TSWorkspace.dll - RemoteApp and Desktop Connection Component

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	TSWorkspace.dll
size	1218560 (0x129800)
md5	59bd5d1d4d6de927b32c00a82d091fb3

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
147	30729	86
259	26715	3
1	0	548
257	26715	33
261	26715	16
260	26715	31
256	26715	1
265	26715	154
255	26715	1
258	26715	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0xcb94e90e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.15
SizeOfCode	0xb7000
SizeOfInitializedData	0x73400
SizeOfUninitializedData	0
AddressOfEntryPoint	0xab960
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	10.0
ImageVersion	10.0
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x12e000
SizeOfHeaders	0x400
CheckSum	0x1310a7
Subsystem	2
DllCharacteristics	0x4160
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb6e7c	0xb7000	R-X CODE
.rdata	0xb8000	0x449a6	0x44a00	R-- IDATA
.data	0xfd000	0x49f0	0x3a00	RW- IDATA
.pdata	0x102000	0x65d0	0x6600	R-- IDATA
.rsrc	0x109000	0x22278	0x22400	R-- IDATA
.reloc	0x12c000	0x159c	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xf8ea0	0x240
IMPORT	0xf90e0	0x438
RESOURCE	0x109000	0x22278
EXCEPTION	0x102000	0x65d0
SECURITY	0	0
BASERELOC	0x12c000	0x159c
DEBUG	0xd8310	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xbf3d0	0x108
Bound_IAT	0	0
IAT	0xbf4d8	0xf68
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	288
REGISTRY	#100	314
REGISTRY	#101	312
REGISTRY	#102	323
REGISTRY	#103	316
REGISTRY	#104	313
REGISTRY	#105	314
REGISTRY	#106	316
REGISTRY	#107	1067
REGISTRY	#108	838
REGISTRY	#109	316
REGISTRY	#110	1595
REGISTRY	#111	1166
REGISTRY	#112	309
REGISTRY	#113	302
TYPELIB	#1	16484
WEVT_TEMPLATE	#1	8746
ICON	#1	65502
ICON	#2	9640
ICON	#3	4264
ICON	#4	1128
ICON	#5	744
ICON	#6	2216
ICON	#7	4264
ICON	#8	9640
ICON	#9	4264
ICON	#10	1128
GROUP_ICON	#300	62
GROUP_ICON	#301	48
GROUP_ICON	#303	48
VERSION	#1	980
MANIFEST	#2	749

module_name	hint	ord	function_name
msvcrt.dll	117		__crtCompareStringW
msvcrt.dll	108		___lc_collate_cp_func
msvcrt.dll	109		___lc_handle_func
msvcrt.dll	121		__crtLCMapStringW
msvcrt.dll	1170		memcpy
msvcrt.dll	110		___mb_cur_max_func
msvcrt.dll	107		___lc_codepage_func
msvcrt.dll	138		__pctype_func
msvcrt.dll	1169		memcmp
msvcrt.dll	1042		abort
msvcrt.dll	1201		setlocale
msvcrt.dll	1287		wcsftime
msvcrt.dll	1121		gmtime
msvcrt.dll	1252		time
msvcrt.dll	1274		vswprintf_s
msvcrt.dll	864		_vscwprintf
msvcrt.dll	1296		wcsrchr
msvcrt.dll	1304		wcstol
msvcrt.dll	1303		wcstok_s
msvcrt.dll	1306		wcstombs_s
msvcrt.dll	1300		wcsstr
msvcrt.dll	1029		_wtoi
msvcrt.dll	7		public: __cdecl bad_cast::bad_cast(char const * __ptr64) __ptr64 ??0bad_cast@@QEAA@PEBD@Z
msvcrt.dll	15		public: virtual __cdecl bad_cast::~bad_cast(void) __ptr64 ??1bad_cast@@UEAA@XZ
msvcrt.dll	6		public: __cdecl bad_cast::bad_cast(class bad_cast const & __ptr64) __ptr64 ??0bad_cast@@QEAA@AEBV0@@Z
msvcrt.dll	1217		strchr
msvcrt.dll	916		_wcsnicmp
msvcrt.dll	1286		wcscspn
msvcrt.dll	1291		wcsncmp
msvcrt.dll	1192		rand_s
msvcrt.dll	1078		fclose
msvcrt.dll	1137		iswcntrl
msvcrt.dll	1086		fgetws
msvcrt.dll	964		_wfopen_s
msvcrt.dll	1144		iswspace
msvcrt.dll	873		_vsnwprintf
msvcrt.dll	20		void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
msvcrt.dll	1259		towlower
msvcrt.dll	1258		toupper
msvcrt.dll	910		_wcslwr
msvcrt.dll	104		__RTDynamicCast
msvcrt.dll	1172		memmove
msvcrt.dll	1174		memset
msvcrt.dll	656		_onexit
msvcrt.dll	123		__dllonexit
msvcrt.dll	833		_unlock
msvcrt.dll	486		_lock
msvcrt.dll	1193		realloc
msvcrt.dll	261		_errno
msvcrt.dll	18		public: virtual __cdecl type_info::~type_info(void) __ptr64 ??1type_info@@UEAA@XZ
msvcrt.dll	47		void __cdecl terminate(void) ?terminate@@YAXXZ
msvcrt.dll	381		_initterm
msvcrt.dll	174		_amsg_exit
msvcrt.dll	85		_XcptFilter
msvcrt.dll	75		_CxxThrowException
msvcrt.dll	191		_callnewh
msvcrt.dll	11		public: __cdecl exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64 ??0exception@@QEAA@AEBQEBDH@Z
msvcrt.dll	1061		calloc
msvcrt.dll	1173		memmove_s
msvcrt.dll	906		_wcsicmp
msvcrt.dll	49		public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64 ?what@exception@@UEBAPEBDXZ
msvcrt.dll	670		_purecall
msvcrt.dll	1280		wcscat_s
msvcrt.dll	1285		wcscpy_s
msvcrt.dll	1158		malloc
msvcrt.dll	1293		wcsncpy_s
msvcrt.dll	1100		free
msvcrt.dll	12		public: __cdecl exception::exception(class exception const & __ptr64) __ptr64 ??0exception@@QEAA@AEBV0@@Z
msvcrt.dll	17		public: virtual __cdecl exception::~exception(void) __ptr64 ??1exception@@UEAA@XZ
msvcrt.dll	10		public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64 ??0exception@@QEAA@AEBQEBD@Z
msvcrt.dll	1171		memcpy_s
msvcrt.dll	87		__C_specific_handler
msvcrt.dll	35		void __cdecl operator delete[](void * __ptr64) ??_V@YAXPEAX@Z
msvcrt.dll	91		__CxxFrameHandler3
msvcrt.dll	1282		wcscmp
ole32.dll	463		PropVariantClear
ole32.dll	97		CoInitializeEx
ole32.dll	317		IIDFromString
ole32.dll	16		CLSIDFromString
ole32.dll	42		CoCreateGuid
ole32.dll	144		CoUninitialize
ole32.dll	96		CoInitialize
ole32.dll	524		StringFromGUID2
ole32.dll	139		CoTaskMemAlloc
ole32.dll	141		CoTaskMemRealloc
ole32.dll	43		CoCreateInstance
ole32.dll	140		CoTaskMemFree
ole32.dll	525		StringFromIID
api-ms-win-core-winrt-l1-1-0.dll	1		RoGetActivationFactory
api-ms-win-core-winrt-l1-1-0.dll	3		RoInitialize
api-ms-win-core-winrt-l1-1-0.dll	7		RoUninitialize
api-ms-win-core-winrt-string-l1-1-0.dll	11		WindowsCreateStringReference
api-ms-win-core-winrt-string-l1-1-0.dll	16		WindowsGetStringRawBuffer
api-ms-win-core-winrt-string-l1-1-0.dll	12		WindowsDeleteString
OLEAUT32.dll	5		BSTR_UserSize64
OLEAUT32.dll	46		LPSAFEARRAY_UserMarshal64
OLEAUT32.dll	44		LPSAFEARRAY_UserFree64
OLEAUT32.dll		7
OLEAUT32.dll		2
OLEAUT32.dll		294
OLEAUT32.dll		284
OLEAUT32.dll		277
OLEAUT32.dll		291
OLEAUT32.dll		286
OLEAUT32.dll		283
OLEAUT32.dll	1		BSTR_UserFree64
OLEAUT32.dll	50		LPSAFEARRAY_UserUnmarshal64
OLEAUT32.dll	7		BSTR_UserUnmarshal64
OLEAUT32.dll	3		BSTR_UserMarshal64
OLEAUT32.dll		150
OLEAUT32.dll		149
OLEAUT32.dll		26
OLEAUT32.dll		4
OLEAUT32.dll		313
OLEAUT32.dll		314
OLEAUT32.dll		16
OLEAUT32.dll		6
OLEAUT32.dll		292
OLEAUT32.dll		293
OLEAUT32.dll		19
OLEAUT32.dll		163
OLEAUT32.dll		161
OLEAUT32.dll		186
OLEAUT32.dll		162
OLEAUT32.dll		8
OLEAUT32.dll		9
OLEAUT32.dll		12
OLEAUT32.dll		20
OLEAUT32.dll	48		LPSAFEARRAY_UserSize64
OLEAUT32.dll		285
OLEAUT32.dll		22
OLEAUT32.dll		40
OLEAUT32.dll		21
OLEAUT32.dll		15
RPCRT4.dll	1		CStdStubBuffer_Connect
RPCRT4.dll	7		CStdStubBuffer_IsIIDSupported
RPCRT4.dll	326		NdrStubForwardingFunction
RPCRT4.dll	15		IUnknown_AddRef_Proxy
RPCRT4.dll	5		CStdStubBuffer_Disconnect
RPCRT4.dll	4		CStdStubBuffer_DebugServerRelease
RPCRT4.dll	8		CStdStubBuffer_QueryInterface
RPCRT4.dll	2		CStdStubBuffer_CountRefs
RPCRT4.dll			CStdStubBuffer_AddRef
RPCRT4.dll	3		CStdStubBuffer_DebugServerQueryInterface
RPCRT4.dll	6		CStdStubBuffer_Invoke
RPCRT4.dll	325		NdrStubCall3
RPCRT4.dll	16		IUnknown_QueryInterface_Proxy
RPCRT4.dll	160		NdrCStdStubBuffer2_Release
RPCRT4.dll	280		NdrOleFree
RPCRT4.dll	17		IUnknown_Release_Proxy
RPCRT4.dll	279		NdrOleAllocate
RPCRT4.dll	161		NdrCStdStubBuffer_Release
RPCRT4.dll	213		NdrDllCanUnloadNow
RPCRT4.dll	214		NdrDllGetClassObject
RPCRT4.dll	215		NdrDllRegisterProxy
RPCRT4.dll	216		NdrDllUnregisterProxy
api-ms-win-core-synch-l1-1-0.dll	41		SetEvent
api-ms-win-core-synch-l1-1-0.dll	35		ReleaseMutex
api-ms-win-core-synch-l1-1-0.dll	10		CreateMutexW
api-ms-win-core-synch-l1-1-0.dll	54		WaitForSingleObject
api-ms-win-core-synch-l1-1-0.dll	5		CreateEventExW
api-ms-win-core-synch-l1-1-0.dll	6		CreateEventW
api-ms-win-core-synch-l1-1-0.dll	38		ReleaseSemaphore
api-ms-win-core-synch-l1-1-0.dll	39		ResetEvent
api-ms-win-core-synch-l1-1-0.dll	17		EnterCriticalSection
api-ms-win-core-synch-l1-1-0.dll	29		LeaveCriticalSection
api-ms-win-core-synch-l1-1-0.dll	15		DeleteCriticalSection
api-ms-win-core-synch-l1-1-0.dll	25		InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-1-0.dll	24		InitializeCriticalSection
api-ms-win-core-libraryloader-l1-2-0.dll	28		LoadStringW
api-ms-win-core-libraryloader-l1-2-0.dll	13		FreeLibraryAndExitThread
api-ms-win-core-libraryloader-l1-2-0.dll	29		LockResource
api-ms-win-core-libraryloader-l1-2-0.dll	21		GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll	12		FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll	16		GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll	24		LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll	20		GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll	18		GetModuleHandleExA
api-ms-win-core-libraryloader-l1-2-0.dll	32		SizeofResource
api-ms-win-core-libraryloader-l1-2-0.dll	9		FindResourceExW
api-ms-win-core-libraryloader-l1-2-0.dll	26		LoadResource
api-ms-win-core-libraryloader-l1-2-0.dll	19		GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll	1		DisableThreadLibraryCalls
api-ms-win-core-string-l2-1-0.dll	2		CharNextW
api-ms-win-core-errorhandling-l1-1-0.dll	5		GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll	7		RaiseException
api-ms-win-core-errorhandling-l1-1-0.dll	15		SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll	17		UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll	13		SetLastError
api-ms-win-core-registry-l1-1-0.dll	30		RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	37		RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll	3		RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	11		RegDeleteValueW
api-ms-win-core-registry-l1-1-0.dll	14		RegEnumKeyExW
api-ms-win-core-registry-l1-1-0.dll	33		RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	9		RegDeleteTreeW
api-ms-win-core-registry-l1-1-0.dll	20		RegGetValueW
api-ms-win-core-registry-l1-1-0.dll	27		RegNotifyChangeKeyValue
api-ms-win-core-registry-l1-1-0.dll	46		RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	16		RegEnumValueW
api-ms-win-core-registry-l1-1-0.dll			RegCloseKey
api-ms-win-core-string-l1-1-0.dll	5		GetStringTypeW
api-ms-win-core-string-l1-1-0.dll	7		WideCharToMultiByte
api-ms-win-core-string-l1-1-0.dll	6		MultiByteToWideChar
api-ms-win-core-string-l1-1-0.dll			CompareStringEx
api-ms-win-core-string-l1-1-0.dll	1		CompareStringOrdinal
api-ms-win-core-string-l1-1-0.dll	2		CompareStringW
api-ms-win-eventing-provider-l1-1-0.dll	3		EventRegister
api-ms-win-eventing-provider-l1-1-0.dll	9		EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll			EventActivityIdControl
api-ms-win-eventing-provider-l1-1-0.dll	5		EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll	4		EventSetInformation
api-ms-win-eventing-classicprovider-l1-1-0.dll	3		RegisterTraceGuidsW
api-ms-win-eventing-classicprovider-l1-1-0.dll			GetTraceEnableFlags
api-ms-win-eventing-classicprovider-l1-1-0.dll	1		GetTraceEnableLevel
api-ms-win-eventing-classicprovider-l1-1-0.dll	5		TraceMessage
api-ms-win-eventing-classicprovider-l1-1-0.dll	2		GetTraceLoggerHandle
api-ms-win-eventing-classicprovider-l1-1-0.dll	7		UnregisterTraceGuids
api-ms-win-core-synch-l1-2-0.dll	22		InitOnceInitialize
api-ms-win-core-synch-l1-2-0.dll	21		InitOnceExecuteOnce
api-ms-win-core-synch-l1-2-0.dll	45		Sleep
api-ms-win-security-base-l1-1-0.dll	69		ImpersonateLoggedOnUser
api-ms-win-security-base-l1-1-0.dll	63		GetSidLengthRequired
api-ms-win-security-base-l1-1-0.dll	73		InitializeSid
api-ms-win-security-base-l1-1-0.dll	64		GetSidSubAuthority
api-ms-win-security-base-l1-1-0.dll	66		GetTokenInformation
api-ms-win-security-base-l1-1-0.dll	72		InitializeSecurityDescriptor
api-ms-win-security-base-l1-1-0.dll	79		MakeAbsoluteSD
api-ms-win-security-base-l1-1-0.dll	55		GetSecurityDescriptorControl
api-ms-win-security-base-l1-1-0.dll	61		GetSecurityDescriptorSacl
api-ms-win-security-base-l1-1-0.dll	98		SetSecurityDescriptorDacl
api-ms-win-security-base-l1-1-0.dll	56		GetSecurityDescriptorDacl
api-ms-win-security-base-l1-1-0.dll	99		SetSecurityDescriptorGroup
api-ms-win-security-base-l1-1-0.dll	57		GetSecurityDescriptorGroup
api-ms-win-security-base-l1-1-0.dll	100		SetSecurityDescriptorOwner
api-ms-win-security-base-l1-1-0.dll	59		GetSecurityDescriptorOwner
api-ms-win-security-base-l1-1-0.dll	89		RevertToSelf
api-ms-win-security-base-l1-1-0.dll	48		GetAclInformation
api-ms-win-security-base-l1-1-0.dll	13		AddAce
api-ms-win-security-base-l1-1-0.dll	71		InitializeAcl
api-ms-win-security-base-l1-1-0.dll	77		IsValidSid
api-ms-win-security-base-l1-1-0.dll	53		GetLengthSid
api-ms-win-security-base-l1-1-0.dll	30		CopySid
api-ms-win-core-processenvironment-l1-1-0.dll	1		ExpandEnvironmentStringsW
api-ms-win-core-heap-l2-1-0.dll	3		LocalFree
api-ms-win-core-heap-l2-1-0.dll	2		LocalAlloc
api-ms-win-core-heap-l2-1-0.dll	1		GlobalFree
api-ms-win-core-rtlsupport-l1-1-0.dll	9		RtlLookupFunctionEntry
api-ms-win-core-rtlsupport-l1-1-0.dll	2		RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll	15		RtlVirtualUnwind
api-ms-win-core-processthreads-l1-1-0.dll	78		TerminateThread
api-ms-win-core-processthreads-l1-1-0.dll	82		TlsSetValue
api-ms-win-core-processthreads-l1-1-0.dll	76		SwitchToThread
api-ms-win-core-processthreads-l1-1-0.dll	81		TlsGetValue
api-ms-win-core-processthreads-l1-1-0.dll	80		TlsFree
api-ms-win-core-processthreads-l1-1-0.dll	79		TlsAlloc
api-ms-win-core-processthreads-l1-1-0.dll	6		CreateThread
api-ms-win-core-processthreads-l1-1-0.dll	51		OpenThreadToken
api-ms-win-core-processthreads-l1-1-0.dll	16		GetCurrentThread
api-ms-win-core-processthreads-l1-1-0.dll	12		GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll	50		OpenThread
api-ms-win-core-processthreads-l1-1-0.dll	77		TerminateProcess
api-ms-win-core-processthreads-l1-1-0.dll	13		GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll	17		GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-0.dll	49		OpenProcessToken
api-ms-win-core-profile-l1-1-0.dll			QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0.dll	26		GetTickCount
api-ms-win-core-sysinfo-l1-1-0.dll	19		GetSystemTime
api-ms-win-core-sysinfo-l1-1-0.dll	17		GetSystemInfo
api-ms-win-core-sysinfo-l1-1-0.dll	30		GetVersionExW
api-ms-win-core-sysinfo-l1-1-0.dll	3		GetComputerNameExW
api-ms-win-core-sysinfo-l1-1-0.dll	22		GetSystemTimeAsFileTime
api-ms-win-core-debug-l1-1-0.dll	6		OutputDebugStringA
api-ms-win-core-handle-l1-1-0.dll			CloseHandle
api-ms-win-core-threadpool-l1-2-0.dll	6		CloseThreadpoolTimer
api-ms-win-core-threadpool-l1-2-0.dll	25		SetThreadpoolThreadMinimum
api-ms-win-core-threadpool-l1-2-0.dll	26		SetThreadpoolTimer
api-ms-win-core-threadpool-l1-2-0.dll	10		CreateThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	4		CloseThreadpoolCleanupGroupMembers
api-ms-win-core-threadpool-l1-2-0.dll	12		CreateThreadpoolTimer
api-ms-win-core-threadpool-l1-2-0.dll	3		CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	32		TrySubmitThreadpoolCallback
api-ms-win-core-threadpool-l1-2-0.dll	2		CloseThreadpool
api-ms-win-core-threadpool-l1-2-0.dll	24		SetThreadpoolThreadMaximum
api-ms-win-core-threadpool-l1-2-0.dll	9		CreateThreadpool
api-ms-win-core-synch-l1-2-1.dll	12		CreateSemaphoreW
api-ms-win-core-synch-l1-2-1.dll	52		WaitForMultipleObjects
api-ms-win-core-libraryloader-l1-2-1.dll	22		LoadLibraryA
api-ms-win-core-libraryloader-l1-2-1.dll	25		LoadLibraryW
api-ms-win-core-util-l1-1-0.dll	4		EncodePointer
api-ms-win-core-util-l1-1-0.dll	1		DecodePointer
api-ms-win-core-sysinfo-l1-2-0.dll	44		VerSetConditionMask
api-ms-win-core-heap-l1-1-0.dll	5		HeapDestroy
api-ms-win-core-heap-l1-1-0.dll	9		HeapReAlloc
api-ms-win-core-heap-l1-1-0.dll	2		HeapAlloc
api-ms-win-core-heap-l1-1-0.dll	6		HeapFree
api-ms-win-core-heap-l1-1-0.dll	11		HeapSize
api-ms-win-core-heap-l1-1-0.dll			GetProcessHeap
api-ms-win-core-timezone-l1-1-0.dll	10		SystemTimeToFileTime
KERNEL32.dll	283		DeleteTimerQueueTimer
KERNEL32.dll	250		CreateTimerQueueTimer
KERNEL32.dll	1606		lstrcmpiW
KERNEL32.dll	1492		VerifyVersionInfoW
KERNEL32.dll	1614		lstrlenA
USER32.dll	177		DestroyIcon
USER32.dll	602		LoadImageW
USER32.dll	600		LoadIconW
USER32.dll	937		TranslateMessage
USER32.dll	686		PostQuitMessage
USER32.dll	393		GetMessageW
USER32.dll	502		GetWindowTextW
USER32.dll	487		GetWindowLongPtrW
USER32.dll	820		SetFocus
USER32.dll	817		SetDlgItemTextW
USER32.dll	887		SetWindowPos
USER32.dll	495		GetWindowRect
USER32.dll	332		GetDlgItem
USER32.dll	432		GetPropW
USER32.dll	884		SetWindowLongPtrW
USER32.dll	658		MsgWaitForMultipleObjectsEx
USER32.dll	688		PostThreadMessageW
USER32.dll	871		SetTimer
USER32.dll	885		SetWindowLongW
USER32.dll	789		SendMessageW
USER32.dll	681		PeekMessageW
USER32.dll	947		UnregisterClassA
USER32.dll	189		DispatchMessageW
USER32.dll	181		DestroyWindow
USER32.dll	685		PostMessageW
USER32.dll	298		GetClassInfoExW
USER32.dll	731		RegisterClassExW
USER32.dll	948		UnregisterClassW
USER32.dll	118		CreateWindowExW
USER32.dll	400		GetParent
USER32.dll	167		DefWindowProcW
USER32.dll	325		GetDesktopWindow
USER32.dll	853		SetPropW
USER32.dll	767		RemovePropW
USER32.dll	905		ShowWindow
USER32.dll	815		SetDlgItemInt
USER32.dll	590		KillTimer
DNSAPI.dll	66		DnsFree
DNSAPI.dll	124		DnsQuery_W
Normaliz.dll			IdnToAscii
Normaliz.dll	2		IdnToUnicode
SspiCli.dll	36		LsaDeregisterLogonProcess
SspiCli.dll	35		LsaConnectUntrusted
SspiCli.dll	41		LsaLookupAuthenticationPackage
SspiCli.dll	25		GetUserNameExW
api-ms-win-core-registry-l1-1-1.dll	44		RegSetKeyValueW
api-ms-win-core-registry-l1-1-1.dll	7		RegDeleteKeyValueW
api-ms-win-core-file-l2-1-0.dll	3		CreateDirectoryExW
CRYPT32.dll	174		CryptMsgClose
CRYPT32.dll	89		CertOpenStore
CRYPT32.dll	185		CryptMsgUpdate
CRYPT32.dll	182		CryptMsgOpenToDecode
CRYPT32.dll	118		CertVerifyCertificateChainPolicy
CRYPT32.dll	18		CertCloseStore
CRYPT32.dll	234		CryptVerifyDetachedMessageSignature
CRYPT32.dll	223		CryptStringToBinaryW
CRYPT32.dll	70		CertGetCertificateContextProperty
CRYPT32.dll	36		CertDuplicateCertificateChain
CRYPT32.dll	37		CertDuplicateCertificateContext
CRYPT32.dll	61		CertFreeCertificateChain
CRYPT32.dll	64		CertFreeCertificateContext
CRYPT32.dll	225		CryptUnprotectData
CRYPT32.dll	195		CryptProtectData
CRYPT32.dll	130		CryptDecodeObject
CRYPT32.dll	220		CryptSignMessage
CRYPT32.dll	69		CertGetCertificateChain
CRYPT32.dll	125		CryptBinaryToStringW
CRYPT32.dll	55		CertFindExtension
CRYPT32.dll	196		CryptProtectMemory
CRYPT32.dll	226		CryptUnprotectMemory
api-ms-win-security-sddl-l1-1-0.dll			ConvertSecurityDescriptorToStringSecurityDescriptorW
WINHTTP.dll	55		WinHttpSetStatusCallback
WINHTTP.dll	56		WinHttpSetTimeouts
WINHTTP.dll	29		WinHttpGetProxyForUrl
WINHTTP.dll	38		WinHttpOpenRequest
WINHTTP.dll	37		WinHttpOpen
WINHTTP.dll	22		WinHttpCreateUrl
WINHTTP.dll	54		WinHttpSetOption
WINHTTP.dll	7		WinHttpCloseHandle
WINHTTP.dll	48		WinHttpReceiveResponse
WINHTTP.dll	4		WinHttpAddRequestHeaders
WINHTTP.dll	43		WinHttpQueryHeaders
WINHTTP.dll	45		WinHttpReadData
WINHTTP.dll	51		WinHttpSendRequest
WINHTTP.dll	42		WinHttpQueryDataAvailable
WINHTTP.dll	44		WinHttpQueryOption
WINHTTP.dll	41		WinHttpQueryAuthSchemes
WINHTTP.dll	20		WinHttpCrackUrl
WINHTTP.dll	8		WinHttpConnect
WINHTTP.dll	28		WinHttpGetIEProxyConfigForCurrentUser
WINHTTP.dll	52		WinHttpSetCredentials
api-ms-win-security-credentials-l1-1-0.dll	28		CredWriteW
api-ms-win-security-credentials-l1-1-0.dll	7		CredGetSessionTypes
api-ms-win-core-file-l1-1-0.dll	6		CreateFileW
api-ms-win-core-file-l1-1-0.dll	9		DeleteFileW
api-ms-win-core-file-l1-1-0.dll	85		SetFilePointer
api-ms-win-core-file-l1-1-0.dll	44		GetFileAttributesW
api-ms-win-core-file-l1-1-0.dll	46		GetFileSize
api-ms-win-core-file-l1-1-0.dll	91		WriteFile
api-ms-win-core-file-l1-1-0.dll	73		ReadFile
api-ms-win-core-localization-l1-2-0.dll	53		LCMapStringW
api-ms-win-core-localization-l1-2-0.dll	10		GetACP
api-ms-win-core-url-l1-1-0.dll	16		UrlCombineW
api-ms-win-core-url-l1-1-0.dll	20		UrlCreateFromPathW
api-ms-win-core-url-l1-1-0.dll	27		UrlGetPartW
CRYPTSP.dll	4		CryptCreateHash
CRYPTSP.dll	2		CryptAcquireContextW
CRYPTSP.dll	28		CryptReleaseContext
CRYPTSP.dll	21		CryptGetHashParam
CRYPTSP.dll	25		CryptHashData
CRYPTSP.dll	7		CryptDestroyHash
ntdll.dll	1112		RtlInitString
ADVAPI32.dll	379		GetUserNameW
ADVAPI32.dll	654		RegOpenKeyTransactedW
ADVAPI32.dll	623		RegDeleteKeyW
ADVAPI32.dll	408		IsTextUnicode
ADVAPI32.dll	614		RegCreateKeyTransactedW
SHLWAPI.dll	91		PathIsContentTypeW
SHLWAPI.dll	73		PathFileExistsW
SHLWAPI.dll	131		PathQuoteSpacesW
SHLWAPI.dll		278
SHLWAPI.dll	59		PathCanonicalizeW
SHELL32.dll	147		SHCreateAssociationRegistration
SHELL32.dll	451		Shell_NotifyIconW
SHELL32.dll	321		SHFileOperationW
SHELL32.dll	139		SHChangeNotify
SHELL32.dll	155		SHCreateDirectoryExW
SHELL32.dll	354		SHGetKnownFolderPath
WININET.dll	161		InternetCreateUrlW
WININET.dll	159		InternetCrackUrlW
WININET.dll	145		InternetCanonicalizeUrlW
WININET.dll	151		InternetCombineUrlW
credui.dll	12		CredUIPromptForWindowsCredentialsW
credui.dll	19		CredUnPackAuthenticationBufferW
ktmw32.dll	2		CommitTransaction
ktmw32.dll	6		CreateTransaction

ord	entry_va	function_name
1	0x2e20	RADCUISupportCreateSubscriptionClient
2	0x2e30	RADCUISupportCreateDiscoveryStrategy
3	0x30c0	CreateClaimsAuthResponseHeader
4	0x2ef0	TryParseClaimsAuthnHeader
5	0xc020	RADCProcessGroupPolicyEx
6	0x2bd0	TaskUpdateWorkspaces2
7	0x2780	TaskUpdateWorkspaces
8	0x28f0	TaskUpdateWorkspacesIfNeeded
9	0x2d60	WorkspaceSilentSetupW
10	0x2d00	WorkspaceStatusNotify2
11	0x2a60	WorkspaceStatusNotify
12	0x22c0	DllCanUnloadNow
13	0x22f0	DllGetClassObject
14	0x2390	DllRegisterServer
15	0x2530	DllUnregisterServer

module_name	tsworkspace.dll
flags	0
timestamp	2078-03-26 15:23:58
version	0.0
ordinal_base	1
nFunctions	15
nNames	15
Names(15)	0xf8f04
Functions(15)	0xf8ec8
NameOrdinals(15)	0xf8f40

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	RemoteApp and Desktop Connection Component
FileVersion	10.0.18362.836 (WinBuild.160101.0800)
InternalName	TSWORKSPACE.DLL
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	TSWORKSPACE.DLL
ProductName	Microsoft® Windows® Operating System
ProductVersion	10.0.18362.836

VS_FIXEDFILEINFO

FileVersion	10.0.18362.836
ProductVersion	10.0.18362.836
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
10ed30	65502	PNG	(256 x 256)	#
11ed0e	43762	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

TSWorkspace.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

TSWorkspace.dll
-