rdpcore.dll
v10.0.19041.6093
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
RDPAPI_CreateInstance
#1 · 0x1d770
No function matches your filter.
Imported DLLs & functions 281
ApiSetQueryApiSetPresence
0x6a8fd110
CoCreateInstance
0x6a8fd128
CoInitializeEx
0x6a8fd12c
CoTaskMemAlloc
0x6a8fd134
CoTaskMemFree
0x6a8fd124
CoUninitialize
0x6a8fd130
DebugBreak
0x6a8fd144
IsDebuggerPresent
0x6a8fd140
OutputDebugStringW
0x6a8fd13c
DelayLoadFailureHook
0x6a8fd14c
ResolveDelayLoadedAPI
0x6a8fd154
GetLastError
0x6a8fd164
RaiseException
0x6a8fd15c
SetErrorMode
0x6a8fd168
SetLastError
0x6a8fd16c
SetUnhandledExceptionFilter
0x6a8fd170
UnhandledExceptionFilter
0x6a8fd160
RecordFeatureUsage
0x6a8fd17c
SubscribeFeatureStateChangeNotification
0x6a8fd180
UnsubscribeFeatureStateChangeNotification
0x6a8fd178
CreateDirectoryW
0x6a8fd188
CreateFileW
0x6a8fd18c
DeleteFileW
0x6a8fd194
FindClose
0x6a8fd1b4
FindFirstFileW
0x6a8fd1a4
FindNextFileW
0x6a8fd1ac
GetFileAttributesW
0x6a8fd1a8
GetFileInformationByHandle
0x6a8fd1b0
GetTempFileNameW
0x6a8fd1a0
ReadFile
0x6a8fd190
SetFilePointerEx
0x6a8fd198
WriteFile
0x6a8fd19c
GetProcessHeap
0x6a8fd1c8
HeapAlloc
0x6a8fd1d0
HeapFree
0x6a8fd1cc
GlobalLock
0x6a8fd1e4
GlobalSize
0x6a8fd1e8
GlobalUnlock
0x6a8fd1ec
PulseEvent
0x6a8fd1f4
DisableThreadLibraryCalls
0x6a8fd200
FreeLibrary
0x6a8fd1fc
GetModuleFileNameA
0x6a8fd210
GetModuleHandleExA
0x6a8fd204
GetModuleHandleExW
0x6a8fd214
GetModuleHandleW
0x6a8fd20c
GetProcAddress
0x6a8fd218
LoadLibraryExW
0x6a8fd208
FormatMessageW
0x6a8fd230
GetCPInfo
0x6a8fd234
IsDBCSLeadByte
0x6a8fd22c
PathCchCanonicalize
0x6a8fd23c
CreateThread
0x6a8fd250
GetCurrentProcess
0x6a8fd24c
GetCurrentProcessId
0x6a8fd244
GetCurrentThread
0x6a8fd25c
GetCurrentThreadId
0x6a8fd248
OpenProcessToken
0x6a8fd270
OpenThreadToken
0x6a8fd274
ProcessIdToSessionId
0x6a8fd260
TerminateProcess
0x6a8fd26c
TlsAlloc
0x6a8fd268
TlsFree
0x6a8fd254
TlsGetValue
0x6a8fd258
TlsSetValue
0x6a8fd264
IsProcessorFeaturePresent
0x6a8fd280
OpenProcess
0x6a8fd27c
QueryPerformanceCounter
0x6a8fd28c
QueryPerformanceFrequency
0x6a8fd288
K32GetModuleFileNameExW
0x6a8fd294
RegCloseKey
0x6a8fd2a8
RegEnumValueW
0x6a8fd2a4
RegOpenKeyExW
0x6a8fd2a0
RegQueryValueExW
0x6a8fd29c
lstrcmpW
0x6a8fd2bc
AcquireSRWLockExclusive
0x6a8fd308
AcquireSRWLockShared
0x6a8fd318
CreateEventW
0x6a8fd324
CreateMutexExW
0x6a8fd2e4
CreateSemaphoreExW
0x6a8fd2e8
CreateWaitableTimerExW
0x6a8fd32c
DeleteCriticalSection
0x6a8fd320
EnterCriticalSection
0x6a8fd2f0
InitializeCriticalSection
0x6a8fd31c
InitializeCriticalSectionEx
0x6a8fd2dc
InitializeSRWLock
0x6a8fd310
LeaveCriticalSection
0x6a8fd2f4
OpenEventW
0x6a8fd2f8
OpenSemaphoreW
0x6a8fd2fc
ReleaseMutex
0x6a8fd2e0
ReleaseSemaphore
0x6a8fd2ec
ReleaseSRWLockExclusive
0x6a8fd30c
ReleaseSRWLockShared
0x6a8fd314
ResetEvent
0x6a8fd304
SetEvent
0x6a8fd2d0
SetWaitableTimer
0x6a8fd328
WaitForMultipleObjectsEx
0x6a8fd300
WaitForSingleObject
0x6a8fd2d8
WaitForSingleObjectEx
0x6a8fd2d4
InitializeConditionVariable
0x6a8fd338
InitOnceExecuteOnce
0x6a8fd33c
Sleep
0x6a8fd340
SleepConditionVariableCS
0x6a8fd348
SleepConditionVariableSRW
0x6a8fd344
WakeAllConditionVariable
0x6a8fd334
WaitForMultipleObjects
0x6a8fd350
GetSystemDirectoryW
0x6a8fd368
GetSystemTime
0x6a8fd360
GetSystemTimeAsFileTime
0x6a8fd364
GetTickCount
0x6a8fd35c
GetVersionExW
0x6a8fd358
CloseThreadpoolTimer
0x6a8fd370
CreateThreadpoolTimer
0x6a8fd378
SetThreadpoolTimer
0x6a8fd37c
WaitForThreadpoolTimerCallbacks
0x6a8fd374
SystemTimeToFileTime
0x6a8fd384
WindowsCreateStringReference
0x6a8fd39c
WindowsDeleteString
0x6a8fd398
GetTraceEnableFlags
0x6a8fd3a8
GetTraceEnableLevel
0x6a8fd3a4
GetTraceLoggerHandle
0x6a8fd3b4
RegisterTraceGuidsW
0x6a8fd3b8
TraceMessage
0x6a8fd3ac
UnregisterTraceGuids
0x6a8fd3b0
EventWriteTransfer
0x6a8fd3c0
CopyRect
0x6a8fd3dc
EqualRect
0x6a8fd3c8
InflateRect
0x6a8fd3e8
IntersectRect
0x6a8fd3e4
IsRectEmpty
0x6a8fd3d8
OffsetRect
0x6a8fd3e0
PtInRect
0x6a8fd3ec
SetRect
0x6a8fd3d0
SetRectEmpty
0x6a8fd3cc
UnionRect
0x6a8fd3d4
EnumDisplayDevicesW
0x6a8fd3fc
EnumDisplayMonitors
0x6a8fd400
EnumDisplaySettingsExW
0x6a8fd408
EnumDisplaySettingsW
0x6a8fd404
GetMonitorInfoW
0x6a8fd3f4
GetSystemMetrics
0x6a8fd3f8
SystemParametersInfoW
0x6a8fd40c
OleGetClipboard
0x6a8fd41c
OleIsCurrentClipboard
0x6a8fd414
OleSetClipboard
0x6a8fd418
IsProcessInWDAGContainer
0x6a8fd430
D3D11CreateDevice
0x6a8fd438
dxgi.dll
1
CreateDXGIFactory1
0x6a8fd440
MSACM32.dll
11
acmDriverClose
0x6a8fd020
acmDriverEnum
0x6a8fd034
acmDriverOpen
0x6a8fd02c
acmFormatSuggest
0x6a8fd00c
acmFormatTagDetailsW
0x6a8fd030
acmStreamClose
0x6a8fd024
acmStreamConvert
0x6a8fd014
acmStreamOpen
0x6a8fd028
acmStreamPrepareHeader
0x6a8fd018
acmStreamSize
0x6a8fd01c
acmStreamUnprepareHeader
0x6a8fd010
msvcrt.dll
55
__CxxFrameHandler3
0x6a8fd4ec
__dllonexit
0x6a8fd47c
_aligned_free
0x6a8fd4b8
_aligned_malloc
0x6a8fd4bc
_amsg_exit
0x6a8fd4e0
_callnewh
0x6a8fd46c
_CIlog
0x6a8fd504
_CIpow
0x6a8fd508
_CIsqrt
0x6a8fd50c
_except_handler4_common
0x6a8fd4e4
_ftime64
0x6a8fd4b4
_ftol2
0x6a8fd510
_ftol2_sse
0x6a8fd514
_initterm
0x6a8fd4e8
_lock
0x6a8fd4d8
_onexit
0x6a8fd478
_purecall
0x6a8fd4cc
_resetstkoflw
0x6a8fd4ac
_strnicmp
0x6a8fd4fc
_unlock
0x6a8fd480
_vsnwprintf
0x6a8fd4c4
_wcsicmp
0x6a8fd4c0
_wcsnicmp
0x6a8fd4f4
_wfopen_s
0x6a8fd49c
_XcptFilter
0x6a8fd4d4
?terminate@@YAXXZ
0x6a8fd500
calloc
0x6a8fd468
fclose
0x6a8fd498
fprintf
0x6a8fd48c
free
0x6a8fd4f0
fwrite
0x6a8fd490
isalpha
0x6a8fd4f8
malloc
0x6a8fd450
memcmp
0x6a8fd518
memcpy
0x6a8fd51c
memcpy_s
0x6a8fd4a0
memmove
0x6a8fd454
memmove_s
0x6a8fd45c
memset
0x6a8fd520
printf
0x6a8fd448
qsort
0x6a8fd458
rand
0x6a8fd4a4
realloc
0x6a8fd4a8
sprintf_s
0x6a8fd460
strncpy_s
0x6a8fd464
strnlen
0x6a8fd44c
swprintf_s
0x6a8fd4b0
vswprintf_s
0x6a8fd494
wcscat_s
0x6a8fd4dc
wcschr
0x6a8fd4d0
wcscpy_s
0x6a8fd474
wcsnlen
0x6a8fd470
wcsrchr
0x6a8fd484
wcstombs
0x6a8fd488
wcstoul
0x6a8fd4c8
SysAllocString
0x6a8fd048
SysFreeString
0x6a8fd040
VariantClear
0x6a8fd03c
VariantInit
0x6a8fd044
RDPBASE.dll
36
?RdpPerfLoggerStaticTerminate@@YGXXZ
0x6a8fd088
DrawBox
0x6a8fd09c
GetSupportedSSELevel_SSE
0x6a8fd054
GridBA_CreateInstance
0x6a8fd098
MemCopyAligned_SSE
0x6a8fd0b4
MemMoveReverseAligned_SSE
0x6a8fd050
PAL_System_AtomicCompareAndExchange
0x6a8fd080
PAL_System_AtomicDecrement
0x6a8fd060
PAL_System_AtomicIncrement
0x6a8fd064
PAL_System_CritSecEnter
0x6a8fd07c
PAL_System_CritSecInit
0x6a8fd058
PAL_System_CritSecLeave
0x6a8fd074
PAL_System_CritSecTerminate
0x6a8fd0dc
PAL_System_GetNumberOfProcessors
0x6a8fd06c
PAL_System_HandleFree
0x6a8fd0a4
PAL_System_SemaphoreAcquire
0x6a8fd0bc
PAL_System_SemaphoreAlloc
0x6a8fd0c0
PAL_System_SemaphoreRelease
0x6a8fd0b8
PAL_System_Sleep
0x6a8fd0b0
PAL_System_SwitchToThread
0x6a8fd078
PAL_System_ThreadGetId
0x6a8fd070
RDPAPI_GetGenericCounter
0x6a8fd0d4
RDPAPI_GetLongCounter
0x6a8fd068
RDPBASE_CreateInstance
0x6a8fd08c
RDPENCHLP_GetInputDesktopName
0x6a8fd0c4
RDPENCHLP_IsGreaterThanOrEqWin8
0x6a8fd05c
RDPENCHLP_IsSessionActive
0x6a8fd0c8
RDPENCHLP_IsSessionRemote
0x6a8fd0a8
RDPENCHLP_TraceWindowInfo
0x6a8fd094
RdpTiledSurface_CreateInstance
0x6a8fd0a0
RdpX_GetActivityIdPrefix
0x6a8fd0cc
RgnlibBA_CreateInstance
0x6a8fd090
TRC_TraceBufferW
0x6a8fd084
TSAlloc
0x6a8fd0d8
TSCreateCoreEvents
0x6a8fd0d0
TSFree
0x6a8fd0ac
?GetEncodingPixelMap@RdpSurface@@QAEJPAPAVPixelMap@@@Z
0x6a8fd0fc
?GetGfxPipeSettingBOOL@@YGJPAGHPAH@Z
0x6a8fd0f8
?GetGfxPipeSettingUINT@@YGJPAGIPAI@Z
0x6a8fd0ec
?GetGraphicsSourceContext@RdpSurface@@QAEJPAPAUIRdpGFXSourceUpdateContext@@@Z
0x6a8fd100
?GetTileFirst@Tiler@@QAEJPBURdpRect@@PAU2@@Z
0x6a8fd0f0
?GetTileNext@Tiler@@QAEJPAURdpRect@@@Z
0x6a8fd0f4
?Initialize@Tiler@@QAEJPBURdpRect@@0@Z
0x6a8fd0e4
CCompressedUpdateContext_CreateInstance
0x6a8fd108
CUpdateContext_CreateInstance
0x6a8fd0e8
RDPSERVERBASE_CreateInstance
0x6a8fd104
No function matches your filter.