TSMSISrv.dll

Description: Windows Installer Coordinator for Remote Desktop Session Host Server

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: f5f62517728574e71f056006f5ec8ee9

File Size: 149.0 KB

Uploaded At: Dec. 1, 2025, 8:28 a.m.

Views: 27

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1f00)
DllGetClassObject (Ordinal: 2, Address: 0x1f40)
DllRegisterServer (Ordinal: 3, Address: 0x2070)
DllUnregisterServer (Ordinal: 4, Address: 0x2170)
OnSessionChange (Ordinal: 5, Address: 0x2520)
Refresh (Ordinal: 6, Address: 0x24b0)
StartComponent (Ordinal: 7, Address: 0x23e0)
StopComponent (Ordinal: 8, Address: 0x23f0)

Imported DLLs & Functions

ADVAPI32.dll

EnableTrace (Address: 0x180018480)
QueryTraceW (Address: 0x180018478)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180018558)
CoDisconnectContext (Address: 0x180018528)
CoImpersonateClient (Address: 0x180018538)
CoInitializeEx (Address: 0x180018540)
CoRegisterClassObject (Address: 0x180018520)
CoRevertToSelf (Address: 0x180018548)
CoRevokeClassObject (Address: 0x180018550)
CoTaskMemAlloc (Address: 0x180018560)
CoTaskMemFree (Address: 0x180018518)
CoTaskMemRealloc (Address: 0x180018568)
CoUninitialize (Address: 0x180018530)
StringFromGUID2 (Address: 0x180018570)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180018588)
IsDebuggerPresent (Address: 0x180018590)
OutputDebugStringA (Address: 0x180018580)
OutputDebugStringW (Address: 0x180018598)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800185a8)
RaiseException (Address: 0x1800185c8)
SetLastError (Address: 0x1800185b0)
SetUnhandledExceptionFilter (Address: 0x1800185c0)
UnhandledExceptionFilter (Address: 0x1800185b8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800185d8)
DuplicateHandle (Address: 0x1800185e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180018600)
HeapAlloc (Address: 0x1800185f0)
HeapFree (Address: 0x1800185f8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180018618)
LocalFree (Address: 0x180018610)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180018670)
FindResourceExW (Address: 0x180018630)
FreeLibrary (Address: 0x180018678)
GetModuleFileNameA (Address: 0x180018638)
GetModuleFileNameW (Address: 0x180018658)
GetModuleHandleExW (Address: 0x180018660)
GetModuleHandleW (Address: 0x180018650)
GetProcAddress (Address: 0x180018640)
LoadLibraryExW (Address: 0x180018628)
LoadResource (Address: 0x180018648)
SizeofResource (Address: 0x180018668)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180018688)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180018698)
CreateThread (Address: 0x1800186a8)
GetCurrentProcess (Address: 0x1800186c8)
GetCurrentProcessId (Address: 0x1800186a0)
GetCurrentThread (Address: 0x1800186b8)
GetCurrentThreadId (Address: 0x1800186e0)
GetProcessId (Address: 0x1800186c0)
OpenThreadToken (Address: 0x1800186b0)
ProcessIdToSessionId (Address: 0x1800186d0)
TerminateProcess (Address: 0x1800186d8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800186f0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180018708)
RegCreateKeyExW (Address: 0x180018728)
RegDeleteValueW (Address: 0x180018730)
RegEnumKeyExW (Address: 0x180018710)
RegOpenKeyExW (Address: 0x180018718)
RegQueryInfoKeyW (Address: 0x180018700)
RegQueryValueExW (Address: 0x180018738)
RegSetValueExW (Address: 0x180018720)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180018748)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180018758)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180018768)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180018778)
AcquireSRWLockShared (Address: 0x1800187c0)
CreateEventW (Address: 0x180018780)
CreateMutexExW (Address: 0x180018800)
CreateSemaphoreExW (Address: 0x1800187f0)
DeleteCriticalSection (Address: 0x1800187d8)
EnterCriticalSection (Address: 0x180018798)
InitializeCriticalSection (Address: 0x1800187a0)
InitializeCriticalSectionAndSpinCount (Address: 0x180018810)
InitializeCriticalSectionEx (Address: 0x1800187a8)
LeaveCriticalSection (Address: 0x180018808)
OpenSemaphoreW (Address: 0x1800187c8)
ReleaseMutex (Address: 0x1800187b8)
ReleaseSemaphore (Address: 0x1800187e8)
ReleaseSRWLockExclusive (Address: 0x180018790)
ReleaseSRWLockShared (Address: 0x1800187e0)
ResetEvent (Address: 0x1800187b0)
SetEvent (Address: 0x1800187f8)
WaitForSingleObject (Address: 0x1800187d0)
WaitForSingleObjectEx (Address: 0x180018788)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180018820)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x180018840)
GetSystemTimeAsFileTime (Address: 0x180018838)
GetTickCount (Address: 0x180018830)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180018860)
CreateThreadpoolTimer (Address: 0x180018868)
SetThreadpoolTimer (Address: 0x180018858)
WaitForThreadpoolTimerCallbacks (Address: 0x180018850)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x180018878)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x180018888)
StartTraceW (Address: 0x180018890)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800188b8)
EventSetInformation (Address: 0x1800188a0)
EventUnregister (Address: 0x1800188b0)
EventWriteTransfer (Address: 0x1800188a8)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x1800188e0)
CheckTokenMembership (Address: 0x1800188d0)
CreateWellKnownSid (Address: 0x1800188c8)
GetTokenInformation (Address: 0x1800188d8)

api-ms-win-security-lsalookup-l1-1-0.dll

LookupAccountSidLocalW (Address: 0x1800188f0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x180018900)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180018920)
OpenSCManagerW (Address: 0x180018910)
OpenServiceW (Address: 0x180018918)

api-ms-win-service-winsvc-l1-1-0.dll

ControlService (Address: 0x180018938)
QueryServiceStatus (Address: 0x180018930)

KERNEL32.dll

ChangeTimerQueueTimer (Address: 0x1800184a0)
CreateTimerQueue (Address: 0x180018490)
CreateTimerQueueTimer (Address: 0x1800184b0)
DeleteTimerQueueEx (Address: 0x180018498)
DeleteTimerQueueTimer (Address: 0x1800184a8)
UnregisterWaitEx (Address: 0x1800184b8)

msvcrt.dll

__C_specific_handler (Address: 0x180018a40)
__CxxFrameHandler3 (Address: 0x180018a50)
__dllonexit (Address: 0x1800189f0)
_amsg_exit (Address: 0x180018998)
_callnewh (Address: 0x180018960)
_CxxThrowException (Address: 0x1800189d0)
_errno (Address: 0x180018950)
_initterm (Address: 0x180018980)
_lock (Address: 0x1800189c0)
_onexit (Address: 0x180018a58)
_purecall (Address: 0x1800189a0)
_unlock (Address: 0x1800189c8)
_vsnprintf (Address: 0x1800189b0)
_vsnwprintf (Address: 0x1800189d8)
_XcptFilter (Address: 0x1800189a8)
??_V@YAXPEAX@Z (Address: 0x180018a48)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180018968)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800189b8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800189e0)
??1exception@@UEAA@XZ (Address: 0x1800189e8)
??1type_info@@UEAA@XZ (Address: 0x180018a30)
??3@YAXPEAX@Z (Address: 0x180018958)
?terminate@@YAXXZ (Address: 0x180018978)
?what@exception@@UEBAPEBDXZ (Address: 0x180018948)
free (Address: 0x180018a20)
malloc (Address: 0x180018a28)
memcmp (Address: 0x180018a00)
memcpy (Address: 0x180018970)
memcpy_s (Address: 0x180018a18)
memmove (Address: 0x1800189f8)
memmove_s (Address: 0x180018988)
memset (Address: 0x180018a60)
realloc (Address: 0x180018990)
wcscat_s (Address: 0x180018a08)
wcscpy_s (Address: 0x180018a10)
wcsncpy_s (Address: 0x180018a38)

ntdll.dll

DbgPrint (Address: 0x180018a80)
EtwEventRegister (Address: 0x180018b30)
EtwEventUnregister (Address: 0x180018b38)
EtwEventWriteFull (Address: 0x180018ae0)
NtQuerySystemInformation (Address: 0x180018aa8)
NtQuerySystemTime (Address: 0x180018b28)
RtlAcquireResourceExclusive (Address: 0x180018ab0)
RtlAcquireResourceShared (Address: 0x180018a78)
RtlAllocateAndInitializeSid (Address: 0x180018ac0)
RtlCaptureContext (Address: 0x180018ad8)
RtlCaptureStackBackTrace (Address: 0x180018aa0)
RtlDeleteElementGenericTable (Address: 0x180018ae8)
RtlDeleteResource (Address: 0x180018b20)
RtlEnumerateGenericTable (Address: 0x180018af8)
RtlFreeSid (Address: 0x180018a90)
RtlInitializeGenericTable (Address: 0x180018af0)
RtlInitializeResource (Address: 0x180018b18)
RtlInsertElementGenericTable (Address: 0x180018b00)
RtlLookupElementGenericTable (Address: 0x180018b08)
RtlLookupFunctionEntry (Address: 0x180018ad0)
RtlNtStatusToDosError (Address: 0x180018ab8)
RtlNumberGenericTableElements (Address: 0x180018b10)
RtlReleaseResource (Address: 0x180018a70)
RtlVerifyVersionInfo (Address: 0x180018a98)
RtlVirtualUnwind (Address: 0x180018ac8)
VerSetConditionMask (Address: 0x180018a88)

OLEAUT32.dll

LoadTypeLib (Address: 0x1800184d8)
RegisterTypeLib (Address: 0x1800184f0)
SysAllocString (Address: 0x1800184e0)
SysFreeString (Address: 0x1800184c8)
SysStringLen (Address: 0x1800184e8)
UnRegisterTypeLib (Address: 0x1800184d0)
VarUI4FromStr (Address: 0x1800184f8)

RPCRT4.dll

I_RpcOpenClientProcess (Address: 0x180018508)