CIWmi.dll

Description: WMIv2 Provider for CI Policy Management

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: a089cd83613fa42a2029d45b52a6ced1

File Size: 31.5 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x3f40)
  • DllGetClassObject (Ordinal: 2, Address: 0x3f70)
  • DllMain (Ordinal: 3, Address: 0x3cf0)
  • DllRegisterServer (Ordinal: 4, Address: 0x3eb0)
  • DllUnregisterServer (Ordinal: 5, Address: 0x3f00)
  • GetProviderClassID (Ordinal: 6, Address: 0x3d40)
  • MI_Main (Ordinal: 7, Address: 0x3700)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoImpersonateClient (Address: 0x10008004)
  • CoRevertToSelf (Address: 0x10008000)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10008014)
  • SetUnhandledExceptionFilter (Address: 0x1000800c)
  • UnhandledExceptionFilter (Address: 0x10008010)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x10008024)
  • DeleteFileW (Address: 0x1000801c)
  • GetFileSize (Address: 0x10008020)
  • ReadFile (Address: 0x1000802c)
  • WriteFile (Address: 0x10008028)
api-ms-win-core-file-l2-1-0.dll
  • CopyFileExW (Address: 0x10008034)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1000803c)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1000804c)
  • HeapAlloc (Address: 0x10008044)
  • HeapFree (Address: 0x10008048)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x10008054)
  • LocalFree (Address: 0x10008058)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10008068)
  • FreeLibrary (Address: 0x1000806c)
  • GetProcAddress (Address: 0x10008064)
  • LoadLibraryExW (Address: 0x10008060)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10008074)
  • GetCurrentProcessId (Address: 0x10008084)
  • GetCurrentThread (Address: 0x10008080)
  • GetCurrentThreadId (Address: 0x10008078)
  • OpenThreadToken (Address: 0x10008088)
  • TerminateProcess (Address: 0x1000807c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10008090)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x10008098)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x100080a0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x100080a8)
  • GetSystemTimeAsFileTime (Address: 0x100080ac)
  • GetSystemWindowsDirectoryW (Address: 0x100080b4)
  • GetTickCount (Address: 0x100080b0)
api-ms-win-core-wow64-l1-1-0.dll
  • Wow64DisableWow64FsRedirection (Address: 0x100080c0)
  • Wow64RevertWow64FsRedirection (Address: 0x100080bc)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x100080c8)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10008124)
  • __dllonexit (Address: 0x100080f0)
  • _amsg_exit (Address: 0x100080d0)
  • _callnewh (Address: 0x10008108)
  • _CxxThrowException (Address: 0x100080e8)
  • _except_handler4_common (Address: 0x10008120)
  • _initterm (Address: 0x10008114)
  • _lock (Address: 0x100080d4)
  • _onexit (Address: 0x100080f8)
  • _purecall (Address: 0x1000810c)
  • _unlock (Address: 0x100080d8)
  • _wcsicmp (Address: 0x10008118)
  • _XcptFilter (Address: 0x100080dc)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10008104)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x10008100)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100080f4)
  • ??1exception@@UAE@XZ (Address: 0x10008138)
  • ??1type_info@@UAE@XZ (Address: 0x100080fc)
  • ??3@YAXPAX@Z (Address: 0x10008110)
  • ?what@exception@@UBEPBDXZ (Address: 0x100080ec)
  • free (Address: 0x10008130)
  • malloc (Address: 0x10008128)
  • memcmp (Address: 0x1000812c)
  • memcpy (Address: 0x100080e4)
  • memmove (Address: 0x100080e0)
  • memset (Address: 0x1000813c)
  • swprintf_s (Address: 0x10008134)
  • wcscat_s (Address: 0x1000811c)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x1000814c)
  • NtSetSystemInformation (Address: 0x10008148)
  • RtlNtStatusToDosError (Address: 0x10008144)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x10008150)