rdpcore.dll
Description: RDP Core DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 64-bit
Operating System: Windows NT
SHA256: 13027724ec907191d665ff9a527489ec
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 7:37 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- RDPAPI_CreateInstance (Ordinal: 1, Address: 0x1550)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x16a90d0f0)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalAddAtomW (Address: 0x16a90d108)
- GlobalDeleteAtom (Address: 0x16a90d100)
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x16a90d130)
- CoInitializeEx (Address: 0x16a90d138)
- CoTaskMemAlloc (Address: 0x16a90d120)
- CoTaskMemFree (Address: 0x16a90d118)
- CoUninitialize (Address: 0x16a90d128)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x16a90d148)
- IsDebuggerPresent (Address: 0x16a90d150)
- OutputDebugStringW (Address: 0x16a90d158)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x16a90d168)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x16a90d178)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x16a90d190)
- RaiseException (Address: 0x16a90d188)
- SetErrorMode (Address: 0x16a90d1b0)
- SetLastError (Address: 0x16a90d1a0)
- SetUnhandledExceptionFilter (Address: 0x16a90d198)
- UnhandledExceptionFilter (Address: 0x16a90d1a8)
api-ms-win-core-featurestaging-l1-1-0.dll
- RecordFeatureUsage (Address: 0x16a90d1d0)
- SubscribeFeatureStateChangeNotification (Address: 0x16a90d1c8)
- UnsubscribeFeatureStateChangeNotification (Address: 0x16a90d1c0)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x16a90d1f8)
- CreateFileW (Address: 0x16a90d208)
- DeleteFileW (Address: 0x16a90d228)
- FindClose (Address: 0x16a90d1f0)
- FindFirstFileW (Address: 0x16a90d1e8)
- FindNextFileW (Address: 0x16a90d238)
- GetFileAttributesW (Address: 0x16a90d210)
- GetFileInformationByHandle (Address: 0x16a90d1e0)
- GetTempFileNameW (Address: 0x16a90d230)
- ReadFile (Address: 0x16a90d220)
- SetFilePointerEx (Address: 0x16a90d218)
- WriteFile (Address: 0x16a90d200)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x16a90d250)
- DuplicateHandle (Address: 0x16a90d248)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x16a90d268)
- HeapAlloc (Address: 0x16a90d260)
- HeapFree (Address: 0x16a90d270)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x16a90d280)
- GlobalFree (Address: 0x16a90d288)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x16a90d2a0)
- GlobalSize (Address: 0x16a90d298)
- GlobalUnlock (Address: 0x16a90d2a8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- PulseEvent (Address: 0x16a90d2b8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x16a90d2d8)
- FreeLibrary (Address: 0x16a90d2d0)
- GetModuleFileNameA (Address: 0x16a90d2e8)
- GetModuleHandleExA (Address: 0x16a90d2f0)
- GetModuleHandleExW (Address: 0x16a90d2f8)
- GetModuleHandleW (Address: 0x16a90d2c8)
- GetProcAddress (Address: 0x16a90d2e0)
- LoadLibraryExW (Address: 0x16a90d300)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryA (Address: 0x16a90d318)
- LoadLibraryW (Address: 0x16a90d310)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x16a90d338)
- GetCPInfo (Address: 0x16a90d330)
- IsDBCSLeadByte (Address: 0x16a90d328)
api-ms-win-core-path-l1-1-0.dll
- PathCchCanonicalize (Address: 0x16a90d348)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x16a90d3b0)
- GetCurrentProcess (Address: 0x16a90d370)
- GetCurrentProcessId (Address: 0x16a90d378)
- GetCurrentThread (Address: 0x16a90d358)
- GetCurrentThreadId (Address: 0x16a90d368)
- OpenProcessToken (Address: 0x16a90d360)
- OpenThreadToken (Address: 0x16a90d380)
- ProcessIdToSessionId (Address: 0x16a90d388)
- TerminateProcess (Address: 0x16a90d398)
- TlsAlloc (Address: 0x16a90d3a8)
- TlsFree (Address: 0x16a90d390)
- TlsGetValue (Address: 0x16a90d3a0)
- TlsSetValue (Address: 0x16a90d3b8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x16a90d3c8)
- OpenProcess (Address: 0x16a90d3d0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x16a90d3e8)
- QueryPerformanceFrequency (Address: 0x16a90d3e0)
api-ms-win-core-psapi-l1-1-0.dll
- K32GetModuleFileNameExW (Address: 0x16a90d3f8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x16a90d418)
- RegEnumValueW (Address: 0x16a90d410)
- RegOpenKeyExW (Address: 0x16a90d408)
- RegQueryValueExW (Address: 0x16a90d420)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x16a90d440)
- RtlLookupFunctionEntry (Address: 0x16a90d430)
- RtlVirtualUnwind (Address: 0x16a90d438)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x16a90d458)
- WideCharToMultiByte (Address: 0x16a90d450)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpW (Address: 0x16a90d468)
api-ms-win-core-stringansi-l1-1-0.dll
- CharNextA (Address: 0x16a90d480)
- CharPrevA (Address: 0x16a90d478)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x16a90d508)
- AcquireSRWLockShared (Address: 0x16a90d530)
- CreateEventW (Address: 0x16a90d4e0)
- CreateMutexExW (Address: 0x16a90d538)
- CreateSemaphoreExW (Address: 0x16a90d4d0)
- CreateWaitableTimerExW (Address: 0x16a90d4a8)
- DeleteCriticalSection (Address: 0x16a90d490)
- EnterCriticalSection (Address: 0x16a90d4c0)
- InitializeCriticalSection (Address: 0x16a90d4c8)
- InitializeCriticalSectionEx (Address: 0x16a90d4a0)
- InitializeSRWLock (Address: 0x16a90d520)
- LeaveCriticalSection (Address: 0x16a90d498)
- OpenEventW (Address: 0x16a90d548)
- OpenSemaphoreW (Address: 0x16a90d4f8)
- ReleaseMutex (Address: 0x16a90d540)
- ReleaseSemaphore (Address: 0x16a90d510)
- ReleaseSRWLockExclusive (Address: 0x16a90d518)
- ReleaseSRWLockShared (Address: 0x16a90d528)
- ResetEvent (Address: 0x16a90d500)
- SetEvent (Address: 0x16a90d4b0)
- SetWaitableTimer (Address: 0x16a90d4d8)
- WaitForMultipleObjectsEx (Address: 0x16a90d4e8)
- WaitForSingleObject (Address: 0x16a90d4b8)
- WaitForSingleObjectEx (Address: 0x16a90d4f0)
api-ms-win-core-synch-l1-2-0.dll
- InitializeConditionVariable (Address: 0x16a90d578)
- InitOnceExecuteOnce (Address: 0x16a90d558)
- Sleep (Address: 0x16a90d580)
- SleepConditionVariableCS (Address: 0x16a90d568)
- SleepConditionVariableSRW (Address: 0x16a90d570)
- WakeAllConditionVariable (Address: 0x16a90d560)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x16a90d590)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x16a90d5a8)
- GetSystemTime (Address: 0x16a90d5a0)
- GetSystemTimeAsFileTime (Address: 0x16a90d5b8)
- GetTickCount (Address: 0x16a90d5b0)
- GetVersionExW (Address: 0x16a90d5c0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x16a90d5e0)
- CreateThreadpoolTimer (Address: 0x16a90d5d8)
- SetThreadpoolTimer (Address: 0x16a90d5d0)
- WaitForThreadpoolTimerCallbacks (Address: 0x16a90d5e8)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x16a90d5f8)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x16a90d608)
- RoGetActivationFactory (Address: 0x16a90d610)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateStringReference (Address: 0x16a90d620)
- WindowsDeleteString (Address: 0x16a90d628)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x16a90d638)
- GetTraceEnableLevel (Address: 0x16a90d648)
- GetTraceLoggerHandle (Address: 0x16a90d658)
- RegisterTraceGuidsW (Address: 0x16a90d660)
- TraceMessage (Address: 0x16a90d640)
- UnregisterTraceGuids (Address: 0x16a90d650)
api-ms-win-eventing-provider-l1-1-0.dll
- EventWriteTransfer (Address: 0x16a90d670)
api-ms-win-ntuser-rectangle-l1-1-0.dll
- CopyRect (Address: 0x16a90d690)
- EqualRect (Address: 0x16a90d6a0)
- InflateRect (Address: 0x16a90d6a8)
- IntersectRect (Address: 0x16a90d698)
- IsRectEmpty (Address: 0x16a90d688)
- OffsetRect (Address: 0x16a90d6c0)
- PtInRect (Address: 0x16a90d6b0)
- SetRect (Address: 0x16a90d6c8)
- SetRectEmpty (Address: 0x16a90d6b8)
- UnionRect (Address: 0x16a90d680)
api-ms-win-ntuser-sysparams-l1-1-0.dll
- EnumDisplayDevicesW (Address: 0x16a90d700)
- EnumDisplayMonitors (Address: 0x16a90d6d8)
- EnumDisplaySettingsExW (Address: 0x16a90d6e0)
- EnumDisplaySettingsW (Address: 0x16a90d6f8)
- GetMonitorInfoW (Address: 0x16a90d6e8)
- GetSystemMetrics (Address: 0x16a90d708)
- SystemParametersInfoW (Address: 0x16a90d6f0)
api-ms-win-rtcore-ole32-clipboard-l1-1-0.dll
- OleGetClipboard (Address: 0x16a90d720)
- OleIsCurrentClipboard (Address: 0x16a90d718)
- OleSetClipboard (Address: 0x16a90d728)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x16a90d740)
- SetTokenInformation (Address: 0x16a90d738)
api-ms-win-security-isolatedcontainer-l1-1-1.dll
- IsProcessInWDAGContainer (Address: 0x16a90d750)
AVRT.dll
- AvRevertMmThreadCharacteristics (Address: 0x16a90ced0)
- AvSetMmThreadCharacteristicsW (Address: 0x16a90ced8)
d3d11.dll
- D3D11CreateDevice (Address: 0x16a90d760)
dxgi.dll
- CreateDXGIFactory1 (Address: 0x16a90d770)
MSACM32.dll
- acmDriverClose (Address: 0x16a90cf10)
- acmDriverEnum (Address: 0x16a90cf38)
- acmDriverOpen (Address: 0x16a90cf28)
- acmFormatSuggest (Address: 0x16a90cee8)
- acmFormatTagDetailsW (Address: 0x16a90cf30)
- acmStreamClose (Address: 0x16a90cf18)
- acmStreamConvert (Address: 0x16a90cef8)
- acmStreamOpen (Address: 0x16a90cf20)
- acmStreamPrepareHeader (Address: 0x16a90cf00)
- acmStreamSize (Address: 0x16a90cf08)
- acmStreamUnprepareHeader (Address: 0x16a90cef0)
msvcrt.dll
- __C_specific_handler (Address: 0x16a90d8a0)
- __CxxFrameHandler3 (Address: 0x16a90d798)
- __dllonexit (Address: 0x16a90d878)
- _aligned_free (Address: 0x16a90d7a8)
- _aligned_malloc (Address: 0x16a90d7b0)
- _amsg_exit (Address: 0x16a90d8c8)
- _callnewh (Address: 0x16a90d838)
- _ftime64 (Address: 0x16a90d7a0)
- _initterm (Address: 0x16a90d8a8)
- _lock (Address: 0x16a90d888)
- _onexit (Address: 0x16a90d868)
- _purecall (Address: 0x16a90d858)
- _resetstkoflw (Address: 0x16a90d8d0)
- _strnicmp (Address: 0x16a90d8e8)
- _unlock (Address: 0x16a90d880)
- _vsnwprintf (Address: 0x16a90d7c0)
- _wcsicmp (Address: 0x16a90d7b8)
- _wcsnicmp (Address: 0x16a90d8d8)
- _wfopen_s (Address: 0x16a90d7e8)
- _XcptFilter (Address: 0x16a90d8b0)
- ?terminate@@YAXXZ (Address: 0x16a90d8f0)
- calloc (Address: 0x16a90d790)
- fclose (Address: 0x16a90d7e0)
- fprintf (Address: 0x16a90d810)
- free (Address: 0x16a90d8c0)
- fwrite (Address: 0x16a90d800)
- isalpha (Address: 0x16a90d8e0)
- log (Address: 0x16a90d8f8)
- malloc (Address: 0x16a90d8b8)
- memcmp (Address: 0x16a90d900)
- memcpy (Address: 0x16a90d908)
- memcpy_s (Address: 0x16a90d7f8)
- memmove (Address: 0x16a90d910)
- memmove_s (Address: 0x16a90d840)
- memset (Address: 0x16a90d918)
- pow (Address: 0x16a90d920)
- printf (Address: 0x16a90d788)
- qsort (Address: 0x16a90d780)
- rand (Address: 0x16a90d890)
- realloc (Address: 0x16a90d7f0)
- sprintf_s (Address: 0x16a90d7d0)
- sqrt (Address: 0x16a90d928)
- sqrtf (Address: 0x16a90d860)
- strncpy_s (Address: 0x16a90d820)
- strnlen (Address: 0x16a90d808)
- swprintf_s (Address: 0x16a90d7d8)
- vswprintf_s (Address: 0x16a90d898)
- wcscat_s (Address: 0x16a90d870)
- wcschr (Address: 0x16a90d848)
- wcscmp (Address: 0x16a90d930)
- wcscpy_s (Address: 0x16a90d828)
- wcsnlen (Address: 0x16a90d830)
- wcsrchr (Address: 0x16a90d850)
- wcstombs (Address: 0x16a90d818)
- wcstoul (Address: 0x16a90d7c8)
OLEAUT32.dll
- SysAllocString (Address: 0x16a90cf50)
- SysFreeString (Address: 0x16a90cf58)
- VariantClear (Address: 0x16a90cf48)
- VariantInit (Address: 0x16a90cf60)
RDPBASE.dll
- ?RdpPerfLoggerStaticTerminate@@YAXXZ (Address: 0x16a90d000)
- DrawBox (Address: 0x16a90cfb0)
- GetSupportedSSELevel_SSE (Address: 0x16a90cfe0)
- GridBA_CreateInstance (Address: 0x16a90cfb8)
- MemCopyAligned_SSE (Address: 0x16a90cff0)
- MemMoveReverseAligned_SSE (Address: 0x16a90cfe8)
- PAL_System_AtomicCompareAndExchange (Address: 0x16a90d058)
- PAL_System_AtomicDecrement (Address: 0x16a90d088)
- PAL_System_AtomicIncrement (Address: 0x16a90d080)
- PAL_System_CritSecEnter (Address: 0x16a90d038)
- PAL_System_CritSecInit (Address: 0x16a90d040)
- PAL_System_CritSecLeave (Address: 0x16a90d030)
- PAL_System_CritSecTerminate (Address: 0x16a90d048)
- PAL_System_GetNumberOfProcessors (Address: 0x16a90d078)
- PAL_System_HandleFree (Address: 0x16a90cfa0)
- PAL_System_SemaphoreAcquire (Address: 0x16a90cf90)
- PAL_System_SemaphoreAlloc (Address: 0x16a90cf88)
- PAL_System_SemaphoreRelease (Address: 0x16a90cf98)
- PAL_System_Sleep (Address: 0x16a90d068)
- PAL_System_SwitchToThread (Address: 0x16a90d060)
- PAL_System_ThreadGetId (Address: 0x16a90d070)
- RDPAPI_GetGenericCounter (Address: 0x16a90d018)
- RDPAPI_GetLongCounter (Address: 0x16a90cfd0)
- RDPBASE_CreateInstance (Address: 0x16a90d008)
- RDPENCHLP_GetInputDesktopName (Address: 0x16a90cf80)
- RDPENCHLP_IsGreaterThanOrEqWin8 (Address: 0x16a90cfd8)
- RDPENCHLP_IsSessionActive (Address: 0x16a90cf78)
- RDPENCHLP_IsSessionRemote (Address: 0x16a90cff8)
- RDPENCHLP_TraceWindowInfo (Address: 0x16a90cfc0)
- RdpTiledSurface_CreateInstance (Address: 0x16a90cfa8)
- RdpX_GetActivityIdPrefix (Address: 0x16a90cf70)
- RgnlibBA_CreateInstance (Address: 0x16a90cfc8)
- TRC_TraceBufferW (Address: 0x16a90d050)
- TSAlloc (Address: 0x16a90d020)
- TSCreateCoreEvents (Address: 0x16a90d010)
- TSFree (Address: 0x16a90d028)
RDPSERVERBASE.dll
- ?GetEncodingPixelMap@RdpSurface@@QEAAJPEAPEAVPixelMap@@@Z (Address: 0x16a90d0b8)
- ?GetGfxPipeSettingBOOL@@YAJPEAGHPEAH@Z (Address: 0x16a90d0b0)
- ?GetGfxPipeSettingUINT@@YAJPEAGIPEAI@Z (Address: 0x16a90d0d8)
- ?GetGraphicsSourceContext@RdpSurface@@QEAAJPEAPEAUIRdpGFXSourceUpdateContext@@@Z (Address: 0x16a90d0c0)
- ?GetTileFirst@Tiler@@QEAAJPEBURdpRect@@PEAU2@@Z (Address: 0x16a90d098)
- ?GetTileNext@Tiler@@QEAAJPEAURdpRect@@@Z (Address: 0x16a90d0a0)
- ?Initialize@Tiler@@QEAAJPEBURdpRect@@0@Z (Address: 0x16a90d0d0)
- CCompressedUpdateContext_CreateInstance (Address: 0x16a90d0a8)
- CUpdateContext_CreateInstance (Address: 0x16a90d0c8)
- RDPSERVERBASE_CreateInstance (Address: 0x16a90d0e0)