rpcrt4.dll

  • File Path: C:\Windows\SysWOW64\rpcrt4.dll
  • Description: Remote Procedure Call Runtime

Hashes

Type Hash
MD5 58292B9414A1F7B06B148E9155F85368
SHA1 85D68AC54721DAC415FD4025EF47455949A0AA50
SHA256 82B83B9CC6F507250ADB3EB6A9FF64AAF4D2BA121161D11291D33B888F490361
SHA384 3D0EF69141B406E4DA1852E46FAACC23894BCD91C74977FE2067E9DEBBABBC11D9D2FDE5A321FB411A2EAD9EC5AB1540
SHA512 4C4ACA01C7C65863D79D7B649D9C8DD391D9CDCB219B77CFE2534CEED0E0E648E27BB3ECDEA2B13AF0B7F14B1A47D3899D2F50FE2A89727EFF2BD2764400B991
SSDEEP 12288:/AvO++wQEPoAX8C8bFO4nojyfW8vo8gGsvRWljNJUjkRQDEDb//JyK9t1m8eo5pJ:/AvO+DQYMjlojyu8Jgax7L1mVo5p2vdo
IMP 74E06BCB0D497A2401DFC4B3B499EBC9
PESHA1 0B00889987C4B5666C64243562510895ED79B26E
PE256 44BC9A7AE1E6AF61867B2AA60E4690E804360EE7AB21453F4727017C308167E7

DLL Exports:

Function Name Ordinal Type
RpcAsyncRegisterInfo 1368 Exported Function
RpcAsyncInitializeHandle 1367 Exported Function
RpcBindingCopy 1370 Exported Function
RpcBindingBind 1369 Exported Function
RpcAsyncCancelCall 1364 Exported Function
RpcAsyncAbortCall 1363 Exported Function
RpcAsyncGetCallStatus 1366 Exported Function
RpcAsyncCompleteCall 1365 Exported Function
RpcBindingCreateA 1371 Exported Function
RpcBindingInqAuthClientExA 1377 Exported Function
RpcBindingInqAuthClientA 1376 Exported Function
RpcBindingInqAuthClientW 1379 Exported Function
RpcBindingInqAuthClientExW 1378 Exported Function
RpcBindingFree 1373 Exported Function
RpcBindingCreateW 1372 Exported Function
RpcBindingFromStringBindingW 1375 Exported Function
RpcBindingFromStringBindingA 1374 Exported Function
pfnUnmarshallRoutines 1019 Exported Function
NdrVaryingArrayFree 1345 Exported Function
NdrVaryingArrayBufferSize 1344 Exported Function
NdrVaryingArrayMemorySize 1347 Exported Function
NdrVaryingArrayMarshall 1346 Exported Function
NdrUserMarshalMemorySize 1341 Exported Function
NdrUserMarshalMarshall 1340 Exported Function
NdrUserMarshalUnmarshall 1343 Exported Function
NdrUserMarshalSimpleTypeConvert 1342 Exported Function
NdrVaryingArrayUnmarshall 1348 Exported Function
pfnFreeRoutines 1016 Exported Function
NdrXmitOrRepAsUnmarshall 1353 Exported Function
pfnSizeRoutines 1018 Exported Function
pfnMarshallRoutines 1017 Exported Function
NdrXmitOrRepAsFree 1350 Exported Function
NdrXmitOrRepAsBufferSize 1349 Exported Function
NdrXmitOrRepAsMemorySize 1352 Exported Function
NdrXmitOrRepAsMarshall 1351 Exported Function
RpcBindingInqAuthInfoA 1380 Exported Function
RpcEpRegisterNoReplaceA 1403 Exported Function
RpcEpRegisterA 1402 Exported Function
RpcEpRegisterW 1405 Exported Function
RpcEpRegisterNoReplaceW 1404 Exported Function
RpcCertGeneratePrincipalNameA 1400 Exported Function
RpcCancelThreadEx 1399 Exported Function
RpcCertMatchPrincipalName 1015 Exported Function
RpcCertGeneratePrincipalNameW 1401 Exported Function
RpcEpResolveBinding 1406 Exported Function
RpcErrorGetNumberOfRecords 1412 Exported Function
RpcErrorGetNextRecord 1411 Exported Function
RpcErrorResetEnumeration 1414 Exported Function
RpcErrorLoadErrorInfo 1413 Exported Function
RpcErrorAddRecord 1408 Exported Function
RpcEpUnregister 1407 Exported Function
RpcErrorEndEnumeration 1410 Exported Function
RpcErrorClearInformation 1409 Exported Function
RpcCancelThread 1398 Exported Function
RpcBindingReset 1386 Exported Function
RpcBindingInqOption 1385 Exported Function
RpcBindingSetAuthInfoA 1388 Exported Function
RpcBindingServerFromClient 1387 Exported Function
RpcBindingInqAuthInfoExW 1382 Exported Function
RpcBindingInqAuthInfoExA 1381 Exported Function
RpcBindingInqObject 1384 Exported Function
RpcBindingInqAuthInfoW 1383 Exported Function
RpcBindingSetAuthInfoExA 1389 Exported Function
RpcBindingToStringBindingW 1395 Exported Function
RpcBindingToStringBindingA 1394 Exported Function
RpcBindingVectorFree 1397 Exported Function
RpcBindingUnbind 1396 Exported Function
RpcBindingSetAuthInfoW 1391 Exported Function
RpcBindingSetAuthInfoExW 1390 Exported Function
RpcBindingSetOption 1393 Exported Function
RpcBindingSetObject 1392 Exported Function
NdrRpcSmClientAllocate 1298 Exported Function
NdrRangeUnmarshall 1297 Exported Function
NdrRpcSmSetClientToOsf 1300 Exported Function
NdrRpcSmClientFree 1299 Exported Function
NdrProxyInitialize 1295 Exported Function
NdrProxyGetBuffer 1294 Exported Function
NdrpVarVtOfTypeDesc 1362 Exported Function
NdrProxySendReceive 1296 Exported Function
NdrRpcSsDefaultAllocate 1301 Exported Function
NDRSContextMarshallEx 1157 Exported Function
NDRSContextMarshall2 1155 Exported Function
NDRSContextUnmarshall2 1158 Exported Function
NDRSContextUnmarshall 1159 Exported Function
NdrRpcSsDisableAllocate 1303 Exported Function
NdrRpcSsDefaultFree 1302 Exported Function
NDRSContextMarshall 1156 Exported Function
NdrRpcSsEnableAllocate 1304 Exported Function
NdrProxyFreeBuffer 1293 Exported Function
NdrpGetProcFormatString 1356 Exported Function
NdrpCreateStub 1355 Exported Function
NdrpGetTypeGenCookie 1358 Exported Function
NdrpGetTypeFormatString 1357 Exported Function
NdrPartialIgnoreServerInitialize 1285 Exported Function
NdrPartialIgnoreClientMarshall 1284 Exported Function
NdrpCreateProxy 1354 Exported Function
NdrPartialIgnoreServerUnmarshall 1286 Exported Function
NdrpMemoryIncrement 1359 Exported Function
NdrpReleaseTypeFormatString 1360 Exported Function
NdrPointerUnmarshall 1291 Exported Function
NdrProxyErrorHandler 1292 Exported Function
NdrpReleaseTypeGenCookie 1361 Exported Function
NdrPointerFree 1288 Exported Function
NdrPointerBufferSize 1287 Exported Function
NdrPointerMemorySize 1290 Exported Function
NdrPointerMarshall 1289 Exported Function
NDRSContextUnmarshallEx 1160 Exported Function
NdrStubForwardingFunction 1328 Exported Function
NdrStubCall2 1326 Exported Function
NdrStubInitialize 1330 Exported Function
NdrStubGetBuffer 1329 Exported Function
NdrSimpleTypeMarshall 1324 Exported Function
NdrSimpleStructUnmarshall 1323 Exported Function
NdrStubCall 1327 Exported Function
NdrSimpleTypeUnmarshall 1325 Exported Function
NdrStubInitializeMarshall 1331 Exported Function
NdrUnmarshallBasetypeInline 1337 Exported Function
NdrTypeUnmarshall 1336 Exported Function
NdrUserMarshalFree 1339 Exported Function
NdrUserMarshalBufferSize 1338 Exported Function
NdrTypeFree 1333 Exported Function
NdrTypeFlags 1332 Exported Function
NdrTypeSize 1335 Exported Function
NdrTypeMarshall 1334 Exported Function
NdrSimpleStructMemorySize 1322 Exported Function
NdrServerContextNewUnmarshall 1310 Exported Function
NdrServerContextNewMarshall 1309 Exported Function
NdrServerInitialize 1312 Exported Function
NdrServerContextUnmarshall 1311 Exported Function
NdrServerCall 1307 Exported Function
NdrSendReceive 1305 Exported Function
NdrServerContextMarshall 1308 Exported Function
NdrServerCall2 1306 Exported Function
NdrServerInitializeMarshall 1313 Exported Function
NdrSimpleStructBufferSize 1319 Exported Function
NdrServerUnmarshall 1318 Exported Function
NdrSimpleStructMarshall 1321 Exported Function
NdrSimpleStructFree 1320 Exported Function
NdrServerInitializePartial 1315 Exported Function
NdrServerInitializeNew 1314 Exported Function
NdrServerMarshall 1317 Exported Function
NdrServerInitializeUnmarshall 1316 Exported Function
RpcSmFree 1509 Exported Function
RpcSmEnableAllocate 1508 Exported Function
RpcSmSetClientAllocFree 1511 Exported Function
RpcSmGetThreadHandle 1510 Exported Function
RpcSmClientFree 1505 Exported Function
RpcSmAllocate 1504 Exported Function
RpcSmDisableAllocate 1507 Exported Function
RpcSmDestroyClientContext 1506 Exported Function
RpcSmSetThreadHandle 1512 Exported Function
RpcSsDisableAllocate 1518 Exported Function
RpcSsDestroyClientContext 1517 Exported Function
RpcSsEnableAllocate 1520 Exported Function
RpcSsDontSerializeContext 1519 Exported Function
RpcSsAllocate 1514 Exported Function
RpcSmSwapClientAllocFree 1513 Exported Function
RpcSsContextLockShared 1516 Exported Function
RpcSsContextLockExclusive 1515 Exported Function
RpcServerYield 1503 Exported Function
RpcServerUseProtseqA 1491 Exported Function
RpcServerUseAllProtseqsIfEx 1490 Exported Function
RpcServerUseProtseqEpExA 1493 Exported Function
RpcServerUseProtseqEpA 1492 Exported Function
RpcServerUseAllProtseqs 1487 Exported Function
RpcServerUnsubscribeForNotification 1486 Exported Function
RpcServerUseAllProtseqsIf 1489 Exported Function
RpcServerUseAllProtseqsEx 1488 Exported Function
RpcServerUseProtseqEpExW 1494 Exported Function
RpcServerUseProtseqIfExW 1500 Exported Function
RpcServerUseProtseqIfExA 1499 Exported Function
RpcServerUseProtseqW 1502 Exported Function
RpcServerUseProtseqIfW 1501 Exported Function
RpcServerUseProtseqExA 1496 Exported Function
RpcServerUseProtseqEpW 1495 Exported Function
RpcServerUseProtseqIfA 1498 Exported Function
RpcServerUseProtseqExW 1497 Exported Function
RpcSsFree 1521 Exported Function
tree_size_ndr 1569 Exported Function
tree_peek_ndr 1568 Exported Function
UuidCreate 1541 Exported Function
UuidCompare 1540 Exported Function
TowerConstruct 1538 Exported Function
SimpleTypeMemorySize 1537 Exported Function
tree_into_ndr 1567 Exported Function
TowerExplode 1539 Exported Function
UuidCreateNil 1542 Exported Function
UuidIsNil 1548 Exported Function
UuidHash 1547 Exported Function
UuidToStringW 1550 Exported Function
UuidToStringA 1549 Exported Function
UuidEqual 1544 Exported Function
UuidCreateSequential 1543 Exported Function
UuidFromStringW 1546 Exported Function
UuidFromStringA 1545 Exported Function
SimpleTypeBufferSize 1536 Exported Function
RpcStringBindingComposeA 1527 Exported Function
RpcSsSwapClientAllocFree 1526 Exported Function
RpcStringBindingParseA 1529 Exported Function
RpcStringBindingComposeW 1528 Exported Function
RpcSsGetThreadHandle 1523 Exported Function
RpcSsGetContextBinding 1522 Exported Function
RpcSsSetThreadHandle 1525 Exported Function
RpcSsSetClientAllocFree 1524 Exported Function
RpcStringBindingParseW 1530 Exported Function
short_from_ndr 1565 Exported Function
short_array_from_ndr 1564 Exported Function
SimpleTypeAlignment 1535 Exported Function
short_from_ndr_temp 1566 Exported Function
RpcStringFreeW 1532 Exported Function
RpcStringFreeA 1531 Exported Function
RpcUserFree 1534 Exported Function
RpcTestCancel 1533 Exported Function
RpcMgmtSetAuthorizationFn 1438 Exported Function
RpcMgmtIsServerListening 1437 Exported Function
RpcMgmtSetComTimeout 1440 Exported Function
RpcMgmtSetCancelTimeout 1439 Exported Function
RpcMgmtInqServerPrincNameA 1434 Exported Function
RpcMgmtInqIfIds 1433 Exported Function
RpcMgmtInqStats 1436 Exported Function
RpcMgmtInqServerPrincNameW 1435 Exported Function
RpcMgmtSetServerStackSize 1441 Exported Function
RpcNetworkIsProtseqValidA 1447 Exported Function
RpcNetworkInqProtseqsW 1446 Exported Function
RpcNsBindingInqEntryNameA 1449 Exported Function
RpcNetworkIsProtseqValidW 1448 Exported Function
RpcMgmtStopServerListening 1443 Exported Function
RpcMgmtStatsVectorFree 1442 Exported Function
RpcNetworkInqProtseqsA 1445 Exported Function
RpcMgmtWaitServerListen 1444 Exported Function
RpcMgmtInqDefaultProtectLevel 1432 Exported Function
RpcIfIdVectorFree 1420 Exported Function
RpcGetAuthorizationContextForClient 1419 Exported Function
RpcImpersonateClient 1423 Exported Function
RpcIfInqId 1421 Exported Function
RpcErrorStartEnumeration 1416 Exported Function
RpcErrorSaveErrorInfo 1415 Exported Function
RpcFreeAuthorizationContext 1418 Exported Function
RpcExceptionFilter 1417 Exported Function
RpcImpersonateClient2 1422 Exported Function
RpcMgmtEpEltInqNextW 1429 Exported Function
RpcMgmtEpEltInqNextA 1428 Exported Function
RpcMgmtInqComTimeout 1431 Exported Function
RpcMgmtEpUnregister 1430 Exported Function
RpcMgmtEnableIdleCleanup 1425 Exported Function
RpcImpersonateClientContainer 1424 Exported Function
RpcMgmtEpEltInqDone 1427 Exported Function
RpcMgmtEpEltInqBegin 1426 Exported Function
RpcNsBindingInqEntryNameW 1450 Exported Function
RpcServerInterfaceGroupInqBindings 1474 Exported Function
RpcServerInterfaceGroupDeactivate 1473 Exported Function
RpcServerRegisterAuthInfoA 1476 Exported Function
RpcServerListen 1475 Exported Function
RpcServerInterfaceGroupClose 1470 Exported Function
RpcServerInterfaceGroupActivate 1469 Exported Function
RpcServerInterfaceGroupCreateW 1472 Exported Function
RpcServerInterfaceGroupCreateA 1471 Exported Function
RpcServerRegisterAuthInfoW 1477 Exported Function
RpcServerTestCancel 1483 Exported Function
RpcServerSubscribeForNotification 1482 Exported Function
RpcServerUnregisterIfEx 1485 Exported Function
RpcServerUnregisterIf 1484 Exported Function
RpcServerRegisterIf2 1478 Exported Function
RpcServerRegisterIf 1480 Exported Function
RpcServerRegisterIfEx 1481 Exported Function
RpcServerRegisterIf3 1479 Exported Function
RpcServerInqIf 1468 Exported Function
RpcRaiseException 1456 Exported Function
RpcProtseqVectorFreeW 1455 Exported Function
RpcRevertToSelf 1458 Exported Function
RpcRevertContainerImpersonation 1457 Exported Function
RpcObjectSetInqFn 1452 Exported Function
RpcObjectInqType 1451 Exported Function
RpcProtseqVectorFreeA 1454 Exported Function
RpcObjectSetType 1453 Exported Function
RpcRevertToSelfEx 1459 Exported Function
RpcServerInqCallAttributesW 1465 Exported Function
RpcServerInqCallAttributesA 1464 Exported Function
RpcServerInqDefaultPrincNameW 1467 Exported Function
RpcServerInqDefaultPrincNameA 1466 Exported Function
RpcServerInqBindingHandle 1461 Exported Function
RpcServerCompleteSecurityCallback 1460 Exported Function
RpcServerInqBindingsEx 1463 Exported Function
RpcServerInqBindings 1462 Exported Function
NdrPartialIgnoreClientBufferSize 1283 Exported Function
I_RpcRecordCalloutFailure 1099 Exported Function
I_RpcReceive 1098 Exported Function
I_RpcSend 1102 Exported Function
I_RpcRequestMutex 1100 Exported Function
I_RpcParseSecurity 1095 Exported Function
I_RpcOpenClientThread 1008 Exported Function
I_RpcReallocPipeBuffer 1097 Exported Function
I_RpcPauseExecution 1096 Exported Function
I_RpcSendReceive 1103 Exported Function
I_RpcServerInqLocalConnAddress 1109 Exported Function
I_RpcServerInqAddressChangeFn 1108 Exported Function
I_RpcServerInqTransportType 1111 Exported Function
I_RpcServerInqRemoteConnAddress 1110 Exported Function
I_RpcServerCheckClientRestriction 1105 Exported Function
I_RpcServerAllocateIpPort 1104 Exported Function
I_RpcServerGetAssociationID 1107 Exported Function
I_RpcServerDisableExceptionFilter 1106 Exported Function
I_RpcOpenClientProcess 1094 Exported Function
I_RpcMapWin32Status 1083 Exported Function
I_RpcLogEvent 1082 Exported Function
I_RpcMgmtEnableDedicatedThreadPool 1085 Exported Function
I_RpcMarshalBindingHandleAndInterfaceForNDF 1084 Exported Function
I_RpcInitHttpImports 1004 Exported Function
I_RpcInitFwImports 1003 Exported Function
I_RpcInitNdrImports 1006 Exported Function
I_RpcInitImports 1005 Exported Function
I_RpcMgmtQueryDedicatedThreadPool 1007 Exported Function
I_RpcNsBindingSetEntryNameW 1091 Exported Function
I_RpcNsBindingSetEntryNameA 1090 Exported Function
I_RpcNsInterfaceUnexported 1093 Exported Function
I_RpcNsInterfaceExported 1092 Exported Function
I_RpcNDRSContextEmergencyCleanup 1087 Exported Function
I_RpcNDRCGetWireRepresentation 1086 Exported Function
I_RpcNsBindingSetEntryName 1089 Exported Function
I_RpcNegotiateTransferSyntax 1088 Exported Function
I_RpcServerIsClientDisconnected 1112 Exported Function
I_RpcTransDatagramFree 1134 Exported Function
I_RpcTransDatagramAllocate2 1132 Exported Function
I_RpcTransGetThreadEventThreadOptional 1136 Exported Function
I_RpcTransGetThreadEvent 1135 Exported Function
I_RpcTransConnectionFreePacket 1130 Exported Function
I_RpcTransConnectionAllocatePacket 1129 Exported Function
I_RpcTransDatagramAllocate 1133 Exported Function
I_RpcTransConnectionReallocPacket 1131 Exported Function
I_RpcTransIoCancelled 1137 Exported Function
IUnknown_QueryInterface_Proxy 1036 Exported Function
IUnknown_AddRef_Proxy 1035 Exported Function
long_array_from_ndr 1561 Exported Function
IUnknown_Release_Proxy 1037 Exported Function
I_RpcTurnOnEEInfoPropagation 1139 Exported Function
I_RpcTransServerNewConnection 1138 Exported Function
I_UuidCreate 1140 Exported Function
I_RpcVerifierCorruptionExpected 1010 Exported Function
I_RpcSystemHandleTypeSpecificWork 1128 Exported Function
I_RpcServerTurnOnOffKeepalives 1009 Exported Function
I_RpcServerSubscribeForDisconnectNotification2 1116 Exported Function
I_RpcServerUseProtseq2A 1119 Exported Function
I_RpcServerUnsubscribeForDisconnectNotification 1118 Exported Function
I_RpcServerSetAddressChangeFn 1114 Exported Function
I_RpcServerRegisterForwardFunction 1113 Exported Function
I_RpcServerSubscribeForDisconnectNotification 1117 Exported Function
I_RpcServerStartService 1115 Exported Function
I_RpcServerUseProtseq2W 1120 Exported Function
I_RpcSNCHOption 1101 Exported Function
I_RpcSetSystemHandle 1125 Exported Function
I_RpcSystemFunction001 1127 Exported Function
I_RpcSsDontSerializeContext 1126 Exported Function
I_RpcServerUseProtseqEp2W 1122 Exported Function
I_RpcServerUseProtseqEp2A 1121 Exported Function
I_RpcSetDCOMAppId 1124 Exported Function
I_RpcSessionStrictContextHandle 1123 Exported Function
float_array_from_ndr 1559 Exported Function
enum_from_ndr 1558 Exported Function
I_RpcAllocate 1038 Exported Function
float_from_ndr 1560 Exported Function
DllRegisterServer 1034 Exported Function
DllGetClassObject 1033 Exported Function
double_from_ndr 1557 Exported Function
double_array_from_ndr 1556 Exported Function
I_RpcAsyncAbortCall 1039 Exported Function
I_RpcBindingHandleToAsyncHandle 1045 Exported Function
I_RpcBindingCreateNP 1044 Exported Function
I_RpcBindingInqCurrentModifiedId 1001 Exported Function
I_RpcBindingInqClientTokenAttributes 1046 Exported Function
I_RpcBCacheAllocate 1041 Exported Function
I_RpcAsyncSetHandle 1040 Exported Function
I_RpcBindingCopy 1043 Exported Function
I_RpcBCacheFree 1042 Exported Function
DceErrorInqTextW 1032 Exported Function
CStdStubBuffer_Connect 1021 Exported Function
CStdStubBuffer_AddRef 1020 Exported Function
CStdStubBuffer_DebugServerQueryInterface 1023 Exported Function
CStdStubBuffer_CountRefs 1022 Exported Function
char_from_ndr 1552 Exported Function
char_array_from_ndr 1551 Exported Function
CreateStubFromTypeInfo 1030 Exported Function
CreateProxyFromTypeInfo 1029 Exported Function
CStdStubBuffer_DebugServerRelease 1024 Exported Function
data_into_ndr 1554 Exported Function
data_from_ndr 1553 Exported Function
DceErrorInqTextA 1031 Exported Function
data_size_ndr 1555 Exported Function
CStdStubBuffer_Invoke 1026 Exported Function
CStdStubBuffer_Disconnect 1025 Exported Function
CStdStubBuffer_QueryInterface 1028 Exported Function
CStdStubBuffer_IsIIDSupported 1027 Exported Function
I_RpcBindingInqDynamicEndpoint 1047 Exported Function
I_RpcFreePipeBuffer 1071 Exported Function
I_RpcFreeBuffer 1070 Exported Function
I_RpcFreeSystemHandleCollection 1073 Exported Function
I_RpcFreeSystemHandle 1072 Exported Function
I_RpcExceptionFilter 1067 Exported Function
I_RpcEnableWmiTrace 1066 Exported Function
I_RpcFree 1069 Exported Function
I_RpcFilterDCOMActivation 1068 Exported Function
I_RpcFwThisIsTheManager 1002 Exported Function
I_RpcGetPortAllocationData 1079 Exported Function
I_RpcGetExtendedError 1078 Exported Function
I_RpcIfInqTransferSyntaxes 1081 Exported Function
I_RpcGetSystemHandle 1080 Exported Function
I_RpcGetBufferWithObject 1075 Exported Function
I_RpcGetBuffer 1074 Exported Function
I_RpcGetDefaultSD 1077 Exported Function
I_RpcGetCurrentCallHandle 1076 Exported Function
I_RpcDeleteMutex 1065 Exported Function
I_RpcBindingInqSecurityContextKeyInfo 1053 Exported Function
I_RpcBindingInqSecurityContext 1052 Exported Function
I_RpcBindingInqWireIdForSnego 1055 Exported Function
I_RpcBindingInqTransportType 1054 Exported Function
I_RpcBindingInqDynamicEndpointW 1049 Exported Function
I_RpcBindingInqDynamicEndpointA 1048 Exported Function
I_RpcBindingInqMarshalledTargetInfo 1051 Exported Function
I_RpcBindingInqLocalClientPID 1050 Exported Function
I_RpcBindingIsClientLocal 1056 Exported Function
I_RpcCompleteAndFree 1062 Exported Function
I_RpcClearMutex 1061 Exported Function
I_RpcConnectionSetSockBuffSize 1064 Exported Function
I_RpcConnectionInqSockBuffSize 1063 Exported Function
I_RpcBindingSetPrivateOption 1058 Exported Function
I_RpcBindingIsServerLocal 1057 Exported Function
I_RpcCertProcessAndProvision 1060 Exported Function
I_RpcBindingToStaticStringBindingW 1059 Exported Function
NdrFreeBuffer 1239 Exported Function
NdrFixedArrayUnmarshall 1238 Exported Function
NdrFullPointerInsertRefId 1012 Exported Function
NdrFullPointerFree 1011 Exported Function
NdrFixedArrayFree 1235 Exported Function
NdrFixedArrayBufferSize 1234 Exported Function
NdrFixedArrayMemorySize 1237 Exported Function
NdrFixedArrayMarshall 1236 Exported Function
NdrFullPointerQueryPointer 1013 Exported Function
NdrGetDcomProtocolVersion 1244 Exported Function
NdrGetBuffer 1243 Exported Function
NdrGetSimpleTypeBufferSize 1246 Exported Function
NdrGetSimpleTypeBufferAlignment 1245 Exported Function
NdrFullPointerXlatFree 1240 Exported Function
NdrFullPointerQueryRefId 1014 Exported Function
NdrGetBaseInterfaceFromStub 1242 Exported Function
NdrFullPointerXlatInit 1241 Exported Function
NdrEncapsulatedUnionUnmarshall 1233 Exported Function
NdrCStdStubBuffer_Release 1171 Exported Function
NdrCStdStubBuffer2_Release 1170 Exported Function
NdrDcomAsyncClientCall2 1223 Exported Function
NdrDcomAsyncClientCall 1222 Exported Function
NdrCorrelationInitialize 1219 Exported Function
NdrCorrelationFree 1218 Exported Function
NdrCreateServerInterfaceFromStub 1221 Exported Function
NdrCorrelationPass 1220 Exported Function
NdrDcomAsyncStubCall 1224 Exported Function
NdrEncapsulatedUnionFree 1230 Exported Function
NdrEncapsulatedUnionBufferSize 1229 Exported Function
NdrEncapsulatedUnionMemorySize 1232 Exported Function
NdrEncapsulatedUnionMarshall 1231 Exported Function
NdrDllGetClassObject 1226 Exported Function
NdrDllCanUnloadNow 1225 Exported Function
NdrDllUnregisterProxy 1228 Exported Function
NdrDllRegisterProxy 1227 Exported Function
NdrGetSimpleTypeMemorySize 1247 Exported Function
NdrNonConformantStringMemorySize 1271 Exported Function
NdrNonConformantStringMarshall 1270 Exported Function
NdrNonEncapsulatedUnionBufferSize 1273 Exported Function
NdrNonConformantStringUnmarshall 1272 Exported Function
NdrMesTypeEncode2 1266 Exported Function
NdrMesTypeEncode 1267 Exported Function
NdrNonConformantStringBufferSize 1269 Exported Function
NdrMesTypeFree2 1268 Exported Function
NdrNonEncapsulatedUnionFree 1274 Exported Function
NdrOleAllocate 1280 Exported Function
NdrNsSendReceive 1279 Exported Function
NdrOutInit 1282 Exported Function
NdrOleFree 1281 Exported Function
NdrNonEncapsulatedUnionMemorySize 1276 Exported Function
NdrNonEncapsulatedUnionMarshall 1275 Exported Function
NdrNsGetBuffer 1278 Exported Function
NdrNonEncapsulatedUnionUnmarshall 1277 Exported Function
NdrMesTypeDecode2 1264 Exported Function
NdrInterfacePointerMemorySize 1253 Exported Function
NdrInterfacePointerMarshall 1252 Exported Function
NdrMapCommAndFaultStatus 1255 Exported Function
NdrInterfacePointerUnmarshall 1254 Exported Function
NdrGetUserMarshalInfo 1249 Exported Function
NdrGetTypeFlags 1248 Exported Function
NdrInterfacePointerFree 1251 Exported Function
NdrInterfacePointerBufferSize 1250 Exported Function
NdrMesProcEncodeDecode 1256 Exported Function
NdrMesTypeAlignSize 1263 Exported Function
NdrMesSimpleTypeEncode 1261 Exported Function
NdrMesTypeDecode 1265 Exported Function
NdrMesTypeAlignSize2 1262 Exported Function
NdrMesProcEncodeDecode4 1258 Exported Function
NdrMesProcEncodeDecode2 1257 Exported Function
NdrMesSimpleTypeDecode 1260 Exported Function
NdrMesSimpleTypeAlignSize 1259 Exported Function
NDRCContextUnmarshall 1154 Exported Function
NDRCContextMarshall 1153 Exported Function
NdrClientCall 1173 Exported Function
NdrClearOutParameters 1172 Exported Function
NdrByteCountPointerMarshall 1168 Exported Function
NdrByteCountPointerFree 1167 Exported Function
NDRCContextBinding 1152 Exported Function
NdrByteCountPointerUnmarshall 1169 Exported Function
NdrClientCall2 1174 Exported Function
NdrComplexArrayBufferSize 1180 Exported Function
NdrClientInitializeNew 1179 Exported Function
NdrComplexArrayMarshall 1182 Exported Function
NdrComplexArrayFree 1181 Exported Function
NdrClientContextMarshall 1176 Exported Function
NdrClientCall4 1175 Exported Function
NdrClientInitialize 1178 Exported Function
NdrClientContextUnmarshall 1177 Exported Function
NdrByteCountPointerBufferSize 1166 Exported Function
MesEncodeDynBufferHandleCreate 1146 Exported Function
MesDecodeIncrementalHandleCreate 1145 Exported Function
MesEncodeIncrementalHandleCreate 1148 Exported Function
MesEncodeFixedBufferHandleCreate 1147 Exported Function
long_from_ndr_temp 1563 Exported Function
long_from_ndr 1562 Exported Function
MesDecodeBufferHandleCreate 1144 Exported Function
MesBufferHandleReset 1143 Exported Function
MesHandleFree 1149 Exported Function
NdrAsyncClientCall 1163 Exported Function
NdrAllocate 1162 Exported Function
NdrAsyncServerCall 1165 Exported Function
NdrAsyncClientCall2 1164 Exported Function
MesInqProcEncodingId 1151 Exported Function
MesIncrementalHandleReset 1150 Exported Function
MIDL_wchar_strlen 1142 Exported Function
MIDL_wchar_strcpy 1141 Exported Function
NdrComplexArrayMemorySize 1183 Exported Function
NdrConformantVaryingArrayMemorySize 1207 Exported Function
NdrConformantVaryingArrayMarshall 1206 Exported Function
NdrConformantVaryingStructBufferSize 1209 Exported Function
NdrConformantVaryingArrayUnmarshall 1208 Exported Function
NdrConformantStructUnmarshall 1203 Exported Function
NdrConformantStructMemorySize 1202 Exported Function
NdrConformantVaryingArrayFree 1205 Exported Function
NdrConformantVaryingArrayBufferSize 1204 Exported Function
NdrConformantVaryingStructFree 1210 Exported Function
NdrConvert 1217 Exported Function
NdrContextHandleSize 1215 Exported Function
NDRcopy 1161 Exported Function
NdrConvert2 1216 Exported Function
NdrConformantVaryingStructMemorySize 1212 Exported Function
NdrConformantVaryingStructMarshall 1211 Exported Function
NdrContextHandleInitialize 1214 Exported Function
NdrConformantVaryingStructUnmarshall 1213 Exported Function
NdrConformantStructMarshall 1201 Exported Function
NdrComplexStructUnmarshall 1189 Exported Function
NdrComplexStructMemorySize 1188 Exported Function
NdrConformantArrayFree 1191 Exported Function
NdrConformantArrayBufferSize 1190 Exported Function
NdrComplexStructBufferSize 1185 Exported Function
NdrComplexArrayUnmarshall 1184 Exported Function
NdrComplexStructMarshall 1187 Exported Function
NdrComplexStructFree 1186 Exported Function
NdrConformantArrayMarshall 1192 Exported Function
NdrConformantStringUnmarshall 1198 Exported Function
NdrConformantStringMemorySize 1197 Exported Function
NdrConformantStructFree 1200 Exported Function
NdrConformantStructBufferSize 1199 Exported Function
NdrConformantArrayUnmarshall 1194 Exported Function
NdrConformantArrayMemorySize 1193 Exported Function
NdrConformantStringMarshall 1196 Exported Function
NdrConformantStringBufferSize 1195 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcrt4.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/82b83b9cc6f507250adb3eb6a9ff64aaf4d2ba121161d11291d33b888f490361/detection/

Possible Misuse

The following table contains possible examples of rpcrt4.dll being misused. While rpcrt4.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_access_win_in_memory_assembly_execution.yml - CallTrace\|contains: '\|C:\WINDOWS\System32\RPCRT4.dll+' # attempt to save the rule with a broader filter DRL 1.0
signature-base thor-hacktools.yar $s0 = “RPCRT4.DLL” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.