FileSyncFSNtfsWB.dll
Description: Microsoft OneDriveFile Sync FS NTFS WB
Authors: © Microsoft Corporation. All rights reserved.
Version: 25.209.1026.2
Architecture: 64-bit
Operating System: Windows
SHA256: 693eeb404fc5251f0c1c818128924b94
File Size: 556.4 KB
Uploaded At: Dec. 4, 2025, 6:14 a.m.
Views: 7
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateLayer (Ordinal: 1, Address: 0x3800)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x180056008)
- AllocateAndInitializeSid (Address: 0x1800560b8)
- ChangeServiceConfig2W (Address: 0x180056178)
- ChangeServiceConfigW (Address: 0x180056180)
- CloseServiceHandle (Address: 0x180056170)
- ControlService (Address: 0x180056168)
- ConvertSidToStringSidW (Address: 0x1800560f0)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800560a8)
- CreateProcessAsUserW (Address: 0x1800560b0)
- CreateProcessWithTokenW (Address: 0x1800560d8)
- CreateServiceW (Address: 0x180056160)
- CreateWellKnownSid (Address: 0x1800560c0)
- CryptAcquireContextW (Address: 0x180056078)
- CryptCreateHash (Address: 0x180056090)
- CryptDestroyHash (Address: 0x1800560a0)
- CryptGetHashParam (Address: 0x180056088)
- CryptHashData (Address: 0x180056098)
- CryptReleaseContext (Address: 0x180056080)
- DeleteService (Address: 0x180056158)
- DuplicateTokenEx (Address: 0x1800560c8)
- FreeSid (Address: 0x1800560d0)
- GetAclInformation (Address: 0x1800561b8)
- GetNamedSecurityInfoW (Address: 0x180056100)
- GetTokenInformation (Address: 0x180056010)
- GetUserNameW (Address: 0x1800560e0)
- LookupPrivilegeValueW (Address: 0x180056018)
- OpenProcessToken (Address: 0x180056148)
- OpenSCManagerW (Address: 0x180056150)
- OpenServiceW (Address: 0x180056000)
- QueryServiceConfigW (Address: 0x180056140)
- QueryServiceStatus (Address: 0x180056138)
- QueryServiceStatusEx (Address: 0x180056130)
- RegCloseKey (Address: 0x180056020)
- RegCreateKeyExW (Address: 0x180056028)
- RegCreateKeyTransactedW (Address: 0x1800561b0)
- RegDeleteKeyExW (Address: 0x1800561a8)
- RegDeleteTreeW (Address: 0x180056188)
- RegDeleteValueW (Address: 0x180056030)
- RegEnumKeyExW (Address: 0x180056038)
- RegEnumKeyW (Address: 0x1800561a0)
- RegEnumValueW (Address: 0x180056040)
- RegGetValueW (Address: 0x180056070)
- RegisterServiceCtrlHandlerW (Address: 0x180056128)
- RegLoadKeyW (Address: 0x180056198)
- RegOpenKeyExW (Address: 0x180056048)
- RegQueryInfoKeyW (Address: 0x180056050)
- RegQueryValueExW (Address: 0x180056058)
- RegSetKeyValueW (Address: 0x180056068)
- RegSetValueExW (Address: 0x180056060)
- RegUnLoadKeyW (Address: 0x180056190)
- SetEntriesInAclW (Address: 0x180056108)
- SetFileSecurityW (Address: 0x1800560e8)
- SetNamedSecurityInfoW (Address: 0x1800560f8)
- SetServiceStatus (Address: 0x180056120)
- StartServiceCtrlDispatcherW (Address: 0x180056118)
- StartServiceW (Address: 0x180056110)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x180056f10)
- wcstoll (Address: 0x180056f08)
- wcstoul (Address: 0x180056f00)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x180056f38)
- free (Address: 0x180056f20)
- malloc (Address: 0x180056f28)
- realloc (Address: 0x180056f30)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x180056f48)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthread (Address: 0x180056fb8)
- _cexit (Address: 0x180056f78)
- _configure_narrow_argv (Address: 0x180056fb0)
- _crt_atexit (Address: 0x180056f60)
- _errno (Address: 0x180056f68)
- _execute_onexit_table (Address: 0x180056f70)
- _initialize_narrow_environment (Address: 0x180056f88)
- _initialize_onexit_table (Address: 0x180056fa8)
- _initterm (Address: 0x180056f80)
- _initterm_e (Address: 0x180056f90)
- _invalid_parameter_noinfo_noreturn (Address: 0x180056fa0)
- _register_onexit_function (Address: 0x180056fc0)
- _seh_filter_dll (Address: 0x180056f58)
- terminate (Address: 0x180056f98)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vswprintf (Address: 0x180056fe0)
- _close (Address: 0x180056fe8)
- _wfopen_s (Address: 0x180056fd8)
- fclose (Address: 0x180056fd0)
api-ms-win-crt-string-l1-1-0.dll
- _wcsdup (Address: 0x180057018)
- _wcsicmp (Address: 0x180057000)
- _wcsnicmp (Address: 0x180057010)
- towlower (Address: 0x180057020)
- towupper (Address: 0x180057028)
- wcsncpy_s (Address: 0x180057008)
- wcstok_s (Address: 0x180056ff8)
api-ms-win-crt-time-l1-1-0.dll
- _localtime64_s (Address: 0x180057040)
- _time64 (Address: 0x180057038)
CRYPT32.dll
- CertFindExtension (Address: 0x1800561d8)
- CryptBinaryToStringW (Address: 0x1800561c8)
- CryptStringToBinaryW (Address: 0x1800561d0)
FileSyncFS.DLL
- ??0Path@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180056240)
- ??0Path@Odfs@@QEAA@AEBV01@@Z (Address: 0x180056230)
- ??0Path@Odfs@@QEAA@XZ (Address: 0x180056268)
- ??0PathFragment@Odfs@@QEAA@$$QEAV01@@Z (Address: 0x180056278)
- ??0PathFragment@Odfs@@QEAA@AEBV01@@Z (Address: 0x180056270)
- ??0PathFragment@Odfs@@QEAA@XZ (Address: 0x1800561e8)
- ??0PropertyBag@Odfs@@QEAA@AEBV01@@Z (Address: 0x1800561f8)
- ??0PropertyBag@Odfs@@QEAA@XZ (Address: 0x180056298)
- ??1Path@Odfs@@QEAA@XZ (Address: 0x1800562e8)
- ??1PathFragment@Odfs@@QEAA@XZ (Address: 0x1800562e0)
- ??1PropertyBag@Odfs@@UEAA@XZ (Address: 0x180056258)
- ??4Path@Odfs@@QEAAAEAV01@$$QEAV01@@Z (Address: 0x180056210)
- ?Consume@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@@Z (Address: 0x180056290)
- ?Create@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0W4PathNormalizationType@2@@Z (Address: 0x180056238)
- ?Create@Path@Odfs@@SA?AV12@V?$basic_string_view@_WU?$char_traits@_W@std@@@std@@PEB_WW4PathNormalizationType@2@@Z (Address: 0x1800562b0)
- ?Create@PathFragment@Odfs@@SA?AV12@PEB_WW4PathNormalizationType@2@@Z (Address: 0x1800561f0)
- ?CreateEmpty@Path@Odfs@@SA?AV12@XZ (Address: 0x180056200)
- ?Has@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x180056288)
- ?Has@PropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800562c0)
- ?IsConsumed@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x180056218)
- ?Request@PropertyBag@Odfs@@UEAAXAEBUPropertyKey@2@@Z (Address: 0x180056250)
- ?Requested@PropertyBag@Odfs@@UEBA_NAEBUPropertyKey@2@@Z (Address: 0x1800562b8)
- ?RequestIf@PropertyBag@Odfs@@UEAAXAEBUPropertyKey@2@0@Z (Address: 0x1800562a0)
- ?Set@MutablePropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_ (Address: 0x1800562f0)
- ?Set@PropertyBag@Odfs@@QEAA?AVODResult@@AEBUPropertyKey@2@AEBV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@st (Address: 0x1800562d0)
- ?ShouldConsume@MutablePropertyBag@Odfs@@QEBA_NAEBUPropertyKey@2@@Z (Address: 0x180056228)
- ?ShouldPopulate@PropertyBag@Odfs@@QEAA_NW4CostClass@2@AEBUPropertyKey@2@@Z (Address: 0x1800562d8)
- ?Size@MutablePropertyBag@Odfs@@QEBAIXZ (Address: 0x180056280)
- ?ToPathString@PathConvert@Odfs@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@_WU?$char_traits@_W@std@@@4@@Z (Address: 0x1800562c8)
- ?ToSystemWString@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x1800562a8)
- ?ToSystemWStringWithoutPathPrefix@Path@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180056260)
- ?ToWString@PathConvert@Odfs@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV34@@Z (Address: 0x180056208)
- ?ToWString@PathFragment@Odfs@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x180056220)
- ?ValueFor@MutablePropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_ (Address: 0x1800562f8)
- ?ValueFor@PropertyBag@Odfs@@AEBA?AVODResult@@AEBUPropertyKey@2@W4PropertyVariantType@2@AEAV?$variant@Umonostate@std@@_NH_JI_KNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$vector@EV?$allocator@E@std@@@2@VPath@Odfs@@VPathFragment@7@UUint128@7@V?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@V?$list@V?$basic_string@_WU?$char_traits@ (Address: 0x180056248)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x1800565b8)
- CloseHandle (Address: 0x180056620)
- CompareStringOrdinal (Address: 0x180056360)
- CopyFileW (Address: 0x180056310)
- CreateDirectoryW (Address: 0x1800564b8)
- CreateEventW (Address: 0x180056518)
- CreateFileW (Address: 0x1800564b0)
- CreateIoCompletionPort (Address: 0x1800563f8)
- CreateMutexW (Address: 0x180056600)
- CreatePipe (Address: 0x180056400)
- CreateProcessW (Address: 0x180056688)
- CreateSymbolicLinkW (Address: 0x180056368)
- CreateToolhelp32Snapshot (Address: 0x180056358)
- DeleteCriticalSection (Address: 0x180056668)
- DeleteFileW (Address: 0x180056638)
- DeviceIoControl (Address: 0x1800563e0)
- DisableThreadLibraryCalls (Address: 0x180056388)
- ExpandEnvironmentStringsW (Address: 0x1800564f0)
- FindClose (Address: 0x180056630)
- FindFirstFileNameW (Address: 0x180056418)
- FindFirstFileW (Address: 0x180056628)
- FindFirstVolumeW (Address: 0x1800564a8)
- FindNextVolumeW (Address: 0x1800564a0)
- FindVolumeClose (Address: 0x180056498)
- FreeLibrary (Address: 0x180056660)
- GetCommandLineW (Address: 0x180056500)
- GetCompressedFileSizeW (Address: 0x180056420)
- GetComputerNameW (Address: 0x180056328)
- GetCurrentProcess (Address: 0x1800565f8)
- GetCurrentProcessId (Address: 0x1800565f0)
- GetCurrentThreadId (Address: 0x1800565a8)
- GetDiskFreeSpaceExW (Address: 0x180056490)
- GetDllDirectoryW (Address: 0x180056640)
- GetEnvironmentVariableW (Address: 0x1800564f8)
- GetExitCodeProcess (Address: 0x1800564e0)
- GetFileAttributesExW (Address: 0x180056480)
- GetFileAttributesW (Address: 0x180056488)
- GetFileInformationByHandle (Address: 0x180056478)
- GetFileInformationByHandleEx (Address: 0x180056338)
- GetFileSize (Address: 0x180056470)
- GetFileSizeEx (Address: 0x180056468)
- GetFileType (Address: 0x180056460)
- GetFinalPathNameByHandleW (Address: 0x180056458)
- GetLastError (Address: 0x180056670)
- GetLongPathNameW (Address: 0x180056528)
- GetModuleFileNameW (Address: 0x180056590)
- GetModuleHandleW (Address: 0x180056658)
- GetPrivateProfileStringW (Address: 0x180056680)
- GetProcAddress (Address: 0x180056650)
- GetProcessIoCounters (Address: 0x180056690)
- GetProcessTimes (Address: 0x1800564e8)
- GetProductInfo (Address: 0x180056540)
- GetQueuedCompletionStatus (Address: 0x1800563f0)
- GetSystemTime (Address: 0x1800565d8)
- GetSystemTimeAsFileTime (Address: 0x1800565d0)
- GetSystemTimes (Address: 0x1800564c8)
- GetTickCount64 (Address: 0x1800565a0)
- GetUserDefaultLCID (Address: 0x180056558)
- GetUserGeoID (Address: 0x180056560)
- GetVersionExW (Address: 0x180056598)
- GetVolumePathNameW (Address: 0x180056450)
- GlobalAlloc (Address: 0x1800563c8)
- GlobalFree (Address: 0x180056378)
- GlobalLock (Address: 0x180056380)
- GlobalUnlock (Address: 0x1800563c0)
- HeapAlloc (Address: 0x180056618)
- HeapFree (Address: 0x180056610)
- InitializeCriticalSectionEx (Address: 0x180056678)
- InitializeSListHead (Address: 0x1800563b8)
- IsDebuggerPresent (Address: 0x180056410)
- IsProcessorFeaturePresent (Address: 0x180056398)
- IsWow64Process (Address: 0x1800563d8)
- K32GetModuleFileNameExW (Address: 0x180056550)
- LCIDToLocaleName (Address: 0x180056568)
- LoadLibraryExW (Address: 0x1800563d0)
- LoadLibraryW (Address: 0x180056648)
- LocalAlloc (Address: 0x180056588)
- LocalFree (Address: 0x180056580)
- MoveFileExW (Address: 0x180056318)
- MoveFileW (Address: 0x180056578)
- OpenFileById (Address: 0x180056340)
- OpenProcess (Address: 0x1800565e0)
- OutputDebugStringW (Address: 0x1800565c8)
- PostQueuedCompletionStatus (Address: 0x1800563e8)
- Process32FirstW (Address: 0x180056350)
- Process32NextW (Address: 0x180056348)
- QueryPerformanceCounter (Address: 0x180056390)
- ReadDirectoryChangesW (Address: 0x180056370)
- ReadFile (Address: 0x180056448)
- RegisterApplicationRestart (Address: 0x180056330)
- ReleaseMutex (Address: 0x180056520)
- ReleaseSRWLockExclusive (Address: 0x1800565c0)
- RemoveDirectoryW (Address: 0x180056440)
- ReplaceFileW (Address: 0x180056320)
- SetDllDirectoryW (Address: 0x180056308)
- SetFileAttributesW (Address: 0x180056438)
- SetFileInformationByHandle (Address: 0x180056430)
- SetFilePointer (Address: 0x180056428)
- SetHandleInformation (Address: 0x180056408)
- SetLastError (Address: 0x180056530)
- SetProcessShutdownParameters (Address: 0x1800564d0)
- SetThreadInformation (Address: 0x1800564c0)
- SetUnhandledExceptionFilter (Address: 0x1800563a0)
- Sleep (Address: 0x180056510)
- SleepConditionVariableSRW (Address: 0x1800565b0)
- SystemTimeToFileTime (Address: 0x180056570)
- TerminateProcess (Address: 0x1800565e8)
- UnhandledExceptionFilter (Address: 0x1800563a8)
- VerifyVersionInfoW (Address: 0x180056538)
- WaitForMultipleObjects (Address: 0x180056508)
- WaitForSingleObject (Address: 0x180056608)
- WakeAllConditionVariable (Address: 0x1800563b0)
- WideCharToMultiByte (Address: 0x180056548)
- WritePrivateProfileStringW (Address: 0x1800564d8)
LoggingPlatform.DLL
- ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x1800566a0)
- ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x1800566d8)
- ??1TelemetryEvent@@QEAA@XZ (Address: 0x1800566e0)
- ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x1800566b0)
- ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x1800566c0)
- ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x1800566a8)
- ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800566c8)
- ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800566b8)
- ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x1800566d0)
- ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x1800566e8)
MSVCP140.dll
- _Cnd_init_in_situ (Address: 0x180056750)
- _Mtx_init_in_situ (Address: 0x180056748)
- _Mtx_lock (Address: 0x180056738)
- _Mtx_unlock (Address: 0x180056730)
- _Query_perf_counter (Address: 0x180056728)
- _Query_perf_frequency (Address: 0x180056720)
- _Wcscoll (Address: 0x180056a40)
- _Wcsxfrm (Address: 0x180056a48)
- _Xtime_get_ticks (Address: 0x180056a38)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180056700)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1800566f8)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180056710)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180056708)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180056718)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180056ae8)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180056ab0)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180056a60)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180056a90)
- ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x180056b18)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180056af0)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180056a88)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x180056ad8)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180056a08)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180056a18)
- ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x180056b30)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x180056b28)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x180056950)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180056928)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800568c0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x180056848)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180056740)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180056a10)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180056a20)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x180056790)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800567b0)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180056798)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180056788)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800567a0)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180056ae0)
- ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x180056b08)
- ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x180056b10)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180056a50)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x180056a28)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180056920)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800568f0)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x180056988)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x180056978)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x180056940)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180056850)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800567d8)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x180056a78)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x180056a58)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x180056a30)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800568f8)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800568c8)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180056990)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180056980)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180056948)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180056858)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800567e0)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x180056a80)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x180056b20)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x180056768)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x180056958)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180056760)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180056960)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x180056758)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180056968)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x180056780)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180056930)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x180056a70)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x180056ab8)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x180056a68)
- ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180056870)
- ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x1800567f8)
- ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180056890)
- ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180056818)
- ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800568a8)
- ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180056830)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x180056918)
- ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x1800568e8)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x1800567c0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x180056970)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180056938)
- ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x180056898)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x180056820)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x180056770)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x1800567b8)
- ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180056878)
- ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180056800)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x180056b00)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x180056af8)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180056998)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800569c0)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x180056a98)
- ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180056880)
- ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180056808)
- ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180056888)
- ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180056810)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180056910)
- ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x1800568e0)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180056ac0)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1800569a0)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800569c8)
- ?setf@ios_base@std@@QEAAHH@Z (Address: 0x180056b40)
- ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x180056b48)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800568a0)
- ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x180056828)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x1800568b0)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800568b8)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z (Address: 0x180056838)
- ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x180056840)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x180056900)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800568d0)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180056ac8)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1800569b8)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800569e0)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180056ad0)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x180056860)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800567e8)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x180056868)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800567f0)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x180056a00)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800569f8)
- ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180056908)
- ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ (Address: 0x1800568d8)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180056aa0)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x180056aa8)
- ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180056b38)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1800569b0)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800569d8)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x1800567a8)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x180056778)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1800567d0)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x1800567c8)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1800569a8)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800569d0)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x1800569f0)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800569e8)
ntdll.dll
- RtlCaptureContext (Address: 0x180057068)
- RtlLookupFunctionEntry (Address: 0x180057058)
- RtlVirtualUnwind (Address: 0x180057060)
- VerSetConditionMask (Address: 0x180057050)
ole32.dll
- CoCreateGuid (Address: 0x180057080)
- CoCreateInstance (Address: 0x1800570c0)
- CoInitializeEx (Address: 0x1800570c8)
- CoSetProxyBlanket (Address: 0x180057088)
- CoTaskMemFree (Address: 0x1800570b8)
- CoUninitialize (Address: 0x180057078)
- CreateBindCtx (Address: 0x1800570b0)
- CreateItemMoniker (Address: 0x180057090)
- GetRunningObjectTable (Address: 0x180057098)
- StringFromCLSID (Address: 0x1800570a8)
- StringFromGUID2 (Address: 0x1800570a0)
OLEAUT32.dll
- GetRecordInfoFromTypeInfo (Address: 0x180056b68)
- LoadRegTypeLib (Address: 0x180056b60)
- LoadTypeLib (Address: 0x180056b58)
RPCRT4.dll
- RpcBindingFree (Address: 0x180056b80)
- RpcBindingFromStringBindingW (Address: 0x180056b88)
- RpcBindingSetAuthInfoExW (Address: 0x180056ba0)
- RpcBindingVectorFree (Address: 0x180056ba8)
- RpcEpRegisterW (Address: 0x180056be0)
- RpcEpUnregister (Address: 0x180056b90)
- RpcServerInqBindings (Address: 0x180056bc0)
- RpcServerInqCallAttributesW (Address: 0x180056b98)
- RpcServerRegisterIfEx (Address: 0x180056bc8)
- RpcServerUnregisterIf (Address: 0x180056bd0)
- RpcServerUseProtseqW (Address: 0x180056bd8)
- RpcStringBindingComposeW (Address: 0x180056bb0)
- RpcStringFreeW (Address: 0x180056bb8)
- UuidCreate (Address: 0x180056b78)
Secur32.dll
- GetUserNameExW (Address: 0x180056d08)
SHELL32.dll
- (Address: 0x180056c58)
- CommandLineToArgvW (Address: 0x180056bf0)
- SHAssocEnumHandlers (Address: 0x180056c60)
- SHChangeNotify (Address: 0x180056c08)
- SHCreateDirectoryExW (Address: 0x180056c38)
- SHCreateItemFromParsingName (Address: 0x180056c20)
- ShellExecuteExW (Address: 0x180056c18)
- SHFileOperationW (Address: 0x180056c30)
- SHGetFolderPathAndSubDirW (Address: 0x180056c48)
- SHGetFolderPathW (Address: 0x180056c40)
- SHGetKnownFolderPath (Address: 0x180056c00)
- SHGetPropertyStoreFromParsingName (Address: 0x180056c28)
- SHGetSpecialFolderPathW (Address: 0x180056bf8)
- SHParseDisplayName (Address: 0x180056c10)
- SHSetKnownFolderPath (Address: 0x180056c50)
SHLWAPI.dll
- AssocQueryStringW (Address: 0x180056ca8)
- PathFileExistsW (Address: 0x180056c90)
- PathIsDirectoryEmptyW (Address: 0x180056c70)
- PathIsDirectoryW (Address: 0x180056ce0)
- PathIsPrefixW (Address: 0x180056cd8)
- PathRemoveFileSpecW (Address: 0x180056cf8)
- PathStripPathW (Address: 0x180056ce8)
- SHCreateStreamOnFileW (Address: 0x180056cb0)
- SHDeleteKeyW (Address: 0x180056c98)
- SHDeleteValueW (Address: 0x180056c78)
- SHGetValueA (Address: 0x180056ca0)
- SHGetValueW (Address: 0x180056c88)
- SHRegGetBoolUSValueW (Address: 0x180056cb8)
- SHRegGetPathW (Address: 0x180056cc0)
- SHRegGetUSValueW (Address: 0x180056c80)
- SHRegGetValueW (Address: 0x180056cc8)
- SHSetValueW (Address: 0x180056cd0)
- StrStrIW (Address: 0x180056cf0)
UpdateRingSettings.dll
- ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x180056de0)
USER32.dll
- CloseClipboard (Address: 0x180056d98)
- CreateWindowExW (Address: 0x180056d78)
- DestroyWindow (Address: 0x180056d80)
- DispatchMessageW (Address: 0x180056d48)
- EnumWindows (Address: 0x180056d58)
- GetClassNameW (Address: 0x180056d18)
- GetMessageW (Address: 0x180056d38)
- GetWindowThreadProcessId (Address: 0x180056d20)
- OpenClipboard (Address: 0x180056d90)
- PostMessageW (Address: 0x180056db8)
- RegisterClassW (Address: 0x180056d70)
- RegisterClipboardFormatW (Address: 0x180056da8)
- RegisterPowerSettingNotification (Address: 0x180056d50)
- RegisterSuspendResumeNotification (Address: 0x180056d60)
- SendMessageTimeoutW (Address: 0x180056d30)
- SetClipboardData (Address: 0x180056da0)
- ShowWindow (Address: 0x180056d88)
- SystemParametersInfoW (Address: 0x180056d28)
- TranslateMessage (Address: 0x180056d40)
- UnregisterPowerSettingNotification (Address: 0x180056db0)
- UnregisterSuspendResumeNotification (Address: 0x180056d68)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x180056dd0)
- GetDefaultUserProfileDirectoryW (Address: 0x180056dc8)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x180056e98)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x180056e20)
- __current_exception (Address: 0x180056e78)
- __current_exception_context (Address: 0x180056e18)
- __RTDynamicCast (Address: 0x180056e88)
- __std_exception_copy (Address: 0x180056e60)
- __std_exception_destroy (Address: 0x180056e58)
- __std_terminate (Address: 0x180056e68)
- __std_type_info_compare (Address: 0x180056e48)
- __std_type_info_destroy_list (Address: 0x180056e40)
- __std_type_info_name (Address: 0x180056e50)
- _CxxThrowException (Address: 0x180056e30)
- _purecall (Address: 0x180056e38)
- memcmp (Address: 0x180056e00)
- memcpy (Address: 0x180056e28)
- memmove (Address: 0x180056e70)
- memset (Address: 0x180056e80)
- strchr (Address: 0x180056e08)
- wcschr (Address: 0x180056e10)
- wcsrchr (Address: 0x180056df8)
- wcsstr (Address: 0x180056df0)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x180056eb0)
- GetFileVersionInfoW (Address: 0x180056eb8)
- VerQueryValueW (Address: 0x180056ea8)
WININET.dll
- InternetCheckConnectionW (Address: 0x180056ec8)
WTSAPI32.dll
- WTSEnumerateSessionsW (Address: 0x180056ef0)
- WTSFreeMemory (Address: 0x180056ee0)
- WTSQuerySessionInformationW (Address: 0x180056ed8)
- WTSQueryUserToken (Address: 0x180056ee8)