rpcrt4.dll - Remote Procedure Call Runtime

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	rpcrt4.dll
size	664064 (0xa2200)
md5	d8bed6ba298dbaaf6f3d746739fcd333

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
1	0	326
147	30729	47
149	30729	12
138	30729	49
132	30729	108
146	30729	1
131	30729	16
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x53c3352a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x98400
SizeOfInitializedData	0x9c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x10569
BaseOfCode	0x10000
BaseOfData	0xb0000
ImageBase	0x7db50000
SectionAlignment	0x10000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0xf0000
SizeOfHeaders	0x400
CheckSum	0xae962
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x10000	0x95a0c	0x95c00	R-X CODE
.orpc	0xb0000	0x27c5	0x2800	R-X CODE
.data	0xc0000	0xf64	0xe00	RW- IDATA
.rsrc	0xd0000	0x3c50	0x3e00	R-- IDATA
.reloc	0xe0000	0x4e00	0x4e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x10f40	0x4692
IMPORT	0xa3920	0x1e0
RESOURCE	0xd0000	0x3c50
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xe0000	0x4e00
DEBUG	0xa59ac	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x25d30	0x40
Bound_IAT	0	0
IAT	0x10000	0x498
Delay_IAT	0xa35ec	0xa0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	232
WEVT_TEMPLATE	#1	13994
VERSION	#1	936

module_name	hint	function_name
ntdll.dll	432	NtQueryValueKey
ntdll.dll	348	NtOpenKey
ntdll.dll	1220	RtlTimeToSecondsSince1980
ntdll.dll	182	NtAllocateUuids
ntdll.dll	429	NtQuerySystemTime
ntdll.dll	64	EtwEventWriteTransfer
ntdll.dll	52	EtwEventActivityIdControl
ntdll.dll	53	EtwEventEnabled
ntdll.dll	189	NtAlpcCreateResourceReserve
ntdll.dll	185	NtAlpcCancelMessage
ntdll.dll	195	NtAlpcDeleteSecurityContext
ntdll.dll	191	NtAlpcCreateSecurityContext
ntdll.dll	186	NtAlpcConnectPort
ntdll.dll	200	NtAlpcQueryInformation
ntdll.dll	248	NtCreateSection
ntdll.dll	277	NtDuplicateToken
ntdll.dll	311	NtImpersonateAnonymousToken
ntdll.dll	196	NtAlpcDisconnectPort
ntdll.dll	190	NtAlpcCreateSectionView
ntdll.dll	188	NtAlpcCreatePortSection
ntdll.dll	204	NtAlpcSetInformation
ntdll.dll	658	RtlCheckForOrphanedCriticalSections
ntdll.dll	180	NtAllocateReserveObject
ntdll.dll	508	NtSetIoCompletionEx
ntdll.dll	436	NtQueueApcThreadEx
ntdll.dll	365	NtOpenThreadToken
ntdll.dll	1240	RtlUnicodeStringToAnsiString
ntdll.dll	936	RtlInitAnsiString
ntdll.dll	637	RtlAnsiStringToUnicodeString
ntdll.dll	1053	RtlMultiByteToUnicodeN
ntdll.dll	859	RtlFreeAnsiString
ntdll.dll	861	RtlFreeHeap
ntdll.dll	973	RtlIntegerToUnicodeString
ntdll.dll	1911	_vsnwprintf
ntdll.dll	2024	wcstoul
ntdll.dll	2019	wcsrchr
ntdll.dll	1872	_itoa
ntdll.dll	263	NtDelayExecution
ntdll.dll	1854	_alloca_probe
ntdll.dll	2022	wcstol
ntdll.dll	2006	wcschr
ntdll.dll	1959	memmove
ntdll.dll	1915	_wcslwr
ntdll.dll	2021	wcsstr
ntdll.dll	643	RtlApplicationVerifierStop
ntdll.dll	1233	RtlTryEnterCriticalSection
ntdll.dll	776	RtlDllShutdownInProgress
ntdll.dll	79	EtwTraceMessage
ntdll.dll	32	DbgPrint
ntdll.dll	655	RtlCaptureStackBackTrace
ntdll.dll	1961	memset
ntdll.dll	1916	_wcsnicmp
ntdll.dll	930	RtlImageNtHeader
ntdll.dll	866	RtlFreeUnicodeString
ntdll.dll	1914	_wcsicmp
ntdll.dll	600	RtlAcquireResourceShared
ntdll.dll	14	AlpcRegisterCompletionListWorkerThread
ntdll.dll	17	AlpcUnregisterCompletionListWorkerThread
ntdll.dll	9	AlpcGetMessageFromCompletionList
ntdll.dll	15	AlpcRundownCompletionList
ntdll.dll	4	AlpcFreeCompletionListMessage
ntdll.dll	581	NtWriteFile
ntdll.dll	299	NtFsControlFile
ntdll.dll	439	NtReadFile
ntdll.dll	1972	strchr
ntdll.dll	751	RtlDeleteCriticalSection
ntdll.dll	953	RtlInitializeCriticalSectionAndSpinCount
ntdll.dll	1928	atoi
ntdll.dll	1904	_ultoa
ntdll.dll	1906	_ultow
ntdll.dll	1925	_wtol
ntdll.dll	1929	atol
ntdll.dll	209	NtCancelIoFile
ntdll.dll	632	RtlAllocateHeap
ntdll.dll	1258	RtlUnwind
ntdll.dll	199	NtAlpcOpenSenderThread
ntdll.dll	198	NtAlpcOpenSenderProcess
ntdll.dll	1247	RtlUnicodeToMultiByteSize
ntdll.dll	1371	TpReleaseAlpcCompletion
ntdll.dll	1351	TpAlpcUnregisterCompletionList
ntdll.dll	1380	TpSetDefaultPoolStackInformation
ntdll.dll	1383	TpSetPoolStackInformation
ntdll.dll	1365	TpDisablePoolCallbackChecks
ntdll.dll	495	NtSetInformationFile
ntdll.dll	1343	TpAllocAlpcCompletionEx
ntdll.dll	197	NtAlpcImpersonateClientOfPort
ntdll.dll	599	RtlAcquireResourceExclusive
ntdll.dll	10	AlpcGetOutstandingCompletionListMessageCount
ntdll.dll	16	AlpcUnregisterCompletionList
ntdll.dll	1130	RtlReleaseResource
ntdll.dll	1352	TpCallbackIndependent
ntdll.dll	1065	RtlNtStatusToDosError
ntdll.dll	1957	memcpy
ntdll.dll	945	RtlInitUnicodeString
ntdll.dll	201	NtAlpcQueryInformationMessage
ntdll.dll	661	RtlClearAllBits
ntdll.dll	1162	RtlSetBits
ntdll.dll	662	RtlClearBits
ntdll.dll	57	EtwEventWrite
ntdll.dll	1412	WinSqmIncrementDWORD
ntdll.dll	1246	RtlUnicodeToMultiByteN
ntdll.dll	1112	RtlRaiseException
ntdll.dll	1139	RtlReportException
ntdll.dll	214	NtClose
ntdll.dll	501	NtSetInformationThread
ntdll.dll	194	NtAlpcDeleteSectionView
ntdll.dll	192	NtAlpcDeletePortSection
ntdll.dll	184	NtAlpcAcceptConnectPort
ntdll.dll	203	NtAlpcSendWaitReceivePort
ntdll.dll	187	NtAlpcCreatePort
ntdll.dll	949	RtlInitializeBitMap
ntdll.dll	1160	RtlSetAllBits
ntdll.dll	1337	SbSelectProcedure
ntdll.dll	1413	WinSqmIsOptedIn
ntdll.dll	1025	RtlLeaveCriticalSection
ntdll.dll	56	EtwEventUnregister
ntdll.dll	800	RtlEnterCriticalSection
ntdll.dll	126	LdrQueryImageFileExecutionOptions
ntdll.dll	427	NtQuerySystemInformation
ntdll.dll	903	RtlGetNtProductType
ntdll.dll	55	EtwEventRegister
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	6	UnhandledExceptionFilter
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	4	SetLastError
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	2	RaiseException
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	1	GetLastError
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	5	SetUnhandledExceptionFilter
API-MS-Win-Core-File-L1-1-0.dll	73	WriteFile
API-MS-Win-Core-File-L1-1-0.dll	10	FileTimeToSystemTime
API-MS-Win-Core-File-L1-1-0.dll	4	CreateFileW
API-MS-Win-Core-Handle-L1-1-0.dll	3	SetHandleInformation
API-MS-Win-Core-Handle-L1-1-0.dll	1	DuplicateHandle
API-MS-Win-Core-Handle-L1-1-0.dll		CloseHandle
API-MS-Win-Core-Heap-L1-1-0.dll	6	HeapFree
API-MS-Win-Core-Heap-L1-1-0.dll	2	HeapAlloc
API-MS-Win-Core-Heap-L1-1-0.dll		GetProcessHeap
API-MS-Win-Core-Heap-L1-1-0.dll	9	HeapReAlloc
API-MS-Win-Core-Interlocked-L1-1-0.dll	6	InterlockedFlushSList
API-MS-Win-Core-Interlocked-L1-1-0.dll	7	InterlockedIncrement
API-MS-Win-Core-Interlocked-L1-1-0.dll	2	InterlockedCompareExchange64
API-MS-Win-Core-Interlocked-L1-1-0.dll	4	InterlockedExchange
API-MS-Win-Core-Interlocked-L1-1-0.dll	3	InterlockedDecrement
API-MS-Win-Core-Interlocked-L1-1-0.dll		InitializeSListHead
API-MS-Win-Core-Interlocked-L1-1-0.dll	1	InterlockedCompareExchange
API-MS-Win-Core-Interlocked-L1-1-0.dll	8	InterlockedPopEntrySList
API-MS-Win-Core-Interlocked-L1-1-0.dll	11	QueryDepthSList
API-MS-Win-Core-Interlocked-L1-1-0.dll	9	InterlockedPushEntrySList
API-MS-Win-Core-Interlocked-L1-1-0.dll	5	InterlockedExchangeAdd
API-MS-Win-Core-IO-L1-1-0.dll	3	GetOverlappedResult
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	12	GetModuleHandleW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	15	LoadLibraryExW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	14	LoadLibraryExA
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	4	FreeLibrary
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	13	GetProcAddress
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	1	RegCreateKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	36	RegSetValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	3	RegDeleteKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	17	RegGetValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll		RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30	RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	29	RegQueryValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	24	RegOpenKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	27	RegQueryInfoKeyA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25	RegOpenKeyExW
API-MS-Win-Core-Memory-L1-1-0.dll	3	MapViewOfFileEx
API-MS-Win-Core-Memory-L1-1-0.dll	6	UnmapViewOfFile
API-MS-Win-Core-Memory-L1-1-0.dll	7	VirtualAlloc
API-MS-Win-Core-Memory-L1-1-0.dll	9	VirtualFree
API-MS-Win-Core-Memory-L1-1-0.dll	13	VirtualQuery
API-MS-Win-Core-Memory-L1-1-0.dll	11	VirtualProtect
API-MS-Win-Core-Misc-L1-1-0.dll	33	lstrlenW
API-MS-Win-Core-Misc-L1-1-0.dll	32	lstrlenA
API-MS-Win-Core-Misc-L1-1-0.dll	4	FormatMessageW
API-MS-Win-Core-Misc-L1-1-0.dll	3	FormatMessageA
API-MS-Win-Core-Misc-L1-1-0.dll	19	Sleep
API-MS-Win-Core-NamedPipe-L1-1-0.dll	3	DisconnectNamedPipe
API-MS-Win-Core-NamedPipe-L1-1-0.dll	8	SetNamedPipeHandleState
API-MS-Win-Core-NamedPipe-L1-1-0.dll	1	CreateNamedPipeW
API-MS-Win-Core-NamedPipe-L1-1-0.dll	10	WaitNamedPipeW
API-MS-Win-Core-NamedPipe-L1-1-0.dll	5	GetNamedPipeClientComputerNameW
API-MS-Win-Core-NamedPipe-L1-1-0.dll	9	TransactNamedPipe
API-MS-Win-Core-NamedPipe-L1-1-0.dll	6	ImpersonateNamedPipeClient
API-MS-Win-Core-NamedPipe-L1-1-0.dll		ConnectNamedPipe
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll	5	GetCommandLineW
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	41	SwitchToThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	22	GetThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	13	GetCurrentThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	31	QueueUserAPC
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	12	GetCurrentThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	42	TerminateProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	10	GetCurrentProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	37	SetThreadPriorityBoost
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	11	GetCurrentProcessId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	26	OpenProcessToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	44	TlsAlloc
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	47	TlsSetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	46	TlsGetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	28	OpenThreadToken
API-MS-Win-Core-String-L1-1-0.dll	2	CompareStringW
API-MS-Win-Core-Synch-L1-1-0.dll	41	WaitForSingleObjectEx
API-MS-Win-Core-Synch-L1-1-0.dll	15	InitializeCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	32	SetEvent
API-MS-Win-Core-Synch-L1-1-0.dll	6	CreateEventW
API-MS-Win-Core-Synch-L1-1-0.dll	30	ResetEvent
API-MS-Win-Core-Synch-L1-1-0.dll	13	DeleteCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	40	WaitForSingleObject
API-MS-Win-Core-Synch-L1-1-0.dll	19	LeaveCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	14	EnterCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	11	CreateSemaphoreExW
API-MS-Win-Core-Synch-L1-1-0.dll	29	ReleaseSemaphore
API-MS-Win-Core-Synch-L1-1-0.dll	31	SetCriticalSectionSpinCount
API-MS-Win-Core-SysInfo-L1-1-0.dll	1	GetComputerNameExW
API-MS-Win-Core-SysInfo-L1-1-0.dll	14	GetTickCount
API-MS-Win-Core-SysInfo-L1-1-0.dll	23	GlobalMemoryStatusEx
API-MS-Win-Core-SysInfo-L1-1-0.dll	11	GetSystemTimeAsFileTime
API-MS-Win-Core-SysInfo-L1-1-0.dll	8	GetSystemInfo
API-MS-Win-Core-SysInfo-L1-1-0.dll	18	GetVersion
API-MS-Win-Core-ThreadPool-L1-1-0.dll	13	CreateThreadpoolTimer
API-MS-Win-Core-ThreadPool-L1-1-0.dll	10	CreateThreadpool
API-MS-Win-Core-ThreadPool-L1-1-0.dll	36	TrySubmitThreadpoolCallback
API-MS-Win-Core-ThreadPool-L1-1-0.dll	3	CloseThreadpool
API-MS-Win-Core-ThreadPool-L1-1-0.dll	38	WaitForThreadpoolIoCallbacks
API-MS-Win-Core-ThreadPool-L1-1-0.dll	1	CancelThreadpoolIo
API-MS-Win-Core-ThreadPool-L1-1-0.dll	34	StartThreadpoolIo
API-MS-Win-Core-ThreadPool-L1-1-0.dll	6	CloseThreadpoolIo
API-MS-Win-Core-ThreadPool-L1-1-0.dll	39	WaitForThreadpoolTimerCallbacks
API-MS-Win-Core-ThreadPool-L1-1-0.dll	22	IsThreadpoolTimerSet
API-MS-Win-Core-ThreadPool-L1-1-0.dll	32	SetThreadpoolTimer
API-MS-Win-Core-ThreadPool-L1-1-0.dll	7	CloseThreadpoolTimer
API-MS-Win-Core-ThreadPool-L1-1-0.dll	12	CreateThreadpoolIo
API-MS-Win-Core-ThreadPool-L1-1-0.dll	17	CreateTimerQueueTimer
API-MS-Win-Core-ThreadPool-L1-1-0.dll	19	DeleteTimerQueueTimer
API-MS-Win-Security-Base-L1-1-0.dll	38	EqualSid
API-MS-Win-Security-Base-L1-1-0.dll	40	FreeSid
API-MS-Win-Security-Base-L1-1-0.dll	54	GetSidIdentifierAuthority
API-MS-Win-Security-Base-L1-1-0.dll	57	GetSidSubAuthorityCount
API-MS-Win-Security-Base-L1-1-0.dll	56	GetSidSubAuthority
API-MS-Win-Security-Base-L1-1-0.dll	55	GetSidLengthRequired
API-MS-Win-Security-Base-L1-1-0.dll	83	RevertToSelf
API-MS-Win-Security-Base-L1-1-0.dll	26	CopySid
API-MS-Win-Security-Base-L1-1-0.dll	45	GetLengthSid
API-MS-Win-Security-Base-L1-1-0.dll	48	GetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll	64	InitializeSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll	63	InitializeAcl
API-MS-Win-Security-Base-L1-1-0.dll	7	AddAccessAllowedAce
API-MS-Win-Security-Base-L1-1-0.dll	91	SetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll	69	IsValidSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll	47	GetSecurityDescriptorControl
API-MS-Win-Security-Base-L1-1-0.dll	50	GetSecurityDescriptorLength
API-MS-Win-Security-Base-L1-1-0.dll	74	MakeSelfRelativeSD
API-MS-Win-Security-Base-L1-1-0.dll	70	IsValidSid
API-MS-Win-Security-Base-L1-1-0.dll	20	AllocateAndInitializeSid
API-MS-Win-Security-Base-L1-1-0.dll	24	CheckTokenMembership
API-MS-Win-Security-Base-L1-1-0.dll	58	GetTokenInformation
SspiCli.dll	79	SspiEncodeAuthIdentityAsStrings
SspiCli.dll	93	SspiValidateAuthIdentity
SspiCli.dll	86	SspiIsAuthIdentityEncrypted
SspiCli.dll	76	SspiCompareAuthIdentities
SspiCli.dll	77	SspiCopyAuthIdentity
SspiCli.dll	83	SspiFreeAuthIdentity
SspiCli.dll	78	SspiDecryptAuthIdentity
SspiCli.dll	81	SspiEncryptAuthIdentity
SspiCli.dll	94	SspiZeroAuthIdentity
SspiCli.dll	70	SeciAllocateAndSetIPAddress
SspiCli.dll	71	SeciFreeCallContext
SspiCli.dll	84	SspiGetComputerNameForSPN
SspiCli.dll	87	SspiLocalFree
SspiCli.dll	33	LogonUserExExW
API-MS-Win-Core-DelayLoad-L1-1-0.dll		DelayLoadFailureHook
API-MS-Win-Core-Profile-L1-1-0.dll		QueryPerformanceCounter
KERNELBASE.dll	40	BemFreeContract
KERNELBASE.dll	38	BemCreateContractFrom

ord	entry_va	function_name
1	0x3717d	I_RpcBindingInqCurrentModifiedId
2	0x6945a	I_RpcFwThisIsTheManager
3	0x3a7f6	I_RpcInitFwImports
4	0x9b24b	I_RpcInitHttpImports
5	0x3a589	I_RpcInitImports
6	0x20011	I_RpcInitNdrImports
7	0x39da0	I_RpcMgmtQueryDedicatedThreadPool
8	0x65e2a	I_RpcOpenClientProcess
9	0x65e7c	I_RpcOpenClientThread
10	0x6a30e	I_RpcServerTurnOnOffKeepalives
11	0x6a4cd	I_RpcVerifierCorruptionExpected
12	0x58c51	NdrFullPointerFree
13	0x58bc6	NdrFullPointerInsertRefId
14	0x29f0b	NdrFullPointerQueryPointer
15	0x58b0e	NdrFullPointerQueryRefId
16	0x6aad3	RpcCertMatchPrincipalName
17	0xc0508	pfnFreeRoutines
18	0xc0504	pfnMarshallRoutines
19	0xc0500	pfnSizeRoutines
20	0xc04fc	pfnUnmarshallRoutines
21	0x3b2d0	CStdStubBuffer_AddRef
22	0x5b4cd	CStdStubBuffer_Connect
23	0x5b4e0	CStdStubBuffer_CountRefs
24	0x5b4f3	CStdStubBuffer_DebugServerQueryInterface
25	0x5b506	CStdStubBuffer_DebugServerRelease
26	0x3438a	CStdStubBuffer_Disconnect
27	0x35d76	CStdStubBuffer_Invoke
28	0x5b519	CStdStubBuffer_IsIIDSupported
29	0x3b2e2	CStdStubBuffer_QueryInterface
30	0x35175	CreateProxyFromTypeInfo
31	0x37b0a	CreateStubFromTypeInfo
32	0x6ad61	DceErrorInqTextA
33	0x6adb5	DceErrorInqTextW
34	0x5b52c	DllGetClassObject
35	0x5b558	DllRegisterServer
36	0x34288	IUnknown_AddRef_Proxy
37	0x3429b	IUnknown_QueryInterface_Proxy
38	0x34275	IUnknown_Release_Proxy
39	0x174da	I_RpcAllocate
40	0x6afd1	I_RpcAsyncAbortCall
41	0x34912	I_RpcAsyncSetHandle
42	0x3947a	I_RpcBCacheAllocate
43	0x3b943	I_RpcBCacheFree
44	0x1ba21	I_RpcBindingCopy
45	0x305f3	I_RpcBindingCreateNP
46	0x6bb77	I_RpcBindingHandleToAsyncHandle
47	0x15565	I_RpcBindingInqDynamicEndpoint
48	0x90bbc	I_RpcBindingInqDynamicEndpointA
49	0x3ed4f	I_RpcBindingInqDynamicEndpointW
50	0x3690b	I_RpcBindingInqLocalClientPID
51	0x6cac8	I_RpcBindingInqMarshalledTargetInfo
52	0x6b158	I_RpcBindingInqSecurityContext
53	0x6b3cd	I_RpcBindingInqSecurityContextKeyInfo
54	0x36e48	I_RpcBindingInqTransportType
55	0x6ca7a	I_RpcBindingInqWireIdForSnego
56	0x6a069	I_RpcBindingIsClientLocal
57	0x70a4d	I_RpcBindingToStaticStringBindingW
58	0x6ab6e	I_RpcCertProcessAndProvision
59	0x340a0	I_RpcClearMutex
60	0x6aee7	I_RpcCompleteAndFree
61	0x6ae50	I_RpcConnectionInqSockBuffSize
62	0x6ae8b	I_RpcConnectionSetSockBuffSize
63	0x7108b	I_RpcDeleteMutex
64	0x6a4ac	I_RpcEnableWmiTrace
65	0x25ca5	I_RpcExceptionFilter
66	0x74074	I_RpcFilterDCOMActivation
67	0x1a7e5	I_RpcFree
68	0x172da	I_RpcFreeBuffer
69	0x78a45	I_RpcFreePipeBuffer
70	0x16a75	I_RpcGetBuffer
71	0x16859	I_RpcGetBufferWithObject
72	0x78c0a	I_RpcGetCurrentCallHandle
73	0x7906a	I_RpcGetExtendedError
74	0x70b95	I_RpcGetPortAllocationData
75	0x3edd9	I_RpcIfInqTransferSyntaxes
76	0x442df	I_RpcLogEvent
77	0x1e90e	I_RpcMapWin32Status
78	0x6b1b0	I_RpcMarshalBindingHandleAndInterfaceForNDF
79	0x69a7a	I_RpcMgmtEnableDedicatedThreadPool
80	0x9910c	I_RpcNDRCGetWireRepresentation
81	0x99cb0	I_RpcNDRSContextEmergencyCleanup
82	0x78a80	I_RpcNegotiateTransferSyntax
83	0x1558c	I_RpcNsBindingSetEntryName
84	0x66587	I_RpcNsBindingSetEntryNameA
85	0x6b31a	I_RpcNsBindingSetEntryNameW
86	0x6b31a	I_RpcNsInterfaceExported
87	0x6b31a	I_RpcNsInterfaceUnexported
88	0x269a5	I_RpcParseSecurity
89	0x6aed7	I_RpcPauseExecution
90	0x78bdb	I_RpcReallocPipeBuffer
91	0x3b48f	I_RpcReceive
92	0x7d1f3	I_RpcRecordCalloutFailure
93	0x3407a	I_RpcRequestMutex
94	0x6af81	I_RpcSNCHOption
95	0x348c0	I_RpcSend
96	0x173f5	I_RpcSendReceive
97	0x7d49f	I_RpcServerAllocateIpPort
98	0x7ad28	I_RpcServerCheckClientRestriction
99	0x323fe	I_RpcServerInqAddressChangeFn
100	0x6a1ee	I_RpcServerInqLocalConnAddress
101	0x6a268	I_RpcServerInqRemoteConnAddress
102	0x78c1d	I_RpcServerInqTransportType
103	0x6a385	I_RpcServerIsClientDisconnected
104	0x69bbd	I_RpcServerRegisterForwardFunction
105	0x69bed	I_RpcServerSetAddressChangeFn
106	0x697fc	I_RpcServerStartService
107	0x7d70a	I_RpcServerUseProtseq2A
108	0x41136	I_RpcServerUseProtseq2W
109	0x7d8d9	I_RpcServerUseProtseqEp2A
110	0x3a172	I_RpcServerUseProtseqEp2W
111	0x6a2e2	I_RpcSessionStrictContextHandle
112	0x3b2f5	I_RpcSetDCOMAppId
113	0x992a8	I_RpcSsDontSerializeContext
114	0x79e01	I_RpcSystemFunction001
115	0x2ad86	I_RpcTransConnectionAllocatePacket
116	0x442ef	I_RpcTransConnectionFreePacket
117	0x6bac7	I_RpcTransConnectionReallocPacket
118	0x7f0c3	I_RpcTransDatagramAllocate2
119	0x7f06d	I_RpcTransDatagramAllocate
120	0x7fdfa	I_RpcTransDatagramFree
121	0x2b304	I_RpcTransGetThreadEvent
122	0x2d24e	I_RpcTransGetThreadEventThreadOptional
123	0x6e375	I_RpcTransIoCancelled
124	0x77adc	I_RpcTransServerNewConnection
125	0x6b19e	I_RpcTurnOnEEInfoPropagation
126	0x8022d	I_UuidCreate
127	0x99d5c	MIDL_wchar_strcpy
128	0x99d3c	MIDL_wchar_strlen
129	0x2491f	MesBufferHandleReset
130	0x385d6	MesDecodeBufferHandleCreate
131	0x5b89b	MesDecodeIncrementalHandleCreate
132	0x2a616	MesEncodeDynBufferHandleCreate
133	0x38081	MesEncodeFixedBufferHandleCreate
134	0x5b839	MesEncodeIncrementalHandleCreate
135	0x247c4	MesHandleFree
136	0x5b8fc	MesIncrementalHandleReset
137	0x5b9e8	MesInqProcEncodingId
138	0x18447	NDRCContextBinding
139	0x1817e	NDRCContextMarshall
140	0x9908b	NDRCContextUnmarshall
141	0x99660	NDRSContextMarshall2
142	0x99c8a	NDRSContextMarshall
143	0x99c67	NDRSContextMarshallEx
144	0x999f2	NDRSContextUnmarshall2
145	0x99cf9	NDRSContextUnmarshall
146	0x99d1c	NDRSContextUnmarshallEx
147	0x99e12	NDRcopy
148	0x42648	NdrAllocate
149	0xb0aae	NdrAsyncClientCall
150	0xb186e	NdrAsyncServerCall
151	0x59d14	NdrByteCountPointerBufferSize
152	0x5917f	NdrByteCountPointerFree
153	0x59788	NdrByteCountPointerMarshall
154	0x3e5d3	NdrByteCountPointerUnmarshall
155	0x35418	NdrCStdStubBuffer2_Release
156	0x34377	NdrCStdStubBuffer_Release
157	0xb10f5	NdrClearOutParameters
158	0xb1e5e	NdrClientCall
159	0xb0005	NdrClientCall2
160	0x5994c	NdrClientContextMarshall
161	0x5b23a	NdrClientContextUnmarshall
162	0x17079	NdrClientInitialize
163	0x1703f	NdrClientInitializeNew
164	0x3758c	NdrComplexArrayBufferSize
165	0x37974	NdrComplexArrayFree
166	0x375fd	NdrComplexArrayMarshall
167	0x25bad	NdrComplexArrayMemorySize
168	0x25ac3	NdrComplexArrayUnmarshall
169	0x21ebb	NdrComplexStructBufferSize
170	0x37830	NdrComplexStructFree
171	0x21d20	NdrComplexStructMarshall
172	0x24f8c	NdrComplexStructMemorySize
173	0x250f0	NdrComplexStructUnmarshall
174	0x21494	NdrConformantArrayBufferSize
175	0x35c76	NdrConformantArrayFree
176	0x214c0	NdrConformantArrayMarshall
177	0x2640f	NdrConformantArrayMemorySize
178	0x212b0	NdrConformantArrayUnmarshall
179	0x227a3	NdrConformantStringBufferSize
180	0x22691	NdrConformantStringMarshall
181	0x2837b	NdrConformantStringMemorySize
182	0x27009	NdrConformantStringUnmarshall
183	0x243cd	NdrConformantStructBufferSize
184	0x58e90	NdrConformantStructFree
185	0x242fd	NdrConformantStructMarshall
186	0x1c693	NdrConformantStructMemorySize
187	0x1951f	NdrConformantStructUnmarshall
188	0x22cf0	NdrConformantVaryingArrayBufferSize
189	0x58f82	NdrConformantVaryingArrayFree
190	0x22bf4	NdrConformantVaryingArrayMarshall
191	0x1c796	NdrConformantVaryingArrayMemorySize
192	0x1c1df	NdrConformantVaryingArrayUnmarshall
193	0x59bcc	NdrConformantVaryingStructBufferSize
194	0x58edd	NdrConformantVaryingStructFree
195	0x595e9	NdrConformantVaryingStructMarshall
196	0x5d385	NdrConformantVaryingStructMemorySize
197	0x5a77d	NdrConformantVaryingStructUnmarshall
198	0x5b2d7	NdrContextHandleInitialize
199	0x59ed4	NdrContextHandleSize
200	0x5d8bb	NdrConvert2
201	0x5d961	NdrConvert
202	0x16589	NdrCorrelationFree
203	0x187fa	NdrCorrelationInitialize
204	0x1883c	NdrCorrelationPass
205	0x5b57b	NdrCreateServerInterfaceFromStub
206	0x5b59b	NdrDcomAsyncClientCall
207	0x5b5cf	NdrDcomAsyncStubCall
208	0x343c2	NdrDllCanUnloadNow
209	0x34009	NdrDllGetClassObject
210	0x5b5fb	NdrDllRegisterProxy
211	0x5b627	NdrDllUnregisterProxy
212	0x59c75	NdrEncapsulatedUnionBufferSize
213	0x59027	NdrEncapsulatedUnionFree
214	0x596e8	NdrEncapsulatedUnionMarshall
215	0x5d53c	NdrEncapsulatedUnionMemorySize
216	0x5ad51	NdrEncapsulatedUnionUnmarshall
217	0x38cc1	NdrFixedArrayBufferSize
218	0x58f4e	NdrFixedArrayFree
219	0x38c3f	NdrFixedArrayMarshall
220	0x2a3a5	NdrFixedArrayMemorySize
221	0x27696	NdrFixedArrayUnmarshall
222	0x17f76	NdrFreeBuffer
223	0x1656e	NdrFullPointerXlatFree
224	0x2921c	NdrFullPointerXlatInit
225	0x5b653	NdrGetBaseInterfaceFromStub
226	0x17fae	NdrGetBuffer
227	0x5b67f	NdrGetDcomProtocolVersion
228	0x5f4d4	NdrGetSimpleTypeBufferAlignment
229	0x5f4ec	NdrGetSimpleTypeBufferSize
230	0x5f504	NdrGetSimpleTypeMemorySize
231	0x5f51c	NdrGetTypeFlags
232	0x34e84	NdrGetUserMarshalInfo
233	0x59e99	NdrInterfacePointerBufferSize
234	0x591dc	NdrInterfacePointerFree
235	0x598f1	NdrInterfacePointerMarshall
236	0x5d6c1	NdrInterfacePointerMemorySize
237	0x5b1e3	NdrInterfacePointerUnmarshall
238	0x43be7	NdrMapCommAndFaultStatus
239	0x5be0c	NdrMesProcEncodeDecode
240	0x5c0d5	NdrMesProcEncodeDecode2
241	0x5c519	NdrMesSimpleTypeAlignSize
242	0x5c602	NdrMesSimpleTypeDecode
243	0x5c556	NdrMesSimpleTypeEncode
244	0x382b4	NdrMesTypeAlignSize2
245	0x38520	NdrMesTypeAlignSize
246	0x386e2	NdrMesTypeDecode2
247	0x388b0	NdrMesTypeDecode
248	0x383e8	NdrMesTypeEncode2
249	0x381c5	NdrMesTypeEncode
250	0x5c385	NdrMesTypeFree2
251	0x3ecbe	NdrNonConformantStringBufferSize
252	0x3ec3b	NdrNonConformantStringMarshall
253	0x5d472	NdrNonConformantStringMemorySize
254	0x5ac2c	NdrNonConformantStringUnmarshall
255	0x281af	NdrNonEncapsulatedUnionBufferSize
256	0x590be	NdrNonEncapsulatedUnionFree
257	0x280a0	NdrNonEncapsulatedUnionMarshall
258	0x1d9c0	NdrNonEncapsulatedUnionMemorySize
259	0x1d7ab	NdrNonEncapsulatedUnionUnmarshall
260	0x5cb8f	NdrNsGetBuffer
261	0x5cb8f	NdrNsSendReceive
262	0x34031	NdrOleAllocate
263	0x35d0c	NdrOleFree
264	0x35da5	NdrOutInit
265	0x59f0a	NdrPartialIgnoreClientBufferSize
266	0x59a72	NdrPartialIgnoreClientMarshall
267	0x5f535	NdrPartialIgnoreServerInitialize
268	0x5b4a5	NdrPartialIgnoreServerUnmarshall
269	0x16bda	NdrPointerBufferSize
270	0x340b1	NdrPointerFree
271	0x16af4	NdrPointerMarshall
272	0x5d1af	NdrPointerMemorySize
273	0x191bc	NdrPointerUnmarshall
274	0x3901e	NdrProxyErrorHandler
275	0x43b38	NdrProxyFreeBuffer
276	0x43b4b	NdrProxyGetBuffer
277	0x43b5e	NdrProxyInitialize
278	0x43b7e	NdrProxySendReceive
279	0x21795	NdrRangeUnmarshall
280	0x6028d	NdrRpcSmClientAllocate
281	0x602c9	NdrRpcSmClientFree
282	0x6025e	NdrRpcSmSetClientToOsf
283	0x6027d	NdrRpcSsDefaultAllocate
284	0x3910d	NdrRpcSsDefaultFree
285	0x60238	NdrRpcSsDisableAllocate
286	0x601fb	NdrRpcSsEnableAllocate
287	0x180a8	NdrSendReceive
288	0xb1035	NdrServerCall2
289	0xb24d2	NdrServerCall
290	0x5998e	NdrServerContextMarshall
291	0x599c5	NdrServerContextNewMarshall
292	0x5b374	NdrServerContextNewUnmarshall
293	0x5b285	NdrServerContextUnmarshall
294	0x356f2	NdrServerInitialize
295	0x61252	NdrServerInitializeMarshall
296	0x3e9b6	NdrServerInitializeNew
297	0x5cb3b	NdrServerInitializePartial
298	0x5cc20	NdrServerInitializeUnmarshall
299	0x60741	NdrServerMarshall
300	0x60306	NdrServerUnmarshall
301	0x18d57	NdrSimpleStructBufferSize
302	0x40084	NdrSimpleStructFree
303	0x18c1d	NdrSimpleStructMarshall
304	0x197b5	NdrSimpleStructMemorySize
305	0x18c9a	NdrSimpleStructUnmarshall
306	0x2119f	NdrSimpleTypeMarshall
307	0x245c8	NdrSimpleTypeUnmarshall
308	0xb039b	NdrStubCall2
309	0xb24f0	NdrStubCall
310	0x3d334	NdrStubForwardingFunction
311	0x43b91	NdrStubGetBuffer
312	0x43ba4	NdrStubInitialize
313	0x5b69f	NdrStubInitializeMarshall
314	0x155d8	NdrTypeFlags
315	0x58d72	NdrTypeFree
316	0x59591	NdrTypeMarshall
317	0x59a9d	NdrTypeSize
318	0x5a0d9	NdrTypeUnmarshall
319	0xb08f2	NdrUnmarshallBasetypeInline
320	0x34d94	NdrUserMarshalBufferSize
321	0x37ac7	NdrUserMarshalFree
322	0x34c55	NdrUserMarshalMarshall
323	0x39059	NdrUserMarshalMemorySize
324	0x5ef8d	NdrUserMarshalSimpleTypeConvert
325	0x34f61	NdrUserMarshalUnmarshall
326	0x3d1c5	NdrVaryingArrayBufferSize
327	0x58fd7	NdrVaryingArrayFree
328	0x3d0f7	NdrVaryingArrayMarshall
329	0x3d782	NdrVaryingArrayMemorySize
330	0x3d5c1	NdrVaryingArrayUnmarshall
331	0x59d57	NdrXmitOrRepAsBufferSize
332	0x591a5	NdrXmitOrRepAsFree
333	0x597d5	NdrXmitOrRepAsMarshall
334	0x5d57d	NdrXmitOrRepAsMemorySize
335	0x5afa5	NdrXmitOrRepAsUnmarshall
336	0x5b6c1	NdrpCreateProxy
337	0x5b6f0	NdrpCreateStub
338	0x5b71f	NdrpGetProcFormatString
339	0x5b74e	NdrpGetTypeFormatString
340	0x5b77d	NdrpGetTypeGenCookie
341	0x21920	NdrpMemoryIncrement
342	0x5b7ac	NdrpReleaseTypeFormatString
343	0x5b7db	NdrpReleaseTypeGenCookie
344	0x5b80a	NdrpVarVtOfTypeDesc
345	0xb1d8a	RpcAsyncAbortCall
346	0x3dbac	RpcAsyncCancelCall
347	0xb0d7c	RpcAsyncCompleteCall
348	0x3bed6	RpcAsyncGetCallStatus
349	0xb020e	RpcAsyncInitializeHandle
350	0x90b95	RpcAsyncRegisterInfo
351	0x1e0a3	RpcBindingBind
352	0x26f7d	RpcBindingCopy
353	0x7e2d1	RpcBindingCreateA
354	0x1e190	RpcBindingCreateW
355	0x1a928	RpcBindingFree
356	0x438b4	RpcBindingFromStringBindingA
357	0x23701	RpcBindingFromStringBindingW
358	0x7e716	RpcBindingInqAuthClientA
359	0x7ddb1	RpcBindingInqAuthClientExA
360	0x69e2d	RpcBindingInqAuthClientExW
361	0x6a45f	RpcBindingInqAuthClientW
362	0x7e73d	RpcBindingInqAuthInfoA
363	0x7dfc9	RpcBindingInqAuthInfoExA
364	0x43c76	RpcBindingInqAuthInfoExW
365	0x6b43c	RpcBindingInqAuthInfoW
366	0x360b9	RpcBindingInqObject
367	0x70b1f	RpcBindingInqOption
368	0x6b2db	RpcBindingReset
369	0x6a159	RpcBindingServerFromClient
370	0x7e766	RpcBindingSetAuthInfoA
371	0x7e169	RpcBindingSetAuthInfoExA
372	0x23be5	RpcBindingSetAuthInfoExW
373	0x2a0fc	RpcBindingSetAuthInfoW
374	0x6b113	RpcBindingSetObject
375	0x26efe	RpcBindingSetOption
376	0x3ee99	RpcBindingToStringBindingA
377	0x3c016	RpcBindingToStringBindingW
378	0x244ea	RpcBindingUnbind
379	0x3f43d	RpcBindingVectorFree
380	0x790d1	RpcCancelThread
381	0x7910a	RpcCancelThreadEx
382	0x7e26d	RpcCertGeneratePrincipalNameA
383	0x6ab20	RpcCertGeneratePrincipalNameW
384	0x40c44	RpcEpRegisterA
385	0x80288	RpcEpRegisterNoReplaceA
386	0x80336	RpcEpRegisterNoReplaceW
387	0x40be5	RpcEpRegisterW
388	0x32409	RpcEpResolveBinding
389	0x3f4af	RpcEpUnregister
390	0x7d061	RpcErrorAddRecord
391	0x7d12e	RpcErrorClearInformation
392	0x41a14	RpcErrorEndEnumeration
393	0x41b27	RpcErrorGetNextRecord
394	0x7c14a	RpcErrorGetNumberOfRecords
395	0x7c17d	RpcErrorLoadErrorInfo
396	0x7c124	RpcErrorResetEnumeration
397	0x7c93d	RpcErrorSaveErrorInfo
398	0x41b6b	RpcErrorStartEnumeration
399	0x25cb2	RpcExceptionFilter
400	0x69a06	RpcFreeAuthorizationContext
401	0x69ea0	RpcGetAuthorizationContextForClient
402	0x69a84	RpcIfIdVectorFree
403	0x3ed93	RpcIfInqId
404	0x37d07	RpcImpersonateClient
405	0x6ad41	RpcMgmtEnableIdleCleanup
406	0x80395	RpcMgmtEpEltInqBegin
407	0x805ba	RpcMgmtEpEltInqDone
408	0x80607	RpcMgmtEpEltInqNextA
409	0x80911	RpcMgmtEpEltInqNextW
410	0x80901	RpcMgmtEpUnregister
411	0x6ae0a	RpcMgmtInqComTimeout
412	0x70aaa	RpcMgmtInqDefaultProtectLevel
413	0x6a0cd	RpcMgmtInqIfIds
414	0x7e209	RpcMgmtInqServerPrincNameA
415	0x44227	RpcMgmtInqServerPrincNameW
416	0x69846	RpcMgmtInqStats
417	0x43fc7	RpcMgmtIsServerListening
418	0x8097f	RpcMgmtSetAuthorizationFn
419	0x34659	RpcMgmtSetCancelTimeout
420	0x29e69	RpcMgmtSetComTimeout
421	0x69a34	RpcMgmtSetServerStackSize
422	0x23b7d	RpcMgmtStatsVectorFree
423	0x6990a	RpcMgmtStopServerListening
424	0x6994d	RpcMgmtWaitServerListen
425	0x7e5dc	RpcNetworkInqProtseqsA
426	0x69471	RpcNetworkInqProtseqsW
427	0x7d606	RpcNetworkIsProtseqValidA
428	0x6ad1b	RpcNetworkIsProtseqValidW
429	0x7dc4f	RpcNsBindingInqEntryNameA
430	0x6b31a	RpcNsBindingInqEntryNameW
431	0x69497	RpcObjectInqType
432	0x694e9	RpcObjectSetInqFn
433	0x6950f	RpcObjectSetType
434	0x7d6fa	RpcProtseqVectorFreeA
435	0x69535	RpcProtseqVectorFreeW
436	0x25c51	RpcRaiseException
437	0x3f8c3	RpcRevertToSelf
438	0x37d66	RpcRevertToSelfEx
439	0x69970	RpcServerCompleteSecurityCallback
440	0x69f65	RpcServerInqBindingHandle
441	0x409c2	RpcServerInqBindings
442	0x7de3d	RpcServerInqCallAttributesA
443	0x36d95	RpcServerInqCallAttributesW
444	0x69b5c	RpcServerInqDefaultPrincNameA
445	0x69ade	RpcServerInqDefaultPrincNameW
446	0x69589	RpcServerInqIf
447	0x40ae8	RpcServerListen
448	0x7dd44	RpcServerRegisterAuthInfoA
449	0x69df2	RpcServerRegisterAuthInfoW
450	0x3af77	RpcServerRegisterIf2
451	0x695b5	RpcServerRegisterIf
452	0x39c8d	RpcServerRegisterIfEx
453	0x69ff3	RpcServerSubscribeForNotification
454	0x78fe6	RpcServerTestCancel
455	0x35456	RpcServerUnregisterIf
456	0x695f8	RpcServerUnregisterIfEx
457	0x6a03a	RpcServerUnsubscribeForNotification
458	0x69dc3	RpcServerUseAllProtseqs
459	0x69c32	RpcServerUseAllProtseqsEx
460	0x696e4	RpcServerUseAllProtseqsIf
461	0x69651	RpcServerUseAllProtseqsIfEx
462	0x7d8a6	RpcServerUseProtseqA
463	0x7dae4	RpcServerUseProtseqEpA
464	0x7dac0	RpcServerUseProtseqEpExA
465	0x3a14e	RpcServerUseProtseqEpExW
466	0x3a119	RpcServerUseProtseqEpW
467	0x7d885	RpcServerUseProtseqExA
468	0x41115	RpcServerUseProtseqExW
469	0x7dc1a	RpcServerUseProtseqIfA
470	0x7db1a	RpcServerUseProtseqIfExA
471	0x69716	RpcServerUseProtseqIfExW
472	0x697c7	RpcServerUseProtseqIfW
473	0x410bd	RpcServerUseProtseqW
474	0x78f68	RpcServerYield
475	0x5fd91	RpcSmAllocate
476	0x5fe09	RpcSmClientFree
477	0x5fed1	RpcSmDestroyClientContext
478	0x5fe71	RpcSmDisableAllocate
479	0x5ff39	RpcSmEnableAllocate
480	0x5ff99	RpcSmFree
481	0x60001	RpcSmGetThreadHandle
482	0x60071	RpcSmSetClientAllocFree
483	0x600d9	RpcSmSetThreadHandle
484	0x60141	RpcSmSwapClientAllocFree
485	0x5f979	RpcSsAllocate
486	0x9931e	RpcSsContextLockExclusive
487	0x99386	RpcSsContextLockShared
488	0x990ac	RpcSsDestroyClientContext
489	0x5fafc	RpcSsDisableAllocate
490	0x155af	RpcSsDontSerializeContext
491	0x5fc20	RpcSsEnableAllocate
492	0x5fc2d	RpcSsFree
493	0x3c0e6	RpcSsGetContextBinding
494	0x5fc3a	RpcSsGetThreadHandle
495	0x5fc6f	RpcSsSetClientAllocFree
496	0x5fca4	RpcSsSetThreadHandle
497	0x5fd4d	RpcSsSwapClientAllocFree
498	0x4391c	RpcStringBindingComposeA
499	0x23968	RpcStringBindingComposeW
500	0x3f190	RpcStringBindingParseA
501	0x39675	RpcStringBindingParseW
502	0x440cd	RpcStringFreeA
503	0x23b7d	RpcStringFreeW
504	0x79040	RpcTestCancel
505	0x5cc9c	RpcUserFree
506	0x10860	SimpleTypeAlignment
507	0x10920	SimpleTypeBufferSize
508	0x109e0	SimpleTypeMemorySize
509	0x29472	TowerConstruct
510	0x29399	TowerExplode
511	0x80197	UuidCompare
512	0x2078f	UuidCreate
513	0x80102	UuidCreateNil
514	0x2a162	UuidCreateSequential
515	0x3c16d	UuidEqual
516	0x7e63d	UuidFromStringA
517	0x8013e	UuidFromStringW
518	0x8011a	UuidHash
519	0x3c149	UuidIsNil
520	0x7dce8	UuidToStringA
521	0x41fed	UuidToStringW
522	0x99db3	char_array_from_ndr
523	0x99d7f	char_from_ndr
524	0x99e31	data_from_ndr
525	0x9a702	data_into_ndr
526	0x9a206	data_size_ndr
527	0x9acca	double_array_from_ndr
528	0x9ac46	double_from_ndr
529	0x9af20	enum_from_ndr
530	0x9ab89	float_array_from_ndr
531	0x9ab1b	float_from_ndr
532	0x9ae92	long_array_from_ndr
533	0x9ae61	long_from_ndr
534	0x9aef1	long_from_ndr_temp
535	0x9adc4	short_array_from_ndr
536	0x9ad89	short_from_ndr
537	0x9ae28	short_from_ndr_temp
538	0x9a915	tree_into_ndr
539	0x9a556	tree_peek_ndr
540	0x9a3bd	tree_size_ndr

module_name	RPCRT4.dll
flags	0
timestamp	2014-07-14 00:33:15
version	0.0
ordinal_base	1
nFunctions	540
nNames	540
Names(540)	0x117d8
Functions(540)	0x10f68
NameOrdinals(540)	0x12048

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Remote Procedure Call Runtime
FileVersion	6.1.7601.18532 (win7sp1_gdr.140713-1506)
InternalName	rpcrt4.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	rpcrt4.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.18532

VS_FIXEDFILEINFO

FileVersion	6.1.7601.18532
ProductVersion	6.1.7601.18532
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	664064	DLL	07/14/2014 01:40:58	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

rpcrt4.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

rpcrt4.dll
-