psmsrv.dll

Description: Process State Manager (PSM) Service

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 9f20be3de878d072e4e090ac9e06df7a

File Size: 241.5 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 4

Exported Functions

(Ordinal: 1, Address: 0x134d0)
(Ordinal: 2, Address: 0x218b0)
(Ordinal: 3, Address: 0x3be0)
(Ordinal: 4, Address: 0x46f0)
ServiceMain (Ordinal: 5, Address: 0x14c50)
SvchostPushServiceGlobals (Ordinal: 6, Address: 0x15290)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

PackageFamilyNameFromFullName (Address: 0x18002e0b0)

api-ms-win-appmodel-runtime-l1-1-1.dll

GetStagedPackageOrigin (Address: 0x18002e0c0)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18002e0d0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002e0e0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002e0f0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002e110)
SetUnhandledExceptionFilter (Address: 0x18002e100)
UnhandledExceptionFilter (Address: 0x18002e108)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18002e120)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002e130)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002e140)
LocalFree (Address: 0x18002e148)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x18002e158)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetSystemPowerStatus (Address: 0x18002e168)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18002e178)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18002e190)
GetCurrentProcessId (Address: 0x18002e1a8)
GetCurrentThreadId (Address: 0x18002e188)
GetProcessId (Address: 0x18002e198)
TerminateProcess (Address: 0x18002e1a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002e1b8)

api-ms-win-core-psm-key-l1-1-0.dll

PsmCreateKey (Address: 0x18002e1e0)
PsmGetApplicationNameFromKey (Address: 0x18002e1e8)
PsmGetKeyFromToken (Address: 0x18002e1d8)
PsmGetPackageFullNameFromKey (Address: 0x18002e1c8)
PsmIsDynamicKey (Address: 0x18002e1d0)

api-ms-win-core-psm-key-l1-1-1.dll

PsmCreateKeyWithDynamicId (Address: 0x18002e1f8)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x18002e208)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002e220)
RegOpenKeyExW (Address: 0x18002e228)
RegQueryValueExW (Address: 0x18002e218)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002e240)
RtlLookupFunctionEntry (Address: 0x18002e238)
RtlVirtualUnwind (Address: 0x18002e248)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002e270)
InitializeSRWLock (Address: 0x18002e258)
OpenEventW (Address: 0x18002e268)
ReleaseSRWLockExclusive (Address: 0x18002e260)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18002e280)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18002e298)
GetSystemTimeAsFileTime (Address: 0x18002e2a0)
GetTickCount (Address: 0x18002e290)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18002e2d8)
GetTraceEnableLevel (Address: 0x18002e2d0)
GetTraceLoggerHandle (Address: 0x18002e2b0)
RegisterTraceGuidsW (Address: 0x18002e2c0)
TraceMessage (Address: 0x18002e2c8)
UnregisterTraceGuids (Address: 0x18002e2b8)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x18002e2f0)
EventRegister (Address: 0x18002e308)
EventSetInformation (Address: 0x18002e300)
EventUnregister (Address: 0x18002e2f8)
EventWriteTransfer (Address: 0x18002e2e8)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x18002e320)
PowerSettingUnregisterNotification (Address: 0x18002e318)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x18002e348)
GetLengthSid (Address: 0x18002e330)
IsValidSid (Address: 0x18002e338)
RevertToSelf (Address: 0x18002e340)

api-ms-win-security-lsalookup-l1-1-0.dll

LsaLookupClose (Address: 0x18002e358)
LsaLookupFreeMemory (Address: 0x18002e370)
LsaLookupGetDomainInfo (Address: 0x18002e360)
LsaLookupOpenLocalPolicy (Address: 0x18002e368)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18002e380)
SetServiceStatus (Address: 0x18002e388)

msvcrt.dll

__C_specific_handler (Address: 0x18002e3c8)
_amsg_exit (Address: 0x18002e3f0)
_initterm (Address: 0x18002e3d0)
_XcptFilter (Address: 0x18002e3f8)
free (Address: 0x18002e3e0)
malloc (Address: 0x18002e3d8)
memcmp (Address: 0x18002e3b0)
memcpy (Address: 0x18002e398)
memmove (Address: 0x18002e3a8)
memset (Address: 0x18002e3c0)
toupper (Address: 0x18002e3a0)
wcschr (Address: 0x18002e3e8)
wcscmp (Address: 0x18002e3b8)

ntdll.dll

_vsnwprintf (Address: 0x18002e4c8)
_wcsicmp (Address: 0x18002e4d0)
_wcsnicmp (Address: 0x18002e4e0)
NtAccessCheckByType (Address: 0x18002e440)
NtAssignProcessToJobObject (Address: 0x18002e5f8)
NtClearEvent (Address: 0x18002e470)
NtClose (Address: 0x18002e5d8)
NtCreateEvent (Address: 0x18002e5a8)
NtCreateJobObject (Address: 0x18002e658)
NtCreateSemaphore (Address: 0x18002e478)
NtCreateWnfStateName (Address: 0x18002e6a8)
NtDeleteWnfStateName (Address: 0x18002e6b0)
NtDuplicateObject (Address: 0x18002e5c8)
NtIsProcessInJob (Address: 0x18002e5d0)
NtNotifyChangeKey (Address: 0x18002e4c0)
NtOpenKey (Address: 0x18002e500)
NtOpenProcess (Address: 0x18002e728)
NtOpenProcessToken (Address: 0x18002e608)
NtOpenProcessTokenEx (Address: 0x18002e700)
NtOpenThreadToken (Address: 0x18002e438)
NtPowerInformation (Address: 0x18002e4b8)
NtQueryInformationJobObject (Address: 0x18002e668)
NtQueryInformationProcess (Address: 0x18002e490)
NtQueryInformationThread (Address: 0x18002e410)
NtQueryInformationToken (Address: 0x18002e650)
NtQueryObject (Address: 0x18002e418)
NtQuerySecurityAttributesToken (Address: 0x18002e5c0)
NtQuerySystemInformation (Address: 0x18002e6b8)
NtQueryValueKey (Address: 0x18002e498)
NtQueryWnfStateData (Address: 0x18002e458)
NtReleaseSemaphore (Address: 0x18002e530)
NtResetEvent (Address: 0x18002e6e8)
NtSetEvent (Address: 0x18002e568)
NtSetInformationJobObject (Address: 0x18002e698)
NtSetInformationThread (Address: 0x18002e408)
NtSetInformationToken (Address: 0x18002e588)
NtTerminateJobObject (Address: 0x18002e5e0)
NtUpdateWnfStateData (Address: 0x18002e538)
NtWaitForSingleObject (Address: 0x18002e520)
RtlAcquirePrivilege (Address: 0x18002e590)
RtlAcquireSRWLockExclusive (Address: 0x18002e710)
RtlAcquireSRWLockShared (Address: 0x18002e638)
RtlAddAccessAllowedAce (Address: 0x18002e448)
RtlAddAccessAllowedAceEx (Address: 0x18002e618)
RtlAllocateHeap (Address: 0x18002e6d0)
RtlCompareMemoryUlong (Address: 0x18002e428)
RtlCompareUnicodeStrings (Address: 0x18002e560)
RtlCopySid (Address: 0x18002e5b8)
RtlCreateAcl (Address: 0x18002e640)
RtlCreateSecurityDescriptor (Address: 0x18002e648)
RtlEqualSid (Address: 0x18002e468)
RtlFreeHeap (Address: 0x18002e548)
RtlFreeUnicodeString (Address: 0x18002e488)
RtlGetAppContainerNamedObjectPath (Address: 0x18002e460)
RtlGetDaclSecurityDescriptor (Address: 0x18002e420)
RtlGetDeviceFamilyInfoEnum (Address: 0x18002e678)
RtlInitializeConditionVariable (Address: 0x18002e688)
RtlInitializeSRWLock (Address: 0x18002e6c8)
RtlInitUnicodeString (Address: 0x18002e4e8)
RtlInitUnicodeStringEx (Address: 0x18002e598)
RtlLengthSid (Address: 0x18002e620)
RtlNtStatusToDosError (Address: 0x18002e720)
RtlPublishWnfStateData (Address: 0x18002e4f0)
RtlQueryPackageClaims (Address: 0x18002e480)
RtlQueryUnbiasedInterruptTime (Address: 0x18002e6f0)
RtlQueryWnfMetaNotification (Address: 0x18002e628)
RtlReleasePrivilege (Address: 0x18002e580)
RtlReleaseSRWLockExclusive (Address: 0x18002e718)
RtlReleaseSRWLockShared (Address: 0x18002e600)
RtlRunOnceBeginInitialize (Address: 0x18002e450)
RtlRunOnceExecuteOnce (Address: 0x18002e5e8)
RtlSetDaclSecurityDescriptor (Address: 0x18002e610)
RtlSidDominates (Address: 0x18002e550)
RtlSleepConditionVariableSRW (Address: 0x18002e6a0)
RtlStringFromGUIDEx (Address: 0x18002e5b0)
RtlSubscribeWnfStateChangeNotification (Address: 0x18002e6c0)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18002e540)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x18002e6e0)
RtlUpcaseUnicodeChar (Address: 0x18002e558)
RtlValidSid (Address: 0x18002e6f8)
RtlWaitForWnfMetaNotification (Address: 0x18002e630)
RtlWakeAllConditionVariable (Address: 0x18002e690)
TpAllocJobNotification (Address: 0x18002e6d8)
TpAllocTimer (Address: 0x18002e510)
TpAllocWait (Address: 0x18002e4a8)
TpAllocWork (Address: 0x18002e670)
TpDisassociateCallback (Address: 0x18002e5f0)
TpPostWork (Address: 0x18002e5a0)
TpReleaseJobNotification (Address: 0x18002e708)
TpReleaseTimer (Address: 0x18002e660)
TpReleaseWait (Address: 0x18002e4f8)
TpReleaseWork (Address: 0x18002e570)
TpSetTimer (Address: 0x18002e518)
TpSetWait (Address: 0x18002e508)
TpWaitForJobNotification (Address: 0x18002e528)
TpWaitForTimer (Address: 0x18002e680)
TpWaitForWait (Address: 0x18002e4a0)
TpWaitForWork (Address: 0x18002e578)
wcsnlen (Address: 0x18002e4d8)
WinSqmAddToStreamEx (Address: 0x18002e430)
WinSqmIsOptedIn (Address: 0x18002e4b0)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x18002e030)
I_RpcMapWin32Status (Address: 0x18002e070)
I_RpcOpenClientProcess (Address: 0x18002e028)
NdrServerCall2 (Address: 0x18002e090)
NdrServerCallAll (Address: 0x18002e088)
RpcBindingVectorFree (Address: 0x18002e068)
RpcEpRegisterW (Address: 0x18002e040)
RpcEpUnregister (Address: 0x18002e048)
RpcImpersonateClient (Address: 0x18002e098)
RpcRevertToSelf (Address: 0x18002e078)
RpcRevertToSelfEx (Address: 0x18002e080)
RpcServerInqBindingsEx (Address: 0x18002e038)
RpcServerRegisterIf3 (Address: 0x18002e050)
RpcServerUnregisterIfEx (Address: 0x18002e060)
RpcServerUseProtseqW (Address: 0x18002e058)
UuidCreate (Address: 0x18002e0a0)