rdpsharercom.dll
Description: RDPSRAPI Sharer COM Objects
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 32-bit
Operating System: Windows NT
SHA256: 227fc61d6d9a6cb8b9fe495469258620
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 8:03 a.m.
Views: 22
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x2a470)
- DllGetClassObject (Ordinal: 2, Address: 0x2a490)
- DllRegisterServer (Ordinal: 3, Address: 0x2a4a0)
- DllUnregisterServer (Ordinal: 4, Address: 0x2a500)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x10120150)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalAddAtomW (Address: 0x10120158)
- GlobalDeleteAtom (Address: 0x1012015c)
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x10120174)
- CoInitializeEx (Address: 0x1012016c)
- CoTaskMemAlloc (Address: 0x10120178)
- CoTaskMemFree (Address: 0x10120164)
- CoTaskMemRealloc (Address: 0x10120170)
- CoUninitialize (Address: 0x10120168)
- StringFromGUID2 (Address: 0x1012017c)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x10120184)
- IsDebuggerPresent (Address: 0x1012018c)
- OutputDebugStringA (Address: 0x10120190)
- OutputDebugStringW (Address: 0x10120188)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x10120198)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x101201a0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x101201b8)
- RaiseException (Address: 0x101201b4)
- SetErrorMode (Address: 0x101201ac)
- SetLastError (Address: 0x101201b0)
- SetUnhandledExceptionFilter (Address: 0x101201a8)
- UnhandledExceptionFilter (Address: 0x101201bc)
api-ms-win-core-featurestaging-l1-1-0.dll
- GetFeatureEnabledState (Address: 0x101201d0)
- RecordFeatureUsage (Address: 0x101201c4)
- SubscribeFeatureStateChangeNotification (Address: 0x101201cc)
- UnsubscribeFeatureStateChangeNotification (Address: 0x101201c8)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x101201ec)
- CreateFileW (Address: 0x101201dc)
- DeleteFileW (Address: 0x10120204)
- FindClose (Address: 0x101201f0)
- FindFirstFileW (Address: 0x101201e0)
- FindNextFileW (Address: 0x101201e4)
- GetFileAttributesW (Address: 0x10120200)
- GetFileInformationByHandle (Address: 0x101201fc)
- GetTempFileNameW (Address: 0x101201f8)
- ReadFile (Address: 0x101201f4)
- SetFilePointerEx (Address: 0x101201e8)
- WriteFile (Address: 0x101201d8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1012020c)
- DuplicateHandle (Address: 0x10120210)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x10120220)
- HeapAlloc (Address: 0x10120218)
- HeapFree (Address: 0x1012021c)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x1012022c)
- GlobalFree (Address: 0x10120228)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x10120234)
- GlobalSize (Address: 0x1012023c)
- GlobalUnlock (Address: 0x10120238)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- PulseEvent (Address: 0x10120248)
- WTSGetActiveConsoleSessionId (Address: 0x10120244)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
- VerifyVersionInfoW (Address: 0x10120250)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x10120270)
- FindResourceExW (Address: 0x10120260)
- FreeLibrary (Address: 0x10120274)
- GetModuleFileNameA (Address: 0x10120264)
- GetModuleFileNameW (Address: 0x10120280)
- GetModuleHandleExA (Address: 0x1012026c)
- GetModuleHandleExW (Address: 0x10120278)
- GetModuleHandleW (Address: 0x1012027c)
- GetProcAddress (Address: 0x10120284)
- LoadLibraryExW (Address: 0x10120258)
- LoadResource (Address: 0x10120268)
- SizeofResource (Address: 0x1012025c)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryA (Address: 0x10120290)
- LoadLibraryW (Address: 0x1012028c)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1012029c)
- GetCPInfo (Address: 0x101202a0)
- IsDBCSLeadByte (Address: 0x10120298)
api-ms-win-core-memory-l1-1-0.dll
- VirtualQuery (Address: 0x101202a8)
api-ms-win-core-path-l1-1-0.dll
- PathCchCanonicalize (Address: 0x101202b0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x101202dc)
- GetCurrentProcess (Address: 0x101202d0)
- GetCurrentProcessId (Address: 0x101202e0)
- GetCurrentThread (Address: 0x101202d8)
- GetCurrentThreadId (Address: 0x101202e4)
- OpenProcessToken (Address: 0x101202cc)
- OpenThreadToken (Address: 0x101202c0)
- ProcessIdToSessionId (Address: 0x101202e8)
- TerminateProcess (Address: 0x101202c8)
- TlsAlloc (Address: 0x101202c4)
- TlsFree (Address: 0x101202d4)
- TlsGetValue (Address: 0x101202bc)
- TlsSetValue (Address: 0x101202b8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x101202f0)
- OpenProcess (Address: 0x101202f4)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10120300)
- QueryPerformanceFrequency (Address: 0x101202fc)
api-ms-win-core-psapi-l1-1-0.dll
- K32EnumProcessModules (Address: 0x10120308)
- K32GetModuleBaseNameW (Address: 0x1012030c)
- K32GetModuleFileNameExW (Address: 0x10120310)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x10120324)
- RegCreateKeyExW (Address: 0x10120338)
- RegDeleteValueW (Address: 0x10120330)
- RegEnumKeyExW (Address: 0x1012031c)
- RegEnumValueW (Address: 0x10120334)
- RegOpenKeyExW (Address: 0x1012032c)
- RegQueryInfoKeyW (Address: 0x10120320)
- RegQueryValueExW (Address: 0x10120328)
- RegSetValueExW (Address: 0x10120318)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x10120340)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x1012034c)
- WideCharToMultiByte (Address: 0x10120348)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x10120354)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1012035c)
- lstrcmpW (Address: 0x10120360)
api-ms-win-core-stringansi-l1-1-0.dll
- CharNextA (Address: 0x10120368)
- CharPrevA (Address: 0x1012036c)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x101203c8)
- AcquireSRWLockShared (Address: 0x101203b0)
- CreateEventW (Address: 0x10120388)
- CreateMutexExW (Address: 0x101203b4)
- CreateSemaphoreExW (Address: 0x10120380)
- CreateWaitableTimerExW (Address: 0x10120390)
- DeleteCriticalSection (Address: 0x101203a4)
- EnterCriticalSection (Address: 0x1012039c)
- InitializeCriticalSection (Address: 0x101203a0)
- InitializeCriticalSectionEx (Address: 0x101203b8)
- InitializeSRWLock (Address: 0x10120398)
- LeaveCriticalSection (Address: 0x10120374)
- OpenEventW (Address: 0x101203ac)
- OpenSemaphoreW (Address: 0x101203c0)
- ReleaseMutex (Address: 0x101203cc)
- ReleaseSemaphore (Address: 0x10120378)
- ReleaseSRWLockExclusive (Address: 0x101203d0)
- ReleaseSRWLockShared (Address: 0x101203bc)
- ResetEvent (Address: 0x101203a8)
- SetEvent (Address: 0x1012038c)
- SetWaitableTimer (Address: 0x10120394)
- WaitForMultipleObjectsEx (Address: 0x1012037c)
- WaitForSingleObject (Address: 0x10120384)
- WaitForSingleObjectEx (Address: 0x101203c4)
api-ms-win-core-synch-l1-2-0.dll
- InitializeConditionVariable (Address: 0x101203e0)
- InitOnceExecuteOnce (Address: 0x101203e4)
- Sleep (Address: 0x101203dc)
- SleepConditionVariableCS (Address: 0x101203ec)
- SleepConditionVariableSRW (Address: 0x101203d8)
- WakeAllConditionVariable (Address: 0x101203e8)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x101203f4)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x101203fc)
- GetSystemTime (Address: 0x10120400)
- GetSystemTimeAsFileTime (Address: 0x10120404)
- GetTickCount (Address: 0x1012040c)
- GetVersionExW (Address: 0x10120408)
api-ms-win-core-sysinfo-l1-2-0.dll
- VerSetConditionMask (Address: 0x10120414)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1012041c)
- CreateThreadpoolTimer (Address: 0x10120424)
- SetThreadpoolTimer (Address: 0x10120420)
- WaitForThreadpoolTimerCallbacks (Address: 0x10120428)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x10120430)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x10120438)
- GetFileVersionInfoSizeExW (Address: 0x10120440)
- VerQueryValueW (Address: 0x1012043c)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1012044c)
- RoGetActivationFactory (Address: 0x10120448)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateStringReference (Address: 0x10120454)
- WindowsDeleteString (Address: 0x10120458)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x10120470)
- GetTraceEnableLevel (Address: 0x1012046c)
- GetTraceLoggerHandle (Address: 0x10120474)
- RegisterTraceGuidsW (Address: 0x10120464)
- TraceMessage (Address: 0x10120468)
- UnregisterTraceGuids (Address: 0x10120460)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x10120484)
- EventRegister (Address: 0x10120480)
- EventUnregister (Address: 0x1012047c)
- EventWriteTransfer (Address: 0x10120488)
api-ms-win-ntuser-rectangle-l1-1-0.dll
- CopyRect (Address: 0x101204a4)
- EqualRect (Address: 0x10120498)
- InflateRect (Address: 0x1012049c)
- IntersectRect (Address: 0x101204a0)
- IsRectEmpty (Address: 0x101204a8)
- OffsetRect (Address: 0x101204ac)
- PtInRect (Address: 0x101204b4)
- SetRect (Address: 0x101204b0)
- SetRectEmpty (Address: 0x10120494)
- UnionRect (Address: 0x10120490)
api-ms-win-ntuser-sysparams-l1-1-0.dll
- EnumDisplayDevicesW (Address: 0x101204d4)
- EnumDisplayMonitors (Address: 0x101204c8)
- EnumDisplaySettingsExW (Address: 0x101204c4)
- EnumDisplaySettingsW (Address: 0x101204d0)
- GetMonitorInfoW (Address: 0x101204bc)
- GetSystemMetrics (Address: 0x101204c0)
- SystemParametersInfoW (Address: 0x101204cc)
api-ms-win-rtcore-ole32-clipboard-l1-1-0.dll
- OleGetClipboard (Address: 0x101204e0)
- OleIsCurrentClipboard (Address: 0x101204e4)
- OleSetClipboard (Address: 0x101204dc)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x101204ec)
- SetTokenInformation (Address: 0x101204f0)
api-ms-win-security-cryptoapi-l1-1-0.dll
- CryptAcquireContextW (Address: 0x10120510)
- CryptCreateHash (Address: 0x10120500)
- CryptDestroyHash (Address: 0x1012050c)
- CryptGenRandom (Address: 0x101204f8)
- CryptGetHashParam (Address: 0x10120508)
- CryptHashData (Address: 0x10120504)
- CryptReleaseContext (Address: 0x101204fc)
api-ms-win-security-isolatedcontainer-l1-1-1.dll
- IsProcessInWDAGContainer (Address: 0x10120518)
AVRT.dll
- AvRevertMmThreadCharacteristics (Address: 0x10120000)
- AvSetMmThreadCharacteristicsW (Address: 0x10120004)
CRYPT32.dll
- CryptBinaryToStringW (Address: 0x1012000c)
d3d11.dll
- D3D11CreateDevice (Address: 0x10120520)
dxgi.dll
- CreateDXGIFactory1 (Address: 0x10120528)
MSACM32.dll
- acmDriverClose (Address: 0x10120018)
- acmDriverEnum (Address: 0x1012002c)
- acmDriverOpen (Address: 0x10120024)
- acmFormatSuggest (Address: 0x10120034)
- acmFormatTagDetailsW (Address: 0x10120028)
- acmStreamClose (Address: 0x1012001c)
- acmStreamConvert (Address: 0x10120020)
- acmStreamOpen (Address: 0x1012003c)
- acmStreamPrepareHeader (Address: 0x10120038)
- acmStreamSize (Address: 0x10120014)
- acmStreamUnprepareHeader (Address: 0x10120030)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x10120564)
- __dllonexit (Address: 0x1012058c)
- _aligned_free (Address: 0x1012053c)
- _aligned_malloc (Address: 0x10120538)
- _amsg_exit (Address: 0x101205b4)
- _callnewh (Address: 0x101205c0)
- _CIlog (Address: 0x101205f8)
- _CIpow (Address: 0x101205fc)
- _CIsqrt (Address: 0x10120600)
- _errno (Address: 0x1012059c)
- _except_handler4_common (Address: 0x101205a0)
- _ftime64 (Address: 0x10120540)
- _ftol2 (Address: 0x10120604)
- _ftol2_sse (Address: 0x10120608)
- _initterm (Address: 0x101205b0)
- _lock (Address: 0x10120594)
- _onexit (Address: 0x10120578)
- _purecall (Address: 0x101205d4)
- _resetstkoflw (Address: 0x101205e4)
- _strnicmp (Address: 0x101205f0)
- _unlock (Address: 0x10120590)
- _vsnwprintf (Address: 0x101205e0)
- _wcsicmp (Address: 0x10120534)
- _wcsicoll (Address: 0x101205ac)
- _wcsnicmp (Address: 0x101205e8)
- _wfopen_s (Address: 0x10120568)
- _XcptFilter (Address: 0x101205b8)
- ?terminate@@YAXXZ (Address: 0x101205f4)
- calloc (Address: 0x101205dc)
- fclose (Address: 0x1012056c)
- fprintf (Address: 0x10120580)
- free (Address: 0x101205d0)
- fwrite (Address: 0x1012057c)
- isalpha (Address: 0x101205ec)
- malloc (Address: 0x101205c8)
- memcmp (Address: 0x1012060c)
- memcpy (Address: 0x10120610)
- memcpy_s (Address: 0x101205d8)
- memmove (Address: 0x10120574)
- memmove_s (Address: 0x101205cc)
- memset (Address: 0x10120614)
- printf (Address: 0x10120560)
- qsort (Address: 0x1012055c)
- rand (Address: 0x10120548)
- realloc (Address: 0x10120598)
- sprintf_s (Address: 0x10120558)
- strncpy_s (Address: 0x10120550)
- strnlen (Address: 0x10120554)
- swprintf_s (Address: 0x10120544)
- vswprintf_s (Address: 0x10120570)
- wcscat_s (Address: 0x101205a4)
- wcschr (Address: 0x1012054c)
- wcscpy_s (Address: 0x101205bc)
- wcsncpy_s (Address: 0x101205c4)
- wcsnlen (Address: 0x10120588)
- wcsrchr (Address: 0x101205a8)
- wcstombs (Address: 0x10120584)
- wcstoul (Address: 0x10120530)
OLEAUT32.dll
- LoadRegTypeLib (Address: 0x10120094)
- LoadTypeLib (Address: 0x10120098)
- RegisterTypeLib (Address: 0x1012007c)
- SafeArrayAccessData (Address: 0x1012005c)
- SafeArrayCreate (Address: 0x10120048)
- SafeArrayDestroy (Address: 0x1012004c)
- SafeArrayLock (Address: 0x10120044)
- SafeArrayUnaccessData (Address: 0x10120058)
- SafeArrayUnlock (Address: 0x10120050)
- SysAllocString (Address: 0x10120090)
- SysAllocStringByteLen (Address: 0x1012006c)
- SysAllocStringLen (Address: 0x10120074)
- SysFreeString (Address: 0x1012009c)
- SysStringByteLen (Address: 0x10120070)
- SysStringLen (Address: 0x10120088)
- UnRegisterTypeLib (Address: 0x10120078)
- VarBstrCat (Address: 0x10120068)
- VarBstrCmp (Address: 0x10120064)
- VariantChangeType (Address: 0x10120060)
- VariantClear (Address: 0x10120080)
- VariantCopy (Address: 0x1012008c)
- VariantInit (Address: 0x10120084)
- VarUI4FromStr (Address: 0x10120054)
RDPBASE.dll
- ?RdpPerfLoggerStaticTerminate@@YGXXZ (Address: 0x1012010c)
- DrawBox (Address: 0x101200d0)
- GetSupportedSSELevel_SSE (Address: 0x10120100)
- GridBA_CreateInstance (Address: 0x101200d4)
- MemCopyAligned_SSE (Address: 0x10120108)
- MemMoveReverseAligned_SSE (Address: 0x10120104)
- PAL_System_AtomicCompareAndExchange (Address: 0x101200b0)
- PAL_System_AtomicDecrement (Address: 0x101200dc)
- PAL_System_AtomicIncrement (Address: 0x101200b4)
- PAL_System_CritSecEnter (Address: 0x101200c0)
- PAL_System_CritSecInit (Address: 0x101200bc)
- PAL_System_CritSecLeave (Address: 0x101200e0)
- PAL_System_CritSecTerminate (Address: 0x101200b8)
- PAL_System_GetNumberOfProcessors (Address: 0x101200ac)
- PAL_System_HandleFree (Address: 0x101200f4)
- PAL_System_SemaphoreAcquire (Address: 0x101200ec)
- PAL_System_SemaphoreAlloc (Address: 0x101200d8)
- PAL_System_SemaphoreRelease (Address: 0x101200f0)
- PAL_System_Sleep (Address: 0x10120114)
- PAL_System_SwitchToThread (Address: 0x101200a4)
- PAL_System_ThreadGetId (Address: 0x101200a8)
- RDPAPI_GetGenericCounter (Address: 0x101200c4)
- RDPAPI_GetLongCounter (Address: 0x101200fc)
- RDPBASE_CreateInstance (Address: 0x101200e8)
- RdpTiledSurface_CreateInstance (Address: 0x101200f8)
- RgnlibBA_CreateInstance (Address: 0x101200cc)
- TSAlloc (Address: 0x10120110)
- TSCreateCoreEvents (Address: 0x101200c8)
- TSFree (Address: 0x101200e4)
RDPSERVERBASE.dll
- ?GetEncodingPixelMap@RdpSurface@@QAEJPAPAVPixelMap@@@Z (Address: 0x1012013c)
- ?GetGfxPipeSettingBOOL@@YGJPAGHPAH@Z (Address: 0x10120138)
- ?GetGfxPipeSettingUINT@@YGJPAGIPAI@Z (Address: 0x10120120)
- ?GetGraphicsSourceContext@RdpSurface@@QAEJPAPAUIRdpGFXSourceUpdateContext@@@Z (Address: 0x10120140)
- ?GetTileFirst@Tiler@@QAEJPBURdpRect@@PAU2@@Z (Address: 0x1012012c)
- ?GetTileNext@Tiler@@QAEJPAURdpRect@@@Z (Address: 0x10120130)
- ?Initialize@Tiler@@QAEJPBURdpRect@@0@Z (Address: 0x10120128)
- CCompressedUpdateContext_CreateInstance (Address: 0x10120134)
- CUpdateContext_CreateInstance (Address: 0x10120124)
- RDPSERVERBASE_CreateInstance (Address: 0x1012011c)
WS2_32.dll
- GetHostNameW (Address: 0x10120148)