Windows 8 DLL File Information - MPSSVC.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Microsoft Protection Service
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	682 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	547,328 Bytes	78.3%	Read, Execute	Code
.data	0x00087000	24,576 Bytes	3.5%	Write, Read	Initialized Data
.idata	0x0008e000	14,848 Bytes	2.1%	Read	Initialized Data
.rsrc	0x00092000	71,680 Bytes	10.3%	Read	Initialized Data
.reloc	0x000a4000	39,424 Bytes	5.6%	Read, Discardable	Initialized Data

Static Linking

MPSSVC.dll is statically linked to the following files:

FirewallAPI.dll
msvcrt.dll
ntdll.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-eventing-consumer-l1-1-0.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
RPCRT4.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-memory-l1-1-1.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-devices-config-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-string-l2-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
api-ms-win-core-threadpool-private-l1-1-0.dll
api-ms-win-security-grouppolicy-l1-1-0.dll
NSI.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-eventing-obsolete-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
fwpuclnt.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when MPSSVC.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, MPSSVC.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	101,014 Bytes	14.5%
Total	4	101,014 Bytes	14.5%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• FirewallAPI.dll:
  

  FWCopyAuthenticationSet	FWCopyConnectionSecurityRule	FWCopyCryptoSet
  FWCopyFirewallRule	FWFreeAuthenticationSet	FWFreeFirewallRules
  FWGPLock	FWGPUnlock	FWResolveGPONames
  FWVerifyAuthenticationSet	FWVerifyAuthenticationSetQuery	FWVerifyConnectionSecurityRuleQuery
  FWVerifyCryptoSet	FWVerifyCryptoSetQuery	FWVerifyFirewallRuleQuery
  FWVerifyMainModeRuleQuery	FwAddRule	FwAddSet
  FwAddrChangeSourceInitialize	FwAddrChangeSourceShutdown	FwAddrChangeSourceSignal
  FwAlloc	FwAllocCheckSize	FwAppContainerChangeFree
  FwAreAllContainedInAddresses	FwBinariesFree	FwCSRuleVerify
  FwCanonizeAuthorizedApps	FwChangeSourceInitialize	FwChangeSourceShutdown
  FwChangeSourceSignal	FwChangeSourceSignalStart	FwClosePolicyStore
  FwCopyAuthSetListToLowerVersion	FwCopyAuthsetToHigherVersion	FwCopyLUID
  FwCopyMMRule	FwCopyWFAddressesContents	FwCreateLocalTempStore
  FwDeleteAllRules	FwDeleteAllSets	FwDeleteRule
  FwDeleteSet	FwDestroyLocalTempStore	FwDoNothingOnObject
  FwDoNothingOnObject	FwEmptyWFAddresses	FwEmptyWFAddresses
  FwEnumRules	FwEnumSets	FwFree
  FwFreeRules	FwFreeSets	FwGetAddressesAsString
  FwGetAppBlockList	FwGetConfig	FwGetGlobalConfig
  FwGetGlobalConfigFromLocalTempStore	FwGetRule	FwIPV4RangeContainsMulticast
  FwIPV6RangeContainsMulticast	FwImageListDestroy	FwImageListHasImage
  FwIsV6AddrLoopback	FwMMRuleVerify	FwMergeAddresses
  FwMigrateLegacyAuthenticatedBypassSddl	FwNegateAddresses	FwOpenAppCDbPolicyStore
  FwOpenPolicyStore	FwPortsToString	FwReduceObjectsToVersion
  FwRemoveDuplicateAddresses	FwRuleResolveFlags	FwSddlStringVerify
  FwSetConfig	FwSetGlobalConfig	FwSetResolveFlags
  FwSetRule	FwSetSet	FwSidAndAttributesFree
  FwSidsToString	FwStringToAddresses	FwStringToSids
  FwSubtractAddresses	FwUniteWFAddressesContents	FwVerifyNoHeapLeaks
  FwVerifyWFRuleSemantics	IsAddressesEmpty	IsEqualAddresses
  IsRuleOldAuthApp	IsRuleOldGlobalOpenPort	IsUnicastExplicitAddressesEmpty
  Isv4Orv6AddressesEmpty	LoadGPExtensionDll

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _ui64tow

  _ultow_s

  _unlock

  _vsnprintf

  _vsnwprintf

  _wcsicmp

  _wcsnicmp

  bsearch

  free

  iswdigit

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove

  memmove_s

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  qsort

  towupper

  wcschr

  wcsncmp

  wcspbrk

  wcstoul

• ntdll.dll:
  

  DbgPrint	EtwEventEnabled	EtwEventRegister	EtwEventUnregister
  EtwEventWrite	EtwGetTraceEnableFlags	EtwGetTraceEnableLevel	EtwGetTraceLoggerHandle
  EtwRegisterTraceGuidsW	EtwTraceMessage	EtwUnregisterTraceGuids	NtClose
  NtOpenSymbolicLinkObject	NtQueryInformationProcess	NtQuerySymbolicLinkObject	RtlAllocateHeap
  RtlContractHashTable	RtlCopySid	RtlCreateHashTable	RtlCreateServiceSid
  RtlDeleteHashTable	RtlEndEnumerationHashTable	RtlEnumerateEntryHashTable	RtlEqualSid
  RtlExpandHashTable	RtlFreeHeap	RtlGetNextEntryHashTable	RtlInitEnumerationHashTable
  RtlInitUnicodeString	RtlInsertEntryHashTable	RtlIpv4AddressToStringA	RtlIpv6AddressToStringA
  RtlIsCapabilitySid	RtlIsPackageSid	RtlLengthSid	RtlLookupEntryHashTable
  RtlNtStatusToDosError	RtlNtStatusToDosErrorNoTeb	RtlPublishWnfStateData	RtlRemoveEntryHashTable
  WinSqmAddToStream	WinSqmSetDWORD

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventA	KernelBase!CreateEventW
  KernelBase!CreateMutexW	KernelBase!CreateWaitableTimerExW
  KernelBase!InitializeCriticalSectionAndSpinCount	KernelBase!ReleaseMutex
  KernelBase!ResetEvent	KernelBase!SetEvent
  KernelBase!SetWaitableTimer	KernelBase!Sleep
  KernelBase!WaitForMultipleObjectsEx	KernelBase!WaitForSingleObject
  KernelBase!WaitForSingleObjectEx	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!CreateProcessAsUserW	kernel32!CreateThread
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!OpenProcess	kernel32!QueueUserAPC	kernel32!ResumeThread	kernel32!TerminateProcess
  kernel32!TerminateThread

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress	KernelBase!LoadLibraryExW
  KernelBase!LoadStringW

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheck	KernelBase!AddAccessAllowedAce	KernelBase!AdjustTokenPrivileges
  KernelBase!AllocateAndInitializeSid	KernelBase!CheckTokenCapability	KernelBase!CheckTokenMembership
  KernelBase!CreateWellKnownSid	KernelBase!DuplicateTokenEx	KernelBase!EqualSid
  KernelBase!FreeSid	KernelBase!GetLengthSid	KernelBase!GetSecurityDescriptorControl
  KernelBase!GetSecurityDescriptorLength	KernelBase!GetTokenInformation	KernelBase!InitializeAcl
  KernelBase!InitializeSecurityDescriptor	KernelBase!IsValidSecurityDescriptor	KernelBase!IsValidSid
  KernelBase!MakeSelfRelativeSD	KernelBase!SetFileSecurityW	KernelBase!SetSecurityDescriptorDacl
  KernelBase!SetSecurityDescriptorGroup	KernelBase!SetSecurityDescriptorOwner

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateDirectoryW	KernelBase!CreateFileW	KernelBase!FileTimeToLocalFileTime
  KernelBase!FindClose	KernelBase!FindFirstFileW	KernelBase!FindNextFileW
  KernelBase!GetFileAttributesW	KernelBase!GetFileSize	KernelBase!GetFileType
  KernelBase!GetLogicalDriveStringsW	KernelBase!GetLongPathNameW	KernelBase!QueryDosDeviceW
  KernelBase!SetEndOfFile	KernelBase!SetFilePointerEx	KernelBase!WriteFile

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!CompareStringOrdinal	KernelBase!CompareStringW	KernelBase!MultiByteToWideChar
  KernelBase!WideCharToMultiByte

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetLocalTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetVersionExW

• api-ms-win-eventing-consumer-l1-1-0.dll:
  

  KernelBase!CloseTrace

  KernelBase!OpenTraceW

  KernelBase!ProcessTrace

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  KernelBase!ControlTraceW

  KernelBase!EnableTraceEx2

  KernelBase!StartTraceW

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolIo	KernelBase!CreateThreadpoolTimer	KernelBase!CreateThreadpoolWait
  ntdll!TpCancelAsyncIoOperation	ntdll!TpReleaseIoCompletion	ntdll!TpReleaseTimer
  ntdll!TpReleaseWait	ntdll!TpSetTimer	ntdll!TpSetWait
  ntdll!TpStartAsyncIoOperation	ntdll!TpWaitForIoCompletion	ntdll!TpWaitForTimer
  ntdll!TpWaitForWait

• api-ms-win-core-file-l2-1-0.dll:
  

  KernelBase!CopyFileExW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

  ntdll!RtlReAllocateHeap

• RPCRT4.dll:
  

  I_RpcBindingInqLocalClientPID	I_RpcBindingIsClientLocal	I_RpcExceptionFilter	NdrAsyncClientCall
  NdrAsyncServerCall	NdrClientCall2	NdrServerCall2	RpcAsyncAbortCall
  RpcAsyncCancelCall	RpcAsyncCompleteCall	RpcAsyncInitializeHandle	RpcBindingFree
  RpcBindingFromStringBindingW	RpcBindingInqAuthClientW	RpcBindingSetAuthInfoW	RpcBindingToStringBindingW
  RpcBindingVectorFree	RpcEpRegisterW	RpcEpUnregister	RpcImpersonateClient
  RpcRevertToSelf	RpcServerInqBindings	RpcServerInqDefaultPrincNameW	RpcServerRegisterAuthInfoW
  RpcServerRegisterIf3	RpcServerUnregisterIfEx	RpcServerUseProtseqW	RpcStringBindingComposeW
  RpcStringBindingParseW	RpcStringFreeW	UuidCreate

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime

• api-ms-win-core-memory-l1-1-1.dll:
  

  KernelBase!CreateFileMappingW

  KernelBase!MapViewOfFile

  KernelBase!UnmapViewOfFile

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteValueW
  KernelBase!RegEnumKeyExW	KernelBase!RegEnumValueW	KernelBase!RegNotifyChangeKeyValue
  KernelBase!RegOpenCurrentUser	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW
  KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• api-ms-win-devices-config-l1-1-0.dll:
  

  cfgmgr32!CM_Open_Class_KeyW

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!CancelIo

  kernel32!DeviceIoControl

• api-ms-win-core-string-l2-1-0.dll:
  

  KernelBase!CharLowerBuffW

• api-ms-win-core-localization-l1-2-0.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringA

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-shlwapi-legacy-l1-1-0.dll:
  

  KernelBase!PathCanonicalizeW	KernelBase!PathFileExistsW	KernelBase!PathFindFileNameW
  KernelBase!PathFindNextComponentW	KernelBase!PathIsRelativeW	KernelBase!PathRemoveFileSpecW
  KernelBase!PathSkipRootW

• api-ms-win-core-threadpool-private-l1-1-0.dll:
  

  KernelBase!RegisterWaitForSingleObjectEx

• api-ms-win-security-grouppolicy-l1-1-0.dll:
  

  KernelBase!RegisterGPNotificationInternal

  KernelBase!UnregisterGPNotificationInternal

• NSI.dll:
  

  NsiAllocateAndGetTable

  NsiFreeTable

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc

  kernel32!LocalFree

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpiW

• api-ms-win-eventing-obsolete-l1-1-0.dll:
  

  KernelBase!RemoveTraceCallback

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!CreateTimerQueue	KernelBase!CreateTimerQueueTimer	KernelBase!DeleteTimerQueueEx
  KernelBase!DeleteTimerQueueTimer	KernelBase!QueueUserWorkItem	KernelBase!UnregisterWaitEx

• fwpuclnt.dll:
  

  FwpiExpandCriteria0	FwpiFreeCriteria0	FwpmCalloutAdd0
  FwpmEngineClose0	FwpmEngineOpen0	FwpmEngineSetOption0
  FwpmEventProviderCreate0	FwpmEventProviderDestroy0	FwpmEventProviderFireNetEvent0
  FwpmEventProviderIsNetEventTypeEnabled0	FwpmFilterAdd0	FwpmFilterDeleteById0
  FwpmFilterDeleteByKey0	FwpmFreeMemory0	FwpmIPsecTunnelAdd2
  FwpmIPsecTunnelAddConditions0	FwpmIPsecTunnelDeleteByKey0	FwpmNetEventCreateEnumHandle0
  FwpmNetEventDestroyEnumHandle0	FwpmNetEventEnum2	FwpmNetEventSubscribe1
  FwpmNetEventUnsubscribe0	FwpmProviderAdd0	FwpmProviderContextAdd0
  FwpmProviderContextAdd2	FwpmProviderContextDeleteById0	FwpmProviderContextDeleteByKey0
  FwpmSubLayerAdd0	FwpmTransactionAbort0	FwpmTransactionBegin0
  FwpmTransactionCommit0	IPsecSaContextCreateEnumHandle0	IPsecSaContextDeleteById0
  IPsecSaContextDestroyEnumHandle0	IPsecSaContextEnum0	IkeextSaCreateEnumHandle0
  IkeextSaDeleteById0	IkeextSaDestroyEnumHandle0	IkeextSaEnum2

• api-ms-win-core-shlwapi-obsolete-l1-1-0.dll:
  

  KernelBase!SHLoadIndirectString

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI