wmipdfs.dll

Description: WMI DFS Provider

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: fcf8e0e938098290995df1e96288d2c2

File Size: 63.5 KB

Uploaded At: Dec. 1, 2025, 7:51 a.m.

Views: 5

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1370)
DllGetClassObject (Ordinal: 2, Address: 0x1310)
DllRegisterServer (Ordinal: 3, Address: 0x13a0)
DllUnregisterServer (Ordinal: 4, Address: 0x13d0)

Imported DLLs & Functions

ADVAPI32.dll

ImpersonateLoggedOnUser (Address: 0x180009e78)
OpenThreadToken (Address: 0x180009ea0)
RegCloseKey (Address: 0x180009e88)
RegCreateKeyExW (Address: 0x180009e90)
RegDeleteKeyExW (Address: 0x180009eb0)
RegOpenKeyExW (Address: 0x180009e80)
RegSetValueExW (Address: 0x180009e98)
RevertToSelf (Address: 0x180009ea8)

framedynos.dll

??0CHPtrArray@@QEAA@XZ (Address: 0x18000a198)
??0CHString@@QEAA@AEBV0@@Z (Address: 0x18000a210)
??0CHString@@QEAA@PEBG@Z (Address: 0x18000a208)
??0CHString@@QEAA@XZ (Address: 0x18000a070)
??0CHStringArray@@QEAA@XZ (Address: 0x18000a258)
??0CObjectPathParser@@QEAA@W4ObjectParserFlags@@@Z (Address: 0x18000a280)
??0CThreadBase@@QEAA@W4THREAD_SAFETY_MECHANISM@0@@Z (Address: 0x18000a188)
??0Provider@@QEAA@PEBG0@Z (Address: 0x18000a060)
??1CHPtrArray@@QEAA@XZ (Address: 0x18000a1a0)
??1CHString@@QEAA@XZ (Address: 0x18000a078)
??1CHStringArray@@QEAA@XZ (Address: 0x18000a260)
??1CObjectPathParser@@QEAA@XZ (Address: 0x18000a288)
??1CThreadBase@@UEAA@XZ (Address: 0x18000a190)
??1Provider@@UEAA@XZ (Address: 0x18000a068)
??4CHString@@QEAAAEBV0@AEBV0@@Z (Address: 0x18000a080)
??4CHString@@QEAAAEBV0@PEBG@Z (Address: 0x18000a218)
??ACHPtrArray@@QEAAAEAPEAXH@Z (Address: 0x18000a1c0)
??ACHStringArray@@QEBA?AVCHString@@H@Z (Address: 0x18000a230)
??H@YA?AVCHString@@AEBV0@0@Z (Address: 0x18000a160)
??H@YA?AVCHString@@AEBV0@G@Z (Address: 0x18000a168)
??H@YA?AVCHString@@PEBGAEBV0@@Z (Address: 0x18000a170)
??YCHString@@QEAAAEBV0@AEBV0@@Z (Address: 0x18000a238)
??YCHString@@QEAAAEBV0@G@Z (Address: 0x180009fe8)
?Add@CHPtrArray@@QEAAHPEAX@Z (Address: 0x18000a1b0)
?Add@CHStringArray@@QEAAHPEBG@Z (Address: 0x18000a268)
?AddRef@CInstance@@QEAAJXZ (Address: 0x18000a010)
?BeginRead@CThreadBase@@QEAAHK@Z (Address: 0x180009ff8)
?BeginWrite@CThreadBase@@QEAAHK@Z (Address: 0x18000a1a8)
?captainsLog@@3VProviderLog@@A (Address: 0x18000a050)
?Commit@CInstance@@QEAAJXZ (Address: 0x18000a0b0)
?Create@CWbemGlueFactory@@SAPEAV1@PEAJ@Z (Address: 0x18000a1e0)
?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z (Address: 0x18000a0a8)
?DeleteInstance@Provider@@MEAAJAEBVCInstance@@J@Z (Address: 0x18000a028)
?Destroy@CWbemGlueFactory@@QEAAXXZ (Address: 0x18000a1e8)
?Empty@CHString@@QEAAXXZ (Address: 0x18000a148)
?EndRead@CThreadBase@@QEAAXXZ (Address: 0x18000a018)
?EndWrite@CThreadBase@@QEAAXXZ (Address: 0x18000a1b8)
?ExecMethod@Provider@@MEAAJAEBVCInstance@@QEAGPEAV2@2J@Z (Address: 0x18000a140)
?ExecQuery@Provider@@MEAAJPEAVMethodContext@@AEAVCFrameworkQuery@@J@Z (Address: 0x18000a0f8)
?FindOneOf@CHString@@QEBAHPEBG@Z (Address: 0x18000a040)
?Flush@Provider@@MEAAXXZ (Address: 0x18000a100)
?Format@CHString@@QEAAXPEBGZZ (Address: 0x18000a228)
?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z (Address: 0x18000a1f8)
?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z (Address: 0x18000a1f0)
?Free@CObjectPathParser@@QEAAXPEAUParsedObjectPath@@@Z (Address: 0x18000a278)
?GetAt@CHPtrArray@@QEBAPEAXH@Z (Address: 0x18000a008)
?GetBuffer@CHString@@QEAAPEAGH@Z (Address: 0x18000a0a0)
?GetCHString@CInstance@@QEBA_NPEBGAEAVCHString@@@Z (Address: 0x18000a090)
?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z (Address: 0x18000a098)
?GetInstanceKeysByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@@Z (Address: 0x18000a178)
?GetInstancePropertiesByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@AEAVCHStringArray@@@Z (Address: 0x18000a270)
?GetInstancesByQuery@CWbemProviderGlue@@SAJPEBGPEAV?$TRefPointerCollection@VCInstance@@@@PEAVMethodContext@@0@Z (Address: 0x18000a250)
?GetInstancesByQueryAsynch@CWbemProviderGlue@@SAJPEBGPEAVProvider@@P6AJ1PEAVCInstance@@PEAVMethodContext@@PEAX@Z034@Z (Address: 0x18000a248)
?GetLength@CHString@@QEBAHXZ (Address: 0x18000a0d8)
?GetLocalInstancePath@Provider@@IEAA_NPEBVCInstance@@AEAVCHString@@@Z (Address: 0x18000a150)
?GetMethodContext@CInstance@@QEBAPEAVMethodContext@@XZ (Address: 0x18000a038)
?GetObject@Provider@@MEAAJPEAVCInstance@@J@Z (Address: 0x18000a0f0)
?GetSize@CHPtrArray@@QEBAHXZ (Address: 0x18000a000)
?GetValuesForProp@CFrameworkQuery@@QEAAJPEBGAEAVCHStringArray@@@Z (Address: 0x18000a030)
?GetVariant@CInstance@@QEBA_NPEBGAEAUtagVARIANT@@@Z (Address: 0x18000a220)
?initFailed@Provider@@SAHXZ (Address: 0x18000a200)
?IsDerivedFrom@CWbemProviderGlue@@SA_NPEBG0PEAVMethodContext@@0@Z (Address: 0x18000a180)
?IsPropertyRequired@CFrameworkQuery@@QEAA_NPEBG@Z (Address: 0x18000a0d0)
?Left@CHString@@QEBA?AV1@H@Z (Address: 0x180009fe0)
?LocalLogMessage@ProviderLog@@QEAAXPEBG0HW4LogLevel@1@@Z (Address: 0x18000a058)
?LocalLogMessage@ProviderLog@@QEAAXPEBGHW4LogLevel@1@0ZZ (Address: 0x18000a048)
?OnFinalRelease@CThreadBase@@MEAAXXZ (Address: 0x18000a1c8)
?Parse@CObjectPathParser@@QEAAHPEBGPEAPEAUParsedObjectPath@@@Z (Address: 0x18000a290)
?PutInstance@Provider@@MEAAJAEBVCInstance@@J@Z (Address: 0x18000a020)
?Release@CInstance@@QEAAJXZ (Address: 0x18000a0e0)
?RemoveAll@CHPtrArray@@QEAAXXZ (Address: 0x18000a0e8)
?RemoveAll@CHStringArray@@QEAAXXZ (Address: 0x18000a1d8)
?RemoveAt@CHStringArray@@QEAAXHH@Z (Address: 0x18000a1d0)
?Right@CHString@@QEBA?AV1@H@Z (Address: 0x180009ff0)
?s_strComputerName@Provider@@0VCHString@@A (Address: 0x18000a088)
?SetAt@CHString@@QEAAXHG@Z (Address: 0x18000a240)
?Setbool@CInstance@@QEAA_NPEBG_N@Z (Address: 0x18000a0c0)
?SetCHString@CInstance@@QEAA_NPEBG0@Z (Address: 0x18000a138)
?SetCHString@CInstance@@QEAA_NPEBGAEBVCHString@@@Z (Address: 0x18000a158)
?SetDWORD@CInstance@@QEAA_NPEBGK@Z (Address: 0x18000a0c8)
?SetWCHARSplat@CInstance@@QEAA_NPEBG0@Z (Address: 0x18000a0b8)
?ValidateDeletionFlags@Provider@@MEAAJJ@Z (Address: 0x18000a128)
?ValidateEnumerationFlags@Provider@@MEAAJJ@Z (Address: 0x18000a108)
?ValidateGetObjFlags@Provider@@MEAAJJ@Z (Address: 0x18000a110)
?ValidateMethodFlags@Provider@@MEAAJJ@Z (Address: 0x18000a118)
?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z (Address: 0x18000a130)
?ValidateQueryFlags@Provider@@MEAAJJ@Z (Address: 0x18000a120)

KERNEL32.dll

CloseHandle (Address: 0x180009ed8)
DisableThreadLibraryCalls (Address: 0x180009ef0)
GetComputerNameExW (Address: 0x180009ee0)
GetCurrentProcess (Address: 0x180009f70)
GetCurrentProcessId (Address: 0x180009f18)
GetCurrentThread (Address: 0x180009ed0)
GetCurrentThreadId (Address: 0x180009f10)
GetFileAttributesW (Address: 0x180009f68)
GetLastError (Address: 0x180009f60)
GetModuleFileNameW (Address: 0x180009ec8)
GetSystemTimeAsFileTime (Address: 0x180009f08)
GetTickCount (Address: 0x180009f00)
GetVersionExW (Address: 0x180009ec0)
LocalFree (Address: 0x180009f58)
QueryPerformanceCounter (Address: 0x180009f20)
RtlCaptureContext (Address: 0x180009f48)
RtlLookupFunctionEntry (Address: 0x180009f40)
RtlVirtualUnwind (Address: 0x180009f38)
SetLastError (Address: 0x180009ee8)
SetUnhandledExceptionFilter (Address: 0x180009ef8)
Sleep (Address: 0x180009f50)
TerminateProcess (Address: 0x180009f28)
UnhandledExceptionFilter (Address: 0x180009f30)

msvcrt.dll

__C_specific_handler (Address: 0x18000a2e0)
__CxxFrameHandler3 (Address: 0x18000a318)
__dllonexit (Address: 0x18000a2c8)
_amsg_exit (Address: 0x18000a2f8)
_callnewh (Address: 0x18000a350)
_CxxThrowException (Address: 0x18000a2a8)
_initterm (Address: 0x18000a2e8)
_lock (Address: 0x18000a2d8)
_onexit (Address: 0x18000a2c0)
_purecall (Address: 0x18000a348)
_unlock (Address: 0x18000a2d0)
_wcsicmp (Address: 0x18000a2b0)
_XcptFilter (Address: 0x18000a300)
??_V@YAXPEAX@Z (Address: 0x18000a368)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18000a340)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18000a338)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18000a330)
??1exception@@UEAA@XZ (Address: 0x18000a328)
??1type_info@@UEAA@XZ (Address: 0x18000a2b8)
??3@YAXPEAX@Z (Address: 0x18000a2a0)
?what@exception@@UEBAPEBDXZ (Address: 0x18000a320)
free (Address: 0x18000a2f0)
malloc (Address: 0x18000a358)
memcpy (Address: 0x18000a310)
memmove (Address: 0x18000a308)
wcschr (Address: 0x18000a370)
wcsncmp (Address: 0x18000a360)

NETAPI32.dll

NetApiBufferFree (Address: 0x180009fa8)
NetDfsAdd (Address: 0x180009f88)
NetDfsAddStdRoot (Address: 0x180009f90)
NetDfsEnum (Address: 0x180009fb0)
NetDfsRemove (Address: 0x180009f98)
NetDfsRemoveStdRoot (Address: 0x180009fa0)
NetDfsSetInfo (Address: 0x180009f80)

ole32.dll

StringFromGUID2 (Address: 0x18000a380)

OLEAUT32.dll

VariantChangeType (Address: 0x180009fc8)
VariantClear (Address: 0x180009fd0)
VariantInit (Address: 0x180009fc0)