FileSyncFAL.dll
Description: Microsoft OneDriveFile Sync FAL
Authors: © Microsoft Corporation. All rights reserved.
Version: 25.209.1026.2
Architecture: 64-bit
Operating System: Windows
SHA256: dc8d773b3bbfdb5f7e011ed7b15adde6
File Size: 473.4 KB
Uploaded At: Dec. 4, 2025, 6:14 a.m.
Views: 7
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateFilterObject (Ordinal: 1, Address: 0x29b0)
- DestroyFilterObject (Ordinal: 2, Address: 0x2a00)
- GetFilterConnectionOptions (Ordinal: 3, Address: 0x2a60)
- GetFilterDebugFlags (Ordinal: 4, Address: 0x2a60)
- SetFilterConnectionOptions (Ordinal: 5, Address: 0x2a50)
- SetFilterDebugFlags (Ordinal: 6, Address: 0x2a50)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18004c188)
- AllocateAndInitializeSid (Address: 0x18004c110)
- ChangeServiceConfig2W (Address: 0x18004c0b0)
- ChangeServiceConfigW (Address: 0x18004c0b8)
- CloseServiceHandle (Address: 0x18004c0a8)
- ControlService (Address: 0x18004c0a0)
- ConvertSidToStringSidW (Address: 0x18004c020)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18004c030)
- CreateProcessAsUserW (Address: 0x18004c1c0)
- CreateProcessWithTokenW (Address: 0x18004c008)
- CreateServiceW (Address: 0x18004c098)
- CreateWellKnownSid (Address: 0x18004c108)
- CryptAcquireContextW (Address: 0x18004c140)
- CryptCreateHash (Address: 0x18004c128)
- CryptDestroyHash (Address: 0x18004c118)
- CryptGetHashParam (Address: 0x18004c130)
- CryptHashData (Address: 0x18004c120)
- CryptReleaseContext (Address: 0x18004c138)
- DeleteService (Address: 0x18004c090)
- DuplicateTokenEx (Address: 0x18004c100)
- FreeSid (Address: 0x18004c0f8)
- GetAclInformation (Address: 0x18004c0f0)
- GetNamedSecurityInfoW (Address: 0x18004c038)
- GetSecurityDescriptorDacl (Address: 0x18004c028)
- GetTokenInformation (Address: 0x18004c180)
- GetUserNameW (Address: 0x18004c010)
- LookupPrivilegeValueW (Address: 0x18004c178)
- OpenProcessToken (Address: 0x18004c190)
- OpenSCManagerW (Address: 0x18004c088)
- OpenServiceW (Address: 0x18004c080)
- QueryServiceConfigW (Address: 0x18004c078)
- QueryServiceStatus (Address: 0x18004c070)
- QueryServiceStatusEx (Address: 0x18004c068)
- RegCloseKey (Address: 0x18004c1b8)
- RegCreateKeyExW (Address: 0x18004c1b0)
- RegCreateKeyTransactedW (Address: 0x18004c0e8)
- RegDeleteKeyExW (Address: 0x18004c0e0)
- RegDeleteTreeW (Address: 0x18004c0c0)
- RegDeleteValueW (Address: 0x18004c170)
- RegEnumKeyExW (Address: 0x18004c168)
- RegEnumKeyW (Address: 0x18004c0d8)
- RegEnumValueW (Address: 0x18004c160)
- RegGetValueW (Address: 0x18004c148)
- RegisterServiceCtrlHandlerW (Address: 0x18004c060)
- RegLoadKeyW (Address: 0x18004c0d0)
- RegOpenKeyExW (Address: 0x18004c1a8)
- RegQueryInfoKeyW (Address: 0x18004c158)
- RegQueryValueExW (Address: 0x18004c1a0)
- RegSetKeyValueW (Address: 0x18004c150)
- RegSetValueExW (Address: 0x18004c198)
- RegUnLoadKeyW (Address: 0x18004c0c8)
- SetEntriesInAclW (Address: 0x18004c040)
- SetFileSecurityW (Address: 0x18004c018)
- SetNamedSecurityInfoW (Address: 0x18004c000)
- SetServiceStatus (Address: 0x18004c058)
- StartServiceCtrlDispatcherW (Address: 0x18004c050)
- StartServiceW (Address: 0x18004c048)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x18004cd70)
- wcstoll (Address: 0x18004cd78)
- wcstoul (Address: 0x18004cd80)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x18004cda8)
- free (Address: 0x18004cd90)
- malloc (Address: 0x18004cda0)
- realloc (Address: 0x18004cd98)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x18004cdb8)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthread (Address: 0x18004cde8)
- _cexit (Address: 0x18004cde0)
- _configure_narrow_argv (Address: 0x18004ce10)
- _crt_atexit (Address: 0x18004cdf0)
- _errno (Address: 0x18004cdd0)
- _execute_onexit_table (Address: 0x18004ce30)
- _initialize_narrow_environment (Address: 0x18004ce18)
- _initialize_onexit_table (Address: 0x18004ce20)
- _initterm (Address: 0x18004cdf8)
- _initterm_e (Address: 0x18004ce00)
- _invalid_parameter_noinfo_noreturn (Address: 0x18004cdc8)
- _register_onexit_function (Address: 0x18004ce28)
- _seh_filter_dll (Address: 0x18004ce08)
- terminate (Address: 0x18004cdd8)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vswprintf (Address: 0x18004ce40)
- _wfopen_s (Address: 0x18004ce48)
- fclose (Address: 0x18004ce50)
api-ms-win-crt-string-l1-1-0.dll
- _wcsdup (Address: 0x18004ce68)
- _wcsicmp (Address: 0x18004ce60)
- _wcsnicmp (Address: 0x18004ce88)
- towlower (Address: 0x18004ce78)
- towupper (Address: 0x18004ce80)
- wcstok_s (Address: 0x18004ce70)
api-ms-win-crt-time-l1-1-0.dll
- _localtime64_s (Address: 0x18004cea0)
- _time64 (Address: 0x18004ce98)
CRYPT32.dll
- CertFindExtension (Address: 0x18004c1e0)
- CryptBinaryToStringW (Address: 0x18004c1d0)
- CryptStringToBinaryW (Address: 0x18004c1d8)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x18004c3e0)
- CloseHandle (Address: 0x18004c528)
- CompareStringOrdinal (Address: 0x18004c278)
- CopyFileW (Address: 0x18004c2b8)
- CreateDirectoryW (Address: 0x18004c470)
- CreateEventW (Address: 0x18004c320)
- CreateFileW (Address: 0x18004c468)
- CreateIoCompletionPort (Address: 0x18004c218)
- CreateMutexW (Address: 0x18004c518)
- CreatePipe (Address: 0x18004c210)
- CreateProcessW (Address: 0x18004c348)
- CreateSymbolicLinkW (Address: 0x18004c270)
- CreateToolhelp32Snapshot (Address: 0x18004c280)
- DeleteCriticalSection (Address: 0x18004c548)
- DeleteFileW (Address: 0x18004c540)
- DeviceIoControl (Address: 0x18004c230)
- DisableThreadLibraryCalls (Address: 0x18004c388)
- ExpandEnvironmentStringsW (Address: 0x18004c308)
- FindClose (Address: 0x18004c538)
- FindFirstFileNameW (Address: 0x18004c1f8)
- FindFirstFileW (Address: 0x18004c530)
- FindFirstVolumeW (Address: 0x18004c460)
- FindNextVolumeW (Address: 0x18004c458)
- FindVolumeClose (Address: 0x18004c450)
- FreeLibrary (Address: 0x18004c4e0)
- GetCommandLineW (Address: 0x18004c478)
- GetCompressedFileSizeW (Address: 0x18004c1f0)
- GetComputerNameW (Address: 0x18004c2d0)
- GetCurrentProcess (Address: 0x18004c510)
- GetCurrentProcessId (Address: 0x18004c508)
- GetCurrentThreadId (Address: 0x18004c390)
- GetDiskFreeSpaceExW (Address: 0x18004c448)
- GetDllDirectoryW (Address: 0x18004c2f8)
- GetEnvironmentVariableW (Address: 0x18004c300)
- GetExitCodeProcess (Address: 0x18004c340)
- GetFileAttributesExW (Address: 0x18004c438)
- GetFileAttributesW (Address: 0x18004c440)
- GetFileInformationByHandle (Address: 0x18004c430)
- GetFileInformationByHandleEx (Address: 0x18004c2e0)
- GetFileSize (Address: 0x18004c428)
- GetFileSizeEx (Address: 0x18004c420)
- GetFileType (Address: 0x18004c418)
- GetFinalPathNameByHandleW (Address: 0x18004c410)
- GetLastError (Address: 0x18004c588)
- GetLongPathNameW (Address: 0x18004c408)
- GetModuleFileNameW (Address: 0x18004c4d8)
- GetModuleHandleW (Address: 0x18004c2f0)
- GetPrivateProfileStringW (Address: 0x18004c2a0)
- GetProcAddress (Address: 0x18004c4d0)
- GetProcessIoCounters (Address: 0x18004c298)
- GetProcessTimes (Address: 0x18004c338)
- GetProductInfo (Address: 0x18004c570)
- GetQueuedCompletionStatus (Address: 0x18004c220)
- GetSystemTime (Address: 0x18004c4f0)
- GetSystemTimeAsFileTime (Address: 0x18004c4e8)
- GetSystemTimes (Address: 0x18004c358)
- GetUserDefaultLCID (Address: 0x18004c490)
- GetUserGeoID (Address: 0x18004c498)
- GetVersionExW (Address: 0x18004c578)
- GetVolumePathNameW (Address: 0x18004c400)
- GlobalAlloc (Address: 0x18004c248)
- GlobalFree (Address: 0x18004c260)
- GlobalLock (Address: 0x18004c258)
- GlobalUnlock (Address: 0x18004c250)
- HeapAlloc (Address: 0x18004c560)
- HeapFree (Address: 0x18004c558)
- InitializeCriticalSectionEx (Address: 0x18004c550)
- InitializeSListHead (Address: 0x18004c380)
- IsDebuggerPresent (Address: 0x18004c200)
- IsProcessorFeaturePresent (Address: 0x18004c3a0)
- IsWow64Process (Address: 0x18004c238)
- K32GetModuleFileNameExW (Address: 0x18004c488)
- LCIDToLocaleName (Address: 0x18004c4a0)
- LoadLibraryExW (Address: 0x18004c240)
- LoadLibraryW (Address: 0x18004c4c8)
- LocalAlloc (Address: 0x18004c4c0)
- LocalFree (Address: 0x18004c4b8)
- MoveFileExW (Address: 0x18004c2c0)
- MoveFileW (Address: 0x18004c4b0)
- OpenFileById (Address: 0x18004c2e8)
- OpenProcess (Address: 0x18004c4f8)
- OutputDebugStringW (Address: 0x18004c378)
- PostQueuedCompletionStatus (Address: 0x18004c228)
- Process32FirstW (Address: 0x18004c288)
- Process32NextW (Address: 0x18004c290)
- QueryPerformanceCounter (Address: 0x18004c398)
- ReadDirectoryChangesW (Address: 0x18004c268)
- ReadFile (Address: 0x18004c3f8)
- RegisterApplicationRestart (Address: 0x18004c590)
- ReleaseMutex (Address: 0x18004c318)
- ReleaseSRWLockExclusive (Address: 0x18004c3e8)
- RemoveDirectoryW (Address: 0x18004c3f0)
- ReplaceFileW (Address: 0x18004c2c8)
- RtlCaptureContext (Address: 0x18004c3c8)
- RtlLookupFunctionEntry (Address: 0x18004c3c0)
- RtlVirtualUnwind (Address: 0x18004c3b8)
- SetDllDirectoryW (Address: 0x18004c2b0)
- SetFileAttributesW (Address: 0x18004c370)
- SetFileInformationByHandle (Address: 0x18004c368)
- SetFilePointer (Address: 0x18004c2d8)
- SetHandleInformation (Address: 0x18004c208)
- SetLastError (Address: 0x18004c310)
- SetProcessShutdownParameters (Address: 0x18004c350)
- SetThreadInformation (Address: 0x18004c360)
- SetUnhandledExceptionFilter (Address: 0x18004c3a8)
- Sleep (Address: 0x18004c328)
- SleepConditionVariableSRW (Address: 0x18004c3d0)
- SystemTimeToFileTime (Address: 0x18004c4a8)
- TerminateProcess (Address: 0x18004c500)
- UnhandledExceptionFilter (Address: 0x18004c3b0)
- VerifyVersionInfoW (Address: 0x18004c568)
- VerSetConditionMask (Address: 0x18004c580)
- WaitForMultipleObjects (Address: 0x18004c330)
- WaitForSingleObject (Address: 0x18004c520)
- WakeAllConditionVariable (Address: 0x18004c3d8)
- WideCharToMultiByte (Address: 0x18004c480)
- WritePrivateProfileStringW (Address: 0x18004c2a8)
LoggingPlatform.DLL
- ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x18004c5b0)
- ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x18004c5c0)
- ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x18004c5b8)
- ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x18004c5a8)
- ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18004c5c8)
- ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x18004c5a0)
MSVCP140.dll
- _Wcscoll (Address: 0x18004c830)
- _Wcsxfrm (Address: 0x18004c838)
- _Xtime_get_ticks (Address: 0x18004c788)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18004c7a8)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18004c8a0)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18004c850)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18004c880)
- ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x18004c678)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18004c7a0)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18004c878)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x18004c748)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18004c7b8)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18004c5e0)
- ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x18004c7f0)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x18004c5e8)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18004c978)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18004c660)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x18004c938)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18004c6c8)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18004c7b0)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18004c5d8)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18004c7f8)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x18004c828)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18004c740)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004c800)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004c818)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18004c9b0)
- ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x18004c680)
- ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x18004c640)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18004c840)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18004c808)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18004c970)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18004c668)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18004c9a0)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18004c630)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x18004c760)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18004c8c8)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18004c738)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18004c868)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18004c848)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18004c810)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004c940)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004c6c0)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004c9a8)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004c628)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004c758)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004c8d0)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004c730)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18004c870)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18004c688)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18004c980)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18004c638)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18004c690)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18004c750)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18004c988)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18004c990)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18004c648)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18004c658)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18004c860)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x18004c780)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x18004c858)
- ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18004c948)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c8e8)
- ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c718)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c908)
- ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c6f8)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c920)
- ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c6e0)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x18004c968)
- ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x18004c670)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x18004c8b0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18004c998)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18004c650)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x18004c910)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x18004c6f0)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18004c6a0)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x18004c8a8)
- ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c8f0)
- ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c710)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18004c790)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18004c798)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18004c9b8)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18004c620)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18004c888)
- ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c8f8)
- ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c708)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18004c900)
- ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18004c700)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18004c960)
- ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x18004c6a8)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18004c778)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18004c9c0)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18004c618)
- ?setf@ios_base@std@@QEAAHH@Z (Address: 0x18004c7e0)
- ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x18004c7d8)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18004c918)
- ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18004c6e8)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x18004c928)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18004c930)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z (Address: 0x18004c6d8)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18004c6d0)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18004c950)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18004c6b8)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18004c770)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18004c7d0)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18004c600)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18004c768)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18004c8d8)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18004c728)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18004c8e0)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18004c720)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18004c7c0)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18004c5f0)
- ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18004c958)
- ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ (Address: 0x18004c6b0)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18004c890)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18004c898)
- ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18004c7e8)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18004c9d0)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18004c608)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x18004c820)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x18004c698)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18004c8c0)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x18004c8b8)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18004c9c8)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18004c610)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18004c7c8)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18004c5f8)
ole32.dll
- CoCreateGuid (Address: 0x18004cee8)
- CoCreateInstance (Address: 0x18004ceb0)
- CoInitializeEx (Address: 0x18004ced8)
- CoSetProxyBlanket (Address: 0x18004cee0)
- CoTaskMemFree (Address: 0x18004cec0)
- CoUninitialize (Address: 0x18004ced0)
- CreateBindCtx (Address: 0x18004cf00)
- CreateItemMoniker (Address: 0x18004cef0)
- GetRunningObjectTable (Address: 0x18004cef8)
- StringFromCLSID (Address: 0x18004cec8)
- StringFromGUID2 (Address: 0x18004ceb8)
OLEAUT32.dll
- GetRecordInfoFromTypeInfo (Address: 0x18004c9e8)
- LoadRegTypeLib (Address: 0x18004c9e0)
- LoadTypeLib (Address: 0x18004c9f0)
RPCRT4.dll
- RpcBindingFree (Address: 0x18004ca30)
- RpcBindingFromStringBindingW (Address: 0x18004ca68)
- RpcBindingSetAuthInfoExW (Address: 0x18004ca10)
- RpcBindingVectorFree (Address: 0x18004ca50)
- RpcEpRegisterW (Address: 0x18004ca58)
- RpcEpUnregister (Address: 0x18004ca20)
- RpcServerInqBindings (Address: 0x18004ca40)
- RpcServerInqCallAttributesW (Address: 0x18004ca28)
- RpcServerRegisterIfEx (Address: 0x18004ca60)
- RpcServerUnregisterIf (Address: 0x18004ca00)
- RpcServerUseProtseqW (Address: 0x18004ca08)
- RpcStringBindingComposeW (Address: 0x18004ca48)
- RpcStringFreeW (Address: 0x18004ca18)
- UuidCreate (Address: 0x18004ca38)
Secur32.dll
- GetUserNameExW (Address: 0x18004cb90)
SHELL32.dll
- (Address: 0x18004cae8)
- CommandLineToArgvW (Address: 0x18004cae0)
- SHAssocEnumHandlers (Address: 0x18004ca98)
- SHChangeNotify (Address: 0x18004cab8)
- SHCreateDirectoryExW (Address: 0x18004ca90)
- SHCreateItemFromParsingName (Address: 0x18004caa8)
- ShellExecuteExW (Address: 0x18004cab0)
- SHFileOperationW (Address: 0x18004cad8)
- SHGetFolderPathAndSubDirW (Address: 0x18004ca80)
- SHGetFolderPathW (Address: 0x18004ca78)
- SHGetKnownFolderPath (Address: 0x18004cac8)
- SHGetPropertyStoreFromParsingName (Address: 0x18004caa0)
- SHGetSpecialFolderPathW (Address: 0x18004cad0)
- SHParseDisplayName (Address: 0x18004cac0)
- SHSetKnownFolderPath (Address: 0x18004ca88)
SHLWAPI.dll
- AssocQueryStringW (Address: 0x18004cb78)
- PathFileExistsW (Address: 0x18004caf8)
- PathIsDirectoryEmptyW (Address: 0x18004cb28)
- PathIsDirectoryW (Address: 0x18004cb10)
- PathIsPrefixW (Address: 0x18004cb18)
- PathRemoveFileSpecW (Address: 0x18004cb38)
- PathStripPathW (Address: 0x18004cb20)
- SHCreateStreamOnFileW (Address: 0x18004cb80)
- SHDeleteKeyW (Address: 0x18004cb40)
- SHDeleteValueW (Address: 0x18004cb48)
- SHGetValueA (Address: 0x18004cb50)
- SHGetValueW (Address: 0x18004cb00)
- SHRegGetBoolUSValueW (Address: 0x18004cb70)
- SHRegGetPathW (Address: 0x18004cb68)
- SHRegGetUSValueW (Address: 0x18004cb08)
- SHRegGetValueW (Address: 0x18004cb60)
- SHSetValueW (Address: 0x18004cb58)
- StrStrIW (Address: 0x18004cb30)
UpdateRingSettings.dll
- ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x18004cc68)
USER32.dll
- CloseClipboard (Address: 0x18004cbf8)
- CreateWindowExW (Address: 0x18004cba8)
- DestroyWindow (Address: 0x18004cba0)
- DispatchMessageW (Address: 0x18004cbd8)
- EnumWindows (Address: 0x18004cc20)
- GetClassNameW (Address: 0x18004cc28)
- GetMessageW (Address: 0x18004cc40)
- GetWindowThreadProcessId (Address: 0x18004cc30)
- OpenClipboard (Address: 0x18004cbe8)
- PostMessageW (Address: 0x18004cc18)
- RegisterClassW (Address: 0x18004cbb0)
- RegisterClipboardFormatW (Address: 0x18004cc08)
- RegisterPowerSettingNotification (Address: 0x18004cbd0)
- RegisterSuspendResumeNotification (Address: 0x18004cbf0)
- SendMessageTimeoutW (Address: 0x18004cc10)
- SetClipboardData (Address: 0x18004cc00)
- ShowWindow (Address: 0x18004cbc0)
- SystemParametersInfoW (Address: 0x18004cc38)
- TranslateMessage (Address: 0x18004cbe0)
- UnregisterPowerSettingNotification (Address: 0x18004cbc8)
- UnregisterSuspendResumeNotification (Address: 0x18004cbb8)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x18004cc50)
- GetDefaultUserProfileDirectoryW (Address: 0x18004cc58)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x18004cd08)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x18004cc90)
- __current_exception (Address: 0x18004cc78)
- __current_exception_context (Address: 0x18004cc80)
- __RTDynamicCast (Address: 0x18004ccf8)
- __std_exception_copy (Address: 0x18004ccb0)
- __std_exception_destroy (Address: 0x18004cca8)
- __std_terminate (Address: 0x18004cc98)
- __std_type_info_destroy_list (Address: 0x18004cc88)
- _CxxThrowException (Address: 0x18004ccb8)
- _purecall (Address: 0x18004cca0)
- memcpy (Address: 0x18004ccc0)
- memmove (Address: 0x18004ccd0)
- memset (Address: 0x18004ccd8)
- strchr (Address: 0x18004ccc8)
- wcschr (Address: 0x18004cce0)
- wcsrchr (Address: 0x18004ccf0)
- wcsstr (Address: 0x18004cce8)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x18004cd28)
- GetFileVersionInfoW (Address: 0x18004cd18)
- VerQueryValueW (Address: 0x18004cd20)
WININET.dll
- InternetCheckConnectionW (Address: 0x18004cd38)
WTSAPI32.dll
- WTSEnumerateSessionsW (Address: 0x18004cd60)
- WTSFreeMemory (Address: 0x18004cd48)
- WTSQuerySessionInformationW (Address: 0x18004cd58)
- WTSQueryUserToken (Address: 0x18004cd50)