Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0a874c57795d2086204f054badbb90a5930bdef19ee2e14b733e74bc01e9e02fN.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0a874c57795d2086204f054badbb90a5930bdef19ee2e14b733e74bc01e9e02fN.dll
Resource
win10v2004-20240802-en
Target
0a874c57795d2086204f054badbb90a5930bdef19ee2e14b733e74bc01e9e02fN
Size
260KB
MD5
7497c3ce82b12a0a1030c263a6b148f0
SHA1
e8b3a2d94f95e99b1461fa426d740d7f3ab36d92
SHA256
0a874c57795d2086204f054badbb90a5930bdef19ee2e14b733e74bc01e9e02f
SHA512
eaf8a9b55036652eacd3416ece7499b6baca41720ef0cf6dd5c4f774de24891fb9c3dad975eeaa29f924ddca5eb82c30cb521cd576bb75aab95de86a855357e6
SSDEEP
6144:owf2dmuPQ9LxzqOobARDB07vCSjzb6CaAp/ULq:owu8SAsfb6CxCq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\_\ba8c4b7e\build\bin\KF6KCMUtilsCore.pdb
??8KPluginMetaData@@QEBA_NAEBV0@@Z
??6@YA?AVQDebug@@V0@AEBVKPluginMetaData@@@Z
?staticMetaObject@KPluginMetaData@@2UQMetaObject@@B
?isEnabledByDefault@KPluginMetaData@@QEBA_NXZ
?pluginId@KPluginMetaData@@QEBA?AVQString@@XZ
?iconName@KPluginMetaData@@QEBA?AVQString@@XZ
?description@KPluginMetaData@@QEBA?AVQString@@XZ
?name@KPluginMetaData@@QEBA?AVQString@@XZ
?rawData@KPluginMetaData@@QEBA?AVQJsonObject@@XZ
?findPluginById@KPluginMetaData@@SA?AV1@AEBVQString@@0V?$QFlags@W4KPluginMetaDataOption@KPluginMetaData@@@@@Z
??1KPluginMetaData@@QEAA@XZ
??4KPluginMetaData@@QEAAAEAV0@AEBV0@@Z
??0KPluginMetaData@@QEAA@AEBV0@@Z
??0KPluginMetaData@@QEAA@AEBVQJsonObject@@AEBVQString@@@Z
?value@KPluginMetaData@@QEBA?AVQString@@AEBV2@0@Z
??0KPluginMetaData@@QEAA@XZ
?writeEntry@KConfigGroup@@QEAAXPEBDAEBVQVariant@@V?$QFlags@W4WriteConfigFlag@KConfigBase@@@@@Z
?isEntryImmutable@KConfigGroup@@QEBA_NAEBVQString@@@Z
?readEntry@KConfigGroup@@QEBA?AVQVariant@@PEBDAEBV2@@Z
?save@KCoreConfigSkeleton@@QEAA_NXZ
?staticMetaObject@KCoreConfigSkeleton@@2UQMetaObject@@B
?isDefaults@KCoreConfigSkeleton@@QEBA_NXZ
?isValid@KConfigGroup@@QEBA_NXZ
??1KConfigGroup@@UEAA@XZ
??4KConfigGroup@@QEAAAEAV0@AEBV0@@Z
??0KConfigGroup@@QEAA@XZ
?constData@QString@@QEBAPEBVQChar@@XZ
?lastIndexOf@QString@@QEBA_JVQChar@@W4CaseSensitivity@Qt@@@Z
?left@QString@@QEBA?AV1@_J@Z
?mid@QString@@QEBA?AV1@_J0@Z
?toUtf8@QString@@QEGBA?AVQByteArray@@XZ
?isNull@QString@@QEBA_NXZ
??0QString@@QEAA@_JW4Initialization@Qt@@@Z
??0QString@@QEAA@$$QEAU?$QArrayDataPointer@_S@@@Z
?appendLatin1To@QAbstractConcatenable@@KAXVQLatin1String@@PEAVQChar@@@Z
?globalSeed@QHashSeed@@SA?AU1@XZ
?qHash@@YA_KVQStringView@@_K@Z
?className@QMetaObject@@QEBAPEBDXZ
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
??5QDataStream@@QEAAAEAV0@AEA_N@Z
??6QDataStream@@QEAAAEAV0@_N@Z
?registerNormalizedTypedef@QMetaType@@SAXAEBVQByteArray@@V1@@Z
??0QMetaType@@QEAA@XZ
?registerType@QMetaType@@QEBAXXZ
?id@QMetaType@@QEBAHH@Z
?convert@QMetaType@@SA_NV1@PEBX0PEAX@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
??1QDebug@@QEAA@XZ
??6QDebug@@QEAAAEAV0@_N@Z
??0QVariant@@QEAA@XZ
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@VQMetaType@@PEBX@Z
??0QVariant@@QEAA@_N@Z
??0QVariant@@QEAA@AEBVQString@@@Z
?metaType@QVariant@@QEBA?AVQMetaType@@XZ
?toBool@QVariant@@QEBA_NXZ
?constData@QVariant@@QEBAPEBXXZ
?moveConstruct@QVariant@@CA?AV1@VQMetaType@@PEAX@Z
?dataChanged@QAbstractItemModel@@QEAAXAEBVQModelIndex@@0AEBV?$QList@H@@@Z
?beginInsertRows@QAbstractItemModel@@IEAAXAEBVQModelIndex@@HH@Z
?endInsertRows@QAbstractItemModel@@IEAAXXZ
?beginRemoveRows@QAbstractItemModel@@IEAAXAEBVQModelIndex@@HH@Z
?endRemoveRows@QAbstractItemModel@@IEAAXXZ
?beginMoveRows@QAbstractItemModel@@IEAA_NAEBVQModelIndex@@HH0H@Z
?endMoveRows@QAbstractItemModel@@IEAAXXZ
?qt_metacast@QAbstractListModel@@UEAAPEAXPEBD@Z
?qt_metacall@QAbstractListModel@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QAbstractListModel@@QEAA@PEAVQObject@@@Z
??1QAbstractListModel@@UEAA@XZ
??1QJsonObject@@QEAA@XZ
??0QPluginLoader@@QEAA@AEBVQString@@PEAVQObject@@@Z
??1QPluginLoader@@UEAA@XZ
?fileName@QPluginLoader@@QEBA?AVQString@@XZ
?headerData@QAbstractItemModel@@UEBA?AVQVariant@@HW4Orientation@Qt@@H@Z
?setHeaderData@QAbstractItemModel@@UEAA_NHW4Orientation@Qt@@AEBVQVariant@@H@Z
?itemData@QAbstractItemModel@@UEBA?AV?$QMap@HVQVariant@@@@AEBVQModelIndex@@@Z
?setItemData@QAbstractItemModel@@UEAA_NAEBVQModelIndex@@AEBV?$QMap@HVQVariant@@@@@Z
?clearItemData@QAbstractItemModel@@UEAA_NAEBVQModelIndex@@@Z
?mimeTypes@QAbstractItemModel@@UEBA?AV?$QList@VQString@@@@XZ
?mimeData@QAbstractItemModel@@UEBAPEAVQMimeData@@AEBV?$QList@VQModelIndex@@@@@Z
?canDropMimeData@QAbstractItemModel@@UEBA_NPEBVQMimeData@@W4DropAction@Qt@@HHAEBVQModelIndex@@@Z
?supportedDropActions@QAbstractItemModel@@UEBA?AV?$QFlags@W4DropAction@Qt@@@@XZ
?supportedDragActions@QAbstractItemModel@@UEBA?AV?$QFlags@W4DropAction@Qt@@@@XZ
?insertRows@QAbstractItemModel@@UEAA_NHHAEBVQModelIndex@@@Z
?insertColumns@QAbstractItemModel@@UEAA_NHHAEBVQModelIndex@@@Z
?removeRows@QAbstractItemModel@@UEAA_NHHAEBVQModelIndex@@@Z
?removeColumns@QAbstractItemModel@@UEAA_NHHAEBVQModelIndex@@@Z
?data@QString@@QEBAPEBVQChar@@XZ
?fetchMore@QAbstractItemModel@@UEAAXAEBVQModelIndex@@@Z
?canFetchMore@QAbstractItemModel@@UEBA_NAEBVQModelIndex@@@Z
?sort@QAbstractItemModel@@UEAAXHW4SortOrder@Qt@@@Z
??0QString@@QEAA@XZ
?match@QAbstractItemModel@@UEBA?AV?$QList@VQModelIndex@@@@AEBVQModelIndex@@HAEBVQVariant@@HV?$QFlags@W4MatchFlag@Qt@@@@@Z
?span@QAbstractItemModel@@UEBA?AVQSize@@AEBVQModelIndex@@@Z
?multiData@QAbstractItemModel@@UEBAXAEBVQModelIndex@@VQModelRoleDataSpan@@@Z
?submit@QAbstractItemModel@@UEAA_NXZ
?revert@QAbstractItemModel@@UEAAXXZ
?resetInternalData@QAbstractItemModel@@MEAAXXZ
?index@QAbstractListModel@@UEBA?AVQModelIndex@@HHAEBV2@@Z
?sibling@QAbstractListModel@@UEBA?AVQModelIndex@@HHAEBV2@@Z
?dropMimeData@QAbstractListModel@@UEAA_NPEBVQMimeData@@W4DropAction@Qt@@HHAEBVQModelIndex@@@Z
?flags@QAbstractListModel@@UEBA?AV?$QFlags@W4ItemFlag@Qt@@@@AEBVQModelIndex@@@Z
?parent@QAbstractListModel@@EEBA?AVQModelIndex@@AEBV2@@Z
?columnCount@QAbstractListModel@@EEBAHAEBVQModelIndex@@@Z
?hasChildren@QAbstractListModel@@EEBA_NAEBVQModelIndex@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?staticMetaObject@QAbstractListModel@@2UQMetaObject@@B
??0QByteArray@@QEAA@XZ
?reserve@QByteArray@@QEAAX_J@Z
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?compareStrings@QtPrivate@@YAHVQStringView@@0W4CaseSensitivity@Qt@@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQString@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQString@@@Z
?status@QDataStream@@QEBA?AW4Status@1@XZ
?setStatus@QDataStream@@QEAAXW4Status@1@@Z
?resetStatus@QDataStream@@QEAAXXZ
??5QDataStream@@QEAAAEAV0@AEAH@Z
??6QDataStream@@QEAAAEAV0@H@Z
?isDeviceTransactionStarted@QDataStream@@QEBA_NXZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
??0QDebug@@QEAA@$$QEAV0@@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??1QDebugStateSaver@@QEAA@XZ
?qt_QMetaEnum_debugOperator@@YA?AVQDebug@@AEAV1@_JPEBUQMetaObject@@PEBD@Z
?qt_QMetaEnum_flagDebugOperator@@YA?AVQDebug@@AEAV1@_KPEBUQMetaObject@@PEBD@Z
??0QVariant@@QEAA@AEBV0@@Z
??0QVariant@@QEAA@$$QEAV0@@Z
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
?equals@QVariant@@IEBA_NAEBV1@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQVariant@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQVariant@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?invokeMethodImpl@QMetaObject@@CA_NPEAVQObject@@PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEAX@Z
??1Connection@QMetaObject@@QEAA@XZ
?append@QByteArray@@QEAAAEAV1@D@Z
?qt_qFindChildren_helper@@YAXPEBVQObject@@AEBUQMetaObject@@PEAV?$QList@PEAX@@V?$QFlags@W4FindChildOption@Qt@@@@@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?isEmpty@QString@@QEBA_NXZ
?size@QString@@QEBA_JXZ
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??1QString@@QEAA@XZ
?moveColumns@QAbstractItemModel@@UEAA_NAEBVQModelIndex@@HH0H@Z
??0QString@@QEAA@AEBV0@@Z
qt_version_tag_6_6
??0QLoggingCategory@@QEAA@PEBDW4QtMsgType@@@Z
??1QLoggingCategory@@QEAA@XZ
?qBadAlloc@@YAXXZ
??0QChar@@QEAA@UQLatin1Char@@@Z
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?size@QByteArrayView@@QEBA_JXZ
?data@QByteArrayView@@QEBAPEBDXZ
??0QByteArray@@QEAA@PEBD_J@Z
??0QByteArray@@QEAA@AEBV0@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@$$QEAV0@@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
?data@QByteArray@@QEBAPEBDXZ
?constData@QByteArray@@QEBAPEBDXZ
?size@QByteArray@@QEBA_JXZ
?isNull@QByteArray@@QEBA_NXZ
?equalStrings@QtPrivate@@YA_NVQStringView@@0@Z
?buddy@QAbstractItemModel@@UEBA?AVQModelIndex@@AEBV2@@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
__CxxFrameHandler4
_CxxThrowException
memcpy
__std_terminate
memcmp
memmove
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__current_exception
__current_exception_context
memset
__std_type_info_destroy_list
calloc
free
_callnewh
malloc
_initialize_narrow_environment
_register_onexit_function
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
InitializeSListHead
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
??0KAbstractConfigModule@@QEAA@PEAVQObject@@AEBVKPluginMetaData@@@Z
??0KCModuleData@@QEAA@PEAVQObject@@@Z
??0KPluginModel@@QEAA@PEAVQObject@@@Z
??1KAbstractConfigModule@@UEAA@XZ
??1KCModuleData@@UEAA@XZ
??1KPluginModel@@UEAA@XZ
??_7KAbstractConfigModule@@6B@
??_7KCModuleData@@6B@
??_7KPluginModel@@6B@
??_FKCModuleData@@QEAAXXZ
??_FKPluginModel@@QEAAXXZ
?aboutToLoad@KCModuleData@@QEAAXUQPrivateSignal@1@@Z
?activationRequested@KAbstractConfigModule@@QEAAXAEBV?$QList@VQVariant@@@@@Z
?addPlugins@KPluginModel@@QEAAXAEBV?$QList@VKPluginMetaData@@@@AEBVQString@@@Z
?addUnsortablePlugins@KPluginModel@@QEAAXAEBV?$QList@VKPluginMetaData@@@@AEBVQString@@@Z
?authActionName@KAbstractConfigModule@@QEBA?AVQString@@XZ
?authActionNameChanged@KAbstractConfigModule@@QEAAXXZ
?autoRegisterSkeletons@KCModuleData@@IEAAXXZ
?buttons@KAbstractConfigModule@@QEBA?AV?$QFlags@W4Button@KAbstractConfigModule@@@@XZ
?buttonsChanged@KAbstractConfigModule@@QEAAXXZ
?clear@KPluginModel@@QEAAXXZ
?data@KPluginModel@@UEBA?AVQVariant@@AEBVQModelIndex@@H@Z
?defaulted@KPluginModel@@QEAAX_N@Z
?defaults@KAbstractConfigModule@@UEAAXXZ
?defaults@KPluginModel@@QEAAXXZ
?defaultsIndicatorsVisible@KAbstractConfigModule@@QEBA_NXZ
?defaultsIndicatorsVisibleChanged@KAbstractConfigModule@@QEAAXXZ
?description@KAbstractConfigModule@@QEBA?AVQString@@XZ
?findConfigForPluginId@KPluginModel@@QEBA?AVKPluginMetaData@@AEBVQString@@@Z
?getOrderedCategoryLabels@KPluginModel@@AEAA?AV?$QList@VQString@@@@XZ
?isDefaults@KCModuleData@@UEBA_NXZ
?isSaveNeeded@KPluginModel@@QEAA_NXZ
?isSaveNeededChanged@KPluginModel@@QEAAXXZ
?load@KAbstractConfigModule@@UEAAXXZ
?load@KPluginModel@@QEAAXXZ
?loaded@KCModuleData@@QEAAXXZ
?matchesQuery@KCModuleData@@UEBA_NAEBVQString@@@Z
?metaData@KAbstractConfigModule@@QEBA?AVKPluginMetaData@@XZ
?metaObject@KAbstractConfigModule@@UEBAPEBUQMetaObject@@XZ
?metaObject@KCModuleData@@UEBAPEBUQMetaObject@@XZ
?metaObject@KPluginModel@@UEBAPEBUQMetaObject@@XZ
?moveRows@KPluginModel@@UEAA_NAEBVQModelIndex@@HH0H@Z
?name@KAbstractConfigModule@@QEBA?AVQString@@XZ
?needsAuthorization@KAbstractConfigModule@@QEBA_NXZ
?needsSave@KAbstractConfigModule@@QEBA_NXZ
?needsSaveChanged@KAbstractConfigModule@@QEAAXXZ
?qt_metacall@KAbstractConfigModule@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@KCModuleData@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@KPluginModel@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@KAbstractConfigModule@@UEAAPEAXPEBD@Z
?qt_metacast@KCModuleData@@UEAAPEAXPEBD@Z
?qt_metacast@KPluginModel@@UEAAPEAXPEBD@Z
?qt_static_metacall@KAbstractConfigModule@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@KCModuleData@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@KPluginModel@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?registerSkeleton@KCModuleData@@IEAAXPEAVKCoreConfigSkeleton@@@Z
?removePlugin@KPluginModel@@QEAAXAEBVKPluginMetaData@@@Z
?representsDefaults@KAbstractConfigModule@@QEBA_NXZ
?representsDefaultsChanged@KAbstractConfigModule@@QEAAXXZ
?revertToDefaults@KCModuleData@@UEAAXXZ
?roleNames@KPluginModel@@UEBA?AV?$QHash@HVQByteArray@@@@XZ
?rowCount@KPluginModel@@UEBAHAEBVQModelIndex@@@Z
?save@KAbstractConfigModule@@UEAAXXZ
?save@KPluginModel@@QEAAXXZ
?setAuthActionName@KAbstractConfigModule@@QEAAXAEBVQString@@@Z
?setButtons@KAbstractConfigModule@@QEAAXV?$QFlags@W4Button@KAbstractConfigModule@@@@@Z
?setConfig@KPluginModel@@QEAAXAEBVKConfigGroup@@@Z
?setData@KPluginModel@@UEAA_NAEBVQModelIndex@@AEBVQVariant@@H@Z
?setDefaultsIndicatorsVisible@KAbstractConfigModule@@QEAAX_N@Z
?setNeedsSave@KAbstractConfigModule@@QEAAX_N@Z
?setRepresentsDefaults@KAbstractConfigModule@@QEAAX_N@Z
?staticMetaObject@KAbstractConfigModule@@2UQMetaObject@@B
?staticMetaObject@KCModuleData@@2UQMetaObject@@B
?staticMetaObject@KPluginModel@@2UQMetaObject@@B
?tr@KAbstractConfigModule@@SA?AVQString@@PEBD0H@Z
?tr@KCModuleData@@SA?AVQString@@PEBD0H@Z
?tr@KPluginModel@@SA?AVQString@@PEBD0H@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ