WmiPrvSD.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Description
WMI
Authors
© Microsoft Corporation. All rights reserved.
File size
838.0 KB
Uploaded
2025-12-01 07:51
Views
51
SHA-256
4f1de69a4ac73e9e209ef42d7d3c4b45

Exported functions 4

DllCanUnloadNow #1 · 0x1ea30
DllGetClassObject #2 · 0x35e0
DllRegisterServer #3 · 0x3b580
DllUnregisterServer #4 · 0x3b670

Imported DLLs & functions 187

api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18009ef58
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18009ef68
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x18009ef80
SetUnhandledExceptionFilter 0x18009ef88
UnhandledExceptionFilter 0x18009ef78
api-ms-win-core-file-l1-1-0.dll 1
CompareFileTime 0x18009ef98
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x18009efa8
DuplicateHandle 0x18009efb0
api-ms-win-core-heap-l1-1-0.dll 5
GetProcessHeap 0x18009efe0
HeapAlloc 0x18009efc8
HeapCreate 0x18009efc0
HeapDestroy 0x18009efd8
HeapFree 0x18009efd0
api-ms-win-core-heap-l2-1-0.dll 4
GlobalAlloc 0x18009f008
GlobalFree 0x18009f000
LocalAlloc 0x18009eff8
LocalFree 0x18009eff0
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
GlobalLock 0x18009f020
GlobalUnlock 0x18009f018
api-ms-win-core-job-l2-1-0.dll 5
AssignProcessToJobObject 0x18009f038
CreateJobObjectW 0x18009f030
OpenJobObjectW 0x18009f050
SetInformationJobObject 0x18009f048
TerminateJobObject 0x18009f040
api-ms-win-core-libraryloader-l1-2-0.dll 4
DisableThreadLibraryCalls 0x18009f060
GetModuleFileNameW 0x18009f068
GetProcAddress 0x18009f078
LoadLibraryExW 0x18009f070
api-ms-win-core-localization-l1-2-0.dll 1
LCMapStringW 0x18009f088
api-ms-win-core-memory-l1-1-0.dll 4
CreateFileMappingW 0x18009f098
MapViewOfFile 0x18009f0a8
OpenFileMappingW 0x18009f0a0
UnmapViewOfFile 0x18009f0b0
api-ms-win-core-processthreads-l1-1-0.dll 15
CreateThread 0x18009f0f8
GetCurrentProcess 0x18009f108
GetCurrentProcessId 0x18009f0d0
GetCurrentThread 0x18009f118
GetCurrentThreadId 0x18009f110
GetProcessTimes 0x18009f100
OpenProcessToken 0x18009f130
OpenThreadToken 0x18009f0c0
SetThreadToken 0x18009f128
SwitchToThread 0x18009f0d8
TerminateProcess 0x18009f120
TlsAlloc 0x18009f0c8
TlsFree 0x18009f0e0
TlsGetValue 0x18009f0e8
TlsSetValue 0x18009f0f0
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18009f140
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18009f150
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x18009f180
RegCreateKeyExW 0x18009f198
RegDeleteKeyExW 0x18009f168
RegEnumKeyExW 0x18009f160
RegOpenKeyExW 0x18009f178
RegQueryValueExW 0x18009f170
RegSetKeySecurity 0x18009f190
RegSetValueExW 0x18009f188
api-ms-win-core-string-l1-1-0.dll 1
GetStringTypeExW 0x18009f1a8
api-ms-win-core-synch-l1-1-0.dll 9
CreateEventW 0x18009f1e8
DeleteCriticalSection 0x18009f1d0
EnterCriticalSection 0x18009f1c8
InitializeCriticalSectionAndSpinCount 0x18009f1b8
LeaveCriticalSection 0x18009f1e0
OpenEventW 0x18009f1d8
SetEvent 0x18009f1f0
WaitForMultipleObjectsEx 0x18009f1f8
WaitForSingleObject 0x18009f1c0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18009f208
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18009f218
GetTickCount 0x18009f220
GetVersionExW 0x18009f228
api-ms-win-core-threadpool-legacy-l1-1-0.dll 5
ChangeTimerQueueTimer 0x18009f238
CreateTimerQueueTimer 0x18009f250
DeleteTimerQueueTimer 0x18009f258
QueueUserWorkItem 0x18009f240
UnregisterWaitEx 0x18009f248
api-ms-win-core-threadpool-private-l1-1-0.dll 1
RegisterWaitForSingleObjectEx 0x18009f268
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x18009f278
SystemTimeToFileTime 0x18009f280
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x18009f298
EventUnregister 0x18009f290
EventWrite 0x18009f2a0
api-ms-win-security-base-l1-1-0.dll 26
AccessCheck 0x18009f300
AddAccessAllowedAce 0x18009f2b0
AddAce 0x18009f310
AllocateAndInitializeSid 0x18009f2d8
AllocateLocallyUniqueId 0x18009f308
CopySid 0x18009f2e8
CreateWellKnownSid 0x18009f330
DuplicateTokenEx 0x18009f378
FreeSid 0x18009f358
GetAclInformation 0x18009f370
GetKernelObjectSecurity 0x18009f350
GetLengthSid 0x18009f2e0
GetSecurityDescriptorDacl 0x18009f368
GetSecurityDescriptorLength 0x18009f320
GetTokenInformation 0x18009f360
ImpersonateLoggedOnUser 0x18009f2c0
InitializeAcl 0x18009f2f0
InitializeSecurityDescriptor 0x18009f328
MakeAbsoluteSD 0x18009f318
MakeSelfRelativeSD 0x18009f2c8
MapGenericMask 0x18009f2f8
RevertToSelf 0x18009f2b8
SetSecurityDescriptorDacl 0x18009f338
SetSecurityDescriptorGroup 0x18009f340
SetSecurityDescriptorOwner 0x18009f348
SetTokenInformation 0x18009f2d0
FastProx.dll 6
?AddRef@CWbemCallSecurity@@UEAAKXZ 0x18009eef0
?GetThreadSecurity@CWbemCallSecurity@@UEAAJW4tag_WMI_THREAD_SECURITY_ORIGIN@@PEAPEAU_IWmiThreadSecHandle@@@Z 0x18009eef8
?New@CWbemCallSecurity@@SAPEAV1@XZ 0x18009ef18
?QueryInterface@CWbemCallSecurity@@UEAAJAEBU_GUID@@PEAPEAX@Z 0x18009ef08
?Release@CWbemCallSecurity@@UEAAKXZ 0x18009ef10
?SetThreadSecurity@CWbemCallSecurity@@UEAAJPEAU_IWmiThreadSecHandle@@@Z 0x18009ef00
msvcrt.dll 23
__C_specific_handler 0x18009f410
__CxxFrameHandler3 0x18009f3d8
__dllonexit 0x18009f3c8
_amsg_exit 0x18009f390
_CxxThrowException 0x18009f3e8
_initterm 0x18009f3a0
_lock 0x18009f3b8
_onexit 0x18009f428
_purecall 0x18009f408
_unlock 0x18009f3c0
_vsnwprintf 0x18009f420
_wcsicmp 0x18009f418
_XcptFilter 0x18009f388
??1type_info@@UEAA@XZ 0x18009f3b0
??8type_info@@QEBAHAEBV0@@Z 0x18009f3f8
?terminate@@YAXXZ 0x18009f3a8
free 0x18009f398
malloc 0x18009f3f0
memcmp 0x18009f3e0
memcpy 0x18009f3d0
memset 0x18009f438
realloc 0x18009f430
wcsstr 0x18009f400
NCObjAPI.DLL 5
WmiCreateObjectWithFormat 0x18009ef48
WmiDestroyObject 0x18009ef28
WmiEventSourceConnect 0x18009ef40
WmiEventSourceDisconnect 0x18009ef30
WmiSetAndCommitObject 0x18009ef38
ntdll.dll 13
EtwGetTraceEnableFlags 0x18009f458
EtwGetTraceEnableLevel 0x18009f450
EtwGetTraceLoggerHandle 0x18009f448
EtwRegisterTraceGuidsW 0x18009f460
EtwTraceMessage 0x18009f4a8
EtwUnregisterTraceGuids 0x18009f468
RtlCaptureContext 0x18009f490
RtlInitializeSid 0x18009f478
RtlLengthRequiredSid 0x18009f470
RtlLengthSid 0x18009f488
RtlLookupFunctionEntry 0x18009f498
RtlSubAuthoritySid 0x18009f480
RtlVirtualUnwind 0x18009f4a0
wbemcomn.dll 31
_ThrowMemoryException_ 0x18009f530
?_Free@CMUILocale@@SAHPEAX@Z 0x18009f598
??0CLike@@QEAA@PEBGG@Z 0x18009f550
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z 0x18009f4c8
??0CNtAcl@@QEAA@K@Z 0x18009f5a0
??0CNtSecurityDescriptor@@QEAA@AEAV0@@Z 0x18009f4f0
??0CNtSecurityDescriptor@@QEAA@PEAX@Z 0x18009f500
??0CNtSid@@QEAA@PEAX@Z 0x18009f4d8
??1CLike@@QEAA@XZ 0x18009f558
??1CNtAce@@UEAA@XZ 0x18009f508
??1CNtAcl@@QEAA@XZ 0x18009f4e8
??1CNtSecurityDescriptor@@QEAA@XZ 0x18009f4f8
??1CNtSid@@QEAA@XZ 0x18009f4d0
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z 0x18009f538
?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z 0x18009f4b8
?GetDacl@CNtSecurityDescriptor@@QEAAHAEAVCNtAcl@@@Z 0x18009f4e0
?GetPreferredLanguages@CMUILocale@@SAJKPEAPEAGPEAK@Z 0x18009f5a8
?GetSid@CNtAce@@QEAAHAEAVCNtSid@@@Z 0x18009f4c0
?GetSize@CNtSecurityDescriptor@@QEAAKXZ 0x18009f548
?Init@CPublishWMIOperationEvent@@SAJXZ 0x18009f568
?Match@CLike@@QEAA_NPEBG@Z 0x18009f560
?PublishProviderInfo@CPublishWMIOperationEvent@@SAJKPEAGK000PEAUIWbemContext@@@Z 0x18009f590
?PublishProviderStarted@CPublishWMIOperationEvent@@SAJPEAGJ0K0@Z 0x18009f570
?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z 0x18009f540
?SetPreferredLanguages@CMUILocale@@SAJKPEBGPEAK@Z 0x18009f580
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z 0x18009f578
?Write@CMemoryLog@@QEAAXJ@Z 0x18009f528
BreakOnDbgAndRenterLoop 0x18009f518
BuildOperationInfo 0x18009f588
GetMemLogObject 0x18009f520
WinPEKey 0x18009f510