FileSyncFSCache.dll

Description: Microsoft OneDriveFile Sync FS Cache

Authors: © Microsoft Corporation. All rights reserved.

Version: 25.209.1026.2

Architecture: 64-bit

Operating System: Windows

SHA256: f69907ca90568c5ebe38dca4f3958e2a

File Size: 529.4 KB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CreateLayer (Ordinal: 1, Address: 0x4fb0)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x1800551b8)
  • AllocateAndInitializeSid (Address: 0x1800550b0)
  • ChangeServiceConfig2W (Address: 0x180055110)
  • ChangeServiceConfigW (Address: 0x180055108)
  • CloseServiceHandle (Address: 0x180055118)
  • ControlService (Address: 0x180055120)
  • ConvertSidToStringSidW (Address: 0x180055198)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800550a0)
  • CreateProcessAsUserW (Address: 0x1800550a8)
  • CreateProcessWithTokenW (Address: 0x1800551b0)
  • CreateServiceW (Address: 0x180055128)
  • CreateWellKnownSid (Address: 0x1800550b8)
  • CryptAcquireContextW (Address: 0x180055070)
  • CryptCreateHash (Address: 0x180055088)
  • CryptDestroyHash (Address: 0x180055098)
  • CryptGetHashParam (Address: 0x180055080)
  • CryptHashData (Address: 0x180055090)
  • CryptReleaseContext (Address: 0x180055078)
  • DeleteService (Address: 0x180055130)
  • DuplicateTokenEx (Address: 0x1800550c0)
  • FreeSid (Address: 0x1800550c8)
  • GetAclInformation (Address: 0x1800550d0)
  • GetNamedSecurityInfoW (Address: 0x180055188)
  • GetTokenInformation (Address: 0x180055008)
  • GetUserNameW (Address: 0x1800551a8)
  • LookupPrivilegeValueW (Address: 0x180055010)
  • OpenProcessToken (Address: 0x180055000)
  • OpenSCManagerW (Address: 0x180055138)
  • OpenServiceW (Address: 0x180055140)
  • QueryServiceConfigW (Address: 0x180055148)
  • QueryServiceStatus (Address: 0x180055150)
  • QueryServiceStatusEx (Address: 0x180055158)
  • RegCloseKey (Address: 0x180055018)
  • RegCreateKeyExW (Address: 0x180055020)
  • RegCreateKeyTransactedW (Address: 0x1800550d8)
  • RegDeleteKeyExW (Address: 0x1800550e0)
  • RegDeleteTreeW (Address: 0x180055100)
  • RegDeleteValueW (Address: 0x180055028)
  • RegEnumKeyExW (Address: 0x180055030)
  • RegEnumKeyW (Address: 0x1800550e8)
  • RegEnumValueW (Address: 0x180055038)
  • RegGetValueW (Address: 0x180055068)
  • RegisterServiceCtrlHandlerW (Address: 0x180055160)
  • RegLoadKeyW (Address: 0x1800550f0)
  • RegOpenKeyExW (Address: 0x180055040)
  • RegQueryInfoKeyW (Address: 0x180055048)
  • RegQueryValueExW (Address: 0x180055050)
  • RegSetKeyValueW (Address: 0x180055060)
  • RegSetValueExW (Address: 0x180055058)
  • RegUnLoadKeyW (Address: 0x1800550f8)
  • SetEntriesInAclW (Address: 0x180055180)
  • SetFileSecurityW (Address: 0x1800551a0)
  • SetNamedSecurityInfoW (Address: 0x180055190)
  • SetServiceStatus (Address: 0x180055168)
  • StartServiceCtrlDispatcherW (Address: 0x180055170)
  • StartServiceW (Address: 0x180055178)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x180055f90)
  • wcstoll (Address: 0x180055f98)
  • wcstoul (Address: 0x180055fa0)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x180055fc8)
  • free (Address: 0x180055fb8)
  • malloc (Address: 0x180055fb0)
  • realloc (Address: 0x180055fc0)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180055fd8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x180055ff8)
  • _beginthreadex (Address: 0x180055ff0)
  • _cexit (Address: 0x180056010)
  • _configure_narrow_argv (Address: 0x180055fe8)
  • _crt_atexit (Address: 0x180056018)
  • _errno (Address: 0x180056040)
  • _execute_onexit_table (Address: 0x180056020)
  • _initialize_narrow_environment (Address: 0x180056058)
  • _initialize_onexit_table (Address: 0x180056038)
  • _initterm (Address: 0x180056008)
  • _initterm_e (Address: 0x180056000)
  • _invalid_parameter_noinfo_noreturn (Address: 0x180056030)
  • _register_onexit_function (Address: 0x180056028)
  • _seh_filter_dll (Address: 0x180056048)
  • terminate (Address: 0x180056050)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vswprintf (Address: 0x180056070)
  • _wfopen_s (Address: 0x180056068)
  • fclose (Address: 0x180056078)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsdup (Address: 0x1800560a8)
  • _wcsicmp (Address: 0x180056098)
  • _wcsnicmp (Address: 0x1800560a0)
  • towlower (Address: 0x180056088)
  • towupper (Address: 0x180056090)
  • wcstok_s (Address: 0x1800560b0)
api-ms-win-crt-time-l1-1-0.dll
  • _localtime64_s (Address: 0x1800560c0)
  • _time64 (Address: 0x1800560c8)
CRYPT32.dll
  • CertFindExtension (Address: 0x1800551c8)
  • CryptBinaryToStringW (Address: 0x1800551d8)
  • CryptStringToBinaryW (Address: 0x1800551d0)
FileSyncFS.DLL
  • ??0Path@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180055238)
  • ??0Path@Odfs@@QEAA@AEBV01@@Z (Address: 0x180055250)
  • ??0Path@Odfs@@QEAA@XZ (Address: 0x180055218)
  • ??0PathFragment@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180055240)
  • ??0PathFragment@Odfs@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x1800551f0)
  • ??0PathFragment@Odfs@@QEAA@AEBV01@@Z (Address: 0x180055258)
  • ??1Path@Odfs@@QEAA@XZ (Address: 0x1800552c8)
  • ??1PathFragment@Odfs@@QEAA@XZ (Address: 0x180055220)
  • ??1PropertyIterator@Odfs@@QEAA@XZ (Address: 0x180055288)
  • ??4Path@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x180055200)
  • ??4Path@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x180055208)
  • ??4PathFragment@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x180055230)
  • ??9PropertyIterator@Odfs@@QEBA_NAEBV01@@Z (Address: 0x1800552a0)
  • ??DPropertyIterator@Odfs@@QEBA?BUPropertyKey@1@XZ (Address: 0x1800552a8)
  • ??EPropertyIterator@Odfs@@QEAAAEAV01@XZ (Address: 0x180055298)
  • ??KPath@Odfs@@QEBA?AV01@AEBVPathFragment@1@@Z (Address: 0x1800551f8)
  • ?begin@MutablePropertyBag@Odfs@@QEBA?AVPropertyIterator@2@XZ (Address: 0x1800552b0)
  • ?begin@PropertyBag@Odfs@@QEBA?AVPropertyIterator@2@XZ (Address: 0x180055280)
  • ?Consume@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@@Z (Address: 0x1800552d0)
  • ?end@MutablePropertyBag@Odfs@@QEBA?AVPropertyIterator@2@XZ (Address: 0x1800552b8)
  • ?end@PropertyBag@Odfs@@QEBA?AVPropertyIterator@2@XZ (Address: 0x180055290)
  • ?FromBuffer@PropertyVariantSerializer@Odfs@@YA?AV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocat (Address: 0x180055228)
  • ?GetPropertyFlagsForKey@PropertyBag@Odfs@@QEBA?AW4PropertyFlags@2@AEBUPropertyKey@2@@Z (Address: 0x180055268)
  • ?GetVariant@MutablePropertyBag@Odfs@@QEBA?AVODResult@@AEBUPropertyKey@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allo (Address: 0x1800552d8)
  • ?GetVariant@PropertyBag@Odfs@@QEBA?AVODResult@@AEBUPropertyKey@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_ (Address: 0x1800552e0)
  • ?Has@PropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x180055260)
  • ?IsConsumed@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800552c0)
  • ?PathAtNamespaceRoot@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4PathNormalizationType@2@@Z (Address: 0x180055210)
  • ?Set@PropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@st (Address: 0x180055270)
  • ?SetError@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@V3@@Z (Address: 0x1800552e8)
  • ?SetError@PropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@V3@@Z (Address: 0x180055278)
  • ?ToBuffer@PropertyVariantSerializer@Odfs@@YA?AV?$vector@EV?$allocator@E@std@@@std@@W4PropertyVariantType@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_stri (Address: 0x180055248)
  • ?ToSystemString@Path@Odfs@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ (Address: 0x1800551e8)
FileSyncSqlite3.dll
  • sqlite3_bind_blob (Address: 0x1800553a0)
  • sqlite3_bind_double (Address: 0x180055378)
  • sqlite3_bind_int (Address: 0x180055388)
  • sqlite3_bind_int64 (Address: 0x180055380)
  • sqlite3_bind_text (Address: 0x180055370)
  • sqlite3_busy_timeout (Address: 0x180055300)
  • sqlite3_clear_bindings (Address: 0x180055338)
  • sqlite3_close (Address: 0x180055320)
  • sqlite3_column_blob (Address: 0x180055360)
  • sqlite3_column_bytes (Address: 0x180055368)
  • sqlite3_column_int (Address: 0x180055350)
  • sqlite3_column_int64 (Address: 0x180055358)
  • sqlite3_errmsg (Address: 0x180055310)
  • sqlite3_exec (Address: 0x180055318)
  • sqlite3_extended_errcode (Address: 0x180055308)
  • sqlite3_finalize (Address: 0x180055328)
  • sqlite3_open_v2 (Address: 0x1800552f8)
  • sqlite3_prepare_v2 (Address: 0x180055390)
  • sqlite3_reset (Address: 0x180055330)
  • sqlite3_sql (Address: 0x180055340)
  • sqlite3_step (Address: 0x180055348)
  • sqlite3_system_errno (Address: 0x180055398)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x180055768)
  • CloseHandle (Address: 0x1800556b8)
  • CloseThreadpoolTimer (Address: 0x1800553c0)
  • CompareStringOrdinal (Address: 0x180055470)
  • CopyFileW (Address: 0x180055430)
  • CreateDirectoryW (Address: 0x180055588)
  • CreateEventW (Address: 0x1800555d8)
  • CreateFileW (Address: 0x180055580)
  • CreateIoCompletionPort (Address: 0x1800554d0)
  • CreateMutexW (Address: 0x180055698)
  • CreatePipe (Address: 0x1800554d8)
  • CreateProcessW (Address: 0x1800555a8)
  • CreateSymbolicLinkW (Address: 0x180055478)
  • CreateThreadpoolTimer (Address: 0x1800553d8)
  • CreateToolhelp32Snapshot (Address: 0x180055468)
  • DeleteCriticalSection (Address: 0x180055610)
  • DeleteFileW (Address: 0x1800556d0)
  • DeviceIoControl (Address: 0x1800554b8)
  • DisableThreadLibraryCalls (Address: 0x1800556e8)
  • ExpandEnvironmentStringsW (Address: 0x1800555c0)
  • FindClose (Address: 0x1800556c8)
  • FindFirstFileNameW (Address: 0x1800554e8)
  • FindFirstFileW (Address: 0x1800556c0)
  • FindFirstVolumeW (Address: 0x180055578)
  • FindNextVolumeW (Address: 0x180055570)
  • FindVolumeClose (Address: 0x180055568)
  • FreeLibrary (Address: 0x180055678)
  • GetCommandLineW (Address: 0x1800555c8)
  • GetCompressedFileSizeW (Address: 0x1800554f0)
  • GetComputerNameW (Address: 0x180055418)
  • GetCurrentProcess (Address: 0x180055728)
  • GetCurrentProcessId (Address: 0x1800556f8)
  • GetCurrentThread (Address: 0x1800553e0)
  • GetCurrentThreadId (Address: 0x180055758)
  • GetDiskFreeSpaceExW (Address: 0x180055560)
  • GetDllDirectoryW (Address: 0x1800553f8)
  • GetEnvironmentVariableW (Address: 0x1800553b0)
  • GetExitCodeProcess (Address: 0x1800555b0)
  • GetFileAttributesExW (Address: 0x180055550)
  • GetFileAttributesW (Address: 0x180055558)
  • GetFileInformationByHandle (Address: 0x180055548)
  • GetFileInformationByHandleEx (Address: 0x180055408)
  • GetFileSize (Address: 0x180055540)
  • GetFileSizeEx (Address: 0x180055538)
  • GetFileType (Address: 0x180055530)
  • GetFinalPathNameByHandleW (Address: 0x180055528)
  • GetLastError (Address: 0x180055778)
  • GetLongPathNameW (Address: 0x1800555e8)
  • GetModuleFileNameW (Address: 0x180055670)
  • GetModuleHandleW (Address: 0x180055708)
  • GetPrivateProfileStringW (Address: 0x180055448)
  • GetProcAddress (Address: 0x180055668)
  • GetProcessIoCounters (Address: 0x180055450)
  • GetProcessTimes (Address: 0x1800555b8)
  • GetProductInfo (Address: 0x180055608)
  • GetQueuedCompletionStatus (Address: 0x1800554c8)
  • GetSystemTime (Address: 0x180055688)
  • GetSystemTimeAsFileTime (Address: 0x1800556f0)
  • GetSystemTimes (Address: 0x180055598)
  • GetTickCount64 (Address: 0x180055750)
  • GetUserDefaultLCID (Address: 0x180055628)
  • GetUserGeoID (Address: 0x180055630)
  • GetVersionExW (Address: 0x180055680)
  • GetVolumePathNameW (Address: 0x180055520)
  • GlobalAlloc (Address: 0x1800554a0)
  • GlobalFree (Address: 0x180055488)
  • GlobalLock (Address: 0x180055490)
  • GlobalUnlock (Address: 0x180055498)
  • HeapAlloc (Address: 0x1800556b0)
  • HeapFree (Address: 0x1800556a8)
  • InitializeCriticalSectionEx (Address: 0x180055618)
  • InitializeSListHead (Address: 0x180055740)
  • IsDebuggerPresent (Address: 0x180055710)
  • IsProcessorFeaturePresent (Address: 0x180055718)
  • IsWow64Process (Address: 0x1800554b0)
  • K32GetModuleFileNameExW (Address: 0x180055620)
  • LCIDToLocaleName (Address: 0x180055638)
  • LoadLibraryExW (Address: 0x1800554a8)
  • LoadLibraryW (Address: 0x180055660)
  • LocalAlloc (Address: 0x180055658)
  • LocalFree (Address: 0x180055650)
  • MoveFileExW (Address: 0x180055428)
  • MoveFileW (Address: 0x180055648)
  • MultiByteToWideChar (Address: 0x1800556e0)
  • OpenFileById (Address: 0x180055400)
  • OpenProcess (Address: 0x180055690)
  • OutputDebugStringW (Address: 0x1800555f0)
  • PostQueuedCompletionStatus (Address: 0x1800554c0)
  • Process32FirstW (Address: 0x180055460)
  • Process32NextW (Address: 0x180055458)
  • QueryPerformanceCounter (Address: 0x180055700)
  • RaiseException (Address: 0x1800553f0)
  • ReadDirectoryChangesW (Address: 0x180055480)
  • ReadFile (Address: 0x180055518)
  • RegisterApplicationRestart (Address: 0x180055410)
  • ReleaseMutex (Address: 0x1800555e0)
  • ReleaseSRWLockExclusive (Address: 0x180055770)
  • RemoveDirectoryW (Address: 0x180055510)
  • ReplaceFileW (Address: 0x180055420)
  • SetDllDirectoryW (Address: 0x180055438)
  • SetFileAttributesW (Address: 0x180055508)
  • SetFileInformationByHandle (Address: 0x180055500)
  • SetFilePointer (Address: 0x1800554f8)
  • SetHandleInformation (Address: 0x1800554e0)
  • SetLastError (Address: 0x1800555f8)
  • SetProcessShutdownParameters (Address: 0x1800555a0)
  • SetThreadInformation (Address: 0x180055590)
  • SetThreadpoolTimer (Address: 0x1800553d0)
  • SetThreadPriority (Address: 0x1800553e8)
  • SetUnhandledExceptionFilter (Address: 0x180055730)
  • Sleep (Address: 0x1800553b8)
  • SleepConditionVariableSRW (Address: 0x180055760)
  • SystemTimeToFileTime (Address: 0x180055640)
  • TerminateProcess (Address: 0x180055720)
  • UnhandledExceptionFilter (Address: 0x180055738)
  • VerifyVersionInfoW (Address: 0x180055600)
  • WaitForMultipleObjects (Address: 0x1800555d0)
  • WaitForSingleObject (Address: 0x1800556a0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800553c8)
  • WakeAllConditionVariable (Address: 0x180055748)
  • WideCharToMultiByte (Address: 0x1800556d8)
  • WritePrivateProfileStringW (Address: 0x180055440)
LoggingPlatform.DLL
  • ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x1800557e0)
  • ??0SuppressTransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x1800557f8)
  • ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x1800557a0)
  • ??0TransferScope@ScenarioTracking@@QEAA@QEBVITrace@1@@Z (Address: 0x180055810)
  • ??0TransferScope@ScenarioTracking@@QEAA@V?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@@Z (Address: 0x1800557c8)
  • ??1SuppressTransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x1800557d0)
  • ??1TelemetryEvent@@QEAA@XZ (Address: 0x180055798)
  • ??1TransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x180055808)
  • ?CaptureTrace@ScenarioTracking@@YA?AV?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@XZ (Address: 0x180055800)
  • ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x1800557b8)
  • ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x1800557f0)
  • ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x1800557c0)
  • ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x180055788)
  • ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800557e8)
  • ?NarrowStringToWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD@Z (Address: 0x1800557b0)
  • ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x1800557a8)
  • ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x180055790)
  • ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x1800557d8)
MSVCP140.dll
  • _Cnd_broadcast (Address: 0x180055908)
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x180055920)
  • _Cnd_init_in_situ (Address: 0x180055918)
  • _Mtx_init_in_situ (Address: 0x180055930)
  • _Mtx_lock (Address: 0x180055940)
  • _Mtx_unlock (Address: 0x180055a68)
  • _Query_perf_counter (Address: 0x180055a78)
  • _Query_perf_frequency (Address: 0x180055a80)
  • _Thrd_detach (Address: 0x180055910)
  • _Wcscoll (Address: 0x1800558b0)
  • _Wcsxfrm (Address: 0x1800558b8)
  • _Xtime_get_ticks (Address: 0x180055a70)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180055b08)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180055b10)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180055b18)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180055b20)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180055aa0)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180055828)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180055b38)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180055b90)
  • ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x180055a60)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180055ab8)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180055ab0)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x180055880)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180055b40)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800559c0)
  • ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x180055a20)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x180055950)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x180055ad8)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x1800559a8)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180055900)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180055938)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180055b48)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800559c8)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x180055a88)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x180055970)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180055890)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180055928)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800559b8)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180055b28)
  • ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x180055960)
  • ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x180055a58)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180055bb0)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x180055ba8)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180055a28)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180055980)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x180055bc8)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x180055978)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x180055860)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180055a40)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180055988)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x180055b98)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x180055bc0)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x180055bb8)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180055a90)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180055a18)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180055aa8)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180055a10)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180055868)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180055a98)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180055a08)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x180055ba0)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x180055948)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x1800558e8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x1800558a0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800558f0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180055878)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x1800558f8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800558a8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x180055870)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180055968)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180055898)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x180055b88)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x180055830)
  • ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x180055a50)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x180055b78)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x180055ad0)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800559a0)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800558e0)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x180055b58)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x1800558d0)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x180055888)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180055ae0)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180055a00)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x1800558c0)
  • ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180055ac0)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180055848)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x180055ae8)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800559f0)
  • ?setf@ios_base@std@@QEAAHH@Z (Address: 0x180055838)
  • ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x180055840)
  • ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x180055a38)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x180055a30)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x180055a48)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x180055990)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180055850)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x180055b00)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800559d0)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180055858)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x180055b70)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800559b0)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x180055ac8)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x180055998)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x180055b30)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800559f8)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180055958)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x1800558c8)
  • ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180055820)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x180055af8)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800559d8)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x180055b60)
  • ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x1800558d8)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x180055b68)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x180055b80)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x180055af0)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800559e0)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x180055b50)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800559e8)
ntdll.dll
  • RtlCaptureContext (Address: 0x1800560d8)
  • RtlLookupFunctionEntry (Address: 0x1800560e0)
  • RtlVirtualUnwind (Address: 0x1800560e8)
  • VerSetConditionMask (Address: 0x1800560f0)
ole32.dll
  • CoCreateGuid (Address: 0x180056128)
  • CoCreateInstance (Address: 0x180056110)
  • CoInitializeEx (Address: 0x180056138)
  • CoSetProxyBlanket (Address: 0x180056140)
  • CoTaskMemFree (Address: 0x180056108)
  • CoUninitialize (Address: 0x180056130)
  • CreateBindCtx (Address: 0x180056120)
  • CreateItemMoniker (Address: 0x180056148)
  • GetRunningObjectTable (Address: 0x180056150)
  • StringFromCLSID (Address: 0x180056100)
  • StringFromGUID2 (Address: 0x180056118)
OLEAUT32.dll
  • GetRecordInfoFromTypeInfo (Address: 0x180055be0)
  • LoadRegTypeLib (Address: 0x180055bd8)
  • LoadTypeLib (Address: 0x180055be8)
RPCRT4.dll
  • RpcBindingFree (Address: 0x180055c48)
  • RpcBindingFromStringBindingW (Address: 0x180055c50)
  • RpcBindingSetAuthInfoExW (Address: 0x180055c58)
  • RpcBindingVectorFree (Address: 0x180055c40)
  • RpcEpRegisterW (Address: 0x180055c18)
  • RpcEpUnregister (Address: 0x180055c20)
  • RpcServerInqBindings (Address: 0x180055c30)
  • RpcServerInqCallAttributesW (Address: 0x180055c28)
  • RpcServerRegisterIfEx (Address: 0x180055bf8)
  • RpcServerUnregisterIf (Address: 0x180055c00)
  • RpcServerUseProtseqW (Address: 0x180055c08)
  • RpcStringBindingComposeW (Address: 0x180055c38)
  • RpcStringFreeW (Address: 0x180055c10)
  • UuidCreate (Address: 0x180055c60)
Secur32.dll
  • GetUserNameExW (Address: 0x180055d88)
SHELL32.dll
  • (Address: 0x180055ce0)
  • CommandLineToArgvW (Address: 0x180055c70)
  • SHAssocEnumHandlers (Address: 0x180055cb8)
  • SHChangeNotify (Address: 0x180055c90)
  • SHCreateDirectoryExW (Address: 0x180055cc0)
  • SHCreateItemFromParsingName (Address: 0x180055ca8)
  • ShellExecuteExW (Address: 0x180055ca0)
  • SHFileOperationW (Address: 0x180055c78)
  • SHGetFolderPathAndSubDirW (Address: 0x180055cd0)
  • SHGetFolderPathW (Address: 0x180055cc8)
  • SHGetKnownFolderPath (Address: 0x180055c88)
  • SHGetPropertyStoreFromParsingName (Address: 0x180055cb0)
  • SHGetSpecialFolderPathW (Address: 0x180055c80)
  • SHParseDisplayName (Address: 0x180055c98)
  • SHSetKnownFolderPath (Address: 0x180055cd8)
SHLWAPI.dll
  • AssocQueryStringW (Address: 0x180055d18)
  • PathFileExistsW (Address: 0x180055d58)
  • PathIsDirectoryEmptyW (Address: 0x180055d08)
  • PathIsDirectoryW (Address: 0x180055d50)
  • PathIsPrefixW (Address: 0x180055d68)
  • PathRemoveFileSpecW (Address: 0x180055d78)
  • PathStripPathW (Address: 0x180055cf0)
  • SHCreateStreamOnFileW (Address: 0x180055d10)
  • SHDeleteKeyW (Address: 0x180055d00)
  • SHDeleteValueW (Address: 0x180055d48)
  • SHGetValueA (Address: 0x180055d40)
  • SHGetValueW (Address: 0x180055cf8)
  • SHRegGetBoolUSValueW (Address: 0x180055d20)
  • SHRegGetPathW (Address: 0x180055d28)
  • SHRegGetUSValueW (Address: 0x180055d60)
  • SHRegGetValueW (Address: 0x180055d30)
  • SHSetValueW (Address: 0x180055d38)
  • StrStrIW (Address: 0x180055d70)
UpdateRingSettings.dll
  • ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x180055e68)
USER32.dll
  • CloseClipboard (Address: 0x180055da8)
  • CreateWindowExW (Address: 0x180055dc8)
  • DestroyWindow (Address: 0x180055dc0)
  • DispatchMessageW (Address: 0x180055df8)
  • EnumWindows (Address: 0x180055e38)
  • GetClassNameW (Address: 0x180055e30)
  • GetMessageW (Address: 0x180055e18)
  • GetWindowThreadProcessId (Address: 0x180055e28)
  • OpenClipboard (Address: 0x180055db0)
  • PostMessageW (Address: 0x180055e00)
  • PostThreadMessageW (Address: 0x180055e08)
  • RegisterClassW (Address: 0x180055dd0)
  • RegisterClipboardFormatW (Address: 0x180055d98)
  • RegisterPowerSettingNotification (Address: 0x180055df0)
  • RegisterSuspendResumeNotification (Address: 0x180055de0)
  • SendMessageTimeoutW (Address: 0x180055e20)
  • SetClipboardData (Address: 0x180055da0)
  • ShowWindow (Address: 0x180055db8)
  • SystemParametersInfoW (Address: 0x180055e40)
  • TranslateMessage (Address: 0x180055e10)
  • UnregisterPowerSettingNotification (Address: 0x180055de8)
  • UnregisterSuspendResumeNotification (Address: 0x180055dd8)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x180055e50)
  • GetDefaultUserProfileDirectoryW (Address: 0x180055e58)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x180055f28)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180055ec8)
  • __current_exception (Address: 0x180055f08)
  • __current_exception_context (Address: 0x180055f00)
  • __RTDynamicCast (Address: 0x180055e78)
  • __RTtypeid (Address: 0x180055f18)
  • __std_exception_copy (Address: 0x180055ea0)
  • __std_exception_destroy (Address: 0x180055ea8)
  • __std_terminate (Address: 0x180055e88)
  • __std_type_info_compare (Address: 0x180055ef8)
  • __std_type_info_destroy_list (Address: 0x180055ec0)
  • __std_type_info_name (Address: 0x180055eb8)
  • _CxxThrowException (Address: 0x180055e90)
  • _purecall (Address: 0x180055e98)
  • memcmp (Address: 0x180055ed0)
  • memcpy (Address: 0x180055f10)
  • memmove (Address: 0x180055ed8)
  • memset (Address: 0x180055e80)
  • strchr (Address: 0x180055eb0)
  • wcschr (Address: 0x180055ee0)
  • wcsrchr (Address: 0x180055ee8)
  • wcsstr (Address: 0x180055ef0)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x180055f40)
  • GetFileVersionInfoW (Address: 0x180055f48)
  • VerQueryValueW (Address: 0x180055f38)
WININET.dll
  • InternetCheckConnectionW (Address: 0x180055f58)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x180055f78)
  • WTSFreeMemory (Address: 0x180055f70)
  • WTSQuerySessionInformationW (Address: 0x180055f80)
  • WTSQueryUserToken (Address: 0x180055f68)