FileSyncFSDbfs.dll

Description: Microsoft OneDriveFile Sync FS DBFS

Authors: © Microsoft Corporation. All rights reserved.

Version: 25.209.1026.2

Architecture: 64-bit

Operating System: Windows

SHA256: 786275e1d7a67e7028c2a3099578f1a2

File Size: 885.9 KB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • OdfsCreateVfs (Ordinal: 1, Address: 0x2ef0)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x180094090)
  • AllocateAndInitializeSid (Address: 0x180094138)
  • ChangeServiceConfig2W (Address: 0x180094198)
  • ChangeServiceConfigW (Address: 0x180094190)
  • CloseServiceHandle (Address: 0x1800941a0)
  • ControlService (Address: 0x1800941a8)
  • ConvertSidToStringSidW (Address: 0x180094048)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180094128)
  • CreateProcessAsUserW (Address: 0x180094130)
  • CreateProcessWithTokenW (Address: 0x180094080)
  • CreateServiceW (Address: 0x1800941b0)
  • CreateWellKnownSid (Address: 0x180094140)
  • CryptAcquireContextW (Address: 0x1800940f8)
  • CryptCreateHash (Address: 0x180094110)
  • CryptDestroyHash (Address: 0x180094120)
  • CryptGetHashParam (Address: 0x180094000)
  • CryptHashData (Address: 0x180094118)
  • CryptReleaseContext (Address: 0x180094100)
  • DeleteService (Address: 0x180094108)
  • DuplicateTokenEx (Address: 0x180094148)
  • FreeSid (Address: 0x180094150)
  • GetAclInformation (Address: 0x180094158)
  • GetNamedSecurityInfoW (Address: 0x180094058)
  • GetTokenInformation (Address: 0x180094098)
  • GetUserNameW (Address: 0x180094078)
  • LookupPrivilegeValueW (Address: 0x180094070)
  • OpenProcessToken (Address: 0x180094088)
  • OpenSCManagerW (Address: 0x180094040)
  • OpenServiceW (Address: 0x180094038)
  • QueryServiceConfigW (Address: 0x180094030)
  • QueryServiceStatus (Address: 0x180094028)
  • QueryServiceStatusEx (Address: 0x180094020)
  • RegCloseKey (Address: 0x1800940a0)
  • RegCreateKeyExW (Address: 0x1800940a8)
  • RegCreateKeyTransactedW (Address: 0x180094160)
  • RegDeleteKeyExW (Address: 0x180094168)
  • RegDeleteTreeW (Address: 0x180094188)
  • RegDeleteValueW (Address: 0x1800940b0)
  • RegEnumKeyExW (Address: 0x1800940b8)
  • RegEnumKeyW (Address: 0x180094170)
  • RegEnumValueW (Address: 0x1800940c0)
  • RegGetValueW (Address: 0x1800940f0)
  • RegisterServiceCtrlHandlerW (Address: 0x180094018)
  • RegLoadKeyW (Address: 0x180094178)
  • RegOpenKeyExW (Address: 0x1800940c8)
  • RegQueryInfoKeyW (Address: 0x1800940d0)
  • RegQueryValueExW (Address: 0x1800940d8)
  • RegSetKeyValueW (Address: 0x1800940e8)
  • RegSetValueExW (Address: 0x1800940e0)
  • RegUnLoadKeyW (Address: 0x180094180)
  • SetEntriesInAclW (Address: 0x180094060)
  • SetFileSecurityW (Address: 0x180094008)
  • SetNamedSecurityInfoW (Address: 0x180094050)
  • SetServiceStatus (Address: 0x180094010)
  • StartServiceCtrlDispatcherW (Address: 0x1800941b8)
  • StartServiceW (Address: 0x180094068)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x1800951c8)
  • wcstoll (Address: 0x1800951d0)
  • wcstoul (Address: 0x1800951c0)
  • wcstoull (Address: 0x1800951d8)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x1800951e8)
  • free (Address: 0x180095200)
  • malloc (Address: 0x1800951f8)
  • realloc (Address: 0x1800951f0)
api-ms-win-crt-locale-l1-1-0.dll
  • ___lc_codepage_func (Address: 0x180095210)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180095220)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x180095260)
  • _beginthreadex (Address: 0x180095278)
  • _cexit (Address: 0x180095250)
  • _configure_narrow_argv (Address: 0x180095288)
  • _crt_atexit (Address: 0x1800952a8)
  • _errno (Address: 0x180095270)
  • _execute_onexit_table (Address: 0x1800952a0)
  • _initialize_narrow_environment (Address: 0x180095280)
  • _initialize_onexit_table (Address: 0x180095290)
  • _initterm (Address: 0x180095248)
  • _initterm_e (Address: 0x180095258)
  • _invalid_parameter_noinfo_noreturn (Address: 0x180095268)
  • _register_onexit_function (Address: 0x180095298)
  • _seh_filter_dll (Address: 0x180095240)
  • abort (Address: 0x180095230)
  • terminate (Address: 0x180095238)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsprintf (Address: 0x1800952d0)
  • __stdio_common_vsprintf_s (Address: 0x1800952d8)
  • __stdio_common_vswprintf (Address: 0x1800952c0)
  • _wfopen_s (Address: 0x1800952c8)
  • fclose (Address: 0x1800952b8)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsdup (Address: 0x1800952f8)
  • _wcsicmp (Address: 0x180095308)
  • _wcsnicmp (Address: 0x180095300)
  • towlower (Address: 0x180095310)
  • towupper (Address: 0x1800952e8)
  • wcstok_s (Address: 0x1800952f0)
api-ms-win-crt-time-l1-1-0.dll
  • _localtime64_s (Address: 0x180095328)
  • _time64 (Address: 0x180095320)
CRYPT32.dll
  • CertFindExtension (Address: 0x1800941c8)
  • CryptBinaryToStringW (Address: 0x1800941d8)
  • CryptStringToBinaryW (Address: 0x1800941d0)
FileSyncEvents.dll
  • GetGlobalEventMachine (Address: 0x1800941e8)
FileSyncFS.DLL
  • ??0MutablePropertyBag@Odfs@@QEAA@XZ (Address: 0x180094298)
  • ??0Path@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180094420)
  • ??0Path@Odfs@@QEAA@AEBV01@@Z (Address: 0x180094428)
  • ??0Path@Odfs@@QEAA@XZ (Address: 0x180094458)
  • ??0PathFragment@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180094348)
  • ??0PathFragment@Odfs@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x1800943a8)
  • ??0PathFragment@Odfs@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z (Address: 0x180094248)
  • ??0PathFragment@Odfs@@QEAA@AEBV01@@Z (Address: 0x180094328)
  • ??0PathFragment@Odfs@@QEAA@XZ (Address: 0x1800942e0)
  • ??0PropertyBag@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180094470)
  • ??0PropertyBag@Odfs@@QEAA@AEBV01@@Z (Address: 0x180094380)
  • ??0PropertyBag@Odfs@@QEAA@XZ (Address: 0x180094378)
  • ??0PropertyList@Odfs@@QEAA@XZ (Address: 0x180094408)
  • ??1MutablePropertyBag@Odfs@@QEAA@XZ (Address: 0x1800942a0)
  • ??1Path@Odfs@@QEAA@XZ (Address: 0x180094460)
  • ??1PathFragment@Odfs@@QEAA@XZ (Address: 0x1800943e0)
  • ??1PropertyBag@Odfs@@UEAA@XZ (Address: 0x180094370)
  • ??1PropertyList@Odfs@@UEAA@XZ (Address: 0x180094410)
  • ??4Path@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x180094400)
  • ??4Path@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x1800942b0)
  • ??4PathFragment@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x180094318)
  • ??4PathFragment@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x1800942d8)
  • ??4PropertyBag@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x1800941f8)
  • ??4PropertyBag@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x180094368)
  • ??4PropertyList@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x1800943f8)
  • ??8Path@Odfs@@QEBA_NAEBV01@@Z (Address: 0x180094230)
  • ??9Path@Odfs@@QEBA_NAEBV01@@Z (Address: 0x180094280)
  • ??9PathFragment@Odfs@@QEBA_NAEBV01@@Z (Address: 0x180094260)
  • ??KPath@Odfs@@QEBA?AV01@AEBVPathFragment@1@@Z (Address: 0x1800943e8)
  • ?Append@Path@Odfs@@QEBA?AV12@AEBVPathFragment@2@@Z (Address: 0x180094228)
  • ?Append@PathFragment@Odfs@@QEBA?AV12@AEBV12@@Z (Address: 0x180094220)
  • ?AppendExtension@Path@Odfs@@QEBA?AV12@AEBVPathFragment@2@@Z (Address: 0x1800943b0)
  • ?ClearAndRequestProperties@PropertyBag@Odfs@@QEAAXAEBVPropertyList@2@@Z (Address: 0x1800943d0)
  • ?Compare@PathFragment@Odfs@@QEBAHAEBV12@W4PathStringCompareRules@2@@Z (Address: 0x180094270)
  • ?Consume@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@@Z (Address: 0x180094308)
  • ?Create@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0W4PathNormalizationType@2@@Z (Address: 0x1800942b8)
  • ?Create@PathFragment@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4PathNormalizationType@2@@Z (Address: 0x180094360)
  • ?CreateDirectoryEnumerator@Odfs@@YA?AVODResult@@AEBVPath@1@W4EnumerationBehavior@1@AEBVPropertyList@1@AEAV?$shared_ptr@VIEnumerator@Odfs@@@std@@@Z (Address: 0x1800942e8)
  • ?CreateDirectoryW@Odfs@@YA?AVODResult@@AEBVPath@1@W4CreateDirectoryBehavior@1@UFilePermissions@1@@Z (Address: 0x180094440)
  • ?CreateEmpty@Path@Odfs@@SA?AV12@XZ (Address: 0x180094418)
  • ?CreateFromList@PropertyBag@Odfs@@SA?AV12@AEBVPropertyList@2@@Z (Address: 0x180094338)
  • ?Delete@Odfs@@YA?AVODResult@@AEBVPath@1@W4DeleteBehavior@1@@Z (Address: 0x180094448)
  • ?Deserialize@Path@Odfs@@SA?AV12@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x180094208)
  • ?Deserialize@PathFragment@Odfs@@SA?AV12@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x180094290)
  • ?FromComponents@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@AEBV?$vector@VPathFragment@Odfs@@V?$allocator@VPathFragment@Odfs@@@std@@@4@W4PathGenerationRules@2@W4PathNormalizationType@2@@Z (Address: 0x180094218)
  • ?GetFileExtension@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094268)
  • ?GetFilename@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094330)
  • ?GetNamespace@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x1800943d8)
  • ?GetParentDirectory@Path@Odfs@@QEBA?AV12@XZ (Address: 0x180094438)
  • ?GetPathComponents@PathFragment@Odfs@@QEBA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ (Address: 0x180094258)
  • ?GetPathComponentViewList@Path@Odfs@@QEBA?AV?$list@UPathComponentView@Odfs@@V?$allocator@UPathComponentView@Odfs@@@std@@@std@@W4PathStringCompareRules@2@@Z (Address: 0x180094200)
  • ?Has@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800942c8)
  • ?Has@PropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800943c0)
  • ?Hash@Path@Odfs@@QEBA_KW4PathStringCompareRules@2@@Z (Address: 0x180094430)
  • ?Hash@PathFragment@Odfs@@QEBA_KW4PathStringCompareRules@2@@Z (Address: 0x180094238)
  • ?IsEmpty@Path@Odfs@@QEBA_NXZ (Address: 0x180094310)
  • ?IsEmpty@PathFragment@Odfs@@QEBA_NXZ (Address: 0x180094388)
  • ?PathAtNamespaceRoot@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4PathNormalizationType@2@@Z (Address: 0x180094468)
  • ?Request@PropertyBag@Odfs@@UEAAXAEBUPropertyKey@2@@Z (Address: 0x180094358)
  • ?Request@PropertyList@Odfs@@UEAAXAEBUPropertyKey@2@@Z (Address: 0x1800943f0)
  • ?Requested@PropertyBag@Odfs@@UEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800943c8)
  • ?Serialize@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094288)
  • ?Serialize@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094250)
  • ?Set@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_ (Address: 0x1800942f8)
  • ?Set@PropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@st (Address: 0x1800943b8)
  • ?ShouldConsume@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800942c0)
  • ?ShouldPopulate@PropertyBag@Odfs@@QEAA_NW4CostClass@2@AEBUPropertyKey@2@@Z (Address: 0x180094320)
  • ?Size@PropertyBag@Odfs@@QEBAIXZ (Address: 0x1800942f0)
  • ?ToBuffer@PropertyVariantSerializer@Odfs@@YA?AV?$vector@EV?$allocator@E@std@@@std@@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@s (Address: 0x180094278)
  • ?ToFullWString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094398)
  • ?ToPathString@PathConvert@Odfs@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@_WU?$char_traits@_W@std@@@4@@Z (Address: 0x180094240)
  • ?ToPathString@PathConvert@Odfs@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z (Address: 0x180094210)
  • ?ToString@PathConvert@Odfs@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z (Address: 0x180094340)
  • ?ToString@PathConvert@Odfs@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z (Address: 0x180094450)
  • ?ToString@PathFragment@Odfs@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ (Address: 0x1800942d0)
  • ?ToSystemPathString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x1800942a8)
  • ?ToSystemString@Path@Odfs@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ (Address: 0x1800943a0)
  • ?ToWString@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180094300)
  • ?ValueFor@MutablePropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_ (Address: 0x180094390)
  • ?ValueFor@PropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@ (Address: 0x180094350)
FileSyncHost.DLL
  • ?GetGlobalSystemHost@@YAPEAVBaseHost@@XZ (Address: 0x180094480)
FileSyncSqlite3.dll
  • sqlite3_bind_blob (Address: 0x180094550)
  • sqlite3_bind_double (Address: 0x180094490)
  • sqlite3_bind_int (Address: 0x1800944a8)
  • sqlite3_bind_int64 (Address: 0x1800944c8)
  • sqlite3_bind_text (Address: 0x180094498)
  • sqlite3_busy_timeout (Address: 0x180094500)
  • sqlite3_clear_bindings (Address: 0x1800944e8)
  • sqlite3_close (Address: 0x180094518)
  • sqlite3_column_blob (Address: 0x180094540)
  • sqlite3_column_bytes (Address: 0x180094548)
  • sqlite3_column_double (Address: 0x180094538)
  • sqlite3_column_int (Address: 0x180094528)
  • sqlite3_column_int64 (Address: 0x180094530)
  • sqlite3_column_text (Address: 0x1800944a0)
  • sqlite3_errmsg (Address: 0x1800944c0)
  • sqlite3_exec (Address: 0x180094510)
  • sqlite3_extended_errcode (Address: 0x1800944d0)
  • sqlite3_finalize (Address: 0x1800944b0)
  • sqlite3_last_insert_rowid (Address: 0x180094508)
  • sqlite3_open_v2 (Address: 0x1800944f0)
  • sqlite3_prepare_v2 (Address: 0x1800944d8)
  • sqlite3_reset (Address: 0x1800944e0)
  • sqlite3_sql (Address: 0x180094520)
  • sqlite3_step (Address: 0x1800944b8)
  • sqlite3_system_errno (Address: 0x1800944f8)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x180094848)
  • AreFileApisANSI (Address: 0x1800947f0)
  • CloseHandle (Address: 0x180094720)
  • CloseThreadpoolTimer (Address: 0x1800946c0)
  • CompareStringOrdinal (Address: 0x180094680)
  • CopyFileW (Address: 0x180094810)
  • CreateDirectoryW (Address: 0x180094788)
  • CreateEventW (Address: 0x180094588)
  • CreateFileW (Address: 0x180094790)
  • CreateIoCompletionPort (Address: 0x180094638)
  • CreateMutexW (Address: 0x180094900)
  • CreatePipe (Address: 0x180094630)
  • CreateProcessW (Address: 0x1800945a8)
  • CreateSemaphoreW (Address: 0x180094708)
  • CreateSymbolicLinkW (Address: 0x180094828)
  • CreateThreadpoolTimer (Address: 0x1800946e0)
  • CreateToolhelp32Snapshot (Address: 0x180094688)
  • DeleteCriticalSection (Address: 0x180094728)
  • DeleteFileW (Address: 0x1800948e8)
  • DeviceIoControl (Address: 0x1800947f8)
  • DisableThreadLibraryCalls (Address: 0x180094898)
  • ExpandEnvironmentStringsW (Address: 0x180094568)
  • FindClose (Address: 0x180094798)
  • FindFirstFileExW (Address: 0x1800947a8)
  • FindFirstFileNameW (Address: 0x180094620)
  • FindFirstFileW (Address: 0x1800947a0)
  • FindFirstVolumeW (Address: 0x1800945c8)
  • FindNextFileW (Address: 0x1800947b0)
  • FindNextVolumeW (Address: 0x1800945d0)
  • FindVolumeClose (Address: 0x1800945d8)
  • FormatMessageA (Address: 0x180094778)
  • FreeLibrary (Address: 0x180094920)
  • GetCommandLineW (Address: 0x180094578)
  • GetCompressedFileSizeW (Address: 0x180094618)
  • GetComputerNameW (Address: 0x1800948d0)
  • GetCurrentProcess (Address: 0x180094878)
  • GetCurrentProcessId (Address: 0x1800946a8)
  • GetCurrentThread (Address: 0x1800946b0)
  • GetCurrentThreadId (Address: 0x1800946e8)
  • GetDiskFreeSpaceExW (Address: 0x1800947b8)
  • GetDllDirectoryW (Address: 0x1800946a0)
  • GetEnvironmentVariableW (Address: 0x180094570)
  • GetExitCodeProcess (Address: 0x1800945a0)
  • GetFileAttributesExW (Address: 0x1800947c8)
  • GetFileAttributesW (Address: 0x1800947c0)
  • GetFileInformationByHandle (Address: 0x1800947d0)
  • GetFileInformationByHandleEx (Address: 0x180094820)
  • GetFileSize (Address: 0x1800945e0)
  • GetFileSizeEx (Address: 0x1800945e8)
  • GetFileType (Address: 0x1800945f0)
  • GetFinalPathNameByHandleW (Address: 0x1800947d8)
  • GetLastError (Address: 0x180094730)
  • GetLocaleInfoEx (Address: 0x180094780)
  • GetLongPathNameW (Address: 0x180094598)
  • GetModuleFileNameW (Address: 0x180094928)
  • GetModuleHandleW (Address: 0x180094800)
  • GetPrivateProfileStringW (Address: 0x1800948a8)
  • GetProcAddress (Address: 0x180094808)
  • GetProcessIoCounters (Address: 0x1800948a0)
  • GetProcessTimes (Address: 0x180094560)
  • GetProductInfo (Address: 0x180094758)
  • GetQueuedCompletionStatus (Address: 0x180094640)
  • GetSystemTime (Address: 0x180094910)
  • GetSystemTimeAsFileTime (Address: 0x1800946d8)
  • GetSystemTimes (Address: 0x1800945b8)
  • GetTickCount64 (Address: 0x180094700)
  • GetUserDefaultLCID (Address: 0x180094958)
  • GetUserGeoID (Address: 0x180094950)
  • GetVersionExW (Address: 0x180094918)
  • GetVolumePathNameW (Address: 0x1800945f8)
  • GlobalAlloc (Address: 0x180094660)
  • GlobalFree (Address: 0x180094670)
  • GlobalLock (Address: 0x180094740)
  • GlobalUnlock (Address: 0x180094668)
  • HeapAlloc (Address: 0x1800948f0)
  • HeapFree (Address: 0x1800948f8)
  • InitializeCriticalSectionEx (Address: 0x180094738)
  • InitializeSListHead (Address: 0x180094858)
  • IsDebuggerPresent (Address: 0x180094760)
  • IsProcessorFeaturePresent (Address: 0x180094888)
  • IsWow64Process (Address: 0x180094650)
  • K32GetModuleFileNameExW (Address: 0x180094960)
  • LCIDToLocaleName (Address: 0x180094948)
  • LoadLibraryExW (Address: 0x180094658)
  • LoadLibraryW (Address: 0x180094930)
  • LocalAlloc (Address: 0x180094938)
  • LocalFree (Address: 0x180094770)
  • MoveFileExW (Address: 0x180094818)
  • MoveFileW (Address: 0x1800948c0)
  • MultiByteToWideChar (Address: 0x180094830)
  • OpenFileById (Address: 0x1800948e0)
  • OpenProcess (Address: 0x180094908)
  • OutputDebugStringW (Address: 0x180094768)
  • PostQueuedCompletionStatus (Address: 0x180094648)
  • Process32FirstW (Address: 0x180094690)
  • Process32NextW (Address: 0x180094698)
  • QueryPerformanceCounter (Address: 0x180094890)
  • RaiseException (Address: 0x1800946f0)
  • ReadDirectoryChangesW (Address: 0x180094678)
  • ReadFile (Address: 0x180094600)
  • RegisterApplicationRestart (Address: 0x1800948d8)
  • ReleaseMutex (Address: 0x180094590)
  • ReleaseSemaphore (Address: 0x180094710)
  • ReleaseSRWLockExclusive (Address: 0x180094840)
  • RemoveDirectoryW (Address: 0x180094608)
  • ReplaceFileW (Address: 0x1800948c8)
  • SetDllDirectoryW (Address: 0x1800948b8)
  • SetFileAttributesW (Address: 0x1800947e0)
  • SetFileInformationByHandle (Address: 0x1800947e8)
  • SetFilePointer (Address: 0x180094610)
  • SetHandleInformation (Address: 0x180094628)
  • SetLastError (Address: 0x180094748)
  • SetProcessShutdownParameters (Address: 0x1800945b0)
  • SetThreadInformation (Address: 0x1800945c0)
  • SetThreadpoolTimer (Address: 0x1800946d0)
  • SetThreadPriority (Address: 0x1800946b8)
  • SetUnhandledExceptionFilter (Address: 0x180094870)
  • Sleep (Address: 0x1800946f8)
  • SleepConditionVariableSRW (Address: 0x180094850)
  • SystemTimeToFileTime (Address: 0x180094940)
  • TerminateProcess (Address: 0x180094880)
  • UnhandledExceptionFilter (Address: 0x180094868)
  • VerifyVersionInfoW (Address: 0x180094750)
  • WaitForMultipleObjects (Address: 0x180094580)
  • WaitForSingleObject (Address: 0x180094718)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800946c8)
  • WakeAllConditionVariable (Address: 0x180094860)
  • WideCharToMultiByte (Address: 0x180094838)
  • WritePrivateProfileStringW (Address: 0x1800948b0)
LoggingPlatform.DLL
  • ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x1800949f0)
  • ??0SuppressTransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x1800949b0)
  • ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x180094988)
  • ??0TransferScope@ScenarioTracking@@QEAA@QEBVITrace@1@@Z (Address: 0x180094990)
  • ??0TransferScope@ScenarioTracking@@QEAA@V?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@@Z (Address: 0x1800949a0)
  • ??1SuppressTransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x1800949a8)
  • ??1TelemetryEvent@@QEAA@XZ (Address: 0x1800949d0)
  • ??1TransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x180094998)
  • ?CaptureTrace@ScenarioTracking@@YA?AV?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@XZ (Address: 0x1800949b8)
  • ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x1800949e8)
  • ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x180094970)
  • ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x1800949f8)
  • ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800949e0)
  • ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x180094a00)
  • ?NarrowStringToWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD@Z (Address: 0x1800949c0)
  • ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x180094978)
  • ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x1800949d8)
  • ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x180094980)
  • ?WideStringToNarrowString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_W@Z (Address: 0x1800949c8)
MSVCP140.dll
  • _Cnd_broadcast (Address: 0x180094b98)
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x180094b50)
  • _Cnd_init_in_situ (Address: 0x180094be0)
  • _Mtx_init_in_situ (Address: 0x180094be8)
  • _Mtx_lock (Address: 0x180094bc0)
  • _Mtx_unlock (Address: 0x180094bb8)
  • _Query_perf_counter (Address: 0x180094bd8)
  • _Query_perf_frequency (Address: 0x180094bd0)
  • _Thrd_detach (Address: 0x180094b58)
  • _Wcscoll (Address: 0x180094a10)
  • _Wcsxfrm (Address: 0x180094a18)
  • _Xtime_get_ticks (Address: 0x180094b30)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180094b40)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180094b80)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180094b48)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180094b70)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180094b78)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180094b88)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180094b90)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180094b60)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180094c38)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180094cf8)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180094a28)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180094dc8)
  • ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x180094a90)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180094c20)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180094dd0)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x180094c40)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180094ad8)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180094ac8)
  • ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x180094dd8)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x180094dc0)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x180094c78)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180094ca0)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180094bb0)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180094bc8)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180094ad0)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180094ac0)
  • ?_Winerror_map@std@@YAHH@Z (Address: 0x180094ba8)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x180094b68)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x180094bf0)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180094b38)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180094bf8)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180094ba0)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180094a50)
  • ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x180094aa8)
  • ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x180094aa0)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180094a20)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x180094ab8)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180094ca8)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180094d18)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x180094c28)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x180094c50)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x180094c88)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180094d70)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180094d90)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x180094a30)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x180094a98)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x180094ab0)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180094d10)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180094d40)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180094c18)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180094c30)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180094c80)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180094d68)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180094d88)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x180094a38)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x180094a88)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x180094a70)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x180094c70)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180094a78)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180094c68)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x180094a80)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180094c60)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x180094d20)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180094d28)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180094c98)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x180094de0)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x180094cf0)
  • ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x180094cb0)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x180094da8)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x180094c58)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180094c90)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x180094a68)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x180094db0)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x180094a58)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x180094c48)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180094c10)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180094b20)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x180094a40)
  • ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180094cb8)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180094cd8)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x180094c08)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x180094b18)
  • ?setf@ios_base@std@@QEAAHH@Z (Address: 0x180094ce8)
  • ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x180094ce0)
  • ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x180094d50)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x180094d48)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x180094cc0)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x180094d38)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180094cd0)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x180094b28)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x180094b00)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180094cc8)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x180094d60)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x180094d80)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x180094d58)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x180094d78)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x180094ae0)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180094ae8)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180094d08)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x180094a48)
  • ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180094d00)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x180094d30)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180094b08)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x180094db8)
  • ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x180094a60)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x180094d98)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x180094da0)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x180094c00)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x180094b10)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x180094af0)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x180094af8)
ntdll.dll
  • RtlCaptureContext (Address: 0x180095350)
  • RtlLookupFunctionEntry (Address: 0x180095340)
  • RtlVirtualUnwind (Address: 0x180095348)
  • VerSetConditionMask (Address: 0x180095338)
ole32.dll
  • CoCreateGuid (Address: 0x180095360)
  • CoCreateInstance (Address: 0x180095390)
  • CoInitializeEx (Address: 0x180095368)
  • CoSetProxyBlanket (Address: 0x180095370)
  • CoTaskMemFree (Address: 0x180095380)
  • CoUninitialize (Address: 0x1800953a0)
  • CreateBindCtx (Address: 0x180095378)
  • CreateItemMoniker (Address: 0x180095398)
  • GetRunningObjectTable (Address: 0x1800953a8)
  • StringFromCLSID (Address: 0x1800953b0)
  • StringFromGUID2 (Address: 0x180095388)
OLEAUT32.dll
  • GetRecordInfoFromTypeInfo (Address: 0x180094e00)
  • LoadRegTypeLib (Address: 0x180094df8)
  • LoadTypeLib (Address: 0x180094df0)
RPCRT4.dll
  • RpcBindingFree (Address: 0x180094e70)
  • RpcBindingFromStringBindingW (Address: 0x180094e78)
  • RpcBindingSetAuthInfoExW (Address: 0x180094e38)
  • RpcBindingVectorFree (Address: 0x180094e58)
  • RpcEpRegisterW (Address: 0x180094e40)
  • RpcEpUnregister (Address: 0x180094e48)
  • RpcServerInqBindings (Address: 0x180094e18)
  • RpcServerInqCallAttributesW (Address: 0x180094e50)
  • RpcServerRegisterIfEx (Address: 0x180094e20)
  • RpcServerUnregisterIf (Address: 0x180094e28)
  • RpcServerUseProtseqW (Address: 0x180094e80)
  • RpcStringBindingComposeW (Address: 0x180094e10)
  • RpcStringFreeW (Address: 0x180094e68)
  • UuidCreate (Address: 0x180094e30)
  • UuidToStringW (Address: 0x180094e60)
Secur32.dll
  • GetUserNameExW (Address: 0x180094fa8)
SHELL32.dll
  • (Address: 0x180094ef8)
  • CommandLineToArgvW (Address: 0x180094ef0)
  • SHAssocEnumHandlers (Address: 0x180094ea8)
  • SHChangeNotify (Address: 0x180094ed0)
  • SHCreateDirectoryExW (Address: 0x180094ea0)
  • SHCreateItemFromParsingName (Address: 0x180094eb8)
  • ShellExecuteExW (Address: 0x180094ec0)
  • SHFileOperationW (Address: 0x180094ee8)
  • SHGetFolderPathAndSubDirW (Address: 0x180094e90)
  • SHGetFolderPathW (Address: 0x180094e98)
  • SHGetKnownFolderPath (Address: 0x180094ed8)
  • SHGetPropertyStoreFromParsingName (Address: 0x180094eb0)
  • SHGetSpecialFolderPathW (Address: 0x180094ee0)
  • SHParseDisplayName (Address: 0x180094ec8)
  • SHSetKnownFolderPath (Address: 0x180094f00)
SHLWAPI.dll
  • AssocQueryStringW (Address: 0x180094f20)
  • PathFileExistsW (Address: 0x180094f10)
  • PathIsDirectoryEmptyW (Address: 0x180094f18)
  • PathIsDirectoryW (Address: 0x180094f38)
  • PathIsPrefixW (Address: 0x180094f48)
  • PathRemoveFileSpecW (Address: 0x180094f58)
  • PathStripPathW (Address: 0x180094f40)
  • SHCreateStreamOnFileW (Address: 0x180094f88)
  • SHDeleteKeyW (Address: 0x180094f60)
  • SHDeleteValueW (Address: 0x180094f68)
  • SHGetValueA (Address: 0x180094f70)
  • SHGetValueW (Address: 0x180094f28)
  • SHRegGetBoolUSValueW (Address: 0x180094f98)
  • SHRegGetPathW (Address: 0x180094f90)
  • SHRegGetUSValueW (Address: 0x180094f30)
  • SHRegGetValueW (Address: 0x180094f80)
  • SHSetValueW (Address: 0x180094f78)
  • StrStrIW (Address: 0x180094f50)
UpdateRingSettings.dll
  • ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x180095088)
USER32.dll
  • CloseClipboard (Address: 0x180094fc8)
  • CreateWindowExW (Address: 0x180094fe8)
  • DestroyWindow (Address: 0x180094fe0)
  • DispatchMessageW (Address: 0x180095018)
  • EnumWindows (Address: 0x180095050)
  • GetClassNameW (Address: 0x180095048)
  • GetMessageW (Address: 0x180095028)
  • GetWindowThreadProcessId (Address: 0x180095040)
  • OpenClipboard (Address: 0x180094fd0)
  • PostMessageW (Address: 0x180095058)
  • PostThreadMessageW (Address: 0x180095060)
  • RegisterClassW (Address: 0x180094ff0)
  • RegisterClipboardFormatW (Address: 0x180094fb8)
  • RegisterPowerSettingNotification (Address: 0x180095010)
  • RegisterSuspendResumeNotification (Address: 0x180095000)
  • SendMessageTimeoutW (Address: 0x180095030)
  • SetClipboardData (Address: 0x180094fc0)
  • ShowWindow (Address: 0x180094fd8)
  • SystemParametersInfoW (Address: 0x180095038)
  • TranslateMessage (Address: 0x180095020)
  • UnregisterPowerSettingNotification (Address: 0x180095008)
  • UnregisterSuspendResumeNotification (Address: 0x180094ff8)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x180095078)
  • GetDefaultUserProfileDirectoryW (Address: 0x180095070)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x180095158)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180095100)
  • __current_exception (Address: 0x180095138)
  • __current_exception_context (Address: 0x180095140)
  • __RTDynamicCast (Address: 0x180095118)
  • __RTtypeid (Address: 0x1800950a0)
  • __std_exception_copy (Address: 0x1800950e8)
  • __std_exception_destroy (Address: 0x1800950f0)
  • __std_terminate (Address: 0x1800950d0)
  • __std_type_info_compare (Address: 0x1800950f8)
  • __std_type_info_destroy_list (Address: 0x180095130)
  • __std_type_info_name (Address: 0x1800950e0)
  • _CxxThrowException (Address: 0x180095148)
  • _purecall (Address: 0x1800950d8)
  • memchr (Address: 0x180095120)
  • memcmp (Address: 0x1800950c0)
  • memcpy (Address: 0x180095128)
  • memmove (Address: 0x180095110)
  • memset (Address: 0x180095098)
  • strchr (Address: 0x1800950b8)
  • strrchr (Address: 0x180095108)
  • wcschr (Address: 0x1800950c8)
  • wcsrchr (Address: 0x1800950b0)
  • wcsstr (Address: 0x1800950a8)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x180095178)
  • GetFileVersionInfoW (Address: 0x180095168)
  • VerQueryValueW (Address: 0x180095170)
WININET.dll
  • InternetCheckConnectionW (Address: 0x180095188)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x1800951b0)
  • WTSFreeMemory (Address: 0x1800951a0)
  • WTSQuerySessionInformationW (Address: 0x180095198)
  • WTSQueryUserToken (Address: 0x1800951a8)