetExitCodeThread
SuspendThread
ResumeThread
DuplicateHandle
SetEvent
ResetEvent
CreateEventA
OpenEventA
ReleaseMutex
CreateMutexA
GetLogicalDrives
GetDriveTypeW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GlobalMemoryStatusEx
GetProcessTimes
GetSystemTimeAsFileTime
GetSystemInfo
GetVolumeInformationW
TerminateThread
GetVolumeNameForVolumeMountPointW
SetFilePointer
CreateEventW
HeapSize
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
TryEnterCriticalSection
FindFirstFileExW
HeapReAlloc
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetTimeFormatW
GetDateFormatW
GetFileType
GetACP
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MoveFileExW
CopyFileW
FindNextFileW
FindFirstFileW
GetFileAttributesExW
RemoveDirectoryW
CreateDirectoryW
GetDiskFreeSpaceW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
SetFileTime
FindClose
SetEndOfFile
FlushFileBuffers
ReadFile
WriteFile
GetFileSize
GetProcessHeap
FileTimeToLocalFileTime
HeapAlloc
VirtualFree
VirtualAlloc
LocalAlloc
MoveFileW
DeleteFileW
GetFileSizeEx
DeleteCriticalSection
GetFileAttributesW
SetFileAttributesW
CreateFileW
SetFilePointerEx
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
ProcessIdToSessionId
IsBadReadPtr
QueryDosDeviceW
GetCurrentDirectoryW
GetLastError
SetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
GetEnvironmentVariableW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
FormatMessageW
CloseHandle
Sleep
ReadProcessMemory
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
OpenProcess
LocalFree
GetProcAddress
FreeLibrary
GetUserDefaultLCID
GetCommandLineA
GetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTimeZoneInformation
GetModuleHandleExW
ExitProcess
LoadLibraryExW
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetStringTypeW
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
GetLocalTime
GetVersionExW
lstrcmpiA
GetCommandLineW
IsValidLocale
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
GetFullPathNameW
ExpandEnvironmentStringsW
GetTickCount
GetLongPathNameW
OpenFileMappingW
HeapFree
GetCurrentThread
GetShortPathNameW
RtlUnwind
user32
GetUserObjectInformationW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
PostMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
wsprintfW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetThreadDesktop
GetSystemMetrics
CloseDesktop
OpenInputDesktop
MessageBoxW
advapi32
ConvertStringSidToSidW
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueW
GetUserNameW
EqualSid
GetLengthSid
InitializeAcl
GetAclInformation
AddAce
GetAce
AddAccessAllowedAceEx
ImpersonateLoggedOnUser
RevertToSelf
SetSecurityInfo
AddAccessAllowedAce
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ConvertSidToStringSidW
BuildExplicitAccessWithNameW
SetEntriesInAclW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegQueryValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
DuplicateTokenEx
CreateProcessWithLogonW
CreateProcessAsUserW
LogonUserW
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
FreeSid
AllocateAndInitializeSid
IsValidSid
SetTokenInformation
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupAccountNameW
GetFileSecurityW
SetFileSecurityW
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
GetSecurityDescriptorControl
InitializeSecurityDescriptor
OpenProcessToken
shell32
ord680
SHFileOperationW
ShellExecuteW
oleaut32
SysAllocString
SysFreeString
rpcrt4
UuidCreate
UuidToStringA
RpcStringFreeA
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW
ws2_32
shutdown
ntohl
WSAStringToAddressA
setsockopt
bind
listen
htonl
gethostname
inet_ntoa
inet_addr
accept
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
__WSAFDIsSet
closesocket
connect
getsockopt
htons
select
socket
WSAGetLastError
send
ioctlsocket
getsockname
WSAAddressToStringA
ntohs
recv
crypt32
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptMsgClose
CertGetNameStringW
CryptQueryObject
CertVerifyTimeValidity
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
shlwapi
SHCopyKeyW
SHDeleteKeyW
netapi32
NetUserEnum
NetUserGetInfo
NetUserSetInfo
NetUserDel
NetUserGetLocalGroups
NetUserAdd
NetLocalGroupEnum
NetLocalGroupGetMembers
NetLocalGroupAddMembers
NetLocalGroupDelMembers
NetGetDCName
NetApiBufferFree
NetGetJoinInformation
NetUserChangePassword
dnsapi
DnsQuery_W
DnsFree
mpr
WNetAddConnection2W
setupapi
CM_Get_Parent
CM_Query_And_Remove_SubTreeW
CM_Request_Device_EjectW
SetupDiRemoveDevice
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
psapi
GetProcessMemoryInfo
iphlpapi
GetNetworkParams
GetAdaptersInfo
SendARP
GetIpNetTable
CreateIpNetEntry
SetIpNetEntry
DeleteIpNetEntry
GetIfEntry
Exports
Exports
??0BSEIntString@@QEAA@$$QEAV0@@Z
??0BSEIntString@@QEAA@AEBV0@@Z
??0BSEIntString@@QEAA@H@Z
??0BSEIntString@@QEAA@HAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0BSEIntString@@QEAA@HAEBVHString@@@Z
??0BSEIntString@@QEAA@XZ
??0BSParseString@@QEAA@AEBV0@@Z
??0BSParseString@@QEAA@XZ
??0Cond@HIEUtil@@QEAA@XZ
??0CurrentUserToken@@QEAA@_N@Z
??0Exception@HIEUtil@@QEAA@AEBV01@@Z
??0Exception@HIEUtil@@QEAA@PEBDH@Z
??0Exception@HIEUtil@@QEAA@XZ
??0HARPTable@@QEAA@$$QEAV0@@Z
??0HARPTable@@QEAA@AEBV0@@Z
??0HARPTable@@QEAA@XZ
??0HAccountInfoCreate@@QEAA@$$QEAV0@@Z
??0HAccountInfoCreate@@QEAA@AEBV0@@Z
??0HAccountInfoCreate@@QEAA@XZ
??0HAccountInfoGet@@QEAA@$$QEAV0@@Z
??0HAccountInfoGet@@QEAA@AEBV0@@Z
??0HAccountInfoGet@@QEAA@XZ
??0HAccountInfoGetEx@@QEAA@$$QEAV0@@Z
??0HAccountInfoGetEx@@QEAA@AEBV0@@Z
??0HAccountInfoGetEx@@QEAA@XZ
??0HAgentAcountMgr@@QEAA@XZ
??0HAppUUID@@QEAA@AEBV0@@Z
??0HAppUUID@@QEAA@XZ
??0HArpNode@@QEAA@$$QEAV0@@Z
??0HArpNode@@QEAA@AEBV0@@Z
??0HArpNode@@QEAA@XZ
??0HAutoEWFMgr@@QEAA@AEBV0@@Z
??0HAutoEWFMgr@@QEAA@XZ
??0HAutoMutex@@QEAA@PEAVHMutex@@@Z
??0HAutoMutexEx2@@QEAA@AEBV0@@Z
??0HAutoMutexEx2@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HAutoMutexEx@@QEAA@PEAVHMutexEx@@@Z
??0HBasicEnum@@QEAA@$$QEAV0@@Z
??0HBasicEnum@@QEAA@AEBV0@@Z
??0HBasicEnum@@QEAA@XZ
??0HBigInt@@QEAA@AEBV0@@Z
??0HBigInt@@QEAA@H@Z
??0HBsSamYi@@QEAA@$$QEAV0@@Z
??0HBsSamYi@@QEAA@AEBV0@@Z
??0HBsSamYi@@QEAA@XZ
??0HCRCLoop@@QEAA@XZ
??0HCmdParser@@QEAA@AEBV0@@Z
??0HCmdParser@@QEAA@AEBVHString@@@Z
??0HCmdParser@@QEAA@XZ
??0HColorEggMgr@@QEAA@AEBV0@@Z
??0HDNSClient@@QEAA@AEBV0@@Z
??0HDVReadNode@@QEAA@$$QEAV0@@Z
??0HDVReadNode@@QEAA@AEBV0@@Z
??0HDVReadNode@@QEAA@XZ
??0HDbgView@@QEAA@AEBV0@@Z
??0HDbgView@@QEAA@XZ
??0HDirSnap@@QEAA@$$QEAV0@@Z
??0HDirSnap@@QEAA@AEBV0@@Z
??0HDirSnap@@QEAA@XZ
??0HDiskInfo@HUtilEx@@QEAA@$$QEAV01@@Z
??0HDiskInfo@HUtilEx@@QEAA@AEBV01@@Z
??0HDiskInfo@HUtilEx@@QEAA@XZ
??0HDiskInfoEx@HLogicalDisk@@QEAA@$$QEAV01@@Z
??0HDiskInfoEx@HLogicalDisk@@QEAA@AEBV01@@Z
??0HDiskInfoEx@HLogicalDisk@@QEAA@XZ
??0HDynSysAPICall@@QEAA@XZ
??0HDynamicFnBase@@QEAA@AEBVHString@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HDynamicFnBase@@QEAA@XZ
??0HEncryRC4@@QEAA@XZ
??0HEncryRC4Once@@QEAA@XZ
??0HEvent@@QEAA@XZ
??0HEventEx@@QEAA@XZ
??0HFileBase@@QEAA@AEBV0@@Z
??0HFileBase@@QEAA@XZ
??0HFileDownloadCallBack@HProcess@@QEAA@AEBV01@@Z
??0HFileDownloadCallBack@HProcess@@QEAA@XZ
??0HFileLog@@QEAA@AEBV0@@Z
??0HFileLog@@QEAA@XZ
??0HFileMap@@QEAA@AEBV0@@Z
??0HFileMap@@QEAA@XZ
??0HFileNode@@QEAA@$$QEAV0@@Z
??0HFileNode@@QEAA@AEBV0@@Z
??0HFileNode@@QEAA@XZ
??0HFileReadWriter@@QEAA@AEBV0@@Z
??0HFileReadWriter@@QEAA@AEBVHString@@@Z
??0HFileReadWriter@@QEAA@XZ
??0HFileReader@@QEAA@AEBV0@@Z
??0HFileReader@@QEAA@AEBVHString@@@Z
??0HFileReader@@QEAA@XZ
??0HFileTime@@QEAA@XZ
??0HFileVersinSimple@@QEAA@$$QEAV0@@Z
??0HFileVersinSimple@@QEAA@AEBV0@@Z
??0HFileVersinSimple@@QEAA@XZ
??0HFileVersion2@@QEAA@$$QEAV0@@Z
??0HFileVersion2@@QEAA@AEBV0@@Z
??0HFileWriter@@QEAA@AEBV0@@Z
??0HFileWriter@@QEAA@AEBVHString@@@Z
??0HFileWriter@@QEAA@XZ
??0HGroupInfoGet@@QEAA@AEBV0@@Z
??0HGroupInfoGet@@QEAA@XZ
??0HHandle@@QEAA@PEAX@Z
??0HIPAddress@HNetworkUtil@@QEAA@$$QEAV01@@Z
??0HIPAddress@HNetworkUtil@@QEAA@AEBV01@@Z
??0HIPAddress@HNetworkUtil@@QEAA@XZ
??0HIPMacNode@@QEAA@$$QEAV0@@Z
??0HIPMacNode@@QEAA@AEBV0@@Z
??0HIPMacNode@@QEAA@XZ
??0HImpersonateLoggedOnUser@@QEAA@H_N@Z
??0HImpersonateSpecificProcess@@QEAA@K@Z
??0HIniFileHelper@@QEAA@AEBV0@@Z
??0HIniFileHelper@@QEAA@XZ
??0HIniFileNode@@QEAA@$$QEAV0@@Z
??0HIniFileNode@@QEAA@AEBV0@@Z
??0HIniFileNode@@QEAA@XZ
??0HIniKeyValue@@QEAA@$$QEAV0@@Z
??0HIniKeyValue@@QEAA@AEBV0@@Z
??0HIniKeyValue@@QEAA@XZ
??0HInsLocateMgr@@QEAA@AEBV0@@Z
??0HInsLocateMgr@@QEAA@XZ
??0HJsonObject@@QEAA@$$QEAV0@@Z
??0HJsonObject@@QEAA@AEBV0@@Z
??0HJsonObject@@QEAA@XZ
??0HJsonValue@@QEAA@$$QEAV0@@Z
??0HJsonValue@@QEAA@AEBV0@@Z
??0HJsonValue@@QEAA@XZ
??0HLanMgrStrMemNode@@QEAA@$$QEAV0@@Z
??0HLanMgrStrMemNode@@QEAA@AEBV0@@Z
??0HLanMgrStrMemNode@@QEAA@XZ
??0HLanMgrStrReplaceNode@@QEAA@$$QEAV0@@Z
??0HLanMgrStrReplaceNode@@QEAA@AEBV0@@Z
??0HLanMgrStrReplaceNode@@QEAA@XZ
??0HMZShareDataMgr@@AEAA@XZ
??0HMZShareDataMgr@@QEAA@AEBV0@@Z
??0HMZShareDataNode@@QEAA@$$QEAU0@@Z
??0HMZShareDataNode@@QEAA@AEBU0@@Z
??0HMsgBoxStream@@QEAA@$$QEAV0@@Z
??0HMsgBoxStream@@QEAA@AEBV0@@Z
??0HMsgBoxStream@@QEAA@XZ
??0HMutex@@QEAA@H@Z
??0HMutex@@QEAA@XZ
??0HMutexEx@@QEAA@AEBV0@@Z
??0HMutexEx@@QEAA@XZ
??0HNetParamNode@HNetworkUtil@@QEAA@$$QEAV01@@Z
??0HNetParamNode@HNetworkUtil@@QEAA@AEBV01@@Z
??0HNetParamNode@HNetworkUtil@@QEAA@XZ
??0HNetUserInfo@@QEAA@$$QEAV0@@Z
??0HNetUserInfo@@QEAA@AEBV0@@Z
??0HNetUserInfo@@QEAA@XZ
??0HNetwrokAdapterNode@HNetworkUtil@@QEAA@$$QEAV01@@Z
??0HNetwrokAdapterNode@HNetworkUtil@@QEAA@AEBV01@@Z
??0HNetwrokAdapterNode@HNetworkUtil@@QEAA@XZ
??0HNicIPV6Node@HNetworkUtil@@QEAA@$$QEAV01@@Z
??0HNicIPV6Node@HNetworkUtil@@QEAA@AEBV01@@Z
??0HNicIPV6Node@HNetworkUtil@@QEAA@XZ
??0HNoncopyable@@IEAA@XZ
??0HOSVersion@@QEAA@AEBV0@@Z
??0HOSVersion@@QEAA@XZ
??0HPECheckQueue@@QEAA@$$QEAU0@@Z
??0HPECheckQueue@@QEAA@AEBU0@@Z
??0HPerformanceAdapter@@QEAA@AEBV0@@Z
??0HPerformanceAdapter@@QEAA@XZ
??0HProcessMemoryUseStat@@QEAA@AEBV0@@Z
??0HProcessMemoryUseStat@@QEAA@AEBVHString@@I@Z
??0HProcessParam@HProcess@@QEAA@$$QEAV01@@Z
??0HProcessParam@HProcess@@QEAA@AEBV01@@Z
??0HProcessParam@HProcess@@QEAA@XZ
??0HRSACoder@@QEAA@$$QEAV0@@Z
??0HRSACoder@@QEAA@AEBV0@@Z
??0HRSACoder@@QEAA@XZ
??0HRSAGenKey@@QEAA@$$QEAV0@@Z
??0HRSAGenKey@@QEAA@AEBV0@@Z
??0HRSAGenKey@@QEAA@XZ
??0HRand@@QEAA@AEBV0@@Z
??0HRand@@QEAA@XZ
??0HRandSimple@@QEAA@XZ
??0HRegEdit@@QEAA@AEBV0@@Z
??0HRegEdit@@QEAA@XZ
??0HSM2@@QEAA@AEBV0@@Z
??0HSM2@@QEAA@XZ
??0HSM3@@QEAA@XZ
??0HSM4Decry@@QEAA@XZ
??0HSM4Encry@@QEAA@XZ
??0HSectorReadWrite@@QEAA@AEBV0@@Z
??0HSectorReadWrite@@QEAA@XZ
??0HString@@QEAA@AEBV0@@Z
??0HString@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0HString@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0HString@@QEAA@AEBV?$map@VHString@@V1@U?$less@VHString@@@std@@V?$allocator@U?$pair@$$CBVHString@@V1@@std@@@3@@std@@@Z
??0HString@@QEAA@AEBV?$set@VHString@@U?$less@VHString@@@std@@V?$allocator@VHString@@@3@@std@@@Z
??0HString@@QEAA@AEBV?$vector@VHString@@V?$allocator@VHString@@@std@@@std@@@Z
??0HString@@QEAA@D@Z
??0HString@@QEAA@E@Z
??0HString@@QEAA@HH@Z
??0HString@@QEAA@I@Z
??0HString@@QEAA@K@Z
??0HString@@QEAA@N@Z
??0HString@@QEAA@PEBD@Z
??0HString@@QEAA@PEBDH@Z
??0HString@@QEAA@PEBE@Z
??0HString@@QEAA@PEBX@Z
??0HString@@QEAA@PEB_W@Z
??0HString@@QEAA@PEB_WH@Z
??0HString@@QEAA@XZ
??0HString@@QEAA@_JH@Z
??0HString@@QEAA@_K@Z
??0HString@@QEAA@_N@Z
??0HString@@QEAA@_W@Z
??0HStringIgnoreCase@@QEAA@$$QEAV0@@Z
??0HStringIgnoreCase@@QEAA@AEBV0@@Z
??0HStringIgnoreCase@@QEAA@AEBVHString@@@Z
??0HStringIgnoreCase@@QEAA@PEB_W@Z
??0HStringIgnoreCase@@QEAA@XZ
??0HStringInt@@QEAA@$$QEAV0@@Z
??0HStringInt@@QEAA@AEBV0@@Z
??0HStringInt@@QEAA@AEBVHString@@H@Z
??0HStringInt@@QEAA@XZ
??0HStringPair@@QEAA@$$QEAV0@@Z
??0HStringPair@@QEAA@AEBV0@@Z
??0HStringPair@@QEAA@AEBVHString@@0@Z
??0HStringPair@@QEAA@XZ
??0HStringString@@QEAA@$$QEAV0@@Z
??0HStringString@@QEAA@AEBV0@@Z
??0HStringString@@QEAA@AEBVHString@@0@Z
??0HStringString@@QEAA@XZ
??0HTDelayExecCallBack@@QEAA@AEBV0@@Z
??0HTDelayExecCallBack@@QEAA@XZ
??0HTTimerExCallBack@@QEAA@AEBV0@@Z
??0HTTimerExCallBack@@QEAA@XZ
??0HThreadBase@@QEAA@AEBV0@@Z
??0HThreadBase@@QEAA@XZ
??0HThreadPool@@QEAA@XZ
??0HThreadSum@HIEUtil@@QEAA@XZ
??0HThreadTimerEx@@QEAA@AEBV0@@Z
??0HTimeSpace@@QEAA@XZ
??0HTimeValueEx@@QEAA@XZ
??0HUserMgr@@AEAA@XZ
??0HVarParam@@QEAA@$$QEAV0@@Z
??0HVarParam@@QEAA@AEBV0@@Z
??0HVarParam@@QEAA@XZ
??0LVAC1Decry@@QEAA@$$QEAV0@@Z
??0LVAC1Decry@@QEAA@AEBV0@@Z
??0LVAC1Decry@@QEAA@XZ
??0LVAC1Encry@@QEAA@$$QEAV0@@Z
??0LVAC1Encry@@QEAA@AEBV0@@Z
??0LVAC1Encry@@QEAA@XZ
??0LVAC1GenKey@@QEAA@$$QEAV0@@Z
??0LVAC1GenKey@@QEAA@AEBV0@@Z
??0LVAC1GenKey@@QEAA@XZ
??0LVHotPluginCallback@@QEAA@AEBV0@@Z
??0LVHotPluginCallback@@QEAA@XZ
??0LVHotPluginMgr@@QEAA@AEBV0@@Z
??0LVHotPluginMgr@@QEAA@XZ
??0LVSATAHotPluginMgr@@QEAA@AEBV0@@Z
??0LVSATAHotPluginMgr@@QEAA@XZ
??0MD5@HIEUtil@@QEAA@PEBEH@Z
??0MD5@HIEUtil@@QEAA@XZ
??0NullHandleException@HIEUtil@@QEAA@$$QEAV01@@Z
??0NullHandleException@HIEUtil@@QEAA@AEBV01@@Z
??0NullHandleException@HIEUtil@@QEAA@PEBDH@Z
??0RWRecMutex@HIEUtil@@QEAA@XZ
??0RecMutex@HIEUtil@@QEAA@XZ
??0SIBuffer@@QEAA@$$QEAV0@@Z
??0SIBuffer@@QEAA@AEBV0@@Z
??0SIBuffer@@QEAA@AEBVHString@@AEAVSIBufferData@@0H@Z
??0SIBuffer@@QEAA@AEBVHString@@AEAVSIBufferData@@H@Z
??0SIBuffer@@QEAA@XZ
??0SIBufferData@@QEAA@$$QEAV0@@Z
??0SIBufferData@@QEAA@AEBV0@@Z
??0SIBufferData@@QEAA@PEAD_JHH@Z
??0SIBufferDataNode@@QEAA@XZ
??0SICallInternal@@QEAA@$$QEAV0@@Z
??0SICallInternal@@QEAA@AEBV0@@Z
??0SICallInternal@@QEAA@XZ
??0SICallMgrInnerBroadCast@@QEAA@XZ
??0SICallParam@@QEAA@H@Z
??0SICallParam@@QEAA@HH@Z
??0SICallParam@@QEAA@HHH@Z
??0SICallParam@@QEAA@HHHHH@Z
??0SICallParam@@QEAA@XZ
??0SICallPerfCalcNode@@QEAA@$$QEAV0@@Z
??0SICallPerfCalcNode@@QEAA@AEBV0@@Z
??0SICallPerfCalcNode@@QEAA@XZ
??0SICallPerfCalcNodeCD@@QEAA@PEAVSICallPerfCalcNode@@@Z
??0SIClientAuthInfo@@QEAA@AEBV0@@Z
??0SIClientAuthInfo@@QEAA@XZ
??0SIClientClose@@QEAA@$$QEAV0@@Z
??0SIClientClose@@QEAA@AEBV0@@Z
??0SIClientClose@@QEAA@XZ
??0SIClientPacketDeal@@QEAA@XZ
??0SIClientRandPassword@@QEAA@$$QEAV0@@Z
??0SIClientRandPassword@@QEAA@AEBV0@@Z
??0SIClientRandPassword@@QEAA@XZ
??0SIClientRequest1@@QEAA@XZ
??0SIClientRequest2@@QEAA@$$QEAV0@@Z
??0SIClientRequest2@@QEAA@AEBV0@@Z
??0SIClientRequest2@@QEAA@XZ
??0SIClientRunningInfo@@QEAA@XZ
??0SIContext@@QEAA@$$QEAV0@@Z
??0SIContext@@QEAA@AEBV0@@Z
??0SIContext@@QEAA@XZ
??0SIFIleDlOneFileStatus@@QEAA@$$QEAV0@@Z
??0SIFIleDlOneFileStatus@@QEAA@AEBV0@@Z
??0SIFIleDlOneFileStatus@@QEAA@XZ
??0SIFIleDlTotalFilesStatus@@QEAA@XZ
??0SIFIleDonwloadServerCallback@@QEAA@$$QEAV0@@Z
??0SIFIleDonwloadServerCallback@@QEAA@AEBV0@@Z
??0SIFIleDonwloadServerCallback@@QEAA@XZ
??0SIFUAnsBegin@@QEAA@$$QEAV0@@Z
??0SIFUAnsBegin@@QEAA@AEBV0@@Z
??0SIFUAnsBegin@@QEAA@XZ
??0SIFUAnsUpload@@QEAA@$$QEAV0@@Z
??0SIFUAnsUpload@@QEAA@AEBV0@@Z
??0SIFUAnsUpload@@QEAA@XZ
??0SIFUReqBegin@@QEAA@$$QEAV0@@Z
??0SIFUReqBegin@@QEAA@AEBV0@@Z
??0SIFUReqBegin@@QEAA@XZ
??0SIFUReqUpload@@QEAA@$$QEAV0@@Z
??0SIFUReqUpload@@QEAA@AEBV0@@Z
??0SIFUReqUpload@@QEAA@XZ
??0SIFileDownloadClient@@QEAA@PEAVSITcpClient@@@Z
??0SIFileDownloadClientCallback@@QEAA@$$QEAV0@@Z
??0SIFileDownloadClientCallback@@QEAA@AEBV0@@Z
??0SIFileDownloadClientCallback@@QEAA@XZ
??0SIFileDownloadInterFaceI@@QEAA@$$QEAV0@@Z
??0SIFileDownloadInterFaceI@@QEAA@AEBV0@@Z
??0SIFileDownloadInterFaceI@@QEAA@XZ
??0SIFileDownloadParam@@QEAA@$$QEAV0@@Z
??0SIFileDownloadParam@@QEAA@AEBV0@@Z
??0SIFileDownloadParam@@QEAA@XZ
??0SIFileDownloadServer@@QEAA@PEAVSITcpServer@@@Z
??0SIFileDownloadServerAutoFileLock@@QEAA@AEBV0@@Z
??0SIFileDownloadServerAutoFileLock@@QEAA@PEAVSIFileDownloadServer@@AEBVHString@@@Z
??0SIIOClient@@QEAA@AEBV0@@Z
??0SIIOClient@@QEAA@XZ
??0SIIOClientCallBack@@QEAA@AEBV0@@Z
??0SIIOClientCallBack@@QEAA@XZ
??0SIIOSelect@@QEAA@AEBV0@@Z
??0SIIOSelect@@QEAA@XZ
??0SIIOServer@@QEAA@AEBV0@@Z
??0SIIOServer@@QEAA@XZ
??0SIIOServerCallBack@@QEAA@AEBV0@@Z
??0SIIOServerCallBack@@QEAA@XZ
??0SIInerFileDownLoadSimpleFileInfo@@QEAA@$$QEAV0@@Z
??0SIInerFileDownLoadSimpleFileInfo@@QEAA@AEBV0@@Z
??0SIInerFileDownLoadSimpleFileInfo@@QEAA@XZ
??0SIInerFileDownLoadSimpleFileInfoVT@@QEAA@$$QEAV0@@Z
??0SIInerFileDownLoadSimpleFileInfoVT@@QEAA@AEBV0@@Z
??0SIInerFileDownLoadSimpleFileInfoVT@@QEAA@XZ
??0SIInnerApplicationCallback@@QEAA@$$QEAV0@@Z
??0SIInnerApplicationCallback@@QEAA@AEBV0@@Z
??0SIInnerFIleDownLoadDirParam@@QEAA@$$QEAV0@@Z
??0SIInnerFIleDownLoadDirParam@@QEAA@AEBV0@@Z
??0SIInnerFIleDownLoadDirParam@@QEAA@XZ
??0SIInnerFileChangeInfoNode@@QEAA@$$QEAV0@@Z
??0SIInnerFileChangeInfoNode@@QEAA@AEBV0@@Z
??0SIInnerFileChangeInfoNode@@QEAA@XZ
??0SIInnerFileChangeInfoNodeVT@@QEAA@$$QEAV0@@Z
??0SIInnerFileChangeInfoNodeVT@@QEAA@AEBV0@@Z
??0SIInnerFileChangeInfoNodeVT@@QEAA@XZ
??0SIInnerFileDownLoadFileParam@@QEAA@$$QEAV0@@Z
??0SIInnerFileDownLoadFileParam@@QEAA@AEBV0@@Z
??0SIInnerFileDownLoadFileParam@@QEAA@XZ
??0SIInnerFileDownLoadRet@@QEAA@XZ
??0SIInnerFileDownloadInterFace@@QEAA@$$QEAV0@@Z
??0SIInnerFileDownloadInterFace@@QEAA@AEBV0@@Z
??0SIInnerFileDownloadInterFace@@QEAA@XZ
??0SIInnerFileDownloadInterFaceCallback@@QEAA@PEAVSITcpServer@@@Z
??0SIInnerFileDownloadInterFaceClient@@QEAA@PEAVSITcpClient@@@Z
??0SIInnerLog@@QEAA@AEBV0@@Z
??0SIInnerLog@@QEAA@AEBVSIInnerLogParam@@@Z
??0SIInnerLog@@QEAA@XZ
??0SIInnerLogParam@@QEAA@AEBV0@@Z
??0SIInnerLogParam@@QEAA@XZ
??0SIInterfaceCallback@@QEAA@AEBV0@@Z
??0SIInterfaceCallback@@QEAA@XZ
??0SIJson@@QEAA@$$QEAV0@@Z
??0SIJson@@QEAA@AEBV0@@Z
??0SIJson@@QEAA@AEBVHString@@0H@Z
??0SIJson@@QEAA@XZ
??0SIPerSocket@@QEAA@AEBV0@@Z
??0SIRunningInfo@@QEAA@$$QEAV0@@Z
??0SIRunningInfo@@QEAA@AEBV0@@Z
??0SIRunningInfo@@QEAA@XZ
??0SIServerPacketDeal@@QEAA@AEBV0@@Z
??0SIServerPacketDeal@@QEAA@XZ
??0SIServerRecvBufferMgrV2@@QEAA@AEBV0@@Z
??0SIServerRecvBufferMgrV2@@QEAA@XZ
??0SIServerResponse1@@QEAA@$$QEAV0@@Z
??0SIServerResponse1@@QEAA@AEBV0@@Z
??0SIServerResponse1@@QEAA@XZ
??0SIServerResponse2@@QEAA@$$QEAV0@@Z
??0SIServerResponse2@@QEAA@AEBV0@@Z
??0SIServerResponse2@@QEAA@XZ
??0SITCCallback@@QEAA@AEBV0@@Z
??0SITCCallback@@QEAA@XZ
??0SITCFSUserParam@@QEAA@XZ
??0SITCUserParam@@QEAA@$$QEAV0@@Z
??0SITCUserParam@@QEAA@AEBV0@@Z
??0SITCUserParam@@QEAA@XZ
??0SITCUserShortLinkParam@@QEAA@XZ
??0SITSCallback@@QEAA@AEBV0@@Z
??0SITSCallback@@QEAA@XZ
??0SITSUserParam@@QEAA@$$QEAV0@@Z
??0SITSUserParam@@QEAA@AEBV0@@Z
??0SITSUserParam@@QEAA@XZ
??0SITcpClient@@QEAA@XZ
??0SITcpServer@@QEAA@XZ
??0SIUploadFileParams@@QEAA@$$QEAV0@@Z
??0SIUploadFileParams@@QEAA@AEBV0@@Z
??0SIUploadFileParams@@QEAA@XZ
??0SIUserFileDownLoadLocalDetailInfo@@QEAA@$$QEAV0@@Z
??0SIUserFileDownLoadLocalDetailInfo@@QEAA@AEBV0@@Z
??0SIUserFileDownLoadLocalDetailInfo@@QEAA@XZ
??0SIUserFileDownLoadLocalDetailInfoVT@@QEAA@$$QEAV0@@Z
??0SIUserFileDownLoadLocalDetailInfoVT@@QEAA@AEBV0@@Z
??0SIUserFileDownLoadLocalDetailInfoVT@@QEAA@XZ
??0Shared@HIEUtil@@QEAA@XZ
??0SimpleShared@HIEUtil@@QEAA@XZ
??0SmarticeFileUpload@@QEAA@$$QEAV0@@Z
??0SmarticeFileUpload@@QEAA@AEBV0@@Z
??0SmarticeFileUpload@@QEAA@XZ
??0SmarticeFileUploadCallback@@QEAA@PEAVSITcpServer@@@Z
??0SmarticeFileUploadClient@@QEAA@PEAVSITcpClient@@@Z
??0SmarticeFileUploadServerCallback@@QEAA@AEBV0@@Z
??0SmarticeFileUploadServerCallback@@QEAA@XZ
??0SpecificUserToken@@QEAA@K@Z
??0Thread@HIEUtil@@QEAA@XZ
??0ThreadControl@HIEUtil@@QEAA@AEBV01@@Z
??0ThreadControl@HIEUtil@@QEAA@AEBV?$Handle@UHandleWrapper@HIEUtil@@@1@I@Z
??0ThreadControl@HIEUtil@@QEAA@XZ
??0ThreadLockedException@HIEUtil@@QEAA@$$QEAV01@@Z
??0ThreadLockedException@HIEUtil@@QEAA@AEBV01@@Z
??0ThreadLockedException@HIEUtil@@QEAA@PEBDH@Z
??0ThreadNotStartedException@HIEUtil@@QEAA@$$QEAV01@@Z
??0ThreadNotStartedException@HIEUtil@@QEAA@AEBV01@@Z
??0ThreadNotStartedException@HIEUtil@@QEAA@PEBDH@Z
??0ThreadStartedException@HIEUtil@@QEAA@$$QEAV01@@Z
??0ThreadStartedException@HIEUtil@@QEAA@AEBV01@@Z
??0ThreadStartedException@HIEUtil@@QEAA@PEBDH@Z
??0ThreadSyscallException@HIEUtil@@QEAA@$$QEAV01@@Z
??0ThreadSyscallException@HIEUtil@@QEAA@AEBV01@@Z
??0ThreadSyscallException@HIEUtil@@QEAA@PEBDHH@Z
??0Time@HIEUtil@@AEAA@_J@Z
??0Time@HIEUtil@@QEAA@XZ
??0UUIDGenerationException@HIEUtil@@QEAA@$$QEAV01@@Z
??0UUIDGenerationException@HIEUtil@@QEAA@AEBV01@@Z
??0UUIDGenerationException@HIEUtil@@QEAA@PEBDH@Z
??0UniARCArrayBytes@@QEAA@XZ
??0UniARCJsonReader@@QEAA@AEBV0@@Z
??0UniARCJsonReader@@QEAA@AEBVHString@@PEBV0@@Z
??0UniARCJsonValue@@QEAA@AEBV0@@Z
??0UniARCJsonValue@@QEAA@AEBVHString@@@Z
??0UniARCJsonValue@@QEAA@N@Z
??0UniARCJsonValue@@QEAA@XZ
??0UniARCJsonValue@@QEAA@_J@Z
??0UniARCJsonValue@@QEAA@_N@Z
??0UniARCJsonWriter@@QEAA@$$QEAV0@@Z
??0UniARCJsonWriter@@QEAA@AEBV0@@Z
??0UniARCJsonWriter@@QEAA@_N0@Z
??0UniARCReader@@QEAA@AEBV0@@Z
??0UniARCReader@@QEAA@XZ
??0UniARCWriter@@QEAA@AEBV0@@Z
??0UniARCWriter@@QEAA@H@Z
??0UniARCWriter@@QEAA@XZ
??1BSEIntString@@QEAA@XZ
??1BSParseString@@QEAA@XZ
??1Cond@HIEUtil@@QEAA@XZ
??1CurrentUserToken@@QEAA@XZ
??1Exception@HIEUtil@@UEAA@XZ
??1HARPTable@@QEAA@XZ
??1HAccountInfoCreate@@QEAA@XZ
??1HAccountInfoGet@@QEAA@XZ
??1HAccountInfoGetEx@@QEAA@XZ
??1HAgentAcountMgr@@QEAA@XZ
??1HAppUUID@@QEAA@XZ
??1HArpNode@@QEAA@XZ
??1HAutoEWFMgr@@QEAA@XZ
??1HAutoMutex@@QEAA@XZ
??1HAutoMutexEx2@@QEAA@XZ
??1HAutoMutexEx@@QEAA@XZ
??1HBasicEnum@@QEAA@XZ
??1HBigInt@@QEAA@XZ
??1HBsSamYi@@QEAA@XZ
??1HCmdParser@@QEAA@XZ
??1HDVReadNode@@QEAA@XZ
??1HDbgView@@QEAA@XZ
??1HDirSnap@@QEAA@XZ
??1HDiskInfo@HUtilEx@@QEAA@XZ
??1HDiskInfoEx@HLogicalDisk@@QEAA@XZ
??1HDynSysAPICall@@QEAA@XZ
??1HDynamicFnBase@@QEAA@XZ
??1HEvent@@QEAA@XZ
??1HEventEx@@QEAA@XZ
??1HFileBase@@QEAA@XZ
??1HFileDownloadCallBack@HProcess@@UEAA@XZ
??1HFileLog@@QEAA@XZ
??1HFileMap@@UEAA@XZ
??1HFileNode@@QEAA@XZ
??1HFileReadWriter@@QEAA@XZ
??1HFileReader@@QEAA@XZ
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 721KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Shared Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ