ShareHost.dll

Description: ShareHost

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: 29bf9841e4610f17db8e95978f3a5a36

File Size: 1.1 MB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x36b0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x19ed0)
  • DllGetClassObject (Ordinal: 3, Address: 0x5240)
  • ResolveConnectedSharePlatformToken (Ordinal: 4, Address: 0x26960)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-internal-l1-1-2.dll
  • GetEffectivePackageStatusForUser (Address: 0x1800ce4f0)
api-ms-win-appmodel-runtime-internal-l1-1-4.dll
  • GetExtensionProperty (Address: 0x1800ce500)
api-ms-win-appmodel-runtime-l1-1-0.dll
  • GetPackageFamilyName (Address: 0x1800ce520)
  • GetPackagesByPackageFamily (Address: 0x1800ce518)
  • PackageFamilyNameFromFullName (Address: 0x1800ce510)
api-ms-win-appmodel-runtime-l1-1-1.dll
  • GetApplicationUserModelIdFromToken (Address: 0x1800ce530)
  • GetPackageFamilyNameFromToken (Address: 0x1800ce540)
  • ParseApplicationUserModelId (Address: 0x1800ce538)
api-ms-win-appmodel-state-l1-2-0.dll
  • CloseState (Address: 0x1800ce550)
  • GetSystemAppDataKey (Address: 0x1800ce558)
  • OpenStateExplicit (Address: 0x1800ce560)
api-ms-win-appmodel-unlock-l1-1-0.dll
  • IsDeveloperModeEnabled (Address: 0x1800ce570)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800ce580)
api-ms-win-core-atoms-l1-1-0.dll
  • GlobalGetAtomNameW (Address: 0x1800ce590)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1800ce5d0)
  • CoCreateGuid (Address: 0x1800ce608)
  • CoCreateInstance (Address: 0x1800ce5e0)
  • CoGetCallContext (Address: 0x1800ce600)
  • CoGetInterfaceAndReleaseStream (Address: 0x1800ce5e8)
  • CoGetMalloc (Address: 0x1800ce5a8)
  • CoGetStdMarshalEx (Address: 0x1800ce620)
  • CoInitializeEx (Address: 0x1800ce628)
  • CoMarshalInterface (Address: 0x1800ce5c8)
  • CoMarshalInterThreadInterfaceInStream (Address: 0x1800ce630)
  • CoReleaseMarshalData (Address: 0x1800ce5c0)
  • CoTaskMemAlloc (Address: 0x1800ce610)
  • CoTaskMemFree (Address: 0x1800ce5b8)
  • CoTaskMemRealloc (Address: 0x1800ce5d8)
  • CoUninitialize (Address: 0x1800ce5f8)
  • CoUnmarshalInterface (Address: 0x1800ce5a0)
  • CoWaitForMultipleHandles (Address: 0x1800ce5f0)
  • CreateStreamOnHGlobal (Address: 0x1800ce618)
  • StringFromGUID2 (Address: 0x1800ce5b0)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1800ce640)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • ObjectStublessClient3 (Address: 0x1800ce650)
  • ObjectStublessClient4 (Address: 0x1800ce658)
  • ObjectStublessClient5 (Address: 0x1800ce660)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800ce670)
  • IsDebuggerPresent (Address: 0x1800ce678)
  • OutputDebugStringW (Address: 0x1800ce680)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800ce690)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800ce6a0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800ce6d0)
  • RaiseException (Address: 0x1800ce6b8)
  • SetLastError (Address: 0x1800ce6c8)
  • SetUnhandledExceptionFilter (Address: 0x1800ce6c0)
  • UnhandledExceptionFilter (Address: 0x1800ce6b0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800ce6e0)
  • DuplicateHandle (Address: 0x1800ce6e8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800ce700)
  • HeapAlloc (Address: 0x1800ce708)
  • HeapFree (Address: 0x1800ce6f8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800ce718)
  • LocalFree (Address: 0x1800ce720)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • PowerCreateRequest (Address: 0x1800ce730)
  • PowerSetRequest (Address: 0x1800ce738)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800ce788)
  • FindResourceExW (Address: 0x1800ce778)
  • FreeLibrary (Address: 0x1800ce770)
  • GetModuleFileNameA (Address: 0x1800ce750)
  • GetModuleHandleExW (Address: 0x1800ce748)
  • GetModuleHandleW (Address: 0x1800ce768)
  • GetProcAddress (Address: 0x1800ce760)
  • LoadResource (Address: 0x1800ce758)
  • LockResource (Address: 0x1800ce780)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800ce798)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800ce7a8)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800ce7e0)
  • GetCurrentProcess (Address: 0x1800ce7c8)
  • GetCurrentProcessId (Address: 0x1800ce7f0)
  • GetCurrentThread (Address: 0x1800ce7f8)
  • GetCurrentThreadId (Address: 0x1800ce7b8)
  • GetExitCodeThread (Address: 0x1800ce7e8)
  • GetProcessId (Address: 0x1800ce7d0)
  • GetThreadId (Address: 0x1800ce7c0)
  • OpenProcessToken (Address: 0x1800ce810)
  • OpenThreadToken (Address: 0x1800ce808)
  • SetThreadToken (Address: 0x1800ce800)
  • TerminateProcess (Address: 0x1800ce7d8)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1800ce820)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800ce830)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800ce840)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800ce858)
  • RegEnumKeyExW (Address: 0x1800ce878)
  • RegGetValueW (Address: 0x1800ce860)
  • RegOpenKeyExW (Address: 0x1800ce868)
  • RegQueryInfoKeyW (Address: 0x1800ce870)
  • RegQueryValueExW (Address: 0x1800ce850)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800ce890)
  • RtlLookupFunctionEntry (Address: 0x1800ce898)
  • RtlVirtualUnwind (Address: 0x1800ce888)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindExtensionW (Address: 0x1800ce8b0)
  • PathFindFileNameW (Address: 0x1800ce8a8)
  • PathIsFileSpecW (Address: 0x1800ce8b8)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrCmpIW (Address: 0x1800ce8c8)
  • StrCmpLogicalW (Address: 0x1800ce8d0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800ce8e0)
  • WideCharToMultiByte (Address: 0x1800ce8e8)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x1800ce8f8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800ce918)
  • AcquireSRWLockShared (Address: 0x1800ce968)
  • CreateEventExW (Address: 0x1800ce958)
  • CreateEventW (Address: 0x1800ce978)
  • CreateMutexExW (Address: 0x1800ce960)
  • CreateSemaphoreExW (Address: 0x1800ce908)
  • DeleteCriticalSection (Address: 0x1800ce930)
  • EnterCriticalSection (Address: 0x1800ce938)
  • InitializeCriticalSectionEx (Address: 0x1800ce940)
  • InitializeSRWLock (Address: 0x1800ce970)
  • LeaveCriticalSection (Address: 0x1800ce928)
  • OpenSemaphoreW (Address: 0x1800ce920)
  • ReleaseMutex (Address: 0x1800ce980)
  • ReleaseSemaphore (Address: 0x1800ce948)
  • ReleaseSRWLockExclusive (Address: 0x1800ce990)
  • ReleaseSRWLockShared (Address: 0x1800ce998)
  • SetEvent (Address: 0x1800ce988)
  • WaitForSingleObject (Address: 0x1800ce950)
  • WaitForSingleObjectEx (Address: 0x1800ce910)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800ce9c0)
  • InitOnceComplete (Address: 0x1800ce9c8)
  • InitOnceExecuteOnce (Address: 0x1800ce9b0)
  • Sleep (Address: 0x1800ce9b8)
  • SleepConditionVariableSRW (Address: 0x1800ce9a8)
  • WakeAllConditionVariable (Address: 0x1800ce9d0)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1800ce9e0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x1800ce9f0)
  • GetSystemTimeAsFileTime (Address: 0x1800ce9f8)
  • GetTickCount (Address: 0x1800cea08)
  • GetTickCount64 (Address: 0x1800cea00)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x1800cea18)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800cea30)
  • CloseThreadpoolWait (Address: 0x1800cea38)
  • CreateThreadpoolTimer (Address: 0x1800cea60)
  • CreateThreadpoolWait (Address: 0x1800cea48)
  • SetThreadpoolTimer (Address: 0x1800cea50)
  • SetThreadpoolWait (Address: 0x1800cea58)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800cea28)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800cea40)
api-ms-win-core-timezone-l1-1-0.dll
  • SystemTimeToFileTime (Address: 0x1800cea70)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800cea88)
  • EncodePointer (Address: 0x1800cea80)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x1800cea98)
  • RoOriginateError (Address: 0x1800ceab8)
  • RoOriginateErrorW (Address: 0x1800ceaa0)
  • RoTransformError (Address: 0x1800ceaa8)
  • SetRestrictedErrorInfo (Address: 0x1800ceab0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1800cead0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800ceac8)
  • RoReportFailedDelegate (Address: 0x1800cead8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800ceae8)
  • RoGetActivationFactory (Address: 0x1800ceaf0)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x1800ceb00)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x1800ceb90)
  • HSTRING_UserFree64 (Address: 0x1800ceb98)
  • HSTRING_UserMarshal (Address: 0x1800ceb80)
  • HSTRING_UserMarshal64 (Address: 0x1800ceb30)
  • HSTRING_UserSize (Address: 0x1800ceb20)
  • HSTRING_UserSize64 (Address: 0x1800ceb88)
  • HSTRING_UserUnmarshal (Address: 0x1800ceb50)
  • HSTRING_UserUnmarshal64 (Address: 0x1800ceb18)
  • WindowsCompareStringOrdinal (Address: 0x1800ceb68)
  • WindowsConcatString (Address: 0x1800ceb60)
  • WindowsCreateString (Address: 0x1800ceba0)
  • WindowsCreateStringReference (Address: 0x1800ceb10)
  • WindowsDeleteString (Address: 0x1800ceb40)
  • WindowsDuplicateString (Address: 0x1800ceb38)
  • WindowsGetStringLen (Address: 0x1800ceb48)
  • WindowsGetStringRawBuffer (Address: 0x1800ceb28)
  • WindowsIsStringEmpty (Address: 0x1800ceb78)
  • WindowsStringHasEmbeddedNull (Address: 0x1800ceb58)
  • WindowsSubstringWithSpecifiedLength (Address: 0x1800ceb70)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800cebc0)
  • EventProviderEnabled (Address: 0x1800cebb8)
  • EventRegister (Address: 0x1800cebd8)
  • EventSetInformation (Address: 0x1800cebb0)
  • EventUnregister (Address: 0x1800cebc8)
  • EventWriteTransfer (Address: 0x1800cebd0)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x1800cebe8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800cebf8)
api-ms-win-shcore-stream-l1-1-0.dll
  • IStream_Read (Address: 0x1800cec18)
  • IStream_Reset (Address: 0x1800cec10)
  • IStream_Size (Address: 0x1800cec08)
  • IStream_Write (Address: 0x1800cec20)
  • SHCreateMemStream (Address: 0x1800cec28)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x1800cec38)
  • SHTaskPoolQueueTask (Address: 0x1800cec40)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHGetThreadRef (Address: 0x1800cec50)
api-ms-win-shlwapi-ie-l1-1-0.dll
  • IUnknown_QueryService (Address: 0x1800cec68)
  • SHRegGetValueFromHKCUHKLM (Address: 0x1800cec60)
api-ms-win-shlwapi-winrt-storage-l1-1-1.dll
  • AssocCreate (Address: 0x1800cec78)
api-ms-win-storage-exports-external-l1-1-0.dll
  • STORAGE_CStorageItem_GetValidatedStorageItem (Address: 0x1800cec88)
combase.dll
  • (Address: 0x1800cec98)
CoreMessaging.dll
  • CoreUICreate (Address: 0x1800ce400)
  • MsgBufferShare (Address: 0x1800ce3f8)
  • MsgRelease (Address: 0x1800ce3f0)
CoreUIComponents.dll
  • CoreUIFactoryCreate (Address: 0x1800ce410)
msvcp110_win.dll
  • _Wcscoll (Address: 0x1800ceee0)
  • _Wcsxfrm (Address: 0x1800ceee8)
  • ?_Add_vtordisp1@?$basic_ios@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800ced60)
  • ?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800ceeb0)
  • ?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800cede0)
  • ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z (Address: 0x1800cee60)
  • ?_BADOFF@std@@3_JB (Address: 0x1800cecc0)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800cee70)
  • ?_Getcat@?$codecvt@GDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800cee48)
  • ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x1800cef18)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x1800cef40)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800ceef0)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800cee78)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800cee20)
  • ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z (Address: 0x1800cee90)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800ced90)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z (Address: 0x1800cee18)
  • ?_Orphan_all@_Container_base0@std@@QEAAXXZ (Address: 0x1800cecb0)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x1800ced50)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x1800ced40)
  • ?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z (Address: 0x1800ceca8)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x1800cef80)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1800ced98)
  • ?_Winerror_map@std@@YAPEBDH@Z (Address: 0x1800cef70)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800cef60)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800cee28)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800cef78)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800cef68)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1800ceef8)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x1800cef50)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800ceed0)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800cece0)
  • ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x1800cee98)
  • ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1800ced48)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1800cecd0)
  • ??0?$codecvt@GDH@std@@QEAA@_K@Z (Address: 0x1800cee50)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x1800cef38)
  • ??0id@locale@std@@QEAA@_K@Z (Address: 0x1800cef58)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x1800cef48)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x1800ceed8)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800ced58)
  • ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800ceeb8)
  • ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800cedd8)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1800ced80)
  • ??1?$codecvt@GDH@std@@MEAA@XZ (Address: 0x1800cee40)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x1800cee68)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x1800cee38)
  • ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z (Address: 0x1800cede8)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800cee80)
  • ??Bios_base@std@@QEBAPEAXXZ (Address: 0x1800ceec8)
  • ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x1800cef10)
  • ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800cece8)
  • ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800ced08)
  • ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800ced20)
  • ?exceptions@ios_base@std@@QEAAXH@Z (Address: 0x1800ceec0)
  • ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x1800ced78)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x1800cee08)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800cedf0)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1800ced10)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x1800cee10)
  • ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800cecf0)
  • ?id@?$codecvt@GDH@std@@2V0locale@2@A (Address: 0x1800cee30)
  • ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x1800cef08)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1800cef00)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800cedd0)
  • ?in@?$codecvt@GDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAG3AEAPEAG@Z (Address: 0x1800cee58)
  • ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x1800cef30)
  • ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800cecf8)
  • ?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1800ced28)
  • ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1800ced00)
  • ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1800ced70)
  • ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x1800cee88)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x1800cedc0)
  • ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1800ced18)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x1800ced30)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1800ced38)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x1800ced68)
  • ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x1800ceea0)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x1800ceda0)
  • ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x1800ceea8)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1800ced88)
  • ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x1800cecc8)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x1800cedc8)
  • ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1800cecd8)
  • ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x1800cef28)
  • ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x1800cef20)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x1800ceda8)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1800cecb8)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x1800cedf8)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x1800cee00)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x1800cedb0)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1800cedb8)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800cf0d8)
  • __CxxFrameHandler3 (Address: 0x1800cf130)
  • __dllonexit (Address: 0x1800cf0b8)
  • __ExceptionPtrAssign (Address: 0x1800cf0d0)
  • __ExceptionPtrCopy (Address: 0x1800cf080)
  • __ExceptionPtrCreate (Address: 0x1800cf0b0)
  • __ExceptionPtrCurrentException (Address: 0x1800cefa8)
  • __ExceptionPtrDestroy (Address: 0x1800cf048)
  • __ExceptionPtrRethrow (Address: 0x1800cefb0)
  • __ExceptionPtrToBool (Address: 0x1800cf170)
  • _amsg_exit (Address: 0x1800cf100)
  • _callnewh (Address: 0x1800cf078)
  • _CxxThrowException (Address: 0x1800cf150)
  • _errno (Address: 0x1800cefc0)
  • _get_errno (Address: 0x1800cefc8)
  • _initterm (Address: 0x1800cf0e0)
  • _lock (Address: 0x1800cf0c8)
  • _onexit (Address: 0x1800cf0a0)
  • _purecall (Address: 0x1800cef90)
  • _set_errno (Address: 0x1800cefb8)
  • _ui64tow_s (Address: 0x1800cf128)
  • _unlock (Address: 0x1800cf0c0)
  • _vsnprintf (Address: 0x1800cf020)
  • _vsnprintf_s (Address: 0x1800cf118)
  • _vsnwprintf (Address: 0x1800cf160)
  • _wcsicmp (Address: 0x1800cf000)
  • _wtoi (Address: 0x1800cf040)
  • _XcptFilter (Address: 0x1800cf110)
  • ??_V@YAXPEAX@Z (Address: 0x1800ceff8)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800cf060)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800cf058)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800cf018)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800cefa0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800cf120)
  • ??0exception@@QEAA@XZ (Address: 0x1800cf138)
  • ??1bad_cast@@UEAA@XZ (Address: 0x1800cf068)
  • ??1exception@@UEAA@XZ (Address: 0x1800cf140)
  • ??1type_info@@UEAA@XZ (Address: 0x1800cf090)
  • ??3@YAXPEAX@Z (Address: 0x1800cf148)
  • ?terminate@@YAXXZ (Address: 0x1800cf098)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800cef98)
  • free (Address: 0x1800cf0f0)
  • malloc (Address: 0x1800cf0e8)
  • memcmp (Address: 0x1800cf168)
  • memcpy (Address: 0x1800cf108)
  • memcpy_s (Address: 0x1800cf158)
  • memmove (Address: 0x1800cf0f8)
  • memmove_s (Address: 0x1800cefe8)
  • memset (Address: 0x1800cf088)
  • realloc (Address: 0x1800cf008)
  • sprintf_s (Address: 0x1800ceff0)
  • strchr (Address: 0x1800cefd8)
  • strncpy_s (Address: 0x1800cf0a8)
  • strrchr (Address: 0x1800cefe0)
  • strtol (Address: 0x1800cefd0)
  • toupper (Address: 0x1800cf070)
  • wcschr (Address: 0x1800cf038)
  • wcscmp (Address: 0x1800cf178)
  • wcscpy_s (Address: 0x1800cf010)
  • wcscspn (Address: 0x1800cf028)
  • wcsnlen (Address: 0x1800cf050)
  • wcsrchr (Address: 0x1800cf030)
ntdll.dll
  • EtwTraceMessage (Address: 0x1800cf1a8)
  • NtQueryInformationToken (Address: 0x1800cf190)
  • NtQueryWnfStateData (Address: 0x1800cf1b8)
  • RtlAllocateHeap (Address: 0x1800cf1a0)
  • RtlCompareUnicodeString (Address: 0x1800cf1b0)
  • RtlFreeHeap (Address: 0x1800cf188)
  • RtlGetAppContainerSidType (Address: 0x1800cf1c0)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800cf1d0)
  • RtlInitUnicodeString (Address: 0x1800cf198)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1800cf1d8)
  • RtlQueryPackageClaims (Address: 0x1800cf1c8)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1800ce440)
  • CStdStubBuffer_Connect (Address: 0x1800ce4a8)
  • CStdStubBuffer_CountRefs (Address: 0x1800ce430)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800ce460)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1800ce450)
  • CStdStubBuffer_Disconnect (Address: 0x1800ce498)
  • CStdStubBuffer_Invoke (Address: 0x1800ce470)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1800ce458)
  • CStdStubBuffer_QueryInterface (Address: 0x1800ce428)
  • I_RpcBindingInqLocalClientPID (Address: 0x1800ce4a0)
  • IUnknown_AddRef_Proxy (Address: 0x1800ce468)
  • IUnknown_QueryInterface_Proxy (Address: 0x1800ce490)
  • IUnknown_Release_Proxy (Address: 0x1800ce438)
  • NdrCStdStubBuffer_Release (Address: 0x1800ce478)
  • NdrDllCanUnloadNow (Address: 0x1800ce480)
  • NdrDllGetClassObject (Address: 0x1800ce488)
  • NdrOleAllocate (Address: 0x1800ce420)
  • NdrOleFree (Address: 0x1800ce448)
  • UuidCreate (Address: 0x1800ce4b0)
Windows.Storage.dll
  • SHCreateItemFromParsingName (Address: 0x1800ce4c8)
  • SHGetKnownFolderPath (Address: 0x1800ce4d8)
  • STORAGE_CreateStorageItemFromPath_FullTrustCaller (Address: 0x1800ce4c0)
  • STORAGE_CreateStorageItemFromShellItem_FullTrustCaller (Address: 0x1800ce4e0)
  • STORAGE_CStorageItem_GetValidatedStorageItemObject (Address: 0x1800ce4d0)