ktaskschdtool.dll
Description: WPS Office Core Module
Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.
Version: 12.1.0.23125
Architecture: 32-bit
Operating System: Windows NT
SHA256: 3b78417801e7a27d3bdfe5f5e6012d4e
File Size: 295.5 KB
Uploaded At: Dec. 4, 2025, 6:12 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- AcceptHostMessage (Ordinal: 1, Address: 0x1420)
- EntryPoint (Ordinal: 2, Address: 0x1550)
Imported DLLs & Functions
api-ms-win-crt-convert-l1-1-0.dll
- _ultow_s (Address: 0x100322e8)
api-ms-win-crt-heap-l1-1-0.dll
- _aligned_free (Address: 0x10032300)
- _aligned_malloc (Address: 0x100322fc)
- _callnewh (Address: 0x100322f0)
- calloc (Address: 0x100322f8)
- free (Address: 0x100322f4)
- malloc (Address: 0x10032304)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x10032330)
- _configure_narrow_argv (Address: 0x10032318)
- _crt_atexit (Address: 0x1003232c)
- _errno (Address: 0x10032310)
- _execute_onexit_table (Address: 0x10032328)
- _initialize_narrow_environment (Address: 0x1003231c)
- _initialize_onexit_table (Address: 0x10032320)
- _initterm (Address: 0x10032334)
- _initterm_e (Address: 0x10032338)
- _invalid_parameter_noinfo (Address: 0x10032314)
- _invalid_parameter_noinfo_noreturn (Address: 0x10032340)
- _register_onexit_function (Address: 0x10032324)
- _resetstkoflw (Address: 0x1003230c)
- _seh_filter_dll (Address: 0x1003233c)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsnwprintf_s (Address: 0x1003234c)
- __stdio_common_vsprintf_s (Address: 0x10032348)
- __stdio_common_vswprintf_s (Address: 0x10032350)
api-ms-win-crt-string-l1-1-0.dll
- _strnicmp (Address: 0x10032360)
- _wcsicmp (Address: 0x10032364)
- _wcsnicmp (Address: 0x1003235c)
- iswxdigit (Address: 0x1003237c)
- strncpy_s (Address: 0x10032370)
- toupper (Address: 0x10032374)
- towlower (Address: 0x10032378)
- towupper (Address: 0x1003236c)
- wcscat_s (Address: 0x10032358)
- wcscpy_s (Address: 0x10032368)
KERNEL32.dll
- CloseHandle (Address: 0x100320ec)
- CreateEventW (Address: 0x10032020)
- CreateFileA (Address: 0x1003207c)
- CreateThread (Address: 0x10032074)
- CreateToolhelp32Snapshot (Address: 0x1003205c)
- DeleteCriticalSection (Address: 0x10032080)
- DeviceIoControl (Address: 0x10032078)
- DisableThreadLibraryCalls (Address: 0x10032000)
- EnterCriticalSection (Address: 0x10032034)
- FreeLibrary (Address: 0x100320a8)
- GetCurrentProcess (Address: 0x100320b8)
- GetCurrentProcessId (Address: 0x100320e0)
- GetCurrentThread (Address: 0x100320b4)
- GetCurrentThreadId (Address: 0x10032008)
- GetDateFormatW (Address: 0x10032094)
- GetLastError (Address: 0x100320f0)
- GetLocalTime (Address: 0x100320f4)
- GetModuleFileNameW (Address: 0x100320dc)
- GetModuleHandleW (Address: 0x10032068)
- GetProcAddress (Address: 0x100320a4)
- GetProcessHeap (Address: 0x100320bc)
- GetSystemDirectoryW (Address: 0x100320b0)
- GetSystemInfo (Address: 0x1003204c)
- GetSystemTimeAsFileTime (Address: 0x10032004)
- GetSystemWow64DirectoryW (Address: 0x100320ac)
- GetTimeFormatW (Address: 0x10032090)
- HeapAlloc (Address: 0x100320cc)
- HeapDestroy (Address: 0x100320d0)
- HeapFree (Address: 0x100320c4)
- HeapReAlloc (Address: 0x100320c8)
- HeapSize (Address: 0x100320c0)
- InitializeCriticalSectionAndSpinCount (Address: 0x10032084)
- InitializeSListHead (Address: 0x1003201c)
- IsDebuggerPresent (Address: 0x1003203c)
- IsProcessorFeaturePresent (Address: 0x10032018)
- IsWow64Process (Address: 0x1003208c)
- LeaveCriticalSection (Address: 0x10032030)
- LoadLibraryExA (Address: 0x10032040)
- LoadLibraryW (Address: 0x100320a0)
- LocalFree (Address: 0x1003209c)
- MultiByteToWideChar (Address: 0x1003206c)
- OpenProcess (Address: 0x10032060)
- OutputDebugStringW (Address: 0x10032038)
- Process32FirstW (Address: 0x10032058)
- Process32NextW (Address: 0x10032054)
- ProcessIdToSessionId (Address: 0x10032064)
- QueryPerformanceCounter (Address: 0x10032050)
- RaiseException (Address: 0x10032088)
- ResetEvent (Address: 0x10032028)
- SetEvent (Address: 0x1003202c)
- SetLastError (Address: 0x100320d4)
- SetUnhandledExceptionFilter (Address: 0x10032010)
- Sleep (Address: 0x100320e4)
- TerminateProcess (Address: 0x1003200c)
- UnhandledExceptionFilter (Address: 0x10032014)
- VerifyVersionInfoW (Address: 0x10032098)
- VerSetConditionMask (Address: 0x100320d8)
- VirtualProtect (Address: 0x10032048)
- VirtualQuery (Address: 0x10032044)
- WaitForSingleObject (Address: 0x100320e8)
- WaitForSingleObjectEx (Address: 0x10032024)
- WideCharToMultiByte (Address: 0x10032070)
krt.dll
- ??0KPluginsSettings@krt@@QAE@W4Scope@QSettings@kso_qt@@@Z (Address: 0x10032384)
- ??1KPluginsSettings@krt@@UAE@XZ (Address: 0x10032388)
- ?backgroundHostExePath@dirs@krt@@YA?AVQString@kso_qt@@XZ (Address: 0x10032398)
- ?Execute@KProcess@ksafe@krt@@YA_NABVQString@kso_qt@@ABVQStringList@5@@Z (Address: 0x10032390)
- ?StartDetach@KProcess@ksafe@krt@@YA_NABVQString@kso_qt@@ABVQStringList@5@0PA_J@Z (Address: 0x1003238c)
- ?wtoolex@dirs@krt@@YA?AVQString@kso_qt@@XZ (Address: 0x10032394)
kshell.dll
- ?writeInfo@KxLogger@@SAXABVQString@kso_qt@@0@Z (Address: 0x100323a0)
libcurl.dll
- curl_easy_cleanup (Address: 0x100323a8)
- curl_easy_init (Address: 0x100323ac)
- curl_easy_perform (Address: 0x100323b0)
- curl_easy_setopt (Address: 0x100323b4)
MSVCP140.dll
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1003210c)
- ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x10032108)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10032100)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x10032104)
- ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z (Address: 0x100320fc)
Qt5CoreKso.dll
- ??0QChar@kso_qt@@QAE@_W@Z (Address: 0x10032158)
- ??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z (Address: 0x10032180)
- ??0QFileInfo@kso_qt@@QAE@ABVQString@1@@Z (Address: 0x100321e0)
- ??0QMutex@kso_qt@@QAE@W4RecursionMode@01@@Z (Address: 0x100321d0)
- ??0QSettings@kso_qt@@QAE@ABVQString@1@W4Format@01@PAVQObject@1@@Z (Address: 0x10032234)
- ??0QString@kso_qt@@QAE@ABV01@@Z (Address: 0x10032270)
- ??0QString@kso_qt@@QAE@XZ (Address: 0x1003226c)
- ??0QThread@kso_qt@@QAE@PAVQObject@1@@Z (Address: 0x100321bc)
- ??0QVariant@kso_qt@@QAE@ABVQString@1@@Z (Address: 0x1003228c)
- ??0QVariant@kso_qt@@QAE@PBD@Z (Address: 0x1003215c)
- ??0QVariant@kso_qt@@QAE@XZ (Address: 0x10032160)
- ??1QDateTime@kso_qt@@QAE@XZ (Address: 0x10032294)
- ??1QDir@kso_qt@@QAE@XZ (Address: 0x10032238)
- ??1QFileInfo@kso_qt@@QAE@XZ (Address: 0x100321dc)
- ??1QMutex@kso_qt@@QAE@XZ (Address: 0x100321cc)
- ??1QMutexLocker@kso_qt@@QAE@XZ (Address: 0x100321c4)
- ??1QSettings@kso_qt@@UAE@XZ (Address: 0x10032230)
- ??1QString@kso_qt@@QAE@XZ (Address: 0x100322a0)
- ??1QThread@kso_qt@@UAE@XZ (Address: 0x100321b8)
- ??1QVariant@kso_qt@@QAE@XZ (Address: 0x10032284)
- ??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z (Address: 0x10032278)
- ??4QString@kso_qt@@QAEAAV01@ABV01@@Z (Address: 0x10032274)
- ??4QString@kso_qt@@QAEAAV01@PBD@Z (Address: 0x10032164)
- ??AQString@kso_qt@@QBE?BVQChar@1@H@Z (Address: 0x10032154)
- ??Mkso_qt@@YA_NABVQString@0@0@Z (Address: 0x10032140)
- ??YQString@kso_qt@@QAEAAV01@VQChar@1@@Z (Address: 0x10032118)
- ?absoluteDir@QFileInfo@kso_qt@@QBE?AVQDir@2@XZ (Address: 0x100321d8)
- ?absolutePath@QDir@kso_qt@@QBE?AVQString@2@XZ (Address: 0x100321d4)
- ?append@QListData@kso_qt@@QAEPAPAXABU12@@Z (Address: 0x100321ec)
- ?append@QListData@kso_qt@@QAEPAPAXXZ (Address: 0x100321f0)
- ?append@QString@kso_qt@@QAEAAV12@ABV12@@Z (Address: 0x1003227c)
- ?append@QString@kso_qt@@QAEAAV12@PBD@Z (Address: 0x10032208)
- ?arg@QString@kso_qt@@QBE?AV12@ABV12@0@Z (Address: 0x1003216c)
- ?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z (Address: 0x10032174)
- ?arg@QString@kso_qt@@QBE?AV12@HHHVQChar@2@@Z (Address: 0x10032178)
- ?at@QListData@kso_qt@@QBEPAPAXH@Z (Address: 0x1003213c)
- ?begin@QListData@kso_qt@@QBEPAPAXXZ (Address: 0x10032218)
- ?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z (Address: 0x1003222c)
- ?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z (Address: 0x100321a0)
- ?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z (Address: 0x10032254)
- ?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x1003219c)
- ?constData@QString@kso_qt@@QBEPBVQChar@2@XZ (Address: 0x1003217c)
- ?createData@QMapDataBase@kso_qt@@SAPAU12@XZ (Address: 0x10032124)
- ?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z (Address: 0x1003212c)
- ?currentDateTime@QDateTime@kso_qt@@SA?AV12@XZ (Address: 0x1003229c)
- ?currentTime@QTime@kso_qt@@SA?AV12@XZ (Address: 0x10032268)
- ?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z (Address: 0x10032198)
- ?detach_grow@QListData@kso_qt@@QAEPAUData@12@PAHH@Z (Address: 0x100321fc)
- ?detach@QListData@kso_qt@@QAEPAUData@12@H@Z (Address: 0x10032220)
- ?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x10032194)
- ?dispose@QListData@kso_qt@@QAEXXZ (Address: 0x100321f8)
- ?dispose@QListData@kso_qt@@SAXPAUData@12@@Z (Address: 0x1003221c)
- ?dynamicMetaObject@QObjectData@kso_qt@@QBEPAUQMetaObject@2@XZ (Address: 0x100322ac)
- ?end@QListData@kso_qt@@QBEPAPAXXZ (Address: 0x10032214)
- ?erase@QListData@kso_qt@@QAEPAPAXPAPAX@Z (Address: 0x100321f4)
- ?event@QThread@kso_qt@@UAE_NPAVQEvent@2@@Z (Address: 0x10032190)
- ?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z (Address: 0x1003218c)
- ?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z (Address: 0x10032120)
- ?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z (Address: 0x10032128)
- ?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z (Address: 0x10032244)
- ?fromStdString@QString@kso_qt@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Address: 0x10032204)
- ?fromStdWString@QString@kso_qt@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x10032258)
- ?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z (Address: 0x10032240)
- ?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z (Address: 0x10032280)
- ?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z (Address: 0x10032210)
- ?indexOf@QString@kso_qt@@QBEHABV12@HW4CaseSensitivity@Qt@2@@Z (Address: 0x1003223c)
- ?isEmpty@QListData@kso_qt@@QBE_NXZ (Address: 0x100321e4)
- ?isFinished@QThread@kso_qt@@QBE_NXZ (Address: 0x100321b4)
- ?isRunning@QThread@kso_qt@@QBE_NXZ (Address: 0x100321b0)
- ?lock@QMutex@kso_qt@@QAEXXZ (Address: 0x100321c8)
- ?mid@QString@kso_qt@@QBE?AV12@HH@Z (Address: 0x10032150)
- ?msec@QTime@kso_qt@@QBEHXZ (Address: 0x10032264)
- ?number@QString@kso_qt@@SA?AV12@HH@Z (Address: 0x10032168)
- ?number@QString@kso_qt@@SA?AV12@KH@Z (Address: 0x1003220c)
- ?qrand@kso_qt@@YAHXZ (Address: 0x10032250)
- ?qsrand@kso_qt@@YAXI@Z (Address: 0x1003224c)
- ?QStringList_join@QtPrivate@kso_qt@@YA?AVQString@2@PBVQStringList@2@PBVQChar@2@H@Z (Address: 0x10032170)
- ?qt_metacall@QThread@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z (Address: 0x100322a4)
- ?qt_metacast@QThread@kso_qt@@UAEPAXPBD@Z (Address: 0x100322a8)
- ?quit@QThread@kso_qt@@QAEXXZ (Address: 0x100321a4)
- ?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ (Address: 0x10032130)
- ?remove@QSettings@kso_qt@@QAEXABVQString@2@@Z (Address: 0x100321c0)
- ?second@QTime@kso_qt@@QBEHXZ (Address: 0x10032260)
- ?separator@QDir@kso_qt@@SA?AVQChar@2@XZ (Address: 0x10032114)
- ?setColor@QMapNodeBase@kso_qt@@QAEXW4Color@12@@Z (Address: 0x10032138)
- ?setParent@QMapNodeBase@kso_qt@@QAEXPAU12@@Z (Address: 0x10032134)
- ?setValue@QSettings@kso_qt@@QAEXABVQString@2@ABVQVariant@2@@Z (Address: 0x10032228)
- ?shared_null@QListData@kso_qt@@2UData@12@B (Address: 0x10032184)
- ?shared_null@QMapDataBase@kso_qt@@2U12@B (Address: 0x1003211c)
- ?size@QListData@kso_qt@@QBEHXZ (Address: 0x100321e8)
- ?start@QThread@kso_qt@@QAEXW4Priority@12@@Z (Address: 0x100321ac)
- ?staticMetaObject@QThread@kso_qt@@2UQMetaObject@2@B (Address: 0x10032288)
- ?terminate@QThread@kso_qt@@QAEXXZ (Address: 0x100321a8)
- ?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z (Address: 0x10032188)
- ?toLower@QString@kso_qt@@QGBE?AV12@XZ (Address: 0x1003214c)
- ?toLower@QString@kso_qt@@QHAE?AV12@XZ (Address: 0x10032148)
- ?toStdString@QString@kso_qt@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ (Address: 0x10032200)
- ?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x1003225c)
- ?toString@QVariant@kso_qt@@QBE?AVQString@2@XZ (Address: 0x10032290)
- ?toStringEx@QDateTime@kso_qt@@QBE?AVQString@2@ABV32@@Z (Address: 0x10032298)
- ?utf16@QString@kso_qt@@QBEPBGXZ (Address: 0x10032144)
- ?value@QSettings@kso_qt@@QBE?AVQVariant@2@ABVQString@2@ABV32@@Z (Address: 0x10032224)
- ?wait@QThread@kso_qt@@QAE_NK@Z (Address: 0x10032248)
VCRUNTIME140.dll
- __CxxFrameHandler3 (Address: 0x100322b8)
- __std_exception_copy (Address: 0x100322bc)
- __std_exception_destroy (Address: 0x100322c0)
- __std_terminate (Address: 0x100322d8)
- __std_type_info_destroy_list (Address: 0x100322b4)
- _CxxThrowException (Address: 0x100322c4)
- _except_handler4_common (Address: 0x100322e0)
- _purecall (Address: 0x100322d4)
- memcpy (Address: 0x100322c8)
- memmove (Address: 0x100322cc)
- memset (Address: 0x100322d0)
- wcsstr (Address: 0x100322dc)