d3d9.dll

Description: Direct3D 9 Runtime

Version: 10.0.19041.488

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8dafa0adc122f0ee7922cdad3b591625

File Size: 1.8 MB

Uploaded At: June 10, 2026, 7:18 a.m.

Views: 58

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 16, Address: 0x871f0)
(Ordinal: 17, Address: 0x893c0)
(Ordinal: 18, Address: 0x89420)
(Ordinal: 19, Address: 0x92270)
Direct3DCreate9On12 (Ordinal: 20, Address: 0x44b50)
Direct3DCreate9On12Ex (Ordinal: 21, Address: 0x44b80)
(Ordinal: 22, Address: 0x87200)
(Ordinal: 23, Address: 0x99dc0)
Direct3DShaderValidatorCreate9 (Ordinal: 24, Address: 0xd3520)
PSGPError (Ordinal: 25, Address: 0x7f010)
PSGPSampleTexture (Ordinal: 26, Address: 0x7f040)
D3DPERF_BeginEvent (Ordinal: 27, Address: 0x89210)
D3DPERF_EndEvent (Ordinal: 28, Address: 0x89260)
D3DPERF_GetStatus (Ordinal: 29, Address: 0x89290)
D3DPERF_QueryRepeatFrame (Ordinal: 30, Address: 0x892c0)
D3DPERF_SetMarker (Ordinal: 31, Address: 0x89300)
D3DPERF_SetOptions (Ordinal: 32, Address: 0x89340)
D3DPERF_SetRegion (Ordinal: 33, Address: 0x89370)
DebugSetLevel (Ordinal: 34, Address: 0x89460)
DebugSetMute (Ordinal: 35, Address: 0x894a0)
Direct3D9EnableMaximizedWindowedModeShim (Ordinal: 36, Address: 0x893b0)
Direct3DCreate9 (Ordinal: 37, Address: 0x335b0)
Direct3DCreate9Ex (Ordinal: 38, Address: 0x335e0)

Imported DLLs & Functions

api-ms-win-appmodel-unlock-l1-1-0.dll

IsDeveloperModeEnabled (Address: 0x1801577f8)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180157808)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180157818)
CoInitializeEx (Address: 0x180157820)
CoTaskMemFree (Address: 0x180157828)
CoUninitialize (Address: 0x180157830)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180157850)
RegCreateKeyExA (Address: 0x180157888)
RegDeleteValueA (Address: 0x180157858)
RegEnumKeyExA (Address: 0x180157868)
RegEnumValueA (Address: 0x180157860)
RegGetValueA (Address: 0x180157878)
RegOpenKeyExA (Address: 0x180157848)
RegQueryInfoKeyA (Address: 0x180157880)
RegQueryValueExA (Address: 0x180157840)
RegSetValueExA (Address: 0x180157870)

api-ms-win-core-versionansi-l1-1-0.dll

GetFileVersionInfoExA (Address: 0x1801578a0)
GetFileVersionInfoSizeExA (Address: 0x1801578a8)
VerQueryValueA (Address: 0x180157898)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1801578c0)
EventSetInformation (Address: 0x1801578c8)
EventUnregister (Address: 0x1801578d0)
EventWriteTransfer (Address: 0x1801578b8)

api-ms-win-gdi-dpiinfo-l1-1-0.dll

GetCurrentDpiInfo (Address: 0x1801578e0)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x180157948)
AddMandatoryAce (Address: 0x180157930)
AllocateLocallyUniqueId (Address: 0x180157950)
GetLengthSid (Address: 0x180157940)
GetSidLengthRequired (Address: 0x180157908)
GetSidSubAuthority (Address: 0x180157900)
InitializeAcl (Address: 0x1801578f0)
InitializeSecurityDescriptor (Address: 0x180157928)
InitializeSid (Address: 0x180157910)
IsValidSid (Address: 0x180157920)
SetKernelObjectSecurity (Address: 0x180157938)
SetSecurityDescriptorDacl (Address: 0x1801578f8)
SetSecurityDescriptorSacl (Address: 0x180157918)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x180157960)

api-ms-win-shell-shellfolders-l1-1-0.dll

SHGetKnownFolderPath (Address: 0x180157970)

dwmapi.dll

(Address: 0x180157990)
(Address: 0x180157988)
(Address: 0x180157980)
(Address: 0x1801579a0)
DwmIsCompositionEnabled (Address: 0x180157998)

GDI32.dll

BitBlt (Address: 0x180157158)
CreateCompatibleBitmap (Address: 0x180156ce0)
CreateCompatibleDC (Address: 0x180156d10)
CreateDCA (Address: 0x180157148)
CreateDIBitmap (Address: 0x180156c98)
CreateDIBSection (Address: 0x180156cf0)
CreateRectRgn (Address: 0x180156dd0)
D3DKMTCacheHybridQueryValue (Address: 0x180156c88)
D3DKMTCheckExclusiveOwnership (Address: 0x180157020)
D3DKMTCheckMonitorPowerState (Address: 0x1801570d0)
D3DKMTCheckOcclusion (Address: 0x180156f88)
D3DKMTCloseAdapter (Address: 0x180156ee8)
D3DKMTConfigureSharedResource (Address: 0x180156f70)
D3DKMTCreateAllocation (Address: 0x180156ec0)
D3DKMTCreateAllocation2 (Address: 0x180156fe0)
D3DKMTCreateContext (Address: 0x180157088)
D3DKMTCreateContextVirtual (Address: 0x1801570f0)
D3DKMTCreateDCFromMemory (Address: 0x1801570b0)
D3DKMTCreateDevice (Address: 0x180157008)
D3DKMTCreateHwQueue (Address: 0x180156ef0)
D3DKMTCreateOverlay (Address: 0x1801571b0)
D3DKMTCreatePagingQueue (Address: 0x1801570a0)
D3DKMTCreateSynchronizationObject (Address: 0x180156fa8)
D3DKMTCreateSynchronizationObject2 (Address: 0x180156f80)
D3DKMTDestroyAllocation (Address: 0x180156ed8)
D3DKMTDestroyAllocation2 (Address: 0x180156eb0)
D3DKMTDestroyContext (Address: 0x180156ed0)
D3DKMTDestroyDCFromMemory (Address: 0x180156fc0)
D3DKMTDestroyDevice (Address: 0x1801570b8)
D3DKMTDestroyHwQueue (Address: 0x180157030)
D3DKMTDestroyOverlay (Address: 0x180156f20)
D3DKMTDestroyPagingQueue (Address: 0x180156fd8)
D3DKMTDestroySynchronizationObject (Address: 0x180156f58)
D3DKMTEnumAdapters (Address: 0x180156f10)
D3DKMTEscape (Address: 0x180156f30)
D3DKMTEvict (Address: 0x180156ea8)
D3DKMTFlipOverlay (Address: 0x1801571a8)
D3DKMTFreeGpuVirtualAddress (Address: 0x180156ee0)
D3DKMTGetCachedHybridQueryValue (Address: 0x180156c90)
D3DKMTGetContextSchedulingPriority (Address: 0x180157130)
D3DKMTGetDeviceState (Address: 0x180157180)
D3DKMTGetDisplayModeList (Address: 0x180156f90)
D3DKMTGetMultiPlaneOverlayCaps (Address: 0x180157150)
D3DKMTGetMultisampleMethodList (Address: 0x1801570c8)
D3DKMTGetOverlayState (Address: 0x180157198)
D3DKMTGetResourcePresentPrivateDriverData (Address: 0x180157188)
D3DKMTGetScanLine (Address: 0x180157108)
D3DKMTGetSharedPrimaryHandle (Address: 0x180156f28)
D3DKMTInvalidateCache (Address: 0x180157038)
D3DKMTLock (Address: 0x180157120)
D3DKMTLock2 (Address: 0x180156eb8)
D3DKMTMakeResident (Address: 0x180156e98)
D3DKMTMapGpuVirtualAddress (Address: 0x180156ec8)
D3DKMTMarkDeviceAsError (Address: 0x180157110)
D3DKMTOfferAllocations (Address: 0x180157190)
D3DKMTOpenAdapterFromDeviceName (Address: 0x1801570e8)
D3DKMTOpenAdapterFromHdc (Address: 0x180156fb8)
D3DKMTOpenResource (Address: 0x180156fc8)
D3DKMTOpenResource2 (Address: 0x180157128)
D3DKMTOpenResourceFromNtHandle (Address: 0x180157178)
D3DKMTOpenSyncObjectFromNtHandle2 (Address: 0x1801571a0)
D3DKMTPresent (Address: 0x180156ea0)
D3DKMTQueryAdapterInfo (Address: 0x180157168)
D3DKMTQueryAllocationResidency (Address: 0x180156fe8)
D3DKMTQueryResourceInfo (Address: 0x1801570f8)
D3DKMTQueryResourceInfoFromNtHandle (Address: 0x180156fd0)
D3DKMTQueryStatistics (Address: 0x180156f60)
D3DKMTQueryVidPnExclusiveOwnership (Address: 0x180157028)
D3DKMTReclaimAllocations (Address: 0x180156fa0)
D3DKMTReclaimAllocations2 (Address: 0x180157080)
D3DKMTRegisterTrimNotification (Address: 0x180156f00)
D3DKMTReleaseProcessVidPnSourceOwners (Address: 0x180157098)
D3DKMTRender (Address: 0x180157018)
D3DKMTReserveGpuVirtualAddress (Address: 0x1801570c0)
D3DKMTSetAllocationPriority (Address: 0x1801570e0)
D3DKMTSetContextSchedulingPriority (Address: 0x180157170)
D3DKMTSetDisplayMode (Address: 0x180157060)
D3DKMTSetDisplayPrivateDriverFormat (Address: 0x180157000)
D3DKMTSetGammaRamp (Address: 0x180156f78)
D3DKMTSetQueuedLimit (Address: 0x180157048)
D3DKMTSetVidPnSourceOwner1 (Address: 0x180157070)
D3DKMTSharedPrimaryLockNotification (Address: 0x180156ff8)
D3DKMTSharedPrimaryUnLockNotification (Address: 0x180156ef8)
D3DKMTShareObjects (Address: 0x180156f68)
D3DKMTSignalSynchronizationObject (Address: 0x180157078)
D3DKMTSignalSynchronizationObject2 (Address: 0x180157100)
D3DKMTSignalSynchronizationObjectFromCpu (Address: 0x180157140)
D3DKMTSignalSynchronizationObjectFromGpu (Address: 0x180157040)
D3DKMTSignalSynchronizationObjectFromGpu2 (Address: 0x1801570d8)
D3DKMTSubmitCommand (Address: 0x180157010)
D3DKMTSubmitCommandToHwQueue (Address: 0x180157090)
D3DKMTSubmitPresentToHwQueue (Address: 0x180156f38)
D3DKMTSubmitSignalSyncObjectsToHwQueue (Address: 0x180157068)
D3DKMTSubmitWaitForSyncObjectsToHwQueue (Address: 0x1801570a8)
D3DKMTUnlock (Address: 0x180157118)
D3DKMTUnlock2 (Address: 0x180156f40)
D3DKMTUnregisterTrimNotification (Address: 0x180156f18)
D3DKMTUpdateAllocationProperty (Address: 0x180156f48)
D3DKMTUpdateGpuVirtualAddress (Address: 0x180156fb0)
D3DKMTUpdateOverlay (Address: 0x180156ff0)
D3DKMTWaitForSynchronizationObject (Address: 0x180156f50)
D3DKMTWaitForSynchronizationObject2 (Address: 0x180157138)
D3DKMTWaitForSynchronizationObjectFromCpu (Address: 0x180156f08)
D3DKMTWaitForSynchronizationObjectFromGpu (Address: 0x180157050)
D3DKMTWaitForVerticalBlankEvent (Address: 0x180157160)
DdEntry1 (Address: 0x180156e78)
DdEntry10 (Address: 0x180156e68)
DdEntry11 (Address: 0x180156e60)
DdEntry12 (Address: 0x180156d68)
DdEntry13 (Address: 0x180156dd8)
DdEntry16 (Address: 0x180156d00)
DdEntry17 (Address: 0x180156dc0)
DdEntry18 (Address: 0x180156e30)
DdEntry19 (Address: 0x180156de0)
DdEntry2 (Address: 0x180156cc8)
DdEntry20 (Address: 0x180156cc0)
DdEntry21 (Address: 0x180156de8)
DdEntry22 (Address: 0x180156d90)
DdEntry23 (Address: 0x180156da8)
DdEntry24 (Address: 0x180156d60)
DdEntry25 (Address: 0x180156d18)
DdEntry26 (Address: 0x180156d78)
DdEntry27 (Address: 0x180156cb8)
DdEntry28 (Address: 0x180156da0)
DdEntry29 (Address: 0x180156d30)
DdEntry3 (Address: 0x180156e58)
DdEntry30 (Address: 0x180156cf8)
DdEntry31 (Address: 0x180156d28)
DdEntry33 (Address: 0x180156d38)
DdEntry34 (Address: 0x180156e40)
DdEntry35 (Address: 0x180156dc8)
DdEntry36 (Address: 0x180156e38)
DdEntry37 (Address: 0x180156d88)
DdEntry38 (Address: 0x180156cd0)
DdEntry39 (Address: 0x180156e50)
DdEntry4 (Address: 0x180156e18)
DdEntry40 (Address: 0x180156e10)
DdEntry41 (Address: 0x180156e88)
DdEntry42 (Address: 0x180156d08)
DdEntry43 (Address: 0x180156d48)
DdEntry44 (Address: 0x180156d40)
DdEntry45 (Address: 0x180156e00)
DdEntry46 (Address: 0x180156d58)
DdEntry48 (Address: 0x180156e08)
DdEntry49 (Address: 0x180156e90)
DdEntry5 (Address: 0x180156e20)
DdEntry50 (Address: 0x180156d50)
DdEntry53 (Address: 0x180156df0)
DdEntry54 (Address: 0x180156cd8)
DdEntry56 (Address: 0x180156db8)
DdEntry6 (Address: 0x180156d20)
DdEntry9 (Address: 0x180156d70)
DeleteDC (Address: 0x180157058)
DeleteObject (Address: 0x180156e70)
GdiEntry1 (Address: 0x180156e28)
GdiEntry13 (Address: 0x180156f98)
GetDeviceCaps (Address: 0x180156ca8)
GetDeviceGammaRamp (Address: 0x180156d98)
GetDIBits (Address: 0x180156db0)
GetNearestColor (Address: 0x180156ca0)
GetRandomRgn (Address: 0x180156e80)
GetRegionData (Address: 0x180156df8)
GetSystemPaletteEntries (Address: 0x180156cb0)
SelectObject (Address: 0x180156ce8)
SetLayout (Address: 0x180156d80)
SetStretchBltMode (Address: 0x180156e48)
StretchBlt (Address: 0x180156c80)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180157480)
AcquireSRWLockShared (Address: 0x180157440)
CloseHandle (Address: 0x180157468)
CloseThreadpoolTimer (Address: 0x180157488)
ConnectNamedPipe (Address: 0x180157320)
CreateEventA (Address: 0x180157278)
CreateFileA (Address: 0x1801572d8)
CreateMutexExW (Address: 0x180157448)
CreateMutexW (Address: 0x180157338)
CreateNamedPipeA (Address: 0x1801572d0)
CreateSemaphoreA (Address: 0x180157340)
CreateSemaphoreExA (Address: 0x180157388)
CreateSemaphoreExW (Address: 0x1801574e8)
CreateThread (Address: 0x180157280)
CreateThreadpoolTimer (Address: 0x180157450)
DebugBreak (Address: 0x1801574f0)
DelayLoadFailureHook (Address: 0x1801571e0)
DeleteCriticalSection (Address: 0x180157438)
DisableThreadLibraryCalls (Address: 0x180157380)
DisconnectNamedPipe (Address: 0x180157318)
EnterCriticalSection (Address: 0x1801574d8)
ExpandEnvironmentStringsW (Address: 0x180157540)
FindClose (Address: 0x1801571f8)
FindFirstFileW (Address: 0x180157208)
FindNextFileW (Address: 0x180157200)
FlushFileBuffers (Address: 0x180157310)
FormatMessageW (Address: 0x180157518)
FreeEnvironmentStringsW (Address: 0x180157210)
FreeLibrary (Address: 0x180157410)
FreeLibraryAndExitThread (Address: 0x180157390)
GetApplicationUserModelId (Address: 0x180157240)
GetCurrentApplicationUserModelId (Address: 0x180157268)
GetCurrentPackageFamilyName (Address: 0x180157228)
GetCurrentProcess (Address: 0x1801573d8)
GetCurrentProcessId (Address: 0x180157430)
GetCurrentThreadId (Address: 0x180157520)
GetDriveTypeW (Address: 0x1801571f0)
GetEnvironmentStringsW (Address: 0x180157218)
GetFileSize (Address: 0x1801571c0)
GetLastError (Address: 0x1801574a0)
GetLogicalProcessorInformation (Address: 0x1801571d0)
GetLongPathNameW (Address: 0x1801571e8)
GetModuleFileNameA (Address: 0x180157538)
GetModuleFileNameW (Address: 0x1801572a8)
GetModuleHandleA (Address: 0x180157398)
GetModuleHandleExA (Address: 0x180157290)
GetModuleHandleExW (Address: 0x180157528)
GetModuleHandleW (Address: 0x1801574f8)
GetNativeSystemInfo (Address: 0x180157420)
GetPackageFamilyName (Address: 0x180157260)
GetPrivateProfileStringA (Address: 0x1801572f0)
GetProcAddress (Address: 0x180157508)
GetProcessHeap (Address: 0x180157500)
GetProcessId (Address: 0x1801573d0)
GetProcessMitigationPolicy (Address: 0x1801572a0)
GetSystemTime (Address: 0x1801573a8)
GetSystemTimeAsFileTime (Address: 0x1801572b0)
GetTickCount (Address: 0x180157360)
GetVersionExA (Address: 0x1801571c8)
GlobalAddAtomA (Address: 0x180157348)
HeapAlloc (Address: 0x180157510)
HeapFree (Address: 0x180157530)
InitializeCriticalSection (Address: 0x180157400)
InitializeCriticalSectionEx (Address: 0x1801574c0)
InitializeSRWLock (Address: 0x1801573e0)
InitOnceBeginInitialize (Address: 0x180157270)
InitOnceComplete (Address: 0x180157230)
IsDebuggerPresent (Address: 0x180157428)
K32GetModuleFileNameExW (Address: 0x180157258)
LeaveCriticalSection (Address: 0x1801574c8)
LoadLibraryA (Address: 0x1801573f8)
LoadLibraryExW (Address: 0x180157408)
LoadLibraryW (Address: 0x1801573b8)
LocalAlloc (Address: 0x180157370)
LocalFree (Address: 0x180157368)
lstrcmpA (Address: 0x1801573e8)
OpenEventW (Address: 0x180157358)
OpenMutexW (Address: 0x180157330)
OpenProcess (Address: 0x180157238)
OpenSemaphoreW (Address: 0x180157470)
OutputDebugStringA (Address: 0x180157418)
OutputDebugStringW (Address: 0x180157490)
PeekNamedPipe (Address: 0x180157300)
QueryPerformanceCounter (Address: 0x1801573a0)
QueryPerformanceFrequency (Address: 0x1801573c0)
ReadFile (Address: 0x180157308)
RegGetValueW (Address: 0x180157250)
RegOpenKeyExW (Address: 0x180157248)
RegQueryValueExW (Address: 0x180157220)
ReleaseMutex (Address: 0x1801574a8)
ReleaseSemaphore (Address: 0x1801574d0)
ReleaseSRWLockExclusive (Address: 0x180157498)
ReleaseSRWLockShared (Address: 0x180157458)
ResetEvent (Address: 0x180157350)
ResolveDelayLoadedAPI (Address: 0x1801571d8)
SetErrorMode (Address: 0x1801573f0)
SetEvent (Address: 0x180157288)
SetLastError (Address: 0x1801574e0)
SetNamedPipeHandleState (Address: 0x180157328)
SetThreadpoolTimer (Address: 0x180157460)
SetUnhandledExceptionFilter (Address: 0x1801572c0)
Sleep (Address: 0x1801573c8)
TerminateProcess (Address: 0x1801572b8)
TransactNamedPipe (Address: 0x1801572e8)
UnhandledExceptionFilter (Address: 0x1801572c8)
VerifyVersionInfoA (Address: 0x180157378)
WaitForMultipleObjects (Address: 0x180157298)
WaitForSingleObject (Address: 0x1801574b0)
WaitForSingleObjectEx (Address: 0x180157478)
WaitForThreadpoolTimerCallbacks (Address: 0x1801574b8)
WaitNamedPipeA (Address: 0x1801572e0)
WideCharToMultiByte (Address: 0x1801573b0)
WriteFile (Address: 0x1801572f8)

msvcrt.dll

__C_specific_handler (Address: 0x180157b68)
__CxxFrameHandler3 (Address: 0x180157ba8)
__dllonexit (Address: 0x180157a00)
__iscsym (Address: 0x180157b88)
_amsg_exit (Address: 0x180157b98)
_CxxThrowException (Address: 0x180157ae8)
_initterm (Address: 0x180157ba0)
_lock (Address: 0x180157bc0)
_onexit (Address: 0x1801579f8)
_purecall (Address: 0x180157b00)
_stricmp (Address: 0x180157b50)
_unlock (Address: 0x180157a08)
_vsnprintf (Address: 0x180157b20)
_vsnprintf_s (Address: 0x180157ae0)
_vsnwprintf (Address: 0x180157af8)
_wcsicmp (Address: 0x180157a48)
_wcslwr (Address: 0x180157a60)
_wcsnicmp (Address: 0x180157a30)
_wtoi (Address: 0x180157a20)
_XcptFilter (Address: 0x180157b90)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180157ad8)
??0exception@@QEAA@XZ (Address: 0x180157ab0)
??1exception@@UEAA@XZ (Address: 0x180157a10)
??1type_info@@UEAA@XZ (Address: 0x180157bb8)
?terminate@@YAXXZ (Address: 0x180157bb0)
abort (Address: 0x180157b70)
ceil (Address: 0x180157b38)
cos (Address: 0x180157b30)
cosf (Address: 0x180157a18)
expf (Address: 0x180157b28)
floor (Address: 0x180157ac8)
floorf (Address: 0x180157ac0)
free (Address: 0x180157b18)
log10f (Address: 0x180157ab8)
logf (Address: 0x180157a28)
malloc (Address: 0x180157b10)
memcmp (Address: 0x1801579f0)
memcpy (Address: 0x1801579b0)
memcpy_s (Address: 0x180157af0)
memmove (Address: 0x1801579b8)
memmove_s (Address: 0x180157b08)
memset (Address: 0x1801579c0)
pow (Address: 0x1801579c8)
powf (Address: 0x1801579d0)
qsort (Address: 0x180157a98)
sinf (Address: 0x1801579d8)
sprintf_s (Address: 0x180157aa0)
sqrt (Address: 0x1801579e0)
sqrtf (Address: 0x1801579e8)
sscanf_s (Address: 0x180157b78)
strcat_s (Address: 0x180157aa8)
strcmp (Address: 0x180157b48)
strcpy_s (Address: 0x180157b58)
strncmp (Address: 0x180157a88)
strrchr (Address: 0x180157b60)
strstr (Address: 0x180157b80)
swprintf_s (Address: 0x180157a38)
swscanf_s (Address: 0x180157a40)
toupper (Address: 0x180157a80)
wcscat_s (Address: 0x180157a58)
wcschr (Address: 0x180157ad0)
wcscmp (Address: 0x180157bc8)
wcscpy_s (Address: 0x180157a50)
wcsncmp (Address: 0x180157a78)
wcsrchr (Address: 0x180157a70)
wcsspn (Address: 0x180157a90)
wcsstr (Address: 0x180157a68)
wcstol (Address: 0x180157b40)

ntdll.dll

EtwEventRegister (Address: 0x180157d78)
EtwEventUnregister (Address: 0x180157d70)
EtwEventWriteNoRegistration (Address: 0x180157c58)
EtwEventWriteTransfer (Address: 0x180157d58)
EtwGetTraceEnableFlags (Address: 0x180157da0)
EtwGetTraceEnableLevel (Address: 0x180157db8)
EtwGetTraceLoggerHandle (Address: 0x180157da8)
EtwLogTraceEvent (Address: 0x180157d60)
EtwRegisterTraceGuidsA (Address: 0x180157db0)
EtwUnregisterTraceGuids (Address: 0x180157d98)
LdrResSearchResource (Address: 0x180157c08)
NtClose (Address: 0x180157c30)
NtQueryInformationProcess (Address: 0x180157d40)
NtQueryValueKey (Address: 0x180157d68)
NtQueryWnfStateData (Address: 0x180157d38)
RtlAllocateHeap (Address: 0x180157d30)
RtlAnsiStringToUnicodeString (Address: 0x180157c60)
RtlAppendUnicodeStringToString (Address: 0x180157cb8)
RtlAppendUnicodeToString (Address: 0x180157cb0)
RtlCaptureContext (Address: 0x180157d90)
RtlCopyUnicodeString (Address: 0x180157c50)
RtlDllShutdownInProgress (Address: 0x180157d50)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180157ce8)
RtlFormatCurrentUserKeyPath (Address: 0x180157ca8)
RtlFreeHeap (Address: 0x180157d18)
RtlFreeUnicodeString (Address: 0x180157cd8)
RtlGetNativeSystemInformation (Address: 0x180157cf8)
RtlGetVersion (Address: 0x180157c20)
RtlGUIDFromString (Address: 0x180157d48)
RtlImageDirectoryEntryToData (Address: 0x180157c18)
RtlInitString (Address: 0x180157c70)
RtlInitUnicodeString (Address: 0x180157d08)
RtlInitUnicodeStringEx (Address: 0x180157cc8)
RtlIsCriticalSectionLockedByThread (Address: 0x180157dc0)
RtlLookupFunctionEntry (Address: 0x180157d88)
RtlNtPathNameToDosPathName (Address: 0x180157bf0)
RtlpEnsureBufferSize (Address: 0x180157be8)
RtlPublishWnfStateData (Address: 0x180157dc8)
RtlReAllocateHeap (Address: 0x180157d28)
RtlRunOnceExecuteOnce (Address: 0x180157c28)
RtlUnicodeStringToAnsiString (Address: 0x180157bd8)
RtlUnicodeStringToInteger (Address: 0x180157c48)
RtlUpcaseUnicodeChar (Address: 0x180157d00)
RtlUpcaseUnicodeString (Address: 0x180157c78)
RtlVerifyVersionInfo (Address: 0x180157c10)
RtlVirtualUnwind (Address: 0x180157d80)
RtlxAnsiStringToUnicodeSize (Address: 0x180157c68)
VerSetConditionMask (Address: 0x180157dd0)
ZwClose (Address: 0x180157d10)
ZwCreateFile (Address: 0x180157ca0)
ZwCreateSection (Address: 0x180157c90)
ZwEnumerateKey (Address: 0x180157d20)
ZwEnumerateValueKey (Address: 0x180157c40)
ZwMapViewOfSection (Address: 0x180157c00)
ZwOpenFile (Address: 0x180157ce0)
ZwOpenKey (Address: 0x180157cd0)
ZwQueryDirectoryFile (Address: 0x180157be0)
ZwQueryInformationFile (Address: 0x180157c98)
ZwQueryInformationProcess (Address: 0x180157c88)
ZwQueryKey (Address: 0x180157c38)
ZwQuerySystemInformation (Address: 0x180157cf0)
ZwQueryValueKey (Address: 0x180157cc0)
ZwSetInformationProcess (Address: 0x180157c80)
ZwUnmapViewOfSection (Address: 0x180157bf8)

USER32.dll

AttachThreadInput (Address: 0x180157590)
CallWindowProcA (Address: 0x180157710)
CallWindowProcW (Address: 0x180157720)
ClientToScreen (Address: 0x180157760)
CloseClipboard (Address: 0x1801576a0)
CloseDesktop (Address: 0x180157688)
CreateIconIndirect (Address: 0x180157630)
CreateWindowExA (Address: 0x1801577a0)
DefWindowProcA (Address: 0x180157788)
DestroyIcon (Address: 0x180157648)
DestroyWindow (Address: 0x1801575b0)
DispatchMessageA (Address: 0x1801575b8)
DisplayConfigGetDeviceInfo (Address: 0x1801577b0)
EmptyClipboard (Address: 0x1801576b0)
EnumDisplayDevicesA (Address: 0x1801577a8)
EnumDisplayMonitors (Address: 0x180157768)
EnumDisplaySettingsA (Address: 0x1801577e8)
EqualRect (Address: 0x1801576f0)
GetAncestor (Address: 0x180157608)
GetClientRect (Address: 0x1801577e0)
GetCursor (Address: 0x180157650)
GetCursorPos (Address: 0x180157628)
GetDC (Address: 0x1801576d0)
GetDesktopWindow (Address: 0x180157640)
GetForegroundWindow (Address: 0x180157560)
GetKeyState (Address: 0x1801576f8)
GetMonitorInfoA (Address: 0x1801577c8)
GetPropW (Address: 0x1801575a8)
GetSystemMetrics (Address: 0x1801576e8)
GetThreadDesktop (Address: 0x180157680)
GetUserObjectInformationA (Address: 0x180157690)
GetWindow (Address: 0x1801575c0)
GetWindowDC (Address: 0x180157638)
GetWindowDisplayAffinity (Address: 0x180157600)
GetWindowInfo (Address: 0x1801576d8)
GetWindowLongA (Address: 0x1801575e0)
GetWindowLongPtrA (Address: 0x180157770)
GetWindowLongPtrW (Address: 0x180157778)
GetWindowRect (Address: 0x1801576c0)
GetWindowThreadProcessId (Address: 0x1801575c8)
IntersectRect (Address: 0x1801577d0)
IsIconic (Address: 0x1801575f0)
IsRectEmpty (Address: 0x180157550)
IsWindow (Address: 0x1801575e8)
IsWindowUnicode (Address: 0x180157780)
IsWindowVisible (Address: 0x180157750)
IsZoomed (Address: 0x180157740)
KillTimer (Address: 0x180157730)
LoadCursorW (Address: 0x180157578)
LoadIconA (Address: 0x180157790)
MonitorFromWindow (Address: 0x1801576c8)
mouse_event (Address: 0x1801575d8)
MsgWaitForMultipleObjects (Address: 0x180157598)
NotifyOverlayWindow (Address: 0x180157620)
OffsetRect (Address: 0x180157758)
OpenClipboard (Address: 0x1801576b8)
OpenInputDesktop (Address: 0x180157698)
PeekMessageA (Address: 0x180157570)
PostMessageA (Address: 0x180157700)
PtInRect (Address: 0x180157610)
RegisterClassA (Address: 0x180157798)
RegisterHotKey (Address: 0x180157678)
ReleaseDC (Address: 0x1801576e0)
RemovePropW (Address: 0x1801575a0)
SendMessageA (Address: 0x180157708)
SetClipboardData (Address: 0x1801576a8)
SetCursor (Address: 0x180157658)
SetCursorPos (Address: 0x180157618)
SetForegroundWindow (Address: 0x1801575d0)
SetPropW (Address: 0x180157588)
SetRect (Address: 0x1801577d8)
SetRectEmpty (Address: 0x180157668)
SetTimer (Address: 0x180157738)
SetWindowDisplayAffinity (Address: 0x1801575f8)
SetWindowLongA (Address: 0x180157558)
SetWindowLongPtrA (Address: 0x180157718)
SetWindowLongPtrW (Address: 0x180157728)
SetWindowPos (Address: 0x1801577c0)
ShowWindow (Address: 0x180157748)
SystemParametersInfoA (Address: 0x1801577b8)
TranslateMessage (Address: 0x180157580)
UnionRect (Address: 0x180157660)
UnregisterClassA (Address: 0x180157568)
UnregisterHotKey (Address: 0x180157670)

win32u.dll

NtBindCompositionSurface (Address: 0x180157df0)
NtNotifyPresentToCompositionSurface (Address: 0x180157df8)
NtQueryCompositionSurfaceStatistics (Address: 0x180157de8)
NtUnBindCompositionSurface (Address: 0x180157de0)