D:\Output\NetCopy2\Release\NetCopy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-09_ffd14891320a3971f9915c82d3de6da4_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-09_ffd14891320a3971f9915c82d3de6da4_mafia.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-09_ffd14891320a3971f9915c82d3de6da4_mafia
-
Size
3.6MB
-
MD5
ffd14891320a3971f9915c82d3de6da4
-
SHA1
739512ea3a4e690c68dd154a6e4e66f44be7a8cc
-
SHA256
7596b7db23102c806efb97df132bb8c7faf443725df5d1e7bc0cf34a9cef7676
-
SHA512
7a30a2a419bf9fde00a9cbfb1729a177893886550bb9dac2dd7e1a85ca6cdfdb60cdaf3c7428621cc85fe0ffa02cc9cbab69462e61197828272e25a7f94ce99b
-
SSDEEP
49152:sm8CGs4YEvhDiLXq/jCwuvi7XRYiTWTKOj/One8knPTheUy9op7vxTbM6DrzXkTw:58ds4YaM5a7XRr6KOj/j8knTjw6Dnil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-09_ffd14891320a3971f9915c82d3de6da4_mafia
Files
-
2024-04-09_ffd14891320a3971f9915c82d3de6da4_mafia.exe windows:5 windows x86 arch:x86
47c19271e24de2eaf0903ad5f5b78a67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetVersionExA
RtlCaptureStackBackTrace
WinExec
GetSystemInfo
GetCurrentProcessId
InterlockedCompareExchange
InterlockedExchange
InterlockedExchangeAdd
SetLocalTime
GlobalMemoryStatusEx
GetNativeSystemInfo
FindFirstFileA
FindNextFileA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
TerminateThread
SetThreadPriority
SuspendThread
ResumeThread
WaitForSingleObject
DeleteCriticalSection
CreateMutexA
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
SetEvent
PulseEvent
ResetEvent
WaitForMultipleObjectsEx
WaitForMultipleObjects
CreateProcessA
CreatePipe
SetComputerNameA
SetFirmwareEnvironmentVariableA
GetFirmwareEnvironmentVariableA
MoveFileA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
SetEndOfFile
GetTempPathA
FreeLibrary
SetFilePointerEx
GetVolumeInformationA
GetDiskFreeSpaceExA
FileTimeToSystemTime
RtlUnwind
DecodePointer
EncodePointer
RaiseException
GetModuleHandleW
CopyFileW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetFileSize
GetFileAttributesW
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetFullPathNameW
CreateDirectoryW
RemoveDirectoryW
MoveFileW
InterlockedDecrement
InterlockedIncrement
ExitThread
CreateThread
GetDriveTypeA
FindFirstFileExA
GetTimeFormatA
GetDateFormatA
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStdHandle
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetHandleCount
GetFileType
GetCPInfo
GetOEMCP
IsValidCodePage
FatalAppExitA
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetExitCodeProcess
CompareStringW
CreateProcessW
SetFilePointer
DeleteFileW
SetFileAttributesW
CreateFileW
WriteFile
GetCurrentProcess
FlushFileBuffers
DeviceIoControl
DefineDosDeviceA
GetLogicalDriveStringsA
lstrlenA
CreateFileA
GetModuleFileNameA
lstrcpynW
lstrcpyW
GlobalMemoryStatus
HeapCompact
HeapSize
lstrlenW
GetLocalTime
GetFileAttributesA
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetComputerNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
GetProcAddress
ReadFile
GetCurrentDirectoryA
SetCurrentDirectoryA
MulDiv
CreateToolhelp32Snapshot
Process32First
Process32Next
HeapReAlloc
UnmapViewOfFile
CloseHandle
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
SetLastError
GetLastError
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetProcessHeap
GetTickCount
Sleep
OutputDebugStringA
IsDebuggerPresent
ExitProcess
DebugBreak
ws2_32
bind
htons
setsockopt
WSASocketA
ioctlsocket
select
getsockopt
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAResetEvent
WSACloseEvent
shutdown
send
sendto
recvfrom
recv
socket
listen
accept
connect
ntohs
WSAGetLastError
inet_addr
WSACreateEvent
WSAStartup
inet_ntoa
closesocket
getpeername
ntohl
htonl
dbghelp
SymFromAddr
SymInitialize
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
user32
GetLastActivePopup
GetActiveWindow
wsprintfA
ExitWindowsEx
PostQuitMessage
SetActiveWindow
SetRect
SetWindowRgn
MessageBeep
SetForegroundWindow
WindowFromPoint
MessageBoxA
PostThreadMessageA
FillRect
GetSysColor
IsIconic
OpenIcon
BringWindowToTop
CopyIcon
CreateIconIndirect
DestroyIcon
SetWindowTextW
KillTimer
DefWindowProcA
RegisterClassExA
SetTimer
ClientToScreen
SetCapture
ReleaseCapture
GetUpdateRgn
ValidateRgn
SetFocus
GetAsyncKeyState
GetKeyState
SetCursor
InvalidateRect
DefWindowProcW
LoadIconA
LoadCursorA
RegisterClassExW
RegisterWindowMessageW
CreateWindowExW
GetWindowRect
SetWindowLongA
SetWindowPos
GetWindowLongA
AdjustWindowRectEx
GetSystemMetrics
GetKeyboardLayout
IsWindow
ChangeClipboardChain
CreateWindowExA
SendMessageA
SetClipboardViewer
IsClipboardFormatAvailable
GetClipboardData
GetDC
ReleaseDC
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetCursorPos
SystemParametersInfoA
PeekMessageA
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
MapWindowPoints
GetWindow
GetClipboardOwner
GetWindowLongW
CallWindowProcA
SendMessageW
DestroyWindow
GetParent
GetForegroundWindow
PostMessageA
ShowWindow
gdi32
CreateSolidBrush
RealizePalette
SelectPalette
CreatePalette
GetStockObject
CreateFontA
GetTextExtentPoint32W
DeleteObject
CombineRgn
PlayEnhMetaFile
CreatePen
SelectObject
GetTextMetricsA
LPtoDP
GetDCOrgEx
OffsetRgn
EnumFontFamiliesW
GetGlyphOutlineW
GetCharacterPlacementW
DPtoLP
TextOutW
CreatePolygonRgn
LineTo
MoveToEx
SetPixel
Polygon
SelectClipRgn
RectInRegion
GetRgnBox
EqualRgn
BitBlt
CreateCompatibleDC
SetWorldTransform
ModifyWorldTransform
GetWorldTransform
GetDIBits
CreateDCA
ExtCreatePen
Polyline
PolyPolygon
Arc
Pie
StretchDIBits
ExtCreateRegion
SetTextAlign
SetBkMode
CreateDIBSection
CreateBitmap
CreateRectRgn
UpdateColors
CreateCompatibleBitmap
SaveDC
SetDIBitsToDevice
DeleteDC
GetEnhMetaFileHeader
SetTextColor
GdiFlush
GetDeviceCaps
RestoreDC
advapi32
LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges
RegOpenKeyW
RegQueryValueExW
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
DragQueryFileW
ole32
OleInitialize
RegisterDragDrop
OleUninitialize
DoDragDrop
ReleaseStgMedium
CoCreateGuid
comctl32
_TrackMouseEvent
iphlpapi
GetIfTable
GetAdaptersInfo
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
Exports
Exports
??0?$CFxArray@IABIU?$mem_cmp@I@@@@QAE@XZ
??0?$CFxArray@KABKU?$mem_cmp@K@@@@QAE@XZ
??0?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAE@XZ
??0?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAE@XZ
??0?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAE@XZ
??0?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAE@XZ
??0?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@QAE@XZ
??0CFxApp@@QAE@ABV0@@Z
??0CFxApp@@QAE@PBD0K@Z
??0CFxBase64@@QAE@ABV0@@Z
??0CFxBase64@@QAE@XZ
??0CFxCPU@@QAE@ABV0@@Z
??0CFxCPU@@QAE@XZ
??0CFxCriticalSection@@QAE@ABV0@@Z
??0CFxCriticalSection@@QAE@KPBD@Z
??0CFxDir@@QAE@ABV0@@Z
??0CFxDir@@QAE@XZ
??0CFxDisk@@QAE@ABV0@@Z
??0CFxDisk@@QAE@XZ
??0CFxEvent@@QAE@ABV0@@Z
??0CFxEvent@@QAE@HHPBD@Z
??0CFxFifo@@QAE@ABV0@@Z
??0CFxFifo@@QAE@XZ
??0CFxFile@@QAE@ABV0@@Z
??0CFxFile@@QAE@PBDI@Z
??0CFxFile@@QAE@XZ
??0CFxFileInfo@@QAE@ABV0@@Z
??0CFxFileInfo@@QAE@PBD@Z
??0CFxFunProxy@@QAE@ABV0@@Z
??0CFxFunProxy@@QAE@H@Z
??0CFxHandleBase@@QAE@ABV0@@Z
??0CFxHandleBase@@QAE@I@Z
??0CFxIniFile@@QAE@ABV0@@Z
??0CFxIniFile@@QAE@PBD@Z
??0CFxLog@@QAE@ABV0@@Z
??0CFxLog@@QAE@XZ
??0CFxMutex@@QAE@ABV0@@Z
??0CFxMutex@@QAE@HPBD@Z
??0CFxNetCard@@QAE@ABV0@@Z
??0CFxNetCard@@QAE@XZ
??0CFxObject@@QAE@ABV0@@Z
??0CFxObject@@QAE@XZ
??0CFxSemaphore@@QAE@ABV0@@Z
??0CFxSemaphore@@QAE@JJPBD@Z
??0CFxSocket@@QAE@ABI@Z
??0CFxSocket@@QAE@ABV0@@Z
??0CFxSocket@@QAE@XZ
??0CFxSocketDgram@@QAE@ABV0@@Z
??0CFxSocketDgram@@QAE@XZ
??0CFxSocketStream@@QAE@ABV0@@Z
??0CFxSocketStream@@QAE@XZ
??0CFxString@@QAE@ABUFX_MAC@@@Z
??0CFxString@@QAE@ABU_GUID@@@Z
??0CFxString@@QAE@ABV0@@Z
??0CFxString@@QAE@D@Z
??0CFxString@@QAE@PBD@Z
??0CFxString@@QAE@PB_W@Z
??0CFxString@@QAE@XZ
??0CFxSyncObject@@QAE@ABV0@@Z
??0CFxSyncObject@@QAE@XZ
??0CFxThread@@QAE@ABV0@@Z
??0CFxThread@@QAE@XZ
??0CFxTime@@QAE@ABU_SYSTEMTIME@@H@Z
??0CFxTime@@QAE@ABV0@@Z
??0CFxTime@@QAE@GGH@Z
??0CFxTime@@QAE@HHHHHHH@Z
??0CFxTime@@QAE@XZ
??0CFxTime@@QAE@_J@Z
??0CFxTimeSpan@@QAE@XZ
??0CFxUnknown@@QAE@ABV0@@Z
??0CFxUnknown@@QAE@PBU_GUID@@H@Z
??0CLuaBuffer@@QAE@ABV0@@Z
??0CLuaBuffer@@QAE@K@Z
??0CLuaBuffer@@QAE@XZ
??0CLuaGUID@@QAE@PAUFX_BUFFER@@@Z
??0CLuaGUID@@QAE@PBD@Z
??0CLuaGUID@@QAE@XZ
??0CLuaMAC@@QAE@PAUFX_BUFFER@@@Z
??0CLuaMAC@@QAE@PBD@Z
??0CLuaMAC@@QAE@XZ
??0CLuaSystemTime@@QAE@GGGGGG@Z
??0CLuaSystemTime@@QAE@PAUFX_BUFFER@@@Z
??0CLuaSystemTime@@QAE@XZ
??0CLuaULARGE_INTEGER@@QAE@ABV0@@Z
??0CLuaULARGE_INTEGER@@QAE@KK@Z
??0CLuaULARGE_INTEGER@@QAE@PBD@Z
??0CLuaULARGE_INTEGER@@QAE@XZ
??1?$CFxArray@IABIU?$mem_cmp@I@@@@QAE@XZ
??1?$CFxArray@KABKU?$mem_cmp@K@@@@QAE@XZ
??1?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAE@XZ
??1?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAE@XZ
??1?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAE@XZ
??1?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAE@XZ
??1?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@QAE@XZ
??1CFxApp@@UAE@XZ
??1CFxBase64@@UAE@XZ
??1CFxCPU@@UAE@XZ
??1CFxCriticalSection@@UAE@XZ
??1CFxDir@@UAE@XZ
??1CFxDisk@@UAE@XZ
??1CFxEvent@@UAE@XZ
??1CFxFifo@@UAE@XZ
??1CFxFile@@UAE@XZ
??1CFxFileInfo@@UAE@XZ
??1CFxFunProxy@@UAE@XZ
??1CFxHandleBase@@UAE@XZ
??1CFxIniFile@@UAE@XZ
??1CFxLog@@UAE@XZ
??1CFxMutex@@UAE@XZ
??1CFxNetCard@@UAE@XZ
??1CFxObject@@UAE@XZ
??1CFxSemaphore@@UAE@XZ
??1CFxSocket@@UAE@XZ
??1CFxSocketDgram@@UAE@XZ
??1CFxSocketStream@@UAE@XZ
??1CFxString@@QAE@XZ
??1CFxSyncObject@@UAE@XZ
??1CFxThread@@UAE@XZ
??1CFxTime@@UAE@XZ
??1CFxTimeSpan@@UAE@XZ
??1CFxUnknown@@UAE@XZ
??1CLuaBuffer@@UAE@XZ
??1CLuaULARGE_INTEGER@@QAE@XZ
??4?$CFxArray@IABIU?$mem_cmp@I@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@KABKU?$mem_cmp@K@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAEAAV0@ABV0@@Z
??4?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@QAEAAV0@ABV0@@Z
??4CFxApp@@QAEAAV0@ABV0@@Z
??4CFxBase64@@QAEAAV0@ABV0@@Z
??4CFxCPU@@QAEAAV0@ABV0@@Z
??4CFxCriticalSection@@QAEAAV0@ABV0@@Z
??4CFxDir@@QAEAAV0@ABV0@@Z
??4CFxDisk@@QAEAAV0@ABV0@@Z
??4CFxEvent@@QAEAAV0@ABV0@@Z
??4CFxFifo@@QAEAAV0@ABV0@@Z
??4CFxFile@@QAEAAV0@ABV0@@Z
??4CFxFileInfo@@QAEAAV0@ABV0@@Z
??4CFxFunProxy@@QAEAAV0@ABV0@@Z
??4CFxHandleBase@@QAEAAV0@ABV0@@Z
??4CFxIniFile@@QAEAAV0@ABV0@@Z
??4CFxLog@@QAEAAV0@ABV0@@Z
??4CFxMutex@@QAEAAV0@ABV0@@Z
??4CFxNetCard@@QAEAAV0@ABV0@@Z
??4CFxObject@@QAEAAV0@ABV0@@Z
??4CFxSemaphore@@QAEAAV0@ABV0@@Z
??4CFxSocket@@QAEAAV0@ABV0@@Z
??4CFxSocket@@QAEABV0@ABI@Z
??4CFxSocketDgram@@QAEAAV0@ABV0@@Z
??4CFxSocketStream@@QAEAAV0@ABV0@@Z
??4CFxString@@QAEABV0@ABUFX_MAC@@@Z
??4CFxString@@QAEABV0@ABU_GUID@@@Z
??4CFxString@@QAEABV0@ABV0@@Z
??4CFxString@@QAEABV0@D@Z
??4CFxString@@QAEABV0@PBD@Z
??4CFxString@@QAEABV0@PB_W@Z
??4CFxSyncObject@@QAEAAV0@ABV0@@Z
??4CFxThread@@QAEAAV0@ABV0@@Z
??4CFxTime@@QAEABV0@ABV0@@Z
??4CFxTime@@QAEABV0@_J@Z
??4CFxUnknown@@QAEAAV0@ABV0@@Z
??4CLuaBuffer@@QAEABV0@ABUFX_BUFFER@@@Z
??4CLuaBuffer@@QAEABV0@ABV0@@Z
??4CLuaBuffer@@QAEABV0@PAUFX_BUFFER@@@Z
??4CLuaGUID@@QAEABV0@ABU_GUID@@@Z
??4CLuaGUID@@QAEABV0@ABV0@@Z
??4CLuaGUID@@QAEABV0@PAU_GUID@@@Z
??4CLuaMAC@@QAEABV0@ABUFX_MAC@@@Z
??4CLuaMAC@@QAEABV0@ABV0@@Z
??4CLuaMAC@@QAEABV0@PAUFX_MAC@@@Z
??4CLuaSystemTime@@QAEABV0@ABU_SYSTEMTIME@@@Z
??4CLuaSystemTime@@QAEABV0@ABV0@@Z
??4CLuaSystemTime@@QAEABV0@PAU_SYSTEMTIME@@@Z
??4CLuaULARGE_INTEGER@@QAEAAV0@ABV0@@Z
??8@YG_NABVCFxString@@0@Z
??8@YG_NABVCFxString@@PBD@Z
??8@YG_NPBDABVCFxString@@@Z
??9@YG_NABVCFxString@@0@Z
??9@YG_NABVCFxString@@PBD@Z
??9@YG_NPBDABVCFxString@@@Z
??A?$CFxArray@IABIU?$mem_cmp@I@@@@QAEAAIH@Z
??A?$CFxArray@KABKU?$mem_cmp@K@@@@QAEAAKH@Z
??A?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAEAAPAUDISK_INFO@@H@Z
??A?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@QBE?AUFX_FORMAT_ARGV@@H@Z
??A?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAEAAUFX_PART_BASE_INFO@@H@Z
??A?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAEAAULOCKED_VOL@@H@Z
??A?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAEAAUsockaddr_in@@H@Z
??ACFxString@@QBEDH@Z
??BCFxCriticalSection@@QAEPAXXZ
??BCFxEvent@@QAEPAXXZ
??BCFxFile@@QBEPAXXZ
??BCFxMutex@@QAEPAXXZ
??BCFxSocket@@QAEIXZ
??BCFxString@@QBEPBDXZ
??BCFxThread@@QAEPAXXZ
??H@YA?AVCFxString@@ABV0@0@Z
??H@YA?AVCFxString@@ABV0@D@Z
??H@YA?AVCFxString@@ABV0@PBD@Z
??H@YA?AVCFxString@@DABV0@@Z
??H@YA?AVCFxString@@PBDABV0@@Z
??YCFxString@@QAEABV0@ABV0@@Z
??YCFxString@@QAEABV0@D@Z
??YCFxString@@QAEABV0@PBD@Z
??_7CFxApp@@6B@
??_7CFxBase64@@6B@
??_7CFxCPU@@6B@
??_7CFxCriticalSection@@6BCFxHandleBase@@@
??_7CFxCriticalSection@@6BCFxSyncObject@@@
??_7CFxDir@@6B@
??_7CFxDisk@@6B@
??_7CFxEvent@@6BCFxHandleBase@@@
??_7CFxEvent@@6BCFxSyncObject@@@
??_7CFxFifo@@6B@
??_7CFxFile@@6B@
??_7CFxFileInfo@@6B@
??_7CFxFunProxy@@6B@
??_7CFxHandleBase@@6B@
??_7CFxIniFile@@6B@
??_7CFxLog@@6B@
??_7CFxMutex@@6BCFxHandleBase@@@
??_7CFxMutex@@6BCFxSyncObject@@@
??_7CFxNetCard@@6B@
??_7CFxObject@@6B@
??_7CFxSemaphore@@6B@
??_7CFxSocket@@6B@
??_7CFxSocketDgram@@6B@
??_7CFxSocketStream@@6B@
??_7CFxSyncObject@@6B@
??_7CFxThread@@6B@
??_7CFxTime@@6B@
??_7CFxTimeSpan@@6B@
??_7CFxUnknown@@6B@
??_7CLuaBuffer@@6B@
??_FCFxApp@@QAEXXZ
??_FCFxCriticalSection@@QAEXXZ
??_FCFxEvent@@QAEXXZ
??_FCFxIniFile@@QAEXXZ
??_FCFxMutex@@QAEXXZ
??_FCFxSemaphore@@QAEXXZ
??_FCFxUnknown@@QAEXXZ
?A2MACEX@@YA?AUFX_MAC@@PBDD@Z
?Accept@CFxSocketStream@@UAEIAAUsockaddr_in@@@Z
?Add64@CLuaULARGE_INTEGER@@QAEXPBT_ULARGE_INTEGER@@@Z
?Add@?$CFxArray@IABIU?$mem_cmp@I@@@@QAEHABI@Z
?Add@?$CFxArray@KABKU?$mem_cmp@K@@@@QAEHABK@Z
?Add@?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAEHABQAUDISK_INFO@@@Z
?Add@?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@QAEHABUFX_FORMAT_ARGV@@@Z
?Add@?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAEHABUFX_PART_BASE_INFO@@@Z
?Add@?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAEHABULOCKED_VOL@@@Z
?Add@?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAEHABUsockaddr_in@@@Z
?Add@?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@QAEHABVCFxString@@@Z
?Add@CLuaULARGE_INTEGER@@QAEXK@Z
?AddGroup@CFxSocketDgram@@UAEHK@Z
?AddGroup@CFxSocketDgram@@UAEHKG@Z
?AddRef@CFxUnknown@@QAEKXZ
?AllocBuf@CFxString@@IAEXH@Z
?Attach@CFxSocket@@UAEXI@Z
?Atti@CFxString@@IAEXPAD@Z
?BinSearch@CFxBase64@@CAHD@Z
?ClearDir@CFxDir@@SAHPBDH@Z
?Close@CFxFifo@@UAEXXZ
?Close@CFxFile@@UAEXXZ
?Close@CFxIniFile@@QAEXXZ
?CloseSocket@CFxSocket@@UAEXXZ
?CloseSocket@CFxSocketDgram@@UAEXXZ
?CloseSocket@CFxSocketStream@@UAEXXZ
?Compare@CFxString@@QBEHPBD@Z
?CompareNoCase@CFxString@@QBEHPBD@Z
?Connect@CFxSocketStream@@UAEHKG@Z
?CreateDir@CFxDir@@SAHPBDH@Z
?CreateSocket@CFxSocket@@UAEHGKH@Z
?CreateSocket@CFxSocketDgram@@UAEHGKH@Z
?CreateSocket@CFxSocketStream@@UAEHGKH@Z
?CreateTempFile@CFxFile@@QAEHPBDH@Z
?Del@CFxIniFile@@QAEHPBD0@Z
?Del@CFxIniFile@@QAEHPBD@Z
?DelDir@CFxDir@@SAHPBDHH@Z
?Delete@CFxString@@QAEHHH@Z
?Destory@CFxDisk@@UAEXXZ
?Destory@CFxNetCard@@UAEXXZ
?Div64@CLuaULARGE_INTEGER@@QAEXPBT_ULARGE_INTEGER@@@Z
?Div@CLuaULARGE_INTEGER@@QAEXK@Z
?DoExitOS@CFxApp@@UAEHK@Z
?DoMessageBox@CFxApp@@UAEHPBDI0I@Z
?DropGroup@CFxSocketDgram@@UAEHXZ
?Dump4Read@CLuaBuffer@@QAEHPAUFX_BUFFER@@@Z
?Dump@CLuaBuffer@@QAEHPAUFX_BUFFER@@@Z
?ElementAt@?$CFxArray@IABIU?$mem_cmp@I@@@@QAEAAIH@Z
?ElementAt@?$CFxArray@KABKU?$mem_cmp@K@@@@QAEAAKH@Z
?ElementAt@?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QAEAAPAUDISK_INFO@@H@Z
?ElementAt@?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QAEAAUFX_PART_BASE_INFO@@H@Z
?ElementAt@?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QAEAAULOCKED_VOL@@H@Z
?ElementAt@?$CFxArray@Usockaddr_in@@ABU1@U?$mem_cmp@Usockaddr_in@@@@@@QAEAAUsockaddr_in@@H@Z
?Empty@CFxString@@QAEXXZ
?Enable@CFxNetCard@@UAEHIH@Z
?EnableLog@CFxLog@@UAEHPBDK@Z
?EventSelect@CFxSocketDgram@@UAEHJ@Z
?ExitInstance@CFxApp@@UAEHXZ
?FinalRelease@CFxUnknown@@UAEXXZ
?Find@CFxString@@QBEHD@Z
?Find@CFxString@@QBEHDH@Z
?Find@CFxString@@QBEHPBD@Z
?Find@CFxString@@QBEHPBDH@Z
?FindFile@CFxDir@@SA?AVCFxString@@IPBDPAI@Z
?FindFileInDir@CFxDir@@SA?AVCFxString@@AAV1@PBD1@Z
?FindOneOf@CFxString@@QBEHPBD@Z
?Fix@CFxDir@@SAPADPAD@Z
?Flush@CFxFile@@UAEHXZ
?Flush@CFxIniFile@@AAEHXZ
?Format@CFxString@@QAAXIZZ
?Format@CFxString@@QAAXPBDZZ
?Format@CFxTime@@QBE?AVCFxString@@I@Z
?Format@CFxTime@@QBE?AVCFxString@@PBD@Z
?Format@CFxTimeSpan@@QBE?AVCFxString@@I@Z
?Format@CFxTimeSpan@@QBE?AVCFxString@@PBD@Z
?FormatGmt@CFxTime@@QBE?AVCFxString@@I@Z
?FormatGmt@CFxTime@@QBE?AVCFxString@@PBD@Z
?FormatV@CFxString@@QAEXPBDPAD@Z
?FromString@CLuaGUID@@QAEXPBD@Z
?FromString@CLuaMAC@@QAEXPBD@Z
?FxGetOSName@@YA?AVCFxString@@XZ
?FxHasString@@YAHIPAX@Z
?FxLoadString@@YAHIPADIPAX@Z
?FxLoadStringEx@@YAPADIPAX@Z
?FxSQL2Text@@YAPBDAAVCFxString@@@Z
?FxSprintfLog@@YAHPADIPBDABV?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@@Z
?FxSprintfLogV@@YAHAAV?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@PBDPAD@Z
?FxStr2Buf@@YAHABVCFxString@@PAUFX_BUFFER@@@Z
?FxStr2Buf@@YAHPBDPAUFX_BUFFER@@@Z
?FxText2SQL@@YAPBDAAVCFxString@@@Z
?Get@CLuaBuffer@@QAEHKPAUFX_BUFFER@@@Z
?GetAppFileName@CFxApp@@QAEPBDXZ
?GetAppName@CFxApp@@QAEPBDXZ
?GetArgvs@CFxApp@@QAEABV?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@XZ
?GetAsSystemTime@CFxTime@@QBEHAAU_SYSTEMTIME@@@Z
?GetAt@?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@QBE?AUFX_FORMAT_ARGV@@H@Z
?GetAt@CFxString@@QBEDH@Z
?GetBYTE@CLuaBuffer@@QAEEK@Z
?GetBindIP@CFxSocket@@UAEKXZ
?GetBindPort@CFxSocket@@UAEGXZ
?GetBuffer@CFxString@@QAEPADH@Z
?GetBuffer@CLuaGUID@@QAE?AUFX_BUFFER@@XZ
?GetBuffer@CLuaMAC@@QAE?AUFX_BUFFER@@XZ
?GetBuffer@CLuaSystemTime@@QAE?AUFX_BUFFER@@XZ
?GetBuffer@CLuaULARGE_INTEGER@@QAE?AUFX_BUFFER@@XZ
?GetClientSocket@CFxSocketStream@@UAEIK@Z
?GetClientsCount@CFxSocketStream@@UAEKXZ
?GetCount@CFxCPU@@SAIXZ
?GetCount@CFxNetCard@@UAEIXZ
?GetDWORD@CLuaBuffer@@QAEKK@Z
?GetDay@CLuaSystemTime@@QAEGXZ
?GetDayOfWeek@CLuaSystemTime@@QAEGXZ
?GetDays@CFxTimeSpan@@QBEJXZ
?GetDiskCount@CFxDisk@@QAEIXZ
?GetDiskInfo@CFxDisk@@QAEHIAAUFX_DISK_BASE_INFO@@@Z
?GetDiskType@CFxDisk@@QAE?AW4FX_DISK_TYPE@@I@Z
?GetDomain@CFxNetCard@@UAEPBDXZ
?GetDriveName@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetExtName@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetFileName@CFxFile@@UBEPBDXZ
?GetFileName@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetFlagString@CFxCPU@@UAEHIAAVCFxString@@@Z
?GetFullPathNameA@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetGmtTm@CFxTime@@QBEPAUtm@@PAU2@@Z
?GetHighPart@CLuaULARGE_INTEGER@@QAEKXZ
?GetHostName@CFxNetCard@@UAEPBDXZ
?GetHour@CLuaSystemTime@@QAEGXZ
?GetHours@CFxTimeSpan@@QBEHXZ
?GetID@CFxThread@@UAEKXZ
?GetInfo@CFxCPU@@UAEHIAAUFX_CPU_INFO@@@Z
?GetInfo@CFxNetCard@@UAEHIAAUFX_NETCARD_INFO@@@Z
?GetInterfaceGUID@CFxUnknown@@QAEPBU_GUID@@XZ
?GetKeys@CFxIniFile@@QAEHPBDAAV?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@@Z
?GetLen@CLuaBuffer@@QAEKXZ
?GetLength@CFxFile@@UBEKXZ
?GetLength@CFxString@@QBEHXZ
?GetLengthEx@CFxFile@@UBE_KXZ
?GetLocalTm@CFxTime@@QBEPAUtm@@PAU2@@Z
?GetLogHead@CFxLog@@UAAPBDAAVCFxString@@PBDZZ
?GetLowPart@CLuaULARGE_INTEGER@@QAEKXZ
?GetLower@CFxString@@QAE?AV1@XZ
?GetMinute@CLuaSystemTime@@QAEGXZ
?GetMinutes@CFxTimeSpan@@QBEHXZ
?GetMonth@CLuaSystemTime@@QAEGXZ
?GetMultiIP@CFxSocketDgram@@UAEKXZ
?GetName@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetNext@CFxDir@@QAEHAAUFX_DIR_ENTRY@@@Z
?GetOpenFileNameA@CFxIniFile@@QAEPBDXZ
?GetPartCount@CFxDisk@@QAEII@Z
?GetPartInfo@CFxDisk@@QAEHIIAAUFX_PART_BASE_INFO@@@Z
?GetPathName@CFxFileInfo@@QAE?AVCFxString@@XZ
?GetPathType@CFxDir@@SA?AW4FX_PATH_TYPE@@PBD@Z
?GetPos@CLuaBuffer@@QAEKXZ
?GetPosition@CFxFile@@UBE_KXZ
?GetQuadPart@CLuaULARGE_INTEGER@@QAE_KXZ
?GetRealHandle@CFxEvent@@UAEPAXXZ
?GetRealHandle@CFxHandleBase@@UAEPAXXZ
?GetResourceModule@CFxApp@@UAEPAXXZ
?GetReverse@CFxString@@QAE?AV1@XZ
?GetSecond@CLuaSystemTime@@QAEGXZ
?GetSeconds@CFxTimeSpan@@QBEHXZ
?GetSegs@CFxIniFile@@QAEHAAV?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@@Z
?GetServerIP@CFxSocketStream@@UAEKXZ
?GetServerPort@CFxSocketStream@@UAEGXZ
?GetSize@?$CFxArray@IABIU?$mem_cmp@I@@@@QBEHXZ
?GetSize@?$CFxArray@KABKU?$mem_cmp@K@@@@QBEHXZ
?GetSize@?$CFxArray@PAUDISK_INFO@@ABQAU1@U?$mem_cmp@PAUDISK_INFO@@@@@@QBEHXZ
?GetSize@?$CFxArray@UFX_FORMAT_ARGV@@ABU1@U?$mem_cmp@UFX_FORMAT_ARGV@@@@@@QBEHXZ
?GetSize@?$CFxArray@UFX_PART_BASE_INFO@@ABU1@U?$mem_cmp@UFX_PART_BASE_INFO@@@@@@QBEHXZ
?GetSize@?$CFxArray@ULOCKED_VOL@@ABU1@U?$mem_cmp@ULOCKED_VOL@@@@@@QBEHXZ
?GetSize@?$CFxArray@VCFxString@@ABV1@U?$str_cmp@VCFxString@@@@@@QBEHXZ
?GetSocket@CFxSocket@@UAEIXZ
?GetSocketInfo@CFxSocket@@SAKIPAG@Z
?GetStartupFolder@CFxApp@@QAEPBDXZ
?GetState@CFxThread@@UAE?AW4FX_THREAD_STATE@@XZ
?GetStatistics@CFxCPU@@UAEHIAAUFX_CPU_STATISTICS@@@Z
?GetStats@CFxNetCard@@UAEHIAAUFX_NETCARD_STATS@@@Z
?GetStatus@CFxFile@@QBEHAAUCFxFileStatus@@@Z
?GetStatus@CFxFile@@SGHPBDAAUCFxFileStatus@@@Z
?GetString@CLuaBuffer@@QAEPBDK@Z
?GetStringW@CLuaBuffer@@QAEPBDK@Z
?GetTTL@CFxSocketDgram@@UAEHH@Z
?GetTempDir@CFxFile@@SA?AVCFxString@@XZ
?GetTempFileNameA@CFxFile@@SA?AVCFxString@@PBD@Z
?GetTickCount@CFxTime@@SG?AV1@XZ
?GetULONG64@CLuaBuffer@@QAEKKPAK@Z
?GetUpper@CFxString@@QAE?AV1@XZ
?GetWORD@CLuaBuffer@@QAEGK@Z
?GetYear@CLuaSystemTime@@QAEGXZ
?Has@CFxIniFile@@QAEHPBD0@Z
?Has@CFxIniFile@@QAEHPBD@Z
?HookSignal@CFxApp@@IAEXXZ
?Init@CFxDisk@@UAEHXZ
?Init@CFxNetCard@@AAEHXZ
?InitInstance@CFxApp@@UAEHXZ
?Insert@CFxString@@QAEHHD@Z
?Insert@CFxString@@QAEHHPBD@Z
?IsAbsPath@CFxFile@@SAHPBD@Z
?IsAlreadyRuning@CFxApp@@UAEHXZ
?IsEmpty@CFxString@@QBEHXZ
?IsEvent@CFxEvent@@QAEHXZ
?IsExist@CFxFifo@@UAEHPBD@Z
?IsExist@CFxFile@@SAHPBDI@Z
?IsLoopback@CFxSocketDgram@@UAEHXZ
?IsMuticastSocket@CFxSocketDgram@@UAEHXZ
?IsOpen@CFxIniFile@@QAEHXZ
?IsValid@CFxSocket@@UAEHXZ
?Join@CFxDir@@SA?AVCFxString@@PBD0@Z
?Join@CFxDir@@SAPADPBD0PADI@Z
?Kill@CFxThread@@UAEHXZ
?Left@CFxString@@QBE?AV1@H@Z
?Listen@CFxSocketStream@@UAEHH@Z
?LoadResourceFile@CFxApp@@UAEHPBD@Z
?LoadStringA@CFxString@@QAEHIPAX@Z
?Lock@CFxCriticalSection@@UAEHK@Z
?Lock@CFxCriticalSection@@UAEHXZ
?Lock@CFxMutex@@UAEHK@Z
?Lock@CFxMutex@@UAEHXZ
?Lock@CFxSyncObject@@UAEHK@Z
?Lock@CFxSyncObject@@UAEHXZ
?LockVolume@CFxDisk@@IAEHI_K0@Z
?LogDebug@CFxLog@@UAAXPBDI0ZZ
?LogError@CFxLog@@UAAXPBDIJ0ZZ
?LogInfo@CFxLog@@UAAXPBDI0ZZ
?LogWarn@CFxLog@@UAAXPBDI0ZZ
?MakeLower@CFxString@@QAEXXZ
?MakeReverse@CFxString@@QAEXXZ
?MakeUpper@CFxString@@QAEXXZ
?Mid@CFxString@@QBE?AV1@H@Z
?Mid@CFxString@@QBE?AV1@HH@Z
?Mult64@CLuaULARGE_INTEGER@@QAEXPBT_ULARGE_INTEGER@@@Z
?Mult@CLuaULARGE_INTEGER@@QAEXK@Z
?Open@CFxFifo@@UAEHPBDHHH@Z
?Open@CFxFile@@UAEHPBDI@Z
?Open@CFxIniFile@@QAEHPBD@Z
?PulseEvent@CFxEvent@@QAEHXZ
?QueryInterface@CFxUnknown@@UAEHU_GUID@@PAPAV1@@Z
?Read@CFxDisk@@UAEII_KPAEI@Z
?Read@CFxFifo@@UAEKPAXK@Z
?Read@CFxFile@@UAEIPAXI@Z
?Read@CLuaBuffer@@QAEHPAUFX_BUFFER@@@Z
?ReadBOOL@CFxIniFile@@QAEHPBD0@Z
?ReadBYTE@CLuaBuffer@@QAEEXZ
?ReadDWORD@CLuaBuffer@@QAEKXZ
?ReadHuge@CFxFile@@QAEKPAXK@Z
?ReadString@CFxIniFile@@QAE?AVCFxString@@PBD0@Z
?ReadString@CFxIniFile@@QAEHPBD0PADH@Z
?ReadString@CLuaBuffer@@QAEPBDK@Z
?ReadStringW@CLuaBuffer@@QAEPBDK@Z
?ReadULONG64@CFxIniFile@@QAE_KPBD0@Z
?ReadULONG64@CLuaBuffer@@QAEKPAK@Z
?ReadULONG@CFxIniFile@@QAEKPBD0@Z
?ReadWORD@CLuaBuffer@@QAEGXZ
?RecvPacket@CFxSocket@@UAEHPAXPAK1PAGH@Z
?RecvPacket@CFxSocket@@UAEHPAXPAKH@Z
?RecvPacket@CFxSocket@@UAEHPAXPAKPAUsockaddr_in@@@Z
?RecvPacket@CFxSocketStream@@UAEHPAXPAK1PAGH@Z
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ