wtsapi32.dll
v10.0.26100.9278
64-bit
Windows NT
Analyzed
Exported functions 76
IsInteractiveUserSession
#1 · 0x5420
QueryActiveSession
#2 · 0x4f40
QueryUserToken
#3 · 0x18f0
RegisterUsertokenForNoWinlogon
#4 · 0x4f40
WTSActiveSessionExists
#5 · 0x84c0
WTSCloseServer
#6 · 0x5ba0
WTSCloudAuthClose
#7 · 0x11c40
WTSCloudAuthConvertAssertionToSerializedUserCredential
#8 · 0x11c80
WTSCloudAuthDuplicateSerializedUserCredential
#9 · 0x11cf0
WTSCloudAuthGetServerNonce
#10 · 0x11d70
WTSCloudAuthNetworkLogonWithSerializedCredential
#11 · 0x11dc0
WTSCloudAuthOpen
#12 · 0x11e20
WTSConnectSessionA
#13 · 0x77c0
WTSConnectSessionW
#14 · 0x6090
WTSCreateListenerA
#15 · 0x9a90
WTSCreateListenerW
#16 · 0x9bb0
WTSDisconnectSession
#17 · 0x84e0
WTSEnableChildSessions
#18 · 0x78c0
WTSEnumerateListenersA
#19 · 0xa390
WTSEnumerateListenersW
#20 · 0xa4d0
WTSEnumerateProcessesA
#21 · 0x1b00
WTSEnumerateProcessesExA
#22 · 0x2260
WTSEnumerateProcessesExW
#23 · 0x25c0
WTSEnumerateProcessesW
#24 · 0x1ea0
WTSEnumerateServersA
#25 · 0x7d30
WTSEnumerateServersW
#26 · 0x7ee0
WTSEnumerateSessionsA
#27 · 0x4910
WTSEnumerateSessionsExA
#28 · 0x8500
WTSEnumerateSessionsExW
#29 · 0x3c70
WTSEnumerateSessionsW
#30 · 0x3a10
WTSFreeMemory
#31 · 0x4da0
WTSFreeMemoryExA
#32 · 0x6310
WTSFreeMemoryExW
#33 · 0x38b0
WTSGetChildSessionId
#34 · 0x78e0
WTSGetListenerSecurityA
#35 · 0xa670
WTSGetListenerSecurityW
#36 · 0xa760
WTSIsChildSessionsEnabled
#37 · 0x7920
WTSLogoffSession
#38 · 0x86f0
WTSOpenServerA
#39 · 0x5be0
WTSOpenServerExA
#40 · 0x8080
WTSOpenServerExW
#41 · 0x5bc0
WTSOpenServerW
#42 · 0x5c00
WTSQueryListenerConfigA
#43 · 0xa9c0
WTSQueryListenerConfigW
#44 · 0x58a0
WTSQuerySessionInformationA
#45 · 0x29c0
WTSQuerySessionInformationW
#46 · 0x2be0
WTSQueryUserConfigA
#47 · 0x9340
WTSQueryUserConfigW
#48 · 0x5c20
WTSQueryUserToken
#49 · 0x18f0
WTSRegisterSessionNotification
#50 · 0x4dc0
WTSRegisterSessionNotificationEx
#51 · 0x5590
WTSSendMessageA
#52 · 0x8710
WTSSendMessageW
#53 · 0x87a0
WTSSetListenerSecurityA
#54 · 0xab00
WTSSetListenerSecurityW
#55 · 0xabd0
WTSSetRenderHint
#56 · 0x7960
WTSSetSessionInformationA
#57 · 0x8830
WTSSetSessionInformationW
#58 · 0x8830
WTSSetUserConfigA
#59 · 0x9560
WTSSetUserConfigW
#60 · 0x4f70
WTSShutdownSystem
#61 · 0x7980
WTSStartRemoteControlSessionA
#62 · 0x7a50
WTSStartRemoteControlSessionW
#63 · 0x7b50
WTSStopRemoteControlSession
#64 · 0x7b80
WTSTerminateProcess
#65 · 0x89b0
WTSUnRegisterSessionNotification
#66 · 0x4eb0
WTSUnRegisterSessionNotificationEx
#67 · 0x5650
WTSVirtualChannelClose
#68 · 0x5800
WTSVirtualChannelOpen
#69 · 0x6360
WTSVirtualChannelOpenEx
#70 · 0x5670
WTSVirtualChannelPurgeInput
#71 · 0x8aa0
WTSVirtualChannelPurgeOutput
#72 · 0x8ac0
WTSVirtualChannelQuery
#73 · 0x5690
WTSVirtualChannelRead
#74 · 0x8ae0
WTSVirtualChannelWrite
#75 · 0x8c00
WTSWaitSystemEvent
#76 · 0x5430
No function matches your filter.
Imported DLLs & functions 118
StringFromGUID2
0x18001c588
DebugBreak
0x18001c598
IsDebuggerPresent
0x18001c5a0
OutputDebugStringW
0x18001c5a8
DelayLoadFailureHook
0x18001c5b8
ResolveDelayLoadedAPI
0x18001c5c8
GetLastError
0x18001c5d8
SetLastError
0x18001c5f0
SetUnhandledExceptionFilter
0x18001c5e8
UnhandledExceptionFilter
0x18001c5e0
CloseHandle
0x18001c618
GetProcessHeap
0x18001c638
HeapAlloc
0x18001c630
HeapFree
0x18001c628
LocalAlloc
0x18001c648
LocalFree
0x18001c650
LocalReAlloc
0x18001c658
LocalSize
0x18001c668
GetOverlappedResult
0x18001c678
CancelIo
0x18001c688
GetModuleFileNameA
0x18001c6a0
GetModuleHandleExW
0x18001c698
GetModuleHandleW
0x18001c6b0
GetProcAddress
0x18001c6a8
FormatMessageW
0x18001c6c0
GetCurrentProcess
0x18001c6e8
GetCurrentProcessId
0x18001c700
GetCurrentThread
0x18001c6e0
GetCurrentThreadId
0x18001c6d0
OpenProcessToken
0x18001c6d8
OpenThreadToken
0x18001c6f0
TerminateProcess
0x18001c6f8
QueryPerformanceCounter
0x18001c710
RegCloseKey
0x18001c728
RegOpenKeyExW
0x18001c738
RegQueryValueExW
0x18001c730
RegSetValueExW
0x18001c720
RtlCaptureContext
0x18001c748
RtlLookupFunctionEntry
0x18001c750
RtlVirtualUnwind
0x18001c758
WideCharToMultiByte
0x18001c768
AcquireSRWLockExclusive
0x18001c7d8
AcquireSRWLockShared
0x18001c798
CreateMutexExW
0x18001c7c0
CreateSemaphoreExW
0x18001c778
DeleteCriticalSection
0x18001c7b8
EnterCriticalSection
0x18001c790
InitializeCriticalSectionEx
0x18001c7b0
LeaveCriticalSection
0x18001c7c8
OpenSemaphoreW
0x18001c7e8
ReleaseMutex
0x18001c780
ReleaseSemaphore
0x18001c7a0
ReleaseSRWLockExclusive
0x18001c788
ReleaseSRWLockShared
0x18001c7d0
WaitForSingleObject
0x18001c7a8
WaitForSingleObjectEx
0x18001c7e0
Sleep
0x18001c7f8
SleepConditionVariableSRW
0x18001c808
WakeAllConditionVariable
0x18001c800
CloseThreadpoolTimer
0x18001c838
CreateThreadpoolTimer
0x18001c840
SetThreadpoolTimer
0x18001c848
WaitForThreadpoolTimerCallbacks
0x18001c830
RoActivateInstance
0x18001c860
RoGetActivationFactory
0x18001c870
RoInitialize
0x18001c858
RoUninitialize
0x18001c868
WindowsCreateStringReference
0x18001c890
WindowsDeleteString
0x18001c880
WindowsGetStringRawBuffer
0x18001c888
TraceMessage
0x18001c8a0
EventActivityIdControl
0x18001c8b8
EventWriteTransfer
0x18001c8b0
CryptStringToBinaryW
0x18001c520
msvcrt.dll
24
__C_specific_handler
0x18001c8d8
__CxxFrameHandler3
0x18001c8d0
__dllonexit
0x18001c8e8
__RTDynamicCast
0x18001c910
_amsg_exit
0x18001c930
_callnewh
0x18001c908
_initterm
0x18001c8e0
_lock
0x18001c978
_onexit
0x18001c8c8
_purecall
0x18001c958
_unlock
0x18001c8f0
_vsnwprintf
0x18001c960
_wcsupr
0x18001c968
_XcptFilter
0x18001c938
??1type_info@@UEAA@XZ
0x18001c918
free
0x18001c940
malloc
0x18001c928
memcmp
0x18001c920
memcpy
0x18001c900
memcpy_s
0x18001c950
memmove_s
0x18001c948
memset
0x18001c980
swscanf
0x18001c970
wcsncmp
0x18001c8f8
NtDeviceIoControlFile
0x18001c9b8
NtWaitForSingleObject
0x18001c9c0
RtlAdjustPrivilege
0x18001c9b0
RtlMultiByteToUnicodeN
0x18001c998
RtlNtStatusToDosError
0x18001c990
RtlUnicodeToMultiByteN
0x18001c9a8
RtlUnicodeToMultiByteSize
0x18001c9a0
LsaCallAuthenticationPackage
0x18001c558
LsaConnectUntrusted
0x18001c550
LsaDeregisterLogonProcess
0x18001c560
LsaFreeReturnBuffer
0x18001c570
LsaGetLogonSessionData
0x18001c548
LsaLogonUser
0x18001c578
LsaLookupAuthenticationPackage
0x18001c568
No function matches your filter.