Windows 7 DLL File Information - samsrv.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	SAM Server DLL
File Version:	6.1.7100.0 (winmain_win7rc.090421-1700)
Company:	Microsoft Corporation
Product Name:	Microsoft Windows Operating System
DLL popularity	Very Low - 2 other DLL files in system32 directory are statically linked to this file.
File Size:	538 KB
Total Number of Exported Functions:	113
Total Number of Exported Functions With Names:	113

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	487,936 Bytes	88.6%	Read, Execute	Code
.data	0x00079000	15,360 Bytes	2.8%	Write, Read	Initialized Data
.rsrc	0x0007f000	28,672 Bytes	5.2%	Read	Initialized Data
.reloc	0x00086000	17,408 Bytes	3.2%	Read, Discardable	Initialized Data

Static Linking

samsrv.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
API-MS-Win-Core-Console-L1-1-0.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
API-MS-Win-Core-File-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-Interlocked-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
LSASRV.dll
cryptdll.dll
KERNEL32.dll

This means that when samsrv.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, samsrv.dll won't be loaded.

List of files that are statically linked to samsrv.dll

lsasrv.dll
netlogon.dll

This means that when one of the above files is loaded, samsrv.dll will be loaded too. (The opposite of the previous 'Static Linking' section)

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	748 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	5	85,483 Bytes	15.5%
Total	7	86,231 Bytes	15.7%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID	String Text
1	Security Accounts Manager
2	The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

SamIAccountRestrictions	SamIAmIGC
SamIApplyDomainUpdates	SamIChangePasswordForeignUser
SamIConnect	SamICopyCurrentDomainAccountSettings
SamICreateKrbTgt	SamIDemote
SamIDemoteUndo	SamIDoFSMORoleChange
SamIDsCreateObjectInDomain	SamIDsSetObjectInformation
SamIFloatingSingleMasterOpEx	SamIFreeSidAndAttributesList
SamIFreeSidArray	SamIFreeVoid
SamIFree_SAMPR_DISPLAY_INFO_BUFFER	SamIFree_SAMPR_DOMAIN_INFO_BUFFER
SamIFree_SAMPR_ENUMERATION_BUFFER	SamIFree_SAMPR_GET_GROUPS_BUFFER
SamIFree_SAMPR_RETURNED_USTRING_ARRAY	SamIFree_SAMPR_ULONG_ARRAY
SamIFree_SAMPR_USER_INFO_BUFFER	SamIFree_UserInternal6Information
SamIGCLookupNames	SamIGCLookupSids
SamIGetAliasMembership	SamIGetDefaultAdministratorName
SamIGetResourceGroupMembershipsTransitive	SamIGetUserLogonInformation
SamIGetUserLogonInformation2	SamIGetUserLogonInformationEx
SamIHandleObjectUpdate	SamIImpersonateNullSession
SamIInitialize	SamIIsAttributeProtected
SamIIsDownlevelDcUpgrade	SamIIsExtendedSidMode
SamIIsRebootAfterPromotion	SamIIsSetupInProgress
SamILoadDownlevelDatabase	SamILoopbackConnect
SamIMixedDomain	SamIMixedDomain2
SamINT4UpgradeInProgress	SamINetLogonPing
SamINotifyRoleChange	SamINotifyServerDelta
SamIOpenUserByAlternateId	SamIPromote
SamIPromoteUndo	SamIPurgeSecrets
SamIQueryAccountSecretsCachability	SamIQueryCapabilities
SamIQueryServerRole	SamIQueryServerRole2
SamIReplaceDownlevelDatabase	SamIResetBadPwdCountOnPdc
SamIRetrieveMultiplePrimaryCredentials	SamIRetrievePrimaryCredentials
SamIRevertNullSession	SamISameSite
SamISetAuditingInformation	SamISetMachinePassword
SamISetPasswordForeignUser2	SamISetPasswordInfoOnDc
SamIStorePrimaryCredentials	SamIUPNFromUserHandle
SamIUnLoadDownlevelDatabase	SamIUpdateLogonStatistics
SampAbortSingleLoopbackTask	SampAccountControlToFlags
SampAcquireSamLockExclusive	SampAcquireWriteLock
SampCommitBufferedWrites	SampDsChangePasswordUser
SampDsIsRunning	SampEnforceMappedGroupChecks
SampFlagsToAccountControl	SampGetPasswordMustChangeWithUF_UAC
SampGetSerialNumberDomain2	SampGetUserAccountControlComputed
SampInvalidateDomainCache	SampInvalidateRidRange
SampIsAuditingEnabled	SampLogCannotLinkOidToGroupEvent
SampNetLogonNotificationRequired	SampNotifyAuditChange
SampNotifyReplicatedInChange	SampProcessSingleLoopbackTask
SampReleaseSamLockExclusive	SampReleaseWriteLock
SampSetSerialNumberDomain2	SampUsingDsData
SamrCloseHandle	SamrCreateUser2InDomain
SamrDeleteAlias	SamrDeleteGroup
SamrDeleteUser	SamrEnumerateUsersInDomain
SamrGetAliasMembership	SamrGetGroupsForUser
SamrLookupIdsInDomain	SamrLookupNamesInDomain
SamrOpenAlias	SamrOpenDomain
SamrOpenGroup	SamrOpenUser
SamrQueryDisplayInformation	SamrQueryInformationDomain
SamrQueryInformationUser	SamrRidToSid
SamrSetInformationUser

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	_amsg_exit	_except_handler4_common	_ftol2
  _initterm	_itow	_memicmp	_purecall
  _snwscanf_s	_ultow	_vscwprintf	_vsnprintf
  _vsnwprintf	_wcsicmp	_wcsnicmp	_wcsupr
  _wtoi	free	malloc	memcpy
  memmove	memset	swprintf_s	towupper
  wcschr	wcscpy_s	wcscspn	wcsncmp
  wcsncpy_s	wcspbrk	wcsrchr	wcsstr
  wcstok

• ntdll.dll:
  

  DbgPrint	EtwEventRegister
  EtwEventUnregister	EtwEventWrite
  EtwGetTraceEnableFlags	EtwGetTraceEnableLevel
  EtwGetTraceLoggerHandle	EtwLogTraceEvent
  EtwRegisterTraceGuidsW	EtwTraceMessage
  LdrGetDllHandle	LdrGetProcedureAddress
  LdrLoadDll	LdrUnloadDll
  NlsMbOemCodePageTag	NtAccessCheck
  NtAccessCheckAndAuditAlarm	NtAccessCheckByTypeResultList
  NtAccessCheckByTypeResultListAndAuditAlarm	NtAdjustPrivilegesToken
  NtAllocateLocallyUniqueId	NtClose
  NtCloseObjectAuditAlarm	NtCreateEvent
  NtCreateFile	NtCreateKey
  NtCreateToken	NtDelayExecution
  NtDeleteKey	NtDeleteObjectAuditAlarm
  NtDeleteValueKey	NtDeviceIoControlFile
  NtDuplicateObject	NtEnumerateKey
  NtEnumerateValueKey	NtFlushKey
  NtFsControlFile	NtImpersonateAnonymousToken
  NtLoadKey	NtOpenEvent
  NtOpenFile	NtOpenKey
  NtOpenProcess	NtOpenProcessToken
  NtOpenThread	NtOpenThreadToken
  NtPrivilegeCheck	NtPrivilegedServiceAuditAlarm
  NtQueryAttributesFile	NtQueryDirectoryFile
  NtQueryInformationToken	NtQueryKey
  NtQueryLicenseValue	NtQueryObject
  NtQuerySecurityObject	NtQuerySystemEnvironmentValueEx
  NtQuerySystemInformation	NtQuerySystemTime
  NtQueryValueKey	NtQueryVolumeInformationFile
  NtRaiseHardError	NtRestoreKey
  NtSetEvent	NtSetInformationThread
  NtSetSecurityObject	NtSetValueKey
  NtUnloadKey	NtWaitForSingleObject
  NtWriteFile	RtlAbortRXact
  RtlAbsoluteToSelfRelativeSD	RtlAcquireResourceExclusive
  RtlAcquireResourceShared	RtlAddAccessAllowedAce
  RtlAddAce	RtlAddActionToRXact
  RtlAddAttributeActionToRXact	RtlAddAuditAccessAce
  RtlAdjustPrivilege	RtlAllocateAndInitializeSid
  RtlAllocateHeap	RtlAnsiStringToUnicodeString
  RtlAppendUnicodeStringToString	RtlAppendUnicodeToString
  RtlApplyRXactNoFlush	RtlAreAllAccessesGranted
  RtlClearAllBits	RtlCompareMemory
  RtlCompareString	RtlCompareUnicodeString
  RtlConvertSidToUnicodeString	RtlCopySecurityDescriptor
  RtlCopySid	RtlCopyUnicodeString
  RtlCreateAcl	RtlCreateEnvironment
  RtlCreateSecurityDescriptor	RtlCreateUnicodeString
  RtlCreateUnicodeStringFromAsciiz	RtlDeleteResource
  RtlDeleteSecurityObject	RtlDestroyEnvironment
  RtlDnsHostNameToComputerName	RtlDosPathNameToNtPathName_U
  RtlEnterCriticalSection	RtlEqualComputerName
  RtlEqualDomainName	RtlEqualPrefixSid
  RtlEqualSid	RtlEqualUnicodeString
  RtlExpandEnvironmentStrings_U	RtlExtendedIntegerMultiply
  RtlExtendedLargeIntegerDivide	RtlFindMessage
  RtlFreeAnsiString	RtlFreeAnsiString
  RtlFreeHeap	RtlFreeSid
  RtlGetAce	RtlGetControlSecurityDescriptor
  RtlGetDaclSecurityDescriptor	RtlGetGroupSecurityDescriptor
  RtlGetNtProductType	RtlGetOwnerSecurityDescriptor
  RtlGetProductInfo	RtlGetSaclSecurityDescriptor
  RtlGetVersion	RtlIdentifierAuthoritySid
  RtlImageNtHeader	RtlInitAnsiString
  RtlInitString	RtlInitUnicodeString
  RtlInitUnicodeStringEx	RtlInitializeBitMap
  RtlInitializeCriticalSection	RtlInitializeCriticalSectionAndSpinCount
  RtlInitializeGenericTableAvl	RtlInitializeRXact
  RtlInitializeResource	RtlInitializeSid
  RtlInsertElementGenericTableAvl	RtlIntegerToUnicodeString
  RtlLeaveCriticalSection	RtlLengthRequiredSid
  RtlLengthSecurityDescriptor	RtlLengthSid
  RtlLookupElementGenericTableAvl	RtlMakeSelfRelativeSD
  RtlMapGenericMask	RtlNtStatusToDosError
  RtlOemStringToUnicodeString	RtlQueryInformationAcl
  RtlQueryRegistryValues	RtlReAllocateHeap
  RtlReleaseResource	RtlSetAllBits
  RtlSetBits	RtlSetControlSecurityDescriptor
  RtlSetDaclSecurityDescriptor	RtlSetEnvironmentVariable
  RtlSetGroupSecurityDescriptor	RtlSetOwnerSecurityDescriptor
  RtlSetSaclSecurityDescriptor	RtlSetSecurityObject
  RtlStartRXact	RtlStringFromGUID
  RtlSubAuthorityCountSid	RtlSubAuthoritySid
  RtlTimeToTimeFields	RtlUnicodeStringToAnsiSize
  RtlUnicodeStringToAnsiString	RtlUnicodeToOemN
  RtlUpcaseUnicodeStringToOemString	RtlValidAcl
  RtlValidRelativeSecurityDescriptor	RtlValidSecurityDescriptor
  RtlValidSid	RtlValidateUnicodeString
  RtlpNtCreateKey	RtlpNtEnumerateSubKey
  RtlpNtOpenKey	RtlpNtQueryValueKey
  RtlpNtSetValueKey	VerSetConditionMask

• API-MS-Win-Core-Console-L1-1-0.dll:
  

  kernel32!SetConsoleCtrlHandler

• API-MS-Win-Core-ErrorHandling-L1-1-0.dll:
  

  kernel32!GetLastError	kernel32!SetErrorMode	kernel32!SetUnhandledExceptionFilter
  kernel32!UnhandledExceptionFilter

• API-MS-Win-Core-File-L1-1-0.dll:
  

  kernel32!CompareFileTime	kernel32!CreateFileW	kernel32!DeleteFileW	kernel32!FileTimeToSystemTime
  kernel32!FindClose	kernel32!FindFirstFileW	kernel32!FindNextFileW	kernel32!FlushFileBuffers
  kernel32!GetFileSize	kernel32!RemoveDirectoryW	kernel32!SetFilePointer	kernel32!WriteFile

• API-MS-Win-Core-Handle-L1-1-0.dll:
  

  kernel32!CloseHandle

• API-MS-Win-Core-Interlocked-L1-1-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedExchangeAdd	KernelBase!InterlockedIncrement

• API-MS-Win-Core-LibraryLoader-L1-1-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleFileNameW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExA

• API-MS-Win-Core-LocalRegistry-L1-1-0.dll:
  

  kernel32!RegCloseKey	kernel32!RegCreateKeyExA	kernel32!RegCreateKeyExW
  kernel32!RegEnumValueW	kernel32!RegLoadKeyW	kernel32!RegNotifyChangeKeyValue
  kernel32!RegOpenKeyExA	kernel32!RegOpenKeyExW	kernel32!RegQueryInfoKeyW
  kernel32!RegQueryValueExA	kernel32!RegQueryValueExW	kernel32!RegSetValueExA
  kernel32!RegSetValueExW	kernel32!RegUnLoadKeyW

• API-MS-Win-Core-Misc-L1-1-0.dll:
  

  KernelBase!FormatMessageW	KernelBase!GlobalFree	KernelBase!LocalAlloc	KernelBase!Sleep
  KernelBase!lstrlenW

• API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll:
  

  KernelBase!GetEnvironmentVariableW

• API-MS-Win-Core-ProcessThreads-L1-1-0.dll:
  

  kernel32!CreateThread	kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThreadId	kernel32!SetProcessShutdownParameters	kernel32!TerminateProcess

• API-MS-Win-Core-Profile-L1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• API-MS-Win-Core-String-L1-1-0.dll:
  

  KernelBase!CompareStringW	KernelBase!GetStringTypeW	KernelBase!MultiByteToWideChar
  KernelBase!WideCharToMultiByte

• API-MS-Win-Core-Synch-L1-1-0.dll:
  

  kernel32!CreateEventW	kernel32!WaitForSingleObject	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection
  ntdll!RtlTryEnterCriticalSection

• API-MS-Win-Core-SysInfo-L1-1-0.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime
  KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount	KernelBase!GetTimeZoneInformation
  KernelBase!GetVersionExW	KernelBase!GetWindowsDirectoryW
  KernelBase!SystemTimeToTzSpecificLocalTime

• API-MS-Win-Security-Base-L1-1-0.dll:
  

  KernelBase!AddAccessAllowedAce	KernelBase!AddAccessAllowedObjectAce	KernelBase!AddAccessDeniedAce
  KernelBase!AddAccessDeniedObjectAce	KernelBase!AddAuditAccessAce	KernelBase!AllocateAndInitializeSid
  KernelBase!AreAllAccessesGranted	KernelBase!CheckTokenMembership	KernelBase!CreateWellKnownSid
  KernelBase!EqualDomainSid	KernelBase!FindFirstFreeAce	KernelBase!GetAce
  KernelBase!GetLengthSid	KernelBase!GetSecurityDescriptorDacl	KernelBase!GetSecurityDescriptorGroup
  KernelBase!GetSecurityDescriptorLength	KernelBase!GetSecurityDescriptorOwner	KernelBase!GetSecurityDescriptorSacl
  KernelBase!GetSidIdentifierAuthority	KernelBase!GetSidSubAuthority	KernelBase!GetSidSubAuthorityCount
  KernelBase!GetWindowsAccountDomainSid	KernelBase!ImpersonateLoggedOnUser	KernelBase!InitializeAcl
  KernelBase!InitializeSecurityDescriptor	KernelBase!InitializeSid	KernelBase!MakeAbsoluteSD
  KernelBase!MakeSelfRelativeSD	KernelBase!MapGenericMask	KernelBase!RevertToSelf
  KernelBase!SetSecurityDescriptorDacl	KernelBase!SetSecurityDescriptorGroup	KernelBase!SetSecurityDescriptorOwner
  KernelBase!SetSecurityDescriptorSacl

• LSASRV.dll:
  

  LsaIAdtAuditingEnabledByCategory	LsaIAuditNotifyPackageLoad
  LsaIAuditSamEvent	LsaIChangeSecretCipherKey
  LsaIFree_LSAPR_POLICY_INFORMATION	LsaIHealthCheck
  LsaILookupWellKnownName	LsaINotifyChangeNotification
  LsaIOpenPolicyTrusted	LsaIQueryInformationPolicyTrusted
  LsaIRegisterNotification	LsaIRegisterPolicyChangeNotificationCallback
  LsaISafeMode	LsaISamIndicatedDsStarted
  LsaISetNewSyskey	LsarClose
  LsarQueryInformationPolicy	LsarSetInformationPolicy

• cryptdll.dll:
  

  CDGenerateRandomBits

• KERNEL32.dll:
  

  DelayLoadFailureHook	GetComputerNameW	GetPrivateProfileStringW	GetProcessHeap
  GetSystemInfo	GetVersion	HeapFree	LoadLibraryW
  MoveFileW	QueueUserWorkItem	SetLastError	VerifyVersionInfoA
  VirtualAlloc	VirtualProtect	VirtualQuery	ntdll!RtlAllocateHeap