rdpcore.dll
Description: RDP Core DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 32-bit
Operating System: Windows NT
SHA256: 4f490aeaece773a0df9112021c289dc6
File Size: 1.0 MB
Uploaded At: Dec. 1, 2025, 8:03 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- RDPAPI_CreateInstance (Ordinal: 1, Address: 0x1d770)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x6a8fd110)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalAddAtomW (Address: 0x6a8fd11c)
- GlobalDeleteAtom (Address: 0x6a8fd118)
api-ms-win-core-com-l1-1-0.dll
- CoCreateInstance (Address: 0x6a8fd128)
- CoInitializeEx (Address: 0x6a8fd12c)
- CoTaskMemAlloc (Address: 0x6a8fd134)
- CoTaskMemFree (Address: 0x6a8fd124)
- CoUninitialize (Address: 0x6a8fd130)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x6a8fd144)
- IsDebuggerPresent (Address: 0x6a8fd140)
- OutputDebugStringW (Address: 0x6a8fd13c)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x6a8fd14c)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x6a8fd154)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x6a8fd164)
- RaiseException (Address: 0x6a8fd15c)
- SetErrorMode (Address: 0x6a8fd168)
- SetLastError (Address: 0x6a8fd16c)
- SetUnhandledExceptionFilter (Address: 0x6a8fd170)
- UnhandledExceptionFilter (Address: 0x6a8fd160)
api-ms-win-core-featurestaging-l1-1-0.dll
- RecordFeatureUsage (Address: 0x6a8fd17c)
- SubscribeFeatureStateChangeNotification (Address: 0x6a8fd180)
- UnsubscribeFeatureStateChangeNotification (Address: 0x6a8fd178)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x6a8fd188)
- CreateFileW (Address: 0x6a8fd18c)
- DeleteFileW (Address: 0x6a8fd194)
- FindClose (Address: 0x6a8fd1b4)
- FindFirstFileW (Address: 0x6a8fd1a4)
- FindNextFileW (Address: 0x6a8fd1ac)
- GetFileAttributesW (Address: 0x6a8fd1a8)
- GetFileInformationByHandle (Address: 0x6a8fd1b0)
- GetTempFileNameW (Address: 0x6a8fd1a0)
- ReadFile (Address: 0x6a8fd190)
- SetFilePointerEx (Address: 0x6a8fd198)
- WriteFile (Address: 0x6a8fd19c)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x6a8fd1bc)
- DuplicateHandle (Address: 0x6a8fd1c0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x6a8fd1c8)
- HeapAlloc (Address: 0x6a8fd1d0)
- HeapFree (Address: 0x6a8fd1cc)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x6a8fd1d8)
- GlobalFree (Address: 0x6a8fd1dc)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x6a8fd1e4)
- GlobalSize (Address: 0x6a8fd1e8)
- GlobalUnlock (Address: 0x6a8fd1ec)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- PulseEvent (Address: 0x6a8fd1f4)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x6a8fd200)
- FreeLibrary (Address: 0x6a8fd1fc)
- GetModuleFileNameA (Address: 0x6a8fd210)
- GetModuleHandleExA (Address: 0x6a8fd204)
- GetModuleHandleExW (Address: 0x6a8fd214)
- GetModuleHandleW (Address: 0x6a8fd20c)
- GetProcAddress (Address: 0x6a8fd218)
- LoadLibraryExW (Address: 0x6a8fd208)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryA (Address: 0x6a8fd224)
- LoadLibraryW (Address: 0x6a8fd220)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x6a8fd230)
- GetCPInfo (Address: 0x6a8fd234)
- IsDBCSLeadByte (Address: 0x6a8fd22c)
api-ms-win-core-path-l1-1-0.dll
- PathCchCanonicalize (Address: 0x6a8fd23c)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x6a8fd250)
- GetCurrentProcess (Address: 0x6a8fd24c)
- GetCurrentProcessId (Address: 0x6a8fd244)
- GetCurrentThread (Address: 0x6a8fd25c)
- GetCurrentThreadId (Address: 0x6a8fd248)
- OpenProcessToken (Address: 0x6a8fd270)
- OpenThreadToken (Address: 0x6a8fd274)
- ProcessIdToSessionId (Address: 0x6a8fd260)
- TerminateProcess (Address: 0x6a8fd26c)
- TlsAlloc (Address: 0x6a8fd268)
- TlsFree (Address: 0x6a8fd254)
- TlsGetValue (Address: 0x6a8fd258)
- TlsSetValue (Address: 0x6a8fd264)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x6a8fd280)
- OpenProcess (Address: 0x6a8fd27c)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x6a8fd28c)
- QueryPerformanceFrequency (Address: 0x6a8fd288)
api-ms-win-core-psapi-l1-1-0.dll
- K32GetModuleFileNameExW (Address: 0x6a8fd294)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x6a8fd2a8)
- RegEnumValueW (Address: 0x6a8fd2a4)
- RegOpenKeyExW (Address: 0x6a8fd2a0)
- RegQueryValueExW (Address: 0x6a8fd29c)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x6a8fd2b0)
- WideCharToMultiByte (Address: 0x6a8fd2b4)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpW (Address: 0x6a8fd2bc)
api-ms-win-core-stringansi-l1-1-0.dll
- CharNextA (Address: 0x6a8fd2c8)
- CharPrevA (Address: 0x6a8fd2c4)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x6a8fd308)
- AcquireSRWLockShared (Address: 0x6a8fd318)
- CreateEventW (Address: 0x6a8fd324)
- CreateMutexExW (Address: 0x6a8fd2e4)
- CreateSemaphoreExW (Address: 0x6a8fd2e8)
- CreateWaitableTimerExW (Address: 0x6a8fd32c)
- DeleteCriticalSection (Address: 0x6a8fd320)
- EnterCriticalSection (Address: 0x6a8fd2f0)
- InitializeCriticalSection (Address: 0x6a8fd31c)
- InitializeCriticalSectionEx (Address: 0x6a8fd2dc)
- InitializeSRWLock (Address: 0x6a8fd310)
- LeaveCriticalSection (Address: 0x6a8fd2f4)
- OpenEventW (Address: 0x6a8fd2f8)
- OpenSemaphoreW (Address: 0x6a8fd2fc)
- ReleaseMutex (Address: 0x6a8fd2e0)
- ReleaseSemaphore (Address: 0x6a8fd2ec)
- ReleaseSRWLockExclusive (Address: 0x6a8fd30c)
- ReleaseSRWLockShared (Address: 0x6a8fd314)
- ResetEvent (Address: 0x6a8fd304)
- SetEvent (Address: 0x6a8fd2d0)
- SetWaitableTimer (Address: 0x6a8fd328)
- WaitForMultipleObjectsEx (Address: 0x6a8fd300)
- WaitForSingleObject (Address: 0x6a8fd2d8)
- WaitForSingleObjectEx (Address: 0x6a8fd2d4)
api-ms-win-core-synch-l1-2-0.dll
- InitializeConditionVariable (Address: 0x6a8fd338)
- InitOnceExecuteOnce (Address: 0x6a8fd33c)
- Sleep (Address: 0x6a8fd340)
- SleepConditionVariableCS (Address: 0x6a8fd348)
- SleepConditionVariableSRW (Address: 0x6a8fd344)
- WakeAllConditionVariable (Address: 0x6a8fd334)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x6a8fd350)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x6a8fd368)
- GetSystemTime (Address: 0x6a8fd360)
- GetSystemTimeAsFileTime (Address: 0x6a8fd364)
- GetTickCount (Address: 0x6a8fd35c)
- GetVersionExW (Address: 0x6a8fd358)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x6a8fd370)
- CreateThreadpoolTimer (Address: 0x6a8fd378)
- SetThreadpoolTimer (Address: 0x6a8fd37c)
- WaitForThreadpoolTimerCallbacks (Address: 0x6a8fd374)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x6a8fd384)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x6a8fd390)
- RoGetActivationFactory (Address: 0x6a8fd38c)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateStringReference (Address: 0x6a8fd39c)
- WindowsDeleteString (Address: 0x6a8fd398)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x6a8fd3a8)
- GetTraceEnableLevel (Address: 0x6a8fd3a4)
- GetTraceLoggerHandle (Address: 0x6a8fd3b4)
- RegisterTraceGuidsW (Address: 0x6a8fd3b8)
- TraceMessage (Address: 0x6a8fd3ac)
- UnregisterTraceGuids (Address: 0x6a8fd3b0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventWriteTransfer (Address: 0x6a8fd3c0)
api-ms-win-ntuser-rectangle-l1-1-0.dll
- CopyRect (Address: 0x6a8fd3dc)
- EqualRect (Address: 0x6a8fd3c8)
- InflateRect (Address: 0x6a8fd3e8)
- IntersectRect (Address: 0x6a8fd3e4)
- IsRectEmpty (Address: 0x6a8fd3d8)
- OffsetRect (Address: 0x6a8fd3e0)
- PtInRect (Address: 0x6a8fd3ec)
- SetRect (Address: 0x6a8fd3d0)
- SetRectEmpty (Address: 0x6a8fd3cc)
- UnionRect (Address: 0x6a8fd3d4)
api-ms-win-ntuser-sysparams-l1-1-0.dll
- EnumDisplayDevicesW (Address: 0x6a8fd3fc)
- EnumDisplayMonitors (Address: 0x6a8fd400)
- EnumDisplaySettingsExW (Address: 0x6a8fd408)
- EnumDisplaySettingsW (Address: 0x6a8fd404)
- GetMonitorInfoW (Address: 0x6a8fd3f4)
- GetSystemMetrics (Address: 0x6a8fd3f8)
- SystemParametersInfoW (Address: 0x6a8fd40c)
api-ms-win-rtcore-ole32-clipboard-l1-1-0.dll
- OleGetClipboard (Address: 0x6a8fd41c)
- OleIsCurrentClipboard (Address: 0x6a8fd414)
- OleSetClipboard (Address: 0x6a8fd418)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x6a8fd424)
- SetTokenInformation (Address: 0x6a8fd428)
api-ms-win-security-isolatedcontainer-l1-1-1.dll
- IsProcessInWDAGContainer (Address: 0x6a8fd430)
AVRT.dll
- AvRevertMmThreadCharacteristics (Address: 0x6a8fd000)
- AvSetMmThreadCharacteristicsW (Address: 0x6a8fd004)
d3d11.dll
- D3D11CreateDevice (Address: 0x6a8fd438)
dxgi.dll
- CreateDXGIFactory1 (Address: 0x6a8fd440)
MSACM32.dll
- acmDriverClose (Address: 0x6a8fd020)
- acmDriverEnum (Address: 0x6a8fd034)
- acmDriverOpen (Address: 0x6a8fd02c)
- acmFormatSuggest (Address: 0x6a8fd00c)
- acmFormatTagDetailsW (Address: 0x6a8fd030)
- acmStreamClose (Address: 0x6a8fd024)
- acmStreamConvert (Address: 0x6a8fd014)
- acmStreamOpen (Address: 0x6a8fd028)
- acmStreamPrepareHeader (Address: 0x6a8fd018)
- acmStreamSize (Address: 0x6a8fd01c)
- acmStreamUnprepareHeader (Address: 0x6a8fd010)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x6a8fd4ec)
- __dllonexit (Address: 0x6a8fd47c)
- _aligned_free (Address: 0x6a8fd4b8)
- _aligned_malloc (Address: 0x6a8fd4bc)
- _amsg_exit (Address: 0x6a8fd4e0)
- _callnewh (Address: 0x6a8fd46c)
- _CIlog (Address: 0x6a8fd504)
- _CIpow (Address: 0x6a8fd508)
- _CIsqrt (Address: 0x6a8fd50c)
- _except_handler4_common (Address: 0x6a8fd4e4)
- _ftime64 (Address: 0x6a8fd4b4)
- _ftol2 (Address: 0x6a8fd510)
- _ftol2_sse (Address: 0x6a8fd514)
- _initterm (Address: 0x6a8fd4e8)
- _lock (Address: 0x6a8fd4d8)
- _onexit (Address: 0x6a8fd478)
- _purecall (Address: 0x6a8fd4cc)
- _resetstkoflw (Address: 0x6a8fd4ac)
- _strnicmp (Address: 0x6a8fd4fc)
- _unlock (Address: 0x6a8fd480)
- _vsnwprintf (Address: 0x6a8fd4c4)
- _wcsicmp (Address: 0x6a8fd4c0)
- _wcsnicmp (Address: 0x6a8fd4f4)
- _wfopen_s (Address: 0x6a8fd49c)
- _XcptFilter (Address: 0x6a8fd4d4)
- ?terminate@@YAXXZ (Address: 0x6a8fd500)
- calloc (Address: 0x6a8fd468)
- fclose (Address: 0x6a8fd498)
- fprintf (Address: 0x6a8fd48c)
- free (Address: 0x6a8fd4f0)
- fwrite (Address: 0x6a8fd490)
- isalpha (Address: 0x6a8fd4f8)
- malloc (Address: 0x6a8fd450)
- memcmp (Address: 0x6a8fd518)
- memcpy (Address: 0x6a8fd51c)
- memcpy_s (Address: 0x6a8fd4a0)
- memmove (Address: 0x6a8fd454)
- memmove_s (Address: 0x6a8fd45c)
- memset (Address: 0x6a8fd520)
- printf (Address: 0x6a8fd448)
- qsort (Address: 0x6a8fd458)
- rand (Address: 0x6a8fd4a4)
- realloc (Address: 0x6a8fd4a8)
- sprintf_s (Address: 0x6a8fd460)
- strncpy_s (Address: 0x6a8fd464)
- strnlen (Address: 0x6a8fd44c)
- swprintf_s (Address: 0x6a8fd4b0)
- vswprintf_s (Address: 0x6a8fd494)
- wcscat_s (Address: 0x6a8fd4dc)
- wcschr (Address: 0x6a8fd4d0)
- wcscpy_s (Address: 0x6a8fd474)
- wcsnlen (Address: 0x6a8fd470)
- wcsrchr (Address: 0x6a8fd484)
- wcstombs (Address: 0x6a8fd488)
- wcstoul (Address: 0x6a8fd4c8)
OLEAUT32.dll
- SysAllocString (Address: 0x6a8fd048)
- SysFreeString (Address: 0x6a8fd040)
- VariantClear (Address: 0x6a8fd03c)
- VariantInit (Address: 0x6a8fd044)
RDPBASE.dll
- ?RdpPerfLoggerStaticTerminate@@YGXXZ (Address: 0x6a8fd088)
- DrawBox (Address: 0x6a8fd09c)
- GetSupportedSSELevel_SSE (Address: 0x6a8fd054)
- GridBA_CreateInstance (Address: 0x6a8fd098)
- MemCopyAligned_SSE (Address: 0x6a8fd0b4)
- MemMoveReverseAligned_SSE (Address: 0x6a8fd050)
- PAL_System_AtomicCompareAndExchange (Address: 0x6a8fd080)
- PAL_System_AtomicDecrement (Address: 0x6a8fd060)
- PAL_System_AtomicIncrement (Address: 0x6a8fd064)
- PAL_System_CritSecEnter (Address: 0x6a8fd07c)
- PAL_System_CritSecInit (Address: 0x6a8fd058)
- PAL_System_CritSecLeave (Address: 0x6a8fd074)
- PAL_System_CritSecTerminate (Address: 0x6a8fd0dc)
- PAL_System_GetNumberOfProcessors (Address: 0x6a8fd06c)
- PAL_System_HandleFree (Address: 0x6a8fd0a4)
- PAL_System_SemaphoreAcquire (Address: 0x6a8fd0bc)
- PAL_System_SemaphoreAlloc (Address: 0x6a8fd0c0)
- PAL_System_SemaphoreRelease (Address: 0x6a8fd0b8)
- PAL_System_Sleep (Address: 0x6a8fd0b0)
- PAL_System_SwitchToThread (Address: 0x6a8fd078)
- PAL_System_ThreadGetId (Address: 0x6a8fd070)
- RDPAPI_GetGenericCounter (Address: 0x6a8fd0d4)
- RDPAPI_GetLongCounter (Address: 0x6a8fd068)
- RDPBASE_CreateInstance (Address: 0x6a8fd08c)
- RDPENCHLP_GetInputDesktopName (Address: 0x6a8fd0c4)
- RDPENCHLP_IsGreaterThanOrEqWin8 (Address: 0x6a8fd05c)
- RDPENCHLP_IsSessionActive (Address: 0x6a8fd0c8)
- RDPENCHLP_IsSessionRemote (Address: 0x6a8fd0a8)
- RDPENCHLP_TraceWindowInfo (Address: 0x6a8fd094)
- RdpTiledSurface_CreateInstance (Address: 0x6a8fd0a0)
- RdpX_GetActivityIdPrefix (Address: 0x6a8fd0cc)
- RgnlibBA_CreateInstance (Address: 0x6a8fd090)
- TRC_TraceBufferW (Address: 0x6a8fd084)
- TSAlloc (Address: 0x6a8fd0d8)
- TSCreateCoreEvents (Address: 0x6a8fd0d0)
- TSFree (Address: 0x6a8fd0ac)
RDPSERVERBASE.dll
- ?GetEncodingPixelMap@RdpSurface@@QAEJPAPAVPixelMap@@@Z (Address: 0x6a8fd0fc)
- ?GetGfxPipeSettingBOOL@@YGJPAGHPAH@Z (Address: 0x6a8fd0f8)
- ?GetGfxPipeSettingUINT@@YGJPAGIPAI@Z (Address: 0x6a8fd0ec)
- ?GetGraphicsSourceContext@RdpSurface@@QAEJPAPAUIRdpGFXSourceUpdateContext@@@Z (Address: 0x6a8fd100)
- ?GetTileFirst@Tiler@@QAEJPBURdpRect@@PAU2@@Z (Address: 0x6a8fd0f0)
- ?GetTileNext@Tiler@@QAEJPAURdpRect@@@Z (Address: 0x6a8fd0f4)
- ?Initialize@Tiler@@QAEJPBURdpRect@@0@Z (Address: 0x6a8fd0e4)
- CCompressedUpdateContext_CreateInstance (Address: 0x6a8fd108)
- CUpdateContext_CreateInstance (Address: 0x6a8fd0e8)
- RDPSERVERBASE_CreateInstance (Address: 0x6a8fd104)