WnsClientApi.dll

Description: OneDrive WNS Client Library

Authors: © Microsoft Corporation. All rights reserved.

Version: 25.209.1026.2

Architecture: 64-bit

Operating System: Windows

SHA256: 7ee1c2b830b58d9a515ede1712efea4e

File Size: 895.4 KB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ??0LogActivityBulkScenario@QoS@@QEAA@XZ (Ordinal: 1, Address: 0x473f0)
  • ??0QosSyncWrapperConfig@QoS@@QEAA@XZ (Ordinal: 2, Address: 0x45930)
  • ??0ScenarioArchiveItemQosWrapper@QoS@@QEAA@XZ (Ordinal: 3, Address: 0x47610)
  • ??0ScenarioGetOdbLicenseEnforcementWarningContext@QoS@@QEAA@XZ (Ordinal: 4, Address: 0x47500)
  • ??0ScenarioQosClientPolicy@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 5, Address: 0x45a30)
  • ??0ScenarioQosConnectingToWns@QoS@@QEAA@XZ (Ordinal: 6, Address: 0x2fc0)
  • ??0ScenarioQosDownloadFile@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N@Z (Ordinal: 7, Address: 0x45f50)
  • ??0ScenarioQosDownloadSignature@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 8, Address: 0x46050)
  • ??0ScenarioQosGetItemByPath@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 9, Address: 0x45b30)
  • ??0ScenarioQosGetPlaceholderThumbnail@QoS@@QEAA@XZ (Ordinal: 10, Address: 0x46f30)
  • ??0ScenarioQosGetSpecialFolderInfo@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 11, Address: 0x46800)
  • ??0ScenarioQosLockVault@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 12, Address: 0x46c90)
  • ??0ScenarioQosMountAddedFolder@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 13, Address: 0x47040)
  • ??0ScenarioQosPlaceholderDeletesRestore@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 14, Address: 0x47200)
  • ??0ScenarioQosPollingChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 15, Address: 0x45de0)
  • ??0ScenarioQosRetrieveQuotaState@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 16, Address: 0x46450)
  • ??0ScenarioQosRetrieveSpaceUsed@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 17, Address: 0x46560)
  • ??0ScenarioQosRetrieveVaultKey@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 18, Address: 0x46e50)
  • ??0ScenarioQosSelectiveSyncEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 19, Address: 0x45e70)
  • ??0ScenarioQosSetFolderColor@QoS@@QEAA@XZ (Ordinal: 20, Address: 0x472e0)
  • ??0ScenarioQosShutdown@QoS@@QEAA@XZ (Ordinal: 21, Address: 0x3110)
  • ??0ScenarioQosStartup@QoS@@QEAA@XZ (Ordinal: 22, Address: 0x3030)
  • ??0ScenarioQosStartupChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 23, Address: 0x45cc0)
  • ??0ScenarioQosStorageProvisioning@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 24, Address: 0x45950)
  • ??0ScenarioQosStoreVaultKey@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 25, Address: 0x46d70)
  • ??0ScenarioQosSubScopeMapping@QoS@@QEAA@XZ (Ordinal: 26, Address: 0x468e0)
  • ??0ScenarioQosSyncVerification@QoS@@QEAA@XZ (Ordinal: 27, Address: 0x46670)
  • ??0ScenarioQosSyncVerification@QoS@@QEAA@_N@Z (Ordinal: 28, Address: 0x466e0)
  • ??0ScenarioQosUnmountAddedFolder@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 29, Address: 0x47120)
  • ??0ScenarioQosUploadCrossScopeCopy@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 30, Address: 0x469f0)
  • ??0ScenarioQosUploadFile@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N@Z (Ordinal: 31, Address: 0x46130)
  • ??0ScenarioQosUploadMetadata@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@_N11@Z (Ordinal: 32, Address: 0x46340)
  • ??0ScenarioQosUploadTransferTest@QoS@@QEAA@XZ (Ordinal: 33, Address: 0x46230)
  • ??0ScenarioQosVaultInitialization@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 34, Address: 0x46ad0)
  • ??0ScenarioQosVaultUnlock@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@@Z (Ordinal: 35, Address: 0x46bb0)
  • ??0ScenarioQosWNSNotificationChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Ordinal: 36, Address: 0x45d50)
  • ??0ScenarioUnarchiveItemQosWrapper@QoS@@QEAA@XZ (Ordinal: 37, Address: 0x47720)
  • ??1LogActivityBulkScenario@QoS@@UEAA@XZ (Ordinal: 38, Address: 0x47450)
  • ??1ScenarioArchiveItemQosWrapper@QoS@@UEAA@XZ (Ordinal: 39, Address: 0x47670)
  • ??1ScenarioGetOdbLicenseEnforcementWarningContext@QoS@@UEAA@XZ (Ordinal: 40, Address: 0x47560)
  • ??1ScenarioQosChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 41, Address: 0x45c10)
  • ??1ScenarioQosClientPolicy@QoS@@UEAA@XZ (Ordinal: 42, Address: 0x45a80)
  • ??1ScenarioQosDownloadFile@QoS@@UEAA@XZ (Ordinal: 43, Address: 0x45fa0)
  • ??1ScenarioQosDownloadSignature@QoS@@UEAA@XZ (Ordinal: 44, Address: 0x46080)
  • ??1ScenarioQosGetItemByPath@QoS@@UEAA@XZ (Ordinal: 45, Address: 0x45b60)
  • ??1ScenarioQosGetPlaceholderThumbnail@QoS@@UEAA@XZ (Ordinal: 46, Address: 0x46f90)
  • ??1ScenarioQosGetSpecialFolderInfo@QoS@@UEAA@XZ (Ordinal: 47, Address: 0x46830)
  • ??1ScenarioQosLockVault@QoS@@UEAA@XZ (Ordinal: 48, Address: 0x46cc0)
  • ??1ScenarioQosMountAddedFolder@QoS@@UEAA@XZ (Ordinal: 49, Address: 0x47070)
  • ??1ScenarioQosPlaceholderDeletesRestore@QoS@@UEAA@XZ (Ordinal: 50, Address: 0x47230)
  • ??1ScenarioQosPollingChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 51, Address: 0x45c10)
  • ??1ScenarioQosRetrieveQuotaState@QoS@@UEAA@XZ (Ordinal: 52, Address: 0x464b0)
  • ??1ScenarioQosRetrieveSpaceUsed@QoS@@UEAA@XZ (Ordinal: 53, Address: 0x465c0)
  • ??1ScenarioQosRetrieveVaultKey@QoS@@UEAA@XZ (Ordinal: 54, Address: 0x46e80)
  • ??1ScenarioQosSelectiveSyncEnumeration@QoS@@UEAA@XZ (Ordinal: 55, Address: 0x45ea0)
  • ??1ScenarioQosSetFolderColor@QoS@@UEAA@XZ (Ordinal: 56, Address: 0x47340)
  • ??1ScenarioQosShutdown@QoS@@UEAA@XZ (Ordinal: 57, Address: 0x3140)
  • ??1ScenarioQosStartup@QoS@@UEAA@XZ (Ordinal: 58, Address: 0x3060)
  • ??1ScenarioQosStartupChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 59, Address: 0x45c10)
  • ??1ScenarioQosStorageProvisioning@QoS@@UEAA@XZ (Ordinal: 60, Address: 0x45980)
  • ??1ScenarioQosStoreVaultKey@QoS@@UEAA@XZ (Ordinal: 61, Address: 0x46da0)
  • ??1ScenarioQosSubScopeMapping@QoS@@UEAA@XZ (Ordinal: 62, Address: 0x46940)
  • ??1ScenarioQosSyncVerification@QoS@@UEAA@XZ (Ordinal: 63, Address: 0x46750)
  • ??1ScenarioQosUnmountAddedFolder@QoS@@UEAA@XZ (Ordinal: 64, Address: 0x47150)
  • ??1ScenarioQosUploadCrossScopeCopy@QoS@@UEAA@XZ (Ordinal: 65, Address: 0x46a20)
  • ??1ScenarioQosUploadFile@QoS@@UEAA@XZ (Ordinal: 66, Address: 0x46180)
  • ??1ScenarioQosUploadMetadata@QoS@@UEAA@XZ (Ordinal: 67, Address: 0x463a0)
  • ??1ScenarioQosUploadTransferTest@QoS@@UEAA@XZ (Ordinal: 68, Address: 0x46290)
  • ??1ScenarioQosVaultInitialization@QoS@@UEAA@XZ (Ordinal: 69, Address: 0x46b00)
  • ??1ScenarioQosVaultUnlock@QoS@@UEAA@XZ (Ordinal: 70, Address: 0x46be0)
  • ??1ScenarioQosWNSNotificationChangeEnumeration@QoS@@UEAA@XZ (Ordinal: 71, Address: 0x45c10)
  • ??1ScenarioUnarchiveItemQosWrapper@QoS@@UEAA@XZ (Ordinal: 72, Address: 0x47780)
  • ?DefaultOrMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QEAA?AW4Type@ErrorType@TelemetryConstants@@W4345@@Z (Ordinal: 73, Address: 0x2fb0)
  • ?GetApiName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 74, Address: 0x2f70)
  • ?GetComponentName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 75, Address: 0x2f80)
  • ?GetMostSevereErrorCodeRecorded@ScenarioQosWrapper@QoS@@QEAAHXZ (Ordinal: 76, Address: 0x2fa0)
  • ?GetMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QEAA?AW4Type@ErrorType@TelemetryConstants@@XZ (Ordinal: 77, Address: 0x2f90)
  • ?GetScenarioName@ScenarioQosWrapper@QoS@@QEBAPEB_WXZ (Ordinal: 78, Address: 0x2f60)
  • GetWnsClient (Ordinal: 79, Address: 0xaa90)
  • UseMockServer (Ordinal: 80, Address: 0xadc0)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x18008a150)
  • AllocateAndInitializeSid (Address: 0x18008a0f8)
  • ChangeServiceConfig2W (Address: 0x18008a098)
  • ChangeServiceConfigW (Address: 0x18008a0a0)
  • CloseServiceHandle (Address: 0x18008a090)
  • ControlService (Address: 0x18008a088)
  • ConvertSidToStringSidW (Address: 0x18008a010)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18008a108)
  • CreateProcessAsUserW (Address: 0x18008a100)
  • CreateProcessWithTokenW (Address: 0x18008a000)
  • CreateServiceW (Address: 0x18008a080)
  • CreateWellKnownSid (Address: 0x18008a0f0)
  • CryptAcquireContextW (Address: 0x18008a190)
  • CryptCreateHash (Address: 0x18008a188)
  • CryptDestroyHash (Address: 0x18008a1a0)
  • CryptDestroyKey (Address: 0x18008a160)
  • CryptGetHashParam (Address: 0x18008a178)
  • CryptHashData (Address: 0x18008a180)
  • CryptImportKey (Address: 0x18008a170)
  • CryptReleaseContext (Address: 0x18008a198)
  • CryptSetHashParam (Address: 0x18008a168)
  • DeleteService (Address: 0x18008a078)
  • DuplicateTokenEx (Address: 0x18008a0e8)
  • FreeSid (Address: 0x18008a0e0)
  • GetAclInformation (Address: 0x18008a0d8)
  • GetNamedSecurityInfoW (Address: 0x18008a020)
  • GetTokenInformation (Address: 0x18008a140)
  • GetUserNameW (Address: 0x18008a148)
  • LookupAccountNameW (Address: 0x18008a1e0)
  • LookupPrivilegeValueW (Address: 0x18008a138)
  • OpenProcessToken (Address: 0x18008a158)
  • OpenSCManagerW (Address: 0x18008a070)
  • OpenServiceW (Address: 0x18008a068)
  • QueryServiceConfigW (Address: 0x18008a060)
  • QueryServiceStatus (Address: 0x18008a058)
  • QueryServiceStatusEx (Address: 0x18008a050)
  • RegCloseKey (Address: 0x18008a1c8)
  • RegCreateKeyExW (Address: 0x18008a130)
  • RegCreateKeyTransactedW (Address: 0x18008a0d0)
  • RegDeleteKeyExW (Address: 0x18008a0c8)
  • RegDeleteTreeW (Address: 0x18008a0a8)
  • RegDeleteValueW (Address: 0x18008a1d0)
  • RegEnumKeyExW (Address: 0x18008a128)
  • RegEnumKeyW (Address: 0x18008a0c0)
  • RegEnumValueW (Address: 0x18008a120)
  • RegGetValueW (Address: 0x18008a110)
  • RegisterServiceCtrlHandlerW (Address: 0x18008a048)
  • RegLoadKeyW (Address: 0x18008a0b8)
  • RegOpenKeyExA (Address: 0x18008a1a8)
  • RegOpenKeyExW (Address: 0x18008a1d8)
  • RegQueryInfoKeyW (Address: 0x18008a1b0)
  • RegQueryValueExW (Address: 0x18008a1c0)
  • RegSetKeyValueW (Address: 0x18008a118)
  • RegSetValueExW (Address: 0x18008a1b8)
  • RegUnLoadKeyW (Address: 0x18008a0b0)
  • SetEntriesInAclW (Address: 0x18008a028)
  • SetFileSecurityW (Address: 0x18008a008)
  • SetNamedSecurityInfoW (Address: 0x18008a018)
  • SetServiceStatus (Address: 0x18008a040)
  • StartServiceCtrlDispatcherW (Address: 0x18008a038)
  • StartServiceW (Address: 0x18008a030)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x18008b0d8)
  • atoi (Address: 0x18008b0e8)
  • strtoul (Address: 0x18008b0e0)
  • wcstoll (Address: 0x18008b0f0)
  • wcstoul (Address: 0x18008b0d0)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x18008b100)
  • calloc (Address: 0x18008b110)
  • free (Address: 0x18008b120)
  • malloc (Address: 0x18008b118)
  • realloc (Address: 0x18008b108)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x18008b130)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x18008b1b8)
  • _beginthreadex (Address: 0x18008b168)
  • _cexit (Address: 0x18008b180)
  • _configure_narrow_argv (Address: 0x18008b150)
  • _crt_atexit (Address: 0x18008b178)
  • _errno (Address: 0x18008b140)
  • _execute_onexit_table (Address: 0x18008b1a0)
  • _initialize_narrow_environment (Address: 0x18008b158)
  • _initialize_onexit_table (Address: 0x18008b160)
  • _initterm (Address: 0x18008b188)
  • _initterm_e (Address: 0x18008b190)
  • _invalid_parameter_noinfo (Address: 0x18008b1a8)
  • _invalid_parameter_noinfo_noreturn (Address: 0x18008b198)
  • _register_onexit_function (Address: 0x18008b1b0)
  • _seh_filter_dll (Address: 0x18008b148)
  • terminate (Address: 0x18008b170)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsprintf (Address: 0x18008b1e8)
  • __stdio_common_vswprintf (Address: 0x18008b1e0)
  • __stdio_common_vswscanf (Address: 0x18008b1d8)
  • _wfopen_s (Address: 0x18008b1d0)
  • fclose (Address: 0x18008b1c8)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x18008b1f8)
  • _wcsdup (Address: 0x18008b228)
  • _wcsicmp (Address: 0x18008b200)
  • _wcsnicmp (Address: 0x18008b260)
  • isdigit (Address: 0x18008b210)
  • isupper (Address: 0x18008b208)
  • strncmp (Address: 0x18008b230)
  • towlower (Address: 0x18008b240)
  • towupper (Address: 0x18008b238)
  • wcscmp (Address: 0x18008b248)
  • wcscspn (Address: 0x18008b258)
  • wcsspn (Address: 0x18008b220)
  • wcstok_s (Address: 0x18008b250)
  • wmemcpy_s (Address: 0x18008b218)
api-ms-win-crt-time-l1-1-0.dll
  • _localtime64_s (Address: 0x18008b270)
  • _mkgmtime64 (Address: 0x18008b278)
  • _time64 (Address: 0x18008b280)
api-ms-win-crt-utility-l1-1-0.dll
  • rand (Address: 0x18008b298)
  • srand (Address: 0x18008b290)
CRYPT32.dll
  • CertFindExtension (Address: 0x18008a220)
  • CertFreeCertificateChain (Address: 0x18008a1f8)
  • CertFreeCertificateContext (Address: 0x18008a218)
  • CertGetCertificateChain (Address: 0x18008a200)
  • CertVerifyCertificateChainPolicy (Address: 0x18008a1f0)
  • CryptBinaryToStringA (Address: 0x18008a208)
  • CryptBinaryToStringW (Address: 0x18008a228)
  • CryptStringToBinaryW (Address: 0x18008a210)
FileSyncEvents.dll
  • GetGlobalEventMachine (Address: 0x18008a238)
FileSyncHost.DLL
  • ?GetGlobalSystemHost@@YAPEAVBaseHost@@XZ (Address: 0x18008a248)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18008a698)
  • CloseHandle (Address: 0x18008a608)
  • CompareStringOrdinal (Address: 0x18008a348)
  • CopyFileW (Address: 0x18008a388)
  • CreateDirectoryW (Address: 0x18008a328)
  • CreateEventW (Address: 0x18008a5f8)
  • CreateFileW (Address: 0x18008a678)
  • CreateIoCompletionPort (Address: 0x18008a5a8)
  • CreateMutexW (Address: 0x18008a510)
  • CreatePipe (Address: 0x18008a2f8)
  • CreateProcessW (Address: 0x18008a418)
  • CreateSymbolicLinkW (Address: 0x18008a340)
  • CreateThread (Address: 0x18008a568)
  • CreateToolhelp32Snapshot (Address: 0x18008a350)
  • DeleteCriticalSection (Address: 0x18008a620)
  • DeleteFileW (Address: 0x18008a538)
  • DeviceIoControl (Address: 0x18008a300)
  • DisableThreadLibraryCalls (Address: 0x18008a628)
  • EnterCriticalSection (Address: 0x18008a630)
  • ExpandEnvironmentStringsW (Address: 0x18008a570)
  • FindClose (Address: 0x18008a530)
  • FindFirstFileNameW (Address: 0x18008a2e0)
  • FindFirstFileW (Address: 0x18008a528)
  • FindFirstVolumeW (Address: 0x18008a488)
  • FindNextVolumeW (Address: 0x18008a258)
  • FindResourceExW (Address: 0x18008a3f8)
  • FindResourceW (Address: 0x18008a3f0)
  • FindVolumeClose (Address: 0x18008a260)
  • FreeLibrary (Address: 0x18008a4d8)
  • GetCommandLineW (Address: 0x18008a438)
  • GetCompressedFileSizeW (Address: 0x18008a2d8)
  • GetComputerNameW (Address: 0x18008a5b0)
  • GetCurrentProcess (Address: 0x18008a508)
  • GetCurrentProcessId (Address: 0x18008a500)
  • GetCurrentThread (Address: 0x18008a558)
  • GetCurrentThreadId (Address: 0x18008a548)
  • GetDiskFreeSpaceExW (Address: 0x18008a268)
  • GetDllDirectoryW (Address: 0x18008a3c0)
  • GetEnvironmentVariableW (Address: 0x18008a430)
  • GetExitCodeProcess (Address: 0x18008a420)
  • GetFileAttributesExW (Address: 0x18008a278)
  • GetFileAttributesW (Address: 0x18008a270)
  • GetFileInformationByHandle (Address: 0x18008a280)
  • GetFileInformationByHandleEx (Address: 0x18008a3a8)
  • GetFileSize (Address: 0x18008a288)
  • GetFileSizeEx (Address: 0x18008a290)
  • GetFileType (Address: 0x18008a298)
  • GetFinalPathNameByHandleW (Address: 0x18008a2a0)
  • GetLastError (Address: 0x18008a600)
  • GetLongPathNameW (Address: 0x18008a458)
  • GetModuleFileNameW (Address: 0x18008a5e0)
  • GetModuleHandleW (Address: 0x18008a3b8)
  • GetPrivateProfileStringW (Address: 0x18008a370)
  • GetProcAddress (Address: 0x18008a4d0)
  • GetProcessHeap (Address: 0x18008a590)
  • GetProcessIoCounters (Address: 0x18008a368)
  • GetProcessTimes (Address: 0x18008a428)
  • GetProductInfo (Address: 0x18008a470)
  • GetQueuedCompletionStatus (Address: 0x18008a550)
  • GetSystemTime (Address: 0x18008a4e8)
  • GetSystemTimeAsFileTime (Address: 0x18008a540)
  • GetSystemTimes (Address: 0x18008a3d8)
  • GetTickCount64 (Address: 0x18008a5b8)
  • GetUserDefaultLCID (Address: 0x18008a490)
  • GetUserDefaultUILanguage (Address: 0x18008a408)
  • GetUserGeoID (Address: 0x18008a498)
  • GetVersionExA (Address: 0x18008a400)
  • GetVersionExW (Address: 0x18008a4e0)
  • GetVolumePathNameW (Address: 0x18008a2a8)
  • GlobalAlloc (Address: 0x18008a318)
  • GlobalFree (Address: 0x18008a330)
  • GlobalLock (Address: 0x18008a680)
  • GlobalUnlock (Address: 0x18008a320)
  • HeapAlloc (Address: 0x18008a588)
  • HeapDestroy (Address: 0x18008a520)
  • HeapFree (Address: 0x18008a598)
  • HeapReAlloc (Address: 0x18008a580)
  • HeapSize (Address: 0x18008a518)
  • InitializeCriticalSection (Address: 0x18008a618)
  • InitializeCriticalSectionEx (Address: 0x18008a5e8)
  • InitializeSListHead (Address: 0x18008a648)
  • IsDebuggerPresent (Address: 0x18008a2e8)
  • IsProcessorFeaturePresent (Address: 0x18008a650)
  • IsWow64Process (Address: 0x18008a308)
  • K32GetModuleFileNameExW (Address: 0x18008a480)
  • LCIDToLocaleName (Address: 0x18008a4a0)
  • LeaveCriticalSection (Address: 0x18008a638)
  • LoadLibraryExW (Address: 0x18008a310)
  • LoadLibraryW (Address: 0x18008a4c8)
  • LoadResource (Address: 0x18008a3c8)
  • LocalAlloc (Address: 0x18008a4c0)
  • LocalFree (Address: 0x18008a4b8)
  • LockResource (Address: 0x18008a3e0)
  • lstrlenW (Address: 0x18008a578)
  • MoveFileExW (Address: 0x18008a390)
  • MoveFileW (Address: 0x18008a4b0)
  • MultiByteToWideChar (Address: 0x18008a5d8)
  • OpenFileById (Address: 0x18008a3b0)
  • OpenProcess (Address: 0x18008a4f0)
  • OutputDebugStringW (Address: 0x18008a640)
  • PostQueuedCompletionStatus (Address: 0x18008a5a0)
  • Process32FirstW (Address: 0x18008a358)
  • Process32NextW (Address: 0x18008a360)
  • QueryPerformanceCounter (Address: 0x18008a5c0)
  • QueryPerformanceFrequency (Address: 0x18008a5c8)
  • ReadDirectoryChangesW (Address: 0x18008a338)
  • ReadFile (Address: 0x18008a2b0)
  • RegisterApplicationRestart (Address: 0x18008a3a0)
  • ReleaseMutex (Address: 0x18008a450)
  • ReleaseSRWLockExclusive (Address: 0x18008a690)
  • RemoveDirectoryW (Address: 0x18008a2b8)
  • ReplaceFileW (Address: 0x18008a688)
  • RtlCaptureContext (Address: 0x18008a398)
  • RtlLookupFunctionEntry (Address: 0x18008a670)
  • RtlVirtualUnwind (Address: 0x18008a668)
  • SetDllDirectoryW (Address: 0x18008a380)
  • SetEvent (Address: 0x18008a5f0)
  • SetFileAttributesW (Address: 0x18008a2c0)
  • SetFileInformationByHandle (Address: 0x18008a2c8)
  • SetFilePointer (Address: 0x18008a2d0)
  • SetHandleInformation (Address: 0x18008a2f0)
  • SetLastError (Address: 0x18008a460)
  • SetProcessShutdownParameters (Address: 0x18008a410)
  • SetThreadInformation (Address: 0x18008a3d0)
  • SetThreadPriority (Address: 0x18008a560)
  • SetUnhandledExceptionFilter (Address: 0x18008a658)
  • SizeofResource (Address: 0x18008a3e8)
  • Sleep (Address: 0x18008a448)
  • SleepConditionVariableSRW (Address: 0x18008a6a8)
  • SystemTimeToFileTime (Address: 0x18008a4a8)
  • TerminateProcess (Address: 0x18008a4f8)
  • UnhandledExceptionFilter (Address: 0x18008a660)
  • VerifyVersionInfoW (Address: 0x18008a468)
  • VerSetConditionMask (Address: 0x18008a478)
  • WaitForMultipleObjects (Address: 0x18008a440)
  • WaitForSingleObject (Address: 0x18008a610)
  • WakeAllConditionVariable (Address: 0x18008a6a0)
  • WideCharToMultiByte (Address: 0x18008a5d0)
  • WritePrivateProfileStringW (Address: 0x18008a378)
LoggingPlatform.DLL
  • ??0StructuredEvent@@QEAA@PEBDH0AEBU_GUID@@IIII@Z (Address: 0x18008a710)
  • ??0TelemetryEvent@@QEAA@PEBD0AEBU_GUID@@II00II@Z (Address: 0x18008a6e8)
  • ??1TelemetryEvent@@QEAA@XZ (Address: 0x18008a6f0)
  • ?GetActiveHydrationsCount@QoS@@YAIXZ (Address: 0x18008a6e0)
  • ?GetLoggingSession@@YA?AV?$shared_ptr@VILoggingSession@@@std@@XZ (Address: 0x18008a6c8)
  • ?IsAnyLibraryIrmEnabled@QoS@@YA_NXZ (Address: 0x18008a6b8)
  • ?LoggingRecordAssert@@YAXPEB_W00I0_NI1@Z (Address: 0x18008a6d8)
  • ?LoggingRotateIfNeeded@@YAXXZ (Address: 0x18008a720)
  • ?LoggingSanitizeFilename@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z (Address: 0x18008a6c0)
  • ?LoggingSendTelemetryEvent@@YAXAEAUTelemetryEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18008a700)
  • ?LoggingShouldSample@@YA_NN@Z (Address: 0x18008a6d0)
  • ?LoggingWriteStructuredEvent@@YAXAEBUStructuredEvent@@QEAUStructuredEventParameter@@@Z (Address: 0x18008a718)
  • ?NarrowStringToWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD@Z (Address: 0x18008a730)
  • ?OneDriveAssertWorker@@YAXPEB_WW4OneDriveAssertType@@0I000ZZ (Address: 0x18008a728)
  • ?SetEventExpiration@TelemetryEvent@@QEAAXII@Z (Address: 0x18008a6f8)
  • ?StripPrivateInfoFromString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_W@Z (Address: 0x18008a708)
MSVCP140.dll
  • _Cnd_broadcast (Address: 0x18008a760)
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x18008a7b8)
  • _Mtx_init_in_situ (Address: 0x18008a740)
  • _Mtx_lock (Address: 0x18008a748)
  • _Mtx_unlock (Address: 0x18008a758)
  • _Thrd_id (Address: 0x18008a768)
  • _Thrd_join (Address: 0x18008a798)
  • _Wcscoll (Address: 0x18008a848)
  • _Wcsxfrm (Address: 0x18008a840)
  • _Xtime_get_ticks (Address: 0x18008a850)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18008a7c0)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18008a790)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18008a7a8)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18008a770)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18008a7a0)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18008a778)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18008a7b0)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x18008a780)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18008a868)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18008a8a8)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18008a830)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18008a8c0)
  • ?_Getname@_Locinfo@std@@QEBAPEBDXZ (Address: 0x18008a8f0)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18008a860)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18008a8c8)
  • ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z (Address: 0x18008a870)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18008a9d8)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18008aa98)
  • ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z (Address: 0x18008a8d0)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z (Address: 0x18008a8d8)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18008aa10)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18008aad8)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18008a750)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18008a9d0)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18008aa90)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x18008ab08)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x18008a958)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18008a950)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18008a978)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18008aa80)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18008a800)
  • ?_Xruntime_error@std@@YAXPEBD@Z (Address: 0x18008a908)
  • ??0_Locinfo@std@@QEAA@HPEBD@Z (Address: 0x18008a900)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18008a838)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x18008a918)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18008aa58)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18008aaf8)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18008aa60)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18008ab00)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x18008a940)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18008aa40)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18008aaf0)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18008a820)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x18008a8f8)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x18008a910)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a980)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa68)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a990)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa78)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a938)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18008a988)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18008aa70)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x18008a818)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18008a8e8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z (Address: 0x18008a7e0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18008a930)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z (Address: 0x18008a7d8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18008a928)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18008a7d0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18008a920)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18008a878)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x18008a960)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z (Address: 0x18008a788)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x18008a948)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18008a7c8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18008a968)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x18008a8e0)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x18008a8a0)
  • ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x18008a828)
  • ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ (Address: 0x18008aa30)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x18008a9a0)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18008aa18)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18008aae0)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18008a7e8)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x18008a9c0)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18008a7f8)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18008a858)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18008aa08)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18008aad0)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18008a810)
  • ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x18008aa28)
  • ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a890)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18008aa00)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18008aac8)
  • ?setf@ios_base@std@@QEAAHH@Z (Address: 0x18008a898)
  • ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18008aa48)
  • ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z (Address: 0x18008aa50)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18008aa38)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18008aae8)
  • ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a888)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18008a9e8)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18008aaa8)
  • ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ (Address: 0x18008a880)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18008a9a8)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18008aa88)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18008aa20)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18008a970)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18008a9e0)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18008aaa0)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18008a8b8)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18008a808)
  • ?toupper@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18008a8b0)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18008a9f0)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18008aab0)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x18008a9b8)
  • ?widen@?$ctype@_W@std@@QEBA_WD@Z (Address: 0x18008a7f0)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18008a9b0)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x18008a998)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18008a9f8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18008aab8)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18008a9c8)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18008aac0)
ole32.dll
  • CoCreateGuid (Address: 0x18008b2a8)
  • CoCreateInstance (Address: 0x18008b2e0)
  • CoInitializeEx (Address: 0x18008b2e8)
  • CoSetProxyBlanket (Address: 0x18008b2b0)
  • CoTaskMemFree (Address: 0x18008b2c0)
  • CoUninitialize (Address: 0x18008b2d8)
  • CreateBindCtx (Address: 0x18008b2b8)
  • CreateItemMoniker (Address: 0x18008b2f0)
  • CreateStreamOnHGlobal (Address: 0x18008b2c8)
  • GetRunningObjectTable (Address: 0x18008b2f8)
  • StringFromCLSID (Address: 0x18008b300)
  • StringFromGUID2 (Address: 0x18008b2d0)
OLEAUT32.dll
  • GetRecordInfoFromTypeInfo (Address: 0x18008ab18)
  • LoadRegTypeLib (Address: 0x18008ab20)
  • LoadTypeLib (Address: 0x18008ab28)
RPCRT4.dll
  • RpcBindingFree (Address: 0x18008ab90)
  • RpcBindingFromStringBindingW (Address: 0x18008ab98)
  • RpcBindingSetAuthInfoExW (Address: 0x18008ab48)
  • RpcBindingVectorFree (Address: 0x18008aba0)
  • RpcEpRegisterW (Address: 0x18008ab88)
  • RpcEpUnregister (Address: 0x18008ab58)
  • RpcServerInqBindings (Address: 0x18008ab70)
  • RpcServerInqCallAttributesW (Address: 0x18008ab40)
  • RpcServerRegisterIfEx (Address: 0x18008ab50)
  • RpcServerUnregisterIf (Address: 0x18008ab38)
  • RpcServerUseProtseqW (Address: 0x18008ab80)
  • RpcStringBindingComposeW (Address: 0x18008ab78)
  • RpcStringFreeW (Address: 0x18008ab68)
  • UuidCreate (Address: 0x18008ab60)
Secur32.dll
  • AcceptSecurityContext (Address: 0x18008ace0)
  • AcquireCredentialsHandleW (Address: 0x18008ace8)
  • ApplyControlToken (Address: 0x18008ad08)
  • DecryptMessage (Address: 0x18008acf8)
  • DeleteSecurityContext (Address: 0x18008acc8)
  • EncryptMessage (Address: 0x18008ad10)
  • FreeCredentialsHandle (Address: 0x18008acd8)
  • GetUserNameExW (Address: 0x18008acd0)
  • InitializeSecurityContextA (Address: 0x18008ad18)
  • InitializeSecurityContextW (Address: 0x18008ad00)
  • QueryContextAttributesW (Address: 0x18008acf0)
SHELL32.dll
  • (Address: 0x18008abc8)
  • CommandLineToArgvW (Address: 0x18008ac20)
  • SHAssocEnumHandlers (Address: 0x18008abf0)
  • SHChangeNotify (Address: 0x18008abc0)
  • SHCreateDirectoryExW (Address: 0x18008abe8)
  • SHCreateItemFromParsingName (Address: 0x18008ac08)
  • ShellExecuteExW (Address: 0x18008abb0)
  • SHFileOperationW (Address: 0x18008ac10)
  • SHGetFolderPathAndSubDirW (Address: 0x18008abd8)
  • SHGetFolderPathW (Address: 0x18008abe0)
  • SHGetKnownFolderPath (Address: 0x18008abf8)
  • SHGetPropertyStoreFromParsingName (Address: 0x18008ac18)
  • SHGetSpecialFolderPathW (Address: 0x18008ac00)
  • SHParseDisplayName (Address: 0x18008abb8)
  • SHSetKnownFolderPath (Address: 0x18008abd0)
SHLWAPI.dll
  • AssocQueryStringW (Address: 0x18008aca0)
  • PathFileExistsW (Address: 0x18008ac90)
  • PathIsDirectoryEmptyW (Address: 0x18008acb0)
  • PathIsDirectoryW (Address: 0x18008ac78)
  • PathIsPrefixW (Address: 0x18008ac60)
  • PathRemoveFileSpecW (Address: 0x18008ac50)
  • PathStripPathW (Address: 0x18008ac68)
  • SHCreateStreamOnFileW (Address: 0x18008aca8)
  • SHDeleteKeyW (Address: 0x18008ac48)
  • SHDeleteValueW (Address: 0x18008ac40)
  • SHGetValueA (Address: 0x18008ac38)
  • SHGetValueW (Address: 0x18008ac88)
  • SHRegGetBoolUSValueW (Address: 0x18008ac98)
  • SHRegGetPathW (Address: 0x18008acb8)
  • SHRegGetUSValueW (Address: 0x18008ac80)
  • SHRegGetValueW (Address: 0x18008ac70)
  • SHSetValueW (Address: 0x18008ac30)
  • StrStrIW (Address: 0x18008ac58)
Telemetry.dll
  • ??0ScenarioQosChangeEnumeration@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_WAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z (Address: 0x18008ad78)
  • ??0ScenarioQosPlatWrapper@QoS@@IEAA@PEB_W@Z (Address: 0x18008ad68)
  • ??0ScenarioQosSyncWrapper@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_W@Z (Address: 0x18008add8)
  • ??0ScenarioQosSyncWrapper@QoS@@QEAA@AEBVQosSyncWrapperConfig@1@PEB_W1@Z (Address: 0x18008adb8)
  • ??1QosSyncWrapperConfig@QoS@@QEAA@XZ (Address: 0x18008ada8)
  • ??1ScenarioQosPlatWrapper@QoS@@UEAA@XZ (Address: 0x18008ad50)
  • ??1ScenarioQosSyncWrapper@QoS@@UEAA@XZ (Address: 0x18008ad48)
  • ?FreeTxnContextString@ScenarioQosWrapper@QoS@@UEAAXPEB_W@Z (Address: 0x18008add0)
  • ?GetDownloadFileScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N@Z (Address: 0x18008ada0)
  • ?GetPollingChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad98)
  • ?GetQuotaStatusScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008adc8)
  • ?GetRetrieveQuotaStateScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008adc0)
  • ?GetRetrieveSpaceUsedScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ade0)
  • ?GetStartupChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad80)
  • ?GetTxnContextString@ScenarioQosWrapper@QoS@@UEAAPEB_WXZ (Address: 0x18008ad38)
  • ?GetUploadFileScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N@Z (Address: 0x18008ad90)
  • ?GetUploadMetadataScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_W_N00@Z (Address: 0x18008adb0)
  • ?GetWnsChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QEBAPEB_WXZ (Address: 0x18008ad88)
  • ?RecordApi@ScenarioQosPlatWrapper@QoS@@QEAAXJW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008ad30)
  • ?RecordApiWithSize@ScenarioQosSyncWrapper@QoS@@UEAAXJIIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@@Z (Address: 0x18008adf0)
  • ?RecordConnectingToWnsApi@ScenarioQosConnectingToWns@QoS@@QEAAXJIII@Z (Address: 0x18008ad60)
  • ?RecordQosTelemetry@ScenarioQosWrapper@QoS@@MEAAXPEB_W0W4Id@PropertyId@TelemetryConstants@@_JIHW4Type@ErrorType@5@0V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@0AEBUScenarioQosWrapperAdditionalInfo@12@@Z (Address: 0x18008ad28)
  • ?RecordScenario@ScenarioQosPlatWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008ad40)
  • ?RecordScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@@Z (Address: 0x18008adf8)
  • ?RecordScenarioWithSize@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z (Address: 0x18008ae00)
  • ?RecordServiceApiResponse@ScenarioQosSyncWrapper@QoS@@UEAAXJIIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@00_N02@Z (Address: 0x18008ade8)
  • ?RecordUploadDownloadScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IHAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@11II@Z (Address: 0x18008ae10)
  • ?RecordUploadDownloadTransferTestScenario@ScenarioQosSyncWrapper@QoS@@UEAAXHW4Type@ErrorType@TelemetryConstants@@IAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1II1@Z (Address: 0x18008ae08)
  • ?SetComponent@ScenarioQosWrapper@QoS@@QEAAXPEB_W@Z (Address: 0x18008ad70)
  • ?StartCreateWnsChannel@ScenarioQosPlatWrapper@QoS@@QEAAXXZ (Address: 0x18008ad58)
UpdateRingSettings.dll
  • ?GetUpdateRingSettingsManager@@YAPEAVIUpdateRingSettingsManager@@XZ (Address: 0x18008aee8)
USER32.dll
  • CloseClipboard (Address: 0x18008ae60)
  • CreateWindowExW (Address: 0x18008aec0)
  • DestroyWindow (Address: 0x18008ae30)
  • DispatchMessageW (Address: 0x18008aeb8)
  • EnumWindows (Address: 0x18008ae80)
  • GetClassNameW (Address: 0x18008ae88)
  • GetMessageW (Address: 0x18008aea8)
  • GetWindowThreadProcessId (Address: 0x18008ae90)
  • OpenClipboard (Address: 0x18008ae58)
  • PostMessageW (Address: 0x18008ae48)
  • RegisterClassW (Address: 0x18008ae20)
  • RegisterClipboardFormatW (Address: 0x18008ae78)
  • RegisterPowerSettingNotification (Address: 0x18008ae68)
  • RegisterSuspendResumeNotification (Address: 0x18008ae40)
  • SendMessageTimeoutW (Address: 0x18008aea0)
  • SetClipboardData (Address: 0x18008ae70)
  • ShowWindow (Address: 0x18008ae38)
  • SystemParametersInfoW (Address: 0x18008ae98)
  • TranslateMessage (Address: 0x18008aeb0)
  • UnregisterPowerSettingNotification (Address: 0x18008ae50)
  • UnregisterSuspendResumeNotification (Address: 0x18008ae28)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x18008aed8)
  • GetDefaultUserProfileDirectoryW (Address: 0x18008aed0)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x18008afa8)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x18008af48)
  • __current_exception (Address: 0x18008af58)
  • __current_exception_context (Address: 0x18008af50)
  • __RTDynamicCast (Address: 0x18008af18)
  • __std_exception_copy (Address: 0x18008af08)
  • __std_exception_destroy (Address: 0x18008af00)
  • __std_terminate (Address: 0x18008af10)
  • __std_type_info_compare (Address: 0x18008af68)
  • __std_type_info_destroy_list (Address: 0x18008af40)
  • __std_type_info_name (Address: 0x18008af60)
  • _CxxThrowException (Address: 0x18008af28)
  • _purecall (Address: 0x18008aef8)
  • memchr (Address: 0x18008af38)
  • memcmp (Address: 0x18008af98)
  • memcpy (Address: 0x18008af78)
  • memmove (Address: 0x18008af70)
  • memset (Address: 0x18008af30)
  • strchr (Address: 0x18008af80)
  • wcschr (Address: 0x18008af20)
  • wcsrchr (Address: 0x18008af88)
  • wcsstr (Address: 0x18008af90)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x18008afc8)
  • GetFileVersionInfoW (Address: 0x18008afc0)
  • VerQueryValueW (Address: 0x18008afb8)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x18008afe0)
  • WinHttpGetIEProxyConfigForCurrentUser (Address: 0x18008aff0)
  • WinHttpGetProxyForUrl (Address: 0x18008afe8)
  • WinHttpOpen (Address: 0x18008afd8)
WININET.dll
  • InternetCheckConnectionW (Address: 0x18008b000)
WS2_32.dll
  • bind (Address: 0x18008b068)
  • closesocket (Address: 0x18008b088)
  • freeaddrinfo (Address: 0x18008b078)
  • getaddrinfo (Address: 0x18008b080)
  • getpeername (Address: 0x18008b038)
  • getsockname (Address: 0x18008b040)
  • htons (Address: 0x18008b018)
  • ntohs (Address: 0x18008b010)
  • setsockopt (Address: 0x18008b048)
  • WSAAddressToStringW (Address: 0x18008b030)
  • WSAGetLastError (Address: 0x18008b028)
  • WSAIoctl (Address: 0x18008b060)
  • WSARecv (Address: 0x18008b050)
  • WSASend (Address: 0x18008b058)
  • WSASocketW (Address: 0x18008b020)
  • WSAStartup (Address: 0x18008b070)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x18008b098)
  • WTSFreeMemory (Address: 0x18008b0a8)
  • WTSQuerySessionInformationW (Address: 0x18008b0a0)
  • WTSQueryUserToken (Address: 0x18008b0b0)
XmlLite.dll
  • CreateXmlReader (Address: 0x18008b0c0)