wtsapi32.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 8de8941d06fcd790ad3aabc2a338a276

File Size: 45.0 KB

Uploaded At: Aug. 21, 2026, 5:30 a.m.

Views: 28

Exported Functions

  • IsInteractiveUserSession (Ordinal: 1, Address: 0x1640)
  • QueryActiveSession (Ordinal: 2, Address: 0x1650)
  • QueryUserToken (Ordinal: 3, Address: 0x1660)
  • RegisterUsertokenForNoWinlogon (Ordinal: 4, Address: 0x1670)
  • WTSCloseServer (Ordinal: 5, Address: 0x1680)
  • WTSConnectSessionA (Ordinal: 6, Address: 0x1690)
  • WTSConnectSessionW (Ordinal: 7, Address: 0x16a0)
  • WTSCreateListenerA (Ordinal: 8, Address: 0x16b0)
  • WTSCreateListenerW (Ordinal: 9, Address: 0x16c0)
  • WTSDisconnectSession (Ordinal: 10, Address: 0x16d0)
  • WTSEnableChildSessions (Ordinal: 11, Address: 0x16e0)
  • WTSEnumerateListenersA (Ordinal: 12, Address: 0x16f0)
  • WTSEnumerateListenersW (Ordinal: 13, Address: 0x1700)
  • WTSEnumerateProcessesA (Ordinal: 14, Address: 0x1710)
  • WTSEnumerateProcessesExA (Ordinal: 15, Address: 0x1720)
  • WTSEnumerateProcessesExW (Ordinal: 16, Address: 0x1730)
  • WTSEnumerateProcessesW (Ordinal: 17, Address: 0x1740)
  • WTSEnumerateServersA (Ordinal: 18, Address: 0x1750)
  • WTSEnumerateServersW (Ordinal: 19, Address: 0x1760)
  • WTSEnumerateSessionsA (Ordinal: 20, Address: 0x1770)
  • WTSEnumerateSessionsExA (Ordinal: 21, Address: 0x1780)
  • WTSEnumerateSessionsExW (Ordinal: 22, Address: 0x1790)
  • WTSEnumerateSessionsW (Ordinal: 23, Address: 0x17a0)
  • WTSFreeMemory (Ordinal: 24, Address: 0x17b0)
  • WTSFreeMemoryExA (Ordinal: 25, Address: 0x17c0)
  • WTSFreeMemoryExW (Ordinal: 26, Address: 0x17d0)
  • WTSGetChildSessionId (Ordinal: 27, Address: 0x17e0)
  • WTSGetListenerSecurityA (Ordinal: 28, Address: 0x17f0)
  • WTSGetListenerSecurityW (Ordinal: 29, Address: 0x1800)
  • WTSIsChildSessionsEnabled (Ordinal: 30, Address: 0x1810)
  • WTSLogoffSession (Ordinal: 31, Address: 0x1820)
  • WTSOpenServerA (Ordinal: 32, Address: 0x1830)
  • WTSOpenServerExA (Ordinal: 33, Address: 0x1840)
  • WTSOpenServerExW (Ordinal: 34, Address: 0x1850)
  • WTSOpenServerW (Ordinal: 35, Address: 0x1860)
  • WTSQueryListenerConfigA (Ordinal: 36, Address: 0x1870)
  • WTSQueryListenerConfigW (Ordinal: 37, Address: 0x1880)
  • WTSQuerySessionInformationA (Ordinal: 38, Address: 0x1890)
  • WTSQuerySessionInformationW (Ordinal: 39, Address: 0x18a0)
  • WTSQueryUserConfigA (Ordinal: 40, Address: 0x18b0)
  • WTSQueryUserConfigW (Ordinal: 41, Address: 0x18c0)
  • WTSQueryUserToken (Ordinal: 42, Address: 0x18d0)
  • WTSRegisterSessionNotification (Ordinal: 43, Address: 0x18e0)
  • WTSRegisterSessionNotificationEx (Ordinal: 44, Address: 0x18f0)
  • WTSSendMessageA (Ordinal: 45, Address: 0x1900)
  • WTSSendMessageW (Ordinal: 46, Address: 0x1910)
  • WTSSetListenerSecurityA (Ordinal: 47, Address: 0x1920)
  • WTSSetListenerSecurityW (Ordinal: 48, Address: 0x1930)
  • WTSSetRenderHint (Ordinal: 49, Address: 0x1940)
  • WTSSetSessionInformationA (Ordinal: 50, Address: 0x1950)
  • WTSSetSessionInformationW (Ordinal: 51, Address: 0x1960)
  • WTSSetUserConfigA (Ordinal: 52, Address: 0x1970)
  • WTSSetUserConfigW (Ordinal: 53, Address: 0x1980)
  • WTSShutdownSystem (Ordinal: 54, Address: 0x1990)
  • WTSStartRemoteControlSessionA (Ordinal: 55, Address: 0x19a0)
  • WTSStartRemoteControlSessionW (Ordinal: 56, Address: 0x19b0)
  • WTSStopRemoteControlSession (Ordinal: 57, Address: 0x19c0)
  • WTSTerminateProcess (Ordinal: 58, Address: 0x19d0)
  • WTSUnRegisterSessionNotification (Ordinal: 59, Address: 0x19e0)
  • WTSUnRegisterSessionNotificationEx (Ordinal: 60, Address: 0x19f0)
  • WTSVirtualChannelClose (Ordinal: 61, Address: 0x1a00)
  • WTSVirtualChannelOpen (Ordinal: 62, Address: 0x1a10)
  • WTSVirtualChannelOpenEx (Ordinal: 63, Address: 0x1a20)
  • WTSVirtualChannelPurgeInput (Ordinal: 64, Address: 0x1a30)
  • WTSVirtualChannelPurgeOutput (Ordinal: 65, Address: 0x1a40)
  • WTSVirtualChannelQuery (Ordinal: 66, Address: 0x1a50)
  • WTSVirtualChannelRead (Ordinal: 67, Address: 0x1a60)
  • WTSVirtualChannelWrite (Ordinal: 68, Address: 0x1a70)
  • WTSWaitSystemEvent (Ordinal: 69, Address: 0x1a80)

Imported DLLs & Functions

ADVAPI32.dll
  • RegCreateKeyExA (Address: 0x180006008)
  • RegQueryValueExA (Address: 0x180006000)
  • RegSetValueExA (Address: 0x180006010)
KERNEL32.dll
  • FlushInstructionCache (Address: 0x180006080)
  • GetCurrentProcess (Address: 0x180006050)
  • GetCurrentProcessId (Address: 0x1800060d0)
  • GetCurrentThread (Address: 0x180006020)
  • GetCurrentThreadId (Address: 0x180006058)
  • GetFileAttributesA (Address: 0x1800060e0)
  • GetLastError (Address: 0x180006088)
  • GetModuleHandleW (Address: 0x1800060b8)
  • GetProcAddress (Address: 0x1800060e8)
  • GetSystemDirectoryA (Address: 0x180006028)
  • GetSystemTimeAsFileTime (Address: 0x1800060c8)
  • GetThreadContext (Address: 0x180006070)
  • InitializeSListHead (Address: 0x1800060c0)
  • IsDebuggerPresent (Address: 0x180006120)
  • IsProcessorFeaturePresent (Address: 0x180006100)
  • LoadLibraryA (Address: 0x180006030)
  • lstrcmpA (Address: 0x180006048)
  • lstrcmpW (Address: 0x180006040)
  • MultiByteToWideChar (Address: 0x180006038)
  • QueryPerformanceCounter (Address: 0x1800060d8)
  • ResumeThread (Address: 0x180006068)
  • RtlCaptureContext (Address: 0x180006138)
  • RtlLookupFunctionEntry (Address: 0x180006130)
  • RtlVirtualUnwind (Address: 0x180006128)
  • SetLastError (Address: 0x1800060f8)
  • SetThreadContext (Address: 0x180006078)
  • SetUnhandledExceptionFilter (Address: 0x180006108)
  • SuspendThread (Address: 0x180006060)
  • TerminateProcess (Address: 0x180006110)
  • UnhandledExceptionFilter (Address: 0x180006118)
  • VirtualAlloc (Address: 0x1800060f0)
  • VirtualFree (Address: 0x180006098)
  • VirtualProtect (Address: 0x180006090)
  • VirtualProtectEx (Address: 0x1800060a8)
  • VirtualQuery (Address: 0x1800060a0)
  • VirtualQueryEx (Address: 0x1800060b0)
OLEAUT32.dll
  • SysAllocString (Address: 0x180006148)
  • SysFreeString (Address: 0x180006150)
ucrtbase.dll
  • __C_specific_handler (Address: 0x1800061d0)
  • __std_exception_copy (Address: 0x1800061f0)
  • __std_exception_destroy (Address: 0x1800061e8)
  • __std_type_info_destroy_list (Address: 0x180006208)
  • _callnewh (Address: 0x180006160)
  • _cexit (Address: 0x180006200)
  • _configure_narrow_argv (Address: 0x180006178)
  • _crt_atexit (Address: 0x1800061a0)
  • _CxxThrowException (Address: 0x1800061e0)
  • _execute_onexit_table (Address: 0x180006198)
  • _initialize_narrow_environment (Address: 0x180006180)
  • _initialize_onexit_table (Address: 0x180006188)
  • _initterm (Address: 0x1800061b0)
  • _initterm_e (Address: 0x1800061b8)
  • _invalid_parameter_noinfo_noreturn (Address: 0x1800061a8)
  • _register_onexit_function (Address: 0x180006190)
  • _seh_filter_dll (Address: 0x180006170)
  • free (Address: 0x1800061c0)
  • malloc (Address: 0x180006168)
  • memcpy (Address: 0x180006210)
  • memmove (Address: 0x1800061d8)
  • memset (Address: 0x1800061c8)
  • strcat_s (Address: 0x1800061f8)