| Windows 8 DLL File Information - witnesswmiv2provider.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Witness Service WMIv2 Provider |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 24 KB |
| Total Number of Exported Functions: | 9 |
| Total Number of Exported Functions With Names: | 9 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 16,384 Bytes | 66.7% | Read, Execute | Code |
| .data | 0x00005000 | 512 Bytes | 2.1% | Write, Read | Initialized Data |
| .idata | 0x00006000 | 3,072 Bytes | 12.5% | Read | Initialized Data |
| .rsrc | 0x00007000 | 1,536 Bytes | 6.3% | Read | Initialized Data |
| .reloc | 0x00008000 | 2,048 Bytes | 8.3% | Read, Discardable | Initialized Data |
Static Linking
witnesswmiv2provider.dll is statically linked to the following files:msvcrt.dll
ADVAPI32.dll
KERNEL32.dll
USER32.dll
CLUSAPI.dll
RESUTILS.dll
RPCRT4.dll
This means that when witnesswmiv2provider.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, witnesswmiv2provider.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 11 | 568 Bytes | 2.3% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 2 | 1,188 Bytes | 4.8% |
| Total | 13 | 1,756 Bytes | 7.1% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 1 | Unknown |
| 2 | Connected |
| 3 | Registered |
| 4 | RequestedNotifications |
| 5 | Cancelled |
| 6 | Disconnected |
| 100 | An internal witness error has occurred. |
| 101 | Unable to obtain cluster information. |
| 102 | Unable to find or move the specified client. |
| 103 | Move request was successfully sent to the specified client. |
| 104 | Move |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| DllCanUnloadNow | DllGetClassObject | DllMain | DllRegisterServer |
| DllUnregisterServer | GetProviderClassID | MI_Main | WitnessWmiInitialize |
| WitnessWmiTerminate |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _except_handler4_common _initterm free malloc memcpy memset swprintf_s - ADVAPI32.dll:
AccessCheck AddAccessAllowedAce DuplicateTokenEx GetLengthSid GetSecurityDescriptorOwner GetTokenInformation ImpersonateLoggedOnUser InitializeAcl InitializeSecurityDescriptor LookupAccountNameW OpenProcessToken OpenThreadToken RevertToSelf SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner ntdll!EtwEventWrite ntdll!EtwTraceMessage - KERNEL32.dll:
CloseHandle DisableThreadLibraryCalls FreeLibrary GetComputerNameW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleHandleW GetProcAddress GetProcessHeap GetSystemDirectoryW GetSystemTimeAsFileTime GetTickCount HeapFree InterlockedCompareExchange InterlockedExchange LoadLibraryExW QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter ntdll!RtlAllocateHeap - USER32.dll:
LoadStringW - CLUSAPI.dll:
CloseCluster CloseClusterNode CloseClusterResource ClusterCloseEnum ClusterOpenEnum ClusterResourceControl GetClusterInformation OpenCluster OpenClusterNode - RESUTILS.dll:
ResUtilGetCoreClusterResources - RPCRT4.dll:
I_RpcExceptionFilter NdrClientCall2 NdrServerCall2 RpcBindingFree RpcBindingFromStringBindingW RpcBindingInqAuthClientW RpcBindingSetAuthInfoExW RpcBindingVectorFree RpcEpRegisterW RpcEpResolveBinding RpcEpUnregister RpcImpersonateClient RpcMgmtInqServerPrincNameW RpcRevertToSelf RpcServerInqBindings RpcServerInqCallAttributesW RpcServerInqDefaultPrincNameW RpcServerRegisterAuthInfoW RpcServerRegisterIfEx RpcServerUnregisterIfEx RpcServerUseProtseqEpW RpcStringBindingComposeW RpcStringFreeW