termsrv.dll

v10.0.20348.143 64-bit Windows NT Analyzed
Description
Remote Desktop Session Host Server Remote Connections Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
1.2 MB
Uploaded
2026-08-31 16:02
Views
32
SHA-256
536bef51babee937a2eb7e81039eeee8

Exported functions 2

ServiceMain #1 · 0x2ef50
SvchostPushServiceGlobals #2 · 0x2f9a0

Imported DLLs & functions 300

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800d7cf0
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1800d7d18
IsDebuggerPresent 0x1800d7d00
OutputDebugStringA 0x1800d7d08
OutputDebugStringW 0x1800d7d10
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800d7d28
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800d7d38
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800d7d50
RaiseException 0x1800d7d58
SetLastError 0x1800d7d60
SetUnhandledExceptionFilter 0x1800d7d68
UnhandledExceptionFilter 0x1800d7d48
api-ms-win-core-file-l1-1-0.dll 4
CompareFileTime 0x1800d7d80
CreateDirectoryW 0x1800d7d78
CreateFileW 0x1800d7d88
QueryDosDeviceW 0x1800d7d90
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800d7da0
DuplicateHandle 0x1800d7da8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800d7db8
HeapAlloc 0x1800d7dc8
HeapFree 0x1800d7dc0
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800d7de0
LocalFree 0x1800d7dd8
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800d7df0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1800d7e00
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
GetComputerNameW 0x1800d7e20
RegisterWaitForSingleObject 0x1800d7e10
UnregisterWait 0x1800d7e18
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
VerifyVersionInfoW 0x1800d7e30
api-ms-win-core-kernel32-private-l1-1-0.dll 1
CheckElevationEnabled 0x1800d7e40
api-ms-win-core-libraryloader-l1-2-0.dll 13
DisableThreadLibraryCalls 0x1800d7e68
FindResourceExW 0x1800d7e78
FreeLibrary 0x1800d7e88
GetModuleFileNameA 0x1800d7ea8
GetModuleFileNameW 0x1800d7e90
GetModuleHandleExA 0x1800d7e98
GetModuleHandleExW 0x1800d7eb0
GetModuleHandleW 0x1800d7ea0
GetProcAddress 0x1800d7e58
LoadLibraryExW 0x1800d7e50
LoadResource 0x1800d7e60
LoadStringW 0x1800d7e80
SizeofResource 0x1800d7e70
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x1800d7ec0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800d7ed0
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800d7ee0
api-ms-win-core-processthreads-l1-1-0.dll 17
CreateProcessAsUserW 0x1800d7f68
CreateProcessW 0x1800d7f40
CreateThread 0x1800d7ef8
ExitThread 0x1800d7f30
GetCurrentProcess 0x1800d7f50
GetCurrentProcessId 0x1800d7f58
GetCurrentThread 0x1800d7f00
GetCurrentThreadId 0x1800d7f70
GetExitCodeThread 0x1800d7f28
OpenProcessToken 0x1800d7f48
OpenThreadToken 0x1800d7f38
ProcessIdToSessionId 0x1800d7ef0
TerminateProcess 0x1800d7f60
TlsAlloc 0x1800d7f18
TlsFree 0x1800d7f08
TlsGetValue 0x1800d7f10
TlsSetValue 0x1800d7f20
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x1800d7f80
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800d7f90
api-ms-win-core-psapi-l1-1-0.dll 1
K32EnumProcessModules 0x1800d7fa0
api-ms-win-core-registry-l1-1-0.dll 9
RegCloseKey 0x1800d7fd0
RegCreateKeyExW 0x1800d7fe0
RegDeleteValueW 0x1800d7fb0
RegEnumKeyExW 0x1800d7fb8
RegGetValueW 0x1800d7fe8
RegOpenKeyExW 0x1800d7ff0
RegQueryInfoKeyW 0x1800d7fc0
RegQueryValueExW 0x1800d7fc8
RegSetValueExW 0x1800d7fd8
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800d8000
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x1800d8010
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x1800d8028
lstrcmpW 0x1800d8020
api-ms-win-core-synch-l1-1-0.dll 23
AcquireSRWLockExclusive 0x1800d8068
AcquireSRWLockShared 0x1800d80c0
CreateEventW 0x1800d8088
CreateMutexExW 0x1800d8098
CreateSemaphoreExW 0x1800d80b8
DeleteCriticalSection 0x1800d8070
EnterCriticalSection 0x1800d8048
InitializeCriticalSection 0x1800d8038
InitializeCriticalSectionAndSpinCount 0x1800d8078
InitializeCriticalSectionEx 0x1800d8058
InitializeSRWLock 0x1800d8060
LeaveCriticalSection 0x1800d8040
OpenEventW 0x1800d8080
OpenSemaphoreW 0x1800d8050
ReleaseMutex 0x1800d80d8
ReleaseSemaphore 0x1800d80e8
ReleaseSRWLockExclusive 0x1800d80a8
ReleaseSRWLockShared 0x1800d80c8
ResetEvent 0x1800d80e0
SetEvent 0x1800d80b0
WaitForMultipleObjectsEx 0x1800d8090
WaitForSingleObject 0x1800d80a0
WaitForSingleObjectEx 0x1800d80d0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1800d80f8
api-ms-win-core-synch-l1-2-1.dll 2
CreateSemaphoreW 0x1800d8108
WaitForMultipleObjects 0x1800d8110
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1800d8128
GetSystemTime 0x1800d8138
GetSystemTimeAsFileTime 0x1800d8148
GetTickCount 0x1800d8130
GetTickCount64 0x1800d8120
GetVersionExW 0x1800d8140
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x1800d8158
api-ms-win-core-threadpool-l1-2-0.dll 12
CloseThreadpool 0x1800d8190
CloseThreadpoolCleanupGroup 0x1800d8188
CloseThreadpoolCleanupGroupMembers 0x1800d8178
CloseThreadpoolTimer 0x1800d81a8
CreateThreadpool 0x1800d8180
CreateThreadpoolCleanupGroup 0x1800d8168
CreateThreadpoolTimer 0x1800d81c0
SetThreadpoolThreadMaximum 0x1800d81b8
SetThreadpoolThreadMinimum 0x1800d81a0
SetThreadpoolTimer 0x1800d81b0
TrySubmitThreadpoolCallback 0x1800d8170
WaitForThreadpoolTimerCallbacks 0x1800d8198
api-ms-win-core-threadpool-legacy-l1-1-0.dll 6
CreateTimerQueue 0x1800d81e0
CreateTimerQueueTimer 0x1800d81d8
DeleteTimerQueueEx 0x1800d81e8
DeleteTimerQueueTimer 0x1800d81f0
QueueUserWorkItem 0x1800d81d0
UnregisterWaitEx 0x1800d81f8
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x1800d8208
api-ms-win-devices-query-l1-1-0.dll 4
DevCloseObjectQuery 0x1800d8218
DevCreateObjectQuery 0x1800d8220
DevFreeObjectProperties 0x1800d8230
DevGetObjectProperties 0x1800d8228
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x1800d8240
api-ms-win-eventing-controller-l1-1-0.dll 3
ControlTraceW 0x1800d8250
EnableTraceEx2 0x1800d8258
StartTraceW 0x1800d8260
api-ms-win-eventing-provider-l1-1-0.dll 5
EventActivityIdControl 0x1800d8290
EventRegister 0x1800d8270
EventSetInformation 0x1800d8288
EventUnregister 0x1800d8280
EventWriteTransfer 0x1800d8278
api-ms-win-security-base-l1-1-0.dll 28
AccessCheckAndAuditAlarmW 0x1800d8308
AddAce 0x1800d82b0
AllocateAndInitializeSid 0x1800d82c0
AllocateLocallyUniqueId 0x1800d82a0
CheckTokenMembership 0x1800d82e0
CopySid 0x1800d8360
CreateWellKnownSid 0x1800d8300
DuplicateToken 0x1800d8378
DuplicateTokenEx 0x1800d82f0
EqualSid 0x1800d8318
FreeSid 0x1800d8350
GetAce 0x1800d8348
GetAclInformation 0x1800d82a8
GetFileSecurityW 0x1800d8320
GetLengthSid 0x1800d8338
GetSecurityDescriptorControl 0x1800d8370
GetSecurityDescriptorDacl 0x1800d8310
GetSecurityDescriptorLength 0x1800d82b8
GetTokenInformation 0x1800d82e8
ImpersonateLoggedOnUser 0x1800d8368
InitializeAcl 0x1800d82d8
InitializeSecurityDescriptor 0x1800d82c8
IsValidSecurityDescriptor 0x1800d8358
IsValidSid 0x1800d8330
MakeAbsoluteSD 0x1800d8340
MakeSelfRelativeSD 0x1800d8328
RevertToSelf 0x1800d82f8
SetSecurityDescriptorDacl 0x1800d82d0
KERNEL32.dll 1
OOBEComplete 0x1800d7bb8
KERNELBASE.dll 1
WTSIsServerContainer 0x1800d7bc8
msvcrt.dll 48
__C_specific_handler 0x1800d8490
__CxxFrameHandler3 0x1800d8438
__CxxFrameHandler4 0x1800d84c8
__dllonexit 0x1800d84a8
_amsg_exit 0x1800d8468
_callnewh 0x1800d8428
_CxxThrowException 0x1800d8430
_errno 0x1800d84c0
_initterm 0x1800d8470
_lock 0x1800d8480
_onexit 0x1800d84b0
_purecall 0x1800d8488
_resetstkoflw 0x1800d8420
_stricmp 0x1800d83f8
_unlock 0x1800d84a0
_vsnprintf 0x1800d84e8
_vsnprintf_s 0x1800d83c0
_vsnwprintf 0x1800d83d8
_wcsicmp 0x1800d83e8
_wcsnicmp 0x1800d83b0
_XcptFilter 0x1800d8460
??_V@YAXPEAX@Z 0x1800d8498
??0exception@@QEAA@AEBQEBD@Z 0x1800d84f8
??0exception@@QEAA@AEBQEBDH@Z 0x1800d8450
??0exception@@QEAA@AEBV0@@Z 0x1800d8390
??0exception@@QEAA@XZ 0x1800d8388
??1exception@@UEAA@XZ 0x1800d84e0
??1type_info@@UEAA@XZ 0x1800d84b8
??3@YAXPEAX@Z 0x1800d84f0
?terminate@@YAXXZ 0x1800d8478
?what@exception@@UEBAPEBDXZ 0x1800d8458
free 0x1800d83a0
iswspace 0x1800d8408
malloc 0x1800d83d0
memcmp 0x1800d84d8
memcpy 0x1800d8440
memcpy_s 0x1800d83c8
memmove 0x1800d8448
memmove_s 0x1800d8398
memset 0x1800d8500
qsort 0x1800d83e0
realloc 0x1800d84d0
swprintf_s 0x1800d8418
wcschr 0x1800d8400
wcscpy_s 0x1800d8410
wcsncpy_s 0x1800d83b8
wcsrchr 0x1800d83f0
wcstok_s 0x1800d83a8
ntdll.dll 47
DbgPrint 0x1800d8578
EtwEventActivityIdControl 0x1800d8610
EtwEventRegister 0x1800d8670
EtwEventUnregister 0x1800d8678
EtwEventWriteFull 0x1800d8660
EtwEventWriteTransfer 0x1800d8620
NtCreateFile 0x1800d85e8
NtDuplicateToken 0x1800d8550
NtOpenProcess 0x1800d8510
NtOpenProcessToken 0x1800d8518
NtQueryInformationProcess 0x1800d8540
NtQueryInformationToken 0x1800d8560
NtQuerySystemInformation 0x1800d8598
NtQuerySystemTime 0x1800d8618
NtQueryVirtualMemory 0x1800d85a0
RtlAcquireResourceExclusive 0x1800d8558
RtlAcquireResourceShared 0x1800d8568
RtlAdjustPrivilege 0x1800d85f8
RtlAllocateAndInitializeSid 0x1800d8668
RtlCaptureContext 0x1800d85c8
RtlCaptureStackBackTrace 0x1800d8590
RtlCompareMemory 0x1800d85d8
RtlCopySecurityDescriptor 0x1800d8528
RtlCopySid 0x1800d8680
RtlCreateUserSecurityObject 0x1800d8538
RtlDeleteElementGenericTable 0x1800d8638
RtlDeleteResource 0x1800d8658
RtlDeleteSecurityObject 0x1800d8520
RtlEnumerateGenericTable 0x1800d8628
RtlEqualSid 0x1800d8580
RtlFreeSid 0x1800d85a8
RtlGetControlSecurityDescriptor 0x1800d8530
RtlGetCurrentServiceSessionId 0x1800d8608
RtlInitializeGenericTable 0x1800d8648
RtlInitializeResource 0x1800d8650
RtlInitString 0x1800d85e0
RtlInitUnicodeString 0x1800d85f0
RtlInsertElementGenericTable 0x1800d8640
RtlLengthSid 0x1800d8548
RtlLookupElementGenericTable 0x1800d8630
RtlLookupFunctionEntry 0x1800d85c0
RtlNtStatusToDosError 0x1800d8570
RtlNumberGenericTableElements 0x1800d8600
RtlReleaseResource 0x1800d85b0
RtlVerifyVersionInfo 0x1800d8588
RtlVirtualUnwind 0x1800d85b8
VerSetConditionMask 0x1800d85d0
RPCRT4.dll 19
I_RpcBindingInqLocalClientPID 0x1800d7c30
I_RpcBindingIsClientLocal 0x1800d7c18
NdrServerCall2 0x1800d7c58
NdrServerCallAll 0x1800d7c08
RpcBindingToStringBindingW 0x1800d7c00
RpcImpersonateClient 0x1800d7c40
RpcRevertToSelf 0x1800d7c38
RpcServerInqCallAttributesW 0x1800d7c48
RpcServerInqDefaultPrincNameW 0x1800d7c60
RpcServerListen 0x1800d7bf0
RpcServerRegisterAuthInfoW 0x1800d7c28
RpcServerRegisterIf3 0x1800d7c20
RpcServerRegisterIfEx 0x1800d7be8
RpcServerUnregisterIfEx 0x1800d7bf8
RpcServerUseProtseqEpW 0x1800d7be0
RpcStringBindingParseW 0x1800d7c10
RpcStringFreeW 0x1800d7c50
UuidFromStringW 0x1800d7bd8
UuidToStringW 0x1800d7c68
UMPDC.dll 7
PdcTaskClientRegister 0x1800d7c88
PdcTaskClientRequest 0x1800d7ca0
PdcTaskClientUnregister 0x1800d7c78
Pdcv2ActivationClientActivate 0x1800d7c90
Pdcv2ActivationClientDeactivate 0x1800d7c98
Pdcv2ActivationClientRegister 0x1800d7c80
Pdcv2ActivationClientUnregister 0x1800d7ca8
USER32.dll 1
UnregisterDeviceNotification 0x1800d7cb8
WS2_32.dll 4
GetNameInfoW 0x1800d7cd0
WSACleanup 0x1800d7ce0
WSAGetLastError 0x1800d7cc8
WSAStartup 0x1800d7cd8