1776999915260_318a73e8_termsrv.dll

v10.0.26100.8115 64-bit Windows NT Analyzed
Description
Remote Desktop Session Host Server Remote Connections Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2026-04-24 03:06
Views
159
SHA-256
6341c0f0c122ccf053c6f3111b10084c

Exported functions 2

ServiceMain #1 · 0x35cf0
SvchostPushServiceGlobals #2 · 0x365a0

Imported DLLs & functions 295

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800d8e48
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1800d8e60
IsDebuggerPresent 0x1800d8e58
OutputDebugStringA 0x1800d8e70
OutputDebugStringW 0x1800d8e68
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800d8e80
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800d8e90
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800d8ec0
RaiseException 0x1800d8eb0
SetLastError 0x1800d8ea8
SetUnhandledExceptionFilter 0x1800d8eb8
UnhandledExceptionFilter 0x1800d8ea0
api-ms-win-core-file-l1-1-0.dll 5
CompareFileTime 0x1800d8ed8
CreateDirectoryW 0x1800d8ef0
CreateFileW 0x1800d8ee8
GetFileAttributesExW 0x1800d8ed0
QueryDosDeviceW 0x1800d8ee0
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800d8f08
DuplicateHandle 0x1800d8f00
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800d8f28
HeapAlloc 0x1800d8f18
HeapFree 0x1800d8f20
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800d8f40
LocalFree 0x1800d8f38
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800d8f50
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800d8f60
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800d8f70
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
GetComputerNameW 0x1800d8f90
RegisterWaitForSingleObject 0x1800d8f80
UnregisterWait 0x1800d8f88
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
VerifyVersionInfoW 0x1800d8fa0
api-ms-win-core-kernel32-private-l1-1-0.dll 1
CheckElevationEnabled 0x1800d8fb0
api-ms-win-core-libraryloader-l1-2-0.dll 13
DisableThreadLibraryCalls 0x1800d8fc8
FindResourceExW 0x1800d8fd0
FreeLibrary 0x1800d8ff8
GetModuleFileNameA 0x1800d9008
GetModuleFileNameW 0x1800d8fd8
GetModuleHandleExA 0x1800d8ff0
GetModuleHandleExW 0x1800d9018
GetModuleHandleW 0x1800d9010
GetProcAddress 0x1800d9020
LoadLibraryExW 0x1800d9000
LoadResource 0x1800d8fc0
LoadStringW 0x1800d8fe8
SizeofResource 0x1800d8fe0
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x1800d9030
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800d9040
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800d9050
api-ms-win-core-processthreads-l1-1-0.dll 17
CreateProcessAsUserW 0x1800d9098
CreateProcessW 0x1800d9088
CreateThread 0x1800d9060
ExitThread 0x1800d9070
GetCurrentProcess 0x1800d90d8
GetCurrentProcessId 0x1800d90a8
GetCurrentThread 0x1800d9080
GetCurrentThreadId 0x1800d90d0
GetExitCodeThread 0x1800d9068
OpenProcessToken 0x1800d9090
OpenThreadToken 0x1800d90c8
ProcessIdToSessionId 0x1800d9078
TerminateProcess 0x1800d90a0
TlsAlloc 0x1800d90e0
TlsFree 0x1800d90b0
TlsGetValue 0x1800d90c0
TlsSetValue 0x1800d90b8
api-ms-win-core-processthreads-l1-1-1.dll 3
IsProcessorFeaturePresent 0x1800d90f8
OpenProcess 0x1800d90f0
SetProcessMitigationPolicy 0x1800d9100
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800d9110
api-ms-win-core-psapi-l1-1-0.dll 1
K32EnumProcessModules 0x1800d9120
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1800d9138
RegCreateKeyExW 0x1800d9148
RegDeleteValueW 0x1800d9170
RegEnumKeyExW 0x1800d9168
RegGetValueW 0x1800d9130
RegOpenKeyExW 0x1800d9150
RegQueryInfoKeyW 0x1800d9160
RegQueryValueExW 0x1800d9158
RegSetValueExW 0x1800d9140
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1800d9188
WideCharToMultiByte 0x1800d9180
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x1800d9198
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1800d91b0
lstrcmpW 0x1800d91a8
api-ms-win-core-synch-l1-1-0.dll 20
AcquireSRWLockExclusive 0x1800d91c0
CreateEventW 0x1800d91d0
CreateMutexExW 0x1800d9220
CreateSemaphoreExW 0x1800d91e0
DeleteCriticalSection 0x1800d91d8
EnterCriticalSection 0x1800d91f8
InitializeCriticalSection 0x1800d9228
InitializeCriticalSectionAndSpinCount 0x1800d9230
InitializeSRWLock 0x1800d9240
LeaveCriticalSection 0x1800d9210
OpenEventW 0x1800d9218
OpenSemaphoreW 0x1800d9258
ReleaseMutex 0x1800d9200
ReleaseSemaphore 0x1800d91e8
ReleaseSRWLockExclusive 0x1800d9208
ResetEvent 0x1800d9250
SetEvent 0x1800d91c8
WaitForMultipleObjectsEx 0x1800d9248
WaitForSingleObject 0x1800d91f0
WaitForSingleObjectEx 0x1800d9238
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800d9268
api-ms-win-core-synch-l1-2-1.dll 2
CreateSemaphoreW 0x1800d9278
WaitForMultipleObjects 0x1800d9280
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1800d92b0
GetSystemTime 0x1800d92a0
GetSystemTimeAsFileTime 0x1800d9290
GetTickCount 0x1800d92a8
GetTickCount64 0x1800d9298
GetVersionExW 0x1800d92b8
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x1800d92c8
api-ms-win-core-threadpool-l1-2-0.dll 12
CloseThreadpool 0x1800d92e8
CloseThreadpoolCleanupGroup 0x1800d92f8
CloseThreadpoolCleanupGroupMembers 0x1800d9300
CloseThreadpoolTimer 0x1800d92e0
CreateThreadpool 0x1800d9330
CreateThreadpoolCleanupGroup 0x1800d9308
CreateThreadpoolTimer 0x1800d92d8
SetThreadpoolThreadMaximum 0x1800d9318
SetThreadpoolThreadMinimum 0x1800d9310
SetThreadpoolTimer 0x1800d9320
TrySubmitThreadpoolCallback 0x1800d9328
WaitForThreadpoolTimerCallbacks 0x1800d92f0
api-ms-win-core-threadpool-legacy-l1-1-0.dll 6
CreateTimerQueue 0x1800d9360
CreateTimerQueueTimer 0x1800d9358
DeleteTimerQueueEx 0x1800d9368
DeleteTimerQueueTimer 0x1800d9340
QueueUserWorkItem 0x1800d9348
UnregisterWaitEx 0x1800d9350
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x1800d9378
api-ms-win-crt-private-l1-1-0.dll 45
__C_specific_handler 0x1800d94c0
__C_specific_handler_noexcept 0x1800d94e0
__current_exception 0x1800d9438
__current_exception_context 0x1800d9440
__CxxFrameHandler3 0x1800d9448
__CxxFrameHandler4 0x1800d94d0
__std_terminate 0x1800d94c8
_CxxThrowException 0x1800d9458
_o___std_exception_copy 0x1800d94b0
_o___std_exception_destroy 0x1800d94a8
_o___std_type_info_destroy_list 0x1800d94a0
_o___stdio_common_vsprintf 0x1800d9498
_o___stdio_common_vswprintf 0x1800d9490
_o___stdio_common_vswprintf_s 0x1800d9488
_o__callnewh 0x1800d9480
_o__cexit 0x1800d9478
_o__configure_narrow_argv 0x1800d9470
_o__crt_atexit 0x1800d9468
_o__errno 0x1800d9460
_o__execute_onexit_table 0x1800d9450
_o__initialize_narrow_environment 0x1800d9388
_o__initialize_onexit_table 0x1800d9390
_o__invalid_parameter_noinfo 0x1800d9398
_o__invalid_parameter_noinfo_noreturn 0x1800d93a0
_o__purecall 0x1800d93a8
_o__recalloc 0x1800d93b0
_o__register_onexit_function 0x1800d93b8
_o__resetstkoflw 0x1800d93c0
_o__seh_filter_dll 0x1800d93c8
_o__stricmp 0x1800d93d0
_o__wcsicmp 0x1800d93d8
_o__wcsnicmp 0x1800d93e0
_o_ceilf 0x1800d93f0
_o_free 0x1800d93f8
_o_iswspace 0x1800d9400
_o_malloc 0x1800d9408
_o_qsort 0x1800d9410
_o_terminate 0x1800d9418
_o_wcscpy_s 0x1800d9420
_o_wcsncpy_s 0x1800d9428
_o_wcstok_s 0x1800d9430
memcmp 0x1800d94e8
memcpy 0x1800d93e8
wcschr 0x1800d94b8
wcsrchr 0x1800d94d8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800d94f8
_initterm_e 0x1800d9500
api-ms-win-crt-string-l1-1-0.dll 1
memset 0x1800d9510
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x1800d9520
api-ms-win-eventing-provider-l1-1-0.dll 5
EventActivityIdControl 0x1800d9550
EventRegister 0x1800d9538
EventSetInformation 0x1800d9540
EventUnregister 0x1800d9548
EventWriteTransfer 0x1800d9530
api-ms-win-security-base-l1-1-0.dll 33
AccessCheck 0x1800d95d0
AccessCheckAndAuditAlarmW 0x1800d9578
AddAce 0x1800d95d8
AllocateAndInitializeSid 0x1800d9660
AllocateLocallyUniqueId 0x1800d9610
CheckTokenMembership 0x1800d9658
CopySid 0x1800d9600
CreateWellKnownSid 0x1800d9608
DuplicateToken 0x1800d9580
DuplicateTokenEx 0x1800d9590
EqualSid 0x1800d95f0
FreeSid 0x1800d9570
GetAce 0x1800d9628
GetAclInformation 0x1800d9630
GetFileSecurityW 0x1800d9620
GetLengthSid 0x1800d95e8
GetSecurityDescriptorControl 0x1800d9560
GetSecurityDescriptorDacl 0x1800d9638
GetSecurityDescriptorLength 0x1800d9618
GetSidSubAuthority 0x1800d95c0
GetSidSubAuthorityCount 0x1800d95b8
GetTokenInformation 0x1800d9598
ImpersonateLoggedOnUser 0x1800d95c8
InitializeAcl 0x1800d95a8
InitializeSecurityDescriptor 0x1800d9648
IsTokenRestricted 0x1800d95e0
IsValidSecurityDescriptor 0x1800d9568
IsValidSid 0x1800d95f8
MakeAbsoluteSD 0x1800d95b0
MakeSelfRelativeSD 0x1800d9588
MapGenericMask 0x1800d95a0
RevertToSelf 0x1800d9650
SetSecurityDescriptorDacl 0x1800d9640
api-ms-win-security-base-l1-2-2.dll 1
DeriveCapabilitySidsFromName 0x1800d9670
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupAccountSidW 0x1800d9680
KERNEL32.dll 1
OOBEComplete 0x1800d8d80
KERNELBASE.dll 1
WTSIsServerContainer 0x1800d8d90
msvcp_win.dll 1
?_Xlength_error@std@@YAXPEBD@Z 0x1800d9690
ntdll.dll 50
DbgPrint 0x1800d9810
EtwEventActivityIdControl 0x1800d9778
EtwEventRegister 0x1800d97f0
EtwEventUnregister 0x1800d97f8
EtwEventWriteFull 0x1800d97e8
EtwEventWriteTransfer 0x1800d9788
NtCreateFile 0x1800d9730
NtDuplicateToken 0x1800d9798
NtOpenProcess 0x1800d96e0
NtOpenProcessToken 0x1800d96e8
NtQueryInformationProcess 0x1800d97a8
NtQueryInformationToken 0x1800d96d8
NtQuerySystemInformation 0x1800d96a8
NtQuerySystemTime 0x1800d9780
NtQueryVirtualMemory 0x1800d96a0
RtlAcquireResourceExclusive 0x1800d97b0
RtlAcquireResourceShared 0x1800d9800
RtlAdjustPrivilege 0x1800d9740
RtlAllocateAndInitializeSid 0x1800d9820
RtlCaptureContext 0x1800d9710
RtlCaptureStackBackTrace 0x1800d96b0
RtlCompareMemory 0x1800d9720
RtlCopySecurityDescriptor 0x1800d9748
RtlCopySid 0x1800d96d0
RtlCreateUserSecurityObject 0x1800d9768
RtlDeleteElementGenericTable 0x1800d97b8
RtlDeleteResource 0x1800d97e0
RtlDeleteSecurityObject 0x1800d96f0
RtlEnumerateGenericTable 0x1800d9790
RtlEqualSid 0x1800d9818
RtlFreeSid 0x1800d96f8
RtlGetControlSecurityDescriptor 0x1800d9760
RtlGetCurrentServiceSessionId 0x1800d9758
RtlInitializeGenericTable 0x1800d97d0
RtlInitializeResource 0x1800d97d8
RtlInitString 0x1800d9728
RtlInitUnicodeString 0x1800d9738
RtlInsertElementGenericTable 0x1800d97c0
RtlLengthSid 0x1800d9770
RtlLookupElementGenericTable 0x1800d97a0
RtlLookupFunctionEntry 0x1800d9708
RtlNotifyFeatureUsage 0x1800d96b8
RtlNtStatusToDosError 0x1800d9808
RtlNumberGenericTableElements 0x1800d9750
RtlQueryElevationFlags 0x1800d96c0
RtlQueryFeatureConfiguration 0x1800d96c8
RtlReleaseResource 0x1800d97c8
RtlVerifyVersionInfo 0x1800d9828
RtlVirtualUnwind 0x1800d9700
VerSetConditionMask 0x1800d9718
RPCRT4.dll 20
I_RpcBindingInqLocalClientPID 0x1800d8de0
I_RpcBindingIsClientLocal 0x1800d8e28
I_RpcServerDisableExceptionFilter 0x1800d8dc8
NdrServerCall2 0x1800d8dc0
NdrServerCallAll 0x1800d8db8
RpcBindingToStringBindingW 0x1800d8e20
RpcImpersonateClient 0x1800d8df0
RpcRevertToSelf 0x1800d8de8
RpcServerInqCallAttributesW 0x1800d8e00
RpcServerInqDefaultPrincNameW 0x1800d8da0
RpcServerListen 0x1800d8e10
RpcServerRegisterAuthInfoW 0x1800d8da8
RpcServerRegisterIf3 0x1800d8db0
RpcServerRegisterIfEx 0x1800d8e08
RpcServerUnregisterIfEx 0x1800d8e18
RpcServerUseProtseqEpW 0x1800d8df8
RpcStringBindingParseW 0x1800d8e30
RpcStringFreeW 0x1800d8e38
UuidFromStringW 0x1800d8dd0
UuidToStringW 0x1800d8dd8