wbemcore.dll

Description: Windows Management Instrumentation

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 129299a8a2fc6c2b17fc4ef13fb90c88

File Size: 1.7 MB

Uploaded At: Dec. 1, 2025, 8:18 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x75570)
  • DllGetClassObject (Ordinal: 2, Address: 0x75200)
  • DllRegisterServer (Ordinal: 3, Address: 0x757e0)
  • DllUnregisterServer (Ordinal: 4, Address: 0x75bd0)
  • Reinitialize (Ordinal: 5, Address: 0x75f50)
  • Shutdown (Ordinal: 6, Address: 0x75d70)

Imported DLLs & Functions

ADVAPI32.dll
  • AccessCheck (Address: 0x1800df910)
  • AllocateAndInitializeSid (Address: 0x1800df970)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800df988)
  • EventActivityIdControl (Address: 0x1800df998)
  • FreeSid (Address: 0x1800df980)
  • GetLengthSid (Address: 0x1800df940)
  • GetSecurityDescriptorControl (Address: 0x1800df930)
  • GetSecurityDescriptorDacl (Address: 0x1800df968)
  • GetSecurityDescriptorSacl (Address: 0x1800df908)
  • GetSidSubAuthority (Address: 0x1800df928)
  • GetSidSubAuthorityCount (Address: 0x1800df920)
  • GetTokenInformation (Address: 0x1800df938)
  • IsValidSecurityDescriptor (Address: 0x1800df978)
  • OpenThreadToken (Address: 0x1800df990)
  • PrivilegeCheck (Address: 0x1800df918)
  • RegCloseKey (Address: 0x1800df9a0)
  • RegCreateKeyExW (Address: 0x1800df958)
  • RegDeleteKeyW (Address: 0x1800df950)
  • RegDeleteValueW (Address: 0x1800df948)
  • RegNotifyChangeKeyValue (Address: 0x1800df9a8)
  • RegOpenKeyExW (Address: 0x1800df9b8)
  • RegQueryValueExW (Address: 0x1800df9c8)
  • RegSetValueExW (Address: 0x1800df9c0)
  • RevertToSelf (Address: 0x1800df9b0)
  • SetThreadToken (Address: 0x1800df960)
api-ms-win-core-com-l1-1-0.dll
  • CoWaitForMultipleHandles (Address: 0x1800e05f0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • SetLastError (Address: 0x1800e0600)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800e0620)
  • HeapAlloc (Address: 0x1800e0628)
  • HeapFree (Address: 0x1800e0618)
  • HeapReAlloc (Address: 0x1800e0610)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeExW (Address: 0x1800e0638)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetVersion (Address: 0x1800e0648)
esscli.dll
  • ??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z (Address: 0x1800e0660)
  • ??0CStandardMetaData@@QEAA@PEAUIWbemServices@@@Z (Address: 0x1800e0670)
  • ??1CContextMetaData@@QEAA@XZ (Address: 0x1800e0680)
  • ??1CStandardMetaData@@UEAA@XZ (Address: 0x1800e0658)
  • ?GetNecessaryQueryForClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEAUIWbemClassObject@@AEAVCWStringArray@@AEAPEAU2@@Z (Address: 0x1800e0668)
  • ?SimplifyQueryForChild@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEBGPEAUIWbemClassObject@@PEAVCContextMetaData@@AEAPEAU2@@Z (Address: 0x1800e0678)
FastProx.dll
  • ?_GetCoreInfo@CWbemObject@@UEAAJJPEAPEAX@Z (Address: 0x1800dfce8)
  • ??0CLimitationMapping@@QEAA@XZ (Address: 0x1800e0180)
  • ??0CWbemClass@@QEAA@XZ (Address: 0x1800e01b0)
  • ??0CWbemInstance@@QEAA@XZ (Address: 0x1800e0010)
  • ??1CLimitationMapping@@QEAA@XZ (Address: 0x1800e0188)
  • ??1CWbemClass@@UEAA@XZ (Address: 0x1800dfe58)
  • ??1CWbemInstance@@UEAA@XZ (Address: 0x1800e0008)
  • ?AddRef@CWbemObject@@UEAAKXZ (Address: 0x1800dfb50)
  • ?AppendArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800df9d8)
  • ?AsymmetricMerge@CWbemInstance@@SAJPEAV1@0@Z (Address: 0x1800e0130)
  • ?BeginEnumeration@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfb30)
  • ?BeginEnumerationEx@CWbemObject@@UEAAJJJ@Z (Address: 0x1800dfdd8)
  • ?BeginMethodEnumeration@CWbemClass@@UEAAJJ@Z (Address: 0x1800dfc28)
  • ?BeginMethodEnumeration@CWbemInstance@@UEAAJJ@Z (Address: 0x1800e0050)
  • ?CIMTYPEToVARTYPE@CWbemObject@@UEAAJJPEAG@Z (Address: 0x1800e0168)
  • ?ClearCachedKeyValue@CWbemInstance@@UEAAXXZ (Address: 0x1800e0070)
  • ?ClearWriteOnlyProperties@CWbemClass@@UEAAJXZ (Address: 0x1800e0250)
  • ?ClearWriteOnlyProperties@CWbemInstance@@UEAAJXZ (Address: 0x1800dfec8)
  • ?Clone@CWbemClass@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc78)
  • ?Clone@CWbemInstance@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff18)
  • ?CloneAndDecorate@CWbemClass@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfb98)
  • ?CloneAndDecorate@CWbemInstance@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfe68)
  • ?CloneEx@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbe0)
  • ?CloneEx@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfec0)
  • ?CompactAll@CWbemClass@@UEAAXXZ (Address: 0x1800dfd10)
  • ?CompactAll@CWbemInstance@@UEAAXXZ (Address: 0x1800e00e0)
  • ?CompactClass@CWbemInstance@@QEAAXXZ (Address: 0x1800e0110)
  • ?CompareClassParts@CWbemObject@@UEAAJPEAUIWbemClassObject@@J@Z (Address: 0x1800dfd70)
  • ?CompareDerivedMostClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbc8)
  • ?CompareDerivedMostClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfea8)
  • ?CompareTo@CWbemClass@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800dfc58)
  • ?CompareTo@CWbemObject@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800dfb00)
  • ?ConvertToClass@CWbemInstance@@QEAAJPEAVCWbemClass@@PEAPEAV1@@Z (Address: 0x1800e0158)
  • ?CopyBlobOf@CWbemClass@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800dfd00)
  • ?CopyBlobOf@CWbemInstance@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800dff58)
  • ?CopyInstanceData@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbd8)
  • ?CopyInstanceData@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfeb8)
  • ?CreateDerivedClass@CWbemClass@@QEAAJPEAV1@HPEAVCDecorationPart@@@Z (Address: 0x1800e00f8)
  • ?Decorate@CWbemClass@@UEAAJPEBG0@Z (Address: 0x1800dfd38)
  • ?Decorate@CWbemInstance@@UEAAJPEBG0@Z (Address: 0x1800dff78)
  • ?Delete@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfc88)
  • ?Delete@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800dff28)
  • ?DeleteMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfc30)
  • ?DeleteMethod@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800e0058)
  • ?DeleteProperty@CWbemInstance@@QEAAJH@Z (Address: 0x1800e0120)
  • ?DisconnectObject@CWbemObject@@UEAAJK@Z (Address: 0x1800dfab8)
  • ?EndEnumeration@CWbemObject@@UEAAJXZ (Address: 0x1800dfb20)
  • ?EndMethodEnumeration@CWbemClass@@UEAAJXZ (Address: 0x1800dfc18)
  • ?EndMethodEnumeration@CWbemInstance@@UEAAJXZ (Address: 0x1800e0040)
  • ?EstimateUnmergeSpace@CWbemClass@@UEAAKXZ (Address: 0x1800dfcf8)
  • ?EstimateUnmergeSpace@CWbemInstance@@UEAAKXZ (Address: 0x1800e00d8)
  • ?ExtendClassPartSpace@CWbemInstance@@UEAAHPEAVCClassPart@@K@Z (Address: 0x1800e0098)
  • ?ExtendInstancePartSpace@CWbemInstance@@UEAAHPEAVCInstancePart@@K@Z (Address: 0x1800dff40)
  • ?FindLimitationError@CWbemClass@@QEAA?AVWString@@JPEAVCWStringArray@@@Z (Address: 0x1800e0198)
  • ?FindMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfd90)
  • ?FindMethod@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800dfb70)
  • ?Get@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800dfb40)
  • ?GetArrayPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800dfa10)
  • ?GetArrayPropElementByHandle@CWbemObject@@UEAAJJJKPEAK0PEAPEAX@Z (Address: 0x1800dfa08)
  • ?GetArrayPropInfoByHandle@CWbemObject@@UEAAJJJPEAPEAGPEAJPEAK@Z (Address: 0x1800dfa18)
  • ?GetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAK0PEAX@Z (Address: 0x1800df9f0)
  • ?GetBlockLength@CWbemClass@@MEAAKXZ (Address: 0x1800e01c0)
  • ?GetBlockLength@CWbemInstance@@MEAAKXZ (Address: 0x1800e0258)
  • ?GetClassNameW@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01e8)
  • ?GetClassNameW@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00d0)
  • ?GetClassPart@CWbemClass@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e01c8)
  • ?GetClassPart@CWbemClass@@UEAAJPEAXKPEAK@Z (Address: 0x1800e0238)
  • ?GetClassPart@CWbemInstance@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e0268)
  • ?GetClassPart@CWbemInstance@@UEAAJPEAXKPEAK@Z (Address: 0x1800dffe8)
  • ?GetClassSubset@CWbemClass@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfbc0)
  • ?GetClassSubset@CWbemInstance@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfea0)
  • ?GetDerivation@CWbemObject@@QEAAJPEAVCVar@@@Z (Address: 0x1800dfef0)
  • ?GetDerivation@CWbemObject@@UEAAJJKPEAK0PEAG@Z (Address: 0x1800dfb68)
  • ?GetDescription@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfab0)
  • ?GetDynasty@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800dfcb8)
  • ?GetDynasty@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800dff48)
  • ?GetGenus@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e0200)
  • ?GetGenus@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00b8)
  • ?GetGUID@CWbemObject@@UEAAJPEAU_GUID@@@Z (Address: 0x1800dfaa8)
  • ?GetHelpContext@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfaa0)
  • ?GetHelpFile@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfa98)
  • ?GetIndexedProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0208)
  • ?GetIndexedProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e00b0)
  • ?GetInstanceObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e0078)
  • ?GetKeyOrigin@CWbemClass@@UEAAJAEAVWString@@@Z (Address: 0x1800e0218)
  • ?GetKeyOrigin@CWbemInstance@@UEAAJAEAVWString@@@Z (Address: 0x1800e00a0)
  • ?GetKeyOrigin@CWbemObject@@UEAAJJKPEAKPEAG@Z (Address: 0x1800dfb60)
  • ?GetKeyProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0210)
  • ?GetKeyProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e00a8)
  • ?GetKeyString@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800dfda0)
  • ?GetLimitedVersion@CWbemClass@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e01a0)
  • ?GetLimitedVersion@CWbemInstance@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e0118)
  • ?GetMarshalSizeMax@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z (Address: 0x1800dfad8)
  • ?GetMaxMarshalStreamSize@CWbemInstance@@UEAAJPEAK@Z (Address: 0x1800dfff0)
  • ?GetMaxMarshalStreamSize@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfb80)
  • ?GetMethod@CWbemClass@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc50)
  • ?GetMethod@CWbemInstance@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e0068)
  • ?GetMethodOrigin@CWbemClass@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800dfc00)
  • ?GetMethodOrigin@CWbemInstance@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e0030)
  • ?GetMethodQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800dfc48)
  • ?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfdb8)
  • ?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dfdb0)
  • ?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dffa8)
  • ?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dffa0)
  • ?GetMethodQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfc10)
  • ?GetMethodQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e0038)
  • ?GetNames@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAPEAUtagSAFEARRAY@@@Z (Address: 0x1800dfb38)
  • ?GetNonsystemPropertyValue@CWbemInstance@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0140)
  • ?GetNormalizedPath@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800dfdd0)
  • ?GetNumProperties@CWbemClass@@UEAAHXZ (Address: 0x1800e01d0)
  • ?GetNumProperties@CWbemInstance@@UEAAHXZ (Address: 0x1800e02a8)
  • ?GetObjectMemory@CWbemObject@@UEAAJPEAXKPEAK@Z (Address: 0x1800dfd50)
  • ?GetObjectParts@CWbemClass@@UEAAJPEAXKKPEAK@Z (Address: 0x1800e0228)
  • ?GetObjectParts@CWbemInstance@@UEAAJPEAXKKPEAK@Z (Address: 0x1800dfee8)
  • ?GetObjectText@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800dfc70)
  • ?GetObjectText@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800dff10)
  • ?GetObjQual@CWbemObject@@UEAAJPEBGJKPEAJPEAK2PEAX@Z (Address: 0x1800dfb18)
  • ?GetParentClassFromBlob@CWbemClass@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800dfba0)
  • ?GetParentClassFromBlob@CWbemObject@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800dfe08)
  • ?GetPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800dfa20)
  • ?GetProperty@CWbemClass@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e01b8)
  • ?GetProperty@CWbemClass@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800dfe48)
  • ?GetProperty@CWbemInstance@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e0260)
  • ?GetProperty@CWbemInstance@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0270)
  • ?GetPropertyCount@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01f8)
  • ?GetPropertyCount@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00c0)
  • ?GetPropertyHandle@CWbemObject@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dfa80)
  • ?GetPropertyHandleEx@CWbemObject@@UEAAJPEBGJPEAJ1@Z (Address: 0x1800dfa30)
  • ?GetPropertyInfoByHandle@CWbemObject@@UEAAJJPEAPEAGPEAJ@Z (Address: 0x1800dfa48)
  • ?GetPropertyOrigin@CWbemObject@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800dfaf8)
  • ?GetPropertyQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfc80)
  • ?GetPropertyQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dff20)
  • ?GetPropertyType@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800dfd88)
  • ?GetPropertyType@CWbemClass@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dfd80)
  • ?GetPropertyType@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800dffe0)
  • ?GetPropertyType@CWbemInstance@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dffd8)
  • ?GetPropertyValue@CWbemObject@@UEAAJPEAU_tag_WbemPropertyName@@JPEAPEAGPEAUtagVARIANT@@@Z (Address: 0x1800dfae8)
  • ?GetPropName@CWbemClass@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e01d8)
  • ?GetPropName@CWbemInstance@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e02b0)
  • ?GetPropQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800dfc08)
  • ?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfde8)
  • ?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800dfdc8)
  • ?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfde0)
  • ?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dfdc0)
  • ?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dffc8)
  • ?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800dffc0)
  • ?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e02a0)
  • ?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e0298)
  • ?GetQualifier@CWbemClass@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfe38)
  • ?GetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800dfe30)
  • ?GetQualifier@CWbemInstance@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e0280)
  • ?GetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800e0278)
  • ?GetQualifierSet@CWbemClass@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfca0)
  • ?GetQualifierSet@CWbemInstance@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dff38)
  • ?GetRelPath@CWbemClass@@UEAAPEAGH@Z (Address: 0x1800dfd20)
  • ?GetRelPath@CWbemInstance@@UEAAPEAGH@Z (Address: 0x1800dff68)
  • ?GetSource@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfa90)
  • ?GetSuperclassName@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01f0)
  • ?GetSuperclassName@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00c8)
  • ?GetSystemPropertyByName@CWbemObject@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0138)
  • ?GetUnmarshalClass@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAU2@@Z (Address: 0x1800dfae0)
  • ?GetVARTYPE@CType@@SAGK@Z (Address: 0x1800e0108)
  • ?GetWbemObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e0080)
  • ?InheritsFrom@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800dfaf0)
  • ?InitEmpty@CWbemClass@@QEAAJHH@Z (Address: 0x1800e0160)
  • ?InitNew@CWbemInstance@@QEAAJPEAVCWbemClass@@HPEAVCDecorationPart@@@Z (Address: 0x1800e00f0)
  • ?IsAbstract@CWbemClass@@QEAAHXZ (Address: 0x1800dfdf8)
  • ?IsAmendment@CWbemClass@@QEAAHXZ (Address: 0x1800dfdf0)
  • ?IsDynamic@CWbemClass@@QEAAHXZ (Address: 0x1800dfe00)
  • ?IsIllegalDerivedClass@CSystemProperties@@SAHPEBG@Z (Address: 0x1800e0178)
  • ?IsInstanceOf@CWbemInstance@@QEAAHPEAVCWbemClass@@@Z (Address: 0x1800e0150)
  • ?IsKeyed@CWbemClass@@UEAAHXZ (Address: 0x1800e01e0)
  • ?IsKeyed@CWbemInstance@@UEAAHXZ (Address: 0x1800e00e8)
  • ?IsLocalized@CWbemClass@@UEAAHXZ (Address: 0x1800dfd48)
  • ?IsLocalized@CWbemInstance@@UEAAHXZ (Address: 0x1800dff88)
  • ?IsObjectInstance@CWbemObject@@UEAAJXZ (Address: 0x1800e01a8)
  • ?IsParentClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbd0)
  • ?IsParentClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfeb0)
  • ?IsValidObj@CWbemClass@@UEAAJXZ (Address: 0x1800dfd18)
  • ?IsValidObj@CWbemInstance@@UEAAJXZ (Address: 0x1800dff60)
  • ?Lock@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfa40)
  • ?MakeSubsetInst@CWbemClass@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800dfbb8)
  • ?MakeSubsetInst@CWbemInstance@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800dfe98)
  • ?MapLimitation@CWbemClass@@QEAAHJPEAVCWStringArray@@PEAVCLimitationMapping@@@Z (Address: 0x1800e0190)
  • ?MarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z (Address: 0x1800dfad0)
  • ?Merge@CWbemClass@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfce0)
  • ?Merge@CWbemInstance@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe90)
  • ?MergeAmended@CWbemObject@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfcd0)
  • ?MergeAndDecorate@CWbemClass@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800dfb90)
  • ?MergeAndDecorate@CWbemInstance@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe60)
  • ?MergeClassPart@CWbemClass@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800e0248)
  • ?MergeClassPart@CWbemInstance@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800dfed0)
  • ?Next@CWbemObject@@UEAAJJPEAPEAGPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800dfb28)
  • ?NextMethod@CWbemClass@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc20)
  • ?NextMethod@CWbemInstance@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e0048)
  • ?PlugKeyHoles@CWbemInstance@@QEAAJXZ (Address: 0x1800e0148)
  • ?Put@CWbemClass@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800dfc90)
  • ?Put@CWbemInstance@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800dff30)
  • ?PutMethod@CWbemClass@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc40)
  • ?PutMethod@CWbemInstance@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800e0060)
  • ?QueryInterface@CWbemObject@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x1800dfb58)
  • ?QueryObjectFlags@CWbemObject@@UEAAJJ_KPEA_K@Z (Address: 0x1800dfca8)
  • ?QueryPartInfo@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfd08)
  • ?QueryPropertyFlags@CWbemObject@@UEAAJJPEBG_KPEA_K@Z (Address: 0x1800dfcc8)
  • ?ReadDWORD@CWbemObject@@UEAAJJPEAK@Z (Address: 0x1800dfa68)
  • ?ReadProp@CWbemObject@@UEAAJPEBGJKPEAJ1PEAHPEAKPEAX@Z (Address: 0x1800dfb08)
  • ?ReadPropertyValue@CWbemObject@@UEAAJJJPEAJPEAE@Z (Address: 0x1800dfa70)
  • ?ReadQWORD@CWbemObject@@UEAAJJPEA_K@Z (Address: 0x1800dfa58)
  • ?ReconcileWith@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfcc0)
  • ?ReconcileWith@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfe88)
  • ?ReduceClassPartSpace@CWbemInstance@@UEAAXPEAVCClassPart@@K@Z (Address: 0x1800e0090)
  • ?ReduceInstancePartSpace@CWbemInstance@@UEAAXPEAVCInstancePart@@K@Z (Address: 0x1800e0088)
  • ?Release@CWbemObject@@UEAAKXZ (Address: 0x1800dfb48)
  • ?ReleaseMarshalData@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfac0)
  • ?RemoveArrayPropElementByHandle@CWbemObject@@UEAAJJJK@Z (Address: 0x1800df9f8)
  • ?RemoveArrayPropRangeByHandle@CWbemObject@@UEAAJJJKK@Z (Address: 0x1800df9e0)
  • ?RemoveDecoration@CWbemObject@@UEAAJXZ (Address: 0x1800dfd68)
  • ?SetArrayPropElementByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800dfa00)
  • ?SetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAX@Z (Address: 0x1800df9e8)
  • ?SetClassPart@CWbemClass@@UEAAJPEAXK@Z (Address: 0x1800e0240)
  • ?SetClassPart@CWbemInstance@@UEAAJPEAXK@Z (Address: 0x1800dfed8)
  • ?SetData@CWbemClass@@UEAAXPEAEH@Z (Address: 0x1800dfe50)
  • ?SetData@CWbemInstance@@UEAAXPEAEH@Z (Address: 0x1800e0000)
  • ?SetDecoration@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800dfd60)
  • ?SetInheritanceChain@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800dfbf8)
  • ?SetInheritanceChain@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800e0028)
  • ?SetLocalized@CWbemClass@@UEAAXH@Z (Address: 0x1800dfd40)
  • ?SetLocalized@CWbemInstance@@UEAAXH@Z (Address: 0x1800dff80)
  • ?SetMethodOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800dfbe8)
  • ?SetMethodOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e0018)
  • ?SetMethodQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800dfc98)
  • ?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dfda8)
  • ?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dfd98)
  • ?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dff98)
  • ?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dff90)
  • ?SetObjectFlags@CWbemObject@@UEAAJJ_K0@Z (Address: 0x1800dfcb0)
  • ?SetObjectMemory@CWbemObject@@UEAAJPEAXK@Z (Address: 0x1800dfd30)
  • ?SetObjectParts@CWbemClass@@UEAAJPEAXKK@Z (Address: 0x1800e0220)
  • ?SetObjectParts@CWbemInstance@@UEAAJPEAXKK@Z (Address: 0x1800dfef8)
  • ?SetObjQual@CWbemObject@@UEAAJPEBGJKKJKPEAX@Z (Address: 0x1800dfb88)
  • ?SetPropByHandle@CWbemObject@@UEAAJJJKPEAX@Z (Address: 0x1800dfa28)
  • ?SetPropertyOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800dfbf0)
  • ?SetPropertyOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e0020)
  • ?SetPropQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800dfc38)
  • ?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dfd78)
  • ?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dfd58)
  • ?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dffb8)
  • ?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dffb0)
  • ?SetPropValue@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dfe40)
  • ?SetPropValue@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dffd0)
  • ?SetQualifier@CWbemClass@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800dfe28)
  • ?SetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dfe20)
  • ?SetQualifier@CWbemInstance@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800e0290)
  • ?SetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e0288)
  • ?SetServerNamespace@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800dfa88)
  • ?SpawnDerivedClass@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc68)
  • ?SpawnDerivedClass@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff08)
  • ?SpawnInstance@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc60)
  • ?SpawnInstance@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff00)
  • ?SpawnKeyedInstance@CWbemClass@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfba8)
  • ?SpawnKeyedInstance@CWbemInstance@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe70)
  • ?StripClassPart@CWbemClass@@UEAAJXZ (Address: 0x1800e0230)
  • ?StripClassPart@CWbemInstance@@UEAAJXZ (Address: 0x1800dfee0)
  • ?Undecorate@CWbemClass@@UEAAXXZ (Address: 0x1800dfd28)
  • ?Undecorate@CWbemInstance@@UEAAXXZ (Address: 0x1800dff70)
  • ?Unlock@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfa38)
  • ?UnmarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z (Address: 0x1800dfac8)
  • ?Unmerge@CWbemClass@@UEAAJPEAEHPEAK@Z (Address: 0x1800dfcf0)
  • ?Unmerge@CWbemInstance@@UEAAJPEAEHPEAK@Z (Address: 0x1800dff50)
  • ?Unmerge@CWbemObject@@UEAAJJKPEAKPEAX@Z (Address: 0x1800dfb78)
  • ?Update@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfcd8)
  • ?Update@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfe78)
  • ?Upgrade@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfbb0)
  • ?Upgrade@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfe80)
  • ?ValidateObject@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfe10)
  • ?ValidateRange@CWbemObject@@QEAAHPEAPEAG@Z (Address: 0x1800e0170)
  • ?WriteDWORD@CWbemObject@@UEAAJJK@Z (Address: 0x1800dfa60)
  • ?WriteProp@CWbemObject@@UEAAJPEBGJKKJPEAX@Z (Address: 0x1800dfb10)
  • ?WritePropertyValue@CWbemObject@@UEAAJJJPEBE@Z (Address: 0x1800dfa78)
  • ?WriteQWORD@CWbemObject@@UEAAJJ_K@Z (Address: 0x1800dfa50)
  • ?WriteToStream@CWbemInstance@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfff8)
  • ?WriteToStream@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfe18)
  • WbemStringCopy (Address: 0x1800e0100)
  • WbemStringFree (Address: 0x1800e0128)
KERNEL32.dll
  • CloseHandle (Address: 0x1800e02f8)
  • CompareStringW (Address: 0x1800e0450)
  • CreateEventW (Address: 0x1800e02d8)
  • CreateFileW (Address: 0x1800e03b8)
  • CreateThread (Address: 0x1800e0300)
  • CreateTimerQueueTimer (Address: 0x1800e0330)
  • DeleteCriticalSection (Address: 0x1800e0370)
  • DeleteTimerQueueTimer (Address: 0x1800e0378)
  • EnterCriticalSection (Address: 0x1800e0338)
  • ExpandEnvironmentStringsW (Address: 0x1800e0408)
  • FileTimeToSystemTime (Address: 0x1800e03c8)
  • FreeLibrary (Address: 0x1800e03a0)
  • GetComputerNameExW (Address: 0x1800e0358)
  • GetCurrentProcess (Address: 0x1800e0490)
  • GetCurrentProcessId (Address: 0x1800e03f0)
  • GetCurrentThread (Address: 0x1800e03e0)
  • GetCurrentThreadId (Address: 0x1800e0350)
  • GetFileAttributesExW (Address: 0x1800e0448)
  • GetFileAttributesW (Address: 0x1800e0420)
  • GetFileInformationByHandle (Address: 0x1800e03c0)
  • GetLastError (Address: 0x1800e0368)
  • GetLocalTime (Address: 0x1800e0468)
  • GetModuleHandleW (Address: 0x1800e0410)
  • GetProcAddress (Address: 0x1800e0390)
  • GetProcessTimes (Address: 0x1800e0400)
  • GetSystemDirectoryW (Address: 0x1800e0380)
  • GetSystemInfo (Address: 0x1800e0438)
  • GetSystemTime (Address: 0x1800e0418)
  • GetSystemTimeAsFileTime (Address: 0x1800e0458)
  • GetTickCount (Address: 0x1800e0318)
  • GetTickCount64 (Address: 0x1800e0320)
  • GetVersionExW (Address: 0x1800e0428)
  • GlobalMemoryStatusEx (Address: 0x1800e0398)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800e0340)
  • InitializeCriticalSectionEx (Address: 0x1800e0470)
  • LCMapStringW (Address: 0x1800e0328)
  • LeaveCriticalSection (Address: 0x1800e0348)
  • LoadLibraryExW (Address: 0x1800e03a8)
  • LocalFree (Address: 0x1800e03e8)
  • lstrlenW (Address: 0x1800e03b0)
  • MoveFileW (Address: 0x1800e0430)
  • OpenEventW (Address: 0x1800e03d0)
  • OpenProcess (Address: 0x1800e03d8)
  • QueryPerformanceCounter (Address: 0x1800e0480)
  • QueueUserWorkItem (Address: 0x1800e0360)
  • ResetEvent (Address: 0x1800e0388)
  • RtlCaptureContext (Address: 0x1800e0478)
  • RtlLookupFunctionEntry (Address: 0x1800e04b0)
  • RtlVirtualUnwind (Address: 0x1800e04a8)
  • SetEvent (Address: 0x1800e02e8)
  • SetUnhandledExceptionFilter (Address: 0x1800e0498)
  • Sleep (Address: 0x1800e02e0)
  • SystemTimeToFileTime (Address: 0x1800e0440)
  • TerminateProcess (Address: 0x1800e0488)
  • TlsAlloc (Address: 0x1800e02f0)
  • TlsFree (Address: 0x1800e0310)
  • TlsGetValue (Address: 0x1800e0308)
  • TlsSetValue (Address: 0x1800e02c0)
  • UnhandledExceptionFilter (Address: 0x1800e04a0)
  • WaitForMultipleObjectsEx (Address: 0x1800e02c8)
  • WaitForSingleObject (Address: 0x1800e02d0)
  • WideCharToMultiByte (Address: 0x1800e03f8)
  • WriteFile (Address: 0x1800e0460)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800e07c8)
  • __CxxFrameHandler3 (Address: 0x1800e07d0)
  • __dllonexit (Address: 0x1800e06d8)
  • _amsg_exit (Address: 0x1800e06e8)
  • _CxxThrowException (Address: 0x1800e0718)
  • _initterm (Address: 0x1800e06e0)
  • _lock (Address: 0x1800e0700)
  • _onexit (Address: 0x1800e06d0)
  • _purecall (Address: 0x1800e07c0)
  • _ui64tow_s (Address: 0x1800e0768)
  • _unlock (Address: 0x1800e06f8)
  • _vsnprintf (Address: 0x1800e06b0)
  • _vsnwprintf (Address: 0x1800e07a8)
  • _wcsicmp (Address: 0x1800e07a0)
  • _wcslwr_s (Address: 0x1800e0750)
  • _wcsnicmp (Address: 0x1800e07b0)
  • _XcptFilter (Address: 0x1800e06f0)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800e0740)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800e0738)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800e0730)
  • ??1exception@@UEAA@XZ (Address: 0x1800e0728)
  • ??1type_info@@UEAA@XZ (Address: 0x1800e06c8)
  • ?terminate@@YAXXZ (Address: 0x1800e06c0)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800e0720)
  • atol (Address: 0x1800e0698)
  • free (Address: 0x1800e0790)
  • isdigit (Address: 0x1800e0788)
  • iswspace (Address: 0x1800e0770)
  • iswxdigit (Address: 0x1800e0760)
  • malloc (Address: 0x1800e0780)
  • memcmp (Address: 0x1800e06a0)
  • memcpy (Address: 0x1800e0710)
  • memmove (Address: 0x1800e0708)
  • memmove_s (Address: 0x1800e0748)
  • memset (Address: 0x1800e06b8)
  • sscanf_s (Address: 0x1800e0690)
  • swprintf_s (Address: 0x1800e0778)
  • wcschr (Address: 0x1800e0798)
  • wcscmp (Address: 0x1800e06a8)
  • wcsstr (Address: 0x1800e0758)
  • wcstok (Address: 0x1800e07b8)
ntdll.dll
  • WinSqmAddToStream (Address: 0x1800e07e8)
  • WinSqmIsOptedIn (Address: 0x1800e07e0)
OLE32.dll
  • CLSIDFromString (Address: 0x1800e0520)
  • CoCreateInstance (Address: 0x1800e04c0)
  • CoDisconnectObject (Address: 0x1800e0510)
  • CoGetCallContext (Address: 0x1800e04d8)
  • CoImpersonateClient (Address: 0x1800e04d0)
  • CoInitializeEx (Address: 0x1800e04f8)
  • CoRevertToSelf (Address: 0x1800e0500)
  • CoSetProxyBlanket (Address: 0x1800e0518)
  • CoSwitchCallContext (Address: 0x1800e04f0)
  • CoTaskMemFree (Address: 0x1800e04c8)
  • CoUninitialize (Address: 0x1800e04e8)
  • CoUnmarshalInterface (Address: 0x1800e0508)
  • StringFromGUID2 (Address: 0x1800e04e0)
OLEAUT32.dll
  • SafeArrayAccessData (Address: 0x1800e0538)
  • SafeArrayCreate (Address: 0x1800e05a0)
  • SafeArrayDestroy (Address: 0x1800e0550)
  • SafeArrayGetDim (Address: 0x1800e0568)
  • SafeArrayGetElement (Address: 0x1800e05a8)
  • SafeArrayGetLBound (Address: 0x1800e0580)
  • SafeArrayGetUBound (Address: 0x1800e0558)
  • SafeArrayPutElement (Address: 0x1800e0590)
  • SafeArrayUnaccessData (Address: 0x1800e0530)
  • SetErrorInfo (Address: 0x1800e0560)
  • SysAllocString (Address: 0x1800e0588)
  • SysAllocStringByteLen (Address: 0x1800e05b0)
  • SysAllocStringLen (Address: 0x1800e0548)
  • SysFreeString (Address: 0x1800e0578)
  • SysStringLen (Address: 0x1800e05b8)
  • VariantChangeType (Address: 0x1800e0598)
  • VariantClear (Address: 0x1800e05c0)
  • VariantCopy (Address: 0x1800e0540)
  • VariantInit (Address: 0x1800e0570)
VERSION.dll
  • GetFileVersionInfoExW (Address: 0x1800e05d8)
  • GetFileVersionInfoSizeExW (Address: 0x1800e05e0)
  • VerQueryValueW (Address: 0x1800e05d0)
wbemcomn.dll
  • _IsValidElementName (Address: 0x1800e0af0)
  • _ThrowMemoryException_ (Address: 0x1800e0de0)
  • ?_Free@CMUILocale@@SAHPEAX@Z (Address: 0x1800e0d88)
  • ?_GetSystemDefaultLocale@CMUILocale@@SAJPEAPEAGK@Z (Address: 0x1800e09e0)
  • ??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z (Address: 0x1800e0f30)
  • ??0CClientOpsNode@@QEAA@XZ (Address: 0x1800e0dd0)
  • ??0CCritSec@@QEAA@XZ (Address: 0x1800e0f68)
  • ??0CDateTimeParser@@QEAA@PEBG@Z (Address: 0x1800e0960)
  • ??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z (Address: 0x1800e0a78)
  • ??0CFlexArray@@QEAA@AEAV0@@Z (Address: 0x1800e0d18)
  • ??0CFlexArray@@QEAA@HH@Z (Address: 0x1800e0fa0)
  • ??0CFlexQueue@@QEAA@H@Z (Address: 0x1800e0ee0)
  • ??0CIdentitySecurity@@QEAA@_N@Z (Address: 0x1800e0e00)
  • ??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1800e0f88)
  • ??0CInsertionString@@QEAA@PEBG@Z (Address: 0x1800e0dc8)
  • ??0CInsertionString@@QEAA@VCHex@@@Z (Address: 0x1800e0a70)
  • ??0CInsertionString@@QEAA@XZ (Address: 0x1800e0e90)
  • ??0CLike@@QEAA@PEBGG@Z (Address: 0x1800e0938)
  • ??0CMUILocaleList@@QEAA@XZ (Address: 0x1800e0bf8)
  • ??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z (Address: 0x1800e0b38)
  • ??0CNtAcl@@QEAA@K@Z (Address: 0x1800e0b80)
  • ??0CNtAcl@@QEAA@PEAU_ACL@@@Z (Address: 0x1800e0828)
  • ??0CNtSecurityDescriptor@@QEAA@PEAX@Z (Address: 0x1800e0bb0)
  • ??0CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e0bb8)
  • ??0CNtSid@@QEAA@PEAX@Z (Address: 0x1800e0c30)
  • ??0CPropertyName@@QEAA@XZ (Address: 0x1800e08f8)
  • ??0CSafeArray@@QEAA@HHHH@Z (Address: 0x1800e0ce0)
  • ??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z (Address: 0x1800e0c60)
  • ??0CStaticCritSec@@QEAA@XZ (Address: 0x1800e0f58)
  • ??0CVar@@QEAA@AEBV0@@Z (Address: 0x1800e0ad8)
  • ??0CVar@@QEAA@E@Z (Address: 0x1800e08a0)
  • ??0CVar@@QEAA@FH@Z (Address: 0x1800e08b0)
  • ??0CVar@@QEAA@HPEAG@Z (Address: 0x1800e0d08)
  • ??0CVar@@QEAA@HVauto_bstr@@@Z (Address: 0x1800e0a50)
  • ??0CVar@@QEAA@J@Z (Address: 0x1800e08a8)
  • ??0CVar@@QEAA@PEAUtagVARIANT@@@Z (Address: 0x1800e08e0)
  • ??0CVar@@QEAA@PEAVCVarVector@@H@Z (Address: 0x1800e08b8)
  • ??0CVar@@QEAA@XZ (Address: 0x1800e0e60)
  • ??0CVarVector@@QEAA@HHH@Z (Address: 0x1800e08c8)
  • ??0CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e0a28)
  • ??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e0d30)
  • ??0CWStringArray@@QEAA@HH@Z (Address: 0x1800e0ea8)
  • ??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z (Address: 0x1800e0928)
  • ??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e0990)
  • ??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z (Address: 0x1800e0cb0)
  • ??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z (Address: 0x1800e0de8)
  • ??0Registry@@QEAA@PEBGK@Z (Address: 0x1800e0d90)
  • ??0WString@@QEAA@AEBV0@@Z (Address: 0x1800e0ac0)
  • ??0WString@@QEAA@PEAGH@Z (Address: 0x1800e0fd8)
  • ??0WString@@QEAA@PEBG@Z (Address: 0x1800e0be0)
  • ??0WString@@QEAA@XZ (Address: 0x1800e0e20)
  • ??0WString2@@QEAA@PEAGH@Z (Address: 0x1800e0d70)
  • ??0WString2@@QEAA@PEBG@Z (Address: 0x1800e0f08)
  • ??0WString2@@QEAA@XZ (Address: 0x1800e0f00)
  • ??1CCheckedInCritSec@@QEAA@XZ (Address: 0x1800e0f38)
  • ??1CClientOpsNode@@QEAA@XZ (Address: 0x1800e0e38)
  • ??1CCritSec@@QEAA@XZ (Address: 0x1800e0f70)
  • ??1CDateTimeParser@@QEAA@XZ (Address: 0x1800e0968)
  • ??1CEnterWbemCriticalSection@@QEAA@XZ (Address: 0x1800e09e8)
  • ??1CEventLog@@QEAA@XZ (Address: 0x1800e0a80)
  • ??1CFlexArray@@QEAA@XZ (Address: 0x1800e0fa8)
  • ??1CFlexQueue@@QEAA@XZ (Address: 0x1800e0ee8)
  • ??1CIdentitySecurity@@QEAA@XZ (Address: 0x1800e0e08)
  • ??1CInCritSec@@QEAA@XZ (Address: 0x1800e0f90)
  • ??1CInsertionString@@QEAA@XZ (Address: 0x1800e0e98)
  • ??1CLike@@QEAA@XZ (Address: 0x1800e0940)
  • ??1CMUILocaleList@@QEAA@XZ (Address: 0x1800e0c00)
  • ??1CNtAce@@UEAA@XZ (Address: 0x1800e0b40)
  • ??1CNtAcl@@QEAA@XZ (Address: 0x1800e0b88)
  • ??1CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e0bc0)
  • ??1CNtSid@@QEAA@XZ (Address: 0x1800e0c38)
  • ??1CPropertyName@@QEAA@XZ (Address: 0x1800e0900)
  • ??1CSafeArray@@QEAA@XZ (Address: 0x1800e0ce8)
  • ??1CStaticCritSec@@QEAA@XZ (Address: 0x1800e0f60)
  • ??1CVar@@QEAA@XZ (Address: 0x1800e0e68)
  • ??1CVarVector@@QEAA@XZ (Address: 0x1800e08d0)
  • ??1CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e0a30)
  • ??1CWQLScanner@@QEAA@XZ (Address: 0x1800e0d38)
  • ??1CWStringArray@@QEAA@XZ (Address: 0x1800e0eb0)
  • ??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ (Address: 0x1800e09b0)
  • ??1QL_LEVEL_1_TOKEN@@QEAA@XZ (Address: 0x1800e0930)
  • ??1QL1_Parser@@UEAA@XZ (Address: 0x1800e0998)
  • ??1Registry@@QEAA@XZ (Address: 0x1800e0df0)
  • ??1WString@@QEAA@XZ (Address: 0x1800e0db0)
  • ??1WString2@@QEAA@XZ (Address: 0x1800e0f18)
  • ??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e0848)
  • ??4CWStringArray@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e0d58)
  • ??4WString@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e0980)
  • ??4WString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0e28)
  • ??4WString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0f10)
  • ??ACFlexArray@@QEAAAEAPEAXH@Z (Address: 0x1800e0fb0)
  • ??ACWStringArray@@QEBAPEAGH@Z (Address: 0x1800e0e80)
  • ??YWString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0e30)
  • ??YWString2@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e0d78)
  • ??YWString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0f20)
  • ?AccessCheck@CIdentitySecurity@@QEAAHXZ (Address: 0x1800e0e10)
  • ?Add@CFlexArray@@QEAAHPEAX@Z (Address: 0x1800e0f98)
  • ?Add@CVarVector@@QEAAHAEAVCVar@@@Z (Address: 0x1800e08d8)
  • ?Add@CWStringArray@@QEAAHPEBG@Z (Address: 0x1800e0eb8)
  • ?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z (Address: 0x1800e0ba0)
  • ?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z (Address: 0x1800e0c28)
  • ?AddElement@CPropertyName@@QEAAXPEBG@Z (Address: 0x1800e0910)
  • ?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z (Address: 0x1800e09c8)
  • ?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e09b8)
  • ?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z (Address: 0x1800e0d20)
  • ?anyFailure@CStaticCritSec@@SAHXZ (Address: 0x1800e0ab8)
  • ?Bind@CFlexArray@@QEAAXAEAV1@@Z (Address: 0x1800e0d50)
  • ?BindPtr@WString@@QEAAXPEAG@Z (Address: 0x1800e0db8)
  • ?ChangeTypeTo@CVar@@QEAAHG@Z (Address: 0x1800e0920)
  • ?CheckLangNeutral@CMUILocale@@SAJPEBGPEA_N@Z (Address: 0x1800e0c48)
  • ?Close@CEventLog@@QEAAHXZ (Address: 0x1800e0a88)
  • ?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z (Address: 0x1800e0ed8)
  • ?CoGetClassObject@CWbemInstallObject@@SAJAEBU_GUID@@KPEAU_COSERVERINFO@@0PEAPEAX@Z (Address: 0x1800e0ab0)
  • ?Compress@CFlexArray@@QEAAXXZ (Address: 0x1800e0d48)
  • ?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z (Address: 0x1800e0830)
  • ?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ (Address: 0x1800e0c98)
  • ?DeleteAce@CNtAcl@@QEAAHH@Z (Address: 0x1800e0838)
  • ?DeleteSacl@CNtSecurityDescriptor@@QEAAJXZ (Address: 0x1800e0868)
  • ?DeleteValue@Registry@@QEAAHPEBG@Z (Address: 0x1800e0a58)
  • ?Dequeue@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e0ef8)
  • ?Deserialize@CNtAce@@UEAA_NPEAE@Z (Address: 0x1800e0b70)
  • ?Empty@CFlexArray@@QEAAXXZ (Address: 0x1800e0f50)
  • ?Empty@CVar@@QEAAXXZ (Address: 0x1800e0918)
  • ?Empty@CWStringArray@@QEAAXXZ (Address: 0x1800e0af8)
  • ?Empty@WString@@QEAAXXZ (Address: 0x1800e0ae0)
  • ?Empty@WString2@@QEAAXXZ (Address: 0x1800e0f28)
  • ?Enqueue@CFlexQueue@@QEAA_NPEAX@Z (Address: 0x1800e0ef0)
  • ?Enter@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e0da8)
  • ?Enter@CCritSec@@QEAAXXZ (Address: 0x1800e0f78)
  • ?Enter@CWbemCriticalSection@@QEAAHK@Z (Address: 0x1800e0a38)
  • ?EqualNoCase@WString@@QEBAHPEBG@Z (Address: 0x1800e0ac8)
  • ?EqualNoCase@WString2@@QEBAHPEBG@Z (Address: 0x1800e08f0)
  • ?EscapeQuotes@WString2@@QEBA?AV1@XZ (Address: 0x1800e0d80)
  • ?FillDMTF@CDateTimeParser@@QEAAHPEAG_K@Z (Address: 0x1800e0970)
  • ?FindStr@CWStringArray@@QEAAHPEBGH@Z (Address: 0x1800e0b00)
  • ?GetAccessMask@CNtAce@@UEAAKXZ (Address: 0x1800e0b58)
  • ?GetAce@CNtAcl@@QEAAPEAVCNtAce@@H@Z (Address: 0x1800e0b98)
  • ?GetAt@CFlexArray@@QEBAPEAXH@Z (Address: 0x1800e0ea0)
  • ?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z (Address: 0x1800e0b30)
  • ?GetAt@CWStringArray@@QEBAPEAGH@Z (Address: 0x1800e0d00)
  • ?GetBinaryPath@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0aa0)
  • ?GetBSTR@CVar@@QEAAPEAGXZ (Address: 0x1800e0b18)
  • ?GetBSTRAt@CSafeArray@@QEAAPEAGH@Z (Address: 0x1800e0c68)
  • ?GetCultures@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e0c18)
  • ?GetDacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e0850)
  • ?GetDacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e0bc8)
  • ?GetDWORD@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e0df8)
  • ?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e0cb8)
  • ?GetEmbeddedObject@CVar@@QEAAPEAUIUnknown@@XZ (Address: 0x1800e08e8)
  • ?GetFirst_ms_XXX_Locale@CMUILocaleList@@QEAAJPEAPEAG@Z (Address: 0x1800e0c10)
  • ?GetFlags@CNtAce@@UEAAHXZ (Address: 0x1800e0b50)
  • ?GetLocales@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e0c20)
  • ?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z (Address: 0x1800e0cc0)
  • ?GetNumAces@CNtAcl@@QEAAHXZ (Address: 0x1800e0b90)
  • ?GetOwner@CNtSecurityDescriptor@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e0870)
  • ?GetPersistentCfgValue@CPersistentConfig@@QEAAHKAEAK@Z (Address: 0x1800e0a60)
  • ?GetQueueSize@CFlexQueue@@QEBAHXZ (Address: 0x1800e0dc0)
  • ?GetReferencedAliases@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0d28)
  • ?GetReferencedTables@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0958)
  • ?GetRegistryPathCIMOM@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0ed0)
  • ?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0aa8)
  • ?GetSacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e0858)
  • ?GetSacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e0bd8)
  • ?GetSerializedSize@CNtAce@@UEAAKXZ (Address: 0x1800e0b60)
  • ?GetSid@CNtAce@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e0820)
  • ?GetSize@CNtSecurityDescriptor@@QEAAKXZ (Address: 0x1800e0888)
  • ?GetStatus@CNtAce@@UEAAKXZ (Address: 0x1800e0ae8)
  • ?GetStr@Registry@@QEAAHPEBGPEAPEAG@Z (Address: 0x1800e0d98)
  • ?GetStringAt@CPropertyName@@QEBAPEBGJ@Z (Address: 0x1800e0908)
  • ?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ (Address: 0x1800e09d0)
  • ?GetType@CNtAce@@UEAAHXZ (Address: 0x1800e0b48)
  • ?Init@CPublishWMIOperationEvent@@SAJXZ (Address: 0x1800e0a48)
  • ?Initialize@CMUILocaleList@@QEAAJPEAG_N@Z (Address: 0x1800e0c08)
  • ?InsertAt@CFlexArray@@QEAAHHPEAX@Z (Address: 0x1800e0f48)
  • ?IsDataNull@CVar@@QEAAHXZ (Address: 0x1800e0b10)
  • ?IsOffline@CWbemInstallObject@@SA_NXZ (Address: 0x1800e0ec8)
  • ?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z (Address: 0x1800e0b08)
  • ?IsValid@CNtAcl@@QEAAHXZ (Address: 0x1800e0810)
  • ?IsValid@CNtSid@@QEAAHXZ (Address: 0x1800e0808)
  • ?LCID_To_ms_XXX_Format@CMUILocale@@SAJKPEAG_K@Z (Address: 0x1800e0c58)
  • ?Leave@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e0f40)
  • ?Leave@CCritSec@@QEAAXXZ (Address: 0x1800e0f80)
  • ?Leave@CWbemCriticalSection@@QEAAXXZ (Address: 0x1800e0a40)
  • ?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z (Address: 0x1800e0c50)
  • ?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ (Address: 0x1800e07f8)
  • ?Match@CLike@@QEAA_NPEBG@Z (Address: 0x1800e0948)
  • ?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z (Address: 0x1800e0c40)
  • ?Open@CEventLog@@QEAAHXZ (Address: 0x1800e0a90)
  • ?OrderAces@CNtAcl@@QEAAPEAV1@XZ (Address: 0x1800e0840)
  • ?Parse@CWQLScanner@@QEAAHXZ (Address: 0x1800e0d40)
  • ?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1800e09a0)
  • ?Peek@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e0e48)
  • ?Publish@CPublishWMIOperationEvent@@SAJPEAGKK0000K_K0H@Z (Address: 0x1800e0c70)
  • ?PublishClientRequestFailure@CPublishWMIOperationEvent@@SAJPEBGPEAG1K10J0@Z (Address: 0x1800e0e58)
  • ?PublishMethodExec@CPublishWMIOperationEvent@@SAJPEAGKK000000K_K0H@Z (Address: 0x1800e0c78)
  • ?PublishRepDelete@CPublishWMIOperationEvent@@SAJKPEAGPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e0c88)
  • ?PublishRepUpdate@CPublishWMIOperationEvent@@SAJKPEAGKPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e0c90)
  • ?PublishStop@CPublishWMIOperationEvent@@SAJKJPEAG@Z (Address: 0x1800e0e50)
  • ?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SAJPEAGKK0K_K000K1H@Z (Address: 0x1800e0c80)
  • ?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXP6AJH@Z@Z (Address: 0x1800e0a10)
  • ?Release@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e09c0)
  • ?RemoveAt@CFlexArray@@QEAAHH@Z (Address: 0x1800e0fb8)
  • ?RemoveAt@CWStringArray@@QEAAHH@Z (Address: 0x1800e0d60)
  • ?RemoveSelf@CClientOpsNode@@QEAAXXZ (Address: 0x1800e0e40)
  • ?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1800e0ec0)
  • ?Serialize@CNtAce@@UEAA_NPEAE_K@Z (Address: 0x1800e0b68)
  • ?SetAt@CFlexArray@@QEAAXHPEAX@Z (Address: 0x1800e0ad0)
  • ?SetBSTR@CVar@@QEAAHPEAG@Z (Address: 0x1800e0ca0)
  • ?SetBSTR@CVar@@QEAAHVauto_bstr@@@Z (Address: 0x1800e0ca8)
  • ?SetBSTRAt@CSafeArray@@QEAAHHPEAG@Z (Address: 0x1800e0cf0)
  • ?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e0bd0)
  • ?SetDMTF@CWbemTime@@QEAAHPEBG@Z (Address: 0x1800e0988)
  • ?SetDWORD@Registry@@QEAAHPEBGK@Z (Address: 0x1800e0cc8)
  • ?SetDWORDStr@Registry@@QEAAHPEBGK@Z (Address: 0x1800e0cd0)
  • ?SetEmbeddedObject@CVar@@QEAAXPEAUIUnknown@@@Z (Address: 0x1800e0d10)
  • ?SetFailure@CStaticCritSec@@SAXXZ (Address: 0x1800e0fd0)
  • ?SetFlags@CNtAce@@UEAAXJ@Z (Address: 0x1800e0be8)
  • ?SetGroup@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e0880)
  • ?SetLogingEnabled@CMemoryLog@@QEAAX_N@Z (Address: 0x1800e09f8)
  • ?SetOwner@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e0878)
  • ?SetSacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e0860)
  • ?SetStr@Registry@@QEAAHPEBG0@Z (Address: 0x1800e0cd8)
  • ?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z (Address: 0x1800e08c0)
  • ?Size@CVarVector@@QEAAHXZ (Address: 0x1800e0b28)
  • ?Size@CWStringArray@@QEBAHXZ (Address: 0x1800e0e88)
  • ?Trim@CSafeArray@@QEAAHXZ (Address: 0x1800e0cf8)
  • ?UnbindPtr@WString2@@QEAAPEAGXZ (Address: 0x1800e09a8)
  • ?Union@CWStringArray@@SAXAEAV1@00@Z (Address: 0x1800e0d68)
  • ?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXXZ (Address: 0x1800e0a18)
  • ?ValidateMemSize@CWin32DefaultArena@@SAHH@Z (Address: 0x1800e09d8)
  • ?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x1800e0e70)
  • ?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x1800e0e78)
  • ?WbemMemReAlloc@CWin32DefaultArena@@SAPEAXPEAX_K@Z (Address: 0x1800e0800)
  • ?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x1800e0fc8)
  • BreakOnDbgAndRenterLoop (Address: 0x1800e0dd8)
  • BuildOperationInfo (Address: 0x1800e0ba8)
  • BuildSecurityDescriptorParameter (Address: 0x1800e0898)
  • ComposeName (Address: 0x1800e0a98)
  • GetAccessToken (Address: 0x1800e0fe0)
  • GetGlobalClientOps (Address: 0x1800e0bf0)
  • GetMemLogObject (Address: 0x1800e0fc0)
  • GetSecurityDescriptorFromParameters (Address: 0x1800e0890)
  • IsAdmin (Address: 0x1800e0b78)
  • IsInAdminGroup (Address: 0x1800e0818)
  • IsLocalConnection (Address: 0x1800e0e18)
  • IsNtSetupRunning (Address: 0x1800e0da0)
  • isunialphanum (Address: 0x1800e0b20)
  • ReadI64 (Address: 0x1800e0950)
  • ReadUI64 (Address: 0x1800e0978)
  • RegisterDLL (Address: 0x1800e0a00)
  • Set_WPP_INIT_TRACING_Call_State (Address: 0x1800e09f0)
  • TestDirExistAndCreateWithSDIfNotThere (Address: 0x1800e0a68)
  • UnRegisterDLL (Address: 0x1800e0a08)
  • WMIControlClientOpsCallback (Address: 0x1800e0a20)