termsrv 2.dll

v10.0.26100.8328 64-bit Windows NT Analyzed
Description
Remote Desktop Session Host Server Remote Connections Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2026-05-15 09:44
Views
84
SHA-256
d6c1f5638a0f11de072e8b03c6328555

Exported functions 2

ServiceMain #1 · 0x35d00
SvchostPushServiceGlobals #2 · 0x365b0

Imported DLLs & functions 295

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800d7e08
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1800d7e20
IsDebuggerPresent 0x1800d7e18
OutputDebugStringA 0x1800d7e30
OutputDebugStringW 0x1800d7e28
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800d7e40
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800d7e50
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800d7e80
RaiseException 0x1800d7e70
SetLastError 0x1800d7e68
SetUnhandledExceptionFilter 0x1800d7e78
UnhandledExceptionFilter 0x1800d7e60
api-ms-win-core-file-l1-1-0.dll 5
CompareFileTime 0x1800d7e98
CreateDirectoryW 0x1800d7eb0
CreateFileW 0x1800d7ea8
GetFileAttributesExW 0x1800d7e90
QueryDosDeviceW 0x1800d7ea0
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800d7ec8
DuplicateHandle 0x1800d7ec0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800d7ee8
HeapAlloc 0x1800d7ed8
HeapFree 0x1800d7ee0
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800d7f00
LocalFree 0x1800d7ef8
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800d7f10
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800d7f20
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800d7f30
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
GetComputerNameW 0x1800d7f50
RegisterWaitForSingleObject 0x1800d7f40
UnregisterWait 0x1800d7f48
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
VerifyVersionInfoW 0x1800d7f60
api-ms-win-core-kernel32-private-l1-1-0.dll 1
CheckElevationEnabled 0x1800d7f70
api-ms-win-core-libraryloader-l1-2-0.dll 13
DisableThreadLibraryCalls 0x1800d7f88
FindResourceExW 0x1800d7f90
FreeLibrary 0x1800d7fb8
GetModuleFileNameA 0x1800d7fc8
GetModuleFileNameW 0x1800d7f98
GetModuleHandleExA 0x1800d7fb0
GetModuleHandleExW 0x1800d7fd8
GetModuleHandleW 0x1800d7fd0
GetProcAddress 0x1800d7fe0
LoadLibraryExW 0x1800d7fc0
LoadResource 0x1800d7f80
LoadStringW 0x1800d7fa8
SizeofResource 0x1800d7fa0
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x1800d7ff0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800d8000
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800d8010
api-ms-win-core-processthreads-l1-1-0.dll 17
CreateProcessAsUserW 0x1800d8058
CreateProcessW 0x1800d8048
CreateThread 0x1800d8020
ExitThread 0x1800d8030
GetCurrentProcess 0x1800d8098
GetCurrentProcessId 0x1800d8068
GetCurrentThread 0x1800d8040
GetCurrentThreadId 0x1800d8090
GetExitCodeThread 0x1800d8028
OpenProcessToken 0x1800d8050
OpenThreadToken 0x1800d8088
ProcessIdToSessionId 0x1800d8038
TerminateProcess 0x1800d8060
TlsAlloc 0x1800d80a0
TlsFree 0x1800d8070
TlsGetValue 0x1800d8080
TlsSetValue 0x1800d8078
api-ms-win-core-processthreads-l1-1-1.dll 3
IsProcessorFeaturePresent 0x1800d80b8
OpenProcess 0x1800d80b0
SetProcessMitigationPolicy 0x1800d80c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800d80d0
api-ms-win-core-psapi-l1-1-0.dll 1
K32EnumProcessModules 0x1800d80e0
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1800d80f8
RegCreateKeyExW 0x1800d8108
RegDeleteValueW 0x1800d8130
RegEnumKeyExW 0x1800d8128
RegGetValueW 0x1800d80f0
RegOpenKeyExW 0x1800d8110
RegQueryInfoKeyW 0x1800d8120
RegQueryValueExW 0x1800d8118
RegSetValueExW 0x1800d8100
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1800d8148
WideCharToMultiByte 0x1800d8140
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x1800d8158
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1800d8170
lstrcmpW 0x1800d8168
api-ms-win-core-synch-l1-1-0.dll 20
AcquireSRWLockExclusive 0x1800d8180
CreateEventW 0x1800d8190
CreateMutexExW 0x1800d81e0
CreateSemaphoreExW 0x1800d81a0
DeleteCriticalSection 0x1800d8198
EnterCriticalSection 0x1800d81b8
InitializeCriticalSection 0x1800d81e8
InitializeCriticalSectionAndSpinCount 0x1800d81f0
InitializeSRWLock 0x1800d8200
LeaveCriticalSection 0x1800d81d0
OpenEventW 0x1800d81d8
OpenSemaphoreW 0x1800d8218
ReleaseMutex 0x1800d81c0
ReleaseSemaphore 0x1800d81a8
ReleaseSRWLockExclusive 0x1800d81c8
ResetEvent 0x1800d8210
SetEvent 0x1800d8188
WaitForMultipleObjectsEx 0x1800d8208
WaitForSingleObject 0x1800d81b0
WaitForSingleObjectEx 0x1800d81f8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800d8228
api-ms-win-core-synch-l1-2-1.dll 2
CreateSemaphoreW 0x1800d8238
WaitForMultipleObjects 0x1800d8240
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1800d8270
GetSystemTime 0x1800d8260
GetSystemTimeAsFileTime 0x1800d8250
GetTickCount 0x1800d8268
GetTickCount64 0x1800d8258
GetVersionExW 0x1800d8278
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x1800d8288
api-ms-win-core-threadpool-l1-2-0.dll 12
CloseThreadpool 0x1800d82a8
CloseThreadpoolCleanupGroup 0x1800d82b8
CloseThreadpoolCleanupGroupMembers 0x1800d82c0
CloseThreadpoolTimer 0x1800d82a0
CreateThreadpool 0x1800d82f0
CreateThreadpoolCleanupGroup 0x1800d82c8
CreateThreadpoolTimer 0x1800d8298
SetThreadpoolThreadMaximum 0x1800d82d8
SetThreadpoolThreadMinimum 0x1800d82d0
SetThreadpoolTimer 0x1800d82e0
TrySubmitThreadpoolCallback 0x1800d82e8
WaitForThreadpoolTimerCallbacks 0x1800d82b0
api-ms-win-core-threadpool-legacy-l1-1-0.dll 6
CreateTimerQueue 0x1800d8320
CreateTimerQueueTimer 0x1800d8318
DeleteTimerQueueEx 0x1800d8328
DeleteTimerQueueTimer 0x1800d8300
QueueUserWorkItem 0x1800d8308
UnregisterWaitEx 0x1800d8310
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x1800d8338
api-ms-win-crt-private-l1-1-0.dll 45
__C_specific_handler 0x1800d8480
__C_specific_handler_noexcept 0x1800d84a0
__current_exception 0x1800d83f8
__current_exception_context 0x1800d8400
__CxxFrameHandler3 0x1800d8408
__CxxFrameHandler4 0x1800d8490
__std_terminate 0x1800d8488
_CxxThrowException 0x1800d8418
_o___std_exception_copy 0x1800d8470
_o___std_exception_destroy 0x1800d8468
_o___std_type_info_destroy_list 0x1800d8460
_o___stdio_common_vsprintf 0x1800d8458
_o___stdio_common_vswprintf 0x1800d8450
_o___stdio_common_vswprintf_s 0x1800d8448
_o__callnewh 0x1800d8440
_o__cexit 0x1800d8438
_o__configure_narrow_argv 0x1800d8430
_o__crt_atexit 0x1800d8428
_o__errno 0x1800d8420
_o__execute_onexit_table 0x1800d8410
_o__initialize_narrow_environment 0x1800d8348
_o__initialize_onexit_table 0x1800d8350
_o__invalid_parameter_noinfo 0x1800d8358
_o__invalid_parameter_noinfo_noreturn 0x1800d8360
_o__purecall 0x1800d8368
_o__recalloc 0x1800d8370
_o__register_onexit_function 0x1800d8378
_o__resetstkoflw 0x1800d8380
_o__seh_filter_dll 0x1800d8388
_o__stricmp 0x1800d8390
_o__wcsicmp 0x1800d8398
_o__wcsnicmp 0x1800d83a0
_o_ceilf 0x1800d83b0
_o_free 0x1800d83b8
_o_iswspace 0x1800d83c0
_o_malloc 0x1800d83c8
_o_qsort 0x1800d83d0
_o_terminate 0x1800d83d8
_o_wcscpy_s 0x1800d83e0
_o_wcsncpy_s 0x1800d83e8
_o_wcstok_s 0x1800d83f0
memcmp 0x1800d84a8
memcpy 0x1800d83a8
wcschr 0x1800d8478
wcsrchr 0x1800d8498
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800d84b8
_initterm_e 0x1800d84c0
api-ms-win-crt-string-l1-1-0.dll 1
memset 0x1800d84d0
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x1800d84e0
api-ms-win-eventing-provider-l1-1-0.dll 5
EventActivityIdControl 0x1800d8510
EventRegister 0x1800d84f8
EventSetInformation 0x1800d8500
EventUnregister 0x1800d8508
EventWriteTransfer 0x1800d84f0
api-ms-win-security-base-l1-1-0.dll 33
AccessCheck 0x1800d8590
AccessCheckAndAuditAlarmW 0x1800d8538
AddAce 0x1800d8598
AllocateAndInitializeSid 0x1800d8620
AllocateLocallyUniqueId 0x1800d85d0
CheckTokenMembership 0x1800d8618
CopySid 0x1800d85c0
CreateWellKnownSid 0x1800d85c8
DuplicateToken 0x1800d8540
DuplicateTokenEx 0x1800d8550
EqualSid 0x1800d85b0
FreeSid 0x1800d8530
GetAce 0x1800d85e8
GetAclInformation 0x1800d85f0
GetFileSecurityW 0x1800d85e0
GetLengthSid 0x1800d85a8
GetSecurityDescriptorControl 0x1800d8520
GetSecurityDescriptorDacl 0x1800d85f8
GetSecurityDescriptorLength 0x1800d85d8
GetSidSubAuthority 0x1800d8580
GetSidSubAuthorityCount 0x1800d8578
GetTokenInformation 0x1800d8558
ImpersonateLoggedOnUser 0x1800d8588
InitializeAcl 0x1800d8568
InitializeSecurityDescriptor 0x1800d8608
IsTokenRestricted 0x1800d85a0
IsValidSecurityDescriptor 0x1800d8528
IsValidSid 0x1800d85b8
MakeAbsoluteSD 0x1800d8570
MakeSelfRelativeSD 0x1800d8548
MapGenericMask 0x1800d8560
RevertToSelf 0x1800d8610
SetSecurityDescriptorDacl 0x1800d8600
api-ms-win-security-base-l1-2-2.dll 1
DeriveCapabilitySidsFromName 0x1800d8630
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupAccountSidW 0x1800d8640
KERNEL32.dll 1
OOBEComplete 0x1800d7d40
KERNELBASE.dll 1
WTSIsServerContainer 0x1800d7d50
msvcp_win.dll 1
?_Xlength_error@std@@YAXPEBD@Z 0x1800d8650
ntdll.dll 50
DbgPrint 0x1800d87d0
EtwEventActivityIdControl 0x1800d8738
EtwEventRegister 0x1800d87b0
EtwEventUnregister 0x1800d87b8
EtwEventWriteFull 0x1800d87a8
EtwEventWriteTransfer 0x1800d8748
NtCreateFile 0x1800d86f0
NtDuplicateToken 0x1800d8758
NtOpenProcess 0x1800d86a0
NtOpenProcessToken 0x1800d86a8
NtQueryInformationProcess 0x1800d8768
NtQueryInformationToken 0x1800d8698
NtQuerySystemInformation 0x1800d8668
NtQuerySystemTime 0x1800d8740
NtQueryVirtualMemory 0x1800d8660
RtlAcquireResourceExclusive 0x1800d8770
RtlAcquireResourceShared 0x1800d87c0
RtlAdjustPrivilege 0x1800d8700
RtlAllocateAndInitializeSid 0x1800d87e0
RtlCaptureContext 0x1800d86d0
RtlCaptureStackBackTrace 0x1800d8670
RtlCompareMemory 0x1800d86e0
RtlCopySecurityDescriptor 0x1800d8708
RtlCopySid 0x1800d8690
RtlCreateUserSecurityObject 0x1800d8728
RtlDeleteElementGenericTable 0x1800d8778
RtlDeleteResource 0x1800d87a0
RtlDeleteSecurityObject 0x1800d86b0
RtlEnumerateGenericTable 0x1800d8750
RtlEqualSid 0x1800d87d8
RtlFreeSid 0x1800d86b8
RtlGetControlSecurityDescriptor 0x1800d8720
RtlGetCurrentServiceSessionId 0x1800d8718
RtlInitializeGenericTable 0x1800d8790
RtlInitializeResource 0x1800d8798
RtlInitString 0x1800d86e8
RtlInitUnicodeString 0x1800d86f8
RtlInsertElementGenericTable 0x1800d8780
RtlLengthSid 0x1800d8730
RtlLookupElementGenericTable 0x1800d8760
RtlLookupFunctionEntry 0x1800d86c8
RtlNotifyFeatureUsage 0x1800d8678
RtlNtStatusToDosError 0x1800d87c8
RtlNumberGenericTableElements 0x1800d8710
RtlQueryElevationFlags 0x1800d8680
RtlQueryFeatureConfiguration 0x1800d8688
RtlReleaseResource 0x1800d8788
RtlVerifyVersionInfo 0x1800d87e8
RtlVirtualUnwind 0x1800d86c0
VerSetConditionMask 0x1800d86d8
RPCRT4.dll 20
I_RpcBindingInqLocalClientPID 0x1800d7da0
I_RpcBindingIsClientLocal 0x1800d7de8
I_RpcServerDisableExceptionFilter 0x1800d7d88
NdrServerCall2 0x1800d7d80
NdrServerCallAll 0x1800d7d78
RpcBindingToStringBindingW 0x1800d7de0
RpcImpersonateClient 0x1800d7db0
RpcRevertToSelf 0x1800d7da8
RpcServerInqCallAttributesW 0x1800d7dc0
RpcServerInqDefaultPrincNameW 0x1800d7d60
RpcServerListen 0x1800d7dd0
RpcServerRegisterAuthInfoW 0x1800d7d68
RpcServerRegisterIf3 0x1800d7d70
RpcServerRegisterIfEx 0x1800d7dc8
RpcServerUnregisterIfEx 0x1800d7dd8
RpcServerUseProtseqEpW 0x1800d7db8
RpcStringBindingParseW 0x1800d7df0
RpcStringFreeW 0x1800d7df8
UuidFromStringW 0x1800d7d90
UuidToStringW 0x1800d7d98