termsrv.dll

v10.0.19041.7663 64-bit Windows NT Analyzed
Description
Remote Desktop Session Host Server Remote Connections Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2026-08-12 06:41
Views
50
SHA-256
135d7aad5ffa6e5521705e1999092626

Exported functions 2

ServiceMain #1 · 0x38960
SvchostPushServiceGlobals #2 · 0x39960

Imported DLLs & functions 306

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800d07f0
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1800d0818
IsDebuggerPresent 0x1800d0808
OutputDebugStringA 0x1800d0810
OutputDebugStringW 0x1800d0800
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800d0828
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800d0838
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800d0868
RaiseException 0x1800d0848
SetLastError 0x1800d0858
SetUnhandledExceptionFilter 0x1800d0850
UnhandledExceptionFilter 0x1800d0860
api-ms-win-core-file-l1-1-0.dll 4
CompareFileTime 0x1800d0878
CreateDirectoryW 0x1800d0880
CreateFileW 0x1800d0890
QueryDosDeviceW 0x1800d0888
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800d08a0
DuplicateHandle 0x1800d08a8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800d08c0
HeapAlloc 0x1800d08c8
HeapFree 0x1800d08b8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800d08d8
LocalFree 0x1800d08e0
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800d08f0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800d0900
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
GetComputerNameW 0x1800d0918
RegisterWaitForSingleObject 0x1800d0910
UnregisterWait 0x1800d0920
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
VerifyVersionInfoW 0x1800d0930
api-ms-win-core-kernel32-private-l1-1-0.dll 1
CheckElevationEnabled 0x1800d0940
api-ms-win-core-libraryloader-l1-2-0.dll 12
DisableThreadLibraryCalls 0x1800d0988
FindResourceExW 0x1800d0950
FreeLibrary 0x1800d0990
GetModuleFileNameA 0x1800d0978
GetModuleFileNameW 0x1800d0960
GetModuleHandleExW 0x1800d09a8
GetModuleHandleW 0x1800d09a0
GetProcAddress 0x1800d0958
LoadLibraryExW 0x1800d0998
LoadResource 0x1800d0968
LoadStringW 0x1800d0970
SizeofResource 0x1800d0980
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x1800d09b8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800d09c8
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800d09d8
api-ms-win-core-processthreads-l1-1-0.dll 17
CreateProcessAsUserW 0x1800d0a58
CreateProcessW 0x1800d0a08
CreateThread 0x1800d0a48
ExitThread 0x1800d09e8
GetCurrentProcess 0x1800d0a68
GetCurrentProcessId 0x1800d0a00
GetCurrentThread 0x1800d0a30
GetCurrentThreadId 0x1800d0a38
GetExitCodeThread 0x1800d0a60
OpenProcessToken 0x1800d0a20
OpenThreadToken 0x1800d0a28
ProcessIdToSessionId 0x1800d0a50
TerminateProcess 0x1800d0a18
TlsAlloc 0x1800d0a10
TlsFree 0x1800d09f8
TlsGetValue 0x1800d0a40
TlsSetValue 0x1800d09f0
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x1800d0a78
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800d0a88
api-ms-win-core-psapi-l1-1-0.dll 1
K32EnumProcessModules 0x1800d0a98
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1800d0ac0
RegCreateKeyExW 0x1800d0ae8
RegDeleteValueW 0x1800d0ab0
RegEnumKeyExW 0x1800d0aa8
RegGetValueW 0x1800d0ad8
RegOpenKeyExW 0x1800d0ac8
RegQueryInfoKeyW 0x1800d0ab8
RegQueryValueExW 0x1800d0ad0
RegSetValueExW 0x1800d0ae0
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800d0af8
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x1800d0b08
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1800d0b18
lstrcmpW 0x1800d0b20
api-ms-win-core-synch-l1-1-0.dll 23
AcquireSRWLockExclusive 0x1800d0b70
AcquireSRWLockShared 0x1800d0ba8
CreateEventW 0x1800d0bd0
CreateMutexExW 0x1800d0bc8
CreateSemaphoreExW 0x1800d0bc0
DeleteCriticalSection 0x1800d0b78
EnterCriticalSection 0x1800d0b60
InitializeCriticalSection 0x1800d0be0
InitializeCriticalSectionAndSpinCount 0x1800d0b90
InitializeCriticalSectionEx 0x1800d0b68
InitializeSRWLock 0x1800d0b58
LeaveCriticalSection 0x1800d0bd8
OpenEventW 0x1800d0b38
OpenSemaphoreW 0x1800d0ba0
ReleaseMutex 0x1800d0b80
ReleaseSemaphore 0x1800d0b40
ReleaseSRWLockExclusive 0x1800d0b48
ReleaseSRWLockShared 0x1800d0b50
ResetEvent 0x1800d0b88
SetEvent 0x1800d0b30
WaitForMultipleObjectsEx 0x1800d0bb8
WaitForSingleObject 0x1800d0b98
WaitForSingleObjectEx 0x1800d0bb0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800d0bf0
api-ms-win-core-synch-l1-2-1.dll 2
CreateSemaphoreW 0x1800d0c00
WaitForMultipleObjects 0x1800d0c08
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1800d0c20
GetSystemTime 0x1800d0c28
GetSystemTimeAsFileTime 0x1800d0c38
GetTickCount 0x1800d0c18
GetTickCount64 0x1800d0c30
GetVersionExW 0x1800d0c40
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x1800d0c50
api-ms-win-core-threadpool-l1-2-0.dll 12
CloseThreadpool 0x1800d0ca0
CloseThreadpoolCleanupGroup 0x1800d0c68
CloseThreadpoolCleanupGroupMembers 0x1800d0c90
CloseThreadpoolTimer 0x1800d0cb0
CreateThreadpool 0x1800d0c88
CreateThreadpoolCleanupGroup 0x1800d0c70
CreateThreadpoolTimer 0x1800d0c60
SetThreadpoolThreadMaximum 0x1800d0c80
SetThreadpoolThreadMinimum 0x1800d0ca8
SetThreadpoolTimer 0x1800d0cb8
TrySubmitThreadpoolCallback 0x1800d0c98
WaitForThreadpoolTimerCallbacks 0x1800d0c78
api-ms-win-core-threadpool-legacy-l1-1-0.dll 6
CreateTimerQueue 0x1800d0ce0
CreateTimerQueueTimer 0x1800d0cf0
DeleteTimerQueueEx 0x1800d0cc8
DeleteTimerQueueTimer 0x1800d0ce8
QueueUserWorkItem 0x1800d0cd8
UnregisterWaitEx 0x1800d0cd0
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x1800d0d00
api-ms-win-devices-query-l1-1-0.dll 5
DevCloseObjectQuery 0x1800d0d30
DevCreateObjectQuery 0x1800d0d10
DevFindProperty 0x1800d0d18
DevFreeObjectProperties 0x1800d0d28
DevGetObjectProperties 0x1800d0d20
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x1800d0d40
api-ms-win-eventing-controller-l1-1-0.dll 3
ControlTraceW 0x1800d0d50
EnableTraceEx2 0x1800d0d60
StartTraceW 0x1800d0d58
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x1800d0d70
EventProviderEnabled 0x1800d0d90
EventRegister 0x1800d0d78
EventSetInformation 0x1800d0d80
EventUnregister 0x1800d0d88
EventWriteTransfer 0x1800d0d98
api-ms-win-security-base-l1-1-0.dll 28
AccessCheckAndAuditAlarmW 0x1800d0dc0
AddAce 0x1800d0dc8
AllocateAndInitializeSid 0x1800d0e28
AllocateLocallyUniqueId 0x1800d0e10
CheckTokenMembership 0x1800d0e78
CopySid 0x1800d0df8
CreateWellKnownSid 0x1800d0e18
DuplicateToken 0x1800d0e80
DuplicateTokenEx 0x1800d0db0
EqualSid 0x1800d0df0
FreeSid 0x1800d0da8
GetAce 0x1800d0de8
GetAclInformation 0x1800d0e40
GetFileSecurityW 0x1800d0dd0
GetLengthSid 0x1800d0e00
GetSecurityDescriptorControl 0x1800d0e68
GetSecurityDescriptorDacl 0x1800d0e60
GetSecurityDescriptorLength 0x1800d0e20
GetTokenInformation 0x1800d0e70
ImpersonateLoggedOnUser 0x1800d0de0
InitializeAcl 0x1800d0db8
InitializeSecurityDescriptor 0x1800d0e30
IsValidSecurityDescriptor 0x1800d0dd8
IsValidSid 0x1800d0e08
MakeAbsoluteSD 0x1800d0e48
MakeSelfRelativeSD 0x1800d0e50
RevertToSelf 0x1800d0e58
SetSecurityDescriptorDacl 0x1800d0e38
api-ms-win-security-base-l1-2-2.dll 1
DeriveCapabilitySidsFromName 0x1800d0e90
KERNEL32.dll 1
OOBEComplete 0x1800d06b8
KERNELBASE.dll 1
WTSIsServerContainer 0x1800d06c8
msvcrt.dll 49
__C_specific_handler 0x1800d0ea0
__CxxFrameHandler3 0x1800d0fc8
__dllonexit 0x1800d0f08
_amsg_exit 0x1800d0eb0
_callnewh 0x1800d0ff0
_CxxThrowException 0x1800d0fd0
_errno 0x1800d0f18
_initterm 0x1800d0ec0
_lock 0x1800d0ef0
_onexit 0x1800d0f10
_purecall 0x1800d0ea8
_resetstkoflw 0x1800d1000
_stricmp 0x1800d0f90
_unlock 0x1800d0f00
_vscwprintf 0x1800d0f98
_vsnprintf 0x1800d0f80
_vsnprintf_s 0x1800d0ec8
_vsnwprintf 0x1800d0eb8
_wcsicmp 0x1800d0f58
_wcsnicmp 0x1800d0f30
_XcptFilter 0x1800d0fb8
??_V@YAXPEAX@Z 0x1800d0fc0
??0exception@@QEAA@AEBQEBD@Z 0x1800d0fe8
??0exception@@QEAA@AEBQEBDH@Z 0x1800d0fe0
??0exception@@QEAA@AEBV0@@Z 0x1800d0f48
??0exception@@QEAA@XZ 0x1800d0f38
??1exception@@UEAA@XZ 0x1800d0f40
??1type_info@@UEAA@XZ 0x1800d0ee0
??3@YAXPEAX@Z 0x1800d0ff8
?terminate@@YAXXZ 0x1800d0ed8
?what@exception@@UEBAPEBDXZ 0x1800d0fd8
free 0x1800d0f78
iswspace 0x1800d0fa8
malloc 0x1800d0f70
memcmp 0x1800d0f88
memcpy 0x1800d0fb0
memcpy_s 0x1800d1010
memmove 0x1800d0ed0
memmove_s 0x1800d0f50
memset 0x1800d1020
qsort 0x1800d0ef8
realloc 0x1800d0f28
swprintf_s 0x1800d1008
toupper 0x1800d0ee8
wcschr 0x1800d0fa0
wcscpy_s 0x1800d1018
wcsncpy_s 0x1800d0f68
wcsrchr 0x1800d0f20
wcstok_s 0x1800d0f60
ntdll.dll 50
DbgPrint 0x1800d1098
EtwEventActivityIdControl 0x1800d1128
EtwEventRegister 0x1800d11a8
EtwEventUnregister 0x1800d11b0
EtwEventWriteFull 0x1800d1198
EtwEventWriteTransfer 0x1800d1158
NtCreateFile 0x1800d1108
NtDuplicateToken 0x1800d1070
NtOpenProcess 0x1800d1030
NtOpenProcessToken 0x1800d1038
NtQueryInformationProcess 0x1800d1060
NtQueryInformationToken 0x1800d1080
NtQuerySystemInformation 0x1800d10b8
NtQuerySystemTime 0x1800d1150
NtQueryVirtualMemory 0x1800d10c0
RtlAcquireResourceExclusive 0x1800d1078
RtlAcquireResourceShared 0x1800d1088
RtlAdjustPrivilege 0x1800d1118
RtlAllocateAndInitializeSid 0x1800d11a0
RtlAreBitsSet 0x1800d1138
RtlCaptureContext 0x1800d10e8
RtlCaptureStackBackTrace 0x1800d10b0
RtlClearBits 0x1800d1130
RtlCompareMemory 0x1800d10f8
RtlCopySecurityDescriptor 0x1800d1048
RtlCopySid 0x1800d11b8
RtlCreateUserSecurityObject 0x1800d1058
RtlDeleteElementGenericTable 0x1800d1170
RtlDeleteResource 0x1800d1190
RtlDeleteSecurityObject 0x1800d1040
RtlEnumerateGenericTable 0x1800d1160
RtlEqualSid 0x1800d10a0
RtlFindClearBitsAndSet 0x1800d1140
RtlFreeSid 0x1800d10c8
RtlGetControlSecurityDescriptor 0x1800d1050
RtlInitializeBitMap 0x1800d1148
RtlInitializeGenericTable 0x1800d1180
RtlInitializeResource 0x1800d1188
RtlInitString 0x1800d1100
RtlInitUnicodeString 0x1800d1110
RtlInsertElementGenericTable 0x1800d1178
RtlLengthSid 0x1800d1068
RtlLookupElementGenericTable 0x1800d1168
RtlLookupFunctionEntry 0x1800d10e0
RtlNtStatusToDosError 0x1800d1090
RtlNumberGenericTableElements 0x1800d1120
RtlReleaseResource 0x1800d10d0
RtlVerifyVersionInfo 0x1800d10a8
RtlVirtualUnwind 0x1800d10d8
VerSetConditionMask 0x1800d10f0
RPCRT4.dll 19
I_RpcBindingInqLocalClientPID 0x1800d0740
I_RpcBindingIsClientLocal 0x1800d0758
NdrServerCall2 0x1800d0718
NdrServerCallAll 0x1800d0710
RpcBindingToStringBindingW 0x1800d06f0
RpcImpersonateClient 0x1800d0720
RpcRevertToSelf 0x1800d0728
RpcServerInqCallAttributesW 0x1800d0708
RpcServerInqDefaultPrincNameW 0x1800d0738
RpcServerListen 0x1800d0730
RpcServerRegisterAuthInfoW 0x1800d0748
RpcServerRegisterIf3 0x1800d0750
RpcServerRegisterIfEx 0x1800d06e0
RpcServerUnregisterIfEx 0x1800d06e8
RpcServerUseProtseqEpW 0x1800d06d8
RpcStringBindingParseW 0x1800d06f8
RpcStringFreeW 0x1800d0700
UuidFromStringW 0x1800d0760
UuidToStringW 0x1800d0768
UMPDC.dll 7
PdcTaskClientRegister 0x1800d0788
PdcTaskClientRequest 0x1800d0790
PdcTaskClientUnregister 0x1800d07a8
Pdcv2ActivationClientActivate 0x1800d0780
Pdcv2ActivationClientDeactivate 0x1800d0778
Pdcv2ActivationClientRegister 0x1800d07a0
Pdcv2ActivationClientUnregister 0x1800d0798
USER32.dll 1
UnregisterDeviceNotification 0x1800d07b8
WS2_32.dll 4
GetNameInfoW 0x1800d07e0
WSACleanup 0x1800d07d8
WSAGetLastError 0x1800d07d0
WSAStartup 0x1800d07c8