wbemcore.dll
Description: Windows Management Instrumentation
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 32-bit
Operating System: Windows NT
SHA256: 4de8cdf642dd853fc79666f7a8ff4242
File Size: 1.4 MB
Uploaded At: Dec. 1, 2025, 8:37 a.m.
Views: 18
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0xef170)
- DllGetClassObject (Ordinal: 2, Address: 0xeeee0)
- DllRegisterServer (Ordinal: 3, Address: 0xef4f0)
- DllUnregisterServer (Ordinal: 4, Address: 0xef650)
- Reinitialize (Ordinal: 5, Address: 0xef8e0)
- Shutdown (Ordinal: 6, Address: 0xef770)
Imported DLLs & Functions
ADVAPI32.dll
- AccessCheck (Address: 0x1014a004)
- AllocateAndInitializeSid (Address: 0x1014a034)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1014a040)
- EventActivityIdControl (Address: 0x1014a048)
- FreeSid (Address: 0x1014a03c)
- GetLengthSid (Address: 0x1014a01c)
- GetSecurityDescriptorControl (Address: 0x1014a014)
- GetSecurityDescriptorDacl (Address: 0x1014a030)
- GetSecurityDescriptorSacl (Address: 0x1014a000)
- GetSidSubAuthority (Address: 0x1014a010)
- GetSidSubAuthorityCount (Address: 0x1014a00c)
- GetTokenInformation (Address: 0x1014a018)
- IsValidSecurityDescriptor (Address: 0x1014a038)
- OpenThreadToken (Address: 0x1014a044)
- PrivilegeCheck (Address: 0x1014a008)
- RegCloseKey (Address: 0x1014a04c)
- RegCreateKeyExW (Address: 0x1014a028)
- RegDeleteKeyW (Address: 0x1014a024)
- RegDeleteValueW (Address: 0x1014a020)
- RegNotifyChangeKeyValue (Address: 0x1014a050)
- RegOpenKeyExW (Address: 0x1014a058)
- RegQueryValueExW (Address: 0x1014a060)
- RegSetValueExW (Address: 0x1014a05c)
- RevertToSelf (Address: 0x1014a054)
- SetThreadToken (Address: 0x1014a02c)
api-ms-win-core-com-l1-1-0.dll
- CoWaitForMultipleHandles (Address: 0x1014a668)
api-ms-win-core-errorhandling-l1-1-0.dll
- SetLastError (Address: 0x1014a670)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1014a67c)
- HeapAlloc (Address: 0x1014a678)
- HeapFree (Address: 0x1014a680)
- HeapReAlloc (Address: 0x1014a684)
api-ms-win-core-string-l1-1-0.dll
- GetStringTypeExW (Address: 0x1014a68c)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetVersion (Address: 0x1014a694)
esscli.dll
- ??0CContextMetaData@@QAE@PAVCMetaData@@PAUIWbemContext@@@Z (Address: 0x1014a6a4)
- ??0CStandardMetaData@@QAE@PAUIWbemServices@@@Z (Address: 0x1014a6a0)
- ??1CContextMetaData@@QAE@XZ (Address: 0x1014a6b0)
- ??1CStandardMetaData@@UAE@XZ (Address: 0x1014a69c)
- ?GetNecessaryQueryForClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PAUIWbemClassObject@@AAVCWStringArray@@AAPAU2@@Z (Address: 0x1014a6ac)
- ?SimplifyQueryForChild@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@AAPAU2@@Z (Address: 0x1014a6a8)
FastProx.dll
- ?_GetCoreInfo@CWbemObject@@UAGJJPAPAX@Z (Address: 0x1014a1f0)
- ??0CLimitationMapping@@QAE@XZ (Address: 0x1014a434)
- ??0CWbemClass@@QAE@XZ (Address: 0x1014a44c)
- ??0CWbemInstance@@QAE@XZ (Address: 0x1014a384)
- ??1CLimitationMapping@@QAE@XZ (Address: 0x1014a438)
- ??1CWbemClass@@UAE@XZ (Address: 0x1014a2a8)
- ??1CWbemInstance@@UAE@XZ (Address: 0x1014a380)
- ?AddRef@CWbemObject@@UAGKXZ (Address: 0x1014a124)
- ?AppendArrayPropRangeByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1014a068)
- ?AsymmetricMerge@CWbemInstance@@SGJPAV1@0@Z (Address: 0x1014a40c)
- ?BeginEnumeration@CWbemObject@@UAGJJ@Z (Address: 0x1014a114)
- ?BeginEnumerationEx@CWbemObject@@UAGJJJ@Z (Address: 0x1014a42c)
- ?BeginMethodEnumeration@CWbemClass@@UAGJJ@Z (Address: 0x1014a190)
- ?BeginMethodEnumeration@CWbemInstance@@UAGJJ@Z (Address: 0x1014a3a4)
- ?CIMTYPEToVARTYPE@CWbemObject@@UAGJJPAG@Z (Address: 0x1014a284)
- ?ClearCachedKeyValue@CWbemInstance@@UAEXXZ (Address: 0x1014a3b4)
- ?ClearWriteOnlyProperties@CWbemClass@@UAGJXZ (Address: 0x1014a49c)
- ?ClearWriteOnlyProperties@CWbemInstance@@UAGJXZ (Address: 0x1014a2e0)
- ?Clone@CWbemClass@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1b8)
- ?Clone@CWbemInstance@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x1014a308)
- ?CloneAndDecorate@CWbemClass@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1014a148)
- ?CloneAndDecorate@CWbemInstance@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1014a2b0)
- ?CloneEx@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a16c)
- ?CloneEx@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2dc)
- ?CompactAll@CWbemClass@@UAEXXZ (Address: 0x1014a204)
- ?CompactAll@CWbemInstance@@UAEXXZ (Address: 0x1014a4d4)
- ?CompactClass@CWbemInstance@@QAEXXZ (Address: 0x1014a3fc)
- ?CompareClassParts@CWbemObject@@UAGJPAUIWbemClassObject@@J@Z (Address: 0x1014a234)
- ?CompareDerivedMostClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a160)
- ?CompareDerivedMostClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d0)
- ?CompareTo@CWbemClass@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x1014a1a8)
- ?CompareTo@CWbemObject@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x1014a0fc)
- ?ConvertToClass@CWbemInstance@@QAEJPAVCWbemClass@@PAPAV1@@Z (Address: 0x1014a420)
- ?CopyBlobOf@CWbemClass@@UAEJPAVCWbemObject@@@Z (Address: 0x1014a1fc)
- ?CopyBlobOf@CWbemInstance@@UAEJPAVCWbemObject@@@Z (Address: 0x1014a328)
- ?CopyInstanceData@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a168)
- ?CopyInstanceData@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d8)
- ?CreateDerivedClass@CWbemClass@@QAEJPAV1@HPAVCDecorationPart@@@Z (Address: 0x1014a3f0)
- ?Decorate@CWbemClass@@UAEJPBG0@Z (Address: 0x1014a218)
- ?Decorate@CWbemInstance@@UAEJPBG0@Z (Address: 0x1014a338)
- ?Delete@CWbemClass@@UAGJPBG@Z (Address: 0x1014a1c0)
- ?Delete@CWbemInstance@@UAGJPBG@Z (Address: 0x1014a310)
- ?DeleteMethod@CWbemClass@@UAGJPBG@Z (Address: 0x1014a194)
- ?DeleteMethod@CWbemInstance@@UAGJPBG@Z (Address: 0x1014a3a8)
- ?DeleteProperty@CWbemInstance@@QAEJH@Z (Address: 0x1014a404)
- ?DisconnectObject@CWbemObject@@UAGJK@Z (Address: 0x1014a0d8)
- ?EndEnumeration@CWbemObject@@UAGJXZ (Address: 0x1014a10c)
- ?EndMethodEnumeration@CWbemClass@@UAGJXZ (Address: 0x1014a188)
- ?EndMethodEnumeration@CWbemInstance@@UAGJXZ (Address: 0x1014a39c)
- ?EstimateUnmergeSpace@CWbemClass@@UAEKXZ (Address: 0x1014a1f8)
- ?EstimateUnmergeSpace@CWbemInstance@@UAEKXZ (Address: 0x1014a3e8)
- ?ExtendClassPartSpace@CWbemInstance@@UAEHPAVCClassPart@@K@Z (Address: 0x1014a3c8)
- ?ExtendInstancePartSpace@CWbemInstance@@UAEHPAVCInstancePart@@K@Z (Address: 0x1014a31c)
- ?FindLimitationError@CWbemClass@@QAE?AVWString@@JPAVCWStringArray@@@Z (Address: 0x1014a440)
- ?FindMethod@CWbemClass@@UAEJPBG@Z (Address: 0x1014a244)
- ?FindMethod@CWbemObject@@UAEJPBG@Z (Address: 0x1014a134)
- ?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z (Address: 0x1014a11c)
- ?GetArrayPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1014a084)
- ?GetArrayPropElementByHandle@CWbemObject@@UAGJJJKPAK0PAPAX@Z (Address: 0x1014a080)
- ?GetArrayPropInfoByHandle@CWbemObject@@UAGJJJPAPAGPAJPAK@Z (Address: 0x1014a088)
- ?GetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAK0PAX@Z (Address: 0x1014a074)
- ?GetBlockLength@CWbemClass@@MAEKXZ (Address: 0x1014a454)
- ?GetBlockLength@CWbemInstance@@MAEKXZ (Address: 0x1014a4a0)
- ?GetClassNameW@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a468)
- ?GetClassNameW@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3e4)
- ?GetClassPart@CWbemClass@@MAEPAVCClassPart@@XZ (Address: 0x1014a458)
- ?GetClassPart@CWbemClass@@UAGJPAXKPAK@Z (Address: 0x1014a490)
- ?GetClassPart@CWbemInstance@@MAEPAVCClassPart@@XZ (Address: 0x1014a4a8)
- ?GetClassPart@CWbemInstance@@UAGJPAXKPAK@Z (Address: 0x1014a370)
- ?GetClassSubset@CWbemClass@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a15c)
- ?GetClassSubset@CWbemInstance@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a2cc)
- ?GetDerivation@CWbemObject@@QAEJPAVCVar@@@Z (Address: 0x1014a428)
- ?GetDerivation@CWbemObject@@UAGJJKPAK0PAG@Z (Address: 0x1014a130)
- ?GetDescription@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0d4)
- ?GetDynasty@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a1d8)
- ?GetDynasty@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a320)
- ?GetGenus@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a474)
- ?GetGenus@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3d8)
- ?GetGUID@CWbemObject@@UAGJPAU_GUID@@@Z (Address: 0x1014a0d0)
- ?GetHelpContext@CWbemObject@@UAGJPAK@Z (Address: 0x1014a0cc)
- ?GetHelpFile@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0c8)
- ?GetIndexedProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a478)
- ?GetIndexedProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a3d4)
- ?GetInstanceObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x1014a3b8)
- ?GetKeyOrigin@CWbemClass@@UAEJAAVWString@@@Z (Address: 0x1014a480)
- ?GetKeyOrigin@CWbemInstance@@UAEJAAVWString@@@Z (Address: 0x1014a3cc)
- ?GetKeyOrigin@CWbemObject@@UAGJJKPAKPAG@Z (Address: 0x1014a12c)
- ?GetKeyProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a47c)
- ?GetKeyProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a3d0)
- ?GetKeyString@CWbemObject@@UAGJJPAPAG@Z (Address: 0x1014a24c)
- ?GetLimitedVersion@CWbemClass@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1014a444)
- ?GetLimitedVersion@CWbemInstance@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1014a400)
- ?GetMarshalSizeMax@CWbemObject@@UAGJABU_GUID@@PAXK1KPAK@Z (Address: 0x1014a0e8)
- ?GetMaxMarshalStreamSize@CWbemInstance@@UAEJPAK@Z (Address: 0x1014a374)
- ?GetMaxMarshalStreamSize@CWbemObject@@UAEJPAK@Z (Address: 0x1014a13c)
- ?GetMethod@CWbemClass@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1014a1a4)
- ?GetMethod@CWbemInstance@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1014a3b0)
- ?GetMethodOrigin@CWbemClass@@UAGJPBGPAPAG@Z (Address: 0x1014a17c)
- ?GetMethodOrigin@CWbemInstance@@UAGJPBGPAPAG@Z (Address: 0x1014a394)
- ?GetMethodQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x1014a1a0)
- ?GetMethodQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a258)
- ?GetMethodQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a254)
- ?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a350)
- ?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a34c)
- ?GetMethodQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a184)
- ?GetMethodQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a398)
- ?GetNames@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAPAUtagSAFEARRAY@@@Z (Address: 0x1014a118)
- ?GetNonsystemPropertyValue@CWbemInstance@@QAEJPBGPAVCVar@@@Z (Address: 0x1014a414)
- ?GetNormalizedPath@CWbemObject@@UAGJJPAPAG@Z (Address: 0x1014a264)
- ?GetNumProperties@CWbemClass@@UAEHXZ (Address: 0x1014a45c)
- ?GetNumProperties@CWbemInstance@@UAEHXZ (Address: 0x1014a4c8)
- ?GetObjectMemory@CWbemObject@@UAGJPAXKPAK@Z (Address: 0x1014a224)
- ?GetObjectParts@CWbemClass@@UAGJPAXKKPAK@Z (Address: 0x1014a488)
- ?GetObjectParts@CWbemInstance@@UAGJPAXKKPAK@Z (Address: 0x1014a2f4)
- ?GetObjectText@CWbemClass@@UAGJJPAPAG@Z (Address: 0x1014a1b4)
- ?GetObjectText@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1014a304)
- ?GetObjQual@CWbemObject@@UAGJPBGJKPAJPAK2PAX@Z (Address: 0x1014a108)
- ?GetParentClassFromBlob@CWbemClass@@UAGJJKPAXPAPAG@Z (Address: 0x1014a14c)
- ?GetParentClassFromBlob@CWbemObject@@UAGJJKPAXPAPAG@Z (Address: 0x1014a27c)
- ?GetPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1014a08c)
- ?GetProperty@CWbemClass@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x1014a450)
- ?GetProperty@CWbemClass@@UAEJPBGPAVCVar@@@Z (Address: 0x1014a2a0)
- ?GetProperty@CWbemInstance@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x1014a4a4)
- ?GetProperty@CWbemInstance@@UAEJPBGPAVCVar@@@Z (Address: 0x1014a4ac)
- ?GetPropertyCount@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a470)
- ?GetPropertyCount@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3dc)
- ?GetPropertyHandle@CWbemObject@@UAGJPBGPAJ1@Z (Address: 0x1014a0bc)
- ?GetPropertyHandleEx@CWbemObject@@UAGJPBGJPAJ1@Z (Address: 0x1014a094)
- ?GetPropertyInfoByHandle@CWbemObject@@UAGJJPAPAGPAJ@Z (Address: 0x1014a0a0)
- ?GetPropertyOrigin@CWbemObject@@UAGJPBGPAPAG@Z (Address: 0x1014a0f8)
- ?GetPropertyQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a1bc)
- ?GetPropertyQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a30c)
- ?GetPropertyType@CWbemClass@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x1014a240)
- ?GetPropertyType@CWbemClass@@UAEJPBGPAJ1@Z (Address: 0x1014a23c)
- ?GetPropertyType@CWbemInstance@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x1014a36c)
- ?GetPropertyType@CWbemInstance@@UAEJPBGPAJ1@Z (Address: 0x1014a368)
- ?GetPropertyValue@CWbemObject@@UAGJPAU_tag_WbemPropertyName@@JPAPAGPAUtagVARIANT@@@Z (Address: 0x1014a0f0)
- ?GetPropName@CWbemClass@@UAEJHPAVCVar@@@Z (Address: 0x1014a460)
- ?GetPropName@CWbemInstance@@UAEJHPAVCVar@@@Z (Address: 0x1014a4cc)
- ?GetPropQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x1014a180)
- ?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a270)
- ?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x1014a260)
- ?GetPropQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a26c)
- ?GetPropQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a25c)
- ?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a360)
- ?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x1014a35c)
- ?GetPropQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a4c4)
- ?GetPropQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a4c0)
- ?GetQualifier@CWbemClass@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a298)
- ?GetQualifier@CWbemClass@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1014a294)
- ?GetQualifier@CWbemInstance@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a4b4)
- ?GetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1014a4b0)
- ?GetQualifierSet@CWbemClass@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a1cc)
- ?GetQualifierSet@CWbemInstance@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a318)
- ?GetRelPath@CWbemClass@@UAEPAGH@Z (Address: 0x1014a20c)
- ?GetRelPath@CWbemInstance@@UAEPAGH@Z (Address: 0x1014a330)
- ?GetSource@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0c4)
- ?GetSuperclassName@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a46c)
- ?GetSuperclassName@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3e0)
- ?GetSystemPropertyByName@CWbemObject@@QAEJPBGPAVCVar@@@Z (Address: 0x1014a410)
- ?GetUnmarshalClass@CWbemObject@@UAGJABU_GUID@@PAXK1KPAU2@@Z (Address: 0x1014a0ec)
- ?GetVARTYPE@CType@@SGGK@Z (Address: 0x1014a3f8)
- ?GetWbemObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x1014a3bc)
- ?InheritsFrom@CWbemObject@@UAGJPBG@Z (Address: 0x1014a0f4)
- ?InitEmpty@CWbemClass@@QAEJHH@Z (Address: 0x1014a424)
- ?InitNew@CWbemInstance@@QAEJPAVCWbemClass@@HPAVCDecorationPart@@@Z (Address: 0x1014a3ec)
- ?IsAbstract@CWbemClass@@QAEHXZ (Address: 0x1014a274)
- ?IsAmendment@CWbemClass@@QAEHXZ (Address: 0x1014a268)
- ?IsDynamic@CWbemClass@@QAEHXZ (Address: 0x1014a278)
- ?IsIllegalDerivedClass@CSystemProperties@@SGHPBG@Z (Address: 0x1014a430)
- ?IsInstanceOf@CWbemInstance@@QAEHPAVCWbemClass@@@Z (Address: 0x1014a41c)
- ?IsKeyed@CWbemClass@@UAEHXZ (Address: 0x1014a464)
- ?IsKeyed@CWbemInstance@@UAEHXZ (Address: 0x1014a4d0)
- ?IsLocalized@CWbemClass@@UAEHXZ (Address: 0x1014a220)
- ?IsLocalized@CWbemInstance@@UAEHXZ (Address: 0x1014a340)
- ?IsObjectInstance@CWbemObject@@UAGJXZ (Address: 0x1014a448)
- ?IsParentClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a164)
- ?IsParentClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d4)
- ?IsValidObj@CWbemClass@@UAEJXZ (Address: 0x1014a208)
- ?IsValidObj@CWbemInstance@@UAEJXZ (Address: 0x1014a32c)
- ?Lock@CWbemObject@@UAGJJ@Z (Address: 0x1014a09c)
- ?MakeSubsetInst@CWbemClass@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x1014a158)
- ?MakeSubsetInst@CWbemInstance@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x1014a2c8)
- ?MapLimitation@CWbemClass@@QAEHJPAVCWStringArray@@PAVCLimitationMapping@@@Z (Address: 0x1014a43c)
- ?MarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAXK2K@Z (Address: 0x1014a0e4)
- ?Merge@CWbemClass@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x1014a1ec)
- ?Merge@CWbemInstance@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x1014a2c4)
- ?MergeAmended@CWbemObject@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a1e4)
- ?MergeAndDecorate@CWbemClass@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x1014a144)
- ?MergeAndDecorate@CWbemInstance@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x1014a2ac)
- ?MergeClassPart@CWbemClass@@UAGJPAUIWbemClassObject@@@Z (Address: 0x1014a498)
- ?MergeClassPart@CWbemInstance@@UAGJPAUIWbemClassObject@@@Z (Address: 0x1014a2e4)
- ?Next@CWbemObject@@UAGJJPAPAGPAUtagVARIANT@@PAJ2@Z (Address: 0x1014a110)
- ?NextMethod@CWbemClass@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1014a18c)
- ?NextMethod@CWbemInstance@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1014a3a0)
- ?PlugKeyHoles@CWbemInstance@@QAEJXZ (Address: 0x1014a418)
- ?Put@CWbemClass@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x1014a1c4)
- ?Put@CWbemInstance@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x1014a314)
- ?PutMethod@CWbemClass@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x1014a19c)
- ?PutMethod@CWbemInstance@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x1014a3ac)
- ?QueryInterface@CWbemObject@@UAGJABU_GUID@@PAPAX@Z (Address: 0x1014a128)
- ?QueryObjectFlags@CWbemObject@@UAGJJ_KPA_K@Z (Address: 0x1014a1d0)
- ?QueryPartInfo@CWbemObject@@UAGJPAK@Z (Address: 0x1014a200)
- ?QueryPropertyFlags@CWbemObject@@UAGJJPBG_KPA_K@Z (Address: 0x1014a1e0)
- ?ReadDWORD@CWbemObject@@UAGJJPAK@Z (Address: 0x1014a0b0)
- ?ReadProp@CWbemObject@@UAGJPBGJKPAJ1PAHPAKPAX@Z (Address: 0x1014a100)
- ?ReadPropertyValue@CWbemObject@@UAGJJJPAJPAE@Z (Address: 0x1014a0b4)
- ?ReadQWORD@CWbemObject@@UAGJJPA_K@Z (Address: 0x1014a0a8)
- ?ReconcileWith@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a1dc)
- ?ReconcileWith@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2c0)
- ?ReduceClassPartSpace@CWbemInstance@@UAEXPAVCClassPart@@K@Z (Address: 0x1014a3c4)
- ?ReduceInstancePartSpace@CWbemInstance@@UAEXPAVCInstancePart@@K@Z (Address: 0x1014a3c0)
- ?Release@CWbemObject@@UAGKXZ (Address: 0x1014a120)
- ?ReleaseMarshalData@CWbemObject@@UAGJPAUIStream@@@Z (Address: 0x1014a0dc)
- ?RemoveArrayPropElementByHandle@CWbemObject@@UAGJJJK@Z (Address: 0x1014a078)
- ?RemoveArrayPropRangeByHandle@CWbemObject@@UAGJJJKK@Z (Address: 0x1014a06c)
- ?RemoveDecoration@CWbemObject@@UAGJXZ (Address: 0x1014a230)
- ?SetArrayPropElementByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1014a07c)
- ?SetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAX@Z (Address: 0x1014a070)
- ?SetClassPart@CWbemClass@@UAGJPAXK@Z (Address: 0x1014a494)
- ?SetClassPart@CWbemInstance@@UAGJPAXK@Z (Address: 0x1014a2ec)
- ?SetData@CWbemClass@@UAEXPAEH@Z (Address: 0x1014a2a4)
- ?SetData@CWbemInstance@@UAEXPAEH@Z (Address: 0x1014a37c)
- ?SetDecoration@CWbemObject@@UAGJPBG0@Z (Address: 0x1014a22c)
- ?SetInheritanceChain@CWbemClass@@UAGJJPAPAG@Z (Address: 0x1014a178)
- ?SetInheritanceChain@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1014a390)
- ?SetLocalized@CWbemClass@@UAEXH@Z (Address: 0x1014a21c)
- ?SetLocalized@CWbemInstance@@UAEXH@Z (Address: 0x1014a33c)
- ?SetMethodOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x1014a170)
- ?SetMethodOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x1014a388)
- ?SetMethodQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x1014a1c8)
- ?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a250)
- ?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a248)
- ?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a348)
- ?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a344)
- ?SetObjectFlags@CWbemObject@@UAGJJ_K0@Z (Address: 0x1014a1d4)
- ?SetObjectMemory@CWbemObject@@UAGJPAXK@Z (Address: 0x1014a214)
- ?SetObjectParts@CWbemClass@@UAGJPAXKK@Z (Address: 0x1014a484)
- ?SetObjectParts@CWbemInstance@@UAGJPAXKK@Z (Address: 0x1014a2f8)
- ?SetObjQual@CWbemObject@@UAGJPBGJKKJKPAX@Z (Address: 0x1014a140)
- ?SetPropByHandle@CWbemObject@@UAGJJJKPAX@Z (Address: 0x1014a090)
- ?SetPropertyOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x1014a174)
- ?SetPropertyOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x1014a38c)
- ?SetPropQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x1014a198)
- ?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a238)
- ?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a228)
- ?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a358)
- ?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a354)
- ?SetPropValue@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a29c)
- ?SetPropValue@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a364)
- ?SetQualifier@CWbemClass@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x1014a290)
- ?SetQualifier@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a28c)
- ?SetQualifier@CWbemInstance@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x1014a4bc)
- ?SetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a4b8)
- ?SetServerNamespace@CWbemObject@@UAGJPBG0@Z (Address: 0x1014a0c0)
- ?SpawnDerivedClass@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1b0)
- ?SpawnDerivedClass@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a300)
- ?SpawnInstance@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1ac)
- ?SpawnInstance@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a2fc)
- ?SpawnKeyedInstance@CWbemClass@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a150)
- ?SpawnKeyedInstance@CWbemInstance@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a2b4)
- ?StripClassPart@CWbemClass@@UAGJXZ (Address: 0x1014a48c)
- ?StripClassPart@CWbemInstance@@UAGJXZ (Address: 0x1014a2f0)
- ?Undecorate@CWbemClass@@UAEXXZ (Address: 0x1014a210)
- ?Undecorate@CWbemInstance@@UAEXXZ (Address: 0x1014a334)
- ?Unlock@CWbemObject@@UAGJJ@Z (Address: 0x1014a098)
- ?UnmarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAPAX@Z (Address: 0x1014a0e0)
- ?Unmerge@CWbemClass@@UAEJPAEHPAK@Z (Address: 0x1014a1f4)
- ?Unmerge@CWbemInstance@@UAEJPAEHPAK@Z (Address: 0x1014a324)
- ?Unmerge@CWbemObject@@UAGJJKPAKPAX@Z (Address: 0x1014a138)
- ?Update@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a1e8)
- ?Update@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a2b8)
- ?Upgrade@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a154)
- ?Upgrade@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a2bc)
- ?ValidateObject@CWbemObject@@UAGJJ@Z (Address: 0x1014a280)
- ?ValidateRange@CWbemObject@@QAEHPAPAG@Z (Address: 0x1014a2e8)
- ?WriteDWORD@CWbemObject@@UAGJJK@Z (Address: 0x1014a0ac)
- ?WriteProp@CWbemObject@@UAGJPBGJKKJPAX@Z (Address: 0x1014a104)
- ?WritePropertyValue@CWbemObject@@UAGJJJPBE@Z (Address: 0x1014a0b8)
- ?WriteQWORD@CWbemObject@@UAGJJ_K@Z (Address: 0x1014a0a4)
- ?WriteToStream@CWbemInstance@@UAEJPAUIStream@@@Z (Address: 0x1014a378)
- ?WriteToStream@CWbemObject@@UAEJPAUIStream@@@Z (Address: 0x1014a288)
- WbemStringCopy (Address: 0x1014a3f4)
- WbemStringFree (Address: 0x1014a408)
KERNEL32.dll
- CloseHandle (Address: 0x1014a4fc)
- CompareStringW (Address: 0x1014a520)
- CreateEventW (Address: 0x1014a4ec)
- CreateFileW (Address: 0x1014a578)
- CreateThread (Address: 0x1014a500)
- CreateTimerQueueTimer (Address: 0x1014a518)
- DeleteCriticalSection (Address: 0x1014a550)
- DeleteTimerQueueTimer (Address: 0x1014a558)
- EnterCriticalSection (Address: 0x1014a51c)
- ExpandEnvironmentStringsW (Address: 0x1014a5a4)
- FileTimeToSystemTime (Address: 0x1014a580)
- FreeLibrary (Address: 0x1014a56c)
- GetComputerNameExW (Address: 0x1014a53c)
- GetCurrentProcess (Address: 0x1014a5c0)
- GetCurrentProcessId (Address: 0x1014a598)
- GetCurrentThread (Address: 0x1014a590)
- GetCurrentThreadId (Address: 0x1014a534)
- GetFileAttributesExW (Address: 0x1014a4e0)
- GetFileAttributesW (Address: 0x1014a5b4)
- GetFileInformationByHandle (Address: 0x1014a57c)
- GetLastError (Address: 0x1014a54c)
- GetLocalTime (Address: 0x1014a538)
- GetModuleHandleW (Address: 0x1014a5ac)
- GetProcAddress (Address: 0x1014a564)
- GetProcessTimes (Address: 0x1014a5a0)
- GetSystemDirectoryW (Address: 0x1014a55c)
- GetSystemInfo (Address: 0x1014a548)
- GetSystemTime (Address: 0x1014a5b0)
- GetSystemTimeAsFileTime (Address: 0x1014a52c)
- GetTickCount (Address: 0x1014a50c)
- GetTickCount64 (Address: 0x1014a510)
- GetVersionExW (Address: 0x1014a5b8)
- GlobalMemoryStatusEx (Address: 0x1014a568)
- InitializeCriticalSectionAndSpinCount (Address: 0x1014a524)
- InitializeCriticalSectionEx (Address: 0x1014a554)
- LCMapStringW (Address: 0x1014a514)
- LeaveCriticalSection (Address: 0x1014a528)
- LoadLibraryExW (Address: 0x1014a570)
- LocalFree (Address: 0x1014a594)
- lstrlenW (Address: 0x1014a574)
- MoveFileW (Address: 0x1014a5bc)
- OpenEventW (Address: 0x1014a584)
- OpenProcess (Address: 0x1014a58c)
- QueryPerformanceCounter (Address: 0x1014a5c4)
- QueueUserWorkItem (Address: 0x1014a540)
- ResetEvent (Address: 0x1014a560)
- SetEvent (Address: 0x1014a4f4)
- SetUnhandledExceptionFilter (Address: 0x1014a5a8)
- Sleep (Address: 0x1014a4f0)
- SystemTimeToFileTime (Address: 0x1014a544)
- TerminateProcess (Address: 0x1014a5c8)
- TlsAlloc (Address: 0x1014a4f8)
- TlsFree (Address: 0x1014a508)
- TlsGetValue (Address: 0x1014a504)
- TlsSetValue (Address: 0x1014a4dc)
- UnhandledExceptionFilter (Address: 0x1014a588)
- WaitForMultipleObjectsEx (Address: 0x1014a4e4)
- WaitForSingleObject (Address: 0x1014a4e8)
- WideCharToMultiByte (Address: 0x1014a59c)
- WriteFile (Address: 0x1014a530)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x1014a75c)
- __dllonexit (Address: 0x1014a6e0)
- _amsg_exit (Address: 0x1014a6ec)
- _CxxThrowException (Address: 0x1014a704)
- _except_handler4_common (Address: 0x1014a6e4)
- _ftol2 (Address: 0x1014a6c8)
- _ftol2_sse (Address: 0x1014a6c0)
- _initterm (Address: 0x1014a6e8)
- _lock (Address: 0x1014a6f8)
- _onexit (Address: 0x1014a6dc)
- _purecall (Address: 0x1014a758)
- _ui64tow_s (Address: 0x1014a72c)
- _unlock (Address: 0x1014a6f4)
- _vsnprintf (Address: 0x1014a6cc)
- _vsnwprintf (Address: 0x1014a74c)
- _wcsicmp (Address: 0x1014a748)
- _wcslwr_s (Address: 0x1014a720)
- _wcsnicmp (Address: 0x1014a750)
- _XcptFilter (Address: 0x1014a6f0)
- ??0exception@@QAE@ABQBD@Z (Address: 0x1014a718)
- ??0exception@@QAE@ABQBDH@Z (Address: 0x1014a714)
- ??0exception@@QAE@ABV0@@Z (Address: 0x1014a710)
- ??1exception@@UAE@XZ (Address: 0x1014a70c)
- ??1type_info@@UAE@XZ (Address: 0x1014a6d8)
- ?terminate@@YAXXZ (Address: 0x1014a6d4)
- ?what@exception@@UBEPBDXZ (Address: 0x1014a708)
- atol (Address: 0x1014a6b8)
- free (Address: 0x1014a740)
- isdigit (Address: 0x1014a73c)
- iswspace (Address: 0x1014a730)
- iswxdigit (Address: 0x1014a728)
- malloc (Address: 0x1014a738)
- memcmp (Address: 0x1014a6d0)
- memcpy (Address: 0x1014a700)
- memmove (Address: 0x1014a6fc)
- memmove_s (Address: 0x1014a71c)
- memset (Address: 0x1014a6bc)
- sscanf_s (Address: 0x1014a6c4)
- swprintf_s (Address: 0x1014a734)
- wcschr (Address: 0x1014a744)
- wcsstr (Address: 0x1014a724)
- wcstok (Address: 0x1014a754)
ntdll.dll
- WinSqmAddToStream (Address: 0x1014a768)
- WinSqmIsOptedIn (Address: 0x1014a764)
OLE32.dll
- CLSIDFromString (Address: 0x1014a5e8)
- CoCreateInstance (Address: 0x1014a5f4)
- CoDisconnectObject (Address: 0x1014a5d8)
- CoGetCallContext (Address: 0x1014a5e4)
- CoImpersonateClient (Address: 0x1014a600)
- CoInitializeEx (Address: 0x1014a5f0)
- CoRevertToSelf (Address: 0x1014a5dc)
- CoSetProxyBlanket (Address: 0x1014a5e0)
- CoSwitchCallContext (Address: 0x1014a5d0)
- CoTaskMemFree (Address: 0x1014a5ec)
- CoUninitialize (Address: 0x1014a5fc)
- CoUnmarshalInterface (Address: 0x1014a5f8)
- StringFromGUID2 (Address: 0x1014a5d4)
OLEAUT32.dll
- SafeArrayAccessData (Address: 0x1014a60c)
- SafeArrayCreate (Address: 0x1014a618)
- SafeArrayDestroy (Address: 0x1014a624)
- SafeArrayGetDim (Address: 0x1014a620)
- SafeArrayGetElement (Address: 0x1014a638)
- SafeArrayGetLBound (Address: 0x1014a630)
- SafeArrayGetUBound (Address: 0x1014a634)
- SafeArrayPutElement (Address: 0x1014a61c)
- SafeArrayUnaccessData (Address: 0x1014a608)
- SetErrorInfo (Address: 0x1014a650)
- SysAllocString (Address: 0x1014a62c)
- SysAllocStringByteLen (Address: 0x1014a64c)
- SysAllocStringLen (Address: 0x1014a614)
- SysFreeString (Address: 0x1014a644)
- SysStringLen (Address: 0x1014a648)
- VariantChangeType (Address: 0x1014a63c)
- VariantClear (Address: 0x1014a628)
- VariantCopy (Address: 0x1014a610)
- VariantInit (Address: 0x1014a640)
VERSION.dll
- GetFileVersionInfoExW (Address: 0x1014a65c)
- GetFileVersionInfoSizeExW (Address: 0x1014a660)
- VerQueryValueW (Address: 0x1014a658)
wbemcomn.dll
- _IsValidElementName (Address: 0x1014a8f0)
- _ThrowMemoryException_ (Address: 0x1014aa64)
- ?_Free@CMUILocale@@SGHPAX@Z (Address: 0x1014aa38)
- ?_GetSystemDefaultLocale@CMUILocale@@SGJPAPAGK@Z (Address: 0x1014a864)
- ??0CCheckedInCritSec@@QAE@PAVCCritSec@@@Z (Address: 0x1014ab0c)
- ??0CClientOpsNode@@QAE@XZ (Address: 0x1014aa5c)
- ??0CCritSec@@QAE@XZ (Address: 0x1014ab28)
- ??0CDateTimeParser@@QAE@PBG@Z (Address: 0x1014a824)
- ??0CEventLog@@QAE@PBGABU_GUID@@K@Z (Address: 0x1014a8b0)
- ??0CFlexArray@@QAE@AAV0@@Z (Address: 0x1014aa00)
- ??0CFlexArray@@QAE@HH@Z (Address: 0x1014ab44)
- ??0CFlexQueue@@QAE@H@Z (Address: 0x1014aae4)
- ??0CIdentitySecurity@@QAE@_N@Z (Address: 0x1014aa74)
- ??0CInCritSec@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1014ab38)
- ??0CInsertionString@@QAE@PBG@Z (Address: 0x1014aa58)
- ??0CInsertionString@@QAE@VCHex@@@Z (Address: 0x1014a8ac)
- ??0CInsertionString@@QAE@XZ (Address: 0x1014aabc)
- ??0CLike@@QAE@PBGG@Z (Address: 0x1014a810)
- ??0CMUILocaleList@@QAE@XZ (Address: 0x1014a970)
- ??0CNtAce@@QAE@KKKAAVCNtSid@@@Z (Address: 0x1014a914)
- ??0CNtAcl@@QAE@K@Z (Address: 0x1014a938)
- ??0CNtAcl@@QAE@PAU_ACL@@@Z (Address: 0x1014a788)
- ??0CNtSecurityDescriptor@@QAE@PAX@Z (Address: 0x1014a950)
- ??0CNtSecurityDescriptor@@QAE@XZ (Address: 0x1014a954)
- ??0CNtSid@@QAE@PAX@Z (Address: 0x1014a98c)
- ??0CPropertyName@@QAE@XZ (Address: 0x1014a7f0)
- ??0CSafeArray@@QAE@HHHH@Z (Address: 0x1014a9e4)
- ??0CSafeArray@@QAE@PAUtagSAFEARRAY@@HHH@Z (Address: 0x1014a9a4)
- ??0CStaticCritSec@@QAE@XZ (Address: 0x1014ab20)
- ??0CVar@@QAE@ABV0@@Z (Address: 0x1014a8e0)
- ??0CVar@@QAE@E@Z (Address: 0x1014a7c4)
- ??0CVar@@QAE@FH@Z (Address: 0x1014a7cc)
- ??0CVar@@QAE@HPAG@Z (Address: 0x1014a9f8)
- ??0CVar@@QAE@HVauto_bstr@@@Z (Address: 0x1014a89c)
- ??0CVar@@QAE@J@Z (Address: 0x1014a7c8)
- ??0CVar@@QAE@PAUtagVARIANT@@@Z (Address: 0x1014a7e4)
- ??0CVar@@QAE@PAVCVarVector@@H@Z (Address: 0x1014a7d0)
- ??0CVar@@QAE@XZ (Address: 0x1014aaa4)
- ??0CVarVector@@QAE@HHH@Z (Address: 0x1014a7d8)
- ??0CWbemCriticalSection@@QAE@XZ (Address: 0x1014a888)
- ??0CWQLScanner@@QAE@PAVCGenLexSource@@@Z (Address: 0x1014aa0c)
- ??0CWStringArray@@QAE@HH@Z (Address: 0x1014aac8)
- ??0QL_LEVEL_1_TOKEN@@QAE@ABU0@@Z (Address: 0x1014a808)
- ??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x1014a83c)
- ??0Registry@@QAE@PAUHKEY__@@KKPBG@Z (Address: 0x1014a9cc)
- ??0Registry@@QAE@PAUHKEY__@@KPBG@Z (Address: 0x1014aa68)
- ??0Registry@@QAE@PBGK@Z (Address: 0x1014aa3c)
- ??0WString@@QAE@ABV0@@Z (Address: 0x1014a8d4)
- ??0WString@@QAE@PAGH@Z (Address: 0x1014ab60)
- ??0WString@@QAE@PBG@Z (Address: 0x1014a968)
- ??0WString@@QAE@XZ (Address: 0x1014aa84)
- ??0WString2@@QAE@PAGH@Z (Address: 0x1014aa2c)
- ??0WString2@@QAE@PBG@Z (Address: 0x1014aaf8)
- ??0WString2@@QAE@XZ (Address: 0x1014aaf4)
- ??1CCheckedInCritSec@@QAE@XZ (Address: 0x1014ab10)
- ??1CClientOpsNode@@QAE@XZ (Address: 0x1014aa90)
- ??1CCritSec@@QAE@XZ (Address: 0x1014ab2c)
- ??1CDateTimeParser@@QAE@XZ (Address: 0x1014a828)
- ??1CEnterWbemCriticalSection@@QAE@XZ (Address: 0x1014a868)
- ??1CEventLog@@QAE@XZ (Address: 0x1014a8b4)
- ??1CFlexArray@@QAE@XZ (Address: 0x1014ab48)
- ??1CFlexQueue@@QAE@XZ (Address: 0x1014aae8)
- ??1CIdentitySecurity@@QAE@XZ (Address: 0x1014aa78)
- ??1CInCritSec@@QAE@XZ (Address: 0x1014ab3c)
- ??1CInsertionString@@QAE@XZ (Address: 0x1014aac0)
- ??1CLike@@QAE@XZ (Address: 0x1014a814)
- ??1CMUILocaleList@@QAE@XZ (Address: 0x1014a974)
- ??1CNtAce@@UAE@XZ (Address: 0x1014a918)
- ??1CNtAcl@@QAE@XZ (Address: 0x1014a93c)
- ??1CNtSecurityDescriptor@@QAE@XZ (Address: 0x1014a958)
- ??1CNtSid@@QAE@XZ (Address: 0x1014a990)
- ??1CPropertyName@@QAE@XZ (Address: 0x1014a7f4)
- ??1CSafeArray@@QAE@XZ (Address: 0x1014a9e8)
- ??1CStaticCritSec@@QAE@XZ (Address: 0x1014ab24)
- ??1CVar@@QAE@XZ (Address: 0x1014aaa8)
- ??1CVarVector@@QAE@XZ (Address: 0x1014a7dc)
- ??1CWbemCriticalSection@@QAE@XZ (Address: 0x1014a88c)
- ??1CWQLScanner@@QAE@XZ (Address: 0x1014aa10)
- ??1CWStringArray@@QAE@XZ (Address: 0x1014aacc)
- ??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x1014a84c)
- ??1QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x1014a80c)
- ??1QL1_Parser@@UAE@XZ (Address: 0x1014a840)
- ??1Registry@@QAE@XZ (Address: 0x1014aa6c)
- ??1WString@@QAE@XZ (Address: 0x1014aa4c)
- ??1WString2@@QAE@XZ (Address: 0x1014ab00)
- ??4CNtSecurityDescriptor@@QAEAAV0@AAV0@@Z (Address: 0x1014a798)
- ??4CWStringArray@@QAEAAV0@AAV0@@Z (Address: 0x1014aa20)
- ??4WString@@QAEAAV0@ABV0@@Z (Address: 0x1014a834)
- ??4WString@@QAEAAV0@PBG@Z (Address: 0x1014aa88)
- ??4WString2@@QAEAAV0@PBG@Z (Address: 0x1014aafc)
- ??ACFlexArray@@QAEAAPAXH@Z (Address: 0x1014ab4c)
- ??ACWStringArray@@QBEPAGH@Z (Address: 0x1014aab4)
- ??YWString@@QAEAAV0@PBG@Z (Address: 0x1014aa8c)
- ??YWString2@@QAEAAV0@ABV0@@Z (Address: 0x1014aa30)
- ??YWString2@@QAEAAV0@PBG@Z (Address: 0x1014ab04)
- ?AccessCheck@CIdentitySecurity@@QAEHXZ (Address: 0x1014aa7c)
- ?Add@CFlexArray@@QAEHPAX@Z (Address: 0x1014ab40)
- ?Add@CVarVector@@QAEHAAVCVar@@@Z (Address: 0x1014a7e0)
- ?Add@CWStringArray@@QAEHPBG@Z (Address: 0x1014aad0)
- ?AddAce@CNtAcl@@QAEHPAVCNtAce@@@Z (Address: 0x1014a948)
- ?AddChild@CClientOpsNode@@QAEXPAV1@@Z (Address: 0x1014a988)
- ?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x1014a7fc)
- ?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UAEXABVCPropertyName@@@Z (Address: 0x1014a858)
- ?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x1014a850)
- ?AliasToTable@CWQLScanner@@QAEQAGPAG@Z (Address: 0x1014aa04)
- ?anyFailure@CStaticCritSec@@SGHXZ (Address: 0x1014a8d0)
- ?Bind@CFlexArray@@QAEXAAV1@@Z (Address: 0x1014aa1c)
- ?BindPtr@WString@@QAEXPAG@Z (Address: 0x1014aa50)
- ?ChangeTypeTo@CVar@@QAEHG@Z (Address: 0x1014a804)
- ?CheckLangNeutral@CMUILocale@@SGJPBGPA_N@Z (Address: 0x1014a998)
- ?Close@CEventLog@@QAEHXZ (Address: 0x1014a8b8)
- ?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x1014aae0)
- ?CoGetClassObject@CWbemInstallObject@@SGJABU_GUID@@KPAU_COSERVERINFO@@0PAPAX@Z (Address: 0x1014a8cc)
- ?Compress@CFlexArray@@QAEXXZ (Address: 0x1014aa18)
- ?ContainsSid@CNtAcl@@QAEHAAVCNtSid@@AAE@Z (Address: 0x1014a78c)
- ?CreateInst@CWbemCallSecurity@@SGPAVIWbemCallSecurity@@XZ (Address: 0x1014a9c0)
- ?DeleteAce@CNtAcl@@QAEHH@Z (Address: 0x1014a790)
- ?DeleteSacl@CNtSecurityDescriptor@@QAEJXZ (Address: 0x1014a7a8)
- ?DeleteValue@Registry@@QAEHPBG@Z (Address: 0x1014a8a0)
- ?Dequeue@CFlexQueue@@QAEPAXXZ (Address: 0x1014aaf0)
- ?Deserialize@CNtAce@@UAE_NPAE@Z (Address: 0x1014a930)
- ?Empty@CFlexArray@@QAEXXZ (Address: 0x1014ab1c)
- ?Empty@CVar@@QAEXXZ (Address: 0x1014a800)
- ?Empty@CWStringArray@@QAEXXZ (Address: 0x1014a8f4)
- ?Empty@WString@@QAEXXZ (Address: 0x1014a8e4)
- ?Empty@WString2@@QAEXXZ (Address: 0x1014ab08)
- ?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x1014aaec)
- ?Enter@CCheckedInCritSec@@QAEXXZ (Address: 0x1014aa48)
- ?Enter@CCritSec@@QAEXXZ (Address: 0x1014ab30)
- ?Enter@CWbemCriticalSection@@QAEHK@Z (Address: 0x1014a890)
- ?EqualNoCase@WString@@QBEHPBG@Z (Address: 0x1014a8d8)
- ?EqualNoCase@WString2@@QBEHPBG@Z (Address: 0x1014a7ec)
- ?EscapeQuotes@WString2@@QBE?AV1@XZ (Address: 0x1014aa34)
- ?FillDMTF@CDateTimeParser@@QAEHPAGI@Z (Address: 0x1014a82c)
- ?FindStr@CWStringArray@@QAEHPBGH@Z (Address: 0x1014a8f8)
- ?GetAccessMask@CNtAce@@UAEKXZ (Address: 0x1014a924)
- ?GetAce@CNtAcl@@QAEPAVCNtAce@@H@Z (Address: 0x1014a944)
- ?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x1014aac4)
- ?GetAt@CVarVector@@QAEAAVCVar@@H@Z (Address: 0x1014a910)
- ?GetAt@CWStringArray@@QBEPAGH@Z (Address: 0x1014a9f4)
- ?GetBinaryPath@CWbemInstallObject@@SGPBGXZ (Address: 0x1014a8c4)
- ?GetBSTR@CVar@@QAEPAGXZ (Address: 0x1014a904)
- ?GetBSTRAt@CSafeArray@@QAEPAGH@Z (Address: 0x1014a9a8)
- ?GetCultures@CMUILocaleList@@QAEPBGXZ (Address: 0x1014a980)
- ?GetDacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x1014a79c)
- ?GetDacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x1014a95c)
- ?GetDWORD@Registry@@QAEHPBGPAK@Z (Address: 0x1014aa70)
- ?GetDWORDStr@Registry@@QAEHPBGPAK@Z (Address: 0x1014a9d0)
- ?GetEmbeddedObject@CVar@@QAEPAUIUnknown@@XZ (Address: 0x1014a7e8)
- ?GetFirst_ms_XXX_Locale@CMUILocaleList@@QAEJPAPAG@Z (Address: 0x1014a97c)
- ?GetFlags@CNtAce@@UAEHXZ (Address: 0x1014a920)
- ?GetLocales@CMUILocaleList@@QAEPBGXZ (Address: 0x1014a984)
- ?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x1014a9d4)
- ?GetNumAces@CNtAcl@@QAEHXZ (Address: 0x1014a940)
- ?GetOwner@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x1014a7ac)
- ?GetPersistentCfgValue@CPersistentConfig@@QAEHKAAK@Z (Address: 0x1014a8a4)
- ?GetQueueSize@CFlexQueue@@QBEHXZ (Address: 0x1014aa54)
- ?GetReferencedAliases@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x1014aa08)
- ?GetReferencedTables@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x1014a820)
- ?GetRegistryPathCIMOM@CWbemInstallObject@@SGPBGXZ (Address: 0x1014aadc)
- ?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x1014a8c8)
- ?GetSacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x1014a7a0)
- ?GetSacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x1014a964)
- ?GetSerializedSize@CNtAce@@UAEKXZ (Address: 0x1014a928)
- ?GetSid@CNtAce@@QAEPAVCNtSid@@XZ (Address: 0x1014a784)
- ?GetSize@CNtSecurityDescriptor@@QAEKXZ (Address: 0x1014a7b8)
- ?GetStatus@CNtAce@@UAEKXZ (Address: 0x1014a8ec)
- ?GetStr@Registry@@QAEHPBGPAPAG@Z (Address: 0x1014aa40)
- ?GetStringAt@CPropertyName@@QBEPBGJ@Z (Address: 0x1014a7f8)
- ?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QAEPAGXZ (Address: 0x1014a85c)
- ?GetType@CNtAce@@UAEHXZ (Address: 0x1014a91c)
- ?Init@CPublishWMIOperationEvent@@SGJXZ (Address: 0x1014a898)
- ?Initialize@CMUILocaleList@@QAEJPAG_N@Z (Address: 0x1014a978)
- ?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x1014ab18)
- ?IsDataNull@CVar@@QAEHXZ (Address: 0x1014a900)
- ?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x1014aad8)
- ?IsUserInGroup@CNtSecurity@@SGHPAXAAVCNtSid@@PAH@Z (Address: 0x1014a8fc)
- ?IsValid@CNtAcl@@QAEHXZ (Address: 0x1014a77c)
- ?IsValid@CNtSid@@QAEHXZ (Address: 0x1014a778)
- ?LCID_To_ms_XXX_Format@CMUILocale@@SGJKPAGI@Z (Address: 0x1014a9a0)
- ?Leave@CCheckedInCritSec@@QAEXXZ (Address: 0x1014ab14)
- ?Leave@CCritSec@@QAEXXZ (Address: 0x1014ab34)
- ?Leave@CWbemCriticalSection@@QAEXXZ (Address: 0x1014a894)
- ?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x1014a99c)
- ?MakeInternalCopyOfThread@CWbemCallSecurity@@SGPAV1@XZ (Address: 0x1014a770)
- ?Match@CLike@@QAE_NPBG@Z (Address: 0x1014a818)
- ?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x1014a994)
- ?Open@CEventLog@@QAEHXZ (Address: 0x1014a8bc)
- ?OrderAces@CNtAcl@@QAEPAV1@XZ (Address: 0x1014a794)
- ?Parse@CWQLScanner@@QAEHXZ (Address: 0x1014aa14)
- ?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1014a844)
- ?Peek@CFlexQueue@@QAEPAXXZ (Address: 0x1014aa98)
- ?Publish@CPublishWMIOperationEvent@@SGJPAGKK0000K_K0H@Z (Address: 0x1014a9ac)
- ?PublishClientRequestFailure@CPublishWMIOperationEvent@@SGJPBGPAG1K10J0@Z (Address: 0x1014aaa0)
- ?PublishMethodExec@CPublishWMIOperationEvent@@SGJPAGKK000000K_K0H@Z (Address: 0x1014a9b0)
- ?PublishRepDelete@CPublishWMIOperationEvent@@SGJKPAGPAUIWbemContext@@K0_KH@Z (Address: 0x1014a9b8)
- ?PublishRepUpdate@CPublishWMIOperationEvent@@SGJKPAGKPAUIWbemContext@@K0_KH@Z (Address: 0x1014a9bc)
- ?PublishStop@CPublishWMIOperationEvent@@SGJKJPAG@Z (Address: 0x1014aa9c)
- ?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SGJPAGKK0K_K000K1H@Z (Address: 0x1014a9b4)
- ?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXP6GJH@Z@Z (Address: 0x1014a87c)
- ?Release@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x1014a854)
- ?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x1014ab50)
- ?RemoveAt@CWStringArray@@QAEHH@Z (Address: 0x1014aa24)
- ?RemoveSelf@CClientOpsNode@@QAEXXZ (Address: 0x1014aa94)
- ?Report@CEventLog@@QAEHGABU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1014aad4)
- ?Serialize@CNtAce@@UAE_NPAEI@Z (Address: 0x1014a92c)
- ?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x1014a8dc)
- ?SetBSTR@CVar@@QAEHPAG@Z (Address: 0x1014a9c4)
- ?SetBSTR@CVar@@QAEHVauto_bstr@@@Z (Address: 0x1014a9c8)
- ?SetBSTRAt@CSafeArray@@QAEHHPAG@Z (Address: 0x1014a9ec)
- ?SetDacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x1014a960)
- ?SetDMTF@CWbemTime@@QAEHPBG@Z (Address: 0x1014a838)
- ?SetDWORD@Registry@@QAEHPBGK@Z (Address: 0x1014a9d8)
- ?SetDWORDStr@Registry@@QAEHPBGK@Z (Address: 0x1014a9dc)
- ?SetEmbeddedObject@CVar@@QAEXPAUIUnknown@@@Z (Address: 0x1014a9fc)
- ?SetFailure@CStaticCritSec@@SGXXZ (Address: 0x1014ab5c)
- ?SetFlags@CNtAce@@UAEXJ@Z (Address: 0x1014a8e8)
- ?SetGroup@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1014a7b4)
- ?SetLogingEnabled@CMemoryLog@@QAEX_N@Z (Address: 0x1014a870)
- ?SetOwner@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1014a7b0)
- ?SetSacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x1014a7a4)
- ?SetStr@Registry@@QAEHPBG0@Z (Address: 0x1014a9e0)
- ?SetVarVector@CVar@@QAEXPAVCVarVector@@H@Z (Address: 0x1014a7d4)
- ?Size@CVarVector@@QAEHXZ (Address: 0x1014a90c)
- ?Size@CWStringArray@@QBEHXZ (Address: 0x1014aab8)
- ?Trim@CSafeArray@@QAEHXZ (Address: 0x1014a9f0)
- ?UnbindPtr@WString2@@QAEPAGXZ (Address: 0x1014a848)
- ?Union@CWStringArray@@SGXAAV1@00@Z (Address: 0x1014aa28)
- ?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXXZ (Address: 0x1014a880)
- ?ValidateMemSize@CWin32DefaultArena@@SGHH@Z (Address: 0x1014a860)
- ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x1014aaac)
- ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x1014aab0)
- ?WbemMemReAlloc@CWin32DefaultArena@@SGPAXPAXK@Z (Address: 0x1014a774)
- ?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1014ab58)
- BreakOnDbgAndRenterLoop (Address: 0x1014aa60)
- BuildOperationInfo (Address: 0x1014a94c)
- BuildSecurityDescriptorParameter (Address: 0x1014a7c0)
- ComposeName (Address: 0x1014a8c0)
- GetAccessToken (Address: 0x1014ab64)
- GetGlobalClientOps (Address: 0x1014a96c)
- GetMemLogObject (Address: 0x1014ab54)
- GetSecurityDescriptorFromParameters (Address: 0x1014a7bc)
- IsAdmin (Address: 0x1014a934)
- IsInAdminGroup (Address: 0x1014a780)
- IsLocalConnection (Address: 0x1014aa80)
- IsNtSetupRunning (Address: 0x1014aa44)
- isunialphanum (Address: 0x1014a908)
- ReadI64 (Address: 0x1014a81c)
- ReadUI64 (Address: 0x1014a830)
- RegisterDLL (Address: 0x1014a874)
- Set_WPP_INIT_TRACING_Call_State (Address: 0x1014a86c)
- TestDirExistAndCreateWithSDIfNotThere (Address: 0x1014a8a8)
- UnRegisterDLL (Address: 0x1014a878)
- WMIControlClientOpsCallback (Address: 0x1014a884)