dwmcapDT32.dll

Description: 腾讯QQ

Version: 9.7.17.29215

Architecture: 32-bit

Operating System: Windows NT

SHA256: 79c8b8037557913671bebefd44e05fe6

File Size: 52.9 KB

Uploaded At: Dec. 2, 2025, 2:46 p.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx

Exported Functions

DwmcapDTGetDesktopBitmap (Ordinal: 1, Address: 0x2850)
DwmcapDTGetSharedHandle (Ordinal: 2, Address: 0x278e)
DwmcapDT_Hook_InjectToDWM (Ordinal: 3, Address: 0x2e6e)
DwmcapDT_Hook_UndoAll (Ordinal: 4, Address: 0x276d)
GetRpcWindow (Ordinal: 5, Address: 0x24a8)

Imported DLLs & Functions

d3d10_1.dll

D3D10CreateDevice1 (Address: 0x53f67238)

dxgi.dll

CreateDXGIFactory (Address: 0x53f67240)

KERNEL32.dll

CloseHandle (Address: 0x53f67004)
CreateDirectoryW (Address: 0x53f67120)
CreateFileW (Address: 0x53f67098)
CreateRemoteThread (Address: 0x53f67030)
CreateThread (Address: 0x53f6701c)
CreateToolhelp32Snapshot (Address: 0x53f67010)
DecodePointer (Address: 0x53f67100)
DeleteCriticalSection (Address: 0x53f6709c)
DeleteFileW (Address: 0x53f6707c)
EncodePointer (Address: 0x53f67104)
EnterCriticalSection (Address: 0x53f67064)
FindClose (Address: 0x53f67074)
FindFirstFileW (Address: 0x53f67080)
FindResourceExW (Address: 0x53f6705c)
FindResourceW (Address: 0x53f67058)
FreeLibraryAndExitThread (Address: 0x53f67018)
GetCommandLineW (Address: 0x53f670a8)
GetCurrentProcess (Address: 0x53f67048)
GetCurrentProcessId (Address: 0x53f67084)
GetCurrentThreadId (Address: 0x53f670b0)
GetFileAttributesW (Address: 0x53f670a4)
GetLastError (Address: 0x53f6700c)
GetModuleFileNameW (Address: 0x53f67040)
GetModuleHandleW (Address: 0x53f67014)
GetProcAddress (Address: 0x53f67020)
GetProcessHeap (Address: 0x53f67108)
GetProcessTimes (Address: 0x53f67094)
GetSystemInfo (Address: 0x53f670f0)
GetSystemTimeAsFileTime (Address: 0x53f67090)
GetThreadContext (Address: 0x53f670b4)
GetTickCount (Address: 0x53f67088)
HeapAlloc (Address: 0x53f670c0)
HeapCreate (Address: 0x53f670d0)
HeapDestroy (Address: 0x53f670cc)
HeapFree (Address: 0x53f670c4)
HeapReAlloc (Address: 0x53f670b8)
HeapSize (Address: 0x53f6710c)
InitializeCriticalSection (Address: 0x53f67060)
InitializeCriticalSectionAndSpinCount (Address: 0x53f67110)
InterlockedCompareExchange (Address: 0x53f670f8)
InterlockedExchange (Address: 0x53f67124)
IsDebuggerPresent (Address: 0x53f6711c)
IsWow64Process (Address: 0x53f67044)
LeaveCriticalSection (Address: 0x53f67068)
LoadResource (Address: 0x53f67054)
LockResource (Address: 0x53f67050)
Module32FirstW (Address: 0x53f67008)
Module32NextW (Address: 0x53f67000)
MoveFileW (Address: 0x53f67078)
OpenProcess (Address: 0x53f6703c)
OpenThread (Address: 0x53f670d8)
QueryPerformanceCounter (Address: 0x53f6708c)
RaiseException (Address: 0x53f67118)
ResumeThread (Address: 0x53f670e4)
SetFileAttributesW (Address: 0x53f670a0)
SetFilePointer (Address: 0x53f6706c)
SetThreadContext (Address: 0x53f670bc)
SetUnhandledExceptionFilter (Address: 0x53f670fc)
SizeofResource (Address: 0x53f6704c)
Sleep (Address: 0x53f67024)
SuspendThread (Address: 0x53f670e0)
TerminateProcess (Address: 0x53f670f4)
Thread32First (Address: 0x53f670c8)
Thread32Next (Address: 0x53f670d4)
UnhandledExceptionFilter (Address: 0x53f67114)
VirtualAlloc (Address: 0x53f670ec)
VirtualAllocEx (Address: 0x53f67038)
VirtualFree (Address: 0x53f670e8)
VirtualFreeEx (Address: 0x53f67028)
VirtualProtect (Address: 0x53f670dc)
VirtualQuery (Address: 0x53f670ac)
WaitForSingleObject (Address: 0x53f6702c)
WriteFile (Address: 0x53f67070)
WriteProcessMemory (Address: 0x53f67034)

MSVCP100.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x53f6712c)

MSVCR100.dll

__clean_type_info_names_internal (Address: 0x53f67164)
__CppXcptFilter (Address: 0x53f67154)
__CxxFrameHandler3 (Address: 0x53f6718c)
__dllonexit (Address: 0x53f6714c)
_amsg_exit (Address: 0x53f67140)
_crt_debugger_hook (Address: 0x53f67160)
_CxxThrowException (Address: 0x53f67174)
_encoded_null (Address: 0x53f67138)
_except_handler4_common (Address: 0x53f6715c)
_initterm (Address: 0x53f671e4)
_initterm_e (Address: 0x53f67134)
_local_unwind4 (Address: 0x53f67168)
_lock (Address: 0x53f67148)
_malloc_crt (Address: 0x53f6713c)
_onexit (Address: 0x53f67144)
_snwprintf (Address: 0x53f671d8)
_time64 (Address: 0x53f67194)
_unlock (Address: 0x53f67150)
_vscwprintf (Address: 0x53f671ac)
_wtoi (Address: 0x53f671c8)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x53f6716c)
??0exception@std@@QAE@ABQBD@Z (Address: 0x53f67198)
??0exception@std@@QAE@ABV01@@Z (Address: 0x53f671c0)
??1exception@std@@UAE@XZ (Address: 0x53f671a0)
??2@YAPAXI@Z (Address: 0x53f671bc)
??3@YAXPAX@Z (Address: 0x53f67170)
?terminate@@YAXXZ (Address: 0x53f67158)
?what@exception@std@@UBEPBDXZ (Address: 0x53f6719c)
free (Address: 0x53f67180)
isspace (Address: 0x53f671e0)
iswdigit (Address: 0x53f671d0)
iswspace (Address: 0x53f671dc)
malloc (Address: 0x53f671c4)
memcpy (Address: 0x53f67184)
memcpy_s (Address: 0x53f671b4)
memmove (Address: 0x53f671a4)
memmove_s (Address: 0x53f671b8)
memset (Address: 0x53f6717c)
vswprintf_s (Address: 0x53f671b0)
wcscmp (Address: 0x53f67178)
wcslen (Address: 0x53f67188)
wcsncmp (Address: 0x53f671cc)
wcsncpy (Address: 0x53f671d4)
wcsrchr (Address: 0x53f67190)
wmemcpy_s (Address: 0x53f671a8)

SHELL32.dll

SHGetSpecialFolderPathW (Address: 0x53f671ec)

USER32.dll

CreateWindowExW (Address: 0x53f671f8)
DefWindowProcW (Address: 0x53f6720c)
DestroyWindow (Address: 0x53f67214)
DispatchMessageW (Address: 0x53f67200)
FindWindowExW (Address: 0x53f67218)
FindWindowW (Address: 0x53f67228)
GetDesktopWindow (Address: 0x53f67230)
GetMessageW (Address: 0x53f671fc)
GetWindowThreadProcessId (Address: 0x53f67224)
IsWindow (Address: 0x53f67210)
MessageBoxW (Address: 0x53f6722c)
PostQuitMessage (Address: 0x53f67204)
RegisterClassW (Address: 0x53f671f4)
ReplyMessage (Address: 0x53f67208)
SendMessageW (Address: 0x53f67220)
UnregisterClassW (Address: 0x53f6721c)