home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 1 / Windows / System32 / wmi.dll < prev    next >
Microsoft Windows Dynamic Link Library  |  2006-11-02  |  5.0 KB

open in: MacOS 8.1     |     Win98     |     DOS

browse contents    |     view JSON data     |     view as text


This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Microsoft Windows Dynamic Link Library (executable/dll) magic Supported
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
1% dexvert OS/2 Dynamic Link Library (other/os2DLL) ext Unsupported
100% file PE32 executable for MS Windows 6.00 (DLL), Intel i386, 2 sections default
99% file data default
34% TrID Win32 Dynamic Link Library (generic) default
23% TrID Win32 Executable (generic) default
10% TrID Windows Icons Library (generic) default (weak)
10% TrID OS/2 Executable (generic) default
10% TrID Generic Win/DOS Executable default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 4f b8 41 d8 0b d9 2f 8b | 0b d9 2f 8b 0b d9 2f 8b |O.A.../.|../.../.|
|00000090| 2c 1f 55 8b 0a d9 2f 8b | 2c 1f 53 8b 0a d9 2f 8b |,.U.../.|,.S.../.|
|000000a0| 2c 1f 57 8b 0a d9 2f 8b | 52 69 63 68 0b d9 2f 8b |,.W.../.|Rich../.|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 02 00 |........|PE..L...|
|000000d0| 55 be 49 45 00 00 00 00 | 00 00 00 00 e0 00 02 21 |U.IE....|.......!|
|000000e0| 0b 01 08 00 00 00 00 00 | 00 10 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 10 00 00 | 00 10 00 00 00 00 40 00 |........|......@.|
|00000100| 00 10 00 00 00 02 00 00 | 06 00 00 00 06 00 00 00 |........|........|
|00000110| 06 00 00 00 00 00 00 00 | 00 30 00 00 00 04 00 00 |........|.0......|
|00000120| 58 c8 00 00 02 00 40 05 | 00 00 04 00 00 10 00 00 |X.....@.|........|
|00000130| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000140| 00 10 00 00 36 0a 00 00 | 00 00 00 00 00 00 00 00 |....6...|........|
|00000150| 00 20 00 00 e8 03 00 00 | 00 00 00 00 00 00 00 00 |. ......|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 38 1a 00 00 38 00 00 00 | 00 00 00 00 00 00 00 00 |8...8...|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 2e 74 65 78 74 00 00 00 | 94 0a 00 00 00 10 00 00 |.text...|........|
|000001d0| 00 0c 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 40 00 00 40 | 2e 72 73 72 63 00 00 00 |....@..@|.rsrc...|
|000001f0| e8 03 00 00 00 20 00 00 | 00 04 00 00 00 10 00 00 |..... ..|........|
|00000200| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 6b b7 49 45 | 00 00 00 00 ea 11 00 00 |....k.IE|........|
|00000410| 01 00 00 00 2d 00 00 00 | 2d 00 00 00 28 10 00 00 |....-...|-...(...|
|00000420| dc 10 00 00 90 11 00 00 | 48 15 00 00 5c 15 00 00 |........|H...\...|
|00000430| 73 15 00 00 8a 15 00 00 | a9 15 00 00 be 15 00 00 |s.......|........|
|00000440| db 15 00 00 f8 15 00 00 | 16 16 00 00 2a 16 00 00 |........|....*...|
|00000450| 3e 16 00 00 54 16 00 00 | 6d 16 00 00 86 16 00 00 |>...T...|m.......|
|00000460| a3 16 00 00 c0 16 00 00 | dd 16 00 00 f7 16 00 00 |........|........|
|00000470| 0c 17 00 00 21 17 00 00 | 38 17 00 00 54 17 00 00 |....!...|8...T...|
|00000480| 72 17 00 00 89 17 00 00 | ac 17 00 00 cf 17 00 00 |r.......|........|
|00000490| ea 17 00 00 05 18 00 00 | 20 18 00 00 46 18 00 00 |........| ...F...|
|000004a0| 6c 18 00 00 83 18 00 00 | a6 18 00 00 c9 18 00 00 |l.......|........|
|000004b0| ef 18 00 00 15 19 00 00 | 2b 19 00 00 45 19 00 00 |........|+...E...|
|000004c0| 5f 19 00 00 80 19 00 00 | a1 19 00 00 c2 19 00 00 |_.......|........|
|000004d0| e1 19 00 00 00 1a 00 00 | 1b 1a 00 00 f2 11 00 00 |........|........|
|000004e0| fd 11 00 00 0b 12 00 00 | 19 12 00 00 2f 12 00 00 |........|..../...|
|000004f0| 3b 12 00 00 4f 12 00 00 | 63 12 00 00 78 12 00 00 |;...O...|c...x...|
|00000500| 83 12 00 00 8e 12 00 00 | 9b 12 00 00 ab 12 00 00 |........|........|
|00000510| bb 12 00 00 cf 12 00 00 | e3 12 00 00 f7 12 00 00 |........|........|
|00000520| 08 13 00 00 14 13 00 00 | 20 13 00 00 2b 13 00 00 |........| ...+...|
|00000530| 3e 13 00 00 53 13 00 00 | 61 13 00 00 7b 13 00 00 |>...S...|a...{...|
|00000540| 95 13 00 00 a7 13 00 00 | b9 13 00 00 cb 13 00 00 |........|........|
|00000550| e8 13 00 00 05 14 00 00 | 13 14 00 00 2d 14 00 00 |........|....-...|
|00000560| 47 14 00 00 64 14 00 00 | 81 14 00 00 8e 14 00 00 |G...d...|........|
|00000570| 9f 14 00 00 b0 14 00 00 | c8 14 00 00 e0 14 00 00 |........|........|
|00000580| f8 14 00 00 0e 15 00 00 | 24 15 00 00 36 15 00 00 |........|$...6...|
|00000590| 00 00 01 00 02 00 03 00 | 04 00 05 00 06 00 07 00 |........|........|
|000005a0| 08 00 09 00 0a 00 0b 00 | 0c 00 0d 00 0e 00 0f 00 |........|........|
|000005b0| 10 00 11 00 12 00 13 00 | 14 00 15 00 16 00 17 00 |........|........|
|000005c0| 18 00 19 00 1a 00 1b 00 | 1c 00 1d 00 1e 00 1f 00 |........|........|
|000005d0| 20 00 21 00 22 00 23 00 | 24 00 25 00 26 00 27 00 | .!.".#.|$.%.&.'.|
|000005e0| 28 00 29 00 2a 00 2b 00 | 2c 00 57 4d 49 2e 64 6c |(.).*.+.|,.WMI.dl|
|000005f0| 6c 00 43 6c 6f 73 65 54 | 72 61 63 65 00 43 6f 6e |l.CloseT|race.Con|
|00000600| 74 72 6f 6c 54 72 61 63 | 65 41 00 43 6f 6e 74 72 |trolTrac|eA.Contr|
|00000610| 6f 6c 54 72 61 63 65 57 | 00 43 72 65 61 74 65 54 |olTraceW|.CreateT|
|00000620| 72 61 63 65 49 6e 73 74 | 61 6e 63 65 49 64 00 45 |raceInst|anceId.E|
|00000630| 6e 61 62 6c 65 54 72 61 | 63 65 00 47 65 74 54 72 |nableTra|ce.GetTr|
|00000640| 61 63 65 45 6e 61 62 6c | 65 46 6c 61 67 73 00 47 |aceEnabl|eFlags.G|
|00000650| 65 74 54 72 61 63 65 45 | 6e 61 62 6c 65 4c 65 76 |etTraceE|nableLev|
|00000660| 65 6c 00 47 65 74 54 72 | 61 63 65 4c 6f 67 67 65 |el.GetTr|aceLogge|
|00000670| 72 48 61 6e 64 6c 65 00 | 4f 70 65 6e 54 72 61 63 |rHandle.|OpenTrac|
|00000680| 65 41 00 4f 70 65 6e 54 | 72 61 63 65 57 00 50 72 |eA.OpenT|raceW.Pr|
|00000690| 6f 63 65 73 73 54 72 61 | 63 65 00 51 75 65 72 79 |ocessTra|ce.Query|
|000006a0| 41 6c 6c 54 72 61 63 65 | 73 41 00 51 75 65 72 79 |AllTrace|sA.Query|
|000006b0| 41 6c 6c 54 72 61 63 65 | 73 57 00 52 65 67 69 73 |AllTrace|sW.Regis|
|000006c0| 74 65 72 54 72 61 63 65 | 47 75 69 64 73 41 00 52 |terTrace|GuidsA.R|
|000006d0| 65 67 69 73 74 65 72 54 | 72 61 63 65 47 75 69 64 |egisterT|raceGuid|
|000006e0| 73 57 00 52 65 6d 6f 76 | 65 54 72 61 63 65 43 61 |sW.Remov|eTraceCa|
|000006f0| 6c 6c 62 61 63 6b 00 53 | 65 74 54 72 61 63 65 43 |llback.S|etTraceC|
|00000700| 61 6c 6c 62 61 63 6b 00 | 53 74 61 72 74 54 72 61 |allback.|StartTra|
|00000710| 63 65 41 00 53 74 61 72 | 74 54 72 61 63 65 57 00 |ceA.Star|tTraceW.|
|00000720| 54 72 61 63 65 45 76 65 | 6e 74 00 54 72 61 63 65 |TraceEve|nt.Trace|
|00000730| 45 76 65 6e 74 49 6e 73 | 74 61 6e 63 65 00 55 6e |EventIns|tance.Un|
|00000740| 72 65 67 69 73 74 65 72 | 54 72 61 63 65 47 75 69 |register|TraceGui|
|00000750| 64 73 00 57 6d 69 43 6c | 6f 73 65 42 6c 6f 63 6b |ds.WmiCl|oseBlock|
|00000760| 00 57 6d 69 44 65 76 49 | 6e 73 74 54 6f 49 6e 73 |.WmiDevI|nstToIns|
|00000770| 74 61 6e 63 65 4e 61 6d | 65 41 00 57 6d 69 44 65 |tanceNam|eA.WmiDe|
|00000780| 76 49 6e 73 74 54 6f 49 | 6e 73 74 61 6e 63 65 4e |vInstToI|nstanceN|
|00000790| 61 6d 65 57 00 57 6d 69 | 45 6e 75 6d 65 72 61 74 |ameW.Wmi|Enumerat|
|000007a0| 65 47 75 69 64 73 00 57 | 6d 69 45 78 65 63 75 74 |eGuids.W|miExecut|
|000007b0| 65 4d 65 74 68 6f 64 41 | 00 57 6d 69 45 78 65 63 |eMethodA|.WmiExec|
|000007c0| 75 74 65 4d 65 74 68 6f | 64 57 00 57 6d 69 46 69 |uteMetho|dW.WmiFi|
|000007d0| 6c 65 48 61 6e 64 6c 65 | 54 6f 49 6e 73 74 61 6e |leHandle|ToInstan|
|000007e0| 63 65 4e 61 6d 65 41 00 | 57 6d 69 46 69 6c 65 48 |ceNameA.|WmiFileH|
|000007f0| 61 6e 64 6c 65 54 6f 49 | 6e 73 74 61 6e 63 65 4e |andleToI|nstanceN|
|00000800| 61 6d 65 57 00 57 6d 69 | 46 72 65 65 42 75 66 66 |ameW.Wmi|FreeBuff|
|00000810| 65 72 00 57 6d 69 4d 6f | 66 45 6e 75 6d 65 72 61 |er.WmiMo|fEnumera|
|00000820| 74 65 52 65 73 6f 75 72 | 63 65 73 41 00 57 6d 69 |teResour|cesA.Wmi|
|00000830| 4d 6f 66 45 6e 75 6d 65 | 72 61 74 65 52 65 73 6f |MofEnume|rateReso|
|00000840| 75 72 63 65 73 57 00 57 | 6d 69 4e 6f 74 69 66 69 |urcesW.W|miNotifi|
|00000850| 63 61 74 69 6f 6e 52 65 | 67 69 73 74 72 61 74 69 |cationRe|gistrati|
|00000860| 6f 6e 41 00 57 6d 69 4e | 6f 74 69 66 69 63 61 74 |onA.WmiN|otificat|
|00000870| 69 6f 6e 52 65 67 69 73 | 74 72 61 74 69 6f 6e 57 |ionRegis|trationW|
|00000880| 00 57 6d 69 4f 70 65 6e | 42 6c 6f 63 6b 00 57 6d |.WmiOpen|Block.Wm|
|00000890| 69 51 75 65 72 79 41 6c | 6c 44 61 74 61 41 00 57 |iQueryAl|lDataA.W|
|000008a0| 6d 69 51 75 65 72 79 41 | 6c 6c 44 61 74 61 57 00 |miQueryA|llDataW.|
|000008b0| 57 6d 69 51 75 65 72 79 | 47 75 69 64 49 6e 66 6f |WmiQuery|GuidInfo|
|000008c0| 72 6d 61 74 69 6f 6e 00 | 57 6d 69 51 75 65 72 79 |rmation.|WmiQuery|
|000008d0| 53 69 6e 67 6c 65 49 6e | 73 74 61 6e 63 65 41 00 |SingleIn|stanceA.|
|000008e0| 57 6d 69 51 75 65 72 79 | 53 69 6e 67 6c 65 49 6e |WmiQuery|SingleIn|
|000008f0| 73 74 61 6e 63 65 57 00 | 57 6d 69 53 65 74 53 69 |stanceW.|WmiSetSi|
|00000900| 6e 67 6c 65 49 6e 73 74 | 61 6e 63 65 41 00 57 6d |ngleInst|anceA.Wm|
|00000910| 69 53 65 74 53 69 6e 67 | 6c 65 49 6e 73 74 61 6e |iSetSing|leInstan|
|00000920| 63 65 57 00 57 6d 69 53 | 65 74 53 69 6e 67 6c 65 |ceW.WmiS|etSingle|
|00000930| 49 74 65 6d 41 00 57 6d | 69 53 65 74 53 69 6e 67 |ItemA.Wm|iSetSing|
|00000940| 6c 65 49 74 65 6d 57 00 | 41 64 76 41 70 69 33 32 |leItemW.|AdvApi32|
|00000950| 2e 43 6c 6f 73 65 54 72 | 61 63 65 00 41 64 76 41 |.CloseTr|ace.AdvA|
|00000960| 70 69 33 32 2e 43 6f 6e | 74 72 6f 6c 54 72 61 63 |pi32.Con|trolTrac|
|00000970| 65 41 00 41 64 76 41 70 | 69 33 32 2e 43 6f 6e 74 |eA.AdvAp|i32.Cont|
|00000980| 72 6f 6c 54 72 61 63 65 | 57 00 41 64 76 41 70 69 |rolTrace|W.AdvApi|
|00000990| 33 32 2e 43 72 65 61 74 | 65 54 72 61 63 65 49 6e |32.Creat|eTraceIn|
|000009a0| 73 74 61 6e 63 65 49 64 | 00 41 64 76 41 70 69 33 |stanceId|.AdvApi3|
|000009b0| 32 2e 45 6e 61 62 6c 65 | 54 72 61 63 65 00 41 64 |2.Enable|Trace.Ad|
|000009c0| 76 41 70 69 33 32 2e 47 | 65 74 54 72 61 63 65 45 |vApi32.G|etTraceE|
|000009d0| 6e 61 62 6c 65 46 6c 61 | 67 73 00 41 64 76 41 70 |nableFla|gs.AdvAp|
|000009e0| 69 33 32 2e 47 65 74 54 | 72 61 63 65 45 6e 61 62 |i32.GetT|raceEnab|
|000009f0| 6c 65 4c 65 76 65 6c 00 | 41 64 76 41 70 69 33 32 |leLevel.|AdvApi32|
|00000a00| 2e 47 65 74 54 72 61 63 | 65 4c 6f 67 67 65 72 48 |.GetTrac|eLoggerH|
|00000a10| 61 6e 64 6c 65 00 41 64 | 76 41 70 69 33 32 2e 4f |andle.Ad|vApi32.O|
|00000a20| 70 65 6e 54 72 61 63 65 | 41 00 41 64 76 41 70 69 |penTrace|A.AdvApi|
|00000a30| 33 32 2e 4f 70 65 6e 54 | 72 61 63 65 57 00 41 64 |32.OpenT|raceW.Ad|
|00000a40| 76 41 70 69 33 32 2e 50 | 72 6f 63 65 73 73 54 72 |vApi32.P|rocessTr|
|00000a50| 61 63 65 00 41 64 76 41 | 70 69 33 32 2e 51 75 65 |ace.AdvA|pi32.Que|
|00000a60| 72 79 41 6c 6c 54 72 61 | 63 65 73 41 00 41 64 76 |ryAllTra|cesA.Adv|
|00000a70| 41 70 69 33 32 2e 51 75 | 65 72 79 41 6c 6c 54 72 |Api32.Qu|eryAllTr|
|00000a80| 61 63 65 73 57 00 41 64 | 76 41 70 69 33 32 2e 52 |acesW.Ad|vApi32.R|
|00000a90| 65 67 69 73 74 65 72 54 | 72 61 63 65 47 75 69 64 |egisterT|raceGuid|
|00000aa0| 73 41 00 41 64 76 41 70 | 69 33 32 2e 52 65 67 69 |sA.AdvAp|i32.Regi|
|00000ab0| 73 74 65 72 54 72 61 63 | 65 47 75 69 64 73 57 00 |sterTrac|eGuidsW.|
|00000ac0| 41 64 76 41 70 69 33 32 | 2e 52 65 6d 6f 76 65 54 |AdvApi32|.RemoveT|
|00000ad0| 72 61 63 65 43 61 6c 6c | 62 61 63 6b 00 41 64 76 |raceCall|back.Adv|
|00000ae0| 41 70 69 33 32 2e 53 65 | 74 54 72 61 63 65 43 61 |Api32.Se|tTraceCa|
|00000af0| 6c 6c 62 61 63 6b 00 41 | 64 76 41 70 69 33 32 2e |llback.A|dvApi32.|
|00000b00| 53 74 61 72 74 54 72 61 | 63 65 41 00 41 64 76 41 |StartTra|ceA.AdvA|
|00000b10| 70 69 33 32 2e 53 74 61 | 72 74 54 72 61 63 65 57 |pi32.Sta|rtTraceW|
|00000b20| 00 6e 74 64 6c 6c 2e 45 | 74 77 4c 6f 67 54 72 61 |.ntdll.E|twLogTra|
|00000b30| 63 65 45 76 65 6e 74 00 | 6e 74 64 6c 6c 2e 45 74 |ceEvent.|ntdll.Et|
|00000b40| 77 54 72 61 63 65 45 76 | 65 6e 74 49 6e 73 74 61 |wTraceEv|entInsta|
|00000b50| 6e 63 65 00 41 64 76 41 | 70 69 33 32 2e 55 6e 72 |nce.AdvA|pi32.Unr|
|00000b60| 65 67 69 73 74 65 72 54 | 72 61 63 65 47 75 69 64 |egisterT|raceGuid|
|00000b70| 73 00 41 64 76 41 70 69 | 33 32 2e 57 6d 69 43 6c |s.AdvApi|32.WmiCl|
|00000b80| 6f 73 65 42 6c 6f 63 6b | 00 41 64 76 41 70 69 33 |oseBlock|.AdvApi3|
|00000b90| 32 2e 57 6d 69 44 65 76 | 49 6e 73 74 54 6f 49 6e |2.WmiDev|InstToIn|
|00000ba0| 73 74 61 6e 63 65 4e 61 | 6d 65 41 00 41 64 76 41 |stanceNa|meA.AdvA|
|00000bb0| 70 69 33 32 2e 57 6d 69 | 44 65 76 49 6e 73 74 54 |pi32.Wmi|DevInstT|
|00000bc0| 6f 49 6e 73 74 61 6e 63 | 65 4e 61 6d 65 57 00 41 |oInstanc|eNameW.A|
|00000bd0| 64 76 41 70 69 33 32 2e | 57 6d 69 45 6e 75 6d 65 |dvApi32.|WmiEnume|
|00000be0| 72 61 74 65 47 75 69 64 | 73 00 41 64 76 41 70 69 |rateGuid|s.AdvApi|
|00000bf0| 33 32 2e 57 6d 69 45 78 | 65 63 75 74 65 4d 65 74 |32.WmiEx|ecuteMet|
|00000c00| 68 6f 64 41 00 41 64 76 | 41 70 69 33 32 2e 57 6d |hodA.Adv|Api32.Wm|
|00000c10| 69 45 78 65 63 75 74 65 | 4d 65 74 68 6f 64 57 00 |iExecute|MethodW.|
|00000c20| 41 64 76 41 70 69 33 32 | 2e 57 6d 69 46 69 6c 65 |AdvApi32|.WmiFile|
|00000c30| 48 61 6e 64 6c 65 54 6f | 49 6e 73 74 61 6e 63 65 |HandleTo|Instance|
|00000c40| 4e 61 6d 65 41 00 41 64 | 76 41 70 69 33 32 2e 57 |NameA.Ad|vApi32.W|
|00000c50| 6d 69 46 69 6c 65 48 61 | 6e 64 6c 65 54 6f 49 6e |miFileHa|ndleToIn|
|00000c60| 73 74 61 6e 63 65 4e 61 | 6d 65 57 00 41 64 76 41 |stanceNa|meW.AdvA|
|00000c70| 70 69 33 32 2e 57 6d 69 | 46 72 65 65 42 75 66 66 |pi32.Wmi|FreeBuff|
|00000c80| 65 72 00 41 64 76 41 70 | 69 33 32 2e 57 6d 69 4d |er.AdvAp|i32.WmiM|
|00000c90| 6f 66 45 6e 75 6d 65 72 | 61 74 65 52 65 73 6f 75 |ofEnumer|ateResou|
|00000ca0| 72 63 65 73 41 00 41 64 | 76 41 70 69 33 32 2e 57 |rcesA.Ad|vApi32.W|
|00000cb0| 6d 69 4d 6f 66 45 6e 75 | 6d 65 72 61 74 65 52 65 |miMofEnu|merateRe|
|00000cc0| 73 6f 75 72 63 65 73 57 | 00 41 64 76 41 70 69 33 |sourcesW|.AdvApi3|
|00000cd0| 32 2e 57 6d 69 4e 6f 74 | 69 66 69 63 61 74 69 6f |2.WmiNot|ificatio|
|00000ce0| 6e 52 65 67 69 73 74 72 | 61 74 69 6f 6e 41 00 41 |nRegistr|ationA.A|
|00000cf0| 64 76 41 70 69 33 32 2e | 57 6d 69 4e 6f 74 69 66 |dvApi32.|WmiNotif|
|00000d00| 69 63 61 74 69 6f 6e 52 | 65 67 69 73 74 72 61 74 |icationR|egistrat|
|00000d10| 69 6f 6e 57 00 41 64 76 | 41 70 69 33 32 2e 57 6d |ionW.Adv|Api32.Wm|
|00000d20| 69 4f 70 65 6e 42 6c 6f | 63 6b 00 41 64 76 41 70 |iOpenBlo|ck.AdvAp|
|00000d30| 69 33 32 2e 57 6d 69 51 | 75 65 72 79 41 6c 6c 44 |i32.WmiQ|ueryAllD|
|00000d40| 61 74 61 41 00 41 64 76 | 41 70 69 33 32 2e 57 6d |ataA.Adv|Api32.Wm|
|00000d50| 69 51 75 65 72 79 41 6c | 6c 44 61 74 61 57 00 41 |iQueryAl|lDataW.A|
|00000d60| 64 76 41 70 69 33 32 2e | 57 6d 69 51 75 65 72 79 |dvApi32.|WmiQuery|
|00000d70| 47 75 69 64 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |GuidInfo|rmation.|
|00000d80| 41 64 76 41 70 69 33 32 | 2e 57 6d 69 51 75 65 72 |AdvApi32|.WmiQuer|
|00000d90| 79 53 69 6e 67 6c 65 49 | 6e 73 74 61 6e 63 65 41 |ySingleI|nstanceA|
|00000da0| 00 41 64 76 41 70 69 33 | 32 2e 57 6d 69 51 75 65 |.AdvApi3|2.WmiQue|
|00000db0| 72 79 53 69 6e 67 6c 65 | 49 6e 73 74 61 6e 63 65 |rySingle|Instance|
|00000dc0| 57 00 41 64 76 41 70 69 | 33 32 2e 57 6d 69 53 65 |W.AdvApi|32.WmiSe|
|00000dd0| 74 53 69 6e 67 6c 65 49 | 6e 73 74 61 6e 63 65 41 |tSingleI|nstanceA|
|00000de0| 00 41 64 76 41 70 69 33 | 32 2e 57 6d 69 53 65 74 |.AdvApi3|2.WmiSet|
|00000df0| 53 69 6e 67 6c 65 49 6e | 73 74 61 6e 63 65 57 00 |SingleIn|stanceW.|
|00000e00| 41 64 76 41 70 69 33 32 | 2e 57 6d 69 53 65 74 53 |AdvApi32|.WmiSetS|
|00000e10| 69 6e 67 6c 65 49 74 65 | 6d 41 00 41 64 76 41 70 |ingleIte|mA.AdvAp|
|00000e20| 69 33 32 2e 57 6d 69 53 | 65 74 53 69 6e 67 6c 65 |i32.WmiS|etSingle|
|00000e30| 49 74 65 6d 57 00 00 00 | 00 00 00 00 6b b7 49 45 |ItemW...|....k.IE|
|00000e40| 00 00 00 00 02 00 00 00 | 20 00 00 00 74 1a 00 00 |........| ...t...|
|00000e50| 74 0e 00 00 00 00 00 00 | 6b b7 49 45 2b 02 de 10 |t.......|k.IE+...|
|00000e60| 0a 00 00 00 04 00 00 00 | 70 1a 00 00 70 0e 00 00 |........|p...p...|
|00000e70| de 10 03 bb 52 53 44 53 | 03 55 07 32 86 80 c6 44 |....RSDS|.U.2...D|
|00000e80| 82 23 11 a3 fb 28 ed 99 | 02 00 00 00 77 6d 69 2e |.#...(..|....wmi.|
|00000e90| 70 64 62 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |pdb.....|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001010| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00001020| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001040| 09 04 00 00 48 00 00 00 | 60 20 00 00 88 03 00 00 |....H...|` ......|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 88 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00001070| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00001080| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00001090| 00 00 06 00 02 40 70 17 | 00 00 06 00 02 40 70 17 |.....@p.|.....@p.|
|000010a0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 02 00 00 00 |?.......|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 e6 02 00 00 |........|........|
|000010c0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000010d0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|000010e0| c2 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|000010f0| 34 00 42 00 30 00 00 00 | 4c 00 16 00 01 00 43 00 |4.B.0...|L.....C.|
|00001100| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001110| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00001120| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00001130| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00001140| 6e 00 00 00 60 00 1c 00 | 01 00 46 00 69 00 6c 00 |n...`...|..F.i.l.|
|00001150| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00001160| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 57 00 4d 00 |t.i.o.n.|....W.M.|
|00001170| 49 00 20 00 44 00 43 00 | 20 00 61 00 6e 00 64 00 |I. .D.C.| .a.n.d.|
|00001180| 20 00 44 00 50 00 20 00 | 66 00 75 00 6e 00 63 00 | .D.P. .|f.u.n.c.|
|00001190| 74 00 69 00 6f 00 6e 00 | 61 00 6c 00 69 00 74 00 |t.i.o.n.|a.l.i.t.|
|000011a0| 79 00 00 00 6e 00 27 00 | 01 00 46 00 69 00 6c 00 |y...n.'.|..F.i.l.|
|000011b0| 65 00 56 00 65 00 72 00 | 73 00 69 00 6f 00 6e 00 |e.V.e.r.|s.i.o.n.|
|000011c0| 00 00 00 00 36 00 2e 00 | 30 00 2e 00 36 00 30 00 |....6...|0...6.0.|
|000011d0| 30 00 30 00 2e 00 31 00 | 36 00 33 00 38 00 36 00 |0.0...1.|6.3.8.6.|
|000011e0| 20 00 28 00 76 00 69 00 | 73 00 74 00 61 00 5f 00 | .(.v.i.|s.t.a._.|
|000011f0| 72 00 74 00 6d 00 2e 00 | 30 00 36 00 31 00 31 00 |r.t.m...|0.6.1.1.|
|00001200| 30 00 31 00 2d 00 32 00 | 32 00 30 00 35 00 29 00 |0.1.-.2.|2.0.5.).|
|00001210| 00 00 00 00 28 00 04 00 | 01 00 49 00 6e 00 74 00 |....(...|..I.n.t.|
|00001220| 65 00 72 00 6e 00 61 00 | 6c 00 4e 00 61 00 6d 00 |e.r.n.a.|l.N.a.m.|
|00001230| 65 00 00 00 77 00 6d 00 | 69 00 00 00 80 00 2e 00 |e...w.m.|i.......|
|00001240| 01 00 4c 00 65 00 67 00 | 61 00 6c 00 43 00 6f 00 |..L.e.g.|a.l.C.o.|
|00001250| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 00 00 |p.y.r.i.|g.h.t...|
|00001260| a9 00 20 00 4d 00 69 00 | 63 00 72 00 6f 00 73 00 |.. .M.i.|c.r.o.s.|
|00001270| 6f 00 66 00 74 00 20 00 | 43 00 6f 00 72 00 70 00 |o.f.t. .|C.o.r.p.|
|00001280| 6f 00 72 00 61 00 74 00 | 69 00 6f 00 6e 00 2e 00 |o.r.a.t.|i.o.n...|
|00001290| 20 00 41 00 6c 00 6c 00 | 20 00 72 00 69 00 67 00 | .A.l.l.| .r.i.g.|
|000012a0| 68 00 74 00 73 00 20 00 | 72 00 65 00 73 00 65 00 |h.t.s. .|r.e.s.e.|
|000012b0| 72 00 76 00 65 00 64 00 | 2e 00 00 00 38 00 08 00 |r.v.e.d.|....8...|
|000012c0| 01 00 4f 00 72 00 69 00 | 67 00 69 00 6e 00 61 00 |..O.r.i.|g.i.n.a.|
|000012d0| 6c 00 46 00 69 00 6c 00 | 65 00 6e 00 61 00 6d 00 |l.F.i.l.|e.n.a.m.|
|000012e0| 65 00 00 00 77 00 6d 00 | 69 00 2e 00 44 00 4c 00 |e...w.m.|i...D.L.|
|000012f0| 4c 00 00 00 6a 00 25 00 | 01 00 50 00 72 00 6f 00 |L...j.%.|..P.r.o.|
|00001300| 64 00 75 00 63 00 74 00 | 4e 00 61 00 6d 00 65 00 |d.u.c.t.|N.a.m.e.|
|00001310| 00 00 00 00 4d 00 69 00 | 63 00 72 00 6f 00 73 00 |....M.i.|c.r.o.s.|
|00001320| 6f 00 66 00 74 00 ae 00 | 20 00 57 00 69 00 6e 00 |o.f.t...| .W.i.n.|
|00001330| 64 00 6f 00 77 00 73 00 | ae 00 20 00 4f 00 70 00 |d.o.w.s.|.. .O.p.|
|00001340| 65 00 72 00 61 00 74 00 | 69 00 6e 00 67 00 20 00 |e.r.a.t.|i.n.g. .|
|00001350| 53 00 79 00 73 00 74 00 | 65 00 6d 00 00 00 00 00 |S.y.s.t.|e.m.....|
|00001360| 42 00 0f 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |B.....P.|r.o.d.u.|
|00001370| 63 00 74 00 56 00 65 00 | 72 00 73 00 69 00 6f 00 |c.t.V.e.|r.s.i.o.|
|00001380| 6e 00 00 00 36 00 2e 00 | 30 00 2e 00 36 00 30 00 |n...6...|0...6.0.|
|00001390| 30 00 30 00 2e 00 31 00 | 36 00 33 00 38 00 36 00 |0.0...1.|6.3.8.6.|
|000013a0| 00 00 00 00 44 00 00 00 | 01 00 56 00 61 00 72 00 |....D...|..V.a.r.|
|000013b0| 46 00 69 00 6c 00 65 00 | 49 00 6e 00 66 00 6f 00 |F.i.l.e.|I.n.f.o.|
|000013c0| 00 00 00 00 24 00 04 00 | 00 00 54 00 72 00 61 00 |....$...|..T.r.a.|
|000013d0| 6e 00 73 00 6c 00 61 00 | 74 00 69 00 6f 00 6e 00 |n.s.l.a.|t.i.o.n.|
|000013e0| 00 00 00 00 09 04 b0 04 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+