rdpcore.dll
v10.0.19041.6093
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
RDPAPI_CreateInstance
#1 · 0x1550
No function matches your filter.
Imported DLLs & functions 284
ApiSetQueryApiSetPresence
0x16a90d0f0
CoCreateInstance
0x16a90d130
CoInitializeEx
0x16a90d138
CoTaskMemAlloc
0x16a90d120
CoTaskMemFree
0x16a90d118
CoUninitialize
0x16a90d128
DebugBreak
0x16a90d148
IsDebuggerPresent
0x16a90d150
OutputDebugStringW
0x16a90d158
DelayLoadFailureHook
0x16a90d168
ResolveDelayLoadedAPI
0x16a90d178
GetLastError
0x16a90d190
RaiseException
0x16a90d188
SetErrorMode
0x16a90d1b0
SetLastError
0x16a90d1a0
SetUnhandledExceptionFilter
0x16a90d198
UnhandledExceptionFilter
0x16a90d1a8
RecordFeatureUsage
0x16a90d1d0
SubscribeFeatureStateChangeNotification
0x16a90d1c8
UnsubscribeFeatureStateChangeNotification
0x16a90d1c0
CreateDirectoryW
0x16a90d1f8
CreateFileW
0x16a90d208
DeleteFileW
0x16a90d228
FindClose
0x16a90d1f0
FindFirstFileW
0x16a90d1e8
FindNextFileW
0x16a90d238
GetFileAttributesW
0x16a90d210
GetFileInformationByHandle
0x16a90d1e0
GetTempFileNameW
0x16a90d230
ReadFile
0x16a90d220
SetFilePointerEx
0x16a90d218
WriteFile
0x16a90d200
GetProcessHeap
0x16a90d268
HeapAlloc
0x16a90d260
HeapFree
0x16a90d270
GlobalLock
0x16a90d2a0
GlobalSize
0x16a90d298
GlobalUnlock
0x16a90d2a8
PulseEvent
0x16a90d2b8
DisableThreadLibraryCalls
0x16a90d2d8
FreeLibrary
0x16a90d2d0
GetModuleFileNameA
0x16a90d2e8
GetModuleHandleExA
0x16a90d2f0
GetModuleHandleExW
0x16a90d2f8
GetModuleHandleW
0x16a90d2c8
GetProcAddress
0x16a90d2e0
LoadLibraryExW
0x16a90d300
FormatMessageW
0x16a90d338
GetCPInfo
0x16a90d330
IsDBCSLeadByte
0x16a90d328
PathCchCanonicalize
0x16a90d348
CreateThread
0x16a90d3b0
GetCurrentProcess
0x16a90d370
GetCurrentProcessId
0x16a90d378
GetCurrentThread
0x16a90d358
GetCurrentThreadId
0x16a90d368
OpenProcessToken
0x16a90d360
OpenThreadToken
0x16a90d380
ProcessIdToSessionId
0x16a90d388
TerminateProcess
0x16a90d398
TlsAlloc
0x16a90d3a8
TlsFree
0x16a90d390
TlsGetValue
0x16a90d3a0
TlsSetValue
0x16a90d3b8
IsProcessorFeaturePresent
0x16a90d3c8
OpenProcess
0x16a90d3d0
QueryPerformanceCounter
0x16a90d3e8
QueryPerformanceFrequency
0x16a90d3e0
K32GetModuleFileNameExW
0x16a90d3f8
RegCloseKey
0x16a90d418
RegEnumValueW
0x16a90d410
RegOpenKeyExW
0x16a90d408
RegQueryValueExW
0x16a90d420
RtlCaptureContext
0x16a90d440
RtlLookupFunctionEntry
0x16a90d430
RtlVirtualUnwind
0x16a90d438
lstrcmpW
0x16a90d468
AcquireSRWLockExclusive
0x16a90d508
AcquireSRWLockShared
0x16a90d530
CreateEventW
0x16a90d4e0
CreateMutexExW
0x16a90d538
CreateSemaphoreExW
0x16a90d4d0
CreateWaitableTimerExW
0x16a90d4a8
DeleteCriticalSection
0x16a90d490
EnterCriticalSection
0x16a90d4c0
InitializeCriticalSection
0x16a90d4c8
InitializeCriticalSectionEx
0x16a90d4a0
InitializeSRWLock
0x16a90d520
LeaveCriticalSection
0x16a90d498
OpenEventW
0x16a90d548
OpenSemaphoreW
0x16a90d4f8
ReleaseMutex
0x16a90d540
ReleaseSemaphore
0x16a90d510
ReleaseSRWLockExclusive
0x16a90d518
ReleaseSRWLockShared
0x16a90d528
ResetEvent
0x16a90d500
SetEvent
0x16a90d4b0
SetWaitableTimer
0x16a90d4d8
WaitForMultipleObjectsEx
0x16a90d4e8
WaitForSingleObject
0x16a90d4b8
WaitForSingleObjectEx
0x16a90d4f0
InitializeConditionVariable
0x16a90d578
InitOnceExecuteOnce
0x16a90d558
Sleep
0x16a90d580
SleepConditionVariableCS
0x16a90d568
SleepConditionVariableSRW
0x16a90d570
WakeAllConditionVariable
0x16a90d560
WaitForMultipleObjects
0x16a90d590
GetSystemDirectoryW
0x16a90d5a8
GetSystemTime
0x16a90d5a0
GetSystemTimeAsFileTime
0x16a90d5b8
GetTickCount
0x16a90d5b0
GetVersionExW
0x16a90d5c0
CloseThreadpoolTimer
0x16a90d5e0
CreateThreadpoolTimer
0x16a90d5d8
SetThreadpoolTimer
0x16a90d5d0
WaitForThreadpoolTimerCallbacks
0x16a90d5e8
SystemTimeToFileTime
0x16a90d5f8
RoActivateInstance
0x16a90d608
RoGetActivationFactory
0x16a90d610
WindowsCreateStringReference
0x16a90d620
WindowsDeleteString
0x16a90d628
GetTraceEnableFlags
0x16a90d638
GetTraceEnableLevel
0x16a90d648
GetTraceLoggerHandle
0x16a90d658
RegisterTraceGuidsW
0x16a90d660
TraceMessage
0x16a90d640
UnregisterTraceGuids
0x16a90d650
EventWriteTransfer
0x16a90d670
CopyRect
0x16a90d690
EqualRect
0x16a90d6a0
InflateRect
0x16a90d6a8
IntersectRect
0x16a90d698
IsRectEmpty
0x16a90d688
OffsetRect
0x16a90d6c0
PtInRect
0x16a90d6b0
SetRect
0x16a90d6c8
SetRectEmpty
0x16a90d6b8
UnionRect
0x16a90d680
EnumDisplayDevicesW
0x16a90d700
EnumDisplayMonitors
0x16a90d6d8
EnumDisplaySettingsExW
0x16a90d6e0
EnumDisplaySettingsW
0x16a90d6f8
GetMonitorInfoW
0x16a90d6e8
GetSystemMetrics
0x16a90d708
SystemParametersInfoW
0x16a90d6f0
OleGetClipboard
0x16a90d720
OleIsCurrentClipboard
0x16a90d718
OleSetClipboard
0x16a90d728
GetTokenInformation
0x16a90d740
SetTokenInformation
0x16a90d738
IsProcessInWDAGContainer
0x16a90d750
D3D11CreateDevice
0x16a90d760
dxgi.dll
1
CreateDXGIFactory1
0x16a90d770
MSACM32.dll
11
acmDriverClose
0x16a90cf10
acmDriverEnum
0x16a90cf38
acmDriverOpen
0x16a90cf28
acmFormatSuggest
0x16a90cee8
acmFormatTagDetailsW
0x16a90cf30
acmStreamClose
0x16a90cf18
acmStreamConvert
0x16a90cef8
acmStreamOpen
0x16a90cf20
acmStreamPrepareHeader
0x16a90cf00
acmStreamSize
0x16a90cf08
acmStreamUnprepareHeader
0x16a90cef0
msvcrt.dll
55
__C_specific_handler
0x16a90d8a0
__CxxFrameHandler3
0x16a90d798
__dllonexit
0x16a90d878
_aligned_free
0x16a90d7a8
_aligned_malloc
0x16a90d7b0
_amsg_exit
0x16a90d8c8
_callnewh
0x16a90d838
_ftime64
0x16a90d7a0
_initterm
0x16a90d8a8
_lock
0x16a90d888
_onexit
0x16a90d868
_purecall
0x16a90d858
_resetstkoflw
0x16a90d8d0
_strnicmp
0x16a90d8e8
_unlock
0x16a90d880
_vsnwprintf
0x16a90d7c0
_wcsicmp
0x16a90d7b8
_wcsnicmp
0x16a90d8d8
_wfopen_s
0x16a90d7e8
_XcptFilter
0x16a90d8b0
?terminate@@YAXXZ
0x16a90d8f0
calloc
0x16a90d790
fclose
0x16a90d7e0
fprintf
0x16a90d810
free
0x16a90d8c0
fwrite
0x16a90d800
isalpha
0x16a90d8e0
log
0x16a90d8f8
malloc
0x16a90d8b8
memcmp
0x16a90d900
memcpy
0x16a90d908
memcpy_s
0x16a90d7f8
memmove
0x16a90d910
memmove_s
0x16a90d840
memset
0x16a90d918
pow
0x16a90d920
printf
0x16a90d788
qsort
0x16a90d780
rand
0x16a90d890
realloc
0x16a90d7f0
sprintf_s
0x16a90d7d0
sqrt
0x16a90d928
sqrtf
0x16a90d860
strncpy_s
0x16a90d820
strnlen
0x16a90d808
swprintf_s
0x16a90d7d8
vswprintf_s
0x16a90d898
wcscat_s
0x16a90d870
wcschr
0x16a90d848
wcscmp
0x16a90d930
wcscpy_s
0x16a90d828
wcsnlen
0x16a90d830
wcsrchr
0x16a90d850
wcstombs
0x16a90d818
wcstoul
0x16a90d7c8
SysAllocString
0x16a90cf50
SysFreeString
0x16a90cf58
VariantClear
0x16a90cf48
VariantInit
0x16a90cf60
RDPBASE.dll
36
?RdpPerfLoggerStaticTerminate@@YAXXZ
0x16a90d000
DrawBox
0x16a90cfb0
GetSupportedSSELevel_SSE
0x16a90cfe0
GridBA_CreateInstance
0x16a90cfb8
MemCopyAligned_SSE
0x16a90cff0
MemMoveReverseAligned_SSE
0x16a90cfe8
PAL_System_AtomicCompareAndExchange
0x16a90d058
PAL_System_AtomicDecrement
0x16a90d088
PAL_System_AtomicIncrement
0x16a90d080
PAL_System_CritSecEnter
0x16a90d038
PAL_System_CritSecInit
0x16a90d040
PAL_System_CritSecLeave
0x16a90d030
PAL_System_CritSecTerminate
0x16a90d048
PAL_System_GetNumberOfProcessors
0x16a90d078
PAL_System_HandleFree
0x16a90cfa0
PAL_System_SemaphoreAcquire
0x16a90cf90
PAL_System_SemaphoreAlloc
0x16a90cf88
PAL_System_SemaphoreRelease
0x16a90cf98
PAL_System_Sleep
0x16a90d068
PAL_System_SwitchToThread
0x16a90d060
PAL_System_ThreadGetId
0x16a90d070
RDPAPI_GetGenericCounter
0x16a90d018
RDPAPI_GetLongCounter
0x16a90cfd0
RDPBASE_CreateInstance
0x16a90d008
RDPENCHLP_GetInputDesktopName
0x16a90cf80
RDPENCHLP_IsGreaterThanOrEqWin8
0x16a90cfd8
RDPENCHLP_IsSessionActive
0x16a90cf78
RDPENCHLP_IsSessionRemote
0x16a90cff8
RDPENCHLP_TraceWindowInfo
0x16a90cfc0
RdpTiledSurface_CreateInstance
0x16a90cfa8
RdpX_GetActivityIdPrefix
0x16a90cf70
RgnlibBA_CreateInstance
0x16a90cfc8
TRC_TraceBufferW
0x16a90d050
TSAlloc
0x16a90d020
TSCreateCoreEvents
0x16a90d010
TSFree
0x16a90d028
?GetEncodingPixelMap@RdpSurface@@QEAAJPEAPEAVPixelMap@@@Z
0x16a90d0b8
?GetGfxPipeSettingBOOL@@YAJPEAGHPEAH@Z
0x16a90d0b0
?GetGfxPipeSettingUINT@@YAJPEAGIPEAI@Z
0x16a90d0d8
?GetGraphicsSourceContext@RdpSurface@@QEAAJPEAPEAUIRdpGFXSourceUpdateContext@@@Z
0x16a90d0c0
?GetTileFirst@Tiler@@QEAAJPEBURdpRect@@PEAU2@@Z
0x16a90d098
?GetTileNext@Tiler@@QEAAJPEAURdpRect@@@Z
0x16a90d0a0
?Initialize@Tiler@@QEAAJPEBURdpRect@@0@Z
0x16a90d0d0
CCompressedUpdateContext_CreateInstance
0x16a90d0a8
CUpdateContext_CreateInstance
0x16a90d0c8
RDPSERVERBASE_CreateInstance
0x16a90d0e0
No function matches your filter.