rdpencom.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x119f0
DllGetClassObject
#2 · 0x11a10
DllRegisterServer
#3 · 0x11a20
DllUnregisterServer
#4 · 0x11a80
No function matches your filter.
Imported DLLs & functions 199
ApiSetQueryApiSetPresence
0x10049100
CLSIDFromProgID
0x10049120
CLSIDFromString
0x1004910c
CoCreateInstance
0x10049108
CoGetClassObject
0x10049128
CoTaskMemAlloc
0x1004911c
CoTaskMemFree
0x10049118
CoTaskMemRealloc
0x10049110
CreateStreamOnHGlobal
0x10049114
StringFromGUID2
0x10049124
OutputDebugStringA
0x10049130
DelayLoadFailureHook
0x10049138
ResolveDelayLoadedAPI
0x10049140
GetLastError
0x10049150
RaiseException
0x1004914c
SetLastError
0x10049148
SetUnhandledExceptionFilter
0x10049158
UnhandledExceptionFilter
0x10049154
CloseHandle
0x1004916c
GetProcessHeap
0x10049178
HeapAlloc
0x10049174
HeapFree
0x1004917c
GlobalAlloc
0x10049184
InterlockedPopEntrySList
0x1004919c
InterlockedPushEntrySList
0x10049198
MulDiv
0x100491a4
DisableThreadLibraryCalls
0x100491c0
FindResourceExW
0x100491bc
FreeLibrary
0x100491c8
GetModuleFileNameW
0x100491d4
GetModuleHandleExA
0x100491d0
GetModuleHandleExW
0x100491c4
GetModuleHandleW
0x100491d8
GetProcAddress
0x100491b8
LoadLibraryExA
0x100491b0
LoadLibraryExW
0x100491cc
LoadResource
0x100491ac
SizeofResource
0x100491b4
LoadLibraryW
0x100491e0
VirtualAlloc
0x100491ec
VirtualFree
0x100491e8
VirtualQuery
0x100491f0
GetCurrentProcess
0x10049200
GetCurrentProcessId
0x10049204
GetCurrentThread
0x10049210
GetCurrentThreadId
0x100491fc
OpenProcessToken
0x1004920c
OpenThreadToken
0x100491f8
TerminateProcess
0x10049208
FlushInstructionCache
0x10049218
IsProcessorFeaturePresent
0x10049220
OpenProcess
0x1004921c
QueryPerformanceCounter
0x10049228
K32EnumProcessModules
0x10049230
K32GetModuleBaseNameW
0x10049234
K32GetModuleFileNameExW
0x10049238
RegCloseKey
0x10049250
RegCreateKeyExW
0x10049240
RegDeleteValueW
0x10049244
RegEnumKeyExW
0x1004925c
RegOpenKeyExW
0x10049254
RegQueryInfoKeyW
0x1004924c
RegQueryValueExW
0x10049248
RegSetValueExW
0x10049258
PathFindFileNameW
0x10049264
MultiByteToWideChar
0x1004926c
CharNextW
0x10049274
AcquireSRWLockExclusive
0x10049298
DeleteCriticalSection
0x10049294
EnterCriticalSection
0x10049288
InitializeCriticalSection
0x10049290
LeaveCriticalSection
0x1004928c
OpenEventW
0x100492a0
ReleaseSRWLockExclusive
0x1004929c
Sleep
0x100492ac
SleepConditionVariableSRW
0x100492a8
WakeAllConditionVariable
0x100492b0
GetFileVersionInfoExW
0x100492d0
GetFileVersionInfoSizeExW
0x100492d8
VerQueryValueW
0x100492d4
GetTraceEnableFlags
0x100492f4
GetTraceEnableLevel
0x100492e0
GetTraceLoggerHandle
0x100492f0
RegisterTraceGuidsW
0x100492e8
TraceMessage
0x100492e4
UnregisterTraceGuids
0x100492ec
EventActivityIdControl
0x10049308
EventRegister
0x100492fc
EventUnregister
0x10049300
EventWriteTransfer
0x10049304
CopyRect
0x10049310
EqualRect
0x10049324
IntersectRect
0x10049314
IsRectEmpty
0x10049328
OffsetRect
0x10049318
PtInRect
0x10049330
SetRect
0x1004932c
SetRectEmpty
0x1004931c
UnionRect
0x10049320
GetTokenInformation
0x10049338
CryptBinaryToStringW
0x10049000
CryptAcquireContextW
0x10049014
CryptCreateHash
0x10049018
CryptDestroyHash
0x1004901c
CryptGenRandom
0x10049020
CryptGetHashParam
0x10049010
CryptHashData
0x10049008
CryptReleaseContext
0x1004900c
msvcrt.dll
32
__dllonexit
0x10049350
_aligned_free
0x100493a8
_aligned_malloc
0x100493a4
_amsg_exit
0x1004937c
_callnewh
0x10049388
_errno
0x10049370
_except_handler4_common
0x10049374
_initterm
0x10049378
_lock
0x10049368
_onexit
0x10049360
_purecall
0x1004939c
_resetstkoflw
0x100493b0
_unlock
0x10049354
_vsnwprintf
0x1004934c
_wcsicmp
0x10049358
_wcsicoll
0x10049340
_XcptFilter
0x10049380
calloc
0x100493ac
free
0x10049394
malloc
0x10049390
mbstowcs
0x10049344
memcmp
0x100493b4
memcpy
0x100493b8
memcpy_s
0x100493a0
memmove
0x10049348
memset
0x100493bc
realloc
0x1004936c
swprintf_s
0x10049398
wcscat_s
0x1004935c
wcscpy_s
0x10049384
wcsncpy_s
0x1004938c
wcsrchr
0x10049364
OLEAUT32.dll
26
DispCallFunc
0x10049070
LoadRegTypeLib
0x10049028
LoadTypeLib
0x10049030
OleCreateFontIndirect
0x10049068
OleCreatePropertyFrame
0x10049074
RegisterTypeLib
0x10049084
SafeArrayAccessData
0x10049078
SafeArrayCreate
0x1004903c
SafeArrayDestroy
0x10049038
SafeArrayLock
0x10049048
SafeArrayUnaccessData
0x10049080
SafeArrayUnlock
0x1004902c
SysAllocString
0x10049088
SysAllocStringByteLen
0x10049058
SysAllocStringLen
0x10049044
SysFreeString
0x10049034
SysStringByteLen
0x10049040
SysStringLen
0x1004907c
UnRegisterTypeLib
0x1004906c
VarBstrCat
0x10049064
VarBstrCmp
0x1004904c
VariantChangeType
0x10049060
VariantClear
0x1004905c
VariantCopy
0x1004908c
VariantInit
0x10049050
VarUI4FromStr
0x10049054
RDPBASE.dll
19
GetSupportedSSELevel_SSE
0x100490c4
MemCopyAligned_SSE
0x100490a4
MemMoveReverseAligned_SSE
0x100490a8
PAL_System_AtomicDecrement
0x100490b4
PAL_System_AtomicIncrement
0x100490b0
PAL_System_CritSecEnter
0x10049098
PAL_System_CritSecInit
0x1004909c
PAL_System_CritSecLeave
0x10049094
PAL_System_CritSecTerminate
0x100490a0
RDPBASE_CreateInstance
0x100490ac
RDPENCHLPREG_ReadValueDWORD
0x100490cc
TsAddRectsToRegion
0x100490d4
TSAlloc
0x100490bc
TsCreateRegion
0x100490b8
TsDestroyRegion
0x100490c8
TSFree
0x100490c0
TsGetRegionRectCount
0x100490d8
TsGetRegionRects
0x100490dc
TsSetRegionFromRects
0x100490d0
RDPAPI_CreateInstance
0x100490e4
RDPSERVERBASE_CreateInstance
0x100490ec
No function matches your filter.