vdswmi.dll

Description: WMI Provider for VDS

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 747d1d9cf72ba6e401e7795c5a6d7c90

File Size: 233.0 KB

Uploaded At: Dec. 1, 2025, 7:51 a.m.

Views: 5

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7cd0)
DllGetClassObject (Ordinal: 2, Address: 0x76d0)
DllRegisterServer (Ordinal: 3, Address: 0xf280)
DllUnregisterServer (Ordinal: 4, Address: 0xf540)

Imported DLLs & Functions

ADVAPI32.dll

AllocateAndInitializeSid (Address: 0x180029588)
CreateProcessAsUserW (Address: 0x1800295a0)
DuplicateTokenEx (Address: 0x180029598)
FreeSid (Address: 0x180029580)
LookupAccountSidW (Address: 0x180029578)
OpenThreadToken (Address: 0x180029590)
RegCloseKey (Address: 0x180029570)
RegCreateKeyW (Address: 0x1800295b0)
RegDeleteKeyW (Address: 0x180029568)
RegOpenKeyExW (Address: 0x1800295b8)
RegOpenKeyW (Address: 0x180029558)
RegQueryValueExW (Address: 0x1800295a8)
RegSetValueExW (Address: 0x180029560)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180029818)
CoImpersonateClient (Address: 0x180029828)
CoTaskMemAlloc (Address: 0x180029820)
CoTaskMemFree (Address: 0x180029808)
StringFromGUID2 (Address: 0x180029810)

framedynos.dll

??0CObjectPathParser@@QEAA@W4ObjectParserFlags@@@Z (Address: 0x180029838)
??1CObjectPathParser@@QEAA@XZ (Address: 0x180029860)
?AddKeyRef@ParsedObjectPath@@QEAAHPEBGPEBUtagVARIANT@@@Z (Address: 0x180029848)
?Free@CObjectPathParser@@QEAAXPEAUParsedObjectPath@@@Z (Address: 0x180029858)
?Parse@CObjectPathParser@@QEAAHPEBGPEAPEAUParsedObjectPath@@@Z (Address: 0x180029850)
?Unparse@CObjectPathParser@@SAHPEAUParsedObjectPath@@PEAPEAG@Z (Address: 0x180029840)

KERNEL32.dll

CloseHandle (Address: 0x1800296d8)
CompareStringW (Address: 0x180029660)
CreateFileW (Address: 0x180029698)
DeleteCriticalSection (Address: 0x180029700)
DeleteVolumeMountPointW (Address: 0x180029728)
DeviceIoControl (Address: 0x180029680)
EnterCriticalSection (Address: 0x180029670)
FindFirstVolumeW (Address: 0x180029668)
FindNextVolumeW (Address: 0x180029730)
FindVolumeClose (Address: 0x180029710)
FlushFileBuffers (Address: 0x180029600)
FormatMessageW (Address: 0x180029608)
FreeLibrary (Address: 0x180029718)
GetCommandLineW (Address: 0x1800295d0)
GetComputerNameW (Address: 0x180029708)
GetCurrentProcess (Address: 0x180029790)
GetCurrentProcessId (Address: 0x180029630)
GetCurrentThread (Address: 0x180029750)
GetCurrentThreadId (Address: 0x1800296a8)
GetDiskFreeSpaceExW (Address: 0x1800296d0)
GetDiskFreeSpaceW (Address: 0x180029678)
GetDriveTypeW (Address: 0x180029738)
GetExitCodeProcess (Address: 0x180029758)
GetFileAttributesW (Address: 0x1800296a0)
GetFileSizeEx (Address: 0x1800295c8)
GetLastError (Address: 0x1800296c8)
GetLogicalDriveStringsW (Address: 0x180029778)
GetModuleFileNameW (Address: 0x180029650)
GetProcAddress (Address: 0x1800296f0)
GetSystemDirectoryW (Address: 0x180029768)
GetSystemTimeAsFileTime (Address: 0x180029628)
GetTickCount (Address: 0x180029620)
GetVolumeInformationW (Address: 0x180029658)
GetVolumeNameForVolumeMountPointW (Address: 0x180029770)
GetVolumePathNamesForVolumeNameW (Address: 0x180029720)
InitializeCriticalSection (Address: 0x1800295d8)
InitializeCriticalSectionAndSpinCount (Address: 0x180029740)
LeaveCriticalSection (Address: 0x180029688)
LoadLibraryW (Address: 0x1800296e0)
LocalAlloc (Address: 0x180029690)
LocalFree (Address: 0x1800296f8)
LockFileEx (Address: 0x1800295f8)
lstrlenW (Address: 0x180029648)
OutputDebugStringA (Address: 0x180029640)
OutputDebugStringW (Address: 0x1800295e8)
QueryDosDeviceW (Address: 0x180029760)
QueryPerformanceCounter (Address: 0x180029638)
SetFileAttributesW (Address: 0x1800296b0)
SetFilePointerEx (Address: 0x1800295f0)
SetUnhandledExceptionFilter (Address: 0x180029788)
SetVolumeLabelW (Address: 0x1800296c0)
SetVolumeMountPointW (Address: 0x1800296e8)
Sleep (Address: 0x1800296b8)
TerminateProcess (Address: 0x180029618)
UnhandledExceptionFilter (Address: 0x180029780)
UnlockFileEx (Address: 0x1800295e0)
WaitForSingleObject (Address: 0x180029748)
WriteFile (Address: 0x180029610)

msvcrt.dll

__C_specific_handler (Address: 0x180029890)
__CxxFrameHandler3 (Address: 0x180029988)
__dllonexit (Address: 0x180029940)
_amsg_exit (Address: 0x180029880)
_callnewh (Address: 0x1800298d8)
_CxxThrowException (Address: 0x180029870)
_initterm (Address: 0x180029888)
_lock (Address: 0x180029930)
_onexit (Address: 0x180029948)
_purecall (Address: 0x180029960)
_ui64tow (Address: 0x1800298c0)
_unlock (Address: 0x180029938)
_vsnwprintf (Address: 0x180029978)
_wcsicmp (Address: 0x180029968)
_wcsnicmp (Address: 0x180029900)
_wtoi64 (Address: 0x1800298b8)
_XcptFilter (Address: 0x180029878)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180029910)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180029980)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180029908)
??0exception@@QEAA@XZ (Address: 0x180029918)
??1exception@@UEAA@XZ (Address: 0x180029920)
??1type_info@@UEAA@XZ (Address: 0x180029950)
?terminate@@YAXXZ (Address: 0x180029898)
?what@exception@@UEBAPEBDXZ (Address: 0x180029928)
free (Address: 0x1800298d0)
localtime (Address: 0x1800298b0)
malloc (Address: 0x1800298c8)
memcpy (Address: 0x180029958)
memcpy_s (Address: 0x180029970)
memmove_s (Address: 0x1800298f8)
memset (Address: 0x180029990)
time (Address: 0x1800298a8)
towupper (Address: 0x1800298f0)
wcschr (Address: 0x1800298e8)
wcsftime (Address: 0x1800298a0)
wcsstr (Address: 0x1800298e0)

ntdll.dll

NtQuerySystemInformation (Address: 0x1800299b0)
NtQueryVolumeInformationFile (Address: 0x1800299a8)
RtlCaptureContext (Address: 0x1800299a0)
RtlLookupFunctionEntry (Address: 0x1800299b8)
RtlVirtualUnwind (Address: 0x1800299c0)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x1800297a0)
SafeArrayUnaccessData (Address: 0x1800297a8)
SysAllocString (Address: 0x1800297c8)
SysAllocStringByteLen (Address: 0x1800297d0)
SysFreeString (Address: 0x1800297b8)
SysStringByteLen (Address: 0x1800297b0)
SysStringLen (Address: 0x1800297c0)
VariantClear (Address: 0x1800297d8)
VariantInit (Address: 0x1800297e0)

USERENV.dll

CreateEnvironmentBlock (Address: 0x1800297f8)
DestroyEnvironmentBlock (Address: 0x1800297f0)