Windows 8 DLL File Information - wkssvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Workstation Service DLL
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	140 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	113,664 Bytes	79.0%	Read, Execute	Code
.data	0x0001d000	4,608 Bytes	3.2%	Write, Read	Initialized Data
.idata	0x0001f000	9,216 Bytes	6.4%	Read	Initialized Data
.rsrc	0x00022000	8,192 Bytes	5.7%	Read	Initialized Data
.reloc	0x00024000	7,168 Bytes	5.0%	Read, Discardable	Initialized Data

Static Linking

wkssvc.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
RPCRT4.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
netutils.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-service-private-l1-1-0.dll
api-ms-win-security-lsalookup-l1-1-1.dll
api-ms-win-core-kernel32-private-l1-1-0.dll
api-ms-win-security-activedirectoryclient-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when wkssvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, wkssvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	16	2,106 Bytes	1.5%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	10,638 Bytes	7.4%
Total	20	12,744 Bytes	8.9%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID	String Text
100	Workstation
101	Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
102	Microsoft Windows Network
103	Allow your machine to go to sleep when files opened remotely have not been written to.
104	Allow sleep with remote opens
105	A file has been opened across the network. File name: [%1] Process ID: [%2]
1000	Redirected Buffering Sub System
1001	Provides the framework for network mini-redirectors
1002	SMB MiniRedirector Wrapper and Engine
1003	Implements the framework for the SMB filesystem redirector
1004	SMB 1.x MiniRedirector
1005	Implements the SMB 1.x (CIFS) protocol. This protocol provides connectivity to network resources on pre-Windows Vista servers
1006	SMB 2.0 MiniRedirector
1007	Implements the SMB 2.0 protocol, which provides connectivity to network resources on Windows Vista and later servers
1008	DFS Namespace Client Driver
1009	Client driver for access to DFS Namespaces

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _unlock

  _vsnwprintf

  _wcsicmp

  _wcsnicmp

  free

  malloc

  memcpy

  memcpy_s

  memmove_s

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  tolower

  wcscat_s

  wcschr

  wcscpy_s

  wcsncpy_s

  wcsspn

  wcsstr

  wcstoul

• ntdll.dll:
  

  DbgPrint	NtAccessCheckAndAuditAlarm	NtClose
  NtCreateEvent	NtDeviceIoControlFile	NtFsControlFile
  NtOpenFile	NtOpenProcessToken	NtOpenThreadToken
  NtQueryInformationToken	NtQueryVolumeInformationFile	RtlAcquireResourceExclusive
  RtlAcquireResourceShared	RtlAddAce	RtlAdjustPrivilege
  RtlAppendUnicodeStringToString	RtlCompareMemory	RtlCompareMemoryUlong
  RtlCompareUnicodeString	RtlCopyLuid	RtlCopySid
  RtlCreateAcl	RtlCreateSecurityDescriptor	RtlDeleteElementGenericTable
  RtlDeleteResource	RtlDeleteSecurityObject	RtlDeregisterWait
  RtlDeregisterWaitEx	RtlEnumerateGenericTable	RtlGetNtProductType
  RtlInitString	RtlInitUnicodeString	RtlInitializeGenericTable
  RtlInitializeResource	RtlInsertElementGenericTable	RtlIntegerToUnicodeString
  RtlIpv4AddressToStringExW	RtlIpv4AddressToStringW	RtlIpv4StringToAddressW
  RtlIpv6AddressToStringExW	RtlIpv6AddressToStringW	RtlIpv6StringToAddressW
  RtlLengthSid	RtlLookupElementGenericTable	RtlMapSecurityErrorToNtStatus
  RtlNewSecurityObject	RtlNtStatusToDosError	RtlQueryRegistryValuesEx
  RtlRegisterWait	RtlReleaseResource	RtlRunDecodeUnicodeString
  RtlRunEncodeUnicodeString	RtlSetDaclSecurityDescriptor	RtlSetGroupSecurityDescriptor
  RtlSetOwnerSecurityDescriptor	RtlSetSaclSecurityDescriptor	WinSqmIsOptedIn
  WinSqmSetDWORD

• RPCRT4.dll:
  

  I_RpcBindingIsClientLocal	I_RpcExceptionFilter	I_RpcMapWin32Status	NdrAsyncClientCall
  NdrAsyncServerCall	NdrClientCall2	NdrServerCall2	RpcAsyncAbortCall
  RpcAsyncCancelCall	RpcAsyncCompleteCall	RpcAsyncInitializeHandle	RpcBindingFree
  RpcBindingFromStringBindingW	RpcBindingServerFromClient	RpcBindingSetAuthInfoExW	RpcBindingToStringBindingW
  RpcBindingVectorFree	RpcEpRegisterW	RpcEpResolveBinding	RpcEpUnregister
  RpcImpersonateClient	RpcMgmtInqServerPrincNameW	RpcMgmtSetComTimeout	RpcRevertToSelf
  RpcServerInqBindings	RpcServerInqCallAttributesW	RpcServerRegisterIfEx	RpcServerTestCancel
  RpcServerUnregisterIf	RpcServerUnregisterIfEx	RpcServerUseProtseqEpW	RpcServerUseProtseqW
  RpcStringBindingComposeW	RpcStringBindingParseW	RpcStringFreeW	UuidCompare
  UuidToStringW

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!OpenEventW	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• netutils.dll:
  

  NetApiBufferAllocate	NetApiBufferFree	NetpwListCanonicalize	NetpwListTraverse
  NetpwNameCanonicalize	NetpwPathCanonicalize	NetpwPathType

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegNotifyChangeKeyValue	KernelBase!RegOpenKeyExW
  KernelBase!RegQueryInfoKeyW	KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateFileW

  KernelBase!DefineDosDeviceW

  KernelBase!QueryDosDeviceW

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount	KernelBase!GetVersion	KernelBase!GetVersionExW
  KernelBase!GlobalMemoryStatusEx	KernelBase!SetComputerNameExW

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!CreateThread	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!TerminateProcess

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!CheckTokenMembership

  KernelBase!CreateWellKnownSid

  KernelBase!RevertToSelf

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  kernel32!AddLocalAlternateComputerNameW

  kernel32!DnsHostnameToComputerNameW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpW

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc	kernel32!LocalFree	kernel32!LocalLock	kernel32!LocalReAlloc
  kernel32!LocalUnlock

• api-ms-win-service-private-l1-1-0.dll:
  

  sechost!I_ScSetServiceBitsW

• api-ms-win-security-lsalookup-l1-1-1.dll:
  

  sechost!LsaFreeMemory	sechost!LsaLookupClose	sechost!LsaLookupGetDomainInfo
  sechost!LsaLookupOpenLocalPolicy

• api-ms-win-core-kernel32-private-l1-1-0.dll:
  

  kernel32!DosPathToSessionPathW	kernel32!EnumerateLocalComputerNamesW
  kernel32!RemoveLocalAlternateComputerNameW	kernel32!SetLocalPrimaryComputerNameW

• api-ms-win-security-activedirectoryclient-l1-1-0.dll:
  

  KernelBase!DsBindWithSpnExW	KernelBase!DsCrackNamesW	KernelBase!DsFreeDomainControllerInfoW
  KernelBase!DsFreeNameResultW	KernelBase!DsFreePasswordCredentials	KernelBase!DsGetDomainControllerInfoW
  KernelBase!DsMakePasswordCredentialsW	KernelBase!DsUnBindW

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventUnregister

  ntdll!EtwEventWrite

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!CreateIoCompletionPort

  kernel32!GetQueuedCompletionStatus

  kernel32!PostQueuedCompletionStatus

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!TrySubmitThreadpoolCallback	ntdll!TpReleaseCleanupGroup
  ntdll!TpReleaseCleanupGroupMembers	ntdll!TpReleaseTimer	ntdll!TpSetTimer
  ntdll!TpWaitForTimer

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringA

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI