stdprov.dll

?GetNecessaryQueryForProperty@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAVCPropertyName@@AAPAU2@@Z (Address: 0x100191e4)
GetAccessMask (Address: 0x100191e8)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001923c)
_amsg_exit (Address: 0x10019214)
_CxxThrowException (Address: 0x10019204)
_except_handler4_common (Address: 0x10019240)
_ftol2 (Address: 0x10019200)
_initterm (Address: 0x10019208)
_itow (Address: 0x10019230)
_ltow (Address: 0x10019220)
_purecall (Address: 0x100191f8)
_vsnprintf (Address: 0x10019250)
_vsnwprintf (Address: 0x10019238)
_wtoi (Address: 0x10019234)
_wtol (Address: 0x10019224)
_XcptFilter (Address: 0x10019218)
??1type_info@@UAE@XZ (Address: 0x100191f0)
?terminate@@YAXXZ (Address: 0x10019244)
atol (Address: 0x1001924c)
free (Address: 0x10019210)
iswspace (Address: 0x10019254)
malloc (Address: 0x1001920c)
mbstowcs (Address: 0x10019228)
memcmp (Address: 0x100191fc)
memcpy (Address: 0x100191f4)
memcpy_s (Address: 0x1001922c)
memmove_s (Address: 0x1001921c)
memset (Address: 0x10019258)
sscanf_s (Address: 0x10019248)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x10019010)
SafeArrayCreate (Address: 0x1001902c)
SafeArrayDestroy (Address: 0x10019034)
SafeArrayGetDim (Address: 0x10019028)
SafeArrayGetElement (Address: 0x10019008)
SafeArrayGetLBound (Address: 0x10019030)
SafeArrayGetUBound (Address: 0x10019038)
SafeArrayPutElement (Address: 0x10019000)
SafeArrayUnaccessData (Address: 0x10019014)
SysAllocString (Address: 0x1001903c)
SysFreeString (Address: 0x10019018)
SysStringLen (Address: 0x1001900c)
VariantChangeType (Address: 0x10019024)
VariantClear (Address: 0x10019020)
VariantCopy (Address: 0x1001901c)
VariantInit (Address: 0x10019004)

SspiCli.dll

GetUserNameExW (Address: 0x10019044)

USERENV.dll

GetProfileType (Address: 0x1001904c)
LoadUserProfileW (Address: 0x10019050)
UnloadUserProfile (Address: 0x10019054)

wbemcomn.dll

_ThrowMemoryException_ (Address: 0x100192a0)
??0CFlexArray@@QAE@HH@Z (Address: 0x1001933c)
??0CFlexQueue@@QAE@H@Z (Address: 0x100192b4)
??0CNtSecurityDescriptor@@QAE@PAX@Z (Address: 0x10019270)
??0CWStringArray@@QAE@HH@Z (Address: 0x100192c0)
??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x100192d4)
??0Registry@@QAE@PAUHKEY__@@KPBG@Z (Address: 0x10019310)
??0WString@@QAE@PAGH@Z (Address: 0x10019298)
??1CFlexArray@@QAE@XZ (Address: 0x1001934c)
??1CFlexQueue@@QAE@XZ (Address: 0x100192b8)
??1CNtAcl@@QAE@XZ (Address: 0x10019290)
??1CNtSecurityDescriptor@@QAE@XZ (Address: 0x10019274)
??1CNtSid@@QAE@XZ (Address: 0x10019294)
??1CWStringArray@@QAE@XZ (Address: 0x100192c4)
??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x100192d0)
??1QL1_Parser@@UAE@XZ (Address: 0x100192d8)
??1Registry@@QAE@XZ (Address: 0x1001930c)
??ACFlexArray@@QAEAAPAXH@Z (Address: 0x100192ec)
??ACFlexArray@@QBEPAXH@Z (Address: 0x100192e4)
?Add@CWStringArray@@QAEHPBG@Z (Address: 0x100192cc)
?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x100192e0)
?DeleteString@WString@@AAEXPAG@Z (Address: 0x1001929c)
?Dequeue@CFlexQueue@@QAEPAXXZ (Address: 0x100192e8)
?Empty@CFlexArray@@QAEXXZ (Address: 0x10019338)
?Empty@CPropertyName@@QAEXXZ (Address: 0x100192b0)
?Empty@CWStringArray@@QAEXXZ (Address: 0x100192c8)
?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x100192bc)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x10019344)
?GetBinary@Registry@@QAEHPBGPAPAEPAK@Z (Address: 0x100192f0)
?GetDacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x10019288)
?GetDWORD@Registry@@QAEHPBGPAK@Z (Address: 0x10019260)
?GetGroup@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x10019284)
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x10019300)
?GetOwner@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x10019280)
?GetQWORD@Registry@@QAEHPBGPA_K@Z (Address: 0x10019264)
?GetSacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x1001928c)
?GetStr@Registry@@QAEHPBGPAPAG@Z (Address: 0x10019308)
?GetType@Registry@@QAEHPBGPAK@Z (Address: 0x10019314)
?Init@CPropertyName@@QAEXXZ (Address: 0x100192ac)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x10019348)
?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x100192dc)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x10019340)
?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x10019330)
?SetBinary@Registry@@QAEHPBGPAEK@Z (Address: 0x100192f4)
?SetDWORD@Registry@@QAEHPBGK@Z (Address: 0x100192a4)
?SetExpandStr@Registry@@QAEHPBG0@Z (Address: 0x100192f8)
?SetMultiStr@Registry@@QAEHPBGPAGK@Z (Address: 0x10019304)
?SetQWORD@Registry@@QAEHPBG_K@Z (Address: 0x1001926c)
?SetStr@Registry@@QAEHPBG0@Z (Address: 0x100192fc)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x10019354)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x10019350)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1001931c)
BreakOnDbgAndRenterLoop (Address: 0x100192a8)
BuildSecurityDescriptorParameter (Address: 0x10019278)
DebugTrace (Address: 0x10019324)
ErrorTrace (Address: 0x10019320)
GetAccessToken (Address: 0x10019358)
GetMemLogObject (Address: 0x10019318)
GetSecurityDescriptorFromParameters (Address: 0x1001927c)
IsNT (Address: 0x10019334)
ReadUI64 (Address: 0x10019268)
RegisterDLL (Address: 0x1001932c)
UnRegisterDLL (Address: 0x10019328)