wbemcore.dll

Description: Windows Management Instrumentation

Version: 10.0.19041.3385

Architecture: 64-bit

Operating System: Windows NT

SHA256: 1bf275e8601b99a71a54c66e321195cb

File Size: 1.8 MB

Uploaded At: Dec. 1, 2025, 8:18 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7dfc0)
DllGetClassObject (Ordinal: 2, Address: 0x7dc50)
DllRegisterServer (Ordinal: 3, Address: 0x7e230)
DllUnregisterServer (Ordinal: 4, Address: 0x7e620)
Reinitialize (Ordinal: 5, Address: 0x7e9a0)
Shutdown (Ordinal: 6, Address: 0x7e7c0)

Imported DLLs & Functions

ADVAPI32.dll

AccessCheck (Address: 0x1800e9980)
AllocateAndInitializeSid (Address: 0x1800e99e0)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800e99f8)
EventActivityIdControl (Address: 0x1800e9a08)
FreeSid (Address: 0x1800e99f0)
GetLengthSid (Address: 0x1800e99b0)
GetSecurityDescriptorControl (Address: 0x1800e99a0)
GetSecurityDescriptorDacl (Address: 0x1800e99d8)
GetSecurityDescriptorSacl (Address: 0x1800e9978)
GetSidSubAuthority (Address: 0x1800e9998)
GetSidSubAuthorityCount (Address: 0x1800e9990)
GetTokenInformation (Address: 0x1800e99a8)
IsValidSecurityDescriptor (Address: 0x1800e99e8)
OpenThreadToken (Address: 0x1800e9a00)
PrivilegeCheck (Address: 0x1800e9988)
RegCloseKey (Address: 0x1800e9a10)
RegCreateKeyExW (Address: 0x1800e99c8)
RegDeleteKeyW (Address: 0x1800e99c0)
RegDeleteValueW (Address: 0x1800e99b8)
RegNotifyChangeKeyValue (Address: 0x1800e9a18)
RegOpenKeyExW (Address: 0x1800e9a28)
RegQueryValueExW (Address: 0x1800e9a38)
RegSetValueExW (Address: 0x1800e9a30)
RevertToSelf (Address: 0x1800e9a20)
SetThreadToken (Address: 0x1800e99d0)

api-ms-win-core-com-l1-1-0.dll

CoWaitForMultipleHandles (Address: 0x1800ea720)

api-ms-win-core-heap-l1-1-0.dll

HeapReAlloc (Address: 0x1800ea730)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeExW (Address: 0x1800ea740)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersion (Address: 0x1800ea750)

esscli.dll

??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z (Address: 0x1800ea760)
??0CStandardMetaData@@QEAA@PEAUIWbemServices@@@Z (Address: 0x1800ea778)
??1CContextMetaData@@QEAA@XZ (Address: 0x1800ea788)
??1CStandardMetaData@@UEAA@XZ (Address: 0x1800ea768)
?GetNecessaryQueryForClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEAUIWbemClassObject@@AEAVCWStringArray@@AEAPEAU2@@Z (Address: 0x1800ea780)
?SimplifyQueryForChild@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEBGPEAUIWbemClassObject@@PEAVCContextMetaData@@AEAPEAU2@@Z (Address: 0x1800ea770)

FastProx.dll

?_GetCoreInfo@CWbemObject@@UEAAJJPEAPEAX@Z (Address: 0x1800e9d68)
??0CLimitationMapping@@QEAA@XZ (Address: 0x1800ea290)
??0CWbemClass@@QEAA@XZ (Address: 0x1800ea2c0)
??0CWbemInstance@@QEAA@XZ (Address: 0x1800ea080)
??1CLimitationMapping@@QEAA@XZ (Address: 0x1800ea298)
??1CWbemClass@@UEAA@XZ (Address: 0x1800e9e78)
??1CWbemInstance@@UEAA@XZ (Address: 0x1800ea078)
?AddRef@CWbemObject@@UEAAKXZ (Address: 0x1800e9bc0)
?AppendArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800e9a48)
?AsymmetricMerge@CWbemInstance@@SAJPEAV1@0@Z (Address: 0x1800ea030)
?BeginEnumeration@CWbemObject@@UEAAJJ@Z (Address: 0x1800e9ba0)
?BeginEnumerationEx@CWbemObject@@UEAAJJJ@Z (Address: 0x1800e9f28)
?BeginMethodEnumeration@CWbemClass@@UEAAJJ@Z (Address: 0x1800e9c98)
?BeginMethodEnumeration@CWbemInstance@@UEAAJJ@Z (Address: 0x1800ea0c0)
?CIMTYPEToVARTYPE@CWbemObject@@UEAAJJPEAG@Z (Address: 0x1800ea240)
?ClearCachedKeyValue@CWbemInstance@@UEAAXXZ (Address: 0x1800ea0e0)
?ClearWriteOnlyProperties@CWbemClass@@UEAAJXZ (Address: 0x1800ea1c0)
?ClearWriteOnlyProperties@CWbemInstance@@UEAAJXZ (Address: 0x1800e9ef8)
?Clone@CWbemClass@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9ce8)
?Clone@CWbemInstance@@UEAAJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9f80)
?CloneAndDecorate@CWbemClass@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9c08)
?CloneAndDecorate@CWbemInstance@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9e90)
?CloneEx@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9c50)
?CloneEx@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9ee8)
?CompactAll@CWbemClass@@UEAAXXZ (Address: 0x1800e9d78)
?CompactAll@CWbemInstance@@UEAAXXZ (Address: 0x1800ea150)
?CompactClass@CWbemInstance@@QEAAXXZ (Address: 0x1800ea220)
?CompareClassParts@CWbemObject@@UEAAJPEAUIWbemClassObject@@J@Z (Address: 0x1800e9e88)
?CompareDerivedMostClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9c38)
?CompareDerivedMostClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9ed0)
?CompareTo@CWbemClass@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800e9cc0)
?CompareTo@CWbemObject@@UEAAJJPEAUIWbemClassObject@@@Z (Address: 0x1800e9b70)
?ConvertToClass@CWbemInstance@@QEAAJPEAVCWbemClass@@PEAPEAV1@@Z (Address: 0x1800ea268)
?CopyBlobOf@CWbemClass@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800e9d70)
?CopyBlobOf@CWbemInstance@@UEAAJPEAVCWbemObject@@@Z (Address: 0x1800e9fc0)
?CopyInstanceData@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9c48)
?CopyInstanceData@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9ee0)
?CreateDerivedClass@CWbemClass@@QEAAJPEAV1@HPEAVCDecorationPart@@@Z (Address: 0x1800ea208)
?Decorate@CWbemClass@@UEAAJPEBG0@Z (Address: 0x1800e9da0)
?Decorate@CWbemInstance@@UEAAJPEBG0@Z (Address: 0x1800e9fe0)
?Delete@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e9cf8)
?Delete@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800e9f90)
?DeleteMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e9ca0)
?DeleteMethod@CWbemInstance@@UEAAJPEBG@Z (Address: 0x1800ea0c8)
?DeleteProperty@CWbemInstance@@QEAAJH@Z (Address: 0x1800ea230)
?DisconnectObject@CWbemObject@@UEAAJK@Z (Address: 0x1800e9b28)
?EndEnumeration@CWbemObject@@UEAAJXZ (Address: 0x1800e9b78)
?EndMethodEnumeration@CWbemClass@@UEAAJXZ (Address: 0x1800e9c80)
?EndMethodEnumeration@CWbemInstance@@UEAAJXZ (Address: 0x1800ea0b0)
?EstimateUnmergeSpace@CWbemClass@@UEAAKXZ (Address: 0x1800e9d60)
?EstimateUnmergeSpace@CWbemInstance@@UEAAKXZ (Address: 0x1800ea148)
?ExtendClassPartSpace@CWbemInstance@@UEAAHPEAVCClassPart@@K@Z (Address: 0x1800ea108)
?ExtendInstancePartSpace@CWbemInstance@@UEAAHPEAVCInstancePart@@K@Z (Address: 0x1800e9fa8)
?FindLimitationError@CWbemClass@@QEAA?AVWString@@JPEAVCWStringArray@@@Z (Address: 0x1800ea2a8)
?FindMethod@CWbemClass@@UEAAJPEBG@Z (Address: 0x1800e9de0)
?FindMethod@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800e9be0)
?Get@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800e9bb0)
?GetArrayPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800e9a80)
?GetArrayPropElementByHandle@CWbemObject@@UEAAJJJKPEAK0PEAPEAX@Z (Address: 0x1800e9a78)
?GetArrayPropInfoByHandle@CWbemObject@@UEAAJJJPEAPEAGPEAJPEAK@Z (Address: 0x1800e9a88)
?GetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAK0PEAX@Z (Address: 0x1800e9a60)
?GetBlockLength@CWbemClass@@MEAAKXZ (Address: 0x1800ea2d0)
?GetBlockLength@CWbemInstance@@MEAAKXZ (Address: 0x1800ea1b8)
?GetClassNameW@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea2f8)
?GetClassNameW@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea140)
?GetClassPart@CWbemClass@@MEAAPEAVCClassPart@@XZ (Address: 0x1800ea2d8)
?GetClassPart@CWbemClass@@UEAAJPEAXKPEAK@Z (Address: 0x1800ea1d8)
?GetClassPart@CWbemInstance@@MEAAPEAVCClassPart@@XZ (Address: 0x1800ea1a8)
?GetClassPart@CWbemInstance@@UEAAJPEAXKPEAK@Z (Address: 0x1800ea058)
?GetClassSubset@CWbemClass@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9c30)
?GetClassSubset@CWbemInstance@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9ec8)
?GetDerivation@CWbemObject@@QEAAJPEAVCVar@@@Z (Address: 0x1800ea278)
?GetDerivation@CWbemObject@@UEAAJJKPEAK0PEAG@Z (Address: 0x1800e9bd8)
?GetDescription@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e9b20)
?GetDynasty@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800e9d10)
?GetDynasty@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800e9fb0)
?GetGenus@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea310)
?GetGenus@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea128)
?GetGUID@CWbemObject@@UEAAJPEAU_GUID@@@Z (Address: 0x1800e9b18)
?GetHelpContext@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e9b10)
?GetHelpFile@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e9b08)
?GetIndexedProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800ea318)
?GetIndexedProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800ea120)
?GetInstanceObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800ea0e8)
?GetKeyOrigin@CWbemClass@@UEAAJAEAVWString@@@Z (Address: 0x1800ea1f8)
?GetKeyOrigin@CWbemInstance@@UEAAJAEAVWString@@@Z (Address: 0x1800ea110)
?GetKeyOrigin@CWbemObject@@UEAAJJKPEAKPEAG@Z (Address: 0x1800e9bd0)
?GetKeyProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800ea320)
?GetKeyProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z (Address: 0x1800ea118)
?GetKeyString@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800e9ef0)
?GetLimitedVersion@CWbemClass@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800ea2b0)
?GetLimitedVersion@CWbemInstance@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z (Address: 0x1800ea228)
?GetMarshalSizeMax@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z (Address: 0x1800e9b48)
?GetMaxMarshalStreamSize@CWbemInstance@@UEAAJPEAK@Z (Address: 0x1800ea060)
?GetMaxMarshalStreamSize@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e9bf0)
?GetMethod@CWbemClass@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e9cb0)
?GetMethod@CWbemInstance@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800ea0d8)
?GetMethodOrigin@CWbemClass@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e9c70)
?GetMethodOrigin@CWbemInstance@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800ea0a0)
?GetMethodQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800e9cc8)
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e9e08)
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e9df8)
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800ea010)
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800ea008)
?GetMethodQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e9c78)
?GetMethodQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800ea0a8)
?GetNames@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAPEAUtagSAFEARRAY@@@Z (Address: 0x1800e9ba8)
?GetNonsystemPropertyValue@CWbemInstance@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800ea250)
?GetNormalizedPath@CWbemObject@@UEAAJJPEAPEAG@Z (Address: 0x1800e9f20)
?GetNumProperties@CWbemClass@@UEAAHXZ (Address: 0x1800ea2e0)
?GetNumProperties@CWbemInstance@@UEAAHXZ (Address: 0x1800ea168)
?GetObjectMemory@CWbemObject@@UEAAJPEAXKPEAK@Z (Address: 0x1800e9e00)
?GetObjectParts@CWbemClass@@UEAAJPEAXKKPEAK@Z (Address: 0x1800ea1e8)
?GetObjectParts@CWbemInstance@@UEAAJPEAXKKPEAK@Z (Address: 0x1800e9f18)
?GetObjectText@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800e9ce0)
?GetObjectText@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800e9f78)
?GetObjQual@CWbemObject@@UEAAJPEBGJKPEAJPEAK2PEAX@Z (Address: 0x1800e9b98)
?GetParentClassFromBlob@CWbemClass@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800e9c10)
?GetParentClassFromBlob@CWbemObject@@UEAAJJKPEAXPEAPEAG@Z (Address: 0x1800e9f58)
?GetPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z (Address: 0x1800e9a90)
?GetProperty@CWbemClass@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800ea2c8)
?GetProperty@CWbemClass@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800e9e68)
?GetProperty@CWbemInstance@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z (Address: 0x1800ea1b0)
?GetProperty@CWbemInstance@@UEAAJPEBGPEAVCVar@@@Z (Address: 0x1800ea1a0)
?GetPropertyCount@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea308)
?GetPropertyCount@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea130)
?GetPropertyHandle@CWbemObject@@UEAAJPEBGPEAJ1@Z (Address: 0x1800e9af0)
?GetPropertyHandleEx@CWbemObject@@UEAAJPEBGJPEAJ1@Z (Address: 0x1800e9aa0)
?GetPropertyInfoByHandle@CWbemObject@@UEAAJJPEAPEAGPEAJ@Z (Address: 0x1800e9ab8)
?GetPropertyOrigin@CWbemObject@@UEAAJPEBGPEAPEAG@Z (Address: 0x1800e9b68)
?GetPropertyQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e9cf0)
?GetPropertyQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e9f88)
?GetPropertyType@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800e9dd8)
?GetPropertyType@CWbemClass@@UEAAJPEBGPEAJ1@Z (Address: 0x1800e9dd0)
?GetPropertyType@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z (Address: 0x1800ea050)
?GetPropertyType@CWbemInstance@@UEAAJPEBGPEAJ1@Z (Address: 0x1800ea048)
?GetPropertyValue@CWbemObject@@UEAAJPEAU_tag_WbemPropertyName@@JPEAPEAGPEAUtagVARIANT@@@Z (Address: 0x1800e9b58)
?GetPropName@CWbemClass@@UEAAJHPEAVCVar@@@Z (Address: 0x1800ea2e8)
?GetPropName@CWbemInstance@@UEAAJHPEAVCVar@@@Z (Address: 0x1800ea160)
?GetPropQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z (Address: 0x1800e9c88)
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e9e28)
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800e9e18)
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e9e20)
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800e9e10)
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800ea038)
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z (Address: 0x1800ea028)
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800ea170)
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z (Address: 0x1800ea178)
?GetQualifier@CWbemClass@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800e9e58)
?GetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800e9e50)
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z (Address: 0x1800ea190)
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@PEAJ2@Z (Address: 0x1800ea198)
?GetQualifierSet@CWbemClass@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e9d08)
?GetQualifierSet@CWbemInstance@@UEAAJPEAPEAUIWbemQualifierSet@@@Z (Address: 0x1800e9fa0)
?GetRelPath@CWbemClass@@UEAAPEAGH@Z (Address: 0x1800e9d90)
?GetRelPath@CWbemInstance@@UEAAPEAGH@Z (Address: 0x1800e9fd0)
?GetSource@CWbemObject@@UEAAJPEAPEAG@Z (Address: 0x1800e9b00)
?GetSuperclassName@CWbemClass@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea300)
?GetSuperclassName@CWbemInstance@@UEAAJPEAVCVar@@@Z (Address: 0x1800ea138)
?GetSystemPropertyByName@CWbemObject@@QEAAJPEBGPEAVCVar@@@Z (Address: 0x1800ea248)
?GetUnmarshalClass@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAU2@@Z (Address: 0x1800e9b50)
?GetVARTYPE@CType@@SAGK@Z (Address: 0x1800ea218)
?GetWbemObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ (Address: 0x1800ea0f0)
?InheritsFrom@CWbemObject@@UEAAJPEBG@Z (Address: 0x1800e9b60)
?InitEmpty@CWbemClass@@QEAAJHH@Z (Address: 0x1800ea270)
?InitNew@CWbemInstance@@QEAAJPEAVCWbemClass@@HPEAVCDecorationPart@@@Z (Address: 0x1800ea200)
?IsAbstract@CWbemClass@@QEAAHXZ (Address: 0x1800e9f48)
?IsAmendment@CWbemClass@@QEAAHXZ (Address: 0x1800e9f40)
?IsDynamic@CWbemClass@@QEAAHXZ (Address: 0x1800e9f50)
?IsIllegalDerivedClass@CSystemProperties@@SAHPEBG@Z (Address: 0x1800ea288)
?IsInstanceOf@CWbemInstance@@QEAAHPEAVCWbemClass@@@Z (Address: 0x1800ea260)
?IsKeyed@CWbemClass@@UEAAHXZ (Address: 0x1800ea2f0)
?IsKeyed@CWbemInstance@@UEAAHXZ (Address: 0x1800ea158)
?IsLocalized@CWbemClass@@UEAAHXZ (Address: 0x1800e9db0)
?IsLocalized@CWbemInstance@@UEAAHXZ (Address: 0x1800e9ff0)
?IsObjectInstance@CWbemObject@@UEAAJXZ (Address: 0x1800ea2b8)
?IsParentClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9c40)
?IsParentClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9ed8)
?IsValidObj@CWbemClass@@UEAAJXZ (Address: 0x1800e9d80)
?IsValidObj@CWbemInstance@@UEAAJXZ (Address: 0x1800e9fc8)
?Lock@CWbemObject@@UEAAJJ@Z (Address: 0x1800e9ab0)
?MakeSubsetInst@CWbemClass@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800e9c28)
?MakeSubsetInst@CWbemInstance@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z (Address: 0x1800e9ec0)
?MapLimitation@CWbemClass@@QEAAHJPEAVCWStringArray@@PEAVCLimitationMapping@@@Z (Address: 0x1800ea2a0)
?MarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z (Address: 0x1800e9b40)
?Merge@CWbemClass@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9d40)
?Merge@CWbemInstance@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9eb8)
?MergeAmended@CWbemObject@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9d50)
?MergeAndDecorate@CWbemClass@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800e9c00)
?MergeAndDecorate@CWbemInstance@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z (Address: 0x1800e9e80)
?MergeClassPart@CWbemClass@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800ea1c8)
?MergeClassPart@CWbemInstance@@UEAAJPEAUIWbemClassObject@@@Z (Address: 0x1800e9f00)
?Next@CWbemObject@@UEAAJJPEAPEAGPEAUtagVARIANT@@PEAJ2@Z (Address: 0x1800e9b80)
?NextMethod@CWbemClass@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800e9c90)
?NextMethod@CWbemInstance@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z (Address: 0x1800ea0b8)
?PlugKeyHoles@CWbemInstance@@QEAAJXZ (Address: 0x1800ea258)
?Put@CWbemClass@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800e9d00)
?Put@CWbemInstance@@UEAAJPEBGJPEAUtagVARIANT@@J@Z (Address: 0x1800e9f98)
?PutMethod@CWbemClass@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800e9ca8)
?PutMethod@CWbemInstance@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z (Address: 0x1800ea0d0)
?QueryInterface@CWbemObject@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x1800e9bc8)
?QueryObjectFlags@CWbemObject@@UEAAJJ_KPEA_K@Z (Address: 0x1800e9d28)
?QueryPartInfo@CWbemObject@@UEAAJPEAK@Z (Address: 0x1800e9d88)
?QueryPropertyFlags@CWbemObject@@UEAAJJPEBG_KPEA_K@Z (Address: 0x1800e9d48)
?ReadDWORD@CWbemObject@@UEAAJJPEAK@Z (Address: 0x1800e9ad8)
?ReadProp@CWbemObject@@UEAAJPEBGJKPEAJ1PEAHPEAKPEAX@Z (Address: 0x1800e9b88)
?ReadPropertyValue@CWbemObject@@UEAAJJJPEAJPEAE@Z (Address: 0x1800e9ae0)
?ReadQWORD@CWbemObject@@UEAAJJPEA_K@Z (Address: 0x1800e9ac8)
?ReconcileWith@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9d20)
?ReconcileWith@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z (Address: 0x1800e9eb0)
?ReduceClassPartSpace@CWbemInstance@@UEAAXPEAVCClassPart@@K@Z (Address: 0x1800ea100)
?ReduceInstancePartSpace@CWbemInstance@@UEAAXPEAVCInstancePart@@K@Z (Address: 0x1800ea0f8)
?Release@CWbemObject@@UEAAKXZ (Address: 0x1800e9bb8)
?ReleaseMarshalData@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800e9b30)
?RemoveArrayPropElementByHandle@CWbemObject@@UEAAJJJK@Z (Address: 0x1800e9a68)
?RemoveArrayPropRangeByHandle@CWbemObject@@UEAAJJJKK@Z (Address: 0x1800e9a50)
?RemoveDecoration@CWbemObject@@UEAAJXZ (Address: 0x1800e9e48)
?SetArrayPropElementByHandle@CWbemObject@@UEAAJJJKKPEAX@Z (Address: 0x1800e9a70)
?SetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAX@Z (Address: 0x1800e9a58)
?SetClassPart@CWbemClass@@UEAAJPEAXK@Z (Address: 0x1800ea1d0)
?SetClassPart@CWbemInstance@@UEAAJPEAXK@Z (Address: 0x1800e9f08)
?SetData@CWbemClass@@UEAAXPEAEH@Z (Address: 0x1800e9e70)
?SetData@CWbemInstance@@UEAAXPEAEH@Z (Address: 0x1800ea070)
?SetDecoration@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800e9e30)
?SetInheritanceChain@CWbemClass@@UEAAJJPEAPEAG@Z (Address: 0x1800e9f68)
?SetInheritanceChain@CWbemInstance@@UEAAJJPEAPEAG@Z (Address: 0x1800ea098)
?SetLocalized@CWbemClass@@UEAAXH@Z (Address: 0x1800e9da8)
?SetLocalized@CWbemInstance@@UEAAXH@Z (Address: 0x1800e9fe8)
?SetMethodOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800e9c58)
?SetMethodOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800ea088)
?SetMethodQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800e9d18)
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e9df0)
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e9de8)
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800ea000)
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e9ff8)
?SetObjectFlags@CWbemObject@@UEAAJJ_K0@Z (Address: 0x1800e9d30)
?SetObjectMemory@CWbemObject@@UEAAJPEAXK@Z (Address: 0x1800e9db8)
?SetObjectParts@CWbemClass@@UEAAJPEAXKK@Z (Address: 0x1800ea1f0)
?SetObjectParts@CWbemInstance@@UEAAJPEAXKK@Z (Address: 0x1800e9f30)
?SetObjQual@CWbemObject@@UEAAJPEBGJKKJKPEAX@Z (Address: 0x1800e9c68)
?SetPropByHandle@CWbemObject@@UEAAJJJKPEAX@Z (Address: 0x1800e9a98)
?SetPropertyOrigin@CWbemClass@@UEAAJPEBGJ@Z (Address: 0x1800e9c60)
?SetPropertyOrigin@CWbemInstance@@UEAAJPEBGJ@Z (Address: 0x1800ea090)
?SetPropQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z (Address: 0x1800e9cb8)
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800e9dc8)
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800e9dc0)
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z (Address: 0x1800ea020)
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z (Address: 0x1800ea018)
?SetPropValue@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e9e60)
?SetPropValue@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800ea040)
?SetQualifier@CWbemClass@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800e9e40)
?SetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800e9e38)
?SetQualifier@CWbemInstance@@UEAAJPEBGJPEAVCTypedValue@@@Z (Address: 0x1800ea180)
?SetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z (Address: 0x1800ea188)
?SetServerNamespace@CWbemObject@@UEAAJPEBG0@Z (Address: 0x1800e9af8)
?SpawnDerivedClass@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9cd8)
?SpawnDerivedClass@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9f70)
?SpawnInstance@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9cd0)
?SpawnInstance@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z (Address: 0x1800e9f38)
?SpawnKeyedInstance@CWbemClass@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9c18)
?SpawnKeyedInstance@CWbemInstance@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z (Address: 0x1800e9e98)
?StripClassPart@CWbemClass@@UEAAJXZ (Address: 0x1800ea1e0)
?StripClassPart@CWbemInstance@@UEAAJXZ (Address: 0x1800e9f10)
?Undecorate@CWbemClass@@UEAAXXZ (Address: 0x1800e9d98)
?Undecorate@CWbemInstance@@UEAAXXZ (Address: 0x1800e9fd8)
?Unlock@CWbemObject@@UEAAJJ@Z (Address: 0x1800e9aa8)
?UnmarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z (Address: 0x1800e9b38)
?Unmerge@CWbemClass@@UEAAJPEAEHPEAK@Z (Address: 0x1800e9d58)
?Unmerge@CWbemInstance@@UEAAJPEAEHPEAK@Z (Address: 0x1800e9fb8)
?Unmerge@CWbemObject@@UEAAJJKPEAKPEAX@Z (Address: 0x1800e9be8)
?Update@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e9d38)
?Update@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e9ea0)
?Upgrade@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e9c20)
?Upgrade@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z (Address: 0x1800e9ea8)
?ValidateObject@CWbemObject@@UEAAJJ@Z (Address: 0x1800e9f60)
?ValidateRange@CWbemObject@@QEAAHPEAPEAG@Z (Address: 0x1800ea280)
?WriteDWORD@CWbemObject@@UEAAJJK@Z (Address: 0x1800e9ad0)
?WriteProp@CWbemObject@@UEAAJPEBGJKKJPEAX@Z (Address: 0x1800e9b90)
?WritePropertyValue@CWbemObject@@UEAAJJJPEBE@Z (Address: 0x1800e9ae8)
?WriteQWORD@CWbemObject@@UEAAJJ_K@Z (Address: 0x1800e9ac0)
?WriteToStream@CWbemInstance@@UEAAJPEAUIStream@@@Z (Address: 0x1800ea068)
?WriteToStream@CWbemObject@@UEAAJPEAUIStream@@@Z (Address: 0x1800e9bf8)
WbemStringCopy (Address: 0x1800ea210)
WbemStringFree (Address: 0x1800ea238)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800ea520)
AcquireSRWLockShared (Address: 0x1800ea5b0)
CloseHandle (Address: 0x1800ea370)
CloseThreadpoolTimer (Address: 0x1800ea518)
CompareStringW (Address: 0x1800ea540)
CreateEventW (Address: 0x1800ea350)
CreateFileW (Address: 0x1800ea4a8)
CreateMutexExW (Address: 0x1800ea588)
CreateSemaphoreExW (Address: 0x1800ea3f8)
CreateThread (Address: 0x1800ea378)
CreateThreadpoolTimer (Address: 0x1800ea578)
CreateTimerQueueTimer (Address: 0x1800ea3c8)
DebugBreak (Address: 0x1800ea5b8)
DeleteCriticalSection (Address: 0x1800ea440)
DeleteTimerQueueTimer (Address: 0x1800ea458)
EnterCriticalSection (Address: 0x1800ea3d0)
ExpandEnvironmentStringsW (Address: 0x1800ea448)
FileTimeToSystemTime (Address: 0x1800ea4b8)
FormatMessageW (Address: 0x1800ea4c0)
FreeLibrary (Address: 0x1800ea488)
GetComputerNameExW (Address: 0x1800ea410)
GetCurrentProcess (Address: 0x1800ea4e8)
GetCurrentProcessId (Address: 0x1800ea3b0)
GetCurrentThread (Address: 0x1800ea3a0)
GetCurrentThreadId (Address: 0x1800ea400)
GetFileAttributesExW (Address: 0x1800ea558)
GetFileAttributesW (Address: 0x1800ea5a0)
GetFileInformationByHandle (Address: 0x1800ea4b0)
GetLastError (Address: 0x1800ea430)
GetLocalTime (Address: 0x1800ea528)
GetModuleFileNameA (Address: 0x1800ea3f0)
GetModuleHandleExW (Address: 0x1800ea438)
GetModuleHandleW (Address: 0x1800ea5d0)
GetProcAddress (Address: 0x1800ea478)
GetProcessHeap (Address: 0x1800ea5d8)
GetProcessTimes (Address: 0x1800ea3d8)
GetSystemDirectoryW (Address: 0x1800ea468)
GetSystemInfo (Address: 0x1800ea568)
GetSystemTime (Address: 0x1800ea5c0)
GetSystemTimeAsFileTime (Address: 0x1800ea5c8)
GetTickCount (Address: 0x1800ea390)
GetTickCount64 (Address: 0x1800ea398)
GetVersionExW (Address: 0x1800ea598)
GlobalMemoryStatusEx (Address: 0x1800ea480)
HeapAlloc (Address: 0x1800ea580)
HeapFree (Address: 0x1800ea408)
InitializeCriticalSectionAndSpinCount (Address: 0x1800ea3e0)
InitializeCriticalSectionEx (Address: 0x1800ea450)
IsDebuggerPresent (Address: 0x1800ea5a8)
LCMapStringW (Address: 0x1800ea3b8)
LeaveCriticalSection (Address: 0x1800ea3e8)
LoadLibraryExW (Address: 0x1800ea490)
LocalFree (Address: 0x1800ea3a8)
lstrlenW (Address: 0x1800ea4a0)
MoveFileW (Address: 0x1800ea590)
OpenEventW (Address: 0x1800ea5e0)
OpenProcess (Address: 0x1800ea338)
OpenSemaphoreW (Address: 0x1800ea548)
OutputDebugStringW (Address: 0x1800ea4d0)
QueryPerformanceCounter (Address: 0x1800ea4d8)
QueueUserWorkItem (Address: 0x1800ea418)
ReleaseMutex (Address: 0x1800ea498)
ReleaseSemaphore (Address: 0x1800ea428)
ReleaseSRWLockExclusive (Address: 0x1800ea4c8)
ReleaseSRWLockShared (Address: 0x1800ea570)
ResetEvent (Address: 0x1800ea470)
RtlCaptureContext (Address: 0x1800ea510)
RtlLookupFunctionEntry (Address: 0x1800ea508)
RtlVirtualUnwind (Address: 0x1800ea500)
SetEvent (Address: 0x1800ea360)
SetLastError (Address: 0x1800ea420)
SetThreadpoolTimer (Address: 0x1800ea550)
SetUnhandledExceptionFilter (Address: 0x1800ea4f0)
Sleep (Address: 0x1800ea358)
SystemTimeToFileTime (Address: 0x1800ea560)
TerminateProcess (Address: 0x1800ea4e0)
TlsAlloc (Address: 0x1800ea368)
TlsFree (Address: 0x1800ea388)
TlsGetValue (Address: 0x1800ea380)
TlsSetValue (Address: 0x1800ea330)
UnhandledExceptionFilter (Address: 0x1800ea4f8)
WaitForMultipleObjectsEx (Address: 0x1800ea340)
WaitForSingleObject (Address: 0x1800ea348)
WaitForSingleObjectEx (Address: 0x1800ea538)
WaitForThreadpoolTimerCallbacks (Address: 0x1800ea460)
WideCharToMultiByte (Address: 0x1800ea3c0)
WriteFile (Address: 0x1800ea530)

msvcrt.dll

__C_specific_handler (Address: 0x1800ea8e8)
__CxxFrameHandler3 (Address: 0x1800ea8f0)
__dllonexit (Address: 0x1800ea7e0)
_amsg_exit (Address: 0x1800ea7f0)
_CxxThrowException (Address: 0x1800ea820)
_initterm (Address: 0x1800ea7e8)
_lock (Address: 0x1800ea808)
_onexit (Address: 0x1800ea7d8)
_purecall (Address: 0x1800ea8e0)
_ui64tow_s (Address: 0x1800ea868)
_unlock (Address: 0x1800ea800)
_vsnprintf (Address: 0x1800ea7b8)
_vsnprintf_s (Address: 0x1800ea870)
_vsnwprintf (Address: 0x1800ea8c8)
_wcsicmp (Address: 0x1800ea8c0)
_wcslwr_s (Address: 0x1800ea840)
_wcsnicmp (Address: 0x1800ea8d0)
_XcptFilter (Address: 0x1800ea7f8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800ea838)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800ea830)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800ea880)
??0exception@@QEAA@XZ (Address: 0x1800ea888)
??1exception@@UEAA@XZ (Address: 0x1800ea890)
??1type_info@@UEAA@XZ (Address: 0x1800ea7d0)
?terminate@@YAXXZ (Address: 0x1800ea7c8)
?what@exception@@UEBAPEBDXZ (Address: 0x1800ea828)
atol (Address: 0x1800ea7b0)
free (Address: 0x1800ea8b0)
isdigit (Address: 0x1800ea8a8)
iswspace (Address: 0x1800ea858)
iswxdigit (Address: 0x1800ea850)
malloc (Address: 0x1800ea8a0)
memcmp (Address: 0x1800ea7a8)
memcpy (Address: 0x1800ea818)
memcpy_s (Address: 0x1800ea898)
memmove (Address: 0x1800ea810)
memmove_s (Address: 0x1800ea860)
memset (Address: 0x1800ea7c0)
sscanf_s (Address: 0x1800ea798)
swprintf_s (Address: 0x1800ea878)
wcschr (Address: 0x1800ea8b8)
wcscmp (Address: 0x1800ea7a0)
wcsstr (Address: 0x1800ea848)
wcstok (Address: 0x1800ea8d8)

ntdll.dll

WinSqmAddToStream (Address: 0x1800ea908)
WinSqmIsOptedIn (Address: 0x1800ea900)

OLE32.dll

CLSIDFromString (Address: 0x1800ea648)
CoCreateInstance (Address: 0x1800ea600)
CoDisconnectObject (Address: 0x1800ea650)
CoGetCallContext (Address: 0x1800ea628)
CoImpersonateClient (Address: 0x1800ea638)
CoInitializeEx (Address: 0x1800ea620)
CoRevertToSelf (Address: 0x1800ea640)
CoSetProxyBlanket (Address: 0x1800ea630)
CoSwitchCallContext (Address: 0x1800ea5f0)
CoTaskMemFree (Address: 0x1800ea608)
CoUninitialize (Address: 0x1800ea5f8)
CoUnmarshalInterface (Address: 0x1800ea618)
StringFromGUID2 (Address: 0x1800ea610)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x1800ea6b0)
SafeArrayCreate (Address: 0x1800ea690)
SafeArrayDestroy (Address: 0x1800ea660)
SafeArrayGetDim (Address: 0x1800ea678)
SafeArrayGetElement (Address: 0x1800ea680)
SafeArrayGetLBound (Address: 0x1800ea6a8)
SafeArrayGetUBound (Address: 0x1800ea6f0)
SafeArrayPutElement (Address: 0x1800ea668)
SafeArrayUnaccessData (Address: 0x1800ea6a0)
SetErrorInfo (Address: 0x1800ea688)
SysAllocString (Address: 0x1800ea6e0)
SysAllocStringByteLen (Address: 0x1800ea6b8)
SysAllocStringLen (Address: 0x1800ea698)
SysFreeString (Address: 0x1800ea6d8)
SysStringLen (Address: 0x1800ea6c0)
VariantChangeType (Address: 0x1800ea670)
VariantClear (Address: 0x1800ea6e8)
VariantCopy (Address: 0x1800ea6c8)
VariantInit (Address: 0x1800ea6d0)

VERSION.dll

GetFileVersionInfoExW (Address: 0x1800ea708)
GetFileVersionInfoSizeExW (Address: 0x1800ea710)
VerQueryValueW (Address: 0x1800ea700)

wbemcomn.dll

_IsValidElementName (Address: 0x1800eac18)
_ThrowMemoryException_ (Address: 0x1800eaf00)
?_Free@CMUILocale@@SAHPEAX@Z (Address: 0x1800eaea8)
?_GetSystemDefaultLocale@CMUILocale@@SAJPEAPEAGK@Z (Address: 0x1800eab00)
??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z (Address: 0x1800eb050)
??0CClientOpsNode@@QEAA@XZ (Address: 0x1800eaef0)
??0CCritSec@@QEAA@XZ (Address: 0x1800eb088)
??0CDateTimeParser@@QEAA@PEBG@Z (Address: 0x1800eaa80)
??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z (Address: 0x1800eab98)
??0CFlexArray@@QEAA@AEAV0@@Z (Address: 0x1800eae38)
??0CFlexArray@@QEAA@HH@Z (Address: 0x1800eb0c0)
??0CFlexQueue@@QEAA@H@Z (Address: 0x1800eb000)
??0CIdentitySecurity@@QEAA@_N@Z (Address: 0x1800eaf20)
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1800eb0a8)
??0CInsertionString@@QEAA@PEBG@Z (Address: 0x1800eaee8)
??0CInsertionString@@QEAA@VCHex@@@Z (Address: 0x1800eab90)
??0CInsertionString@@QEAA@XZ (Address: 0x1800eafb0)
??0CLike@@QEAA@PEBGG@Z (Address: 0x1800eaa58)
??0CMUILocaleList@@QEAA@XZ (Address: 0x1800ead18)
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z (Address: 0x1800ead08)
??0CNtAcl@@QEAA@K@Z (Address: 0x1800eaca0)
??0CNtAcl@@QEAA@PEAU_ACL@@@Z (Address: 0x1800ea948)
??0CNtSecurityDescriptor@@QEAA@PEAX@Z (Address: 0x1800eacd0)
??0CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800eacd8)
??0CNtSid@@QEAA@PEAX@Z (Address: 0x1800ead50)
??0CPropertyName@@QEAA@XZ (Address: 0x1800eaa18)
??0CSafeArray@@QEAA@HHHH@Z (Address: 0x1800eae00)
??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z (Address: 0x1800ead80)
??0CStaticCritSec@@QEAA@XZ (Address: 0x1800eb078)
??0CVar@@QEAA@AEBV0@@Z (Address: 0x1800eabf8)
??0CVar@@QEAA@E@Z (Address: 0x1800ea9c0)
??0CVar@@QEAA@FH@Z (Address: 0x1800ea9d0)
??0CVar@@QEAA@HPEAG@Z (Address: 0x1800eae28)
??0CVar@@QEAA@HVauto_bstr@@@Z (Address: 0x1800eab70)
??0CVar@@QEAA@J@Z (Address: 0x1800ea9c8)
??0CVar@@QEAA@PEAUtagVARIANT@@@Z (Address: 0x1800eaa00)
??0CVar@@QEAA@PEAVCVarVector@@H@Z (Address: 0x1800ea9d8)
??0CVar@@QEAA@XZ (Address: 0x1800eaf80)
??0CVarVector@@QEAA@HHH@Z (Address: 0x1800ea9e8)
??0CWbemCriticalSection@@QEAA@XZ (Address: 0x1800eab48)
??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800eae50)
??0CWStringArray@@QEAA@HH@Z (Address: 0x1800eafc8)
??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z (Address: 0x1800eaa48)
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800eaab0)
??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z (Address: 0x1800eadd0)
??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z (Address: 0x1800eaf08)
??0Registry@@QEAA@PEBGK@Z (Address: 0x1800eaeb0)
??0WString@@QEAA@AEBV0@@Z (Address: 0x1800eabe0)
??0WString@@QEAA@PEAGH@Z (Address: 0x1800eb0f8)
??0WString@@QEAA@PEBG@Z (Address: 0x1800ead00)
??0WString@@QEAA@XZ (Address: 0x1800eaf40)
??0WString2@@QEAA@PEAGH@Z (Address: 0x1800eae90)
??0WString2@@QEAA@PEBG@Z (Address: 0x1800eb028)
??0WString2@@QEAA@XZ (Address: 0x1800eb020)
??1CCheckedInCritSec@@QEAA@XZ (Address: 0x1800eb058)
??1CClientOpsNode@@QEAA@XZ (Address: 0x1800eaf58)
??1CCritSec@@QEAA@XZ (Address: 0x1800eb090)
??1CDateTimeParser@@QEAA@XZ (Address: 0x1800eaa88)
??1CEnterWbemCriticalSection@@QEAA@XZ (Address: 0x1800eab08)
??1CEventLog@@QEAA@XZ (Address: 0x1800eaba0)
??1CFlexArray@@QEAA@XZ (Address: 0x1800eb0c8)
??1CFlexQueue@@QEAA@XZ (Address: 0x1800eb008)
??1CIdentitySecurity@@QEAA@XZ (Address: 0x1800eaf28)
??1CInCritSec@@QEAA@XZ (Address: 0x1800eb0b0)
??1CInsertionString@@QEAA@XZ (Address: 0x1800eafb8)
??1CLike@@QEAA@XZ (Address: 0x1800eaa60)
??1CMUILocaleList@@QEAA@XZ (Address: 0x1800ead20)
??1CNtAce@@UEAA@XZ (Address: 0x1800eac60)
??1CNtAcl@@QEAA@XZ (Address: 0x1800eaca8)
??1CNtSecurityDescriptor@@QEAA@XZ (Address: 0x1800eace0)
??1CNtSid@@QEAA@XZ (Address: 0x1800ead58)
??1CPropertyName@@QEAA@XZ (Address: 0x1800eaa20)
??1CSafeArray@@QEAA@XZ (Address: 0x1800eae08)
??1CStaticCritSec@@QEAA@XZ (Address: 0x1800eb080)
??1CVar@@QEAA@XZ (Address: 0x1800eaf88)
??1CVarVector@@QEAA@XZ (Address: 0x1800ea9f0)
??1CWbemCriticalSection@@QEAA@XZ (Address: 0x1800eab50)
??1CWQLScanner@@QEAA@XZ (Address: 0x1800eae58)
??1CWStringArray@@QEAA@XZ (Address: 0x1800eafd0)
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ (Address: 0x1800eaad0)
??1QL_LEVEL_1_TOKEN@@QEAA@XZ (Address: 0x1800eaa50)
??1QL1_Parser@@UEAA@XZ (Address: 0x1800eaab8)
??1Registry@@QEAA@XZ (Address: 0x1800eaf10)
??1WString@@QEAA@XZ (Address: 0x1800eaed0)
??1WString2@@QEAA@XZ (Address: 0x1800eb038)
??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800ea968)
??4CWStringArray@@QEAAAEAV0@AEAV0@@Z (Address: 0x1800eae78)
??4WString@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800eaaa0)
??4WString@@QEAAAEAV0@PEBG@Z (Address: 0x1800eaf48)
??4WString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800eb030)
??ACFlexArray@@QEAAAEAPEAXH@Z (Address: 0x1800eb0d0)
??ACWStringArray@@QEBAPEAGH@Z (Address: 0x1800eafa0)
??YWString@@QEAAAEAV0@PEBG@Z (Address: 0x1800eaf50)
??YWString2@@QEAAAEAV0@AEBV0@@Z (Address: 0x1800eae98)
??YWString2@@QEAAAEAV0@PEBG@Z (Address: 0x1800eb040)
?AccessCheck@CIdentitySecurity@@QEAAHXZ (Address: 0x1800eaf30)
?Add@CFlexArray@@QEAAHPEAX@Z (Address: 0x1800eb0b8)
?Add@CVarVector@@QEAAHAEAVCVar@@@Z (Address: 0x1800ea9f8)
?Add@CWStringArray@@QEAAHPEBG@Z (Address: 0x1800eafd8)
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z (Address: 0x1800eacc0)
?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z (Address: 0x1800ead48)
?AddElement@CPropertyName@@QEAAXPEBG@Z (Address: 0x1800eaa30)
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z (Address: 0x1800eaae8)
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800eaad8)
?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z (Address: 0x1800eae40)
?anyFailure@CStaticCritSec@@SAHXZ (Address: 0x1800eabd8)
?Bind@CFlexArray@@QEAAXAEAV1@@Z (Address: 0x1800eae70)
?BindPtr@WString@@QEAAXPEAG@Z (Address: 0x1800eaed8)
?ChangeTypeTo@CVar@@QEAAHG@Z (Address: 0x1800eaa40)
?CheckLangNeutral@CMUILocale@@SAJPEBGPEA_N@Z (Address: 0x1800ead68)
?Close@CEventLog@@QEAAHXZ (Address: 0x1800eaba8)
?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z (Address: 0x1800eaff8)
?CoGetClassObject@CWbemInstallObject@@SAJAEBU_GUID@@KPEAU_COSERVERINFO@@0PEAPEAX@Z (Address: 0x1800eabd0)
?Compress@CFlexArray@@QEAAXXZ (Address: 0x1800eae68)
?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z (Address: 0x1800ea950)
?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ (Address: 0x1800eadb8)
?DeleteAce@CNtAcl@@QEAAHH@Z (Address: 0x1800ea958)
?DeleteSacl@CNtSecurityDescriptor@@QEAAJXZ (Address: 0x1800ea988)
?DeleteValue@Registry@@QEAAHPEBG@Z (Address: 0x1800eab78)
?Dequeue@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800eb018)
?Deserialize@CNtAce@@UEAA_NPEAE@Z (Address: 0x1800eac90)
?Empty@CFlexArray@@QEAAXXZ (Address: 0x1800eb070)
?Empty@CVar@@QEAAXXZ (Address: 0x1800eaa38)
?Empty@CWStringArray@@QEAAXXZ (Address: 0x1800eac20)
?Empty@WString@@QEAAXXZ (Address: 0x1800eac00)
?Empty@WString2@@QEAAXXZ (Address: 0x1800eb048)
?Enqueue@CFlexQueue@@QEAA_NPEAX@Z (Address: 0x1800eb010)
?Enter@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800eaec8)
?Enter@CCritSec@@QEAAXXZ (Address: 0x1800eb098)
?Enter@CWbemCriticalSection@@QEAAHK@Z (Address: 0x1800eab58)
?EqualNoCase@WString@@QEBAHPEBG@Z (Address: 0x1800eabe8)
?EqualNoCase@WString2@@QEBAHPEBG@Z (Address: 0x1800eaa10)
?EscapeQuotes@WString2@@QEBA?AV1@XZ (Address: 0x1800eaea0)
?FillDMTF@CDateTimeParser@@QEAAHPEAG_K@Z (Address: 0x1800eaa90)
?FindStr@CWStringArray@@QEAAHPEBGH@Z (Address: 0x1800eac28)
?GetAccessMask@CNtAce@@UEAAKXZ (Address: 0x1800eac78)
?GetAce@CNtAcl@@QEAAPEAVCNtAce@@H@Z (Address: 0x1800eacb8)
?GetAt@CFlexArray@@QEBAPEAXH@Z (Address: 0x1800eafc0)
?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z (Address: 0x1800eac58)
?GetAt@CWStringArray@@QEBAPEAGH@Z (Address: 0x1800eae20)
?GetBinaryPath@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800eabc0)
?GetBSTR@CVar@@QEAAPEAGXZ (Address: 0x1800eac40)
?GetBSTRAt@CSafeArray@@QEAAPEAGH@Z (Address: 0x1800ead88)
?GetCultures@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800ead38)
?GetDacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800ea970)
?GetDacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800eace8)
?GetDWORD@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800eaf18)
?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z (Address: 0x1800eadd8)
?GetEmbeddedObject@CVar@@QEAAPEAUIUnknown@@XZ (Address: 0x1800eaa08)
?GetFirst_ms_XXX_Locale@CMUILocaleList@@QEAAJPEAPEAG@Z (Address: 0x1800ead30)
?GetFlags@CNtAce@@UEAAHXZ (Address: 0x1800eac70)
?GetLocales@CMUILocaleList@@QEAAPEBGXZ (Address: 0x1800ead40)
?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z (Address: 0x1800eade0)
?GetNumAces@CNtAcl@@QEAAHXZ (Address: 0x1800eacb0)
?GetOwner@CNtSecurityDescriptor@@QEAAPEAVCNtSid@@XZ (Address: 0x1800ea990)
?GetPersistentCfgValue@CPersistentConfig@@QEAAHKAEAK@Z (Address: 0x1800eab80)
?GetQueueSize@CFlexQueue@@QEBAHXZ (Address: 0x1800eaee0)
?GetReferencedAliases@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800eae48)
?GetReferencedTables@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z (Address: 0x1800eaa78)
?GetRegistryPathCIMOM@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800eaff0)
?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ (Address: 0x1800eabc8)
?GetSacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z (Address: 0x1800ea978)
?GetSacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ (Address: 0x1800eacf8)
?GetSerializedSize@CNtAce@@UEAAKXZ (Address: 0x1800eac80)
?GetSid@CNtAce@@QEAAPEAVCNtSid@@XZ (Address: 0x1800ea940)
?GetSize@CNtSecurityDescriptor@@QEAAKXZ (Address: 0x1800ea9a8)
?GetStatus@CNtAce@@UEAAKXZ (Address: 0x1800eac10)
?GetStr@Registry@@QEAAHPEBGPEAPEAG@Z (Address: 0x1800eaeb8)
?GetStringAt@CPropertyName@@QEBAPEBGJ@Z (Address: 0x1800eaa28)
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ (Address: 0x1800eaaf0)
?GetType@CNtAce@@UEAAHXZ (Address: 0x1800eac68)
?Init@CPublishWMIOperationEvent@@SAJXZ (Address: 0x1800eab68)
?Initialize@CMUILocaleList@@QEAAJPEAG_N@Z (Address: 0x1800ead28)
?InsertAt@CFlexArray@@QEAAHHPEAX@Z (Address: 0x1800eb068)
?IsDataNull@CVar@@QEAAHXZ (Address: 0x1800eac38)
?IsOffline@CWbemInstallObject@@SA_NXZ (Address: 0x1800eafe8)
?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z (Address: 0x1800eac30)
?IsValid@CNtAcl@@QEAAHXZ (Address: 0x1800ea930)
?IsValid@CNtSid@@QEAAHXZ (Address: 0x1800ea928)
?LCID_To_ms_XXX_Format@CMUILocale@@SAJKPEAG_K@Z (Address: 0x1800ead78)
?Leave@CCheckedInCritSec@@QEAAXXZ (Address: 0x1800eb060)
?Leave@CCritSec@@QEAAXXZ (Address: 0x1800eb0a0)
?Leave@CWbemCriticalSection@@QEAAXXZ (Address: 0x1800eab60)
?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z (Address: 0x1800ead70)
?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ (Address: 0x1800ea918)
?Match@CLike@@QEAA_NPEBG@Z (Address: 0x1800eaa68)
?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z (Address: 0x1800ead60)
?Open@CEventLog@@QEAAHXZ (Address: 0x1800eabb0)
?OrderAces@CNtAcl@@QEAAPEAV1@XZ (Address: 0x1800ea960)
?Parse@CWQLScanner@@QEAAHXZ (Address: 0x1800eae60)
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1800eaac0)
?Peek@CFlexQueue@@QEAAPEAXXZ (Address: 0x1800eaf68)
?Publish@CPublishWMIOperationEvent@@SAJPEAGKK0000K_K0H@Z (Address: 0x1800ead90)
?PublishClientRequestFailure@CPublishWMIOperationEvent@@SAJPEBGPEAG1K10J0@Z (Address: 0x1800eaf78)
?PublishMethodExec@CPublishWMIOperationEvent@@SAJPEAGKK000000K_K0H@Z (Address: 0x1800ead98)
?PublishRepDelete@CPublishWMIOperationEvent@@SAJKPEAGPEAUIWbemContext@@K0_KH@Z (Address: 0x1800eada8)
?PublishRepUpdate@CPublishWMIOperationEvent@@SAJKPEAGKPEAUIWbemContext@@K0_KH@Z (Address: 0x1800eadb0)
?PublishStop@CPublishWMIOperationEvent@@SAJKJPEAG@Z (Address: 0x1800eaf70)
?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SAJPEAGKK0K_K000K1H@Z (Address: 0x1800eada0)
?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXP6AJH@Z@Z (Address: 0x1800eab30)
?Release@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ (Address: 0x1800eaae0)
?RemoveAt@CFlexArray@@QEAAHH@Z (Address: 0x1800eb0d8)
?RemoveAt@CWStringArray@@QEAAHH@Z (Address: 0x1800eae80)
?RemoveSelf@CClientOpsNode@@QEAAXXZ (Address: 0x1800eaf60)
?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1800eafe0)
?Serialize@CNtAce@@UEAA_NPEAE_K@Z (Address: 0x1800eac88)
?SetAt@CFlexArray@@QEAAXHPEAX@Z (Address: 0x1800eabf0)
?SetBSTR@CVar@@QEAAHPEAG@Z (Address: 0x1800eadc0)
?SetBSTR@CVar@@QEAAHVauto_bstr@@@Z (Address: 0x1800eadc8)
?SetBSTRAt@CSafeArray@@QEAAHHPEAG@Z (Address: 0x1800eae10)
?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800eacf0)
?SetDMTF@CWbemTime@@QEAAHPEBG@Z (Address: 0x1800eaaa8)
?SetDWORD@Registry@@QEAAHPEBGK@Z (Address: 0x1800eade8)
?SetDWORDStr@Registry@@QEAAHPEBGK@Z (Address: 0x1800eadf0)
?SetEmbeddedObject@CVar@@QEAAXPEAUIUnknown@@@Z (Address: 0x1800eae30)
?SetFailure@CStaticCritSec@@SAXXZ (Address: 0x1800eb0f0)
?SetFlags@CNtAce@@UEAAXJ@Z (Address: 0x1800eac08)
?SetGroup@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800ea9a0)
?SetLogingEnabled@CMemoryLog@@QEAAX_N@Z (Address: 0x1800eab18)
?SetOwner@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z (Address: 0x1800ea998)
?SetSacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z (Address: 0x1800ea980)
?SetStr@Registry@@QEAAHPEBG0@Z (Address: 0x1800eadf8)
?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z (Address: 0x1800ea9e0)
?Size@CVarVector@@QEAAHXZ (Address: 0x1800eac50)
?Size@CWStringArray@@QEBAHXZ (Address: 0x1800eafa8)
?Trim@CSafeArray@@QEAAHXZ (Address: 0x1800eae18)
?UnbindPtr@WString2@@QEAAPEAGXZ (Address: 0x1800eaac8)
?Union@CWStringArray@@SAXAEAV1@00@Z (Address: 0x1800eae88)
?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXXZ (Address: 0x1800eab38)
?ValidateMemSize@CWin32DefaultArena@@SAHH@Z (Address: 0x1800eaaf8)
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x1800eaf90)
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x1800eaf98)
?WbemMemReAlloc@CWin32DefaultArena@@SAPEAXPEAX_K@Z (Address: 0x1800ea920)
?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x1800eb0e8)
BreakOnDbgAndRenterLoop (Address: 0x1800eaef8)
BuildOperationInfo (Address: 0x1800eacc8)
BuildSecurityDescriptorParameter (Address: 0x1800ea9b8)
ComposeName (Address: 0x1800eabb8)
GetAccessToken (Address: 0x1800eb100)
GetGlobalClientOps (Address: 0x1800ead10)
GetMemLogObject (Address: 0x1800eb0e0)
GetSecurityDescriptorFromParameters (Address: 0x1800ea9b0)
IsAdmin (Address: 0x1800eac98)
IsInAdminGroup (Address: 0x1800ea938)
IsLocalConnection (Address: 0x1800eaf38)
IsNtSetupRunning (Address: 0x1800eaec0)
isunialphanum (Address: 0x1800eac48)
ReadI64 (Address: 0x1800eaa70)
ReadUI64 (Address: 0x1800eaa98)
RegisterDLL (Address: 0x1800eab20)
Set_WPP_INIT_TRACING_Call_State (Address: 0x1800eab10)
TestDirExistAndCreateWithSDIfNotThere (Address: 0x1800eab88)
UnRegisterDLL (Address: 0x1800eab28)
WMIControlClientOpsCallback (Address: 0x1800eab40)