mofd.dll

v10.0.19041.4474 64-bit Windows NT Analyzed
Description
WMI
Authors
© Microsoft Corporation. All rights reserved.
File size
259.5 KB
Uploaded
2025-12-01 07:51
Views
59
SHA-256
b5b786c99df29ae2e7b77fdb7c36b883

Exported functions 6

CompileFileViaDLL #1 · 0x27560
CreateBMOFViaDLL #2 · 0x27810
DllCanUnloadNow #3 · 0xbf30
DllGetClassObject #4 · 0xbd10
DllRegisterServer #5 · 0xbfa0
DllUnregisterServer #6 · 0xc070

Imported DLLs & functions 198

api-ms-win-core-console-l1-1-0.dll 1
GetConsoleOutputCP 0x18002f620
api-ms-win-core-debug-l1-1-0.dll 2
DebugBreak 0x18002f630
OutputDebugStringA 0x18002f638
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18002f648
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18002f658
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002f678
RaiseException 0x18002f668
SetUnhandledExceptionFilter 0x18002f680
UnhandledExceptionFilter 0x18002f670
api-ms-win-core-file-l1-1-0.dll 7
CreateFileW 0x18002f690
DeleteFileW 0x18002f6a0
GetFullPathNameW 0x18002f6a8
GetTempFileNameW 0x18002f6c0
ReadFile 0x18002f6b0
SetFilePointer 0x18002f6b8
WriteFile 0x18002f698
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x18002f6d0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002f6e0
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x18002f6f0
api-ms-win-core-libraryloader-l1-2-0.dll 10
DisableThreadLibraryCalls 0x18002f748
FindResourceExW 0x18002f740
FreeLibrary 0x18002f700
GetModuleFileNameW 0x18002f718
GetModuleHandleW 0x18002f720
GetProcAddress 0x18002f710
LoadLibraryExW 0x18002f708
LoadResource 0x18002f730
LoadStringW 0x18002f738
SizeofResource 0x18002f728
api-ms-win-core-localization-l1-2-0.dll 1
LCMapStringW 0x18002f758
api-ms-win-core-processenvironment-l1-1-0.dll 2
ExpandEnvironmentStringsW 0x18002f768
GetStdHandle 0x18002f770
api-ms-win-core-processthreads-l1-1-0.dll 8
CreateProcessW 0x18002f798
GetCurrentProcess 0x18002f790
GetCurrentProcessId 0x18002f788
GetCurrentThread 0x18002f7a0
GetCurrentThreadId 0x18002f7b0
OpenProcessToken 0x18002f7b8
OpenThreadToken 0x18002f7a8
TerminateProcess 0x18002f780
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18002f7c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002f7d8
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x18002f828
RegCreateKeyExW 0x18002f810
RegDeleteKeyExW 0x18002f818
RegDeleteValueW 0x18002f800
RegEnumKeyExW 0x18002f7f0
RegOpenKeyExW 0x18002f820
RegQueryInfoKeyW 0x18002f7e8
RegQueryValueExW 0x18002f808
RegSetValueExW 0x18002f7f8
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18002f848
RtlLookupFunctionEntry 0x18002f838
RtlVirtualUnwind 0x18002f840
api-ms-win-core-string-l1-1-0.dll 4
CompareStringW 0x18002f858
GetStringTypeExW 0x18002f868
MultiByteToWideChar 0x18002f870
WideCharToMultiByte 0x18002f860
api-ms-win-core-string-l2-1-0.dll 2
CharLowerBuffW 0x18002f888
CharNextW 0x18002f880
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x18002f8a0
lstrcmpW 0x18002f898
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x18002f8b0
DeleteCriticalSection 0x18002f8c8
EnterCriticalSection 0x18002f8d0
InitializeCriticalSection 0x18002f8c0
LeaveCriticalSection 0x18002f8b8
ReleaseSRWLockExclusive 0x18002f8d8
api-ms-win-core-synch-l1-2-0.dll 3
Sleep 0x18002f8e8
SleepConditionVariableSRW 0x18002f8f8
WakeAllConditionVariable 0x18002f8f0
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemDirectoryW 0x18002f918
GetSystemTimeAsFileTime 0x18002f920
GetTickCount 0x18002f910
GetVersionExW 0x18002f908
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x18002f948
GetTraceEnableLevel 0x18002f940
GetTraceLoggerHandle 0x18002f930
RegisterTraceGuidsW 0x18002f950
TraceMessage 0x18002f938
UnregisterTraceGuids 0x18002f958
api-ms-win-security-base-l1-1-0.dll 3
AdjustTokenPrivileges 0x18002f970
ImpersonateSelf 0x18002f978
RevertToSelf 0x18002f968
msvcrt.dll 62
__C_specific_handler 0x18002fb60
__CxxFrameHandler3 0x18002fa68
__dllonexit 0x18002fb30
_amsg_exit 0x18002faa8
_close 0x18002f9f0
_CxxThrowException 0x18002fa20
_errno 0x18002f9d0
_initterm 0x18002fab0
_lock 0x18002fb68
_onexit 0x18002fb28
_open 0x18002f9e0
_purecall 0x18002fad8
_resetstkoflw 0x18002faf0
_ui64tow_s 0x18002fa38
_unlock 0x18002fb38
_vsnwprintf 0x18002fb50
_waccess 0x18002fa88
_wcsdup 0x18002f998
_wcserror 0x18002fa80
_wcsicmp 0x18002fb10
_wcsnicmp 0x18002fb00
_wfopen 0x18002fab8
_wfullpath 0x18002faa0
_write 0x18002f9e8
_wsplitpath_s 0x18002f9b8
_wtoi 0x18002f9a0
_wtol 0x18002f9a8
_XcptFilter 0x18002fa50
??0exception@@QEAA@AEBQEBD@Z 0x18002f9b0
??0exception@@QEAA@AEBQEBDH@Z 0x18002fa00
??0exception@@QEAA@AEBV0@@Z 0x18002fa08
??1exception@@UEAA@XZ 0x18002fa10
??1type_info@@UEAA@XZ 0x18002fae8
?terminate@@YAXXZ 0x18002fad0
?what@exception@@UEBAPEBDXZ 0x18002fa18
calloc 0x18002fac0
fclose 0x18002fa70
ferror 0x18002fa58
fread 0x18002fa60
free 0x18002fb58
fseek 0x18002fa90
ftell 0x18002fa78
fwrite 0x18002f9f8
iswspace 0x18002fb20
iswxdigit 0x18002f9d8
malloc 0x18002fae0
mbstowcs 0x18002fa48
memcmp 0x18002fb08
memcpy 0x18002fa28
memcpy_s 0x18002fb48
memmove 0x18002fa30
memset 0x18002fb70
printf 0x18002f990
realloc 0x18002fa98
swscanf 0x18002f9c0
towupper 0x18002f9c8
wcschr 0x18002fb18
wcsncmp 0x18002fb40
wcsncpy_s 0x18002fa40
wcsrchr 0x18002faf8
wcstok 0x18002fac8
wcstombs 0x18002f988
wbemcomn.dll 52
_ThrowMemoryException_ 0x18002fd00
??0CFlexArray@@QEAA@HH@Z 0x18002fc58
??0CMRCICompression@@QEAA@XZ 0x18002fc38
??0Registry@@QEAA@PEBGK@Z 0x18002fc08
??0WString@@QEAA@PEBG@Z 0x18002fc88
??0WString@@QEAA@XZ 0x18002fc28
??1CFlexArray@@QEAA@XZ 0x18002fc60
??1CMRCICompression@@QEAA@XZ 0x18002fc70
??1CVar@@QEAA@XZ 0x18002fcb8
??1Registry@@QEAA@XZ 0x18002fc10
??4WString@@QEAAAEAV0@PEBG@Z 0x18002fbd8
?AddEnvironmentValue@CWbemInstallObject@@SAJPEBG0@Z 0x18002fb80
?CleanUp@CWbemInstallObject@@SAXXZ 0x18002fbd0
?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z 0x18002fc30
?DeleteString@WString@@AEAAXPEAG@Z 0x18002fcf8
?ExpandEnvironmentStringsW@CWbemInstallObject@@SAKPEBGPEAGK@Z 0x18002fc48
?FlushRepository@CWbemInstallObject@@SAJXZ 0x18002fbc8
?GetAt@CFlexArray@@QEBAPEAXH@Z 0x18002fc68
?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z 0x18002fc18
?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ 0x18002fc50
?GetText@CVar@@QEAAPEAGJJPEBG@Z 0x18002fcc0
?Init@CVar@@AEAAXXZ 0x18002fca8
?InsertAt@CFlexArray@@QEAAHHPEAX@Z 0x18002fcc8
?IsOffline@CWbemInstallObject@@SA_NXZ 0x18002fd18
?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z 0x18002fca0
?Mrci1Decompress@CBaseMrciCompression@@QEAAIPEAEI0I@Z 0x18002fc40
?Mrci1MaxCompress@CBaseMrciCompression@@QEAAIPEAEI0I@Z 0x18002fcd8
?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z 0x18002fc98
?RemoveAt@CFlexArray@@QEAAHH@Z 0x18002fcd0
?SetAutoRecoverFolder@CWbemInstallObject@@SAXPEBG@Z 0x18002fba8
?SetBinaryPath@CWbemInstallObject@@SAXPEBG@Z 0x18002fb98
?SetMultiStr@Registry@@QEAAHPEBGPEAGK@Z 0x18002fc20
?SetOffline@CWbemInstallObject@@SAX_N@Z 0x18002fb90
?SetRegistryPathCIMOM@CWbemInstallObject@@SAXPEBG@Z 0x18002fbb8
?SetRegistryPathWbem@CWbemInstallObject@@SAXPEBG@Z 0x18002fbb0
?SetRepositoryFolder@CWbemInstallObject@@SAXPEBG@Z 0x18002fba0
?SetStr@Registry@@QEAAHPEBG0@Z 0x18002fce0
?SetVariant@CVar@@QEAAHPEAUtagVARIANT@@H@Z 0x18002fcb0
?Shutdown@CWbemInstallObject@@SAXXZ 0x18002fb88
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z 0x18002fd10
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z 0x18002fd08
?Write@CMemoryLog@@QEAAXJ@Z 0x18002fcf0
bAreWeLocal 0x18002fc80
CopyFileToAutorecover 0x18002fc00
ExtractMachineName 0x18002fc78
GetMemLogObject 0x18002fce8
RegisterDLL 0x18002fbe0
RegisterDllAppid 0x18002fbe8
RemoveFileFromAutoRecoverFolder 0x18002fbc0
UnRegisterDLL 0x18002fbf0
UnregisterDllAppid 0x18002fbf8
WbemVariantChangeType 0x18002fc90