rdpcorets.dll - Online Dependency Analysis & Download - DLLView

rdpcorets.dll

Description: TS RDPCore DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: a2cf0dc6e4bce5066670ed7f54c4d8d2

File Size: 1.6 MB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x5fab0)
DllGetClassObject (Ordinal: 2, Address: 0x18100)
DllRegisterServer (Ordinal: 3, Address: 0x5fad0)
DllUnregisterServer (Ordinal: 4, Address: 0x5fb40)
RFX_CreateGFXService (Ordinal: 5, Address: 0x6500)
RFX_CreatePluginFactory (Ordinal: 6, Address: 0x54510)

Imported DLLs & Functions

ADVAPI32.dll

EventProviderEnabled (Address: 0x18013cc08)
EventSetInformation (Address: 0x18013cc10)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x18013d088)
CoCreateGuid (Address: 0x18013d068)
CoCreateInstance (Address: 0x18013d058)
CoTaskMemAlloc (Address: 0x18013d078)
CoTaskMemFree (Address: 0x18013d090)
CoTaskMemRealloc (Address: 0x18013d080)
IIDFromString (Address: 0x18013d098)
PropVariantClear (Address: 0x18013d070)
PropVariantCopy (Address: 0x18013d060)
StringFromGUID2 (Address: 0x18013d0a0)

api-ms-win-core-comm-l1-1-0.dll

SetCommTimeouts (Address: 0x18013d0b0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18013d0c8)
IsDebuggerPresent (Address: 0x18013d0d8)
OutputDebugStringA (Address: 0x18013d0d0)
OutputDebugStringW (Address: 0x18013d0c0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18013d0e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18013d0f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18013d108)
RaiseException (Address: 0x18013d110)
SetErrorMode (Address: 0x18013d128)
SetLastError (Address: 0x18013d120)
SetUnhandledExceptionFilter (Address: 0x18013d130)
UnhandledExceptionFilter (Address: 0x18013d118)

api-ms-win-core-featurestaging-l1-1-0.dll

RecordFeatureUsage (Address: 0x18013d148)
SubscribeFeatureStateChangeNotification (Address: 0x18013d140)
UnsubscribeFeatureStateChangeNotification (Address: 0x18013d150)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18013d188)
CreateFileW (Address: 0x18013d180)
DeleteFileW (Address: 0x18013d170)
FindClose (Address: 0x18013d178)
FindFirstFileW (Address: 0x18013d1c0)
FindNextFileW (Address: 0x18013d1b0)
GetFileAttributesW (Address: 0x18013d168)
GetFileInformationByHandle (Address: 0x18013d1a0)
GetTempFileNameW (Address: 0x18013d160)
ReadFile (Address: 0x18013d190)
ReadFileEx (Address: 0x18013d1a8)
SetFilePointerEx (Address: 0x18013d198)
WriteFile (Address: 0x18013d1b8)
WriteFileEx (Address: 0x18013d1c8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18013d1d8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18013d1f0)
HeapAlloc (Address: 0x18013d1e8)
HeapFree (Address: 0x18013d1f8)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x18013d218)
GlobalFree (Address: 0x18013d208)
LocalAlloc (Address: 0x18013d210)
LocalFree (Address: 0x18013d220)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x18013d230)
GlobalSize (Address: 0x18013d238)
GlobalUnlock (Address: 0x18013d240)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x18013d250)
DeviceIoControl (Address: 0x18013d258)
GetOverlappedResult (Address: 0x18013d260)

api-ms-win-core-io-l1-1-1.dll

CancelIo (Address: 0x18013d270)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

BindIoCompletionCallback (Address: 0x18013d298)
GetNamedPipeServerProcessId (Address: 0x18013d280)
MoveFileW (Address: 0x18013d290)
RegisterWaitForSingleObject (Address: 0x18013d2a0)
WTSGetActiveConsoleSessionId (Address: 0x18013d288)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x18013d2b0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18013d2f8)
FindResourceExW (Address: 0x18013d310)
FreeLibrary (Address: 0x18013d2d8)
GetModuleFileNameA (Address: 0x18013d300)
GetModuleFileNameW (Address: 0x18013d2d0)
GetModuleHandleExA (Address: 0x18013d318)
GetModuleHandleExW (Address: 0x18013d308)
GetModuleHandleW (Address: 0x18013d2f0)
GetProcAddress (Address: 0x18013d2e0)
LoadLibraryExW (Address: 0x18013d2e8)
LoadResource (Address: 0x18013d2c0)
SizeofResource (Address: 0x18013d2c8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18013d328)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18013d340)
GetCPInfo (Address: 0x18013d338)
IsDBCSLeadByte (Address: 0x18013d348)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18013d360)
MapViewOfFile (Address: 0x18013d370)
OpenFileMappingW (Address: 0x18013d358)
UnmapViewOfFile (Address: 0x18013d368)

api-ms-win-core-namedpipe-l1-1-0.dll

ConnectNamedPipe (Address: 0x18013d388)
CreateNamedPipeW (Address: 0x18013d3a0)
DisconnectNamedPipe (Address: 0x18013d390)
PeekNamedPipe (Address: 0x18013d380)
SetNamedPipeHandleState (Address: 0x18013d398)
WaitNamedPipeW (Address: 0x18013d3a8)

api-ms-win-core-path-l1-1-0.dll

PathCchCanonicalize (Address: 0x18013d3b8)

api-ms-win-core-perfcounters-l1-1-0.dll

PerfCreateInstance (Address: 0x18013d3f8)
PerfDeleteInstance (Address: 0x18013d3e0)
PerfIncrementULongCounterValue (Address: 0x18013d3d0)
PerfSetCounterSetInfo (Address: 0x18013d3e8)
PerfSetULongCounterValue (Address: 0x18013d3d8)
PerfStartProviderEx (Address: 0x18013d3f0)
PerfStopProvider (Address: 0x18013d3c8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18013d408)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18013d430)
GetCurrentProcess (Address: 0x18013d450)
GetCurrentProcessId (Address: 0x18013d428)
GetCurrentThread (Address: 0x18013d460)
GetCurrentThreadId (Address: 0x18013d448)
GetExitCodeThread (Address: 0x18013d438)
OpenThreadToken (Address: 0x18013d458)
ResumeThread (Address: 0x18013d418)
SuspendThread (Address: 0x18013d440)
TerminateProcess (Address: 0x18013d420)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18013d470)
OpenProcess (Address: 0x18013d478)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18013d488)
QueryPerformanceFrequency (Address: 0x18013d490)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x18013d4a0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18013d4b0)
RegCreateKeyExW (Address: 0x18013d4b8)
RegDeleteValueW (Address: 0x18013d4f0)
RegEnumKeyExW (Address: 0x18013d500)
RegEnumValueW (Address: 0x18013d4e0)
RegFlushKey (Address: 0x18013d4c8)
RegGetValueW (Address: 0x18013d4d0)
RegNotifyChangeKeyValue (Address: 0x18013d4c0)
RegOpenKeyExW (Address: 0x18013d4f8)
RegQueryInfoKeyW (Address: 0x18013d508)
RegQueryValueExW (Address: 0x18013d4d8)
RegSetValueExW (Address: 0x18013d4e8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18013d520)
RtlCompareMemory (Address: 0x18013d518)
RtlLookupFunctionEntry (Address: 0x18013d528)
RtlVirtualUnwind (Address: 0x18013d530)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x18013d558)
PathGetDriveNumberW (Address: 0x18013d560)
PathIsUNCW (Address: 0x18013d550)
PathQuoteSpacesW (Address: 0x18013d548)
PathSkipRootW (Address: 0x18013d568)
PathUnquoteSpacesW (Address: 0x18013d540)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x18013d580)
MultiByteToWideChar (Address: 0x18013d588)
WideCharToMultiByte (Address: 0x18013d578)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x18013d598)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18013d5a8)

api-ms-win-core-stringansi-l1-1-0.dll

CharNextA (Address: 0x18013d5c0)
CharPrevA (Address: 0x18013d5b8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18013d658)
AcquireSRWLockShared (Address: 0x18013d5e8)
CreateEventW (Address: 0x18013d628)
CreateMutexExW (Address: 0x18013d5d0)
CreateSemaphoreExW (Address: 0x18013d5d8)
DeleteCriticalSection (Address: 0x18013d638)
EnterCriticalSection (Address: 0x18013d610)
InitializeCriticalSection (Address: 0x18013d630)
InitializeCriticalSectionAndSpinCount (Address: 0x18013d608)
InitializeCriticalSectionEx (Address: 0x18013d5f8)
InitializeSRWLock (Address: 0x18013d660)
LeaveCriticalSection (Address: 0x18013d5e0)
OpenSemaphoreW (Address: 0x18013d620)
ReleaseMutex (Address: 0x18013d678)
ReleaseSemaphore (Address: 0x18013d5f0)
ReleaseSRWLockExclusive (Address: 0x18013d618)
ReleaseSRWLockShared (Address: 0x18013d650)
ResetEvent (Address: 0x18013d670)
SetEvent (Address: 0x18013d640)
WaitForMultipleObjectsEx (Address: 0x18013d600)
WaitForSingleObject (Address: 0x18013d668)
WaitForSingleObjectEx (Address: 0x18013d648)

api-ms-win-core-synch-l1-2-0.dll

InitializeConditionVariable (Address: 0x18013d688)
InitOnceExecuteOnce (Address: 0x18013d6a8)
Sleep (Address: 0x18013d690)
SleepConditionVariableCS (Address: 0x18013d6b0)
SleepConditionVariableSRW (Address: 0x18013d6a0)
WakeAllConditionVariable (Address: 0x18013d698)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18013d6c0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18013d6d8)
GetSystemTime (Address: 0x18013d6f0)
GetSystemTimeAsFileTime (Address: 0x18013d6f8)
GetTickCount (Address: 0x18013d6e8)
GetTickCount64 (Address: 0x18013d6e0)
GetVersionExW (Address: 0x18013d6d0)

api-ms-win-core-sysinfo-l1-2-0.dll

VerSetConditionMask (Address: 0x18013d708)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18013d720)
CreateThreadpoolTimer (Address: 0x18013d730)
SetThreadpoolTimer (Address: 0x18013d718)
WaitForThreadpoolTimerCallbacks (Address: 0x18013d728)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

ChangeTimerQueueTimer (Address: 0x18013d750)
CreateTimerQueueTimer (Address: 0x18013d740)
DeleteTimerQueueTimer (Address: 0x18013d758)
UnregisterWaitEx (Address: 0x18013d748)

api-ms-win-core-url-l1-1-0.dll

UrlIsW (Address: 0x18013d768)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18013d778)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x18013d788)
WindowsDeleteString (Address: 0x18013d790)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18013d7a0)
GetTraceEnableLevel (Address: 0x18013d7b0)
GetTraceLoggerHandle (Address: 0x18013d7c8)
RegisterTraceGuidsW (Address: 0x18013d7b8)
TraceMessage (Address: 0x18013d7a8)
UnregisterTraceGuids (Address: 0x18013d7c0)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x18013d7d8)
EnableTraceEx2 (Address: 0x18013d7e8)
StartTraceW (Address: 0x18013d7e0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18013d818)
EventRegister (Address: 0x18013d800)
EventUnregister (Address: 0x18013d7f8)
EventWrite (Address: 0x18013d808)
EventWriteTransfer (Address: 0x18013d810)

api-ms-win-security-base-l1-1-0.dll

AccessCheckAndAuditAlarmW (Address: 0x18013d828)
AllocateAndInitializeSid (Address: 0x18013d878)
CreateWellKnownSid (Address: 0x18013d840)
EqualSid (Address: 0x18013d858)
FreeSid (Address: 0x18013d838)
GetSecurityDescriptorLength (Address: 0x18013d880)
GetTokenInformation (Address: 0x18013d830)
ImpersonateLoggedOnUser (Address: 0x18013d868)
InitializeSecurityDescriptor (Address: 0x18013d888)
IsValidSid (Address: 0x18013d848)
MakeSelfRelativeSD (Address: 0x18013d870)
RevertToSelf (Address: 0x18013d860)
SetSecurityDescriptorDacl (Address: 0x18013d850)

api-ms-win-security-isolatedcontainer-l1-1-1.dll

IsProcessInWDAGContainer (Address: 0x18013d898)

api-ms-win-security-provider-l1-1-0.dll

GetSecurityInfo (Address: 0x18013d8a8)
SetEntriesInAclW (Address: 0x18013d8b8)
SetSecurityInfo (Address: 0x18013d8b0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18013d8c8)

api-ms-win-security-trustee-l1-1-0.dll

BuildSecurityDescriptorW (Address: 0x18013d8d8)
BuildTrusteeWithSidW (Address: 0x18013d8e0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18013d8f8)
OpenSCManagerW (Address: 0x18013d8f0)
OpenServiceW (Address: 0x18013d908)
StartServiceW (Address: 0x18013d900)

CRYPT32.dll

CryptProtectMemory (Address: 0x18013cc20)
CryptUnprotectMemory (Address: 0x18013cc28)

d3d11.dll

D3D11CreateDevice (Address: 0x18013d918)

dxgi.dll

CreateDXGIFactory2 (Address: 0x18013d928)

GDI32.dll

CloseMetaFile (Address: 0x18013cc70)
CreateMetaFileW (Address: 0x18013cc60)
CreatePalette (Address: 0x18013cc58)
DeleteMetaFile (Address: 0x18013cc88)
DeleteObject (Address: 0x18013cc50)
GetMetaFileBitsEx (Address: 0x18013cc80)
GetObjectW (Address: 0x18013cc48)
GetPaletteEntries (Address: 0x18013cc38)
GetStockObject (Address: 0x18013cc40)
PlayMetaFile (Address: 0x18013cc68)
SetMetaFileBitsEx (Address: 0x18013cc78)

IPHLPAPI.DLL

GetAdapterIndex (Address: 0x18013cc98)

msvcrt.dll

__C_specific_handler (Address: 0x18013d9a0)
__CxxFrameHandler3 (Address: 0x18013d9f0)
__dllonexit (Address: 0x18013dae8)
_aligned_free (Address: 0x18013d950)
_aligned_malloc (Address: 0x18013d938)
_amsg_exit (Address: 0x18013daa8)
_callnewh (Address: 0x18013d998)
_errno (Address: 0x18013db08)
_initterm (Address: 0x18013dab0)
_lock (Address: 0x18013dad8)
_onexit (Address: 0x18013daf0)
_purecall (Address: 0x18013da38)
_snprintf_s (Address: 0x18013d9c0)
_stricmp (Address: 0x18013d980)
_strnicmp (Address: 0x18013da70)
_unlock (Address: 0x18013dae0)
_vsnwprintf (Address: 0x18013d9f8)
_wcsicmp (Address: 0x18013da28)
_wcsnicmp (Address: 0x18013d9a8)
_wfopen (Address: 0x18013da90)
_wfopen_s (Address: 0x18013da00)
_wtoi (Address: 0x18013d9d8)
_XcptFilter (Address: 0x18013daa0)
?terminate@@YAXXZ (Address: 0x18013da98)
calloc (Address: 0x18013d9b0)
ceilf (Address: 0x18013dab8)
fclose (Address: 0x18013da08)
floorf (Address: 0x18013dac8)
fprintf (Address: 0x18013da78)
free (Address: 0x18013d988)
fwrite (Address: 0x18013da20)
isalpha (Address: 0x18013da68)
log (Address: 0x18013dad0)
malloc (Address: 0x18013d9e8)
memcmp (Address: 0x18013db10)
memcpy (Address: 0x18013db18)
memcpy_s (Address: 0x18013da30)
memmove (Address: 0x18013db20)
memmove_s (Address: 0x18013d9d0)
memset (Address: 0x18013db28)
pow (Address: 0x18013dac0)
printf (Address: 0x18013d960)
qsort (Address: 0x18013da60)
realloc (Address: 0x18013db00)
sprintf_s (Address: 0x18013da58)
sqrt (Address: 0x18013d970)
sqrtf (Address: 0x18013daf8)
strncpy_s (Address: 0x18013da48)
strnlen (Address: 0x18013da50)
swprintf_s (Address: 0x18013da10)
swscanf (Address: 0x18013d958)
toupper (Address: 0x18013da40)
vsprintf_s (Address: 0x18013d940)
vswprintf_s (Address: 0x18013da18)
wcscat_s (Address: 0x18013d990)
wcschr (Address: 0x18013d968)
wcscmp (Address: 0x18013db30)
wcscpy_s (Address: 0x18013d978)
wcsncmp (Address: 0x18013d9c8)
wcsncpy_s (Address: 0x18013d948)
wcsnlen (Address: 0x18013da88)
wcsrchr (Address: 0x18013d9e0)
wcstombs (Address: 0x18013da80)
wprintf (Address: 0x18013d9b8)

ntdll.dll

NtCreateFile (Address: 0x18013dba8)
NtQuerySystemInformation (Address: 0x18013db90)
RtlDeleteElementGenericTable (Address: 0x18013db58)
RtlEnumerateGenericTable (Address: 0x18013db50)
RtlInitializeGenericTable (Address: 0x18013db48)
RtlInitUnicodeString (Address: 0x18013dbb0)
RtlInsertElementGenericTable (Address: 0x18013db98)
RtlIpv4StringToAddressW (Address: 0x18013db88)
RtlIpv6StringToAddressW (Address: 0x18013dbb8)
RtlLookupElementGenericTable (Address: 0x18013dba0)
RtlNtStatusToDosError (Address: 0x18013db40)
WinSqmAddToStream (Address: 0x18013db60)
WinSqmEndSession (Address: 0x18013db70)
WinSqmIsOptedIn (Address: 0x18013db80)
WinSqmSetDWORD (Address: 0x18013db68)
WinSqmStartSession (Address: 0x18013db78)

OLEAUT32.dll

LoadTypeLib (Address: 0x18013ccc0)
RegisterTypeLib (Address: 0x18013ccb0)
SysAllocString (Address: 0x18013cd00)
SysAllocStringByteLen (Address: 0x18013cce8)
SysFreeString (Address: 0x18013cce0)
SysStringByteLen (Address: 0x18013cca8)
SysStringLen (Address: 0x18013ccb8)
UnRegisterTypeLib (Address: 0x18013ccc8)
VariantClear (Address: 0x18013ccf0)
VariantCopy (Address: 0x18013ccd8)
VariantInit (Address: 0x18013ccf8)
VarUI4FromStr (Address: 0x18013ccd0)

RDPBASE.dll

?NSRunLengthDecode@@YAKPEBEKPEAEK@Z (Address: 0x18013cd58)
?RdpPerfLoggerStaticInitialize@@YAXXZ (Address: 0x18013cde8)
?RdpPerfLoggerStaticTerminate@@YAXXZ (Address: 0x18013cdd0)
CRDPCaps_CreateInstance (Address: 0x18013cd28)
GetSupportedSSELevel_SSE (Address: 0x18013cd60)
MemCopyAligned_SSE (Address: 0x18013cd70)
MemMoveReverseAligned_SSE (Address: 0x18013cd68)
PAL_System_AtomicCompareAndExchange (Address: 0x18013cda0)
PAL_System_AtomicCompareAndExchangePointer (Address: 0x18013ce10)
PAL_System_AtomicDecrement (Address: 0x18013ce48)
PAL_System_AtomicIncrement (Address: 0x18013cdd8)
PAL_System_CritSecEnter (Address: 0x18013ce58)
PAL_System_CritSecInit (Address: 0x18013ce38)
PAL_System_CritSecIsLockedByCurrentThread (Address: 0x18013cd80)
PAL_System_CritSecLeave (Address: 0x18013cd10)
PAL_System_CritSecTerminate (Address: 0x18013ce60)
PAL_System_CritSecTryEnter (Address: 0x18013cd20)
PAL_System_GetNumberOfProcessors (Address: 0x18013cdc0)
PAL_System_MemAlloc (Address: 0x18013ce68)
PAL_System_MemFree (Address: 0x18013cd48)
PAL_System_Sleep (Address: 0x18013cdb0)
PAL_System_SwitchToThread (Address: 0x18013cda8)
PAL_System_ThreadGetId (Address: 0x18013cdb8)
RDPAPI_GetGenericCounter (Address: 0x18013cd30)
RDPAPI_GetGlobalObject (Address: 0x18013ce50)
RDPAPI_GetLongCounter (Address: 0x18013cd18)
RDPBASE_CreateInstance (Address: 0x18013cdc8)
RDPENCHLPREG_ReadValueDWORD (Address: 0x18013cd50)
RDPENCORE_AddGlobalObject (Address: 0x18013ce40)
RDPServerStackDiagnostics_LogCheckpoint (Address: 0x18013ce28)
RDPServerStackDiagnostics_LogDisconnect (Address: 0x18013ce18)
RDPServerStackDiagnostics_LogFailure (Address: 0x18013ce20)
RDPServerStackDiagnostics_Register (Address: 0x18013cdf0)
RDPServerStackDiagnostics_Unregister (Address: 0x18013cde0)
RDPWSStreamConnector_CreateInstance (Address: 0x18013ce30)
RdpX_AtomicDecrement32 (Address: 0x18013ce00)
RdpX_AtomicIncrement32 (Address: 0x18013ce08)
RdpX_GetActivityIdPrefix (Address: 0x18013cd40)
RdpX_Threading_CreateCriticalSection (Address: 0x18013cdf8)
RgnlibBA_CreateInstance (Address: 0x18013cd38)
TRC_TraceBufferW (Address: 0x18013cd78)
TSAlloc (Address: 0x18013cd90)
TSCreateCoreEvents (Address: 0x18013cd98)
TSFree (Address: 0x18013cd88)

RDPSERVERBASE.dll

?GetEncodingPixelMap@RdpSurface@@QEAAJPEAPEAVPixelMap@@@Z (Address: 0x18013cef8)
?GetGfxPipeSettingBOOL@@YAJPEAGHPEAH@Z (Address: 0x18013cee0)
?GetGfxPipeSettingUINT@@YAJPEAGIPEAI@Z (Address: 0x18013cec0)
?GetGraphicsSourceContext@RdpSurface@@QEAAJPEAPEAUIRdpGFXSourceUpdateContext@@@Z (Address: 0x18013ceb0)
?LogRDPGraphicsError@RDPGraphicsTraceLogging@@YAXU_GUID@@IIJ@Z (Address: 0x18013ced8)
?LogRDPGraphicsFirstNonBlackFrame@RDPGraphicsTraceLogging@@YAX_K@Z (Address: 0x18013cef0)
?LogRDPGraphicsFirstNonBlackFramePostLogon@RDPGraphicsTraceLogging@@YAXI@Z (Address: 0x18013cee8)
?LogRDPGraphicsSubsampleAdapter@RDPGraphicsTraceLogging@@YAXPEBGII@Z (Address: 0x18013cec8)
?LogRDPGraphicsSubsampleFailure@RDPGraphicsTraceLogging@@YAXJI@Z (Address: 0x18013ceb8)
?LogRDPGraphicsVOBRHint@RDPGraphicsTraceLogging@@YAXI_KII@Z (Address: 0x18013ced0)
?RDPGraphicsTraceLogging_Register@RDPGraphicsTraceLogging@@YAJXZ (Address: 0x18013ce80)
?RDPGraphicsTraceLogging_Unregister@RDPGraphicsTraceLogging@@YAXXZ (Address: 0x18013ce98)
?RDPServerStackQOE_Register@@YAJXZ (Address: 0x18013ce88)
?RDPServerStackQOE_Unregister@@YAXXZ (Address: 0x18013cea0)
RDPEncryptionTraceLogging_Register (Address: 0x18013ce78)
RDPEncryptionTraceLogging_Unregister (Address: 0x18013ce90)
RDPSERVERBASE_CreateInstance (Address: 0x18013cea8)

REGAPI.dll

RegWinstationQuerySecurityConfig_Merged (Address: 0x18013cf08)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x18013cf60)
NdrClientCall3 (Address: 0x18013cf68)
RpcBindingFree (Address: 0x18013cf48)
RpcBindingFromStringBindingW (Address: 0x18013cf28)
RpcBindingSetAuthInfoExW (Address: 0x18013cf30)
RpcBindingSetOption (Address: 0x18013cf50)
RpcImpersonateClient (Address: 0x18013cf58)
RpcRevertToSelf (Address: 0x18013cf40)
RpcStringBindingComposeW (Address: 0x18013cf20)
RpcStringFreeW (Address: 0x18013cf70)
UuidCreate (Address: 0x18013cf38)
UuidToStringW (Address: 0x18013cf18)

tlscsp.dll

(Address: 0x18013dbe8)
(Address: 0x18013dbe0)
(Address: 0x18013dbd8)
(Address: 0x18013dbd0)
(Address: 0x18013dbc8)

USER32.dll

CopyRect (Address: 0x18013cff8)
CreateWindowExW (Address: 0x18013cfd0)
DefWindowProcW (Address: 0x18013cf98)
DestroyWindow (Address: 0x18013cf90)
DispatchMessageW (Address: 0x18013cfb0)
GetClipboardFormatNameW (Address: 0x18013d020)
GetMessageW (Address: 0x18013cfb8)
GetWindowLongPtrW (Address: 0x18013cfa0)
GetWindowThreadProcessId (Address: 0x18013d018)
IsClipboardFormatAvailable (Address: 0x18013d010)
LoadCursorW (Address: 0x18013cff0)
PostMessageW (Address: 0x18013cfe8)
RegisterClassW (Address: 0x18013cfd8)
RegisterClipboardFormatW (Address: 0x18013cf80)
RegisterDeviceNotificationW (Address: 0x18013cfc8)
SendMessageW (Address: 0x18013cf88)
SetRect (Address: 0x18013d008)
SetWindowLongPtrW (Address: 0x18013cfe0)
UnionRect (Address: 0x18013cfa8)
UnregisterClassA (Address: 0x18013d028)
UnregisterClassW (Address: 0x18013d000)
UnregisterDeviceNotification (Address: 0x18013cfc0)

USERENV.dll

ExpandEnvironmentStringsForUserW (Address: 0x18013d038)

WS2_32.dll

closesocket (Address: 0x18013d048)