winsrv.dll

v10.0.19041.1 64-bit Windows NT Analyzed
Description
Multi-User Windows Server DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
61.5 KB
Uploaded
2025-12-01 07:44
Views
71
SHA-256
7f2a683f28877562409d810946ddca2f

Exported functions 4

SrvEndTask #1 · 0x1690
UserCreateCallbackThread #2 · 0x1800
UserHardError #3 · 0x1a30
UserServerDllInitialization #4 · 0x1010

Imported DLLs & functions 42

ApiSetQueryApiSetPresence 0x1800021b8
IsApiSetImplemented 0x1800021c8
DelayLoadFailureHook 0x1800021d8
ResolveDelayLoadedAPI 0x1800021e8
SetUnhandledExceptionFilter 0x1800021f8
UnhandledExceptionFilter 0x180002200
CloseHandle 0x180002210
GetProcessHeap 0x180002228
HeapAlloc 0x180002220
HeapFree 0x180002230
DisableThreadLibraryCalls 0x180002250
GetProcAddress 0x180002248
LoadLibraryExW 0x180002240
GetCurrentProcess 0x180002268
GetCurrentProcessId 0x180002278
GetCurrentThreadId 0x180002260
TerminateProcess 0x180002270
QueryPerformanceCounter 0x180002288
GetSystemTimeAsFileTime 0x1800022a0
GetTickCount 0x180002298
BaseGetProcessCrtlRoutine 0x180002180
CsrDereferenceProcess 0x180002190
CsrLockedReferenceProcess 0x180002198
CsrLockProcessByClientId 0x1800021a0
CsrUnlockProcess 0x1800021a8
DbgPrintEx 0x180002328
NtClose 0x1800022f0
NtOpenProcess 0x180002310
NtOpenProcessToken 0x1800022c8
NtQueryInformationProcess 0x180002318
NtQueryInformationToken 0x180002300
NtReadVirtualMemory 0x1800022f8
NtSetInformationThread 0x180002308
RtlAllocateHeap 0x180002330
RtlCaptureContext 0x1800022b8
RtlCreateSecurityDescriptor 0x1800022d0
RtlCreateTagHeap 0x1800022d8
RtlCreateUserThread 0x1800022e8
RtlFreeHeap 0x1800022e0
RtlLookupFunctionEntry 0x1800022c0
RtlSetDaclSecurityDescriptor 0x180002320
RtlVirtualUnwind 0x1800022b0