rpcrt4.dll

  • File Path: C:\Windows\system32\rpcrt4.dll
  • Description: Remote Procedure Call Runtime

Hashes

Type Hash
MD5 6EFC1421F36229AFA167EFCFCBA75219
SHA1 284C0C293EF2BD85C4834BB1B6178F32B08E8A71
SHA256 C81B48FD6C9A69C5B1E9F3AFF0DEED60455EC6A2B026385E1EF1C244F78B48AB
SHA384 CA8024BFA4DAE4B6BCB156BBAEE6C3C1865840605EEF34AD6962AB0C1BDEDAD5DDC0B987FEABC1E38B3EC551E8C743B1
SHA512 6B5769D492BCD67A8282DE9D4F6986557375752BB7E989E45310DF4508C84DE945BFDEF7C20D1C01A05467D5E5082431AA571CE38671C4F9DE83A24CF94F3310
SSDEEP 24576:ORW/MS4eeVQgZfVQxfMqEg75byVIypcqNGNZ1kvdwshD:K39fMf2e5mRuquZqvdDD
IMP 56CE8DAB2B6AAC5A2EF36E9C76FE8FEA
PESHA1 4D5300A9DEC3F10A86A2F205372B1AF9F7EEBE9D
PE256 8C9485AF9F702C4126CAEB049489E130411D72A4737D744C221B0FEF1E425271

DLL Exports:

Function Name Ordinal Type
RpcAsyncGetCallStatus 1371 Exported Function
RpcAsyncCompleteCall 1370 Exported Function
RpcAsyncRegisterInfo 1373 Exported Function
RpcAsyncInitializeHandle 1372 Exported Function
pfnUnmarshallRoutines 1021 Exported Function
pfnSizeRoutines 1020 Exported Function
RpcAsyncCancelCall 1369 Exported Function
RpcAsyncAbortCall 1368 Exported Function
RpcBindingBind 1374 Exported Function
RpcBindingFromStringBindingW 1380 Exported Function
RpcBindingFromStringBindingA 1379 Exported Function
RpcBindingInqAuthClientExA 1382 Exported Function
RpcBindingInqAuthClientA 1381 Exported Function
RpcBindingCreateA 1376 Exported Function
RpcBindingCopy 1375 Exported Function
RpcBindingFree 1378 Exported Function
RpcBindingCreateW 1377 Exported Function
NdrVaryingArrayBufferSize 1349 Exported Function
NdrUserMarshalUnmarshall 1348 Exported Function
NdrVaryingArrayMarshall 1351 Exported Function
NdrVaryingArrayFree 1350 Exported Function
NdrUserMarshalMarshall 1345 Exported Function
NdrUserMarshalFree 1344 Exported Function
NdrUserMarshalSimpleTypeConvert 1347 Exported Function
NdrUserMarshalMemorySize 1346 Exported Function
NdrVaryingArrayMemorySize 1352 Exported Function
NdrXmitOrRepAsUnmarshall 1358 Exported Function
NdrXmitOrRepAsMemorySize 1357 Exported Function
pfnMarshallRoutines 1019 Exported Function
pfnFreeRoutines 1018 Exported Function
NdrXmitOrRepAsBufferSize 1354 Exported Function
NdrVaryingArrayUnmarshall 1353 Exported Function
NdrXmitOrRepAsMarshall 1356 Exported Function
NdrXmitOrRepAsFree 1355 Exported Function
RpcBindingInqAuthClientExW 1383 Exported Function
RpcCertGeneratePrincipalNameW 1406 Exported Function
RpcCertGeneratePrincipalNameA 1405 Exported Function
RpcEpRegisterA 1407 Exported Function
RpcCertMatchPrincipalName 1017 Exported Function
RpcBindingVectorFree 1402 Exported Function
RpcBindingUnbind 1401 Exported Function
RpcCancelThreadEx 1404 Exported Function
RpcCancelThread 1403 Exported Function
RpcEpRegisterNoReplaceA 1408 Exported Function
RpcErrorClearInformation 1414 Exported Function
RpcErrorAddRecord 1413 Exported Function
RpcErrorGetNextRecord 1416 Exported Function
RpcErrorEndEnumeration 1415 Exported Function
RpcEpRegisterW 1410 Exported Function
RpcEpRegisterNoReplaceW 1409 Exported Function
RpcEpUnregister 1412 Exported Function
RpcEpResolveBinding 1411 Exported Function
RpcBindingInqObject 1389 Exported Function
RpcBindingInqAuthInfoW 1388 Exported Function
RpcBindingReset 1391 Exported Function
RpcBindingInqOption 1390 Exported Function
RpcBindingInqAuthInfoA 1385 Exported Function
RpcBindingInqAuthClientW 1384 Exported Function
RpcBindingInqAuthInfoExW 1387 Exported Function
RpcBindingInqAuthInfoExA 1386 Exported Function
RpcBindingServerFromClient 1392 Exported Function
RpcBindingSetOption 1398 Exported Function
RpcBindingSetObject 1397 Exported Function
RpcBindingToStringBindingW 1400 Exported Function
RpcBindingToStringBindingA 1399 Exported Function
RpcBindingSetAuthInfoExA 1394 Exported Function
RpcBindingSetAuthInfoA 1393 Exported Function
RpcBindingSetAuthInfoW 1396 Exported Function
RpcBindingSetAuthInfoExW 1395 Exported Function
NdrRangeUnmarshall 1303 Exported Function
NdrpVarVtOfTypeDesc 1367 Exported Function
NdrRpcSmClientFree 1305 Exported Function
NdrRpcSmClientAllocate 1304 Exported Function
NdrProxyGetBuffer 1300 Exported Function
NdrProxyFreeBuffer 1299 Exported Function
NdrProxySendReceive 1302 Exported Function
NdrProxyInitialize 1301 Exported Function
NdrRpcSmSetClientToOsf 1306 Exported Function
NDRSContextMarshall2 1154 Exported Function
NDRSContextMarshall 1153 Exported Function
NDRSContextUnmarshall 1156 Exported Function
NDRSContextMarshallEx 1155 Exported Function
NdrRpcSsDefaultFree 1308 Exported Function
NdrRpcSsDefaultAllocate 1307 Exported Function
NdrRpcSsEnableAllocate 1310 Exported Function
NdrRpcSsDisableAllocate 1309 Exported Function
NdrpGetProcFormatString 1361 Exported Function
NdrpCreateStub 1360 Exported Function
NdrpGetTypeGenCookie 1363 Exported Function
NdrpGetTypeFormatString 1362 Exported Function
NdrPartialIgnoreServerUnmarshall 1292 Exported Function
NdrPartialIgnoreServerInitialize 1291 Exported Function
NdrpCreateProxy 1359 Exported Function
NdrpClientCall2 1016 Exported Function
NdrpMemoryIncrement 1364 Exported Function
NdrpReleaseTypeFormatString 1365 Exported Function
NdrPointerUnmarshall 1297 Exported Function
NdrProxyErrorHandler 1298 Exported Function
NdrpReleaseTypeGenCookie 1366 Exported Function
NdrPointerFree 1294 Exported Function
NdrPointerBufferSize 1293 Exported Function
NdrPointerMemorySize 1296 Exported Function
NdrPointerMarshall 1295 Exported Function
NDRSContextUnmarshall2 1157 Exported Function
NdrStubCall3 1332 Exported Function
NdrStubCall2 1331 Exported Function
NdrStubGetBuffer 1334 Exported Function
NdrStubForwardingFunction 1333 Exported Function
NdrSimpleStructUnmarshall 1328 Exported Function
NdrSimpleStructMemorySize 1327 Exported Function
NdrSimpleTypeUnmarshall 1330 Exported Function
NdrSimpleTypeMarshall 1329 Exported Function
NdrStubInitialize 1335 Exported Function
NdrTypeUnmarshall 1341 Exported Function
NdrTypeSize 1340 Exported Function
NdrUserMarshalBufferSize 1343 Exported Function
NdrUnmarshallBasetypeInline 1342 Exported Function
NdrTypeFlags 1337 Exported Function
NdrStubInitializeMarshall 1336 Exported Function
NdrTypeMarshall 1339 Exported Function
NdrTypeFree 1338 Exported Function
NdrServerContextMarshall 1315 Exported Function
NdrServerCallNdr64 1314 Exported Function
NdrServerContextNewUnmarshall 1317 Exported Function
NdrServerContextNewMarshall 1316 Exported Function
NdrSendReceive 1311 Exported Function
NDRSContextUnmarshallEx 1158 Exported Function
NdrServerCallAll 1313 Exported Function
NdrServerCall2 1312 Exported Function
NdrServerContextUnmarshall 1318 Exported Function
NdrSimpleStructBufferSize 1324 Exported Function
NdrServerInitializeUnmarshall 1323 Exported Function
NdrSimpleStructMarshall 1326 Exported Function
NdrSimpleStructFree 1325 Exported Function
NdrServerInitializeMarshall 1320 Exported Function
NdrServerInitialize 1319 Exported Function
NdrServerInitializePartial 1322 Exported Function
NdrServerInitializeNew 1321 Exported Function
RpcErrorGetNumberOfRecords 1417 Exported Function
RpcSmAllocate 1509 Exported Function
RpcServerYield 1508 Exported Function
RpcSmDestroyClientContext 1511 Exported Function
RpcSmClientFree 1510 Exported Function
RpcServerUseProtseqIfExW 1505 Exported Function
RpcServerUseProtseqIfExA 1504 Exported Function
RpcServerUseProtseqW 1507 Exported Function
RpcServerUseProtseqIfW 1506 Exported Function
RpcSmDisableAllocate 1512 Exported Function
RpcSmSwapClientAllocFree 1518 Exported Function
RpcSmSetThreadHandle 1517 Exported Function
RpcSsContextLockExclusive 1520 Exported Function
RpcSsAllocate 1519 Exported Function
RpcSmFree 1514 Exported Function
RpcSmEnableAllocate 1513 Exported Function
RpcSmSetClientAllocFree 1516 Exported Function
RpcSmGetThreadHandle 1515 Exported Function
RpcServerUseAllProtseqs 1492 Exported Function
RpcServerUnsubscribeForNotification 1491 Exported Function
RpcServerUseAllProtseqsIf 1494 Exported Function
RpcServerUseAllProtseqsEx 1493 Exported Function
RpcServerTestCancel 1488 Exported Function
RpcServerSubscribeForNotification 1487 Exported Function
RpcServerUnregisterIfEx 1490 Exported Function
RpcServerUnregisterIf 1489 Exported Function
RpcServerUseAllProtseqsIfEx 1495 Exported Function
RpcServerUseProtseqExA 1501 Exported Function
RpcServerUseProtseqEpW 1500 Exported Function
RpcServerUseProtseqIfA 1503 Exported Function
RpcServerUseProtseqExW 1502 Exported Function
RpcServerUseProtseqEpA 1497 Exported Function
RpcServerUseProtseqA 1496 Exported Function
RpcServerUseProtseqEpExW 1499 Exported Function
RpcServerUseProtseqEpExA 1498 Exported Function
RpcSsContextLockShared 1521 Exported Function
TowerExplode 1544 Exported Function
TowerConstruct 1543 Exported Function
UuidCreate 1546 Exported Function
UuidCompare 1545 Exported Function
SimpleTypeAlignment 1540 Exported Function
RpcUserFree 1539 Exported Function
SimpleTypeMemorySize 1542 Exported Function
SimpleTypeBufferSize 1541 Exported Function
UuidCreateNil 1547 Exported Function
UuidIsNil 1553 Exported Function
UuidHash 1552 Exported Function
UuidToStringW 1555 Exported Function
UuidToStringA 1554 Exported Function
UuidEqual 1549 Exported Function
UuidCreateSequential 1548 Exported Function
UuidFromStringW 1551 Exported Function
UuidFromStringA 1550 Exported Function
RpcSsGetContextBinding 1527 Exported Function
RpcSsFree 1526 Exported Function
RpcSsSetClientAllocFree 1529 Exported Function
RpcSsGetThreadHandle 1528 Exported Function
RpcSsDisableAllocate 1523 Exported Function
RpcSsDestroyClientContext 1522 Exported Function
RpcSsEnableAllocate 1525 Exported Function
RpcSsDontSerializeContext 1524 Exported Function
RpcSsSetThreadHandle 1530 Exported Function
RpcStringFreeA 1536 Exported Function
RpcStringBindingParseW 1535 Exported Function
RpcTestCancel 1538 Exported Function
RpcStringFreeW 1537 Exported Function
RpcStringBindingComposeA 1532 Exported Function
RpcSsSwapClientAllocFree 1531 Exported Function
RpcStringBindingParseA 1534 Exported Function
RpcStringBindingComposeW 1533 Exported Function
RpcMgmtInqServerPrincNameW 1440 Exported Function
RpcMgmtInqServerPrincNameA 1439 Exported Function
RpcMgmtIsServerListening 1442 Exported Function
RpcMgmtInqStats 1441 Exported Function
RpcMgmtInqComTimeout 1436 Exported Function
RpcMgmtEpUnregister 1435 Exported Function
RpcMgmtInqIfIds 1438 Exported Function
RpcMgmtInqDefaultProtectLevel 1437 Exported Function
RpcMgmtSetAuthorizationFn 1443 Exported Function
RpcMgmtWaitServerListen 1449 Exported Function
RpcMgmtStopServerListening 1448 Exported Function
RpcNetworkInqProtseqsW 1451 Exported Function
RpcNetworkInqProtseqsA 1450 Exported Function
RpcMgmtSetComTimeout 1445 Exported Function
RpcMgmtSetCancelTimeout 1444 Exported Function
RpcMgmtStatsVectorFree 1447 Exported Function
RpcMgmtSetServerStackSize 1446 Exported Function
RpcFreeAuthorizationContext 1423 Exported Function
RpcExceptionFilter 1422 Exported Function
RpcIfIdVectorFree 1425 Exported Function
RpcGetAuthorizationContextForClient 1424 Exported Function
RpcErrorResetEnumeration 1419 Exported Function
RpcErrorLoadErrorInfo 1418 Exported Function
RpcErrorStartEnumeration 1421 Exported Function
RpcErrorSaveErrorInfo 1420 Exported Function
RpcIfInqId 1426 Exported Function
RpcMgmtEpEltInqDone 1432 Exported Function
RpcMgmtEpEltInqBegin 1431 Exported Function
RpcMgmtEpEltInqNextW 1434 Exported Function
RpcMgmtEpEltInqNextA 1433 Exported Function
RpcImpersonateClient2 1428 Exported Function
RpcImpersonateClient 1427 Exported Function
RpcMgmtEnableIdleCleanup 1430 Exported Function
RpcImpersonateClientContainer 1429 Exported Function
RpcNetworkIsProtseqValidA 1452 Exported Function
RpcServerInterfaceGroupClose 1475 Exported Function
RpcServerInterfaceGroupActivate 1474 Exported Function
RpcServerInterfaceGroupCreateW 1477 Exported Function
RpcServerInterfaceGroupCreateA 1476 Exported Function
RpcServerInqDefaultPrincNameA 1471 Exported Function
RpcServerInqCallAttributesW 1470 Exported Function
RpcServerInqIf 1473 Exported Function
RpcServerInqDefaultPrincNameW 1472 Exported Function
RpcServerInterfaceGroupDeactivate 1478 Exported Function
RpcServerRegisterIf2 1484 Exported Function
RpcServerRegisterIf 1483 Exported Function
RpcServerRegisterIfEx 1486 Exported Function
RpcServerRegisterIf3 1485 Exported Function
RpcServerListen 1480 Exported Function
RpcServerInterfaceGroupInqBindings 1479 Exported Function
RpcServerRegisterAuthInfoW 1482 Exported Function
RpcServerRegisterAuthInfoA 1481 Exported Function
RpcObjectSetType 1458 Exported Function
RpcObjectSetInqFn 1457 Exported Function
RpcProtseqVectorFreeW 1460 Exported Function
RpcProtseqVectorFreeA 1459 Exported Function
RpcNsBindingInqEntryNameA 1454 Exported Function
RpcNetworkIsProtseqValidW 1453 Exported Function
RpcObjectInqType 1456 Exported Function
RpcNsBindingInqEntryNameW 1455 Exported Function
RpcRaiseException 1461 Exported Function
RpcServerInqBindings 1467 Exported Function
RpcServerInqBindingHandle 1466 Exported Function
RpcServerInqCallAttributesA 1469 Exported Function
RpcServerInqBindingsEx 1468 Exported Function
RpcRevertToSelf 1463 Exported Function
RpcRevertContainerImpersonation 1462 Exported Function
RpcServerCompleteSecurityCallback 1465 Exported Function
RpcRevertToSelfEx 1464 Exported Function
NdrPartialIgnoreClientMarshall 1290 Exported Function
I_RpcServerInqAddressChangeFn 1108 Exported Function
I_RpcServerGetAssociationID 1107 Exported Function
I_RpcServerInqRemoteConnAddress 1110 Exported Function
I_RpcServerInqLocalConnAddress 1109 Exported Function
I_RpcServerAllocateIpPort 1104 Exported Function
I_RpcSendReceive 1103 Exported Function
I_RpcServerDisableExceptionFilter 1106 Exported Function
I_RpcServerCheckClientRestriction 1105 Exported Function
I_RpcServerInqTransportType 1111 Exported Function
I_RpcServerSubscribeForDisconnectNotification2 1117 Exported Function
I_RpcServerSubscribeForDisconnectNotification 1116 Exported Function
I_RpcServerUnsubscribeForDisconnectNotification 1118 Exported Function
I_RpcServerTurnOnOffKeepalives 1010 Exported Function
I_RpcServerRegisterForwardFunction 1113 Exported Function
I_RpcServerIsClientDisconnected 1112 Exported Function
I_RpcServerStartService 1115 Exported Function
I_RpcServerSetAddressChangeFn 1114 Exported Function
I_RpcNsBindingSetEntryNameW 1091 Exported Function
I_RpcNsBindingSetEntryNameA 1090 Exported Function
I_RpcNsInterfaceUnexported 1093 Exported Function
I_RpcNsInterfaceExported 1092 Exported Function
I_RpcNDRSContextEmergencyCleanup 1087 Exported Function
I_RpcNDRCGetWireRepresentation 1086 Exported Function
I_RpcNsBindingSetEntryName 1089 Exported Function
I_RpcNegotiateTransferSyntax 1088 Exported Function
I_RpcOpenClientProcess 1094 Exported Function
I_RpcRecordCalloutFailure 1099 Exported Function
I_RpcReceive 1098 Exported Function
I_RpcSend 1102 Exported Function
I_RpcRequestMutex 1100 Exported Function
I_RpcParseSecurity 1095 Exported Function
I_RpcOpenClientThread 1009 Exported Function
I_RpcReallocPipeBuffer 1097 Exported Function
I_RpcPauseExecution 1096 Exported Function
I_RpcServerUseProtseq2A 1119 Exported Function
I_UuidCreate 1140 Exported Function
I_RpcVerifierCorruptionExpected 1011 Exported Function
IUnknown_QueryInterface_Proxy 1038 Exported Function
IUnknown_AddRef_Proxy 1037 Exported Function
I_RpcTransIoCancelled 1137 Exported Function
I_RpcTransGetThreadEventThreadOptional 1136 Exported Function
I_RpcTurnOnEEInfoPropagation 1139 Exported Function
I_RpcTransServerNewConnection 1138 Exported Function
IUnknown_Release_Proxy 1039 Exported Function
MesEncodeIncrementalHandleCreate 1146 Exported Function
MesEncodeFixedBufferHandleCreate 1145 Exported Function
MesIncrementalHandleReset 1148 Exported Function
MesHandleFree 1147 Exported Function
MesDecodeBufferHandleCreate 1142 Exported Function
MesBufferHandleReset 1141 Exported Function
MesEncodeDynBufferHandleCreate 1144 Exported Function
MesDecodeIncrementalHandleCreate 1143 Exported Function
I_RpcSetSystemHandle 1125 Exported Function
I_RpcSetDCOMAppId 1124 Exported Function
I_RpcSsDontSerializeContext 1126 Exported Function
I_RpcSNCHOption 1101 Exported Function
I_RpcServerUseProtseqEp2A 1121 Exported Function
I_RpcServerUseProtseq2W 1120 Exported Function
I_RpcSessionStrictContextHandle 1123 Exported Function
I_RpcServerUseProtseqEp2W 1122 Exported Function
I_RpcSystemFunction001 1127 Exported Function
I_RpcTransDatagramAllocate2 1133 Exported Function
I_RpcTransDatagramAllocate 1132 Exported Function
I_RpcTransGetThreadEvent 1135 Exported Function
I_RpcTransDatagramFree 1134 Exported Function
I_RpcTransConnectionAllocatePacket 1129 Exported Function
I_RpcSystemHandleTypeSpecificWork 1128 Exported Function
I_RpcTransConnectionReallocPacket 1131 Exported Function
I_RpcTransConnectionFreePacket 1130 Exported Function
I_RpcBindingHandleToAsyncHandle 1047 Exported Function
I_RpcBindingCreateNP 1046 Exported Function
I_RpcBindingInqCurrentModifiedId 1001 Exported Function
I_RpcBindingInqClientTokenAttributes 1048 Exported Function
I_RpcBCacheAllocate 1043 Exported Function
I_RpcAsyncSetHandle 1042 Exported Function
I_RpcBindingCopy 1045 Exported Function
I_RpcBCacheFree 1044 Exported Function
I_RpcBindingInqDynamicEndpoint 1049 Exported Function
I_RpcBindingInqSecurityContextKeyInfo 1055 Exported Function
I_RpcBindingInqSecurityContext 1054 Exported Function
I_RpcBindingInqWireIdForSnego 1057 Exported Function
I_RpcBindingInqTransportType 1056 Exported Function
I_RpcBindingInqDynamicEndpointW 1051 Exported Function
I_RpcBindingInqDynamicEndpointA 1050 Exported Function
I_RpcBindingInqMarshalledTargetInfo 1053 Exported Function
I_RpcBindingInqLocalClientPID 1052 Exported Function
CStdStubBuffer_DebugServerQueryInterface 1025 Exported Function
CStdStubBuffer_CountRefs 1024 Exported Function
CStdStubBuffer_Disconnect 1027 Exported Function
CStdStubBuffer_DebugServerRelease 1026 Exported Function
CreateStubFromTypeInfo 1032 Exported Function
CreateProxyFromTypeInfo 1031 Exported Function
CStdStubBuffer_Connect 1023 Exported Function
CStdStubBuffer_AddRef 1022 Exported Function
CStdStubBuffer_Invoke 1028 Exported Function
DllRegisterServer 1036 Exported Function
DllGetClassObject 1035 Exported Function
I_RpcAsyncAbortCall 1041 Exported Function
I_RpcAllocate 1040 Exported Function
CStdStubBuffer_QueryInterface 1030 Exported Function
CStdStubBuffer_IsIIDSupported 1029 Exported Function
DceErrorInqTextW 1034 Exported Function
DceErrorInqTextA 1033 Exported Function
I_RpcBindingIsClientLocal 1058 Exported Function
I_RpcGetPortAllocationData 1079 Exported Function
I_RpcGetExtendedError 1078 Exported Function
I_RpcIfInqTransferSyntaxes 1081 Exported Function
I_RpcGetSystemHandle 1080 Exported Function
I_RpcGetBufferWithObject 1075 Exported Function
I_RpcGetBuffer 1074 Exported Function
I_RpcGetDefaultSD 1077 Exported Function
I_RpcGetCurrentCallHandle 1076 Exported Function
I_RpcInitFwImports 1004 Exported Function
I_RpcMarshalBindingHandleAndInterfaceForNDF 1084 Exported Function
I_RpcMapWin32Status 1083 Exported Function
I_RpcMgmtQueryDedicatedThreadPool 1008 Exported Function
I_RpcMgmtEnableDedicatedThreadPool 1085 Exported Function
I_RpcInitImports 1006 Exported Function
I_RpcInitHttpImports 1005 Exported Function
I_RpcLogEvent 1082 Exported Function
I_RpcInitNdrImports 1007 Exported Function
I_RpcCompleteAndFree 1064 Exported Function
I_RpcClearMutex 1063 Exported Function
I_RpcEnableWmiTrace 1066 Exported Function
I_RpcDeleteMutex 1065 Exported Function
I_RpcBindingSetPrivateOption 1060 Exported Function
I_RpcBindingIsServerLocal 1059 Exported Function
I_RpcCertProcessAndProvision 1062 Exported Function
I_RpcBindingToStaticStringBindingW 1061 Exported Function
I_RpcExceptionFilter 1067 Exported Function
I_RpcFreeSystemHandle 1072 Exported Function
I_RpcFreePipeBuffer 1071 Exported Function
I_RpcFwThisIsTheManager 1003 Exported Function
I_RpcFreeSystemHandleCollection 1073 Exported Function
I_RpcFixTransferSyntax 1002 Exported Function
I_RpcFilterDCOMActivation 1068 Exported Function
I_RpcFreeBuffer 1070 Exported Function
I_RpcFree 1069 Exported Function
MesInqProcEncodingId 1149 Exported Function
NdrGetDcomProtocolVersion 1243 Exported Function
NdrGetBuffer 1242 Exported Function
NdrGetSimpleTypeBufferSize 1245 Exported Function
NdrGetSimpleTypeBufferAlignment 1244 Exported Function
NdrFullPointerXlatFree 1239 Exported Function
NdrFullPointerQueryRefId 1015 Exported Function
NdrGetBaseInterfaceFromStub 1241 Exported Function
NdrFullPointerXlatInit 1240 Exported Function
NdrGetSimpleTypeMemorySize 1246 Exported Function
NdrInterfacePointerMemorySize 1252 Exported Function
NdrInterfacePointerMarshall 1251 Exported Function
NdrMapCommAndFaultStatus 1254 Exported Function
NdrInterfacePointerUnmarshall 1253 Exported Function
NdrGetUserMarshalInfo 1248 Exported Function
NdrGetTypeFlags 1247 Exported Function
NdrInterfacePointerFree 1250 Exported Function
NdrInterfacePointerBufferSize 1249 Exported Function
NdrEncapsulatedUnionMarshall 1230 Exported Function
NdrEncapsulatedUnionFree 1229 Exported Function
NdrEncapsulatedUnionUnmarshall 1232 Exported Function
NdrEncapsulatedUnionMemorySize 1231 Exported Function
NdrDllRegisterProxy 1226 Exported Function
NdrDllGetClassObject 1225 Exported Function
NdrEncapsulatedUnionBufferSize 1228 Exported Function
NdrDllUnregisterProxy 1227 Exported Function
NdrFixedArrayBufferSize 1233 Exported Function
NdrFullPointerFree 1012 Exported Function
NdrFreeBuffer 1238 Exported Function
NdrFullPointerQueryPointer 1014 Exported Function
NdrFullPointerInsertRefId 1013 Exported Function
NdrFixedArrayMarshall 1235 Exported Function
NdrFixedArrayFree 1234 Exported Function
NdrFixedArrayUnmarshall 1237 Exported Function
NdrFixedArrayMemorySize 1236 Exported Function
NdrMesProcEncodeDecode 1255 Exported Function
NdrNonConformantStringUnmarshall 1278 Exported Function
NdrNonConformantStringMemorySize 1277 Exported Function
NdrNonEncapsulatedUnionFree 1280 Exported Function
NdrNonEncapsulatedUnionBufferSize 1279 Exported Function
NdrMesTypeFree3 1274 Exported Function
NdrMesTypeFree2 1273 Exported Function
NdrNonConformantStringMarshall 1276 Exported Function
NdrNonConformantStringBufferSize 1275 Exported Function
NdrNonEncapsulatedUnionMarshall 1281 Exported Function
NdrOleFree 1287 Exported Function
NdrOleAllocate 1286 Exported Function
NdrPartialIgnoreClientBufferSize 1289 Exported Function
NdrOutInit 1288 Exported Function
NdrNonEncapsulatedUnionUnmarshall 1283 Exported Function
NdrNonEncapsulatedUnionMemorySize 1282 Exported Function
NdrNsSendReceive 1285 Exported Function
NdrNsGetBuffer 1284 Exported Function
NdrMesSimpleTypeDecodeAll 1261 Exported Function
NdrMesSimpleTypeDecode 1260 Exported Function
NdrMesSimpleTypeEncodeAll 1263 Exported Function
NdrMesSimpleTypeEncode 1262 Exported Function
NdrMesProcEncodeDecode3 1257 Exported Function
NdrMesProcEncodeDecode2 1256 Exported Function
NdrMesSimpleTypeAlignSizeAll 1259 Exported Function
NdrMesSimpleTypeAlignSize 1258 Exported Function
NdrMesTypeAlignSize 1264 Exported Function
NdrMesTypeEncode 1270 Exported Function
NdrMesTypeDecode3 1269 Exported Function
NdrMesTypeEncode3 1272 Exported Function
NdrMesTypeEncode2 1271 Exported Function
NdrMesTypeAlignSize3 1266 Exported Function
NdrMesTypeAlignSize2 1265 Exported Function
NdrMesTypeDecode2 1268 Exported Function
NdrMesTypeDecode 1267 Exported Function
NdrComplexArrayBufferSize 1180 Exported Function
NdrClientInitializeNew 1179 Exported Function
NdrComplexArrayMarshall 1182 Exported Function
NdrComplexArrayFree 1181 Exported Function
NdrClientContextMarshall 1176 Exported Function
NdrClientCall3 1175 Exported Function
NdrClientInitialize 1178 Exported Function
NdrClientContextUnmarshall 1177 Exported Function
NdrComplexArrayMemorySize 1183 Exported Function
NdrComplexStructUnmarshall 1189 Exported Function
NdrComplexStructMemorySize 1188 Exported Function
NdrConformantArrayFree 1191 Exported Function
NdrConformantArrayBufferSize 1190 Exported Function
NdrComplexStructBufferSize 1185 Exported Function
NdrComplexArrayUnmarshall 1184 Exported Function
NdrComplexStructMarshall 1187 Exported Function
NdrComplexStructFree 1186 Exported Function
NdrAllocate 1164 Exported Function
Ndr64DcomAsyncStubCall 1163 Exported Function
NdrAsyncServerCall 1166 Exported Function
NdrAsyncClientCall 1165 Exported Function
Ndr64AsyncServerCall64 1160 Exported Function
Ndr64AsyncClientCall 1159 Exported Function
Ndr64DcomAsyncClientCall 1162 Exported Function
Ndr64AsyncServerCallAll 1161 Exported Function
NdrByteCountPointerBufferSize 1167 Exported Function
NDRCContextUnmarshall 1152 Exported Function
NDRCContextMarshall 1151 Exported Function
NdrClientCall2 1174 Exported Function
NdrClearOutParameters 1173 Exported Function
NdrByteCountPointerMarshall 1169 Exported Function
NdrByteCountPointerFree 1168 Exported Function
NDRCContextBinding 1150 Exported Function
NdrByteCountPointerUnmarshall 1170 Exported Function
NdrConformantArrayMarshall 1192 Exported Function
NdrContextHandleSize 1215 Exported Function
NdrContextHandleInitialize 1214 Exported Function
NdrConvert2 1217 Exported Function
NdrConvert 1216 Exported Function
NdrConformantVaryingStructMarshall 1211 Exported Function
NdrConformantVaryingStructFree 1210 Exported Function
NdrConformantVaryingStructUnmarshall 1213 Exported Function
NdrConformantVaryingStructMemorySize 1212 Exported Function
NdrCorrelationFree 1218 Exported Function
NdrDcomAsyncClientCall 1222 Exported Function
NdrCStdStubBuffer_Release 1172 Exported Function
NdrDllCanUnloadNow 1224 Exported Function
NdrDcomAsyncStubCall 1223 Exported Function
NdrCorrelationPass 1220 Exported Function
NdrCorrelationInitialize 1219 Exported Function
NdrCStdStubBuffer2_Release 1171 Exported Function
NdrCreateServerInterfaceFromStub 1221 Exported Function
NdrConformantStringUnmarshall 1198 Exported Function
NdrConformantStringMemorySize 1197 Exported Function
NdrConformantStructFree 1200 Exported Function
NdrConformantStructBufferSize 1199 Exported Function
NdrConformantArrayUnmarshall 1194 Exported Function
NdrConformantArrayMemorySize 1193 Exported Function
NdrConformantStringMarshall 1196 Exported Function
NdrConformantStringBufferSize 1195 Exported Function
NdrConformantStructMarshall 1201 Exported Function
NdrConformantVaryingArrayMemorySize 1207 Exported Function
NdrConformantVaryingArrayMarshall 1206 Exported Function
NdrConformantVaryingStructBufferSize 1209 Exported Function
NdrConformantVaryingArrayUnmarshall 1208 Exported Function
NdrConformantStructUnmarshall 1203 Exported Function
NdrConformantStructMemorySize 1202 Exported Function
NdrConformantVaryingArrayFree 1205 Exported Function
NdrConformantVaryingArrayBufferSize 1204 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcrt4.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/c81b48fd6c9a69c5b1e9f3aff0deed60455ec6a2b026385e1ef1c244f78b48ab/detection/

Possible Misuse

The following table contains possible examples of rpcrt4.dll being misused. While rpcrt4.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_access_win_in_memory_assembly_execution.yml - CallTrace\|contains: '\|C:\WINDOWS\System32\RPCRT4.dll+' # attempt to save the rule with a broader filter DRL 1.0
signature-base thor-hacktools.yar $s0 = “RPCRT4.DLL” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.