Windows 8 DLL File Information - winsrv.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Multi-User Windows Server DLL
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	145 KB
Total Number of Exported Functions:	1
Total Number of Exported Functions With Names:	1

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	65,024 Bytes	43.6%	Read, Execute	Code
.data	0x00011000	18,432 Bytes	12.4%	Write, Read	Initialized Data
.idata	0x00016000	9,728 Bytes	6.5%	Read	Initialized Data
.rsrc	0x00019000	50,688 Bytes	34.0%	Read	Initialized Data
.reloc	0x00026000	4,096 Bytes	2.7%	Read, Discardable	Initialized Data

Static Linking

winsrv.dll is statically linked to the following files:

USER32.dll
ntdll.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-timezone-private-l1-1-0.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
BASESRV.dll
GDI32.dll
CSRSRV.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when winsrv.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, winsrv.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	1	31,000 Bytes	20.8%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	1	192 Bytes	0.1%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	1	656 Bytes	0.4%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	7	20,527 Bytes	13.8%
Total	10	52,375 Bytes	35.2%

Icons in this file

There are 1 icons stored in this DLL file. You can view all these icons in the following small thumbnail:

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

In the following section, you can find the captions of dialog-boxes stored in this DLL. The list is currently limited to 200 dialogs.

ID	Dialog Caption
10	End Program -

String resources in this dll (up to 200 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

UserServerDllInitialization

Imported Functions List

The following functions are imported by this dll:

• USER32.dll:
  

  BeginPaint	BroadcastSystemMessageW	CallMsgFilterW
  CheckWindowThreadDesktop	CreateDialogParamW	CtxInitUser32
  DestroyCursor	DestroyWindow	DispatchMessageW
  DrawEdge	DrawIcon	EndPaint
  EnumThreadWindows	EnumWindows	FillRect
  GetClassLongW	GetClassNameW	GetClientRect
  GetDC	GetDlgItem	GetGUIThreadInfo
  GetProcessUIContextInformation	GetReasonTitleFromReasonCode	GetSysColor
  GetSystemMetrics	GetTaskmanWindow	GetThreadDesktop
  GetUserObjectInformationW	GetWindow	GetWindowLongW
  GetWindowRect	GetWindowTextLengthW	GetWindowTextW
  GetWindowThreadProcessId	GhostWindowFromHungWindow	HungWindowFromGhostWindow
  InflateRect	InternalGetWindowIcon	InvalidateRect
  IsDialogMessageW	IsHungAppWindow	IsInDesktopWindowBand
  IsWindow	IsWindowEnabled	IsWindowVisible
  KillTimer	LoadBitmapW	LoadIconW
  MB_GetString	MapWindowPoints	MessageBoxTimeoutW
  MsgWaitForMultipleObjects	OffsetRect	PeekMessageW
  PostMessageW	PostThreadMessageW	RecordShutdownReason
  RegisterClipboardFormatW	RegisterErrorReportingDialog	ReleaseDC
  SendInput	SendMessageCallbackW	SendMessageTimeoutW
  SendMessageW	SendNotifyMessageW	SetDlgItemTextW
  SetFocus	SetForegroundWindow	SetTimer
  SetWindowLongW	SetWindowPos	SetWindowTextW
  ShutdownBlockReasonQuery	SoftModalMessageBox	SystemParametersInfoW
  TranslateMessage

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute
  DbgUiIssueRemoteBreakin	EtwEventEnabled
  EtwEventRegister	EtwEventUnregister
  EtwEventWrite	EtwEventWriteNoRegistration
  EvtIntReportEventAndSourceAsync	LdrFlushAlternateResourceModules
  NtAlertThread	NtAlpcAcceptConnectPort
  NtAlpcCancelMessage	NtAlpcConnectPort
  NtAlpcCreatePort	NtAlpcOpenSenderProcess
  NtAlpcSendWaitReceivePort	NtClearEvent
  NtClose	NtCreateEvent
  NtCreateKey	NtDeleteValueKey
  NtDeviceIoControlFile	NtDuplicateObject
  NtDuplicateToken	NtEnumerateValueKey
  NtNotifyChangeKey	NtOpenEvent
  NtOpenKey	NtOpenProcess
  NtOpenProcessToken	NtOpenSymbolicLinkObject
  NtOpenThread	NtOpenThreadToken
  NtQueryInformationProcess	NtQueryInformationToken
  NtQuerySymbolicLinkObject	NtQuerySystemInformation
  NtQueryValueKey	NtReadVirtualMemory
  NtResetEvent	NtResumeThread
  NtSetEvent	NtSetInformationThread
  NtSetSystemInformation	NtTerminateProcess
  NtWaitForMultipleObjects	NtWaitForSingleObject
  RtlAddAccessAllowedAce	RtlAllocateAndInitializeSid
  RtlAllocateHeap	RtlAnsiStringToUnicodeString
  RtlCheckTokenMembership	RtlCopySid
  RtlCreateAcl	RtlCreateSecurityDescriptor
  RtlCreateUnicodeString	RtlCreateUserThread
  RtlDeleteCriticalSection	RtlEnterCriticalSection
  RtlEqualUnicodeString	RtlExitUserThread
  RtlFillMemoryUlong	RtlFindMessage
  RtlFreeAnsiString	RtlFreeAnsiString
  RtlFreeHeap	RtlFreeSid
  RtlInitUnicodeString	RtlInitializeCriticalSection
  RtlLeaveCriticalSection	RtlLengthSid
  RtlNtStatusToDosError	RtlOpenCurrentUser
  RtlRegisterThreadWithCsrss	RtlSetDaclSecurityDescriptor
  RtlSizeHeap	RtlSubscribeWnfStateChangeNotification
  RtlUnicodeStringToAnsiString	RtlUnicodeStringToInteger
  RtlUnsubscribeWnfStateChangeNotification	RtlUpcaseUnicodeChar
  RtlValidateHeap	RtlVerifyVersionInfo
  VerSetConditionMask	WinSqmAddToStream
  WinSqmIncrementDWORD	_itow_s
  _strnicmp	_vsnwprintf
  _wsplitpath_s	_wtoi
  memcmp	memcpy
  memmove	memset
  qsort	strstr
  wcsncmp	wcsrchr

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!DisableThreadLibraryCalls

  KernelBase!GetModuleHandleW

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!GetExitCodeProcess	kernel32!GetExitCodeThread	kernel32!GetThreadId	kernel32!OpenProcess
  kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetSystemWindowsDirectoryW
  KernelBase!GetTickCount

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateFileW	KernelBase!GetFileAttributesExW
  KernelBase!GetFileAttributesW	KernelBase!GetFileInformationByHandle
  KernelBase!GetFileSizeEx	KernelBase!GetLogicalDrives
  KernelBase!GetVolumeInformationW	KernelBase!GetVolumeNameForVolumeMountPointW
  KernelBase!GetVolumePathNameW	KernelBase!ReadFile

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement	ntdll!RtlInterlockedCompareExchange64

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!CreateMutexW	KernelBase!OpenMutexW
  KernelBase!ReleaseMutex	KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!CheckTokenMembership

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventUnregister

  ntdll!EtwEventWrite

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!IsDebuggerPresent

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!GetOverlappedResult

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegGetValueW	KernelBase!RegLoadAppKeyW
  KernelBase!RegOpenKeyExW

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  kernel32!GetComputerNameW

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc

  kernel32!LocalFree

  kernel32!LocalReAlloc

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpiW

  kernel32!lstrlenW

• api-ms-win-core-timezone-private-l1-1-0.dll:
  

  KernelBase!SetClientDynamicTimeZoneInformation

  KernelBase!SetClientTimeZoneInformation

• api-ms-win-core-windowserrorreporting-l1-1-0.dll:
  

  KernelBase!GetApplicationRestartSettings

• BASESRV.dll:
  

  BaseGetProcessCrtlRoutine

  BaseSetProcessCreateNotify

  BaseSrvNlsLogon

  BaseSrvNlsUpdateRegistryCache

• GDI32.dll:
  

  CreateCompatibleDC	CreateSolidBrush	DeleteDC	DeleteObject
  GdiAddFontResourceW	GdiTransparentBlt	GetLayout	GetObjectW
  SelectObject	SetLayout

• CSRSRV.dll:
  

  CsrAddStaticServerThread	CsrConnectToUser	CsrDereferenceProcess	CsrDereferenceThread
  CsrExecServerThread	CsrGetProcessLuid	CsrImpersonateClient	CsrLockProcessByClientId
  CsrLockThreadByClientId	CsrLockedReferenceProcess	CsrQueryApiPort	CsrReferenceThread
  CsrReplyToMessage	CsrRevertToSelf	CsrShutdownProcesses	CsrUnlockProcess
  CsrUnlockThread	CsrValidateMessageBuffer

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI