mofd.dll

v10.0.19041.3989 32-bit Windows NT Analyzed
Description
WMI
Authors
© Microsoft Corporation. All rights reserved.
File size
202.0 KB
Uploaded
2025-12-01 08:38
Views
24
SHA-256
aebe88c14043e249493e7e2123ac90f6

Exported functions 6

CompileFileViaDLL #1 · 0x23400
CreateBMOFViaDLL #2 · 0x23610
DllCanUnloadNow #3 · 0xe170
DllGetClassObject #4 · 0xdfe0
DllRegisterServer #5 · 0xe1d0
DllUnregisterServer #6 · 0xe250

Imported DLLs & functions 226

ADVAPI32.dll 21
AdjustTokenPrivileges 0x1002c004
GetTraceEnableFlags 0x1002c034
GetTraceEnableLevel 0x1002c030
GetTraceLoggerHandle 0x1002c02c
ImpersonateSelf 0x1002c00c
LookupPrivilegeValueW 0x1002c01c
OpenProcessToken 0x1002c050
OpenThreadToken 0x1002c010
RegCloseKey 0x1002c018
RegCreateKeyExW 0x1002c024
RegDeleteKeyW 0x1002c028
RegDeleteValueW 0x1002c04c
RegEnumKeyExW 0x1002c044
RegisterTraceGuidsW 0x1002c038
RegOpenKeyExW 0x1002c048
RegQueryInfoKeyW 0x1002c040
RegQueryValueExW 0x1002c014
RegSetValueExW 0x1002c000
RevertToSelf 0x1002c008
TraceMessage 0x1002c020
UnregisterTraceGuids 0x1002c03c
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetVersionExW 0x1002c1d0
KERNEL32.dll 55
AcquireSRWLockExclusive 0x1002c0b0
CloseHandle 0x1002c0f0
CompareStringW 0x1002c0b8
CreateFileW 0x1002c0f4
CreateProcessW 0x1002c070
DebugBreak 0x1002c0d0
DeleteCriticalSection 0x1002c0f8
DeleteFileW 0x1002c0bc
DisableThreadLibraryCalls 0x1002c088
EnterCriticalSection 0x1002c0fc
ExpandEnvironmentStringsW 0x1002c0cc
FindResourceExW 0x1002c08c
FreeLibrary 0x1002c0e8
GetConsoleOutputCP 0x1002c07c
GetCurrentProcess 0x1002c06c
GetCurrentProcessId 0x1002c118
GetCurrentThread 0x1002c120
GetCurrentThreadId 0x1002c11c
GetFullPathNameW 0x1002c084
GetLastError 0x1002c110
GetModuleFileNameW 0x1002c0c8
GetModuleHandleW 0x1002c0a0
GetProcAddress 0x1002c0e4
GetStdHandle 0x1002c078
GetStringTypeExW 0x1002c064
GetSystemDirectoryW 0x1002c0d8
GetSystemTimeAsFileTime 0x1002c080
GetTempFileNameW 0x1002c12c
GetTempPathW 0x1002c058
GetTickCount 0x1002c124
InitializeCriticalSection 0x1002c0c4
LCMapStringW 0x1002c068
LeaveCriticalSection 0x1002c100
LoadLibraryExW 0x1002c0ec
LoadResource 0x1002c090
LocalFree 0x1002c0a4
lstrcmpiW 0x1002c09c
lstrcmpW 0x1002c0d4
MultiByteToWideChar 0x1002c130
OpenProcess 0x1002c10c
OutputDebugStringA 0x1002c128
QueryPerformanceCounter 0x1002c114
RaiseException 0x1002c098
ReadFile 0x1002c060
ReleaseSRWLockExclusive 0x1002c0ac
SetFilePointer 0x1002c05c
SetUnhandledExceptionFilter 0x1002c104
SizeofResource 0x1002c094
Sleep 0x1002c0a8
SleepConditionVariableSRW 0x1002c0dc
TerminateProcess 0x1002c108
UnhandledExceptionFilter 0x1002c0e0
WakeAllConditionVariable 0x1002c0b4
WideCharToMultiByte 0x1002c0c0
WriteFile 0x1002c074
msvcrt.dll 62
__CxxFrameHandler3 0x1002c21c
__dllonexit 0x1002c2bc
_amsg_exit 0x1002c2a0
_close 0x1002c224
_CxxThrowException 0x1002c254
_errno 0x1002c1f4
_except_handler4_common 0x1002c2ac
_initterm 0x1002c2a4
_lock 0x1002c2b4
_onexit 0x1002c2c0
_open 0x1002c218
_purecall 0x1002c268
_resetstkoflw 0x1002c270
_ui64tow_s 0x1002c200
_unlock 0x1002c2b8
_vsnwprintf 0x1002c290
_waccess 0x1002c20c
_wcsdup 0x1002c1e0
_wcserror 0x1002c208
_wcsicmp 0x1002c27c
_wcsnicmp 0x1002c278
_wfopen 0x1002c260
_wfullpath 0x1002c210
_write 0x1002c220
_wsplitpath_s 0x1002c214
_wtoi 0x1002c1e4
_wtol 0x1002c1e8
_XcptFilter 0x1002c298
??0exception@@QAE@ABQBD@Z 0x1002c22c
??0exception@@QAE@ABQBDH@Z 0x1002c230
??0exception@@QAE@ABV0@@Z 0x1002c234
??1exception@@UAE@XZ 0x1002c238
??1type_info@@UAE@XZ 0x1002c2b0
?terminate@@YAXXZ 0x1002c2a8
?what@exception@@UBEPBDXZ 0x1002c250
calloc 0x1002c264
fclose 0x1002c248
ferror 0x1002c240
fread 0x1002c244
free 0x1002c29c
fseek 0x1002c25c
ftell 0x1002c24c
fwrite 0x1002c1ec
iswspace 0x1002c284
iswxdigit 0x1002c1f8
malloc 0x1002c26c
mbstowcs 0x1002c23c
memcmp 0x1002c2c4
memcpy 0x1002c258
memcpy_s 0x1002c28c
memmove 0x1002c294
memset 0x1002c2cc
printf 0x1002c1dc
realloc 0x1002c228
swscanf 0x1002c2c8
towupper 0x1002c1f0
wcschr 0x1002c280
wcsncmp 0x1002c288
wcsncpy_s 0x1002c204
wcsrchr 0x1002c274
wcstok 0x1002c1fc
wcstombs 0x1002c1d8
OLE32.dll 7
CoCreateGuid 0x1002c140
CoCreateInstance 0x1002c14c
CoQueryProxyBlanket 0x1002c138
CoTaskMemAlloc 0x1002c150
CoTaskMemFree 0x1002c13c
CoTaskMemRealloc 0x1002c144
StringFromGUID2 0x1002c148
OLEAUT32.dll 25
CreateErrorInfo 0x1002c180
GetErrorInfo 0x1002c158
LoadRegTypeLib 0x1002c188
LoadTypeLib 0x1002c18c
SafeArrayCreate 0x1002c178
SafeArrayDestroy 0x1002c174
SafeArrayDestroyData 0x1002c194
SafeArrayDestroyDescriptor 0x1002c1a8
SafeArrayGetElement 0x1002c160
SafeArrayGetLBound 0x1002c190
SafeArrayGetUBound 0x1002c15c
SafeArrayPutElement 0x1002c164
SetErrorInfo 0x1002c17c
SysAllocString 0x1002c1b0
SysAllocStringByteLen 0x1002c170
SysAllocStringLen 0x1002c1b8
SysFreeString 0x1002c198
SysStringByteLen 0x1002c16c
SysStringLen 0x1002c1b4
VarBstrCat 0x1002c168
VariantChangeTypeEx 0x1002c19c
VariantClear 0x1002c1a0
VariantCopy 0x1002c1ac
VariantInit 0x1002c184
VarUI4FromStr 0x1002c1a4
USER32.dll 3
CharLowerBuffW 0x1002c1c4
CharNextW 0x1002c1c8
LoadStringW 0x1002c1c0
wbemcomn.dll 52
_ThrowMemoryException_ 0x1002c2d4
??0CFlexArray@@QAE@HH@Z 0x1002c358
??0CMRCICompression@@QAE@XZ 0x1002c348
??0Registry@@QAE@PBGK@Z 0x1002c330
??0WString@@QAE@PBG@Z 0x1002c370
??0WString@@QAE@XZ 0x1002c2e8
??1CFlexArray@@QAE@XZ 0x1002c35c
??1CMRCICompression@@QAE@XZ 0x1002c364
??1CVar@@QAE@XZ 0x1002c388
??1Registry@@QAE@XZ 0x1002c39c
??4WString@@QAEAAV0@PBG@Z 0x1002c318
?AddEnvironmentValue@CWbemInstallObject@@SGJPBG0@Z 0x1002c2ec
?CleanUp@CWbemInstallObject@@SGXXZ 0x1002c314
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z 0x1002c344
?DeleteString@WString@@AAEXPAG@Z 0x1002c2d8
?ExpandEnvironmentStringsW@CWbemInstallObject@@SGKPBGPAGK@Z 0x1002c350
?FlushRepository@CWbemInstallObject@@SGJXZ 0x1002c310
?GetAt@CFlexArray@@QBEPAXH@Z 0x1002c360
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z 0x1002c338
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ 0x1002c354
?GetText@CVar@@QAEPAGJJPBG@Z 0x1002c38c
?Init@CVar@@AAEXXZ 0x1002c380
?InsertAt@CFlexArray@@QAEHHPAX@Z 0x1002c390
?IsOffline@CWbemInstallObject@@SG_NXZ 0x1002c2e4
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z 0x1002c37c
?Mrci1Decompress@CBaseMrciCompression@@QAEIPAEI0I@Z 0x1002c34c
?Mrci1MaxCompress@CBaseMrciCompression@@QAEIPAEI0I@Z 0x1002c398
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z 0x1002c378
?RemoveAt@CFlexArray@@QAEHH@Z 0x1002c394
?SetAutoRecoverFolder@CWbemInstallObject@@SGXPBG@Z 0x1002c300
?SetBinaryPath@CWbemInstallObject@@SGXPBG@Z 0x1002c2f8
?SetMultiStr@Registry@@QAEHPBGPAGK@Z 0x1002c33c
?SetOffline@CWbemInstallObject@@SGX_N@Z 0x1002c2f4
?SetRegistryPathCIMOM@CWbemInstallObject@@SGXPBG@Z 0x1002c308
?SetRegistryPathWbem@CWbemInstallObject@@SGXPBG@Z 0x1002c304
?SetRepositoryFolder@CWbemInstallObject@@SGXPBG@Z 0x1002c2fc
?SetStr@Registry@@QAEHPBG0@Z 0x1002c340
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z 0x1002c384
?Shutdown@CWbemInstallObject@@SGXXZ 0x1002c2f0
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z 0x1002c3a0
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z 0x1002c334
?Write@CMemoryLog@@QAEXJ@Z 0x1002c2dc
bAreWeLocal 0x1002c36c
CopyFileToAutorecover 0x1002c32c
ExtractMachineName 0x1002c368
GetMemLogObject 0x1002c2e0
RegisterDLL 0x1002c31c
RegisterDllAppid 0x1002c320
RemoveFileFromAutoRecoverFolder 0x1002c30c
UnRegisterDLL 0x1002c324
UnregisterDllAppid 0x1002c328
WbemVariantChangeType 0x1002c374