esscli.dll

Description: WMI

Version: 10.0.19041.6088

Architecture: 32-bit

Operating System: Windows NT

SHA256: fbcd6e0a399b2eb4b8ba666e63c52dec

File Size: 291.9 KB

Uploaded At: Dec. 1, 2025, 8:39 a.m.

Views: 7

Exported Functions

??0CClassInfoArray@@QAE@XZ (Ordinal: 1, Address: 0x20120)
??0CClassInformation@@QAE@ABU0@@Z (Ordinal: 2, Address: 0x1ff70)
??0CClassInformation@@QAE@XZ (Ordinal: 3, Address: 0x1ff60)
??0CContextMetaData@@QAE@PAVCMetaData@@PAUIWbemContext@@@Z (Ordinal: 4, Address: 0x5a70)
??0CEvalNode@@QAE@ABV0@@Z (Ordinal: 5, Address: 0x96e0)
??0CEvalNode@@QAE@XZ (Ordinal: 6, Address: 0x96d0)
??0CEvalTree@@QAE@ABV0@@Z (Ordinal: 7, Address: 0x101a0)
??0CEvalTree@@QAE@XZ (Ordinal: 8, Address: 0x10150)
??0CMetaData@@QAE@ABV0@@Z (Ordinal: 9, Address: 0x56b0)
??0CMetaData@@QAE@XZ (Ordinal: 10, Address: 0x5680)
??0CObjectInfo@@QAE@XZ (Ordinal: 11, Address: 0x7360)
??0CPropertyProjectionFilter@@QAE@ABV0@@Z (Ordinal: 12, Address: 0x8180)
??0CPropertyProjectionFilter@@QAE@XZ (Ordinal: 13, Address: 0x146d0)
??0CReuseMemoryManager@@QAE@II@Z (Ordinal: 14, Address: 0x5df0)
??0CSortedArray@@QAE@AAV0@@Z (Ordinal: 15, Address: 0x7710)
??0CSortedArray@@QAE@HH@Z (Ordinal: 16, Address: 0x75b0)
??0CSortedArray@@QAE@IPAK@Z (Ordinal: 17, Address: 0x9800)
??0CStandardMetaData@@QAE@ABV0@@Z (Ordinal: 18, Address: 0x5780)
??0CStandardMetaData@@QAE@PAUIWbemServices@@@Z (Ordinal: 19, Address: 0x5be0)
??0CTempMemoryManager@@QAE@XZ (Ordinal: 20, Address: 0x24680)
??0CTimeKeeper@@QAE@XZ (Ordinal: 21, Address: 0x1fe10)
??1CClassInfoArray@@QAE@XZ (Ordinal: 22, Address: 0x201d0)
??1CClassInformation@@QAE@XZ (Ordinal: 23, Address: 0x1ffd0)
??1CContextMetaData@@QAE@XZ (Ordinal: 24, Address: 0x5ac0)
??1CEvalNode@@UAE@XZ (Ordinal: 25, Address: 0x96f0)
??1CEvalTree@@QAE@XZ (Ordinal: 26, Address: 0x101f0)
??1CMetaData@@UAE@XZ (Ordinal: 27, Address: 0x56a0)
??1CObjectInfo@@QAE@XZ (Ordinal: 28, Address: 0x8730)
??1CPropertyProjectionFilter@@QAE@XZ (Ordinal: 29, Address: 0x14780)
??1CReuseMemoryManager@@QAE@XZ (Ordinal: 30, Address: 0x5e50)
??1CSortedArray@@QAE@XZ (Ordinal: 31, Address: 0x76c0)
??1CStandardMetaData@@UAE@XZ (Ordinal: 32, Address: 0x5c40)
??1CTempMemoryManager@@QAE@XZ (Ordinal: 33, Address: 0x246f0)
??1CTimeKeeper@@QAE@XZ (Ordinal: 34, Address: 0x1fe50)
??4CClassInfoArray@@QAE_NAAV0@@Z (Ordinal: 35, Address: 0x20240)
??4CClassInformation@@QAEAAU0@ABU0@@Z (Ordinal: 36, Address: 0x20030)
??4CContextMetaData@@QAEAAV0@ABV0@@Z (Ordinal: 37, Address: 0x58a0)
??4CEvalTree@@QAEXABV0@@Z (Ordinal: 38, Address: 0x140b0)
??4CMetaData@@QAEAAV0@ABV0@@Z (Ordinal: 39, Address: 0x56d0)
??4CObjectInfo@@QAEAAV0@ABV0@@Z (Ordinal: 40, Address: 0x58a0)
??4CPropertyProjectionFilter@@QAEAAV0@ABV0@@Z (Ordinal: 41, Address: 0x56d0)
??4CQueryAnalyser@@QAEAAV0@$$QAV0@@Z (Ordinal: 42, Address: 0x20110)
??4CQueryAnalyser@@QAEAAV0@ABV0@@Z (Ordinal: 43, Address: 0x20110)
??4CReuseMemoryManager@@QAEAAV0@ABV0@@Z (Ordinal: 44, Address: 0x5fe0)
??4CSortedArray@@QAEXABV0@@Z (Ordinal: 45, Address: 0x75e0)
??4CStandardMetaData@@QAEAAV0@ABV0@@Z (Ordinal: 46, Address: 0x57f0)
??4CTempMemoryManager@@QAEAAV0@ABV0@@Z (Ordinal: 47, Address: 0x6030)
??4CTimeKeeper@@QAEAAV0@$$QAV0@@Z (Ordinal: 48, Address: 0x1fec0)
??4CTimeKeeper@@QAEAAV0@ABV0@@Z (Ordinal: 49, Address: 0x1fea0)
??_7CEvalNode@@6B@ (Ordinal: 50, Address: 0x22dc)
??_7CMetaData@@6B@ (Ordinal: 51, Address: 0x1564)
??_7CPropertyProjectionFilter@@6B@ (Ordinal: 52, Address: 0x26d4)
??_7CStandardMetaData@@6B@ (Ordinal: 53, Address: 0x154c)
??_FCSortedArray@@QAEXXZ (Ordinal: 54, Address: 0x7740)
?Add@CSortedArray@@QAEHK@Z (Ordinal: 55, Address: 0x7650)
?AddClass@CClassInfoArray@@QAE_NPAUCClassInformation@@@Z (Ordinal: 56, Address: 0x20090)
?AddDataFrom@CSortedArray@@QAEJABV1@@Z (Ordinal: 57, Address: 0x9b20)
?AddDataFrom@CSortedArray@@QAEJPBKI@Z (Ordinal: 58, Address: 0x9cb0)
?AddProperty@CPropertyProjectionFilter@@QAE_NABVCPropertyName@@@Z (Ordinal: 59, Address: 0x148a0)
?AddRef@CMetaData@@UAGKXZ (Ordinal: 60, Address: 0x5960)
?Allocate@CReuseMemoryManager@@QAEPAXXZ (Ordinal: 61, Address: 0x5ec0)
?Allocate@CTempMemoryManager@@QAEPAXI@Z (Ordinal: 62, Address: 0x24390)
?AndDefiniteClassArrays@CQueryAnalyser@@KGJPAVCClassInfoArray@@00@Z (Ordinal: 63, Address: 0x212a0)
?AndPossibleClassArrays@CQueryAnalyser@@KGJPAVCClassInfoArray@@00@Z (Ordinal: 64, Address: 0x20c60)
?AndQueryExpressions@CQueryAnalyser@@KGJPAUQL_LEVEL_1_RPN_EXPRESSION@@00@Z (Ordinal: 65, Address: 0x21af0)
?AppendQueryExpression@CQueryAnalyser@@KGXPAUQL_LEVEL_1_RPN_EXPRESSION@@0@Z (Ordinal: 66, Address: 0x21ab0)
?ApplyPredicate@CEvalTree@@QAEJPAVCLeafPredicate@@@Z (Ordinal: 67, Address: 0x14050)
?BuildFromToken@CEvalTree@@SGJPAVCContextMetaData@@AAVCImplicationList@@AAUQL_LEVEL_1_TOKEN@@PAPAVCEvalNode@@@Z (Ordinal: 68, Address: 0x11740)
?BuildTwoPropFromToken@CEvalTree@@SGJPAVCContextMetaData@@AAVCImplicationList@@AAUQL_LEVEL_1_TOKEN@@PAPAVCEvalNode@@@Z (Ordinal: 69, Address: 0x10ad0)
?CanPointToClass@CQueryAnalyser@@SGJPAUIWbemClassObject@@PBG1PAVCContextMetaData@@@Z (Ordinal: 70, Address: 0x23480)
?Clear@CClassInfoArray@@QAEXXZ (Ordinal: 71, Address: 0x20080)
?Clear@CEvalTree@@QAE_NXZ (Ordinal: 72, Address: 0x14200)
?Clear@CObjectInfo@@QAEXXZ (Ordinal: 73, Address: 0x8690)
?Clear@CReuseMemoryManager@@QAEXXZ (Ordinal: 74, Address: 0x5f80)
?Clear@CStandardMetaData@@QAEXXZ (Ordinal: 75, Address: 0x5cb0)
?Clear@CTempMemoryManager@@QAEXXZ (Ordinal: 76, Address: 0x24640)
?CloneNode@CEvalNode@@SGPAV1@PBV1@@Z (Ordinal: 77, Address: 0x9730)
?Combine@CEvalTree@@SGJPAVCEvalNode@@0HPAVCContextMetaData@@AAVCImplicationList@@_N3PAPAV2@@Z (Ordinal: 78, Address: 0x12b40)
?CombineLeafWithBranch@CEvalTree@@KGJPAVCValueNode@@PAVCBranchingNode@@HPAVCContextMetaData@@AAVCImplicationList@@_N4PAPAVCEvalNode@@@Z (Ordinal: 79, Address: 0x137f0)
?CombineWith@CEvalTree@@QAEJAAV1@PAVCContextMetaData@@HJ@Z (Ordinal: 80, Address: 0x13be0)
?Compare@CEvalTree@@SGHPAVCEvalNode@@0@Z (Ordinal: 81, Address: 0x10330)
?Compare@CSortedArray@@QAEHAAV1@@Z (Ordinal: 82, Address: 0x9ab0)
?CompareRequestedToProvided@CQueryAnalyser@@SGHAAVCClassInfoArray@@0@Z (Ordinal: 83, Address: 0x22a70)
?CopyDataFrom@CSortedArray@@QAEJABV1@@Z (Ordinal: 84, Address: 0x7690)
?CopyDataFrom@CSortedArray@@QAEJPBKI@Z (Ordinal: 85, Address: 0x9850)
?CopyTo@CSortedArray@@QAEIPAKI@Z (Ordinal: 86, Address: 0x9e00)
?CreateFromConjunction@CEvalTree@@SGJPAVCContextMetaData@@AAVCImplicationList@@PAVCConjunction@@PAPAVCEvalNode@@@Z (Ordinal: 87, Address: 0x14270)
?CreateFromDNF@CEvalTree@@QAEJPAVCContextMetaData@@AAVCImplicationList@@PAVCDNFExpression@@PAPAVCEvalNode@@@Z (Ordinal: 88, Address: 0x14430)
?CreateFromQuery@CEvalTree@@QAEJPAVCContextMetaData@@PAUQL_LEVEL_1_RPN_EXPRESSION@@JJ@Z (Ordinal: 89, Address: 0x104c0)
?CreateFromQuery@CEvalTree@@QAEJPAVCContextMetaData@@PBGHPAUQL_LEVEL_1_TOKEN@@JJ@Z (Ordinal: 90, Address: 0x104f0)
?CreateFromQuery@CEvalTree@@QAEJPAVCContextMetaData@@PBGJJ@Z (Ordinal: 91, Address: 0x103a0)
?CreateProjection@CEvalTree@@QAEJAAV1@PAVCContextMetaData@@PAVCProjectionFilter@@W4EProjectionType@@_N@Z (Ordinal: 92, Address: 0x145b0)
?DecorateObject@CTimeKeeper@@QAE_NPAU_IWmiObject@@@Z (Ordinal: 93, Address: 0x2f0f0)
?Empty@CSortedArray@@QAEXXZ (Ordinal: 94, Address: 0x7620)
?Evaluate@CEvalTree@@QAEJPAUIWbemObjectAccess@@AAVCSortedArray@@@Z (Ordinal: 95, Address: 0x13a00)
?Evaluate@CEvalTree@@SGJAAVCObjectInfo@@PAVCEvalNode@@AAVCSortedArray@@@Z (Ordinal: 96, Address: 0x138e0)
?Find@CSortedArray@@QAEIK@Z (Ordinal: 97, Address: 0x98e0)
?Free@CReuseMemoryManager@@QAEXPAX@Z (Ordinal: 98, Address: 0x5f20)
?Free@CTempMemoryManager@@QAEXPAXI@Z (Ordinal: 99, Address: 0x24560)
GetAccessMask (Ordinal: 100, Address: 0x2efa0)
?GetArrayPtr@CSortedArray@@QAEPAKXZ (Ordinal: 101, Address: 0x7670)
?GetAt@CSortedArray@@QAEKH@Z (Ordinal: 102, Address: 0x7600)
?GetClass@CClassInfoArray@@QAEPAUCClassInformation@@H@Z (Ordinal: 103, Address: 0x20060)
?GetClass@CContextMetaData@@QAEJPBGPAPAU_IWmiObject@@@Z (Ordinal: 104, Address: 0x5b30)
?GetClass@CMetaData@@UAGJPBGPAUIWbemContext@@PAPAUIWbemClassObject@@@Z (Ordinal: 105, Address: 0x59c0)
?GetClass@CStandardMetaData@@UAEJPBGPAUIWbemContext@@PAPAU_IWmiObject@@@Z (Ordinal: 106, Address: 0x5ce0)
?GetDefiniteInstanceClasses@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAPAVCClassInfoArray@@@Z (Ordinal: 107, Address: 0x20ef0)
?GetInstanceClasses@CQueryAnalyser@@KGJAAUQL_LEVEL_1_TOKEN@@AAVCClassInfoArray@@@Z (Ordinal: 108, Address: 0x21540)
?GetLength@CObjectInfo@@QAEJXZ (Ordinal: 109, Address: 0x7370)
?GetLimitingQueryForInstanceClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAUCClassInformation@@AAPAG@Z (Ordinal: 110, Address: 0x22090)
?GetNecessaryQueryForClass@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PAUIWbemClassObject@@AAVCWStringArray@@AAPAU2@@Z (Ordinal: 111, Address: 0x23710)
?GetNecessaryQueryForProperty@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAVCPropertyName@@AAPAU2@@Z (Ordinal: 112, Address: 0x216b0)
?GetNumClasses@CClassInfoArray@@QAEHXZ (Ordinal: 113, Address: 0x20050)
?GetObjectAt@CObjectInfo@@QAEPAU_IWmiObject@@J@Z (Ordinal: 114, Address: 0x7380)
?GetPossibleInstanceClasses@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAPAVCClassInfoArray@@@Z (Ordinal: 115, Address: 0x203b0)
?GetPropertiesThatMustDiffer@CQueryAnalyser@@KGJPAUQL_LEVEL_1_RPN_EXPRESSION@@AAUCClassInformation@@AAVCWStringArray@@@Z (Ordinal: 116, Address: 0x21c10)
?GetType@CEvalNode@@SGHPAV1@@Z (Ordinal: 117, Address: 0x7450)
?InnerCombine@CEvalTree@@KGJPAVCEvalNode@@0HPAVCContextMetaData@@AAVCImplicationList@@_N3PAPAV2@@Z (Ordinal: 118, Address: 0x13270)
?Insert@CSortedArray@@QAEXK@Z (Ordinal: 119, Address: 0x9990)
?IsAllFalse@CEvalNode@@SG_NPAV1@@Z (Ordinal: 120, Address: 0x74e0)
?IsAllFalse@CEvalNode@@UAE_NXZ (Ordinal: 121, Address: 0x74a0)
?IsFalse@CEvalTree@@QAE_NXZ (Ordinal: 122, Address: 0x10300)
?IsInSet@CPropertyProjectionFilter@@UAE_NPAVCEvalNode@@@Z (Ordinal: 123, Address: 0x147e0)
?IsInvalid@CEvalNode@@SG_NPAV1@@Z (Ordinal: 124, Address: 0x74b0)
?IsInvalid@CEvalNode@@UAE_NXZ (Ordinal: 125, Address: 0x74a0)
?IsLimited@CClassInfoArray@@QAEHXZ (Ordinal: 126, Address: 0x7370)
?IsMergeAdvisable@CEvalTree@@SGJPAVCEvalNode@@0AAVCImplicationList@@@Z (Ordinal: 127, Address: 0x13da0)
?IsNoop@CEvalNode@@SG_NPAV1@H@Z (Ordinal: 128, Address: 0x97b0)
?IsNoop@CEvalNode@@UAE_NH@Z (Ordinal: 129, Address: 0x7510)
?IsPropertyInClass@CQueryAnalyser@@KGHAAVCPropertyName@@PAUIWbemClassObject@@AAVCWStringArray@@@Z (Ordinal: 130, Address: 0x23d50)
?IsTokenAboutClass@CQueryAnalyser@@KGHAAUQL_LEVEL_1_TOKEN@@PAUIWbemClassObject@@AAVCWStringArray@@@Z (Ordinal: 131, Address: 0x23d00)
?IsTokenAboutProperty@CQueryAnalyser@@KGHAAUQL_LEVEL_1_TOKEN@@AAVCPropertyName@@@Z (Ordinal: 132, Address: 0x21a50)
IsUserAdministrator (Ordinal: 133, Address: 0x2ef70)
IsUserInGroup (Ordinal: 134, Address: 0x2ee00)
?IsValid@CEvalTree@@QAE_NXZ (Ordinal: 135, Address: 0x10310)
?NegateDefiniteClassArray@CQueryAnalyser@@KGJPAVCClassInfoArray@@0@Z (Ordinal: 136, Address: 0x21510)
?NegatePossibleClassArray@CQueryAnalyser@@KGJPAVCClassInfoArray@@0@Z (Ordinal: 137, Address: 0x20ed0)
?NegateQueryExpression@CQueryAnalyser@@KGJPAUQL_LEVEL_1_RPN_EXPRESSION@@0@Z (Ordinal: 138, Address: 0x22b30)
?Optimize@CEvalNode@@UAEJPAVCContextMetaData@@PAPAV1@@Z (Ordinal: 139, Address: 0x7480)
?Optimize@CEvalTree@@QAEJPAVCContextMetaData@@@Z (Ordinal: 140, Address: 0x13ab0)
?OrDefiniteClassArrays@CQueryAnalyser@@KGJPAVCClassInfoArray@@00@Z (Ordinal: 141, Address: 0x212d0)
?OrPossibleClassArrays@CQueryAnalyser@@KGJPAVCClassInfoArray@@00@Z (Ordinal: 142, Address: 0x20c90)
?OrQueryExpressions@CQueryAnalyser@@KGJPAUQL_LEVEL_1_RPN_EXPRESSION@@00@Z (Ordinal: 143, Address: 0x21b80)
?PrintOffset@CEvalNode@@SGXPAU_iobuf@@H@Z (Ordinal: 144, Address: 0x9700)
?Project@CEvalTree@@SGJPAVCContextMetaData@@AAVCImplicationList@@PAVCEvalNode@@PAVCProjectionFilter@@W4EProjectionType@@_NPAPAV4@@Z (Ordinal: 145, Address: 0x14680)
?QueryInterface@CMetaData@@UAGJABU_GUID@@PAPAX@Z (Ordinal: 146, Address: 0x58f0)
?Rebase@CEvalTree@@QAEXK@Z (Ordinal: 147, Address: 0x141d0)
?Rebase@CSortedArray@@QAEXK@Z (Ordinal: 148, Address: 0x9ae0)
?Release@CMetaData@@UAGKXZ (Ordinal: 149, Address: 0x5980)
?Remove@CSortedArray@@QAE_NK@Z (Ordinal: 150, Address: 0x9a80)
?RemoveClass@CClassInfoArray@@QAEXH@Z (Ordinal: 151, Address: 0x200c0)
?RemoveIndex@CEvalTree@@QAEJH@Z (Ordinal: 152, Address: 0x13e80)
?RoundUp@CTempMemoryManager@@IAEII@Z (Ordinal: 153, Address: 0x6000)
?SetBool@CEvalTree@@QAE_NH@Z (Ordinal: 154, Address: 0x10270)
?SetLength@CObjectInfo@@QAE_NJ@Z (Ordinal: 155, Address: 0x8610)
?SetLimited@CClassInfoArray@@QAEXH@Z (Ordinal: 156, Address: 0x7630)
?SetObjectAt@CObjectInfo@@QAEXJPAU_IWmiObject@@@Z (Ordinal: 157, Address: 0x86e0)
?SetOne@CClassInfoArray@@QAE_NPBGH@Z (Ordinal: 158, Address: 0x202d0)
?SetSize@CSortedArray@@QAEXH@Z (Ordinal: 159, Address: 0x7630)
?SimplifyQueryForChild@CQueryAnalyser@@SGJPAUQL_LEVEL_1_RPN_EXPRESSION@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@AAPAU2@@Z (Ordinal: 160, Address: 0x22ba0)
?SimplifyTokenForChild@CQueryAnalyser@@KGHAAUQL_LEVEL_1_TOKEN@@PBGPAUIWbemClassObject@@PAVCContextMetaData@@@Z (Ordinal: 161, Address: 0x23030)
?Size@CSortedArray@@QBEHXZ (Ordinal: 162, Address: 0x7370)
?UnbindPtr@CSortedArray@@QAEPAKXZ (Ordinal: 163, Address: 0x7680)
?UtilizeGuarantee@CEvalTree@@QAEJAAV1@PAVCContextMetaData@@@Z (Ordinal: 164, Address: 0x13ef0)
?ValidateSQLDateTime@CQueryAnalyser@@KGHPBG@Z (Ordinal: 165, Address: 0x23400)
DllCanUnloadNow (Ordinal: 166, Address: 0x302d0)
DllGetClassObject (Ordinal: 167, Address: 0x301e0)
DllRegisterServer (Ordinal: 168, Address: 0x30380)
DllUnregisterServer (Ordinal: 169, Address: 0x304e0)

Imported DLLs & Functions

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1004111c)
HeapAlloc (Address: 0x10041120)
HeapFree (Address: 0x10041124)
HeapReAlloc (Address: 0x10041128)

api-ms-win-core-libraryloader-l1-1-0.dll

GetModuleHandleW (Address: 0x10041130)

api-ms-win-core-sysinfo-l1-1-0.dll

GetVersion (Address: 0x10041138)

FastProx.dll

??0CInternalString@@QAE@ABV0@@Z (Address: 0x10041028)
??0CInternalString@@QAE@PBG@Z (Address: 0x10041010)
??1CInternalString@@QAE@XZ (Address: 0x10041034)
??4CInternalString@@QAEAAV0@ABV0@@Z (Address: 0x10041024)
??BCInternalString@@QBE?AVWString@@XZ (Address: 0x10041018)
?AcquireCompressedString@CInternalString@@QAEXPAVCCompressedString@@@Z (Address: 0x10041030)
?CheapCompare@CCompressedString@@QBEHABV1@@Z (Address: 0x1004101c)
?CompareNoCase@CCompressedString@@QBEHABV1@@Z (Address: 0x1004100c)
?ComputeNecessarySpace@CCompressedString@@SGHPBG@Z (Address: 0x10041008)
?CreateBSTRCopy@CCompressedString@@QBEPAGXZ (Address: 0x10041020)
?CreateWStringCopy@CCompressedString@@QBE?AVWString@@XZ (Address: 0x10041014)
?GetLength@CCompressedString@@QBEHXZ (Address: 0x10041004)
?GetParentAtIndex@CWbemObject@@QAEPAVCCompressedString@@H@Z (Address: 0x1004102c)
?GetVARTYPE@CType@@SGGK@Z (Address: 0x10041038)
?SetFromUnicode@CCompressedString@@QAEXPBG@Z (Address: 0x10041000)
WbemStringCopy (Address: 0x1004103c)

KERNEL32.dll

CloseHandle (Address: 0x100410ac)
CreateEventW (Address: 0x100410c0)
CreateThread (Address: 0x100410bc)
DebugBreak (Address: 0x10041070)
DeleteCriticalSection (Address: 0x10041064)
DisableThreadLibraryCalls (Address: 0x10041068)
EnterCriticalSection (Address: 0x100410a4)
FreeLibrary (Address: 0x10041080)
GetCurrentProcess (Address: 0x10041048)
GetCurrentProcessId (Address: 0x100410b4)
GetCurrentThreadId (Address: 0x10041058)
GetLastError (Address: 0x100410c4)
GetModuleFileNameW (Address: 0x1004106c)
GetProcAddress (Address: 0x10041078)
GetSystemTimeAsFileTime (Address: 0x10041074)
GetTickCount (Address: 0x10041054)
InitializeCriticalSectionEx (Address: 0x10041060)
LCMapStringW (Address: 0x1004108c)
LeaveCriticalSection (Address: 0x100410a8)
LoadLibraryExW (Address: 0x1004107c)
QueryPerformanceCounter (Address: 0x1004105c)
ResetEvent (Address: 0x10041088)
SetEvent (Address: 0x100410b8)
SetLastError (Address: 0x10041084)
SetUnhandledExceptionFilter (Address: 0x1004104c)
Sleep (Address: 0x100410b0)
TerminateProcess (Address: 0x10041044)
UnhandledExceptionFilter (Address: 0x10041050)
VirtualAlloc (Address: 0x10041098)
VirtualFree (Address: 0x10041094)
VirtualQuery (Address: 0x1004109c)
WaitForMultipleObjectsEx (Address: 0x10041090)
WaitForSingleObject (Address: 0x100410a0)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100411b8)
__dllonexit (Address: 0x10041164)
_amsg_exit (Address: 0x10041140)
_CxxThrowException (Address: 0x10041190)
_except_handler4_common (Address: 0x10041170)
_ftol2 (Address: 0x1004114c)
_initterm (Address: 0x1004117c)
_lock (Address: 0x10041184)
_onexit (Address: 0x10041168)
_purecall (Address: 0x100411b4)
_unlock (Address: 0x10041180)
_vsnprintf (Address: 0x10041154)
_vsnwprintf (Address: 0x100411a8)
_XcptFilter (Address: 0x10041178)
??0exception@@QAE@ABQBD@Z (Address: 0x100411a4)
??0exception@@QAE@ABQBDH@Z (Address: 0x100411a0)
??0exception@@QAE@ABV0@@Z (Address: 0x1004119c)
??1exception@@UAE@XZ (Address: 0x10041198)
??1type_info@@UAE@XZ (Address: 0x1004115c)
?terminate@@YAXXZ (Address: 0x10041160)
?what@exception@@UBEPBDXZ (Address: 0x10041194)
atol (Address: 0x10041150)
fprintf (Address: 0x100411b0)
free (Address: 0x10041144)
iswspace (Address: 0x10041158)
malloc (Address: 0x10041148)
memcmp (Address: 0x10041174)
memcpy (Address: 0x1004118c)
memmove (Address: 0x10041188)
memset (Address: 0x100411bc)
sscanf_s (Address: 0x1004116c)
wcschr (Address: 0x100411ac)

ntdll.dll

RtlEqualSid (Address: 0x100411cc)
RtlFreeSid (Address: 0x100411d0)
RtlLengthSecurityDescriptor (Address: 0x100411c8)
RtlLengthSid (Address: 0x100411c4)

OLE32.dll

CoCreateInstance (Address: 0x100410f4)
CoGetCallContext (Address: 0x100410d8)
CoGetInterfaceAndReleaseStream (Address: 0x100410ec)
CoGetMarshalSizeMax (Address: 0x100410e0)
CoInitializeEx (Address: 0x100410e8)
CoMarshalInterface (Address: 0x100410dc)
CoMarshalInterThreadInterfaceInStream (Address: 0x100410d0)
CoReleaseMarshalData (Address: 0x100410cc)
CoTaskMemFree (Address: 0x100410e4)
CoUninitialize (Address: 0x100410f0)
CoUnmarshalInterface (Address: 0x100410d4)
StringFromGUID2 (Address: 0x100410f8)

OLEAUT32.dll

SysAllocString (Address: 0x10041104)
SysFreeString (Address: 0x10041100)
VariantChangeType (Address: 0x10041114)
VariantClear (Address: 0x10041110)
VariantCopy (Address: 0x10041108)
VariantInit (Address: 0x1004110c)

wbemcomn.dll

_ThrowMemoryException_ (Address: 0x1004134c)
??_7CUnkInternal@@6B@ (Address: 0x100412d0)
??0CCritSec@@QAE@XZ (Address: 0x10041350)
??0CDateTimeParser@@QAE@PBG@Z (Address: 0x10041294)
??0CFlexArray@@QAE@AAV0@@Z (Address: 0x100411f4)
??0CFlexArray@@QAE@HH@Z (Address: 0x1004131c)
??0CFlexQueue@@QAE@H@Z (Address: 0x10041334)
??0CInCritSec@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x10041358)
??0CLike@@QAE@PBGG@Z (Address: 0x100412b4)
??0CNtSid@@QAE@W4SidType@0@@Z (Address: 0x100412c8)
??0CPropertyName@@QAE@ABV0@@Z (Address: 0x100411dc)
??0CPropertyName@@QAE@XZ (Address: 0x10041258)
??0CStaticCritSec@@QAE@XZ (Address: 0x100412ec)
??0CUnkInternal@@QAE@PAVCLifeControl@@@Z (Address: 0x100412e8)
??0CVar@@QAE@XZ (Address: 0x10041264)
??0CWbemCriticalSection@@QAE@XZ (Address: 0x100412c0)
??0CWStringArray@@QAE@HH@Z (Address: 0x100411e0)
??0QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x10041268)
??0QL_LEVEL_1_TOKEN@@QAE@ABU0@@Z (Address: 0x10041328)
??0QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x10041270)
??0QL1_Parser@@QAE@PAVCGenLexSource@@@Z (Address: 0x1004123c)
??0WString@@QAE@ABV0@@Z (Address: 0x10041260)
??0WString@@QAE@PAGH@Z (Address: 0x1004120c)
??0WString@@QAE@PBG@Z (Address: 0x10041210)
??0WString@@QAE@XZ (Address: 0x100411fc)
??1CCritSec@@QAE@XZ (Address: 0x1004135c)
??1CDateTimeParser@@QAE@XZ (Address: 0x10041298)
??1CFlexArray@@QAE@XZ (Address: 0x10041318)
??1CFlexQueue@@QAE@XZ (Address: 0x10041330)
??1CInCritSec@@QAE@XZ (Address: 0x100412fc)
??1CLike@@QAE@XZ (Address: 0x10041200)
??1CNtSid@@QAE@XZ (Address: 0x100412cc)
??1CPropertyName@@QAE@XZ (Address: 0x10041254)
??1CStaticCritSec@@QAE@XZ (Address: 0x100412f0)
??1CUnkInternal@@UAE@XZ (Address: 0x100412e4)
??1CVar@@QAE@XZ (Address: 0x10041228)
??1CWbemCriticalSection@@QAE@XZ (Address: 0x100412c4)
??1CWStringArray@@QAE@XZ (Address: 0x100411e4)
??1QL_LEVEL_1_RPN_EXPRESSION@@QAE@XZ (Address: 0x10041250)
??1QL_LEVEL_1_TOKEN@@QAE@XZ (Address: 0x10041324)
??1QL1_Parser@@UAE@XZ (Address: 0x10041240)
??1WString@@QAE@XZ (Address: 0x1004125c)
??4CFlexArray@@QAEAAV0@AAV0@@Z (Address: 0x100411e8)
??4CLike@@QAEAAV0@ABV0@@Z (Address: 0x100411d8)
??4CPropertyName@@QAEXABV0@@Z (Address: 0x100411f8)
??4CWStringArray@@QAEAAV0@AAV0@@Z (Address: 0x1004127c)
??4WString@@QAEAAV0@PBG@Z (Address: 0x1004122c)
??8CPropertyName@@QAEHABU_tag_WbemPropertyName@@@Z (Address: 0x1004124c)
??ACFlexArray@@QAEAAPAXH@Z (Address: 0x10041314)
??ACFlexArray@@QBEPAXH@Z (Address: 0x1004129c)
?Add@CFlexArray@@QAEHPAX@Z (Address: 0x10041300)
?Add@CWStringArray@@QAEHPBG@Z (Address: 0x10041214)
?AddElement@CPropertyName@@QAEXPBG@Z (Address: 0x10041224)
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UAEXABVCPropertyName@@@Z (Address: 0x10041284)
?AddRef@CUnkInternal@@UAGKXZ (Address: 0x100412dc)
?AddToken@QL_LEVEL_1_RPN_EXPRESSION@@QAEXABUQL_LEVEL_1_TOKEN@@@Z (Address: 0x1004126c)
?anyFailure@CStaticCritSec@@SGHXZ (Address: 0x100412f4)
?ChangeTypeTo@CVar@@QAEHG@Z (Address: 0x100412ac)
?CopyDataFrom@CFlexArray@@QAEHABV1@@Z (Address: 0x100411f0)
?Empty@CFlexArray@@QAEXXZ (Address: 0x1004130c)
?Empty@CPropertyName@@QAEXXZ (Address: 0x10041348)
?Empty@CWStringArray@@QAEXXZ (Address: 0x10041274)
?Enqueue@CFlexQueue@@QAE_NPAX@Z (Address: 0x1004132c)
?EnsureExtent@CFlexArray@@QAEHH@Z (Address: 0x1004121c)
?Enter@CWbemCriticalSection@@QAEHK@Z (Address: 0x100412b8)
?FillDMTF@CDateTimeParser@@QAEHPAGI@Z (Address: 0x10041354)
?FindStr@CWStringArray@@QAEHPBGH@Z (Address: 0x10041280)
?GetAt@CFlexArray@@QBEPAXH@Z (Address: 0x10041320)
?GetQueueSize@CFlexQueue@@QBEHXZ (Address: 0x10041304)
?GetStringAt@CPropertyName@@QBEPBGJ@Z (Address: 0x10041218)
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QAEPAGXZ (Address: 0x1004128c)
?GetText@QL_LEVEL_1_TOKEN@@QAEPAGXZ (Address: 0x100412b0)
?InsertAt@CFlexArray@@QAEHHPAX@Z (Address: 0x100412f8)
?InternalRelease@CUnkInternal@@QAEKXZ (Address: 0x100412d4)
?IsDataNull@CVar@@QAEHXZ (Address: 0x100412a8)
?Leave@CWbemCriticalSection@@QAEXXZ (Address: 0x100412bc)
?Match@CLike@@QAE_NPBG@Z (Address: 0x10041230)
?Parse@QL1_Parser@@QAEHPAPAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x10041244)
?QueryInterface@CUnkInternal@@UAGJABU_GUID@@PAPAX@Z (Address: 0x100412e0)
?Release@CUnkInternal@@UAGKXZ (Address: 0x100412d8)
?RemoveAt@CFlexArray@@QAEHH@Z (Address: 0x10041220)
?SetAt@CFlexArray@@QAEXHPAX@Z (Address: 0x10041310)
?SetClassName@QL_LEVEL_1_RPN_EXPRESSION@@UAEXPBG@Z (Address: 0x10041288)
?SetDMTF@CWbemTime@@QAEHPBG@Z (Address: 0x100412a0)
?SetExpression@CLike@@QAEXPBGG@Z (Address: 0x10041234)
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z (Address: 0x100412a4)
?UnbindPtr@CFlexArray@@QAEPAPAXXZ (Address: 0x100411ec)
?UnbindPtr@WString@@QAEPAGXZ (Address: 0x10041238)
?Union@CWStringArray@@SGXAAV1@00@Z (Address: 0x10041278)
?Unqueue@CFlexQueue@@QAEPAXXZ (Address: 0x10041308)
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z (Address: 0x10041344)
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z (Address: 0x10041340)
?Write@CMemoryLog@@QAEXJ@Z (Address: 0x1004133c)
ChangeVariantToCIMTYPE (Address: 0x10041248)
GetMemLogObject (Address: 0x10041338)
NormalizeCimDateTime (Address: 0x10041290)
ReadI64 (Address: 0x10041208)
ReadUI64 (Address: 0x10041204)