RTSSHooks.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: db3edd721c720de144782d7544442bf4

File Size: 1.3 MB

Uploaded At: Sept. 3, 2026, 10:11 p.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

BeginRecord (Ordinal: 1, Address: 0x7a610)
CleanupPreview (Ordinal: 2, Address: 0x72d30)
CopyFontTexture (Ordinal: 3, Address: 0x72d40)
DeleteProfile (Ordinal: 4, Address: 0x72d60)
DesktopVideoCapture (Ordinal: 5, Address: 0x72d90)
EndRecord (Ordinal: 6, Address: 0x7a720)
EnumProfiles (Ordinal: 7, Address: 0x72f90)
GetFlags (Ordinal: 8, Address: 0x731c0)
GetFnOffsetCacheErr (Ordinal: 9, Address: 0x731d0)
GetFontTextureWidth (Ordinal: 10, Address: 0x731e0)
GetPreviewStats (Ordinal: 11, Address: 0x731f0)
GetProfileProperty (Ordinal: 12, Address: 0x73290)
InitFnOffsetCache (Ordinal: 13, Address: 0x732b0)
InitPreview (Ordinal: 14, Address: 0x740b0)
InjectProcess (Ordinal: 15, Address: 0x740f0)
InstallRTSSHook (Ordinal: 16, Address: 0x74330)
IsCaptureInProgress (Ordinal: 17, Address: 0x76f20)
IsValidFnOffsetCache (Ordinal: 18, Address: 0x74390)
LatencyMarker (Ordinal: 19, Address: 0x7aa90)
LoadProfile (Ordinal: 20, Address: 0x743a0)
PTTEvent (Ordinal: 21, Address: 0x76fa0)
_RTSSCBTProc@12 (Ordinal: 22, Address: 0x743c0)
_RTSSRemoteProc@4 (Ordinal: 23, Address: 0x745c0)
RenderPreviewBeginD3D9 (Ordinal: 24, Address: 0x74600)
RenderPreviewEnd (Ordinal: 25, Address: 0x74630)
ResetProfile (Ordinal: 26, Address: 0x74640)
SaveProfile (Ordinal: 27, Address: 0x74670)
ScreenCapture (Ordinal: 28, Address: 0x77130)
SetFlags (Ordinal: 29, Address: 0x746a0)
SetProfileProperty (Ordinal: 30, Address: 0x74710)
UninstallRTSSHook (Ordinal: 31, Address: 0x74730)
UpdateProfiles (Ordinal: 32, Address: 0x74780)
ValidateRuntimes (Ordinal: 33, Address: 0x7aaf0)
VideoCapture (Ordinal: 34, Address: 0x772c0)
VideoCaptureEx (Ordinal: 35, Address: 0x77360)

Imported DLLs & Functions

GDI32.dll

BitBlt (Address: 0x1011c058)
CreateBitmap (Address: 0x1011c054)
CreateCompatibleBitmap (Address: 0x1011c030)
CreateCompatibleDC (Address: 0x1011c050)
CreateDCA (Address: 0x1011c04c)
CreateFontA (Address: 0x1011c02c)
CreatePen (Address: 0x1011c028)
CreateSolidBrush (Address: 0x1011c024)
DeleteDC (Address: 0x1011c048)
DeleteObject (Address: 0x1011c044)
GetCharABCWidthsA (Address: 0x1011c01c)
GetCharWidth32A (Address: 0x1011c020)
GetDeviceCaps (Address: 0x1011c040)
GetDeviceGammaRamp (Address: 0x1011c034)
GetDIBits (Address: 0x1011c03c)
GetStockObject (Address: 0x1011c05c)
GetTextCharacterExtra (Address: 0x1011c018)
GetTextExtentPoint32A (Address: 0x1011c014)
GetTextMetricsA (Address: 0x1011c004)
Pie (Address: 0x1011c010)
SelectObject (Address: 0x1011c038)
SetBkColor (Address: 0x1011c00c)
SetTextColor (Address: 0x1011c008)
TextOutA (Address: 0x1011c000)

KERNEL32.dll

_lclose (Address: 0x1011c0f4)
AcquireSRWLockExclusive (Address: 0x1011c2c8)
CloseHandle (Address: 0x1011c26c)
CompareStringW (Address: 0x1011c224)
CreateDirectoryW (Address: 0x1011c200)
CreateEventA (Address: 0x1011c0c0)
CreateFileA (Address: 0x1011c0fc)
CreateFileMappingA (Address: 0x1011c118)
CreateFileW (Address: 0x1011c190)
CreateMutexA (Address: 0x1011c260)
CreateProcessA (Address: 0x1011c1c0)
CreateProcessW (Address: 0x1011c1bc)
CreateRemoteThread (Address: 0x1011c064)
CreateWaitableTimerA (Address: 0x1011c124)
DecodePointer (Address: 0x1011c1e0)
DeleteCriticalSection (Address: 0x1011c304)
DeleteFileA (Address: 0x1011c2bc)
DeleteFileW (Address: 0x1011c1d8)
DuplicateHandle (Address: 0x1011c100)
EncodePointer (Address: 0x1011c300)
EnterCriticalSection (Address: 0x1011c16c)
EnumSystemLocalesW (Address: 0x1011c210)
ExitProcess (Address: 0x1011c168)
ExpandEnvironmentStringsW (Address: 0x1011c1b0)
FileTimeToSystemTime (Address: 0x1011c19c)
FindClose (Address: 0x1011c2ac)
FindFirstFileExW (Address: 0x1011c2b0)
FindNextFileW (Address: 0x1011c2b4)
FlsAlloc (Address: 0x1011c244)
FlsFree (Address: 0x1011c238)
FlsGetValue (Address: 0x1011c240)
FlsSetValue (Address: 0x1011c23c)
FlushFileBuffers (Address: 0x1011c1dc)
FlushInstructionCache (Address: 0x1011c134)
FreeEnvironmentStringsW (Address: 0x1011c28c)
FreeLibrary (Address: 0x1011c0b8)
GetACP (Address: 0x1011c274)
GetCommandLineA (Address: 0x1011c280)
GetCommandLineW (Address: 0x1011c284)
GetConsoleMode (Address: 0x1011c1f0)
GetConsoleOutputCP (Address: 0x1011c1f4)
GetCPInfo (Address: 0x1011c27c)
GetCurrentProcess (Address: 0x1011c110)
GetCurrentProcessId (Address: 0x1011c0c4)
GetCurrentThread (Address: 0x1011c144)
GetCurrentThreadId (Address: 0x1011c0ec)
GetDateFormatW (Address: 0x1011c22c)
GetEnvironmentStringsW (Address: 0x1011c288)
GetEnvironmentVariableA (Address: 0x1011c0f8)
GetExitCodeProcess (Address: 0x1011c128)
GetFileAttributesExW (Address: 0x1011c20c)
GetFileAttributesW (Address: 0x1011c18c)
GetFileSize (Address: 0x1011c09c)
GetFileSizeEx (Address: 0x1011c1d0)
GetFileType (Address: 0x1011c30c)
GetFullPathNameW (Address: 0x1011c1b4)
GetLastError (Address: 0x1011c104)
GetLocaleInfoW (Address: 0x1011c21c)
GetLocalTime (Address: 0x1011c0f0)
GetModuleFileNameA (Address: 0x1011c08c)
GetModuleFileNameW (Address: 0x1011c1a0)
GetModuleHandleA (Address: 0x1011c090)
GetModuleHandleExW (Address: 0x1011c25c)
GetModuleHandleW (Address: 0x1011c15c)
GetOEMCP (Address: 0x1011c278)
GetPrivateProfileStringA (Address: 0x1011c164)
GetProcAddress (Address: 0x1011c094)
GetProcessHeap (Address: 0x1011c294)
GetStartupInfoW (Address: 0x1011c2e8)
GetStdHandle (Address: 0x1011c250)
GetStringTypeW (Address: 0x1011c298)
GetSystemDirectoryA (Address: 0x1011c0b4)
GetSystemDirectoryW (Address: 0x1011c188)
GetSystemInfo (Address: 0x1011c1c8)
GetSystemTimeAsFileTime (Address: 0x1011c2ec)
GetTempPathW (Address: 0x1011c248)
GetThreadContext (Address: 0x1011c13c)
GetTickCount (Address: 0x1011c06c)
GetTimeFormatW (Address: 0x1011c228)
GetTimeZoneInformation (Address: 0x1011c208)
GetUserDefaultLCID (Address: 0x1011c214)
GetVersionExA (Address: 0x1011c0bc)
GetWindowsDirectoryA (Address: 0x1011c114)
HeapAlloc (Address: 0x1011c254)
HeapFree (Address: 0x1011c258)
HeapReAlloc (Address: 0x1011c2a0)
HeapSize (Address: 0x1011c29c)
InitializeCriticalSection (Address: 0x1011c174)
InitializeCriticalSectionAndSpinCount (Address: 0x1011c308)
InitializeCriticalSectionEx (Address: 0x1011c230)
InitializeSListHead (Address: 0x1011c2f0)
InterlockedCompareExchange (Address: 0x1011c12c)
InterlockedDecrement (Address: 0x1011c17c)
InterlockedExchangeAdd (Address: 0x1011c178)
InterlockedFlushSList (Address: 0x1011c2fc)
InterlockedIncrement (Address: 0x1011c180)
InterlockedPushEntrySList (Address: 0x1011c2f8)
IsDebuggerPresent (Address: 0x1011c2e4)
IsProcessorFeaturePresent (Address: 0x1011c2e0)
IsThreadAFiber (Address: 0x1011c234)
IsValidCodePage (Address: 0x1011c270)
IsValidLocale (Address: 0x1011c218)
LCMapStringW (Address: 0x1011c220)
LeaveCriticalSection (Address: 0x1011c170)
LoadLibraryA (Address: 0x1011c0b0)
LoadLibraryExA (Address: 0x1011c158)
LoadLibraryExW (Address: 0x1011c154)
LocalAlloc (Address: 0x1011c184)
LocalFree (Address: 0x1011c198)
lstrcmpA (Address: 0x1011c194)
lstrcmpW (Address: 0x1011c1ac)
MapViewOfFile (Address: 0x1011c0d4)
MultiByteToWideChar (Address: 0x1011c24c)
OpenEventA (Address: 0x1011c0d0)
OpenFile (Address: 0x1011c0a4)
OpenFileMappingA (Address: 0x1011c0dc)
OpenProcess (Address: 0x1011c068)
OutputDebugStringA (Address: 0x1011c0e8)
OutputDebugStringW (Address: 0x1011c1b8)
QueryPerformanceCounter (Address: 0x1011c0a8)
QueryPerformanceFrequency (Address: 0x1011c0ac)
RaiseException (Address: 0x1011c1c4)
ReadConsoleW (Address: 0x1011c1e4)
ReadFile (Address: 0x1011c0a0)
ReleaseMutex (Address: 0x1011c268)
ReleaseSRWLockExclusive (Address: 0x1011c2c4)
ResetEvent (Address: 0x1011c0cc)
ResumeThread (Address: 0x1011c130)
RtlUnwind (Address: 0x1011c2f4)
SetConsoleCtrlHandler (Address: 0x1011c1d4)
SetEndOfFile (Address: 0x1011c1e8)
SetEnvironmentVariableW (Address: 0x1011c290)
SetEvent (Address: 0x1011c0c8)
SetFilePointer (Address: 0x1011c0e0)
SetFilePointerEx (Address: 0x1011c1fc)
SetLastError (Address: 0x1011c150)
SetNamedPipeHandleState (Address: 0x1011c108)
SetStdHandle (Address: 0x1011c1ec)
SetThreadContext (Address: 0x1011c138)
SetUnhandledExceptionFilter (Address: 0x1011c2d8)
SetWaitableTimer (Address: 0x1011c120)
Sleep (Address: 0x1011c10c)
SleepConditionVariableSRW (Address: 0x1011c2d0)
SuspendThread (Address: 0x1011c140)
SwitchToThread (Address: 0x1011c160)
SystemTimeToTzSpecificLocalTime (Address: 0x1011c2b8)
TerminateProcess (Address: 0x1011c2dc)
TlsAlloc (Address: 0x1011c1f8)
TlsFree (Address: 0x1011c2a8)
TlsGetValue (Address: 0x1011c1cc)
TlsSetValue (Address: 0x1011c2a4)
UnhandledExceptionFilter (Address: 0x1011c2d4)
UnmapViewOfFile (Address: 0x1011c0d8)
VerifyVersionInfoW (Address: 0x1011c1a4)
VerSetConditionMask (Address: 0x1011c1a8)
VirtualAlloc (Address: 0x1011c070)
VirtualAllocEx (Address: 0x1011c080)
VirtualFree (Address: 0x1011c078)
VirtualFreeEx (Address: 0x1011c084)
VirtualProtect (Address: 0x1011c074)
VirtualProtectEx (Address: 0x1011c148)
VirtualQuery (Address: 0x1011c07c)
VirtualQueryEx (Address: 0x1011c14c)
WaitForSingleObject (Address: 0x1011c264)
WaitNamedPipeA (Address: 0x1011c11c)
WakeAllConditionVariable (Address: 0x1011c2cc)
WideCharToMultiByte (Address: 0x1011c204)
WriteConsoleW (Address: 0x1011c2c0)
WriteFile (Address: 0x1011c0e4)
WritePrivateProfileStringA (Address: 0x1011c098)
WriteProcessMemory (Address: 0x1011c088)

SETUPAPI.dll

SetupDiDestroyDeviceInfoList (Address: 0x1011c324)
SetupDiEnumDeviceInfo (Address: 0x1011c328)
SetupDiEnumDeviceInterfaces (Address: 0x1011c320)
SetupDiGetClassDevsA (Address: 0x1011c318)
SetupDiGetDeviceInstanceIdA (Address: 0x1011c32c)
SetupDiGetDeviceInterfaceDetailA (Address: 0x1011c31c)
SetupDiGetDeviceRegistryPropertyA (Address: 0x1011c314)

SHLWAPI.dll

PathAddBackslashA (Address: 0x1011c350)
PathIsRelativeA (Address: 0x1011c340)
PathMatchSpecA (Address: 0x1011c348)
PathRemoveExtensionA (Address: 0x1011c334)
PathRemoveFileSpecA (Address: 0x1011c34c)
PathRenameExtensionA (Address: 0x1011c338)
PathStripPathA (Address: 0x1011c344)
StrStrIA (Address: 0x1011c33c)

USER32.dll

CallNextHookEx (Address: 0x1011c358)
CreateWindowExA (Address: 0x1011c374)
DestroyWindow (Address: 0x1011c370)
DrawIcon (Address: 0x1011c388)
EnumDisplaySettingsA (Address: 0x1011c3d0)
FillRect (Address: 0x1011c3d8)
FindWindowA (Address: 0x1011c3a4)
FindWindowExA (Address: 0x1011c3b8)
GetActiveWindow (Address: 0x1011c398)
GetAsyncKeyState (Address: 0x1011c3d4)
GetClassNameA (Address: 0x1011c3b4)
GetClientRect (Address: 0x1011c39c)
GetCursorPos (Address: 0x1011c3c4)
GetDC (Address: 0x1011c3bc)
GetForegroundWindow (Address: 0x1011c368)
GetIconInfo (Address: 0x1011c3cc)
GetMonitorInfoA (Address: 0x1011c3a8)
GetWindowThreadProcessId (Address: 0x1011c3b0)
IntersectRect (Address: 0x1011c394)
IsRectEmpty (Address: 0x1011c38c)
IsWindowVisible (Address: 0x1011c36c)
LoadCursorA (Address: 0x1011c3c8)
MessageBeep (Address: 0x1011c364)
MonitorFromWindow (Address: 0x1011c3ac)
OffsetRect (Address: 0x1011c3e0)
PostMessageA (Address: 0x1011c37c)
RegisterClassA (Address: 0x1011c378)
RegisterWindowMessageA (Address: 0x1011c3dc)
ReleaseDC (Address: 0x1011c3c0)
SendMessageA (Address: 0x1011c384)
SendMessageTimeoutA (Address: 0x1011c380)
SetWindowsHookExA (Address: 0x1011c360)
SubtractRect (Address: 0x1011c390)
UnhookWindowsHookEx (Address: 0x1011c35c)
WindowFromDC (Address: 0x1011c3a0)

WINMM.dll

timeKillEvent (Address: 0x1011c3e8)
timeSetEvent (Address: 0x1011c3ec)