TSMSISrv.dll

Description: Windows Installer Coordinator for Remote Desktop Session Host Server

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: e696693e4fd29cb0e534d775621f595d

File Size: 117.0 KB

Uploaded At: Dec. 1, 2025, 8:47 a.m.

Views: 18

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x6d40)
DllGetClassObject (Ordinal: 2, Address: 0x6d70)
DllRegisterServer (Ordinal: 3, Address: 0x6d80)
DllUnregisterServer (Ordinal: 4, Address: 0x6de0)
OnSessionChange (Ordinal: 5, Address: 0x6ed0)
Refresh (Ordinal: 6, Address: 0x6ec0)
StartComponent (Ordinal: 7, Address: 0x6e50)
StopComponent (Ordinal: 8, Address: 0x6e60)

Imported DLLs & Functions

ADVAPI32.dll

EnableTrace (Address: 0x1001d000)
QueryTraceW (Address: 0x1001d004)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x1001d050)
CoDisconnectContext (Address: 0x1001d06c)
CoImpersonateClient (Address: 0x1001d078)
CoInitializeEx (Address: 0x1001d064)
CoRegisterClassObject (Address: 0x1001d074)
CoRevertToSelf (Address: 0x1001d058)
CoRevokeClassObject (Address: 0x1001d070)
CoTaskMemAlloc (Address: 0x1001d05c)
CoTaskMemFree (Address: 0x1001d07c)
CoTaskMemRealloc (Address: 0x1001d060)
CoUninitialize (Address: 0x1001d068)
StringFromGUID2 (Address: 0x1001d054)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1001d08c)
IsDebuggerPresent (Address: 0x1001d088)
OutputDebugStringA (Address: 0x1001d084)
OutputDebugStringW (Address: 0x1001d090)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001d098)
RaiseException (Address: 0x1001d0a0)
SetLastError (Address: 0x1001d0a8)
SetUnhandledExceptionFilter (Address: 0x1001d0a4)
UnhandledExceptionFilter (Address: 0x1001d09c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1001d0b4)
DuplicateHandle (Address: 0x1001d0b0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001d0c4)
HeapAlloc (Address: 0x1001d0c0)
HeapFree (Address: 0x1001d0bc)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1001d0cc)
LocalFree (Address: 0x1001d0d0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1001d0f8)
FindResourceExW (Address: 0x1001d0dc)
FreeLibrary (Address: 0x1001d0fc)
GetModuleFileNameA (Address: 0x1001d0f4)
GetModuleFileNameW (Address: 0x1001d0d8)
GetModuleHandleExW (Address: 0x1001d0ec)
GetModuleHandleW (Address: 0x1001d0e0)
GetProcAddress (Address: 0x1001d100)
LoadLibraryExW (Address: 0x1001d0e4)
LoadResource (Address: 0x1001d0e8)
SizeofResource (Address: 0x1001d0f0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1001d108)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1001d134)
CreateThread (Address: 0x1001d118)
GetCurrentProcess (Address: 0x1001d128)
GetCurrentProcessId (Address: 0x1001d120)
GetCurrentThread (Address: 0x1001d114)
GetCurrentThreadId (Address: 0x1001d11c)
GetProcessId (Address: 0x1001d124)
OpenThreadToken (Address: 0x1001d110)
ProcessIdToSessionId (Address: 0x1001d12c)
TerminateProcess (Address: 0x1001d130)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001d13c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1001d15c)
RegCreateKeyExW (Address: 0x1001d144)
RegDeleteValueW (Address: 0x1001d148)
RegEnumKeyExW (Address: 0x1001d158)
RegOpenKeyExW (Address: 0x1001d154)
RegQueryInfoKeyW (Address: 0x1001d160)
RegQueryValueExW (Address: 0x1001d150)
RegSetValueExW (Address: 0x1001d14c)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1001d168)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1001d170)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1001d178)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1001d1a4)
AcquireSRWLockShared (Address: 0x1001d1a0)
CreateEventW (Address: 0x1001d1bc)
CreateMutexExW (Address: 0x1001d180)
CreateSemaphoreExW (Address: 0x1001d19c)
DeleteCriticalSection (Address: 0x1001d1c8)
EnterCriticalSection (Address: 0x1001d1b0)
InitializeCriticalSection (Address: 0x1001d1b8)
InitializeCriticalSectionAndSpinCount (Address: 0x1001d1a8)
InitializeCriticalSectionEx (Address: 0x1001d190)
LeaveCriticalSection (Address: 0x1001d1b4)
OpenSemaphoreW (Address: 0x1001d1cc)
ReleaseMutex (Address: 0x1001d18c)
ReleaseSemaphore (Address: 0x1001d198)
ReleaseSRWLockExclusive (Address: 0x1001d184)
ReleaseSRWLockShared (Address: 0x1001d188)
ResetEvent (Address: 0x1001d194)
SetEvent (Address: 0x1001d1c0)
WaitForSingleObject (Address: 0x1001d1c4)
WaitForSingleObjectEx (Address: 0x1001d1ac)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1001d1d4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1001d1e4)
GetSystemTimeAsFileTime (Address: 0x1001d1e0)
GetTickCount (Address: 0x1001d1dc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1001d1f0)
CreateThreadpoolTimer (Address: 0x1001d1ec)
SetThreadpoolTimer (Address: 0x1001d1f8)
WaitForThreadpoolTimerCallbacks (Address: 0x1001d1f4)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x1001d200)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1001d208)
StartTraceW (Address: 0x1001d20c)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1001d218)
EventSetInformation (Address: 0x1001d21c)
EventUnregister (Address: 0x1001d220)
EventWriteTransfer (Address: 0x1001d214)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x1001d228)
CheckTokenMembership (Address: 0x1001d234)
CreateWellKnownSid (Address: 0x1001d230)
GetTokenInformation (Address: 0x1001d22c)

api-ms-win-security-lsalookup-l1-1-0.dll

LookupAccountSidLocalW (Address: 0x1001d23c)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x1001d244)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1001d24c)
OpenSCManagerW (Address: 0x1001d254)
OpenServiceW (Address: 0x1001d250)

api-ms-win-service-winsvc-l1-1-0.dll

ControlService (Address: 0x1001d260)
QueryServiceStatus (Address: 0x1001d25c)

KERNEL32.dll

ChangeTimerQueueTimer (Address: 0x1001d014)
CreateTimerQueue (Address: 0x1001d01c)
CreateTimerQueueTimer (Address: 0x1001d010)
DeleteTimerQueueEx (Address: 0x1001d020)
DeleteTimerQueueTimer (Address: 0x1001d00c)
UnregisterWaitEx (Address: 0x1001d018)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001d2ec)
__dllonexit (Address: 0x1001d288)
_amsg_exit (Address: 0x1001d2b8)
_callnewh (Address: 0x1001d2c0)
_CxxThrowException (Address: 0x1001d27c)
_errno (Address: 0x1001d2a0)
_except_handler4_common (Address: 0x1001d2bc)
_initterm (Address: 0x1001d2f0)
_lock (Address: 0x1001d294)
_onexit (Address: 0x1001d274)
_purecall (Address: 0x1001d2c8)
_unlock (Address: 0x1001d290)
_vsnprintf (Address: 0x1001d2b0)
_vsnwprintf (Address: 0x1001d2b4)
_XcptFilter (Address: 0x1001d298)
??_V@YAXPAX@Z (Address: 0x1001d2e8)
??0exception@@QAE@ABQBD@Z (Address: 0x1001d2a8)
??0exception@@QAE@ABQBDH@Z (Address: 0x1001d2a4)
??0exception@@QAE@ABV0@@Z (Address: 0x1001d28c)
??1exception@@UAE@XZ (Address: 0x1001d268)
??1type_info@@UAE@XZ (Address: 0x1001d2ac)
??3@YAXPAX@Z (Address: 0x1001d278)
?terminate@@YAXXZ (Address: 0x1001d2d0)
?what@exception@@UBEPBDXZ (Address: 0x1001d270)
free (Address: 0x1001d2dc)
malloc (Address: 0x1001d2e0)
memcmp (Address: 0x1001d26c)
memcpy (Address: 0x1001d280)
memcpy_s (Address: 0x1001d2d8)
memmove (Address: 0x1001d284)
memmove_s (Address: 0x1001d2c4)
memset (Address: 0x1001d2f4)
realloc (Address: 0x1001d29c)
wcscat_s (Address: 0x1001d2cc)
wcscpy_s (Address: 0x1001d2d4)
wcsncpy_s (Address: 0x1001d2e4)

ntdll.dll

DbgPrint (Address: 0x1001d304)
EtwEventRegister (Address: 0x1001d34c)
EtwEventUnregister (Address: 0x1001d350)
EtwEventWriteFull (Address: 0x1001d324)
NtQuerySystemInformation (Address: 0x1001d318)
NtQuerySystemTime (Address: 0x1001d348)
RtlAcquireResourceExclusive (Address: 0x1001d30c)
RtlAcquireResourceShared (Address: 0x1001d300)
RtlAllocateAndInitializeSid (Address: 0x1001d354)
RtlCaptureStackBackTrace (Address: 0x1001d314)
RtlDeleteElementGenericTable (Address: 0x1001d328)
RtlDeleteResource (Address: 0x1001d344)
RtlEnumerateGenericTable (Address: 0x1001d330)
RtlFreeSid (Address: 0x1001d320)
RtlInitializeGenericTable (Address: 0x1001d32c)
RtlInitializeResource (Address: 0x1001d340)
RtlInsertElementGenericTable (Address: 0x1001d334)
RtlLookupElementGenericTable (Address: 0x1001d338)
RtlNtStatusToDosError (Address: 0x1001d31c)
RtlNumberGenericTableElements (Address: 0x1001d33c)
RtlReleaseResource (Address: 0x1001d2fc)
RtlVerifyVersionInfo (Address: 0x1001d310)
VerSetConditionMask (Address: 0x1001d308)

OLEAUT32.dll

LoadTypeLib (Address: 0x1001d030)
RegisterTypeLib (Address: 0x1001d02c)
SysAllocString (Address: 0x1001d028)
SysFreeString (Address: 0x1001d038)
SysStringLen (Address: 0x1001d040)
UnRegisterTypeLib (Address: 0x1001d034)
VarUI4FromStr (Address: 0x1001d03c)

RPCRT4.dll

I_RpcOpenClientProcess (Address: 0x1001d048)