tscfgwmi.dll

Description: Remote Desktop Session Host Server Configuration WMI provider

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5965

Architecture: 64-bit

Operating System: Windows NT

SHA256: a7e106fd57282f6a6637402de29272da

File Size: 277.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1ca0)
  • DllGetClassObject (Ordinal: 2, Address: 0x1630)
  • DllRegisterServer (Ordinal: 3, Address: 0x1fc0)
  • DllUnregisterServer (Ordinal: 4, Address: 0x21c0)

Imported DLLs & Functions

ADVAPI32.dll
  • CheckTokenMembership (Address: 0x180031e60)
  • ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x180031e40)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180031e38)
  • CreateWellKnownSid (Address: 0x180031e30)
  • CryptReleaseContext (Address: 0x180031e50)
  • EqualSid (Address: 0x180031de8)
  • LookupAccountNameW (Address: 0x180031e48)
  • RegCloseKey (Address: 0x180031e10)
  • RegCreateKeyExW (Address: 0x180031e20)
  • RegCreateKeyW (Address: 0x180031e08)
  • RegDeleteKeyW (Address: 0x180031df8)
  • RegDeleteValueW (Address: 0x180031e70)
  • RegEnumKeyExW (Address: 0x180031e68)
  • RegOpenKeyExW (Address: 0x180031df0)
  • RegOpenKeyW (Address: 0x180031e00)
  • RegQueryValueExW (Address: 0x180031e28)
  • RegSetValueExW (Address: 0x180031e18)
  • TraceMessage (Address: 0x180031e58)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800320d0)
  • RaiseException (Address: 0x1800320d8)
  • SetLastError (Address: 0x1800320c8)
  • SetUnhandledExceptionFilter (Address: 0x1800320e8)
  • UnhandledExceptionFilter (Address: 0x1800320e0)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180032108)
  • DeleteFileW (Address: 0x180032100)
  • GetFileAttributesW (Address: 0x1800320f8)
  • WriteFile (Address: 0x180032110)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180032120)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180032140)
  • HeapAlloc (Address: 0x180032130)
  • HeapFree (Address: 0x180032138)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalAlloc (Address: 0x180032160)
  • GlobalFree (Address: 0x180032158)
  • LocalAlloc (Address: 0x180032150)
  • LocalFree (Address: 0x180032168)
  • LocalReAlloc (Address: 0x180032170)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180032180)
  • FreeLibrary (Address: 0x180032188)
  • GetModuleFileNameW (Address: 0x1800321a0)
  • GetModuleHandleExW (Address: 0x180032198)
  • GetProcAddress (Address: 0x180032190)
  • LoadStringW (Address: 0x1800321a8)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800321b8)
api-ms-win-core-localization-l1-2-0.dll
  • GetACP (Address: 0x1800321c8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800321d8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800321e8)
  • GetCurrentProcessId (Address: 0x1800321f8)
  • GetCurrentThreadId (Address: 0x1800321f0)
  • TerminateProcess (Address: 0x180032200)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180032210)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180032220)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180032230)
  • RtlLookupFunctionEntry (Address: 0x180032240)
  • RtlVirtualUnwind (Address: 0x180032238)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x180032250)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x180032268)
  • lstrcmpW (Address: 0x180032260)
api-ms-win-core-synch-l1-1-0.dll
  • DeleteCriticalSection (Address: 0x180032278)
  • EnterCriticalSection (Address: 0x180032288)
  • InitializeCriticalSection (Address: 0x180032290)
  • LeaveCriticalSection (Address: 0x180032280)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800322a0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x1800322b8)
  • GetSystemTimeAsFileTime (Address: 0x1800322b0)
  • GetTickCount (Address: 0x1800322c8)
  • GetVersionExW (Address: 0x1800322c0)
api-ms-win-core-timezone-l1-1-0.dll
  • SystemTimeToFileTime (Address: 0x1800322d8)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x180031e98)
  • CertCloseStore (Address: 0x180031ed8)
  • CertEnumCertificatesInStore (Address: 0x180031ee0)
  • CertFindCertificateInStore (Address: 0x180031eb8)
  • CertFindExtension (Address: 0x180031e88)
  • CertFreeCertificateContext (Address: 0x180031ec8)
  • CertGetCertificateContextProperty (Address: 0x180031e90)
  • CertGetEnhancedKeyUsage (Address: 0x180031eb0)
  • CertGetNameStringW (Address: 0x180031ea0)
  • CertOpenStore (Address: 0x180031ec0)
  • CertSaveStore (Address: 0x180031ed0)
  • CryptAcquireCertificatePrivateKey (Address: 0x180031e80)
  • CryptDecodeObject (Address: 0x180031ea8)
DSPARSE.dll
  • DsMakeSpnW (Address: 0x180031ef0)
DSROLE.dll
  • DsRoleFreeMemory (Address: 0x180031f00)
  • DsRoleGetPrimaryDomainInformation (Address: 0x180031f08)
framedynos.dll
  • ??0CHPtrArray@@QEAA@XZ (Address: 0x1800323a8)
  • ??0CHString@@QEAA@AEBV0@@Z (Address: 0x180032548)
  • ??0CHString@@QEAA@PEBG@Z (Address: 0x180032580)
  • ??0CHString@@QEAA@XZ (Address: 0x180032500)
  • ??0CHStringArray@@QEAA@XZ (Address: 0x180032468)
  • ??0CObjectPathParser@@QEAA@W4ObjectParserFlags@@@Z (Address: 0x180032360)
  • ??0CThreadBase@@QEAA@W4THREAD_SAFETY_MECHANISM@0@@Z (Address: 0x180032398)
  • ??0Provider@@QEAA@PEBG0@Z (Address: 0x180032530)
  • ??1CHPtrArray@@QEAA@XZ (Address: 0x1800323b0)
  • ??1CHString@@QEAA@XZ (Address: 0x180032588)
  • ??1CHStringArray@@QEAA@XZ (Address: 0x180032460)
  • ??1CObjectPathParser@@QEAA@XZ (Address: 0x180032368)
  • ??1CThreadBase@@UEAA@XZ (Address: 0x1800323a0)
  • ??1Provider@@UEAA@XZ (Address: 0x180032528)
  • ??4CHString@@QEAAAEBV0@PEBG@Z (Address: 0x180032300)
  • ??ACHPtrArray@@QEAAAEAPEAXH@Z (Address: 0x1800323d0)
  • ??ACHStringArray@@QEBA?AVCHString@@H@Z (Address: 0x180032430)
  • ??YCHString@@QEAAAEBV0@PEBG@Z (Address: 0x180032330)
  • ?Add@CHPtrArray@@QEAAHPEAX@Z (Address: 0x1800323b8)
  • ?Add@CHStringArray@@QEAAHPEBG@Z (Address: 0x1800323f8)
  • ?AddRef@CInstance@@QEAAJXZ (Address: 0x180032390)
  • ?Commit@CInstance@@QEAAJXZ (Address: 0x180032518)
  • ?Compare@CHString@@QEBAHPEBG@Z (Address: 0x180032550)
  • ?Create@CWbemGlueFactory@@SAPEAV1@XZ (Address: 0x180032578)
  • ?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z (Address: 0x180032520)
  • ?DeleteInstance@Provider@@MEAAJAEBVCInstance@@J@Z (Address: 0x180032440)
  • ?Destroy@CWbemGlueFactory@@QEAAXXZ (Address: 0x180032570)
  • ?Empty@CHString@@QEAAXXZ (Address: 0x1800324f0)
  • ?EndWrite@CThreadBase@@QEAAXXZ (Address: 0x1800323e0)
  • ?EnumerateInstances@Provider@@MEAAJPEAVMethodContext@@J@Z (Address: 0x180032338)
  • ?ExecMethod@Provider@@MEAAJAEBVCInstance@@QEAGPEAV2@2J@Z (Address: 0x180032590)
  • ?ExecQuery@Provider@@MEAAJPEAVMethodContext@@AEAVCFrameworkQuery@@J@Z (Address: 0x180032340)
  • ?FindOneOf@CHString@@QEBAHPEBG@Z (Address: 0x1800324d0)
  • ?Flush@Provider@@MEAAXXZ (Address: 0x180032428)
  • ?Format@CHString@@QEAAXPEBGZZ (Address: 0x180032488)
  • ?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBG@Z (Address: 0x180032558)
  • ?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBG@Z (Address: 0x180032568)
  • ?Free@CObjectPathParser@@QEAAXPEAUParsedObjectPath@@@Z (Address: 0x180032378)
  • ?GetAt@CHPtrArray@@QEBAPEAXH@Z (Address: 0x1800323c8)
  • ?Getbool@CInstance@@QEBA_NPEBGAEA_N@Z (Address: 0x1800324e0)
  • ?GetBuffer@CHString@@QEAAPEAGH@Z (Address: 0x1800324b8)
  • ?GetCHString@CInstance@@QEBA_NPEBGAEAVCHString@@@Z (Address: 0x1800324e8)
  • ?GetClassObjectInterface@CInstance@@QEAAPEAUIWbemClassObject@@XZ (Address: 0x180032310)
  • ?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z (Address: 0x1800324f8)
  • ?GetInstanceByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@@Z (Address: 0x180032308)
  • ?GetInstanceKeysByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@@Z (Address: 0x180032388)
  • ?GetInstancePropertiesByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@AEAVCHStringArray@@@Z (Address: 0x1800323f0)
  • ?GetInstancesByQuery@CWbemProviderGlue@@SAJPEBGPEAV?$TRefPointerCollection@VCInstance@@@@PEAVMethodContext@@0@Z (Address: 0x180032380)
  • ?GetInstancesByQueryAsynch@CWbemProviderGlue@@SAJPEBGPEAVProvider@@P6AJ1PEAVCInstance@@PEAVMethodContext@@PEAX@Z034@Z (Address: 0x180032350)
  • ?GetLength@CHString@@QEBAHXZ (Address: 0x1800322f8)
  • ?GetLocalInstancePath@Provider@@IEAA_NPEBVCInstance@@AEAVCHString@@@Z (Address: 0x180032358)
  • ?GetMethodContext@CInstance@@QEBAPEAVMethodContext@@XZ (Address: 0x1800324a8)
  • ?GetNamespaceConnection@CWbemProviderGlue@@SAPEAUIWbemServices@@PEBGPEAVMethodContext@@@Z (Address: 0x1800324b0)
  • ?GetObject@Provider@@MEAAJPEAVCInstance@@J@Z (Address: 0x180032598)
  • ?GetSize@CHPtrArray@@QEBAHXZ (Address: 0x1800323c0)
  • ?GetStringArray@CInstance@@QEBA_NPEBGAEAPEAUtagSAFEARRAY@@@Z (Address: 0x1800324d8)
  • ?GetValuesForProp@CFrameworkQuery@@QEAAJPEBGAEAVCHStringArray@@@Z (Address: 0x180032320)
  • ?GetVariant@CInstance@@QEBA_NPEBGAEAUtagVARIANT@@@Z (Address: 0x1800323e8)
  • ?IsDerivedFrom@CWbemProviderGlue@@SA_NPEBG0PEAVMethodContext@@0@Z (Address: 0x180032348)
  • ?IsEmpty@CHString@@QEBAHXZ (Address: 0x180032438)
  • ?IsPropertyRequired@CFrameworkQuery@@QEAA_NPEBG@Z (Address: 0x180032508)
  • ?LockBuffer@CHString@@QEAAPEAGXZ (Address: 0x1800324c8)
  • ?OnFinalRelease@CThreadBase@@MEAAXXZ (Address: 0x180032450)
  • ?Parse@CObjectPathParser@@QEAAHPEBGPEAPEAUParsedObjectPath@@@Z (Address: 0x180032370)
  • ?PutInstance@Provider@@MEAAJAEBVCInstance@@J@Z (Address: 0x180032448)
  • ?Release@CInstance@@QEAAJXZ (Address: 0x180032510)
  • ?Release@CThreadBase@@QEAAJXZ (Address: 0x180032560)
  • ?ReleaseBuffer@CHString@@QEAAXH@Z (Address: 0x1800324a0)
  • ?RemoveAll@CHPtrArray@@QEAAXXZ (Address: 0x1800323d8)
  • ?s_strComputerName@Provider@@0VCHString@@A (Address: 0x180032540)
  • ?SetCharSplat@CInstance@@QEAA_NPEBG0@Z (Address: 0x180032478)
  • ?SetCHString@CInstance@@QEAA_NPEBG0@Z (Address: 0x180032470)
  • ?SetCHString@CInstance@@QEAA_NPEBGAEBVCHString@@@Z (Address: 0x180032480)
  • ?SetCHString@CInstance@@QEAA_NPEBGPEBD@Z (Address: 0x180032328)
  • ?SetDOUBLE@CInstance@@QEAA_NPEBGN@Z (Address: 0x180032458)
  • ?SetDWORD@CInstance@@QEAA_NPEBGK@Z (Address: 0x180032498)
  • ?SetStatusObject@MethodContext@@QEAA_NPEAUIWbemClassObject@@@Z (Address: 0x1800325a0)
  • ?SetStringArray@CInstance@@QEAA_NPEBGAEBUtagSAFEARRAY@@@Z (Address: 0x180032490)
  • ?SetVariant@CInstance@@QEAA_NPEBGAEBUtagVARIANT@@@Z (Address: 0x180032538)
  • ?SetWCHARSplat@CInstance@@QEAA_NPEBG0@Z (Address: 0x1800325a8)
  • ?UnlockBuffer@CHString@@QEAAXXZ (Address: 0x1800324c0)
  • ?ValidateDeletionFlags@Provider@@MEAAJJ@Z (Address: 0x180032400)
  • ?ValidateEnumerationFlags@Provider@@MEAAJJ@Z (Address: 0x180032420)
  • ?ValidateGetObjFlags@Provider@@MEAAJJ@Z (Address: 0x180032418)
  • ?ValidateMethodFlags@Provider@@MEAAJJ@Z (Address: 0x180032410)
  • ?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z (Address: 0x180032318)
  • ?ValidateQueryFlags@Provider@@MEAAJJ@Z (Address: 0x180032408)
IPHLPAPI.DLL
  • GetAdaptersAddresses (Address: 0x180031f18)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800326a8)
  • __CxxFrameHandler3 (Address: 0x1800326b8)
  • __dllonexit (Address: 0x1800325d8)
  • _amsg_exit (Address: 0x180032608)
  • _callnewh (Address: 0x180032660)
  • _CxxThrowException (Address: 0x180032628)
  • _initterm (Address: 0x1800325f8)
  • _lock (Address: 0x1800325e8)
  • _ltow (Address: 0x180032670)
  • _onexit (Address: 0x1800325d0)
  • _purecall (Address: 0x180032658)
  • _unlock (Address: 0x1800325e0)
  • _vsnwprintf (Address: 0x180032688)
  • _wcsicmp (Address: 0x180032690)
  • _XcptFilter (Address: 0x180032610)
  • ??_V@YAXPEAX@Z (Address: 0x1800326b0)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180032650)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180032648)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180032640)
  • ??1exception@@UEAA@XZ (Address: 0x180032638)
  • ??1type_info@@UEAA@XZ (Address: 0x1800325f0)
  • ??3@YAXPEAX@Z (Address: 0x1800325b8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180032630)
  • free (Address: 0x180032600)
  • malloc (Address: 0x180032668)
  • memcmp (Address: 0x1800325c0)
  • memcpy (Address: 0x180032620)
  • memmove (Address: 0x180032618)
  • memset (Address: 0x1800325c8)
  • toupper (Address: 0x180032678)
  • wcscat_s (Address: 0x180032698)
  • wcscmp (Address: 0x1800326c0)
  • wcscpy_s (Address: 0x1800326a0)
  • wcsstr (Address: 0x180032680)
ncrypt.dll
  • NCryptFreeObject (Address: 0x1800326d8)
  • NCryptIsKeyHandle (Address: 0x1800326d0)
ntdll.dll
  • RtlAllocateAndInitializeSid (Address: 0x1800326f8)
  • RtlFreeSid (Address: 0x1800326f0)
  • RtlNtStatusToDosError (Address: 0x1800326e8)
ole32.dll
  • CoCreateInstance (Address: 0x180032730)
  • CoGetClassObject (Address: 0x180032708)
  • CoImpersonateClient (Address: 0x180032720)
  • CoRevertToSelf (Address: 0x180032728)
  • CoSetProxyBlanket (Address: 0x180032718)
  • CoTaskMemFree (Address: 0x180032738)
  • StringFromGUID2 (Address: 0x180032710)
OLEAUT32.dll
  • SafeArrayAccessData (Address: 0x180031f30)
  • SafeArrayCreate (Address: 0x180031f40)
  • SafeArrayCreateVector (Address: 0x180031f50)
  • SafeArrayDestroy (Address: 0x180031f28)
  • SafeArrayGetUBound (Address: 0x180031f70)
  • SafeArrayPutElement (Address: 0x180031f48)
  • SafeArrayUnaccessData (Address: 0x180031f60)
  • SysAllocString (Address: 0x180031f78)
  • SysFreeString (Address: 0x180031f38)
  • SysStringLen (Address: 0x180031f68)
  • VariantClear (Address: 0x180031f58)
  • VariantInit (Address: 0x180031f80)
REGAPI.dll
  • RegDefaultUserConfigQueryW (Address: 0x180031fa8)
  • RegGetLicensePolicyID (Address: 0x180031fb8)
  • RegGetMachinePolicyNew (Address: 0x180031fb0)
  • RegQueryMonitorSettings (Address: 0x180031f98)
  • RegSetLicensePolicyID (Address: 0x180031fc0)
  • RegWdQueryW (Address: 0x180031fc8)
  • RegWinstationQuerySecurityConfig_Merged (Address: 0x180031fa0)
  • RegWinstationSetSecurityConfig (Address: 0x180031f90)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x180032018)
  • NdrClientCall3 (Address: 0x180031ff0)
  • RpcBindingFree (Address: 0x180032010)
  • RpcBindingFromStringBindingW (Address: 0x180031ff8)
  • RpcBindingSetAuthInfoExW (Address: 0x180031fd8)
  • RpcBindingSetOption (Address: 0x180031fe8)
  • RpcEpResolveBinding (Address: 0x180031fe0)
  • RpcStringBindingComposeW (Address: 0x180032008)
  • RpcStringFreeW (Address: 0x180032000)
SHELL32.dll
  • SHGetKnownFolderPath (Address: 0x180032028)
WINSTA.dll
  • ServerLicensingClose (Address: 0x180032068)
  • ServerLicensingFreePolicyInformation (Address: 0x180032060)
  • ServerLicensingGetAadInfo (Address: 0x180032090)
  • ServerLicensingGetAvailablePolicyIds (Address: 0x180032058)
  • ServerLicensingGetPolicy (Address: 0x180032038)
  • ServerLicensingGetPolicyInformationW (Address: 0x180032040)
  • ServerLicensingOpenW (Address: 0x180032050)
  • ServerLicensingSetAadInfo (Address: 0x180032088)
  • ServerLicensingSetPolicy (Address: 0x180032048)
  • WinStationCloseServer (Address: 0x180032080)
  • WinStationOpenServerW (Address: 0x180032070)
  • WinStationQueryInformationW (Address: 0x180032078)
WS2_32.dll
  • GetNameInfoW (Address: 0x1800320a0)
  • WSACleanup (Address: 0x1800320a8)
  • WSAGetLastError (Address: 0x1800320b8)
  • WSAStartup (Address: 0x1800320b0)