nativex.dll
Description: WPS Office NativeX
Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.
Version: 12.1.0.23542
Architecture: 32-bit
Operating System: Windows NT
SHA256: 3ada32d0f4ae50021c639bac8a6d78cf
File Size: 128.5 KB
Uploaded At: Dec. 4, 2025, 6:13 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- EntryPoint (Ordinal: 1, Address: 0x4ee0)
- ProcNativeXCrash (Ordinal: 2, Address: 0x6b70)
Imported DLLs & Functions
api-ms-win-crt-filesystem-l1-1-0.dll
- _wsplitpath (Address: 0x100151c8)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x100151d0)
- free (Address: 0x100151d8)
- malloc (Address: 0x100151d4)
api-ms-win-crt-math-l1-1-0.dll
- ceil (Address: 0x100151e0)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x100151e8)
- _configure_narrow_argv (Address: 0x100151f8)
- _crt_atexit (Address: 0x100151f4)
- _errno (Address: 0x10015218)
- _execute_onexit_table (Address: 0x10015200)
- _initialize_narrow_environment (Address: 0x10015204)
- _initialize_onexit_table (Address: 0x1001520c)
- _initterm (Address: 0x10015210)
- _initterm_e (Address: 0x100151f0)
- _invalid_parameter_noinfo (Address: 0x1001521c)
- _invalid_parameter_noinfo_noreturn (Address: 0x10015214)
- _register_onexit_function (Address: 0x10015208)
- _seh_filter_dll (Address: 0x100151fc)
- terminate (Address: 0x100151ec)
api-ms-win-crt-stdio-l1-1-0.dll
- __acrt_iob_func (Address: 0x10015228)
- __stdio_common_vfwprintf (Address: 0x10015224)
KERNEL32.dll
- CloseHandle (Address: 0x100150a4)
- CreateEventW (Address: 0x10015094)
- CreateFileMappingW (Address: 0x1001507c)
- CreateFileW (Address: 0x100150b4)
- DeleteCriticalSection (Address: 0x10015068)
- DeleteFileW (Address: 0x100150b0)
- DisableThreadLibraryCalls (Address: 0x10015004)
- DuplicateHandle (Address: 0x100150a0)
- EnterCriticalSection (Address: 0x10015038)
- FreeLibrary (Address: 0x10015000)
- GetCurrentProcess (Address: 0x10015088)
- GetCurrentProcessId (Address: 0x10015084)
- GetCurrentThreadId (Address: 0x1001500c)
- GetFileAttributesW (Address: 0x10015064)
- GetFileSize (Address: 0x100150ac)
- GetLastError (Address: 0x1001509c)
- GetModuleFileNameW (Address: 0x1001505c)
- GetModuleHandleW (Address: 0x10015058)
- GetProcAddress (Address: 0x10015054)
- GetSystemInfo (Address: 0x10015048)
- GetSystemTimeAsFileTime (Address: 0x10015008)
- GetTempPathW (Address: 0x100150a8)
- InitializeCriticalSection (Address: 0x1001506c)
- InitializeCriticalSectionAndSpinCount (Address: 0x10015030)
- InitializeSListHead (Address: 0x10015060)
- IsDebuggerPresent (Address: 0x10015014)
- IsProcessorFeaturePresent (Address: 0x10015018)
- LeaveCriticalSection (Address: 0x10015034)
- LoadLibraryExA (Address: 0x1001503c)
- LoadLibraryW (Address: 0x10015050)
- MapViewOfFile (Address: 0x10015074)
- OpenEventW (Address: 0x10015090)
- OpenFileMappingW (Address: 0x10015078)
- OpenProcess (Address: 0x10015080)
- QueryPerformanceCounter (Address: 0x10015010)
- RaiseException (Address: 0x1001504c)
- ResetEvent (Address: 0x1001502c)
- SetEvent (Address: 0x10015098)
- SetUnhandledExceptionFilter (Address: 0x10015020)
- TerminateProcess (Address: 0x1001501c)
- UnhandledExceptionFilter (Address: 0x10015024)
- UnmapViewOfFile (Address: 0x10015070)
- VirtualProtect (Address: 0x10015044)
- VirtualQuery (Address: 0x10015040)
- WaitForMultipleObjects (Address: 0x1001508c)
- WaitForSingleObjectEx (Address: 0x10015028)
krt.dll
- ??0KAppArguments@krt@@QAE@PB_W@Z (Address: 0x10015240)
- ??1KAppArguments@krt@@QAE@XZ (Address: 0x1001523c)
- ?argc@KAppArguments@krt@@QAEAAHXZ (Address: 0x10015238)
- ?argv@KAppArguments@krt@@QAEPAPADXZ (Address: 0x10015234)
- ?init@krt@@YA_NABVQString@kso_qt@@000@Z (Address: 0x10015244)
- ?kingsoftHome@dirs@krt@@YA?AVQString@kso_qt@@XZ (Address: 0x10015230)
MSVCP140.dll
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100150bc)
Qt5CoreKso.dll
- ??0QChar@kso_qt@@QAE@H@Z (Address: 0x10015180)
- ??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z (Address: 0x1001517c)
- ??0QLibrary@kso_qt@@QAE@ABVQString@1@PAVQObject@1@@Z (Address: 0x100150e0)
- ??0QSettings@kso_qt@@QAE@ABVQString@1@W4Format@01@PAVQObject@1@@Z (Address: 0x10015118)
- ??0QString@kso_qt@@QAE@$$QAV01@@Z (Address: 0x10015170)
- ??0QString@kso_qt@@QAE@ABV01@@Z (Address: 0x10015178)
- ??0QString@kso_qt@@QAE@XZ (Address: 0x100150fc)
- ??0QVariant@kso_qt@@QAE@_N@Z (Address: 0x1001511c)
- ??1QLibrary@kso_qt@@UAE@XZ (Address: 0x100150dc)
- ??1QSettings@kso_qt@@UAE@XZ (Address: 0x10015114)
- ??1QString@kso_qt@@QAE@XZ (Address: 0x10015174)
- ??1QVariant@kso_qt@@QAE@XZ (Address: 0x10015120)
- ??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z (Address: 0x100150f4)
- ??4QString@kso_qt@@QAEAAV01@ABV01@@Z (Address: 0x10015150)
- ??Mkso_qt@@YA_NABVQString@0@0@Z (Address: 0x100150c4)
- ?allocateNode@QHashData@kso_qt@@QAEPAXH@Z (Address: 0x100150ec)
- ?append@QString@kso_qt@@QAEAAV12@ABV12@@Z (Address: 0x10015168)
- ?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z (Address: 0x1001516c)
- ?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z (Address: 0x10015110)
- ?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z (Address: 0x100150c8)
- ?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x10015130)
- ?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z (Address: 0x1001514c)
- ?detach_helper@QHashData@kso_qt@@QAEPAU12@P6AXPAUNode@12@PAX@ZP6AX0@ZHH@Z (Address: 0x1001512c)
- ?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x10015148)
- ?endGroup@QSettings@kso_qt@@QAEXXZ (Address: 0x1001510c)
- ?event@QObject@kso_qt@@UAE_NPAVQEvent@2@@Z (Address: 0x10015144)
- ?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z (Address: 0x10015140)
- ?free_helper@QHashData@kso_qt@@QAEXP6AXPAUNode@12@@Z@Z (Address: 0x10015128)
- ?freeNode@QHashData@kso_qt@@QAEXPAX@Z (Address: 0x100150e8)
- ?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z (Address: 0x10015184)
- ?fromStdWString@QString@kso_qt@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x100150f0)
- ?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z (Address: 0x10015158)
- ?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z (Address: 0x1001515c)
- ?isLoaded@QLibrary@kso_qt@@QBE_NXZ (Address: 0x100150cc)
- ?load@QLibrary@kso_qt@@QAE_NXZ (Address: 0x100150d4)
- ?metaObject@QLibrary@kso_qt@@UBEPBUQMetaObject@2@XZ (Address: 0x1001513c)
- ?nextNode@QHashData@kso_qt@@SAPAUNode@12@PAU312@@Z (Address: 0x10015124)
- ?number@QString@kso_qt@@SA?AV12@HH@Z (Address: 0x10015154)
- ?qt_metacall@QLibrary@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z (Address: 0x10015138)
- ?qt_metacast@QLibrary@kso_qt@@UAEPAXPBD@Z (Address: 0x10015134)
- ?rehash@QHashData@kso_qt@@QAEXH@Z (Address: 0x100150e4)
- ?replace@QString@kso_qt@@QAEAAV12@VQChar@2@0W4CaseSensitivity@Qt@2@@Z (Address: 0x10015164)
- ?resolve@QLibrary@kso_qt@@QAEP6AXXZPBD@Z (Address: 0x100150d8)
- ?setValue@QSettings@kso_qt@@QAEXABVQString@2@ABVQVariant@2@@Z (Address: 0x10015108)
- ?shared_null@QHashData@kso_qt@@2U12@B (Address: 0x10015100)
- ?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z (Address: 0x100150f8)
- ?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x10015104)
- ?unload@QLibrary@kso_qt@@QAE_NXZ (Address: 0x100150d0)
- ?utf16@QString@kso_qt@@QBEPBGXZ (Address: 0x10015160)
VCRUNTIME140.dll
- __current_exception (Address: 0x10015190)
- __current_exception_context (Address: 0x1001518c)
- __CxxFrameHandler3 (Address: 0x100151bc)
- __std_exception_copy (Address: 0x100151b0)
- __std_exception_destroy (Address: 0x100151ac)
- __std_terminate (Address: 0x100151b4)
- __std_type_info_compare (Address: 0x100151a8)
- __std_type_info_destroy_list (Address: 0x100151a0)
- _CxxThrowException (Address: 0x100151a4)
- _except_handler4_common (Address: 0x100151c0)
- _purecall (Address: 0x100151b8)
- memcpy (Address: 0x1001519c)
- memmove (Address: 0x10015198)
- memset (Address: 0x10015194)