WnsClientApi.dll
Description: OneDrive WNS Client Library
Authors: © Microsoft Corporation. All rights reserved.
Version: 25.209.1026.2
Architecture: 64-bit
Operating System: Windows
SHA256: 7ee1c2b830b58d9a515ede1712efea4e
File Size: 895.4 KB
Uploaded At: Dec. 4, 2025, 6:14 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ??0LogActivityBulkScenario@QoS@@QEAA@XZ (Ordinal: 1, Address: 0x473f0)
- ??0QosSyncWrapperConfig@QoS@@QEAA@XZ (Ordinal: 2, Address: 0x45930)
- ??0ScenarioArchiveItemQosWrapper@QoS@@QEAA@XZ (Ordinal: 3, Address: 0x47610)
- ??0ScenarioGetOdbLicenseEnforcementWarningContext@QoS@@QEAA@XZ (Ordinal: 4, Address: 0x47500)
- ??0ScenarioQosClientPolicy@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 5, Address: 0x45a30)
- ??0ScenarioQosConnectingToWns@QoS@@QEAA@XZ (Ordinal: 6, Address: 0x2fc0)
- ??0ScenarioQosDownloadFile@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N@Z (Ordinal: 7, Address: 0x45f50)
- ??0ScenarioQosDownloadSignature@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 8, Address: 0x46050)
- ??0ScenarioQosGetItemByPath@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 9, Address: 0x45b30)
- ??0ScenarioQosGetPlaceholderThumbnail@QoS@@QEAA@XZ (Ordinal: 10, Address: 0x46f30)
- ??0ScenarioQosGetSpecialFolderInfo@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 11, Address: 0x46800)
- ??0ScenarioQosLockVault@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 12, Address: 0x46c90)
- ??0ScenarioQosMountAddedFolder@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 13, Address: 0x47040)
- ??0ScenarioQosPlaceholderDeletesRestore@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 14, Address: 0x47200)
- ??0ScenarioQosPollingChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 15, Address: 0x45de0)
- ??0ScenarioQosRetrieveQuotaState@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 16, Address: 0x46450)
- ??0ScenarioQosRetrieveSpaceUsed@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 17, Address: 0x46560)
- ??0ScenarioQosRetrieveVaultKey@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 18, Address: 0x46e50)
- ??0ScenarioQosSelectiveSyncEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 19, Address: 0x45e70)
- ??0ScenarioQosSetFolderColor@QoS@@QEAA@XZ (Ordinal: 20, Address: 0x472e0)
- ??0ScenarioQosShutdown@QoS@@QEAA@XZ (Ordinal: 21, Address: 0x3110)
- ??0ScenarioQosStartup@QoS@@QEAA@XZ (Ordinal: 22, Address: 0x3030)
- ??0ScenarioQosStartupChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 23, Address: 0x45cc0)
- ??0ScenarioQosStorageProvisioning@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 24, Address: 0x45950)
- ??0ScenarioQosStoreVaultKey@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 25, Address: 0x46d70)
- ??0ScenarioQosSubScopeMapping@QoS@@QEAA@XZ (Ordinal: 26, Address: 0x468e0)
- ??0ScenarioQosSyncVerification@QoS@@QEAA@XZ (Ordinal: 27, Address: 0x46670)
- ??0ScenarioQosSyncVerification@QoS@@QEAA@_N@Z (Ordinal: 28, Address: 0x466e0)
- ??0ScenarioQosUnmountAddedFolder@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 29, Address: 0x47120)
- ??0ScenarioQosUploadCrossScopeCopy@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 30, Address: 0x469f0)
- ??0ScenarioQosUploadFile@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N@Z (Ordinal: 31, Address: 0x46130)
- ??0ScenarioQosUploadMetadata@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N11@Z (Ordinal: 32, Address: 0x46340)
- ??0ScenarioQosUploadTransferTest@QoS@@QEAA@XZ (Ordinal: 33, Address: 0x46230)
- ??0ScenarioQosVaultInitialization@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 34, Address: 0x46ad0)
- ??0ScenarioQosVaultUnlock@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 35, Address: 0x46bb0)
- ??0ScenarioQosWNSNotificationChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 36, Address: 0x45d50)
- ??0ScenarioUnarchiveItemQosWrapper@QoS@@QEAA@XZ (Ordinal: 37, Address: 0x47720)
- ??1LogActivityBulkScenario@QoS@@UEAA@XZ (Ordinal: 38, Address: 0x47450)
- ??1ScenarioArchiveItemQosWrapper@QoS@@UEAA@XZ (Ordinal: 39, Address: 0x47670)
- ??1ScenarioGetOdbLicenseEnforcementWarningContext@QoS@@UEAA@XZ (Ordinal: 40, Address: 0x47560)
- ??1ScenarioQosChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 41, Address: 0x45c10)
- ??1ScenarioQosClientPolicy@QoS@@UEAA@XZ (Ordinal: 42, Address: 0x45a80)
- ??1ScenarioQosDownloadFile@QoS@@UEAA@XZ (Ordinal: 43, Address: 0x45fa0)
- ??1ScenarioQosDownloadSignature@QoS@@UEAA@XZ (Ordinal: 44, Address: 0x46080)
- ??1ScenarioQosGetItemByPath@QoS@@UEAA@XZ (Ordinal: 45, Address: 0x45b60)
- ??1ScenarioQosGetPlaceholderThumbnail@QoS@@UEAA@XZ (Ordinal: 46, Address: 0x46f90)
- ??1ScenarioQosGetSpecialFolderInfo@QoS@@UEAA@XZ (Ordinal: 47, Address: 0x46830)
- ??1ScenarioQosLockVault@QoS@@UEAA@XZ (Ordinal: 48, Address: 0x46cc0)
- ??1ScenarioQosMountAddedFolder@QoS@@UEAA@XZ (Ordinal: 49, Address: 0x47070)
- ??1ScenarioQosPlaceholderDeletesRestore@QoS@@UEAA@XZ (Ordinal: 50, Address: 0x47230)
- ??1ScenarioQosPollingChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 51, Address: 0x45c10)
- ??1ScenarioQosRetrieveQuotaState@QoS@@UEAA@XZ (Ordinal: 52, Address: 0x464b0)
- ??1ScenarioQosRetrieveSpaceUsed@QoS@@UEAA@XZ (Ordinal: 53, Address: 0x465c0)
- ??1ScenarioQosRetrieveVaultKey@QoS@@UEAA@XZ (Ordinal: 54, Address: 0x46e80)
- ??1ScenarioQosSelectiveSyncEnumeration@QoS@@UEAA@XZ (Ordinal: 55, Address: 0x45ea0)
- ??1ScenarioQosSetFolderColor@QoS@@UEAA@XZ (Ordinal: 56, Address: 0x47340)
- ??1ScenarioQosShutdown@QoS@@UEAA@XZ (Ordinal: 57, Address: 0x3140)
- ??1ScenarioQosStartup@QoS@@UEAA@XZ (Ordinal: 58, Address: 0x3060)
- ??1ScenarioQosStartupChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 59, Address: 0x45c10)
- ??1ScenarioQosStorageProvisioning@QoS@@UEAA@XZ (Ordinal: 60, Address: 0x45980)
- ??1ScenarioQosStoreVaultKey@QoS@@UEAA@XZ (Ordinal: 61, Address: 0x46da0)
- ??1ScenarioQosSubScopeMapping@QoS@@UEAA@XZ (Ordinal: 62, Address: 0x46940)
- ??1ScenarioQosSyncVerification@QoS@@UEAA@XZ (Ordinal: 63, Address: 0x46750)
- ??1ScenarioQosUnmountAddedFolder@QoS@@UEAA@XZ (Ordinal: 64, Address: 0x47150)
- ??1ScenarioQosUploadCrossScopeCopy@QoS@@UEAA@XZ (Ordinal: 65, Address: 0x46a20)
- ??1ScenarioQosUploadFile@QoS@@UEAA@XZ (Ordinal: 66, Address: 0x46180)
- ??1ScenarioQosUploadMetadata@QoS@@UEAA@XZ (Ordinal: 67, Address: 0x463a0)
- ??1ScenarioQosUploadTransferTest@QoS@@UEAA@XZ (Ordinal: 68, Address: 0x46290)
- ??1ScenarioQosVaultInitialization@QoS@@UEAA@XZ (Ordinal: 69, Address: 0x46b00)
- ??1ScenarioQosVaultUnlock@QoS@@UEAA@XZ (Ordinal: 70, Address: 0x46be0)
- ??1ScenarioQosWNSNotificationChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 71, Address: 0x45c10)
- ??1ScenarioUnarchiveItemQosWrapper@QoS@@UEAA@XZ (Ordinal: 72, Address: 0x47780)
- ?DefaultOrMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QEAA?AW4Type@ErrorType@TelemetryConstants@@W4345@@Z (Ordinal: 73, Address: 0x2fb0)
- ?GetApiName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 74, Address: 0x2f70)
- ?GetComponentName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 75, Address: 0x2f80)
- ?GetMostSevereErrorCodeRecorded@ScenarioQosWrapper@QoS@@QEAAHXZ (Ordinal: 76, Address: 0x2fa0)
- ?GetMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QEAA?AW4Type@ErrorType@TelemetryConstants@@XZ (Ordinal: 77, Address: 0x2f90)
- ?GetScenarioName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 78, Address: 0x2f60)
- GetWnsClient (Ordinal: 79, Address: 0xaa90)
- UseMockServer (Ordinal: 80, Address: 0xadc0)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x18008a150)
- AllocateAndInitializeSid (Address: 0x18008a0f8)
- ChangeServiceConfig2W (Address: 0x18008a098)
- ChangeServiceConfigW (Address: 0x18008a0a0)
- CloseServiceHandle (Address: 0x18008a090)
- ControlService (Address: 0x18008a088)
- ConvertSidToStringSidW (Address: 0x18008a010)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18008a108)
- CreateProcessAsUserW (Address: 0x18008a100)
- CreateProcessWithTokenW (Address: 0x18008a000)
- CreateServiceW (Address: 0x18008a080)
- CreateWellKnownSid (Address: 0x18008a0f0)
- CryptAcquireContextW (Address: 0x18008a190)
- CryptCreateHash (Address: 0x18008a188)
- CryptDestroyHash (Address: 0x18008a1a0)
- CryptDestroyKey (Address: 0x18008a160)
- CryptGetHashParam (Address: 0x18008a178)
- CryptHashData (Address: 0x18008a180)
- CryptImportKey (Address: 0x18008a170)
- CryptReleaseContext (Address: 0x18008a198)
- CryptSetHashParam (Address: 0x18008a168)
- DeleteService (Address: 0x18008a078)
- DuplicateTokenEx (Address: 0x18008a0e8)
- FreeSid (Address: 0x18008a0e0)
- GetAclInformation (Address: 0x18008a0d8)
- GetNamedSecurityInfoW (Address: 0x18008a020)
- GetTokenInformation (Address: 0x18008a140)
- GetUserNameW (Address: 0x18008a148)
- LookupAccountNameW (Address: 0x18008a1e0)
- LookupPrivilegeValueW (Address: 0x18008a138)
- OpenProcessToken (Address: 0x18008a158)
- OpenSCManagerW (Address: 0x18008a070)
- OpenServiceW (Address: 0x18008a068)
- QueryServiceConfigW (Address: 0x18008a060)
- QueryServiceStatus (Address: 0x18008a058)
- QueryServiceStatusEx (Address: 0x18008a050)
- RegCloseKey (Address: 0x18008a1c8)
- RegCreateKeyExW (Address: 0x18008a130)
- RegCreateKeyTransactedW (Address: 0x18008a0d0)
- RegDeleteKeyExW (Address: 0x18008a0c8)
- RegDeleteTreeW (Address: 0x18008a0a8)
- RegDeleteValueW (Address: 0x18008a1d0)
- RegEnumKeyExW (Address: 0x18008a128)
- RegEnumKeyW (Address: 0x18008a0c0)
- RegEnumValueW (Address: 0x18008a120)
- RegGetValueW (Address: 0x18008a110)
- RegisterServiceCtrlHandlerW (Address: 0x18008a048)
- RegLoadKeyW (Address: 0x18008a0b8)
- RegOpenKeyExA (Address: 0x18008a1a8)
- RegOpenKeyExW (Address: 0x18008a1d8)
- RegQueryInfoKeyW (Address: 0x18008a1b0)
- RegQueryValueExW (Address: 0x18008a1c0)
- RegSetKeyValueW (Address: 0x18008a118)
- RegSetValueExW (Address: 0x18008a1b8)
- RegUnLoadKeyW (Address: 0x18008a0b0)
- SetEntriesInAclW (Address: 0x18008a028)
- SetFileSecurityW (Address: 0x18008a008)
- SetNamedSecurityInfoW (Address: 0x18008a018)
- SetServiceStatus (Address: 0x18008a040)
- StartServiceCtrlDispatcherW (Address: 0x18008a038)
- StartServiceW (Address: 0x18008a030)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x18008b0d8)
- atoi (Address: 0x18008b0e8)
- strtoul (Address: 0x18008b0e0)
- wcstoll (Address: 0x18008b0f0)
- wcstoul (Address: 0x18008b0d0)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x18008b100)
- calloc (Address: 0x18008b110)
- free (Address: 0x18008b120)
- malloc (Address: 0x18008b118)
- realloc (Address: 0x18008b108)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x18008b130)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthread (Address: 0x18008b1b8)
- _beginthreadex (Address: 0x18008b168)
- _cexit (Address: 0x18008b180)
- _configure_narrow_argv (Address: 0x18008b150)
- _crt_atexit (Address: 0x18008b178)
- _errno (Address: 0x18008b140)
- _execute_onexit_table (Address: 0x18008b1a0)
- _initialize_narrow_environment (Address: 0x18008b158)
- _initialize_onexit_table (Address: 0x18008b160)
- _initterm (Address: 0x18008b188)
- _initterm_e (Address: 0x18008b190)
- _invalid_parameter_noinfo (Address: 0x18008b1a8)
- _invalid_parameter_noinfo_noreturn (Address: 0x18008b198)
- _register_onexit_function (Address: 0x18008b1b0)
- _seh_filter_dll (Address: 0x18008b148)
- terminate (Address: 0x18008b170)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsprintf (Address: 0x18008b1e8)
- __stdio_common_vswprintf (Address: 0x18008b1e0)
- __stdio_common_vswscanf (Address: 0x18008b1d8)
- _wfopen_s (Address: 0x18008b1d0)
- fclose (Address: 0x18008b1c8)
api-ms-win-crt-string-l1-1-0.dll
- _stricmp (Address: 0x18008b1f8)
- _wcsdup (Address: 0x18008b228)
- _wcsicmp (Address: 0x18008b200)
- _wcsnicmp (Address: 0x18008b260)
- isdigit (Address: 0x18008b210)
- isupper (Address: 0x18008b208)
- strncmp (Address: 0x18008b230)
- towlower (Address: 0x18008b240)
- towupper (Address: 0x18008b238)
- wcscmp (Address: 0x18008b248)
- wcscspn (Address: 0x18008b258)
- wcsspn (Address: 0x18008b220)
- wcstok_s (Address: 0x18008b250)
- wmemcpy_s (Address: 0x18008b218)
api-ms-win-crt-time-l1-1-0.dll
- _localtime64_s (Address: 0x18008b270)
- _mkgmtime64 (Address: 0x18008b278)
- _time64 (Address: 0x18008b280)
api-ms-win-crt-utility-l1-1-0.dll
- rand (Address: 0x18008b298)
- srand (Address: 0x18008b290)
CRYPT32.dll
- CertFindExtension (Address: 0x18008a220)
- CertFreeCertificateChain (Address: 0x18008a1f8)
- CertFreeCertificateContext (Address: 0x18008a218)
- CertGetCertificateChain (Address: 0x18008a200)
- CertVerifyCertificateChainPolicy (Address: 0x18008a1f0)
- CryptBinaryToStringA (Address: 0x18008a208)
- CryptBinaryToStringW (Address: 0x18008a228)
- CryptStringToBinaryW (Address: 0x18008a210)
FileSyncEvents.dll
- GetGlobalEventMachine (Address: 0x18008a238)
FileSyncHost.DLL
- ?GetGlobalSystemHost@@YAPEAVBaseHost@@XZ (Address: 0x18008a248)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x18008a698)
- CloseHandle (Address: 0x18008a608)
- CompareStringOrdinal (Address: 0x18008a348)
- CopyFileW (Address: 0x18008a388)
- CreateDirectoryW (Address: 0x18008a328)
- CreateEventW (Address: 0x18008a5f8)
- CreateFileW (Address: 0x18008a678)
- CreateIoCompletionPort (Address: 0x18008a5a8)
- CreateMutexW (Address: 0x18008a510)
- CreatePipe (Address: 0x18008a2f8)
- CreateProcessW (Address: 0x18008a418)
- CreateSymbolicLinkW (Address: 0x18008a340)
- CreateThread (Address: 0x18008a568)
- CreateToolhelp32Snapshot (Address: 0x18008a350)
- DeleteCriticalSection (Address: 0x18008a620)
- DeleteFileW (Address: 0x18008a538)
- DeviceIoControl (Address: 0x18008a300)
- DisableThreadLibraryCalls (Address: 0x18008a628)
- EnterCriticalSection (Address: 0x18008a630)
- ExpandEnvironmentStringsW (Address: 0x18008a570)
- FindClose (Address: 0x18008a530)
- FindFirstFileNameW (Address: 0x18008a2e0)
- FindFirstFileW (Address: 0x18008a528)
- FindFirstVolumeW (Address: 0x18008a488)
- FindNextVolumeW (Address: 0x18008a258)
- FindResourceExW (Address: 0x18008a3f8)
- FindResourceW (Address: 0x18008a3f0)
- FindVolumeClose (Address: 0x18008a260)
- FreeLibrary (Address: 0x18008a4d8)
- GetCommandLineW (Address: 0x18008a438)
- GetCompressedFileSizeW (Address: 0x18008a2d8)
- GetComputerNameW (Address: 0x18008a5b0)
- GetCurrentProcess (Address: 0x18008a508)
- GetCurrentProcessId (Address: 0x18008a500)
- GetCurrentThread (Address: 0x18008a558)
- GetCurrentThreadId (Address: 0x18008a548)
- GetDiskFreeSpaceExW (Address: 0x18008a268)
- GetDllDirectoryW (Address: 0x18008a3c0)
- GetEnvironmentVariableW (Address: 0x18008a430)
- GetExitCodeProcess (Address: 0x18008a420)
- GetFileAttributesExW (Address: 0x18008a278)
- GetFileAttributesW (Address: 0x18008a270)
- GetFileInformationByHandle (Address: 0x18008a280)
- GetFileInformationByHandleEx (Address: 0x18008a3a8)
- GetFileSize (Address: 0x18008a288)
- GetFileSizeEx (Address: 0x18008a290)
- GetFileType (Address: 0x18008a298)
- GetFinalPathNameByHandleW (Address: 0x18008a2a0)
- GetLastError (Address: 0x18008a600)
- GetLongPathNameW (Address: 0x18008a458)
- GetModuleFileNameW (Address: 0x18008a5e0)
- GetModuleHandleW (Address: 0x18008a3b8)
- GetPrivateProfileStringW (Address: 0x18008a370)
- GetProcAddress (Address: 0x18008a4d0)
- GetProcessHeap (Address: 0x18008a590)
- GetProcessIoCounters (Address: 0x18008a368)
- GetProcessTimes (Address: 0x18008a428)
- GetProductInfo (Address: 0x18008a470)
- GetQueuedCompletionStatus (Address: 0x18008a550)
- GetSystemTime (Address: 0x18008a4e8)
- GetSystemTimeAsFileTime (Address: 0x18008a540)
- GetSystemTimes (Address: 0x18008a3d8)
- GetTickCount64 (Address: 0x18008a5b8)
- GetUserDefaultLCID (Address: 0x18008a490)
- GetUserDefaultUILanguage (Address: 0x18008a408)
- GetUserGeoID (Address: 0x18008a498)
- GetVersionExA (Address: 0x18008a400)
- GetVersionExW (Address: 0x18008a4e0)
- GetVolumePathNameW (Address: 0x18008a2a8)
- GlobalAlloc (Address: 0x18008a318)
- GlobalFree (Address: 0x18008a330)
- GlobalLock (Address: 0x18008a680)
- GlobalUnlock (Address: 0x18008a320)
- HeapAlloc (Address: 0x18008a588)
- HeapDestroy (Address: 0x18008a520)
- HeapFree (Address: 0x18008a598)
- HeapReAlloc (Address: 0x18008a580)
- HeapSize (Address: 0x18008a518)
- InitializeCriticalSection (Address: 0x18008a618)
- InitializeCriticalSectionEx (Address: 0x18008a5e8)
- InitializeSListHead (Address: 0x18008a648)
- IsDebuggerPresent (Address: 0x18008a2e8)
- IsProcessorFeaturePresent (Address: 0x18008a650)
- IsWow64Process (Address: 0x18008a308)
- K32GetModuleFileNameExW (Address: 0x18008a480)
- LCIDToLocaleName (Address: 0x18008a4a0)
- LeaveCriticalSection (Address: 0x18008a638)
- LoadLibraryExW (Address: 0x18008a310)
- LoadLibraryW (Address: 0x18008a4c8)
- LoadResource (Address: 0x18008a3c8)
- LocalAlloc (Address: 0x18008a4c0)
- LocalFree (Address: 0x18008a4b8)
- LockResource (Address: 0x18008a3e0)
- lstrlenW (Address: 0x18008a578)
- MoveFileExW (Address: 0x18008a390)
- MoveFileW (Address: 0x18008a4b0)
- MultiByteToWideChar (Address: 0x18008a5d8)
- OpenFileById (Address: 0x18008a3b0)
- OpenProcess (Address: 0x18008a4f0)
- OutputDebugStringW (Address: 0x18008a640)
- PostQueuedCompletionStatus (Address: 0x18008a5a0)
- Process32FirstW (Address: 0x18008a358)
- Process32NextW (Address: 0x18008a360)
- QueryPerformanceCounter (Address: 0x18008a5c0)
- QueryPerformanceFrequency (Address: 0x18008a5c8)
- ReadDirectoryChangesW (Address: 0x18008a338)
- ReadFile (Address: 0x18008a2b0)
- RegisterApplicationRestart (Address: 0x18008a3a0)
- ReleaseMutex (Address: 0x18008a450)
- ReleaseSRWLockExclusive (Address: 0x18008a690)
- RemoveDirectoryW (Address: 0x18008a2b8)
- ReplaceFileW (Address: 0x18008a688)
- RtlCaptureContext (Address: 0x18008a398)
- RtlLookupFunctionEntry (Address: 0x18008a670)
- RtlVirtualUnwind (Address: 0x18008a668)
- SetDllDirectoryW (Address: 0x18008a380)
- SetEvent (Address: 0x18008a5f0)
- SetFileAttributesW (Address: 0x18008a2c0)
- SetFileInformationByHandle (Address: 0x18008a2c8)
- SetFilePointer (Address: 0x18008a2d0)
- SetHandleInformation (Address: 0x18008a2f0)
- SetLastError (Address: 0x18008a460)
- SetProcessShutdownParameters (Address: 0x18008a410)
- SetThreadInformation (Address: 0x18008a3d0)
- SetThreadPriority (Address: 0x18008a560)
- SetUnhandledExceptionFilter (Address: 0x18008a658)
- SizeofResource (Address: 0x18008a3e8)
- Sleep (Address: 0x18008a448)
- SleepConditionVariableSRW (Address: 0x18008a6a8)
- SystemTimeToFileTime (Address: 0x18008a4a8)
- TerminateProcess (Address: 0x18008a4f8)
- UnhandledExceptionFilter (Address: 0x18008a660)
- VerifyVersionInfoW (Address: 0x18008a468)
- VerSetConditionMask (Address: 0x18008a478)
- WaitForMultipleObjects (Address: 0x18008a440)
- WaitForSingleObject (Address: 0x18008a610)
- WakeAllConditionVariable (Address: 0x18008a6a0)
- WideCharToMultiByte (Address: 0x18008a5d0)
- WritePrivateProfileStringW (Address: 0x18008a378)
LoggingPlatform.DLL
- ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x18008a710)
- ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x18008a6e8)
- ??1TelemetryEvent@@QEAA@XZ (Address: 0x18008a6f0)
- ?GetActiveHydrationsCount@QoS@@YAIXZ (Address: 0x18008a6e0)
- ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x18008a6c8)
- ?IsAnyLibraryIrmEnabled@QoS@@YA_NXZ (Address: 0x18008a6b8)
- ?LoggingRecordAssert@@YAXPEB_W00I0_NI1@Z (Address: 0x18008a6d8)
- ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x18008a720)
- ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x18008a6c0)
- ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18008a700)
- ?LoggingShouldSample@@YA_NN@Z (Address: 0x18008a6d0)
- ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18008a718)
- ?NarrowStringToWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD@Z (Address: 0x18008a730)
- ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x18008a728)
- ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x18008a6f8)
- ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x18008a708)
MSVCP140.dll
- _Cnd_broadcast (Address: 0x18008a760)
- _Cnd_do_broadcast_at_thread_exit (Address: 0x18008a7b8)
- _Mtx_init_in_situ (Address: 0x18008a740)
- _Mtx_lock (Address: 0x18008a748)
- _Mtx_unlock (Address: 0x18008a758)
- _Thrd_id (Address: 0x18008a768)
- _Thrd_join (Address: 0x18008a798)
- _Wcscoll (Address: 0x18008a848)
- _Wcsxfrm (Address: 0x18008a840)
- _Xtime_get_ticks (Address: 0x18008a850)
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18008a7c0)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18008a790)
- ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18008a7a8)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18008a770)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18008a7a0)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18008a778)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18008a7b0)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x18008a780)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18008a868)
- ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18008a8a8)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18008a830)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18008a8c0)
- ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x18008a8f0)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18008a860)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18008a8c8)
- ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x18008a870)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18008a9d8)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18008aa98)
- ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x18008a8d0)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x18008a8d8)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18008aa10)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18008aad8)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18008a750)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18008a9d0)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18008aa90)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18008ab08)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x18008a958)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18008a950)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18008a978)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18008aa80)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18008a800)
- ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x18008a908)
- ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x18008a900)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18008a838)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18008a918)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18008aa58)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18008aaf8)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18008aa60)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18008ab00)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x18008a940)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18008aa40)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18008aaf0)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18008a820)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18008a8f8)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18008a910)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a980)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa68)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a990)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa78)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a938)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a988)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa70)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18008a818)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18008a8e8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18008a7e0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18008a930)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18008a7d8)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18008a928)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18008a7d0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18008a920)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18008a878)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x18008a960)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18008a788)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18008a948)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18008a7c8)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18008a968)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18008a8e0)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x18008a8a0)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x18008a828)
- ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x18008aa30)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x18008a9a0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18008aa18)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18008aae0)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18008a7e8)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x18008a9c0)
- ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18008a7f8)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18008a858)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18008aa08)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18008aad0)
- ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18008a810)
- ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18008aa28)
- ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a890)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18008aa00)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18008aac8)
- ?setf@ios_base@std@@QEAAHH@Z (Address: 0x18008a898)
- ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18008aa48)
- ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18008aa50)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18008aa38)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18008aae8)
- ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a888)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18008a9e8)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18008aaa8)
- ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a880)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18008a9a8)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18008aa88)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18008aa20)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18008a970)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18008a9e0)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18008aaa0)
- ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18008a8b8)
- ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18008a808)
- ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18008a8b0)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18008a9f0)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18008aab0)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x18008a9b8)
- ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x18008a7f0)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18008a9b0)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x18008a998)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18008a9f8)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18008aab8)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18008a9c8)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18008aac0)
ole32.dll
- CoCreateGuid (Address: 0x18008b2a8)
- CoCreateInstance (Address: 0x18008b2e0)
- CoInitializeEx (Address: 0x18008b2e8)
- CoSetProxyBlanket (Address: 0x18008b2b0)
- CoTaskMemFree (Address: 0x18008b2c0)
- CoUninitialize (Address: 0x18008b2d8)
- CreateBindCtx (Address: 0x18008b2b8)
- CreateItemMoniker (Address: 0x18008b2f0)
- CreateStreamOnHGlobal (Address: 0x18008b2c8)
- GetRunningObjectTable (Address: 0x18008b2f8)
- StringFromCLSID (Address: 0x18008b300)
- StringFromGUID2 (Address: 0x18008b2d0)
OLEAUT32.dll
- GetRecordInfoFromTypeInfo (Address: 0x18008ab18)
- LoadRegTypeLib (Address: 0x18008ab20)
- LoadTypeLib (Address: 0x18008ab28)
RPCRT4.dll
- RpcBindingFree (Address: 0x18008ab90)
- RpcBindingFromStringBindingW (Address: 0x18008ab98)
- RpcBindingSetAuthInfoExW (Address: 0x18008ab48)
- RpcBindingVectorFree (Address: 0x18008aba0)
- RpcEpRegisterW (Address: 0x18008ab88)
- RpcEpUnregister (Address: 0x18008ab58)
- RpcServerInqBindings (Address: 0x18008ab70)
- RpcServerInqCallAttributesW (Address: 0x18008ab40)
- RpcServerRegisterIfEx (Address: 0x18008ab50)
- RpcServerUnregisterIf (Address: 0x18008ab38)
- RpcServerUseProtseqW (Address: 0x18008ab80)
- RpcStringBindingComposeW (Address: 0x18008ab78)
- RpcStringFreeW (Address: 0x18008ab68)
- UuidCreate (Address: 0x18008ab60)
Secur32.dll
- AcceptSecurityContext (Address: 0x18008ace0)
- AcquireCredentialsHandleW (Address: 0x18008ace8)
- ApplyControlToken (Address: 0x18008ad08)
- DecryptMessage (Address: 0x18008acf8)
- DeleteSecurityContext (Address: 0x18008acc8)
- EncryptMessage (Address: 0x18008ad10)
- FreeCredentialsHandle (Address: 0x18008acd8)
- GetUserNameExW (Address: 0x18008acd0)
- InitializeSecurityContextA (Address: 0x18008ad18)
- InitializeSecurityContextW (Address: 0x18008ad00)
- QueryContextAttributesW (Address: 0x18008acf0)
SHELL32.dll
- (Address: 0x18008abc8)
- CommandLineToArgvW (Address: 0x18008ac20)
- SHAssocEnumHandlers (Address: 0x18008abf0)
- SHChangeNotify (Address: 0x18008abc0)
- SHCreateDirectoryExW (Address: 0x18008abe8)
- SHCreateItemFromParsingName (Address: 0x18008ac08)
- ShellExecuteExW (Address: 0x18008abb0)
- SHFileOperationW (Address: 0x18008ac10)
- SHGetFolderPathAndSubDirW (Address: 0x18008abd8)
- SHGetFolderPathW (Address: 0x18008abe0)
- SHGetKnownFolderPath (Address: 0x18008abf8)
- SHGetPropertyStoreFromParsingName (Address: 0x18008ac18)
- SHGetSpecialFolderPathW (Address: 0x18008ac00)
- SHParseDisplayName (Address: 0x18008abb8)
- SHSetKnownFolderPath (Address: 0x18008abd0)
SHLWAPI.dll
- AssocQueryStringW (Address: 0x18008aca0)
- PathFileExistsW (Address: 0x18008ac90)
- PathIsDirectoryEmptyW (Address: 0x18008acb0)
- PathIsDirectoryW (Address: 0x18008ac78)
- PathIsPrefixW (Address: 0x18008ac60)
- PathRemoveFileSpecW (Address: 0x18008ac50)
- PathStripPathW (Address: 0x18008ac68)
- SHCreateStreamOnFileW (Address: 0x18008aca8)
- SHDeleteKeyW (Address: 0x18008ac48)
- SHDeleteValueW (Address: 0x18008ac40)
- SHGetValueA (Address: 0x18008ac38)
- SHGetValueW (Address: 0x18008ac88)
- SHRegGetBoolUSValueW (Address: 0x18008ac98)
- SHRegGetPathW (Address: 0x18008acb8)
- SHRegGetUSValueW (Address: 0x18008ac80)
- SHRegGetValueW (Address: 0x18008ac70)
- SHSetValueW (Address: 0x18008ac30)
- StrStrIW (Address: 0x18008ac58)
Telemetry.dll
- ??0ScenarioQosChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_WAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x18008ad78)
- ??0ScenarioQosPlatWrapper@QoS@@IEAA@PEB_W@Z (Address: 0x18008ad68)
- ??0ScenarioQosSyncWrapper@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_W@Z (Address: 0x18008add8)
- ??0ScenarioQosSyncWrapper@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_W1@Z (Address: 0x18008adb8)
- ??1QosSyncWrapperConfig@QoS@@QEAA@XZ (Address: 0x18008ada8)
- ??1ScenarioQosPlatWrapper@QoS@@UEAA@XZ (Address: 0x18008ad50)
- ??1ScenarioQosSyncWrapper@QoS@@UEAA@XZ (Address: 0x18008ad48)
- ?FreeTxnContextString@ScenarioQosWrapper@QoS@@UEAAXPEB_W@Z (Address: 0x18008add0)
- ?GetDownloadFileScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N@Z (Address: 0x18008ada0)
- ?GetPollingChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad98)
- ?GetQuotaStatusScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008adc8)
- ?GetRetrieveQuotaStateScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008adc0)
- ?GetRetrieveSpaceUsedScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ade0)
- ?GetStartupChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad80)
- ?GetTxnContextString@ScenarioQosWrapper@QoS@@UEAAPEB_WXZ (Address: 0x18008ad38)
- ?GetUploadFileScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N@Z (Address: 0x18008ad90)
- ?GetUploadMetadataScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N00@Z (Address: 0x18008adb0)
- ?GetWnsChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad88)
- ?RecordApi@ScenarioQosPlatWrapper@QoS@@QEAAXJW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008ad30)
- ?RecordApiWithSize@ScenarioQosSyncWrapper@QoS@@UEAAXJIIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@@Z (Address: 0x18008adf0)
- ?RecordConnectingToWnsApi@ScenarioQosConnectingToWns@QoS@@QEAAXJIII@Z (Address: 0x18008ad60)
- ?RecordQosTelemetry@ScenarioQosWrapper@QoS@@MEAAXPEB_W0W4Id@PropertyId@TelemetryConstants@@_JIHW4Type@ErrorType@5@0V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@0AEBUScenarioQosWrapperAdditionalInfo@12@@Z (Address: 0x18008ad28)
- ?RecordScenario@ScenarioQosPlatWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008ad40)
- ?RecordScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008adf8)
- ?RecordScenarioWithSize@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z (Address: 0x18008ae00)
- ?RecordServiceApiResponse@ScenarioQosSyncWrapper@QoS@@UEAAXJIIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@00_N02@Z (Address: 0x18008ade8)
- ?RecordUploadDownloadScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IHAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@11II@Z (Address: 0x18008ae10)
- ?RecordUploadDownloadTransferTestScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1II1@Z (Address: 0x18008ae08)
- ?SetComponent@ScenarioQosWrapper@QoS@@QEAAXPEB_W@Z (Address: 0x18008ad70)
- ?StartCreateWnsChannel@ScenarioQosPlatWrapper@QoS@@QEAAXXZ (Address: 0x18008ad58)
UpdateRingSettings.dll
- ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x18008aee8)
USER32.dll
- CloseClipboard (Address: 0x18008ae60)
- CreateWindowExW (Address: 0x18008aec0)
- DestroyWindow (Address: 0x18008ae30)
- DispatchMessageW (Address: 0x18008aeb8)
- EnumWindows (Address: 0x18008ae80)
- GetClassNameW (Address: 0x18008ae88)
- GetMessageW (Address: 0x18008aea8)
- GetWindowThreadProcessId (Address: 0x18008ae90)
- OpenClipboard (Address: 0x18008ae58)
- PostMessageW (Address: 0x18008ae48)
- RegisterClassW (Address: 0x18008ae20)
- RegisterClipboardFormatW (Address: 0x18008ae78)
- RegisterPowerSettingNotification (Address: 0x18008ae68)
- RegisterSuspendResumeNotification (Address: 0x18008ae40)
- SendMessageTimeoutW (Address: 0x18008aea0)
- SetClipboardData (Address: 0x18008ae70)
- ShowWindow (Address: 0x18008ae38)
- SystemParametersInfoW (Address: 0x18008ae98)
- TranslateMessage (Address: 0x18008aeb0)
- UnregisterPowerSettingNotification (Address: 0x18008ae50)
- UnregisterSuspendResumeNotification (Address: 0x18008ae28)
USERENV.dll
- CreateEnvironmentBlock (Address: 0x18008aed8)
- GetDefaultUserProfileDirectoryW (Address: 0x18008aed0)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x18008afa8)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x18008af48)
- __current_exception (Address: 0x18008af58)
- __current_exception_context (Address: 0x18008af50)
- __RTDynamicCast (Address: 0x18008af18)
- __std_exception_copy (Address: 0x18008af08)
- __std_exception_destroy (Address: 0x18008af00)
- __std_terminate (Address: 0x18008af10)
- __std_type_info_compare (Address: 0x18008af68)
- __std_type_info_destroy_list (Address: 0x18008af40)
- __std_type_info_name (Address: 0x18008af60)
- _CxxThrowException (Address: 0x18008af28)
- _purecall (Address: 0x18008aef8)
- memchr (Address: 0x18008af38)
- memcmp (Address: 0x18008af98)
- memcpy (Address: 0x18008af78)
- memmove (Address: 0x18008af70)
- memset (Address: 0x18008af30)
- strchr (Address: 0x18008af80)
- wcschr (Address: 0x18008af20)
- wcsrchr (Address: 0x18008af88)
- wcsstr (Address: 0x18008af90)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x18008afc8)
- GetFileVersionInfoW (Address: 0x18008afc0)
- VerQueryValueW (Address: 0x18008afb8)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x18008afe0)
- WinHttpGetIEProxyConfigForCurrentUser (Address: 0x18008aff0)
- WinHttpGetProxyForUrl (Address: 0x18008afe8)
- WinHttpOpen (Address: 0x18008afd8)
WININET.dll
- InternetCheckConnectionW (Address: 0x18008b000)
WS2_32.dll
- bind (Address: 0x18008b068)
- closesocket (Address: 0x18008b088)
- freeaddrinfo (Address: 0x18008b078)
- getaddrinfo (Address: 0x18008b080)
- getpeername (Address: 0x18008b038)
- getsockname (Address: 0x18008b040)
- htons (Address: 0x18008b018)
- ntohs (Address: 0x18008b010)
- setsockopt (Address: 0x18008b048)
- WSAAddressToStringW (Address: 0x18008b030)
- WSAGetLastError (Address: 0x18008b028)
- WSAIoctl (Address: 0x18008b060)
- WSARecv (Address: 0x18008b050)
- WSASend (Address: 0x18008b058)
- WSASocketW (Address: 0x18008b020)
- WSAStartup (Address: 0x18008b070)
WTSAPI32.dll
- WTSEnumerateSessionsW (Address: 0x18008b098)
- WTSFreeMemory (Address: 0x18008b0a8)
- WTSQuerySessionInformationW (Address: 0x18008b0a0)
- WTSQueryUserToken (Address: 0x18008b0b0)
XmlLite.dll
- CreateXmlReader (Address: 0x18008b0c0)