wbemcore.dll
Description: Windows Management Instrumentation
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 64-bit
Operating System: Windows NT
SHA256: 129299a8a2fc6c2b17fc4ef13fb90c88
File Size: 1.7 MB
Uploaded At: Dec. 1, 2025, 8:18 a.m.
Views: 16
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x75570)
- DllGetClassObject (Ordinal: 2, Address: 0x75200)
- DllRegisterServer (Ordinal: 3, Address: 0x757e0)
- DllUnregisterServer (Ordinal: 4, Address: 0x75bd0)
- Reinitialize (Ordinal: 5, Address: 0x75f50)
- Shutdown (Ordinal: 6, Address: 0x75d70)
Imported DLLs & Functions
ADVAPI32.dll
- AccessCheck (Address: 0x1800df910)
- AllocateAndInitializeSid (Address: 0x1800df970)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800df988)
- EventActivityIdControl (Address: 0x1800df998)
- FreeSid (Address: 0x1800df980)
- GetLengthSid (Address: 0x1800df940)
- GetSecurityDescriptorControl (Address: 0x1800df930)
- GetSecurityDescriptorDacl (Address: 0x1800df968)
- GetSecurityDescriptorSacl (Address: 0x1800df908)
- GetSidSubAuthority (Address: 0x1800df928)
- GetSidSubAuthorityCount (Address: 0x1800df920)
- GetTokenInformation (Address: 0x1800df938)
- IsValidSecurityDescriptor (Address: 0x1800df978)
- OpenThreadToken (Address: 0x1800df990)
- PrivilegeCheck (Address: 0x1800df918)
- RegCloseKey (Address: 0x1800df9a0)
- RegCreateKeyExW (Address: 0x1800df958)
- RegDeleteKeyW (Address: 0x1800df950)
- RegDeleteValueW (Address: 0x1800df948)
- RegNotifyChangeKeyValue (Address: 0x1800df9a8)
- RegOpenKeyExW (Address: 0x1800df9b8)
- RegQueryValueExW (Address: 0x1800df9c8)
- RegSetValueExW (Address: 0x1800df9c0)
- RevertToSelf (Address: 0x1800df9b0)
- SetThreadToken (Address: 0x1800df960)
api-ms-win-core-com-l1-1-0.dll
- CoWaitForMultipleHandles (Address: 0x1800e05f0)
api-ms-win-core-errorhandling-l1-1-0.dll
- SetLastError (Address: 0x1800e0600)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800e0620)
- HeapAlloc (Address: 0x1800e0628)
- HeapFree (Address: 0x1800e0618)
- HeapReAlloc (Address: 0x1800e0610)
api-ms-win-core-string-l1-1-0.dll
- GetStringTypeExW (Address: 0x1800e0638)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetVersion (Address: 0x1800e0648)
esscli.dll
- ??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z (Address: 0x1800e0660)
- ??0CStandardMetaData@@QEAA@PEAUIWbemServices@@@Z (Address: 0x1800e0670)
- ??1CContextMetaData@@QEAA@XZ (Address: 0x1800e0680)
- ??1CStandardMetaData@@UEAA@XZ (Address: 0x1800e0658)
- ?GetNecessaryQueryForClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEAUIWbemClassObject@@AEAVCWStringArray@@AEAPEAU2@@Z (Address: 0x1800e0668)
- ?SimplifyQueryForChild@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEBGPEAUIWbemClassObject@@PEAVCContextMetaData@@AEAPEAU2@@Z (Address: 0x1800e0678)
FastProx.dll
- ?_GetCoreInfo@CWbemObject@@UEAAJJPEAPEAX@Z (Address: 0x1800dfce8)
- ??0CLimitationMapping@@QEAA@XZ (Address: 0x1800e0180)
- ??0CWbemClass@@QEAA@XZ (Address: 0x1800e01b0)
- ??0CWbemInstance@@QEAA@XZ (Address: 0x1800e0010)
- ??1CLimitationMapping@@QEAA@XZ (Address: 0x1800e0188)
- ??1CWbemClass@@UEAA@XZ (Address: 0x1800dfe58)
- ??1CWbemInstance@@UEAA@XZ (Address: 0x1800e0008)
- ?AddRef@CWbemObject@@UEAAKXZ (Address: 0x1800dfb50)
- ?AppendArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800df9d8)
- ?AsymmetricMerge@CWbemInstance@@SAJPEAV1@0@Z (Address: 0x1800e0130)
- ?BeginEnumeration@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfb30)
- ?BeginEnumerationEx@CWbemObject@@UEAAJJJ@Z (Address: 0x1800dfdd8)
- ?BeginMethodEnumeration@CWbemClass@@UEAAJJ@Z (Address: 0x1800dfc28)
- ?BeginMethodEnumeration@CWbemInstance@@UEAAJJ@Z (Address: 0x1800e0050)
- ?CIMTYPEToVARTYPE@CWbemObject@@UEAAJJPEAG@Z (Address: 0x1800e0168)
- ?ClearCachedKeyValue@CWbemInstance@@UEAAXXZ (Address: 0x1800e0070)
- ?ClearWriteOnlyProperties@CWbemClass@@UEAAJXZ (Address: 0x1800e0250)
- ?ClearWriteOnlyProperties@CWbemInstance@@UEAAJXZ (Address: 0x1800dfec8)
- ?Clone@CWbemClass@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc78)
- ?Clone@CWbemInstance@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff18)
- ?CloneAndDecorate@CWbemClass@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfb98)
- ?CloneAndDecorate@CWbemInstance@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfe68)
- ?CloneEx@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbe0)
- ?CloneEx@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfec0)
- ?CompactAll@CWbemClass@@UEAAXXZ (Address: 0x1800dfd10)
- ?CompactAll@CWbemInstance@@UEAAXXZ (Address: 0x1800e00e0)
- ?CompactClass@CWbemInstance@@QEAAXXZ (Address: 0x1800e0110)
- ?CompareClassParts@CWbemObject@@UEAAJPEAUIWbemClassObject@@J@Z (Address: 0x1800dfd70)
- ?CompareDerivedMostClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbc8)
- ?CompareDerivedMostClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfea8)
- ?CompareTo@CWbemClass@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800dfc58)
- ?CompareTo@CWbemObject@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800dfb00)
- ?ConvertToClass@CWbemInstance@@QEAAJPEAVCWbemClass@@PEAPEAV1@@Z (Address: 0x1800e0158)
- ?CopyBlobOf@CWbemClass@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800dfd00)
- ?CopyBlobOf@CWbemInstance@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800dff58)
- ?CopyInstanceData@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbd8)
- ?CopyInstanceData@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfeb8)
- ?CreateDerivedClass@CWbemClass@@QEAAJPEAV1@HPEAVCDecorationPart@@@Z (Address: 0x1800e00f8)
- ?Decorate@CWbemClass@@UEAAJPEBG0@Z (Address: 0x1800dfd38)
- ?Decorate@CWbemInstance@@UEAAJPEBG0@Z (Address: 0x1800dff78)
- ?Delete@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfc88)
- ?Delete@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800dff28)
- ?DeleteMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfc30)
- ?DeleteMethod@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800e0058)
- ?DeleteProperty@CWbemInstance@@QEAAJH@Z (Address: 0x1800e0120)
- ?DisconnectObject@CWbemObject@@UEAAJK@Z (Address: 0x1800dfab8)
- ?EndEnumeration@CWbemObject@@UEAAJXZ (Address: 0x1800dfb20)
- ?EndMethodEnumeration@CWbemClass@@UEAAJXZ (Address: 0x1800dfc18)
- ?EndMethodEnumeration@CWbemInstance@@UEAAJXZ (Address: 0x1800e0040)
- ?EstimateUnmergeSpace@CWbemClass@@UEAAKXZ (Address: 0x1800dfcf8)
- ?EstimateUnmergeSpace@CWbemInstance@@UEAAKXZ (Address: 0x1800e00d8)
- ?ExtendClassPartSpace@CWbemInstance@@UEAAHPEAVCClassPart@@K@Z (Address: 0x1800e0098)
- ?ExtendInstancePartSpace@CWbemInstance@@UEAAHPEAVCInstancePart@@K@Z (Address: 0x1800dff40)
- ?FindLimitationError@CWbemClass@@QEAA?AVWString@@JPEAVCWStringArray@@@Z (Address: 0x1800e0198)
- ?FindMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800dfd90)
- ?FindMethod@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800dfb70)
- ?Get@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800dfb40)
- ?GetArrayPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800dfa10)
- ?GetArrayPropElementByHandle@CWbemObject@@UEAAJJJKPEAK0PEAPEAX@Z (Address: 0x1800dfa08)
- ?GetArrayPropInfoByHandle@CWbemObject@@UEAAJJJPEAPEAGPEAJPEAK@Z (Address: 0x1800dfa18)
- ?GetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAK0PEAX@Z (Address: 0x1800df9f0)
- ?GetBlockLength@CWbemClass@@MEAAKXZ (Address: 0x1800e01c0)
- ?GetBlockLength@CWbemInstance@@MEAAKXZ (Address: 0x1800e0258)
- ?GetClassNameW@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01e8)
- ?GetClassNameW@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00d0)
- ?GetClassPart@CWbemClass@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e01c8)
- ?GetClassPart@CWbemClass@@UEAAJPEAXKPEAK@Z (Address: 0x1800e0238)
- ?GetClassPart@CWbemInstance@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e0268)
- ?GetClassPart@CWbemInstance@@UEAAJPEAXKPEAK@Z (Address: 0x1800dffe8)
- ?GetClassSubset@CWbemClass@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfbc0)
- ?GetClassSubset@CWbemInstance@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfea0)
- ?GetDerivation@CWbemObject@@QEAAJPEAVCVar@@@Z (Address: 0x1800dfef0)
- ?GetDerivation@CWbemObject@@UEAAJJKPEAK0PEAG@Z (Address: 0x1800dfb68)
- ?GetDescription@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfab0)
- ?GetDynasty@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800dfcb8)
- ?GetDynasty@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800dff48)
- ?GetGenus@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e0200)
- ?GetGenus@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00b8)
- ?GetGUID@CWbemObject@@UEAAJPEAU_GUID@@@Z (Address: 0x1800dfaa8)
- ?GetHelpContext@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfaa0)
- ?GetHelpFile@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfa98)
- ?GetIndexedProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0208)
- ?GetIndexedProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e00b0)
- ?GetInstanceObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e0078)
- ?GetKeyOrigin@CWbemClass@@UEAAJAEAVWString@@@Z (Address: 0x1800e0218)
- ?GetKeyOrigin@CWbemInstance@@UEAAJAEAVWString@@@Z (Address: 0x1800e00a0)
- ?GetKeyOrigin@CWbemObject@@UEAAJJKPEAKPEAG@Z (Address: 0x1800dfb60)
- ?GetKeyProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0210)
- ?GetKeyProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e00a8)
- ?GetKeyString@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800dfda0)
- ?GetLimitedVersion@CWbemClass@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e01a0)
- ?GetLimitedVersion@CWbemInstance@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e0118)
- ?GetMarshalSizeMax@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z (Address: 0x1800dfad8)
- ?GetMaxMarshalStreamSize@CWbemInstance@@UEAAJPEAK@Z (Address: 0x1800dfff0)
- ?GetMaxMarshalStreamSize@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfb80)
- ?GetMethod@CWbemClass@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc50)
- ?GetMethod@CWbemInstance@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e0068)
- ?GetMethodOrigin@CWbemClass@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800dfc00)
- ?GetMethodOrigin@CWbemInstance@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e0030)
- ?GetMethodQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800dfc48)
- ?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfdb8)
- ?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dfdb0)
- ?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dffa8)
- ?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dffa0)
- ?GetMethodQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfc10)
- ?GetMethodQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e0038)
- ?GetNames@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAPEAUtagSAFEARRAY@@@Z (Address: 0x1800dfb38)
- ?GetNonsystemPropertyValue@CWbemInstance@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0140)
- ?GetNormalizedPath@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800dfdd0)
- ?GetNumProperties@CWbemClass@@UEAAHXZ (Address: 0x1800e01d0)
- ?GetNumProperties@CWbemInstance@@UEAAHXZ (Address: 0x1800e02a8)
- ?GetObjectMemory@CWbemObject@@UEAAJPEAXKPEAK@Z (Address: 0x1800dfd50)
- ?GetObjectParts@CWbemClass@@UEAAJPEAXKKPEAK@Z (Address: 0x1800e0228)
- ?GetObjectParts@CWbemInstance@@UEAAJPEAXKKPEAK@Z (Address: 0x1800dfee8)
- ?GetObjectText@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800dfc70)
- ?GetObjectText@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800dff10)
- ?GetObjQual@CWbemObject@@UEAAJPEBGJKPEAJPEAK2PEAX@Z (Address: 0x1800dfb18)
- ?GetParentClassFromBlob@CWbemClass@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800dfba0)
- ?GetParentClassFromBlob@CWbemObject@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800dfe08)
- ?GetPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800dfa20)
- ?GetProperty@CWbemClass@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e01b8)
- ?GetProperty@CWbemClass@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800dfe48)
- ?GetProperty@CWbemInstance@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e0260)
- ?GetProperty@CWbemInstance@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0270)
- ?GetPropertyCount@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01f8)
- ?GetPropertyCount@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00c0)
- ?GetPropertyHandle@CWbemObject@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dfa80)
- ?GetPropertyHandleEx@CWbemObject@@UEAAJPEBGJPEAJ1@Z (Address: 0x1800dfa30)
- ?GetPropertyInfoByHandle@CWbemObject@@UEAAJJPEAPEAGPEAJ@Z (Address: 0x1800dfa48)
- ?GetPropertyOrigin@CWbemObject@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800dfaf8)
- ?GetPropertyQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfc80)
- ?GetPropertyQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dff20)
- ?GetPropertyType@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800dfd88)
- ?GetPropertyType@CWbemClass@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dfd80)
- ?GetPropertyType@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800dffe0)
- ?GetPropertyType@CWbemInstance@@UEAAJPEBGPEAJ1@Z (Address: 0x1800dffd8)
- ?GetPropertyValue@CWbemObject@@UEAAJPEAU_tag_WbemPropertyName@@JPEAPEAGPEAUtagVARIANT@@@Z (Address: 0x1800dfae8)
- ?GetPropName@CWbemClass@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e01d8)
- ?GetPropName@CWbemInstance@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e02b0)
- ?GetPropQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800dfc08)
- ?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfde8)
- ?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800dfdc8)
- ?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfde0)
- ?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800dfdc0)
- ?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dffc8)
- ?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800dffc0)
- ?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e02a0)
- ?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e0298)
- ?GetQualifier@CWbemClass@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800dfe38)
- ?GetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800dfe30)
- ?GetQualifier@CWbemInstance@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e0280)
- ?GetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800e0278)
- ?GetQualifierSet@CWbemClass@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dfca0)
- ?GetQualifierSet@CWbemInstance@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800dff38)
- ?GetRelPath@CWbemClass@@UEAAPEAGH@Z (Address: 0x1800dfd20)
- ?GetRelPath@CWbemInstance@@UEAAPEAGH@Z (Address: 0x1800dff68)
- ?GetSource@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800dfa90)
- ?GetSuperclassName@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e01f0)
- ?GetSuperclassName@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e00c8)
- ?GetSystemPropertyByName@CWbemObject@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e0138)
- ?GetUnmarshalClass@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAU2@@Z (Address: 0x1800dfae0)
- ?GetVARTYPE@CType@@SAGK@Z (Address: 0x1800e0108)
- ?GetWbemObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e0080)
- ?InheritsFrom@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800dfaf0)
- ?InitEmpty@CWbemClass@@QEAAJHH@Z (Address: 0x1800e0160)
- ?InitNew@CWbemInstance@@QEAAJPEAVCWbemClass@@HPEAVCDecorationPart@@@Z (Address: 0x1800e00f0)
- ?IsAbstract@CWbemClass@@QEAAHXZ (Address: 0x1800dfdf8)
- ?IsAmendment@CWbemClass@@QEAAHXZ (Address: 0x1800dfdf0)
- ?IsDynamic@CWbemClass@@QEAAHXZ (Address: 0x1800dfe00)
- ?IsIllegalDerivedClass@CSystemProperties@@SAHPEBG@Z (Address: 0x1800e0178)
- ?IsInstanceOf@CWbemInstance@@QEAAHPEAVCWbemClass@@@Z (Address: 0x1800e0150)
- ?IsKeyed@CWbemClass@@UEAAHXZ (Address: 0x1800e01e0)
- ?IsKeyed@CWbemInstance@@UEAAHXZ (Address: 0x1800e00e8)
- ?IsLocalized@CWbemClass@@UEAAHXZ (Address: 0x1800dfd48)
- ?IsLocalized@CWbemInstance@@UEAAHXZ (Address: 0x1800dff88)
- ?IsObjectInstance@CWbemObject@@UEAAJXZ (Address: 0x1800e01a8)
- ?IsParentClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfbd0)
- ?IsParentClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfeb0)
- ?IsValidObj@CWbemClass@@UEAAJXZ (Address: 0x1800dfd18)
- ?IsValidObj@CWbemInstance@@UEAAJXZ (Address: 0x1800dff60)
- ?Lock@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfa40)
- ?MakeSubsetInst@CWbemClass@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800dfbb8)
- ?MakeSubsetInst@CWbemInstance@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800dfe98)
- ?MapLimitation@CWbemClass@@QEAAHJPEAVCWStringArray@@PEAVCLimitationMapping@@@Z (Address: 0x1800e0190)
- ?MarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z (Address: 0x1800dfad0)
- ?Merge@CWbemClass@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfce0)
- ?Merge@CWbemInstance@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe90)
- ?MergeAmended@CWbemObject@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfcd0)
- ?MergeAndDecorate@CWbemClass@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800dfb90)
- ?MergeAndDecorate@CWbemInstance@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe60)
- ?MergeClassPart@CWbemClass@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800e0248)
- ?MergeClassPart@CWbemInstance@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800dfed0)
- ?Next@CWbemObject@@UEAAJJPEAPEAGPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800dfb28)
- ?NextMethod@CWbemClass@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc20)
- ?NextMethod@CWbemInstance@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e0048)
- ?PlugKeyHoles@CWbemInstance@@QEAAJXZ (Address: 0x1800e0148)
- ?Put@CWbemClass@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800dfc90)
- ?Put@CWbemInstance@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800dff30)
- ?PutMethod@CWbemClass@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800dfc40)
- ?PutMethod@CWbemInstance@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800e0060)
- ?QueryInterface@CWbemObject@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x1800dfb58)
- ?QueryObjectFlags@CWbemObject@@UEAAJJ_KPEA_K@Z (Address: 0x1800dfca8)
- ?QueryPartInfo@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800dfd08)
- ?QueryPropertyFlags@CWbemObject@@UEAAJJPEBG_KPEA_K@Z (Address: 0x1800dfcc8)
- ?ReadDWORD@CWbemObject@@UEAAJJPEAK@Z (Address: 0x1800dfa68)
- ?ReadProp@CWbemObject@@UEAAJPEBGJKPEAJ1PEAHPEAKPEAX@Z (Address: 0x1800dfb08)
- ?ReadPropertyValue@CWbemObject@@UEAAJJJPEAJPEAE@Z (Address: 0x1800dfa70)
- ?ReadQWORD@CWbemObject@@UEAAJJPEA_K@Z (Address: 0x1800dfa58)
- ?ReconcileWith@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfcc0)
- ?ReconcileWith@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800dfe88)
- ?ReduceClassPartSpace@CWbemInstance@@UEAAXPEAVCClassPart@@K@Z (Address: 0x1800e0090)
- ?ReduceInstancePartSpace@CWbemInstance@@UEAAXPEAVCInstancePart@@K@Z (Address: 0x1800e0088)
- ?Release@CWbemObject@@UEAAKXZ (Address: 0x1800dfb48)
- ?ReleaseMarshalData@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfac0)
- ?RemoveArrayPropElementByHandle@CWbemObject@@UEAAJJJK@Z (Address: 0x1800df9f8)
- ?RemoveArrayPropRangeByHandle@CWbemObject@@UEAAJJJKK@Z (Address: 0x1800df9e0)
- ?RemoveDecoration@CWbemObject@@UEAAJXZ (Address: 0x1800dfd68)
- ?SetArrayPropElementByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800dfa00)
- ?SetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAX@Z (Address: 0x1800df9e8)
- ?SetClassPart@CWbemClass@@UEAAJPEAXK@Z (Address: 0x1800e0240)
- ?SetClassPart@CWbemInstance@@UEAAJPEAXK@Z (Address: 0x1800dfed8)
- ?SetData@CWbemClass@@UEAAXPEAEH@Z (Address: 0x1800dfe50)
- ?SetData@CWbemInstance@@UEAAXPEAEH@Z (Address: 0x1800e0000)
- ?SetDecoration@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800dfd60)
- ?SetInheritanceChain@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800dfbf8)
- ?SetInheritanceChain@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800e0028)
- ?SetLocalized@CWbemClass@@UEAAXH@Z (Address: 0x1800dfd40)
- ?SetLocalized@CWbemInstance@@UEAAXH@Z (Address: 0x1800dff80)
- ?SetMethodOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800dfbe8)
- ?SetMethodOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e0018)
- ?SetMethodQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800dfc98)
- ?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dfda8)
- ?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dfd98)
- ?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dff98)
- ?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dff90)
- ?SetObjectFlags@CWbemObject@@UEAAJJ_K0@Z (Address: 0x1800dfcb0)
- ?SetObjectMemory@CWbemObject@@UEAAJPEAXK@Z (Address: 0x1800dfd30)
- ?SetObjectParts@CWbemClass@@UEAAJPEAXKK@Z (Address: 0x1800e0220)
- ?SetObjectParts@CWbemInstance@@UEAAJPEAXKK@Z (Address: 0x1800dfef8)
- ?SetObjQual@CWbemObject@@UEAAJPEBGJKKJKPEAX@Z (Address: 0x1800dfb88)
- ?SetPropByHandle@CWbemObject@@UEAAJJJKPEAX@Z (Address: 0x1800dfa28)
- ?SetPropertyOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800dfbf0)
- ?SetPropertyOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e0020)
- ?SetPropQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800dfc38)
- ?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dfd78)
- ?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dfd58)
- ?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800dffb8)
- ?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800dffb0)
- ?SetPropValue@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dfe40)
- ?SetPropValue@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dffd0)
- ?SetQualifier@CWbemClass@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800dfe28)
- ?SetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800dfe20)
- ?SetQualifier@CWbemInstance@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800e0290)
- ?SetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e0288)
- ?SetServerNamespace@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800dfa88)
- ?SpawnDerivedClass@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc68)
- ?SpawnDerivedClass@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff08)
- ?SpawnInstance@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dfc60)
- ?SpawnInstance@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800dff00)
- ?SpawnKeyedInstance@CWbemClass@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfba8)
- ?SpawnKeyedInstance@CWbemInstance@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800dfe70)
- ?StripClassPart@CWbemClass@@UEAAJXZ (Address: 0x1800e0230)
- ?StripClassPart@CWbemInstance@@UEAAJXZ (Address: 0x1800dfee0)
- ?Undecorate@CWbemClass@@UEAAXXZ (Address: 0x1800dfd28)
- ?Undecorate@CWbemInstance@@UEAAXXZ (Address: 0x1800dff70)
- ?Unlock@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfa38)
- ?UnmarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z (Address: 0x1800dfac8)
- ?Unmerge@CWbemClass@@UEAAJPEAEHPEAK@Z (Address: 0x1800dfcf0)
- ?Unmerge@CWbemInstance@@UEAAJPEAEHPEAK@Z (Address: 0x1800dff50)
- ?Unmerge@CWbemObject@@UEAAJJKPEAKPEAX@Z (Address: 0x1800dfb78)
- ?Update@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfcd8)
- ?Update@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfe78)
- ?Upgrade@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfbb0)
- ?Upgrade@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800dfe80)
- ?ValidateObject@CWbemObject@@UEAAJJ@Z (Address: 0x1800dfe10)
- ?ValidateRange@CWbemObject@@QEAAHPEAPEAG@Z (Address: 0x1800e0170)
- ?WriteDWORD@CWbemObject@@UEAAJJK@Z (Address: 0x1800dfa60)
- ?WriteProp@CWbemObject@@UEAAJPEBGJKKJPEAX@Z (Address: 0x1800dfb10)
- ?WritePropertyValue@CWbemObject@@UEAAJJJPEBE@Z (Address: 0x1800dfa78)
- ?WriteQWORD@CWbemObject@@UEAAJJ_K@Z (Address: 0x1800dfa50)
- ?WriteToStream@CWbemInstance@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfff8)
- ?WriteToStream@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800dfe18)
- WbemStringCopy (Address: 0x1800e0100)
- WbemStringFree (Address: 0x1800e0128)
KERNEL32.dll
- CloseHandle (Address: 0x1800e02f8)
- CompareStringW (Address: 0x1800e0450)
- CreateEventW (Address: 0x1800e02d8)
- CreateFileW (Address: 0x1800e03b8)
- CreateThread (Address: 0x1800e0300)
- CreateTimerQueueTimer (Address: 0x1800e0330)
- DeleteCriticalSection (Address: 0x1800e0370)
- DeleteTimerQueueTimer (Address: 0x1800e0378)
- EnterCriticalSection (Address: 0x1800e0338)
- ExpandEnvironmentStringsW (Address: 0x1800e0408)
- FileTimeToSystemTime (Address: 0x1800e03c8)
- FreeLibrary (Address: 0x1800e03a0)
- GetComputerNameExW (Address: 0x1800e0358)
- GetCurrentProcess (Address: 0x1800e0490)
- GetCurrentProcessId (Address: 0x1800e03f0)
- GetCurrentThread (Address: 0x1800e03e0)
- GetCurrentThreadId (Address: 0x1800e0350)
- GetFileAttributesExW (Address: 0x1800e0448)
- GetFileAttributesW (Address: 0x1800e0420)
- GetFileInformationByHandle (Address: 0x1800e03c0)
- GetLastError (Address: 0x1800e0368)
- GetLocalTime (Address: 0x1800e0468)
- GetModuleHandleW (Address: 0x1800e0410)
- GetProcAddress (Address: 0x1800e0390)
- GetProcessTimes (Address: 0x1800e0400)
- GetSystemDirectoryW (Address: 0x1800e0380)
- GetSystemInfo (Address: 0x1800e0438)
- GetSystemTime (Address: 0x1800e0418)
- GetSystemTimeAsFileTime (Address: 0x1800e0458)
- GetTickCount (Address: 0x1800e0318)
- GetTickCount64 (Address: 0x1800e0320)
- GetVersionExW (Address: 0x1800e0428)
- GlobalMemoryStatusEx (Address: 0x1800e0398)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800e0340)
- InitializeCriticalSectionEx (Address: 0x1800e0470)
- LCMapStringW (Address: 0x1800e0328)
- LeaveCriticalSection (Address: 0x1800e0348)
- LoadLibraryExW (Address: 0x1800e03a8)
- LocalFree (Address: 0x1800e03e8)
- lstrlenW (Address: 0x1800e03b0)
- MoveFileW (Address: 0x1800e0430)
- OpenEventW (Address: 0x1800e03d0)
- OpenProcess (Address: 0x1800e03d8)
- QueryPerformanceCounter (Address: 0x1800e0480)
- QueueUserWorkItem (Address: 0x1800e0360)
- ResetEvent (Address: 0x1800e0388)
- RtlCaptureContext (Address: 0x1800e0478)
- RtlLookupFunctionEntry (Address: 0x1800e04b0)
- RtlVirtualUnwind (Address: 0x1800e04a8)
- SetEvent (Address: 0x1800e02e8)
- SetUnhandledExceptionFilter (Address: 0x1800e0498)
- Sleep (Address: 0x1800e02e0)
- SystemTimeToFileTime (Address: 0x1800e0440)
- TerminateProcess (Address: 0x1800e0488)
- TlsAlloc (Address: 0x1800e02f0)
- TlsFree (Address: 0x1800e0310)
- TlsGetValue (Address: 0x1800e0308)
- TlsSetValue (Address: 0x1800e02c0)
- UnhandledExceptionFilter (Address: 0x1800e04a0)
- WaitForMultipleObjectsEx (Address: 0x1800e02c8)
- WaitForSingleObject (Address: 0x1800e02d0)
- WideCharToMultiByte (Address: 0x1800e03f8)
- WriteFile (Address: 0x1800e0460)
msvcrt.dll
- __C_specific_handler (Address: 0x1800e07c8)
- __CxxFrameHandler3 (Address: 0x1800e07d0)
- __dllonexit (Address: 0x1800e06d8)
- _amsg_exit (Address: 0x1800e06e8)
- _CxxThrowException (Address: 0x1800e0718)
- _initterm (Address: 0x1800e06e0)
- _lock (Address: 0x1800e0700)
- _onexit (Address: 0x1800e06d0)
- _purecall (Address: 0x1800e07c0)
- _ui64tow_s (Address: 0x1800e0768)
- _unlock (Address: 0x1800e06f8)
- _vsnprintf (Address: 0x1800e06b0)
- _vsnwprintf (Address: 0x1800e07a8)
- _wcsicmp (Address: 0x1800e07a0)
- _wcslwr_s (Address: 0x1800e0750)
- _wcsnicmp (Address: 0x1800e07b0)
- _XcptFilter (Address: 0x1800e06f0)
- ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800e0740)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800e0738)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800e0730)
- ??1exception@@UEAA@XZ (Address: 0x1800e0728)
- ??1type_info@@UEAA@XZ (Address: 0x1800e06c8)
- ?terminate@@YAXXZ (Address: 0x1800e06c0)
- ?what@exception@@UEBAPEBDXZ (Address: 0x1800e0720)
- atol (Address: 0x1800e0698)
- free (Address: 0x1800e0790)
- isdigit (Address: 0x1800e0788)
- iswspace (Address: 0x1800e0770)
- iswxdigit (Address: 0x1800e0760)
- malloc (Address: 0x1800e0780)
- memcmp (Address: 0x1800e06a0)
- memcpy (Address: 0x1800e0710)
- memmove (Address: 0x1800e0708)
- memmove_s (Address: 0x1800e0748)
- memset (Address: 0x1800e06b8)
- sscanf_s (Address: 0x1800e0690)
- swprintf_s (Address: 0x1800e0778)
- wcschr (Address: 0x1800e0798)
- wcscmp (Address: 0x1800e06a8)
- wcsstr (Address: 0x1800e0758)
- wcstok (Address: 0x1800e07b8)
ntdll.dll
- WinSqmAddToStream (Address: 0x1800e07e8)
- WinSqmIsOptedIn (Address: 0x1800e07e0)
OLE32.dll
- CLSIDFromString (Address: 0x1800e0520)
- CoCreateInstance (Address: 0x1800e04c0)
- CoDisconnectObject (Address: 0x1800e0510)
- CoGetCallContext (Address: 0x1800e04d8)
- CoImpersonateClient (Address: 0x1800e04d0)
- CoInitializeEx (Address: 0x1800e04f8)
- CoRevertToSelf (Address: 0x1800e0500)
- CoSetProxyBlanket (Address: 0x1800e0518)
- CoSwitchCallContext (Address: 0x1800e04f0)
- CoTaskMemFree (Address: 0x1800e04c8)
- CoUninitialize (Address: 0x1800e04e8)
- CoUnmarshalInterface (Address: 0x1800e0508)
- StringFromGUID2 (Address: 0x1800e04e0)
OLEAUT32.dll
- SafeArrayAccessData (Address: 0x1800e0538)
- SafeArrayCreate (Address: 0x1800e05a0)
- SafeArrayDestroy (Address: 0x1800e0550)
- SafeArrayGetDim (Address: 0x1800e0568)
- SafeArrayGetElement (Address: 0x1800e05a8)
- SafeArrayGetLBound (Address: 0x1800e0580)
- SafeArrayGetUBound (Address: 0x1800e0558)
- SafeArrayPutElement (Address: 0x1800e0590)
- SafeArrayUnaccessData (Address: 0x1800e0530)
- SetErrorInfo (Address: 0x1800e0560)
- SysAllocString (Address: 0x1800e0588)
- SysAllocStringByteLen (Address: 0x1800e05b0)
- SysAllocStringLen (Address: 0x1800e0548)
- SysFreeString (Address: 0x1800e0578)
- SysStringLen (Address: 0x1800e05b8)
- VariantChangeType (Address: 0x1800e0598)
- VariantClear (Address: 0x1800e05c0)
- VariantCopy (Address: 0x1800e0540)
- VariantInit (Address: 0x1800e0570)
VERSION.dll
- GetFileVersionInfoExW (Address: 0x1800e05d8)
- GetFileVersionInfoSizeExW (Address: 0x1800e05e0)
- VerQueryValueW (Address: 0x1800e05d0)
wbemcomn.dll
- _IsValidElementName (Address: 0x1800e0af0)
- _ThrowMemoryException_ (Address: 0x1800e0de0)
- ?_Free@CMUILocale@@SAHPEAX@Z (Address: 0x1800e0d88)
- ?_GetSystemDefaultLocale@CMUILocale@@SAJPEAPEAGK@Z (Address: 0x1800e09e0)
- ??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z (Address: 0x1800e0f30)
- ??0CClientOpsNode@@QEAA@XZ (Address: 0x1800e0dd0)
- ??0CCritSec@@QEAA@XZ (Address: 0x1800e0f68)
- ??0CDateTimeParser@@QEAA@PEBG@Z (Address: 0x1800e0960)
- ??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z (Address: 0x1800e0a78)
- ??0CFlexArray@@QEAA@AEAV0@@Z (Address: 0x1800e0d18)
- ??0CFlexArray@@QEAA@HH@Z (Address: 0x1800e0fa0)
- ??0CFlexQueue@@QEAA@H@Z (Address: 0x1800e0ee0)
- ??0CIdentitySecurity@@QEAA@_N@Z (Address: 0x1800e0e00)
- ??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1800e0f88)
- ??0CInsertionString@@QEAA@PEBG@Z (Address: 0x1800e0dc8)
- ??0CInsertionString@@QEAA@VCHex@@@Z (Address: 0x1800e0a70)
- ??0CInsertionString@@QEAA@XZ (Address: 0x1800e0e90)
- ??0CLike@@QEAA@PEBGG@Z (Address: 0x1800e0938)
- ??0CMUILocaleList@@QEAA@XZ (Address: 0x1800e0bf8)
- ??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z (Address: 0x1800e0b38)
- ??0CNtAcl@@QEAA@K@Z (Address: 0x1800e0b80)
- ??0CNtAcl@@QEAA@PEAU_ACL@@@Z (Address: 0x1800e0828)
- ??0CNtSecurityDescriptor@@QEAA@PEAX@Z (Address: 0x1800e0bb0)
- ??0CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e0bb8)
- ??0CNtSid@@QEAA@PEAX@Z (Address: 0x1800e0c30)
- ??0CPropertyName@@QEAA@XZ (Address: 0x1800e08f8)
- ??0CSafeArray@@QEAA@HHHH@Z (Address: 0x1800e0ce0)
- ??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z (Address: 0x1800e0c60)
- ??0CStaticCritSec@@QEAA@XZ (Address: 0x1800e0f58)
- ??0CVar@@QEAA@AEBV0@@Z (Address: 0x1800e0ad8)
- ??0CVar@@QEAA@E@Z (Address: 0x1800e08a0)
- ??0CVar@@QEAA@FH@Z (Address: 0x1800e08b0)
- ??0CVar@@QEAA@HPEAG@Z (Address: 0x1800e0d08)
- ??0CVar@@QEAA@HVauto_bstr@@@Z (Address: 0x1800e0a50)
- ??0CVar@@QEAA@J@Z (Address: 0x1800e08a8)
- ??0CVar@@QEAA@PEAUtagVARIANT@@@Z (Address: 0x1800e08e0)
- ??0CVar@@QEAA@PEAVCVarVector@@H@Z (Address: 0x1800e08b8)
- ??0CVar@@QEAA@XZ (Address: 0x1800e0e60)
- ??0CVarVector@@QEAA@HHH@Z (Address: 0x1800e08c8)
- ??0CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e0a28)
- ??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e0d30)
- ??0CWStringArray@@QEAA@HH@Z (Address: 0x1800e0ea8)
- ??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z (Address: 0x1800e0928)
- ??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e0990)
- ??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z (Address: 0x1800e0cb0)
- ??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z (Address: 0x1800e0de8)
- ??0Registry@@QEAA@PEBGK@Z (Address: 0x1800e0d90)
- ??0WString@@QEAA@AEBV0@@Z (Address: 0x1800e0ac0)
- ??0WString@@QEAA@PEAGH@Z (Address: 0x1800e0fd8)
- ??0WString@@QEAA@PEBG@Z (Address: 0x1800e0be0)
- ??0WString@@QEAA@XZ (Address: 0x1800e0e20)
- ??0WString2@@QEAA@PEAGH@Z (Address: 0x1800e0d70)
- ??0WString2@@QEAA@PEBG@Z (Address: 0x1800e0f08)
- ??0WString2@@QEAA@XZ (Address: 0x1800e0f00)
- ??1CCheckedInCritSec@@QEAA@XZ (Address: 0x1800e0f38)
- ??1CClientOpsNode@@QEAA@XZ (Address: 0x1800e0e38)
- ??1CCritSec@@QEAA@XZ (Address: 0x1800e0f70)
- ??1CDateTimeParser@@QEAA@XZ (Address: 0x1800e0968)
- ??1CEnterWbemCriticalSection@@QEAA@XZ (Address: 0x1800e09e8)
- ??1CEventLog@@QEAA@XZ (Address: 0x1800e0a80)
- ??1CFlexArray@@QEAA@XZ (Address: 0x1800e0fa8)
- ??1CFlexQueue@@QEAA@XZ (Address: 0x1800e0ee8)
- ??1CIdentitySecurity@@QEAA@XZ (Address: 0x1800e0e08)
- ??1CInCritSec@@QEAA@XZ (Address: 0x1800e0f90)
- ??1CInsertionString@@QEAA@XZ (Address: 0x1800e0e98)
- ??1CLike@@QEAA@XZ (Address: 0x1800e0940)
- ??1CMUILocaleList@@QEAA@XZ (Address: 0x1800e0c00)
- ??1CNtAce@@UEAA@XZ (Address: 0x1800e0b40)
- ??1CNtAcl@@QEAA@XZ (Address: 0x1800e0b88)
- ??1CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e0bc0)
- ??1CNtSid@@QEAA@XZ (Address: 0x1800e0c38)
- ??1CPropertyName@@QEAA@XZ (Address: 0x1800e0900)
- ??1CSafeArray@@QEAA@XZ (Address: 0x1800e0ce8)
- ??1CStaticCritSec@@QEAA@XZ (Address: 0x1800e0f60)
- ??1CVar@@QEAA@XZ (Address: 0x1800e0e68)
- ??1CVarVector@@QEAA@XZ (Address: 0x1800e08d0)
- ??1CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e0a30)
- ??1CWQLScanner@@QEAA@XZ (Address: 0x1800e0d38)
- ??1CWStringArray@@QEAA@XZ (Address: 0x1800e0eb0)
- ??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ (Address: 0x1800e09b0)
- ??1QL_LEVEL_1_TOKEN@@QEAA@XZ (Address: 0x1800e0930)
- ??1QL1_Parser@@UEAA@XZ (Address: 0x1800e0998)
- ??1Registry@@QEAA@XZ (Address: 0x1800e0df0)
- ??1WString@@QEAA@XZ (Address: 0x1800e0db0)
- ??1WString2@@QEAA@XZ (Address: 0x1800e0f18)
- ??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e0848)
- ??4CWStringArray@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e0d58)
- ??4WString@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e0980)
- ??4WString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0e28)
- ??4WString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0f10)
- ??ACFlexArray@@QEAAAEAPEAXH@Z (Address: 0x1800e0fb0)
- ??ACWStringArray@@QEBAPEAGH@Z (Address: 0x1800e0e80)
- ??YWString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0e30)
- ??YWString2@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e0d78)
- ??YWString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e0f20)
- ?AccessCheck@CIdentitySecurity@@QEAAHXZ (Address: 0x1800e0e10)
- ?Add@CFlexArray@@QEAAHPEAX@Z (Address: 0x1800e0f98)
- ?Add@CVarVector@@QEAAHAEAVCVar@@@Z (Address: 0x1800e08d8)
- ?Add@CWStringArray@@QEAAHPEBG@Z (Address: 0x1800e0eb8)
- ?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z (Address: 0x1800e0ba0)
- ?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z (Address: 0x1800e0c28)
- ?AddElement@CPropertyName@@QEAAXPEBG@Z (Address: 0x1800e0910)
- ?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z (Address: 0x1800e09c8)
- ?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e09b8)
- ?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z (Address: 0x1800e0d20)
- ?anyFailure@CStaticCritSec@@SAHXZ (Address: 0x1800e0ab8)
- ?Bind@CFlexArray@@QEAAXAEAV1@@Z (Address: 0x1800e0d50)
- ?BindPtr@WString@@QEAAXPEAG@Z (Address: 0x1800e0db8)
- ?ChangeTypeTo@CVar@@QEAAHG@Z (Address: 0x1800e0920)
- ?CheckLangNeutral@CMUILocale@@SAJPEBGPEA_N@Z (Address: 0x1800e0c48)
- ?Close@CEventLog@@QEAAHXZ (Address: 0x1800e0a88)
- ?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z (Address: 0x1800e0ed8)
- ?CoGetClassObject@CWbemInstallObject@@SAJAEBU_GUID@@KPEAU_COSERVERINFO@@0PEAPEAX@Z (Address: 0x1800e0ab0)
- ?Compress@CFlexArray@@QEAAXXZ (Address: 0x1800e0d48)
- ?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z (Address: 0x1800e0830)
- ?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ (Address: 0x1800e0c98)
- ?DeleteAce@CNtAcl@@QEAAHH@Z (Address: 0x1800e0838)
- ?DeleteSacl@CNtSecurityDescriptor@@QEAAJXZ (Address: 0x1800e0868)
- ?DeleteValue@Registry@@QEAAHPEBG@Z (Address: 0x1800e0a58)
- ?Dequeue@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e0ef8)
- ?Deserialize@CNtAce@@UEAA_NPEAE@Z (Address: 0x1800e0b70)
- ?Empty@CFlexArray@@QEAAXXZ (Address: 0x1800e0f50)
- ?Empty@CVar@@QEAAXXZ (Address: 0x1800e0918)
- ?Empty@CWStringArray@@QEAAXXZ (Address: 0x1800e0af8)
- ?Empty@WString@@QEAAXXZ (Address: 0x1800e0ae0)
- ?Empty@WString2@@QEAAXXZ (Address: 0x1800e0f28)
- ?Enqueue@CFlexQueue@@QEAA_NPEAX@Z (Address: 0x1800e0ef0)
- ?Enter@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e0da8)
- ?Enter@CCritSec@@QEAAXXZ (Address: 0x1800e0f78)
- ?Enter@CWbemCriticalSection@@QEAAHK@Z (Address: 0x1800e0a38)
- ?EqualNoCase@WString@@QEBAHPEBG@Z (Address: 0x1800e0ac8)
- ?EqualNoCase@WString2@@QEBAHPEBG@Z (Address: 0x1800e08f0)
- ?EscapeQuotes@WString2@@QEBA?AV1@XZ (Address: 0x1800e0d80)
- ?FillDMTF@CDateTimeParser@@QEAAHPEAG_K@Z (Address: 0x1800e0970)
- ?FindStr@CWStringArray@@QEAAHPEBGH@Z (Address: 0x1800e0b00)
- ?GetAccessMask@CNtAce@@UEAAKXZ (Address: 0x1800e0b58)
- ?GetAce@CNtAcl@@QEAAPEAVCNtAce@@H@Z (Address: 0x1800e0b98)
- ?GetAt@CFlexArray@@QEBAPEAXH@Z (Address: 0x1800e0ea0)
- ?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z (Address: 0x1800e0b30)
- ?GetAt@CWStringArray@@QEBAPEAGH@Z (Address: 0x1800e0d00)
- ?GetBinaryPath@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0aa0)
- ?GetBSTR@CVar@@QEAAPEAGXZ (Address: 0x1800e0b18)
- ?GetBSTRAt@CSafeArray@@QEAAPEAGH@Z (Address: 0x1800e0c68)
- ?GetCultures@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e0c18)
- ?GetDacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e0850)
- ?GetDacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e0bc8)
- ?GetDWORD@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e0df8)
- ?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e0cb8)
- ?GetEmbeddedObject@CVar@@QEAAPEAUIUnknown@@XZ (Address: 0x1800e08e8)
- ?GetFirst_ms_XXX_Locale@CMUILocaleList@@QEAAJPEAPEAG@Z (Address: 0x1800e0c10)
- ?GetFlags@CNtAce@@UEAAHXZ (Address: 0x1800e0b50)
- ?GetLocales@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e0c20)
- ?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z (Address: 0x1800e0cc0)
- ?GetNumAces@CNtAcl@@QEAAHXZ (Address: 0x1800e0b90)
- ?GetOwner@CNtSecurityDescriptor@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e0870)
- ?GetPersistentCfgValue@CPersistentConfig@@QEAAHKAEAK@Z (Address: 0x1800e0a60)
- ?GetQueueSize@CFlexQueue@@QEBAHXZ (Address: 0x1800e0dc0)
- ?GetReferencedAliases@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0d28)
- ?GetReferencedTables@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e0958)
- ?GetRegistryPathCIMOM@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0ed0)
- ?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e0aa8)
- ?GetSacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e0858)
- ?GetSacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e0bd8)
- ?GetSerializedSize@CNtAce@@UEAAKXZ (Address: 0x1800e0b60)
- ?GetSid@CNtAce@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e0820)
- ?GetSize@CNtSecurityDescriptor@@QEAAKXZ (Address: 0x1800e0888)
- ?GetStatus@CNtAce@@UEAAKXZ (Address: 0x1800e0ae8)
- ?GetStr@Registry@@QEAAHPEBGPEAPEAG@Z (Address: 0x1800e0d98)
- ?GetStringAt@CPropertyName@@QEBAPEBGJ@Z (Address: 0x1800e0908)
- ?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ (Address: 0x1800e09d0)
- ?GetType@CNtAce@@UEAAHXZ (Address: 0x1800e0b48)
- ?Init@CPublishWMIOperationEvent@@SAJXZ (Address: 0x1800e0a48)
- ?Initialize@CMUILocaleList@@QEAAJPEAG_N@Z (Address: 0x1800e0c08)
- ?InsertAt@CFlexArray@@QEAAHHPEAX@Z (Address: 0x1800e0f48)
- ?IsDataNull@CVar@@QEAAHXZ (Address: 0x1800e0b10)
- ?IsOffline@CWbemInstallObject@@SA_NXZ (Address: 0x1800e0ec8)
- ?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z (Address: 0x1800e0b08)
- ?IsValid@CNtAcl@@QEAAHXZ (Address: 0x1800e0810)
- ?IsValid@CNtSid@@QEAAHXZ (Address: 0x1800e0808)
- ?LCID_To_ms_XXX_Format@CMUILocale@@SAJKPEAG_K@Z (Address: 0x1800e0c58)
- ?Leave@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e0f40)
- ?Leave@CCritSec@@QEAAXXZ (Address: 0x1800e0f80)
- ?Leave@CWbemCriticalSection@@QEAAXXZ (Address: 0x1800e0a40)
- ?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z (Address: 0x1800e0c50)
- ?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ (Address: 0x1800e07f8)
- ?Match@CLike@@QEAA_NPEBG@Z (Address: 0x1800e0948)
- ?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z (Address: 0x1800e0c40)
- ?Open@CEventLog@@QEAAHXZ (Address: 0x1800e0a90)
- ?OrderAces@CNtAcl@@QEAAPEAV1@XZ (Address: 0x1800e0840)
- ?Parse@CWQLScanner@@QEAAHXZ (Address: 0x1800e0d40)
- ?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1800e09a0)
- ?Peek@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e0e48)
- ?Publish@CPublishWMIOperationEvent@@SAJPEAGKK0000K_K0H@Z (Address: 0x1800e0c70)
- ?PublishClientRequestFailure@CPublishWMIOperationEvent@@SAJPEBGPEAG1K10J0@Z (Address: 0x1800e0e58)
- ?PublishMethodExec@CPublishWMIOperationEvent@@SAJPEAGKK000000K_K0H@Z (Address: 0x1800e0c78)
- ?PublishRepDelete@CPublishWMIOperationEvent@@SAJKPEAGPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e0c88)
- ?PublishRepUpdate@CPublishWMIOperationEvent@@SAJKPEAGKPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e0c90)
- ?PublishStop@CPublishWMIOperationEvent@@SAJKJPEAG@Z (Address: 0x1800e0e50)
- ?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SAJPEAGKK0K_K000K1H@Z (Address: 0x1800e0c80)
- ?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXP6AJH@Z@Z (Address: 0x1800e0a10)
- ?Release@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e09c0)
- ?RemoveAt@CFlexArray@@QEAAHH@Z (Address: 0x1800e0fb8)
- ?RemoveAt@CWStringArray@@QEAAHH@Z (Address: 0x1800e0d60)
- ?RemoveSelf@CClientOpsNode@@QEAAXXZ (Address: 0x1800e0e40)
- ?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1800e0ec0)
- ?Serialize@CNtAce@@UEAA_NPEAE_K@Z (Address: 0x1800e0b68)
- ?SetAt@CFlexArray@@QEAAXHPEAX@Z (Address: 0x1800e0ad0)
- ?SetBSTR@CVar@@QEAAHPEAG@Z (Address: 0x1800e0ca0)
- ?SetBSTR@CVar@@QEAAHVauto_bstr@@@Z (Address: 0x1800e0ca8)
- ?SetBSTRAt@CSafeArray@@QEAAHHPEAG@Z (Address: 0x1800e0cf0)
- ?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e0bd0)
- ?SetDMTF@CWbemTime@@QEAAHPEBG@Z (Address: 0x1800e0988)
- ?SetDWORD@Registry@@QEAAHPEBGK@Z (Address: 0x1800e0cc8)
- ?SetDWORDStr@Registry@@QEAAHPEBGK@Z (Address: 0x1800e0cd0)
- ?SetEmbeddedObject@CVar@@QEAAXPEAUIUnknown@@@Z (Address: 0x1800e0d10)
- ?SetFailure@CStaticCritSec@@SAXXZ (Address: 0x1800e0fd0)
- ?SetFlags@CNtAce@@UEAAXJ@Z (Address: 0x1800e0be8)
- ?SetGroup@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e0880)
- ?SetLogingEnabled@CMemoryLog@@QEAAX_N@Z (Address: 0x1800e09f8)
- ?SetOwner@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e0878)
- ?SetSacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e0860)
- ?SetStr@Registry@@QEAAHPEBG0@Z (Address: 0x1800e0cd8)
- ?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z (Address: 0x1800e08c0)
- ?Size@CVarVector@@QEAAHXZ (Address: 0x1800e0b28)
- ?Size@CWStringArray@@QEBAHXZ (Address: 0x1800e0e88)
- ?Trim@CSafeArray@@QEAAHXZ (Address: 0x1800e0cf8)
- ?UnbindPtr@WString2@@QEAAPEAGXZ (Address: 0x1800e09a8)
- ?Union@CWStringArray@@SAXAEAV1@00@Z (Address: 0x1800e0d68)
- ?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXXZ (Address: 0x1800e0a18)
- ?ValidateMemSize@CWin32DefaultArena@@SAHH@Z (Address: 0x1800e09d8)
- ?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x1800e0e70)
- ?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x1800e0e78)
- ?WbemMemReAlloc@CWin32DefaultArena@@SAPEAXPEAX_K@Z (Address: 0x1800e0800)
- ?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x1800e0fc8)
- BreakOnDbgAndRenterLoop (Address: 0x1800e0dd8)
- BuildOperationInfo (Address: 0x1800e0ba8)
- BuildSecurityDescriptorParameter (Address: 0x1800e0898)
- ComposeName (Address: 0x1800e0a98)
- GetAccessToken (Address: 0x1800e0fe0)
- GetGlobalClientOps (Address: 0x1800e0bf0)
- GetMemLogObject (Address: 0x1800e0fc0)
- GetSecurityDescriptorFromParameters (Address: 0x1800e0890)
- IsAdmin (Address: 0x1800e0b78)
- IsInAdminGroup (Address: 0x1800e0818)
- IsLocalConnection (Address: 0x1800e0e18)
- IsNtSetupRunning (Address: 0x1800e0da0)
- isunialphanum (Address: 0x1800e0b20)
- ReadI64 (Address: 0x1800e0950)
- ReadUI64 (Address: 0x1800e0978)
- RegisterDLL (Address: 0x1800e0a00)
- Set_WPP_INIT_TRACING_Call_State (Address: 0x1800e09f0)
- TestDirExistAndCreateWithSDIfNotThere (Address: 0x1800e0a68)
- UnRegisterDLL (Address: 0x1800e0a08)
- WMIControlClientOpsCallback (Address: 0x1800e0a20)