FileSyncHost.dll

Description: Microsoft OneDriveFile Sync Host

Authors: © Microsoft Corporation. All rights reserved.

Version: 25.209.1026.2

Architecture: 64-bit

Operating System: Windows

SHA256: 82344ee9c858b181cc672b35b1fd35e8

File Size: 508.4 KB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ?CreateSystemHostForUnitTests@@YA?AV?$shared_ptr@VBaseHost@@@std@@XZ (Ordinal: 1, Address: 0x49c0)
  • ?GetGlobalSystemHost@@YAPEAVBaseHost@@XZ (Ordinal: 2, Address: 0x49a0)
  • ?SetGlobalSystemHost@@YAXPEAVBaseHost@@@Z (Ordinal: 3, Address: 0x49b0)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x180053008)
  • AllocateAndInitializeSid (Address: 0x180053108)
  • ChangeServiceConfig2W (Address: 0x1800530b0)
  • ChangeServiceConfigW (Address: 0x1800530b8)
  • CloseServiceHandle (Address: 0x1800530a8)
  • ControlService (Address: 0x1800530a0)
  • ConvertSidToStringSidW (Address: 0x180053028)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180053118)
  • CreateProcessAsUserW (Address: 0x180053110)
  • CreateProcessWithTokenW (Address: 0x180053010)
  • CreateServiceW (Address: 0x180053098)
  • CreateWellKnownSid (Address: 0x180053000)
  • CryptAcquireContextW (Address: 0x180053148)
  • CryptCreateHash (Address: 0x180053130)
  • CryptDestroyHash (Address: 0x180053120)
  • CryptGetHashParam (Address: 0x180053138)
  • CryptHashData (Address: 0x180053128)
  • CryptReleaseContext (Address: 0x180053140)
  • DeleteService (Address: 0x180053090)
  • DuplicateTokenEx (Address: 0x180053100)
  • FreeSid (Address: 0x1800530f8)
  • GetAclInformation (Address: 0x1800530f0)
  • GetNamedSecurityInfoW (Address: 0x180053038)
  • GetTokenInformation (Address: 0x1800531b0)
  • GetUserNameW (Address: 0x180053018)
  • LookupPrivilegeValueW (Address: 0x1800531a8)
  • OpenProcessToken (Address: 0x1800531b8)
  • OpenSCManagerW (Address: 0x180053088)
  • OpenServiceW (Address: 0x180053080)
  • QueryServiceConfigW (Address: 0x180053078)
  • QueryServiceStatus (Address: 0x180053070)
  • QueryServiceStatusEx (Address: 0x180053068)
  • RegCloseKey (Address: 0x1800531a0)
  • RegCreateKeyExW (Address: 0x180053198)
  • RegCreateKeyTransactedW (Address: 0x1800530e8)
  • RegDeleteKeyExW (Address: 0x1800530e0)
  • RegDeleteTreeW (Address: 0x1800530c0)
  • RegDeleteValueW (Address: 0x180053190)
  • RegEnumKeyExW (Address: 0x180053188)
  • RegEnumKeyW (Address: 0x1800530d8)
  • RegEnumValueW (Address: 0x180053180)
  • RegGetValueW (Address: 0x180053150)
  • RegisterServiceCtrlHandlerW (Address: 0x180053060)
  • RegLoadKeyW (Address: 0x1800530d0)
  • RegOpenKeyExW (Address: 0x180053178)
  • RegQueryInfoKeyW (Address: 0x180053170)
  • RegQueryValueExW (Address: 0x180053168)
  • RegSetKeyValueW (Address: 0x180053158)
  • RegSetValueExW (Address: 0x180053160)
  • RegUnLoadKeyW (Address: 0x1800530c8)
  • SetEntriesInAclW (Address: 0x180053040)
  • SetFileSecurityW (Address: 0x180053020)
  • SetNamedSecurityInfoW (Address: 0x180053030)
  • SetServiceStatus (Address: 0x180053058)
  • StartServiceCtrlDispatcherW (Address: 0x180053050)
  • StartServiceW (Address: 0x180053048)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x180053e58)
  • wcstoll (Address: 0x180053e68)
  • wcstoul (Address: 0x180053e60)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x180053e90)
  • free (Address: 0x180053e80)
  • malloc (Address: 0x180053e88)
  • realloc (Address: 0x180053e78)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180053ea0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x180053f08)
  • _beginthreadex (Address: 0x180053eb0)
  • _cexit (Address: 0x180053ec8)
  • _configure_narrow_argv (Address: 0x180053ef0)
  • _crt_atexit (Address: 0x180053ec0)
  • _errno (Address: 0x180053eb8)
  • _execute_onexit_table (Address: 0x180053ed8)
  • _initialize_narrow_environment (Address: 0x180053ee8)
  • _initialize_onexit_table (Address: 0x180053ee0)
  • _initterm (Address: 0x180053ed0)
  • _initterm_e (Address: 0x180053f10)
  • _invalid_parameter_noinfo_noreturn (Address: 0x180053f00)
  • _register_onexit_function (Address: 0x180053f20)
  • _seh_filter_dll (Address: 0x180053ef8)
  • terminate (Address: 0x180053f18)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vswprintf (Address: 0x180053f38)
  • _wfopen_s (Address: 0x180053f40)
  • fclose (Address: 0x180053f30)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsdup (Address: 0x180053f60)
  • _wcsicmp (Address: 0x180053f58)
  • _wcsnicmp (Address: 0x180053f50)
  • towlower (Address: 0x180053f78)
  • towupper (Address: 0x180053f68)
  • wcstok_s (Address: 0x180053f70)
api-ms-win-crt-time-l1-1-0.dll
  • _localtime64_s (Address: 0x180053f90)
  • _time64 (Address: 0x180053f88)
CRYPT32.dll
  • CertFindExtension (Address: 0x1800531d0)
  • CryptBinaryToStringW (Address: 0x1800531d8)
  • CryptStringToBinaryW (Address: 0x1800531c8)
FileSyncEvents.dll
  • CreateMainThreadProxyWithDefaultLoooper (Address: 0x1800531f8)
  • GetGlobalEventMachine (Address: 0x1800531f0)
  • ShutdownGlobalEventMachine (Address: 0x1800531e8)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1800535c8)
  • CloseHandle (Address: 0x180053540)
  • CompareStringOrdinal (Address: 0x1800532c8)
  • CopyFileW (Address: 0x180053308)
  • CreateDirectoryW (Address: 0x1800533f0)
  • CreateEventW (Address: 0x180053450)
  • CreateFileW (Address: 0x1800533e8)
  • CreateIoCompletionPort (Address: 0x180053268)
  • CreateMutexW (Address: 0x180053520)
  • CreatePipe (Address: 0x180053260)
  • CreateProcessW (Address: 0x180053410)
  • CreateSymbolicLinkW (Address: 0x1800532c0)
  • CreateToolhelp32Snapshot (Address: 0x1800532d0)
  • DeleteCriticalSection (Address: 0x180053490)
  • DeleteFileW (Address: 0x180053558)
  • DeviceIoControl (Address: 0x180053280)
  • DisableThreadLibraryCalls (Address: 0x1800533a8)
  • ExpandEnvironmentStringsW (Address: 0x180053428)
  • FindClose (Address: 0x180053550)
  • FindFirstFileNameW (Address: 0x180053248)
  • FindFirstFileW (Address: 0x180053548)
  • FindFirstVolumeW (Address: 0x1800533e0)
  • FindNextVolumeW (Address: 0x1800533d8)
  • FindVolumeClose (Address: 0x1800533d0)
  • FreeLibrary (Address: 0x180053580)
  • GetCommandLineW (Address: 0x180053438)
  • GetCompressedFileSizeW (Address: 0x180053240)
  • GetComputerNameW (Address: 0x180053320)
  • GetCurrentProcess (Address: 0x180053518)
  • GetCurrentProcessId (Address: 0x180053510)
  • GetCurrentThread (Address: 0x180053388)
  • GetCurrentThreadId (Address: 0x1800535b8)
  • GetDiskFreeSpaceExW (Address: 0x180053380)
  • GetDllDirectoryW (Address: 0x180053560)
  • GetEnvironmentVariableW (Address: 0x180053430)
  • GetExitCodeProcess (Address: 0x180053418)
  • GetFileAttributesExW (Address: 0x180053348)
  • GetFileAttributesW (Address: 0x180053378)
  • GetFileInformationByHandle (Address: 0x180053368)
  • GetFileInformationByHandleEx (Address: 0x180053330)
  • GetFileSize (Address: 0x180053358)
  • GetFileSizeEx (Address: 0x180053350)
  • GetFileType (Address: 0x1800532a8)
  • GetFinalPathNameByHandleW (Address: 0x180053208)
  • GetLastError (Address: 0x180053340)
  • GetLongPathNameW (Address: 0x180053460)
  • GetModuleFileNameW (Address: 0x1800534e0)
  • GetModuleHandleW (Address: 0x180053578)
  • GetPrivateProfileStringW (Address: 0x1800532f0)
  • GetProcAddress (Address: 0x180053570)
  • GetProcessIoCounters (Address: 0x1800532e8)
  • GetProcessTimes (Address: 0x180053420)
  • GetProductInfo (Address: 0x180053478)
  • GetQueuedCompletionStatus (Address: 0x180053270)
  • GetSystemTime (Address: 0x1800534f8)
  • GetSystemTimeAsFileTime (Address: 0x1800534f0)
  • GetSystemTimes (Address: 0x180053400)
  • GetTickCount64 (Address: 0x1800535b0)
  • GetUserDefaultLCID (Address: 0x1800534a8)
  • GetUserGeoID (Address: 0x1800534b0)
  • GetVersionExW (Address: 0x1800534e8)
  • GetVolumePathNameW (Address: 0x180053210)
  • GlobalAlloc (Address: 0x180053298)
  • GlobalFree (Address: 0x1800532b0)
  • GlobalLock (Address: 0x180053360)
  • GlobalUnlock (Address: 0x1800532a0)
  • HeapAlloc (Address: 0x180053538)
  • HeapFree (Address: 0x180053530)
  • InitializeCriticalSectionEx (Address: 0x180053498)
  • InitializeSListHead (Address: 0x1800535a8)
  • IsDebuggerPresent (Address: 0x180053250)
  • IsProcessorFeaturePresent (Address: 0x1800533b8)
  • IsWow64Process (Address: 0x180053288)
  • K32GetModuleFileNameExW (Address: 0x1800534a0)
  • LCIDToLocaleName (Address: 0x1800534b8)
  • LoadLibraryExW (Address: 0x180053290)
  • LoadLibraryW (Address: 0x180053568)
  • LocalAlloc (Address: 0x1800534d8)
  • LocalFree (Address: 0x1800534d0)
  • MoveFileExW (Address: 0x180053310)
  • MoveFileW (Address: 0x1800534c8)
  • OpenFileById (Address: 0x180053338)
  • OpenProcess (Address: 0x180053500)
  • OutputDebugStringW (Address: 0x1800533a0)
  • PostQueuedCompletionStatus (Address: 0x180053278)
  • Process32FirstW (Address: 0x1800532d8)
  • Process32NextW (Address: 0x1800532e0)
  • QueryPerformanceCounter (Address: 0x1800533b0)
  • RaiseException (Address: 0x180053398)
  • ReadDirectoryChangesW (Address: 0x1800532b8)
  • ReadFile (Address: 0x180053218)
  • RegisterApplicationRestart (Address: 0x180053328)
  • ReleaseMutex (Address: 0x180053458)
  • ReleaseSRWLockExclusive (Address: 0x180053370)
  • RemoveDirectoryW (Address: 0x180053220)
  • ReplaceFileW (Address: 0x180053318)
  • RtlCaptureContext (Address: 0x180053598)
  • RtlLookupFunctionEntry (Address: 0x180053590)
  • RtlVirtualUnwind (Address: 0x180053588)
  • SetDllDirectoryW (Address: 0x180053300)
  • SetFileAttributesW (Address: 0x180053228)
  • SetFileInformationByHandle (Address: 0x180053230)
  • SetFilePointer (Address: 0x180053238)
  • SetHandleInformation (Address: 0x180053258)
  • SetLastError (Address: 0x180053468)
  • SetProcessShutdownParameters (Address: 0x180053408)
  • SetThreadInformation (Address: 0x1800533f8)
  • SetThreadPriority (Address: 0x180053390)
  • SetUnhandledExceptionFilter (Address: 0x1800533c0)
  • Sleep (Address: 0x180053448)
  • SleepConditionVariableSRW (Address: 0x1800535c0)
  • SystemTimeToFileTime (Address: 0x1800534c0)
  • TerminateProcess (Address: 0x180053508)
  • UnhandledExceptionFilter (Address: 0x1800533c8)
  • VerifyVersionInfoW (Address: 0x180053470)
  • VerSetConditionMask (Address: 0x180053480)
  • WaitForMultipleObjects (Address: 0x180053440)
  • WaitForSingleObject (Address: 0x180053528)
  • WakeAllConditionVariable (Address: 0x1800535a0)
  • WideCharToMultiByte (Address: 0x180053488)
  • WritePrivateProfileStringW (Address: 0x1800532f8)
LoggingPlatform.DLL
  • ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x180053628)
  • ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x180053610)
  • ??0TransferScope@ScenarioTracking@@QEAA@QEBVITrace@1@@Z (Address: 0x1800535e8)
  • ??1TelemetryEvent@@QEAA@XZ (Address: 0x180053608)
  • ??1TransferScope@ScenarioTracking@@QEAA@XZ (Address: 0x1800535f0)
  • ?CaptureTrace@ScenarioTracking@@YA?AV?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@XZ (Address: 0x180053638)
  • ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x1800535e0)
  • ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x180053618)
  • ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x1800535d8)
  • ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800535f8)
  • ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x180053620)
  • ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x180053630)
  • ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x180053600)
MSVCP140.dll
  • _Cnd_broadcast (Address: 0x180053698)
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x1800536a0)
  • _Cnd_init_in_situ (Address: 0x180053660)
  • _Mtx_init_in_situ (Address: 0x1800537a8)
  • _Mtx_lock (Address: 0x180053650)
  • _Mtx_unlock (Address: 0x180053648)
  • _Query_perf_counter (Address: 0x180053678)
  • _Query_perf_frequency (Address: 0x180053680)
  • _Thrd_detach (Address: 0x180053690)
  • _Wcscoll (Address: 0x180053a60)
  • _Wcsxfrm (Address: 0x180053a68)
  • _Xtime_get_ticks (Address: 0x180053a58)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180053728)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180053760)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180053a80)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180053780)
  • ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x1800536f8)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180053720)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180053788)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x180053738)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180053a28)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180053a38)
  • ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x1800536e0)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x1800536e8)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x180053970)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180053948)
  • ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800538e0)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x180053868)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180053688)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180053658)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x180053a30)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180053a40)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800537b0)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800537d0)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1800537b8)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800537a0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800537c0)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180053730)
  • ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x180053708)
  • ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x180053700)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180053a70)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x180053a48)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180053940)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180053910)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1800539a8)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x180053998)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x180053960)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x180053870)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800537f8)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x180053798)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x180053a78)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x180053a50)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180053918)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800538e8)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800539b0)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800539a0)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180053968)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x180053878)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180053800)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x180053790)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x1800536f0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x1800536a8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x180053978)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x180053670)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180053980)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x180053668)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180053988)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800536c0)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x180053950)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x180053a90)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x180053758)
  • ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x180053a88)
  • ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180053890)
  • ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053818)
  • ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800538b0)
  • ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053838)
  • ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800538c8)
  • ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053850)
  • ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x180053938)
  • ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x180053908)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x1800537e0)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x180053990)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180053958)
  • ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x1800538b8)
  • ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x180053840)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800536b0)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x1800537d8)
  • ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x180053898)
  • ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053820)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x180053710)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x180053718)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800539b8)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800539e0)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x180053778)
  • ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800538a0)
  • ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053828)
  • ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800538a8)
  • ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ (Address: 0x180053830)
  • ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180053930)
  • ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x180053900)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180053750)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1800539c0)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800539e8)
  • ?setf@ios_base@std@@QEAAHH@Z (Address: 0x1800536d0)
  • ?setf@ios_base@std@@QEAAHHH@Z (Address: 0x1800536c8)
  • ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800538c0)
  • ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x180053848)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x1800538d0)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800538d8)
  • ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z (Address: 0x180053858)
  • ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x180053860)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x180053920)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800538f0)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180053748)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1800539d8)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x180053a00)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x180053740)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x180053880)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x180053808)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x180053888)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x180053810)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x180053a20)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180053a18)
  • ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x180053928)
  • ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ (Address: 0x1800538f8)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x180053770)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x180053768)
  • ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1800536d8)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1800539d0)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800539f8)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x1800537c8)
  • ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x1800536b8)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1800537f0)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x1800537e8)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1800539c8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800539f0)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x180053a10)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x180053a08)
ole32.dll
  • CoCreateGuid (Address: 0x180053fb0)
  • CoCreateInstance (Address: 0x180053fd0)
  • CoInitializeEx (Address: 0x180053fc8)
  • CoSetProxyBlanket (Address: 0x180053fd8)
  • CoTaskMemFree (Address: 0x180053ff0)
  • CoUninitialize (Address: 0x180053fc0)
  • CreateBindCtx (Address: 0x180053fa0)
  • CreateItemMoniker (Address: 0x180053fe0)
  • GetRunningObjectTable (Address: 0x180053fe8)
  • StringFromCLSID (Address: 0x180053fa8)
  • StringFromGUID2 (Address: 0x180053fb8)
OLEAUT32.dll
  • GetRecordInfoFromTypeInfo (Address: 0x180053aa8)
  • LoadRegTypeLib (Address: 0x180053ab0)
  • LoadTypeLib (Address: 0x180053aa0)
RPCRT4.dll
  • RpcBindingFree (Address: 0x180053af0)
  • RpcBindingFromStringBindingW (Address: 0x180053ae8)
  • RpcBindingSetAuthInfoExW (Address: 0x180053ae0)
  • RpcBindingVectorFree (Address: 0x180053b28)
  • RpcEpRegisterW (Address: 0x180053b08)
  • RpcEpUnregister (Address: 0x180053b10)
  • RpcServerInqBindings (Address: 0x180053ac8)
  • RpcServerInqCallAttributesW (Address: 0x180053b18)
  • RpcServerRegisterIfEx (Address: 0x180053b20)
  • RpcServerUnregisterIf (Address: 0x180053ac0)
  • RpcServerUseProtseqW (Address: 0x180053b00)
  • RpcStringBindingComposeW (Address: 0x180053ad8)
  • RpcStringFreeW (Address: 0x180053ad0)
  • UuidCreate (Address: 0x180053af8)
Secur32.dll
  • GetUserNameExW (Address: 0x180053c50)
SHELL32.dll
  • (Address: 0x180053b78)
  • CommandLineToArgvW (Address: 0x180053b48)
  • SHAssocEnumHandlers (Address: 0x180053b80)
  • SHChangeNotify (Address: 0x180053b50)
  • SHCreateDirectoryExW (Address: 0x180053b88)
  • SHCreateItemFromParsingName (Address: 0x180053b68)
  • ShellExecuteExW (Address: 0x180053b60)
  • SHFileOperationW (Address: 0x180053b40)
  • SHGetFolderPathAndSubDirW (Address: 0x180053b98)
  • SHGetFolderPathW (Address: 0x180053b90)
  • SHGetKnownFolderPath (Address: 0x180053ba8)
  • SHGetPropertyStoreFromParsingName (Address: 0x180053b70)
  • SHGetSpecialFolderPathW (Address: 0x180053b38)
  • SHParseDisplayName (Address: 0x180053b58)
  • SHSetKnownFolderPath (Address: 0x180053ba0)
SHLWAPI.dll
  • AssocQueryStringW (Address: 0x180053c10)
  • PathFileExistsW (Address: 0x180053bc8)
  • PathIsDirectoryEmptyW (Address: 0x180053bc0)
  • PathIsDirectoryW (Address: 0x180053be8)
  • PathIsPrefixW (Address: 0x180053be0)
  • PathRemoveFileSpecW (Address: 0x180053c00)
  • PathStripPathW (Address: 0x180053bf0)
  • SHCreateStreamOnFileW (Address: 0x180053c38)
  • SHDeleteKeyW (Address: 0x180053c08)
  • SHDeleteValueW (Address: 0x180053bb8)
  • SHGetValueA (Address: 0x180053c18)
  • SHGetValueW (Address: 0x180053bd0)
  • SHRegGetBoolUSValueW (Address: 0x180053c40)
  • SHRegGetPathW (Address: 0x180053c30)
  • SHRegGetUSValueW (Address: 0x180053bd8)
  • SHRegGetValueW (Address: 0x180053c28)
  • SHSetValueW (Address: 0x180053c20)
  • StrStrIW (Address: 0x180053bf8)
UpdateRingSettings.dll
  • ?GetECSConfigurationManager@@YAPEAVIECSConfigurationManager@@XZ (Address: 0x180053d38)
  • ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x180053d30)
USER32.dll
  • CloseClipboard (Address: 0x180053ca8)
  • CreateWindowExW (Address: 0x180053cc8)
  • DestroyWindow (Address: 0x180053cc0)
  • DispatchMessageW (Address: 0x180053cf8)
  • EnumWindows (Address: 0x180053c68)
  • GetClassNameW (Address: 0x180053c80)
  • GetMessageW (Address: 0x180053c90)
  • GetWindowThreadProcessId (Address: 0x180053c88)
  • OpenClipboard (Address: 0x180053cb0)
  • PostMessageW (Address: 0x180053c70)
  • PostThreadMessageW (Address: 0x180053d00)
  • RegisterClassW (Address: 0x180053cd0)
  • RegisterClipboardFormatW (Address: 0x180053c98)
  • RegisterPowerSettingNotification (Address: 0x180053cf0)
  • RegisterSuspendResumeNotification (Address: 0x180053ce0)
  • SendMessageTimeoutW (Address: 0x180053c60)
  • SetClipboardData (Address: 0x180053ca0)
  • ShowWindow (Address: 0x180053cb8)
  • SystemParametersInfoW (Address: 0x180053c78)
  • TranslateMessage (Address: 0x180053d08)
  • UnregisterPowerSettingNotification (Address: 0x180053ce8)
  • UnregisterSuspendResumeNotification (Address: 0x180053cd8)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x180053d20)
  • GetDefaultUserProfileDirectoryW (Address: 0x180053d18)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x180053df0)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180053d58)
  • __current_exception (Address: 0x180053d48)
  • __current_exception_context (Address: 0x180053d78)
  • __RTDynamicCast (Address: 0x180053dc0)
  • __std_exception_copy (Address: 0x180053dc8)
  • __std_exception_destroy (Address: 0x180053de0)
  • __std_terminate (Address: 0x180053dd0)
  • __std_type_info_compare (Address: 0x180053d80)
  • __std_type_info_destroy_list (Address: 0x180053d50)
  • __std_type_info_name (Address: 0x180053db8)
  • _CxxThrowException (Address: 0x180053da8)
  • _purecall (Address: 0x180053db0)
  • memcmp (Address: 0x180053d70)
  • memcpy (Address: 0x180053da0)
  • memmove (Address: 0x180053d98)
  • memset (Address: 0x180053d90)
  • strchr (Address: 0x180053dd8)
  • wcschr (Address: 0x180053d88)
  • wcsrchr (Address: 0x180053d68)
  • wcsstr (Address: 0x180053d60)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x180053e10)
  • GetFileVersionInfoW (Address: 0x180053e08)
  • VerQueryValueW (Address: 0x180053e00)
WININET.dll
  • InternetCheckConnectionW (Address: 0x180053e20)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x180053e30)
  • WTSFreeMemory (Address: 0x180053e48)
  • WTSQuerySessionInformationW (Address: 0x180053e38)
  • WTSQueryUserToken (Address: 0x180053e40)