Windows 8 DLL File Information - livessp.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Live Security Package
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	236 KB
Total Number of Exported Functions:	4
Total Number of Exported Functions With Names:	4

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	221,184 Bytes	91.3%	Read, Execute	Code
.data	0x00037000	2,560 Bytes	1.1%	Write, Read	Initialized Data
.idata	0x00039000	5,632 Bytes	2.3%	Read	Initialized Data
.rsrc	0x0003b000	1,024 Bytes	0.4%	Read	Initialized Data
.reloc	0x0003c000	10,752 Bytes	4.4%	Read, Discardable	Initialized Data

Static Linking

livessp.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
RPCRT4.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-security-lsalookup-l2-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-registry-l2-1-0.dll
api-ms-win-eventing-legacy-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
ntdll.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-winsvc-l1-2-0.dll

This means that when livessp.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, livessp.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	1	912 Bytes	0.4%
Total	1	912 Bytes	0.4%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

DllRegisterServer

DllUnregisterServer

SpLsaModeInitialize

SpUserModeInitialize

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	__CxxFrameHandler
  __dllonexit	_amsg_exit
  _difftime64	_except_handler4_common
  _initterm	_lock
  _onexit	_purecall
  _time64	_unlock
  free	malloc
  memcmp	memcpy
  memset	public: virtual __thiscall type_info::~type_info(void)
  void __cdecl operator delete(void *)

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObjectEx	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!GetProcessIdOfThread	kernel32!OpenThread
  kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetTickCount64	KernelBase!GetVersionExW

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError

  KernelBase!SetUnhandledExceptionFilter

  KernelBase!UnhandledExceptionFilter

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteTreeW	KernelBase!RegEnumKeyExW
  KernelBase!RegGetValueW	KernelBase!RegOpenCurrentUser	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW
  KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• RPCRT4.dll:
  

  I_RpcBindingInqLocalClientPID	MesBufferHandleReset	MesDecodeBufferHandleCreate
  MesEncodeFixedBufferHandleCreate	MesHandleFree	NdrAsyncClientCall
  NdrMesTypeAlignSize2	NdrMesTypeDecode2	NdrMesTypeEncode2
  NdrMesTypeFree2	RpcAsyncCancelCall	RpcAsyncCompleteCall
  RpcAsyncInitializeHandle	RpcBindingFree	RpcBindingFromStringBindingW
  RpcBindingSetAuthInfoExW	RpcSsDestroyClientContext	RpcStringBindingComposeW
  RpcStringFreeW	UuidCreate

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!FreeLibrary

  KernelBase!GetModuleFileNameW

  KernelBase!GetProcAddress

• api-ms-win-core-localization-l1-2-0.dll:
  

  KernelBase!GetThreadPreferredUILanguages

  KernelBase!GetUserDefaultLocaleName

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AllocateLocallyUniqueId	KernelBase!CopySid	KernelBase!CreateWellKnownSid
  KernelBase!GetLengthSid	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!IsValidSid	KernelBase!RevertToSelf

• api-ms-win-security-lsalookup-l2-1-0.dll:
  

  advapi32!LookupAccountNameW

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CompareFileTime	KernelBase!CreateDirectoryW	KernelBase!DeleteFileW	KernelBase!FindClose
  KernelBase!FindFirstFileW	KernelBase!FindNextFileW

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  KernelBase!ControlTraceW

  KernelBase!StartTraceW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!DebugBreak

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventUnregister

  ntdll!EtwEventWrite

• api-ms-win-core-registry-l2-1-0.dll:
  

  advapi32!RegDeleteKeyValueW

  advapi32!RegEnumKeyW

  advapi32!RegSetKeyValueW

• api-ms-win-eventing-legacy-l1-1-0.dll:
  

  advapi32!EnableTrace

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  kernel32!GetComputerNameW

  kernel32!LoadLibraryW

  kernel32!RaiseFailFastException

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc

  kernel32!LocalFree

• ntdll.dll:
  

  WinSqmAddToStreamEx	WinSqmIsOptedIn	_vsnwprintf	_wcsicmp
  _wtoi64	memcpy_s	tolower	toupper
  wcscpy_s	wcsrchr	wcsstr

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

• api-ms-win-service-winsvc-l1-2-0.dll:
  

  sechost!QueryServiceStatus