¿Para qué sirve la dll dsreg.dll?

Registro de dispositivos de usuarios de AD/AAD

Dependencias de la dll dsreg.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\dsreg.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    msvcp110_win.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-1.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    api-ms-win-core-winrt-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-security-cryptoapi-l1-1-0.dll
    api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-2.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    api-ms-win-core-string-obsolete-l1-1-0.dll
    OLEAUT32.dll
    api-ms-win-core-console-l1-2-0.dll
    api-ms-win-core-winrt-error-l1-1-0.dll
    api-ms-win-core-winrt-error-l1-1-1.dll
    api-ms-win-core-file-l1-2-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll

  Image has the following delay load dependencies:

    cryptngc.dll
    certenroll.dll
    webauthn.dll
    ngcrecovery.dll
    MDMRegistration.DLL
    CRYPT32.dll
    SspiCli.dll
    samcli.dll
    ncrypt.dll
    WINHTTP.dll
    wkscli.dll
    netutils.dll
    WLDAP32.dll
    api-ms-win-rtcore-ntuser-window-l1-1-0.dll
    api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
    api-ms-win-ntuser-sysparams-l1-1-0.dll
    PROPSYS.dll
    logoncli.dll
    tbs.dll
    ext-ms-win-secur32-translatename-l1-1-0.dll
    ext-ms-win-session-winsta-l1-1-0.dll
    ext-ms-win-shell-shell32-l1-2-0.dll
    ext-ms-win-security-ngc-local-l1-1-0.dll

  Summary

        6000 .data
        1000 .didat
        5000 .pdata
       69000 .rdata
        1000 .reloc
       16000 .rsrc
       A5000 .text

Funciones que tiene la dll dsreg.dll


1    0 00004210 DsrBeginDelegatedWorkplaceJoin
2    1 00003C80 DsrBeginDeviceAndResourceAccountJoin
3    2 00003770 DsrBeginDeviceJoin
4    3 00004870 DsrBeginDeviceUnjoin
5    4 000049D0 DsrBeginDeviceUpdate
6    5 0002CFF0 DsrBeginDiscover
7    6 000039D0 DsrBeginPreprovisionedDeviceJoin
8    7 00004E50 DsrBeginRecovery
9    8 00003F90 DsrBeginWorkplaceJoin
10    9 000048F0 DsrBeginWorkplaceUnjoin
11    A 000049F0 DsrBeginWorkplaceUpdate
12    B 0006B920 DsrCLI
13    C 00005E40 DsrCanCurrentUserProvisionNgcKey
14    D 00005E50 DsrCanCurrentUserResetNgcKey
15    E 000053C0 DsrEndRecovery
16    F 000516F0 DsrFreeCxhScenarioInfo
17   10 0002D600 DsrFreeDiscoveryMetadata
18   11 000502D0 DsrFreeJoinInfo
19   12 000503C0 DsrFreeJoinInfoEx
20   13 00005E60 DsrGetCurrentUserNgcProvisionStatus
21   14 000513C0 DsrGetCxhScenarioInfo
22   15 00006060 DsrGetDomainRegistrationData
23   16 00050720 DsrGetJoinInfo
24   17 00050920 DsrGetJoinInfoEx
25   18 000060E0 DsrGetPrtAuthorityInfo
26   19 00051750 DsrGetResourceAccount
27   1A 000510C0 DsrIsDeviceJoined
28   1B 00051110 DsrIsDeviceJoinedEx
29   1C 00051270 DsrIsWorkplaceJoined
30   1D 000512C0 DsrSaveDeviceTokenProperties
31   1E 00051340 DsrSaveWorkplaceTokenProperties
32   1F 00004D90 DsrWriteAutoJoinSvcAdminEvent
33   20 00004DF0 DsrWriteAutoJoinSvcDebugEvent
34   21 00004A10 DsrWriteAutoJoinSvcTriggerEvent
35   22 00005E30 FidoDeregisterKey
36   23 00005D80 FidoRegisterKey
37   24 000058E0 NgcDeregisterKey
38   25 00005920 NgcGetKeyId
39   26 000061C0 NgcGetLogonCertPolicy
40   27 00005A90 NgcGetStatistics
41   28 00006380 NgcIncrementPinRetryAttempts
42   29 00005EE0 NgcNeedProvision
43   2A 00006050 NgcNeedProvisionForAccount
44   2B 00005C30 NgcReadRegistryValue
45   2C 00005830 NgcRegisterKey
46   2D 00006400 NgcResetPinRetryAttempts
47   2E 00005AB0 NgcUpdateCertEnrollStatistics
48   2F 00005AA0 NgcUpdateStatistics

Información avanzada sobre funciones que tiene la dll dsreg.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\dsreg.dll

File Type: DLL

  Section contains the following exports for dsreg.dll

    00000000 characteristics
    6C824375 time date stamp
        0.00 version
           1 ordinal base
          48 number of functions
          48 number of names

    ordinal hint RVA      name

          1    0 00004210 DsrBeginDelegatedWorkplaceJoin
          2    1 00003C80 DsrBeginDeviceAndResourceAccountJoin
          3    2 00003770 DsrBeginDeviceJoin
          4    3 00004870 DsrBeginDeviceUnjoin
          5    4 000049D0 DsrBeginDeviceUpdate
          6    5 0002CFF0 DsrBeginDiscover
          7    6 000039D0 DsrBeginPreprovisionedDeviceJoin
          8    7 00004E50 DsrBeginRecovery
          9    8 00003F90 DsrBeginWorkplaceJoin
         10    9 000048F0 DsrBeginWorkplaceUnjoin
         11    A 000049F0 DsrBeginWorkplaceUpdate
         12    B 0006B920 DsrCLI
         13    C 00005E40 DsrCanCurrentUserProvisionNgcKey
         14    D 00005E50 DsrCanCurrentUserResetNgcKey
         15    E 000053C0 DsrEndRecovery
         16    F 000516F0 DsrFreeCxhScenarioInfo
         17   10 0002D600 DsrFreeDiscoveryMetadata
         18   11 000502D0 DsrFreeJoinInfo
         19   12 000503C0 DsrFreeJoinInfoEx
         20   13 00005E60 DsrGetCurrentUserNgcProvisionStatus
         21   14 000513C0 DsrGetCxhScenarioInfo
         22   15 00006060 DsrGetDomainRegistrationData
         23   16 00050720 DsrGetJoinInfo
         24   17 00050920 DsrGetJoinInfoEx
         25   18 000060E0 DsrGetPrtAuthorityInfo
         26   19 00051750 DsrGetResourceAccount
         27   1A 000510C0 DsrIsDeviceJoined
         28   1B 00051110 DsrIsDeviceJoinedEx
         29   1C 00051270 DsrIsWorkplaceJoined
         30   1D 000512C0 DsrSaveDeviceTokenProperties
         31   1E 00051340 DsrSaveWorkplaceTokenProperties
         32   1F 00004D90 DsrWriteAutoJoinSvcAdminEvent
         33   20 00004DF0 DsrWriteAutoJoinSvcDebugEvent
         34   21 00004A10 DsrWriteAutoJoinSvcTriggerEvent
         35   22 00005E30 FidoDeregisterKey
         36   23 00005D80 FidoRegisterKey
         37   24 000058E0 NgcDeregisterKey
         38   25 00005920 NgcGetKeyId
         39   26 000061C0 NgcGetLogonCertPolicy
         40   27 00005A90 NgcGetStatistics
         41   28 00006380 NgcIncrementPinRetryAttempts
         42   29 00005EE0 NgcNeedProvision
         43   2A 00006050 NgcNeedProvisionForAccount
         44   2B 00005C30 NgcReadRegistryValue
         45   2C 00005830 NgcRegisterKey
         46   2D 00006400 NgcResetPinRetryAttempts
         47   2E 00005AB0 NgcUpdateCertEnrollStatistics
         48   2F 00005AA0 NgcUpdateStatistics

  Summary

        6000 .data
        1000 .didat
        5000 .pdata
       69000 .rdata
        1000 .reloc
       16000 .rsrc
       A5000 .text

Integridad de la dll dsreg.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          44272B201A5DF8E4E9B8AF2812700D9070C71C512FF505AAE8DA9B410614A273       C:\Windows\System32\dsreg.dll                


Detalles sobre el fichero dll dsreg.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\dsreg.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : dsreg.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\dsreg.dll
                    InternalName:     dsreg.dll
                    OriginalFilename: dsreg.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Registro de dispositivos de usuarios de AD/AAD
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : dsreg
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-userdeviceregistration_31bf3856ad364e35_10.0.19041.610_none_f76cf2d20
                    34e7041\dsreg.dll}
LinkType          : HardLink
Name              : dsreg.dll
Length            : 1245280
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\dsreg.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:41:54
CreationTimeUtc   : 29/11/2020 10:41:54
LastAccessTime    : 03/12/2020 10:14:03
LastAccessTimeUtc : 03/12/2020 9:14:03
LastWriteTime     : 29/11/2020 11:41:54
LastWriteTimeUtc  : 29/11/2020 10:41:54
Attributes        : Archive



Procesos que utilizan la dll dsreg.dll


explorer
svchost
svchost
SystemSettings
YourPhone