witnesswmiv2provider.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
Witness Service WMIv2 Provider
Authors
© Microsoft Corporation. All rights reserved.
File size
36.5 KB
Uploaded
2025-12-01 07:44
Views
82
SHA-256
7a62479513dbc4d184596805268128bd

Exported functions 9

DllCanUnloadNow #1 · 0x1490
DllGetClassObject #2 · 0x14d0
DllMain #3 · 0x1180
DllRegisterServer #4 · 0x13f0
DllUnregisterServer #5 · 0x1440
GetProviderClassID #6 · 0x11e0
MI_Main #7 · 0x1120
WitnessWmiInitialize #8 · 0x2810
WitnessWmiTerminate #9 · 0x2a70

Imported DLLs & functions 90

api-ms-win-core-com-l1-1-0.dll 2
CoImpersonateClient 0x180006c08
CoRevertToSelf 0x180006c00
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x180006c18
SetUnhandledExceptionFilter 0x180006c28
UnhandledExceptionFilter 0x180006c20
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180006c38
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180006c50
HeapAlloc 0x180006c48
HeapFree 0x180006c58
api-ms-win-core-libraryloader-l1-2-0.dll 6
DisableThreadLibraryCalls 0x180006c90
FreeLibrary 0x180006c88
GetModuleHandleW 0x180006c80
GetProcAddress 0x180006c70
LoadLibraryExW 0x180006c68
LoadStringW 0x180006c78
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180006ca0
api-ms-win-core-processthreads-l1-1-0.dll 7
GetCurrentProcess 0x180006cd0
GetCurrentProcessId 0x180006cc8
GetCurrentThread 0x180006cc0
GetCurrentThreadId 0x180006cd8
OpenProcessToken 0x180006cb8
OpenThreadToken 0x180006ce0
TerminateProcess 0x180006cb0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180006cf0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180006d00
RtlLookupFunctionEntry 0x180006d10
RtlVirtualUnwind 0x180006d08
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180006d20
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetComputerNameExW 0x180006d30
GetSystemDirectoryW 0x180006d40
GetSystemTimeAsFileTime 0x180006d48
GetTickCount 0x180006d38
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x180006d58
api-ms-win-eventing-provider-l1-1-0.dll 1
EventWriteTransfer 0x180006d68
api-ms-win-security-base-l1-1-0.dll 16
AccessCheck 0x180006d80
AddAccessAllowedAce 0x180006dc0
AllocateAndInitializeSid 0x180006d98
CheckTokenMembership 0x180006da0
DuplicateTokenEx 0x180006de0
FreeSid 0x180006dc8
GetLengthSid 0x180006df0
GetTokenInformation 0x180006de8
ImpersonateLoggedOnUser 0x180006db8
InitializeAcl 0x180006dd8
InitializeSecurityDescriptor 0x180006dd0
MakeSelfRelativeSD 0x180006db0
RevertToSelf 0x180006d88
SetSecurityDescriptorDacl 0x180006d78
SetSecurityDescriptorGroup 0x180006da8
SetSecurityDescriptorOwner 0x180006d90
ext-ms-win-cluster-clusapi-l1-1-0.dll 6
CloseCluster 0x180006e18
CloseClusterNode 0x180006e00
CloseClusterResource 0x180006e20
ClusterResourceControl 0x180006e28
OpenCluster 0x180006e10
OpenClusterNode 0x180006e08
ext-ms-win-cluster-resutils-l1-1-0.dll 1
ResUtilGetCoreClusterResources 0x180006e38
msvcrt.dll 9
__C_specific_handler 0x180006e78
_amsg_exit 0x180006e60
_initterm 0x180006e68
_XcptFilter 0x180006e48
free 0x180006e58
malloc 0x180006e50
memcpy 0x180006e70
memset 0x180006e88
swprintf_s 0x180006e80
RPCRT4.dll 24
I_RpcExceptionFilter 0x180006b80
NdrClientCall3 0x180006b50
NdrServerCall2 0x180006b40
NdrServerCallAll 0x180006b48
RpcBindingFree 0x180006b58
RpcBindingFromStringBindingW 0x180006b98
RpcBindingInqAuthClientW 0x180006be0
RpcBindingSetAuthInfoExW 0x180006b78
RpcBindingVectorFree 0x180006bd8
RpcEpRegisterW 0x180006bb0
RpcEpResolveBinding 0x180006b68
RpcEpUnregister 0x180006bb8
RpcImpersonateClient 0x180006bd0
RpcMgmtInqServerPrincNameW 0x180006b60
RpcRevertToSelf 0x180006bc8
RpcServerInqBindings 0x180006ba0
RpcServerInqCallAttributesW 0x180006ba8
RpcServerInqDefaultPrincNameW 0x180006b90
RpcServerRegisterAuthInfoW 0x180006b38
RpcServerRegisterIfEx 0x180006be8
RpcServerUnregisterIfEx 0x180006b70
RpcServerUseProtseqEpW 0x180006bf0
RpcStringBindingComposeW 0x180006b88
RpcStringFreeW 0x180006bc0