O:\src\pywin32\build\temp.win32-2.7\Release\pythoncom.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2_NeikiAnalytics.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2_NeikiAnalytics.exe
-
Size
464KB
-
MD5
9216d3542ed35ecc35bfb1738d4a9590
-
SHA1
def5e2546139fa4fc4bba8c172078df14cb2648f
-
SHA256
62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2
-
SHA512
1533c6a397326d29b82ed4d6c0e7abcbdd49c8e379884d58540db21e9249dc3d47829df10aca72e7ad65fffdf76b20e3020082f22e65771e9972d089b2bc2772
-
SSDEEP
12288:EiP8K6UxSlFxu9vIzklpdcfi9UBjvrEH7wQ:Ei5vIQelrEH7r
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2_NeikiAnalytics.exe
Files
-
62ab951946863bd2e9c2346c57e30121afd448363cf059486dc8ed8efd78dac2_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
56f7048cfddf09943c2105da8809ca17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
oleaut32
SysAllocString
SetErrorInfo
CreateErrorInfo
SysFreeString
GetErrorInfo
VariantClear
VariantInit
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantChangeType
VariantCopyInd
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetRecordInfo
GetRecordInfoFromGuids
GetRecordInfoFromTypeInfo
GetActiveObject
RegisterActiveObject
RevokeActiveObject
CreateTypeLi
CreateTypeLib2
SysStringLen
LoadTypeLi
LoadRegTypeLi
LHashValOfNameSys
QueryPathOfRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
ole32
PropVariantClear
StringFromGUID2
CoDisableCallCancellation
CoEnableCallCancellation
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleSaveToStream
OleLoadFromStream
OleLoad
CoGetObject
CoReleaseMarshalData
CoUnmarshalInterface
CoMarshalInterface
CoCreateFreeThreadedMarshaler
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
GetRunningObjectTable
CoFreeUnusedLibraries
GetClassFile
CreateItemMoniker
CreateFileMoniker
CreatePointerMoniker
MkParseDisplayName
CreateBindCtx
ProgIDFromCLSID
CoTaskMemFree
CoCreateGuid
CoTreatAsClass
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
StgOpenStorage
StgIsStorageFile
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
WriteClassStm
ReadClassStm
WriteClassStg
ReadClassStg
ReleaseStgMedium
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoGetCallContext
user32
PostThreadMessageA
GetMessageA
TranslateMessage
PeekMessageA
DispatchMessageA
wsprintfA
python27
_Py_TrueStruct
PyObject_Size
PyObject_SetAttrString
PyTuple_SetItem
PyObject_HasAttrString
PySys_GetObject
PyFloat_Type
PyLong_AsLong
PyLong_AsUnsignedLong
PyErr_ExceptionMatches
PyExc_OverflowError
PyLong_AsLongLong
PyLong_AsUnsignedLongLong
PyLong_AsDouble
_PyLong_NumBits
_PyLong_Sign
PyTuple_Size
PyEval_CallObjectWithKeywords
PyObject_CallFunction
PyNumber_Long
PyArg_ParseTupleAndKeywords
PyLong_AsVoidPtr
PyLong_FromDouble
PyNumber_Check
PyExc_AttributeError
Py_VaBuildValue
PyString_AsString
_Py_NotImplementedStruct
PyString_FromString
PyErr_NoMemory
PyMem_Malloc
PyMem_Free
PyString_FromStringAndSize
_Py_ZeroStruct
PyModule_GetDict
PyObject_RichCompareBool
PyString_ConcatAndDel
PyObject_Repr
PyString_Concat
PyLong_FromVoidPtr
PyObject_AsReadBuffer
PyExc_NotImplementedError
PyErr_WarnEx
PyExc_PendingDeprecationWarning
Py_FrozenFlag
PyErr_NewException
PyType_Ready
Py_InitModule4
PyMapping_HasKey
PyCObject_FromVoidPtr
PyCObject_AsVoidPtr
PyCObject_Type
PyLong_Type
PyExc_IndexError
PyObject_GenericSetAttr
PyArg_Parse
PySequence_Tuple
_PyString_Resize
PyObject_IsTrue
PyLong_FromUnsignedLongLong
PyLong_FromLongLong
PyExc_ValueError
PyObject_Str
PyLong_AsUnsignedLongMask
PyNumber_Float
PyFloat_AsDouble
PyTuple_GetItem
PyBuffer_New
PyFloat_FromDouble
PyBool_FromLong
PyLong_FromUnsignedLong
PyLong_FromLong
PyBuffer_Type
PySequence_Check
PyInt_FromSsize_t
PyDict_GetItem
PyDict_SetItem
PyInt_AsSsize_t
PyObject_IsInstance
PyInt_AsUnsignedLongMask
PyObject_GenericGetAttr
PyTuple_New
PySeqIter_New
PySequence_Size
PyExc_StopIteration
PyErr_SetNone
PyObject_IsSubclass
PyType_Type
PyErr_Occurred
PyInt_FromLong
PyErr_SetObject
PyObject_CallMethod
PyImport_ImportModule
PyErr_NormalizeException
PyDict_New
Py_BuildValue
PyDict_SetItemString
PyObject_Call
PyErr_Print
PyErr_Fetch
PyFile_WriteString
PyErr_Restore
PyEval_RestoreThread
PyErr_GivenExceptionMatches
PyExc_TypeError
PyErr_Format
PySequence_GetItem
PyList_New
PyList_Append
PySys_SetObject
PyEval_InitThreads
PyEval_SaveThread
PyGILState_Release
PyGILState_Ensure
PyArg_ParseTuple
PyExc_RuntimeError
PyObject_GetAttrString
_Py_NoneStruct
PyErr_Clear
PyNumber_Int
PyInt_AsLong
PyExc_MemoryError
PyErr_SetString
PySys_SetArgv
PyRun_SimpleFileExFlags
Py_IsInitialized
PyDict_GetItemString
Py_Initialize
PyType_IsSubtype
pywintypes27
?PyWinObject_AsWCHARArray@@YAHPAU_object@@PAPAPA_WPAKH@Z
?PyWinObject_FreeWCHARArray@@YAXPAPA_WK@Z
?PyWinObject_AsDWORDArray@@YAHPAU_object@@PAPAKPAKH@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPA_W@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWinMethod_NewTime@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewIID@@YAPAU_object@@PAU1@0@Z
?_MakeAbsoluteSD@@YAHPAXPAPAX@Z
?FreeAbsoluteSD@@YAXPAX@Z
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsTaskAllocatedWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinCoreString_FromString@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_FreeWCHAR@@YAXPA_W@Z
??0PyWin_AutoFreeBstr@@QAE@PA_W@Z
??1PyWin_AutoFreeBstr@@QAE@XZ
?PyWinObject_FreeBstr@@YAXPA_W@Z
?SetBstr@PyWin_AutoFreeBstr@@QAEXPA_W@Z
?PyWinObject_AsFILETIME@@YAHPAU_object@@PAU_FILETIME@@@Z
?PyWinObject_AsIID@@YAHPAU_object@@PAU_GUID@@@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsLARGE_INTEGER@@YAHPAU_object@@PAT_LARGE_INTEGER@@@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinObject_AsDATE@@YAHPAU_object@@PAN@Z
?PyWinTime_Check@@YAHPAU_object@@@Z
?PyWinObject_AsWriteBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_FromLARGE_INTEGER@@YAPAU_object@@AAT_LARGE_INTEGER@@@Z
?PyWinObject_FromDATE@@YAPAU_object@@N@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@AAT_ULARGE_INTEGER@@@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWinObject_FromBstr@@YAPAU_object@@QA_WH@Z
?GetPythonTraceback@@YAPADPAU_object@@00@Z
?PyWinExc_COMError@@3PAU_object@@A
?PyWinObject_AsBstr@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinGlobals_Ensure@@YAHXZ
?PyWinCoreString_FromString@@YAPAU_object@@PBDH@Z
?PyWin_ReleaseGlobalLock@@YAXXZ
?PyWin_AcquireGlobalLock@@YAXXZ
msvcr90
??2@YAPAXI@Z
__CxxFrameHandler3
_purecall
fclose
fopen
free
malloc
fprintf
__iob_func
_vsnprintf
strncpy
_snprintf
strncat
memset
memcpy
qsort
sprintf
_except_handler3
wcsncpy
printf
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
kernel32
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
MultiByteToWideChar
OutputDebugStringA
FormatMessageA
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
LoadLibraryA
VirtualFree
VirtualProtect
VirtualAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Exports
Exports
??0CPyFactory@@QAE@ABU_GUID@@@Z
??0CPyFactory@@QAE@ABV0@@Z
??0PyComEnumProviderTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z0@Z
??0PyComEnumTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyComTypeObject@@QAE@PBDPAV0@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyGOleWindow@@IAE@PAU_object@@@Z
??0PyGOleWindow@@QAE@ABV0@@Z
??0PyGPersist@@IAE@PAU_object@@@Z
??0PyGPersist@@QAE@ABV0@@Z
??0PyGatewayBase@@IAE@PAU_object@@@Z
??0PyGatewayBase@@QAE@ABV0@@Z
??0PyIBase@@IAE@XZ
??0PyIBase@@QAE@ABV0@@Z
??0PyIBindCtx@@IAE@PAUIUnknown@@@Z
??0PyIBindCtx@@QAE@ABV0@@Z
??0PyIClassFactory@@IAE@PAUIUnknown@@@Z
??0PyIClassFactory@@QAE@ABV0@@Z
??0PyIConnectionPoint@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPoint@@QAE@ABV0@@Z
??0PyIConnectionPointContainer@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPointContainer@@QAE@ABV0@@Z
??0PyIDispatch@@IAE@PAUIUnknown@@@Z
??0PyIDispatch@@QAE@ABV0@@Z
??0PyIDispatchEx@@IAE@PAUIUnknown@@@Z
??0PyIDispatchEx@@QAE@ABV0@@Z
??0PyIEnumMoniker@@IAE@PAUIUnknown@@@Z
??0PyIEnumMoniker@@QAE@ABV0@@Z
??0PyIEnumVARIANT@@IAE@PAUIUnknown@@@Z
??0PyIEnumVARIANT@@QAE@ABV0@@Z
??0PyIMoniker@@IAE@PAUIUnknown@@@Z
??0PyIMoniker@@QAE@ABV0@@Z
??0PyIOleWindow@@IAE@PAUIUnknown@@@Z
??0PyIOleWindow@@QAE@ABV0@@Z
??0PyIPersist@@IAE@PAUIUnknown@@@Z
??0PyIPersist@@QAE@ABV0@@Z
??0PyIPersistStream@@IAE@PAUIUnknown@@@Z
??0PyIPersistStream@@QAE@ABV0@@Z
??0PyIPersistStreamInit@@IAE@PAUIUnknown@@@Z
??0PyIPersistStreamInit@@QAE@ABV0@@Z
??0PyIProvideClassInfo2@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo2@@QAE@ABV0@@Z
??0PyIProvideClassInfo@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo@@QAE@ABV0@@Z
??0PyIServiceProvider@@IAE@PAUIUnknown@@@Z
??0PyIServiceProvider@@QAE@ABV0@@Z
??0PyIStream@@IAE@PAUIUnknown@@@Z
??0PyIStream@@QAE@ABV0@@Z
??0PyITypeComp@@IAE@PAUIUnknown@@@Z
??0PyITypeComp@@QAE@ABV0@@Z
??0PyITypeInfo@@IAE@PAUIUnknown@@@Z
??0PyITypeInfo@@QAE@ABV0@@Z
??0PyITypeLib@@IAE@PAUIUnknown@@@Z
??0PyITypeLib@@QAE@ABV0@@Z
??0PyIUnknown@@IAE@PAUIUnknown@@@Z
??0PyIUnknown@@QAE@ABV0@@Z
??0PyOleArgNotFound@@QAE@XZ
??0PyOleEmpty@@QAE@XZ
??0PyOleMissing@@QAE@XZ
??0PyOleNothing@@QAE@XZ
??0PySTGMEDIUM@@QAE@PAUtagSTGMEDIUM@@@Z
??0PythonOleArgHelper@@QAE@XZ
??1CPyFactory@@QAE@XZ
??1PyComEnumProviderTypeObject@@QAE@XZ
??1PyComEnumTypeObject@@QAE@XZ
??1PyComTypeObject@@QAE@XZ
??1PyGOleWindow@@UAE@XZ
??1PyGPersist@@UAE@XZ
??1PyGatewayBase@@MAE@XZ
??1PyIBase@@MAE@XZ
??1PyIBindCtx@@MAE@XZ
??1PyIClassFactory@@MAE@XZ
??1PyIConnectionPoint@@MAE@XZ
??1PyIConnectionPointContainer@@MAE@XZ
??1PyIDispatch@@MAE@XZ
??1PyIDispatchEx@@MAE@XZ
??1PyIEnumMoniker@@MAE@XZ
??1PyIEnumVARIANT@@MAE@XZ
??1PyIMoniker@@MAE@XZ
??1PyIOleWindow@@MAE@XZ
??1PyIPersist@@MAE@XZ
??1PyIPersistStream@@MAE@XZ
??1PyIPersistStreamInit@@MAE@XZ
??1PyIProvideClassInfo2@@MAE@XZ
??1PyIProvideClassInfo@@MAE@XZ
??1PyIServiceProvider@@MAE@XZ
??1PyIStream@@MAE@XZ
??1PyITypeComp@@MAE@XZ
??1PyITypeInfo@@MAE@XZ
??1PyITypeLib@@MAE@XZ
??1PyIUnknown@@MAE@XZ
??1PySTGMEDIUM@@QAE@XZ
??1PythonOleArgHelper@@QAE@XZ
??4CPyFactory@@QAEAAV0@ABV0@@Z
??4PyComEnumProviderTypeObject@@QAEAAV0@ABV0@@Z
??4PyComEnumTypeObject@@QAEAAV0@ABV0@@Z
??4PyComTypeObject@@QAEAAV0@ABV0@@Z
??4PyGOleWindow@@QAEAAV0@ABV0@@Z
??4PyGPersist@@QAEAAV0@ABV0@@Z
??4PyGatewayBase@@QAEAAV0@ABV0@@Z
??4PyIBase@@QAEAAV0@ABV0@@Z
??4PyIBindCtx@@QAEAAV0@ABV0@@Z
??4PyIClassFactory@@QAEAAV0@ABV0@@Z
??4PyIConnectionPoint@@QAEAAV0@ABV0@@Z
??4PyIConnectionPointContainer@@QAEAAV0@ABV0@@Z
??4PyIDispatch@@QAEAAV0@ABV0@@Z
??4PyIDispatchEx@@QAEAAV0@ABV0@@Z
??4PyIEnumMoniker@@QAEAAV0@ABV0@@Z
??4PyIEnumVARIANT@@QAEAAV0@ABV0@@Z
??4PyIMoniker@@QAEAAV0@ABV0@@Z
??4PyIOleWindow@@QAEAAV0@ABV0@@Z
??4PyIPersist@@QAEAAV0@ABV0@@Z
??4PyIPersistStream@@QAEAAV0@ABV0@@Z
??4PyIPersistStreamInit@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo2@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo@@QAEAAV0@ABV0@@Z
??4PyIServiceProvider@@QAEAAV0@ABV0@@Z
??4PyIStream@@QAEAAV0@ABV0@@Z
??4PyITypeComp@@QAEAAV0@ABV0@@Z
??4PyITypeInfo@@QAEAAV0@ABV0@@Z
??4PyITypeLib@@QAEAAV0@ABV0@@Z
??4PyIUnknown@@QAEAAV0@ABV0@@Z
??4PyOleArgNotFound@@QAEAAV0@ABV0@@Z
??4PyOleEmpty@@QAEAAV0@ABV0@@Z
??4PyOleMissing@@QAEAAV0@ABV0@@Z
??4PyOleNothing@@QAEAAV0@ABV0@@Z
??4PySTGMEDIUM@@QAEAAV0@ABV0@@Z
??4PythonOleArgHelper@@QAEAAV0@ABV0@@Z
??_7CPyFactory@@6B@
??_7PyGOleWindow@@6B@
??_7PyGOleWindow@@6BIDispatchEx@@@
??_7PyGOleWindow@@6BIInternalUnwrapPythonObject@@@
??_7PyGOleWindow@@6BISupportErrorInfo@@@
??_7PyGPersist@@6B@
??_7PyGPersist@@6BIDispatchEx@@@
??_7PyGPersist@@6BIInternalUnwrapPythonObject@@@
??_7PyGPersist@@6BISupportErrorInfo@@@
??_7PyGatewayBase@@6BIDispatchEx@@@
??_7PyGatewayBase@@6BIInternalUnwrapPythonObject@@@
??_7PyGatewayBase@@6BISupportErrorInfo@@@
??_7PyIBase@@6B@
??_7PyIBindCtx@@6B@
??_7PyIClassFactory@@6B@
??_7PyIConnectionPoint@@6B@
??_7PyIConnectionPointContainer@@6B@
??_7PyIDispatch@@6B@
??_7PyIDispatchEx@@6B@
??_7PyIEnumMoniker@@6B@
??_7PyIEnumVARIANT@@6B@
??_7PyIMoniker@@6B@
??_7PyIOleWindow@@6B@
??_7PyIPersist@@6B@
??_7PyIPersistStream@@6B@
??_7PyIPersistStreamInit@@6B@
??_7PyIProvideClassInfo2@@6B@
??_7PyIProvideClassInfo@@6B@
??_7PyIServiceProvider@@6B@
??_7PyIStream@@6B@
??_7PyITypeComp@@6B@
??_7PyITypeInfo@@6B@
??_7PyITypeLib@@6B@
??_7PyIUnknown@@6B@
??_FPySTGMEDIUM@@QAEXXZ
?AddRef@CPyFactory@@UAGKXZ
?AddRef@PyGOleWindow@@MAGKXZ
?AddRef@PyGPersist@@MAGKXZ
?AddRef@PyGatewayBase@@UAGKXZ
?Advise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?Bind@PyITypeComp@@QAEPAU_object@@PA_WG@Z
?BindToObject@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindToStorage@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindType@PyITypeComp@@QAEPAU_object@@PA_W@Z
?Clone@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Clone@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Clone@PyIStream@@SAPAU_object@@PAU2@0@Z
?Close@PySTGMEDIUM@@QAEXXZ
?Commit@PyIStream@@SAPAU_object@@PAU2@0@Z
?ComposeWith@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?ContextSensitiveHelp@PyGOleWindow@@MAGJH@Z
?ContextSensitiveHelp@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?CopyTo@PyIStream@@SAPAU_object@@PAU2@0@Z
?CopyTo@PySTGMEDIUM@@QAEHPAUtagSTGMEDIUM@@@Z
?CreateInstance@CPyFactory@@UAGJPAUIUnknown@@ABU_GUID@@PAPAX@Z
?CreateInstance@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?CreateNewPythonInstance@CPyFactory@@IAGJABU_GUID@@0PAPAU_object@@@Z
?DeleteMemberByDispID@PyGatewayBase@@UAGJJ@Z
?DeleteMemberByDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DeleteMemberByName@PyGatewayBase@@UAGJPA_WK@Z
?DeleteMemberByName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DropOwnership@PySTGMEDIUM@@QAEXXZ
?Enum@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?EnumConnectionPoints@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?EnumConnections@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?EnumObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?FindConnectionPoint@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?GetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetClassID@PyGPersist@@MAGJPAU_GUID@@@Z
?GetClassID@PyIPersist@@SAPAU_object@@PAU2@0@Z
?GetClassInfoA@PyIProvideClassInfo@@SAPAU_object@@PAU2@0@Z
?GetConnectionInterface@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetConnectionPointContainer@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetContainingTypeLib@PyITypeInfo@@QAEPAU_object@@XZ
?GetDispID@PyGatewayBase@@UAGJPA_WKPAJ@Z
?GetDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetDisplayName@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?GetDocumentation@PyITypeInfo@@QAEPAU_object@@J@Z
?GetDocumentation@PyITypeLib@@QAEPAU_object@@H@Z
?GetFuncDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetGUID@PyIProvideClassInfo2@@SAPAU_object@@PAU2@0@Z
?GetI@PyIBindCtx@@SAPAUIBindCtx@@PAU_object@@@Z
?GetI@PyIClassFactory@@SAPAUIClassFactory@@PAU_object@@@Z
?GetI@PyIConnectionPoint@@SAPAUIConnectionPoint@@PAU_object@@@Z
?GetI@PyIConnectionPointContainer@@SAPAUIConnectionPointContainer@@PAU_object@@@Z
?GetI@PyIDispatch@@SAPAUIDispatch@@PAU_object@@@Z
?GetI@PyIDispatchEx@@SAPAUIDispatchEx@@PAU_object@@@Z
?GetI@PyIEnumMoniker@@SAPAUIEnumMoniker@@PAU_object@@@Z
?GetI@PyIEnumVARIANT@@SAPAUIEnumVARIANT@@PAU_object@@@Z
?GetI@PyIMoniker@@SAPAUIMoniker@@PAU_object@@@Z
?GetI@PyIOleWindow@@SAPAUIOleWindow@@PAU_object@@@Z
?GetI@PyIPersist@@SAPAUIPersist@@PAU_object@@@Z
?GetI@PyIPersistStream@@SAPAUIPersistStream@@PAU_object@@@Z
?GetI@PyIPersistStreamInit@@SAPAUIPersistStreamInit@@PAU_object@@@Z
?GetI@PyIProvideClassInfo2@@SAPAUIProvideClassInfo2@@PAU_object@@@Z
?GetI@PyIProvideClassInfo@@SAPAUIProvideClassInfo@@PAU_object@@@Z
?GetI@PyIServiceProvider@@SAPAUIServiceProvider@@PAU_object@@@Z
?GetI@PyIStream@@SAPAUIStream@@PAU_object@@@Z
?GetI@PyITypeComp@@SAPAUITypeComp@@PAU_object@@@Z
?GetI@PyITypeInfo@@SAPAUITypeInfo@@PAU_object@@@Z
?GetI@PyITypeLib@@SAPAUITypeLib@@PAU_object@@@Z
?GetI@PyIUnknown@@SAPAUIUnknown@@PAU_object@@@Z
?GetIDsOfNames@PyGatewayBase@@UAGJABU_GUID@@PAPA_WIKPAJ@Z
?GetIDsOfNames@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetIID@PyGOleWindow@@MAE?AU_GUID@@XZ
?GetIID@PyGPersist@@MAE?AU_GUID@@XZ
?GetIID@PyGatewayBase@@UAE?AU_GUID@@XZ
?GetImplTypeFlags@PyITypeInfo@@QAEPAU_object@@H@Z
?GetLibAttr@PyITypeLib@@QAEPAU_object@@XZ
?GetMemberName@PyGatewayBase@@UAGJJPAPA_W@Z
?GetMemberName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetMemberProperties@PyGatewayBase@@UAGJJKPAK@Z
?GetMemberProperties@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetNameSpaceParent@PyGatewayBase@@UAGJPAPAUIUnknown@@@Z
?GetNames@PyITypeInfo@@QAEPAU_object@@J@Z
?GetNextDispID@PyGatewayBase@@UAGJKJPAJ@Z
?GetNextDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetRefTypeInfo@PyITypeInfo@@QAEPAU_object@@K@Z
?GetRefTypeOfImplType@PyITypeInfo@@QAEPAU_object@@H@Z
?GetRunningObjectTable@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetSizeMax@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?GetTypeAttr@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfo@PyGatewayBase@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfo@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfo@PyITypeLib@@QAEPAU_object@@H@Z
?GetTypeInfoCount@PyGatewayBase@@UAGJPAI@Z
?GetTypeInfoCount@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfoCount@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfoOfGuid@PyITypeLib@@QAEPAU_object@@ABU_GUID@@@Z
?GetTypeInfoType@PyITypeLib@@QAEPAU_object@@H@Z
?GetVarDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetWindow@PyGOleWindow@@MAGJPAPAUHWND__@@@Z
?GetWindow@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?Hash@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?InitNew@PyIPersistStreamInit@@SAPAU_object@@PAU2@0@Z
?InterfaceSupportsErrorInfo@PyGatewayBase@@UAGJABU_GUID@@@Z
?Invoke@PyGatewayBase@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Invoke@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeEx@PyGatewayBase@@UAGJJKGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAUIServiceProvider@@@Z
?InvokeEx@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?InvokeTypes@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeViaPolicy@PyGatewayBase@@MAAJPBDPAPAU_object@@0ZZ
?IsDirty@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?IsEqual@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?IsSystemMoniker@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?Load@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?LockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?LockServer@CPyFactory@@UAGJH@Z
?LockServer@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?MakeBstrToObj@@YAPAU_object@@QA_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_WH@Z
?MakeObjToVariant@PythonOleArgHelper@@QAEHPAU_object@@PAUtagVARIANT@@0@Z
?MakePythonArgumentTuples@@YAHPAPAU_object@@PAPAVPythonOleArgHelper@@01PAUtagDISPPARAMS@@@Z
?MakeVariantToObj@PythonOleArgHelper@@QAEPAU_object@@PAUtagVARIANT@@@Z
?Next@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Next@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?ParseTypeInformation@PythonOleArgHelper@@QAEHPAU_object@@@Z
?PyCom_BstrFromPyObject@@YAHPAU_object@@PAPA_WH@Z
?PyCom_BuildInternalPyException@@YAPAU_object@@PAD@Z
?PyCom_BuildPyException@@YAPAU_object@@JPAUIUnknown@@ABU_GUID@@@Z
?PyCom_BuildPyExceptionFromEXCEPINFO@@YAPAU_object@@JPAUtagEXCEPINFO@@I@Z
?PyCom_DLLAddRef@@YAXXZ
?PyCom_DLLReleaseRef@@YAXXZ
?PyCom_EnableQuitMessage@@YAXK@Z
?PyCom_ExcepInfoFromPyException@@YAXPAUtagEXCEPINFO@@@Z
?PyCom_ExcepInfoFromPyObject@@YAHPAU_object@@PAUtagEXCEPINFO@@PAJ@Z
?PyCom_InterfaceFromPyInstanceOrObject@@YAHPAU_object@@ABU_GUID@@PAPAXH@Z
?PyCom_IsGatewayRegistered@@YAHABU_GUID@@@Z
?PyCom_LogF@@YAXPBDZZ
?PyCom_LoggerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerNonServerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerWarning@@YAXPAU_object@@PBDZZ
?PyCom_PyObjectAsSTATPROPSETSTG@@YAHPAU_object@@PAUtagSTATPROPSETSTG@@@Z
?PyCom_PyObjectAsSTATSTG@@YAHPAU_object@@PAUtagSTATSTG@@K@Z
?PyCom_PyObjectAsSTGOPTIONS@@YAHPAU_object@@PAPAUtagSTGOPTIONS@@@Z
?PyCom_PyObjectFromExcepInfo@@YAPAU_object@@PBUtagEXCEPINFO@@@Z
?PyCom_PyObjectFromSAFEARRAY@@YAPAU_object@@PAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_PyObjectFromSTATPROPSETSTG@@YAPAU_object@@PAUtagSTATPROPSETSTG@@@Z
?PyCom_PyObjectFromSTATSTG@@YAPAU_object@@PAUtagSTATSTG@@@Z
?PyCom_RegisterClientType@@YAHPAU_typeobject@@PBU_GUID@@@Z
?PyCom_RegisterExtensionSupport@@YAHPAU_object@@PBUPyCom_InterfaceSupportInfo@@H@Z
?PyCom_RegisterGatewayObject@@YAJABU_GUID@@P6AJPAU_object@@PAVPyGatewayBase@@PAPAX0@ZPBD@Z
?PyCom_SAFEARRAYFromPyObject@@YAHPAU_object@@PAPAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z
?PyCom_SetAndLogCOMErrorFromPyExceptionEx@@YAJPAU_object@@PBDABU_GUID@@@Z
?PyCom_SetCOMErrorFromPyException@@YAJABU_GUID@@@Z
?PyCom_SetCOMErrorFromSimple@@YAJJABU_GUID@@PBD@Z
?PyCom_StreamMessage@@YAXPBD@Z
?PyGatewayConstruct@PyGOleWindow@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGPersist@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGatewayBase@@SAJPAU_object@@PAV1@PAPAXABU_GUID@@@Z
?PyObConstruct@PyIBindCtx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIClassFactory@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPoint@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPointContainer@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatch@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatchEx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumVARIANT@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIOleWindow@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersist@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStreamInit@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo2@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIServiceProvider@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeComp@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeLib@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIUnknown@@SAPAV1@PAUIUnknown@@@Z
?PyObject_AsCurrency@@YAHPAU_object@@PATtagCY@@@Z
?PyObject_AsOLEMENUGROUPWIDTHS@@YAHPAU_object@@PAUtagOleMenuGroupWidths@@@Z
?PyObject_AsPROPVARIANT@@YAHPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromCurrency@@YAPAU_object@@AATtagCY@@@Z
?PyObject_FromOLEMENUGROUPWIDTHS@@YAPAU_object@@PBUtagOleMenuGroupWidths@@@Z
?PyObject_FromPROPVARIANT@@YAPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromPROPVARIANTs@@YAPAU_object@@PAUtagPROPVARIANT@@K@Z
?PyObject_FromSTGMEDIUM@@YAPAVPySTGMEDIUM@@PAUtagSTGMEDIUM@@@Z
?PyOleArgNotFoundType@@3U_typeobject@@A
?PyOleEmptyType@@3U_typeobject@@A
?PyOleMissingType@@3U_typeobject@@A
?PyOleNothingType@@3U_typeobject@@A
?QueryInterface@CPyFactory@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGOleWindow@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGPersist@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGatewayBase@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyIUnknown@@SAPAU_object@@PAU2@0@Z
?QueryService@PyIServiceProvider@@SAPAU_object@@PAU2@0@Z
?Read@PyIStream@@SAPAU_object@@PAU2@0@Z
?RegisterObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?Release@CPyFactory@@UAGKXZ
?Release@PyGOleWindow@@MAGKXZ
?Release@PyGPersist@@MAGKXZ
?Release@PyGatewayBase@@UAGKXZ
?Reset@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Reset@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Revert@PyIStream@@SAPAU_object@@PAU2@0@Z
?RevokeObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SafeRelease@PyIUnknown@@SAXPAV1@@Z
?Save@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?Seek@PyIStream@@SAPAU_object@@PAU2@0@Z
?SetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SetPythonCOMError@PyIConnectionPoint@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIConnectionPointContainer@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIDispatchEx@@SAPAU_object@@PAU2@J@Z
?SetSize@PyIStream@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Stat@PyIStream@@SAPAU_object@@PAU2@0@Z
?ThisAsIID@PyGOleWindow@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGPersist@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGatewayBase@@UAEPAXU_GUID@@@Z
?Type@PySTGMEDIUM@@2U_typeobject@@A
?Unadvise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?UnlockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?Unwrap@PyGatewayBase@@UAGJPAPAU_object@@@Z
?Write@PyIStream@@SAPAU_object@@PAU2@0@Z
?cmp@PyIBase@@SAHPAU_object@@0@Z
?compare@PyIBase@@UAEHPAU_object@@@Z
?compare@PyIUnknown@@UAEHPAU_object@@@Z
?dealloc@PyIBase@@SAXPAU_object@@@Z
?deallocFunc@PySTGMEDIUM@@SAXPAU_object@@@Z
?getattr@PyIBase@@UAEPAU_object@@PAD@Z
?getattro@PyIBase@@SAPAU_object@@PAU2@0@Z
?getattro@PySTGMEDIUM@@SAPAU_object@@PAU2@0@Z
?is_interface_type@PyComTypeObject@@SAHPAU_object@@@Z
?is_object@PyIBase@@QAEHPAVPyComTypeObject@@@Z
?is_object@PyIBase@@SAHPAU_object@@PAVPyComTypeObject@@@Z
?iter@PyComEnumProviderTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyIBase@@UAEPAU_object@@XZ
?iternext@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iternext@PyIBase@@UAEPAU_object@@XZ
?methods@PySTGMEDIUM@@2PAUPyMethodDef@@A
?repr@PyIBase@@SAPAU_object@@PAU2@@Z
?repr@PyIBase@@UAEPAU_object@@XZ
?repr@PyIUnknown@@UAEPAU_object@@XZ
?richcmp@PyIBase@@SAPAU_object@@PAU2@0H@Z
?setattr@PyIBase@@UAEHPADPAU_object@@@Z
?setattro@PyIBase@@SAHPAU_object@@00@Z
?szErrMsgObjectReleased@PyIUnknown@@2PADA
?type@PyIBindCtx@@2VPyComTypeObject@@A
?type@PyIClassFactory@@2VPyComTypeObject@@A
?type@PyIConnectionPoint@@2VPyComTypeObject@@A
?type@PyIConnectionPointContainer@@2VPyComTypeObject@@A
?type@PyIDispatch@@2VPyComTypeObject@@A
?type@PyIDispatchEx@@2VPyComTypeObject@@A
?type@PyIEnumMoniker@@2VPyComEnumTypeObject@@A
?type@PyIEnumVARIANT@@2VPyComEnumTypeObject@@A
?type@PyIMoniker@@2VPyComEnumProviderTypeObject@@A
?type@PyIOleWindow@@2VPyComTypeObject@@A
?type@PyIPersist@@2VPyComTypeObject@@A
?type@PyIPersistStream@@2VPyComTypeObject@@A
?type@PyIPersistStreamInit@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo2@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo@@2VPyComTypeObject@@A
?type@PyIServiceProvider@@2VPyComTypeObject@@A
?type@PyIStream@@2VPyComTypeObject@@A
?type@PyITypeComp@@2VPyComTypeObject@@A
?type@PyITypeInfo@@2VPyComTypeObject@@A
?type@PyITypeLib@@2VPyComTypeObject@@A
?type@PyIUnknown@@2VPyComTypeObject@@A
DllCanUnloadNow
DllGetClassObject
DllRegisterServerEx
DllUnregisterServerEx
PyCom_CoInitialize
PyCom_CoInitializeEx
PyCom_CoUninitialize
PyCom_InterfaceFromPyObject
PyCom_MakeOlePythonCall
PyCom_PyObjectFromIUnknown
PyCom_PyObjectFromVariant
PyCom_VariantFromPyObject
_DllMain@12
initpythoncom
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ