Static | ZeroBOX

PE Compile Time

2010-10-12 11:25:09

PDB Path

termsrv.pdb

PE Imphash

7df88e0684c200a3b664545c1d9e29ed

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000b7e81 0x000b8000 6.29931480576
.rdata 0x000b9000 0x0004938a 0x00049400 5.24597237746
.data 0x00103000 0x00005000 0x00000800 3.28523194182
.pdata 0x00108000 0x000075fc 0x00007600 5.86102155433
.didat 0x00110000 0x00000448 0x00000600 2.30750434903
.rsrc 0x00111000 0x000058b8 0x00005a00 3.6876483253
.reloc 0x00117000 0x00002050 0x00002200 5.38561143718

Resources

Name Offset Size Language Sub-language File type
MUI 0x001167b8 0x00000100 LANG_ENGLISH SUBLANG_ENGLISH_US data
REGISTRY 0x00116718 0x00000099 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators
REGISTRY 0x00116718 0x00000099 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators
WEVT_TEMPLATE 0x00111588 0x00004e2e LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x001111a0 0x000003e8 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x1800c4fc0 _resetstkoflw
0x1800c4fc8 ?terminate@@YAXXZ
0x1800c4fd0 toupper
0x1800c4fd8 qsort
0x1800c4fe0 swprintf_s
0x1800c4fe8 iswspace
0x1800c4ff0 wcsrchr
0x1800c4ff8 wcschr
0x1800c5000 _wcsnicmp
0x1800c5008 _stricmp
0x1800c5010 _vsnprintf
0x1800c5020 free
0x1800c5028 ??1exception@@UEAA@XZ
0x1800c5030 malloc
0x1800c5038 _callnewh
0x1800c5040 wcstok_s
0x1800c5048 memmove_s
0x1800c5058 _CxxThrowException
0x1800c5060 __CxxFrameHandler3
0x1800c5068 memcpy
0x1800c5070 memmove
0x1800c5078 _XcptFilter
0x1800c5080 _amsg_exit
0x1800c5088 _initterm
0x1800c5090 _lock
0x1800c5098 _unlock
0x1800c50a0 __dllonexit
0x1800c50a8 _onexit
0x1800c50b0 _errno
0x1800c50b8 memcpy_s
0x1800c50c0 _vsnwprintf
0x1800c50c8 _wcsicmp
0x1800c50d0 _purecall
0x1800c50d8 __C_specific_handler
0x1800c50e0 realloc
0x1800c50e8 ??1type_info@@UEAA@XZ
0x1800c50f8 wcsncpy_s
0x1800c5100 ??_V@YAXPEAX@Z
0x1800c5110 ??3@YAXPEAX@Z
0x1800c5118 memcmp
0x1800c5120 memset
Library ntdll.dll:
0x1800c5130 NtOpenProcess
0x1800c5138 NtOpenProcessToken
0x1800c5140 RtlDeleteSecurityObject
0x1800c5168 RtlLengthSid
0x1800c5170 NtDuplicateToken
0x1800c5180 NtQueryInformationToken
0x1800c5188 RtlAcquireResourceShared
0x1800c5190 RtlNtStatusToDosError
0x1800c5198 DbgPrint
0x1800c51a0 RtlEqualSid
0x1800c51a8 RtlVerifyVersionInfo
0x1800c51b0 RtlCaptureStackBackTrace
0x1800c51b8 NtQuerySystemInformation
0x1800c51c0 NtQueryVirtualMemory
0x1800c51c8 RtlFreeSid
0x1800c51d0 RtlReleaseResource
0x1800c51d8 RtlVirtualUnwind
0x1800c51e0 RtlLookupFunctionEntry
0x1800c51e8 RtlCaptureContext
0x1800c51f0 VerSetConditionMask
0x1800c51f8 RtlCompareMemory
0x1800c5200 RtlInitString
0x1800c5208 NtCreateFile
0x1800c5210 RtlInitUnicodeString
0x1800c5218 RtlAdjustPrivilege
0x1800c5230 RtlClearBits
0x1800c5238 RtlAreBitsSet
0x1800c5240 RtlFindClearBitsAndSet
0x1800c5248 RtlInitializeBitMap
0x1800c5250 NtQuerySystemTime
0x1800c5258 EtwEventWriteTransfer
0x1800c5260 RtlEnumerateGenericTable
0x1800c5288 RtlInitializeResource
0x1800c5290 RtlDeleteResource
0x1800c5298 EtwEventWriteFull
0x1800c52a8 EtwEventRegister
0x1800c52b0 EtwEventUnregister
0x1800c52b8 RtlCopySid
Library api-ms-win-core-errorhandling-l1-1-0.dll:
0x1800c4988 GetLastError
0x1800c4998 SetLastError
0x1800c49a0 RaiseException
0x1800c49a8 UnhandledExceptionFilter
Library api-ms-win-core-libraryloader-l1-2-0.dll:
0x1800c4a90 LoadStringW
0x1800c4a98 GetModuleHandleW
0x1800c4aa0 LoadLibraryExW
0x1800c4aa8 FreeLibrary
0x1800c4ab0 GetModuleFileNameW
0x1800c4ab8 FindResourceExW
0x1800c4ac0 LoadResource
0x1800c4ac8 SizeofResource
0x1800c4ad0 GetProcAddress
0x1800c4ad8 GetModuleFileNameA
0x1800c4ae0 GetModuleHandleExW
Library api-ms-win-core-synch-l1-1-0.dll:
0x1800c4c70 WaitForSingleObject
0x1800c4c78 OpenSemaphoreW
0x1800c4c80 OpenEventW
0x1800c4c88 WaitForSingleObjectEx
0x1800c4c90 WaitForMultipleObjectsEx
0x1800c4c98 CreateEventW
0x1800c4ca0 DeleteCriticalSection
0x1800c4cb0 SetEvent
0x1800c4cb8 EnterCriticalSection
0x1800c4cc0 LeaveCriticalSection
0x1800c4cd0 AcquireSRWLockExclusive
0x1800c4cd8 ReleaseSRWLockExclusive
0x1800c4ce0 ReleaseMutex
0x1800c4ce8 ReleaseSemaphore
0x1800c4cf0 ResetEvent
0x1800c4cf8 CreateSemaphoreExW
0x1800c4d00 CreateMutexExW
0x1800c4d08 InitializeSRWLock
0x1800c4d10 ReleaseSRWLockShared
0x1800c4d18 AcquireSRWLockShared
Library api-ms-win-core-processthreads-l1-1-0.dll:
0x1800c4b28 ExitThread
0x1800c4b30 GetCurrentThreadId
0x1800c4b38 TlsAlloc
0x1800c4b40 TerminateProcess
0x1800c4b48 CreateProcessW
0x1800c4b50 OpenProcessToken
0x1800c4b58 CreateThread
0x1800c4b60 ProcessIdToSessionId
0x1800c4b68 GetCurrentThread
0x1800c4b70 OpenThreadToken
0x1800c4b78 TlsGetValue
0x1800c4b80 GetExitCodeThread
0x1800c4b88 GetCurrentProcess
0x1800c4b90 GetCurrentProcessId
0x1800c4b98 TlsSetValue
0x1800c4ba0 CreateProcessAsUserW
0x1800c4ba8 TlsFree
Library WS2_32.dll:
0x1800c4908 WSAGetLastError
0x1800c4910 WSAStartup
0x1800c4918 WSACleanup
0x1800c4920 GetNameInfoW
Library api-ms-win-core-debug-l1-1-0.dll:
0x1800c4940 OutputDebugStringA
0x1800c4948 IsDebuggerPresent
0x1800c4950 OutputDebugStringW
0x1800c4958 DebugBreak
Library api-ms-win-core-synch-l1-2-0.dll:
0x1800c4d30 Sleep
Library api-ms-win-core-handle-l1-1-0.dll:
0x1800c49e0 CloseHandle
0x1800c49e8 DuplicateHandle
Library api-ms-win-core-heap-l2-1-0.dll:
0x1800c4a18 LocalAlloc
0x1800c4a20 LocalFree
Library api-ms-win-core-registry-l1-1-0.dll:
0x1800c4be8 RegQueryValueExW
0x1800c4bf0 RegOpenKeyExW
0x1800c4bf8 RegEnumKeyExW
0x1800c4c00 RegQueryInfoKeyW
0x1800c4c08 RegGetValueW
0x1800c4c10 RegSetValueExW
0x1800c4c18 RegCreateKeyExW
0x1800c4c20 RegDeleteValueW
0x1800c4c28 RegCloseKey
Library api-ms-win-core-localization-l1-2-0.dll:
0x1800c4b08 FormatMessageW
Library api-ms-win-core-heap-l1-1-0.dll:
0x1800c49f8 HeapFree
0x1800c4a00 HeapAlloc
0x1800c4a08 GetProcessHeap
Library api-ms-win-core-threadpool-l1-2-0.dll:
0x1800c4da0 CloseThreadpool
0x1800c4da8 CreateThreadpool
0x1800c4dc0 CloseThreadpoolTimer
0x1800c4de0 CreateThreadpoolTimer
0x1800c4df8 SetThreadpoolTimer
Library api-ms-win-security-base-l1-1-0.dll:
0x1800c4ed8 MakeAbsoluteSD
0x1800c4ee0 GetAclInformation
0x1800c4ee8 MakeSelfRelativeSD
0x1800c4ef0 ImpersonateLoggedOnUser
0x1800c4ef8 RevertToSelf
0x1800c4f00 EqualSid
0x1800c4f08 CopySid
0x1800c4f10 GetLengthSid
0x1800c4f18 IsValidSid
0x1800c4f20 AllocateLocallyUniqueId
0x1800c4f28 GetTokenInformation
0x1800c4f40 GetAce
0x1800c4f48 GetFileSecurityW
0x1800c4f50 CreateWellKnownSid
0x1800c4f58 AddAce
0x1800c4f60 CheckTokenMembership
0x1800c4f70 InitializeAcl
0x1800c4f80 DuplicateTokenEx
0x1800c4f88 DuplicateToken
0x1800c4f98 AllocateAndInitializeSid
0x1800c4fb0 FreeSid
Library api-ms-win-core-processenvironment-l1-1-0.dll:
Library api-ms-win-core-string-l2-1-0.dll:
0x1800c4c48 CharNextW
Library api-ms-win-core-string-l1-1-0.dll:
0x1800c4c38 MultiByteToWideChar
Library api-ms-win-core-sysinfo-l1-1-0.dll:
0x1800c4d58 GetVersionExW
0x1800c4d60 GetSystemDirectoryW
0x1800c4d68 GetSystemTime
0x1800c4d70 GetSystemTimeAsFileTime
0x1800c4d78 GetTickCount
0x1800c4d80 GetTickCount64
Library api-ms-win-core-sysinfo-l1-2-0.dll:
0x1800c4d90 GetProductInfo
Library api-ms-win-core-libraryloader-l1-2-1.dll:
0x1800c4af8 LoadLibraryW
Library RPCRT4.dll:
0x1800c4818 RpcServerListen
0x1800c4820 RpcServerUnregisterIfEx
0x1800c4830 RpcStringBindingParseW
0x1800c4838 RpcStringFreeW
0x1800c4848 RpcImpersonateClient
0x1800c4850 RpcRevertToSelf
0x1800c4860 NdrServerCallAll
0x1800c4870 RpcServerRegisterIf3
0x1800c4880 UuidToStringW
0x1800c4888 UuidFromStringW
0x1800c4890 NdrServerCall2
0x1800c4898 RpcServerRegisterIfEx
0x1800c48a8 RpcServerUseProtseqEpW
Library api-ms-win-core-io-l1-1-0.dll:
0x1800c4a40 DeviceIoControl
Library api-ms-win-core-file-l1-1-0.dll:
0x1800c49b8 QueryDosDeviceW
0x1800c49c0 CreateFileW
0x1800c49c8 CreateDirectoryW
0x1800c49d0 CompareFileTime
Library api-ms-win-core-synch-l1-2-1.dll:
0x1800c4d40 CreateSemaphoreW
0x1800c4d48 WaitForMultipleObjects
Library api-ms-win-core-profile-l1-1-0.dll:
0x1800c4bc8 QueryPerformanceCounter
Library api-ms-win-core-string-obsolete-l1-1-0.dll:
0x1800c4c58 lstrcmpW
0x1800c4c60 lstrcmpiW
Library api-ms-win-core-threadpool-legacy-l1-1-0.dll:
0x1800c4e08 QueueUserWorkItem
0x1800c4e10 CreateTimerQueue
0x1800c4e18 CreateTimerQueueTimer
0x1800c4e20 DeleteTimerQueueEx
0x1800c4e28 UnregisterWaitEx
0x1800c4e30 DeleteTimerQueueTimer
Library api-ms-win-core-kernel32-legacy-l1-1-0.dll:
0x1800c4a58 GetComputerNameW
0x1800c4a60 UnregisterWait
Library api-ms-win-core-kernel32-legacy-l1-1-1.dll:
0x1800c4a70 VerifyVersionInfoW
Library api-ms-win-core-kernel32-private-l1-1-0.dll:
0x1800c4a80 CheckElevationEnabled
Library api-ms-win-devices-query-l1-1-0.dll:
0x1800c4e50 DevFindProperty
0x1800c4e58 DevCloseObjectQuery
0x1800c4e60 DevCreateObjectQuery
Library KERNELBASE.dll:
0x1800c4808 WTSIsServerContainer
Library USER32.dll:
Library KERNEL32.dll:
0x1800c47f8 OOBEComplete
Library UMPDC.dll:
0x1800c48c0 PdcTaskClientRegister
0x1800c48d8 PdcTaskClientRequest
0x1800c48e0 PdcTaskClientUnregister
Library api-ms-win-eventing-classicprovider-l1-1-0.dll:
0x1800c4e70 TraceMessage
Library api-ms-win-eventing-provider-l1-1-0.dll:
0x1800c4ea0 EventWriteTransfer
0x1800c4ea8 EventActivityIdControl
0x1800c4eb0 EventUnregister
0x1800c4eb8 EventProviderEnabled
0x1800c4ec0 EventRegister
0x1800c4ec8 EventSetInformation
Library api-ms-win-core-processthreads-l1-1-1.dll:
0x1800c4bb8 OpenProcess
Library api-ms-win-core-psapi-l1-1-0.dll:
0x1800c4bd8 K32EnumProcessModules
Library api-ms-win-eventing-controller-l1-1-0.dll:
0x1800c4e80 StartTraceW
0x1800c4e88 ControlTraceW
0x1800c4e90 EnableTraceEx2
Library api-ms-win-core-timezone-l1-1-0.dll:
0x1800c4e40 SystemTimeToFileTime
Library api-ms-win-core-delayload-l1-1-1.dll:
0x1800c4978 ResolveDelayLoadedAPI
Library api-ms-win-core-delayload-l1-1-0.dll:
0x1800c4968 DelayLoadFailureHook
Library api-ms-win-core-heap-obsolete-l1-1-0.dll:
0x1800c4a30 LocalSize
Library api-ms-win-core-apiquery-l1-1-0.dll:

Exports

Ordinal Address Name
1 0x18002e020 ServiceMain
2 0x18002e950 SvchostPushServiceGlobals
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.didat
@.reloc
H!|$hH
D$h!|$PH
H!t$@3
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
9u taH
]0f93tXH
x UATAWH
@USVWAWH
PA__^[]
L$ SWH
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
UVWAVAWH
PA_A^_^]
` UAUAWH
@USVWH
x UATAUAVAWH
E9l$`t
D9.tRH
D9l$hH
E9l$`t
A_A^A]A\]
@USVWH
@USAWH
UWATAVAWH
A_A^A\_]
UWATAVAWH
A_A^A\_]
H9l$Pt
\$ UVWAVAWH
A_A^_^]
t$ WATAUAVAWH
A_A^A]A\_
k VWAVH
t$ UWATAVAWH
t\D9sxt
A_A^A\_]
tMD9uxt
WAVAWH
A_A^_
p WAVAWH
@A_A^_
D$h;D$p
D$h;D$p
fA9,It
@SUVWATAVAWH
PA_A^A\_^][
C I![ H
l$ VWAVH
UVWATAUAVAWH
A_A^A]A\_^]
@USWATAUAVAWH
A_A^A]A\_[]
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
A_A^_^]
@USVWATAUAVAWH
D$`9=l
A_A^A]A\_^[]
VAVAWH
0A_A^^
UVWATAUAVAWH
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
D;|$0r
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVH
tMA9]xt
A^A]A\_^[]
H91uKH
H91u]H
UVWATAUAVAWH
t`9~xt
A_A^A]A\_^]
L$ UWATAUAVAWH
A_A^A]A\_]
L$ SVWH
H99u)H
UVWATAVH
0A^A\_^]
E0!}0E3
H!X !X
@USWATAWH
0A_A\_[]
UWAUAVAWH
A_A^A]_]
h VWATAVAWH
9\$Pt$L
A_A^A\_^
@USVWAVH
pA^_^[]
x ATAVAWH
A_A^A\
USVWATAUAVAWH
xA_A^A]A\_^[]
\$ UVWATAUAVAWH
PA_A^A]A\_^]
@USVWAVH
PA^_^[]
UWATAVAWH
A_A^A\_]
p WAVAWH
A_A^_
VWATAVAWH
L!t$PD
A_A^A\_^
@SUVWATAVAWH
pA_A^A\_^][
@USVWAUAVAWH
A_A^A]_^[]
x ATAVAWH
A_A^A\
@SUVWATAVAWH
@A_A^A\_^][
UVWAUAVH
pA^A]_^]
@SVWAVAWH
PA_A^_^[
H!\$@9
H!\$@9
t$ UWAVH
s UWAVH
USVWATAUAVAWH
hA_A^A]A\_^[]
@USVWATAVAWH
A_A^A\_^[]
@USVWAVH
`A^_^[]
USWATAWH
`A_A\_[]
x UAVAWH
x UAVAWH
@USVWATAVAWH
A_A^A\_^[]
UVWATAUAVAWH
L$hH!t$ A
A_A^A]A\_^]
l$ VWAVH
@USVWATAUAVH
H!t$@H
L$PH!t$8M
L$@H!t$
A^A]A\_^[]
\$ UVWH
t$ WAVAWH
A_A^_
x ATAVAWH
A_A^A\
VWATAVAWH
A_A^A\_^
@USVWAWH
pA__^[]
UVWATAVH
pA^A\_^]
\$ UVWATAUAVAWH
<$I9?u'H
A_A^A]A\_^]
@USVATAUAVAWH
A_A^A]A\^[]
e A^_]
USVWATAUAVAWH
ehA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
UVWATAUAVAWH
0A_A^A]A\_^]
D9-@B
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
UVWATAUAVAWH
ePA_A^A]A\_^]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
UVWATAUAVAWH
ePA_A^A]A\_^]
UVWAVAWH
0A_A^_^]
l$ VWATAVAWH
A_A^A\_^
@SUVWAVH
A^_^][
UWATAVAWH
ePA_A^A\_]
@SUVWH
t$ UWATAVAWH
A_A^A\_]
UVWATAUAVAWH
@A_A^A]A\_^]
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
WAVAWH
\$P9_`t
0A_A^_
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
UVWAVAWH
A_A^_^]
@USVWATAVAWH
A_A^A\_^[]
@SUVWAVH
A^_^][
@SUVWAVH
A^_^][
@USVWAVH
PA^_^[]
SVWAVH
8A^_^[
ATAVAWH
A_A^A\
LcA<E3
u HcA<H
H3E H3E
` UAVAWH
UAVAWH
E(=csm
E8=csm
EH=csm
EX=csm
Eh=csm
Ex=csm
D$89|$4
D9-a}
D9}Hv?L
>L!e`H
H9\$0t
uZ!E0L
M !E H
EPfD98t
EPfD98t
x&H9\$Pt
x&H9\$`t
x$H9\$0t
x$H9\$Ht
x$H9\$Ht
Y@H9;u+L
UWATAVAWH
A_A^A\_]
H9yPtPH
WAVAWH
A_A^_
UVWAVAWH
@A_A^_^]
USVWATAUAVAWH
uHA9^`t
E9~`t}I
(A_A^A]A\_^[]
t<fA9(t6I
\$ UVWATAUAVAWH
t$`v@H
A_A^A]A\_^]
t$ WAVAWH
A_A^_
[ UVWH
UVWATAUAVAWH
A_A^A]A\_^]
t$ UWAVH
@USVWATAUAVAWH
u`f9]`tCH
D$XH9D$P
A_A^A]A\_^[]
@SUVWAVAWH
A_A^_^][
UVWAVAWH
D$0fD98t
A_A^_^]
VWATAVAWH
A_A^A\_^
WAVAWH
A_A^_
\$ UVWH
x UAVAWH
H!\$@H
[ UVWH
|$ UATAUAVAWH
A_A^A]A\]
D#D$@D
\$ UVWAVAWH
t"D8=2
L9{0t#H
A_A^_^]
WAVAWH
@A_A^_
\$ UVWAVAWH
A_A^_^]
@SUVWH
UWATAVAWH
A_A^A\_]
\$ UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
@A_A^_
@USVWAVH
A^_^[]
WATAUAVAWH
A_A^A]A\_
K SVWH
l$ VWAWH
s WAVAWH
@A_A^_
t$ WAVAWH
0A_A^_
t$ WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
WAVAWH
fD;8uwH
7fD;>u
fD;0t~H;
A_A^_
WAVAWH
}0H+}(H
0A_A^_
\$ UVWATAUAVAWH
fB9<Bu
A_A^A]A\_^]
WAVAWH
0A_A^_
WAVAWH
0A_A^_
WAVAWH
0A_A^_
@SUVWAVAWH
~8D8~@u;L9?u$E3
HA_A^_^][
p WAVAWH
A_A^_
x ATAVAWH
A_A^A\
L$ UVWATAUAVAWH
pA_A^A]A\_^]
UVWAVAWH
H!t$PM
A_A^_^]
@SUVWATAVAWH
A_A^A\_^][
@SUVWAVAWH
A_A^_^][
\$ UVWH
\$ UVWATAUAVAW
f;D$@uhD
A_A^A]A\_^]
D$XH9D$Pt
@USVWATAUAVAWH
fD94Gu
A_A^A]A\_^[]
WAVAWH
A_A^_
x ATAVAWH
H9{Hs>H
A_A^A\
rJfD97w
C9fD97u-
D$0D9r
UATAUAVAWH
A_A^A]A\]
p WAVAWH
9_`t$H
0A_A^_
UVWAVAWH
H!l$P9
A_A^_^]
x UATAUAVAWH
E9|$`t
E9|$`t
E9|$`t
A_A^A]A\]
p WAVAWH
9_`t$H
x UAVAWH
D$0fD98t
D$0fD98t
HcL$ HcD$$H
X UVWH
WAVAWH
A_A^_
UVWAVAWH
PA_A^_^]
l$ VWAVH
UATAUAVAWH
fD90t,
A_A^A]A\]
UVWATAUAVAWH
F0D8#ubD8c
`A_A^A]A\_^]
UATAUAVAWH
t&E9V0t E
0A_A^A]A\]
h UAVAWH
\$ UVWH
WAVAWH
@USVWATAUAVAWH
E09](u
A_A^A]A\_^[]
UVAUAVAWH
A_A^A]^]
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
A9|$`t
A_A^A]A\_^]
WAVAWH
0A_A^_
@USVWH
t$ UWATAVAWH
A_A^A\_]
\$ UVWAVAWH
PA_A^_^]
VWATAVAWH
H!|$PI
A_A^A\_^
t59^ u
@USVWAVH
`A^_^[]
t$hH+L$@u
H+L$H3
UVWATAVH
A^A\_^]
|$ UATAUAVAWH
A_A^A]A\]
UAVAWH
UVWATAUAVAWH
+D$PA;
+D$PA;
+D$PA;
+D$PA;
+D$TA;
rD9UHv
+D$TA;
+D$TA;
+D$TA;
+D$TA;
A_A^A]A\_^]
@SUVWAVH
7D9u`t
@A^_^][
WAVAWH
fD9<Zu
fE9<nu
A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
t$ UATAVH
x UATAUAVAWH
A_A^A]A\]
@USVWATAVAWH
A_A^A\_^[]
@USVWATAVAWH
A_A^A\_^[]
UVWAVAWH
A_A^_^]
@USVWAVH
PA^_^[]
UVWATAUAVAWH
t$HfA97u
fD9>t&M
A_A^A]A\_^]
@USVWAVH
A^_^[]
WAVAWH
A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
\$ UVWAVAWH
A_A^_^]
UVWATAUAVAWH
t$Dt)E
D9d$@t2H
A_A^A]A\_^]
@USVWAUAVAWH
A_A^A]_^[]
@USVWATAVAWH
A_A^A\_^[]
UATAWH
UVWATAUAVAWH
9L$PtMH
\$HD9l$Pt8H
A_A^A]A\_^]
UVAUAVAWH
A_A^A]^]
UVWATAUAVAWH
A_A^A]A\_^]
UAVAWH
UVWAVAWH
A_A^_^]
r-fD9R
@SUVWAVAWH
A_A^_^][
UVWATAUAVAWH
D9l$0t
A_A^A]A\_^]
@SUVWAVH
A^_^][
@USVWATAUAVAWH
A_A^A]A\_^[]
UVWATAUAVAWH
D9d$Dt
A_A^A]A\_^]
@SUVWATAVAWH
A_A^A\_^][
@SUVWAVH
A^_^][
@SUVATAUAVAWH
D9l$ t
A_A^A]A\^][
t$ WAVAWH
@SUVWATAUAVAWH
A_A^A]A\_^][
@SUVWAVH
A^_^][
@SUVWATAVAWH
A_A^A\_^][
@SUVWATAUAVAWH
A_A^A]A\_^][
x UATAUAVAWH
D$`H!\$hL
D9l$Dt
A_A^A]A\]
@SUVWAVH
A^_^][
@SUVWAVH
A^_^][
H!\$@!
H WATAVH
@A^A\_
@SUVWAWH
0A__^][
@SUVWATAUAVAWH
XA_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
x ATAVAWH
A_A^A\
{ ATAVAWH
A_A^A\
@USVWATAVAWH
A_A^A\_^[]
UWATAVAWH
A_A^A\_]
[ UVWH
@USWATAVH
@A^A\_[]
@USVWAWH
`A__^[]
UVWAVAWH
pA_A^_^]
UWAUAVAWH
`A_A^A]_]
@USVWAUAVAWH
9EHu7H
L!|$ L
`A_A^A]_^[]
UWAUAVAWH
A_A^A]_]
@USWAVH
hA^_[]
@USVWH
@USVATAVH
A^A\^[]
UVWATAUAVAWH
PA_A^A]A\_^]
WAVAWH
A_A^_
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
H!|$0M
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
D$@tKD
tAD9\$Lu
r6D9\$L|/I
I;8u<H
@USVWAVH
0A^_^[]
;MD~vH
x ATAVAWH
A_A^A\
d$ UAVAWH
I09C$t
79o u+H
H9{0tD
t$ UWAVH
UVWAVAWH
A_A^_^]
\$ UVWATAUAVAWH
H!\$HL
H!\$xH
H!\$PH!\$pH!\$hH!\$`H!\$8L
A_A^A]A\_^]
@USVWAVH
0A^_^[]
UVWATAVH
A^A\_^]
t$ UWAUAVAWH
A_A^A]_]
t$ UWATAUAWH
D$PHcD$XH
HcD$XH
v2HcD$XH
v2HcD$XH
HcD$XH
A_A]A\_]
UWAUAVAWH
A_A^A]_]
UVWATAUAVAWH
A_A^A]A\_^]
v6HcD$hH
UAVAWH
\$ UVWATAUH
A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
|$ A9~`t
A_A^A]A\_^]
\$ UVWAVAWH
A_A^_^]
t$ UWAVH
UVWAVAWH
9}0t@H
PA_A^_^]
WAVAWH
A_A^_
A$D9J@u
@D9Jpu
D9Jxu(
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
l$ VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
HA_A^A]A\_^[]
x UATAUAVAWH
l$`v@H
D9l$Xt
D9l$`E
A_A^A]A\]
@SUVWAVH
pA^_^][
@USVWATAVAWH
A_A^A\_^[]
\$ UVWAVAWH
A_A^_^]
@USVWAVH
@A^_^[]
@USVWH
@USVWH
@SUVWAV
A^_^][
@USVWATAUAVAWH
x0L9't+
ykD9-{
A_A^A]A\_^[]
x UAVAWH
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
A_A^_^]
UWATAVAWH
A_A^A\_]
UVWAVAWH
PA_A^_^]
UVWAUAVH
A^A]_^]
t$ UWAVH
fD94Zu
UATAVH
\$ UVAVH
T$ A9@
9\$,v+
@USWAUAWH
H+D$@u
H+D$@u
H+D$HH
H+D$@u
H+D$HH
A_A]_[]
UVWAVAWH
pA_A^_^]
UVWATAUAVAWH
0A_A^A]A\_^]
@USVWATAUAVAWH
\$89^`t
A_A^A]A\_^[]
\$ UVWH
H!\$0H
UWATAUAVH
tFD95Wt
A^A]A\_]
x ATAVAWH
A_A^A\
VWATAVAWH
A_A^A\_^
@USVWATAUAVAWH
l$HD9k`t
A_A^A]A\_^[]
x ATAVAWH
A_A^A\
UVWAVAWH
PA_A^_^]
H!l$HH
@USVWATAUAVAWH
tJfD9/t6H
fD9/uXD;
A_A^A]A\_^[]
UAVAWH
\$ UVWAVAWH
9t$0tIH
A_A^_^]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
0A_A^_
t$ UWAVH
@SUVWAVH
PA^_^][
\$ UVWATAUAVAWH
|$8D9{`t
A_A^A]A\_^]
x ATAVAWH
A_A^A\
UAVAWH
USVWATAUAVAWH
L9|$xt
u0L9|$xt
A_A^A]A\_^[]
UAVAWH
\$ UVWH
UAVAWH
9t$hu4
@UVWAVAWH
`A_A^_^]
@SUVWAVAWH
hA_A^_^][H
\$ UVWATAUAVAWH
A_A^A]A\_^]
@USVWAVAWH
HA_A^_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
t$ WAVAWH
0A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
|$ AVH
\$ VWAVH
UWATAVAWH
]H9^`t
0A_A^A\_]
UVWAVAWH
]@9^`t
A_A^_^]
|$ AVH
x UAVAWH
UVWAVAWH
A_A^_^]
p WAVAWH
A_A^_
UATAUAVAWH
A_A^A]A\]
UVWAVAWH
`A_A^_^]
UVWATAUAVAWH
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
t$ UWAUAVAWH
yeD9-U\
A_A^A]_]
UATAUAVAWH
A_A^A]A\]
UVWAVAWH
uJfD9>uL
A_A^_^]
x UAVAWH
fD9t$0u
f9L$2t
UWAUAVAWH
A_A^A]_]
@UVWATAUAVAWH
mHfA9}
9}hvPL
A_A^A]A\_^]
WAVAWH
A_A^_
L$`!\$@!\$8!\$0E
VWATAUAVAWH
!t$h!t$d!t$`A!s A!s
A!{ !|$`!|$d!|$hI
L$PH!|$HI
L$@H!|$8I
L$0H!|$(I
A_A^A]A\_^
UVWAVAWH
A_A^_^]
UVWATAUAVAWH
yzD9%;
+D$PA;
+D$PA;
D$x;Eht
pD9Uhv
+D$PA;
+D$PA;
A_A^A]A\_^]
UVWATAUAVAWH
L$`D9U
L$`D9U
L$`D9U
L$`D9U
L$`D9U
+D$PA;
+D$PA;
+D$PA;
+D$PA;
+D$TA;
D$X;E t
rD9U v
+D$TA;
+D$TA;
A_A^A]A\_^]
UVWATAUAVAWH
L$`D9U
L$`D9U
L$`D9U
L$`D9U
L$`D9U
+D$PA;
+D$PA;
+D$PA;
+D$PA;
+D$TA;
D$X;E0t
rD9U0v
+D$TA;
+D$TA;
A_A^A]A\_^]
UVWATAUAVAWH
L9t$huQL
D;\$`r
L9t$huQL
L$XD9t$`vRD
D;\$`r
L9t$huQL
L$XD9t$`vRD
D;\$`r
L9t$huWL
L$XD9t$`vWD
L9t$huNL
L$XD9t$`vRD
D;\$`r
L9t$huNL
L$XD9t$`vRD
D;\$`r
L9t$hu
+D$0A;
+D$0A;
+D$0A;
+D$0A;
+D$4A;
+D$4A;
+D$4A;
A_A^A]A\_^]
@SUVWAVH
PA^_^][
x UAVAWH
@USVWAVH
E0D90t
A^_^[]
D$(L!D$ H
@SUVWATAVH
H!|$0H
D$P!|$(A
D$8D!D$0fD
d$(L!D$ H
A^A\_^][
D$PuLH
UWATAVAWH
E_!}_L
H!|$ I
A_A^A\_]
UATAUAVAWH
H!u(H!u H!u
e@A_A^A]A\]
l$ VWAVH
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A0L9N@tw
H8f;N8
0A_A^A]A\_^]
|$ UATAUAVAWH
0A_A^A]A\]
@USVWATAUAVAWH
L!t$ A
A_A^A]A\_^[]
USVWATAUAVAWH
hA_A^A]A\_^[]
x UATAUAVAWH
A_A^A]A\]
@USVWATAVAWH
A_A^A\_^[]
@USVWATAVAWH
A_A^A\_^[]
@USVWAUAVAWH
A_A^A]_^[]
t$ UWAVH
9D$8t(L
WAVAWH
A_A^_
H9\$ s
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
USVWATAUAVAWH
eXA_A^A]A\_^[]
WAVAWH
A_A^_
{ UAVAWH
VWATAVAWH
A_A^A\_^
UWATAVAWH
A_A^A\_]
` UAVAWH
fE94Ht
UATAUAVAWH
A_A^A]A\]
@USVWAVAWH
A_A^_^[]
gRIOSF
OS is not running in VM. Not starting the vmbus listener.
CListenerEx::Start when it had already started
CListenerEx::Start
Starting Listener %ws
%s with Trace ID 0x%x
ReadRegDWord for Telemetry InitInterval failed
ID for Remote sessions override registry key is absent. Checking GP
ID for Remote sessions GP setting is absent, using default: TRUE
Done starting Timer Handler Manager
CRemoteConnectionManager Starts...
ID for Remote sessions state is
CRemoteConnectionManager::Start
Starting Timer Handler Manager
SingleSessionPerUser
Enabled
RCMObjectStorage
CListenerEx/Lookup only
WilStaging_02
Default Session Arbitration Helper return 0x%x
TIMER OnLogon called
TIMER OnTerminated called
CTSTimerHandler
No arbitrator helper
CDefaultSessionArbitrationFilter
RCMPrivateRpc already started
SessionArbitrationHelper
CArbRequestNode
TSLicense
CDefTSNotifySink
CTSTimerHandler Destructor being called
uTIMER OnConnected called
CDefaultSessionArbitrationHelper
RCMPublicRpc already started
RegistryRead
Failed to read registry key for IGNORE_LASTINPUTTIME_ON_AUTORECONNECT using default: TRUE.
ConnectionHandlerItem
CExecSessionApps::CEventSink::ExecApps
%s with Trace ID 0x%x Completed
railenc
RpcCreateVirtualChannel
QI( IRemoteTerminal ) failed: 0x%x in %s
SinkEntry
RpcGetCurrentSessionConfigData
RpcGetConfigData failed: 0x%x in %s
RpcGetConfigData
QI on IID_IRemoteTerminal failed: 0x%x in %s
RpcGetCurrentSessionClientData
CTSRpcClient
2RpcGetConnectionProperty
RpcGetSessionProtocolLastInputTime
UserName
RpcGetAllListeners
RpcCloseListener
RpcIsListening
CStoredItem
LISTENERTRACKER
RpcOpenListener
RpcGetSessionProtocolLastInputTime failed 0x%08x
RpcGetCurrentSessionProtocolLastInputTime
RpcGetClientData
Session->getTerminal failed: 0x%x
RCMRpcPrologue failed: 0x%x
WinlogonRequest
CSessionArbitrationHelperMgr
RpcQuerySessionData
}EventDispatcher
SessionArbitrationDesktop
RpcIsSessionPermitted
TSLTEST: User Authentication Complete.
generic
unknown error
iostream
iostream stream error
system
invalid string position
string too long
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
Invalid parameter passed to C runtime function.
OLEAUT32.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-service-core-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
CRYPT32.dll
SspiCli.dll
api-ms-win-core-shutdown-l1-1-0.dll
logoncli.dll
netutils.dll
api-ms-win-security-trustee-l1-1-0.dll
api-ms-win-security-provider-l1-1-0.dll
profapi.dll
ADVAPI32.dll
OLE32.dll
FREGAPI.dll
WINSTA.dll
WINTRUST.dll
samcli.dll
ext-ms-win-advapi32-lsa-l1-1-0.dll
ext-ms-win-session-candidateaccountmgr-l1-1-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-winsvc-l1-1-0.dll
bcrypt.dll
ncrypt.dll
api-ms-win-eventlog-legacy-l1-1-0.dll
api-ms-win-security-lsalookup-l1-1-0.dll
api-ms-win-security-lsapolicy-l1-1-0.dll
CRYPTSP.dll
CDCOMFact
0x%08p %s( %Id )
CHelper::GetStorageForSession
GetInstanceOfRemoteConnectionManager failed: 0x%x in %s
GetStorageForSession failed: 0x%x in %s
Exception
ReturnHr
FailFast
NtQueryWnfStateData
NtUpdateWnfStateData
onecore\internal\sdk\inc\wil\opensource\wil\resource.h
WilError_03
onecore\internal\sdk\inc\wil\Staging.h
RemoteTerminal
IDD start timeout timer fired for device
CRemoteConnectionManager::CPnPDisplayAdapterStartTimer::DoExecute
Failed to disconnect session due to Remote Display Driver not able to start
CRemoteConnectionManager::StartRemoteDisplayAdapterTimer
Failed to create CPnPDisplayAdapterStartTimer
Failed to copy DeviceInstanceId
Failed to start Remote Display Adapter timeout timer
OnRemoteDisplayDeviceArrival
CRemoteConnectionManager::CPnPOnRemoteDisplayDeviceArrivalWorkItem::DoExecute
Failed to disconnect session due to failure to open Indirect Display Driver interface
CRemoteConnectionManager::DispatchRemoteDisplayDeviceArrival
Failed to create CPnPOnRemoteDisplayDeviceArrivalWorkItem
Failed to copy DeviceIfaceInstance
Failed to dispatch CPnPOnRemoteDisplayDeviceArrivalWorkItem
CRemoteConnectionManager::CPnPOnRemoteDisplayDeviceHasProblemWorkItem::DoExecute
Failed to disconnect session due to Remote Display Adapter failure
CRemoteConnectionManager::DispatchRemoteDisplayDeviceHasProblem
Failed to dispatch CPnPOnRemoteDisplayDeviceHasProblemWorkItem
CTSRpcClientTrackerMgr
Error HResult failed
Missing paramter %s in %s
RpcRevertToSelf failed: 0x%x
I_RpcBindingInqLocalClientPID failed: 0x%x in %s
RpcImpersonateClient failed: 0x%x in %s
CObjectAccessTracker<class IListener,5000>::GetInstanceOfObject
new CAccessTracker failed: 0x%x in %s
CObjectAccessTracker<class IListener,5000>::CObjectAccessTracker
GetCallerSessionId failed: 0x%x in %s
m_pCientTracker->TrackCaller failed: 0x%x in %s
CObjectAccessTracker<class IListener,5000>::GetCallerSessionId
GetTokenInformation failed: 0x%x in %s
RpcRevertToSelf failed 0x%08x
UserConfig
IsSessionTerminated
pSession->getState failed: 0x%x in %s
KeepAliveConnHandlerItem
RCMConnectionRequest
CRCMConnDispatchManager
CDefaultConnectionHandler
OpenThreadToken failed: 0x%x in %s
CHybridHandler
CHybridTeminal
CRemoteDisplayDeviceContext::IddStateDeviceHasProblemFunc
DispatchRemoteDisplayDeviceHasProblem failed
Waiting for driver to get unloaded
Unloaded event is null. Driver never loaded!
CRemoteDisplayDeviceContext::IddStateInterfaceEnabledFunc
DispatchRemoteDisplayDeviceArrival failed
DevQueryDevice was aborted
DevQueryDevice was closed
Remote Display Adapter device node removed
Remote Display Adapter device node created
Remote Display Adapter device node encountered error
Ignoring problem code, transient error
Problem code is not available
Remote Display Adapter device node got an update and it ignored it
Failed to create event to signal unload in CRemoteDisplayDeviceContext
TSEnforcementCore
EnfPolicyManager
ArbRequestSerializer
EnfLicenseManager
EnfRpcHelper
DefPolicy
CUtils::GetUserSessionId
pSessionId
Adding trace %p, %d, %s
TraceComponent %d: Warning TLS should be empty, this is OK if RPC function call another RPC
GetVersionEx FAILED
The SL policy for 'Allow Remote Connections' is not defined - assuming Reduced Functionality Mode
CSLQuery::Initialize
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bRemoteConnAllowed
The SL policy for 'Allow Multiple Sessions' is not defined - assuming Reduced Functionality Mode
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bFUSEnabled
The SL policy for 'Allow Multiple Sessions' is not defined - assuming FALSE
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bAppServerAllowed
The SL policy for 'Automated App Server Installation' is not defined - assuming FALSE
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bAutomatedAppServerInstallation
The SL policy for 'Allow Multiple Monitors' is not defined - assuming FALSE
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bMultimonAllowed
The SL policy for 'Allow AAD Licensing' is not defined - assuming FALSE
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bAllowAADLicensing
The SL policy for 'Max User Sessions' is not defined - assuming no limit to user sessions
CSLQuery::Initialize - SLGetWindowsInformationDWORD for lMaxUserSessions
The SL policy for 'Max Debug Sessions' is not defined - assuming no limit to user sessions
CSLQuery::Initialize - SLGetWindowsInformationDWORD for ulMaxDebugSessions
The SL policy for 'VAIL Guest Policy' is not defined - assuming not in VAIL
CSLQuery::Initialize - SLGetWindowsInformationDWORD for bVailGuest
InitializeUserName failed: 0x%x in %s
DuplicateHandle failed: 0x%x
CUserName::Initialize
NtDuplicateToken failed: 0x%x in %s
CRpcUtils::GetClientToken
TRACE RPC %s with Trace ID 0x%x
RPC Caller: PID %d, SessID %d, Process Name: <%S>
RPC Caller: Unknown
AccessCheckAndAuditAlarm failed: %x.
ITSEventDispatcher_TSEvent
NtQuerySystemInformation
Indirect Display Driver
m_IsWddmIddEnabled
Indirect Display Driver
Indirect Display Driver
Failed
Result
Function
Indirect Display Driver
ProductType
Indirect Display Driver
Failed
Result
Function
DeviceInstanceId
SessionId
Indirect Display Driver
Failed
Result
Function
DeviceIfaceInstance
SessionId
Indirect Display Driver
DeviceIfaceInstance
SessionId
Indirect Display Driver
DeviceInstanceId
SessionId
HResult
Indirect Display Driver
Failed
Result
Function
DeviceInstanceId
SessionId
IddStartTimerFired
PartA_PrivTags
"IDD start timeout timer fired for device"
DeviceInstanceId
SessionId
Session Arbitration
Failed
Result
Function
Service Start/Stop
Fast Reconnect
bAllowFastReconnect
Fast Reconnect
bSingleSessionPerUser
RDSHIntervalTelemetry
Power Token (PDC)
Power Token (PDC)
Power Token (PDC)
Failed
Result
Function
Power Token (PDC)
Handle
Auto Reconnect
Auto Reconnect
Failed
Result
Function
Remote Terminal
Feature_ReportLoggedOnCompleted::IsEnabled()
Remote Terminal
Remote Terminal
bExpectLogonCompleted
Feature_ReportLoggedOnCompleted::IsEnabled()
Remote Terminal
Function
Result
Remote Terminal
Task started
Function
Remote Terminal
Task failed
Function
Result
TerminalType
PartA_PrivTags
Remote Terminal
Address
Remote Terminal
Address
Domain
UserName
Remote Terminal
Remote Terminal
ProductId
Client Session ID
Remote Terminal
Failed
Result
Function
Remote Terminal
Function
SessionID
TraceID
Client Activity ID
RelatedActivity
RelatedActivityID
CurrentActivityID
reason
Indirect Display Driver
Failed
Result
Function
SessionId
Indirect Display Driver
SessionId
Indirect Display Driver
Remote Terminal
Remote Terminal
SessionId
Remote Terminal
InitialProgram
PartA_PrivTags
InitialProgram
Set TimeZone
Set TimeZone
Group Policy
Function
Result
Group Policy
Task failed
Function
Result
Group Policy
Failed
Result
Function
Group Policy
Performance Metric
Group Policy
Group Policy
wszPathWinsta
errorCode
dwQueryDCUserCfg
Group Policy
wszPathWinsta
Group Policy
TS_POLICY_SUB_TREE
errorCode
dwQueryDCUserCfg
Group Policy
TS_POLICY_SUB_TREE
Group Policy
Task started
Function
SessionId
Indirect Display Driver
Failed
Result
Function
DeviceInstanceId
Connect Terminal
RPC Client Call
RPC_ClientProcessId
Function
SessionId
PropertyType
RPC GetConnectionProperty
RPC_ClientProcessId
RPC GetConnectionProperty
Failed
Result
Function
RPC_ClientProcessId
RPC GetConnectionProperty
Failed
Result
Function
RPC_ClientProcessId
RPC GetConnectionProperty
Failed
Result
Function
RPC Client Call
RPC Client Call
RPC Client Call
initProgram
CredentialsFactory
PartA_PrivTags
CredentialType
Session Arbitration
Session Arbitration
ProtocolName
MaxInstanceCount
Session Arbitration
Session Arbitration
Function
this->m_SourceSessionId
Cache Session
Session Arbitration
this->m_SourceSessionId
this->m_ReconnectToSession
Cache Session
this->m_SourceSessionId
Session Arbitration
this->m_SourceSessionId
Cache Session
pszUser
bIsCandidateUser
m_SourceSessionId
Cache Session
Cache Session
Cache Session
pSessionIds[i]
Licensing
TargetLicenseType
Licensing
TargetSessionId
LicenseType
Session Arbitration
SelectedSessionId
Session Arbitration
this->m_SourceSessionId
SelectedSessionId
Session Arbitration
SelectedSessionId
Session Arbitration
Session Arbitration
Session Arbitration
Session Arbitration
Session Arbitration
this->m_SourceSessionId
Domain
Timer Notify
Timer Notify
SessionId
Timer Notify
SessionId
newState
OldState
pTerminal
SessionArbitration
PartA_PrivTags
Session Arbitration
Cache Session
Session Arbitration
bCacheSessionMode
Fast Reconnect
Fast Reconnect
Function
Result
Fast Reconnect
Task failed
Function
Result
Fast Reconnect
SessionId
Performance Metric
ReconnectTime
SessionId
Fast Reconnect
Failed
Result
Function
Fast Reconnect
Failed
Result
Function
Fast Reconnect
Failed
Result
Function
SessionIdArray->GetSize()
Fast Reconnect
Failed
Result
Function
CDefaultConnectionHandler->IsFastReconnectAllowed()
IConnection->SupportFastReconnect()
Fast Reconnect
Task started
Function
Fast Reconnect
SessionId
Fast Reconnect
InitialProgram
StrLen
Session Directory Arbitrator
Failed
Result
Function
Session Directory Arbitrator
Handle Connection
Function
Result
Handle Connection
Task failed
Function
Result
Handle Connection
Failed
Result
Function
Handle Connection
Handle Connection
Handle Connection
Task started
Function
Session Directory Reconnect
Function
Result
Session Directory Reconnect
Task failed
Function
Result
Session Directory Reconnect
Failed
Result
Function
Session Directory Reconnect
Failed
Result
Function
Session Directory Reconnect
Session Directory Reconnect
Task started
Function
Session Directory Redirect
Function
Result
Session Directory Redirect
Task failed
Function
Result
Session Directory Redirect
Failed
Result
Function
Session Directory Redirect
Session Directory Redirect
Session Directory Redirect
Failed
Result
Function
Session Directory Redirect
Task started
Function
Handle Connection
Auto Reconnect
Function
Result
Auto Reconnect
Task failed
Function
Result
Auto Reconnect
Auto Reconnect
SessionId
Auto Reconnect
SessionId
Auto Reconnect
SessionId
maxIdleTime
u64CurrentTime
lastInputTimeBeforeDisconnect
Auto Reconnect
Failed
Result
Function
Auto Reconnect
Task started
Function
Auto Reconnect
bAllow
SessionId
Auto Reconnect
SessionId
Auto Reconnect
SessionId
Connection Settings
Indirect Display Driver
Indirect Display Driver
SessionId
ConnectionID
Protocol API
SessionId
Protocol API
TimeBetweenConnectAndPNP
PartA_PrivTags
ActivityID
ConnectFirst
Protocol API
SessionId
Protocol API
SessionId
ConnectNotifyCalled
EventCtx->m_DeviceName
PNPDriverCalled
Protocol API
SessionId
RemoteFX Support
RemoteFX Support
RemoteFX Support
Failed
Result
Function
RemoteFX Support
Protocol API callback
Broken Connection
Function
Result
Broken Connection
Task failed
Function
Result
Broken Connection
Failed
Result
Function
Broken Connection
Broken Connection
Session ID
Reason
Source
Broken Connection
Task started
Function
DisplayDriverDoConnect
PartA_PrivTags
PdName
WdName
ProtocolGuid
WsxDLL
ListenerName
fRemoteFxSession
IDDMode
XDDMDisplayDriverName
XDDMDisplayDeviceName
XDDMNumMonitors
IDDTerminalLUID
IDDHardwareID
IDDInstanceID
ActivityID
ptrIWrdsRemoteFXConnection
Protocol API
Failed
Result
Function
Terminal Operation
ConnectionID
SessionId
Terminal Class ID
Terminal Class GUID
Protocol API
SessionId
ConnectionID
Protocol API
SessionId
ConnectionID
Protocol API
SessionId
ConnectionID
Protocol API
SessionId
ConnectionID
Client Credentials
SessionId
ConnectionId
Client Credentials
SessionId
ConnectionId
Protocol API
Protocol API
Failed
Result
Function
Protocol API
SessionId
Protocol API
Protocol API
m_SessionId
Protocol API
Connection Start
Failed
Result
Function
Protocol API
Assign Session to Connection
Licensing
Function
Result
Licensing
Task failed
Function
Result
Licensing
Licensing
EnfError
Licensing
Failed
Result
Function
Licensing
Licensing
Licensing
Task started
Function
Initialize Client Data
Failed
Result
Function
Fast Reconnect
Fast Reconnect
StackValue
this->bSupportFastReconnect
Fast Reconnect
Fast Reconnect
Initialize Client Data
WRdsConnectionRdp
Accept Connection
Function
Result
Accept Connection
Task failed
Function
Result
Accept Connection
Failed
Result
Function
Accept Connection
Listener Name
Accept Connection
Performance Metric
StackReadyTime
dwStatus
Accept Connection
Connection Settings
MaxIdleTimeUser
MaxIdleTimeSet
this->Config.Config.User.fEnableTimeoutWarning
Accept Connection
Task started
Function
Connection Start
Function
Result
Connection Start
Task failed
Function
Result
Connection Start
ActivityID
Connection Start
Task started
Function
Client Credentials
Auto Reconnect
New Connection
Failed
Result
Function
New Connection
Listener Name
New Connection
Listener Name
ActivityID
Listener Creation
Function
Result
Listener Creation
Task failed
Function
Result
Listener Creation
Failed
Result
Function
Listener Creation
Listener Creation
WRdsListenerSettingLevel
Listener Creation
Task started
Function
RDSHTelemetryMultiSession
PartA_PrivTags
VER_SUITE_TERMINAL
VER_SUITE_SINGLEUSERTS
MultiSessionEnabled
AppServerInstalled
RDSHIntervalTelemetry
RDSHIntervalTelemetry
RDSHTelemetryLicensing
PartA_PrivTags
DeploymentId
CollectionId
LicensingMode
LicensingServerCount
LicensingServerStatus
LicensingGraceDaysLeft
RDSHIntervalTelemetry
DeploymentId
CollectionId
LicensingMode
LicensingServerCount
LicensingServerStatus
LicensingGraceDaysLeft
RDSHIntervalTelemetry
Failed
Result
Function
RDSHTelemetrySessionCount
PartA_PrivTags
DeploymentId
CollectionId
BrokerStatus
LicensingMode
CurrentSessionCount
ActiveSessionCount
DisconnectedSessionCount
HighestSessionCount
RDSHIntervalTelemetry
DeploymentId
CollectionId
BrokerStatus
LicensingMode
CurrentSessionCount
ActiveSessionCount
DisconnectedSessionCount
HighestSessionCount
RDSHTelemetryListeners
PartA_PrivTags
ListenerName
ProtocolGuid
Listening
NetworkLevelAuthentication
NumberOfListeners
RDSHTelemetryListeners
RDSHTelemetryListeners
Failed
Result
Function
RDSHTelemetryListeners
RDSHTelemetryListeners
PartA_PrivTags
NumberOfListeners
RDSHIntervalTelemetry
HRESULT_FROM_WIN32(dwError)
RDSHIntervalTelemetry
HRESULT_FROM_WIN32(dwError)
RDSHIntervalTelemetry
RDSHIntervalTelemetry
GetLastError()
Indirect Display Driver
HRESULT_FROM_WIN32(GetLastError())
Indirect Display Driver
DeviceInstanceId
SessionId
Indirect Display Driver
InterfaceInstanceId
SessionId
Indirect Display Driver
Failed
Result
Function
DeviceIfaceInstance
RemoteDisplayInterfaceAdd
PartA_PrivTags
InterfaceInstanceId
SessionId
RemoteDisplayInterfaceRemove
PartA_PrivTags
InterfaceInstanceId
SessionId
Indirect Display Driver
InterfaceInstanceId
Indirect Display Driver
InterfaceInstanceId
RemoteDisplayDeviceNodeUpdate
PartA_PrivTags
DeviceInstanceId
devNodeStatus
SessionId
Indirect Display Driver
RemoteDisplayDeviceNodeError
PartA_PrivTags
ProblemCode
DeviceInstanceId
SessionId
RemoteDisplayDeviceNodeAdd
PartA_PrivTags
DeviceInstanceId
SessionId
RemoteDisplayDeviceNodeRemove
PartA_PrivTags
DeviceInstanceId
SessionId
Indirect Display Driver
DeviceInstanceId
Indirect Display Driver
DeviceInstanceId
Indirect Display Driver
SessionId
Old state
New state
Indirect Display Driver
DeviceIfaceInstance
SessionId
Indirect Display Driver
DeviceInstanceId
SessionId
Indirect Display Driver
DeviceInstanceId
SessionId
Session Arbitration
m_StuckSessionId
Session Arbitration
Serialize Session Reconnect
Serialize Session Reconnect
Function
Result
Serialize Session Reconnect
Task failed
Function
Result
Serialize Session Reconnect
Failed
Result
Function
Serialize Session Reconnect
Serialize Session Reconnect
Task started
Function
Enforcement Core
Failed
Result
Function
Enforcement Core
Enforcement Core
Enforcement Core
SessionId
Enforcement Core
Enforcement Core
Enforcement Core
Enforcement Core
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
Arcabit Clean
BitDefenderTheta Clean
Cyren Clean
ESET-NOD32 Clean
Baidu Clean
TrendMicro-HouseCall Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Avast Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
SentinelOne Clean
CMC Clean
Sophos Clean
APEX Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Clean
ViRobot Clean
AhnLab-V3 Clean
ZoneAlarm Clean
GData Clean
Cynet Clean
TotalDefense Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Zoner Clean
Rising Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet Clean
Qihoo-360 Clean
Panda Clean
MaxSecure Clean
No IRMA results available.