mofd.dll

v10.0.19041.4474 32-bit Windows NT Analyzed
Description
WMI
Authors
© Microsoft Corporation. All rights reserved.
File size
196.0 KB
Uploaded
2025-12-01 08:11
Views
46
SHA-256
7b2d9e6e375d186612cfbd89fe668b17

Exported functions 6

CompileFileViaDLL #1 · 0x23500
CreateBMOFViaDLL #2 · 0x23710
DllCanUnloadNow #3 · 0xe260
DllGetClassObject #4 · 0xe0d0
DllRegisterServer #5 · 0xe2c0
DllUnregisterServer #6 · 0xe340

Imported DLLs & functions 195

api-ms-win-core-console-l1-1-0.dll 1
GetConsoleOutputCP 0x1002c000
api-ms-win-core-debug-l1-1-0.dll 2
DebugBreak 0x1002c00c
OutputDebugStringA 0x1002c008
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1002c014
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1002c01c
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1002c030
RaiseException 0x1002c02c
SetUnhandledExceptionFilter 0x1002c024
UnhandledExceptionFilter 0x1002c028
api-ms-win-core-file-l1-1-0.dll 7
CreateFileW 0x1002c044
DeleteFileW 0x1002c048
GetFullPathNameW 0x1002c040
GetTempFileNameW 0x1002c04c
ReadFile 0x1002c038
SetFilePointer 0x1002c050
WriteFile 0x1002c03c
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x1002c058
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1002c060
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x1002c068
api-ms-win-core-libraryloader-l1-2-0.dll 10
DisableThreadLibraryCalls 0x1002c094
FindResourceExW 0x1002c088
FreeLibrary 0x1002c090
GetModuleFileNameW 0x1002c08c
GetModuleHandleW 0x1002c074
GetProcAddress 0x1002c070
LoadLibraryExW 0x1002c084
LoadResource 0x1002c07c
LoadStringW 0x1002c078
SizeofResource 0x1002c080
api-ms-win-core-localization-l1-2-0.dll 1
LCMapStringW 0x1002c09c
api-ms-win-core-processenvironment-l1-1-0.dll 2
ExpandEnvironmentStringsW 0x1002c0a8
GetStdHandle 0x1002c0a4
api-ms-win-core-processthreads-l1-1-0.dll 8
CreateProcessW 0x1002c0b8
GetCurrentProcess 0x1002c0c8
GetCurrentProcessId 0x1002c0c0
GetCurrentThread 0x1002c0b0
GetCurrentThreadId 0x1002c0c4
OpenProcessToken 0x1002c0b4
OpenThreadToken 0x1002c0cc
TerminateProcess 0x1002c0bc
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x1002c0d4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1002c0dc
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1002c104
RegCreateKeyExW 0x1002c0e8
RegDeleteKeyExW 0x1002c100
RegDeleteValueW 0x1002c0f0
RegEnumKeyExW 0x1002c0fc
RegOpenKeyExW 0x1002c0e4
RegQueryInfoKeyW 0x1002c0f8
RegQueryValueExW 0x1002c0ec
RegSetValueExW 0x1002c0f4
api-ms-win-core-string-l1-1-0.dll 4
CompareStringW 0x1002c110
GetStringTypeExW 0x1002c118
MultiByteToWideChar 0x1002c10c
WideCharToMultiByte 0x1002c114
api-ms-win-core-string-l2-1-0.dll 2
CharLowerBuffW 0x1002c120
CharNextW 0x1002c124
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1002c12c
lstrcmpW 0x1002c130
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x1002c138
DeleteCriticalSection 0x1002c14c
EnterCriticalSection 0x1002c140
InitializeCriticalSection 0x1002c144
LeaveCriticalSection 0x1002c13c
ReleaseSRWLockExclusive 0x1002c148
api-ms-win-core-synch-l1-2-0.dll 3
Sleep 0x1002c15c
SleepConditionVariableSRW 0x1002c158
WakeAllConditionVariable 0x1002c154
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetSystemDirectoryW 0x1002c164
GetSystemTimeAsFileTime 0x1002c170
GetTickCount 0x1002c168
GetVersionExW 0x1002c16c
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1002c180
GetTraceEnableLevel 0x1002c178
GetTraceLoggerHandle 0x1002c188
RegisterTraceGuidsW 0x1002c184
TraceMessage 0x1002c18c
UnregisterTraceGuids 0x1002c17c
api-ms-win-security-base-l1-1-0.dll 3
AdjustTokenPrivileges 0x1002c194
ImpersonateSelf 0x1002c198
RevertToSelf 0x1002c19c
msvcrt.dll 62
__CxxFrameHandler3 0x1002c1a4
__dllonexit 0x1002c1f4
_amsg_exit 0x1002c230
_close 0x1002c1d0
_CxxThrowException 0x1002c1b4
_errno 0x1002c21c
_except_handler4_common 0x1002c278
_initterm 0x1002c1e4
_lock 0x1002c1e8
_onexit 0x1002c1f8
_open 0x1002c1d8
_purecall 0x1002c260
_resetstkoflw 0x1002c268
_ui64tow_s 0x1002c234
_unlock 0x1002c1ec
_vsnwprintf 0x1002c28c
_waccess 0x1002c244
_wcsdup 0x1002c204
_wcserror 0x1002c294
_wcsicmp 0x1002c274
_wcsnicmp 0x1002c270
_wfopen 0x1002c258
_wfullpath 0x1002c1e0
_write 0x1002c1d4
_wsplitpath_s 0x1002c1dc
_wtoi 0x1002c208
_wtol 0x1002c20c
_XcptFilter 0x1002c1a8
??0exception@@QAE@ABQBD@Z 0x1002c1c8
??0exception@@QAE@ABQBDH@Z 0x1002c1c4
??0exception@@QAE@ABV0@@Z 0x1002c1c0
??1exception@@UAE@XZ 0x1002c1bc
??1type_info@@UAE@XZ 0x1002c224
?terminate@@YAXXZ 0x1002c220
?what@exception@@UBEPBDXZ 0x1002c1b8
calloc 0x1002c25c
fclose 0x1002c24c
ferror 0x1002c240
fread 0x1002c248
free 0x1002c290
fseek 0x1002c254
ftell 0x1002c250
fwrite 0x1002c1f0
iswspace 0x1002c280
iswxdigit 0x1002c228
malloc 0x1002c264
mbstowcs 0x1002c23c
memcmp 0x1002c214
memcpy 0x1002c1b0
memcpy_s 0x1002c288
memmove 0x1002c1ac
memset 0x1002c298
printf 0x1002c200
realloc 0x1002c1cc
swscanf 0x1002c210
towupper 0x1002c218
wcschr 0x1002c27c
wcsncmp 0x1002c284
wcsncpy_s 0x1002c238
wcsrchr 0x1002c26c
wcstok 0x1002c22c
wcstombs 0x1002c1fc
wbemcomn.dll 52
_ThrowMemoryException_ 0x1002c360
??0CFlexArray@@QAE@HH@Z 0x1002c30c
??0CMRCICompression@@QAE@XZ 0x1002c2fc
??0Registry@@QAE@PBGK@Z 0x1002c2e4
??0WString@@QAE@PBG@Z 0x1002c324
??0WString@@QAE@XZ 0x1002c2f4
??1CFlexArray@@QAE@XZ 0x1002c310
??1CMRCICompression@@QAE@XZ 0x1002c318
??1CVar@@QAE@XZ 0x1002c33c
??1Registry@@QAE@XZ 0x1002c2e8
??4WString@@QAEAAV0@PBG@Z 0x1002c2cc
?AddEnvironmentValue@CWbemInstallObject@@SGJPBG0@Z 0x1002c2a0
?CleanUp@CWbemInstallObject@@SGXXZ 0x1002c2c8
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z 0x1002c2f8
?DeleteString@WString@@AAEXPAG@Z 0x1002c35c
?ExpandEnvironmentStringsW@CWbemInstallObject@@SGKPBGPAGK@Z 0x1002c304
?FlushRepository@CWbemInstallObject@@SGJXZ 0x1002c2c4
?GetAt@CFlexArray@@QBEPAXH@Z 0x1002c314
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z 0x1002c2ec
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ 0x1002c308
?GetText@CVar@@QAEPAGJJPBG@Z 0x1002c340
?Init@CVar@@AAEXXZ 0x1002c334
?InsertAt@CFlexArray@@QAEHHPAX@Z 0x1002c344
?IsOffline@CWbemInstallObject@@SG_NXZ 0x1002c36c
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z 0x1002c330
?Mrci1Decompress@CBaseMrciCompression@@QAEIPAEI0I@Z 0x1002c300
?Mrci1MaxCompress@CBaseMrciCompression@@QAEIPAEI0I@Z 0x1002c34c
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z 0x1002c32c
?RemoveAt@CFlexArray@@QAEHH@Z 0x1002c348
?SetAutoRecoverFolder@CWbemInstallObject@@SGXPBG@Z 0x1002c2b4
?SetBinaryPath@CWbemInstallObject@@SGXPBG@Z 0x1002c2ac
?SetMultiStr@Registry@@QAEHPBGPAGK@Z 0x1002c2f0
?SetOffline@CWbemInstallObject@@SGX_N@Z 0x1002c2a8
?SetRegistryPathCIMOM@CWbemInstallObject@@SGXPBG@Z 0x1002c2bc
?SetRegistryPathWbem@CWbemInstallObject@@SGXPBG@Z 0x1002c2b8
?SetRepositoryFolder@CWbemInstallObject@@SGXPBG@Z 0x1002c2b0
?SetStr@Registry@@QAEHPBG0@Z 0x1002c350
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z 0x1002c338
?Shutdown@CWbemInstallObject@@SGXXZ 0x1002c2a4
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z 0x1002c368
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z 0x1002c364
?Write@CMemoryLog@@QAEXJ@Z 0x1002c358
bAreWeLocal 0x1002c320
CopyFileToAutorecover 0x1002c2e0
ExtractMachineName 0x1002c31c
GetMemLogObject 0x1002c354
RegisterDLL 0x1002c2d0
RegisterDllAppid 0x1002c2d4
RemoveFileFromAutoRecoverFolder 0x1002c2c0
UnRegisterDLL 0x1002c2d8
UnregisterDllAppid 0x1002c2dc
WbemVariantChangeType 0x1002c328