FileSyncFALWB.dll
Description: Microsoft OneDriveFile Sync FAL WB
Authors: © Microsoft Corporation. All rights reserved.
Version: 25.209.1026.2
Architecture: 64-bit
Operating System: Windows
SHA256: b23d54d6a0621ef4ce0b89d7e7025f32
File Size: 704.9 KB
Uploaded At: Dec. 4, 2025, 6:14 a.m.
Views: 7
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateFilterObject (Ordinal: 1, Address: 0x3600)
- DestroyFilterObject (Ordinal: 2, Address: 0x3710)
- GetFilterConnectionOptions (Ordinal: 3, Address: 0x37a0)
- GetFilterDebugFlags (Ordinal: 4, Address: 0x3770)
- GetPlatformImplObject (Ordinal: 5, Address: 0x3780)
- SetFilterConnectionOptions (Ordinal: 6, Address: 0x3790)
- SetFilterDebugFlags (Ordinal: 7, Address: 0x3760)
- UploadTelemetry (Ordinal: 8, Address: 0x37b0)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18006e148)
- AllocateAndInitializeSid (Address: 0x18006e140)
- ChangeServiceConfig2W (Address: 0x18006e070)
- ChangeServiceConfigW (Address: 0x18006e078)
- CloseServiceHandle (Address: 0x18006e068)
- CloseTrace (Address: 0x18006e128)
- ControlService (Address: 0x18006e060)
- ControlTraceW (Address: 0x18006e1e0)
- ConvertSidToStringSidW (Address: 0x18006e170)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18006e178)
- CreateProcessAsUserW (Address: 0x18006e158)
- CreateProcessWithTokenW (Address: 0x18006e1d0)
- CreateServiceW (Address: 0x18006e058)
- CreateWellKnownSid (Address: 0x18006e138)
- CryptAcquireContextW (Address: 0x18006e188)
- CryptCreateHash (Address: 0x18006e1a0)
- CryptDestroyHash (Address: 0x18006e1b0)
- CryptGetHashParam (Address: 0x18006e198)
- CryptHashData (Address: 0x18006e1a8)
- CryptReleaseContext (Address: 0x18006e190)
- DeleteService (Address: 0x18006e050)
- DuplicateTokenEx (Address: 0x18006e130)
- EnableTraceEx (Address: 0x18006e118)
- FreeSid (Address: 0x18006e110)
- GetAclInformation (Address: 0x18006e108)
- GetNamedSecurityInfoW (Address: 0x18006e160)
- GetSecurityDescriptorDacl (Address: 0x18006e1b8)
- GetTokenInformation (Address: 0x18006e100)
- GetUserNameW (Address: 0x18006e1c8)
- LookupPrivilegeValueW (Address: 0x18006e180)
- OpenProcessToken (Address: 0x18006e150)
- OpenSCManagerW (Address: 0x18006e048)
- OpenServiceW (Address: 0x18006e040)
- OpenTraceW (Address: 0x18006e120)
- ProcessTrace (Address: 0x18006e1d8)
- QueryServiceConfigW (Address: 0x18006e038)
- QueryServiceStatus (Address: 0x18006e030)
- QueryServiceStatusEx (Address: 0x18006e028)
- RegCloseKey (Address: 0x18006e0f8)
- RegCreateKeyExW (Address: 0x18006e0f0)
- RegCreateKeyTransactedW (Address: 0x18006e0e8)
- RegDeleteKeyExW (Address: 0x18006e0e0)
- RegDeleteTreeW (Address: 0x18006e088)
- RegDeleteValueW (Address: 0x18006e0d8)
- RegEnumKeyExW (Address: 0x18006e0c8)
- RegEnumKeyW (Address: 0x18006e0d0)
- RegEnumValueW (Address: 0x18006e0c0)
- RegGetValueW (Address: 0x18006e080)
- RegisterServiceCtrlHandlerW (Address: 0x18006e020)
- RegLoadKeyW (Address: 0x18006e0b8)
- RegOpenKeyExW (Address: 0x18006e0b0)
- RegQueryInfoKeyW (Address: 0x18006e0a8)
- RegQueryValueExW (Address: 0x18006e0a0)
- RegSetKeyValueW (Address: 0x18006e090)
- RegSetValueExW (Address: 0x18006e000)
- RegUnLoadKeyW (Address: 0x18006e098)
- SetEntriesInAclW (Address: 0x18006e1f0)
- SetFileSecurityW (Address: 0x18006e1c0)
- SetNamedSecurityInfoW (Address: 0x18006e168)
- SetServiceStatus (Address: 0x18006e018)
- StartServiceCtrlDispatcherW (Address: 0x18006e010)
- StartServiceW (Address: 0x18006e008)
- StartTraceW (Address: 0x18006e1e8)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x18006ef30)
- wcstoll (Address: 0x18006ef28)
- wcstoul (Address: 0x18006ef20)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x18006ef48)
- free (Address: 0x18006ef50)
- malloc (Address: 0x18006ef58)
- realloc (Address: 0x18006ef40)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x18006ef68)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthread (Address: 0x18006efe8)
- _beginthreadex (Address: 0x18006ef78)
- _cexit (Address: 0x18006ef98)
- _configure_narrow_argv (Address: 0x18006efd0)
- _crt_atexit (Address: 0x18006efb0)
- _errno (Address: 0x18006ef80)
- _execute_onexit_table (Address: 0x18006efb8)
- _initialize_narrow_environment (Address: 0x18006efc8)
- _initialize_onexit_table (Address: 0x18006eff8)
- _initterm (Address: 0x18006ef90)
- _initterm_e (Address: 0x18006ef88)
- _invalid_parameter_noinfo (Address: 0x18006eff0)
- _invalid_parameter_noinfo_noreturn (Address: 0x18006efa0)
- _register_onexit_function (Address: 0x18006efc0)
- _seh_filter_dll (Address: 0x18006efd8)
- abort (Address: 0x18006efe0)
- terminate (Address: 0x18006efa8)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsnprintf_s (Address: 0x18006f008)
- __stdio_common_vswprintf (Address: 0x18006f020)
- _wfopen_s (Address: 0x18006f018)
- fclose (Address: 0x18006f010)
api-ms-win-crt-string-l1-1-0.dll
- _wcsdup (Address: 0x18006f058)
- _wcsicmp (Address: 0x18006f048)
- _wcsnicmp (Address: 0x18006f040)
- iswspace (Address: 0x18006f070)
- towlower (Address: 0x18006f050)
- towupper (Address: 0x18006f068)
- wcscpy_s (Address: 0x18006f038)
- wcsncpy_s (Address: 0x18006f030)
- wcstok_s (Address: 0x18006f060)
api-ms-win-crt-time-l1-1-0.dll
- _localtime64_s (Address: 0x18006f088)
- _time64 (Address: 0x18006f080)
cldapi.dll
- CfCloseHandle (Address: 0x18006f138)
- CfConnectSyncRoot (Address: 0x18006f0a8)
- CfConvertToPlaceholder (Address: 0x18006f0c0)
- CfCreatePlaceholders (Address: 0x18006f0e0)
- CfDisconnectSyncRoot (Address: 0x18006f0e8)
- CfExecute (Address: 0x18006f100)
- CfGetPlaceholderInfo (Address: 0x18006f0f0)
- CfGetPlaceholderRangeInfo (Address: 0x18006f0d8)
- CfGetPlaceholderStateFromAttributeTag (Address: 0x18006f0c8)
- CfGetPlatformInfo (Address: 0x18006f110)
- CfGetTransferKey (Address: 0x18006f0f8)
- CfGetWin32HandleFromProtectedHandle (Address: 0x18006f128)
- CfHydratePlaceholder (Address: 0x18006f0d0)
- CfOpenFileWithOplock (Address: 0x18006f140)
- CfReferenceProtectedHandle (Address: 0x18006f130)
- CfRegisterSyncRoot (Address: 0x18006f098)
- CfReleaseProtectedHandle (Address: 0x18006f120)
- CfReportProviderProgress (Address: 0x18006f108)
- CfRevertPlaceholder (Address: 0x18006f0b0)
- CfSetInSyncState (Address: 0x18006f148)
- CfSetPinState (Address: 0x18006f118)
- CfUnregisterSyncRoot (Address: 0x18006f0a0)
- CfUpdatePlaceholder (Address: 0x18006f0b8)
CRYPT32.dll
- CertFindExtension (Address: 0x18006e210)
- CryptBinaryToStringW (Address: 0x18006e208)
- CryptStringToBinaryW (Address: 0x18006e200)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x18006e5f0)
- CloseHandle (Address: 0x18006e588)
- CompareStringOrdinal (Address: 0x18006e380)
- CopyFileW (Address: 0x18006e478)
- CreateDirectoryW (Address: 0x18006e250)
- CreateEventExW (Address: 0x18006e4e0)
- CreateEventW (Address: 0x18006e500)
- CreateFileW (Address: 0x18006e590)
- CreateIoCompletionPort (Address: 0x18006e308)
- CreateMutexW (Address: 0x18006e3c8)
- CreatePipe (Address: 0x18006e2f0)
- CreateProcessW (Address: 0x18006e220)
- CreateSymbolicLinkW (Address: 0x18006e378)
- CreateThread (Address: 0x18006e4a8)
- CreateToolhelp32Snapshot (Address: 0x18006e390)
- DeleteCriticalSection (Address: 0x18006e598)
- DeleteFileW (Address: 0x18006e258)
- DeviceIoControl (Address: 0x18006e320)
- DisableThreadLibraryCalls (Address: 0x18006e618)
- ExpandEnvironmentStringsW (Address: 0x18006e450)
- FileTimeToSystemTime (Address: 0x18006e570)
- FindClose (Address: 0x18006e3b0)
- FindFirstFileNameW (Address: 0x18006e2d8)
- FindFirstFileW (Address: 0x18006e260)
- FindFirstVolumeW (Address: 0x18006e268)
- FindNextFileW (Address: 0x18006e3f0)
- FindNextVolumeW (Address: 0x18006e270)
- FindVolumeClose (Address: 0x18006e278)
- FormatMessageW (Address: 0x18006e640)
- FreeLibrary (Address: 0x18006e550)
- GetCommandLineW (Address: 0x18006e248)
- GetCompressedFileSizeW (Address: 0x18006e2d0)
- GetComputerNameW (Address: 0x18006e490)
- GetCurrentProcess (Address: 0x18006e4c0)
- GetCurrentProcessId (Address: 0x18006e518)
- GetCurrentThreadId (Address: 0x18006e608)
- GetDiskFreeSpaceExW (Address: 0x18006e280)
- GetDllDirectoryW (Address: 0x18006e400)
- GetEnvironmentVariableW (Address: 0x18006e448)
- GetExitCodeProcess (Address: 0x18006e4b0)
- GetFileAttributesExW (Address: 0x18006e288)
- GetFileAttributesW (Address: 0x18006e538)
- GetFileInformationByHandle (Address: 0x18006e360)
- GetFileInformationByHandleEx (Address: 0x18006e540)
- GetFileSize (Address: 0x18006e290)
- GetFileSizeEx (Address: 0x18006e298)
- GetFileType (Address: 0x18006e4d0)
- GetFinalPathNameByHandleW (Address: 0x18006e4c8)
- GetLastError (Address: 0x18006e5a0)
- GetLongPathNameW (Address: 0x18006e2a0)
- GetModuleFileNameW (Address: 0x18006e340)
- GetModuleHandleExW (Address: 0x18006e628)
- GetModuleHandleW (Address: 0x18006e3f8)
- GetOverlappedResultEx (Address: 0x18006e4f8)
- GetPrivateProfileStringW (Address: 0x18006e460)
- GetProcAddress (Address: 0x18006e558)
- GetProcessHeap (Address: 0x18006e3b8)
- GetProcessIoCounters (Address: 0x18006e458)
- GetProcessTimes (Address: 0x18006e5b0)
- GetProductInfo (Address: 0x18006e420)
- GetQueuedCompletionStatus (Address: 0x18006e310)
- GetSystemTime (Address: 0x18006e328)
- GetSystemTimeAsFileTime (Address: 0x18006e330)
- GetSystemTimes (Address: 0x18006e238)
- GetTickCount (Address: 0x18006e4f0)
- GetTickCount64 (Address: 0x18006e520)
- GetUserDefaultLCID (Address: 0x18006e3e8)
- GetUserGeoID (Address: 0x18006e388)
- GetVersionExW (Address: 0x18006e3d0)
- GetVolumePathNameW (Address: 0x18006e2a8)
- GlobalAlloc (Address: 0x18006e350)
- GlobalFree (Address: 0x18006e368)
- GlobalLock (Address: 0x18006e648)
- GlobalUnlock (Address: 0x18006e358)
- HeapAlloc (Address: 0x18006e2f8)
- HeapFree (Address: 0x18006e300)
- InitializeCriticalSectionEx (Address: 0x18006e5a8)
- InitializeSListHead (Address: 0x18006e620)
- InterlockedPushEntrySList (Address: 0x18006e638)
- IsDebuggerPresent (Address: 0x18006e2e0)
- IsProcessorFeaturePresent (Address: 0x18006e5e0)
- IsWow64Process (Address: 0x18006e338)
- K32GetModuleFileNameExW (Address: 0x18006e3a8)
- LCIDToLocaleName (Address: 0x18006e3e0)
- LoadLibraryExW (Address: 0x18006e348)
- LoadLibraryW (Address: 0x18006e560)
- LocalAlloc (Address: 0x18006e578)
- LocalFree (Address: 0x18006e580)
- MoveFileExW (Address: 0x18006e480)
- MoveFileW (Address: 0x18006e3d8)
- MultiByteToWideChar (Address: 0x18006e630)
- OpenFileById (Address: 0x18006e4a0)
- OpenProcess (Address: 0x18006e230)
- OutputDebugStringW (Address: 0x18006e4b8)
- PostQueuedCompletionStatus (Address: 0x18006e318)
- Process32FirstW (Address: 0x18006e398)
- Process32NextW (Address: 0x18006e3a0)
- QueryPerformanceCounter (Address: 0x18006e528)
- QueryPerformanceFrequency (Address: 0x18006e530)
- ReadDirectoryChangesW (Address: 0x18006e370)
- ReadFile (Address: 0x18006e548)
- RegisterApplicationRestart (Address: 0x18006e498)
- ReleaseMutex (Address: 0x18006e430)
- ReleaseSRWLockExclusive (Address: 0x18006e5e8)
- RemoveDirectoryW (Address: 0x18006e2b0)
- ReplaceFileW (Address: 0x18006e488)
- RtlCaptureContext (Address: 0x18006e5b8)
- RtlLookupFunctionEntry (Address: 0x18006e5c0)
- RtlVirtualUnwind (Address: 0x18006e5c8)
- SetDllDirectoryW (Address: 0x18006e470)
- SetEvent (Address: 0x18006e4d8)
- SetFileAttributesW (Address: 0x18006e2b8)
- SetFileInformationByHandle (Address: 0x18006e2c0)
- SetFilePointer (Address: 0x18006e2c8)
- SetHandleInformation (Address: 0x18006e2e8)
- SetLastError (Address: 0x18006e410)
- SetProcessShutdownParameters (Address: 0x18006e228)
- SetThreadInformation (Address: 0x18006e240)
- SetUnhandledExceptionFilter (Address: 0x18006e5d8)
- Sleep (Address: 0x18006e438)
- SleepConditionVariableSRW (Address: 0x18006e600)
- SystemTimeToFileTime (Address: 0x18006e568)
- SystemTimeToTzSpecificLocalTime (Address: 0x18006e508)
- TerminateProcess (Address: 0x18006e408)
- TzSpecificLocalTimeToSystemTime (Address: 0x18006e510)
- UnhandledExceptionFilter (Address: 0x18006e5d0)
- VerifyVersionInfoW (Address: 0x18006e428)
- VerSetConditionMask (Address: 0x18006e418)
- WaitForMultipleObjects (Address: 0x18006e440)
- WaitForMultipleObjectsEx (Address: 0x18006e4e8)
- WaitForSingleObject (Address: 0x18006e3c0)
- WakeAllConditionVariable (Address: 0x18006e5f8)
- WideCharToMultiByte (Address: 0x18006e610)
- WritePrivateProfileStringW (Address: 0x18006e468)
LoggingPlatform.DLL
- ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x18006e698)
- ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x18006e678)
- ??1TelemetryEvent@@QEAA@XZ (Address: 0x18006e680)
- ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x18006e668)
- ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x18006e658)
- ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x18006e660)
- ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18006e690)
- ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18006e6a0)
- ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x18006e688)
- ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x18006e670)
MSVCP140.dll
- _Cnd_do_broadcast_at_thread_exit (Address: 0x18006ea88)
- _Cnd_init_in_situ (Address: 0x18006ea60)
- _Cnd_signal (Address: 0x18006ea68)
- _Cnd_wait (Address: 0x18006ea80)
- _Mtx_init_in_situ (Address: 0x18006ea40)
- _Mtx_lock (Address: 0x18006ea50)
- _Mtx_unlock (Address: 0x18006ea58)
- _Thrd_id (Address: 0x18006ea78)
- _Thrd_join (Address: 0x18006ea70)
- _Wcscoll (Address: 0x18006e6e0)
- _Wcsxfrm (Address: 0x18006e6e8)
- _Xtime_get_ticks (Address: 0x18006e750)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18006e7c0)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18006e910)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18006e6f8)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18006eaf0)
- ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x18006eac0)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18006e7b8)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18006eae8)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x18006e858)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18006e7e8)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18006e7d8)
- ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x18006eae0)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x18006ead8)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18006e930)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18006e950)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x18006e9b8)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18006e788)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18006ea48)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18006e7e0)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18006e7d0)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18006ea28)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x18006e7a0)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18006e7a8)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18006ea30)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18006ea38)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18006e740)
- ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x18006eaa0)
- ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x18006eab0)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18006e6f0)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18006ea90)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18006e958)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18006e988)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18006e6d0)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18006e6c0)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x18006e940)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18006e780)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18006e8d0)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18006e708)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18006eab8)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18006ea98)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18006e980)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18006e9b0)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18006e6d8)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18006e6c8)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18006e938)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18006e778)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18006e8c8)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18006e710)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18006eac8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18006e730)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18006e6b0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18006e768)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18006e868)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18006e738)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18006e6b8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18006e928)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18006e8c0)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18006ead0)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x18006e908)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x18006e700)
- ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18006e728)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006ea08)
- ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e8b0)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006e9e8)
- ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e890)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006e9d0)
- ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e878)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x18006e960)
- ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x18006e990)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x18006e8f8)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18006e860)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18006e948)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x18006e9e0)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x18006e888)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18006e760)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x18006e900)
- ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006ea00)
- ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e8a8)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18006e748)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18006e7b0)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18006e7c8)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18006e838)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18006e718)
- ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006e9f8)
- ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e8a0)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18006e9f0)
- ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18006e898)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18006e968)
- ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x18006e998)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18006e770)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18006e850)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18006e830)
- ?setf@ios_base@std@@QEAAHH@Z (Address: 0x18006e8f0)
- ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x18006e8e8)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18006e9d8)
- ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18006e880)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x18006e9c8)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18006e9c0)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z (Address: 0x18006e870)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18006e790)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18006e978)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18006e9a8)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18006eaf8)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18006e840)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18006e818)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18006ea20)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18006ea18)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18006e8b8)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18006ea10)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18006e798)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18006e7f0)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18006e7f8)
- ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18006e970)
- ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ (Address: 0x18006e9a0)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18006e920)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18006e720)
- ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18006e918)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18006e810)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18006e820)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x18006eaa8)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x18006e758)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18006e8d8)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x18006e8e0)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18006e848)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18006e828)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18006e800)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18006e808)
ole32.dll
- CoCreateFreeThreadedMarshaler (Address: 0x18006f160)
- CoCreateGuid (Address: 0x18006f1c8)
- CoCreateInstance (Address: 0x18006f1c0)
- CoInitializeEx (Address: 0x18006f1b0)
- CoSetProxyBlanket (Address: 0x18006f1b8)
- CoTaskMemAlloc (Address: 0x18006f158)
- CoTaskMemFree (Address: 0x18006f188)
- CoUninitialize (Address: 0x18006f1a8)
- CoWaitForMultipleHandles (Address: 0x18006f168)
- CreateBindCtx (Address: 0x18006f178)
- CreateItemMoniker (Address: 0x18006f198)
- GetRunningObjectTable (Address: 0x18006f190)
- PropVariantClear (Address: 0x18006f1a0)
- StringFromCLSID (Address: 0x18006f170)
- StringFromGUID2 (Address: 0x18006f180)
OLEAUT32.dll
- GetErrorInfo (Address: 0x18006eb30)
- GetRecordInfoFromTypeInfo (Address: 0x18006eb20)
- LoadRegTypeLib (Address: 0x18006eb18)
- LoadTypeLib (Address: 0x18006eb10)
- SetErrorInfo (Address: 0x18006eb28)
- SysAllocString (Address: 0x18006eb38)
- SysFreeString (Address: 0x18006eb08)
- SysStringLen (Address: 0x18006eb40)
PROPSYS.dll
- InitPropVariantFromFileTime (Address: 0x18006eb68)
- InitPropVariantFromUInt32Vector (Address: 0x18006eb50)
- PropVariantToFileTime (Address: 0x18006eb60)
- PropVariantToUInt32 (Address: 0x18006eb58)
RPCRT4.dll
- RpcBindingFree (Address: 0x18006ebb8)
- RpcBindingFromStringBindingW (Address: 0x18006ebc0)
- RpcBindingSetAuthInfoExW (Address: 0x18006eba0)
- RpcBindingVectorFree (Address: 0x18006ebc8)
- RpcEpRegisterW (Address: 0x18006eba8)
- RpcEpUnregister (Address: 0x18006ebb0)
- RpcServerInqBindings (Address: 0x18006eb88)
- RpcServerInqCallAttributesW (Address: 0x18006ebd8)
- RpcServerRegisterIfEx (Address: 0x18006eb78)
- RpcServerUnregisterIf (Address: 0x18006eb80)
- RpcServerUseProtseqW (Address: 0x18006eb98)
- RpcStringBindingComposeW (Address: 0x18006ebd0)
- RpcStringFreeW (Address: 0x18006eb90)
- UuidCreate (Address: 0x18006ebe0)
Secur32.dll
- GetUserNameExW (Address: 0x18006ed10)
SHELL32.dll
- (Address: 0x18006ec48)
- CommandLineToArgvW (Address: 0x18006ec38)
- SHAssocEnumHandlers (Address: 0x18006ec00)
- SHChangeNotify (Address: 0x18006ec58)
- SHCreateDirectoryExW (Address: 0x18006ec08)
- SHCreateItemFromParsingName (Address: 0x18006ec60)
- ShellExecuteExW (Address: 0x18006ebf0)
- SHFileOperationW (Address: 0x18006ec50)
- SHGetFolderPathAndSubDirW (Address: 0x18006ec20)
- SHGetFolderPathW (Address: 0x18006ec18)
- SHGetKnownFolderPath (Address: 0x18006ec30)
- SHGetPropertyStoreFromParsingName (Address: 0x18006ebf8)
- SHGetSpecialFolderPathW (Address: 0x18006ec10)
- SHParseDisplayName (Address: 0x18006ec40)
- SHSetKnownFolderPath (Address: 0x18006ec28)
SHLWAPI.dll
- AssocQueryStringW (Address: 0x18006ecf0)
- PathFileExistsW (Address: 0x18006ecc0)
- PathFindFileNameW (Address: 0x18006ecd8)
- PathIsDirectoryEmptyW (Address: 0x18006ecb8)
- PathIsDirectoryW (Address: 0x18006ecc8)
- PathIsPrefixW (Address: 0x18006ece0)
- PathRemoveFileSpecW (Address: 0x18006ec98)
- PathStripPathW (Address: 0x18006ecd0)
- SHCreateStreamOnFileW (Address: 0x18006ecf8)
- SHDeleteKeyW (Address: 0x18006ec90)
- SHDeleteValueW (Address: 0x18006ed00)
- SHGetValueA (Address: 0x18006ec80)
- SHGetValueW (Address: 0x18006ecb0)
- SHRegGetBoolUSValueW (Address: 0x18006ec88)
- SHRegGetPathW (Address: 0x18006ece8)
- SHRegGetUSValueW (Address: 0x18006eca8)
- SHRegGetValueW (Address: 0x18006ec70)
- SHSetValueW (Address: 0x18006ec78)
- StrStrIW (Address: 0x18006eca0)
UpdateRingSettings.dll
- ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x18006ee10)
USER32.dll
- CloseClipboard (Address: 0x18006ed28)
- CreateWindowExW (Address: 0x18006ed90)
- DestroyWindow (Address: 0x18006ed78)
- DispatchMessageW (Address: 0x18006edc8)
- EnumWindows (Address: 0x18006ed40)
- GetClassNameW (Address: 0x18006ed50)
- GetMessageW (Address: 0x18006edc0)
- GetWindowThreadProcessId (Address: 0x18006ed58)
- LoadCursorW (Address: 0x18006edd8)
- MsgWaitForMultipleObjectsEx (Address: 0x18006ed80)
- OpenClipboard (Address: 0x18006ed20)
- PeekMessageW (Address: 0x18006edd0)
- PostMessageW (Address: 0x18006ed98)
- PostQuitMessage (Address: 0x18006ede8)
- RegisterClassW (Address: 0x18006ed70)
- RegisterClipboardFormatW (Address: 0x18006ed38)
- RegisterPowerSettingNotification (Address: 0x18006edb8)
- RegisterSuspendResumeNotification (Address: 0x18006eda8)
- SendMessageTimeoutW (Address: 0x18006ed68)
- SetClipboardData (Address: 0x18006ed30)
- SetCursor (Address: 0x18006ede0)
- ShowWindow (Address: 0x18006ed48)
- SystemParametersInfoW (Address: 0x18006ed60)
- TranslateMessage (Address: 0x18006ed88)
- UnregisterPowerSettingNotification (Address: 0x18006edb0)
- UnregisterSuspendResumeNotification (Address: 0x18006eda0)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x18006ee00)
- GetDefaultUserProfileDirectoryW (Address: 0x18006edf8)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x18006eeb8)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x18006ee80)
- __current_exception (Address: 0x18006ee70)
- __current_exception_context (Address: 0x18006ee78)
- __RTDynamicCast (Address: 0x18006ee30)
- __std_exception_copy (Address: 0x18006ee90)
- __std_exception_destroy (Address: 0x18006eea0)
- __std_terminate (Address: 0x18006ee40)
- __std_type_info_destroy_list (Address: 0x18006ee88)
- _CxxThrowException (Address: 0x18006eea8)
- _purecall (Address: 0x18006ee20)
- memcmp (Address: 0x18006ee38)
- memcpy (Address: 0x18006ee98)
- memmove (Address: 0x18006ee48)
- memset (Address: 0x18006ee50)
- strchr (Address: 0x18006ee58)
- wcschr (Address: 0x18006ee28)
- wcsrchr (Address: 0x18006ee60)
- wcsstr (Address: 0x18006ee68)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x18006eec8)
- GetFileVersionInfoW (Address: 0x18006eed8)
- VerQueryValueW (Address: 0x18006eed0)
WININET.dll
- InternetCheckConnectionW (Address: 0x18006eee8)
WTSAPI32.dll
- WTSEnumerateSessionsW (Address: 0x18006ef08)
- WTSFreeMemory (Address: 0x18006eef8)
- WTSQuerySessionInformationW (Address: 0x18006ef10)
- WTSQueryUserToken (Address: 0x18006ef00)