wbemcore.dll

Description: Windows Management Instrumentation

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1

Architecture: 32-bit

Operating System: Windows NT

SHA256: 4de8cdf642dd853fc79666f7a8ff4242

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 8:37 a.m.

Views: 18

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xef170)
  • DllGetClassObject (Ordinal: 2, Address: 0xeeee0)
  • DllRegisterServer (Ordinal: 3, Address: 0xef4f0)
  • DllUnregisterServer (Ordinal: 4, Address: 0xef650)
  • Reinitialize (Ordinal: 5, Address: 0xef8e0)
  • Shutdown (Ordinal: 6, Address: 0xef770)

Imported DLLs & Functions

ADVAPI32.dll
  • AccessCheck (Address: 0x1014a004)
  • AllocateAndInitializeSid (Address: 0x1014a034)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1014a040)
  • EventActivityIdControl (Address: 0x1014a048)
  • FreeSid (Address: 0x1014a03c)
  • GetLengthSid (Address: 0x1014a01c)
  • GetSecurityDescriptorControl (Address: 0x1014a014)
  • GetSecurityDescriptorDacl (Address: 0x1014a030)
  • GetSecurityDescriptorSacl (Address: 0x1014a000)
  • GetSidSubAuthority (Address: 0x1014a010)
  • GetSidSubAuthorityCount (Address: 0x1014a00c)
  • GetTokenInformation (Address: 0x1014a018)
  • IsValidSecurityDescriptor (Address: 0x1014a038)
  • OpenThreadToken (Address: 0x1014a044)
  • PrivilegeCheck (Address: 0x1014a008)
  • RegCloseKey (Address: 0x1014a04c)
  • RegCreateKeyExW (Address: 0x1014a028)
  • RegDeleteKeyW (Address: 0x1014a024)
  • RegDeleteValueW (Address: 0x1014a020)
  • RegNotifyChangeKeyValue (Address: 0x1014a050)
  • RegOpenKeyExW (Address: 0x1014a058)
  • RegQueryValueExW (Address: 0x1014a060)
  • RegSetValueExW (Address: 0x1014a05c)
  • RevertToSelf (Address: 0x1014a054)
  • SetThreadToken (Address: 0x1014a02c)
api-ms-win-core-com-l1-1-0.dll
  • CoWaitForMultipleHandles (Address: 0x1014a668)
api-ms-win-core-errorhandling-l1-1-0.dll
  • SetLastError (Address: 0x1014a670)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1014a67c)
  • HeapAlloc (Address: 0x1014a678)
  • HeapFree (Address: 0x1014a680)
  • HeapReAlloc (Address: 0x1014a684)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeExW (Address: 0x1014a68c)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetVersion (Address: 0x1014a694)
esscli.dll
  • ??0CContextMetaData@@QAE@PAVCMetaData@@PAUIWbemContext@@@Z (Address: 0x1014a6a4)
  • ??0CStandardMetaData@@QAE@PAUIWbemServices@@@Z (Address: 0x1014a6a0)
  • ??1CContextMetaData@@QAE@XZ (Address: 0x1014a6b0)
  • ??1CStandardMetaData@@UAE@XZ (Address: 0x1014a69c)
  • ?GetNecessaryQueryForClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PAUIWbemClassObject@@AAVCWStringArray@@AAPAU2@@Z (Address: 0x1014a6ac)
  • ?SimplifyQueryForChild@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@AAPAU2@@Z (Address: 0x1014a6a8)
FastProx.dll
  • ?_GetCoreInfo@CWbemObject@@UAGJJPAPAX@Z (Address: 0x1014a1f0)
  • ??0CLimitationMapping@@QAE@XZ (Address: 0x1014a434)
  • ??0CWbemClass@@QAE@XZ (Address: 0x1014a44c)
  • ??0CWbemInstance@@QAE@XZ (Address: 0x1014a384)
  • ??1CLimitationMapping@@QAE@XZ (Address: 0x1014a438)
  • ??1CWbemClass@@UAE@XZ (Address: 0x1014a2a8)
  • ??1CWbemInstance@@UAE@XZ (Address: 0x1014a380)
  • ?AddRef@CWbemObject@@UAGKXZ (Address: 0x1014a124)
  • ?AppendArrayPropRangeByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1014a068)
  • ?AsymmetricMerge@CWbemInstance@@SGJPAV1@0@Z (Address: 0x1014a40c)
  • ?BeginEnumeration@CWbemObject@@UAGJJ@Z (Address: 0x1014a114)
  • ?BeginEnumerationEx@CWbemObject@@UAGJJJ@Z (Address: 0x1014a42c)
  • ?BeginMethodEnumeration@CWbemClass@@UAGJJ@Z (Address: 0x1014a190)
  • ?BeginMethodEnumeration@CWbemInstance@@UAGJJ@Z (Address: 0x1014a3a4)
  • ?CIMTYPEToVARTYPE@CWbemObject@@UAGJJPAG@Z (Address: 0x1014a284)
  • ?ClearCachedKeyValue@CWbemInstance@@UAEXXZ (Address: 0x1014a3b4)
  • ?ClearWriteOnlyProperties@CWbemClass@@UAGJXZ (Address: 0x1014a49c)
  • ?ClearWriteOnlyProperties@CWbemInstance@@UAGJXZ (Address: 0x1014a2e0)
  • ?Clone@CWbemClass@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1b8)
  • ?Clone@CWbemInstance@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x1014a308)
  • ?CloneAndDecorate@CWbemClass@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1014a148)
  • ?CloneAndDecorate@CWbemInstance@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1014a2b0)
  • ?CloneEx@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a16c)
  • ?CloneEx@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2dc)
  • ?CompactAll@CWbemClass@@UAEXXZ (Address: 0x1014a204)
  • ?CompactAll@CWbemInstance@@UAEXXZ (Address: 0x1014a4d4)
  • ?CompactClass@CWbemInstance@@QAEXXZ (Address: 0x1014a3fc)
  • ?CompareClassParts@CWbemObject@@UAGJPAUIWbemClassObject@@J@Z (Address: 0x1014a234)
  • ?CompareDerivedMostClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a160)
  • ?CompareDerivedMostClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d0)
  • ?CompareTo@CWbemClass@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x1014a1a8)
  • ?CompareTo@CWbemObject@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x1014a0fc)
  • ?ConvertToClass@CWbemInstance@@QAEJPAVCWbemClass@@PAPAV1@@Z (Address: 0x1014a420)
  • ?CopyBlobOf@CWbemClass@@UAEJPAVCWbemObject@@@Z (Address: 0x1014a1fc)
  • ?CopyBlobOf@CWbemInstance@@UAEJPAVCWbemObject@@@Z (Address: 0x1014a328)
  • ?CopyInstanceData@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a168)
  • ?CopyInstanceData@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d8)
  • ?CreateDerivedClass@CWbemClass@@QAEJPAV1@HPAVCDecorationPart@@@Z (Address: 0x1014a3f0)
  • ?Decorate@CWbemClass@@UAEJPBG0@Z (Address: 0x1014a218)
  • ?Decorate@CWbemInstance@@UAEJPBG0@Z (Address: 0x1014a338)
  • ?Delete@CWbemClass@@UAGJPBG@Z (Address: 0x1014a1c0)
  • ?Delete@CWbemInstance@@UAGJPBG@Z (Address: 0x1014a310)
  • ?DeleteMethod@CWbemClass@@UAGJPBG@Z (Address: 0x1014a194)
  • ?DeleteMethod@CWbemInstance@@UAGJPBG@Z (Address: 0x1014a3a8)
  • ?DeleteProperty@CWbemInstance@@QAEJH@Z (Address: 0x1014a404)
  • ?DisconnectObject@CWbemObject@@UAGJK@Z (Address: 0x1014a0d8)
  • ?EndEnumeration@CWbemObject@@UAGJXZ (Address: 0x1014a10c)
  • ?EndMethodEnumeration@CWbemClass@@UAGJXZ (Address: 0x1014a188)
  • ?EndMethodEnumeration@CWbemInstance@@UAGJXZ (Address: 0x1014a39c)
  • ?EstimateUnmergeSpace@CWbemClass@@UAEKXZ (Address: 0x1014a1f8)
  • ?EstimateUnmergeSpace@CWbemInstance@@UAEKXZ (Address: 0x1014a3e8)
  • ?ExtendClassPartSpace@CWbemInstance@@UAEHPAVCClassPart@@K@Z (Address: 0x1014a3c8)
  • ?ExtendInstancePartSpace@CWbemInstance@@UAEHPAVCInstancePart@@K@Z (Address: 0x1014a31c)
  • ?FindLimitationError@CWbemClass@@QAE?AVWString@@JPAVCWStringArray@@@Z (Address: 0x1014a440)
  • ?FindMethod@CWbemClass@@UAEJPBG@Z (Address: 0x1014a244)
  • ?FindMethod@CWbemObject@@UAEJPBG@Z (Address: 0x1014a134)
  • ?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z (Address: 0x1014a11c)
  • ?GetArrayPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1014a084)
  • ?GetArrayPropElementByHandle@CWbemObject@@UAGJJJKPAK0PAPAX@Z (Address: 0x1014a080)
  • ?GetArrayPropInfoByHandle@CWbemObject@@UAGJJJPAPAGPAJPAK@Z (Address: 0x1014a088)
  • ?GetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAK0PAX@Z (Address: 0x1014a074)
  • ?GetBlockLength@CWbemClass@@MAEKXZ (Address: 0x1014a454)
  • ?GetBlockLength@CWbemInstance@@MAEKXZ (Address: 0x1014a4a0)
  • ?GetClassNameW@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a468)
  • ?GetClassNameW@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3e4)
  • ?GetClassPart@CWbemClass@@MAEPAVCClassPart@@XZ (Address: 0x1014a458)
  • ?GetClassPart@CWbemClass@@UAGJPAXKPAK@Z (Address: 0x1014a490)
  • ?GetClassPart@CWbemInstance@@MAEPAVCClassPart@@XZ (Address: 0x1014a4a8)
  • ?GetClassPart@CWbemInstance@@UAGJPAXKPAK@Z (Address: 0x1014a370)
  • ?GetClassSubset@CWbemClass@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a15c)
  • ?GetClassSubset@CWbemInstance@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a2cc)
  • ?GetDerivation@CWbemObject@@QAEJPAVCVar@@@Z (Address: 0x1014a428)
  • ?GetDerivation@CWbemObject@@UAGJJKPAK0PAG@Z (Address: 0x1014a130)
  • ?GetDescription@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0d4)
  • ?GetDynasty@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a1d8)
  • ?GetDynasty@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a320)
  • ?GetGenus@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a474)
  • ?GetGenus@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3d8)
  • ?GetGUID@CWbemObject@@UAGJPAU_GUID@@@Z (Address: 0x1014a0d0)
  • ?GetHelpContext@CWbemObject@@UAGJPAK@Z (Address: 0x1014a0cc)
  • ?GetHelpFile@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0c8)
  • ?GetIndexedProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a478)
  • ?GetIndexedProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a3d4)
  • ?GetInstanceObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x1014a3b8)
  • ?GetKeyOrigin@CWbemClass@@UAEJAAVWString@@@Z (Address: 0x1014a480)
  • ?GetKeyOrigin@CWbemInstance@@UAEJAAVWString@@@Z (Address: 0x1014a3cc)
  • ?GetKeyOrigin@CWbemObject@@UAGJJKPAKPAG@Z (Address: 0x1014a12c)
  • ?GetKeyProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a47c)
  • ?GetKeyProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x1014a3d0)
  • ?GetKeyString@CWbemObject@@UAGJJPAPAG@Z (Address: 0x1014a24c)
  • ?GetLimitedVersion@CWbemClass@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1014a444)
  • ?GetLimitedVersion@CWbemInstance@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1014a400)
  • ?GetMarshalSizeMax@CWbemObject@@UAGJABU_GUID@@PAXK1KPAK@Z (Address: 0x1014a0e8)
  • ?GetMaxMarshalStreamSize@CWbemInstance@@UAEJPAK@Z (Address: 0x1014a374)
  • ?GetMaxMarshalStreamSize@CWbemObject@@UAEJPAK@Z (Address: 0x1014a13c)
  • ?GetMethod@CWbemClass@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1014a1a4)
  • ?GetMethod@CWbemInstance@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1014a3b0)
  • ?GetMethodOrigin@CWbemClass@@UAGJPBGPAPAG@Z (Address: 0x1014a17c)
  • ?GetMethodOrigin@CWbemInstance@@UAGJPBGPAPAG@Z (Address: 0x1014a394)
  • ?GetMethodQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x1014a1a0)
  • ?GetMethodQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a258)
  • ?GetMethodQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a254)
  • ?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a350)
  • ?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a34c)
  • ?GetMethodQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a184)
  • ?GetMethodQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a398)
  • ?GetNames@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAPAUtagSAFEARRAY@@@Z (Address: 0x1014a118)
  • ?GetNonsystemPropertyValue@CWbemInstance@@QAEJPBGPAVCVar@@@Z (Address: 0x1014a414)
  • ?GetNormalizedPath@CWbemObject@@UAGJJPAPAG@Z (Address: 0x1014a264)
  • ?GetNumProperties@CWbemClass@@UAEHXZ (Address: 0x1014a45c)
  • ?GetNumProperties@CWbemInstance@@UAEHXZ (Address: 0x1014a4c8)
  • ?GetObjectMemory@CWbemObject@@UAGJPAXKPAK@Z (Address: 0x1014a224)
  • ?GetObjectParts@CWbemClass@@UAGJPAXKKPAK@Z (Address: 0x1014a488)
  • ?GetObjectParts@CWbemInstance@@UAGJPAXKKPAK@Z (Address: 0x1014a2f4)
  • ?GetObjectText@CWbemClass@@UAGJJPAPAG@Z (Address: 0x1014a1b4)
  • ?GetObjectText@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1014a304)
  • ?GetObjQual@CWbemObject@@UAGJPBGJKPAJPAK2PAX@Z (Address: 0x1014a108)
  • ?GetParentClassFromBlob@CWbemClass@@UAGJJKPAXPAPAG@Z (Address: 0x1014a14c)
  • ?GetParentClassFromBlob@CWbemObject@@UAGJJKPAXPAPAG@Z (Address: 0x1014a27c)
  • ?GetPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1014a08c)
  • ?GetProperty@CWbemClass@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x1014a450)
  • ?GetProperty@CWbemClass@@UAEJPBGPAVCVar@@@Z (Address: 0x1014a2a0)
  • ?GetProperty@CWbemInstance@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x1014a4a4)
  • ?GetProperty@CWbemInstance@@UAEJPBGPAVCVar@@@Z (Address: 0x1014a4ac)
  • ?GetPropertyCount@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a470)
  • ?GetPropertyCount@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3dc)
  • ?GetPropertyHandle@CWbemObject@@UAGJPBGPAJ1@Z (Address: 0x1014a0bc)
  • ?GetPropertyHandleEx@CWbemObject@@UAGJPBGJPAJ1@Z (Address: 0x1014a094)
  • ?GetPropertyInfoByHandle@CWbemObject@@UAGJJPAPAGPAJ@Z (Address: 0x1014a0a0)
  • ?GetPropertyOrigin@CWbemObject@@UAGJPBGPAPAG@Z (Address: 0x1014a0f8)
  • ?GetPropertyQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a1bc)
  • ?GetPropertyQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a30c)
  • ?GetPropertyType@CWbemClass@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x1014a240)
  • ?GetPropertyType@CWbemClass@@UAEJPBGPAJ1@Z (Address: 0x1014a23c)
  • ?GetPropertyType@CWbemInstance@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x1014a36c)
  • ?GetPropertyType@CWbemInstance@@UAEJPBGPAJ1@Z (Address: 0x1014a368)
  • ?GetPropertyValue@CWbemObject@@UAGJPAU_tag_WbemPropertyName@@JPAPAGPAUtagVARIANT@@@Z (Address: 0x1014a0f0)
  • ?GetPropName@CWbemClass@@UAEJHPAVCVar@@@Z (Address: 0x1014a460)
  • ?GetPropName@CWbemInstance@@UAEJHPAVCVar@@@Z (Address: 0x1014a4cc)
  • ?GetPropQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x1014a180)
  • ?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a270)
  • ?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x1014a260)
  • ?GetPropQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a26c)
  • ?GetPropQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a25c)
  • ?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a360)
  • ?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x1014a35c)
  • ?GetPropQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a4c4)
  • ?GetPropQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1014a4c0)
  • ?GetQualifier@CWbemClass@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a298)
  • ?GetQualifier@CWbemClass@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1014a294)
  • ?GetQualifier@CWbemInstance@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1014a4b4)
  • ?GetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1014a4b0)
  • ?GetQualifierSet@CWbemClass@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a1cc)
  • ?GetQualifierSet@CWbemInstance@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x1014a318)
  • ?GetRelPath@CWbemClass@@UAEPAGH@Z (Address: 0x1014a20c)
  • ?GetRelPath@CWbemInstance@@UAEPAGH@Z (Address: 0x1014a330)
  • ?GetSource@CWbemObject@@UAGJPAPAG@Z (Address: 0x1014a0c4)
  • ?GetSuperclassName@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x1014a46c)
  • ?GetSuperclassName@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1014a3e0)
  • ?GetSystemPropertyByName@CWbemObject@@QAEJPBGPAVCVar@@@Z (Address: 0x1014a410)
  • ?GetUnmarshalClass@CWbemObject@@UAGJABU_GUID@@PAXK1KPAU2@@Z (Address: 0x1014a0ec)
  • ?GetVARTYPE@CType@@SGGK@Z (Address: 0x1014a3f8)
  • ?GetWbemObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x1014a3bc)
  • ?InheritsFrom@CWbemObject@@UAGJPBG@Z (Address: 0x1014a0f4)
  • ?InitEmpty@CWbemClass@@QAEJHH@Z (Address: 0x1014a424)
  • ?InitNew@CWbemInstance@@QAEJPAVCWbemClass@@HPAVCDecorationPart@@@Z (Address: 0x1014a3ec)
  • ?IsAbstract@CWbemClass@@QAEHXZ (Address: 0x1014a274)
  • ?IsAmendment@CWbemClass@@QAEHXZ (Address: 0x1014a268)
  • ?IsDynamic@CWbemClass@@QAEHXZ (Address: 0x1014a278)
  • ?IsIllegalDerivedClass@CSystemProperties@@SGHPBG@Z (Address: 0x1014a430)
  • ?IsInstanceOf@CWbemInstance@@QAEHPAVCWbemClass@@@Z (Address: 0x1014a41c)
  • ?IsKeyed@CWbemClass@@UAEHXZ (Address: 0x1014a464)
  • ?IsKeyed@CWbemInstance@@UAEHXZ (Address: 0x1014a4d0)
  • ?IsLocalized@CWbemClass@@UAEHXZ (Address: 0x1014a220)
  • ?IsLocalized@CWbemInstance@@UAEHXZ (Address: 0x1014a340)
  • ?IsObjectInstance@CWbemObject@@UAGJXZ (Address: 0x1014a448)
  • ?IsParentClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a164)
  • ?IsParentClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2d4)
  • ?IsValidObj@CWbemClass@@UAEJXZ (Address: 0x1014a208)
  • ?IsValidObj@CWbemInstance@@UAEJXZ (Address: 0x1014a32c)
  • ?Lock@CWbemObject@@UAGJJ@Z (Address: 0x1014a09c)
  • ?MakeSubsetInst@CWbemClass@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x1014a158)
  • ?MakeSubsetInst@CWbemInstance@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x1014a2c8)
  • ?MapLimitation@CWbemClass@@QAEHJPAVCWStringArray@@PAVCLimitationMapping@@@Z (Address: 0x1014a43c)
  • ?MarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAXK2K@Z (Address: 0x1014a0e4)
  • ?Merge@CWbemClass@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x1014a1ec)
  • ?Merge@CWbemInstance@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x1014a2c4)
  • ?MergeAmended@CWbemObject@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a1e4)
  • ?MergeAndDecorate@CWbemClass@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x1014a144)
  • ?MergeAndDecorate@CWbemInstance@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x1014a2ac)
  • ?MergeClassPart@CWbemClass@@UAGJPAUIWbemClassObject@@@Z (Address: 0x1014a498)
  • ?MergeClassPart@CWbemInstance@@UAGJPAUIWbemClassObject@@@Z (Address: 0x1014a2e4)
  • ?Next@CWbemObject@@UAGJJPAPAGPAUtagVARIANT@@PAJ2@Z (Address: 0x1014a110)
  • ?NextMethod@CWbemClass@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1014a18c)
  • ?NextMethod@CWbemInstance@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1014a3a0)
  • ?PlugKeyHoles@CWbemInstance@@QAEJXZ (Address: 0x1014a418)
  • ?Put@CWbemClass@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x1014a1c4)
  • ?Put@CWbemInstance@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x1014a314)
  • ?PutMethod@CWbemClass@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x1014a19c)
  • ?PutMethod@CWbemInstance@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x1014a3ac)
  • ?QueryInterface@CWbemObject@@UAGJABU_GUID@@PAPAX@Z (Address: 0x1014a128)
  • ?QueryObjectFlags@CWbemObject@@UAGJJ_KPA_K@Z (Address: 0x1014a1d0)
  • ?QueryPartInfo@CWbemObject@@UAGJPAK@Z (Address: 0x1014a200)
  • ?QueryPropertyFlags@CWbemObject@@UAGJJPBG_KPA_K@Z (Address: 0x1014a1e0)
  • ?ReadDWORD@CWbemObject@@UAGJJPAK@Z (Address: 0x1014a0b0)
  • ?ReadProp@CWbemObject@@UAGJPBGJKPAJ1PAHPAKPAX@Z (Address: 0x1014a100)
  • ?ReadPropertyValue@CWbemObject@@UAGJJJPAJPAE@Z (Address: 0x1014a0b4)
  • ?ReadQWORD@CWbemObject@@UAGJJPA_K@Z (Address: 0x1014a0a8)
  • ?ReconcileWith@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a1dc)
  • ?ReconcileWith@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1014a2c0)
  • ?ReduceClassPartSpace@CWbemInstance@@UAEXPAVCClassPart@@K@Z (Address: 0x1014a3c4)
  • ?ReduceInstancePartSpace@CWbemInstance@@UAEXPAVCInstancePart@@K@Z (Address: 0x1014a3c0)
  • ?Release@CWbemObject@@UAGKXZ (Address: 0x1014a120)
  • ?ReleaseMarshalData@CWbemObject@@UAGJPAUIStream@@@Z (Address: 0x1014a0dc)
  • ?RemoveArrayPropElementByHandle@CWbemObject@@UAGJJJK@Z (Address: 0x1014a078)
  • ?RemoveArrayPropRangeByHandle@CWbemObject@@UAGJJJKK@Z (Address: 0x1014a06c)
  • ?RemoveDecoration@CWbemObject@@UAGJXZ (Address: 0x1014a230)
  • ?SetArrayPropElementByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1014a07c)
  • ?SetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAX@Z (Address: 0x1014a070)
  • ?SetClassPart@CWbemClass@@UAGJPAXK@Z (Address: 0x1014a494)
  • ?SetClassPart@CWbemInstance@@UAGJPAXK@Z (Address: 0x1014a2ec)
  • ?SetData@CWbemClass@@UAEXPAEH@Z (Address: 0x1014a2a4)
  • ?SetData@CWbemInstance@@UAEXPAEH@Z (Address: 0x1014a37c)
  • ?SetDecoration@CWbemObject@@UAGJPBG0@Z (Address: 0x1014a22c)
  • ?SetInheritanceChain@CWbemClass@@UAGJJPAPAG@Z (Address: 0x1014a178)
  • ?SetInheritanceChain@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1014a390)
  • ?SetLocalized@CWbemClass@@UAEXH@Z (Address: 0x1014a21c)
  • ?SetLocalized@CWbemInstance@@UAEXH@Z (Address: 0x1014a33c)
  • ?SetMethodOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x1014a170)
  • ?SetMethodOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x1014a388)
  • ?SetMethodQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x1014a1c8)
  • ?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a250)
  • ?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a248)
  • ?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a348)
  • ?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a344)
  • ?SetObjectFlags@CWbemObject@@UAGJJ_K0@Z (Address: 0x1014a1d4)
  • ?SetObjectMemory@CWbemObject@@UAGJPAXK@Z (Address: 0x1014a214)
  • ?SetObjectParts@CWbemClass@@UAGJPAXKK@Z (Address: 0x1014a484)
  • ?SetObjectParts@CWbemInstance@@UAGJPAXKK@Z (Address: 0x1014a2f8)
  • ?SetObjQual@CWbemObject@@UAGJPBGJKKJKPAX@Z (Address: 0x1014a140)
  • ?SetPropByHandle@CWbemObject@@UAGJJJKPAX@Z (Address: 0x1014a090)
  • ?SetPropertyOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x1014a174)
  • ?SetPropertyOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x1014a38c)
  • ?SetPropQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x1014a198)
  • ?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a238)
  • ?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a228)
  • ?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1014a358)
  • ?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x1014a354)
  • ?SetPropValue@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a29c)
  • ?SetPropValue@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a364)
  • ?SetQualifier@CWbemClass@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x1014a290)
  • ?SetQualifier@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a28c)
  • ?SetQualifier@CWbemInstance@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x1014a4bc)
  • ?SetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x1014a4b8)
  • ?SetServerNamespace@CWbemObject@@UAGJPBG0@Z (Address: 0x1014a0c0)
  • ?SpawnDerivedClass@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1b0)
  • ?SpawnDerivedClass@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a300)
  • ?SpawnInstance@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a1ac)
  • ?SpawnInstance@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x1014a2fc)
  • ?SpawnKeyedInstance@CWbemClass@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a150)
  • ?SpawnKeyedInstance@CWbemInstance@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x1014a2b4)
  • ?StripClassPart@CWbemClass@@UAGJXZ (Address: 0x1014a48c)
  • ?StripClassPart@CWbemInstance@@UAGJXZ (Address: 0x1014a2f0)
  • ?Undecorate@CWbemClass@@UAEXXZ (Address: 0x1014a210)
  • ?Undecorate@CWbemInstance@@UAEXXZ (Address: 0x1014a334)
  • ?Unlock@CWbemObject@@UAGJJ@Z (Address: 0x1014a098)
  • ?UnmarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAPAX@Z (Address: 0x1014a0e0)
  • ?Unmerge@CWbemClass@@UAEJPAEHPAK@Z (Address: 0x1014a1f4)
  • ?Unmerge@CWbemInstance@@UAEJPAEHPAK@Z (Address: 0x1014a324)
  • ?Unmerge@CWbemObject@@UAGJJKPAKPAX@Z (Address: 0x1014a138)
  • ?Update@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a1e8)
  • ?Update@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a2b8)
  • ?Upgrade@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a154)
  • ?Upgrade@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x1014a2bc)
  • ?ValidateObject@CWbemObject@@UAGJJ@Z (Address: 0x1014a280)
  • ?ValidateRange@CWbemObject@@QAEHPAPAG@Z (Address: 0x1014a2e8)
  • ?WriteDWORD@CWbemObject@@UAGJJK@Z (Address: 0x1014a0ac)
  • ?WriteProp@CWbemObject@@UAGJPBGJKKJPAX@Z (Address: 0x1014a104)
  • ?WritePropertyValue@CWbemObject@@UAGJJJPBE@Z (Address: 0x1014a0b8)
  • ?WriteQWORD@CWbemObject@@UAGJJ_K@Z (Address: 0x1014a0a4)
  • ?WriteToStream@CWbemInstance@@UAEJPAUIStream@@@Z (Address: 0x1014a378)
  • ?WriteToStream@CWbemObject@@UAEJPAUIStream@@@Z (Address: 0x1014a288)
  • WbemStringCopy (Address: 0x1014a3f4)
  • WbemStringFree (Address: 0x1014a408)
KERNEL32.dll
  • CloseHandle (Address: 0x1014a4fc)
  • CompareStringW (Address: 0x1014a520)
  • CreateEventW (Address: 0x1014a4ec)
  • CreateFileW (Address: 0x1014a578)
  • CreateThread (Address: 0x1014a500)
  • CreateTimerQueueTimer (Address: 0x1014a518)
  • DeleteCriticalSection (Address: 0x1014a550)
  • DeleteTimerQueueTimer (Address: 0x1014a558)
  • EnterCriticalSection (Address: 0x1014a51c)
  • ExpandEnvironmentStringsW (Address: 0x1014a5a4)
  • FileTimeToSystemTime (Address: 0x1014a580)
  • FreeLibrary (Address: 0x1014a56c)
  • GetComputerNameExW (Address: 0x1014a53c)
  • GetCurrentProcess (Address: 0x1014a5c0)
  • GetCurrentProcessId (Address: 0x1014a598)
  • GetCurrentThread (Address: 0x1014a590)
  • GetCurrentThreadId (Address: 0x1014a534)
  • GetFileAttributesExW (Address: 0x1014a4e0)
  • GetFileAttributesW (Address: 0x1014a5b4)
  • GetFileInformationByHandle (Address: 0x1014a57c)
  • GetLastError (Address: 0x1014a54c)
  • GetLocalTime (Address: 0x1014a538)
  • GetModuleHandleW (Address: 0x1014a5ac)
  • GetProcAddress (Address: 0x1014a564)
  • GetProcessTimes (Address: 0x1014a5a0)
  • GetSystemDirectoryW (Address: 0x1014a55c)
  • GetSystemInfo (Address: 0x1014a548)
  • GetSystemTime (Address: 0x1014a5b0)
  • GetSystemTimeAsFileTime (Address: 0x1014a52c)
  • GetTickCount (Address: 0x1014a50c)
  • GetTickCount64 (Address: 0x1014a510)
  • GetVersionExW (Address: 0x1014a5b8)
  • GlobalMemoryStatusEx (Address: 0x1014a568)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1014a524)
  • InitializeCriticalSectionEx (Address: 0x1014a554)
  • LCMapStringW (Address: 0x1014a514)
  • LeaveCriticalSection (Address: 0x1014a528)
  • LoadLibraryExW (Address: 0x1014a570)
  • LocalFree (Address: 0x1014a594)
  • lstrlenW (Address: 0x1014a574)
  • MoveFileW (Address: 0x1014a5bc)
  • OpenEventW (Address: 0x1014a584)
  • OpenProcess (Address: 0x1014a58c)
  • QueryPerformanceCounter (Address: 0x1014a5c4)
  • QueueUserWorkItem (Address: 0x1014a540)
  • ResetEvent (Address: 0x1014a560)
  • SetEvent (Address: 0x1014a4f4)
  • SetUnhandledExceptionFilter (Address: 0x1014a5a8)
  • Sleep (Address: 0x1014a4f0)
  • SystemTimeToFileTime (Address: 0x1014a544)
  • TerminateProcess (Address: 0x1014a5c8)
  • TlsAlloc (Address: 0x1014a4f8)
  • TlsFree (Address: 0x1014a508)
  • TlsGetValue (Address: 0x1014a504)
  • TlsSetValue (Address: 0x1014a4dc)
  • UnhandledExceptionFilter (Address: 0x1014a588)
  • WaitForMultipleObjectsEx (Address: 0x1014a4e4)
  • WaitForSingleObject (Address: 0x1014a4e8)
  • WideCharToMultiByte (Address: 0x1014a59c)
  • WriteFile (Address: 0x1014a530)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1014a75c)
  • __dllonexit (Address: 0x1014a6e0)
  • _amsg_exit (Address: 0x1014a6ec)
  • _CxxThrowException (Address: 0x1014a704)
  • _except_handler4_common (Address: 0x1014a6e4)
  • _ftol2 (Address: 0x1014a6c8)
  • _ftol2_sse (Address: 0x1014a6c0)
  • _initterm (Address: 0x1014a6e8)
  • _lock (Address: 0x1014a6f8)
  • _onexit (Address: 0x1014a6dc)
  • _purecall (Address: 0x1014a758)
  • _ui64tow_s (Address: 0x1014a72c)
  • _unlock (Address: 0x1014a6f4)
  • _vsnprintf (Address: 0x1014a6cc)
  • _vsnwprintf (Address: 0x1014a74c)
  • _wcsicmp (Address: 0x1014a748)
  • _wcslwr_s (Address: 0x1014a720)
  • _wcsnicmp (Address: 0x1014a750)
  • _XcptFilter (Address: 0x1014a6f0)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x1014a718)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x1014a714)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1014a710)
  • ??1exception@@UAE@XZ (Address: 0x1014a70c)
  • ??1type_info@@UAE@XZ (Address: 0x1014a6d8)
  • ?terminate@@YAXXZ (Address: 0x1014a6d4)
  • ?what@exception@@UBEPBDXZ (Address: 0x1014a708)
  • atol (Address: 0x1014a6b8)
  • free (Address: 0x1014a740)
  • isdigit (Address: 0x1014a73c)
  • iswspace (Address: 0x1014a730)
  • iswxdigit (Address: 0x1014a728)
  • malloc (Address: 0x1014a738)
  • memcmp (Address: 0x1014a6d0)
  • memcpy (Address: 0x1014a700)
  • memmove (Address: 0x1014a6fc)
  • memmove_s (Address: 0x1014a71c)
  • memset (Address: 0x1014a6bc)
  • sscanf_s (Address: 0x1014a6c4)
  • swprintf_s (Address: 0x1014a734)
  • wcschr (Address: 0x1014a744)
  • wcsstr (Address: 0x1014a724)
  • wcstok (Address: 0x1014a754)
ntdll.dll
  • WinSqmAddToStream (Address: 0x1014a768)
  • WinSqmIsOptedIn (Address: 0x1014a764)
OLE32.dll
  • CLSIDFromString (Address: 0x1014a5e8)
  • CoCreateInstance (Address: 0x1014a5f4)
  • CoDisconnectObject (Address: 0x1014a5d8)
  • CoGetCallContext (Address: 0x1014a5e4)
  • CoImpersonateClient (Address: 0x1014a600)
  • CoInitializeEx (Address: 0x1014a5f0)
  • CoRevertToSelf (Address: 0x1014a5dc)
  • CoSetProxyBlanket (Address: 0x1014a5e0)
  • CoSwitchCallContext (Address: 0x1014a5d0)
  • CoTaskMemFree (Address: 0x1014a5ec)
  • CoUninitialize (Address: 0x1014a5fc)
  • CoUnmarshalInterface (Address: 0x1014a5f8)
  • StringFromGUID2 (Address: 0x1014a5d4)
OLEAUT32.dll
  • SafeArrayAccessData (Address: 0x1014a60c)
  • SafeArrayCreate (Address: 0x1014a618)
  • SafeArrayDestroy (Address: 0x1014a624)
  • SafeArrayGetDim (Address: 0x1014a620)
  • SafeArrayGetElement (Address: 0x1014a638)
  • SafeArrayGetLBound (Address: 0x1014a630)
  • SafeArrayGetUBound (Address: 0x1014a634)
  • SafeArrayPutElement (Address: 0x1014a61c)
  • SafeArrayUnaccessData (Address: 0x1014a608)
  • SetErrorInfo (Address: 0x1014a650)
  • SysAllocString (Address: 0x1014a62c)
  • SysAllocStringByteLen (Address: 0x1014a64c)
  • SysAllocStringLen (Address: 0x1014a614)
  • SysFreeString (Address: 0x1014a644)
  • SysStringLen (Address: 0x1014a648)
  • VariantChangeType (Address: 0x1014a63c)
  • VariantClear (Address: 0x1014a628)
  • VariantCopy (Address: 0x1014a610)
  • VariantInit (Address: 0x1014a640)
VERSION.dll
  • GetFileVersionInfoExW (Address: 0x1014a65c)
  • GetFileVersionInfoSizeExW (Address: 0x1014a660)
  • VerQueryValueW (Address: 0x1014a658)
wbemcomn.dll
  • _IsValidElementName (Address: 0x1014a8f0)
  • _ThrowMemoryException_ (Address: 0x1014aa64)
  • ?_Free@CMUILocale@@SGHPAX@Z (Address: 0x1014aa38)
  • ?_GetSystemDefaultLocale@CMUILocale@@SGJPAPAGK@Z (Address: 0x1014a864)
  • ??0CCheckedInCritSec@@QAE@PAVCCritSec@@@Z (Address: 0x1014ab0c)
  • ??0CClientOpsNode@@QAE@XZ (Address: 0x1014aa5c)
  • ??0CCritSec@@QAE@XZ (Address: 0x1014ab28)
  • ??0CDateTimeParser@@QAE@PBG@Z (Address: 0x1014a824)
  • ??0CEventLog@@QAE@PBGABU_GUID@@K@Z (Address: 0x1014a8b0)
  • ??0CFlexArray@@QAE@AAV0@@Z (Address: 0x1014aa00)
  • ??0CFlexArray@@QAE@HH@Z (Address: 0x1014ab44)
  • ??0CFlexQueue@@QAE@H@Z (Address: 0x1014aae4)
  • ??0CIdentitySecurity@@QAE@_N@Z (Address: 0x1014aa74)
  • ??0CInCritSec@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x1014ab38)
  • ??0CInsertionString@@QAE@PBG@Z (Address: 0x1014aa58)
  • ??0CInsertionString@@QAE@VCHex@@@Z (Address: 0x1014a8ac)
  • ??0CInsertionString@@QAE@XZ (Address: 0x1014aabc)
  • ??0CLike@@QAE@PBGG@Z (Address: 0x1014a810)
  • ??0CMUILocaleList@@QAE@XZ (Address: 0x1014a970)
  • ??0CNtAce@@QAE@KKKAAVCNtSid@@@Z (Address: 0x1014a914)
  • ??0CNtAcl@@QAE@K@Z (Address: 0x1014a938)
  • ??0CNtAcl@@QAE@PAU_ACL@@@Z (Address: 0x1014a788)
  • ??0CNtSecurityDescriptor@@QAE@PAX@Z (Address: 0x1014a950)
  • ??0CNtSecurityDescriptor@@QAE@XZ (Address: 0x1014a954)
  • ??0CNtSid@@QAE@PAX@Z (Address: 0x1014a98c)
  • ??0CPropertyName@@QAE@XZ (Address: 0x1014a7f0)
  • ??0CSafeArray@@QAE@HHHH@Z (Address: 0x1014a9e4)
  • ??0CSafeArray@@QAE@PAUtagSAFEARRAY@@HHH@Z (Address: 0x1014a9a4)
  • ??0CStaticCritSec@@QAE@XZ (Address: 0x1014ab20)
  • ??0CVar@@QAE@ABV0@@Z (Address: 0x1014a8e0)
  • ??0CVar@@QAE@E@Z (Address: 0x1014a7c4)
  • ??0CVar@@QAE@FH@Z (Address: 0x1014a7cc)
  • ??0CVar@@QAE@HPAG@Z (Address: 0x1014a9f8)
  • ??0CVar@@QAE@HVauto_bstr@@@Z (Address: 0x1014a89c)
  • ??0CVar@@QAE@J@Z (Address: 0x1014a7c8)
  • ??0CVar@@QAE@PAUtagVARIANT@@@Z (Address: 0x1014a7e4)
  • ??0CVar@@QAE@PAVCVarVector@@H@Z (Address: 0x1014a7d0)
  • ??0CVar@@QAE@XZ (Address: 0x1014aaa4)
  • ??0CVarVector@@QAE@HHH@Z (Address: 0x1014a7d8)
  • ??0CWbemCriticalSection@@QAE@XZ (Address: 0x1014a888)
  • ??0CWQLScanner@@QAE@PAVCGenLexSource@@@Z (Address: 0x1014aa0c)
  • ??0CWStringArray@@QAE@HH@Z (Address: 0x1014aac8)
  • ??0QL_LEVEL_1_TOKEN@@QAE@ABU0@@Z (Address: 0x1014a808)
  • ??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x1014a83c)
  • ??0Registry@@QAE@PAUHKEY__@@KKPBG@Z (Address: 0x1014a9cc)
  • ??0Registry@@QAE@PAUHKEY__@@KPBG@Z (Address: 0x1014aa68)
  • ??0Registry@@QAE@PBGK@Z (Address: 0x1014aa3c)
  • ??0WString@@QAE@ABV0@@Z (Address: 0x1014a8d4)
  • ??0WString@@QAE@PAGH@Z (Address: 0x1014ab60)
  • ??0WString@@QAE@PBG@Z (Address: 0x1014a968)
  • ??0WString@@QAE@XZ (Address: 0x1014aa84)
  • ??0WString2@@QAE@PAGH@Z (Address: 0x1014aa2c)
  • ??0WString2@@QAE@PBG@Z (Address: 0x1014aaf8)
  • ??0WString2@@QAE@XZ (Address: 0x1014aaf4)
  • ??1CCheckedInCritSec@@QAE@XZ (Address: 0x1014ab10)
  • ??1CClientOpsNode@@QAE@XZ (Address: 0x1014aa90)
  • ??1CCritSec@@QAE@XZ (Address: 0x1014ab2c)
  • ??1CDateTimeParser@@QAE@XZ (Address: 0x1014a828)
  • ??1CEnterWbemCriticalSection@@QAE@XZ (Address: 0x1014a868)
  • ??1CEventLog@@QAE@XZ (Address: 0x1014a8b4)
  • ??1CFlexArray@@QAE@XZ (Address: 0x1014ab48)
  • ??1CFlexQueue@@QAE@XZ (Address: 0x1014aae8)
  • ??1CIdentitySecurity@@QAE@XZ (Address: 0x1014aa78)
  • ??1CInCritSec@@QAE@XZ (Address: 0x1014ab3c)
  • ??1CInsertionString@@QAE@XZ (Address: 0x1014aac0)
  • ??1CLike@@QAE@XZ (Address: 0x1014a814)
  • ??1CMUILocaleList@@QAE@XZ (Address: 0x1014a974)
  • ??1CNtAce@@UAE@XZ (Address: 0x1014a918)
  • ??1CNtAcl@@QAE@XZ (Address: 0x1014a93c)
  • ??1CNtSecurityDescriptor@@QAE@XZ (Address: 0x1014a958)
  • ??1CNtSid@@QAE@XZ (Address: 0x1014a990)
  • ??1CPropertyName@@QAE@XZ (Address: 0x1014a7f4)
  • ??1CSafeArray@@QAE@XZ (Address: 0x1014a9e8)
  • ??1CStaticCritSec@@QAE@XZ (Address: 0x1014ab24)
  • ??1CVar@@QAE@XZ (Address: 0x1014aaa8)
  • ??1CVarVector@@QAE@XZ (Address: 0x1014a7dc)
  • ??1CWbemCriticalSection@@QAE@XZ (Address: 0x1014a88c)
  • ??1CWQLScanner@@QAE@XZ (Address: 0x1014aa10)
  • ??1CWStringArray@@QAE@XZ (Address: 0x1014aacc)
  • ??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x1014a84c)
  • ??1QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x1014a80c)
  • ??1QL1_Parser@@UAE@XZ (Address: 0x1014a840)
  • ??1Registry@@QAE@XZ (Address: 0x1014aa6c)
  • ??1WString@@QAE@XZ (Address: 0x1014aa4c)
  • ??1WString2@@QAE@XZ (Address: 0x1014ab00)
  • ??4CNtSecurityDescriptor@@QAEAAV0@AAV0@@Z (Address: 0x1014a798)
  • ??4CWStringArray@@QAEAAV0@AAV0@@Z (Address: 0x1014aa20)
  • ??4WString@@QAEAAV0@ABV0@@Z (Address: 0x1014a834)
  • ??4WString@@QAEAAV0@PBG@Z (Address: 0x1014aa88)
  • ??4WString2@@QAEAAV0@PBG@Z (Address: 0x1014aafc)
  • ??ACFlexArray@@QAEAAPAXH@Z (Address: 0x1014ab4c)
  • ??ACWStringArray@@QBEPAGH@Z (Address: 0x1014aab4)
  • ??YWString@@QAEAAV0@PBG@Z (Address: 0x1014aa8c)
  • ??YWString2@@QAEAAV0@ABV0@@Z (Address: 0x1014aa30)
  • ??YWString2@@QAEAAV0@PBG@Z (Address: 0x1014ab04)
  • ?AccessCheck@CIdentitySecurity@@QAEHXZ (Address: 0x1014aa7c)
  • ?Add@CFlexArray@@QAEHPAX@Z (Address: 0x1014ab40)
  • ?Add@CVarVector@@QAEHAAVCVar@@@Z (Address: 0x1014a7e0)
  • ?Add@CWStringArray@@QAEHPBG@Z (Address: 0x1014aad0)
  • ?AddAce@CNtAcl@@QAEHPAVCNtAce@@@Z (Address: 0x1014a948)
  • ?AddChild@CClientOpsNode@@QAEXPAV1@@Z (Address: 0x1014a988)
  • ?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x1014a7fc)
  • ?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UAEXABVCPropertyName@@@Z (Address: 0x1014a858)
  • ?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x1014a850)
  • ?AliasToTable@CWQLScanner@@QAEQAGPAG@Z (Address: 0x1014aa04)
  • ?anyFailure@CStaticCritSec@@SGHXZ (Address: 0x1014a8d0)
  • ?Bind@CFlexArray@@QAEXAAV1@@Z (Address: 0x1014aa1c)
  • ?BindPtr@WString@@QAEXPAG@Z (Address: 0x1014aa50)
  • ?ChangeTypeTo@CVar@@QAEHG@Z (Address: 0x1014a804)
  • ?CheckLangNeutral@CMUILocale@@SGJPBGPA_N@Z (Address: 0x1014a998)
  • ?Close@CEventLog@@QAEHXZ (Address: 0x1014a8b8)
  • ?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x1014aae0)
  • ?CoGetClassObject@CWbemInstallObject@@SGJABU_GUID@@KPAU_COSERVERINFO@@0PAPAX@Z (Address: 0x1014a8cc)
  • ?Compress@CFlexArray@@QAEXXZ (Address: 0x1014aa18)
  • ?ContainsSid@CNtAcl@@QAEHAAVCNtSid@@AAE@Z (Address: 0x1014a78c)
  • ?CreateInst@CWbemCallSecurity@@SGPAVIWbemCallSecurity@@XZ (Address: 0x1014a9c0)
  • ?DeleteAce@CNtAcl@@QAEHH@Z (Address: 0x1014a790)
  • ?DeleteSacl@CNtSecurityDescriptor@@QAEJXZ (Address: 0x1014a7a8)
  • ?DeleteValue@Registry@@QAEHPBG@Z (Address: 0x1014a8a0)
  • ?Dequeue@CFlexQueue@@QAEPAXXZ (Address: 0x1014aaf0)
  • ?Deserialize@CNtAce@@UAE_NPAE@Z (Address: 0x1014a930)
  • ?Empty@CFlexArray@@QAEXXZ (Address: 0x1014ab1c)
  • ?Empty@CVar@@QAEXXZ (Address: 0x1014a800)
  • ?Empty@CWStringArray@@QAEXXZ (Address: 0x1014a8f4)
  • ?Empty@WString@@QAEXXZ (Address: 0x1014a8e4)
  • ?Empty@WString2@@QAEXXZ (Address: 0x1014ab08)
  • ?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x1014aaec)
  • ?Enter@CCheckedInCritSec@@QAEXXZ (Address: 0x1014aa48)
  • ?Enter@CCritSec@@QAEXXZ (Address: 0x1014ab30)
  • ?Enter@CWbemCriticalSection@@QAEHK@Z (Address: 0x1014a890)
  • ?EqualNoCase@WString@@QBEHPBG@Z (Address: 0x1014a8d8)
  • ?EqualNoCase@WString2@@QBEHPBG@Z (Address: 0x1014a7ec)
  • ?EscapeQuotes@WString2@@QBE?AV1@XZ (Address: 0x1014aa34)
  • ?FillDMTF@CDateTimeParser@@QAEHPAGI@Z (Address: 0x1014a82c)
  • ?FindStr@CWStringArray@@QAEHPBGH@Z (Address: 0x1014a8f8)
  • ?GetAccessMask@CNtAce@@UAEKXZ (Address: 0x1014a924)
  • ?GetAce@CNtAcl@@QAEPAVCNtAce@@H@Z (Address: 0x1014a944)
  • ?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x1014aac4)
  • ?GetAt@CVarVector@@QAEAAVCVar@@H@Z (Address: 0x1014a910)
  • ?GetAt@CWStringArray@@QBEPAGH@Z (Address: 0x1014a9f4)
  • ?GetBinaryPath@CWbemInstallObject@@SGPBGXZ (Address: 0x1014a8c4)
  • ?GetBSTR@CVar@@QAEPAGXZ (Address: 0x1014a904)
  • ?GetBSTRAt@CSafeArray@@QAEPAGH@Z (Address: 0x1014a9a8)
  • ?GetCultures@CMUILocaleList@@QAEPBGXZ (Address: 0x1014a980)
  • ?GetDacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x1014a79c)
  • ?GetDacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x1014a95c)
  • ?GetDWORD@Registry@@QAEHPBGPAK@Z (Address: 0x1014aa70)
  • ?GetDWORDStr@Registry@@QAEHPBGPAK@Z (Address: 0x1014a9d0)
  • ?GetEmbeddedObject@CVar@@QAEPAUIUnknown@@XZ (Address: 0x1014a7e8)
  • ?GetFirst_ms_XXX_Locale@CMUILocaleList@@QAEJPAPAG@Z (Address: 0x1014a97c)
  • ?GetFlags@CNtAce@@UAEHXZ (Address: 0x1014a920)
  • ?GetLocales@CMUILocaleList@@QAEPBGXZ (Address: 0x1014a984)
  • ?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x1014a9d4)
  • ?GetNumAces@CNtAcl@@QAEHXZ (Address: 0x1014a940)
  • ?GetOwner@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x1014a7ac)
  • ?GetPersistentCfgValue@CPersistentConfig@@QAEHKAAK@Z (Address: 0x1014a8a4)
  • ?GetQueueSize@CFlexQueue@@QBEHXZ (Address: 0x1014aa54)
  • ?GetReferencedAliases@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x1014aa08)
  • ?GetReferencedTables@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x1014a820)
  • ?GetRegistryPathCIMOM@CWbemInstallObject@@SGPBGXZ (Address: 0x1014aadc)
  • ?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x1014a8c8)
  • ?GetSacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x1014a7a0)
  • ?GetSacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x1014a964)
  • ?GetSerializedSize@CNtAce@@UAEKXZ (Address: 0x1014a928)
  • ?GetSid@CNtAce@@QAEPAVCNtSid@@XZ (Address: 0x1014a784)
  • ?GetSize@CNtSecurityDescriptor@@QAEKXZ (Address: 0x1014a7b8)
  • ?GetStatus@CNtAce@@UAEKXZ (Address: 0x1014a8ec)
  • ?GetStr@Registry@@QAEHPBGPAPAG@Z (Address: 0x1014aa40)
  • ?GetStringAt@CPropertyName@@QBEPBGJ@Z (Address: 0x1014a7f8)
  • ?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QAEPAGXZ (Address: 0x1014a85c)
  • ?GetType@CNtAce@@UAEHXZ (Address: 0x1014a91c)
  • ?Init@CPublishWMIOperationEvent@@SGJXZ (Address: 0x1014a898)
  • ?Initialize@CMUILocaleList@@QAEJPAG_N@Z (Address: 0x1014a978)
  • ?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x1014ab18)
  • ?IsDataNull@CVar@@QAEHXZ (Address: 0x1014a900)
  • ?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x1014aad8)
  • ?IsUserInGroup@CNtSecurity@@SGHPAXAAVCNtSid@@PAH@Z (Address: 0x1014a8fc)
  • ?IsValid@CNtAcl@@QAEHXZ (Address: 0x1014a77c)
  • ?IsValid@CNtSid@@QAEHXZ (Address: 0x1014a778)
  • ?LCID_To_ms_XXX_Format@CMUILocale@@SGJKPAGI@Z (Address: 0x1014a9a0)
  • ?Leave@CCheckedInCritSec@@QAEXXZ (Address: 0x1014ab14)
  • ?Leave@CCritSec@@QAEXXZ (Address: 0x1014ab34)
  • ?Leave@CWbemCriticalSection@@QAEXXZ (Address: 0x1014a894)
  • ?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x1014a99c)
  • ?MakeInternalCopyOfThread@CWbemCallSecurity@@SGPAV1@XZ (Address: 0x1014a770)
  • ?Match@CLike@@QAE_NPBG@Z (Address: 0x1014a818)
  • ?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x1014a994)
  • ?Open@CEventLog@@QAEHXZ (Address: 0x1014a8bc)
  • ?OrderAces@CNtAcl@@QAEPAV1@XZ (Address: 0x1014a794)
  • ?Parse@CWQLScanner@@QAEHXZ (Address: 0x1014aa14)
  • ?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1014a844)
  • ?Peek@CFlexQueue@@QAEPAXXZ (Address: 0x1014aa98)
  • ?Publish@CPublishWMIOperationEvent@@SGJPAGKK0000K_K0H@Z (Address: 0x1014a9ac)
  • ?PublishClientRequestFailure@CPublishWMIOperationEvent@@SGJPBGPAG1K10J0@Z (Address: 0x1014aaa0)
  • ?PublishMethodExec@CPublishWMIOperationEvent@@SGJPAGKK000000K_K0H@Z (Address: 0x1014a9b0)
  • ?PublishRepDelete@CPublishWMIOperationEvent@@SGJKPAGPAUIWbemContext@@K0_KH@Z (Address: 0x1014a9b8)
  • ?PublishRepUpdate@CPublishWMIOperationEvent@@SGJKPAGKPAUIWbemContext@@K0_KH@Z (Address: 0x1014a9bc)
  • ?PublishStop@CPublishWMIOperationEvent@@SGJKJPAG@Z (Address: 0x1014aa9c)
  • ?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SGJPAGKK0K_K000K1H@Z (Address: 0x1014a9b4)
  • ?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXP6GJH@Z@Z (Address: 0x1014a87c)
  • ?Release@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x1014a854)
  • ?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x1014ab50)
  • ?RemoveAt@CWStringArray@@QAEHH@Z (Address: 0x1014aa24)
  • ?RemoveSelf@CClientOpsNode@@QAEXXZ (Address: 0x1014aa94)
  • ?Report@CEventLog@@QAEHGABU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x1014aad4)
  • ?Serialize@CNtAce@@UAE_NPAEI@Z (Address: 0x1014a92c)
  • ?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x1014a8dc)
  • ?SetBSTR@CVar@@QAEHPAG@Z (Address: 0x1014a9c4)
  • ?SetBSTR@CVar@@QAEHVauto_bstr@@@Z (Address: 0x1014a9c8)
  • ?SetBSTRAt@CSafeArray@@QAEHHPAG@Z (Address: 0x1014a9ec)
  • ?SetDacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x1014a960)
  • ?SetDMTF@CWbemTime@@QAEHPBG@Z (Address: 0x1014a838)
  • ?SetDWORD@Registry@@QAEHPBGK@Z (Address: 0x1014a9d8)
  • ?SetDWORDStr@Registry@@QAEHPBGK@Z (Address: 0x1014a9dc)
  • ?SetEmbeddedObject@CVar@@QAEXPAUIUnknown@@@Z (Address: 0x1014a9fc)
  • ?SetFailure@CStaticCritSec@@SGXXZ (Address: 0x1014ab5c)
  • ?SetFlags@CNtAce@@UAEXJ@Z (Address: 0x1014a8e8)
  • ?SetGroup@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1014a7b4)
  • ?SetLogingEnabled@CMemoryLog@@QAEX_N@Z (Address: 0x1014a870)
  • ?SetOwner@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1014a7b0)
  • ?SetSacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x1014a7a4)
  • ?SetStr@Registry@@QAEHPBG0@Z (Address: 0x1014a9e0)
  • ?SetVarVector@CVar@@QAEXPAVCVarVector@@H@Z (Address: 0x1014a7d4)
  • ?Size@CVarVector@@QAEHXZ (Address: 0x1014a90c)
  • ?Size@CWStringArray@@QBEHXZ (Address: 0x1014aab8)
  • ?Trim@CSafeArray@@QAEHXZ (Address: 0x1014a9f0)
  • ?UnbindPtr@WString2@@QAEPAGXZ (Address: 0x1014a848)
  • ?Union@CWStringArray@@SGXAAV1@00@Z (Address: 0x1014aa28)
  • ?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXXZ (Address: 0x1014a880)
  • ?ValidateMemSize@CWin32DefaultArena@@SGHH@Z (Address: 0x1014a860)
  • ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x1014aaac)
  • ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x1014aab0)
  • ?WbemMemReAlloc@CWin32DefaultArena@@SGPAXPAXK@Z (Address: 0x1014a774)
  • ?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1014ab58)
  • BreakOnDbgAndRenterLoop (Address: 0x1014aa60)
  • BuildOperationInfo (Address: 0x1014a94c)
  • BuildSecurityDescriptorParameter (Address: 0x1014a7c0)
  • ComposeName (Address: 0x1014a8c0)
  • GetAccessToken (Address: 0x1014ab64)
  • GetGlobalClientOps (Address: 0x1014a96c)
  • GetMemLogObject (Address: 0x1014ab54)
  • GetSecurityDescriptorFromParameters (Address: 0x1014a7bc)
  • IsAdmin (Address: 0x1014a934)
  • IsInAdminGroup (Address: 0x1014a780)
  • IsLocalConnection (Address: 0x1014aa80)
  • IsNtSetupRunning (Address: 0x1014aa44)
  • isunialphanum (Address: 0x1014a908)
  • ReadI64 (Address: 0x1014a81c)
  • ReadUI64 (Address: 0x1014a830)
  • RegisterDLL (Address: 0x1014a874)
  • Set_WPP_INIT_TRACING_Call_State (Address: 0x1014a86c)
  • TestDirExistAndCreateWithSDIfNotThere (Address: 0x1014a8a8)
  • UnRegisterDLL (Address: 0x1014a878)
  • WMIControlClientOpsCallback (Address: 0x1014a884)