d3d9.dll

Description: Direct3D 9 Runtime

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 210e52314d24bdc8492e518567462622

File Size: 1.6 MB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 16, Address: 0xbb3f0)
(Ordinal: 17, Address: 0xbce60)
(Ordinal: 18, Address: 0xbcec0)
(Ordinal: 19, Address: 0xc4b40)
Direct3DCreate9On12 (Ordinal: 20, Address: 0x7ac70)
Direct3DCreate9On12Ex (Ordinal: 21, Address: 0x7acb0)
(Ordinal: 22, Address: 0xbb410)
(Ordinal: 23, Address: 0xca5d0)
Direct3DShaderValidatorCreate9 (Ordinal: 24, Address: 0xff710)
PSGPError (Ordinal: 25, Address: 0xb3d40)
PSGPSampleTexture (Ordinal: 26, Address: 0xb3d70)
D3DPERF_BeginEvent (Ordinal: 27, Address: 0xbccf0)
D3DPERF_EndEvent (Ordinal: 28, Address: 0xbcd30)
D3DPERF_GetStatus (Ordinal: 29, Address: 0xbcd60)
D3DPERF_QueryRepeatFrame (Ordinal: 30, Address: 0xbcd80)
D3DPERF_SetMarker (Ordinal: 31, Address: 0xbcdb0)
D3DPERF_SetOptions (Ordinal: 32, Address: 0xbcde0)
D3DPERF_SetRegion (Ordinal: 33, Address: 0xbce10)
DebugSetLevel (Ordinal: 34, Address: 0xbcf10)
DebugSetMute (Ordinal: 35, Address: 0xbcf40)
Direct3D9EnableMaximizedWindowedModeShim (Ordinal: 36, Address: 0xbce40)
Direct3DCreate9 (Ordinal: 37, Address: 0x64b20)
Direct3DCreate9Ex (Ordinal: 38, Address: 0x64ca0)

Imported DLLs & Functions

api-ms-win-appmodel-unlock-l1-1-0.dll

IsDeveloperModeEnabled (Address: 0x1017d5c0)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1017d5c8)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x1017d5dc)
CoInitializeEx (Address: 0x1017d5d8)
CoTaskMemFree (Address: 0x1017d5d4)
CoUninitialize (Address: 0x1017d5d0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1017d5e8)
RegCreateKeyExA (Address: 0x1017d5f8)
RegDeleteValueA (Address: 0x1017d5f0)
RegEnumKeyExA (Address: 0x1017d5f4)
RegEnumValueA (Address: 0x1017d604)
RegGetValueA (Address: 0x1017d600)
RegOpenKeyExA (Address: 0x1017d5e4)
RegQueryInfoKeyA (Address: 0x1017d608)
RegQueryValueExA (Address: 0x1017d5ec)
RegSetValueExA (Address: 0x1017d5fc)

api-ms-win-core-versionansi-l1-1-0.dll

GetFileVersionInfoExA (Address: 0x1017d610)
GetFileVersionInfoSizeExA (Address: 0x1017d618)
VerQueryValueA (Address: 0x1017d614)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1017d620)
EventSetInformation (Address: 0x1017d628)
EventUnregister (Address: 0x1017d62c)
EventWriteTransfer (Address: 0x1017d624)

api-ms-win-gdi-dpiinfo-l1-1-0.dll

GetCurrentDpiInfo (Address: 0x1017d634)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x1017d668)
AddMandatoryAce (Address: 0x1017d650)
AllocateLocallyUniqueId (Address: 0x1017d63c)
GetLengthSid (Address: 0x1017d664)
GetSidLengthRequired (Address: 0x1017d644)
GetSidSubAuthority (Address: 0x1017d640)
InitializeAcl (Address: 0x1017d65c)
InitializeSecurityDescriptor (Address: 0x1017d658)
InitializeSid (Address: 0x1017d648)
IsValidSid (Address: 0x1017d654)
SetKernelObjectSecurity (Address: 0x1017d660)
SetSecurityDescriptorDacl (Address: 0x1017d64c)
SetSecurityDescriptorSacl (Address: 0x1017d66c)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x1017d674)

api-ms-win-shell-shellfolders-l1-1-0.dll

SHGetKnownFolderPath (Address: 0x1017d67c)

dwmapi.dll

(Address: 0x1017d688)
(Address: 0x1017d694)
(Address: 0x1017d68c)
(Address: 0x1017d690)
DwmIsCompositionEnabled (Address: 0x1017d684)

GDI32.dll

BitBlt (Address: 0x1017d258)
CreateCompatibleBitmap (Address: 0x1017d030)
CreateCompatibleDC (Address: 0x1017d048)
CreateDCA (Address: 0x1017d288)
CreateDIBitmap (Address: 0x1017d00c)
CreateDIBSection (Address: 0x1017d038)
CreateRectRgn (Address: 0x1017d0a8)
D3DKMTCacheHybridQueryValue (Address: 0x1017d004)
D3DKMTCheckExclusiveOwnership (Address: 0x1017d1d0)
D3DKMTCheckMonitorPowerState (Address: 0x1017d228)
D3DKMTCheckOcclusion (Address: 0x1017d184)
D3DKMTCloseAdapter (Address: 0x1017d134)
D3DKMTConfigureSharedResource (Address: 0x1017d178)
D3DKMTCreateAllocation (Address: 0x1017d120)
D3DKMTCreateAllocation2 (Address: 0x1017d1b0)
D3DKMTCreateContext (Address: 0x1017d204)
D3DKMTCreateContextVirtual (Address: 0x1017d238)
D3DKMTCreateDCFromMemory (Address: 0x1017d218)
D3DKMTCreateDevice (Address: 0x1017d1c4)
D3DKMTCreateHwQueue (Address: 0x1017d138)
D3DKMTCreateOverlay (Address: 0x1017d284)
D3DKMTCreatePagingQueue (Address: 0x1017d210)
D3DKMTCreateSynchronizationObject (Address: 0x1017d194)
D3DKMTCreateSynchronizationObject2 (Address: 0x1017d180)
D3DKMTDestroyAllocation (Address: 0x1017d12c)
D3DKMTDestroyAllocation2 (Address: 0x1017d118)
D3DKMTDestroyContext (Address: 0x1017d128)
D3DKMTDestroyDCFromMemory (Address: 0x1017d1a0)
D3DKMTDestroyDevice (Address: 0x1017d21c)
D3DKMTDestroyHwQueue (Address: 0x1017d1d8)
D3DKMTDestroyOverlay (Address: 0x1017d150)
D3DKMTDestroyPagingQueue (Address: 0x1017d1ac)
D3DKMTDestroySynchronizationObject (Address: 0x1017d16c)
D3DKMTEnumAdapters (Address: 0x1017d148)
D3DKMTEscape (Address: 0x1017d158)
D3DKMTEvict (Address: 0x1017d114)
D3DKMTFlipOverlay (Address: 0x1017d280)
D3DKMTFreeGpuVirtualAddress (Address: 0x1017d130)
D3DKMTGetCachedHybridQueryValue (Address: 0x1017d008)
D3DKMTGetContextSchedulingPriority (Address: 0x1017d294)
D3DKMTGetDeviceState (Address: 0x1017d26c)
D3DKMTGetDisplayModeList (Address: 0x1017d188)
D3DKMTGetMultiPlaneOverlayCaps (Address: 0x1017d254)
D3DKMTGetMultisampleMethodList (Address: 0x1017d224)
D3DKMTGetOverlayState (Address: 0x1017d278)
D3DKMTGetResourcePresentPrivateDriverData (Address: 0x1017d270)
D3DKMTGetScanLine (Address: 0x1017d244)
D3DKMTGetSharedPrimaryHandle (Address: 0x1017d154)
D3DKMTInvalidateCache (Address: 0x1017d1dc)
D3DKMTLock (Address: 0x1017d250)
D3DKMTLock2 (Address: 0x1017d11c)
D3DKMTMakeResident (Address: 0x1017d10c)
D3DKMTMapGpuVirtualAddress (Address: 0x1017d124)
D3DKMTMarkDeviceAsError (Address: 0x1017d248)
D3DKMTOfferAllocations (Address: 0x1017d274)
D3DKMTOpenAdapterFromDeviceName (Address: 0x1017d234)
D3DKMTOpenAdapterFromHdc (Address: 0x1017d19c)
D3DKMTOpenResource (Address: 0x1017d1a4)
D3DKMTOpenResource2 (Address: 0x1017d298)
D3DKMTOpenResourceFromNtHandle (Address: 0x1017d268)
D3DKMTOpenSyncObjectFromNtHandle2 (Address: 0x1017d27c)
D3DKMTPresent (Address: 0x1017d110)
D3DKMTQueryAdapterInfo (Address: 0x1017d260)
D3DKMTQueryAllocationResidency (Address: 0x1017d1b4)
D3DKMTQueryResourceInfo (Address: 0x1017d23c)
D3DKMTQueryResourceInfoFromNtHandle (Address: 0x1017d1a8)
D3DKMTQueryStatistics (Address: 0x1017d170)
D3DKMTQueryVidPnExclusiveOwnership (Address: 0x1017d1d4)
D3DKMTReclaimAllocations (Address: 0x1017d190)
D3DKMTReclaimAllocations2 (Address: 0x1017d200)
D3DKMTRegisterTrimNotification (Address: 0x1017d140)
D3DKMTReleaseProcessVidPnSourceOwners (Address: 0x1017d20c)
D3DKMTRender (Address: 0x1017d1cc)
D3DKMTReserveGpuVirtualAddress (Address: 0x1017d220)
D3DKMTSetAllocationPriority (Address: 0x1017d230)
D3DKMTSetContextSchedulingPriority (Address: 0x1017d264)
D3DKMTSetDisplayMode (Address: 0x1017d1f0)
D3DKMTSetDisplayPrivateDriverFormat (Address: 0x1017d1c0)
D3DKMTSetGammaRamp (Address: 0x1017d17c)
D3DKMTSetQueuedLimit (Address: 0x1017d1e4)
D3DKMTSetVidPnSourceOwner1 (Address: 0x1017d1f8)
D3DKMTSharedPrimaryLockNotification (Address: 0x1017d1bc)
D3DKMTSharedPrimaryUnLockNotification (Address: 0x1017d13c)
D3DKMTShareObjects (Address: 0x1017d174)
D3DKMTSignalSynchronizationObject (Address: 0x1017d1fc)
D3DKMTSignalSynchronizationObject2 (Address: 0x1017d240)
D3DKMTSignalSynchronizationObjectFromCpu (Address: 0x1017d28c)
D3DKMTSignalSynchronizationObjectFromGpu (Address: 0x1017d1e0)
D3DKMTSignalSynchronizationObjectFromGpu2 (Address: 0x1017d22c)
D3DKMTSubmitCommand (Address: 0x1017d1c8)
D3DKMTSubmitCommandToHwQueue (Address: 0x1017d208)
D3DKMTSubmitPresentToHwQueue (Address: 0x1017d15c)
D3DKMTSubmitSignalSyncObjectsToHwQueue (Address: 0x1017d1f4)
D3DKMTSubmitWaitForSyncObjectsToHwQueue (Address: 0x1017d214)
D3DKMTUnlock (Address: 0x1017d24c)
D3DKMTUnlock2 (Address: 0x1017d160)
D3DKMTUnregisterTrimNotification (Address: 0x1017d14c)
D3DKMTUpdateAllocationProperty (Address: 0x1017d164)
D3DKMTUpdateGpuVirtualAddress (Address: 0x1017d198)
D3DKMTUpdateOverlay (Address: 0x1017d1b8)
D3DKMTWaitForSynchronizationObject (Address: 0x1017d168)
D3DKMTWaitForSynchronizationObject2 (Address: 0x1017d290)
D3DKMTWaitForSynchronizationObjectFromCpu (Address: 0x1017d144)
D3DKMTWaitForSynchronizationObjectFromGpu (Address: 0x1017d1e8)
D3DKMTWaitForVerticalBlankEvent (Address: 0x1017d25c)
DdEntry1 (Address: 0x1017d0fc)
DdEntry10 (Address: 0x1017d0f4)
DdEntry11 (Address: 0x1017d0f0)
DdEntry12 (Address: 0x1017d074)
DdEntry13 (Address: 0x1017d0ac)
DdEntry16 (Address: 0x1017d040)
DdEntry17 (Address: 0x1017d0a0)
DdEntry18 (Address: 0x1017d0d8)
DdEntry19 (Address: 0x1017d0b0)
DdEntry2 (Address: 0x1017d024)
DdEntry20 (Address: 0x1017d020)
DdEntry21 (Address: 0x1017d0b4)
DdEntry22 (Address: 0x1017d088)
DdEntry23 (Address: 0x1017d094)
DdEntry24 (Address: 0x1017d070)
DdEntry25 (Address: 0x1017d04c)
DdEntry26 (Address: 0x1017d07c)
DdEntry27 (Address: 0x1017d01c)
DdEntry28 (Address: 0x1017d090)
DdEntry29 (Address: 0x1017d000)
DdEntry3 (Address: 0x1017d0ec)
DdEntry30 (Address: 0x1017d03c)
DdEntry31 (Address: 0x1017d054)
DdEntry33 (Address: 0x1017d058)
DdEntry34 (Address: 0x1017d0e0)
DdEntry35 (Address: 0x1017d0a4)
DdEntry36 (Address: 0x1017d0dc)
DdEntry37 (Address: 0x1017d084)
DdEntry38 (Address: 0x1017d028)
DdEntry39 (Address: 0x1017d0e8)
DdEntry4 (Address: 0x1017d0cc)
DdEntry40 (Address: 0x1017d0c8)
DdEntry41 (Address: 0x1017d104)
DdEntry42 (Address: 0x1017d044)
DdEntry43 (Address: 0x1017d064)
DdEntry44 (Address: 0x1017d05c)
DdEntry45 (Address: 0x1017d0c0)
DdEntry46 (Address: 0x1017d06c)
DdEntry48 (Address: 0x1017d0c4)
DdEntry49 (Address: 0x1017d108)
DdEntry5 (Address: 0x1017d0d0)
DdEntry50 (Address: 0x1017d068)
DdEntry53 (Address: 0x1017d0b8)
DdEntry54 (Address: 0x1017d02c)
DdEntry56 (Address: 0x1017d09c)
DdEntry6 (Address: 0x1017d050)
DdEntry9 (Address: 0x1017d078)
DeleteDC (Address: 0x1017d1ec)
DeleteObject (Address: 0x1017d0f8)
GdiEntry1 (Address: 0x1017d0d4)
GdiEntry13 (Address: 0x1017d18c)
GetDeviceCaps (Address: 0x1017d014)
GetDeviceGammaRamp (Address: 0x1017d08c)
GetDIBits (Address: 0x1017d098)
GetNearestColor (Address: 0x1017d010)
GetRandomRgn (Address: 0x1017d100)
GetRegionData (Address: 0x1017d0bc)
GetSystemPaletteEntries (Address: 0x1017d018)
SelectObject (Address: 0x1017d034)
SetLayout (Address: 0x1017d080)
SetStretchBltMode (Address: 0x1017d0e4)
StretchBlt (Address: 0x1017d060)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1017d3f0)
AcquireSRWLockShared (Address: 0x1017d3d0)
CloseHandle (Address: 0x1017d3e4)
CloseThreadpoolTimer (Address: 0x1017d3f4)
ConnectNamedPipe (Address: 0x1017d340)
CreateEventA (Address: 0x1017d2ec)
CreateFileA (Address: 0x1017d31c)
CreateMutexExW (Address: 0x1017d3d4)
CreateMutexW (Address: 0x1017d34c)
CreateNamedPipeA (Address: 0x1017d318)
CreateSemaphoreA (Address: 0x1017d350)
CreateSemaphoreExA (Address: 0x1017d374)
CreateSemaphoreExW (Address: 0x1017d424)
CreateThread (Address: 0x1017d2f0)
CreateThreadpoolTimer (Address: 0x1017d3d8)
DebugBreak (Address: 0x1017d428)
DelayLoadFailureHook (Address: 0x1017d2b4)
DeleteCriticalSection (Address: 0x1017d3cc)
DisableThreadLibraryCalls (Address: 0x1017d370)
DisconnectNamedPipe (Address: 0x1017d33c)
EnterCriticalSection (Address: 0x1017d41c)
ExpandEnvironmentStringsW (Address: 0x1017d2a0)
FindClose (Address: 0x1017d2bc)
FindFirstFileW (Address: 0x1017d2c4)
FindNextFileW (Address: 0x1017d2c0)
FlushFileBuffers (Address: 0x1017d338)
FormatMessageW (Address: 0x1017d43c)
FreeEnvironmentStringsW (Address: 0x1017d2c8)
FreeLibrary (Address: 0x1017d3b8)
FreeLibraryAndExitThread (Address: 0x1017d378)
GetCurrentProcess (Address: 0x1017d39c)
GetCurrentProcessId (Address: 0x1017d3c8)
GetCurrentThreadId (Address: 0x1017d440)
GetDriveTypeW (Address: 0x1017d450)
GetEnvironmentStringsW (Address: 0x1017d2cc)
GetFileSize (Address: 0x1017d2a4)
GetLastError (Address: 0x1017d400)
GetLogicalProcessorInformation (Address: 0x1017d2ac)
GetLongPathNameW (Address: 0x1017d2b8)
GetModuleFileNameA (Address: 0x1017d44c)
GetModuleFileNameW (Address: 0x1017d304)
GetModuleHandleA (Address: 0x1017d37c)
GetModuleHandleExA (Address: 0x1017d2f8)
GetModuleHandleExW (Address: 0x1017d444)
GetModuleHandleW (Address: 0x1017d42c)
GetNativeSystemInfo (Address: 0x1017d3c0)
GetPrivateProfileStringA (Address: 0x1017d328)
GetProcAddress (Address: 0x1017d434)
GetProcessHeap (Address: 0x1017d430)
GetProcessId (Address: 0x1017d398)
GetProcessMitigationPolicy (Address: 0x1017d300)
GetSystemTime (Address: 0x1017d384)
GetSystemTimeAsFileTime (Address: 0x1017d308)
GetTickCount (Address: 0x1017d360)
GetVersionExA (Address: 0x1017d2a8)
GlobalAddAtomA (Address: 0x1017d354)
HeapAlloc (Address: 0x1017d438)
HeapFree (Address: 0x1017d448)
InitializeCriticalSection (Address: 0x1017d3b0)
InitializeCriticalSectionEx (Address: 0x1017d410)
InitializeSRWLock (Address: 0x1017d3a0)
InitOnceBeginInitialize (Address: 0x1017d2e8)
InitOnceComplete (Address: 0x1017d2d4)
IsDebuggerPresent (Address: 0x1017d3c4)
K32GetModuleFileNameExW (Address: 0x1017d2e4)
LeaveCriticalSection (Address: 0x1017d414)
LoadLibraryA (Address: 0x1017d3ac)
LoadLibraryExW (Address: 0x1017d3b4)
LoadLibraryW (Address: 0x1017d38c)
LocalAlloc (Address: 0x1017d368)
LocalFree (Address: 0x1017d364)
lstrcmpA (Address: 0x1017d3a4)
OpenEventW (Address: 0x1017d35c)
OpenMutexW (Address: 0x1017d348)
OpenProcess (Address: 0x1017d2d8)
OpenSemaphoreW (Address: 0x1017d3e8)
OutputDebugStringA (Address: 0x1017d3bc)
OutputDebugStringW (Address: 0x1017d3f8)
PeekNamedPipe (Address: 0x1017d330)
QueryPerformanceCounter (Address: 0x1017d380)
QueryPerformanceFrequency (Address: 0x1017d390)
ReadFile (Address: 0x1017d334)
RegGetValueW (Address: 0x1017d2e0)
RegOpenKeyExW (Address: 0x1017d2dc)
RegQueryValueExW (Address: 0x1017d2d0)
ReleaseMutex (Address: 0x1017d404)
ReleaseSemaphore (Address: 0x1017d418)
ReleaseSRWLockExclusive (Address: 0x1017d3fc)
ReleaseSRWLockShared (Address: 0x1017d3dc)
ResetEvent (Address: 0x1017d358)
ResolveDelayLoadedAPI (Address: 0x1017d2b0)
SetErrorMode (Address: 0x1017d3a8)
SetEvent (Address: 0x1017d2f4)
SetLastError (Address: 0x1017d420)
SetNamedPipeHandleState (Address: 0x1017d344)
SetThreadpoolTimer (Address: 0x1017d3e0)
SetUnhandledExceptionFilter (Address: 0x1017d310)
Sleep (Address: 0x1017d394)
TerminateProcess (Address: 0x1017d30c)
TransactNamedPipe (Address: 0x1017d324)
UnhandledExceptionFilter (Address: 0x1017d314)
VerifyVersionInfoA (Address: 0x1017d36c)
WaitForMultipleObjects (Address: 0x1017d2fc)
WaitForSingleObject (Address: 0x1017d408)
WaitForSingleObjectEx (Address: 0x1017d3ec)
WaitForThreadpoolTimerCallbacks (Address: 0x1017d40c)
WaitNamedPipeA (Address: 0x1017d320)
WideCharToMultiByte (Address: 0x1017d388)
WriteFile (Address: 0x1017d32c)

KERNELBASE.dll

CheckIsMSIXPackage (Address: 0x1017d468)
GetApplicationUserModelId (Address: 0x1017d45c)
GetCurrentApplicationUserModelId (Address: 0x1017d458)
GetCurrentPackageFamilyName (Address: 0x1017d460)
GetCurrentPackageFullName (Address: 0x1017d464)
GetPackageFamilyName (Address: 0x1017d46c)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1017d784)
__dllonexit (Address: 0x1017d6bc)
__iscsym (Address: 0x1017d77c)
_amsg_exit (Address: 0x1017d788)
_CIcos (Address: 0x1017d750)
_CIexp (Address: 0x1017d74c)
_CIlog (Address: 0x1017d748)
_CIlog10 (Address: 0x1017d720)
_CIpow (Address: 0x1017d71c)
_CIsin (Address: 0x1017d718)
_CIsqrt (Address: 0x1017d714)
_CxxThrowException (Address: 0x1017d6b8)
_except_handler4_common (Address: 0x1017d6b4)
_ftol2 (Address: 0x1017d754)
_ftol2_sse (Address: 0x1017d69c)
_initterm (Address: 0x1017d78c)
_lock (Address: 0x1017d710)
_onexit (Address: 0x1017d758)
_purecall (Address: 0x1017d73c)
_stricmp (Address: 0x1017d764)
_unlock (Address: 0x1017d6c0)
_vsnprintf (Address: 0x1017d760)
_vsnprintf_s (Address: 0x1017d738)
_vsnwprintf (Address: 0x1017d730)
_wcsicmp (Address: 0x1017d6dc)
_wcslwr (Address: 0x1017d6e8)
_wcsnicmp (Address: 0x1017d6d0)
_wtoi (Address: 0x1017d6c8)
_XcptFilter (Address: 0x1017d780)
??0exception@@QAE@ABV0@@Z (Address: 0x1017d734)
??0exception@@QAE@XZ (Address: 0x1017d728)
??1exception@@UAE@XZ (Address: 0x1017d724)
??1type_info@@UAE@XZ (Address: 0x1017d794)
?terminate@@YAXXZ (Address: 0x1017d790)
abort (Address: 0x1017d770)
ceil (Address: 0x1017d6a0)
floor (Address: 0x1017d6a4)
free (Address: 0x1017d75c)
malloc (Address: 0x1017d744)
memcmp (Address: 0x1017d6a8)
memcpy (Address: 0x1017d6ac)
memcpy_s (Address: 0x1017d72c)
memmove (Address: 0x1017d6b0)
memmove_s (Address: 0x1017d740)
memset (Address: 0x1017d798)
qsort (Address: 0x1017d704)
sprintf_s (Address: 0x1017d708)
sscanf_s (Address: 0x1017d774)
strcat_s (Address: 0x1017d70c)
strcpy_s (Address: 0x1017d768)
strncmp (Address: 0x1017d6fc)
strrchr (Address: 0x1017d76c)
strstr (Address: 0x1017d778)
swprintf_s (Address: 0x1017d6d4)
swscanf_s (Address: 0x1017d6d8)
toupper (Address: 0x1017d6f8)
wcscat_s (Address: 0x1017d6e4)
wcschr (Address: 0x1017d6cc)
wcscpy_s (Address: 0x1017d6e0)
wcsncmp (Address: 0x1017d6f4)
wcsrchr (Address: 0x1017d6f0)
wcsspn (Address: 0x1017d700)
wcsstr (Address: 0x1017d6ec)
wcstol (Address: 0x1017d6c4)

ntdll.dll

EtwEventRegister (Address: 0x1017d86c)
EtwEventUnregister (Address: 0x1017d864)
EtwEventWriteNoRegistration (Address: 0x1017d7e4)
EtwEventWriteTransfer (Address: 0x1017d85c)
EtwGetTraceEnableFlags (Address: 0x1017d874)
EtwGetTraceEnableLevel (Address: 0x1017d880)
EtwGetTraceLoggerHandle (Address: 0x1017d878)
EtwLogTraceEvent (Address: 0x1017d860)
EtwRegisterTraceGuidsA (Address: 0x1017d87c)
EtwUnregisterTraceGuids (Address: 0x1017d870)
LdrResSearchResource (Address: 0x1017d7bc)
NtClose (Address: 0x1017d7d0)
NtQueryInformationProcess (Address: 0x1017d850)
NtQueryValueKey (Address: 0x1017d868)
NtQueryWnfStateData (Address: 0x1017d84c)
RtlAllocateHeap (Address: 0x1017d848)
RtlAnsiStringToUnicodeString (Address: 0x1017d890)
RtlAppendUnicodeStringToString (Address: 0x1017d80c)
RtlAppendUnicodeToString (Address: 0x1017d808)
RtlCopyUnicodeString (Address: 0x1017d7e0)
RtlDllShutdownInProgress (Address: 0x1017d858)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1017d824)
RtlFormatCurrentUserKeyPath (Address: 0x1017d804)
RtlFreeHeap (Address: 0x1017d83c)
RtlFreeUnicodeString (Address: 0x1017d81c)
RtlGetNativeSystemInformation (Address: 0x1017d82c)
RtlGetVersion (Address: 0x1017d7c8)
RtlGUIDFromString (Address: 0x1017d854)
RtlImageDirectoryEntryToData (Address: 0x1017d7c4)
RtlInitString (Address: 0x1017d7ec)
RtlInitUnicodeString (Address: 0x1017d834)
RtlInitUnicodeStringEx (Address: 0x1017d814)
RtlIsCriticalSectionLockedByThread (Address: 0x1017d884)
RtlNtPathNameToDosPathName (Address: 0x1017d7b0)
RtlpEnsureBufferSize (Address: 0x1017d7ac)
RtlPublishWnfStateData (Address: 0x1017d888)
RtlReAllocateHeap (Address: 0x1017d844)
RtlRunOnceExecuteOnce (Address: 0x1017d7cc)
RtlUnicodeStringToAnsiString (Address: 0x1017d7a4)
RtlUnicodeStringToInteger (Address: 0x1017d7dc)
RtlUpcaseUnicodeChar (Address: 0x1017d830)
RtlUpcaseUnicodeString (Address: 0x1017d7a0)
RtlVerifyVersionInfo (Address: 0x1017d7c0)
RtlxAnsiStringToUnicodeSize (Address: 0x1017d7e8)
VerSetConditionMask (Address: 0x1017d88c)
ZwClose (Address: 0x1017d838)
ZwCreateFile (Address: 0x1017d800)
ZwCreateSection (Address: 0x1017d7f8)
ZwEnumerateKey (Address: 0x1017d840)
ZwEnumerateValueKey (Address: 0x1017d7d8)
ZwMapViewOfSection (Address: 0x1017d7b8)
ZwOpenFile (Address: 0x1017d820)
ZwOpenKey (Address: 0x1017d818)
ZwQueryDirectoryFile (Address: 0x1017d7a8)
ZwQueryInformationFile (Address: 0x1017d7fc)
ZwQueryInformationProcess (Address: 0x1017d7f4)
ZwQueryKey (Address: 0x1017d7d4)
ZwQuerySystemInformation (Address: 0x1017d828)
ZwQueryValueKey (Address: 0x1017d810)
ZwSetInformationProcess (Address: 0x1017d7f0)
ZwUnmapViewOfSection (Address: 0x1017d7b4)

USER32.dll

AttachThreadInput (Address: 0x1017d478)
CallWindowProcA (Address: 0x1017d538)
CallWindowProcW (Address: 0x1017d53c)
ClientToScreen (Address: 0x1017d59c)
CloseClipboard (Address: 0x1017d500)
CloseDesktop (Address: 0x1017d4f4)
CreateIconIndirect (Address: 0x1017d4c8)
CreateWindowExA (Address: 0x1017d574)
DefWindowProcA (Address: 0x1017d568)
DestroyIcon (Address: 0x1017d4d4)
DestroyWindow (Address: 0x1017d488)
DispatchMessageA (Address: 0x1017d48c)
DisplayConfigGetDeviceInfo (Address: 0x1017d57c)
EmptyClipboard (Address: 0x1017d520)
EnumDisplayDevicesA (Address: 0x1017d578)
EnumDisplayMonitors (Address: 0x1017d4a0)
EnumDisplaySettingsA (Address: 0x1017d598)
EqualRect (Address: 0x1017d4a4)
GetAncestor (Address: 0x1017d4b0)
GetClientRect (Address: 0x1017d594)
GetCursor (Address: 0x1017d4d8)
GetCursorPos (Address: 0x1017d4c4)
GetDC (Address: 0x1017d5b0)
GetDesktopWindow (Address: 0x1017d4d0)
GetForegroundWindow (Address: 0x1017d50c)
GetKeyState (Address: 0x1017d52c)
GetMonitorInfoA (Address: 0x1017d588)
GetPropW (Address: 0x1017d484)
GetSystemMetrics (Address: 0x1017d5a4)
GetThreadDesktop (Address: 0x1017d4f0)
GetUserObjectInformationA (Address: 0x1017d4f8)
GetWindow (Address: 0x1017d490)
GetWindowDC (Address: 0x1017d4cc)
GetWindowDisplayAffinity (Address: 0x1017d508)
GetWindowInfo (Address: 0x1017d5ac)
GetWindowLongA (Address: 0x1017d518)
GetWindowLongW (Address: 0x1017d498)
GetWindowRect (Address: 0x1017d528)
GetWindowThreadProcessId (Address: 0x1017d494)
IntersectRect (Address: 0x1017d58c)
IsIconic (Address: 0x1017d5b8)
IsRectEmpty (Address: 0x1017d4a8)
IsWindow (Address: 0x1017d51c)
IsWindowUnicode (Address: 0x1017d49c)
IsWindowVisible (Address: 0x1017d564)
IsZoomed (Address: 0x1017d54c)
KillTimer (Address: 0x1017d544)
LoadCursorW (Address: 0x1017d4dc)
LoadIconA (Address: 0x1017d56c)
MonitorFromWindow (Address: 0x1017d5b4)
mouse_event (Address: 0x1017d514)
MsgWaitForMultipleObjects (Address: 0x1017d47c)
NotifyOverlayWindow (Address: 0x1017d4b8)
OffsetRect (Address: 0x1017d5a0)
OpenClipboard (Address: 0x1017d524)
OpenInputDesktop (Address: 0x1017d4fc)
PeekMessageA (Address: 0x1017d554)
PostMessageA (Address: 0x1017d530)
PtInRect (Address: 0x1017d4bc)
RegisterClassA (Address: 0x1017d570)
RegisterHotKey (Address: 0x1017d4ec)
ReleaseDC (Address: 0x1017d5a8)
RemovePropW (Address: 0x1017d480)
SendMessageA (Address: 0x1017d534)
SetClipboardData (Address: 0x1017d504)
SetCursor (Address: 0x1017d560)
SetCursorPos (Address: 0x1017d4c0)
SetForegroundWindow (Address: 0x1017d510)
SetPropW (Address: 0x1017d474)
SetRect (Address: 0x1017d590)
SetRectEmpty (Address: 0x1017d4e4)
SetTimer (Address: 0x1017d548)
SetWindowDisplayAffinity (Address: 0x1017d4b4)
SetWindowLongA (Address: 0x1017d4ac)
SetWindowLongW (Address: 0x1017d540)
SetWindowPos (Address: 0x1017d584)
ShowWindow (Address: 0x1017d55c)
SystemParametersInfoA (Address: 0x1017d580)
TranslateMessage (Address: 0x1017d550)
UnionRect (Address: 0x1017d4e0)
UnregisterClassA (Address: 0x1017d558)
UnregisterHotKey (Address: 0x1017d4e8)

win32u.dll

NtBindCompositionSurface (Address: 0x1017d8a0)
NtNotifyPresentToCompositionSurface (Address: 0x1017d8a4)
NtQueryCompositionSurfaceStatistics (Address: 0x1017d89c)
NtUnBindCompositionSurface (Address: 0x1017d898)