LxssManager.dll

v10.0.19041.6456 64-bit Windows NT Analyzed
Description
LXSS management service
Authors
© Microsoft Corporation. All rights reserved.
File size
938.0 KB
Uploaded
2025-12-01 07:50
Views
109
SHA-256
f3e94cc1b3ed80edc7f25d0a3dc00e35

Exported functions 5

ServiceMain #1 · 0xb8c0
DllCanUnloadNow #2 · 0x8d60
DllGetClassObject #3 · 0x8cf0
InprocRegister #4 · 0x8dc0
InprocUnregister #5 · 0x9040

Imported DLLs & functions 385

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800afba8
api-ms-win-core-com-l1-1-0.dll 15
CLSIDFromString 0x1800afbb8
CoAddRefServerProcess 0x1800afbd8
CoCreateGuid 0x1800afc18
CoCreateInstance 0x1800afc28
CoDecrementMTAUsage 0x1800afbd0
CoDisconnectContext 0x1800afc00
CoGetCallContext 0x1800afbc0
CoGetObjectContext 0x1800afbf0
CoInitializeSecurity 0x1800afc20
CoRegisterClassObject 0x1800afbe8
CoReleaseServerProcess 0x1800afbe0
CoResumeClassObjects 0x1800afc08
CoRevokeClassObject 0x1800afbf8
CoTaskMemAlloc 0x1800afbc8
CoTaskMemFree 0x1800afc10
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800afc38
IsDebuggerPresent 0x1800afc48
OutputDebugStringW 0x1800afc40
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800afc70
RaiseException 0x1800afc58
SetLastError 0x1800afc78
SetUnhandledExceptionFilter 0x1800afc68
UnhandledExceptionFilter 0x1800afc60
api-ms-win-core-file-l1-1-0.dll 11
CreateDirectoryW 0x1800afca8
CreateFileW 0x1800afc98
DeleteFileW 0x1800afcb0
FindClose 0x1800afcd8
FindFirstFileW 0x1800afcd0
FindNextFileW 0x1800afcc0
GetFileAttributesW 0x1800afc88
GetFullPathNameW 0x1800afcc8
ReadFile 0x1800afca0
RemoveDirectoryW 0x1800afcb8
WriteFile 0x1800afc90
api-ms-win-core-file-l2-1-0.dll 1
GetFileInformationByHandleEx 0x1800afce8
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x1800afcf8
api-ms-win-core-handle-l1-1-0.dll 3
CloseHandle 0x1800afd10
DuplicateHandle 0x1800afd08
SetHandleInformation 0x1800afd18
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800afd38
HeapAlloc 0x1800afd30
HeapFree 0x1800afd28
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800afd50
LocalFree 0x1800afd48
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800afd60
api-ms-win-core-io-l1-1-0.dll 2
CancelIoEx 0x1800afd78
GetOverlappedResult 0x1800afd70
api-ms-win-core-job-l2-1-0.dll 1
CreateJobObjectW 0x1800afd88
api-ms-win-core-libraryloader-l1-2-0.dll 8
DisableThreadLibraryCalls 0x1800afdc8
FreeLibrary 0x1800afdc0
GetModuleFileNameA 0x1800afd98
GetModuleHandleExW 0x1800afdb8
GetModuleHandleW 0x1800afda8
GetProcAddress 0x1800afda0
LoadLibraryExA 0x1800afdd0
LoadLibraryExW 0x1800afdb0
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x1800afde0
LCMapStringEx 0x1800afde8
api-ms-win-core-localization-l1-2-3.dll 1
GetUserDefaultGeoName 0x1800afdf8
api-ms-win-core-memory-l1-1-0.dll 2
VirtualProtect 0x1800afe08
VirtualQuery 0x1800afe10
api-ms-win-core-namedpipe-l1-1-0.dll 1
CreatePipe 0x1800afe20
api-ms-win-core-path-l1-1-0.dll 1
PathAllocCombine 0x1800afe30
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800afe40
api-ms-win-core-processthreads-l1-1-0.dll 12
CreateProcessAsUserW 0x1800afe50
DeleteProcThreadAttributeList 0x1800afe70
GetCurrentProcess 0x1800afe88
GetCurrentProcessId 0x1800afe90
GetCurrentThread 0x1800afe98
GetCurrentThreadId 0x1800afe68
GetProcessId 0x1800afe80
InitializeProcThreadAttributeList 0x1800afe78
OpenThreadToken 0x1800afea0
SetThreadToken 0x1800afe60
TerminateProcess 0x1800afea8
UpdateProcThreadAttribute 0x1800afe58
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1800afec0
OpenProcess 0x1800afeb8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800afed0
api-ms-win-core-registry-l1-1-0.dll 10
RegCloseKey 0x1800afef8
RegCreateKeyExW 0x1800aff20
RegDeleteKeyExW 0x1800aff28
RegDeleteValueW 0x1800aff00
RegEnumKeyExW 0x1800aff10
RegGetValueW 0x1800afee8
RegNotifyChangeKeyValue 0x1800afee0
RegOpenCurrentUser 0x1800aff18
RegOpenKeyExW 0x1800afef0
RegQueryValueExW 0x1800aff08
api-ms-win-core-registry-l1-1-1.dll 2
RegDeleteKeyValueW 0x1800aff40
RegSetKeyValueW 0x1800aff38
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x1800aff60
RtlLookupFunctionEntry 0x1800aff58
RtlPcToFileHeader 0x1800aff68
RtlVirtualUnwind 0x1800aff50
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 2
PathFileExistsW 0x1800aff80
PathFindExtensionW 0x1800aff78
api-ms-win-core-string-l1-1-0.dll 4
CompareStringEx 0x1800affa0
GetStringTypeW 0x1800aff98
MultiByteToWideChar 0x1800aff90
WideCharToMultiByte 0x1800affa8
api-ms-win-core-synch-l1-1-0.dll 22
AcquireSRWLockExclusive 0x1800afff8
AcquireSRWLockShared 0x1800b0008
CreateEventExW 0x1800b0018
CreateEventW 0x1800b0028
CreateMutexExW 0x1800affd8
CreateSemaphoreExW 0x1800b0050
DeleteCriticalSection 0x1800b0010
EnterCriticalSection 0x1800b0048
InitializeCriticalSectionAndSpinCount 0x1800affe0
InitializeCriticalSectionEx 0x1800afff0
InitializeSRWLock 0x1800b0038
LeaveCriticalSection 0x1800b0000
OpenSemaphoreW 0x1800b0058
ReleaseMutex 0x1800affc8
ReleaseSemaphore 0x1800b0020
ReleaseSRWLockExclusive 0x1800affc0
ReleaseSRWLockShared 0x1800affd0
ResetEvent 0x1800b0060
SetEvent 0x1800b0030
TryAcquireSRWLockExclusive 0x1800b0040
WaitForSingleObject 0x1800affe8
WaitForSingleObjectEx 0x1800affb8
api-ms-win-core-synch-l1-2-0.dll 6
InitializeConditionVariable 0x1800b0080
InitOnceExecuteOnce 0x1800b0078
Sleep 0x1800b0070
SleepConditionVariableSRW 0x1800b0090
WakeAllConditionVariable 0x1800b0098
WakeConditionVariable 0x1800b0088
api-ms-win-core-synch-l1-2-1.dll 1
WaitForMultipleObjects 0x1800b00a8
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetComputerNameExW 0x1800b00c0
GetSystemDirectoryW 0x1800b00b8
GetSystemInfo 0x1800b00c8
GetSystemTimeAsFileTime 0x1800b00d0
api-ms-win-core-threadpool-l1-2-0.dll 12
CloseThreadpoolTimer 0x1800b0128
CloseThreadpoolWait 0x1800b0100
CloseThreadpoolWork 0x1800b0130
CreateThreadpoolTimer 0x1800b0120
CreateThreadpoolWait 0x1800b00e8
CreateThreadpoolWork 0x1800b00f0
FreeLibraryWhenCallbackReturns 0x1800b0118
SetThreadpoolTimer 0x1800b0138
SetThreadpoolWait 0x1800b00e0
SubmitThreadpoolWork 0x1800b00f8
WaitForThreadpoolTimerCallbacks 0x1800b0110
WaitForThreadpoolWaitCallbacks 0x1800b0108
api-ms-win-core-timezone-l1-1-0.dll 1
GetDynamicTimeZoneInformation 0x1800b0148
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1800b0158
EncodePointer 0x1800b0160
api-ms-win-core-winrt-error-l1-1-0.dll 2
RoOriginateError 0x1800b0170
RoOriginateErrorW 0x1800b0178
api-ms-win-core-winrt-l1-1-0.dll 4
RoInitialize 0x1800b0190
RoRegisterActivationFactories 0x1800b0188
RoRevokeActivationFactories 0x1800b0198
RoUninitialize 0x1800b01a0
api-ms-win-core-winrt-string-l1-1-0.dll 5
WindowsCreateString 0x1800b01c0
WindowsDeleteString 0x1800b01b0
WindowsGetStringRawBuffer 0x1800b01c8
WindowsIsStringEmpty 0x1800b01d0
WindowsStringHasEmbeddedNull 0x1800b01b8
api-ms-win-crt-locale-l1-1-0.dll 2
_lock_locales 0x1800b01e0
_unlock_locales 0x1800b01e8
api-ms-win-crt-private-l1-1-0.dll 95
__AdjustPointer 0x1800b03b0
__C_specific_handler 0x1800b0398
__current_exception 0x1800b03a8
__CxxFrameHandler3 0x1800b03a0
__CxxFrameHandler4 0x1800b04d0
__processing_throw 0x1800b03b8
__std_terminate 0x1800b04c8
__std_type_info_compare 0x1800b0388
__uncaught_exception 0x1800b03c0
_CxxThrowException 0x1800b03c8
_o____lc_codepage_func 0x1800b04c0
_o____lc_collate_cp_func 0x1800b04b8
_o____lc_locale_name_func 0x1800b04b0
_o____mb_cur_max_func 0x1800b04a8
_o___acrt_iob_func 0x1800b04a0
_o___pctype_func 0x1800b0498
_o___std_exception_copy 0x1800b0490
_o___std_exception_destroy 0x1800b0488
_o___std_type_info_destroy_list 0x1800b0480
_o___stdio_common_vfprintf 0x1800b0478
_o___stdio_common_vsnprintf_s 0x1800b0468
_o___stdio_common_vsprintf_s 0x1800b0460
_o___stdio_common_vswprintf 0x1800b0458
_o___stdio_common_vswprintf_s 0x1800b0450
_o__beginthreadex 0x1800b0448
_o__callnewh 0x1800b0440
_o__calloc_base 0x1800b0438
_o__cexit 0x1800b0430
_o__configure_narrow_argv 0x1800b0428
_o__crt_atexit 0x1800b0420
_o__errno 0x1800b0418
_o__execute_onexit_table 0x1800b0410
_o__fdopen 0x1800b0408
_o__fileno 0x1800b0400
_o__free_base 0x1800b03d8
_o__fseeki64 0x1800b03d0
_o__get_stream_buffer_pointers 0x1800b0470
_o__initialize_narrow_environment 0x1800b03f8
_o__initialize_onexit_table 0x1800b03f0
_o__invalid_parameter_noinfo 0x1800b03e8
_o__invalid_parameter_noinfo_noreturn 0x1800b03e0
_o__lock_file 0x1800b01f8
_o__malloc_base 0x1800b0200
_o__purecall 0x1800b0208
_o__register_onexit_function 0x1800b0210
_o__seh_filter_dll 0x1800b0218
_o__strdup 0x1800b0220
_o__stricmp 0x1800b0228
_o__ui64tow_s 0x1800b0230
_o__unlock_file 0x1800b0238
_o__wcsdup 0x1800b0240
_o__wcsicmp 0x1800b0248
_o__wfopen 0x1800b0250
_o__wfsopen 0x1800b0258
_o_abort 0x1800b0268
_o_calloc 0x1800b0270
_o_fclose 0x1800b0278
_o_feof 0x1800b0280
_o_ferror 0x1800b0288
_o_fflush 0x1800b0290
_o_fgetc 0x1800b0298
_o_fgetpos 0x1800b02a0
_o_fopen 0x1800b02a8
_o_fputc 0x1800b02b0
_o_fread 0x1800b02b8
_o_free 0x1800b02c0
_o_frexp 0x1800b02c8
_o_fsetpos 0x1800b02d0
_o_ftell 0x1800b02d8
_o_fwrite 0x1800b02e0
_o_isalnum 0x1800b02e8
_o_isalpha 0x1800b02f0
_o_islower 0x1800b02f8
_o_isupper 0x1800b0300
_o_iswxdigit 0x1800b0308
_o_localeconv 0x1800b0310
_o_malloc 0x1800b0318
_o_realloc 0x1800b0320
_o_setlocale 0x1800b0328
_o_setvbuf 0x1800b0330
_o_strcpy_s 0x1800b0338
_o_strtok_s 0x1800b0340
_o_strtol 0x1800b0348
_o_strtoull 0x1800b0350
_o_terminate 0x1800b0358
_o_towupper 0x1800b0360
_o_ungetc 0x1800b0368
_o_wcscpy_s 0x1800b0370
_o_wcstod 0x1800b0378
_o_wcstoull 0x1800b0380
memchr 0x1800b04d8
memcmp 0x1800b04e0
memcpy 0x1800b04e8
memmove 0x1800b0260
strchr 0x1800b0390
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800b0500
_initterm_e 0x1800b04f8
api-ms-win-crt-string-l1-1-0.dll 5
__strncnt 0x1800b0528
memset 0x1800b0520
strcspn 0x1800b0510
wcsncmp 0x1800b0518
wcsnlen 0x1800b0530
api-ms-win-eventing-provider-l1-1-0.dll 4
EventRegister 0x1800b0548
EventSetInformation 0x1800b0540
EventUnregister 0x1800b0550
EventWriteTransfer 0x1800b0558
api-ms-win-security-base-l1-1-0.dll 10
CreateRestrictedToken 0x1800b0580
DuplicateTokenEx 0x1800b0588
GetLengthSid 0x1800b0570
GetSidSubAuthority 0x1800b0598
GetSidSubAuthorityCount 0x1800b0590
GetTokenInformation 0x1800b05a8
InitializeSecurityDescriptor 0x1800b0568
MakeAbsoluteSD 0x1800b05a0
SetSecurityDescriptorOwner 0x1800b0578
SetTokenInformation 0x1800b05b0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800b05c8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800b05c0
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x1800b05e0
SetServiceStatus 0x1800b05d8
api-ms-win-service-management-l1-1-0.dll 4
CloseServiceHandle 0x1800b0600
OpenSCManagerW 0x1800b05f0
OpenServiceW 0x1800b05f8
StartServiceW 0x1800b0608
api-ms-win-shell-shellfolders-l1-1-0.dll 1
SHGetKnownFolderPath 0x1800b0618
bcrypt.dll 1
BCryptGenRandom 0x1800b0628
combase.dll 4
0x1800b0638
0x1800b0640
0x1800b0648
0x1800b0650
DEVOBJ.dll 14
DevObjChangeState 0x1800afa40
DevObjCreateDeviceInfo 0x1800afa68
DevObjCreateDeviceInfoList 0x1800afa88
DevObjCreateDevRegKey 0x1800afa48
DevObjDeleteDevRegKey 0x1800afa70
DevObjDestroyDeviceInfoList 0x1800afa28
DevObjEnumDeviceInfo 0x1800afa30
DevObjGetClassDevs 0x1800afa38
DevObjGetDeviceInstanceId 0x1800afa50
DevObjOpenDeviceInfo 0x1800afa20
DevObjOpenDevRegKey 0x1800afa80
DevObjRegisterDeviceInfo 0x1800afa58
DevObjSetDeviceRegistryProperty 0x1800afa60
DevObjUninstallDevice 0x1800afa78
IPHLPAPI.DLL 8
CreateUnicastIpAddressEntry 0x1800afa98
DeleteUnicastIpAddressEntry 0x1800afaa0
FreeMibTable 0x1800afac8
GetAdaptersAddresses 0x1800afab8
GetBestInterfaceEx 0x1800afac0
GetCurrentThreadCompartmentScope 0x1800afad0
GetUnicastIpAddressTable 0x1800afaa8
SetCurrentThreadCompartmentScope 0x1800afab0
KERNELBASE.dll 1
GetPackageFamilyName 0x1800afae0
mi.dll 1
MI_Application_InitializeV1 0x1800b0660
MSWSOCK.dll 1
AcceptEx 0x1800afaf0
ntdll.dll 49
NtAdjustPrivilegesToken 0x1800b06c0
NtCancelIoFileEx 0x1800b06c8
NtClose 0x1800b0788
NtCreateFile 0x1800b0770
NtDeviceIoControlFile 0x1800b07e0
NtLoadDriver 0x1800b06f8
NtOpenFile 0x1800b0750
NtQueryEaFile 0x1800b0778
NtQueryInformationFile 0x1800b06f0
NtQueryInformationProcess 0x1800b0758
NtQueryInformationThread 0x1800b06d8
NtQuerySystemInformation 0x1800b0738
NtQueryVolumeInformationFile 0x1800b07e8
NtQueryWnfStateData 0x1800b0688
NtReadFile 0x1800b0798
NtSetEaFile 0x1800b06e8
NtSetInformationFile 0x1800b0720
NtSetInformationJobObject 0x1800b0698
NtSetInformationThread 0x1800b06e0
NtWaitForSingleObject 0x1800b0780
NtWriteFile 0x1800b0790
RtlAcquirePrivilege 0x1800b06b0
RtlAllocateHeap 0x1800b07a0
RtlCheckTokenMembership 0x1800b06a8
RtlClearBit 0x1800b0740
RtlCompareUnicodeString 0x1800b0678
RtlCopySid 0x1800b06a0
RtlDosLongPathNameToNtPathName_U_WithStatus 0x1800b0768
RtlEqualSid 0x1800b0708
RtlFindClearBitsAndSet 0x1800b0748
RtlFreeHeap 0x1800b07a8
RtlFreeUnicodeString 0x1800b07f0
RtlGUIDFromString 0x1800b0728
RtlInitAnsiStringEx 0x1800b06d0
RtlInitializeBitMap 0x1800b0730
RtlInitializeSidEx 0x1800b0718
RtlInitUnicodeString 0x1800b0710
RtlInitUnicodeStringEx 0x1800b0670
RtlQueryWnfStateData 0x1800b0700
RtlReleasePrivilege 0x1800b06b8
RtlRunOnceExecuteOnce 0x1800b07d8
RtlStringFromGUID 0x1800b0760
RtlSubscribeWnfStateChangeNotification 0x1800b0690
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800b0680
ZwClose 0x1800b07b0
ZwCreateEvent 0x1800b07c8
ZwQueryDirectoryFile 0x1800b07c0
ZwSetEaFile 0x1800b07d0
ZwWaitForSingleObject 0x1800b07b8
OLEAUT32.dll 4
SysAllocString 0x1800afb18
SysFreeString 0x1800afb00
VariantClear 0x1800afb10
VariantInit 0x1800afb08
USERENV.dll 1
GetUserProfileDirectoryW 0x1800afb28
WS2_32.dll 13
bind 0x1800afb58
closesocket 0x1800afb68
connect 0x1800afb78
inet_ntop 0x1800afb40
listen 0x1800afb48
recv 0x1800afb98
send 0x1800afb80
setsockopt 0x1800afb60
shutdown 0x1800afb38
WSAGetLastError 0x1800afb50
WSAGetOverlappedResult 0x1800afb88
WSASocketW 0x1800afb90
WSAStartup 0x1800afb70