wbemcore.dll

Description: Windows Management Instrumentation

Version: 10.0.19041.3684

Architecture: 32-bit

Operating System: Windows NT

SHA256: 9c84dd45288346844be10d5ed551654f

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 8:38 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xf5c50)
DllGetClassObject (Ordinal: 2, Address: 0xf59c0)
DllRegisterServer (Ordinal: 3, Address: 0xf5fe0)
DllUnregisterServer (Ordinal: 4, Address: 0xf6140)
Reinitialize (Ordinal: 5, Address: 0xf63d0)
Shutdown (Ordinal: 6, Address: 0xf6260)

Imported DLLs & Functions

ADVAPI32.dll

AccessCheck (Address: 0x10153004)
AllocateAndInitializeSid (Address: 0x10153034)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10153040)
EventActivityIdControl (Address: 0x10153048)
FreeSid (Address: 0x1015303c)
GetLengthSid (Address: 0x1015301c)
GetSecurityDescriptorControl (Address: 0x10153014)
GetSecurityDescriptorDacl (Address: 0x10153030)
GetSecurityDescriptorSacl (Address: 0x10153000)
GetSidSubAuthority (Address: 0x10153010)
GetSidSubAuthorityCount (Address: 0x1015300c)
GetTokenInformation (Address: 0x10153018)
IsValidSecurityDescriptor (Address: 0x10153038)
OpenThreadToken (Address: 0x10153044)
PrivilegeCheck (Address: 0x10153008)
RegCloseKey (Address: 0x1015304c)
RegCreateKeyExW (Address: 0x10153028)
RegDeleteKeyW (Address: 0x10153024)
RegDeleteValueW (Address: 0x10153020)
RegNotifyChangeKeyValue (Address: 0x10153050)
RegOpenKeyExW (Address: 0x10153058)
RegQueryValueExW (Address: 0x10153060)
RegSetValueExW (Address: 0x1015305c)
RevertToSelf (Address: 0x10153054)
SetThreadToken (Address: 0x1015302c)

api-ms-win-core-com-l1-1-0.dll

CoWaitForMultipleHandles (Address: 0x101536c8)

api-ms-win-core-heap-l1-1-0.dll

HeapReAlloc (Address: 0x101536d0)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeExW (Address: 0x101536d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersion (Address: 0x101536e0)

esscli.dll

??0CContextMetaData@@QAE@PAVCMetaData@@PAUIWbemContext@@@Z (Address: 0x101536ec)
??0CStandardMetaData@@QAE@PAUIWbemServices@@@Z (Address: 0x101536f4)
??1CContextMetaData@@QAE@XZ (Address: 0x101536fc)
??1CStandardMetaData@@UAE@XZ (Address: 0x101536e8)
?GetNecessaryQueryForClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PAUIWbemClassObject@@AAVCWStringArray@@AAPAU2@@Z (Address: 0x101536f0)
?SimplifyQueryForChild@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@AAPAU2@@Z (Address: 0x101536f8)

FastProx.dll

?_GetCoreInfo@CWbemObject@@UAGJJPAPAX@Z (Address: 0x101531f8)
??0CLimitationMapping@@QAE@XZ (Address: 0x10153484)
??0CWbemClass@@QAE@XZ (Address: 0x1015349c)
??0CWbemInstance@@QAE@XZ (Address: 0x10153380)
??1CLimitationMapping@@QAE@XZ (Address: 0x10153488)
??1CWbemClass@@UAE@XZ (Address: 0x10153280)
??1CWbemInstance@@UAE@XZ (Address: 0x1015337c)
?AddRef@CWbemObject@@UAGKXZ (Address: 0x10153124)
?AppendArrayPropRangeByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x10153068)
?AsymmetricMerge@CWbemInstance@@SGJPAV1@0@Z (Address: 0x10153458)
?BeginEnumeration@CWbemObject@@UAGJJ@Z (Address: 0x10153114)
?BeginEnumerationEx@CWbemObject@@UAGJJJ@Z (Address: 0x1015345c)
?BeginMethodEnumeration@CWbemClass@@UAGJJ@Z (Address: 0x10153190)
?BeginMethodEnumeration@CWbemInstance@@UAGJJ@Z (Address: 0x101533a0)
?CIMTYPEToVARTYPE@CWbemObject@@UAGJJPAG@Z (Address: 0x101532f4)
?ClearCachedKeyValue@CWbemInstance@@UAEXXZ (Address: 0x101533b0)
?ClearWriteOnlyProperties@CWbemClass@@UAGJXZ (Address: 0x10153420)
?ClearWriteOnlyProperties@CWbemInstance@@UAGJXZ (Address: 0x101532c0)
?Clone@CWbemClass@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x101531b8)
?Clone@CWbemInstance@@UAGJPAPAUIWbemClassObject@@@Z (Address: 0x10153304)
?CloneAndDecorate@CWbemClass@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x10153148)
?CloneAndDecorate@CWbemInstance@@UAGJJPAG0PAPAUIWbemClassObject@@@Z (Address: 0x1015328c)
?CloneEx@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1015316c)
?CloneEx@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101532b8)
?CompactAll@CWbemClass@@UAEXXZ (Address: 0x10153200)
?CompactAll@CWbemInstance@@UAEXXZ (Address: 0x101533e8)
?CompactClass@CWbemInstance@@QAEXXZ (Address: 0x10153448)
?CompareClassParts@CWbemObject@@UAGJPAUIWbemClassObject@@J@Z (Address: 0x10153288)
?CompareDerivedMostClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10153160)
?CompareDerivedMostClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101532ac)
?CompareTo@CWbemClass@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x101531a4)
?CompareTo@CWbemObject@@UAGJJPAUIWbemClassObject@@@Z (Address: 0x101530fc)
?ConvertToClass@CWbemInstance@@QAEJPAVCWbemClass@@PAPAV1@@Z (Address: 0x10153470)
?CopyBlobOf@CWbemClass@@UAEJPAVCWbemObject@@@Z (Address: 0x101531fc)
?CopyBlobOf@CWbemInstance@@UAEJPAVCWbemObject@@@Z (Address: 0x10153324)
?CopyInstanceData@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10153168)
?CopyInstanceData@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101532b4)
?CreateDerivedClass@CWbemClass@@QAEJPAV1@HPAVCDecorationPart@@@Z (Address: 0x1015343c)
?Decorate@CWbemClass@@UAEJPBG0@Z (Address: 0x10153214)
?Decorate@CWbemInstance@@UAEJPBG0@Z (Address: 0x10153334)
?Delete@CWbemClass@@UAGJPBG@Z (Address: 0x101531c0)
?Delete@CWbemInstance@@UAGJPBG@Z (Address: 0x1015330c)
?DeleteMethod@CWbemClass@@UAGJPBG@Z (Address: 0x10153194)
?DeleteMethod@CWbemInstance@@UAGJPBG@Z (Address: 0x101533a4)
?DeleteProperty@CWbemInstance@@QAEJH@Z (Address: 0x10153450)
?DisconnectObject@CWbemObject@@UAGJK@Z (Address: 0x101530d8)
?EndEnumeration@CWbemObject@@UAGJXZ (Address: 0x10153100)
?EndMethodEnumeration@CWbemClass@@UAGJXZ (Address: 0x10153184)
?EndMethodEnumeration@CWbemInstance@@UAGJXZ (Address: 0x10153398)
?EstimateUnmergeSpace@CWbemClass@@UAEKXZ (Address: 0x101531f4)
?EstimateUnmergeSpace@CWbemInstance@@UAEKXZ (Address: 0x101533e4)
?ExtendClassPartSpace@CWbemInstance@@UAEHPAVCClassPart@@K@Z (Address: 0x101533c4)
?ExtendInstancePartSpace@CWbemInstance@@UAEHPAVCInstancePart@@K@Z (Address: 0x10153318)
?FindLimitationError@CWbemClass@@QAE?AVWString@@JPAVCWStringArray@@@Z (Address: 0x10153490)
?FindMethod@CWbemClass@@UAEJPBG@Z (Address: 0x10153234)
?FindMethod@CWbemObject@@UAEJPBG@Z (Address: 0x10153134)
?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z (Address: 0x1015311c)
?GetArrayPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x10153084)
?GetArrayPropElementByHandle@CWbemObject@@UAGJJJKPAK0PAPAX@Z (Address: 0x10153080)
?GetArrayPropInfoByHandle@CWbemObject@@UAGJJJPAPAGPAJPAK@Z (Address: 0x10153088)
?GetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAK0PAX@Z (Address: 0x10153074)
?GetBlockLength@CWbemClass@@MAEKXZ (Address: 0x101534a4)
?GetBlockLength@CWbemInstance@@MAEKXZ (Address: 0x1015341c)
?GetClassNameW@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101534b8)
?GetClassNameW@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101533e0)
?GetClassPart@CWbemClass@@MAEPAVCClassPart@@XZ (Address: 0x101534a8)
?GetClassPart@CWbemClass@@UAGJPAXKPAK@Z (Address: 0x1015342c)
?GetClassPart@CWbemInstance@@MAEPAVCClassPart@@XZ (Address: 0x10153414)
?GetClassPart@CWbemInstance@@UAGJPAXKPAK@Z (Address: 0x1015336c)
?GetClassSubset@CWbemClass@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x1015315c)
?GetClassSubset@CWbemInstance@@UAGJKPAPBGPAPAU_IWmiObject@@@Z (Address: 0x101532a8)
?GetDerivation@CWbemObject@@QAEJPAVCVar@@@Z (Address: 0x10153478)
?GetDerivation@CWbemObject@@UAGJJKPAK0PAG@Z (Address: 0x10153130)
?GetDescription@CWbemObject@@UAGJPAPAG@Z (Address: 0x101530d4)
?GetDynasty@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101531cc)
?GetDynasty@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x1015331c)
?GetGenus@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101534c4)
?GetGenus@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101533d4)
?GetGUID@CWbemObject@@UAGJPAU_GUID@@@Z (Address: 0x101530d0)
?GetHelpContext@CWbemObject@@UAGJPAK@Z (Address: 0x101530cc)
?GetHelpFile@CWbemObject@@UAGJPAPAG@Z (Address: 0x101530c8)
?GetIndexedProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x101534c8)
?GetIndexedProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x101533d0)
?GetInstanceObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x101533b4)
?GetKeyOrigin@CWbemClass@@UAEJAAVWString@@@Z (Address: 0x101534d0)
?GetKeyOrigin@CWbemInstance@@UAEJAAVWString@@@Z (Address: 0x101533c8)
?GetKeyOrigin@CWbemObject@@UAGJJKPAKPAG@Z (Address: 0x1015312c)
?GetKeyProps@CWbemClass@@UAEHAAVCWStringArray@@@Z (Address: 0x101534cc)
?GetKeyProps@CWbemInstance@@UAEHAAVCWStringArray@@@Z (Address: 0x101533cc)
?GetKeyString@CWbemObject@@UAGJJPAPAG@Z (Address: 0x101532bc)
?GetLimitedVersion@CWbemClass@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x10153494)
?GetLimitedVersion@CWbemInstance@@QAEJPAVCLimitationMapping@@PAPAV1@@Z (Address: 0x1015344c)
?GetMarshalSizeMax@CWbemObject@@UAGJABU_GUID@@PAXK1KPAK@Z (Address: 0x101530e8)
?GetMaxMarshalStreamSize@CWbemInstance@@UAEJPAK@Z (Address: 0x10153370)
?GetMaxMarshalStreamSize@CWbemObject@@UAEJPAK@Z (Address: 0x1015313c)
?GetMethod@CWbemClass@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x1015319c)
?GetMethod@CWbemInstance@@UAGJPBGJPAPAUIWbemClassObject@@1@Z (Address: 0x101533ac)
?GetMethodOrigin@CWbemClass@@UAGJPBGPAPAG@Z (Address: 0x1015317c)
?GetMethodOrigin@CWbemInstance@@UAGJPBGPAPAG@Z (Address: 0x10153390)
?GetMethodQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x101531a8)
?GetMethodQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10153248)
?GetMethodQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x10153240)
?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1015334c)
?GetMethodQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x10153348)
?GetMethodQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10153180)
?GetMethodQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10153394)
?GetNames@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAPAUtagSAFEARRAY@@@Z (Address: 0x10153118)
?GetNonsystemPropertyValue@CWbemInstance@@QAEJPBGPAVCVar@@@Z (Address: 0x10153464)
?GetNormalizedPath@CWbemObject@@UAGJJPAPAG@Z (Address: 0x101532d4)
?GetNumProperties@CWbemClass@@UAEHXZ (Address: 0x101534ac)
?GetNumProperties@CWbemInstance@@UAEHXZ (Address: 0x101533f4)
?GetObjectMemory@CWbemObject@@UAGJPAXKPAK@Z (Address: 0x10153244)
?GetObjectParts@CWbemClass@@UAGJPAXKKPAK@Z (Address: 0x10153434)
?GetObjectParts@CWbemInstance@@UAGJPAXKKPAK@Z (Address: 0x101532d0)
?GetObjectText@CWbemClass@@UAGJJPAPAG@Z (Address: 0x101531b4)
?GetObjectText@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x10153300)
?GetObjQual@CWbemObject@@UAGJPBGJKPAJPAK2PAX@Z (Address: 0x10153110)
?GetParentClassFromBlob@CWbemClass@@UAGJJKPAXPAPAG@Z (Address: 0x1015314c)
?GetParentClassFromBlob@CWbemObject@@UAGJJKPAXPAPAG@Z (Address: 0x101532ec)
?GetPropAddrByHandle@CWbemObject@@UAGJJJPAKPAPAX@Z (Address: 0x1015308c)
?GetProperty@CWbemClass@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x101534a0)
?GetProperty@CWbemClass@@UAEJPBGPAVCVar@@@Z (Address: 0x10153278)
?GetProperty@CWbemInstance@@MAEJPAVCPropertyInformation@@PAVCVar@@@Z (Address: 0x10153418)
?GetProperty@CWbemInstance@@UAEJPBGPAVCVar@@@Z (Address: 0x10153410)
?GetPropertyCount@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101534c0)
?GetPropertyCount@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101533d8)
?GetPropertyHandle@CWbemObject@@UAGJPBGPAJ1@Z (Address: 0x101530bc)
?GetPropertyHandleEx@CWbemObject@@UAGJPBGJPAJ1@Z (Address: 0x10153094)
?GetPropertyInfoByHandle@CWbemObject@@UAGJJPAPAGPAJ@Z (Address: 0x101530a0)
?GetPropertyOrigin@CWbemObject@@UAGJPBGPAPAG@Z (Address: 0x101530f8)
?GetPropertyQualifierSet@CWbemClass@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x101531bc)
?GetPropertyQualifierSet@CWbemInstance@@UAGJPBGPAPAUIWbemQualifierSet@@@Z (Address: 0x10153308)
?GetPropertyType@CWbemClass@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x10153230)
?GetPropertyType@CWbemClass@@UAEJPBGPAJ1@Z (Address: 0x1015322c)
?GetPropertyType@CWbemInstance@@UAEJPAVCPropertyInformation@@PAJ1@Z (Address: 0x10153368)
?GetPropertyType@CWbemInstance@@UAEJPBGPAJ1@Z (Address: 0x10153364)
?GetPropertyValue@CWbemObject@@UAGJPAU_tag_WbemPropertyName@@JPAPAGPAUtagVARIANT@@@Z (Address: 0x101530f0)
?GetPropName@CWbemClass@@UAEJHPAVCVar@@@Z (Address: 0x101534b0)
?GetPropName@CWbemInstance@@UAEJHPAVCVar@@@Z (Address: 0x101533f0)
?GetPropQual@CWbemObject@@UAGJPBG0JKPAJPAK2PAX@Z (Address: 0x10153188)
?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10153258)
?GetPropQualifier@CWbemClass@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x10153250)
?GetPropQualifier@CWbemClass@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10153254)
?GetPropQualifier@CWbemClass@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x1015324c)
?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x1015335c)
?GetPropQualifier@CWbemInstance@@UAEJPAVCPropertyInformation@@PBGPAVCVar@@PAJ3@Z (Address: 0x10153358)
?GetPropQualifier@CWbemInstance@@UAEJPBG0PAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x101533f8)
?GetPropQualifier@CWbemInstance@@UAEJPBG0PAVCVar@@PAJ2@Z (Address: 0x101533fc)
?GetQualifier@CWbemClass@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10153270)
?GetQualifier@CWbemClass@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1015326c)
?GetQualifier@CWbemInstance@@UAEJPBGPAJPAVCTypedValue@@PAPAVCFastHeap@@H@Z (Address: 0x10153408)
?GetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@PAJ2@Z (Address: 0x1015340c)
?GetQualifierSet@CWbemClass@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x101531c8)
?GetQualifierSet@CWbemInstance@@UAGJPAPAUIWbemQualifierSet@@@Z (Address: 0x10153314)
?GetRelPath@CWbemClass@@UAEPAGH@Z (Address: 0x1015320c)
?GetRelPath@CWbemInstance@@UAEPAGH@Z (Address: 0x1015332c)
?GetSource@CWbemObject@@UAGJPAPAG@Z (Address: 0x101530c4)
?GetSuperclassName@CWbemClass@@UAEJPAVCVar@@@Z (Address: 0x101534bc)
?GetSuperclassName@CWbemInstance@@UAEJPAVCVar@@@Z (Address: 0x101533dc)
?GetSystemPropertyByName@CWbemObject@@QAEJPBGPAVCVar@@@Z (Address: 0x10153460)
?GetUnmarshalClass@CWbemObject@@UAGJABU_GUID@@PAXK1KPAU2@@Z (Address: 0x101530ec)
?GetVARTYPE@CType@@SGGK@Z (Address: 0x10153444)
?GetWbemObjectUnknown@CWbemInstance@@UAEPAUIUnknown@@XZ (Address: 0x101533b8)
?InheritsFrom@CWbemObject@@UAGJPBG@Z (Address: 0x101530f4)
?InitEmpty@CWbemClass@@QAEJHH@Z (Address: 0x10153474)
?InitNew@CWbemInstance@@QAEJPAVCWbemClass@@HPAVCDecorationPart@@@Z (Address: 0x10153438)
?IsAbstract@CWbemClass@@QAEHXZ (Address: 0x101532e4)
?IsAmendment@CWbemClass@@QAEHXZ (Address: 0x101532d8)
?IsDynamic@CWbemClass@@QAEHXZ (Address: 0x101532e8)
?IsIllegalDerivedClass@CSystemProperties@@SGHPBG@Z (Address: 0x10153480)
?IsInstanceOf@CWbemInstance@@QAEHPAVCWbemClass@@@Z (Address: 0x1015346c)
?IsKeyed@CWbemClass@@UAEHXZ (Address: 0x101534b4)
?IsKeyed@CWbemInstance@@UAEHXZ (Address: 0x101533ec)
?IsLocalized@CWbemClass@@UAEHXZ (Address: 0x1015321c)
?IsLocalized@CWbemInstance@@UAEHXZ (Address: 0x1015333c)
?IsObjectInstance@CWbemObject@@UAGJXZ (Address: 0x10153498)
?IsParentClass@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x10153164)
?IsParentClass@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101532b0)
?IsValidObj@CWbemClass@@UAEJXZ (Address: 0x10153204)
?IsValidObj@CWbemInstance@@UAEJXZ (Address: 0x10153328)
?Lock@CWbemObject@@UAGJJ@Z (Address: 0x1015309c)
?MakeSubsetInst@CWbemClass@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x10153158)
?MakeSubsetInst@CWbemInstance@@UAGJPAU_IWmiObject@@PAPAU2@@Z (Address: 0x101532a4)
?MapLimitation@CWbemClass@@QAEHJPAVCWStringArray@@PAVCLimitationMapping@@@Z (Address: 0x1015348c)
?MarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAXK2K@Z (Address: 0x101530e4)
?Merge@CWbemClass@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x101531e4)
?Merge@CWbemInstance@@UAGJJKPAXPAPAU_IWmiObject@@@Z (Address: 0x101532a0)
?MergeAmended@CWbemObject@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101531ec)
?MergeAndDecorate@CWbemClass@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x10153144)
?MergeAndDecorate@CWbemInstance@@UAGJJKPAXPAG1PAPAU_IWmiObject@@@Z (Address: 0x10153284)
?MergeClassPart@CWbemClass@@UAGJPAUIWbemClassObject@@@Z (Address: 0x10153424)
?MergeClassPart@CWbemInstance@@UAGJPAUIWbemClassObject@@@Z (Address: 0x101532c4)
?Next@CWbemObject@@UAGJJPAPAGPAUtagVARIANT@@PAJ2@Z (Address: 0x10153104)
?NextMethod@CWbemClass@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1015318c)
?NextMethod@CWbemInstance@@UAGJJPAPAGPAPAUIWbemClassObject@@1@Z (Address: 0x1015339c)
?PlugKeyHoles@CWbemInstance@@QAEJXZ (Address: 0x10153468)
?Put@CWbemClass@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x101531c4)
?Put@CWbemInstance@@UAGJPBGJPAUtagVARIANT@@J@Z (Address: 0x10153310)
?PutMethod@CWbemClass@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x10153198)
?PutMethod@CWbemInstance@@UAGJPBGJPAUIWbemClassObject@@1@Z (Address: 0x101533a8)
?QueryInterface@CWbemObject@@UAGJABU_GUID@@PAPAX@Z (Address: 0x10153128)
?QueryObjectFlags@CWbemObject@@UAGJJ_KPA_K@Z (Address: 0x101531d8)
?QueryPartInfo@CWbemObject@@UAGJPAK@Z (Address: 0x10153208)
?QueryPropertyFlags@CWbemObject@@UAGJJPBG_KPA_K@Z (Address: 0x101531e8)
?ReadDWORD@CWbemObject@@UAGJJPAK@Z (Address: 0x101530b0)
?ReadProp@CWbemObject@@UAGJPBGJKPAJ1PAHPAKPAX@Z (Address: 0x10153108)
?ReadPropertyValue@CWbemObject@@UAGJJJPAJPAE@Z (Address: 0x101530b4)
?ReadQWORD@CWbemObject@@UAGJJPA_K@Z (Address: 0x101530a8)
?ReconcileWith@CWbemClass@@UAGJJPAU_IWmiObject@@@Z (Address: 0x101531d4)
?ReconcileWith@CWbemInstance@@UAGJJPAU_IWmiObject@@@Z (Address: 0x1015329c)
?ReduceClassPartSpace@CWbemInstance@@UAEXPAVCClassPart@@K@Z (Address: 0x101533c0)
?ReduceInstancePartSpace@CWbemInstance@@UAEXPAVCInstancePart@@K@Z (Address: 0x101533bc)
?Release@CWbemObject@@UAGKXZ (Address: 0x10153120)
?ReleaseMarshalData@CWbemObject@@UAGJPAUIStream@@@Z (Address: 0x101530dc)
?RemoveArrayPropElementByHandle@CWbemObject@@UAGJJJK@Z (Address: 0x10153078)
?RemoveArrayPropRangeByHandle@CWbemObject@@UAGJJJKK@Z (Address: 0x1015306c)
?RemoveDecoration@CWbemObject@@UAGJXZ (Address: 0x10153268)
?SetArrayPropElementByHandle@CWbemObject@@UAGJJJKKPAX@Z (Address: 0x1015307c)
?SetArrayPropRangeByHandle@CWbemObject@@UAGJJJKKKPAX@Z (Address: 0x10153070)
?SetClassPart@CWbemClass@@UAGJPAXK@Z (Address: 0x10153428)
?SetClassPart@CWbemInstance@@UAGJPAXK@Z (Address: 0x101532c8)
?SetData@CWbemClass@@UAEXPAEH@Z (Address: 0x1015327c)
?SetData@CWbemInstance@@UAEXPAEH@Z (Address: 0x10153378)
?SetDecoration@CWbemObject@@UAGJPBG0@Z (Address: 0x1015325c)
?SetInheritanceChain@CWbemClass@@UAGJJPAPAG@Z (Address: 0x101532f8)
?SetInheritanceChain@CWbemInstance@@UAGJJPAPAG@Z (Address: 0x1015338c)
?SetLocalized@CWbemClass@@UAEXH@Z (Address: 0x10153218)
?SetLocalized@CWbemInstance@@UAEXH@Z (Address: 0x10153338)
?SetMethodOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x10153170)
?SetMethodOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x10153384)
?SetMethodQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x101531d0)
?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x1015323c)
?SetMethodQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10153238)
?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10153344)
?SetMethodQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10153340)
?SetObjectFlags@CWbemObject@@UAGJJ_K0@Z (Address: 0x101531dc)
?SetObjectMemory@CWbemObject@@UAGJPAXK@Z (Address: 0x10153220)
?SetObjectParts@CWbemClass@@UAGJPAXKK@Z (Address: 0x101534d4)
?SetObjectParts@CWbemInstance@@UAGJPAXKK@Z (Address: 0x101532dc)
?SetObjQual@CWbemObject@@UAGJPBGJKKJKPAX@Z (Address: 0x10153178)
?SetPropByHandle@CWbemObject@@UAGJJJKPAX@Z (Address: 0x10153090)
?SetPropertyOrigin@CWbemClass@@UAGJPBGJ@Z (Address: 0x10153174)
?SetPropertyOrigin@CWbemInstance@@UAGJPBGJ@Z (Address: 0x10153388)
?SetPropQual@CWbemObject@@UAGJPBG0JKKJKPAX@Z (Address: 0x101531a0)
?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10153228)
?SetPropQualifier@CWbemClass@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10153224)
?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCTypedValue@@@Z (Address: 0x10153354)
?SetPropQualifier@CWbemInstance@@UAEJPBG0JPAVCVar@@@Z (Address: 0x10153350)
?SetPropValue@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x10153274)
?SetPropValue@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x10153360)
?SetQualifier@CWbemClass@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x10153264)
?SetQualifier@CWbemClass@@UAEJPBGPAVCVar@@J@Z (Address: 0x10153260)
?SetQualifier@CWbemInstance@@UAEJPBGJPAVCTypedValue@@@Z (Address: 0x10153400)
?SetQualifier@CWbemInstance@@UAEJPBGPAVCVar@@J@Z (Address: 0x10153404)
?SetServerNamespace@CWbemObject@@UAGJPBG0@Z (Address: 0x101530c0)
?SpawnDerivedClass@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101531b0)
?SpawnDerivedClass@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101532fc)
?SpawnInstance@CWbemClass@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101531ac)
?SpawnInstance@CWbemInstance@@UAGJJPAPAUIWbemClassObject@@@Z (Address: 0x101532e0)
?SpawnKeyedInstance@CWbemClass@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x10153150)
?SpawnKeyedInstance@CWbemInstance@@UAGJJPBGPAPAU_IWmiObject@@@Z (Address: 0x10153290)
?StripClassPart@CWbemClass@@UAGJXZ (Address: 0x10153430)
?StripClassPart@CWbemInstance@@UAGJXZ (Address: 0x101532cc)
?Undecorate@CWbemClass@@UAEXXZ (Address: 0x10153210)
?Undecorate@CWbemInstance@@UAEXXZ (Address: 0x10153330)
?Unlock@CWbemObject@@UAGJJ@Z (Address: 0x10153098)
?UnmarshalInterface@CWbemObject@@UAGJPAUIStream@@ABU_GUID@@PAPAX@Z (Address: 0x101530e0)
?Unmerge@CWbemClass@@UAEJPAEHPAK@Z (Address: 0x101531f0)
?Unmerge@CWbemInstance@@UAEJPAEHPAK@Z (Address: 0x10153320)
?Unmerge@CWbemObject@@UAGJJKPAKPAX@Z (Address: 0x10153138)
?Update@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x101531e0)
?Update@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10153294)
?Upgrade@CWbemClass@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10153154)
?Upgrade@CWbemInstance@@UAGJPAU_IWmiObject@@JPAPAU2@@Z (Address: 0x10153298)
?ValidateObject@CWbemObject@@UAGJJ@Z (Address: 0x101532f0)
?ValidateRange@CWbemObject@@QAEHPAPAG@Z (Address: 0x1015347c)
?WriteDWORD@CWbemObject@@UAGJJK@Z (Address: 0x101530ac)
?WriteProp@CWbemObject@@UAGJPBGJKKJPAX@Z (Address: 0x1015310c)
?WritePropertyValue@CWbemObject@@UAGJJJPBE@Z (Address: 0x101530b8)
?WriteQWORD@CWbemObject@@UAGJJ_K@Z (Address: 0x101530a4)
?WriteToStream@CWbemInstance@@UAEJPAUIStream@@@Z (Address: 0x10153374)
?WriteToStream@CWbemObject@@UAEJPAUIStream@@@Z (Address: 0x10153140)
WbemStringCopy (Address: 0x10153440)
WbemStringFree (Address: 0x10153454)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x101535cc)
AcquireSRWLockShared (Address: 0x10153614)
CloseHandle (Address: 0x101534f8)
CloseThreadpoolTimer (Address: 0x101535c8)
CompareStringW (Address: 0x101535dc)
CreateEventW (Address: 0x101534e8)
CreateFileW (Address: 0x10153558)
CreateMutexExW (Address: 0x10153600)
CreateSemaphoreExW (Address: 0x10153584)
CreateThread (Address: 0x101534fc)
CreateThreadpoolTimer (Address: 0x101535f8)
CreateTimerQueueTimer (Address: 0x10153514)
DebugBreak (Address: 0x10153618)
DeleteCriticalSection (Address: 0x10153534)
DeleteTimerQueueTimer (Address: 0x10153538)
EnterCriticalSection (Address: 0x10153518)
ExpandEnvironmentStringsW (Address: 0x10153598)
FileTimeToSystemTime (Address: 0x10153560)
FormatMessageW (Address: 0x101535a8)
FreeLibrary (Address: 0x1015354c)
GetComputerNameExW (Address: 0x10153528)
GetCurrentProcess (Address: 0x101535bc)
GetCurrentProcessId (Address: 0x10153574)
GetCurrentThread (Address: 0x1015356c)
GetCurrentThreadId (Address: 0x10153524)
GetFileAttributesExW (Address: 0x101535e8)
GetFileAttributesW (Address: 0x1015360c)
GetFileInformationByHandle (Address: 0x1015355c)
GetLastError (Address: 0x10153530)
GetLocalTime (Address: 0x101535d0)
GetModuleFileNameA (Address: 0x10153580)
GetModuleHandleExW (Address: 0x10153594)
GetModuleHandleW (Address: 0x10153624)
GetProcAddress (Address: 0x10153544)
GetProcessHeap (Address: 0x10153628)
GetProcessTimes (Address: 0x1015357c)
GetSystemDirectoryW (Address: 0x1015353c)
GetSystemInfo (Address: 0x101535f0)
GetSystemTime (Address: 0x1015361c)
GetSystemTimeAsFileTime (Address: 0x10153620)
GetTickCount (Address: 0x10153508)
GetTickCount64 (Address: 0x1015350c)
GetVersionExW (Address: 0x10153608)
GlobalMemoryStatusEx (Address: 0x10153548)
HeapAlloc (Address: 0x101535fc)
HeapFree (Address: 0x10153588)
InitializeCriticalSectionAndSpinCount (Address: 0x1015351c)
InitializeCriticalSectionEx (Address: 0x1015359c)
IsDebuggerPresent (Address: 0x10153610)
LCMapStringW (Address: 0x10153510)
LeaveCriticalSection (Address: 0x10153520)
LoadLibraryExW (Address: 0x10153550)
LocalFree (Address: 0x10153570)
lstrlenW (Address: 0x10153554)
MoveFileW (Address: 0x10153604)
OpenEventW (Address: 0x10153564)
OpenProcess (Address: 0x10153568)
OpenSemaphoreW (Address: 0x101535e0)
OutputDebugStringW (Address: 0x101535b0)
QueryPerformanceCounter (Address: 0x101535b4)
QueueUserWorkItem (Address: 0x1015352c)
ReleaseMutex (Address: 0x101535a4)
ReleaseSemaphore (Address: 0x10153590)
ReleaseSRWLockExclusive (Address: 0x101535ac)
ReleaseSRWLockShared (Address: 0x101535f4)
ResetEvent (Address: 0x10153540)
SetEvent (Address: 0x101534f0)
SetLastError (Address: 0x1015358c)
SetThreadpoolTimer (Address: 0x101535e4)
SetUnhandledExceptionFilter (Address: 0x101535c0)
Sleep (Address: 0x101534ec)
SystemTimeToFileTime (Address: 0x101535ec)
TerminateProcess (Address: 0x101535b8)
TlsAlloc (Address: 0x101534f4)
TlsFree (Address: 0x10153504)
TlsGetValue (Address: 0x10153500)
TlsSetValue (Address: 0x101534dc)
UnhandledExceptionFilter (Address: 0x101535c4)
WaitForMultipleObjectsEx (Address: 0x101534e0)
WaitForSingleObject (Address: 0x101534e4)
WaitForSingleObjectEx (Address: 0x101535d8)
WaitForThreadpoolTimerCallbacks (Address: 0x101535a0)
WideCharToMultiByte (Address: 0x10153578)
WriteFile (Address: 0x101535d4)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x101537b4)
__dllonexit (Address: 0x1015372c)
_amsg_exit (Address: 0x10153738)
_CxxThrowException (Address: 0x10153750)
_except_handler4_common (Address: 0x10153730)
_ftol2 (Address: 0x10153714)
_ftol2_sse (Address: 0x10153710)
_initterm (Address: 0x10153734)
_lock (Address: 0x10153744)
_onexit (Address: 0x10153728)
_purecall (Address: 0x101537b0)
_ui64tow_s (Address: 0x10153774)
_unlock (Address: 0x10153740)
_vsnprintf (Address: 0x10153718)
_vsnprintf_s (Address: 0x10153778)
_vsnwprintf (Address: 0x101537a4)
_wcsicmp (Address: 0x101537a0)
_wcslwr_s (Address: 0x10153760)
_wcsnicmp (Address: 0x101537a8)
_XcptFilter (Address: 0x1015373c)
??0exception@@QAE@ABQBD@Z (Address: 0x1015375c)
??0exception@@QAE@ABQBDH@Z (Address: 0x10153758)
??0exception@@QAE@ABV0@@Z (Address: 0x10153780)
??0exception@@QAE@XZ (Address: 0x10153784)
??1exception@@UAE@XZ (Address: 0x10153788)
??1type_info@@UAE@XZ (Address: 0x10153724)
?terminate@@YAXXZ (Address: 0x10153720)
?what@exception@@UBEPBDXZ (Address: 0x10153754)
atol (Address: 0x10153704)
free (Address: 0x10153798)
isdigit (Address: 0x10153794)
iswspace (Address: 0x1015376c)
iswxdigit (Address: 0x10153768)
malloc (Address: 0x10153790)
memcmp (Address: 0x1015371c)
memcpy (Address: 0x1015374c)
memcpy_s (Address: 0x1015378c)
memmove (Address: 0x10153748)
memmove_s (Address: 0x10153770)
memset (Address: 0x10153708)
sscanf_s (Address: 0x1015370c)
swprintf_s (Address: 0x1015377c)
wcschr (Address: 0x1015379c)
wcsstr (Address: 0x10153764)
wcstok (Address: 0x101537ac)

ntdll.dll

WinSqmAddToStream (Address: 0x101537c0)
WinSqmIsOptedIn (Address: 0x101537bc)

OLE32.dll

CLSIDFromString (Address: 0x10153658)
CoCreateInstance (Address: 0x10153644)
CoDisconnectObject (Address: 0x10153654)
CoGetCallContext (Address: 0x10153634)
CoImpersonateClient (Address: 0x10153638)
CoInitializeEx (Address: 0x1015364c)
CoRevertToSelf (Address: 0x1015365c)
CoSetProxyBlanket (Address: 0x10153630)
CoSwitchCallContext (Address: 0x10153640)
CoTaskMemFree (Address: 0x1015363c)
CoUninitialize (Address: 0x10153660)
CoUnmarshalInterface (Address: 0x10153648)
StringFromGUID2 (Address: 0x10153650)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x10153690)
SafeArrayCreate (Address: 0x10153684)
SafeArrayDestroy (Address: 0x10153678)
SafeArrayGetDim (Address: 0x101536ac)
SafeArrayGetElement (Address: 0x10153694)
SafeArrayGetLBound (Address: 0x101536a4)
SafeArrayGetUBound (Address: 0x1015367c)
SafeArrayPutElement (Address: 0x1015366c)
SafeArrayUnaccessData (Address: 0x1015368c)
SetErrorInfo (Address: 0x10153670)
SysAllocString (Address: 0x101536b0)
SysAllocStringByteLen (Address: 0x10153698)
SysAllocStringLen (Address: 0x101536a8)
SysFreeString (Address: 0x10153674)
SysStringLen (Address: 0x1015369c)
VariantChangeType (Address: 0x10153680)
VariantClear (Address: 0x10153668)
VariantCopy (Address: 0x101536a0)
VariantInit (Address: 0x10153688)

VERSION.dll

GetFileVersionInfoExW (Address: 0x101536bc)
GetFileVersionInfoSizeExW (Address: 0x101536b8)
VerQueryValueW (Address: 0x101536c0)

wbemcomn.dll

_IsValidElementName (Address: 0x10153948)
_ThrowMemoryException_ (Address: 0x10153abc)
?_Free@CMUILocale@@SGHPAX@Z (Address: 0x10153a90)
?_GetSystemDefaultLocale@CMUILocale@@SGJPAPAGK@Z (Address: 0x101538bc)
??0CCheckedInCritSec@@QAE@PAVCCritSec@@@Z (Address: 0x10153b64)
??0CClientOpsNode@@QAE@XZ (Address: 0x10153ab4)
??0CCritSec@@QAE@XZ (Address: 0x10153b80)
??0CDateTimeParser@@QAE@PBG@Z (Address: 0x1015387c)
??0CEventLog@@QAE@PBGABU_GUID@@K@Z (Address: 0x10153908)
??0CFlexArray@@QAE@AAV0@@Z (Address: 0x10153a58)
??0CFlexArray@@QAE@HH@Z (Address: 0x10153b9c)
??0CFlexQueue@@QAE@H@Z (Address: 0x10153b3c)
??0CIdentitySecurity@@QAE@_N@Z (Address: 0x10153acc)
??0CInCritSec@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x10153b90)
??0CInsertionString@@QAE@PBG@Z (Address: 0x10153ab0)
??0CInsertionString@@QAE@VCHex@@@Z (Address: 0x10153904)
??0CInsertionString@@QAE@XZ (Address: 0x10153b14)
??0CLike@@QAE@PBGG@Z (Address: 0x10153868)
??0CMUILocaleList@@QAE@XZ (Address: 0x101539c8)
??0CNtAce@@QAE@KKKAAVCNtSid@@@Z (Address: 0x10153968)
??0CNtAcl@@QAE@K@Z (Address: 0x1015398c)
??0CNtAcl@@QAE@PAU_ACL@@@Z (Address: 0x101537e0)
??0CNtSecurityDescriptor@@QAE@PAX@Z (Address: 0x101539a4)
??0CNtSecurityDescriptor@@QAE@XZ (Address: 0x101539a8)
??0CNtSid@@QAE@PAX@Z (Address: 0x101539e4)
??0CPropertyName@@QAE@XZ (Address: 0x10153848)
??0CSafeArray@@QAE@HHHH@Z (Address: 0x10153a3c)
??0CSafeArray@@QAE@PAUtagSAFEARRAY@@HHH@Z (Address: 0x101539fc)
??0CStaticCritSec@@QAE@XZ (Address: 0x10153b78)
??0CVar@@QAE@ABV0@@Z (Address: 0x10153938)
??0CVar@@QAE@E@Z (Address: 0x1015381c)
??0CVar@@QAE@FH@Z (Address: 0x10153824)
??0CVar@@QAE@HPAG@Z (Address: 0x10153a50)
??0CVar@@QAE@HVauto_bstr@@@Z (Address: 0x101538f4)
??0CVar@@QAE@J@Z (Address: 0x10153820)
??0CVar@@QAE@PAUtagVARIANT@@@Z (Address: 0x1015383c)
??0CVar@@QAE@PAVCVarVector@@H@Z (Address: 0x10153828)
??0CVar@@QAE@XZ (Address: 0x10153afc)
??0CVarVector@@QAE@HHH@Z (Address: 0x10153830)
??0CWbemCriticalSection@@QAE@XZ (Address: 0x101538e0)
??0CWQLScanner@@QAE@PAVCGenLexSource@@@Z (Address: 0x10153a64)
??0CWStringArray@@QAE@HH@Z (Address: 0x10153b20)
??0QL_LEVEL_1_TOKEN@@QAE@ABU0@@Z (Address: 0x10153860)
??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x10153894)
??0Registry@@QAE@PAUHKEY__@@KKPBG@Z (Address: 0x10153a24)
??0Registry@@QAE@PAUHKEY__@@KPBG@Z (Address: 0x10153ac0)
??0Registry@@QAE@PBGK@Z (Address: 0x10153a94)
??0WString@@QAE@ABV0@@Z (Address: 0x1015392c)
??0WString@@QAE@PAGH@Z (Address: 0x10153bb8)
??0WString@@QAE@PBG@Z (Address: 0x101539bc)
??0WString@@QAE@XZ (Address: 0x10153adc)
??0WString2@@QAE@PAGH@Z (Address: 0x10153a84)
??0WString2@@QAE@PBG@Z (Address: 0x10153b50)
??0WString2@@QAE@XZ (Address: 0x10153b4c)
??1CCheckedInCritSec@@QAE@XZ (Address: 0x10153b68)
??1CClientOpsNode@@QAE@XZ (Address: 0x10153ae8)
??1CCritSec@@QAE@XZ (Address: 0x10153b84)
??1CDateTimeParser@@QAE@XZ (Address: 0x10153880)
??1CEnterWbemCriticalSection@@QAE@XZ (Address: 0x101538c0)
??1CEventLog@@QAE@XZ (Address: 0x1015390c)
??1CFlexArray@@QAE@XZ (Address: 0x10153ba0)
??1CFlexQueue@@QAE@XZ (Address: 0x10153b40)
??1CIdentitySecurity@@QAE@XZ (Address: 0x10153ad0)
??1CInCritSec@@QAE@XZ (Address: 0x10153b94)
??1CInsertionString@@QAE@XZ (Address: 0x10153b18)
??1CLike@@QAE@XZ (Address: 0x1015386c)
??1CMUILocaleList@@QAE@XZ (Address: 0x101539cc)
??1CNtAce@@UAE@XZ (Address: 0x1015396c)
??1CNtAcl@@QAE@XZ (Address: 0x10153990)
??1CNtSecurityDescriptor@@QAE@XZ (Address: 0x101539ac)
??1CNtSid@@QAE@XZ (Address: 0x101539e8)
??1CPropertyName@@QAE@XZ (Address: 0x1015384c)
??1CSafeArray@@QAE@XZ (Address: 0x10153a40)
??1CStaticCritSec@@QAE@XZ (Address: 0x10153b7c)
??1CVar@@QAE@XZ (Address: 0x10153b00)
??1CVarVector@@QAE@XZ (Address: 0x10153834)
??1CWbemCriticalSection@@QAE@XZ (Address: 0x101538e4)
??1CWQLScanner@@QAE@XZ (Address: 0x10153a68)
??1CWStringArray@@QAE@XZ (Address: 0x10153b24)
??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x101538a4)
??1QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x10153864)
??1QL1_Parser@@UAE@XZ (Address: 0x10153898)
??1Registry@@QAE@XZ (Address: 0x10153ac4)
??1WString@@QAE@XZ (Address: 0x10153aa4)
??1WString2@@QAE@XZ (Address: 0x10153b58)
??4CNtSecurityDescriptor@@QAEAAV0@AAV0@@Z (Address: 0x101537f0)
??4CWStringArray@@QAEAAV0@AAV0@@Z (Address: 0x10153a78)
??4WString@@QAEAAV0@ABV0@@Z (Address: 0x1015388c)
??4WString@@QAEAAV0@PBG@Z (Address: 0x10153ae0)
??4WString2@@QAEAAV0@PBG@Z (Address: 0x10153b54)
??ACFlexArray@@QAEAAPAXH@Z (Address: 0x10153ba4)
??ACWStringArray@@QBEPAGH@Z (Address: 0x10153b0c)
??YWString@@QAEAAV0@PBG@Z (Address: 0x10153ae4)
??YWString2@@QAEAAV0@ABV0@@Z (Address: 0x10153a88)
??YWString2@@QAEAAV0@PBG@Z (Address: 0x10153b5c)
?AccessCheck@CIdentitySecurity@@QAEHXZ (Address: 0x10153ad4)
?Add@CFlexArray@@QAEHPAX@Z (Address: 0x10153b98)
?Add@CVarVector@@QAEHAAVCVar@@@Z (Address: 0x10153838)
?Add@CWStringArray@@QAEHPBG@Z (Address: 0x10153b28)
?AddAce@CNtAcl@@QAEHPAVCNtAce@@@Z (Address: 0x1015399c)
?AddChild@CClientOpsNode@@QAEXPAV1@@Z (Address: 0x101539e0)
?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x10153854)
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UAEXABVCPropertyName@@@Z (Address: 0x101538b0)
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x101538a8)
?AliasToTable@CWQLScanner@@QAEQAGPAG@Z (Address: 0x10153a5c)
?anyFailure@CStaticCritSec@@SGHXZ (Address: 0x10153928)
?Bind@CFlexArray@@QAEXAAV1@@Z (Address: 0x10153a74)
?BindPtr@WString@@QAEXPAG@Z (Address: 0x10153aa8)
?ChangeTypeTo@CVar@@QAEHG@Z (Address: 0x1015385c)
?CheckLangNeutral@CMUILocale@@SGJPBGPA_N@Z (Address: 0x101539f0)
?Close@CEventLog@@QAEHXZ (Address: 0x10153910)
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z (Address: 0x10153b38)
?CoGetClassObject@CWbemInstallObject@@SGJABU_GUID@@KPAU_COSERVERINFO@@0PAPAX@Z (Address: 0x10153924)
?Compress@CFlexArray@@QAEXXZ (Address: 0x10153a70)
?ContainsSid@CNtAcl@@QAEHAAVCNtSid@@AAE@Z (Address: 0x101537e4)
?CreateInst@CWbemCallSecurity@@SGPAVIWbemCallSecurity@@XZ (Address: 0x10153a18)
?DeleteAce@CNtAcl@@QAEHH@Z (Address: 0x101537e8)
?DeleteSacl@CNtSecurityDescriptor@@QAEJXZ (Address: 0x10153800)
?DeleteValue@Registry@@QAEHPBG@Z (Address: 0x101538f8)
?Dequeue@CFlexQueue@@QAEPAXXZ (Address: 0x10153b48)
?Deserialize@CNtAce@@UAE_NPAE@Z (Address: 0x10153984)
?Empty@CFlexArray@@QAEXXZ (Address: 0x10153b74)
?Empty@CVar@@QAEXXZ (Address: 0x10153858)
?Empty@CWStringArray@@QAEXXZ (Address: 0x1015394c)
?Empty@WString@@QAEXXZ (Address: 0x1015393c)
?Empty@WString2@@QAEXXZ (Address: 0x10153b60)
?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x10153b44)
?Enter@CCheckedInCritSec@@QAEXXZ (Address: 0x10153aa0)
?Enter@CCritSec@@QAEXXZ (Address: 0x10153b88)
?Enter@CWbemCriticalSection@@QAEHK@Z (Address: 0x101538e8)
?EqualNoCase@WString@@QBEHPBG@Z (Address: 0x10153930)
?EqualNoCase@WString2@@QBEHPBG@Z (Address: 0x10153844)
?EscapeQuotes@WString2@@QBE?AV1@XZ (Address: 0x10153a8c)
?FillDMTF@CDateTimeParser@@QAEHPAGI@Z (Address: 0x10153884)
?FindStr@CWStringArray@@QAEHPBGH@Z (Address: 0x10153950)
?GetAccessMask@CNtAce@@UAEKXZ (Address: 0x10153978)
?GetAce@CNtAcl@@QAEPAVCNtAce@@H@Z (Address: 0x10153998)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x10153b1c)
?GetAt@CVarVector@@QAEAAVCVar@@H@Z (Address: 0x10153964)
?GetAt@CWStringArray@@QBEPAGH@Z (Address: 0x10153a4c)
?GetBinaryPath@CWbemInstallObject@@SGPBGXZ (Address: 0x1015391c)
?GetBSTR@CVar@@QAEPAGXZ (Address: 0x1015395c)
?GetBSTRAt@CSafeArray@@QAEPAGH@Z (Address: 0x10153a00)
?GetCultures@CMUILocaleList@@QAEPBGXZ (Address: 0x101539d8)
?GetDacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x101537f4)
?GetDacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x101539b0)
?GetDWORD@Registry@@QAEHPBGPAK@Z (Address: 0x10153ac8)
?GetDWORDStr@Registry@@QAEHPBGPAK@Z (Address: 0x10153a28)
?GetEmbeddedObject@CVar@@QAEPAUIUnknown@@XZ (Address: 0x10153840)
?GetFirst_ms_XXX_Locale@CMUILocaleList@@QAEJPAPAG@Z (Address: 0x101539d4)
?GetFlags@CNtAce@@UAEHXZ (Address: 0x10153974)
?GetLocales@CMUILocaleList@@QAEPBGXZ (Address: 0x101539dc)
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z (Address: 0x10153a2c)
?GetNumAces@CNtAcl@@QAEHXZ (Address: 0x10153994)
?GetOwner@CNtSecurityDescriptor@@QAEPAVCNtSid@@XZ (Address: 0x10153804)
?GetPersistentCfgValue@CPersistentConfig@@QAEHKAAK@Z (Address: 0x101538fc)
?GetQueueSize@CFlexQueue@@QBEHXZ (Address: 0x10153aac)
?GetReferencedAliases@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x10153a60)
?GetReferencedTables@CWQLScanner@@QAEHAAVCWStringArray@@@Z (Address: 0x10153878)
?GetRegistryPathCIMOM@CWbemInstallObject@@SGPBGXZ (Address: 0x10153b34)
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ (Address: 0x10153920)
?GetSacl@CNtSecurityDescriptor@@QAEJPAPAVCNtAcl@@@Z (Address: 0x101537f8)
?GetSacl@CNtSecurityDescriptor@@QAEPAVCNtAcl@@XZ (Address: 0x101539b8)
?GetSerializedSize@CNtAce@@UAEKXZ (Address: 0x1015397c)
?GetSid@CNtAce@@QAEPAVCNtSid@@XZ (Address: 0x101537dc)
?GetSize@CNtSecurityDescriptor@@QAEKXZ (Address: 0x10153810)
?GetStatus@CNtAce@@UAEKXZ (Address: 0x10153944)
?GetStr@Registry@@QAEHPBGPAPAG@Z (Address: 0x10153a98)
?GetStringAt@CPropertyName@@QBEPBGJ@Z (Address: 0x10153850)
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QAEPAGXZ (Address: 0x101538b4)
?GetType@CNtAce@@UAEHXZ (Address: 0x10153970)
?Init@CPublishWMIOperationEvent@@SGJXZ (Address: 0x101538f0)
?Initialize@CMUILocaleList@@QAEJPAG_N@Z (Address: 0x101539d0)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x10153b70)
?IsDataNull@CVar@@QAEHXZ (Address: 0x10153958)
?IsOffline@CWbemInstallObject@@SG_NXZ (Address: 0x10153b30)
?IsUserInGroup@CNtSecurity@@SGHPAXAAVCNtSid@@PAH@Z (Address: 0x10153954)
?IsValid@CNtAcl@@QAEHXZ (Address: 0x101537d4)
?IsValid@CNtSid@@QAEHXZ (Address: 0x101537d0)
?LCID_To_ms_XXX_Format@CMUILocale@@SGJKPAGI@Z (Address: 0x101539f8)
?Leave@CCheckedInCritSec@@QAEXXZ (Address: 0x10153b6c)
?Leave@CCritSec@@QAEXXZ (Address: 0x10153b8c)
?Leave@CWbemCriticalSection@@QAEXXZ (Address: 0x101538ec)
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z (Address: 0x101539f4)
?MakeInternalCopyOfThread@CWbemCallSecurity@@SGPAV1@XZ (Address: 0x101537c8)
?Match@CLike@@QAE_NPBG@Z (Address: 0x10153870)
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z (Address: 0x101539ec)
?Open@CEventLog@@QAEHXZ (Address: 0x10153914)
?OrderAces@CNtAcl@@QAEPAV1@XZ (Address: 0x101537ec)
?Parse@CWQLScanner@@QAEHXZ (Address: 0x10153a6c)
?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x1015389c)
?Peek@CFlexQueue@@QAEPAXXZ (Address: 0x10153af0)
?Publish@CPublishWMIOperationEvent@@SGJPAGKK0000K_K0H@Z (Address: 0x10153a04)
?PublishClientRequestFailure@CPublishWMIOperationEvent@@SGJPBGPAG1K10J0@Z (Address: 0x10153af8)
?PublishMethodExec@CPublishWMIOperationEvent@@SGJPAGKK000000K_K0H@Z (Address: 0x10153a08)
?PublishRepDelete@CPublishWMIOperationEvent@@SGJKPAGPAUIWbemContext@@K0_KH@Z (Address: 0x10153a10)
?PublishRepUpdate@CPublishWMIOperationEvent@@SGJKPAGKPAUIWbemContext@@K0_KH@Z (Address: 0x10153a14)
?PublishStop@CPublishWMIOperationEvent@@SGJKJPAG@Z (Address: 0x10153af4)
?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SGJPAGKK0K_K000K1H@Z (Address: 0x10153a0c)
?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXP6GJH@Z@Z (Address: 0x101538d4)
?Release@QL_LEVEL_1_RPN_EXPRESSION@@QAEXXZ (Address: 0x101538ac)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x10153ba8)
?RemoveAt@CWStringArray@@QAEHH@Z (Address: 0x10153a7c)
?RemoveSelf@CClientOpsNode@@QAEXXZ (Address: 0x10153aec)
?Report@CEventLog@@QAEHGABU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z (Address: 0x10153b2c)
?Serialize@CNtAce@@UAE_NPAEI@Z (Address: 0x10153980)
?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x10153934)
?SetBSTR@CVar@@QAEHPAG@Z (Address: 0x10153a1c)
?SetBSTR@CVar@@QAEHVauto_bstr@@@Z (Address: 0x10153a20)
?SetBSTRAt@CSafeArray@@QAEHHPAG@Z (Address: 0x10153a44)
?SetDacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x101539b4)
?SetDMTF@CWbemTime@@QAEHPBG@Z (Address: 0x10153890)
?SetDWORD@Registry@@QAEHPBGK@Z (Address: 0x10153a30)
?SetDWORDStr@Registry@@QAEHPBGK@Z (Address: 0x10153a34)
?SetEmbeddedObject@CVar@@QAEXPAUIUnknown@@@Z (Address: 0x10153a54)
?SetFailure@CStaticCritSec@@SGXXZ (Address: 0x10153bb4)
?SetFlags@CNtAce@@UAEXJ@Z (Address: 0x10153940)
?SetGroup@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x1015380c)
?SetLogingEnabled@CMemoryLog@@QAEX_N@Z (Address: 0x101538c8)
?SetOwner@CNtSecurityDescriptor@@QAEHPAVCNtSid@@@Z (Address: 0x10153808)
?SetSacl@CNtSecurityDescriptor@@QAEHPAVCNtAcl@@@Z (Address: 0x101537fc)
?SetStr@Registry@@QAEHPBG0@Z (Address: 0x10153a38)
?SetVarVector@CVar@@QAEXPAVCVarVector@@H@Z (Address: 0x1015382c)
?Size@CVarVector@@QAEHXZ (Address: 0x101539c0)
?Size@CWStringArray@@QBEHXZ (Address: 0x10153b10)
?Trim@CSafeArray@@QAEHXZ (Address: 0x10153a48)
?UnbindPtr@WString2@@QAEPAGXZ (Address: 0x101538a0)
?Union@CWStringArray@@SGXAAV1@00@Z (Address: 0x10153a80)
?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SGXXZ (Address: 0x101538d8)
?ValidateMemSize@CWin32DefaultArena@@SGHH@Z (Address: 0x101538b8)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x10153b04)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x10153b08)
?WbemMemReAlloc@CWin32DefaultArena@@SGPAXPAXK@Z (Address: 0x101537cc)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x10153bb0)
BreakOnDbgAndRenterLoop (Address: 0x10153ab8)
BuildOperationInfo (Address: 0x101539a0)
BuildSecurityDescriptorParameter (Address: 0x10153818)
ComposeName (Address: 0x10153918)
GetAccessToken (Address: 0x10153bbc)
GetGlobalClientOps (Address: 0x101539c4)
GetMemLogObject (Address: 0x10153bac)
GetSecurityDescriptorFromParameters (Address: 0x10153814)
IsAdmin (Address: 0x10153988)
IsInAdminGroup (Address: 0x101537d8)
IsLocalConnection (Address: 0x10153ad8)
IsNtSetupRunning (Address: 0x10153a9c)
isunialphanum (Address: 0x10153960)
ReadI64 (Address: 0x10153874)
ReadUI64 (Address: 0x10153888)
RegisterDLL (Address: 0x101538cc)
Set_WPP_INIT_TRACING_Call_State (Address: 0x101538c4)
TestDirExistAndCreateWithSDIfNotThere (Address: 0x10153900)
UnRegisterDLL (Address: 0x101538d0)
WMIControlClientOpsCallback (Address: 0x101538dc)