wbemcore.dll

Description: Windows Management Instrumentation

Version: 10.0.19041.1940

Architecture: 32-bit

Operating System: Windows NT

SHA256: d7811be5ec9ccb2c11063947eb51bde1

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 8:37 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xf4740)
DllGetClassObject (Ordinal: 2, Address: 0xf44b0)
DllRegisterServer (Ordinal: 3, Address: 0xf4ac0)
DllUnregisterServer (Ordinal: 4, Address: 0xf4c20)
Reinitialize (Ordinal: 5, Address: 0xf4eb0)
Shutdown (Ordinal: 6, Address: 0xf4d40)

Imported DLLs & Functions

ADVAPI32.dll

AccessCheck (Address: 0x10152004)
AllocateAndInitializeSid (Address: 0x10152034)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10152040)
EventActivityIdControl (Address: 0x10152048)
FreeSid (Address: 0x1015203c)
GetLengthSid (Address: 0x1015201c)
GetSecurityDescriptorControl (Address: 0x10152014)
GetSecurityDescriptorDacl (Address: 0x10152030)
GetSecurityDescriptorSacl (Address: 0x10152000)
GetSidSubAuthority (Address: 0x10152010)
GetSidSubAuthorityCount (Address: 0x1015200c)
GetTokenInformation (Address: 0x10152018)
IsValidSecurityDescriptor (Address: 0x10152038)
OpenThreadToken (Address: 0x10152044)
PrivilegeCheck (Address: 0x10152008)
RegCloseKey (Address: 0x1015204c)
RegCreateKeyExW (Address: 0x10152028)
RegDeleteKeyW (Address: 0x10152024)
RegDeleteValueW (Address: 0x10152020)
RegNotifyChangeKeyValue (Address: 0x10152050)
RegOpenKeyExW (Address: 0x10152058)
RegQueryValueExW (Address: 0x10152060)
RegSetValueExW (Address: 0x1015205c)
RevertToSelf (Address: 0x10152054)
SetThreadToken (Address: 0x1015202c)

api-ms-win-core-com-l1-1-0.dll

CoWaitForMultipleHandles (Address: 0x101526c8)

api-ms-win-core-heap-l1-1-0.dll

HeapReAlloc (Address: 0x101526d0)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeExW (Address: 0x101526d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersion (Address: 0x101526e0)

esscli.dll

??0CContextMetaData@@QAE@PAVCMetaData@@PAUIWbemContext@@@Z (Address: 0x101526ec)
??0CStandardMetaData@@QAE@PAUIWbemServices@@@Z (Address: 0x101526f4)
??1CContextMetaData@@QAE@XZ (Address: 0x101526fc)
??1CStandardMetaData@@UAE@XZ (Address: 0x101526e8)
?GetNecessaryQueryForClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PAUIWbemClassObject@@AAVCWStringArray@@AAPAU2@@Z (Address: 0x101526f0)
?SimplifyQueryForChild@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@AAPAU2@@Z (Address: 0x101526f8)

FastProx.dll

?_GetCoreInfo@CWbemObject@@UAGJJPAPAX@Z (Address: 0x101521f8)
??0CLimitationMapping@@QAE@XZ (Address: 0x10152484)
??0CWbemClass@@QAE@XZ (Address: 0x1015249c)
??0CWbemInstance@@QAE@XZ (Address: 0x10152380)
??1CLimitationMapping@@QAE@XZ (Address: 0x10152488)
??1CWbemClass@@UAE@XZ (Address: 0x10152280)
??1CWbemInstance@@UAE@XZ (Address: 0x1015237c)
?AddRef@CWbemObject@@UAGKXZ (Address: 0x10152124)
?AppendArrayPropRangeByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x10152068)
?AsymmetricMerge@CWbemInstance@@SGJPAV1@0@Z (Address: 0x10152458)
?BeginEnumeration@CWbemObject@@UAGJJ@Z (Address: 0x10152114)
?BeginEnumerationEx@CWbemObject@@UAGJJJ@Z (Address: 0x1015245c)
?BeginMethodEnumeration@CWbemClass@@UAGJJ@Z (Address: 0x10152190)
?BeginMethodEnumeration@CWbemInstance@@UAGJJ@Z (Address: 0x101523a0)
?CIMTYPEToVARTYPE@CWbemObject@@UAGJJPAG@Z (Address: 0x101522f4)
?ClearCachedKeyValue@CWbemInstance@@UAEXXZ (Address: 0x101523b0)
?ClearWriteOnlyProperties@CWbemClass@@UAGJXZ (Address: 0x10152420)
?ClearWriteOnlyProperties@CWbemInstance@@UAGJXZ (Address: 0x101522c0)
?Clone@CWbemClass@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x101521b8)
?Clone@CWbemInstance@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x10152304)
?CloneAndDecorate@CWbemClass@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x10152148)
?CloneAndDecorate@CWbemInstance@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1015228c)
?CloneEx@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1015216c)
?CloneEx@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101522b8)
?CompactAll@CWbemClass@@UAEXXZ (Address: 0x10152200)
?CompactAll@CWbemInstance@@UAEXXZ (Address: 0x101523e8)
?CompactClass@CWbemInstance@@QAEXXZ (Address: 0x10152448)
?CompareClassParts@CWbemObject@@UAGJPAUIWbemClassObject@@J@Z (Address: 0x10152288)
?CompareDerivedMostClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10152160)
?CompareDerivedMostClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101522ac)
?CompareTo@CWbemClass@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x101521a4)
?CompareTo@CWbemObject@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x101520fc)
?ConvertToClass@CWbemInstance@@QAEJPAVCWbemClass@@PAPAV1@@Z (Address: 0x10152470)
?CopyBlobOf@CWbemClass@@UAEJPAVCWbemObject@@@Z (Address: 0x101521fc)
?CopyBlobOf@CWbemInstance@@UAEJPAVCWbemObject@@@Z (Address: 0x10152324)
?CopyInstanceData@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10152168)
?CopyInstanceData@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101522b4)
?CreateDerivedClass@CWbemClass@@QAEJPAV1@HPAVCDecorationPart@@@Z (Address: 0x1015243c)
?Decorate@CWbemClass@@UAEJPBG0@Z (Address: 0x10152214)
?Decorate@CWbemInstance@@UAEJPBG0@Z (Address: 0x10152334)
?Delete@CWbemClass@@UAGJPBG@Z (Address: 0x101521c0)
?Delete@CWbemInstance@@UAGJPBG@Z (Address: 0x1015230c)
?DeleteMethod@CWbemClass@@UAGJPBG@Z (Address: 0x10152194)
?DeleteMethod@CWbemInstance@@UAGJPBG@Z (Address: 0x101523a4)
?DeleteProperty@CWbemInstance@@QAEJH@Z (Address: 0x10152450)
?DisconnectObject@CWbemObject@@UAGJK@Z (Address: 0x101520d8)
?EndEnumeration@CWbemObject@@UAGJXZ (Address: 0x10152100)
?EndMethodEnumeration@CWbemClass@@UAGJXZ (Address: 0x10152184)
?EndMethodEnumeration@CWbemInstance@@UAGJXZ (Address: 0x10152398)
?EstimateUnmergeSpace@CWbemClass@@UAEKXZ (Address: 0x101521f4)
?EstimateUnmergeSpace@CWbemInstance@@UAEKXZ (Address: 0x101523e4)
?ExtendClassPartSpace@CWbemInstance@@UAEHPAVCClassPart@@K@Z (Address: 0x101523c4)
?ExtendInstancePartSpace@CWbemInstance@@UAEHPAVCInstancePart@@K@Z (Address: 0x10152318)
?FindLimitationError@CWbemClass@@QAE?AVWString@@JPAVCWStringArray@@@Z (Address: 0x10152490)
?FindMethod@CWbemClass@@UAEJPBG@Z (Address: 0x10152234)
?FindMethod@CWbemObject@@UAEJPBG@Z (Address: 0x10152134)
?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z (Address: 0x1015211c)
?GetArrayPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x10152084)
?GetArrayPropElementByHandle@CWbemObject@@UAGJJJKPAK0PAPAX@Z (Address: 0x10152080)
?GetArrayPropInfoByHandle@CWbemObject@@UAGJJJPAPAGPAJPAK@Z (Address: 0x10152088)
?GetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAK0PAX@Z (Address: 0x10152074)
?GetBlockLength@CWbemClass@@MAEKXZ (Address: 0x101524a4)
?GetBlockLength@CWbemInstance@@MAEKXZ (Address: 0x1015241c)
?GetClassNameW@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101524b8)
?GetClassNameW@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101523e0)
?GetClassPart@CWbemClass@@MAEPAVCClassPart@@XZ (Address: 0x101524a8)
?GetClassPart@CWbemClass@@UAGJPAXKPAK@Z (Address: 0x1015242c)
?GetClassPart@CWbemInstance@@MAEPAVCClassPart@@XZ (Address: 0x10152414)
?GetClassPart@CWbemInstance@@UAGJPAXKPAK@Z (Address: 0x1015236c)
?GetClassSubset@CWbemClass@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1015215c)
?GetClassSubset@CWbemInstance@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x101522a8)
?GetDerivation@CWbemObject@@QAEJPAVCVar@@@Z (Address: 0x10152478)
?GetDerivation@CWbemObject@@UAGJJKPAK0PAG@Z (Address: 0x10152130)
?GetDescription@CWbemObject@@UAGJPAPAG@Z (Address: 0x101520d4)
?GetDynasty@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101521cc)
?GetDynasty@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1015231c)
?GetGenus@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101524c4)
?GetGenus@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101523d4)
?GetGUID@CWbemObject@@UAGJPAU_GUID@@@Z (Address: 0x101520d0)
?GetHelpContext@CWbemObject@@UAGJPAK@Z (Address: 0x101520cc)
?GetHelpFile@CWbemObject@@UAGJPAPAG@Z (Address: 0x101520c8)
?GetIndexedProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x101524c8)
?GetIndexedProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x101523d0)
?GetInstanceObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x101523b4)
?GetKeyOrigin@CWbemClass@@UAEJAAVWString@@@Z (Address: 0x101524d0)
?GetKeyOrigin@CWbemInstance@@UAEJAAVWString@@@Z (Address: 0x101523c8)
?GetKeyOrigin@CWbemObject@@UAGJJKPAKPAG@Z (Address: 0x1015212c)
?GetKeyProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x101524cc)
?GetKeyProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x101523cc)
?GetKeyString@CWbemObject@@UAGJJPAPAG@Z (Address: 0x101522bc)
?GetLimitedVersion@CWbemClass@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x10152494)
?GetLimitedVersion@CWbemInstance@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1015244c)
?GetMarshalSizeMax@CWbemObject@@UAGJABU_GUID@@PAXK1KPAK@Z (Address: 0x101520e8)
?GetMaxMarshalStreamSize@CWbemInstance@@UAEJPAK@Z (Address: 0x10152370)
?GetMaxMarshalStreamSize@CWbemObject@@UAEJPAK@Z (Address: 0x1015213c)
?GetMethod@CWbemClass@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1015219c)
?GetMethod@CWbemInstance@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x101523ac)
?GetMethodOrigin@CWbemClass@@UAGJPBGPAPAG@Z (Address: 0x1015217c)
?GetMethodOrigin@CWbemInstance@@UAGJPBGPAPAG@Z (Address: 0x10152390)
?GetMethodQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x101521a8)
?GetMethodQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10152248)
?GetMethodQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x10152240)
?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1015234c)
?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x10152348)
?GetMethodQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10152180)
?GetMethodQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10152394)
?GetNames@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAPAUtagSAFEARRAY@@@Z (Address: 0x10152118)
?GetNonsystemPropertyValue@CWbemInstance@@QAEJPBGPAVCVar@@@Z (Address: 0x10152464)
?GetNormalizedPath@CWbemObject@@UAGJJPAPAG@Z (Address: 0x101522d4)
?GetNumProperties@CWbemClass@@UAEHXZ (Address: 0x101524ac)
?GetNumProperties@CWbemInstance@@UAEHXZ (Address: 0x101523f4)
?GetObjectMemory@CWbemObject@@UAGJPAXKPAK@Z (Address: 0x10152244)
?GetObjectParts@CWbemClass@@UAGJPAXKKPAK@Z (Address: 0x10152434)
?GetObjectParts@CWbemInstance@@UAGJPAXKKPAK@Z (Address: 0x101522d0)
?GetObjectText@CWbemClass@@UAGJJPAPAG@Z (Address: 0x101521b4)
?GetObjectText@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x10152300)
?GetObjQual@CWbemObject@@UAGJPBGJKPAJPAK2PAX@Z (Address: 0x10152110)
?GetParentClassFromBlob@CWbemClass@@UAGJJKPAXPAPAG@Z (Address: 0x1015214c)
?GetParentClassFromBlob@CWbemObject@@UAGJJKPAXPAPAG@Z (Address: 0x101522ec)
?GetPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1015208c)
?GetProperty@CWbemClass@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x101524a0)
?GetProperty@CWbemClass@@UAEJPBGPAVCVar@@@Z (Address: 0x10152278)
?GetProperty@CWbemInstance@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x10152418)
?GetProperty@CWbemInstance@@UAEJPBGPAVCVar@@@Z (Address: 0x10152410)
?GetPropertyCount@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101524c0)
?GetPropertyCount@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101523d8)
?GetPropertyHandle@CWbemObject@@UAGJPBGPAJ1@Z (Address: 0x101520bc)
?GetPropertyHandleEx@CWbemObject@@UAGJPBGJPAJ1@Z (Address: 0x10152094)
?GetPropertyInfoByHandle@CWbemObject@@UAGJJPAPAGPAJ@Z (Address: 0x101520a0)
?GetPropertyOrigin@CWbemObject@@UAGJPBGPAPAG@Z (Address: 0x101520f8)
?GetPropertyQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x101521bc)
?GetPropertyQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10152308)
?GetPropertyType@CWbemClass@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x10152230)
?GetPropertyType@CWbemClass@@UAEJPBGPAJ1@Z (Address: 0x1015222c)
?GetPropertyType@CWbemInstance@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x10152368)
?GetPropertyType@CWbemInstance@@UAEJPBGPAJ1@Z (Address: 0x10152364)
?GetPropertyValue@CWbemObject@@UAGJPAU_tag_WbemPropertyName@@JPAPAGPAUtagVARIANT@@@Z (Address: 0x101520f0)
?GetPropName@CWbemClass@@UAEJHPAVCVar@@@Z (Address: 0x101524b0)
?GetPropName@CWbemInstance@@UAEJHPAVCVar@@@Z (Address: 0x101523f0)
?GetPropQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x10152188)
?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10152258)
?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x10152250)
?GetPropQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10152254)
?GetPropQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1015224c)
?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1015235c)
?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x10152358)
?GetPropQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x101523f8)
?GetPropQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x101523fc)
?GetQualifier@CWbemClass@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10152270)
?GetQualifier@CWbemClass@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1015226c)
?GetQualifier@CWbemInstance@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10152408)
?GetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1015240c)
?GetQualifierSet@CWbemClass@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x101521c8)
?GetQualifierSet@CWbemInstance@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x10152314)
?GetRelPath@CWbemClass@@UAEPAGH@Z (Address: 0x1015220c)
?GetRelPath@CWbemInstance@@UAEPAGH@Z (Address: 0x1015232c)
?GetSource@CWbemObject@@UAGJPAPAG@Z (Address: 0x101520c4)
?GetSuperclassName@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101524bc)
?GetSuperclassName@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101523dc)
?GetSystemPropertyByName@CWbemObject@@QAEJPBGPAVCVar@@@Z (Address: 0x10152460)
?GetUnmarshalClass@CWbemObject@@UAGJABU_GUID@@PAXK1KPAU2@@Z (Address: 0x101520ec)
?GetVARTYPE@CType@@SGGK@Z (Address: 0x10152444)
?GetWbemObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x101523b8)
?InheritsFrom@CWbemObject@@UAGJPBG@Z (Address: 0x101520f4)
?InitEmpty@CWbemClass@@QAEJHH@Z (Address: 0x10152474)
?InitNew@CWbemInstance@@QAEJPAVCWbemClass@@HPAVCDecorationPart@@@Z (Address: 0x10152438)
?IsAbstract@CWbemClass@@QAEHXZ (Address: 0x101522e4)
?IsAmendment@CWbemClass@@QAEHXZ (Address: 0x101522d8)
?IsDynamic@CWbemClass@@QAEHXZ (Address: 0x101522e8)
?IsIllegalDerivedClass@CSystemProperties@@SGHPBG@Z (Address: 0x10152480)
?IsInstanceOf@CWbemInstance@@QAEHPAVCWbemClass@@@Z (Address: 0x1015246c)
?IsKeyed@CWbemClass@@UAEHXZ (Address: 0x101524b4)
?IsKeyed@CWbemInstance@@UAEHXZ (Address: 0x101523ec)
?IsLocalized@CWbemClass@@UAEHXZ (Address: 0x1015221c)
?IsLocalized@CWbemInstance@@UAEHXZ (Address: 0x1015233c)
?IsObjectInstance@CWbemObject@@UAGJXZ (Address: 0x10152498)
?IsParentClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10152164)
?IsParentClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101522b0)
?IsValidObj@CWbemClass@@UAEJXZ (Address: 0x10152204)
?IsValidObj@CWbemInstance@@UAEJXZ (Address: 0x10152328)
?Lock@CWbemObject@@UAGJJ@Z (Address: 0x1015209c)
?MakeSubsetInst@CWbemClass@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x10152158)
?MakeSubsetInst@CWbemInstance@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x101522a4)
?MapLimitation@CWbemClass@@QAEHJPAVCWStringArray@@PAVCLimitationMapping@@@Z (Address: 0x1015248c)
?MarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAXK2K@Z (Address: 0x101520e4)
?Merge@CWbemClass@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x101521e4)
?Merge@CWbemInstance@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x101522a0)
?MergeAmended@CWbemObject@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101521ec)
?MergeAndDecorate@CWbemClass@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x10152144)
?MergeAndDecorate@CWbemInstance@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x10152284)
?MergeClassPart@CWbemClass@@UAGJPAUIWbemClassObject@@@Z (Address: 0x10152424)
?MergeClassPart@CWbemInstance@@UAGJPAUIWbemClassObject@@@Z (Address: 0x101522c4)
?Next@CWbemObject@@UAGJJPAPAGPAUtagVARIANT@@PAJ2@Z (Address: 0x10152104)
?NextMethod@CWbemClass@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1015218c)
?NextMethod@CWbemInstance@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1015239c)
?PlugKeyHoles@CWbemInstance@@QAEJXZ (Address: 0x10152468)
?Put@CWbemClass@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x101521c4)
?Put@CWbemInstance@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x10152310)
?PutMethod@CWbemClass@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x10152198)
?PutMethod@CWbemInstance@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x101523a8)
?QueryInterface@CWbemObject@@UAGJABU_GUID@@PAPAX@Z (Address: 0x10152128)
?QueryObjectFlags@CWbemObject@@UAGJJ_KPA_K@Z (Address: 0x101521d8)
?QueryPartInfo@CWbemObject@@UAGJPAK@Z (Address: 0x10152208)
?QueryPropertyFlags@CWbemObject@@UAGJJPBG_KPA_K@Z (Address: 0x101521e8)
?ReadDWORD@CWbemObject@@UAGJJPAK@Z (Address: 0x101520b0)
?ReadProp@CWbemObject@@UAGJPBGJKPAJ1PAHPAKPAX@Z (Address: 0x10152108)
?ReadPropertyValue@CWbemObject@@UAGJJJPAJPAE@Z (Address: 0x101520b4)
?ReadQWORD@CWbemObject@@UAGJJPA_K@Z (Address: 0x101520a8)
?ReconcileWith@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101521d4)
?ReconcileWith@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1015229c)
?ReduceClassPartSpace@CWbemInstance@@UAEXPAVCClassPart@@K@Z (Address: 0x101523c0)
?ReduceInstancePartSpace@CWbemInstance@@UAEXPAVCInstancePart@@K@Z (Address: 0x101523bc)
?Release@CWbemObject@@UAGKXZ (Address: 0x10152120)
?ReleaseMarshalData@CWbemObject@@UAGJPAUIStream@@@Z (Address: 0x101520dc)
?RemoveArrayPropElementByHandle@CWbemObject@@UAGJJJK@Z (Address: 0x10152078)
?RemoveArrayPropRangeByHandle@CWbemObject@@UAGJJJKK@Z (Address: 0x1015206c)
?RemoveDecoration@CWbemObject@@UAGJXZ (Address: 0x10152268)
?SetArrayPropElementByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1015207c)
?SetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAX@Z (Address: 0x10152070)
?SetClassPart@CWbemClass@@UAGJPAXK@Z (Address: 0x10152428)
?SetClassPart@CWbemInstance@@UAGJPAXK@Z (Address: 0x101522c8)
?SetData@CWbemClass@@UAEXPAEH@Z (Address: 0x1015227c)
?SetData@CWbemInstance@@UAEXPAEH@Z (Address: 0x10152378)
?SetDecoration@CWbemObject@@UAGJPBG0@Z (Address: 0x1015225c)
?SetInheritanceChain@CWbemClass@@UAGJJPAPAG@Z (Address: 0x101522f8)
?SetInheritanceChain@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1015238c)
?SetLocalized@CWbemClass@@UAEXH@Z (Address: 0x10152218)
?SetLocalized@CWbemInstance@@UAEXH@Z (Address: 0x10152338)
?SetMethodOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x10152170)
?SetMethodOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x10152384)
?SetMethodQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x101521d0)
?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1015223c)
?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10152238)
?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10152344)
?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10152340)
?SetObjectFlags@CWbemObject@@UAGJJ_K0@Z (Address: 0x101521dc)
?SetObjectMemory@CWbemObject@@UAGJPAXK@Z (Address: 0x10152220)
?SetObjectParts@CWbemClass@@UAGJPAXKK@Z (Address: 0x101524d4)
?SetObjectParts@CWbemInstance@@UAGJPAXKK@Z (Address: 0x101522dc)
?SetObjQual@CWbemObject@@UAGJPBGJKKJKPAX@Z (Address: 0x10152178)
?SetPropByHandle@CWbemObject@@UAGJJJKPAX@Z (Address: 0x10152090)
?SetPropertyOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x10152174)
?SetPropertyOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x10152388)
?SetPropQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x101521a0)
?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10152228)
?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10152224)
?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10152354)
?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10152350)
?SetPropValue@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x10152274)
?SetPropValue@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x10152360)
?SetQualifier@CWbemClass@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x10152264)
?SetQualifier@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x10152260)
?SetQualifier@CWbemInstance@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x10152400)
?SetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x10152404)
?SetServerNamespace@CWbemObject@@UAGJPBG0@Z (Address: 0x101520c0)
?SpawnDerivedClass@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101521b0)
?SpawnDerivedClass@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101522fc)
?SpawnInstance@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101521ac)
?SpawnInstance@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101522e0)
?SpawnKeyedInstance@CWbemClass@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x10152150)
?SpawnKeyedInstance@CWbemInstance@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x10152290)
?StripClassPart@CWbemClass@@UAGJXZ (Address: 0x10152430)
?StripClassPart@CWbemInstance@@UAGJXZ (Address: 0x101522cc)
?Undecorate@CWbemClass@@UAEXXZ (Address: 0x10152210)
?Undecorate@CWbemInstance@@UAEXXZ (Address: 0x10152330)
?Unlock@CWbemObject@@UAGJJ@Z (Address: 0x10152098)
?UnmarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAPAX@Z (Address: 0x101520e0)
?Unmerge@CWbemClass@@UAEJPAEHPAK@Z (Address: 0x101521f0)
?Unmerge@CWbemInstance@@UAEJPAEHPAK@Z (Address: 0x10152320)
?Unmerge@CWbemObject@@UAGJJKPAKPAX@Z (Address: 0x10152138)
?Update@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x101521e0)
?Update@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10152294)
?Upgrade@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10152154)
?Upgrade@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10152298)
?ValidateObject@CWbemObject@@UAGJJ@Z (Address: 0x101522f0)
?ValidateRange@CWbemObject@@QAEHPAPAG@Z (Address: 0x1015247c)
?WriteDWORD@CWbemObject@@UAGJJK@Z (Address: 0x101520ac)
?WriteProp@CWbemObject@@UAGJPBGJKKJPAX@Z (Address: 0x1015210c)
?WritePropertyValue@CWbemObject@@UAGJJJPBE@Z (Address: 0x101520b8)
?WriteQWORD@CWbemObject@@UAGJJ_K@Z (Address: 0x101520a4)
?WriteToStream@CWbemInstance@@UAEJPAUIStream@@@Z (Address: 0x10152374)
?WriteToStream@CWbemObject@@UAEJPAUIStream@@@Z (Address: 0x10152140)
WbemStringCopy (Address: 0x10152440)
WbemStringFree (Address: 0x10152454)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x101525cc)
AcquireSRWLockShared (Address: 0x10152614)
CloseHandle (Address: 0x101524f8)
CloseThreadpoolTimer (Address: 0x101525c8)
CompareStringW (Address: 0x101525dc)
CreateEventW (Address: 0x101524e8)
CreateFileW (Address: 0x10152558)
CreateMutexExW (Address: 0x10152600)
CreateSemaphoreExW (Address: 0x10152584)
CreateThread (Address: 0x101524fc)
CreateThreadpoolTimer (Address: 0x101525f8)
CreateTimerQueueTimer (Address: 0x10152514)
DebugBreak (Address: 0x10152618)
DeleteCriticalSection (Address: 0x10152534)
DeleteTimerQueueTimer (Address: 0x10152538)
EnterCriticalSection (Address: 0x10152518)
ExpandEnvironmentStringsW (Address: 0x10152598)
FileTimeToSystemTime (Address: 0x10152560)
FormatMessageW (Address: 0x101525a8)
FreeLibrary (Address: 0x1015254c)
GetComputerNameExW (Address: 0x10152528)
GetCurrentProcess (Address: 0x101525bc)
GetCurrentProcessId (Address: 0x10152574)
GetCurrentThread (Address: 0x1015256c)
GetCurrentThreadId (Address: 0x10152524)
GetFileAttributesExW (Address: 0x101525e8)
GetFileAttributesW (Address: 0x1015260c)
GetFileInformationByHandle (Address: 0x1015255c)
GetLastError (Address: 0x10152530)
GetLocalTime (Address: 0x101525d0)
GetModuleFileNameA (Address: 0x10152580)
GetModuleHandleExW (Address: 0x10152594)
GetModuleHandleW (Address: 0x10152624)
GetProcAddress (Address: 0x10152544)
GetProcessHeap (Address: 0x10152628)
GetProcessTimes (Address: 0x1015257c)
GetSystemDirectoryW (Address: 0x1015253c)
GetSystemInfo (Address: 0x101525f0)
GetSystemTime (Address: 0x1015261c)
GetSystemTimeAsFileTime (Address: 0x10152620)
GetTickCount (Address: 0x10152508)
GetTickCount64 (Address: 0x1015250c)
GetVersionExW (Address: 0x10152608)
GlobalMemoryStatusEx (Address: 0x10152548)
HeapAlloc (Address: 0x101525fc)
HeapFree (Address: 0x10152588)
InitializeCriticalSectionAndSpinCount (Address: 0x1015251c)
InitializeCriticalSectionEx (Address: 0x1015259c)
IsDebuggerPresent (Address: 0x10152610)
LCMapStringW (Address: 0x10152510)
LeaveCriticalSection (Address: 0x10152520)
LoadLibraryExW (Address: 0x10152550)
LocalFree (Address: 0x10152570)
lstrlenW (Address: 0x10152554)
MoveFileW (Address: 0x10152604)
OpenEventW (Address: 0x10152564)
OpenProcess (Address: 0x10152568)
OpenSemaphoreW (Address: 0x101525e0)
OutputDebugStringW (Address: 0x101525b0)
QueryPerformanceCounter (Address: 0x101525b4)
QueueUserWorkItem (Address: 0x1015252c)
ReleaseMutex (Address: 0x101525a4)
ReleaseSemaphore (Address: 0x10152590)
ReleaseSRWLockExclusive (Address: 0x101525ac)
ReleaseSRWLockShared (Address: 0x101525f4)
ResetEvent (Address: 0x10152540)
SetEvent (Address: 0x101524f0)
SetLastError (Address: 0x1015258c)
SetThreadpoolTimer (Address: 0x101525e4)
SetUnhandledExceptionFilter (Address: 0x101525c0)
Sleep (Address: 0x101524ec)
SystemTimeToFileTime (Address: 0x101525ec)
TerminateProcess (Address: 0x101525b8)
TlsAlloc (Address: 0x101524f4)
TlsFree (Address: 0x10152504)
TlsGetValue (Address: 0x10152500)
TlsSetValue (Address: 0x101524dc)
UnhandledExceptionFilter (Address: 0x101525c4)
WaitForMultipleObjectsEx (Address: 0x101524e0)
WaitForSingleObject (Address: 0x101524e4)
WaitForSingleObjectEx (Address: 0x101525d8)
WaitForThreadpoolTimerCallbacks (Address: 0x101525a0)
WideCharToMultiByte (Address: 0x10152578)
WriteFile (Address: 0x101525d4)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x101527b4)
__dllonexit (Address: 0x1015272c)
_amsg_exit (Address: 0x10152738)
_CxxThrowException (Address: 0x10152750)
_except_handler4_common (Address: 0x10152730)
_ftol2 (Address: 0x10152714)
_ftol2_sse (Address: 0x10152710)
_initterm (Address: 0x10152734)
_lock (Address: 0x10152744)
_onexit (Address: 0x10152728)
_purecall (Address: 0x101527b0)
_ui64tow_s (Address: 0x10152774)
_unlock (Address: 0x10152740)
_vsnprintf (Address: 0x10152718)
_vsnprintf_s (Address: 0x10152778)
_vsnwprintf (Address: 0x101527a4)
_wcsicmp (Address: 0x101527a0)
_wcslwr_s (Address: 0x10152760)
_wcsnicmp (Address: 0x101527a8)
_XcptFilter (Address: 0x1015273c)
??0exception@@QAE@ABQBD@Z (Address: 0x1015275c)
??0exception@@QAE@ABQBDH@Z (Address: 0x10152758)
??0exception@@QAE@ABV0@@Z (Address: 0x10152780)
??0exception@@QAE@XZ (Address: 0x10152784)
??1exception@@UAE@XZ (Address: 0x10152788)
??1type_info@@UAE@XZ (Address: 0x10152724)
?terminate@@YAXXZ (Address: 0x10152720)
?what@exception@@UBEPBDXZ (Address: 0x10152754)
atol (Address: 0x10152704)
free (Address: 0x10152798)
isdigit (Address: 0x10152794)
iswspace (Address: 0x1015276c)
iswxdigit (Address: 0x10152768)
malloc (Address: 0x10152790)
memcmp (Address: 0x1015271c)
memcpy (Address: 0x1015274c)
memcpy_s (Address: 0x1015278c)
memmove (Address: 0x10152748)
memmove_s (Address: 0x10152770)
memset (Address: 0x10152708)
sscanf_s (Address: 0x1015270c)
swprintf_s (Address: 0x1015277c)
wcschr (Address: 0x1015279c)
wcsstr (Address: 0x10152764)
wcstok (Address: 0x101527ac)

ntdll.dll

WinSqmAddToStream (Address: 0x101527c0)
WinSqmIsOptedIn (Address: 0x101527bc)

OLE32.dll

CLSIDFromString (Address: 0x10152658)
CoCreateInstance (Address: 0x10152644)
CoDisconnectObject (Address: 0x10152654)
CoGetCallContext (Address: 0x10152634)
CoImpersonateClient (Address: 0x10152638)
CoInitializeEx (Address: 0x1015264c)
CoRevertToSelf (Address: 0x1015265c)
CoSetProxyBlanket (Address: 0x10152630)
CoSwitchCallContext (Address: 0x10152640)
CoTaskMemFree (Address: 0x1015263c)
CoUninitialize (Address: 0x10152660)
CoUnmarshalInterface (Address: 0x10152648)
StringFromGUID2 (Address: 0x10152650)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x10152690)
SafeArrayCreate (Address: 0x10152684)
SafeArrayDestroy (Address: 0x10152678)
SafeArrayGetDim (Address: 0x101526ac)
SafeArrayGetElement (Address: 0x10152694)
SafeArrayGetLBound (Address: 0x101526a4)
SafeArrayGetUBound (Address: 0x1015267c)
SafeArrayPutElement (Address: 0x1015266c)
SafeArrayUnaccessData (Address: 0x1015268c)
SetErrorInfo (Address: 0x10152670)
SysAllocString (Address: 0x101526b0)
SysAllocStringByteLen (Address: 0x10152698)
SysAllocStringLen (Address: 0x101526a8)
SysFreeString (Address: 0x10152674)
SysStringLen (Address: 0x1015269c)
VariantChangeType (Address: 0x10152680)
VariantClear (Address: 0x10152668)
VariantCopy (Address: 0x101526a0)
VariantInit (Address: 0x10152688)

VERSION.dll

GetFileVersionInfoExW (Address: 0x101526bc)
GetFileVersionInfoSizeExW (Address: 0x101526b8)
VerQueryValueW (Address: 0x101526c0)

wbemcomn.dll

_IsValidElementName (Address: 0x10152948)
_ThrowMemoryException_ (Address: 0x10152abc)
?_Free@CMUILocale@@SGHPAX@Z (Address: 0x10152a90)
?_GetSystemDefaultLocale@CMUILocale@@SGJPAPAGK@Z (Address: 0x101528bc)
??0CCheckedInCritSec@@QAE@PAVCCritSec@@@Z (Address: 0x10152b64)
??0CClientOpsNode@@QAE@XZ (Address: 0x10152ab4)
??0CCritSec@@QAE@XZ (Address: 0x10152b80)
??0CDateTimeParser@@QAE@PBG@Z (Address: 0x1015287c)
??0CEventLog@@QAE@PBGABU_GUID@@K@Z (Address: 0x10152908)
??0CFlexArray@@QAE@AAV0@@Z (Address: 0x10152a58)
??0CFlexArray@@QAE@HH@Z (Address: 0x10152b9c)
??0CFlexQueue@@QAE@H@Z (Address: 0x10152b3c)
??0CIdentitySecurity@@QAE@_N@Z (Address: 0x10152acc)
??0CInCritSec@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x10152b90)
??0CInsertionString@@QAE@PBG@Z (Address: 0x10152ab0)
??0CInsertionString@@QAE@VCHex@@@Z (Address: 0x10152904)
??0CInsertionString@@QAE@XZ (Address: 0x10152b14)
??0CLike@@QAE@PBGG@Z (Address: 0x10152868)
??0CMUILocaleList@@QAE@XZ (Address: 0x101529c8)
??0CNtAce@@QAE@KKKAAVCNtSid@@@Z (Address: 0x10152968)
??0CNtAcl@@QAE@K@Z (Address: 0x1015298c)
??0CNtAcl@@QAE@PAU_ACL@@@Z (Address: 0x101527e0)
??0CNtSecurityDescriptor@@QAE@PAX@Z (Address: 0x101529a4)
??0CNtSecurityDescriptor@@QAE@XZ (Address: 0x101529a8)
??0CNtSid@@QAE@PAX@Z (Address: 0x101529e4)
??0CPropertyName@@QAE@XZ (Address: 0x10152848)
??0CSafeArray@@QAE@HHHH@Z (Address: 0x10152a3c)
??0CSafeArray@@QAE@PAUtagSAFEARRAY@@HHH@Z (Address: 0x101529fc)
??0CStaticCritSec@@QAE@XZ (Address: 0x10152b78)
??0CVar@@QAE@ABV0@@Z (Address: 0x10152938)
??0CVar@@QAE@E@Z (Address: 0x1015281c)
??0CVar@@QAE@FH@Z (Address: 0x10152824)
??0CVar@@QAE@HPAG@Z (Address: 0x10152a50)
??0CVar@@QAE@HVauto_bstr@@@Z (Address: 0x101528f4)
??0CVar@@QAE@J@Z (Address: 0x10152820)
??0CVar@@QAE@PAUtagVARIANT@@@Z (Address: 0x1015283c)
??0CVar@@QAE@PAVCVarVector@@H@Z (Address: 0x10152828)
??0CVar@@QAE@XZ (Address: 0x10152afc)
??0CVarVector@@QAE@HHH@Z (Address: 0x10152830)
??0CWbemCriticalSection@@QAE@XZ (Address: 0x101528e0)
??0CWQLScanner@@QAE@PAVCGenLexSource@@@Z (Address: 0x10152a64)
??0CWStringArray@@QAE@HH@Z (Address: 0x10152b20)
??0QL_LEVEL_1_TOKEN@@QAE@ABU0@@Z (Address: 0x10152860)
??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x10152894)
??0Registry@@QAE@PAUHKEY__@@KKPBG@Z (Address: 0x10152a24)
??0Registry@@QAE@PAUHKEY__@@KPBG@Z (Address: 0x10152ac0)
??0Registry@@QAE@PBGK@Z (Address: 0x10152a94)
??0WString@@QAE@ABV0@@Z (Address: 0x1015292c)
??0WString@@QAE@PAGH@Z (Address: 0x10152bb8)
??0WString@@QAE@PBG@Z (Address: 0x101529bc)
??0WString@@QAE@XZ (Address: 0x10152adc)
??0WString2@@QAE@PAGH@Z (Address: 0x10152a84)
??0WString2@@QAE@PBG@Z (Address: 0x10152b50)
??0WString2@@QAE@XZ (Address: 0x10152b4c)
??1CCheckedInCritSec@@QAE@XZ (Address: 0x10152b68)
??1CClientOpsNode@@QAE@XZ (Address: 0x10152ae8)
??1CCritSec@@QAE@XZ (Address: 0x10152b84)
??1CDateTimeParser@@QAE@XZ (Address: 0x10152880)
??1CEnterWbemCriticalSection@@QAE@XZ (Address: 0x101528c0)
??1CEventLog@@QAE@XZ (Address: 0x1015290c)
??1CFlexArray@@QAE@XZ (Address: 0x10152ba0)
??1CFlexQueue@@QAE@XZ (Address: 0x10152b40)
??1CIdentitySecurity@@QAE@XZ (Address: 0x10152ad0)
??1CInCritSec@@QAE@XZ (Address: 0x10152b94)
??1CInsertionString@@QAE@XZ (Address: 0x10152b18)
??1CLike@@QAE@XZ (Address: 0x1015286c)
??1CMUILocaleList@@QAE@XZ (Address: 0x101529cc)
??1CNtAce@@UAE@XZ (Address: 0x1015296c)
??1CNtAcl@@QAE@XZ (Address: 0x10152990)
??1CNtSecurityDescriptor@@QAE@XZ (Address: 0x101529ac)
??1CNtSid@@QAE@XZ (Address: 0x101529e8)
??1CPropertyName@@QAE@XZ (Address: 0x1015284c)
??1CSafeArray@@QAE@XZ (Address: 0x10152a40)
??1CStaticCritSec@@QAE@XZ (Address: 0x10152b7c)
??1CVar@@QAE@XZ (Address: 0x10152b00)
??1CVarVector@@QAE@XZ (Address: 0x10152834)
??1CWbemCriticalSection@@QAE@XZ (Address: 0x101528e4)
??1CWQLScanner@@QAE@XZ (Address: 0x10152a68)
??1CWStringArray@@QAE@XZ (Address: 0x10152b24)
??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x101528a4)
??1QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x10152864)
??1QL1_Parser@@UAE@XZ (Address: 0x10152898)
??1Registry@@QAE@XZ (Address: 0x10152ac4)
??1WString@@QAE@XZ (Address: 0x10152aa4)
??1WString2@@QAE@XZ (Address: 0x10152b58)
??4CNtSecurityDescriptor@@QAEAAV0@AAV0@@Z (Address: 0x101527f0)
??4CWStringArray@@QAEAAV0@AAV0@@Z (Address: 0x10152a78)
??4WString@@QAEAAV0@ABV0@@Z (Address: 0x1015288c)
??4WString@@QAEAAV0@PBG@Z (Address: 0x10152ae0)
??4WString2@@QAEAAV0@PBG@Z (Address: 0x10152b54)
??ACFlexArray@@QAEAAPAXH@Z (Address: 0x10152ba4)
??ACWStringArray@@QBEPAGH@Z (Address: 0x10152b0c)
??YWString@@QAEAAV0@PBG@Z (Address: 0x10152ae4)
??YWString2@@QAEAAV0@ABV0@@Z (Address: 0x10152a88)
??YWString2@@QAEAAV0@PBG@Z (Address: 0x10152b5c)
?AccessCheck@CIdentitySecurity@@QAEHXZ (Address: 0x10152ad4)
?Add@CFlexArray@@QAEHPAX@Z (Address: 0x10152b98)
?Add@CVarVector@@QAEHAAVCVar@@@Z (Address: 0x10152838)
?Add@CWStringArray@@QAEHPBG@Z (Address: 0x10152b28)
?AddAce@CNtAcl@@QAEHPAVCNtAce@@@Z (Address: 0x1015299c)
?AddChild@CClientOpsNode@@QAEXPAV1@@Z (Address: 0x101529e0)
?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x10152854)
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UAEXABVCPropertyName@@@Z (Address: 0x101528b0)
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x101528a8)
?AliasToTable@CWQLScanner@@QAEQAGPAG@Z (Address: 0x10152a5c)
?anyFailure@CStaticCritSec@@SGHXZ (Address: 0x10152928)
?Bind@CFlexArray@@QAEXAAV1@@Z (Address: 0x10152a74)
?BindPtr@WString@@QAEXPAG@Z (Address: 0x10152aa8)
?ChangeTypeTo@CVar@@QAEHG@Z (Address: 0x1015285c)
?CheckLangNeutral@CMUILocale@@SGJPBGPA_N@Z (Address: 0x101529f0)
?Close@CEventLog@@QAEHXZ (Address: 0x10152910)
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x10152b38)
?CoGetClassObject@CWbemInstallObject@@SGJABU_GUID@@KPAU_COSERVERINFO@@0PAPAX@Z (Address: 0x10152924)
?Compress@CFlexArray@@QAEXXZ (Address: 0x10152a70)
?ContainsSid@CNtAcl@@QAEHAAVCNtSid@@AAE@Z (Address: 0x101527e4)
?CreateInst@CWbemCallSecurity@@SGPAVIWbemCallSecurity@@XZ (Address: 0x10152a18)
?DeleteAce@CNtAcl@@QAEHH@Z (Address: 0x101527e8)
?DeleteSacl@CNtSecurityDescriptor@@QAEJXZ (Address: 0x10152800)
?DeleteValue@Registry@@QAEHPBG@Z (Address: 0x101528f8)
?Dequeue@CFlexQueue@@QAEPAXXZ (Address: 0x10152b48)
?Deserialize@CNtAce@@UAE_NPAE@Z (Address: 0x10152984)
?Empty@CFlexArray@@QAEXXZ (Address: 0x10152b74)
?Empty@CVar@@QAEXXZ (Address: 0x10152858)
?Empty@CWStringArray@@QAEXXZ (Address: 0x1015294c)
?Empty@WString@@QAEXXZ (Address: 0x1015293c)
?Empty@WString2@@QAEXXZ (Address: 0x10152b60)
?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x10152b44)
?Enter@CCheckedInCritSec@@QAEXXZ (Address: 0x10152aa0)
?Enter@CCritSec@@QAEXXZ (Address: 0x10152b88)
?Enter@CWbemCriticalSection@@QAEHK@Z (Address: 0x101528e8)
?EqualNoCase@WString@@QBEHPBG@Z (Address: 0x10152930)
?EqualNoCase@WString2@@QBEHPBG@Z (Address: 0x10152844)
?EscapeQuotes@WString2@@QBE?AV1@XZ (Address: 0x10152a8c)
?FillDMTF@CDateTimeParser@@QAEHPAGI@Z (Address: 0x10152884)
?FindStr@CWStringArray@@QAEHPBGH@Z (Address: 0x10152950)
?GetAccessMask@CNtAce@@UAEKXZ (Address: 0x10152978)
?GetAce@CNtAcl@@QAEPAVCNtAce@@H@Z (Address: 0x10152998)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x10152b1c)
?GetAt@CVarVector@@QAEAAVCVar@@H@Z (Address: 0x10152964)
?GetAt@CWStringArray@@QBEPAGH@Z (Address: 0x10152a4c)
?GetBinaryPath@CWbemInstallObject@@SGPBGXZ (Address: 0x1015291c)
?GetBSTR@CVar@@QAEPAGXZ (Address: 0x1015295c)
?GetBSTRAt@CSafeArray@@QAEPAGH@Z (Address: 0x10152a00)
?GetCultures@CMUILocaleList@@QAEPBGXZ (Address: 0x101529d8)
?GetDacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x101527f4)
?GetDacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x101529b0)
?GetDWORD@Registry@@QAEHPBGPAK@Z (Address: 0x10152ac8)
?GetDWORDStr@Registry@@QAEHPBGPAK@Z (Address: 0x10152a28)
?GetEmbeddedObject@CVar@@QAEPAUIUnknown@@XZ (Address: 0x10152840)
?GetFirst_ms_XXX_Locale@CMUILocaleList@@QAEJPAPAG@Z (Address: 0x101529d4)
?GetFlags@CNtAce@@UAEHXZ (Address: 0x10152974)
?GetLocales@CMUILocaleList@@QAEPBGXZ (Address: 0x101529dc)
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x10152a2c)
?GetNumAces@CNtAcl@@QAEHXZ (Address: 0x10152994)
?GetOwner@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x10152804)
?GetPersistentCfgValue@CPersistentConfig@@QAEHKAAK@Z (Address: 0x101528fc)
?GetQueueSize@CFlexQueue@@QBEHXZ (Address: 0x10152aac)
?GetReferencedAliases@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x10152a60)
?GetReferencedTables@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x10152878)
?GetRegistryPathCIMOM@CWbemInstallObject@@SGPBGXZ (Address: 0x10152b34)
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x10152920)
?GetSacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x101527f8)
?GetSacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x101529b8)
?GetSerializedSize@CNtAce@@UAEKXZ (Address: 0x1015297c)
?GetSid@CNtAce@@QAEPAVCNtSid@@XZ (Address: 0x101527dc)
?GetSize@CNtSecurityDescriptor@@QAEKXZ (Address: 0x10152810)
?GetStatus@CNtAce@@UAEKXZ (Address: 0x10152944)
?GetStr@Registry@@QAEHPBGPAPAG@Z (Address: 0x10152a98)
?GetStringAt@CPropertyName@@QBEPBGJ@Z (Address: 0x10152850)
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QAEPAGXZ (Address: 0x101528b4)
?GetType@CNtAce@@UAEHXZ (Address: 0x10152970)
?Init@CPublishWMIOperationEvent@@SGJXZ (Address: 0x101528f0)
?Initialize@CMUILocaleList@@QAEJPAG_N@Z (Address: 0x101529d0)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x10152b70)
?IsDataNull@CVar@@QAEHXZ (Address: 0x10152958)
?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x10152b30)
?IsUserInGroup@CNtSecurity@@SGHPAXAAVCNtSid@@PAH@Z (Address: 0x10152954)
?IsValid@CNtAcl@@QAEHXZ (Address: 0x101527d4)
?IsValid@CNtSid@@QAEHXZ (Address: 0x101527d0)
?LCID_To_ms_XXX_Format@CMUILocale@@SGJKPAGI@Z (Address: 0x101529f8)
?Leave@CCheckedInCritSec@@QAEXXZ (Address: 0x10152b6c)
?Leave@CCritSec@@QAEXXZ (Address: 0x10152b8c)
?Leave@CWbemCriticalSection@@QAEXXZ (Address: 0x101528ec)
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x101529f4)
?MakeInternalCopyOfThread@CWbemCallSecurity@@SGPAV1@XZ (Address: 0x101527c8)
?Match@CLike@@QAE_NPBG@Z (Address: 0x10152870)
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x101529ec)
?Open@CEventLog@@QAEHXZ (Address: 0x10152914)
?OrderAces@CNtAcl@@QAEPAV1@XZ (Address: 0x101527ec)
?Parse@CWQLScanner@@QAEHXZ (Address: 0x10152a6c)
?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1015289c)
?Peek@CFlexQueue@@QAEPAXXZ (Address: 0x10152af0)
?Publish@CPublishWMIOperationEvent@@SGJPAGKK0000K_K0H@Z (Address: 0x10152a04)
?PublishClientRequestFailure@CPublishWMIOperationEvent@@SGJPBGPAG1K10J0@Z (Address: 0x10152af8)
?PublishMethodExec@CPublishWMIOperationEvent@@SGJPAGKK000000K_K0H@Z (Address: 0x10152a08)
?PublishRepDelete@CPublishWMIOperationEvent@@SGJKPAGPAUIWbemContext@@K0_KH@Z (Address: 0x10152a10)
?PublishRepUpdate@CPublishWMIOperationEvent@@SGJKPAGKPAUIWbemContext@@K0_KH@Z (Address: 0x10152a14)
?PublishStop@CPublishWMIOperationEvent@@SGJKJPAG@Z (Address: 0x10152af4)
?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SGJPAGKK0K_K000K1H@Z (Address: 0x10152a0c)
?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXP6GJH@Z@Z (Address: 0x101528d4)
?Release@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x101528ac)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x10152ba8)
?RemoveAt@CWStringArray@@QAEHH@Z (Address: 0x10152a7c)
?RemoveSelf@CClientOpsNode@@QAEXXZ (Address: 0x10152aec)
?Report@CEventLog@@QAEHGABU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x10152b2c)
?Serialize@CNtAce@@UAE_NPAEI@Z (Address: 0x10152980)
?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x10152934)
?SetBSTR@CVar@@QAEHPAG@Z (Address: 0x10152a1c)
?SetBSTR@CVar@@QAEHVauto_bstr@@@Z (Address: 0x10152a20)
?SetBSTRAt@CSafeArray@@QAEHHPAG@Z (Address: 0x10152a44)
?SetDacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x101529b4)
?SetDMTF@CWbemTime@@QAEHPBG@Z (Address: 0x10152890)
?SetDWORD@Registry@@QAEHPBGK@Z (Address: 0x10152a30)
?SetDWORDStr@Registry@@QAEHPBGK@Z (Address: 0x10152a34)
?SetEmbeddedObject@CVar@@QAEXPAUIUnknown@@@Z (Address: 0x10152a54)
?SetFailure@CStaticCritSec@@SGXXZ (Address: 0x10152bb4)
?SetFlags@CNtAce@@UAEXJ@Z (Address: 0x10152940)
?SetGroup@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1015280c)
?SetLogingEnabled@CMemoryLog@@QAEX_N@Z (Address: 0x101528c8)
?SetOwner@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x10152808)
?SetSacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x101527fc)
?SetStr@Registry@@QAEHPBG0@Z (Address: 0x10152a38)
?SetVarVector@CVar@@QAEXPAVCVarVector@@H@Z (Address: 0x1015282c)
?Size@CVarVector@@QAEHXZ (Address: 0x101529c0)
?Size@CWStringArray@@QBEHXZ (Address: 0x10152b10)
?Trim@CSafeArray@@QAEHXZ (Address: 0x10152a48)
?UnbindPtr@WString2@@QAEPAGXZ (Address: 0x101528a0)
?Union@CWStringArray@@SGXAAV1@00@Z (Address: 0x10152a80)
?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXXZ (Address: 0x101528d8)
?ValidateMemSize@CWin32DefaultArena@@SGHH@Z (Address: 0x101528b8)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x10152b04)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x10152b08)
?WbemMemReAlloc@CWin32DefaultArena@@SGPAXPAXK@Z (Address: 0x101527cc)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x10152bb0)
BreakOnDbgAndRenterLoop (Address: 0x10152ab8)
BuildOperationInfo (Address: 0x101529a0)
BuildSecurityDescriptorParameter (Address: 0x10152818)
ComposeName (Address: 0x10152918)
GetAccessToken (Address: 0x10152bbc)
GetGlobalClientOps (Address: 0x101529c4)
GetMemLogObject (Address: 0x10152bac)
GetSecurityDescriptorFromParameters (Address: 0x10152814)
IsAdmin (Address: 0x10152988)
IsInAdminGroup (Address: 0x101527d8)
IsLocalConnection (Address: 0x10152ad8)
IsNtSetupRunning (Address: 0x10152a9c)
isunialphanum (Address: 0x10152960)
ReadI64 (Address: 0x10152874)
ReadUI64 (Address: 0x10152888)
RegisterDLL (Address: 0x101528cc)
Set_WPP_INIT_TRACING_Call_State (Address: 0x101528c4)
TestDirExistAndCreateWithSDIfNotThere (Address: 0x10152900)
UnRegisterDLL (Address: 0x101528d0)
WMIControlClientOpsCallback (Address: 0x101528dc)