dcomp.dll

Description: Microsoft DirectComposition Library

Version: 10.0.19041.6157

Architecture: 32-bit

Operating System: Windows NT

SHA256: 66a6c1b089f3c23951d7afd990fd3929

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DCompositionAttachMouseDragToHwnd (Ordinal: 1017, Address: 0xb5080)
DCompositionAttachMouseWheelToHwnd (Ordinal: 1018, Address: 0xb5100)
(Ordinal: 1019, Address: 0x13c1c9)
DCompositionCreateDevice2 (Ordinal: 1020, Address: 0x39ef0)
DCompositionCreateDevice3 (Ordinal: 1021, Address: 0x3b5b0)
DCompositionCreateDevice (Ordinal: 1022, Address: 0xae820)
DCompositionCreateSurfaceHandle (Ordinal: 1023, Address: 0x5c280)
DllCanUnloadNow (Ordinal: 1024, Address: 0x65620)
DllGetActivationFactory (Ordinal: 1025, Address: 0x655f0)
DllGetClassObject (Ordinal: 1026, Address: 0xb5230)
DwmEnableMMCSS (Ordinal: 1027, Address: 0xae800)
(Ordinal: 1028, Address: 0x13c2c4)
DwmFlush (Ordinal: 1029, Address: 0x78f80)
DwmpEnableDDASupport (Ordinal: 1030, Address: 0x78f80)
(Ordinal: 1031, Address: 0x75190)
(Ordinal: 1038, Address: 0xb51e0)
(Ordinal: 1039, Address: 0xb5180)
(Ordinal: 1040, Address: 0xae840)
(Ordinal: 1041, Address: 0x31340)
(Ordinal: 1042, Address: 0xb5210)
(Ordinal: 1043, Address: 0x13c1a7)
(Ordinal: 1044, Address: 0x13c1ed)
(Ordinal: 1045, Address: 0x13c219)
(Ordinal: 1046, Address: 0x13c24a)
(Ordinal: 1047, Address: 0x13c272)
(Ordinal: 1048, Address: 0x13c29b)
(Ordinal: 2000, Address: 0x136bd0)
(Ordinal: 2001, Address: 0x136c80)
(Ordinal: 2002, Address: 0x136c10)
(Ordinal: 2003, Address: 0x795f0)
(Ordinal: 2004, Address: 0x138f20)
(Ordinal: 2005, Address: 0x795f0)

Imported DLLs & Functions

api-ms-win-appmodel-unlock-l1-1-0.dll

IsDeveloperModeEnabled (Address: 0x10145000)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10145008)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10145030)
CoCreateInstance (Address: 0x10145034)
CoGetApartmentType (Address: 0x1014502c)
CoGetInterfaceAndReleaseStream (Address: 0x10145010)
CoMarshalInterface (Address: 0x10145024)
CoReleaseMarshalData (Address: 0x10145014)
CoTaskMemAlloc (Address: 0x10145018)
CoTaskMemFree (Address: 0x1014501c)
CreateStreamOnHGlobal (Address: 0x10145028)
StringFromGUID2 (Address: 0x10145020)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1014503c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1014504c)
IsDebuggerPresent (Address: 0x10145048)
OutputDebugStringW (Address: 0x10145044)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10145054)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1014505c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1014506c)
RaiseException (Address: 0x10145074)
SetLastError (Address: 0x10145070)
SetUnhandledExceptionFilter (Address: 0x10145064)
UnhandledExceptionFilter (Address: 0x10145068)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1014507c)

api-ms-win-core-errorhandling-l1-1-3.dll

TerminateProcessOnMemoryExhaustion (Address: 0x10145084)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1014508c)
DuplicateHandle (Address: 0x10145090)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x101450a0)
HeapAlloc (Address: 0x1014509c)
HeapFree (Address: 0x10145098)
HeapReAlloc (Address: 0x101450a4)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x101450ac)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x101450c4)
GetModuleFileNameA (Address: 0x101450b4)
GetModuleHandleExW (Address: 0x101450c0)
GetModuleHandleW (Address: 0x101450bc)
GetProcAddress (Address: 0x101450b8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x101450cc)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x101450e0)
MapViewOfFile (Address: 0x101450d8)
VirtualAlloc (Address: 0x101450dc)
VirtualFree (Address: 0x101450d4)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x101450fc)
GetCurrentProcessId (Address: 0x101450f4)
GetCurrentThread (Address: 0x101450ec)
GetCurrentThreadId (Address: 0x10145100)
OpenProcessToken (Address: 0x101450e8)
TerminateProcess (Address: 0x101450f0)
TerminateThread (Address: 0x101450f8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1014510c)
OpenProcess (Address: 0x10145108)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10145114)
QueryPerformanceFrequency (Address: 0x10145118)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x10145120)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10145128)
RegOpenKeyExW (Address: 0x10145130)
RegQueryValueExW (Address: 0x1014512c)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureStackBackTrace (Address: 0x10145138)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10145140)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10145168)
AcquireSRWLockShared (Address: 0x10145190)
CreateEventExW (Address: 0x10145174)
CreateEventW (Address: 0x10145194)
CreateMutexExW (Address: 0x10145164)
CreateSemaphoreExW (Address: 0x10145170)
DeleteCriticalSection (Address: 0x10145198)
EnterCriticalSection (Address: 0x10145148)
InitializeCriticalSection (Address: 0x10145184)
InitializeCriticalSectionAndSpinCount (Address: 0x10145180)
InitializeCriticalSectionEx (Address: 0x10145154)
InitializeSRWLock (Address: 0x1014517c)
LeaveCriticalSection (Address: 0x10145150)
OpenSemaphoreW (Address: 0x10145178)
ReleaseMutex (Address: 0x1014515c)
ReleaseSemaphore (Address: 0x1014514c)
ReleaseSRWLockExclusive (Address: 0x10145160)
ReleaseSRWLockShared (Address: 0x10145188)
ResetEvent (Address: 0x1014518c)
SetEvent (Address: 0x1014519c)
WaitForSingleObject (Address: 0x10145158)
WaitForSingleObjectEx (Address: 0x1014516c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x101451a8)
InitOnceComplete (Address: 0x101451ac)
InitOnceExecuteOnce (Address: 0x101451b0)
WaitOnAddress (Address: 0x101451b4)
WakeByAddressAll (Address: 0x101451a4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x101451c4)
GetTickCount (Address: 0x101451bc)
GetTickCount64 (Address: 0x101451c0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x101451cc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x101451dc)
CreateThreadpoolTimer (Address: 0x101451e0)
SetThreadpoolTimer (Address: 0x101451d8)
WaitForThreadpoolTimerCallbacks (Address: 0x101451d4)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x101451ec)
EncodePointer (Address: 0x101451e8)

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW (Address: 0x101451f4)

api-ms-win-core-version-l1-1-1.dll

GetFileVersionInfoSizeW (Address: 0x10145200)
GetFileVersionInfoW (Address: 0x101451fc)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10145210)
RoOriginateError (Address: 0x10145208)
RoOriginateErrorW (Address: 0x1014520c)
RoTransformError (Address: 0x10145218)
SetRestrictedErrorInfo (Address: 0x10145214)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10145220)
RoGetMatchingRestrictedErrorInfo (Address: 0x10145228)
RoReportFailedDelegate (Address: 0x10145224)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x10145230)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x1014524c)
WindowsConcatString (Address: 0x10145248)
WindowsCreateString (Address: 0x1014525c)
WindowsCreateStringReference (Address: 0x10145244)
WindowsDeleteString (Address: 0x10145240)
WindowsDuplicateString (Address: 0x1014523c)
WindowsGetStringLen (Address: 0x10145268)
WindowsGetStringRawBuffer (Address: 0x10145258)
WindowsIsStringEmpty (Address: 0x10145254)
WindowsStringHasEmbeddedNull (Address: 0x10145250)
WindowsSubstringWithSpecifiedLength (Address: 0x10145238)
WindowsTrimStringEnd (Address: 0x10145264)
WindowsTrimStringStart (Address: 0x10145260)

api-ms-win-crt-math-l1-1-0.dll

_fdtest (Address: 0x10145274)
_finite (Address: 0x10145270)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x101452f0)
_except_handler4_common (Address: 0x101452f4)
_o___std_type_info_destroy_list (Address: 0x10145300)
_o___stdio_common_vsnwprintf_s (Address: 0x101452fc)
_o___stdio_common_vsprintf_s (Address: 0x101452f8)
_o___stdio_common_vswprintf (Address: 0x10145308)
_o___stdio_common_vswprintf_s (Address: 0x10145304)
_o__cexit (Address: 0x1014527c)
_o__CIsin (Address: 0x10145280)
_o__CIsqrt (Address: 0x10145284)
_o__configure_narrow_argv (Address: 0x10145288)
_o__crt_atexit (Address: 0x1014528c)
_o__errno (Address: 0x10145290)
_o__execute_onexit_table (Address: 0x10145294)
_o__initialize_narrow_environment (Address: 0x10145298)
_o__initialize_onexit_table (Address: 0x1014529c)
_o__invalid_parameter_noinfo (Address: 0x101452a0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x101452a4)
_o__purecall (Address: 0x101452a8)
_o__register_onexit_function (Address: 0x101452ac)
_o__seh_filter_dll (Address: 0x101452b0)
_o__wcsicmp (Address: 0x101452b8)
_o__wcsicmp_l (Address: 0x101452bc)
_o__wtof (Address: 0x101452c0)
_o_abort (Address: 0x101452c4)
_o_ceil (Address: 0x101452c8)
_o_free (Address: 0x101452cc)
_o_malloc (Address: 0x101452d0)
_o_qsort (Address: 0x101452d4)
_o_realloc (Address: 0x101452d8)
_o_strncat_s (Address: 0x101452dc)
_o_towlower (Address: 0x101452e0)
_o_wcscpy_s (Address: 0x101452e4)
_o_wcsncpy_s (Address: 0x101452e8)
memcmp (Address: 0x1014530c)
memcpy (Address: 0x10145310)
memmove (Address: 0x101452b4)
strchr (Address: 0x101452ec)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1014531c)
_initterm_e (Address: 0x10145318)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x10145324)
wcsncmp (Address: 0x1014532c)
wcsnlen (Address: 0x10145328)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x10145334)
EventSetInformation (Address: 0x10145338)
EventUnregister (Address: 0x10145340)
EventWriteTransfer (Address: 0x1014533c)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

CreateDCompositionHwndTarget (Address: 0x1014534c)
DestroyDCompositionHwndTarget (Address: 0x10145348)

api-ms-win-rtcore-ntuser-private-l1-1-7.dll

IsOneCoreTransformMode (Address: 0x10145354)

api-ms-win-rtcore-ntuser-private-l1-1-9.dll

(Address: 0x1014535c)

api-ms-win-security-base-l1-1-0.dll

AllocateLocallyUniqueId (Address: 0x10145364)
GetTokenInformation (Address: 0x10145368)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryValueW (Address: 0x10145370)

msvcp_win.dll

_Wcscoll (Address: 0x101453c4)
_Wcsxfrm (Address: 0x101453c0)
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x101453a0)
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x10145394)
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x101453c8)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x101453b4)
?_Incref@facet@locale@std@@UAEXXZ (Address: 0x10145398)
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x1014539c)
??0_Locinfo@std@@QAE@PBD@Z (Address: 0x10145380)
??0_Lockit@std@@QAE@H@Z (Address: 0x1014537c)
??0facet@locale@std@@IAE@I@Z (Address: 0x101453a4)
??1_Locinfo@std@@QAE@XZ (Address: 0x1014538c)
??1_Lockit@std@@QAE@XZ (Address: 0x10145388)
??1facet@locale@std@@MAE@XZ (Address: 0x10145378)
??Bid@locale@std@@QAEIXZ (Address: 0x101453b8)
?c_str@?$_Yarn@D@std@@QBEPBDXZ (Address: 0x10145384)
?id@?$collate@G@std@@2V0locale@2@A (Address: 0x101453bc)
?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x101453b0)
?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x10145390)
?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x101453ac)
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x101453a8)

ntdll.dll

DbgPrintEx (Address: 0x101453e0)
DbgPrompt (Address: 0x101453e8)
NtQueryInformationProcess (Address: 0x10145418)
NtQuerySystemInformation (Address: 0x101453e4)
NtUnmapViewOfSection (Address: 0x10145414)
RtlAllocateHeap (Address: 0x101453d8)
RtlCreateHeap (Address: 0x101453d4)
RtlDeleteElementGenericTable (Address: 0x101453ec)
RtlDestroyHeap (Address: 0x101453d0)
RtlEnumerateGenericTableWithoutSplaying (Address: 0x101453fc)
RtlFreeHeap (Address: 0x101453dc)
RtlGetElementGenericTable (Address: 0x1014540c)
RtlGetLastNtStatus (Address: 0x1014541c)
RtlInitializeGenericTable (Address: 0x101453f8)
RtlInsertElementGenericTable (Address: 0x101453f0)
RtlLookupElementGenericTable (Address: 0x101453f4)
RtlNumberGenericTableElements (Address: 0x10145410)
RtlQueryWnfStateData (Address: 0x10145400)
RtlSubscribeWnfStateChangeNotification (Address: 0x10145404)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x10145408)

win32u.dll

NtCreateCompositionInputSink (Address: 0x101454e8)
NtCreateCompositionSurfaceHandle (Address: 0x101454f0)
NtDCompositionAddCrossDeviceVisualChild (Address: 0x10145434)
NtDCompositionCommitChannel (Address: 0x101454d8)
NtDCompositionCreateAndBindSharedSection (Address: 0x1014544c)
NtDCompositionCreateChannel (Address: 0x101454e4)
NtDCompositionCreateSharedResourceHandle (Address: 0x101454ec)
NtDCompositionDestroyChannel (Address: 0x101454e0)
NtDCompositionEnableMMCSS (Address: 0x101454f4)
NtDCompositionGetBatchId (Address: 0x10145428)
NtDCompositionGetDeletedResources (Address: 0x10145458)
NtDCompositionGetFrameStatistics (Address: 0x101454f8)
NtDCompositionProcessChannelBatchBuffer (Address: 0x101454dc)
NtDCompositionReleaseAllResources (Address: 0x101454cc)
NtDCompositionRemoveCrossDeviceVisualChild (Address: 0x10145438)
NtDCompositionSetChannelCommitCompletionEvent (Address: 0x10145464)
NtDCompositionSetChannelConnectionId (Address: 0x10145430)
NtDCompositionSetDebugCounter (Address: 0x1014543c)
NtDCompositionSuspendAnimations (Address: 0x1014542c)
NtDCompositionSynchronize (Address: 0x10145424)
NtDCompositionTelemetryAnimationScenarioBegin (Address: 0x10145448)
NtDCompositionTelemetryAnimationScenarioReference (Address: 0x10145444)
NtDCompositionTelemetryAnimationScenarioUnreference (Address: 0x10145440)
NtDCompositionTelemetrySetApplicationId (Address: 0x10145450)
NtDCompositionTelemetryTouchInteractionBegin (Address: 0x10145460)
NtDCompositionTelemetryTouchInteractionEnd (Address: 0x10145454)
NtDCompositionTelemetryTouchInteractionUpdate (Address: 0x1014545c)
NtDCompositionWaitForChannel (Address: 0x10145468)
NtFlipObjectAddContent (Address: 0x101454b4)
NtFlipObjectAddPoolBuffer (Address: 0x101454bc)
NtFlipObjectConsumerAcquirePresent (Address: 0x10145494)
NtFlipObjectConsumerAdjustUsageReference (Address: 0x1014549c)
NtFlipObjectConsumerBeginProcessPresent (Address: 0x10145490)
NtFlipObjectConsumerEndProcessPresent (Address: 0x10145498)
NtFlipObjectConsumerPostMessage (Address: 0x101454a4)
NtFlipObjectConsumerQueryBufferInfo (Address: 0x101454a8)
NtFlipObjectCreate (Address: 0x1014546c)
NtFlipObjectDisconnectEndpoint (Address: 0x10145470)
NtFlipObjectEnablePresentStatisticsType (Address: 0x10145484)
NtFlipObjectOpen (Address: 0x1014548c)
NtFlipObjectPresentCancel (Address: 0x10145480)
NtFlipObjectQueryBufferAvailableEvent (Address: 0x10145478)
NtFlipObjectQueryEndpointConnected (Address: 0x10145474)
NtFlipObjectQueryNextMessageToProducer (Address: 0x101454c4)
NtFlipObjectReadNextMessageToProducer (Address: 0x101454c8)
NtFlipObjectRemoveContent (Address: 0x101454ac)
NtFlipObjectRemovePoolBuffer (Address: 0x101454c0)
NtFlipObjectSetContent (Address: 0x101454b0)
NtFlipObjectSetMaximumBackchannelQueueDepth (Address: 0x10145488)
NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager (Address: 0x101454b8)
NtTokenManagerCreateCompositionTokenHandle (Address: 0x101454d0)
NtTokenManagerCreateFlipObjectReturnTokenHandle (Address: 0x101454a0)
NtTokenManagerCreateFlipObjectTokenHandle (Address: 0x1014547c)
NtVisualCaptureBits (Address: 0x101454d4)