Windows 8 DLL File Information - lsm.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Local Session Manager Service
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	341 KB
Total Number of Exported Functions:	1
Total Number of Exported Functions With Names:	1

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	300,544 Bytes	85.9%	Read, Execute	Code
.data	0x0004b000	13,824 Bytes	4.0%	Write, Read	Initialized Data
.idata	0x00050000	11,264 Bytes	3.2%	Read	Initialized Data
.rsrc	0x00053000	6,656 Bytes	1.9%	Read	Initialized Data
.reloc	0x00055000	16,384 Bytes	4.7%	Read, Discardable	Initialized Data

Static Linking

lsm.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-security-sddl-l1-1-0.dll
RPCRT4.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-service-winsvc-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-service-private-l1-1-0.dll
api-ms-win-core-threadpool-private-l1-1-0.dll
api-ms-win-security-audit-l1-1-0.dll
KERNEL32.dll
SYSNTFY.dll
WMsgAPI.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-security-lsalookup-l1-1-1.dll
api-ms-win-security-lsapolicy-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when lsm.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, lsm.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	15	976 Bytes	0.3%
Type Libraries	0	0 Bytes	0.0%
Manifest	1	678 Bytes	0.2%
All Others	4	8,642 Bytes	2.5%
Total	20	10,296 Bytes	2.9%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID	String Text
1	Terminal Services
2	Terminal Services
3	Terminal Services Summary Information
5	Active Sessions
6	Active Sessions
7	Number of active Terminal Services sessions
9	Inactive Sessions
10	Inactive Sessions
11	Number of inactive Terminal Services sessions
13	Total Sessions
14	Total Sessions
15	Total number Terminal services sessions
16	LOCAL
1001	Local Session Manager
1002	Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException	_XcptFilter
  __dllonexit	_amsg_exit
  _except_handler4_common	_initterm
  _lock	_onexit
  _purecall	_resetstkoflw
  _unlock	_vsnprintf
  _vsnwprintf	_wcsicmp
  free	malloc
  memcmp	memcpy
  memset	public: virtual __thiscall type_info::~type_info(void)
  qsort	strchr
  void * __cdecl operator new(unsigned int)	void __cdecl operator delete(void *)
  wcsrchr

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute
  DbgPrint	DbgPrintEx
  DbgPrompt	EtwEventRegister
  EtwEventUnregister	EtwEventWrite
  EtwGetTraceEnableFlags	EtwGetTraceEnableLevel
  EtwGetTraceLoggerHandle	EtwRegisterTraceGuidsW
  EtwTraceMessage	EtwUnregisterTraceGuids
  NtAllocateVirtualMemory	NtAlpcAcceptConnectPort
  NtAlpcCreatePort	NtAlpcDisconnectPort
  NtAlpcQueryInformation	NtAlpcSendWaitReceivePort
  NtClose	NtCreateDirectoryObject
  NtCreateEvent	NtDelayExecution
  NtDuplicateObject	NtDuplicateToken
  NtFreeVirtualMemory	NtGetNextProcess
  NtNotifyChangeSession	NtOpenEvent
  NtOpenKey	NtOpenProcess
  NtOpenSession	NtOpenSymbolicLinkObject
  NtQueryDirectoryObject	NtQueryInformationProcess
  NtQueryInformationToken	NtQueryLicenseValue
  NtQuerySecurityObject	NtQuerySystemInformation
  NtQuerySystemTime	NtQueryValueKey
  NtSetSecurityObject	NtSetSystemInformation
  NtTerminateProcess	NtWaitForSingleObject
  RtlAcquireResourceExclusive	RtlAcquireResourceShared
  RtlAddAccessAllowedAce	RtlAdjustPrivilege
  RtlAllocateAndInitializeSid	RtlAreBitsSet
  RtlCaptureStackBackTrace	RtlClearBits
  RtlConnectToSm	RtlConvertExclusiveToShared
  RtlConvertSharedToExclusive	RtlCopySecurityDescriptor
  RtlCreateAcl	RtlCreateSecurityDescriptor
  RtlCreateUserSecurityObject	RtlDeleteAce
  RtlDeleteElementGenericTable	RtlDeleteResource
  RtlDeleteSecurityObject	RtlEnterCriticalSection
  RtlEnumerateGenericTable	RtlEqualSid
  RtlFreeSid	RtlGetAce
  RtlGetDaclSecurityDescriptor	RtlInitUnicodeString
  RtlInitializeBitMap	RtlInitializeGenericTable
  RtlInitializeResource	RtlInsertElementGenericTable
  RtlLeaveCriticalSection	RtlLengthSid
  RtlLookupElementGenericTable	RtlNtStatusToDosError
  RtlNumberGenericTableElements	RtlQueryInformationAcl
  RtlReleaseResource	RtlSendMsgToSm
  RtlSetBits	RtlSetDaclSecurityDescriptor
  RtlSubscribeWnfStateChangeNotification	RtlUnhandledExceptionFilter
  RtlUnsubscribeWnfNotificationWaitForCompletion	RtlVerifyVersionInfo
  TpAllocAlpcCompletion	TpReleaseAlpcCompletion
  TpWaitForAlpcCompletion	VerSetConditionMask

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!CreateMutexW
  KernelBase!InitializeCriticalSectionAndSpinCount	KernelBase!OpenEventW
  KernelBase!ReleaseMutex	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!SleepEx	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolWait	KernelBase!CreateThreadpoolWork	ntdll!TpPostWork
  ntdll!TpReleaseWait	ntdll!TpReleaseWork	ntdll!TpSetWait
  ntdll!TpWaitForWait	ntdll!TpWaitForWork

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  KernelBase!HeapSetInformation

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegEnumKeyExW
  KernelBase!RegGetValueW	KernelBase!RegNotifyChangeKeyValue	KernelBase!RegOpenCurrentUser
  KernelBase!RegOpenKeyExW	KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!CreateProcessW
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!GetProcessId	kernel32!OpenProcess	kernel32!ProcessIdToSessionId	kernel32!TerminateProcess
  kernel32!TerminateThread

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheckAndAuditAlarmW	KernelBase!AddAce	KernelBase!AllocateAndInitializeSid
  KernelBase!CheckTokenMembership	KernelBase!CopySid	KernelBase!CreateWellKnownSid
  KernelBase!DuplicateToken	KernelBase!DuplicateTokenEx	KernelBase!EqualSid
  KernelBase!FreeSid	KernelBase!GetAce	KernelBase!GetAclInformation
  KernelBase!GetLengthSid	KernelBase!GetSecurityDescriptorControl	KernelBase!GetSecurityDescriptorDacl
  KernelBase!GetSecurityDescriptorLength	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!InitializeAcl	KernelBase!InitializeSecurityDescriptor	KernelBase!IsValidSecurityDescriptor
  KernelBase!IsValidSid	KernelBase!MakeAbsoluteSD	KernelBase!MakeSelfRelativeSD
  KernelBase!RevertToSelf	KernelBase!SetSecurityDescriptorDacl	KernelBase!SetSecurityDescriptorGroup
  KernelBase!SetSecurityDescriptorOwner

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

• RPCRT4.dll:
  

  I_RpcBindingInqLocalClientPID	I_RpcBindingIsClientLocal	I_RpcMapWin32Status
  NdrAsyncServerCall	NdrServerCall2	RpcAsyncCompleteCall
  RpcBindingToStringBindingW	RpcImpersonateClient	RpcRevertToSelf
  RpcServerInqCallAttributesW	RpcServerInqDefaultPrincNameW	RpcServerRegisterAuthInfoW
  RpcServerRegisterIf3	RpcServerRegisterIfEx	RpcServerSubscribeForNotification
  RpcServerTestCancel	RpcServerUnregisterIfEx	RpcServerUnsubscribeForNotification
  RpcServerUseProtseqEpW	RpcStringBindingParseW	RpcStringFreeW
  UuidCreate	UuidToStringW

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

  sechost!StartServiceW

• api-ms-win-service-management-l2-1-0.dll:
  

  sechost!NotifyServiceStatusChange

  sechost!QueryServiceConfigW

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetOsSafeBootMode	KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount	KernelBase!GetTickCount64	KernelBase!GetVersionExW

• api-ms-win-core-com-l1-1-0.dll:
  

  combase!CoInitializeEx	combase!CoInitializeSecurity	combase!CoTaskMemAlloc	combase!CoTaskMemFree
  combase!CoUninitialize	combase!StringFromCLSID

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW	KernelBase!LoadStringW

• api-ms-win-service-winsvc-l1-2-0.dll:
  

  sechost!QueryServiceStatus

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc

  kernel32!LocalFree

  kernel32!LocalSize

• api-ms-win-service-private-l1-1-0.dll:
  

  sechost!I_ScBroadcastServiceControlMessage

• api-ms-win-core-threadpool-private-l1-1-0.dll:
  

  KernelBase!RegisterWaitForSingleObjectEx

• api-ms-win-security-audit-l1-1-0.dll:
  

  sechost!AuditFree

  sechost!AuditQuerySystemPolicy

• KERNEL32.dll:
  

  GetComputerNameW

  LoadLibraryW

  QueueUserWorkItem

  UnregisterWaitEx

• SYSNTFY.dll:
  

  SysNotifyStartServer

  SysNotifyStopServer

• WMsgAPI.dll:
  

  WmsgSendMessage

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!DebugBreak

  KernelBase!IsDebuggerPresent

  KernelBase!OutputDebugStringA

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  KernelBase!ControlTraceW

  KernelBase!EnableTraceEx2

  KernelBase!StartTraceW

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventUnregister

  ntdll!EtwEventWrite

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateFileW

• api-ms-win-security-lsalookup-l1-1-1.dll:
  

  sechost!LookupAccountSidLocalW

• api-ms-win-security-lsapolicy-l1-1-0.dll:
  

  sechost!LsaFreeMemory

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI