Windows 10 DLL File Information - lsm.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Local Session Manager Service
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	570 KB
Total Number of Exported Functions:	1
Total Number of Exported Functions With Names:	1

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	534,528 Bytes	91.5%	Read, Execute	Code
.data	0x00084000	1,024 Bytes	0.2%	Write, Read	Initialized Data
.idata	0x00089000	9,728 Bytes	1.7%	Read	Initialized Data
.didat	0x0008c000	512 Bytes	0.1%	Write, Read	Initialized Data
.rsrc	0x0008d000	11,264 Bytes	1.9%	Read	Initialized Data
.reloc	0x00090000	26,112 Bytes	4.5%	Read, Discardable	Initialized Data

Static Linking

lsm.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
RPCRT4.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-threadpool-private-l1-1-0.dll
api-ms-win-core-perfcounters-l1-1-0.dll
KERNELBASE.dll
SYSNTFY.dll
WMsgAPI.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-registry-l1-1-1.dll
api-ms-win-core-libraryloader-l1-2-1.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-registry-l2-2-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-path-l1-1-0.dll

This means that when lsm.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, lsm.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	15	976 Bytes	0.2%
Type Libraries	0	0 Bytes	0.0%
Manifest	1	678 Bytes	0.1%
All Others	4	16,870 Bytes	2.9%
Total	20	18,524 Bytes	3.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
1	Terminal Services
2	Terminal Services
3	Terminal Services Summary Information
5	Active Sessions
6	Active Sessions
7	Number of active Terminal Services sessions
9	Inactive Sessions
10	Inactive Sessions
11	Number of inactive Terminal Services sessions
13	Total Sessions
14	Total Sessions
15	Total number Terminal services sessions
16	LOCAL
1001	Local Session Manager
1002	Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException	_XcptFilter
  __dllonexit	_amsg_exit
  _callnewh	_except_handler4_common
  _initterm	_lock
  _onexit	_purecall
  _resetstkoflw	_unlock
  _vsnprintf	_vsnwprintf
  _wcsicmp	_wcsnicmp
  free	malloc
  memcmp	memcpy
  memset	public: virtual __thiscall type_info::~type_info(void)
  qsort	wcsrchr

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute
  DbgPrint	EtwEventActivityIdControl
  EtwEventRegister	EtwEventUnregister
  EtwEventWriteFull	EtwGetTraceEnableFlags
  EtwGetTraceEnableLevel	EtwGetTraceLoggerHandle
  EtwRegisterTraceGuidsW	EtwTraceMessage
  EtwUnregisterTraceGuids	NtAllocateVirtualMemory
  NtAlpcAcceptConnectPort	NtAlpcCreatePort
  NtAlpcDisconnectPort	NtAlpcQueryInformation
  NtAlpcSendWaitReceivePort	NtClose
  NtCreateDirectoryObject	NtCreateEvent
  NtDelayExecution	NtDuplicateObject
  NtDuplicateToken	NtFreeVirtualMemory
  NtGetNextProcess	NtNotifyChangeSession
  NtOpenEvent	NtOpenKey
  NtOpenSession	NtOpenSymbolicLinkObject
  NtQueryDirectoryObject	NtQueryInformationProcess
  NtQueryInformationToken	NtQuerySecurityObject
  NtQuerySystemInformation	NtQuerySystemTime
  NtQueryValueKey	NtSetSecurityObject
  NtSetSystemInformation	NtTerminateProcess
  NtWaitForSingleObject	RtlAcquireResourceExclusive
  RtlAcquireResourceShared	RtlAddAccessAllowedAce
  RtlAdjustPrivilege	RtlAllocateAndInitializeSid
  RtlCaptureStackBackTrace	RtlConnectToSm
  RtlConvertExclusiveToShared	RtlConvertSharedToExclusive
  RtlCopySecurityDescriptor	RtlCreateAcl
  RtlCreateSecurityDescriptor	RtlCreateUserSecurityObject
  RtlDeleteAce	RtlDeleteElementGenericTable
  RtlDeleteResource	RtlDeleteSecurityObject
  RtlEnterCriticalSection	RtlEnumerateGenericTable
  RtlEqualSid	RtlFreeSid
  RtlGetAce	RtlGetDaclSecurityDescriptor
  RtlInitUnicodeString	RtlInitializeGenericTable
  RtlInitializeResource	RtlInsertElementGenericTable
  RtlLeaveCriticalSection	RtlLengthSid
  RtlLookupElementGenericTable	RtlNtStatusToDosError
  RtlNumberGenericTableElements	RtlQueryInformationAcl
  RtlReleaseResource	RtlSendMsgToSm
  RtlSetDaclSecurityDescriptor	RtlSubscribeWnfStateChangeNotification
  RtlUnhandledExceptionFilter	RtlUnsubscribeWnfNotificationWaitForCompletion
  RtlVerifyVersionInfo	TpAllocAlpcCompletion
  TpReleaseAlpcCompletion	TpWaitForAlpcCompletion
  VerSetConditionMask

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!InitializeCriticalSectionAndSpinCount
  KernelBase!OpenEventW	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!SleepEx	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolWait	KernelBase!CreateThreadpoolWork	ntdll!TpPostWork
  ntdll!TpReleaseWait	ntdll!TpReleaseWork	ntdll!TpSetWait
  ntdll!TpWaitForWait	ntdll!TpWaitForWork

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  KernelBase!HeapSetInformation

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegEnumKeyExW
  KernelBase!RegGetValueW	KernelBase!RegNotifyChangeKeyValue	KernelBase!RegOpenCurrentUser
  KernelBase!RegOpenKeyExW	KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!CreateProcessW
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!GetProcessId	kernel32!OpenProcess	kernel32!ProcessIdToSessionId	kernel32!TerminateProcess
  kernel32!TlsAlloc	kernel32!TlsFree	kernel32!TlsGetValue	kernel32!TlsSetValue

• RPCRT4.dll:
  

  I_RpcBindingInqLocalClientPID	I_RpcBindingIsClientLocal	I_RpcMapWin32Status
  NdrAsyncServerCall	NdrServerCall2	RpcAsyncCompleteCall
  RpcBindingToStringBindingW	RpcImpersonateClient	RpcRaiseException
  RpcRevertToSelf	RpcServerInqCallAttributesW	RpcServerInqDefaultPrincNameW
  RpcServerRegisterAuthInfoW	RpcServerRegisterIf3	RpcServerRegisterIfEx
  RpcServerSubscribeForNotification	RpcServerTestCancel	RpcServerUnregisterIfEx
  RpcServerUnsubscribeForNotification	RpcServerUseProtseqEpW	RpcStringBindingParseW
  RpcStringFreeW	UuidCreate	UuidToStringW

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetOsSafeBootMode	KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTime
  KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount	KernelBase!GetTickCount64
  KernelBase!GetVersionExW	KernelBase!GetWindowsDirectoryW

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoCreateGuid	combase!CoCreateInstance	combase!CoInitializeEx	combase!CoInitializeSecurity
  combase!CoTaskMemAlloc	combase!CoTaskMemFree	combase!CoUninitialize	combase!StringFromCLSID

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW	KernelBase!LoadStringW

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-kernel32-legacy-l1-1-1.dll:
  

  kernel32!GetComputerNameW

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!CreateTimerQueue	KernelBase!CreateTimerQueueTimer	KernelBase!DeleteTimerQueueEx
  KernelBase!DeleteTimerQueueTimer	KernelBase!QueueUserWorkItem	KernelBase!UnregisterWaitEx

• api-ms-win-core-threadpool-private-l1-1-0.dll:
  

  KernelBase!RegisterWaitForSingleObjectEx

• api-ms-win-core-perfcounters-l1-1-0.dll:
  

  KernelBase!PerfCreateInstance	KernelBase!PerfSetCounterRefValue	KernelBase!PerfSetCounterSetInfo
  KernelBase!PerfStartProvider	KernelBase!PerfStopProvider

• KERNELBASE.dll:
  

  WTSGetServiceSessionId

• SYSNTFY.dll:
  

  SysNotifyStartServer

  SysNotifyStopServer

• WMsgAPI.dll:
  

  WmsgSendMessage

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!DebugBreak

  KernelBase!IsDebuggerPresent

  KernelBase!OutputDebugStringA

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!ControlTraceW

  sechost!EnableTraceEx2

  sechost!StartTraceW

• api-ms-win-core-registry-l1-1-1.dll:
  

  KernelBase!RegDeleteKeyValueW

  KernelBase!RegSetKeyValueW

• api-ms-win-core-libraryloader-l1-2-1.dll:
  

  KernelBase!LoadLibraryW

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateFileW

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-registry-l2-2-0.dll:
  

  advapi32!RegDeleteKeyW

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalSize

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-path-l1-1-0.dll:
  

  KernelBase!PathCchAppend