Windows 10 DLL File Information - usermgr.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	UserMgr
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	536 KB
Total Number of Exported Functions:	1
Total Number of Exported Functions With Names:	1

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	504,320 Bytes	91.9%	Read, Execute	Code
.data	0x0007d000	1,024 Bytes	0.2%	Write, Read	Initialized Data
.idata	0x0007e000	10,752 Bytes	2.0%	Read	Initialized Data
.didat	0x00081000	512 Bytes	0.1%	Write, Read	Initialized Data
.rsrc	0x00082000	1,536 Bytes	0.3%	Read	Initialized Data
.reloc	0x00083000	29,696 Bytes	5.4%	Read, Discardable	Initialized Data

Static Linking

usermgr.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-winrt-error-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-heap-l1-2-0.dll
USERENV.dll
api-ms-win-core-registry-l1-1-0.dll
RPCRT4.dll
SspiCli.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-file-l2-1-1.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-security-lsalookup-l2-1-1.dll
samcli.dll
netutils.dll
api-ms-win-core-registry-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-registry-l2-2-0.dll
api-ms-win-service-private-l1-1-1.dll
profapi.dll
api-ms-win-security-base-private-l1-1-1.dll
ntdll.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-apiquery-l1-1-0.dll

This means that when usermgr.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, usermgr.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	366 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	2	1,088 Bytes	0.2%
Total	4	1,454 Bytes	0.3%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
100	User Manager
101	User Manager provides the runtime components required for multi-user interaction. If this service is stopped, some applications may not operate correctly.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _ui64tow_s

  _unlock

  _vsnwprintf

  _wcsicmp

  _wcsnicmp

  _wtoi

  _wtol

  free

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove

  memmove_s

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(char const * const &,int)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  realloc

  void __cdecl operator delete(void *)

  void __cdecl operator delete[](void *)

  void __cdecl terminate(void)

  wcsstr

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoAddRefServerProcess	combase!CoCreateFreeThreadedMarshaler	combase!CoCreateInstance
  combase!CoDisconnectContext	combase!CoGetApartmentType	combase!CoGetStandardMarshal
  combase!CoImpersonateClient	combase!CoMarshalInterface	combase!CoRegisterClassObject
  combase!CoReleaseMarshalData	combase!CoReleaseServerProcess	combase!CoResumeClassObjects
  combase!CoRevertToSelf	combase!CoRevokeClassObject	combase!CoSetProxyBlanket
  combase!CoTaskMemAlloc	combase!CoTaskMemFree	combase!CreateStreamOnHGlobal
  combase!PropVariantClear	combase!RoGetAgileReference	combase!StringFromCLSID

• api-ms-win-core-winrt-string-l1-1-0.dll:
  

  combase!WindowsCompareStringOrdinal	combase!WindowsConcatString	combase!WindowsCreateString
  combase!WindowsCreateStringReference	combase!WindowsDeleteString	combase!WindowsDuplicateString
  combase!WindowsGetStringLen	combase!WindowsGetStringRawBuffer	combase!WindowsIsStringEmpty
  combase!WindowsStringHasEmbeddedNull

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleFileNameA	KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW
  KernelBase!GetProcAddress	KernelBase!LoadLibraryExW

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW	KernelBase!InitOnceExecuteOnce
  KernelBase!InitializeCriticalSectionEx	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForSingleObject	ntdll!RtlAcquireSRWLockExclusive	ntdll!RtlAcquireSRWLockShared
  ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeConditionVariable
  ntdll!RtlLeaveCriticalSection	ntdll!RtlReleaseSRWLockExclusive	ntdll!RtlReleaseSRWLockShared

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-winrt-l1-1-0.dll:
  

  combase!RoActivateInstance	combase!RoGetActivationFactory	combase!RoInitialize
  combase!RoRegisterActivationFactories	combase!RoRevokeActivationFactories	combase!RoUninitialize

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister	ntdll!EtwEventSetInformation	ntdll!EtwEventUnregister	ntdll!EtwEventWrite
  ntdll!EtwEventWriteTransfer

• api-ms-win-core-winrt-error-l1-1-1.dll:
  

  combase!GetRestrictedErrorInfo	combase!IsErrorPropagationEnabled
  combase!RoGetMatchingRestrictedErrorInfo	combase!RoOriginateError
  combase!RoOriginateErrorW	combase!RoReportFailedDelegate
  combase!RoTransformError	combase!SetRestrictedErrorInfo

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheck	KernelBase!AccessCheckByType	KernelBase!AdjustTokenPrivileges
  KernelBase!AllocateLocallyUniqueId	KernelBase!CheckTokenCapability	KernelBase!CheckTokenMembershipEx
  KernelBase!CopySid	KernelBase!CreateRestrictedToken	KernelBase!CreateWellKnownSid
  KernelBase!DuplicateToken	KernelBase!DuplicateTokenEx	KernelBase!GetLengthSid
  KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser	KernelBase!IsValidSid
  KernelBase!PrivilegeCheck	KernelBase!RevertToSelf	KernelBase!SetTokenInformation

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

  sechost!ConvertStringSidToSidW

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!CreateProcessAsUserW	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!OpenProcess
  kernel32!ProcessIdToSessionId	kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetComputerNameExW

  KernelBase!GetSystemTimeAsFileTime

  KernelBase!GetTickCount

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• USERENV.dll:
  

  CreateProfile	DeleteProfileW	GetDefaultUserProfileDirectoryW
  GetUserProfileDirectoryW	LoadUserProfileW	UnloadUserProfile

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegEnumKeyExW	KernelBase!RegEnumValueW
  KernelBase!RegFlushKey	KernelBase!RegGetValueW	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW
  KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• RPCRT4.dll:
  

  I_RpcExceptionFilter	I_RpcMapWin32Status	NdrClientCall4	NdrServerCall2
  RpcBindingBind	RpcBindingCreateW	RpcBindingFree	RpcBindingFromStringBindingW
  RpcBindingVectorFree	RpcEpRegisterW	RpcEpUnregister	RpcImpersonateClient
  RpcRevertToSelf	RpcServerInqBindings	RpcServerInqCallAttributesW	RpcServerRegisterIf3
  RpcServerUnregisterIf	RpcServerUseProtseqW	RpcStringBindingComposeW	RpcStringFreeW

• SspiCli.dll:
  

  LogonUserExExW	LsaCallAuthenticationPackage	LsaConnectUntrusted
  LsaDeregisterLogonProcess	LsaFreeReturnBuffer	LsaLogonUser
  LsaLookupAuthenticationPackage	LsaRegisterLogonProcess	SeciAllocateAndSetCallFlags
  SeciAllocateAndSetIPAddress	SeciFreeCallContext

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!ControlTraceW

  sechost!EnableTraceEx2

  sechost!StartTraceW

• api-ms-win-core-file-l2-1-1.dll:
  

  KernelBase!MoveFileExW

• api-ms-win-core-localization-l1-2-1.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringW

• api-ms-win-security-lsalookup-l2-1-1.dll:
  

  advapi32!LookupAccountNameW

• samcli.dll:
  

  NetLocalGroupAddMembers	NetLocalGroupDelMembers	NetUserAdd	NetUserChangePassword
  NetUserDel	NetUserEnum	NetUserGetGroups	NetUserGetInfo
  NetUserGetLocalGroups	NetUserModalsGet	NetUserModalsSet	NetUserSetGroups
  NetUserSetInfo

• netutils.dll:
  

  NetApiBufferAllocate

  NetApiBufferFree

  NetApiBufferReallocate

• api-ms-win-core-registry-l1-1-1.dll:
  

  KernelBase!RegDeleteKeyValueW

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!QueueUserWorkItem

• api-ms-win-core-registry-l2-2-0.dll:
  

  advapi32!RegDeleteKeyW

• api-ms-win-service-private-l1-1-1.dll:
  

  sechost!I_ScBroadcastServiceControlMessage

• profapi.dll:
  

• api-ms-win-security-base-private-l1-1-1.dll:
  

  KernelBase!CreateAppContainerToken

• ntdll.dll:
  

  EtwTraceMessage	NtAllocateLocallyUniqueId	NtClose
  NtCompareTokens	NtCreateDirectoryObjectEx	NtCreateFile
  NtCreateSymbolicLinkObject	NtOpenDirectoryObject	NtQueryInformationToken
  NtQuerySecurityObject	NtQuerySystemInformation	NtSetInformationProcess
  NtSetInformationToken	RtlAddAccessAllowedAce	RtlAddAccessAllowedAceEx
  RtlAddAce	RtlAdjustPrivilege	RtlAllocateAndInitializeSid
  RtlAllocateHeap	RtlCapabilityCheck	RtlConvertSidToUnicodeString
  RtlCopySid	RtlCreateAcl	RtlCreateSecurityDescriptor
  RtlDeriveCapabilitySidsFromName	RtlEqualSid	RtlFreeHeap
  RtlFreeSid	RtlGetAce	RtlGetDaclSecurityDescriptor
  RtlGetDeviceFamilyInfoEnum	RtlInitString	RtlInitUnicodeString
  RtlIsCapabilitySid	RtlIsMultiSessionSku	RtlLengthSid
  RtlNtStatusToDosError	RtlPublishWnfStateData	RtlQueryInformationAcl
  RtlQueryRegistryValuesEx	RtlRunOnceExecuteOnce	RtlSetDaclSecurityDescriptor
  RtlValidSid

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence