rdpserverbase.dll

Description: Rdp Server OneCore Base Services

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6216

Architecture: 32-bit

Operating System: Windows NT

SHA256: 520f7100621583f3bc96111464deb567

File Size: 1.6 MB

Uploaded At: Dec. 1, 2025, 8:03 a.m.

Views: 5

Exported Functions

  • ?GetEncodingPixelMap@RdpSurface@@QAEJPAPAVPixelMap@@@Z (Ordinal: 1, Address: 0xa2f60)
  • ?GetGfxPipeSettingBOOL@@YGJPAGHPAH@Z (Ordinal: 2, Address: 0xa5a00)
  • ?GetGfxPipeSettingUINT@@YGJPAGIPAI@Z (Ordinal: 3, Address: 0xa5a90)
  • ?GetGraphicsSourceContext@RdpSurface@@QAEJPAPAUIRdpGFXSourceUpdateContext@@@Z (Ordinal: 4, Address: 0xa2fd0)
  • ?GetTileFirst@Tiler@@QAEJPBURdpRect@@PAU2@@Z (Ordinal: 5, Address: 0xa5df0)
  • ?GetTileNext@Tiler@@QAEJPAURdpRect@@@Z (Ordinal: 6, Address: 0xa5fe0)
  • ?Initialize@Tiler@@QAEJPBURdpRect@@0@Z (Ordinal: 7, Address: 0xa62b0)
  • ?LogRDPGraphicsError@RDPGraphicsTraceLogging@@YGXU_GUID@@IIJ@Z (Ordinal: 8, Address: 0x142710)
  • ?LogRDPGraphicsFirstNonBlackFrame@RDPGraphicsTraceLogging@@YGX_K@Z (Ordinal: 9, Address: 0x1427d0)
  • ?LogRDPGraphicsFirstNonBlackFramePostLogon@RDPGraphicsTraceLogging@@YGXI@Z (Ordinal: 10, Address: 0x142860)
  • ?LogRDPGraphicsSubsampleAdapter@RDPGraphicsTraceLogging@@YGXPBGII@Z (Ordinal: 11, Address: 0x142d60)
  • ?LogRDPGraphicsSubsampleFailure@RDPGraphicsTraceLogging@@YGXJI@Z (Ordinal: 12, Address: 0x142df0)
  • ?LogRDPGraphicsVOBRHint@RDPGraphicsTraceLogging@@YGXI_KII@Z (Ordinal: 13, Address: 0x142f60)
  • ?RDPGraphicsTraceLogging_Register@RDPGraphicsTraceLogging@@YGJXZ (Ordinal: 14, Address: 0x143000)
  • ?RDPGraphicsTraceLogging_Unregister@RDPGraphicsTraceLogging@@YGXXZ (Ordinal: 15, Address: 0x143020)
  • ?RDPServerStackQOE_Register@@YGJXZ (Ordinal: 16, Address: 0x106a90)
  • ?RDPServerStackQOE_Unregister@@YGXXZ (Ordinal: 17, Address: 0x106ac0)
  • CCompressedUpdateContext_CreateInstance (Ordinal: 18, Address: 0x10a0b0)
  • CUpdateContext_CreateInstance (Ordinal: 19, Address: 0x10a110)
  • CUpdateDataAccumulator_CreateInstance (Ordinal: 20, Address: 0x10a170)
  • RDPEncryptionTraceLogging_Register (Ordinal: 21, Address: 0x1422b0)
  • RDPEncryptionTraceLogging_Unregister (Ordinal: 22, Address: 0x1422d0)
  • RDPSERVERBASE_CreateInstance (Ordinal: 23, Address: 0x7d230)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1017c234)
  • CoCreateGuid (Address: 0x1017c23c)
  • CoTaskMemFree (Address: 0x1017c240)
  • StringFromGUID2 (Address: 0x1017c238)
  • StringFromIID (Address: 0x1017c230)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1017c250)
  • IsDebuggerPresent (Address: 0x1017c248)
  • OutputDebugStringW (Address: 0x1017c24c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1017c258)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1017c260)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1017c270)
  • RaiseException (Address: 0x1017c278)
  • SetLastError (Address: 0x1017c268)
  • SetUnhandledExceptionFilter (Address: 0x1017c26c)
  • UnhandledExceptionFilter (Address: 0x1017c274)
api-ms-win-core-featurestaging-l1-1-0.dll
  • GetFeatureEnabledState (Address: 0x1017c288)
  • RecordFeatureUsage (Address: 0x1017c280)
  • SubscribeFeatureStateChangeNotification (Address: 0x1017c284)
  • UnsubscribeFeatureStateChangeNotification (Address: 0x1017c28c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1017c294)
  • DuplicateHandle (Address: 0x1017c298)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1017c2a8)
  • HeapAlloc (Address: 0x1017c2a0)
  • HeapFree (Address: 0x1017c2a4)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1017c2b0)
  • LocalFree (Address: 0x1017c2b4)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetComputerNameW (Address: 0x1017c2bc)
  • RegisterWaitForSingleObject (Address: 0x1017c2c0)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • VerifyVersionInfoW (Address: 0x1017c2c8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1017c2d4)
  • FreeLibrary (Address: 0x1017c2ec)
  • GetModuleFileNameA (Address: 0x1017c2e4)
  • GetModuleHandleExA (Address: 0x1017c2e0)
  • GetModuleHandleExW (Address: 0x1017c2d0)
  • GetModuleHandleW (Address: 0x1017c2d8)
  • GetProcAddress (Address: 0x1017c2dc)
  • LoadLibraryExW (Address: 0x1017c2e8)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1017c2f4)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1017c2fc)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1017c31c)
  • MapViewOfFile (Address: 0x1017c310)
  • MapViewOfFileEx (Address: 0x1017c318)
  • OpenFileMappingW (Address: 0x1017c30c)
  • UnmapViewOfFile (Address: 0x1017c314)
  • VirtualAlloc (Address: 0x1017c304)
  • VirtualFree (Address: 0x1017c308)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1017c32c)
  • GetCurrentProcess (Address: 0x1017c330)
  • GetCurrentProcessId (Address: 0x1017c338)
  • GetCurrentThreadId (Address: 0x1017c33c)
  • ProcessIdToSessionId (Address: 0x1017c328)
  • SwitchToThread (Address: 0x1017c324)
  • TerminateProcess (Address: 0x1017c334)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1017c344)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1017c34c)
  • QueryPerformanceFrequency (Address: 0x1017c350)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1017c35c)
  • RegCreateKeyExW (Address: 0x1017c368)
  • RegGetValueW (Address: 0x1017c36c)
  • RegOpenKeyExW (Address: 0x1017c358)
  • RegQueryValueExW (Address: 0x1017c360)
  • RegSetValueExW (Address: 0x1017c364)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1017c378)
  • WideCharToMultiByte (Address: 0x1017c374)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1017c390)
  • AcquireSRWLockShared (Address: 0x1017c388)
  • CreateEventW (Address: 0x1017c3bc)
  • CreateMutexExW (Address: 0x1017c39c)
  • CreateMutexW (Address: 0x1017c3c4)
  • CreateSemaphoreExW (Address: 0x1017c3ac)
  • DeleteCriticalSection (Address: 0x1017c384)
  • EnterCriticalSection (Address: 0x1017c398)
  • InitializeCriticalSection (Address: 0x1017c3a4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1017c3b4)
  • InitializeCriticalSectionEx (Address: 0x1017c380)
  • InitializeSRWLock (Address: 0x1017c3b0)
  • LeaveCriticalSection (Address: 0x1017c3a0)
  • OpenSemaphoreW (Address: 0x1017c394)
  • ReleaseMutex (Address: 0x1017c3c8)
  • ReleaseSemaphore (Address: 0x1017c3c0)
  • ReleaseSRWLockExclusive (Address: 0x1017c3cc)
  • ReleaseSRWLockShared (Address: 0x1017c3a8)
  • ResetEvent (Address: 0x1017c3b8)
  • SetEvent (Address: 0x1017c3d0)
  • WaitForSingleObject (Address: 0x1017c38c)
  • WaitForSingleObjectEx (Address: 0x1017c3d4)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1017c3e8)
  • Sleep (Address: 0x1017c3e0)
  • SleepConditionVariableSRW (Address: 0x1017c3dc)
  • WakeAllConditionVariable (Address: 0x1017c3e4)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1017c3f0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x1017c404)
  • GetSystemInfo (Address: 0x1017c3f8)
  • GetSystemTime (Address: 0x1017c410)
  • GetSystemTimeAsFileTime (Address: 0x1017c400)
  • GetTickCount (Address: 0x1017c40c)
  • GetTickCount64 (Address: 0x1017c408)
  • GetVersionExW (Address: 0x1017c3fc)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x1017c41c)
  • VerSetConditionMask (Address: 0x1017c418)
api-ms-win-core-threadpool-l1-2-0.dll
  • CancelThreadpoolIo (Address: 0x1017c448)
  • CloseThreadpoolIo (Address: 0x1017c438)
  • CloseThreadpoolTimer (Address: 0x1017c428)
  • CloseThreadpoolWork (Address: 0x1017c434)
  • CreateThreadpoolIo (Address: 0x1017c450)
  • CreateThreadpoolTimer (Address: 0x1017c424)
  • CreateThreadpoolWork (Address: 0x1017c43c)
  • SetThreadpoolTimer (Address: 0x1017c430)
  • StartThreadpoolIo (Address: 0x1017c444)
  • SubmitThreadpoolWork (Address: 0x1017c44c)
  • WaitForThreadpoolIoCallbacks (Address: 0x1017c440)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1017c42c)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1017c45c)
  • DeleteTimerQueueTimer (Address: 0x1017c460)
  • UnregisterWaitEx (Address: 0x1017c458)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1017c46c)
  • GetTimeZoneInformation (Address: 0x1017c468)
  • SystemTimeToFileTime (Address: 0x1017c470)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1017c478)
  • RoGetActivationFactory (Address: 0x1017c47c)
  • RoInitialize (Address: 0x1017c484)
  • RoUninitialize (Address: 0x1017c480)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x1017c494)
  • WindowsDeleteString (Address: 0x1017c490)
  • WindowsGetStringRawBuffer (Address: 0x1017c48c)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1017c4a4)
  • GetTraceEnableLevel (Address: 0x1017c4a8)
  • GetTraceLoggerHandle (Address: 0x1017c4b0)
  • RegisterTraceGuidsW (Address: 0x1017c4a0)
  • TraceMessage (Address: 0x1017c49c)
  • UnregisterTraceGuids (Address: 0x1017c4ac)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1017c4c4)
  • EventProviderEnabled (Address: 0x1017c4bc)
  • EventRegister (Address: 0x1017c4cc)
  • EventSetInformation (Address: 0x1017c4c8)
  • EventUnregister (Address: 0x1017c4c0)
  • EventWriteTransfer (Address: 0x1017c4b8)
api-ms-win-security-base-l1-1-0.dll
  • AddAce (Address: 0x1017c4dc)
  • CopySid (Address: 0x1017c4d4)
  • GetLengthSid (Address: 0x1017c4d8)
  • IsValidSid (Address: 0x1017c4e0)
api-ms-win-security-cryptoapi-l1-1-0.dll
  • CryptAcquireContextW (Address: 0x1017c4f4)
  • CryptDestroyKey (Address: 0x1017c4fc)
  • CryptGenKey (Address: 0x1017c4f8)
  • CryptGenRandom (Address: 0x1017c4f0)
  • CryptGetProvParam (Address: 0x1017c4e8)
  • CryptReleaseContext (Address: 0x1017c4ec)
api-ms-win-security-provider-l1-1-0.dll
  • GetSecurityInfo (Address: 0x1017c504)
  • SetSecurityInfo (Address: 0x1017c508)
CRYPT32.dll
  • CertCreateSelfSignCertificate (Address: 0x1017c018)
  • CertFreeCertificateContext (Address: 0x1017c004)
  • CertStrToNameW (Address: 0x1017c010)
  • CryptEncodeObject (Address: 0x1017c014)
  • CryptProtectData (Address: 0x1017c000)
  • CryptProtectMemory (Address: 0x1017c008)
  • CryptStringToBinaryW (Address: 0x1017c01c)
  • CryptUnprotectData (Address: 0x1017c020)
  • CryptUnprotectMemory (Address: 0x1017c00c)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1017c534)
  • __dllonexit (Address: 0x1017c580)
  • __RTDynamicCast (Address: 0x1017c550)
  • _aligned_free (Address: 0x1017c518)
  • _aligned_malloc (Address: 0x1017c514)
  • _amsg_exit (Address: 0x1017c5a0)
  • _callnewh (Address: 0x1017c570)
  • _except_handler4_common (Address: 0x1017c58c)
  • _ftol2 (Address: 0x1017c554)
  • _ftol2_sse (Address: 0x1017c558)
  • _initterm (Address: 0x1017c590)
  • _lock (Address: 0x1017c588)
  • _onexit (Address: 0x1017c57c)
  • _purecall (Address: 0x1017c510)
  • _snwprintf_s (Address: 0x1017c594)
  • _stricmp (Address: 0x1017c560)
  • _strlwr (Address: 0x1017c544)
  • _strnicmp (Address: 0x1017c568)
  • _unlock (Address: 0x1017c584)
  • _vsnwprintf (Address: 0x1017c520)
  • _wcsicmp (Address: 0x1017c528)
  • _wcsnicmp (Address: 0x1017c524)
  • _XcptFilter (Address: 0x1017c51c)
  • ??1type_info@@UAE@XZ (Address: 0x1017c5a4)
  • ?terminate@@YAXXZ (Address: 0x1017c574)
  • free (Address: 0x1017c59c)
  • malloc (Address: 0x1017c598)
  • memcmp (Address: 0x1017c55c)
  • memcpy (Address: 0x1017c564)
  • memcpy_s (Address: 0x1017c52c)
  • memmove (Address: 0x1017c578)
  • memmove_s (Address: 0x1017c530)
  • memset (Address: 0x1017c5a8)
  • qsort (Address: 0x1017c538)
  • strncmp (Address: 0x1017c548)
  • strtok_s (Address: 0x1017c54c)
  • toupper (Address: 0x1017c56c)
  • vswprintf_s (Address: 0x1017c53c)
  • wcstombs (Address: 0x1017c540)
ncrypt.dll
  • NCryptCreatePersistedKey (Address: 0x1017c5b4)
  • NCryptDeleteKey (Address: 0x1017c5bc)
  • NCryptFinalizeKey (Address: 0x1017c5c0)
  • NCryptFreeObject (Address: 0x1017c5b0)
  • NCryptIsKeyHandle (Address: 0x1017c5c4)
  • NCryptOpenStorageProvider (Address: 0x1017c5b8)
  • NCryptSetProperty (Address: 0x1017c5c8)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x1017c5d0)
  • NtSetInformationThread (Address: 0x1017c5dc)
  • RtlIpv6StringToAddressW (Address: 0x1017c5d4)
  • RtlVerifyVersionInfo (Address: 0x1017c5d8)
OLEAUT32.dll
  • SysAllocString (Address: 0x1017c028)
  • SysAllocStringByteLen (Address: 0x1017c02c)
  • SysFreeString (Address: 0x1017c030)
  • SysStringLen (Address: 0x1017c03c)
  • VariantClear (Address: 0x1017c038)
  • VariantCopy (Address: 0x1017c034)
  • VariantInit (Address: 0x1017c040)
RDPBASE.dll
  • ??0CRDPCache@@QAE@XZ (Address: 0x1017c1c8)
  • ??0RdpEncodeBuffer@@QAE@PAVITSObjectPool@@@Z (Address: 0x1017c14c)
  • ??0RdpGfxProtocolBaseDecoder@@IAE@XZ (Address: 0x1017c1a4)
  • ??0SSECBCHash2@@QAE@XZ (Address: 0x1017c120)
  • ??1CRDPCache@@UAE@XZ (Address: 0x1017c0cc)
  • ??1Evict@@QAE@XZ (Address: 0x1017c0e8)
  • ??1RdpGfxProtocolBaseDecoder@@IAE@XZ (Address: 0x1017c1a8)
  • ?AlphaCompressor__CreateInstance@@YGJPAPAUIRdpImageCompressor@@@Z (Address: 0x1017c088)
  • ?ClearCache@CRDPCache@@UAGJXZ (Address: 0x1017c104)
  • ?Compress@NSCodecCompressor@@QAE_NABVPixelMap@@_NPAEIAAI@Z (Address: 0x1017c1d8)
  • ?CompressRdp8__CreateInstance@@YGJPAPAVIRdpPipeCompress@@I@Z (Address: 0x1017c13c)
  • ?CreateInstance@CRdpGfxCapsSet@@SGJPAXKPAPAUIRdpGfxCapsSet@@@Z (Address: 0x1017c1b0)
  • ?CreateInstance@Evict@@SGJKKKKKPAPAV1@@Z (Address: 0x1017c0e4)
  • ?CreateInstance@HashTable@@SGJKKPAPAUIHashBucket@@@Z (Address: 0x1017c0dc)
  • ?CreateInstance@NSCodecCompressor@@SG_N_N00EAAV?$TCntPtr@VNSCodecCompressor@@@@@Z (Address: 0x1017c180)
  • ?CreateInstance@PlanarCompressor@@SGJGGEHHHPAPAUIRdpImageCompressor@@@Z (Address: 0x1017c084)
  • ?CreateInstance@RdpEncodeBuffer@@SGJPAVRdpEncodeBufferPool@@KPAPAV1@@Z (Address: 0x1017c148)
  • ?DecompressRdp8__CreateInstance@@YGJPAPAVIRdpPipeDecompress@@@Z (Address: 0x1017c1c4)
  • ?EvictEntry@Evict@@QAEPAU_SCORE_ENTRY@@XZ (Address: 0x1017c0f0)
  • ?GetFreeEntry@Evict@@QAEPAU_SCORE_ENTRY@@XZ (Address: 0x1017c110)
  • ?GetInstance@PipelineClock@@SGAAV1@XZ (Address: 0x1017c184)
  • ?GetMillisecondCount@PipelineClock@@QAEIXZ (Address: 0x1017c178)
  • ?GetMillisecondCount64@PipelineClock@@QAE_KXZ (Address: 0x1017c0ac)
  • ?GetTickCount@PipelineClock@@QAEIXZ (Address: 0x1017c078)
  • ?GetTimeHNS@PipelineClock@@QAE_JXZ (Address: 0x1017c090)
  • ?HintCoconet__CreateInstance@@YGJPAPAVIRdpPipeCompressHintProvider@@@Z (Address: 0x1017c140)
  • ?InsertEntry@Evict@@QAEXPAU_SCORE_ENTRY@@K@Z (Address: 0x1017c11c)
  • ?IsSupportedVersion@CRdpGfxCaps@@SGHK@Z (Address: 0x1017c0a4)
  • ?ParkEntry@Evict@@QAEXPAU_SCORE_ENTRY@@@Z (Address: 0x1017c10c)
  • ?ProcessAlignedData_AVX@SSECBCHash2@@AAEXPBIIII@Z (Address: 0x1017c0c4)
  • ?ProcessAlignedData_SSE2@SSECBCHash2@@AAEXPBIIII@Z (Address: 0x1017c0d8)
  • ?ProcessAlignedData_SSE41@SSECBCHash2@@AAEXPBIIII@Z (Address: 0x1017c0c8)
  • ?ProcessUnalignedData_REG@SSECBCHash2@@AAEXPBIIII@Z (Address: 0x1017c0c0)
  • ?PromoteEntry@Evict@@QAEXKK@Z (Address: 0x1017c0ec)
  • ?RdpGfxProtocolServerEncoder_CreateInstance@@YGJPAVIRdpEncoderIO@@PAPAVIRdpPipeProtocolEncoderEx@@@Z (Address: 0x1017c144)
  • ?Reset@CRDPCache@@UAGJI@Z (Address: 0x1017c100)
  • ?SearchCache@CRDPCache@@UAGJIIPAPAUIUnknown@@PAI@Z (Address: 0x1017c0e0)
  • ?SetCacheEntry@CRDPCache@@UAGJIIPAUIUnknown@@PAI@Z (Address: 0x1017c150)
  • ?SetDecodeBuffer@RdpGfxProtocolBaseDecoder@@IAEXPBEI@Z (Address: 0x1017c1ac)
  • ?UnevictEntry@Evict@@QAEXPAU_SCORE_ENTRY@@@Z (Address: 0x1017c0f4)
  • ?UpdateKeys@SSECBCHash2@@ABEXXZ (Address: 0x1017c0bc)
  • ApplyLuminanceFilter (Address: 0x1017c05c)
  • ApplySobelFilterOnLum (Address: 0x1017c1b4)
  • CAPAPI_AddCapSet (Address: 0x1017c198)
  • CAPAPI_GetCapSet (Address: 0x1017c18c)
  • CAPAPI_InitializeCombinedCaps (Address: 0x1017c1a0)
  • CAPAPI_MergeCombinedCaps (Address: 0x1017c19c)
  • CRDPCacCodecEncoder_CreateInstance (Address: 0x1017c080)
  • CRDPCacVideoCodecForHardwareClient_CreateInstance (Address: 0x1017c074)
  • CRdpFIPSEncryption_CreateInstance (Address: 0x1017c050)
  • CRDPNsCodec_CreateInstance (Address: 0x1017c07c)
  • DecryptData (Address: 0x1017c190)
  • DrawBox (Address: 0x1017c12c)
  • DrawHLine (Address: 0x1017c138)
  • DrawVLine (Address: 0x1017c134)
  • EncryptData (Address: 0x1017c170)
  • ExpandRectForSSE (Address: 0x1017c058)
  • GetSupportedSSELevel_SSE (Address: 0x1017c068)
  • GridBA_CreateInstance (Address: 0x1017c06c)
  • MakeSessionKeys (Address: 0x1017c118)
  • MemCopyAligned_SSE (Address: 0x1017c060)
  • MemEqual (Address: 0x1017c0b0)
  • MemMoveReverseAligned_SSE (Address: 0x1017c064)
  • PAL_System_AtomicCompareAndExchange (Address: 0x1017c108)
  • PAL_System_AtomicCompareAndExchangePointer (Address: 0x1017c0a0)
  • PAL_System_AtomicDecrement (Address: 0x1017c094)
  • PAL_System_AtomicIncrement (Address: 0x1017c098)
  • PAL_System_CritSecEnter (Address: 0x1017c0b4)
  • PAL_System_CritSecInit (Address: 0x1017c0fc)
  • PAL_System_CritSecIsLockedByCurrentThread (Address: 0x1017c1b8)
  • PAL_System_CritSecLeave (Address: 0x1017c0d4)
  • PAL_System_CritSecTerminate (Address: 0x1017c0f8)
  • PAL_System_HandleFree (Address: 0x1017c154)
  • PAL_System_MemAlloc (Address: 0x1017c070)
  • PAL_System_MemFree (Address: 0x1017c16c)
  • PAL_System_SemaphoreAcquire (Address: 0x1017c15c)
  • PAL_System_SemaphoreAlloc (Address: 0x1017c160)
  • PAL_System_SemaphoreRelease (Address: 0x1017c158)
  • PAL_System_ThreadGetId (Address: 0x1017c130)
  • RDP_MD5Final (Address: 0x1017c1e8)
  • RDP_MD5Init (Address: 0x1017c1e4)
  • RDP_MD5Update (Address: 0x1017c1d0)
  • RDP_RC4AllocKey (Address: 0x1017c124)
  • RDP_RC4FreeKey (Address: 0x1017c114)
  • RDP_RsaBCryptDecryptPrivate (Address: 0x1017c1dc)
  • RDP_RsaBCryptGenerateRsaKeyPair (Address: 0x1017c1d4)
  • RDP_RsaBCryptPubKeyToBSafePubKey (Address: 0x1017c1cc)
  • RDPAPI_GetGenericCounter (Address: 0x1017c164)
  • RDPAPI_GetGlobalObject (Address: 0x1017c09c)
  • RDPAPI_GetLongCounter (Address: 0x1017c08c)
  • RDPBASE_CreateInstance (Address: 0x1017c04c)
  • RDPCompress_GetContextSize (Address: 0x1017c048)
  • RDPCompress_InitRecvContext (Address: 0x1017c17c)
  • RDPCompress_InitSendContext (Address: 0x1017c194)
  • RDPCompressEx (Address: 0x1017c0d0)
  • RDPDecompress (Address: 0x1017c1e0)
  • RDPDeCompress_GetContextSize (Address: 0x1017c054)
  • RDPENCHLPREG_ReadValueDWORD (Address: 0x1017c1c0)
  • RdpIntersectRect (Address: 0x1017c1bc)
  • RdpUnionRect (Address: 0x1017c0a8)
  • RdpX_DateTime_GetHighResolutionTimeSinceReboot (Address: 0x1017c168)
  • RdpX_GetActivityIdPrefix (Address: 0x1017c188)
  • RgnlibBA_CreateInstance (Address: 0x1017c174)
  • SubtractRects (Address: 0x1017c0b8)
  • UpdateSessionKey (Address: 0x1017c128)
RPCRT4.dll
  • RpcStringFreeW (Address: 0x1017c1f8)
  • UuidCreate (Address: 0x1017c1f0)
  • UuidToStringW (Address: 0x1017c1f4)
SspiCli.dll
  • GetUserNameExW (Address: 0x1017c20c)
  • LsaCallAuthenticationPackage (Address: 0x1017c208)
  • LsaConnectUntrusted (Address: 0x1017c200)
  • LsaDeregisterLogonProcess (Address: 0x1017c210)
  • LsaFreeReturnBuffer (Address: 0x1017c214)
  • LsaLogonUser (Address: 0x1017c204)
  • LsaLookupAuthenticationPackage (Address: 0x1017c218)
websocket.dll
  • WebSocketAbortHandle (Address: 0x1017c600)
  • WebSocketBeginServerHandshake (Address: 0x1017c5f8)
  • WebSocketCompleteAction (Address: 0x1017c5ec)
  • WebSocketCreateServerHandle (Address: 0x1017c5fc)
  • WebSocketDeleteHandle (Address: 0x1017c5e8)
  • WebSocketEndServerHandshake (Address: 0x1017c604)
  • WebSocketGetAction (Address: 0x1017c5e4)
  • WebSocketReceive (Address: 0x1017c5f0)
  • WebSocketSend (Address: 0x1017c5f4)
WS2_32.dll
  • WSAAddressToStringW (Address: 0x1017c228)
  • WSACleanup (Address: 0x1017c220)
  • WSAStartup (Address: 0x1017c224)