OneDrive.Sync.Service.HttpSvr.dll

Description: Microsoft OneDrive Sync Service HTTP Server

Authors: © Microsoft Corporation. All rights reserved.

Version: 25.209.1026.2

Architecture: 64-bit

Operating System: Windows

SHA256: 1edcdfe10a7bf42d86f4d3a901e51063

File Size: 1.2 MB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • SendRequestResponse (Ordinal: 1, Address: 0x10560)
  • SendWebSocketMessage (Ordinal: 2, Address: 0x106a0)
  • SetBeginRequestHandler (Ordinal: 3, Address: 0x10490)
  • SetCORSRequestHandler (Ordinal: 4, Address: 0x102f0)
  • SetRequestValidator (Ordinal: 5, Address: 0x103c0)
  • SetWebSocketMessageHandler (Ordinal: 6, Address: 0x105d0)
  • StartHttpServer (Ordinal: 7, Address: 0xffd0)
  • StopHttpServer (Ordinal: 8, Address: 0x101e0)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x1800de1a8)
  • AllocateAndInitializeSid (Address: 0x1800de0f8)
  • ChangeServiceConfig2W (Address: 0x1800de098)
  • ChangeServiceConfigW (Address: 0x1800de0a0)
  • CloseServiceHandle (Address: 0x1800de090)
  • ControlService (Address: 0x1800de088)
  • ConvertSidToStringSidW (Address: 0x1800de030)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800de108)
  • CreateProcessAsUserW (Address: 0x1800de100)
  • CreateProcessWithTokenW (Address: 0x1800de018)
  • CreateServiceW (Address: 0x1800de080)
  • CreateWellKnownSid (Address: 0x1800de0f0)
  • CryptAcquireContextW (Address: 0x1800de138)
  • CryptCreateHash (Address: 0x1800de120)
  • CryptDestroyHash (Address: 0x1800de110)
  • CryptGetHashParam (Address: 0x1800de128)
  • CryptHashData (Address: 0x1800de118)
  • CryptReleaseContext (Address: 0x1800de130)
  • DeleteService (Address: 0x1800de078)
  • DuplicateTokenEx (Address: 0x1800de0e8)
  • FreeSid (Address: 0x1800de0e0)
  • GetAclInformation (Address: 0x1800de0d8)
  • GetNamedSecurityInfoW (Address: 0x1800de010)
  • GetTokenInformation (Address: 0x1800de1a0)
  • GetUserNameW (Address: 0x1800de020)
  • LookupPrivilegeValueW (Address: 0x1800de198)
  • OpenProcessToken (Address: 0x1800de1b0)
  • OpenSCManagerW (Address: 0x1800de070)
  • OpenServiceW (Address: 0x1800de068)
  • QueryServiceConfigW (Address: 0x1800de060)
  • QueryServiceStatus (Address: 0x1800de058)
  • QueryServiceStatusEx (Address: 0x1800de050)
  • RegCloseKey (Address: 0x1800de190)
  • RegCreateKeyExW (Address: 0x1800de188)
  • RegCreateKeyTransactedW (Address: 0x1800de0d0)
  • RegDeleteKeyExW (Address: 0x1800de0c8)
  • RegDeleteTreeW (Address: 0x1800de0a8)
  • RegDeleteValueW (Address: 0x1800de180)
  • RegEnumKeyExW (Address: 0x1800de178)
  • RegEnumKeyW (Address: 0x1800de0c0)
  • RegEnumValueW (Address: 0x1800de170)
  • RegGetValueW (Address: 0x1800de140)
  • RegisterServiceCtrlHandlerW (Address: 0x1800de048)
  • RegLoadKeyW (Address: 0x1800de0b8)
  • RegOpenKeyExW (Address: 0x1800de168)
  • RegQueryInfoKeyW (Address: 0x1800de160)
  • RegQueryValueExW (Address: 0x1800de158)
  • RegSetKeyValueW (Address: 0x1800de148)
  • RegSetValueExW (Address: 0x1800de150)
  • RegUnLoadKeyW (Address: 0x1800de0b0)
  • SetEntriesInAclW (Address: 0x1800de000)
  • SetFileSecurityW (Address: 0x1800de028)
  • SetNamedSecurityInfoW (Address: 0x1800de1b8)
  • SetServiceStatus (Address: 0x1800de040)
  • StartServiceCtrlDispatcherW (Address: 0x1800de038)
  • StartServiceW (Address: 0x1800de008)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x1800def78)
  • wcstoll (Address: 0x1800def70)
  • wcstoul (Address: 0x1800def68)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x1800def98)
  • free (Address: 0x1800def88)
  • malloc (Address: 0x1800defa0)
  • realloc (Address: 0x1800def90)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x1800defb0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x1800df000)
  • _beginthreadex (Address: 0x1800df008)
  • _cexit (Address: 0x1800defe8)
  • _configure_narrow_argv (Address: 0x1800df018)
  • _crt_atexit (Address: 0x1800deff0)
  • _errno (Address: 0x1800df038)
  • _execute_onexit_table (Address: 0x1800deff8)
  • _initialize_narrow_environment (Address: 0x1800df020)
  • _initialize_onexit_table (Address: 0x1800df028)
  • _initterm (Address: 0x1800defd8)
  • _initterm_e (Address: 0x1800defd0)
  • _invalid_parameter_noinfo_noreturn (Address: 0x1800defe0)
  • _register_onexit_function (Address: 0x1800df030)
  • _seh_filter_dll (Address: 0x1800df010)
  • strerror (Address: 0x1800defc8)
  • terminate (Address: 0x1800defc0)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsprintf (Address: 0x1800df048)
  • __stdio_common_vswprintf (Address: 0x1800df060)
  • _wfopen_s (Address: 0x1800df058)
  • fclose (Address: 0x1800df050)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsdup (Address: 0x1800df078)
  • _wcsicmp (Address: 0x1800df0a0)
  • _wcsnicmp (Address: 0x1800df0a8)
  • strncpy (Address: 0x1800df088)
  • toupper (Address: 0x1800df070)
  • towlower (Address: 0x1800df090)
  • towupper (Address: 0x1800df098)
  • wcstok_s (Address: 0x1800df080)
api-ms-win-crt-time-l1-1-0.dll
  • _gmtime64_s (Address: 0x1800df0c0)
  • _localtime64_s (Address: 0x1800df0c8)
  • _time64 (Address: 0x1800df0b8)
CRYPT32.dll
  • CertFindExtension (Address: 0x1800de1d0)
  • CryptBinaryToStringW (Address: 0x1800de1d8)
  • CryptStringToBinaryW (Address: 0x1800de1c8)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1800de608)
  • CancelIoEx (Address: 0x1800de520)
  • CloseHandle (Address: 0x1800de560)
  • CompareStringOrdinal (Address: 0x1800de368)
  • CopyFileW (Address: 0x1800de3a8)
  • CreateDirectoryW (Address: 0x1800de260)
  • CreateEventW (Address: 0x1800de540)
  • CreateFileW (Address: 0x1800de268)
  • CreateIoCompletionPort (Address: 0x1800de598)
  • CreateMutexW (Address: 0x1800de4d0)
  • CreatePipe (Address: 0x1800de318)
  • CreateProcessW (Address: 0x1800de240)
  • CreateSymbolicLinkW (Address: 0x1800de360)
  • CreateToolhelp32Snapshot (Address: 0x1800de370)
  • CreateWaitableTimerW (Address: 0x1800de518)
  • DeleteCriticalSection (Address: 0x1800de5d0)
  • DeleteFileW (Address: 0x1800de4e8)
  • DeviceIoControl (Address: 0x1800de320)
  • DisableThreadLibraryCalls (Address: 0x1800de480)
  • EnterCriticalSection (Address: 0x1800de5c8)
  • ExpandEnvironmentStringsW (Address: 0x1800de228)
  • FindClose (Address: 0x1800de4e0)
  • FindFirstFileNameW (Address: 0x1800de300)
  • FindFirstFileW (Address: 0x1800de4d8)
  • FindFirstVolumeW (Address: 0x1800de270)
  • FindNextVolumeW (Address: 0x1800de278)
  • FindVolumeClose (Address: 0x1800de280)
  • FormatMessageA (Address: 0x1800de5e8)
  • FormatMessageW (Address: 0x1800de5f0)
  • FreeLibrary (Address: 0x1800de490)
  • GetCommandLineW (Address: 0x1800de218)
  • GetCompressedFileSizeW (Address: 0x1800de2f8)
  • GetComputerNameW (Address: 0x1800de3c0)
  • GetCurrentProcess (Address: 0x1800de4c8)
  • GetCurrentProcessId (Address: 0x1800de4c0)
  • GetCurrentThreadId (Address: 0x1800de400)
  • GetDiskFreeSpaceExW (Address: 0x1800de288)
  • GetDllDirectoryW (Address: 0x1800de3e8)
  • GetEnvironmentVariableW (Address: 0x1800de220)
  • GetExitCodeProcess (Address: 0x1800de238)
  • GetFileAttributesExW (Address: 0x1800de298)
  • GetFileAttributesW (Address: 0x1800de290)
  • GetFileInformationByHandle (Address: 0x1800de2a0)
  • GetFileInformationByHandleEx (Address: 0x1800de3d0)
  • GetFileSize (Address: 0x1800de2a8)
  • GetFileSizeEx (Address: 0x1800de2b0)
  • GetFileType (Address: 0x1800de2b8)
  • GetFinalPathNameByHandleW (Address: 0x1800de2c0)
  • GetLastError (Address: 0x1800de5e0)
  • GetLongPathNameW (Address: 0x1800de208)
  • GetModuleFileNameW (Address: 0x1800de450)
  • GetModuleHandleA (Address: 0x1800de5a8)
  • GetModuleHandleW (Address: 0x1800de3e0)
  • GetPrivateProfileStringW (Address: 0x1800de390)
  • GetProcAddress (Address: 0x1800de5a0)
  • GetProcessIoCounters (Address: 0x1800de388)
  • GetProcessTimes (Address: 0x1800de230)
  • GetProductInfo (Address: 0x1800de1f8)
  • GetQueuedCompletionStatus (Address: 0x1800de578)
  • GetSystemTime (Address: 0x1800de4a8)
  • GetSystemTimeAsFileTime (Address: 0x1800de4a0)
  • GetSystemTimes (Address: 0x1800de250)
  • GetTickCount64 (Address: 0x1800de408)
  • GetUserDefaultLCID (Address: 0x1800de428)
  • GetUserGeoID (Address: 0x1800de308)
  • GetVersionExW (Address: 0x1800de498)
  • GetVolumePathNameW (Address: 0x1800de2c8)
  • GlobalAlloc (Address: 0x1800de338)
  • GlobalFree (Address: 0x1800de350)
  • GlobalLock (Address: 0x1800de348)
  • GlobalUnlock (Address: 0x1800de340)
  • HeapAlloc (Address: 0x1800de500)
  • HeapFree (Address: 0x1800de4f8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800de5d8)
  • InitializeCriticalSectionEx (Address: 0x1800de4f0)
  • InitializeSListHead (Address: 0x1800de488)
  • IsDebuggerPresent (Address: 0x1800de620)
  • IsProcessorFeaturePresent (Address: 0x1800de470)
  • IsWow64Process (Address: 0x1800de328)
  • K32GetModuleFileNameExW (Address: 0x1800de1e8)
  • LCIDToLocaleName (Address: 0x1800de3f0)
  • LeaveCriticalSection (Address: 0x1800de5c0)
  • LoadLibraryExW (Address: 0x1800de330)
  • LoadLibraryW (Address: 0x1800de448)
  • LocalAlloc (Address: 0x1800de440)
  • LocalFree (Address: 0x1800de5f8)
  • MoveFileExW (Address: 0x1800de3b0)
  • MoveFileW (Address: 0x1800de438)
  • MultiByteToWideChar (Address: 0x1800de510)
  • OpenFileById (Address: 0x1800de3d8)
  • OpenProcess (Address: 0x1800de4b0)
  • OutputDebugStringW (Address: 0x1800de618)
  • PostQueuedCompletionStatus (Address: 0x1800de5b8)
  • Process32FirstW (Address: 0x1800de378)
  • Process32NextW (Address: 0x1800de380)
  • QueryPerformanceCounter (Address: 0x1800de478)
  • QueueUserAPC (Address: 0x1800de538)
  • ReadDirectoryChangesW (Address: 0x1800de358)
  • ReadFile (Address: 0x1800de2d0)
  • RegisterApplicationRestart (Address: 0x1800de3c8)
  • ReleaseMutex (Address: 0x1800de210)
  • ReleaseSRWLockExclusive (Address: 0x1800de610)
  • RemoveDirectoryW (Address: 0x1800de2d8)
  • ReplaceFileW (Address: 0x1800de3b8)
  • RtlCaptureContext (Address: 0x1800de418)
  • RtlLookupFunctionEntry (Address: 0x1800de420)
  • RtlVirtualUnwind (Address: 0x1800de458)
  • SetDllDirectoryW (Address: 0x1800de3a0)
  • SetEvent (Address: 0x1800de548)
  • SetFileAttributesW (Address: 0x1800de2e0)
  • SetFileInformationByHandle (Address: 0x1800de2e8)
  • SetFilePointer (Address: 0x1800de2f0)
  • SetHandleInformation (Address: 0x1800de310)
  • SetLastError (Address: 0x1800de570)
  • SetProcessShutdownParameters (Address: 0x1800de248)
  • SetThreadInformation (Address: 0x1800de258)
  • SetUnhandledExceptionFilter (Address: 0x1800de468)
  • SetWaitableTimer (Address: 0x1800de568)
  • Sleep (Address: 0x1800de508)
  • SleepConditionVariableSRW (Address: 0x1800de3f8)
  • SleepEx (Address: 0x1800de550)
  • SystemTimeToFileTime (Address: 0x1800de430)
  • TerminateProcess (Address: 0x1800de4b8)
  • TerminateThread (Address: 0x1800de530)
  • TlsAlloc (Address: 0x1800de580)
  • TlsFree (Address: 0x1800de588)
  • TlsGetValue (Address: 0x1800de5b0)
  • TlsSetValue (Address: 0x1800de590)
  • UnhandledExceptionFilter (Address: 0x1800de460)
  • VerifyVersionInfoW (Address: 0x1800de200)
  • VerSetConditionMask (Address: 0x1800de1f0)
  • WaitForMultipleObjects (Address: 0x1800de528)
  • WaitForSingleObject (Address: 0x1800de558)
  • WakeAllConditionVariable (Address: 0x1800de410)
  • WideCharToMultiByte (Address: 0x1800de600)
  • WritePrivateProfileStringW (Address: 0x1800de398)
LoggingPlatform.DLL
  • ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x1800de660)
  • ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x1800de648)
  • ??1TelemetryEvent@@QEAA@XZ (Address: 0x1800de640)
  • ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x1800de670)
  • ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x1800de650)
  • ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x1800de668)
  • ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800de630)
  • ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x1800de658)
  • ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x1800de638)
MSVCP140.dll
  • _Cnd_broadcast (Address: 0x1800de978)
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x1800deae0)
  • _Cnd_init_in_situ (Address: 0x1800de958)
  • _Mtx_init_in_situ (Address: 0x1800de950)
  • _Mtx_lock (Address: 0x1800de968)
  • _Mtx_unlock (Address: 0x1800de970)
  • _Query_perf_counter (Address: 0x1800de980)
  • _Query_perf_frequency (Address: 0x1800de988)
  • _Thrd_id (Address: 0x1800dead8)
  • _Thrd_join (Address: 0x1800dead0)
  • _Wcscoll (Address: 0x1800de6e0)
  • _Wcsxfrm (Address: 0x1800de6d8)
  • _Xtime_get_ticks (Address: 0x1800de6e8)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1800de9b8)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x1800de998)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x1800de9b0)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x1800de9a8)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x1800de9c0)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1800de990)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x1800de9a0)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800de738)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800de890)
  • ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800de8a8)
  • ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800de908)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1800de6c8)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800de928)
  • ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x1800de8e0)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800de730)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800de8c0)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x1800de788)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800de750)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800dea38)
  • ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x1800de8c8)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x1800de8d0)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x1800de7a8)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x1800dea08)
  • ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x1800de7f0)
  • ?_Random_device@std@@YAIXZ (Address: 0x1800deae8)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x1800de960)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x1800de748)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800dea28)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800deac8)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800deab8)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1800de718)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800de948)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800deac0)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1800de698)
  • ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x1800de8f8)
  • ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x1800de8f0)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1800de6d0)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800deaf0)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800de7c0)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800dea88)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1800de6f8)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1800dea98)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1800de7b8)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x1800de878)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800dea90)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1800de6b8)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x1800de8e8)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x1800de938)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800de7e8)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800de8b8)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800de6f0)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800dea50)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800de7b0)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x1800de870)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800dea58)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x1800de6b0)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x1800de8d8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x1800de680)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x1800de708)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800dea48)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x1800de798)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x1800de940)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800de700)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800de7a0)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x1800de710)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z (Address: 0x1800deaa8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800deaa0)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800de930)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x1800de888)
  • ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x1800de6c0)
  • ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x1800deab0)
  • ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de840)
  • ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de820)
  • ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de808)
  • ?fail@ios_base@std@@QEBA_NXZ (Address: 0x1800de920)
  • ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x1800de7c8)
  • ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ (Address: 0x1800de9d8)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x1800dea00)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800de790)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800dea30)
  • ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x1800de818)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x1800de918)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x1800dea18)
  • ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de838)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x1800de690)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x1800de720)
  • ?id@?$ctype@D@std@@2V0locale@2@A (Address: 0x1800de728)
  • ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A (Address: 0x1800de900)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800de740)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800dea60)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x1800de6a8)
  • ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de830)
  • ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ (Address: 0x1800de828)
  • ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z (Address: 0x1800de910)
  • ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x1800de7d0)
  • ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x1800de9e0)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800de868)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x1800de780)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800dea68)
  • ?setf@ios_base@std@@QEAAHH@Z (Address: 0x1800de880)
  • ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800de810)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z (Address: 0x1800de800)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x1800de7f8)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x1800de7e0)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800de9c8)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800de860)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x1800de770)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800dea80)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x1800de858)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x1800de850)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800de9e8)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x1800de848)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800de9f0)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x1800de758)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800dea10)
  • ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x1800de7d8)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1800de8a0)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x1800de6a0)
  • ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x1800de898)
  • ?toupper@?$ctype@D@std@@QEBADD@Z (Address: 0x1800de8b0)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x1800de768)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800dea78)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x1800dea20)
  • ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x1800de688)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1800de9d0)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x1800dea40)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x1800de778)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800dea70)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x1800de760)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800de9f8)
ole32.dll
  • CoCreateGuid (Address: 0x1800df100)
  • CoCreateInstance (Address: 0x1800df118)
  • CoInitializeEx (Address: 0x1800df0f0)
  • CoSetProxyBlanket (Address: 0x1800df108)
  • CoTaskMemFree (Address: 0x1800df120)
  • CoUninitialize (Address: 0x1800df0f8)
  • CreateBindCtx (Address: 0x1800df0e8)
  • CreateItemMoniker (Address: 0x1800df0d8)
  • GetRunningObjectTable (Address: 0x1800df0e0)
  • StringFromCLSID (Address: 0x1800df128)
  • StringFromGUID2 (Address: 0x1800df110)
OLEAUT32.dll
  • GetRecordInfoFromTypeInfo (Address: 0x1800deb00)
  • LoadRegTypeLib (Address: 0x1800deb08)
  • LoadTypeLib (Address: 0x1800deb10)
RPCRT4.dll
  • RpcBindingFree (Address: 0x1800deb80)
  • RpcBindingFromStringBindingW (Address: 0x1800deb78)
  • RpcBindingSetAuthInfoExW (Address: 0x1800deb38)
  • RpcBindingVectorFree (Address: 0x1800deb70)
  • RpcEpRegisterW (Address: 0x1800deb30)
  • RpcEpUnregister (Address: 0x1800deb28)
  • RpcServerInqBindings (Address: 0x1800deb58)
  • RpcServerInqCallAttributesW (Address: 0x1800deb20)
  • RpcServerRegisterIfEx (Address: 0x1800deb50)
  • RpcServerUnregisterIf (Address: 0x1800deb48)
  • RpcServerUseProtseqW (Address: 0x1800deb40)
  • RpcStringBindingComposeW (Address: 0x1800deb68)
  • RpcStringFreeW (Address: 0x1800deb60)
  • UuidCreate (Address: 0x1800deb88)
Secur32.dll
  • GetUserNameExW (Address: 0x1800decb0)
SHELL32.dll
  • (Address: 0x1800debe0)
  • CommandLineToArgvW (Address: 0x1800debb8)
  • SHAssocEnumHandlers (Address: 0x1800debb0)
  • SHChangeNotify (Address: 0x1800debd8)
  • SHCreateDirectoryExW (Address: 0x1800dec00)
  • SHCreateItemFromParsingName (Address: 0x1800deba0)
  • ShellExecuteExW (Address: 0x1800deb98)
  • SHFileOperationW (Address: 0x1800debc0)
  • SHGetFolderPathAndSubDirW (Address: 0x1800debf0)
  • SHGetFolderPathW (Address: 0x1800debf8)
  • SHGetKnownFolderPath (Address: 0x1800debd0)
  • SHGetPropertyStoreFromParsingName (Address: 0x1800deba8)
  • SHGetSpecialFolderPathW (Address: 0x1800debc8)
  • SHParseDisplayName (Address: 0x1800dec08)
  • SHSetKnownFolderPath (Address: 0x1800debe8)
SHLWAPI.dll
  • AssocQueryStringW (Address: 0x1800dec28)
  • PathFileExistsW (Address: 0x1800deca0)
  • PathIsDirectoryEmptyW (Address: 0x1800dec18)
  • PathIsDirectoryW (Address: 0x1800dec98)
  • PathIsPrefixW (Address: 0x1800dec78)
  • PathRemoveFileSpecW (Address: 0x1800dec68)
  • PathStripPathW (Address: 0x1800dec90)
  • SHCreateStreamOnFileW (Address: 0x1800dec20)
  • SHDeleteKeyW (Address: 0x1800dec60)
  • SHDeleteValueW (Address: 0x1800dec58)
  • SHGetValueA (Address: 0x1800dec50)
  • SHGetValueW (Address: 0x1800dec88)
  • SHRegGetBoolUSValueW (Address: 0x1800dec30)
  • SHRegGetPathW (Address: 0x1800dec38)
  • SHRegGetUSValueW (Address: 0x1800dec80)
  • SHRegGetValueW (Address: 0x1800dec40)
  • SHSetValueW (Address: 0x1800dec48)
  • StrStrIW (Address: 0x1800dec70)
UpdateRingSettings.dll
  • ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x1800ded88)
USER32.dll
  • CloseClipboard (Address: 0x1800ded58)
  • CreateWindowExW (Address: 0x1800ded60)
  • DestroyWindow (Address: 0x1800decf0)
  • DispatchMessageW (Address: 0x1800ded28)
  • EnumWindows (Address: 0x1800dece0)
  • GetClassNameW (Address: 0x1800decd8)
  • GetMessageW (Address: 0x1800dece8)
  • GetWindowThreadProcessId (Address: 0x1800decd0)
  • OpenClipboard (Address: 0x1800ded08)
  • PostMessageW (Address: 0x1800ded10)
  • RegisterClassW (Address: 0x1800ded50)
  • RegisterClipboardFormatW (Address: 0x1800ded18)
  • RegisterPowerSettingNotification (Address: 0x1800ded30)
  • RegisterSuspendResumeNotification (Address: 0x1800ded40)
  • SendMessageTimeoutW (Address: 0x1800decc0)
  • SetClipboardData (Address: 0x1800ded20)
  • ShowWindow (Address: 0x1800decf8)
  • SystemParametersInfoW (Address: 0x1800decc8)
  • TranslateMessage (Address: 0x1800ded00)
  • UnregisterPowerSettingNotification (Address: 0x1800ded38)
  • UnregisterSuspendResumeNotification (Address: 0x1800ded48)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x1800ded78)
  • GetDefaultUserProfileDirectoryW (Address: 0x1800ded70)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x1800dee38)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x1800dee08)
  • __current_exception (Address: 0x1800dee28)
  • __current_exception_context (Address: 0x1800dedb0)
  • __RTDynamicCast (Address: 0x1800deda0)
  • __std_exception_copy (Address: 0x1800dedf8)
  • __std_exception_destroy (Address: 0x1800dedf0)
  • __std_terminate (Address: 0x1800dee00)
  • __std_type_info_compare (Address: 0x1800dedd8)
  • __std_type_info_destroy_list (Address: 0x1800dede0)
  • _CxxThrowException (Address: 0x1800dee18)
  • _purecall (Address: 0x1800dede8)
  • memcmp (Address: 0x1800dee20)
  • memcpy (Address: 0x1800dedc8)
  • memmove (Address: 0x1800dedc0)
  • memset (Address: 0x1800dedb8)
  • strchr (Address: 0x1800dedd0)
  • wcschr (Address: 0x1800dee10)
  • wcsrchr (Address: 0x1800ded98)
  • wcsstr (Address: 0x1800deda8)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x1800dee50)
  • GetFileVersionInfoW (Address: 0x1800dee48)
  • VerQueryValueW (Address: 0x1800dee58)
WININET.dll
  • InternetCheckConnectionW (Address: 0x1800dee68)
WS2_32.dll
  • __WSAFDIsSet (Address: 0x1800dee90)
  • accept (Address: 0x1800dee88)
  • bind (Address: 0x1800deee0)
  • closesocket (Address: 0x1800deef8)
  • connect (Address: 0x1800dee80)
  • getsockname (Address: 0x1800dee78)
  • htonl (Address: 0x1800def08)
  • htons (Address: 0x1800deea8)
  • ioctlsocket (Address: 0x1800def00)
  • listen (Address: 0x1800deee8)
  • select (Address: 0x1800dee98)
  • setsockopt (Address: 0x1800def18)
  • shutdown (Address: 0x1800deed0)
  • WSACleanup (Address: 0x1800deec0)
  • WSAGetLastError (Address: 0x1800deea0)
  • WSARecv (Address: 0x1800def10)
  • WSASend (Address: 0x1800deef0)
  • WSASetLastError (Address: 0x1800deeb0)
  • WSASocketW (Address: 0x1800deed8)
  • WSAStartup (Address: 0x1800deec8)
  • WSAStringToAddressW (Address: 0x1800deeb8)
WSOCK32.dll
  • AcceptEx (Address: 0x1800def28)
  • GetAcceptExSockaddrs (Address: 0x1800def30)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x1800def50)
  • WTSFreeMemory (Address: 0x1800def40)
  • WTSQuerySessionInformationW (Address: 0x1800def58)
  • WTSQueryUserToken (Address: 0x1800def48)