H:\rc_v11_i18_20230315_pdf\Build\Release\WPSOffice\office6\promecefpluginhost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
09948e2ea08c34982a0b486cfd5e0140_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09948e2ea08c34982a0b486cfd5e0140_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
09948e2ea08c34982a0b486cfd5e0140_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
09948e2ea08c34982a0b486cfd5e0140
-
SHA1
bcf07ed295795086396e04350cd33d9ae03cfb75
-
SHA256
c7708c0e219a6cb8c7bf13b267227fa288f3879de9fdc6a7b91b377758efb205
-
SHA512
16c975565989fff65dd954bf109f9af10342fcf2fad558c88da35cbb545bcd0332b6783b3a51472a3f7ecbc5fca86edd08c7db7a6223db7c3c777e9e703a5fa5
-
SSDEEP
24576:U/Xs+CuqDoGmtA821yaY4KX7RVldlnXfH9gPwCn7vOb7HHcp/CGXQp:Ok1AEy97RVlbnXf9gPTTW7H1GXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09948e2ea08c34982a0b486cfd5e0140_NeikiAnalytics.exe
Files
-
09948e2ea08c34982a0b486cfd5e0140_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
101c9b0aac50db1c5c845749cc8c14e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
qt5corekso
??0QFile@kso_qt@@QAE@ABVQString@1@@Z
?setApplicationName@QCoreApplication@kso_qt@@SAXABVQString@2@@Z
??1QFile@kso_qt@@UAE@XZ
?exists@QFile@kso_qt@@QBE_NXZ
?exists@QFile@kso_qt@@SA_NABVQString@2@@Z
??0QFileInfo@kso_qt@@QAE@ABVQString@1@@Z
??1QFileInfo@kso_qt@@QAE@XZ
??1QDir@kso_qt@@QAE@XZ
?absolutePath@QDir@kso_qt@@QBE?AVQString@2@XZ
?toNativeSeparators@QDir@kso_qt@@SA?AVQString@2@ABV32@@Z
?separator@QDir@kso_qt@@SA?AVQChar@2@XZ
??0QLibrary@kso_qt@@QAE@ABVQString@1@PAVQObject@1@@Z
??1QLibrary@kso_qt@@UAE@XZ
?resolve@QLibrary@kso_qt@@QAEP6AXXZPBD@Z
?load@QLibrary@kso_qt@@QAE_NXZ
??0QSettings@kso_qt@@QAE@ABVQString@1@W4Format@01@PAVQObject@1@@Z
??1QSettings@kso_qt@@UAE@XZ
?value@QSettings@kso_qt@@QBE?AVQVariant@2@ABVQString@2@ABV32@@Z
?staticMetaObject@QThread@kso_qt@@2UQMetaObject@2@B
?contains@QSettings@kso_qt@@QBE_NABVQString@2@@Z
?shared_null@QHashData@kso_qt@@2U12@B
?shared_null@QListData@kso_qt@@2UData@12@B
?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z
?qt_metacast@QThread@kso_qt@@UAEPAXPBD@Z
?qt_metacast@QCoreApplication@kso_qt@@UAEPAXPBD@Z
?qt_metacall@QThread@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacall@QCoreApplication@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?notify@QCoreApplication@kso_qt@@UAE_NPAVQObject@2@PAVQEvent@2@@Z
?metaObject@QThread@kso_qt@@UBEPBUQMetaObject@2@XZ
?quit@QCoreApplication@kso_qt@@SAXXZ
?metaObject@QCoreApplication@kso_qt@@UBEPBUQMetaObject@2@XZ
?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z
?event@QThread@kso_qt@@UAE_NPAVQEvent@2@@Z
?event@QCoreApplication@kso_qt@@MAE_NPAVQEvent@2@@Z
?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z
?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?compressEvent@QCoreApplication@kso_qt@@MAE_NPAVQEvent@2@PAVQObject@2@PAVQPostEventList@2@@Z
?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z
?finished@QThread@kso_qt@@QAEXUQPrivateSignal@12@@Z
?start@QThread@kso_qt@@QAEXW4Priority@12@@Z
??1QThread@kso_qt@@UAE@XZ
??0QThread@kso_qt@@QAE@PAVQObject@1@@Z
?exec@QCoreApplication@kso_qt@@SAHXZ
??1QCoreApplication@kso_qt@@UAE@XZ
??0QCoreApplication@kso_qt@@QAE@AAHPAPADH@Z
??1QDateTime@kso_qt@@QAE@XZ
??0QDateTime@kso_qt@@QAE@ABV01@@Z
?toString@QVariant@kso_qt@@QBE?AVQString@2@XZ
?toBool@QVariant@kso_qt@@QBE_NXZ
??0QVariant@kso_qt@@QAE@_N@Z
??1QVariant@kso_qt@@QAE@XZ
??0QVariant@kso_qt@@QAE@XZ
?free_helper@QHashData@kso_qt@@QAEXP6AXPAUNode@12@@Z@Z
?detach_helper@QHashData@kso_qt@@QAEPAU12@P6AXPAUNode@12@PAX@ZP6AX0@ZHH@Z
?connectImpl@QObject@kso_qt@@CA?AVConnection@QMetaObject@2@PBV12@PAPAX01PAVQSlotObjectBase@QtPrivate@2@W4ConnectionType@Qt@2@PBHPBU42@@Z
?end@QListData@kso_qt@@QBEPAPAXXZ
?begin@QListData@kso_qt@@QBEPAPAXXZ
?dispose@QListData@kso_qt@@SAXPAUData@12@@Z
?detach@QListData@kso_qt@@QAEPAUData@12@H@Z
?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z
?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??YQString@kso_qt@@QAEAAV01@PBD@Z
??0QString@kso_qt@@QAE@ABVQByteArray@1@@Z
?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z
?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z
?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z
?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z
?toUtf8@QString@kso_qt@@QGBE?AVQByteArray@2@XZ
??YQString@kso_qt@@QAEAAV01@VQChar@1@@Z
?append@QString@kso_qt@@QAEAAV12@ABV12@@Z
?indexOf@QString@kso_qt@@QBEHABV12@HW4CaseSensitivity@Qt@2@@Z
??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z
??0QString@kso_qt@@QAE@$$QAV01@@Z
??4QString@kso_qt@@QAEAAV01@ABV01@@Z
??1QString@kso_qt@@QAE@XZ
??0QString@kso_qt@@QAE@ABV01@@Z
??0QString@kso_qt@@QAE@XZ
?toBase64@QByteArray@kso_qt@@QBE?AV12@XZ
?append@QByteArray@kso_qt@@QAEAAV12@ABV12@@Z
??1QByteArray@kso_qt@@QAE@XZ
??0QByteArray@kso_qt@@QAE@ABV01@@Z
??0QByteArray@kso_qt@@QAE@PBDH@Z
??1Connection@QMetaObject@kso_qt@@QAE@XZ
?removeTranslator@QCoreApplication@kso_qt@@SA_NPAVQTranslator@2@@Z
?installTranslator@QCoreApplication@kso_qt@@SA_NPAVQTranslator@2@@Z
?childGroups@QSettings@kso_qt@@QBE?AVQStringList@2@XZ
??YQString@kso_qt@@QAEAAV01@D@Z
?fromLatin1@QChar@kso_qt@@SA?AV12@D@Z
?metaObject@QObject@kso_qt@@UBEPBUQMetaObject@2@XZ
??0QVariant@kso_qt@@QAE@ABV?$QList@VQVariant@kso_qt@@@1@@Z
?toJson@QJsonDocument@kso_qt@@QBE?AVQByteArray@2@W4JsonFormat@12@@Z
?fromJson@QJsonDocument@kso_qt@@SA?AV12@ABVQByteArray@2@PAUQJsonParseError@2@@Z
?toVariant@QJsonDocument@kso_qt@@QBE?AVQVariant@2@XZ
?fromVariant@QJsonDocument@kso_qt@@SA?AV12@ABVQVariant@2@@Z
??1QJsonDocument@kso_qt@@QAE@XZ
?toMap@QVariant@kso_qt@@QBE?AV?$QMap@VQString@kso_qt@@VQVariant@2@@2@XZ
?toList@QVariant@kso_qt@@QBE?AV?$QList@VQVariant@kso_qt@@@2@XZ
??0QVariant@kso_qt@@QAE@ABV?$QMap@VQString@kso_qt@@VQVariant@2@@1@@Z
??4QString@kso_qt@@QAEAAV01@ABVQByteArray@1@@Z
?resize@QByteArray@kso_qt@@QAEXH@Z
?qt_metacall@QObject@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QObject@kso_qt@@UAEPAXPBD@Z
?dynamicMetaObject@QObjectData@kso_qt@@QBEPAUQMetaObject@2@XZ
?fromUtf16@QString@kso_qt@@SA?AV12@PB_SH@Z
?append@QString@kso_qt@@QAEAAV12@VQChar@2@@Z
?unicode@QChar@kso_qt@@QBEGXZ
??1QUrl@kso_qt@@QAE@XZ
??0QUrl@kso_qt@@QAE@ABVQString@1@W4ParsingMode@01@@Z
?group@QSettings@kso_qt@@QBE?AVQString@2@XZ
?isValid@QVariant@kso_qt@@QBE_NXZ
??0QVariant@kso_qt@@QAE@$$QAV01@@Z
??0QVariant@kso_qt@@QAE@ABVQStringList@1@@Z
??0QVariant@kso_qt@@QAE@_J@Z
??0QByteArray@kso_qt@@QAE@HD@Z
?warning@QMessageLogger@kso_qt@@QBAXPBDZZ
?entryList@QDir@kso_qt@@QBE?AVQStringList@2@V?$QFlags@W4Filter@QDir@kso_qt@@@2@V?$QFlags@W4SortFlag@QDir@kso_qt@@@2@@Z
?dirName@QDir@kso_qt@@QBE?AVQString@2@XZ
?setSearchPaths@QDir@kso_qt@@SAXABVQString@2@ABVQStringList@2@@Z
?isSymLink@QFileInfo@kso_qt@@QBE_NXZ
?translate@QCoreApplication@kso_qt@@SA?AVQString@2@PBD00H@Z
?uiLanguages@QLocale@kso_qt@@QBE?AVQStringList@2@XZ
??0QLocale@kso_qt@@QAE@XZ
?fromSecsSinceEpoch@QDateTime@kso_qt@@SA?AV12@_JW4TimeSpec@Qt@2@H@Z
?toTime_t@QDateTime@kso_qt@@QBEIXZ
?toStringEx@QDateTime@kso_qt@@QBE?AVQString@2@ABV32@@Z
?toSecsSinceEpoch@QDateTime@kso_qt@@QBE_JXZ
?write@QIODevice@kso_qt@@QAE_JABVQByteArray@2@@Z
??0QVariant@kso_qt@@QAE@H@Z
?QStringList_removeDuplicates@QtPrivate@kso_qt@@YAHPAVQStringList@2@@Z
?toUInt@QString@kso_qt@@QBEIPA_NH@Z
?left@QString@kso_qt@@QBE?AV12@H@Z
?lastIndexOf@QString@kso_qt@@QBEHVQChar@2@HW4CaseSensitivity@Qt@2@@Z
??0QChar@kso_qt@@QAE@G@Z
??0QSettings@kso_qt@@QAE@ABVQString@1@0PAVQObject@1@@Z
?arg@QString@kso_qt@@QBE?AV12@KHHVQChar@2@@Z
??0QChar@kso_qt@@QAE@H@Z
??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z
?toUpper@QChar@kso_qt@@QBE?AV12@XZ
??0QString@kso_qt@@QAE@VQChar@1@@Z
??0QString@kso_qt@@QAE@VQLatin1String@1@@Z
?resize@QString@kso_qt@@QAEXH@Z
?constData@QString@kso_qt@@QBEPBVQChar@2@XZ
?clear@QString@kso_qt@@QAEXXZ
?at@QString@kso_qt@@QBE?BVQChar@2@H@Z
??AQString@kso_qt@@QBE?BVQChar@1@H@Z
?startsWith@QString@kso_qt@@QBE_NABV12@W4CaseSensitivity@Qt@2@@Z
?startsWith@QString@kso_qt@@QBE_NVQLatin1String@2@W4CaseSensitivity@Qt@2@@Z
?toLower@QString@kso_qt@@QGBE?AV12@XZ
?append@QString@kso_qt@@QAEAAV12@VQLatin1String@2@@Z
?remove@QString@kso_qt@@QAEAAV12@HH@Z
?replace@QString@kso_qt@@QAEAAV12@VQChar@2@0W4CaseSensitivity@Qt@2@@Z
?replace@QString@kso_qt@@QAEAAV12@ABV12@0W4CaseSensitivity@Qt@2@@Z
?utf16@QString@kso_qt@@QBEPBGXZ
??8kso_qt@@YA_NABVQString@0@0@Z
??Mkso_qt@@YA_NABVQString@0@0@Z
??8QString@kso_qt@@QBE_NPBD@Z
??0QString@kso_qt@@QAE@HW4Initialization@Qt@1@@Z
??4QCharRef@kso_qt@@QAEAAV01@VQChar@1@@Z
?detach_grow@QListData@kso_qt@@QAEPAUData@12@PAHH@Z
?dispose@QListData@kso_qt@@QAEXXZ
?append@QListData@kso_qt@@QAEPAPAXXZ
?isEmpty@QListData@kso_qt@@QBE_NXZ
?setColor@QMapNodeBase@kso_qt@@QAEXW4Color@12@@Z
?setParent@QMapNodeBase@kso_qt@@QAEXPAU12@@Z
?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ
?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z
?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z
?createData@QMapDataBase@kso_qt@@SAPAU12@XZ
?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z
??0QVariant@kso_qt@@QAE@PBD@Z
??0QVariant@kso_qt@@QAE@ABVQString@1@@Z
?applicationDirPath@QCoreApplication@kso_qt@@SA?AVQString@2@XZ
?absoluteFilePath@QFileInfo@kso_qt@@QBE?AVQString@2@XZ
?path@QFileInfo@kso_qt@@QBE?AVQString@2@XZ
?symLinkTarget@QFileInfo@kso_qt@@QBE?AVQString@2@XZ
??0QDir@kso_qt@@QAE@ABVQString@1@@Z
?path@QDir@kso_qt@@QBE?AVQString@2@XZ
?absoluteFilePath@QDir@kso_qt@@QBE?AVQString@2@ABV32@@Z
?cdUp@QDir@kso_qt@@QAE_NXZ
?mkpath@QDir@kso_qt@@QBE_NABVQString@2@@Z
?exists@QDir@kso_qt@@QBE_NXZ
?rename@QDir@kso_qt@@QAE_NABVQString@2@0@Z
?exists@QDir@kso_qt@@QBE_NABVQString@2@@Z
?cleanPath@QDir@kso_qt@@SA?AVQString@2@ABV32@@Z
??0QSettings@kso_qt@@QAE@W4Format@01@W4Scope@01@ABVQString@1@2PAVQObject@1@@Z
?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z
?setValue@QSettings@kso_qt@@QAEXABVQString@2@ABVQVariant@2@@Z
?convertFromAscii@QAbstractConcatenable@kso_qt@@KAXPBDHAAPAVQChar@2@@Z
?shared_null@QMapDataBase@kso_qt@@2U12@B
??0QChar@kso_qt@@QAE@W4SpecialCharacter@01@@Z
?toLatin1@QChar@kso_qt@@QBEDXZ
?unicode@QChar@kso_qt@@QAEAAGXZ
?data@QByteArray@kso_qt@@QAEPADXZ
?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z
?toLatin1@QString@kso_qt@@QGBE?AVQByteArray@2@XZ
?fromLatin1@QString@kso_qt@@SA?AV12@PBDH@Z
?fromLocal8Bit@QString@kso_qt@@SA?AV12@PBDH@Z
??9QString@kso_qt@@QBE_NPBD@Z
?toStdString@QString@kso_qt@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?qHash@kso_qt@@YAIABVQString@1@I@Z
?size@QListData@kso_qt@@QBEHXZ
?at@QListData@kso_qt@@QBEPAPAXH@Z
?allocateNode@QHashData@kso_qt@@QAEPAXH@Z
?rehash@QHashData@kso_qt@@QAEXH@Z
??0QLocale@kso_qt@@QAE@ABVQString@1@@Z
??1QLocale@kso_qt@@QAE@XZ
?name@QLocale@kso_qt@@QBE?AVQString@2@XZ
?decimalPoint@QLocale@kso_qt@@QBE?AVQChar@2@XZ
?system@QLocale@kso_qt@@SA?AV12@XZ
?constData@QByteArray@kso_qt@@QBEPBDXZ
?fromRawData@QByteArray@kso_qt@@SA?AV12@PBDH@Z
?number@QString@kso_qt@@SA?AV12@IH@Z
??6kso_qt@@YAAAVQDataStream@0@AAV10@ABVQString@0@@Z
??5kso_qt@@YAAAVQDataStream@0@AAV10@AAVQString@0@@Z
?realloc@QListData@kso_qt@@QAEXH@Z
?QStringList_join@QtPrivate@kso_qt@@YA?AVQString@2@PBVQStringList@2@PBVQChar@2@H@Z
??0QObject@kso_qt@@QAE@PAV01@@Z
??1QObject@kso_qt@@UAE@XZ
?event@QObject@kso_qt@@UAE_NPAVQEvent@2@@Z
?freeNodeAndRebalance@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@@Z
?freeNode@QHashData@kso_qt@@QAEXPAX@Z
?hasShrunk@QHashData@kso_qt@@QAEXXZ
?nextNode@QHashData@kso_qt@@SAPAUNode@12@PAU312@@Z
?previousNode@QHashData@kso_qt@@SAPAUNode@12@PAU312@@Z
??0QVariant@kso_qt@@QAE@ABV01@@Z
??0QVariant@kso_qt@@QAE@AAVQDataStream@1@@Z
??4QVariant@kso_qt@@QAEAAV01@ABV01@@Z
??6kso_qt@@YAAAVQDataStream@0@AAV10@ABVQVariant@0@@Z
?isOpen@QIODevice@kso_qt@@QBE_NXZ
?isReadable@QIODevice@kso_qt@@QBE_NXZ
?isWritable@QIODevice@kso_qt@@QBE_NXZ
?isTransactionStarted@QIODevice@kso_qt@@QBE_NXZ
??0QBuffer@kso_qt@@QAE@PAVQObject@1@@Z
??1QBuffer@kso_qt@@UAE@XZ
?buffer@QBuffer@kso_qt@@QAEAAVQByteArray@2@XZ
?open@QBuffer@kso_qt@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@2@@Z
?size@QBuffer@kso_qt@@UBE_JXZ
??0QDateTime@kso_qt@@QAE@XZ
??4QDateTime@kso_qt@@QAEAAV01@$$QAV01@@Z
??4QDateTime@kso_qt@@QAEAAV01@ABV01@@Z
?toString@QDateTime@kso_qt@@QBE?AVQString@2@W4DateFormat@Qt@2@@Z
??8QDateTime@kso_qt@@QBE_NABV01@@Z
??0QEvent@kso_qt@@QAE@W4Type@01@@Z
??1QEvent@kso_qt@@UAE@XZ
?postEvent@QCoreApplication@kso_qt@@SAXPAVQObject@2@PAVQEvent@2@H@Z
??0QDataStream@kso_qt@@QAE@PAVQIODevice@1@@Z
??0QDataStream@kso_qt@@QAE@PAVQByteArray@1@V?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@1@@Z
??1QDataStream@kso_qt@@QAE@XZ
?status@QDataStream@kso_qt@@QBE?AW4Status@12@XZ
?setStatus@QDataStream@kso_qt@@QAEXW4Status@12@@Z
?resetStatus@QDataStream@kso_qt@@QAEXXZ
??5QDataStream@kso_qt@@QAEAAV01@AAH@Z
??5QDataStream@kso_qt@@QAEAAV01@AA_J@Z
??6QDataStream@kso_qt@@QAEAAV01@H@Z
??6QDataStream@kso_qt@@QAEAAV01@_J@Z
?writeRawData@QDataStream@kso_qt@@QAEHPBDH@Z
?flush@QFileDevice@kso_qt@@QAE_NXZ
?map@QFileDevice@kso_qt@@QAEPAE_J0W4MemoryMapFlags@12@@Z
?unmap@QFileDevice@kso_qt@@QAE_NPAE@Z
??0QFileInfo@kso_qt@@QAE@ABVQFile@1@@Z
?exists@QFileInfo@kso_qt@@QBE_NXZ
?refresh@QFileInfo@kso_qt@@QAEXXZ
?isReadable@QFileInfo@kso_qt@@QBE_NXZ
?isWritable@QFileInfo@kso_qt@@QBE_NXZ
?size@QFileInfo@kso_qt@@QBE_JXZ
?lastModified@QFileInfo@kso_qt@@QBE?AVQDateTime@2@XZ
??0QReadWriteLock@kso_qt@@QAE@W4RecursionMode@01@@Z
??1QReadWriteLock@kso_qt@@QAE@XZ
?lockForRead@QReadWriteLock@kso_qt@@QAEXXZ
?lockForWrite@QReadWriteLock@kso_qt@@QAEXXZ
?unlock@QReadWriteLock@kso_qt@@QAEXXZ
?atEnd@QFileDevice@kso_qt@@UBE_NXZ
?bytesAvailable@QIODevice@kso_qt@@UBE_JXZ
?bytesToWrite@QIODevice@kso_qt@@UBE_JXZ
?canReadLine@QIODevice@kso_qt@@UBE_NXZ
?close@QFileDevice@kso_qt@@UAEXXZ
?fileName@QFile@kso_qt@@UBE?AVQString@2@XZ
?isSequential@QFileDevice@kso_qt@@UBE_NXZ
?metaObject@QFile@kso_qt@@UBEPBUQMetaObject@2@XZ
?open@QFile@kso_qt@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@2@@Z
?permissions@QFile@kso_qt@@UBE?AV?$QFlags@W4Permission@QFileDevice@kso_qt@@@2@XZ
?pos@QFileDevice@kso_qt@@UBE_JXZ
?qt_metacall@QFile@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QFile@kso_qt@@UAEPAXPBD@Z
?readData@QFileDevice@kso_qt@@MAE_JPAD_J@Z
?readLineData@QFileDevice@kso_qt@@MAE_JPAD_J@Z
?reset@QIODevice@kso_qt@@UAE_NXZ
?resize@QFile@kso_qt@@UAE_N_J@Z
?seek@QFileDevice@kso_qt@@UAE_N_J@Z
?setPermissions@QFile@kso_qt@@UAE_NV?$QFlags@W4Permission@QFileDevice@kso_qt@@@2@@Z
?size@QFile@kso_qt@@UBE_JXZ
?waitForBytesWritten@QIODevice@kso_qt@@UAE_NH@Z
?waitForReadyRead@QIODevice@kso_qt@@UAE_NH@Z
?writeData@QFileDevice@kso_qt@@MAE_JPBD_J@Z
?arg@QString@kso_qt@@QBE?AV12@ABV12@000@Z
?number@QString@kso_qt@@SA?AV12@HH@Z
?compare_helper@QString@kso_qt@@CAHPBVQChar@2@HPBDHW4CaseSensitivity@Qt@2@@Z
??4QVariant@kso_qt@@QAEAAV01@$$QAV01@@Z
?isNull@QVariant@kso_qt@@QBE_NXZ
?toInt@QVariant@kso_qt@@QBEHPA_N@Z
?daysTo@QDateTime@kso_qt@@QBE_JABV12@@Z
?currentDateTime@QDateTime@kso_qt@@SA?AV12@XZ
?fromString@QDateTime@kso_qt@@SA?AV12@ABVQString@2@0@Z
?endGroup@QSettings@kso_qt@@QAEXXZ
?arg@QString@kso_qt@@QBE?AV12@HHHVQChar@2@@Z
?prepend@QString@kso_qt@@QAEAAV12@ABV12@@Z
?setFallbacksEnabled@QSettings@kso_qt@@QAEX_N@Z
?setIniCodec@QSettings@kso_qt@@QAEXPBD@Z
?event@QSettings@kso_qt@@MAE_NPAVQEvent@2@@Z
?metaObject@QSettings@kso_qt@@UBEPBUQMetaObject@2@XZ
?qt_metacall@QSettings@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QSettings@kso_qt@@UAEPAXPBD@Z
??0QMessageLogger@kso_qt@@QAE@PBDH0@Z
?warning@QMessageLogger@kso_qt@@QBE?AVQDebug@2@XZ
?cast@QMetaObject@kso_qt@@QBEPAVQObject@2@PAV32@@Z
?invokeMethod@QMetaObject@kso_qt@@SA_NPAVQObject@2@PBDVQGenericReturnArgument@2@VQGenericArgument@2@333333333@Z
??0QByteArray@kso_qt@@QAE@XZ
??4QByteArray@kso_qt@@QAEAAV01@$$QAV01@@Z
?endsWith@QString@kso_qt@@QBE_NABV12@W4CaseSensitivity@Qt@2@@Z
?isNull@QString@kso_qt@@QBE_NXZ
?prepend@QListData@kso_qt@@QAEPAPAXXZ
?remove@QListData@kso_qt@@QAEXH@Z
?typeFlags@QMetaType@kso_qt@@SA?AV?$QFlags@W4TypeFlag@QMetaType@kso_qt@@@2@H@Z
?setParent@QObject@kso_qt@@QAEXPAV12@@Z
?property@QObject@kso_qt@@QBE?AVQVariant@2@PBD@Z
?userType@QVariant@kso_qt@@QBEHXZ
?constData@QVariant@kso_qt@@QBEPBXXZ
?convert@QVariant@kso_qt@@QBE_NHPAX@Z
?readAll@QIODevice@kso_qt@@QAE?AVQByteArray@2@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@kso_qt@@SAPAU123@PBVQObject@3@@Z
??1QDebug@kso_qt@@QAE@XZ
??6QDebug@kso_qt@@QAEAAV01@PBD@Z
??6QDebug@kso_qt@@QAEAAV01@ABVQString@1@@Z
?instance@QCoreApplication@kso_qt@@SAPAV12@XZ
??0QTranslator@kso_qt@@QAE@PAVQObject@1@@Z
??1QTranslator@kso_qt@@UAE@XZ
?load@QTranslator@kso_qt@@QAE_NPBEHABVQString@2@@Z
?isEmpty@QTranslator@kso_qt@@UBE_NXZ
?metaObject@QTranslator@kso_qt@@UBEPBUQMetaObject@2@XZ
?qt_metacall@QTranslator@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QTranslator@kso_qt@@UAEPAXPBD@Z
?translate@QTranslator@kso_qt@@UBE?AVQString@2@PBD00H@Z
?staticMetaObject@QObject@kso_qt@@2UQMetaObject@2@B
?toHex@QByteArray@kso_qt@@QBE?AV12@XZ
?fromBase64@QByteArray@kso_qt@@SA?AV12@ABV12@@Z
?trimmed@QString@kso_qt@@QGBE?AV12@XZ
?trimmed@QString@kso_qt@@QHAE?AV12@XZ
?split@QString@kso_qt@@QBE?AVQStringList@2@ABV12@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z
?split@QString@kso_qt@@QBE?AVQStringList@2@VQChar@2@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z
?compare@QString@kso_qt@@SAHABV12@0W4CaseSensitivity@Qt@2@@Z
?toInt@QString@kso_qt@@QBEHPA_NH@Z
??4QString@kso_qt@@QAEAAV01@PBD@Z
?append@QListData@kso_qt@@QAEPAPAXABU12@@Z
?nextNode@QMapNodeBase@kso_qt@@QBEPBU12@XZ
?read@QIODevice@kso_qt@@QAE?AVQByteArray@2@_J@Z
??0QDate@kso_qt@@QAE@HHH@Z
??0QTime@kso_qt@@QAE@HHHH@Z
??0QDateTime@kso_qt@@QAE@ABVQDate@1@ABVQTime@1@W4TimeSpec@Qt@1@@Z
?isValid@QDateTime@kso_qt@@QBE_NXZ
?addSecs@QDateTime@kso_qt@@QBE?AV12@_J@Z
?msecsTo@QDateTime@kso_qt@@QBE_JABV12@@Z
??MQDateTime@kso_qt@@QBE_NABV01@@Z
?applicationName@QCoreApplication@kso_qt@@SA?AVQString@2@XZ
?hash@QCryptographicHash@kso_qt@@SA?AVQByteArray@2@ABV32@W4Algorithm@12@@Z
?count@QDir@kso_qt@@QBEIXZ
?arg@QString@kso_qt@@QBE?AV12@IHHVQChar@2@@Z
?toUtf8@QString@kso_qt@@QHAE?AVQByteArray@2@XZ
?toStringList@QVariant@kso_qt@@QBE?AVQStringList@2@XZ
?currentDate@QDate@kso_qt@@SA?AV12@XZ
??0QLibrary@kso_qt@@QAE@PAVQObject@1@@Z
?unload@QLibrary@kso_qt@@QAE_NXZ
?isLoaded@QLibrary@kso_qt@@QBE_NXZ
?setFileName@QLibrary@kso_qt@@QAEXABVQString@2@@Z
?fileName@QLibrary@kso_qt@@QBE?AVQString@2@XZ
?mid@QString@kso_qt@@QBE?AV12@HH@Z
?toUpper@QString@kso_qt@@QHAE?AV12@XZ
?QStringList_contains@QtPrivate@kso_qt@@YA_NPBVQStringList@2@ABVQString@2@W4CaseSensitivity@Qt@2@@Z
?toUInt@QVariant@kso_qt@@QBEIPA_N@Z
?fromStdWString@QString@kso_qt@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
kernel32
GetModuleFileNameW
GetSystemInfo
LoadLibraryExA
ExpandEnvironmentStringsW
SetFileAttributesW
Sleep
GetModuleHandleExW
GetLocaleInfoW
GetSystemDefaultLCID
GetUserDefaultLCID
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetUserGeoID
GetUserDefaultUILanguage
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
LocalFree
WideCharToMultiByte
GetPrivateProfileStringW
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetDateFormatW
GetTimeFormatW
SetErrorMode
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetModuleHandleA
VirtualQuery
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetLastError
VerifyVersionInfoW
LoadLibraryW
GetProcAddress
GetModuleHandleW
RaiseException
FreeLibrary
GetSystemWow64DirectoryW
GetSystemDirectoryW
OpenProcess
GetCurrentProcessId
GetLastError
CloseHandle
GetCommandLineW
VerSetConditionMask
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??0facet@locale@std@@IAE@I@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
??Bid@locale@std@@QAEIXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xbad_function_call@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
_Mbrtowc
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??1facet@locale@std@@MAE@XZ
?uncaught_exceptions@std@@YAHXZ
vcruntime140
__std_type_info_compare
__std_type_info_name
_purecall
__std_terminate
strstr
wcsrchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
memset
wcsstr
__current_exception
__current_exception_context
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_c_exit
_seh_filter_exe
_set_app_type
_cexit
_invalid_parameter_noinfo
exit
_errno
_exit
_configure_wide_argv
_initialize_wide_environment
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_initterm
terminate
_initterm_e
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
_get_wide_winmain_command_line
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
free
malloc
_aligned_malloc
_set_new_mode
_aligned_free
api-ms-win-crt-environment-l1-1-0
_wputenv_s
_wgetenv_s
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscpy_s
strcpy_s
wcscat_s
wcsncpy
strncmp
api-ms-win-crt-convert-l1-1-0
_wcstod_l
_strtod_l
api-ms-win-crt-locale-l1-1-0
localeconv
_get_current_locale
_create_locale
_free_locale
_configthreadlocale
api-ms-win-crt-time-l1-1-0
_localtime64
_mktime64
_gmtime64
_time64
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
__p__commode
_set_fmode
api-ms-win-crt-math-l1-1-0
__setusermatherr
qt5xmlkso
??1QDomElement@kso_qt@@QAE@XZ
?attributes@QDomElement@kso_qt@@QBE?AVQDomNamedNodeMap@2@XZ
?tagName@QDomElement@kso_qt@@QBE?AVQString@2@XZ
?hasAttribute@QDomElement@kso_qt@@QBE_NABVQString@2@@Z
?attribute@QDomElement@kso_qt@@QBE?AVQString@2@ABV32@0@Z
??0QDomElement@kso_qt@@QAE@ABV01@@Z
?length@QDomNamedNodeMap@kso_qt@@QBEHXZ
?item@QDomNamedNodeMap@kso_qt@@QBE?AVQDomNode@2@H@Z
??1QDomNamedNodeMap@kso_qt@@QAE@XZ
?setContent@QDomDocument@kso_qt@@QAE_NABVQByteArray@2@_NPAVQString@2@PAH3@Z
?documentElement@QDomDocument@kso_qt@@QBE?AVQDomElement@2@XZ
??1QDomDocument@kso_qt@@QAE@XZ
??0QDomDocument@kso_qt@@QAE@XZ
??4QDomNode@kso_qt@@QAEAAV01@ABV01@@Z
?item@QDomNodeList@kso_qt@@QBE?AVQDomNode@2@H@Z
??1QDomNodeList@kso_qt@@QAE@XZ
?toElement@QDomNode@kso_qt@@QBE?AVQDomElement@2@XZ
?isNull@QDomNode@kso_qt@@QBE_NXZ
?nodeValue@QDomNode@kso_qt@@QBE?AVQString@2@XZ
?nextSibling@QDomNode@kso_qt@@QBE?AV12@XZ
?firstChild@QDomNode@kso_qt@@QBE?AV12@XZ
?childNodes@QDomNode@kso_qt@@QBE?AVQDomNodeList@2@XZ
?nodeName@QDomNode@kso_qt@@QBE?AVQString@2@XZ
??1QDomNode@kso_qt@@QAE@XZ
?length@QDomNodeList@kso_qt@@QBEHXZ
qt5guikso
?openUrl@QDesktopServices@kso_qt@@SA_NABVQUrl@2@@Z
Exports
Exports
??0IKAuthorizationHandler@@QAE@$$QAV0@@Z
??0IKAuthorizationHandler@@QAE@ABV0@@Z
??0IKAuthorizationHandler@@QAE@XZ
??0KABTestSettings@abtest@krt@@QAE@XZ
??0KAppArguments@krt@@QAE@PB_W@Z
??0KAppTranslators@krt@@QAE@PAVQObject@kso_qt@@@Z
??0KCacheMuiSource@@QAE@$$QAV0@@Z
??0KCacheMuiSource@@QAE@ABV0@@Z
??0KCacheMuiSource@@QAE@ABVQString@kso_qt@@@Z
??0KCacheSource@@QAE@$$QAV0@@Z
??0KCacheSource@@QAE@ABV0@@Z
??0KCacheSource@@QAE@XZ
??0KConfigsReader@krt@@QAE@ABV01@@Z
??0KConfigsReader@krt@@QAE@ABVQString@kso_qt@@0@Z
??0KCryptConfigsReader@krt@@QAE@ABV01@@Z
??0KCryptConfigsReader@krt@@QAE@ABVQString@kso_qt@@0@Z
??0KEnvState@PerfProxy@@QAE@PBD0@Z
??0KLocale@locale@krt@@QAE@ABV012@@Z
??0KLocale@locale@krt@@QAE@ABVQString@kso_qt@@@Z
??0KMuiSettings@krt@@QAE@ABVQString@kso_qt@@0PAVQObject@3@0@Z
??0KProductConfigsReader@krt@@QAE@ABVQString@kso_qt@@0@Z
??0KRTRegInfo@product@krt@@QAE@$$QAU012@@Z
??0KRTRegInfo@product@krt@@QAE@ABU012@@Z
??0KRTRegInfo@product@krt@@QAE@XZ
??0KTranslator@krt@@QAE@PAVQObject@kso_qt@@@Z
??0KUWPCommonSettings@krt@@QAE@XZ
??0KUWPSettings@krt@@QAE@XZ
??1KABTestSettings@abtest@krt@@UAE@XZ
??1KAppArguments@krt@@QAE@XZ
??1KAppTranslators@krt@@UAE@XZ
??1KCacheMuiSource@@QAE@XZ
??1KConfigsReader@krt@@UAE@XZ
??1KCryptConfigsReader@krt@@UAE@XZ
??1KLocale@locale@krt@@UAE@XZ
??1KMuiSettings@krt@@UAE@XZ
??1KProductConfigsReader@krt@@QAE@XZ
??1KRTRegInfo@product@krt@@QAE@XZ
??1KTranslator@krt@@UAE@XZ
??1KUWPCommonSettings@krt@@UAE@XZ
??1KUWPSettings@krt@@UAE@XZ
??4IKAuthorizationHandler@@QAEAAV0@$$QAV0@@Z
??4IKAuthorizationHandler@@QAEAAV0@ABV0@@Z
??4KAppArguments@krt@@QAEAAV01@ABV01@@Z
??4KCacheMuiSource@@QAEAAV0@$$QAV0@@Z
??4KCacheMuiSource@@QAEAAV0@ABV0@@Z
??4KCacheSource@@QAEAAV0@$$QAV0@@Z
??4KCacheSource@@QAEAAV0@ABV0@@Z
??4KConfigsReader@krt@@QAEAAV01@ABV01@@Z
??4KCryptConfigsReader@krt@@QAEAAV01@ABV01@@Z
??4KDES@krt@@QAEAAV01@$$QAV01@@Z
??4KDES@krt@@QAEAAV01@ABV01@@Z
??4KEnvState@PerfProxy@@QAEAAV01@$$QAV01@@Z
??4KEnvState@PerfProxy@@QAEAAV01@ABV01@@Z
??4KLocale@locale@krt@@QAEAAV012@ABV012@@Z
??4KProductConfigsReader@krt@@QAEAAV01@ABV01@@Z
??4KRTRegInfo@product@krt@@QAEAAU012@$$QAU012@@Z
??4KRTRegInfo@product@krt@@QAEAAU012@ABU012@@Z
??_7IKAuthorizationHandler@@6B@
??_7KABTestSettings@abtest@krt@@6B@
??_7KAppTranslators@krt@@6B@
??_7KCacheMuiSource@@6B@
??_7KCacheSource@@6B@
??_7KConfigsReader@krt@@6B@
??_7KCryptConfigsReader@krt@@6B@
??_7KLocale@locale@krt@@6B@
??_7KMuiSettings@krt@@6B@
??_7KTranslator@krt@@6B@
??_7KUWPCommonSettings@krt@@6B@
??_7KUWPSettings@krt@@6B@
??_FKTranslator@krt@@QAEXXZ
?C@locale@krt@@YAPAVKLocale@12@XZ
?Decode@gpcrypt@krt@@YA_NABVQString@kso_qt@@AAVQByteArray@4@@Z
?Encode@gpcrypt@krt@@YA_NABVQString@kso_qt@@AAVQByteArray@4@@Z
?IO@locale@krt@@YAPAVKLocale@12@XZ
?IsLoaded@gpcrypt@krt@@YA_NXZ
?IsPDFStandAloneVersion@product@krt@@YA_NXZ
?PDFData@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?PerfEnvGetLogFilePath@PerfProxy@@YAHPA_WH@Z
?PerfEnvInitImpl@PerfProxy@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?PerfEnvTermForce@PerfProxy@@YAXXZ
?PerfEnvTermImpl@PerfProxy@@YAXXZ
?PerfLogBegin2@PerfProxy@@YAXGPBD0PAG1@Z
?PerfLogBegin@PerfProxy@@YAXGGG@Z
?PerfLogEnd2@PerfProxy@@YAXGPBD0PAG1@Z
?PerfLogEnd@PerfProxy@@YAXGGG@Z
?PerfStubBegin@PerfProxy@@YAXPBDG@Z
?PerfStubEnd@PerfProxy@@YAXPBDG@Z
?PerfToolGetBeginPerfCount@PerfProxy@@YA_JXZ
?VerifyPasswd@gpcrypt@krt@@YA_NABVQString@kso_qt@@AAVQByteArray@4@@Z
?amazonSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?app@dirs@krt@@YA?AVQString@kso_qt@@XZ
?appData@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?appDataPath@uwp@krt@@YA?AVQString@kso_qt@@_N@Z
?appName@krt@@YA?AVQString@kso_qt@@XZ
?appUniqueName@uwp@krt@@YA?AVQString@kso_qt@@XZ
?appendSubTrans@KTranslator@krt@@AAEXPAVQTranslator@kso_qt@@@Z
?appendTrans@KTranslator@krt@@QAEXABVQString@kso_qt@@ABVQStringList@4@@Z
?argc@KAppArguments@krt@@QAEAAHXZ
?argv@KAppArguments@krt@@QAEPAPADXZ
?array@KConfigsReader@krt@@UAE?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@0@Z
?array@KCryptConfigsReader@krt@@UAE?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@0@Z
?array@KProductConfigsReader@krt@@QAE?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@I@Z
?autoNomInfoSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?backgroundHostExePath@dirs@krt@@YA?AVQString@kso_qt@@XZ
?backgroundHostName@dirs@krt@@YA?AVQString@kso_qt@@XZ
?backup@dirs@krt@@YA?AVQString@kso_qt@@XZ
?cache@dirs@krt@@YA?AVQString@kso_qt@@XZ
?cibaSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?clear@KAppArguments@krt@@QAEXXZ
?clear@cache@krt@@YAXXZ
?clear@krt@@YAXXZ
?clear@locale@krt@@YAXXZ
?collectDynEvent@infocollect@krt@@YAXW4DynType@12@ABVQString@kso_qt@@@Z
?collectEvent@infocollect@krt@@YAXABVQString@kso_qt@@00H0@Z
?collectEventEx@infocollect@krt@@YAXABVQString@kso_qt@@000ABV?$QHash@VQString@kso_qt@@V12@@4@H@Z
?collectExpEvent@infocollect@krt@@YAXABVQString@kso_qt@@0000H0@Z
?collectExpView@infocollect@krt@@YAXABVQString@kso_qt@@000@Z
?collectView@infocollect@krt@@YAXABVQString@kso_qt@@0@Z
?compactLaunchExePath@dirs@krt@@YA?AVQString@kso_qt@@XZ
?companyVersionId@product@krt@@YAHXZ
?copyFileTo@i18n@krt@@YA_NABVQString@kso_qt@@0@Z
?createDlg@auth@krt@@YAXXZ
?createLocale@locale@krt@@YAPAVKLocale@12@ABVQString@kso_qt@@@Z
?current@locale@krt@@YAPAVKLocale@12@XZ
?currentLCID@locale@krt@@YAIXZ
?currentLocale@locale@krt@@YA?AVQString@kso_qt@@XZ
?customAutoNomInfoSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?customUpdateSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?decimalPoint@KLocale@locale@krt@@QBE?AVQString@kso_qt@@XZ
?decimalPoint@locale@krt@@YA?AVQChar@kso_qt@@ABVQString@4@@Z
?decrypt@KDES@krt@@QAE_NABVQString@kso_qt@@AAVQByteArray@4@@Z
?defaultAuthTypeId@auth@krt@@YA?AW4AuthorizationType@@XZ
?defaultLCID@locale@krt@@YAIXZ
?defaultLangName@i18n@krt@@YA?AVQString@kso_qt@@XZ
?defaultLocale@locale@krt@@YA?AVQString@kso_qt@@XZ
?defautLanguage@i18n@krt@@YA?AVQString@kso_qt@@XZ
?dicts@dirs@krt@@YA?AVQString@kso_qt@@XZ
?displayLCID@i18n@krt@@YAI_N@Z
?distribNumber@product@krt@@YA?AVQString@kso_qt@@XZ
?documents@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?downloadTemplates@dirs@krt@@YA?AVQString@kso_qt@@XZ
?dynamicSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?encrypt@KDES@krt@@QAE_NABVQString@kso_qt@@AAVQByteArray@4@@Z
?extraDistSrc@info@krt@@YA?AVQString@kso_qt@@XZ
?fallbackKeys@KProductConfigsReader@krt@@AAE?AV?$QList@U?$QPair@VQString@kso_qt@@V12@@kso_qt@@@kso_qt@@ABVQString@4@I@Z
?frameworks@dirs@krt@@YA?AVQString@kso_qt@@XZ
?g_perfToolEnabled@PerfProxy@@3_NC
?getAllMuiFilePaths@i18n@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@@Z
?getAppEnv@krt@@YA?AVQVariant@kso_qt@@ABVQString@3@@Z
?getArray@configs@krt@@YA?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@I@Z
?getArray@l10n@krt@@YA?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@00@Z
?getBool@configs@krt@@YA_NABVQString@kso_qt@@I@Z
?getBool@l10n@krt@@YA_NABVQString@kso_qt@@00@Z
?getBool@product@krt@@YA_NABVQString@kso_qt@@@Z
?getBoolInfo@auth@krt@@YA_NABVQString@kso_qt@@@Z
?getCacertFilePath@configs@krt@@YA?AVQString@kso_qt@@XZ
?getDateTimeString@i18n@krt@@YA?AVQString@kso_qt@@ABVQDateTime@4@W4DateTimeFormat@12@@Z
?getDateTimeString@i18n@krt@@YA?AVQString@kso_qt@@_KW4DateTimeFormat@12@@Z
?getFallbackLangList@i18n@krt@@YA?AVQStringList@kso_qt@@ABV34@@Z
?getFilePath@i18n@krt@@YA?AVQString@kso_qt@@ABV34@0@Z
?getFilePaths@i18n@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@00@Z
?getFilePaths@i18n@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@0@Z
?getFuncRegSwitchState@product@krt@@YA_NABVQString@kso_qt@@_NABUKRTRegInfo@12@@Z
?getFuncSwitchState@product@krt@@YA_NABVQString@kso_qt@@_NABUKRTRegInfo@12@@Z
?getInfo@auth@krt@@YA?AVQVariant@kso_qt@@ABVQString@4@@Z
?getInstalledDays@product@krt@@YAHXZ
?getInt@configs@krt@@YAHABVQString@kso_qt@@I@Z
?getInt@l10n@krt@@YAHABVQString@kso_qt@@00@Z
?getInt@product@krt@@YAHABVQString@kso_qt@@@Z
?getIntInfo@auth@krt@@YAHABVQString@kso_qt@@@Z
?getIsPromeMode@krt@@YA_NXZ
?getKeyboard@locale@krt@@YA_NI@Z
?getLCID@KLocale@locale@krt@@UBEIW4KLocaleCategory@23@@Z
?getLibFileName@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getLocale@KLocale@locale@krt@@UBE?AVQString@kso_qt@@W4KLocaleCategory@23@@Z
?getLocale@locale@krt@@YA?AVQString@kso_qt@@W4KLocaleCategory@12@@Z
?getLongFilePath@i18n@krt@@YA?AVQString@kso_qt@@ABV34@0@Z
?getMuiFile@i18n@krt@@YA?AVQString@kso_qt@@ABV34@00@Z
?getMuiFiles@i18n@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@00@Z
?getParam@onlineparams@krt@@YA_NABVQString@kso_qt@@AAV34@@Z
?getParam_abtest@onlineparams@krt@@YA_NABVQString@kso_qt@@0AAVQVariant@4@@Z
?getParam_extra@onlineparams@krt@@YA_NABVQString@kso_qt@@0AAVQVariant@4@@Z
?getPlan@abtest@krt@@YAXABVQString@kso_qt@@AAVQVariant@4@@Z
?getPluginFrameworkPath@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getPluginPath2@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getPluginPath3@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getPluginPath@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getPluginResourcePath@krt@@YA?AVQString@kso_qt@@ABV23@@Z
?getRawConfig@configs@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?getString@configs@krt@@YA?AVQString@kso_qt@@ABV34@I@Z
?getString@l10n@krt@@YA?AVQString@kso_qt@@ABV34@00@Z
?getString@product@krt@@YA?AVQString@kso_qt@@ABV34@I@Z
?getStringInfo@auth@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?getStringList@configs@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@I@Z
?getStringList@product@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@I@Z
?getStringListInfo@auth@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@@Z
?getUInt@l10n@krt@@YAIABVQString@kso_qt@@00@Z
?getValue@configs@krt@@YA?AVQVariant@kso_qt@@ABVQString@4@I@Z
?getValue@l10n@krt@@YA?AVQVariant@kso_qt@@ABVQString@4@00@Z
?getdcinfo@abtest@krt@@YA_NAAVQString@kso_qt@@@Z
?gotoUri@krt@@YA_NABVQString@kso_qt@@@Z
?gotoUrl@uwp@krt@@YAHABVQString@kso_qt@@@Z
?grouping@KLocale@locale@krt@@QBE?AVQString@kso_qt@@XZ
?guidSyncSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?hasLibrary@krt@@YA_NABVQString@kso_qt@@@Z
?hasPlugin@krt@@YA_NABVQString@kso_qt@@AAV23@@Z
?id@KCacheMuiSource@@UAEIXZ
?industryNumber@product@krt@@YA?AVQString@kso_qt@@XZ
?infoCollectSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?infoCollectSvr_IC@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?infoCollectSvr_QING@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?init@KAppArguments@krt@@AAEXPB_W@Z
?init@krt@@YA_NABVQString@kso_qt@@000@Z
?init@locale@krt@@YA_NXZ
?initMuiResource@i18n@krt@@YA_NXZ
?initUwpEnvPath@uwp@krt@@YAXXZ
?installRoot@uwp@krt@@YA?AVQString@kso_qt@@XZ
?installTranslation@KAppTranslators@krt@@QAEXABVQString@kso_qt@@ABVQStringList@4@@Z
?installedLanguages@i18n@krt@@YA?AVQStringList@kso_qt@@XZ
?isAppStore@product@krt@@YA_NXZ
?isCainfoVerifyPeer@product@krt@@YA_NXZ
?isChanged@KCacheMuiSource@@UAE_NXZ
?isClassicUI@product@krt@@YA_N_N@Z
?isDisableGlobalInfocollect@product@krt@@YA_N_N@Z
?isDomestic@product@krt@@YA_NXZ
?isEmpty@KTranslator@krt@@UBE_NXZ
?isEnabled@infocollect@krt@@YA_NW4EngineType@12@@Z
?isEnterprise@product@krt@@YA_NXZ
?isForeignUsers@product@krt@@YA_NXZ
?isHttpsSecurityBypass@product@krt@@YA_NXZ
?isIndependentMode@product@krt@@YA_N_N@Z
?isIndependentModeEx@product@krt@@YA_NXZ
?isInited@krt@@YA_NXZ
?isInstallPerUser@info@krt@@YA_NXZ
?isInstalled@KAppTranslators@krt@@QAE_NXZ
?isOverseasFullFeaturedProVersion@product@krt@@YA_NXZ
?isOverseasProductKeyPaidCheck@product@krt@@YA_NXZ
?isOverseasVersion@product@krt@@YA_NXZ
?isPatentGranted@product@krt@@YA_NABVQString@kso_qt@@@Z
?isPersonal@product@krt@@YA_NXZ
?isPluginConfiged@krt@@YA_NABVQString@kso_qt@@@Z
?isPluginLocalExist@krt@@YA_NABVQString@kso_qt@@@Z
?isPluginValid@krt@@YA_NABVQString@kso_qt@@@Z
?isPromeShelllessMode@product@krt@@YA_N_N@Z
?isReadonlyMode@product@krt@@YA_NXZ
?isReportAllInfoToDataWarehouse@product@krt@@YA_NXZ
?isShieldMode@product@krt@@YA_N_N@Z
?isSupportGDPRVersion@product@krt@@YA_NXZ
?isSupportRibbonScale@product@krt@@YA_NXZ
?isSupported@locale@krt@@YA_NABVQString@kso_qt@@@Z
?isSupported@product@krt@@YA_NABVQString@kso_qt@@@Z
?isThaiFeatureOpen@product@krt@@YA_NXZ
?isUseCJKScript@lang@krt@@YA_NI@Z
?isUwpProcess@uwp@krt@@YA_NXZ
?isUwpVersion@uwp@krt@@YA_NXZ
?isValidLocale@locale@krt@@YA_NABVQString@kso_qt@@@Z
?isValidMeasurementUnit@KLocale@locale@krt@@IAE_NW4KMeasurementUnit@23@@Z
?isVldTurnedOn@krt@@YA_NXZ
?kCachedTr@krt@@YAPB_WPBD00H@Z
?kCachedTrId@krt@@YAPB_WPBD@Z
?kCachedTrUtf8@krt@@YAPB_WPBD00H@Z
?keyboardLCID@locale@krt@@YAIXZ
?kingsoftData@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?kingsoftHome@dirs@krt@@YA?AVQString@kso_qt@@XZ
?ksoName@product@krt@@YA?AVQString@kso_qt@@XZ
?language@dirs@krt@@YA?AVQString@kso_qt@@ABV34@0@Z
?language@dirs@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?language@i18n@krt@@YA?AVQString@kso_qt@@W4LangFormat@12@_N@Z
?languagePacksBuildNumber@i18n@krt@@YAIXZ
?languages@i18n@krt@@YA?AVQStringList@kso_qt@@W4LangFormat@12@_N@Z
?launchExePath@dirs@krt@@YA?AVQString@kso_qt@@XZ
?launchName@dirs@krt@@YA?AVQString@kso_qt@@XZ
?launchPath@dirs@krt@@YA?AVQString@kso_qt@@XZ
?libraryPath@auth@krt@@YA?AVQString@kso_qt@@XZ
?localKingsoftHome@dirs@krt@@YA?AVQString@kso_qt@@XZ
?localParamPath@onlineparams@krt@@YA?AVQString@kso_qt@@XZ
?localeMeasurementUnit2String@KLocale@locale@krt@@IAE?AVQString@kso_qt@@W4KMeasurementUnit@23@@Z
?longPath@dirs@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?lowerVersion@info@krt@@YA?AVQString@kso_qt@@XZ
?measurementUnit@KLocale@locale@krt@@QAE?AW4KMeasurementUnit@23@XZ
?measurementUnit@locale@krt@@YA?AW4KMeasurementUnit@12@XZ
?mui@dirs@krt@@YA?AVQStringList@kso_qt@@XZ
?nameSeparator@lang@krt@@YADXZ
?nameSeparator@locale@krt@@YADXZ
?notifySvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?oemConfigFilePath@configs@krt@@YA?AVQString@kso_qt@@XZ
?oemLangName@i18n@krt@@YA?AVQString@kso_qt@@XZ
?officeConfigs@dirs@krt@@YA?AVQString@kso_qt@@XZ
?officeData@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?officeDataInDocuments@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?officeDataInKingsoftData@dirs@krt@@YA?AVQString@kso_qt@@_N@Z
?officeHome@dirs@krt@@YA?AVQString@kso_qt@@XZ
?officeInstallRoot@dirs@krt@@YA?AVQString@kso_qt@@XZ
?officeOemInfo@dirs@krt@@YA?AVQString@kso_qt@@XZ
?onlineLanguageMui@dirs@krt@@YA?AVQString@kso_qt@@XZ
?onlineParamPath@onlineparams@krt@@YA?AVQString@kso_qt@@XZ
?onlinePatent@onlineparams@krt@@YA_NABVQString@kso_qt@@AA_N@Z
?onlineSupport@onlineparams@krt@@YA_NABVQString@kso_qt@@AA_N@Z
?organization@krt@@YA?AVQString@kso_qt@@XZ
?osArch@info@krt@@YA?AVQString@kso_qt@@XZ
?osLocale@info@krt@@YA?AVQString@kso_qt@@XZ
?osVersion@info@krt@@YA?AVQString@kso_qt@@XZ
?packageFullName@uwp@krt@@YA?AVQString@kso_qt@@XZ
?pid@krt@@YAHXZ
?platform@info@krt@@YA?AVQString@kso_qt@@XZ
?pluginPlgFilePath@krt@@YA?AVQString@kso_qt@@XZ
?prehook@auth@krt@@YA_NABVQString@kso_qt@@ABVQVariant@4@AAV54@@Z
?prehook@auth@krt@@YA_NABVQString@kso_qt@@PAX1@Z
?prehook@auth@krt@@YA_NABVQString@kso_qt@@_NPAX@Z
?prependSubTrans@KTranslator@krt@@AAEXPAVQTranslator@kso_qt@@@Z
?productConfigFilePath@configs@krt@@YA?AVQString@kso_qt@@XZ
?productName@krt@@YA?AVQString@kso_qt@@XZ
?productVersion@krt@@YA?AVQString@kso_qt@@XZ
?queryCommonRegValue@settings@krt@@YA?AVQVariant@kso_qt@@W4Scope@QSettings@4@ABVQString@4@ABV34@@Z
?queryString@settings@krt@@YA?AVQString@kso_qt@@ABV34@0_N@Z
?queryString@settings@krt@@YA?AVQString@kso_qt@@W4Scope@QSettings@4@ABV34@11@Z
?queryStringList@settings@krt@@YA?AVQStringList@kso_qt@@ABVQString@4@@Z
?queryValue@settings@krt@@YA?AVQVariant@kso_qt@@W4Scope@QSettings@4@ABVQString@4@1ABV34@@Z
?regionID@product@krt@@YAHXZ
?reinstallSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?removeTrans@KTranslator@krt@@QAEXABVQString@kso_qt@@@Z
?reset@KAppTranslators@krt@@QAEXXZ
?resources@dirs@krt@@YA?AVQString@kso_qt@@XZ
?script@lang@krt@@YA?AVQString@kso_qt@@IABV34@@Z
?separator@dirs@krt@@YA?AVQChar@kso_qt@@XZ
?serverUrl@product@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?sessionId@info@krt@@YA?AVQString@kso_qt@@XZ
?setAppEnv@krt@@YA_NABVQString@kso_qt@@AAVQVariant@3@@Z
?setAppName@krt@@YAXABVQString@kso_qt@@@Z
?setCurrent@locale@krt@@YA_NPAVKLocale@12@@Z
?setDecimalPoint@KLocale@locale@krt@@UAEXABVQString@kso_qt@@@Z
?setEnabled@infocollect@krt@@YAX_NW4EngineType@12@@Z
?setGrouping@KLocale@locale@krt@@UAEXABVQString@kso_qt@@@Z
?setIsPromeMode@krt@@YAX_N@Z
?setLocale@KLocale@locale@krt@@UAE_NW4KLocaleCategory@23@ABVQString@kso_qt@@@Z
?setLocale@locale@krt@@YA_NW4KLocaleCategory@12@ABVQString@kso_qt@@@Z
?setLocale@locale@krt@@YA_NW4KLocaleCategory@12@I@Z
?setMeasurementUnit@KLocale@locale@krt@@QAEXW4KMeasurementUnit@23@@Z
?setMeasurementUnit@locale@krt@@YAXW4KMeasurementUnit@12@@Z
?setPid@krt@@YAXH@Z
?setThousandsSeparator@KLocale@locale@krt@@UAEXABVQString@kso_qt@@@Z
?setValue@cache@krt@@YA_NPAVKCacheSource@@ABVQString@kso_qt@@ABVQVariant@5@@Z
?setValue@settings@krt@@YAXABVQString@kso_qt@@0_N@Z
?setValue@settings@krt@@YAXABVQString@kso_qt@@ABVQStringList@4@_N@Z
?setValue@settings@krt@@YAXW4Scope@QSettings@kso_qt@@ABVQString@5@1ABVQVariant@5@@Z
?setup@KAppTranslators@krt@@QAE_NABVQStringList@kso_qt@@@Z
?setupConfig@info@krt@@YA?AVQVariant@kso_qt@@VQString@4@@Z
?string2LocaleMeasurementUnit@KLocale@locale@krt@@IAE?AW4KMeasurementUnit@23@ABVQString@kso_qt@@@Z
?subVersionID@product@krt@@YAHXZ
?subVersionName@product@krt@@YA?AVQString@kso_qt@@XZ
?supportSecSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?supportSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?system@locale@krt@@YA?AVQString@kso_qt@@XZ
?systemDefault@locale@krt@@YA?AVQString@kso_qt@@XZ
?systemDefaultLCID@locale@krt@@YAIXZ
?systemLCID@locale@krt@@YAIXZ
?systemUiLanguages@i18n@krt@@YA?AVQStringList@kso_qt@@XZ
?templates@dirs@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?templates@dirs@krt@@YA?AVQString@kso_qt@@XZ
?thousandsSeparator@KLocale@locale@krt@@QBE?AVQString@kso_qt@@XZ
?toDouble@locale@krt@@YANPBDPAPAD0@Z
?toDouble@locale@krt@@YANPB_WPAPA_W0@Z
?toLCID@lang@krt@@YAIABVQString@kso_qt@@I@Z
?toLCID@locale@krt@@YAIABVQString@kso_qt@@I@Z
?toLocaleName@locale@krt@@YA?AVQString@kso_qt@@IABV34@@Z
?toName@lang@krt@@YA?AVQString@kso_qt@@IABV34@@Z
?toNativeName@locale@krt@@YA?AVQString@kso_qt@@IABV34@@Z
?trId@i18n@krt@@YA?BVQString@kso_qt@@PBD@Z
?tranlator@KAppTranslators@krt@@QBEPAVKTranslator@2@ABVQString@kso_qt@@@Z
?translate@KTranslator@krt@@QBE?AVQString@kso_qt@@ABV34@@Z
?translate@KTranslator@krt@@UBE?AVQString@kso_qt@@PBD00H@Z
?translateHotKey@l10n@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?translateShortcut@l10n@krt@@YA?AVQString@kso_qt@@ABV34@@Z
?uiLanguage@i18n@krt@@YA?AVQString@kso_qt@@_N@Z
?uiLanguages@i18n@krt@@YA?AVQStringList@kso_qt@@_N@Z
?uninstallTranslation@KAppTranslators@krt@@QAEXABVQString@kso_qt@@@Z
?updateMemoryParam@onlineparams@krt@@YAXXZ
?updatePluginPlg@krt@@YA_NXZ
?updateSecSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?updateSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ
?userDefault@locale@krt@@YA?AVQString@kso_qt@@XZ
?userDefaultLCID@locale@krt@@YAIXZ
?userLanguages@i18n@krt@@YA?AVQStringList@kso_qt@@_N@Z
?userSettingLanguage@i18n@krt@@YA?AVQString@kso_qt@@XZ
?userSettingLanguages@i18n@krt@@YA?AVQStringList@kso_qt@@XZ
?utility@dirs@krt@@YA?AVQString@kso_qt@@XZ
?uwpAppdata@uwp@krt@@YA?AVQString@kso_qt@@XZ
?uwpLocalAppdata@uwp@krt@@YA?AVQString@kso_qt@@XZ
?uwpimpPath@uwp@krt@@YA?AVQString@kso_qt@@XZ
?value@KConfigsReader@krt@@UAE?AVQVariant@kso_qt@@ABVQString@4@0@Z
?value@KCryptConfigsReader@krt@@UAE?AVQVariant@kso_qt@@ABVQString@4@0@Z
?value@KMuiSettings@krt@@QBE?AVQVariant@kso_qt@@ABVQString@4@ABV34@@Z
?value@KProductConfigsReader@krt@@QAE?AVQVariant@kso_qt@@ABVQString@4@I@Z
?value@cache@krt@@YA?AVQVariant@kso_qt@@PAVKCacheSource@@ABVQString@4@ABV34@@Z
?values@KMuiSettings@krt@@QBE?AV?$QList@VQVariant@kso_qt@@@kso_qt@@ABVQString@4@@Z
?version@info@krt@@YA?AVQString@kso_qt@@XZ
?versionID@product@krt@@YAHXZ
?versionName@product@krt@@YA?AVQString@kso_qt@@XZ
?winMajorVersion@info@krt@@YAIXZ
?winMinorVersion@info@krt@@YAIXZ
?wtoolex@dirs@krt@@YA?AVQString@kso_qt@@XZ
Sections
.text Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 640KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE