FileSyncFSNtfs.dll
Description: Microsoft OneDriveFile Sync FS NTFS
Authors: © Microsoft Corporation. All rights reserved.
Version: 25.209.1026.2
Architecture: 64-bit
Operating System: Windows
SHA256: c42a2eb9e52281bf820b7efcb202efde
File Size: 780.4 KB
Uploaded At: Dec. 4, 2025, 6:14 a.m.
Views: 7
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- OdfsCreateVfs (Ordinal: 1, Address: 0x2b10)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18007b1b0)
- AllocateAndInitializeSid (Address: 0x18007b100)
- ChangeServiceConfig2W (Address: 0x18007b0a0)
- ChangeServiceConfigW (Address: 0x18007b0a8)
- CloseServiceHandle (Address: 0x18007b098)
- ControlService (Address: 0x18007b090)
- ConvertSidToStringSidW (Address: 0x18007b008)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18007b110)
- CreateProcessAsUserW (Address: 0x18007b108)
- CreateProcessWithTokenW (Address: 0x18007b018)
- CreateServiceW (Address: 0x18007b088)
- CreateWellKnownSid (Address: 0x18007b0f8)
- CryptAcquireContextW (Address: 0x18007b140)
- CryptCreateHash (Address: 0x18007b128)
- CryptDestroyHash (Address: 0x18007b118)
- CryptGetHashParam (Address: 0x18007b130)
- CryptHashData (Address: 0x18007b120)
- CryptReleaseContext (Address: 0x18007b138)
- DeleteService (Address: 0x18007b080)
- DuplicateTokenEx (Address: 0x18007b0f0)
- FreeSid (Address: 0x18007b0e8)
- GetAclInformation (Address: 0x18007b0e0)
- GetNamedSecurityInfoW (Address: 0x18007b1c0)
- GetTokenInformation (Address: 0x18007b1a8)
- GetUserNameW (Address: 0x18007b020)
- InitializeAcl (Address: 0x18007b010)
- LookupPrivilegeValueW (Address: 0x18007b1a0)
- OpenProcessToken (Address: 0x18007b1b8)
- OpenSCManagerW (Address: 0x18007b078)
- OpenServiceW (Address: 0x18007b070)
- QueryServiceConfigW (Address: 0x18007b068)
- QueryServiceStatus (Address: 0x18007b060)
- QueryServiceStatusEx (Address: 0x18007b058)
- RegCloseKey (Address: 0x18007b198)
- RegCreateKeyExW (Address: 0x18007b190)
- RegCreateKeyTransactedW (Address: 0x18007b0d8)
- RegDeleteKeyExW (Address: 0x18007b0d0)
- RegDeleteTreeW (Address: 0x18007b0b0)
- RegDeleteValueW (Address: 0x18007b188)
- RegEnumKeyExW (Address: 0x18007b180)
- RegEnumKeyW (Address: 0x18007b0c8)
- RegEnumValueW (Address: 0x18007b178)
- RegGetValueW (Address: 0x18007b148)
- RegisterServiceCtrlHandlerW (Address: 0x18007b050)
- RegLoadKeyW (Address: 0x18007b0c0)
- RegOpenKeyExW (Address: 0x18007b170)
- RegQueryInfoKeyW (Address: 0x18007b168)
- RegQueryValueExW (Address: 0x18007b160)
- RegSetKeyValueW (Address: 0x18007b150)
- RegSetValueExW (Address: 0x18007b158)
- RegUnLoadKeyW (Address: 0x18007b0b8)
- SetEntriesInAclW (Address: 0x18007b030)
- SetFileSecurityW (Address: 0x18007b028)
- SetNamedSecurityInfoW (Address: 0x18007b048)
- SetServiceStatus (Address: 0x18007b000)
- StartServiceCtrlDispatcherW (Address: 0x18007b040)
- StartServiceW (Address: 0x18007b038)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x18007c230)
- wcstoll (Address: 0x18007c240)
- wcstoul (Address: 0x18007c228)
- wcstoull (Address: 0x18007c238)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x18007c268)
- free (Address: 0x18007c250)
- malloc (Address: 0x18007c258)
- realloc (Address: 0x18007c260)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x18007c278)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthread (Address: 0x18007c308)
- _beginthreadex (Address: 0x18007c2f8)
- _cexit (Address: 0x18007c298)
- _configure_narrow_argv (Address: 0x18007c2e0)
- _crt_atexit (Address: 0x18007c288)
- _errno (Address: 0x18007c2c8)
- _execute_onexit_table (Address: 0x18007c300)
- _initialize_narrow_environment (Address: 0x18007c290)
- _initialize_onexit_table (Address: 0x18007c2f0)
- _initterm (Address: 0x18007c2a0)
- _initterm_e (Address: 0x18007c2a8)
- _invalid_parameter_noinfo (Address: 0x18007c2e8)
- _invalid_parameter_noinfo_noreturn (Address: 0x18007c2b0)
- _register_onexit_function (Address: 0x18007c2d8)
- _seh_filter_dll (Address: 0x18007c2b8)
- abort (Address: 0x18007c2d0)
- terminate (Address: 0x18007c2c0)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vswprintf (Address: 0x18007c328)
- _close (Address: 0x18007c340)
- _lseeki64 (Address: 0x18007c350)
- _open_osfhandle (Address: 0x18007c318)
- _read (Address: 0x18007c348)
- _wfopen_s (Address: 0x18007c320)
- _write (Address: 0x18007c338)
- fclose (Address: 0x18007c330)
api-ms-win-crt-string-l1-1-0.dll
- _wcsdup (Address: 0x18007c378)
- _wcsicmp (Address: 0x18007c370)
- _wcsnicmp (Address: 0x18007c368)
- towlower (Address: 0x18007c380)
- towupper (Address: 0x18007c388)
- wcstok_s (Address: 0x18007c360)
api-ms-win-crt-time-l1-1-0.dll
- _localtime64_s (Address: 0x18007c3a0)
- _time64 (Address: 0x18007c398)
CRYPT32.dll
- CertFindExtension (Address: 0x18007b1d8)
- CryptBinaryToStringW (Address: 0x18007b1d0)
- CryptStringToBinaryW (Address: 0x18007b1e0)
FileSyncFS.DLL
- ??0Path@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x18007b260)
- ??0Path@Odfs@@QEAA@AEBV01@@Z (Address: 0x18007b248)
- ??0Path@Odfs@@QEAA@XZ (Address: 0x18007b228)
- ??0PathFragment@Odfs@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x18007b2a8)
- ??0PathFragment@Odfs@@QEAA@AEBV01@@Z (Address: 0x18007b2e0)
- ??0PathFragment@Odfs@@QEAA@XZ (Address: 0x18007b338)
- ??0PropertyBag@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x18007b218)
- ??0PropertyBag@Odfs@@QEAA@AEBV01@@Z (Address: 0x18007b308)
- ??0PropertyBag@Odfs@@QEAA@XZ (Address: 0x18007b3e0)
- ??0PropertyList@Odfs@@QEAA@XZ (Address: 0x18007b280)
- ??1Path@Odfs@@QEAA@XZ (Address: 0x18007b220)
- ??1PathFragment@Odfs@@QEAA@XZ (Address: 0x18007b2b0)
- ??1PropertyBag@Odfs@@UEAA@XZ (Address: 0x18007b2f8)
- ??1PropertyList@Odfs@@UEAA@XZ (Address: 0x18007b278)
- ??4Path@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x18007b298)
- ??4Path@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x18007b230)
- ??4PathFragment@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x18007b320)
- ??4PropertyBag@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x18007b3e8)
- ??4PropertyBag@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x18007b300)
- ??4PropertyList@Odfs@@QEAAAEAV01@AEBV01@@Z (Address: 0x18007b290)
- ??KPath@Odfs@@QEBA?AV01@AEBVPathFragment@1@@Z (Address: 0x18007b2a0)
- ?Append@Path@Odfs@@QEBA?AV12@AEBVPathFragment@2@@Z (Address: 0x18007b368)
- ?AppendExtension@Path@Odfs@@QEBA?AV12@AEBVPathFragment@2@@Z (Address: 0x18007b3c8)
- ?AppendPathSep@Path@Odfs@@QEBA?AV12@XZ (Address: 0x18007b380)
- ?ClearAndRequestProperties@PropertyBag@Odfs@@QEAAXAEBVPropertyList@2@@Z (Address: 0x18007b2b8)
- ?Compare@PathFragment@Odfs@@QEBAHAEBV12@W4PathStringCompareRules@2@@Z (Address: 0x18007b3a0)
- ?Consume@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@@Z (Address: 0x18007b3b8)
- ?Create@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0W4PathNormalizationType@2@@Z (Address: 0x18007b208)
- ?Create@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@PEB_WW4PathNormalizationType@2@@Z (Address: 0x18007b358)
- ?Create@PathFragment@Odfs@@SA?AV12@PEB_WW4PathNormalizationType@2@@Z (Address: 0x18007b370)
- ?Create@PathFragment@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4PathNormalizationType@2@@Z (Address: 0x18007b2c0)
- ?CreateAsIs@Path@Odfs@@SA?AV12@PEB_W@Z (Address: 0x18007b3d8)
- ?CreateEmpty@Path@Odfs@@SA?AV12@XZ (Address: 0x18007b270)
- ?CreateFromList@PropertyBag@Odfs@@SA?AV12@AEBVPropertyList@2@@Z (Address: 0x18007b2f0)
- ?CreateHandleForVolume@Odfs@@YA?AVODResult@@AEBVPath@1@W4HandleDisposition@1@W4HandleAccess@1@W4HandleSharing@1@W4HandleReason@1@AEAV?$shared_ptr@VIHandle@Odfs@@@std@@@Z (Address: 0x18007b1f8)
- ?CreateRecursiveDirectoryEnumerator@Odfs@@YA?AVODResult@@AEBVPath@1@AEBVPropertyList@1@AEBURecursiveEnumeratorOptions@1@AEAV?$shared_ptr@VIEnumerator@Odfs@@@std@@@Z (Address: 0x18007b1f0)
- ?Equals@PathStringComparison@Odfs@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0W4PathStringCompareRules@2@@Z (Address: 0x18007b210)
- ?GetDepth@Path@Odfs@@QEBA_KXZ (Address: 0x18007b378)
- ?GetDirectory@Path@Odfs@@QEBA?AV12@XZ (Address: 0x18007b388)
- ?GetFileExtension@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b398)
- ?GetFilename@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b328)
- ?GetNamespace@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b258)
- ?GetParentDirectory@Path@Odfs@@QEBA?AV12@XZ (Address: 0x18007b318)
- ?GetPathComponents@Path@Odfs@@QEBA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ (Address: 0x18007b340)
- ?Has@PropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x18007b2d0)
- ?Hash@Path@Odfs@@QEBA_KW4PathStringCompareRules@2@@Z (Address: 0x18007b240)
- ?HasTrailingPathSep@Path@Odfs@@QEBA_NXZ (Address: 0x18007b3d0)
- ?IsEmpty@Path@Odfs@@QEBA_NXZ (Address: 0x18007b390)
- ?IsEmpty@PathFragment@Odfs@@QEBA_NXZ (Address: 0x18007b408)
- ?IsNamespaceRoot@Path@Odfs@@QEBA_NXZ (Address: 0x18007b3a8)
- ?PathAtNamespaceRoot@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4PathNormalizationType@2@@Z (Address: 0x18007b268)
- ?RemovePathSep@Path@Odfs@@QEBA?AV12@XZ (Address: 0x18007b288)
- ?Request@PropertyBag@Odfs@@UEAAXAEBUPropertyKey@2@@Z (Address: 0x18007b3f0)
- ?Request@PropertyList@Odfs@@UEAAXAEBUPropertyKey@2@@Z (Address: 0x18007b310)
- ?Requested@PropertyBag@Odfs@@UEBA_NAEBUPropertyKey@2@@Z (Address: 0x18007b2c8)
- ?Requested@PropertyList@Odfs@@UEBA_NAEBUPropertyKey@2@@Z (Address: 0x18007b3f8)
- ?Set@PropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@st (Address: 0x18007b2d8)
- ?ShouldConsume@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x18007b3b0)
- ?ShouldPopulate@PropertyBag@Odfs@@QEAA_NW4CostClass@2@AEBUPropertyKey@2@@Z (Address: 0x18007b348)
- ?ShouldPopulate@PropertyList@Odfs@@QEBA_NW4CostClass@2@AEBUPropertyKey@2@@Z (Address: 0x18007b2e8)
- ?ToFullWString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b200)
- ?ToPathString@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b330)
- ?ToSystemPathString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b250)
- ?ToSystemPathStringWithoutPathPrefix@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b350)
- ?ToSystemWString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b238)
- ?ToWString@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x18007b400)
- ?ValueFor@MutablePropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_ (Address: 0x18007b3c0)
- ?ValueFor@PropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@ (Address: 0x18007b360)
FileSyncHost.DLL
- ?GetGlobalSystemHost@@YAPEAVBaseHost@@XZ (Address: 0x18007b418)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x18007b880)
- CancelIoEx (Address: 0x18007b810)
- CancelSynchronousIo (Address: 0x18007b7e8)
- CloseHandle (Address: 0x18007b7f8)
- CompareStringOrdinal (Address: 0x18007b5a0)
- CopyFileExW (Address: 0x18007b6e0)
- CopyFileW (Address: 0x18007b5e0)
- CreateDirectoryW (Address: 0x18007b7c0)
- CreateEventW (Address: 0x18007b828)
- CreateFile2 (Address: 0x18007b608)
- CreateFileW (Address: 0x18007b508)
- CreateHardLinkW (Address: 0x18007b710)
- CreateIoCompletionPort (Address: 0x18007b830)
- CreateMutexW (Address: 0x18007b428)
- CreatePipe (Address: 0x18007b560)
- CreateProcessW (Address: 0x18007b4e8)
- CreateSymbolicLinkW (Address: 0x18007b718)
- CreateToolhelp32Snapshot (Address: 0x18007b5a8)
- DeleteCriticalSection (Address: 0x18007b6a8)
- DeleteFileW (Address: 0x18007b7c8)
- DeviceIoControl (Address: 0x18007b7e0)
- DisableThreadLibraryCalls (Address: 0x18007b648)
- ExpandEnvironmentStringsW (Address: 0x18007b6d0)
- FindClose (Address: 0x18007b780)
- FindFirstFileNameW (Address: 0x18007b708)
- FindFirstFileW (Address: 0x18007b790)
- FindFirstVolumeW (Address: 0x18007b510)
- FindNextFileNameW (Address: 0x18007b700)
- FindNextFileW (Address: 0x18007b788)
- FindNextVolumeW (Address: 0x18007b518)
- FindVolumeClose (Address: 0x18007b520)
- FlushFileBuffers (Address: 0x18007b7b8)
- FreeLibrary (Address: 0x18007b6a0)
- GetCommandLineW (Address: 0x18007b4c8)
- GetCompressedFileSizeW (Address: 0x18007b550)
- GetComputerNameW (Address: 0x18007b5e8)
- GetCurrentProcess (Address: 0x18007b430)
- GetCurrentProcessId (Address: 0x18007b438)
- GetCurrentThread (Address: 0x18007b638)
- GetCurrentThreadId (Address: 0x18007b850)
- GetDiskFreeSpaceExW (Address: 0x18007b770)
- GetDllDirectoryW (Address: 0x18007b628)
- GetEnvironmentVariableW (Address: 0x18007b4d0)
- GetExitCodeProcess (Address: 0x18007b4e0)
- GetFileAttributesExW (Address: 0x18007b528)
- GetFileAttributesW (Address: 0x18007b7d8)
- GetFileInformationByHandle (Address: 0x18007b840)
- GetFileInformationByHandleEx (Address: 0x18007b798)
- GetFileSize (Address: 0x18007b530)
- GetFileSizeEx (Address: 0x18007b538)
- GetFileTime (Address: 0x18007b738)
- GetFileType (Address: 0x18007b540)
- GetFinalPathNameByHandleW (Address: 0x18007b6d8)
- GetLastError (Address: 0x18007b808)
- GetLongPathNameW (Address: 0x18007b7a8)
- GetModuleFileNameW (Address: 0x18007b460)
- GetModuleHandleW (Address: 0x18007b698)
- GetOverlappedResult (Address: 0x18007b600)
- GetPrivateProfileStringW (Address: 0x18007b5c8)
- GetProcAddress (Address: 0x18007b690)
- GetProcessIoCounters (Address: 0x18007b5c0)
- GetProcessTimes (Address: 0x18007b4d8)
- GetProductInfo (Address: 0x18007b498)
- GetQueuedCompletionStatus (Address: 0x18007b820)
- GetShortPathNameW (Address: 0x18007b7b0)
- GetSystemDirectoryW (Address: 0x18007b758)
- GetSystemTime (Address: 0x18007b450)
- GetSystemTimeAsFileTime (Address: 0x18007b6b8)
- GetSystemTimes (Address: 0x18007b4f8)
- GetTempPathW (Address: 0x18007b7a0)
- GetTickCount64 (Address: 0x18007b680)
- GetUserDefaultLCID (Address: 0x18007b488)
- GetUserGeoID (Address: 0x18007b480)
- GetVersionExW (Address: 0x18007b458)
- GetVolumeInformationByHandleW (Address: 0x18007b838)
- GetVolumeInformationW (Address: 0x18007b778)
- GetVolumeNameForVolumeMountPointW (Address: 0x18007b768)
- GetVolumePathNamesForVolumeNameW (Address: 0x18007b760)
- GetVolumePathNameW (Address: 0x18007b750)
- GlobalAlloc (Address: 0x18007b580)
- GlobalFree (Address: 0x18007b598)
- GlobalLock (Address: 0x18007b590)
- GlobalUnlock (Address: 0x18007b588)
- HeapAlloc (Address: 0x18007b468)
- HeapFree (Address: 0x18007b630)
- InitializeCriticalSectionEx (Address: 0x18007b6b0)
- InitializeSListHead (Address: 0x18007b670)
- InitOnceBeginInitialize (Address: 0x18007b860)
- InitOnceComplete (Address: 0x18007b868)
- IsDebuggerPresent (Address: 0x18007b558)
- IsProcessorFeaturePresent (Address: 0x18007b658)
- IsWow64Process (Address: 0x18007b570)
- K32GetModuleFileNameExW (Address: 0x18007b490)
- LCIDToLocaleName (Address: 0x18007b478)
- LoadLibraryExW (Address: 0x18007b578)
- LoadLibraryW (Address: 0x18007b688)
- LocalAlloc (Address: 0x18007b878)
- LocalFree (Address: 0x18007b748)
- MoveFileExW (Address: 0x18007b6f0)
- MoveFileW (Address: 0x18007b6f8)
- OpenFileById (Address: 0x18007b5f8)
- OpenProcess (Address: 0x18007b448)
- OutputDebugStringW (Address: 0x18007b618)
- PostQueuedCompletionStatus (Address: 0x18007b568)
- Process32FirstW (Address: 0x18007b5b0)
- Process32NextW (Address: 0x18007b5b8)
- QueryPerformanceCounter (Address: 0x18007b650)
- RaiseException (Address: 0x18007b610)
- ReadDirectoryChangesW (Address: 0x18007b7f0)
- ReadFile (Address: 0x18007b740)
- RegisterApplicationRestart (Address: 0x18007b5f0)
- ReleaseMutex (Address: 0x18007b4b0)
- ReleaseSRWLockExclusive (Address: 0x18007b848)
- RemoveDirectoryW (Address: 0x18007b7d0)
- ReplaceFileW (Address: 0x18007b6e8)
- SetDllDirectoryW (Address: 0x18007b5d8)
- SetEvent (Address: 0x18007b800)
- SetFileAttributesW (Address: 0x18007b6c0)
- SetFileInformationByHandle (Address: 0x18007b6c8)
- SetFilePointer (Address: 0x18007b548)
- SetFilePointerEx (Address: 0x18007b720)
- SetFileTime (Address: 0x18007b728)
- SetHandleInformation (Address: 0x18007b870)
- SetLastError (Address: 0x18007b4a8)
- SetProcessShutdownParameters (Address: 0x18007b4f0)
- SetThreadInformation (Address: 0x18007b500)
- SetThreadPriority (Address: 0x18007b640)
- SetUnhandledExceptionFilter (Address: 0x18007b660)
- Sleep (Address: 0x18007b4b8)
- SleepConditionVariableSRW (Address: 0x18007b858)
- SystemTimeToFileTime (Address: 0x18007b470)
- TerminateProcess (Address: 0x18007b440)
- UnhandledExceptionFilter (Address: 0x18007b668)
- VerifyVersionInfoW (Address: 0x18007b4a0)
- WaitForMultipleObjects (Address: 0x18007b4c0)
- WaitForSingleObject (Address: 0x18007b818)
- WakeAllConditionVariable (Address: 0x18007b678)
- WideCharToMultiByte (Address: 0x18007b620)
- WriteFile (Address: 0x18007b730)
- WritePrivateProfileStringW (Address: 0x18007b5d0)
LoggingPlatform.DLL
- ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x18007b8e8)
- ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x18007b8d0)
- ??0TransferScope@ScenarioTracking@@QEAA@QEBVITrace@1@@Z (Address: 0x18007b890)
- ??1TelemetryEvent@@QEAA@XZ (Address: 0x18007b8c8)
- ??1TransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x18007b898)
- ?CaptureTrace@ScenarioTracking@@YA?AV?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@XZ (Address: 0x18007b8b0)
- ?GetDefaultLoggingPath@@YAJAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@@Z (Address: 0x18007b8e0)
- ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x18007b8a0)
- ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x18007b8f8)
- ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x18007b8a8)
- ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18007b8b8)
- ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18007b8f0)
- ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x18007b900)
- ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x18007b8c0)
- ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x18007b8d8)
MSVCP140.dll
- _Cnd_broadcast (Address: 0x18007bb40)
- _Cnd_do_broadcast_at_thread_exit (Address: 0x18007bc18)
- _Cnd_init_in_situ (Address: 0x18007bb30)
- _Cnd_register_at_thread_exit (Address: 0x18007bbe0)
- _Cnd_unregister_at_thread_exit (Address: 0x18007bbf0)
- _Cnd_wait (Address: 0x18007bb48)
- _Mtx_init_in_situ (Address: 0x18007bb10)
- _Mtx_lock (Address: 0x18007bb00)
- _Mtx_unlock (Address: 0x18007bb08)
- _Query_perf_counter (Address: 0x18007bc08)
- _Query_perf_frequency (Address: 0x18007bc10)
- _Thrd_detach (Address: 0x18007ba98)
- _Thrd_id (Address: 0x18007bbd8)
- _Thrd_join (Address: 0x18007bbd0)
- _Wcscoll (Address: 0x18007b948)
- _Wcsxfrm (Address: 0x18007b940)
- _Xtime_get_ticks (Address: 0x18007bbc8)
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18007bc00)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18007bb68)
- ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18007bab8)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18007bbb0)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18007bba8)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18007bb70)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18007bb88)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x18007bbe8)
- ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z (Address: 0x18007bb60)
- ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x18007bb50)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18007b9a8)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18007bcb8)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18007b930)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18007bca0)
- ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x18007bc70)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18007b9a0)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18007bc98)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x18007ba40)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18007b9d0)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18007b9c0)
- ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x18007bbf8)
- ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z (Address: 0x18007bbb8)
- ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x18007bc28)
- ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x18007bc20)
- ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x18007bba0)
- ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x18007bb98)
- ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x18007bc90)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x18007bc88)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18007ba60)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18007ba80)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x18007bdf0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18007bd60)
- ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z (Address: 0x18007bb20)
- ?_ReportUnobservedException@details@Concurrency@@YAXXZ (Address: 0x18007bb80)
- ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x18007bb58)
- ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z (Address: 0x18007bb28)
- ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x18007bbc0)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18007baf8)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18007b9c8)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18007b9b8)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18007bc38)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x18007bb18)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18007b990)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18007baf0)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18007bc30)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18007bc80)
- ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x18007bc50)
- ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x18007bc60)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18007b938)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18007bc40)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18007ba88)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18007be20)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18007b958)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18007b968)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x18007ba70)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18007bd68)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18007bcf8)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18007b928)
- ??0task_continuation_context@Concurrency@@AEAA@XZ (Address: 0x18007bb90)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18007bc68)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18007bc48)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18007be28)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18007bdf8)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18007b950)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18007b960)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18007ba68)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18007bd70)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18007bd00)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18007b920)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18007bc78)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18007bad0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18007b978)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18007bac8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18007ba50)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18007bac0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18007b970)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18007ba58)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18007b980)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18007baa8)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x18007bcc0)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bda0)
- ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd10)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bdc0)
- ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd30)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bdd8)
- ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd48)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x18007ba90)
- ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x18007be18)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x18007bcd0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18007ba48)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18007ba78)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x18007bdc8)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x18007bd38)
- ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ (Address: 0x18007bb38)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18007bad8)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x18007bcc8)
- ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bda8)
- ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd18)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18007bae8)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18007b998)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18007b9b0)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18007ba20)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18007b918)
- ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bdb0)
- ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd20)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x18007bdb8)
- ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x18007bd28)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18007baa0)
- ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x18007be10)
- ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ (Address: 0x18007bb78)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18007bd78)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18007ba38)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18007ba18)
- ?setf@ios_base@std@@QEAAHH@Z (Address: 0x18007bcd8)
- ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x18007bce0)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18007bdd0)
- ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18007bd40)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x18007bde0)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18007bde8)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z (Address: 0x18007bd50)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18007bd58)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18007be30)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18007be00)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18007bd80)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18007ba28)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18007ba00)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18007bd88)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18007bd90)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18007bd08)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18007bd98)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18007b988)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18007b9d8)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18007b9e0)
- ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18007bab0)
- ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ (Address: 0x18007be08)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18007bca8)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18007b910)
- ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18007bcb0)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18007b9f8)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18007ba08)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x18007bc58)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x18007bae0)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18007bcf0)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x18007bce8)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18007ba30)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18007ba10)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18007b9e8)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18007b9f0)
ntdll.dll
- NtQueryDirectoryFile (Address: 0x18007c3b8)
- RtlCaptureContext (Address: 0x18007c3b0)
- RtlLookupFunctionEntry (Address: 0x18007c3c0)
- RtlVirtualUnwind (Address: 0x18007c3c8)
- VerSetConditionMask (Address: 0x18007c3d0)
ole32.dll
- CoCreateGuid (Address: 0x18007c430)
- CoCreateInstance (Address: 0x18007c3e8)
- CoInitializeEx (Address: 0x18007c3f8)
- CoSetProxyBlanket (Address: 0x18007c400)
- CoTaskMemAlloc (Address: 0x18007c418)
- CoTaskMemFree (Address: 0x18007c3f0)
- CoUninitialize (Address: 0x18007c428)
- CreateBindCtx (Address: 0x18007c438)
- CreateItemMoniker (Address: 0x18007c408)
- GetRunningObjectTable (Address: 0x18007c440)
- PropVariantClear (Address: 0x18007c420)
- StringFromCLSID (Address: 0x18007c410)
- StringFromGUID2 (Address: 0x18007c3e0)
OLEAUT32.dll
- GetRecordInfoFromTypeInfo (Address: 0x18007be50)
- LoadRegTypeLib (Address: 0x18007be40)
- LoadTypeLib (Address: 0x18007be48)
PROPSYS.dll
- InitPropVariantFromStringVector (Address: 0x18007be60)
RPCRT4.dll
- RpcBindingFree (Address: 0x18007be78)
- RpcBindingFromStringBindingW (Address: 0x18007be80)
- RpcBindingSetAuthInfoExW (Address: 0x18007bec0)
- RpcBindingVectorFree (Address: 0x18007be88)
- RpcEpRegisterW (Address: 0x18007bec8)
- RpcEpUnregister (Address: 0x18007bed0)
- RpcServerInqBindings (Address: 0x18007bea0)
- RpcServerInqCallAttributesW (Address: 0x18007bed8)
- RpcServerRegisterIfEx (Address: 0x18007bea8)
- RpcServerUnregisterIf (Address: 0x18007beb0)
- RpcServerUseProtseqW (Address: 0x18007beb8)
- RpcStringBindingComposeW (Address: 0x18007be90)
- RpcStringFreeW (Address: 0x18007be98)
- UuidCreate (Address: 0x18007be70)
Secur32.dll
- GetUserNameExW (Address: 0x18007c018)
SHELL32.dll
- (Address: 0x18007bf20)
- (Address: 0x18007bf68)
- CommandLineToArgvW (Address: 0x18007bf60)
- SHAssocEnumHandlers (Address: 0x18007bf08)
- SHBindToParent (Address: 0x18007bf18)
- SHChangeNotify (Address: 0x18007bf48)
- SHCreateDirectoryExW (Address: 0x18007bf00)
- SHCreateItemFromParsingName (Address: 0x18007bf38)
- ShellExecuteExW (Address: 0x18007bf30)
- SHFileOperationW (Address: 0x18007bf58)
- SHGetFolderPathAndSubDirW (Address: 0x18007bef0)
- SHGetFolderPathW (Address: 0x18007bef8)
- SHGetKnownFolderPath (Address: 0x18007bf10)
- SHGetPropertyStoreFromParsingName (Address: 0x18007bf28)
- SHGetSpecialFolderPathW (Address: 0x18007bf50)
- SHParseDisplayName (Address: 0x18007bf40)
- SHSetKnownFolderPath (Address: 0x18007bee8)
SHLWAPI.dll
- AssocQueryStringW (Address: 0x18007bfd0)
- PathFileExistsW (Address: 0x18007bff0)
- PathIsDirectoryEmptyW (Address: 0x18007bfe0)
- PathIsDirectoryW (Address: 0x18007bff8)
- PathIsPrefixW (Address: 0x18007bfb0)
- PathRemoveFileSpecW (Address: 0x18007bfa0)
- PathStripPathW (Address: 0x18007c008)
- SHCreateStreamOnFileW (Address: 0x18007bfd8)
- SHDeleteKeyW (Address: 0x18007bf98)
- SHDeleteValueW (Address: 0x18007bf88)
- SHGetValueA (Address: 0x18007bf78)
- SHGetValueW (Address: 0x18007bfc0)
- SHRegGetBoolUSValueW (Address: 0x18007bfc8)
- SHRegGetPathW (Address: 0x18007bf90)
- SHRegGetUSValueW (Address: 0x18007bfb8)
- SHRegGetValueW (Address: 0x18007c000)
- SHSetValueW (Address: 0x18007bf80)
- StrRetToBufW (Address: 0x18007bfe8)
- StrStrIW (Address: 0x18007bfa8)
UpdateRingSettings.dll
- ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x18007c0f8)
USER32.dll
- CloseClipboard (Address: 0x18007c048)
- CreateWindowExW (Address: 0x18007c0c0)
- DestroyWindow (Address: 0x18007c0c8)
- DispatchMessageW (Address: 0x18007c068)
- EnumWindows (Address: 0x18007c0b0)
- GetClassNameW (Address: 0x18007c0a8)
- GetMessageW (Address: 0x18007c080)
- GetWindowThreadProcessId (Address: 0x18007c0a0)
- OpenClipboard (Address: 0x18007c028)
- PostMessageW (Address: 0x18007c0b8)
- PostThreadMessageW (Address: 0x18007c090)
- RegisterClassW (Address: 0x18007c0d0)
- RegisterClipboardFormatW (Address: 0x18007c038)
- RegisterPowerSettingNotification (Address: 0x18007c060)
- RegisterSuspendResumeNotification (Address: 0x18007c050)
- SendMessageTimeoutW (Address: 0x18007c088)
- SetClipboardData (Address: 0x18007c040)
- ShowWindow (Address: 0x18007c070)
- SystemParametersInfoW (Address: 0x18007c098)
- TranslateMessage (Address: 0x18007c078)
- UnregisterPowerSettingNotification (Address: 0x18007c058)
- UnregisterSuspendResumeNotification (Address: 0x18007c030)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x18007c0e8)
- GetDefaultUserProfileDirectoryW (Address: 0x18007c0e0)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x18007c1c0)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x18007c120)
- __current_exception (Address: 0x18007c180)
- __current_exception_context (Address: 0x18007c128)
- __RTDynamicCast (Address: 0x18007c1b0)
- __std_exception_copy (Address: 0x18007c170)
- __std_exception_destroy (Address: 0x18007c168)
- __std_terminate (Address: 0x18007c178)
- __std_type_info_compare (Address: 0x18007c188)
- __std_type_info_destroy_list (Address: 0x18007c118)
- __std_type_info_name (Address: 0x18007c158)
- _CxxThrowException (Address: 0x18007c150)
- _purecall (Address: 0x18007c160)
- memchr (Address: 0x18007c130)
- memcmp (Address: 0x18007c110)
- memcpy (Address: 0x18007c148)
- memmove (Address: 0x18007c140)
- memset (Address: 0x18007c198)
- strchr (Address: 0x18007c190)
- strrchr (Address: 0x18007c138)
- wcschr (Address: 0x18007c108)
- wcsrchr (Address: 0x18007c1a0)
- wcsstr (Address: 0x18007c1a8)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x18007c1d0)
- GetFileVersionInfoW (Address: 0x18007c1e0)
- VerQueryValueW (Address: 0x18007c1d8)
WININET.dll
- InternetCheckConnectionW (Address: 0x18007c1f0)
WTSAPI32.dll
- WTSEnumerateSessionsW (Address: 0x18007c200)
- WTSFreeMemory (Address: 0x18007c210)
- WTSQuerySessionInformationW (Address: 0x18007c208)
- WTSQueryUserToken (Address: 0x18007c218)