tspubwmi.dll

Description: Remote Desktop Programs WMI provider

Version: 10.0.19041.5965

Architecture: 64-bit

Operating System: Windows NT

SHA256: 4e1ec297dc89ec7836d6e8f101fbe27e

File Size: 241.0 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1b70)
DllGetClassObject (Ordinal: 2, Address: 0x1a90)
DllRegisterServer (Ordinal: 3, Address: 0x1b90)
DllUnregisterServer (Ordinal: 4, Address: 0x1e00)

Imported DLLs & Functions

ADVAPI32.dll

AllocateAndInitializeSid (Address: 0x18002f820)
CheckTokenMembership (Address: 0x18002f7a8)
ConvertSidToStringSidW (Address: 0x18002f838)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002f858)
EventActivityIdControl (Address: 0x18002f840)
FreeSid (Address: 0x18002f830)
GetTokenInformation (Address: 0x18002f868)
GetTraceEnableFlags (Address: 0x18002f808)
GetTraceEnableLevel (Address: 0x18002f810)
GetTraceLoggerHandle (Address: 0x18002f818)
IsTextUnicode (Address: 0x18002f850)
LookupAccountSidW (Address: 0x18002f828)
OpenThreadToken (Address: 0x18002f7b0)
RegCloseKey (Address: 0x18002f7e0)
RegCreateKeyExW (Address: 0x18002f7f0)
RegDeleteKeyW (Address: 0x18002f7d0)
RegDeleteValueW (Address: 0x18002f860)
RegEnumKeyExW (Address: 0x18002f7c0)
RegEnumValueW (Address: 0x18002f848)
RegisterTraceGuidsW (Address: 0x18002f800)
RegOpenKeyExW (Address: 0x18002f7d8)
RegQueryValueExW (Address: 0x18002f7c8)
RegSetValueExW (Address: 0x18002f7e8)
TraceMessage (Address: 0x18002f7b8)
UnregisterTraceGuids (Address: 0x18002f7f8)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18002fa50)
CoTaskMemFree (Address: 0x18002fa40)
PropVariantClear (Address: 0x18002fa48)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002fa68)
IsDebuggerPresent (Address: 0x18002fa70)
OutputDebugStringW (Address: 0x18002fa60)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002fa88)
SetLastError (Address: 0x18002fa90)
SetUnhandledExceptionFilter (Address: 0x18002fa80)
UnhandledExceptionFilter (Address: 0x18002fa98)

api-ms-win-core-featurestaging-l1-1-0.dll

RecordFeatureUsage (Address: 0x18002fab8)
SubscribeFeatureStateChangeNotification (Address: 0x18002fab0)
UnsubscribeFeatureStateChangeNotification (Address: 0x18002faa8)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18002fae8)
DeleteFileW (Address: 0x18002fae0)
GetFileAttributesW (Address: 0x18002faf8)
GetFileSize (Address: 0x18002faf0)
GetLongPathNameW (Address: 0x18002fad0)
GetShortPathNameW (Address: 0x18002fad8)
LockFileEx (Address: 0x18002fb08)
ReadFile (Address: 0x18002fb18)
SetFilePointer (Address: 0x18002fac8)
UnlockFileEx (Address: 0x18002fb00)
WriteFile (Address: 0x18002fb10)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002fb28)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002fb48)
HeapAlloc (Address: 0x18002fb38)
HeapFree (Address: 0x18002fb40)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002fb60)
LocalFree (Address: 0x18002fb58)
LocalReAlloc (Address: 0x18002fb68)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18002fbb0)
GetModuleFileNameA (Address: 0x18002fb80)
GetModuleFileNameW (Address: 0x18002fbb8)
GetModuleHandleExA (Address: 0x18002fb98)
GetModuleHandleExW (Address: 0x18002fba0)
GetModuleHandleW (Address: 0x18002fb88)
GetProcAddress (Address: 0x18002fb90)
LoadLibraryExW (Address: 0x18002fb78)
LoadResource (Address: 0x18002fbc8)
LockResource (Address: 0x18002fbc0)
SizeofResource (Address: 0x18002fba8)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18002fbe0)
LoadLibraryW (Address: 0x18002fbd8)

api-ms-win-core-libraryloader-l1-2-2.dll

EnumResourceNamesW (Address: 0x18002fbf0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002fc08)
GetACP (Address: 0x18002fc00)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18002fc18)
GetEnvironmentVariableW (Address: 0x18002fc20)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18002fc48)
GetCurrentProcessId (Address: 0x18002fc38)
GetCurrentThread (Address: 0x18002fc50)
GetCurrentThreadId (Address: 0x18002fc30)
TerminateProcess (Address: 0x18002fc40)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002fc60)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x18002fc88)
CompareStringW (Address: 0x18002fc78)
MultiByteToWideChar (Address: 0x18002fc70)
WideCharToMultiByte (Address: 0x18002fc80)

api-ms-win-core-synch-l1-1-0.dll

CreateMutexExW (Address: 0x18002fc98)
CreateSemaphoreExW (Address: 0x18002fca8)
OpenSemaphoreW (Address: 0x18002fcb0)
ReleaseMutex (Address: 0x18002fcb8)
ReleaseSemaphore (Address: 0x18002fcc8)
WaitForSingleObject (Address: 0x18002fcc0)
WaitForSingleObjectEx (Address: 0x18002fca0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18002fcd8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x18002fce8)
GetSystemTimeAsFileTime (Address: 0x18002fcf0)
GetTickCount (Address: 0x18002fcf8)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18002fd08)

CRYPT32.dll

CertCloseStore (Address: 0x18002f8e0)
CertDuplicateCertificateChain (Address: 0x18002f8f0)
CertDuplicateCertificateContext (Address: 0x18002f8b0)
CertFindCertificateInStore (Address: 0x18002f878)
CertFindExtension (Address: 0x18002f908)
CertFreeCertificateChain (Address: 0x18002f888)
CertFreeCertificateContext (Address: 0x18002f880)
CertGetCertificateChain (Address: 0x18002f890)
CertGetCertificateContextProperty (Address: 0x18002f900)
CertOpenStore (Address: 0x18002f8c0)
CertVerifyCertificateChainPolicy (Address: 0x18002f8d8)
CryptBinaryToStringW (Address: 0x18002f8a8)
CryptDecodeObject (Address: 0x18002f898)
CryptMsgClose (Address: 0x18002f8b8)
CryptMsgOpenToDecode (Address: 0x18002f8d0)
CryptMsgUpdate (Address: 0x18002f8c8)
CryptSignMessage (Address: 0x18002f8f8)
CryptStringToBinaryW (Address: 0x18002f8a0)
CryptVerifyDetachedMessageSignature (Address: 0x18002f8e8)

IPHLPAPI.DLL

ParseNetworkString (Address: 0x18002f918)

msi.dll

(Address: 0x18002fd28)
(Address: 0x18002fd20)
(Address: 0x18002fd18)

msvcrt.dll

__C_specific_handler (Address: 0x18002fdc0)
__CxxFrameHandler3 (Address: 0x18002fe58)
__dllonexit (Address: 0x18002fda8)
_amsg_exit (Address: 0x18002fdd8)
_callnewh (Address: 0x18002fe28)
_CxxThrowException (Address: 0x18002fdf8)
_initterm (Address: 0x18002fdc8)
_lock (Address: 0x18002fdb8)
_onexit (Address: 0x18002fda0)
_purecall (Address: 0x18002fe50)
_unlock (Address: 0x18002fdb0)
_vsnwprintf (Address: 0x18002fe38)
_wcsicmp (Address: 0x18002fe48)
_wcslwr (Address: 0x18002fd60)
_wcsnicmp (Address: 0x18002fd88)
_wsplitpath_s (Address: 0x18002fd70)
_XcptFilter (Address: 0x18002fde0)
??_V@YAXPEAX@Z (Address: 0x18002fe40)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18002fe20)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18002fe18)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18002fe10)
??1exception@@UEAA@XZ (Address: 0x18002fe08)
??1type_info@@UEAA@XZ (Address: 0x18002fd80)
??3@YAXPEAX@Z (Address: 0x18002fd38)
?terminate@@YAXXZ (Address: 0x18002fd98)
?what@exception@@UEBAPEBDXZ (Address: 0x18002fe00)
free (Address: 0x18002fdd0)
iswalnum (Address: 0x18002fe60)
malloc (Address: 0x18002fe30)
memcpy (Address: 0x18002fdf0)
memcpy_s (Address: 0x18002fd40)
memmove (Address: 0x18002fde8)
memset (Address: 0x18002fe68)
toupper (Address: 0x18002fd90)
towlower (Address: 0x18002fd58)
wcscat_s (Address: 0x18002fd50)
wcstok_s (Address: 0x18002fd68)
wcstol (Address: 0x18002fd48)
wcstombs_s (Address: 0x18002fd78)

netutils.dll

NetApiBufferFree (Address: 0x18002fe78)

ntdll.dll

RtlCaptureContext (Address: 0x18002fe88)
RtlLookupFunctionEntry (Address: 0x18002fe90)
RtlVirtualUnwind (Address: 0x18002fe98)

ole32.dll

CoGetClassObject (Address: 0x18002feb0)
CoImpersonateClient (Address: 0x18002feb8)
CoRevertToSelf (Address: 0x18002fec0)
StringFromGUID2 (Address: 0x18002fea8)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x18002f948)
SafeArrayCreateVector (Address: 0x18002f990)
SafeArrayDestroy (Address: 0x18002f998)
SafeArrayGetElemsize (Address: 0x18002f928)
SafeArrayGetLBound (Address: 0x18002f930)
SafeArrayGetUBound (Address: 0x18002f940)
SafeArrayPutElement (Address: 0x18002f9a0)
SafeArrayUnaccessData (Address: 0x18002f938)
SysAllocString (Address: 0x18002f958)
SysAllocStringLen (Address: 0x18002f988)
SysFreeString (Address: 0x18002f950)
SysStringByteLen (Address: 0x18002f978)
SysStringLen (Address: 0x18002f980)
VariantChangeType (Address: 0x18002f970)
VariantClear (Address: 0x18002f960)
VariantInit (Address: 0x18002f968)

samcli.dll

NetLocalGroupGetMembers (Address: 0x18002fed0)

SHELL32.dll

SHCreateAssociationRegistration (Address: 0x18002f9c0)
SHGetDesktopFolder (Address: 0x18002f9b0)
SHGetFileInfoW (Address: 0x18002f9c8)
SHGetFolderLocation (Address: 0x18002f9b8)
SHGetPathFromIDListW (Address: 0x18002f9d0)

SHLWAPI.dll

AssocQueryStringW (Address: 0x18002fa10)
PathFileExistsW (Address: 0x18002fa00)
PathFindExtensionW (Address: 0x18002f9e0)
PathFindNextComponentW (Address: 0x18002fa08)
PathGetDriveNumberW (Address: 0x18002fa20)
PathParseIconLocationW (Address: 0x18002f9f0)
PathStripPathW (Address: 0x18002fa18)
StrDupW (Address: 0x18002f9f8)
StrRetToBufW (Address: 0x18002f9e8)

USERENV.dll

ExpandEnvironmentStringsForUserW (Address: 0x18002fa30)