wbemcons.dll

Description: WMI Standard Event Consumers

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: d5e85e09723063f643f1057b6b07a589

File Size: 75.0 KB

Uploaded At: Dec. 1, 2025, 7:51 a.m.

Views: 5

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x9e20)
DllGetClassObject (Ordinal: 2, Address: 0x9ce0)
DllRegisterServer (Ordinal: 3, Address: 0x9f00)
DllUnregisterServer (Ordinal: 4, Address: 0xa0c0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18000d608)
CoInitializeEx (Address: 0x18000d618)
CoUninitialize (Address: 0x18000d610)
StringFromGUID2 (Address: 0x18000d600)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18000d628)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18000d638)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18000d648)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18000d660)
SetUnhandledExceptionFilter (Address: 0x18000d668)
UnhandledExceptionFilter (Address: 0x18000d658)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18000d698)
CreateFileW (Address: 0x18000d688)
GetFileSizeEx (Address: 0x18000d6a0)
GetFileType (Address: 0x18000d690)
ReadFile (Address: 0x18000d6a8)
SetFilePointer (Address: 0x18000d678)
WriteFile (Address: 0x18000d680)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18000d6b8)
DuplicateHandle (Address: 0x18000d6c0)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x18000d6d0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18000d6e0)
GetModuleFileNameW (Address: 0x18000d6e8)
GetModuleHandleExW (Address: 0x18000d6f0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18000d700)
LCMapStringW (Address: 0x18000d708)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x18000d730)
GetCurrentProcess (Address: 0x18000d718)
GetCurrentProcessId (Address: 0x18000d740)
GetCurrentThreadId (Address: 0x18000d728)
GetExitCodeProcess (Address: 0x18000d720)
TerminateProcess (Address: 0x18000d738)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18000d750)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18000d768)
RegCreateKeyExW (Address: 0x18000d760)
RegDeleteKeyExW (Address: 0x18000d780)
RegOpenKeyExW (Address: 0x18000d778)
RegSetValueExW (Address: 0x18000d770)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18000d7a0)
RtlLookupFunctionEntry (Address: 0x18000d798)
RtlVirtualUnwind (Address: 0x18000d790)

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte (Address: 0x18000d7b0)

api-ms-win-core-synch-l1-1-0.dll

CancelWaitableTimer (Address: 0x18000d7c8)
CreateEventW (Address: 0x18000d7e0)
EnterCriticalSection (Address: 0x18000d7d0)
LeaveCriticalSection (Address: 0x18000d7d8)
SetEvent (Address: 0x18000d7e8)
SetWaitableTimer (Address: 0x18000d7c0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18000d7f8)

api-ms-win-core-synch-l1-2-1.dll

CreateWaitableTimerW (Address: 0x18000d808)
WaitForMultipleObjects (Address: 0x18000d810)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18000d828)
GetTickCount (Address: 0x18000d820)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x18000d850)
CreateThreadpoolWork (Address: 0x18000d848)
SubmitThreadpoolWork (Address: 0x18000d838)
WaitForThreadpoolWorkCallbacks (Address: 0x18000d840)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x18000d860)
CopySid (Address: 0x18000d878)
EqualSid (Address: 0x18000d888)
FreeSid (Address: 0x18000d868)
GetFileSecurityW (Address: 0x18000d880)
GetLengthSid (Address: 0x18000d870)
GetSecurityDescriptorDacl (Address: 0x18000d890)
IsValidSid (Address: 0x18000d898)

esscli.dll

GetAccessMask (Address: 0x18000d8b0)
IsUserAdministrator (Address: 0x18000d8b8)
IsUserInGroup (Address: 0x18000d8a8)

KERNEL32.dll

GetComputerNameW (Address: 0x18000d5c0)
GetProcAddress (Address: 0x18000d5a8)
LoadLibraryExW (Address: 0x18000d5c8)
MoveFileW (Address: 0x18000d5b8)
SetLastError (Address: 0x18000d5b0)

msvcrt.dll

__C_specific_handler (Address: 0x18000d8d0)
__CxxFrameHandler3 (Address: 0x18000d8d8)
__dllonexit (Address: 0x18000d8c8)
_amsg_exit (Address: 0x18000d938)
_CxxThrowException (Address: 0x18000d8f0)
_findclose (Address: 0x18000d968)
_initterm (Address: 0x18000d910)
_lock (Address: 0x18000d8f8)
_onexit (Address: 0x18000d928)
_purecall (Address: 0x18000d988)
_unlock (Address: 0x18000d8e8)
_vsnwprintf (Address: 0x18000d948)
_wfindfirsti64 (Address: 0x18000d970)
_wfindnexti64 (Address: 0x18000d950)
_wremove (Address: 0x18000d920)
_wsplitpath_s (Address: 0x18000d960)
_XcptFilter (Address: 0x18000d8e0)
??1type_info@@UEAA@XZ (Address: 0x18000d908)
?terminate@@YAXXZ (Address: 0x18000d900)
free (Address: 0x18000d990)
malloc (Address: 0x18000d918)
memcpy (Address: 0x18000d940)
memset (Address: 0x18000d998)
swscanf (Address: 0x18000d958)
wcschr (Address: 0x18000d980)
wcsstr (Address: 0x18000d930)
wcstoul (Address: 0x18000d978)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x18000d9b8)
EtwGetTraceEnableLevel (Address: 0x18000d9b0)
EtwGetTraceLoggerHandle (Address: 0x18000d9a8)
EtwRegisterTraceGuidsW (Address: 0x18000d9c0)
EtwTraceMessage (Address: 0x18000d9d0)
EtwUnregisterTraceGuids (Address: 0x18000d9c8)

USER32.dll

CloseWindowStation (Address: 0x18000d5d8)
EnumWindowStationsW (Address: 0x18000d5f0)
GetUserObjectInformationW (Address: 0x18000d5e8)
OpenWindowStationW (Address: 0x18000d5e0)

wbemcomn.dll

??_FCTextTemplate@@QEAAXXZ (Address: 0x18000da68)
??0CCritSec@@QEAA@XZ (Address: 0x18000db10)
??0CFlexArray@@QEAA@HH@Z (Address: 0x18000dad8)
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z (Address: 0x18000da98)
??0CStaticCritSec@@QEAA@XZ (Address: 0x18000da70)
??0CTextTemplate@@QEAA@PEBG@Z (Address: 0x18000db50)
??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z (Address: 0x18000db68)
??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z (Address: 0x18000dac0)
??0CVarVector@@QEAA@HPEAUtagSAFEARRAY@@H@Z (Address: 0x18000da40)
??0WString@@QEAA@PEAGH@Z (Address: 0x18000da10)
??0WString@@QEAA@XZ (Address: 0x18000db58)
??1CCritSec@@QEAA@XZ (Address: 0x18000db08)
??1CFlexArray@@QEAA@XZ (Address: 0x18000dae0)
??1CInCritSec@@QEAA@XZ (Address: 0x18000db70)
??1CStaticCritSec@@QEAA@XZ (Address: 0x18000da78)
??1CTextTemplate@@QEAA@XZ (Address: 0x18000db48)
??1CUnk@@UEAA@XZ (Address: 0x18000db60)
??1CUnkInternal@@UEAA@XZ (Address: 0x18000dab8)
??1CVarVector@@QEAA@XZ (Address: 0x18000da48)
??1WString@@QEAA@XZ (Address: 0x18000da30)
??4WString@@QEAAAEAV0@AEBV0@@Z (Address: 0x18000db38)
??4WString@@QEAAAEAV0@PEBG@Z (Address: 0x18000da90)
??ACFlexArray@@QEAAAEAPEAXH@Z (Address: 0x18000dae8)
??YWString@@QEAAAEAV0@PEBG@Z (Address: 0x18000da00)
?AddRef@CUnk@@UEAAKXZ (Address: 0x18000da20)
?AddRef@CUnkInternal@@UEAAKXZ (Address: 0x18000daa8)
?anyFailure@CStaticCritSec@@SAHXZ (Address: 0x18000db28)
?Apply@CTextTemplate@@QEAAPEAGPEAUIWbemClassObject@@@Z (Address: 0x18000da08)
?Compress@CFlexArray@@QEAAXXZ (Address: 0x18000dad0)
?Empty@CFlexArray@@QEAAXXZ (Address: 0x18000daf0)
?Empty@WString@@QEAAXXZ (Address: 0x18000d9f8)
?Enter@CCritSec@@QEAAXXZ (Address: 0x18000db00)
?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z (Address: 0x18000da58)
?Initialize@CUnk@@UEAAHXZ (Address: 0x18000da28)
?InsertAt@CFlexArray@@QEAAHHPEAX@Z (Address: 0x18000dac8)
?InternalRelease@CUnkInternal@@QEAAKXZ (Address: 0x18000db30)
?Leave@CCritSec@@QEAAXXZ (Address: 0x18000daf8)
?OnInitialize@CUnk@@UEAAHXZ (Address: 0x18000da38)
?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x18000db40)
?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z (Address: 0x18000dab0)
?Release@CUnk@@UEAAKXZ (Address: 0x18000da18)
?Release@CUnkInternal@@UEAAKXZ (Address: 0x18000daa0)
?SetTemplate@CTextTemplate@@QEAAXPEBG@Z (Address: 0x18000d9e0)
?Size@CVarVector@@QEAAHXZ (Address: 0x18000da50)
?StripWs@WString@@QEAAAEAV1@H@Z (Address: 0x18000da80)
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x18000db18)
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x18000db20)
?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x18000d9e8)
GetMemLogObject (Address: 0x18000d9f0)
IsNT (Address: 0x18000da60)
ReadUI64 (Address: 0x18000da88)