witnesswmiv2provider.dll

Description: Witness Service WMIv2 Provider

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7a62479513dbc4d184596805268128bd

File Size: 36.5 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1490)
  • DllGetClassObject (Ordinal: 2, Address: 0x14d0)
  • DllMain (Ordinal: 3, Address: 0x1180)
  • DllRegisterServer (Ordinal: 4, Address: 0x13f0)
  • DllUnregisterServer (Ordinal: 5, Address: 0x1440)
  • GetProviderClassID (Ordinal: 6, Address: 0x11e0)
  • MI_Main (Ordinal: 7, Address: 0x1120)
  • WitnessWmiInitialize (Ordinal: 8, Address: 0x2810)
  • WitnessWmiTerminate (Ordinal: 9, Address: 0x2a70)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoImpersonateClient (Address: 0x180006c08)
  • CoRevertToSelf (Address: 0x180006c00)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180006c18)
  • SetUnhandledExceptionFilter (Address: 0x180006c28)
  • UnhandledExceptionFilter (Address: 0x180006c20)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180006c38)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180006c50)
  • HeapAlloc (Address: 0x180006c48)
  • HeapFree (Address: 0x180006c58)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180006c90)
  • FreeLibrary (Address: 0x180006c88)
  • GetModuleHandleW (Address: 0x180006c80)
  • GetProcAddress (Address: 0x180006c70)
  • LoadLibraryExW (Address: 0x180006c68)
  • LoadStringW (Address: 0x180006c78)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180006ca0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180006cd0)
  • GetCurrentProcessId (Address: 0x180006cc8)
  • GetCurrentThread (Address: 0x180006cc0)
  • GetCurrentThreadId (Address: 0x180006cd8)
  • OpenProcessToken (Address: 0x180006cb8)
  • OpenThreadToken (Address: 0x180006ce0)
  • TerminateProcess (Address: 0x180006cb0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180006cf0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180006d00)
  • RtlLookupFunctionEntry (Address: 0x180006d10)
  • RtlVirtualUnwind (Address: 0x180006d08)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180006d20)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x180006d30)
  • GetSystemDirectoryW (Address: 0x180006d40)
  • GetSystemTimeAsFileTime (Address: 0x180006d48)
  • GetTickCount (Address: 0x180006d38)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x180006d58)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventWriteTransfer (Address: 0x180006d68)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x180006d80)
  • AddAccessAllowedAce (Address: 0x180006dc0)
  • AllocateAndInitializeSid (Address: 0x180006d98)
  • CheckTokenMembership (Address: 0x180006da0)
  • DuplicateTokenEx (Address: 0x180006de0)
  • FreeSid (Address: 0x180006dc8)
  • GetLengthSid (Address: 0x180006df0)
  • GetTokenInformation (Address: 0x180006de8)
  • ImpersonateLoggedOnUser (Address: 0x180006db8)
  • InitializeAcl (Address: 0x180006dd8)
  • InitializeSecurityDescriptor (Address: 0x180006dd0)
  • MakeSelfRelativeSD (Address: 0x180006db0)
  • RevertToSelf (Address: 0x180006d88)
  • SetSecurityDescriptorDacl (Address: 0x180006d78)
  • SetSecurityDescriptorGroup (Address: 0x180006da8)
  • SetSecurityDescriptorOwner (Address: 0x180006d90)
ext-ms-win-cluster-clusapi-l1-1-0.dll
  • CloseCluster (Address: 0x180006e18)
  • CloseClusterNode (Address: 0x180006e00)
  • CloseClusterResource (Address: 0x180006e20)
  • ClusterResourceControl (Address: 0x180006e28)
  • OpenCluster (Address: 0x180006e10)
  • OpenClusterNode (Address: 0x180006e08)
ext-ms-win-cluster-resutils-l1-1-0.dll
  • ResUtilGetCoreClusterResources (Address: 0x180006e38)
msvcrt.dll
  • __C_specific_handler (Address: 0x180006e78)
  • _amsg_exit (Address: 0x180006e60)
  • _initterm (Address: 0x180006e68)
  • _XcptFilter (Address: 0x180006e48)
  • free (Address: 0x180006e58)
  • malloc (Address: 0x180006e50)
  • memcpy (Address: 0x180006e70)
  • memset (Address: 0x180006e88)
  • swprintf_s (Address: 0x180006e80)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x180006b80)
  • NdrClientCall3 (Address: 0x180006b50)
  • NdrServerCall2 (Address: 0x180006b40)
  • NdrServerCallAll (Address: 0x180006b48)
  • RpcBindingFree (Address: 0x180006b58)
  • RpcBindingFromStringBindingW (Address: 0x180006b98)
  • RpcBindingInqAuthClientW (Address: 0x180006be0)
  • RpcBindingSetAuthInfoExW (Address: 0x180006b78)
  • RpcBindingVectorFree (Address: 0x180006bd8)
  • RpcEpRegisterW (Address: 0x180006bb0)
  • RpcEpResolveBinding (Address: 0x180006b68)
  • RpcEpUnregister (Address: 0x180006bb8)
  • RpcImpersonateClient (Address: 0x180006bd0)
  • RpcMgmtInqServerPrincNameW (Address: 0x180006b60)
  • RpcRevertToSelf (Address: 0x180006bc8)
  • RpcServerInqBindings (Address: 0x180006ba0)
  • RpcServerInqCallAttributesW (Address: 0x180006ba8)
  • RpcServerInqDefaultPrincNameW (Address: 0x180006b90)
  • RpcServerRegisterAuthInfoW (Address: 0x180006b38)
  • RpcServerRegisterIfEx (Address: 0x180006be8)
  • RpcServerUnregisterIfEx (Address: 0x180006b70)
  • RpcServerUseProtseqEpW (Address: 0x180006bf0)
  • RpcStringBindingComposeW (Address: 0x180006b88)
  • RpcStringFreeW (Address: 0x180006bc0)