wbemcore.dll

Description: Windows Management Instrumentation

Version: 10.0.19041.2664

Architecture: 64-bit

Operating System: Windows NT

SHA256: c259febb8048c19b3462d3d8d7f93d4e

File Size: 1.7 MB

Uploaded At: Dec. 1, 2025, 8:18 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7c5b0)
DllGetClassObject (Ordinal: 2, Address: 0x7c240)
DllRegisterServer (Ordinal: 3, Address: 0x7c820)
DllUnregisterServer (Ordinal: 4, Address: 0x7cc10)
Reinitialize (Ordinal: 5, Address: 0x7cf90)
Shutdown (Ordinal: 6, Address: 0x7cdb0)

Imported DLLs & Functions

ADVAPI32.dll

AccessCheck (Address: 0x1800e7980)
AllocateAndInitializeSid (Address: 0x1800e79e0)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800e79f8)
EventActivityIdControl (Address: 0x1800e7a08)
FreeSid (Address: 0x1800e79f0)
GetLengthSid (Address: 0x1800e79b0)
GetSecurityDescriptorControl (Address: 0x1800e79a0)
GetSecurityDescriptorDacl (Address: 0x1800e79d8)
GetSecurityDescriptorSacl (Address: 0x1800e7978)
GetSidSubAuthority (Address: 0x1800e7998)
GetSidSubAuthorityCount (Address: 0x1800e7990)
GetTokenInformation (Address: 0x1800e79a8)
IsValidSecurityDescriptor (Address: 0x1800e79e8)
OpenThreadToken (Address: 0x1800e7a00)
PrivilegeCheck (Address: 0x1800e7988)
RegCloseKey (Address: 0x1800e7a10)
RegCreateKeyExW (Address: 0x1800e79c8)
RegDeleteKeyW (Address: 0x1800e79c0)
RegDeleteValueW (Address: 0x1800e79b8)
RegNotifyChangeKeyValue (Address: 0x1800e7a18)
RegOpenKeyExW (Address: 0x1800e7a28)
RegQueryValueExW (Address: 0x1800e7a38)
RegSetValueExW (Address: 0x1800e7a30)
RevertToSelf (Address: 0x1800e7a20)
SetThreadToken (Address: 0x1800e79d0)

api-ms-win-core-com-l1-1-0.dll

CoWaitForMultipleHandles (Address: 0x1800e8720)

api-ms-win-core-heap-l1-1-0.dll

HeapReAlloc (Address: 0x1800e8730)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeExW (Address: 0x1800e8740)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersion (Address: 0x1800e8750)

esscli.dll

??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z (Address: 0x1800e8760)
??0CStandardMetaData@@QEAA@PEAUIWbemServices@@@Z (Address: 0x1800e8778)
??1CContextMetaData@@QEAA@XZ (Address: 0x1800e8788)
??1CStandardMetaData@@UEAA@XZ (Address: 0x1800e8768)
?GetNecessaryQueryForClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEAUIWbemClassObject@@AEAVCWStringArray@@AEAPEAU2@@Z (Address: 0x1800e8780)
?SimplifyQueryForChild@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEBGPEAUIWbemClassObject@@PEAVCContextMetaData@@AEAPEAU2@@Z (Address: 0x1800e8770)

FastProx.dll

?_GetCoreInfo@CWbemObject@@UEAAJJPEAPEAX@Z (Address: 0x1800e7d68)
??0CLimitationMapping@@QEAA@XZ (Address: 0x1800e8290)
??0CWbemClass@@QEAA@XZ (Address: 0x1800e82c0)
??0CWbemInstance@@QEAA@XZ (Address: 0x1800e8080)
??1CLimitationMapping@@QEAA@XZ (Address: 0x1800e8298)
??1CWbemClass@@UEAA@XZ (Address: 0x1800e7e78)
??1CWbemInstance@@UEAA@XZ (Address: 0x1800e8078)
?AddRef@CWbemObject@@UEAAKXZ (Address: 0x1800e7bc0)
?AppendArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800e7a48)
?AsymmetricMerge@CWbemInstance@@SAJPEAV1@0@Z (Address: 0x1800e8030)
?BeginEnumeration@CWbemObject@@UEAAJJ@Z (Address: 0x1800e7ba0)
?BeginEnumerationEx@CWbemObject@@UEAAJJJ@Z (Address: 0x1800e7f28)
?BeginMethodEnumeration@CWbemClass@@UEAAJJ@Z (Address: 0x1800e7c98)
?BeginMethodEnumeration@CWbemInstance@@UEAAJJ@Z (Address: 0x1800e80c0)
?CIMTYPEToVARTYPE@CWbemObject@@UEAAJJPEAG@Z (Address: 0x1800e8240)
?ClearCachedKeyValue@CWbemInstance@@UEAAXXZ (Address: 0x1800e80e0)
?ClearWriteOnlyProperties@CWbemClass@@UEAAJXZ (Address: 0x1800e81c0)
?ClearWriteOnlyProperties@CWbemInstance@@UEAAJXZ (Address: 0x1800e7ef8)
?Clone@CWbemClass@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7ce8)
?Clone@CWbemInstance@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7f80)
?CloneAndDecorate@CWbemClass@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7c08)
?CloneAndDecorate@CWbemInstance@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7e90)
?CloneEx@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7c50)
?CloneEx@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7ee8)
?CompactAll@CWbemClass@@UEAAXXZ (Address: 0x1800e7d78)
?CompactAll@CWbemInstance@@UEAAXXZ (Address: 0x1800e8150)
?CompactClass@CWbemInstance@@QEAAXXZ (Address: 0x1800e8220)
?CompareClassParts@CWbemObject@@UEAAJPEAUIWbemClassObject@@J@Z (Address: 0x1800e7e88)
?CompareDerivedMostClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7c38)
?CompareDerivedMostClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7ed0)
?CompareTo@CWbemClass@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800e7cc0)
?CompareTo@CWbemObject@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800e7b70)
?ConvertToClass@CWbemInstance@@QEAAJPEAVCWbemClass@@PEAPEAV1@@Z (Address: 0x1800e8268)
?CopyBlobOf@CWbemClass@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800e7d70)
?CopyBlobOf@CWbemInstance@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800e7fc0)
?CopyInstanceData@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7c48)
?CopyInstanceData@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7ee0)
?CreateDerivedClass@CWbemClass@@QEAAJPEAV1@HPEAVCDecorationPart@@@Z (Address: 0x1800e8208)
?Decorate@CWbemClass@@UEAAJPEBG0@Z (Address: 0x1800e7da0)
?Decorate@CWbemInstance@@UEAAJPEBG0@Z (Address: 0x1800e7fe0)
?Delete@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e7cf8)
?Delete@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800e7f90)
?DeleteMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e7ca0)
?DeleteMethod@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800e80c8)
?DeleteProperty@CWbemInstance@@QEAAJH@Z (Address: 0x1800e8230)
?DisconnectObject@CWbemObject@@UEAAJK@Z (Address: 0x1800e7b28)
?EndEnumeration@CWbemObject@@UEAAJXZ (Address: 0x1800e7b78)
?EndMethodEnumeration@CWbemClass@@UEAAJXZ (Address: 0x1800e7c80)
?EndMethodEnumeration@CWbemInstance@@UEAAJXZ (Address: 0x1800e80b0)
?EstimateUnmergeSpace@CWbemClass@@UEAAKXZ (Address: 0x1800e7d60)
?EstimateUnmergeSpace@CWbemInstance@@UEAAKXZ (Address: 0x1800e8148)
?ExtendClassPartSpace@CWbemInstance@@UEAAHPEAVCClassPart@@K@Z (Address: 0x1800e8108)
?ExtendInstancePartSpace@CWbemInstance@@UEAAHPEAVCInstancePart@@K@Z (Address: 0x1800e7fa8)
?FindLimitationError@CWbemClass@@QEAA?AVWString@@JPEAVCWStringArray@@@Z (Address: 0x1800e82a8)
?FindMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e7de0)
?FindMethod@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800e7be0)
?Get@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800e7bb0)
?GetArrayPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800e7a80)
?GetArrayPropElementByHandle@CWbemObject@@UEAAJJJKPEAK0PEAPEAX@Z (Address: 0x1800e7a78)
?GetArrayPropInfoByHandle@CWbemObject@@UEAAJJJPEAPEAGPEAJPEAK@Z (Address: 0x1800e7a88)
?GetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAK0PEAX@Z (Address: 0x1800e7a60)
?GetBlockLength@CWbemClass@@MEAAKXZ (Address: 0x1800e82d0)
?GetBlockLength@CWbemInstance@@MEAAKXZ (Address: 0x1800e81b8)
?GetClassNameW@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e82f8)
?GetClassNameW@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8140)
?GetClassPart@CWbemClass@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e82d8)
?GetClassPart@CWbemClass@@UEAAJPEAXKPEAK@Z (Address: 0x1800e81d8)
?GetClassPart@CWbemInstance@@MEAAPEAVCClassPart@@XZ (Address: 0x1800e81a8)
?GetClassPart@CWbemInstance@@UEAAJPEAXKPEAK@Z (Address: 0x1800e8058)
?GetClassSubset@CWbemClass@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7c30)
?GetClassSubset@CWbemInstance@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7ec8)
?GetDerivation@CWbemObject@@QEAAJPEAVCVar@@@Z (Address: 0x1800e8278)
?GetDerivation@CWbemObject@@UEAAJJKPEAK0PEAG@Z (Address: 0x1800e7bd8)
?GetDescription@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e7b20)
?GetDynasty@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e7d10)
?GetDynasty@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e7fb0)
?GetGenus@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8310)
?GetGenus@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8128)
?GetGUID@CWbemObject@@UEAAJPEAU_GUID@@@Z (Address: 0x1800e7b18)
?GetHelpContext@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e7b10)
?GetHelpFile@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e7b08)
?GetIndexedProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8318)
?GetIndexedProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8120)
?GetInstanceObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e80e8)
?GetKeyOrigin@CWbemClass@@UEAAJAEAVWString@@@Z (Address: 0x1800e81f8)
?GetKeyOrigin@CWbemInstance@@UEAAJAEAVWString@@@Z (Address: 0x1800e8110)
?GetKeyOrigin@CWbemObject@@UEAAJJKPEAKPEAG@Z (Address: 0x1800e7bd0)
?GetKeyProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8320)
?GetKeyProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8118)
?GetKeyString@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800e7ef0)
?GetLimitedVersion@CWbemClass@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e82b0)
?GetLimitedVersion@CWbemInstance@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800e8228)
?GetMarshalSizeMax@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z (Address: 0x1800e7b48)
?GetMaxMarshalStreamSize@CWbemInstance@@UEAAJPEAK@Z (Address: 0x1800e8060)
?GetMaxMarshalStreamSize@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e7bf0)
?GetMethod@CWbemClass@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e7cb0)
?GetMethod@CWbemInstance@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e80d8)
?GetMethodOrigin@CWbemClass@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e7c70)
?GetMethodOrigin@CWbemInstance@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e80a0)
?GetMethodQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800e7cc8)
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e7e08)
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e7df8)
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e8010)
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e8008)
?GetMethodQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e7c78)
?GetMethodQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e80a8)
?GetNames@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAPEAUtagSAFEARRAY@@@Z (Address: 0x1800e7ba8)
?GetNonsystemPropertyValue@CWbemInstance@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e8250)
?GetNormalizedPath@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800e7f20)
?GetNumProperties@CWbemClass@@UEAAHXZ (Address: 0x1800e82e0)
?GetNumProperties@CWbemInstance@@UEAAHXZ (Address: 0x1800e8168)
?GetObjectMemory@CWbemObject@@UEAAJPEAXKPEAK@Z (Address: 0x1800e7e00)
?GetObjectParts@CWbemClass@@UEAAJPEAXKKPEAK@Z (Address: 0x1800e81e8)
?GetObjectParts@CWbemInstance@@UEAAJPEAXKKPEAK@Z (Address: 0x1800e7f18)
?GetObjectText@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800e7ce0)
?GetObjectText@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800e7f78)
?GetObjQual@CWbemObject@@UEAAJPEBGJKPEAJPEAK2PEAX@Z (Address: 0x1800e7b98)
?GetParentClassFromBlob@CWbemClass@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800e7c10)
?GetParentClassFromBlob@CWbemObject@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800e7f58)
?GetPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800e7a90)
?GetProperty@CWbemClass@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e82c8)
?GetProperty@CWbemClass@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e7e68)
?GetProperty@CWbemInstance@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800e81b0)
?GetProperty@CWbemInstance@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e81a0)
?GetPropertyCount@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8308)
?GetPropertyCount@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8130)
?GetPropertyHandle@CWbemObject@@UEAAJPEBGPEAJ1@Z (Address: 0x1800e7af0)
?GetPropertyHandleEx@CWbemObject@@UEAAJPEBGJPEAJ1@Z (Address: 0x1800e7aa0)
?GetPropertyInfoByHandle@CWbemObject@@UEAAJJPEAPEAGPEAJ@Z (Address: 0x1800e7ab8)
?GetPropertyOrigin@CWbemObject@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e7b68)
?GetPropertyQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e7cf0)
?GetPropertyQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e7f88)
?GetPropertyType@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800e7dd8)
?GetPropertyType@CWbemClass@@UEAAJPEBGPEAJ1@Z (Address: 0x1800e7dd0)
?GetPropertyType@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800e8050)
?GetPropertyType@CWbemInstance@@UEAAJPEBGPEAJ1@Z (Address: 0x1800e8048)
?GetPropertyValue@CWbemObject@@UEAAJPEAU_tag_WbemPropertyName@@JPEAPEAGPEAUtagVARIANT@@@Z (Address: 0x1800e7b58)
?GetPropName@CWbemClass@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e82e8)
?GetPropName@CWbemInstance@@UEAAJHPEAVCVar@@@Z (Address: 0x1800e8160)
?GetPropQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800e7c88)
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e7e28)
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800e7e18)
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e7e20)
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e7e10)
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e8038)
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800e8028)
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e8170)
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e8178)
?GetQualifier@CWbemClass@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e7e58)
?GetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800e7e50)
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e8190)
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800e8198)
?GetQualifierSet@CWbemClass@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e7d08)
?GetQualifierSet@CWbemInstance@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e7fa0)
?GetRelPath@CWbemClass@@UEAAPEAGH@Z (Address: 0x1800e7d90)
?GetRelPath@CWbemInstance@@UEAAPEAGH@Z (Address: 0x1800e7fd0)
?GetSource@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e7b00)
?GetSuperclassName@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8300)
?GetSuperclassName@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e8138)
?GetSystemPropertyByName@CWbemObject@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e8248)
?GetUnmarshalClass@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAU2@@Z (Address: 0x1800e7b50)
?GetVARTYPE@CType@@SAGK@Z (Address: 0x1800e8218)
?GetWbemObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800e80f0)
?InheritsFrom@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800e7b60)
?InitEmpty@CWbemClass@@QEAAJHH@Z (Address: 0x1800e8270)
?InitNew@CWbemInstance@@QEAAJPEAVCWbemClass@@HPEAVCDecorationPart@@@Z (Address: 0x1800e8200)
?IsAbstract@CWbemClass@@QEAAHXZ (Address: 0x1800e7f48)
?IsAmendment@CWbemClass@@QEAAHXZ (Address: 0x1800e7f40)
?IsDynamic@CWbemClass@@QEAAHXZ (Address: 0x1800e7f50)
?IsIllegalDerivedClass@CSystemProperties@@SAHPEBG@Z (Address: 0x1800e8288)
?IsInstanceOf@CWbemInstance@@QEAAHPEAVCWbemClass@@@Z (Address: 0x1800e8260)
?IsKeyed@CWbemClass@@UEAAHXZ (Address: 0x1800e82f0)
?IsKeyed@CWbemInstance@@UEAAHXZ (Address: 0x1800e8158)
?IsLocalized@CWbemClass@@UEAAHXZ (Address: 0x1800e7db0)
?IsLocalized@CWbemInstance@@UEAAHXZ (Address: 0x1800e7ff0)
?IsObjectInstance@CWbemObject@@UEAAJXZ (Address: 0x1800e82b8)
?IsParentClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7c40)
?IsParentClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7ed8)
?IsValidObj@CWbemClass@@UEAAJXZ (Address: 0x1800e7d80)
?IsValidObj@CWbemInstance@@UEAAJXZ (Address: 0x1800e7fc8)
?Lock@CWbemObject@@UEAAJJ@Z (Address: 0x1800e7ab0)
?MakeSubsetInst@CWbemClass@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800e7c28)
?MakeSubsetInst@CWbemInstance@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800e7ec0)
?MapLimitation@CWbemClass@@QEAAHJPEAVCWStringArray@@PEAVCLimitationMapping@@@Z (Address: 0x1800e82a0)
?MarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z (Address: 0x1800e7b40)
?Merge@CWbemClass@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7d40)
?Merge@CWbemInstance@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7eb8)
?MergeAmended@CWbemObject@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7d50)
?MergeAndDecorate@CWbemClass@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800e7c00)
?MergeAndDecorate@CWbemInstance@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800e7e80)
?MergeClassPart@CWbemClass@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800e81c8)
?MergeClassPart@CWbemInstance@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800e7f00)
?Next@CWbemObject@@UEAAJJPEAPEAGPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800e7b80)
?NextMethod@CWbemClass@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e7c90)
?NextMethod@CWbemInstance@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e80b8)
?PlugKeyHoles@CWbemInstance@@QEAAJXZ (Address: 0x1800e8258)
?Put@CWbemClass@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800e7d00)
?Put@CWbemInstance@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800e7f98)
?PutMethod@CWbemClass@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800e7ca8)
?PutMethod@CWbemInstance@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800e80d0)
?QueryInterface@CWbemObject@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x1800e7bc8)
?QueryObjectFlags@CWbemObject@@UEAAJJ_KPEA_K@Z (Address: 0x1800e7d28)
?QueryPartInfo@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e7d88)
?QueryPropertyFlags@CWbemObject@@UEAAJJPEBG_KPEA_K@Z (Address: 0x1800e7d48)
?ReadDWORD@CWbemObject@@UEAAJJPEAK@Z (Address: 0x1800e7ad8)
?ReadProp@CWbemObject@@UEAAJPEBGJKPEAJ1PEAHPEAKPEAX@Z (Address: 0x1800e7b88)
?ReadPropertyValue@CWbemObject@@UEAAJJJPEAJPEAE@Z (Address: 0x1800e7ae0)
?ReadQWORD@CWbemObject@@UEAAJJPEA_K@Z (Address: 0x1800e7ac8)
?ReconcileWith@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7d20)
?ReconcileWith@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e7eb0)
?ReduceClassPartSpace@CWbemInstance@@UEAAXPEAVCClassPart@@K@Z (Address: 0x1800e8100)
?ReduceInstancePartSpace@CWbemInstance@@UEAAXPEAVCInstancePart@@K@Z (Address: 0x1800e80f8)
?Release@CWbemObject@@UEAAKXZ (Address: 0x1800e7bb8)
?ReleaseMarshalData@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800e7b30)
?RemoveArrayPropElementByHandle@CWbemObject@@UEAAJJJK@Z (Address: 0x1800e7a68)
?RemoveArrayPropRangeByHandle@CWbemObject@@UEAAJJJKK@Z (Address: 0x1800e7a50)
?RemoveDecoration@CWbemObject@@UEAAJXZ (Address: 0x1800e7e48)
?SetArrayPropElementByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800e7a70)
?SetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAX@Z (Address: 0x1800e7a58)
?SetClassPart@CWbemClass@@UEAAJPEAXK@Z (Address: 0x1800e81d0)
?SetClassPart@CWbemInstance@@UEAAJPEAXK@Z (Address: 0x1800e7f08)
?SetData@CWbemClass@@UEAAXPEAEH@Z (Address: 0x1800e7e70)
?SetData@CWbemInstance@@UEAAXPEAEH@Z (Address: 0x1800e8070)
?SetDecoration@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800e7e30)
?SetInheritanceChain@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800e7f68)
?SetInheritanceChain@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800e8098)
?SetLocalized@CWbemClass@@UEAAXH@Z (Address: 0x1800e7da8)
?SetLocalized@CWbemInstance@@UEAAXH@Z (Address: 0x1800e7fe8)
?SetMethodOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800e7c58)
?SetMethodOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e8088)
?SetMethodQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800e7d18)
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e7df0)
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e7de8)
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e8000)
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e7ff8)
?SetObjectFlags@CWbemObject@@UEAAJJ_K0@Z (Address: 0x1800e7d30)
?SetObjectMemory@CWbemObject@@UEAAJPEAXK@Z (Address: 0x1800e7db8)
?SetObjectParts@CWbemClass@@UEAAJPEAXKK@Z (Address: 0x1800e81f0)
?SetObjectParts@CWbemInstance@@UEAAJPEAXKK@Z (Address: 0x1800e7f30)
?SetObjQual@CWbemObject@@UEAAJPEBGJKKJKPEAX@Z (Address: 0x1800e7c68)
?SetPropByHandle@CWbemObject@@UEAAJJJKPEAX@Z (Address: 0x1800e7a98)
?SetPropertyOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800e7c60)
?SetPropertyOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800e8090)
?SetPropQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800e7cb8)
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e7dc8)
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e7dc0)
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e8020)
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e8018)
?SetPropValue@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e7e60)
?SetPropValue@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e8040)
?SetQualifier@CWbemClass@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800e7e40)
?SetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e7e38)
?SetQualifier@CWbemInstance@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800e8180)
?SetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e8188)
?SetServerNamespace@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800e7af8)
?SpawnDerivedClass@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7cd8)
?SpawnDerivedClass@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7f70)
?SpawnInstance@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7cd0)
?SpawnInstance@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e7f38)
?SpawnKeyedInstance@CWbemClass@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7c18)
?SpawnKeyedInstance@CWbemInstance@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e7e98)
?StripClassPart@CWbemClass@@UEAAJXZ (Address: 0x1800e81e0)
?StripClassPart@CWbemInstance@@UEAAJXZ (Address: 0x1800e7f10)
?Undecorate@CWbemClass@@UEAAXXZ (Address: 0x1800e7d98)
?Undecorate@CWbemInstance@@UEAAXXZ (Address: 0x1800e7fd8)
?Unlock@CWbemObject@@UEAAJJ@Z (Address: 0x1800e7aa8)
?UnmarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z (Address: 0x1800e7b38)
?Unmerge@CWbemClass@@UEAAJPEAEHPEAK@Z (Address: 0x1800e7d58)
?Unmerge@CWbemInstance@@UEAAJPEAEHPEAK@Z (Address: 0x1800e7fb8)
?Unmerge@CWbemObject@@UEAAJJKPEAKPEAX@Z (Address: 0x1800e7be8)
?Update@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e7d38)
?Update@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e7ea0)
?Upgrade@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e7c20)
?Upgrade@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e7ea8)
?ValidateObject@CWbemObject@@UEAAJJ@Z (Address: 0x1800e7f60)
?ValidateRange@CWbemObject@@QEAAHPEAPEAG@Z (Address: 0x1800e8280)
?WriteDWORD@CWbemObject@@UEAAJJK@Z (Address: 0x1800e7ad0)
?WriteProp@CWbemObject@@UEAAJPEBGJKKJPEAX@Z (Address: 0x1800e7b90)
?WritePropertyValue@CWbemObject@@UEAAJJJPEBE@Z (Address: 0x1800e7ae8)
?WriteQWORD@CWbemObject@@UEAAJJ_K@Z (Address: 0x1800e7ac0)
?WriteToStream@CWbemInstance@@UEAAJPEAUIStream@@@Z (Address: 0x1800e8068)
?WriteToStream@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800e7bf8)
WbemStringCopy (Address: 0x1800e8210)
WbemStringFree (Address: 0x1800e8238)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800e8520)
AcquireSRWLockShared (Address: 0x1800e85b0)
CloseHandle (Address: 0x1800e8370)
CloseThreadpoolTimer (Address: 0x1800e8518)
CompareStringW (Address: 0x1800e8540)
CreateEventW (Address: 0x1800e8350)
CreateFileW (Address: 0x1800e84a8)
CreateMutexExW (Address: 0x1800e8588)
CreateSemaphoreExW (Address: 0x1800e83f8)
CreateThread (Address: 0x1800e8378)
CreateThreadpoolTimer (Address: 0x1800e8578)
CreateTimerQueueTimer (Address: 0x1800e83c8)
DebugBreak (Address: 0x1800e85b8)
DeleteCriticalSection (Address: 0x1800e8440)
DeleteTimerQueueTimer (Address: 0x1800e8458)
EnterCriticalSection (Address: 0x1800e83d0)
ExpandEnvironmentStringsW (Address: 0x1800e8448)
FileTimeToSystemTime (Address: 0x1800e84b8)
FormatMessageW (Address: 0x1800e84c0)
FreeLibrary (Address: 0x1800e8488)
GetComputerNameExW (Address: 0x1800e8410)
GetCurrentProcess (Address: 0x1800e84e8)
GetCurrentProcessId (Address: 0x1800e83b0)
GetCurrentThread (Address: 0x1800e83a0)
GetCurrentThreadId (Address: 0x1800e8400)
GetFileAttributesExW (Address: 0x1800e8558)
GetFileAttributesW (Address: 0x1800e85a0)
GetFileInformationByHandle (Address: 0x1800e84b0)
GetLastError (Address: 0x1800e8430)
GetLocalTime (Address: 0x1800e8528)
GetModuleFileNameA (Address: 0x1800e83f0)
GetModuleHandleExW (Address: 0x1800e8438)
GetModuleHandleW (Address: 0x1800e85d0)
GetProcAddress (Address: 0x1800e8478)
GetProcessHeap (Address: 0x1800e85d8)
GetProcessTimes (Address: 0x1800e83d8)
GetSystemDirectoryW (Address: 0x1800e8468)
GetSystemInfo (Address: 0x1800e8568)
GetSystemTime (Address: 0x1800e85c0)
GetSystemTimeAsFileTime (Address: 0x1800e85c8)
GetTickCount (Address: 0x1800e8390)
GetTickCount64 (Address: 0x1800e8398)
GetVersionExW (Address: 0x1800e8598)
GlobalMemoryStatusEx (Address: 0x1800e8480)
HeapAlloc (Address: 0x1800e8580)
HeapFree (Address: 0x1800e8408)
InitializeCriticalSectionAndSpinCount (Address: 0x1800e83e0)
InitializeCriticalSectionEx (Address: 0x1800e8450)
IsDebuggerPresent (Address: 0x1800e85a8)
LCMapStringW (Address: 0x1800e83b8)
LeaveCriticalSection (Address: 0x1800e83e8)
LoadLibraryExW (Address: 0x1800e8490)
LocalFree (Address: 0x1800e83a8)
lstrlenW (Address: 0x1800e84a0)
MoveFileW (Address: 0x1800e8590)
OpenEventW (Address: 0x1800e85e0)
OpenProcess (Address: 0x1800e8338)
OpenSemaphoreW (Address: 0x1800e8548)
OutputDebugStringW (Address: 0x1800e84d0)
QueryPerformanceCounter (Address: 0x1800e84d8)
QueueUserWorkItem (Address: 0x1800e8418)
ReleaseMutex (Address: 0x1800e8498)
ReleaseSemaphore (Address: 0x1800e8428)
ReleaseSRWLockExclusive (Address: 0x1800e84c8)
ReleaseSRWLockShared (Address: 0x1800e8570)
ResetEvent (Address: 0x1800e8470)
RtlCaptureContext (Address: 0x1800e8510)
RtlLookupFunctionEntry (Address: 0x1800e8508)
RtlVirtualUnwind (Address: 0x1800e8500)
SetEvent (Address: 0x1800e8360)
SetLastError (Address: 0x1800e8420)
SetThreadpoolTimer (Address: 0x1800e8550)
SetUnhandledExceptionFilter (Address: 0x1800e84f0)
Sleep (Address: 0x1800e8358)
SystemTimeToFileTime (Address: 0x1800e8560)
TerminateProcess (Address: 0x1800e84e0)
TlsAlloc (Address: 0x1800e8368)
TlsFree (Address: 0x1800e8388)
TlsGetValue (Address: 0x1800e8380)
TlsSetValue (Address: 0x1800e8330)
UnhandledExceptionFilter (Address: 0x1800e84f8)
WaitForMultipleObjectsEx (Address: 0x1800e8340)
WaitForSingleObject (Address: 0x1800e8348)
WaitForSingleObjectEx (Address: 0x1800e8538)
WaitForThreadpoolTimerCallbacks (Address: 0x1800e8460)
WideCharToMultiByte (Address: 0x1800e83c0)
WriteFile (Address: 0x1800e8530)

msvcrt.dll

__C_specific_handler (Address: 0x1800e88e8)
__CxxFrameHandler3 (Address: 0x1800e88f0)
__dllonexit (Address: 0x1800e87e0)
_amsg_exit (Address: 0x1800e87f0)
_CxxThrowException (Address: 0x1800e8820)
_initterm (Address: 0x1800e87e8)
_lock (Address: 0x1800e8808)
_onexit (Address: 0x1800e87d8)
_purecall (Address: 0x1800e88e0)
_ui64tow_s (Address: 0x1800e8868)
_unlock (Address: 0x1800e8800)
_vsnprintf (Address: 0x1800e87b8)
_vsnprintf_s (Address: 0x1800e8870)
_vsnwprintf (Address: 0x1800e88c8)
_wcsicmp (Address: 0x1800e88c0)
_wcslwr_s (Address: 0x1800e8840)
_wcsnicmp (Address: 0x1800e88d0)
_XcptFilter (Address: 0x1800e87f8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800e8838)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800e8830)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800e8880)
??0exception@@QEAA@XZ (Address: 0x1800e8888)
??1exception@@UEAA@XZ (Address: 0x1800e8890)
??1type_info@@UEAA@XZ (Address: 0x1800e87d0)
?terminate@@YAXXZ (Address: 0x1800e87c8)
?what@exception@@UEBAPEBDXZ (Address: 0x1800e8828)
atol (Address: 0x1800e87b0)
free (Address: 0x1800e88b0)
isdigit (Address: 0x1800e88a8)
iswspace (Address: 0x1800e8858)
iswxdigit (Address: 0x1800e8850)
malloc (Address: 0x1800e88a0)
memcmp (Address: 0x1800e87a8)
memcpy (Address: 0x1800e8818)
memcpy_s (Address: 0x1800e8898)
memmove (Address: 0x1800e8810)
memmove_s (Address: 0x1800e8860)
memset (Address: 0x1800e87c0)
sscanf_s (Address: 0x1800e8798)
swprintf_s (Address: 0x1800e8878)
wcschr (Address: 0x1800e88b8)
wcscmp (Address: 0x1800e87a0)
wcsstr (Address: 0x1800e8848)
wcstok (Address: 0x1800e88d8)

ntdll.dll

WinSqmAddToStream (Address: 0x1800e8908)
WinSqmIsOptedIn (Address: 0x1800e8900)

OLE32.dll

CLSIDFromString (Address: 0x1800e8648)
CoCreateInstance (Address: 0x1800e8600)
CoDisconnectObject (Address: 0x1800e8650)
CoGetCallContext (Address: 0x1800e8628)
CoImpersonateClient (Address: 0x1800e8638)
CoInitializeEx (Address: 0x1800e8620)
CoRevertToSelf (Address: 0x1800e8640)
CoSetProxyBlanket (Address: 0x1800e8630)
CoSwitchCallContext (Address: 0x1800e85f0)
CoTaskMemFree (Address: 0x1800e8608)
CoUninitialize (Address: 0x1800e85f8)
CoUnmarshalInterface (Address: 0x1800e8618)
StringFromGUID2 (Address: 0x1800e8610)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x1800e86b0)
SafeArrayCreate (Address: 0x1800e8690)
SafeArrayDestroy (Address: 0x1800e8660)
SafeArrayGetDim (Address: 0x1800e8678)
SafeArrayGetElement (Address: 0x1800e8680)
SafeArrayGetLBound (Address: 0x1800e86a8)
SafeArrayGetUBound (Address: 0x1800e86f0)
SafeArrayPutElement (Address: 0x1800e8668)
SafeArrayUnaccessData (Address: 0x1800e86a0)
SetErrorInfo (Address: 0x1800e8688)
SysAllocString (Address: 0x1800e86e0)
SysAllocStringByteLen (Address: 0x1800e86b8)
SysAllocStringLen (Address: 0x1800e8698)
SysFreeString (Address: 0x1800e86d8)
SysStringLen (Address: 0x1800e86c0)
VariantChangeType (Address: 0x1800e8670)
VariantClear (Address: 0x1800e86e8)
VariantCopy (Address: 0x1800e86c8)
VariantInit (Address: 0x1800e86d0)

VERSION.dll

GetFileVersionInfoExW (Address: 0x1800e8708)
GetFileVersionInfoSizeExW (Address: 0x1800e8710)
VerQueryValueW (Address: 0x1800e8700)

wbemcomn.dll

_IsValidElementName (Address: 0x1800e8c18)
_ThrowMemoryException_ (Address: 0x1800e8f00)
?_Free@CMUILocale@@SAHPEAX@Z (Address: 0x1800e8ea8)
?_GetSystemDefaultLocale@CMUILocale@@SAJPEAPEAGK@Z (Address: 0x1800e8b00)
??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z (Address: 0x1800e9050)
??0CClientOpsNode@@QEAA@XZ (Address: 0x1800e8ef0)
??0CCritSec@@QEAA@XZ (Address: 0x1800e9088)
??0CDateTimeParser@@QEAA@PEBG@Z (Address: 0x1800e8a80)
??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z (Address: 0x1800e8b98)
??0CFlexArray@@QEAA@AEAV0@@Z (Address: 0x1800e8e38)
??0CFlexArray@@QEAA@HH@Z (Address: 0x1800e90c0)
??0CFlexQueue@@QEAA@H@Z (Address: 0x1800e9000)
??0CIdentitySecurity@@QEAA@_N@Z (Address: 0x1800e8f20)
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1800e90a8)
??0CInsertionString@@QEAA@PEBG@Z (Address: 0x1800e8ee8)
??0CInsertionString@@QEAA@VCHex@@@Z (Address: 0x1800e8b90)
??0CInsertionString@@QEAA@XZ (Address: 0x1800e8fb0)
??0CLike@@QEAA@PEBGG@Z (Address: 0x1800e8a58)
??0CMUILocaleList@@QEAA@XZ (Address: 0x1800e8d18)
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z (Address: 0x1800e8d08)
??0CNtAcl@@QEAA@K@Z (Address: 0x1800e8ca0)
??0CNtAcl@@QEAA@PEAU_ACL@@@Z (Address: 0x1800e8948)
??0CNtSecurityDescriptor@@QEAA@PEAX@Z (Address: 0x1800e8cd0)
??0CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e8cd8)
??0CNtSid@@QEAA@PEAX@Z (Address: 0x1800e8d50)
??0CPropertyName@@QEAA@XZ (Address: 0x1800e8a18)
??0CSafeArray@@QEAA@HHHH@Z (Address: 0x1800e8e00)
??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z (Address: 0x1800e8d80)
??0CStaticCritSec@@QEAA@XZ (Address: 0x1800e9078)
??0CVar@@QEAA@AEBV0@@Z (Address: 0x1800e8bf8)
??0CVar@@QEAA@E@Z (Address: 0x1800e89c0)
??0CVar@@QEAA@FH@Z (Address: 0x1800e89d0)
??0CVar@@QEAA@HPEAG@Z (Address: 0x1800e8e28)
??0CVar@@QEAA@HVauto_bstr@@@Z (Address: 0x1800e8b70)
??0CVar@@QEAA@J@Z (Address: 0x1800e89c8)
??0CVar@@QEAA@PEAUtagVARIANT@@@Z (Address: 0x1800e8a00)
??0CVar@@QEAA@PEAVCVarVector@@H@Z (Address: 0x1800e89d8)
??0CVar@@QEAA@XZ (Address: 0x1800e8f80)
??0CVarVector@@QEAA@HHH@Z (Address: 0x1800e89e8)
??0CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e8b48)
??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e8e50)
??0CWStringArray@@QEAA@HH@Z (Address: 0x1800e8fc8)
??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z (Address: 0x1800e8a48)
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800e8ab0)
??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z (Address: 0x1800e8dd0)
??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z (Address: 0x1800e8f08)
??0Registry@@QEAA@PEBGK@Z (Address: 0x1800e8eb0)
??0WString@@QEAA@AEBV0@@Z (Address: 0x1800e8be0)
??0WString@@QEAA@PEAGH@Z (Address: 0x1800e90f8)
??0WString@@QEAA@PEBG@Z (Address: 0x1800e8d00)
??0WString@@QEAA@XZ (Address: 0x1800e8f40)
??0WString2@@QEAA@PEAGH@Z (Address: 0x1800e8e90)
??0WString2@@QEAA@PEBG@Z (Address: 0x1800e9028)
??0WString2@@QEAA@XZ (Address: 0x1800e9020)
??1CCheckedInCritSec@@QEAA@XZ (Address: 0x1800e9058)
??1CClientOpsNode@@QEAA@XZ (Address: 0x1800e8f58)
??1CCritSec@@QEAA@XZ (Address: 0x1800e9090)
??1CDateTimeParser@@QEAA@XZ (Address: 0x1800e8a88)
??1CEnterWbemCriticalSection@@QEAA@XZ (Address: 0x1800e8b08)
??1CEventLog@@QEAA@XZ (Address: 0x1800e8ba0)
??1CFlexArray@@QEAA@XZ (Address: 0x1800e90c8)
??1CFlexQueue@@QEAA@XZ (Address: 0x1800e9008)
??1CIdentitySecurity@@QEAA@XZ (Address: 0x1800e8f28)
??1CInCritSec@@QEAA@XZ (Address: 0x1800e90b0)
??1CInsertionString@@QEAA@XZ (Address: 0x1800e8fb8)
??1CLike@@QEAA@XZ (Address: 0x1800e8a60)
??1CMUILocaleList@@QEAA@XZ (Address: 0x1800e8d20)
??1CNtAce@@UEAA@XZ (Address: 0x1800e8c60)
??1CNtAcl@@QEAA@XZ (Address: 0x1800e8ca8)
??1CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800e8ce0)
??1CNtSid@@QEAA@XZ (Address: 0x1800e8d58)
??1CPropertyName@@QEAA@XZ (Address: 0x1800e8a20)
??1CSafeArray@@QEAA@XZ (Address: 0x1800e8e08)
??1CStaticCritSec@@QEAA@XZ (Address: 0x1800e9080)
??1CVar@@QEAA@XZ (Address: 0x1800e8f88)
??1CVarVector@@QEAA@XZ (Address: 0x1800e89f0)
??1CWbemCriticalSection@@QEAA@XZ (Address: 0x1800e8b50)
??1CWQLScanner@@QEAA@XZ (Address: 0x1800e8e58)
??1CWStringArray@@QEAA@XZ (Address: 0x1800e8fd0)
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ (Address: 0x1800e8ad0)
??1QL_LEVEL_1_TOKEN@@QEAA@XZ (Address: 0x1800e8a50)
??1QL1_Parser@@UEAA@XZ (Address: 0x1800e8ab8)
??1Registry@@QEAA@XZ (Address: 0x1800e8f10)
??1WString@@QEAA@XZ (Address: 0x1800e8ed0)
??1WString2@@QEAA@XZ (Address: 0x1800e9038)
??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e8968)
??4CWStringArray@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800e8e78)
??4WString@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e8aa0)
??4WString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e8f48)
??4WString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e9030)
??ACFlexArray@@QEAAAEAPEAXH@Z (Address: 0x1800e90d0)
??ACWStringArray@@QEBAPEAGH@Z (Address: 0x1800e8fa0)
??YWString@@QEAAAEAV0@PEBG@Z (Address: 0x1800e8f50)
??YWString2@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800e8e98)
??YWString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800e9040)
?AccessCheck@CIdentitySecurity@@QEAAHXZ (Address: 0x1800e8f30)
?Add@CFlexArray@@QEAAHPEAX@Z (Address: 0x1800e90b8)
?Add@CVarVector@@QEAAHAEAVCVar@@@Z (Address: 0x1800e89f8)
?Add@CWStringArray@@QEAAHPEBG@Z (Address: 0x1800e8fd8)
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z (Address: 0x1800e8cc0)
?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z (Address: 0x1800e8d48)
?AddElement@CPropertyName@@QEAAXPEBG@Z (Address: 0x1800e8a30)
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z (Address: 0x1800e8ae8)
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e8ad8)
?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z (Address: 0x1800e8e40)
?anyFailure@CStaticCritSec@@SAHXZ (Address: 0x1800e8bd8)
?Bind@CFlexArray@@QEAAXAEAV1@@Z (Address: 0x1800e8e70)
?BindPtr@WString@@QEAAXPEAG@Z (Address: 0x1800e8ed8)
?ChangeTypeTo@CVar@@QEAAHG@Z (Address: 0x1800e8a40)
?CheckLangNeutral@CMUILocale@@SAJPEBGPEA_N@Z (Address: 0x1800e8d68)
?Close@CEventLog@@QEAAHXZ (Address: 0x1800e8ba8)
?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z (Address: 0x1800e8ff8)
?CoGetClassObject@CWbemInstallObject@@SAJAEBU_GUID@@KPEAU_COSERVERINFO@@0PEAPEAX@Z (Address: 0x1800e8bd0)
?Compress@CFlexArray@@QEAAXXZ (Address: 0x1800e8e68)
?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z (Address: 0x1800e8950)
?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ (Address: 0x1800e8db8)
?DeleteAce@CNtAcl@@QEAAHH@Z (Address: 0x1800e8958)
?DeleteSacl@CNtSecurityDescriptor@@QEAAJXZ (Address: 0x1800e8988)
?DeleteValue@Registry@@QEAAHPEBG@Z (Address: 0x1800e8b78)
?Dequeue@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e9018)
?Deserialize@CNtAce@@UEAA_NPEAE@Z (Address: 0x1800e8c90)
?Empty@CFlexArray@@QEAAXXZ (Address: 0x1800e9070)
?Empty@CVar@@QEAAXXZ (Address: 0x1800e8a38)
?Empty@CWStringArray@@QEAAXXZ (Address: 0x1800e8c20)
?Empty@WString@@QEAAXXZ (Address: 0x1800e8c00)
?Empty@WString2@@QEAAXXZ (Address: 0x1800e9048)
?Enqueue@CFlexQueue@@QEAA_NPEAX@Z (Address: 0x1800e9010)
?Enter@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e8ec8)
?Enter@CCritSec@@QEAAXXZ (Address: 0x1800e9098)
?Enter@CWbemCriticalSection@@QEAAHK@Z (Address: 0x1800e8b58)
?EqualNoCase@WString@@QEBAHPEBG@Z (Address: 0x1800e8be8)
?EqualNoCase@WString2@@QEBAHPEBG@Z (Address: 0x1800e8a10)
?EscapeQuotes@WString2@@QEBA?AV1@XZ (Address: 0x1800e8ea0)
?FillDMTF@CDateTimeParser@@QEAAHPEAG_K@Z (Address: 0x1800e8a90)
?FindStr@CWStringArray@@QEAAHPEBGH@Z (Address: 0x1800e8c28)
?GetAccessMask@CNtAce@@UEAAKXZ (Address: 0x1800e8c78)
?GetAce@CNtAcl@@QEAAPEAVCNtAce@@H@Z (Address: 0x1800e8cb8)
?GetAt@CFlexArray@@QEBAPEAXH@Z (Address: 0x1800e8fc0)
?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z (Address: 0x1800e8c58)
?GetAt@CWStringArray@@QEBAPEAGH@Z (Address: 0x1800e8e20)
?GetBinaryPath@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e8bc0)
?GetBSTR@CVar@@QEAAPEAGXZ (Address: 0x1800e8c40)
?GetBSTRAt@CSafeArray@@QEAAPEAGH@Z (Address: 0x1800e8d88)
?GetCultures@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e8d38)
?GetDacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e8970)
?GetDacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e8ce8)
?GetDWORD@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e8f18)
?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800e8dd8)
?GetEmbeddedObject@CVar@@QEAAPEAUIUnknown@@XZ (Address: 0x1800e8a08)
?GetFirst_ms_XXX_Locale@CMUILocaleList@@QEAAJPEAPEAG@Z (Address: 0x1800e8d30)
?GetFlags@CNtAce@@UEAAHXZ (Address: 0x1800e8c70)
?GetLocales@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800e8d40)
?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z (Address: 0x1800e8de0)
?GetNumAces@CNtAcl@@QEAAHXZ (Address: 0x1800e8cb0)
?GetOwner@CNtSecurityDescriptor@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e8990)
?GetPersistentCfgValue@CPersistentConfig@@QEAAHKAEAK@Z (Address: 0x1800e8b80)
?GetQueueSize@CFlexQueue@@QEBAHXZ (Address: 0x1800e8ee0)
?GetReferencedAliases@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8e48)
?GetReferencedTables@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800e8a78)
?GetRegistryPathCIMOM@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e8ff0)
?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800e8bc8)
?GetSacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800e8978)
?GetSacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800e8cf8)
?GetSerializedSize@CNtAce@@UEAAKXZ (Address: 0x1800e8c80)
?GetSid@CNtAce@@QEAAPEAVCNtSid@@XZ (Address: 0x1800e8940)
?GetSize@CNtSecurityDescriptor@@QEAAKXZ (Address: 0x1800e89a8)
?GetStatus@CNtAce@@UEAAKXZ (Address: 0x1800e8c10)
?GetStr@Registry@@QEAAHPEBGPEAPEAG@Z (Address: 0x1800e8eb8)
?GetStringAt@CPropertyName@@QEBAPEBGJ@Z (Address: 0x1800e8a28)
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ (Address: 0x1800e8af0)
?GetType@CNtAce@@UEAAHXZ (Address: 0x1800e8c68)
?Init@CPublishWMIOperationEvent@@SAJXZ (Address: 0x1800e8b68)
?Initialize@CMUILocaleList@@QEAAJPEAG_N@Z (Address: 0x1800e8d28)
?InsertAt@CFlexArray@@QEAAHHPEAX@Z (Address: 0x1800e9068)
?IsDataNull@CVar@@QEAAHXZ (Address: 0x1800e8c38)
?IsOffline@CWbemInstallObject@@SA_NXZ (Address: 0x1800e8fe8)
?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z (Address: 0x1800e8c30)
?IsValid@CNtAcl@@QEAAHXZ (Address: 0x1800e8930)
?IsValid@CNtSid@@QEAAHXZ (Address: 0x1800e8928)
?LCID_To_ms_XXX_Format@CMUILocale@@SAJKPEAG_K@Z (Address: 0x1800e8d78)
?Leave@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800e9060)
?Leave@CCritSec@@QEAAXXZ (Address: 0x1800e90a0)
?Leave@CWbemCriticalSection@@QEAAXXZ (Address: 0x1800e8b60)
?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z (Address: 0x1800e8d70)
?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ (Address: 0x1800e8918)
?Match@CLike@@QEAA_NPEBG@Z (Address: 0x1800e8a68)
?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z (Address: 0x1800e8d60)
?Open@CEventLog@@QEAAHXZ (Address: 0x1800e8bb0)
?OrderAces@CNtAcl@@QEAAPEAV1@XZ (Address: 0x1800e8960)
?Parse@CWQLScanner@@QEAAHXZ (Address: 0x1800e8e60)
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1800e8ac0)
?Peek@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800e8f68)
?Publish@CPublishWMIOperationEvent@@SAJPEAGKK0000K_K0H@Z (Address: 0x1800e8d90)
?PublishClientRequestFailure@CPublishWMIOperationEvent@@SAJPEBGPEAG1K10J0@Z (Address: 0x1800e8f78)
?PublishMethodExec@CPublishWMIOperationEvent@@SAJPEAGKK000000K_K0H@Z (Address: 0x1800e8d98)
?PublishRepDelete@CPublishWMIOperationEvent@@SAJKPEAGPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e8da8)
?PublishRepUpdate@CPublishWMIOperationEvent@@SAJKPEAGKPEAUIWbemContext@@K0_KH@Z (Address: 0x1800e8db0)
?PublishStop@CPublishWMIOperationEvent@@SAJKJPEAG@Z (Address: 0x1800e8f70)
?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SAJPEAGKK0K_K000K1H@Z (Address: 0x1800e8da0)
?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXP6AJH@Z@Z (Address: 0x1800e8b30)
?Release@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800e8ae0)
?RemoveAt@CFlexArray@@QEAAHH@Z (Address: 0x1800e90d8)
?RemoveAt@CWStringArray@@QEAAHH@Z (Address: 0x1800e8e80)
?RemoveSelf@CClientOpsNode@@QEAAXXZ (Address: 0x1800e8f60)
?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1800e8fe0)
?Serialize@CNtAce@@UEAA_NPEAE_K@Z (Address: 0x1800e8c88)
?SetAt@CFlexArray@@QEAAXHPEAX@Z (Address: 0x1800e8bf0)
?SetBSTR@CVar@@QEAAHPEAG@Z (Address: 0x1800e8dc0)
?SetBSTR@CVar@@QEAAHVauto_bstr@@@Z (Address: 0x1800e8dc8)
?SetBSTRAt@CSafeArray@@QEAAHHPEAG@Z (Address: 0x1800e8e10)
?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e8cf0)
?SetDMTF@CWbemTime@@QEAAHPEBG@Z (Address: 0x1800e8aa8)
?SetDWORD@Registry@@QEAAHPEBGK@Z (Address: 0x1800e8de8)
?SetDWORDStr@Registry@@QEAAHPEBGK@Z (Address: 0x1800e8df0)
?SetEmbeddedObject@CVar@@QEAAXPEAUIUnknown@@@Z (Address: 0x1800e8e30)
?SetFailure@CStaticCritSec@@SAXXZ (Address: 0x1800e90f0)
?SetFlags@CNtAce@@UEAAXJ@Z (Address: 0x1800e8c08)
?SetGroup@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e89a0)
?SetLogingEnabled@CMemoryLog@@QEAAX_N@Z (Address: 0x1800e8b18)
?SetOwner@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800e8998)
?SetSacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800e8980)
?SetStr@Registry@@QEAAHPEBG0@Z (Address: 0x1800e8df8)
?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z (Address: 0x1800e89e0)
?Size@CVarVector@@QEAAHXZ (Address: 0x1800e8c50)
?Size@CWStringArray@@QEBAHXZ (Address: 0x1800e8fa8)
?Trim@CSafeArray@@QEAAHXZ (Address: 0x1800e8e18)
?UnbindPtr@WString2@@QEAAPEAGXZ (Address: 0x1800e8ac8)
?Union@CWStringArray@@SAXAEAV1@00@Z (Address: 0x1800e8e88)
?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXXZ (Address: 0x1800e8b38)
?ValidateMemSize@CWin32DefaultArena@@SAHH@Z (Address: 0x1800e8af8)
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x1800e8f90)
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x1800e8f98)
?WbemMemReAlloc@CWin32DefaultArena@@SAPEAXPEAX_K@Z (Address: 0x1800e8920)
?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x1800e90e8)
BreakOnDbgAndRenterLoop (Address: 0x1800e8ef8)
BuildOperationInfo (Address: 0x1800e8cc8)
BuildSecurityDescriptorParameter (Address: 0x1800e89b8)
ComposeName (Address: 0x1800e8bb8)
GetAccessToken (Address: 0x1800e9100)
GetGlobalClientOps (Address: 0x1800e8d10)
GetMemLogObject (Address: 0x1800e90e0)
GetSecurityDescriptorFromParameters (Address: 0x1800e89b0)
IsAdmin (Address: 0x1800e8c98)
IsInAdminGroup (Address: 0x1800e8938)
IsLocalConnection (Address: 0x1800e8f38)
IsNtSetupRunning (Address: 0x1800e8ec0)
isunialphanum (Address: 0x1800e8c48)
ReadI64 (Address: 0x1800e8a70)
ReadUI64 (Address: 0x1800e8a98)
RegisterDLL (Address: 0x1800e8b20)
Set_WPP_INIT_TRACING_Call_State (Address: 0x1800e8b10)
TestDirExistAndCreateWithSDIfNotThere (Address: 0x1800e8b88)
UnRegisterDLL (Address: 0x1800e8b28)
WMIControlClientOpsCallback (Address: 0x1800e8b40)