dcomp.dll
Description: Microsoft DirectComposition Library
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6157
Architecture: 64-bit
Operating System: Windows NT
SHA256: e14616683da13a69e578a3cd8214137f
File Size: 1.9 MB
Uploaded At: Dec. 1, 2025, 7:25 a.m.
Views: 12
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DCompositionAttachMouseDragToHwnd (Ordinal: 1017, Address: 0xb1d00)
- DCompositionAttachMouseWheelToHwnd (Ordinal: 1018, Address: 0xb1d70)
- (Ordinal: 1019, Address: 0x1ac929)
- DCompositionCreateDevice (Ordinal: 1020, Address: 0x7d20)
- DCompositionCreateDevice2 (Ordinal: 1021, Address: 0x66450)
- DCompositionCreateDevice3 (Ordinal: 1022, Address: 0x1ac90)
- DCompositionCreateSurfaceHandle (Ordinal: 1023, Address: 0x458d0)
- DllCanUnloadNow (Ordinal: 1024, Address: 0x55f60)
- DllGetActivationFactory (Ordinal: 1025, Address: 0x55fb0)
- DllGetClassObject (Ordinal: 1026, Address: 0xb1e70)
- DwmEnableMMCSS (Ordinal: 1027, Address: 0xaa430)
- (Ordinal: 1028, Address: 0x1aca24)
- DwmFlush (Ordinal: 1029, Address: 0x6a5e0)
- DwmpEnableDDASupport (Ordinal: 1030, Address: 0x6a5e0)
- (Ordinal: 1031, Address: 0x66550)
- (Ordinal: 1038, Address: 0x5e50)
- (Ordinal: 1039, Address: 0xb1de0)
- (Ordinal: 1040, Address: 0xaa460)
- (Ordinal: 1041, Address: 0x4750)
- (Ordinal: 1042, Address: 0xb1e60)
- (Ordinal: 1043, Address: 0x1ac907)
- (Ordinal: 1044, Address: 0x1ac94d)
- (Ordinal: 1045, Address: 0x1ac979)
- (Ordinal: 1046, Address: 0x1ac9aa)
- (Ordinal: 1047, Address: 0x1ac9d2)
- (Ordinal: 1048, Address: 0x1ac9fb)
- (Ordinal: 2000, Address: 0x155b80)
- (Ordinal: 2001, Address: 0x155c60)
- (Ordinal: 2002, Address: 0x155bc0)
- (Ordinal: 2003, Address: 0x6ab00)
- (Ordinal: 2004, Address: 0x158500)
- (Ordinal: 2005, Address: 0x6ab00)
Imported DLLs & Functions
api-ms-win-appmodel-unlock-l1-1-0.dll
- IsDeveloperModeEnabled (Address: 0x18017df88)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x18017df98)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x18017dfd8)
- CoCreateInstance (Address: 0x18017dfa8)
- CoGetApartmentType (Address: 0x18017dfc8)
- CoGetInterfaceAndReleaseStream (Address: 0x18017dfb8)
- CoMarshalInterface (Address: 0x18017dfe0)
- CoReleaseMarshalData (Address: 0x18017dfe8)
- CoTaskMemAlloc (Address: 0x18017dfc0)
- CoTaskMemFree (Address: 0x18017dfd0)
- CreateStreamOnHGlobal (Address: 0x18017dff0)
- StringFromGUID2 (Address: 0x18017dfb0)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x18017e000)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18017e020)
- IsDebuggerPresent (Address: 0x18017e010)
- OutputDebugStringW (Address: 0x18017e018)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18017e030)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18017e040)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18017e050)
- RaiseException (Address: 0x18017e068)
- SetLastError (Address: 0x18017e060)
- SetUnhandledExceptionFilter (Address: 0x18017e070)
- UnhandledExceptionFilter (Address: 0x18017e058)
api-ms-win-core-errorhandling-l1-1-2.dll
- RaiseFailFastException (Address: 0x18017e080)
api-ms-win-core-errorhandling-l1-1-3.dll
- TerminateProcessOnMemoryExhaustion (Address: 0x18017e090)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18017e0a0)
- DuplicateHandle (Address: 0x18017e0a8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18017e0b8)
- HeapAlloc (Address: 0x18017e0c0)
- HeapFree (Address: 0x18017e0d0)
- HeapReAlloc (Address: 0x18017e0c8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x18017e0e0)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x18017e0f0)
- GetModuleFileNameA (Address: 0x18017e100)
- GetModuleHandleExW (Address: 0x18017e0f8)
- GetModuleHandleW (Address: 0x18017e108)
- GetProcAddress (Address: 0x18017e110)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18017e120)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x18017e130)
- MapViewOfFile (Address: 0x18017e138)
- VirtualAlloc (Address: 0x18017e140)
- VirtualFree (Address: 0x18017e148)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18017e178)
- GetCurrentProcessId (Address: 0x18017e160)
- GetCurrentThread (Address: 0x18017e158)
- GetCurrentThreadId (Address: 0x18017e168)
- OpenProcessToken (Address: 0x18017e180)
- TerminateProcess (Address: 0x18017e188)
- TerminateThread (Address: 0x18017e170)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x18017e198)
- OpenProcess (Address: 0x18017e1a0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18017e1b0)
- QueryPerformanceFrequency (Address: 0x18017e1b8)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x18017e1c8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18017e1d8)
- RegOpenKeyExW (Address: 0x18017e1e0)
- RegQueryValueExW (Address: 0x18017e1e8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18017e210)
- RtlCaptureStackBackTrace (Address: 0x18017e208)
- RtlLookupFunctionEntry (Address: 0x18017e1f8)
- RtlVirtualUnwind (Address: 0x18017e200)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x18017e220)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18017e2d8)
- AcquireSRWLockShared (Address: 0x18017e278)
- CreateEventExW (Address: 0x18017e2a8)
- CreateEventW (Address: 0x18017e2b0)
- CreateMutexExW (Address: 0x18017e240)
- CreateSemaphoreExW (Address: 0x18017e250)
- DeleteCriticalSection (Address: 0x18017e2c0)
- EnterCriticalSection (Address: 0x18017e260)
- InitializeCriticalSection (Address: 0x18017e2b8)
- InitializeCriticalSectionAndSpinCount (Address: 0x18017e238)
- InitializeCriticalSectionEx (Address: 0x18017e2a0)
- InitializeSRWLock (Address: 0x18017e280)
- LeaveCriticalSection (Address: 0x18017e230)
- OpenSemaphoreW (Address: 0x18017e290)
- ReleaseMutex (Address: 0x18017e2c8)
- ReleaseSemaphore (Address: 0x18017e258)
- ReleaseSRWLockExclusive (Address: 0x18017e298)
- ReleaseSRWLockShared (Address: 0x18017e288)
- ResetEvent (Address: 0x18017e270)
- SetEvent (Address: 0x18017e268)
- WaitForSingleObject (Address: 0x18017e248)
- WaitForSingleObjectEx (Address: 0x18017e2d0)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x18017e2f0)
- InitOnceComplete (Address: 0x18017e2e8)
- InitOnceExecuteOnce (Address: 0x18017e300)
- WaitOnAddress (Address: 0x18017e308)
- WakeByAddressAll (Address: 0x18017e2f8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x18017e318)
- GetTickCount (Address: 0x18017e320)
- GetTickCount64 (Address: 0x18017e328)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x18017e338)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18017e348)
- CreateThreadpoolTimer (Address: 0x18017e350)
- SetThreadpoolTimer (Address: 0x18017e358)
- WaitForThreadpoolTimerCallbacks (Address: 0x18017e360)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x18017e370)
- EncodePointer (Address: 0x18017e378)
api-ms-win-core-version-l1-1-0.dll
- VerQueryValueW (Address: 0x18017e388)
api-ms-win-core-version-l1-1-1.dll
- GetFileVersionInfoSizeW (Address: 0x18017e398)
- GetFileVersionInfoW (Address: 0x18017e3a0)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x18017e3b0)
- RoOriginateError (Address: 0x18017e3d0)
- RoOriginateErrorW (Address: 0x18017e3b8)
- RoTransformError (Address: 0x18017e3c8)
- SetRestrictedErrorInfo (Address: 0x18017e3c0)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x18017e3e8)
- RoGetMatchingRestrictedErrorInfo (Address: 0x18017e3f0)
- RoReportFailedDelegate (Address: 0x18017e3e0)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x18017e400)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x18017e440)
- WindowsConcatString (Address: 0x18017e450)
- WindowsCreateString (Address: 0x18017e428)
- WindowsCreateStringReference (Address: 0x18017e420)
- WindowsDeleteString (Address: 0x18017e430)
- WindowsDuplicateString (Address: 0x18017e438)
- WindowsGetStringLen (Address: 0x18017e448)
- WindowsGetStringRawBuffer (Address: 0x18017e458)
- WindowsIsStringEmpty (Address: 0x18017e410)
- WindowsStringHasEmbeddedNull (Address: 0x18017e418)
- WindowsSubstringWithSpecifiedLength (Address: 0x18017e460)
- WindowsTrimStringEnd (Address: 0x18017e470)
- WindowsTrimStringStart (Address: 0x18017e468)
api-ms-win-crt-math-l1-1-0.dll
- _fdtest (Address: 0x18017e488)
- _finite (Address: 0x18017e480)
- ceilf (Address: 0x18017e490)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x18017e5b8)
- __CxxFrameHandler3 (Address: 0x18017e578)
- __std_terminate (Address: 0x18017e580)
- _o___std_type_info_destroy_list (Address: 0x18017e5b0)
- _o___stdio_common_vsnwprintf_s (Address: 0x18017e5a8)
- _o___stdio_common_vsprintf_s (Address: 0x18017e5a0)
- _o___stdio_common_vswprintf (Address: 0x18017e598)
- _o___stdio_common_vswprintf_s (Address: 0x18017e590)
- _o__cexit (Address: 0x18017e588)
- _o__configure_narrow_argv (Address: 0x18017e4a0)
- _o__crt_atexit (Address: 0x18017e4a8)
- _o__errno (Address: 0x18017e4b0)
- _o__execute_onexit_table (Address: 0x18017e4b8)
- _o__initialize_narrow_environment (Address: 0x18017e4c0)
- _o__initialize_onexit_table (Address: 0x18017e4c8)
- _o__invalid_parameter_noinfo (Address: 0x18017e4d0)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x18017e4d8)
- _o__purecall (Address: 0x18017e4e0)
- _o__register_onexit_function (Address: 0x18017e4e8)
- _o__seh_filter_dll (Address: 0x18017e4f0)
- _o__wcsicmp (Address: 0x18017e500)
- _o__wcsicmp_l (Address: 0x18017e508)
- _o__wtof (Address: 0x18017e510)
- _o_abort (Address: 0x18017e518)
- _o_free (Address: 0x18017e520)
- _o_malloc (Address: 0x18017e528)
- _o_qsort (Address: 0x18017e530)
- _o_realloc (Address: 0x18017e538)
- _o_sin (Address: 0x18017e540)
- _o_sqrt (Address: 0x18017e548)
- _o_strncat_s (Address: 0x18017e550)
- _o_towlower (Address: 0x18017e558)
- _o_wcscpy_s (Address: 0x18017e560)
- _o_wcsncpy_s (Address: 0x18017e568)
- memcmp (Address: 0x18017e5c0)
- memcpy (Address: 0x18017e5c8)
- memmove (Address: 0x18017e4f8)
- strchr (Address: 0x18017e570)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x18017e5e0)
- _initterm_e (Address: 0x18017e5d8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x18017e5f0)
- wcsncmp (Address: 0x18017e600)
- wcsnlen (Address: 0x18017e5f8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x18017e610)
- EventSetInformation (Address: 0x18017e620)
- EventUnregister (Address: 0x18017e618)
- EventWriteTransfer (Address: 0x18017e628)
api-ms-win-rtcore-ntuser-private-l1-1-0.dll
- CreateDCompositionHwndTarget (Address: 0x18017e638)
- DestroyDCompositionHwndTarget (Address: 0x18017e640)
api-ms-win-rtcore-ntuser-private-l1-1-7.dll
- IsOneCoreTransformMode (Address: 0x18017e650)
api-ms-win-rtcore-ntuser-private-l1-1-9.dll
- (Address: 0x18017e660)
api-ms-win-security-base-l1-1-0.dll
- AllocateLocallyUniqueId (Address: 0x18017e678)
- GetTokenInformation (Address: 0x18017e670)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryValueW (Address: 0x18017e688)
msvcp_win.dll
- _Wcscoll (Address: 0x18017e728)
- _Wcsxfrm (Address: 0x18017e720)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18017e6f0)
- ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18017e6d0)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18017e730)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18017e6e8)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18017e6d8)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18017e6e0)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18017e6a8)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18017e6a0)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18017e6f8)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18017e6c0)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18017e6b8)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18017e698)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18017e708)
- ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x18017e6b0)
- ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x18017e710)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x18017e700)
- ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x18017e6c8)
- ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x18017e718)
- ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x18017e738)
ntdll.dll
- DbgPrintEx (Address: 0x18017e760)
- DbgPrompt (Address: 0x18017e770)
- NtQueryInformationProcess (Address: 0x18017e7d0)
- NtQuerySystemInformation (Address: 0x18017e768)
- NtUnmapViewOfSection (Address: 0x18017e7c8)
- RtlAllocateHeap (Address: 0x18017e750)
- RtlCreateHeap (Address: 0x18017e748)
- RtlDeleteElementGenericTable (Address: 0x18017e778)
- RtlDestroyHeap (Address: 0x18017e788)
- RtlEnumerateGenericTableWithoutSplaying (Address: 0x18017e798)
- RtlFreeHeap (Address: 0x18017e758)
- RtlGetElementGenericTable (Address: 0x18017e7b8)
- RtlGetLastNtStatus (Address: 0x18017e7e0)
- RtlInitializeGenericTable (Address: 0x18017e790)
- RtlInsertElementGenericTable (Address: 0x18017e780)
- RtlLookupElementGenericTable (Address: 0x18017e7d8)
- RtlNumberGenericTableElements (Address: 0x18017e7c0)
- RtlQueryWnfStateData (Address: 0x18017e7a0)
- RtlSubscribeWnfStateChangeNotification (Address: 0x18017e7a8)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x18017e7b0)
win32u.dll
- NtCreateCompositionInputSink (Address: 0x18017e978)
- NtCreateCompositionSurfaceHandle (Address: 0x18017e988)
- NtDCompositionAddCrossDeviceVisualChild (Address: 0x18017e808)
- NtDCompositionCommitChannel (Address: 0x18017e958)
- NtDCompositionCreateAndBindSharedSection (Address: 0x18017e838)
- NtDCompositionCreateChannel (Address: 0x18017e970)
- NtDCompositionCreateSharedResourceHandle (Address: 0x18017e980)
- NtDCompositionDestroyChannel (Address: 0x18017e968)
- NtDCompositionEnableMMCSS (Address: 0x18017e990)
- NtDCompositionGetBatchId (Address: 0x18017e820)
- NtDCompositionGetDeletedResources (Address: 0x18017e850)
- NtDCompositionGetFrameStatistics (Address: 0x18017e998)
- NtDCompositionProcessChannelBatchBuffer (Address: 0x18017e960)
- NtDCompositionReleaseAllResources (Address: 0x18017e938)
- NtDCompositionRemoveCrossDeviceVisualChild (Address: 0x18017e810)
- NtDCompositionSetChannelCommitCompletionEvent (Address: 0x18017e870)
- NtDCompositionSetChannelConnectionId (Address: 0x18017e800)
- NtDCompositionSetDebugCounter (Address: 0x18017e818)
- NtDCompositionSuspendAnimations (Address: 0x18017e7f0)
- NtDCompositionSynchronize (Address: 0x18017e7f8)
- NtDCompositionTelemetryAnimationScenarioBegin (Address: 0x18017e840)
- NtDCompositionTelemetryAnimationScenarioReference (Address: 0x18017e830)
- NtDCompositionTelemetryAnimationScenarioUnreference (Address: 0x18017e828)
- NtDCompositionTelemetrySetApplicationId (Address: 0x18017e848)
- NtDCompositionTelemetryTouchInteractionBegin (Address: 0x18017e868)
- NtDCompositionTelemetryTouchInteractionEnd (Address: 0x18017e858)
- NtDCompositionTelemetryTouchInteractionUpdate (Address: 0x18017e860)
- NtDCompositionWaitForChannel (Address: 0x18017e950)
- NtFlipObjectAddContent (Address: 0x18017e908)
- NtFlipObjectAddPoolBuffer (Address: 0x18017e918)
- NtFlipObjectConsumerAcquirePresent (Address: 0x18017e8c8)
- NtFlipObjectConsumerAdjustUsageReference (Address: 0x18017e8d8)
- NtFlipObjectConsumerBeginProcessPresent (Address: 0x18017e8c0)
- NtFlipObjectConsumerEndProcessPresent (Address: 0x18017e8d0)
- NtFlipObjectConsumerPostMessage (Address: 0x18017e8e8)
- NtFlipObjectConsumerQueryBufferInfo (Address: 0x18017e8f0)
- NtFlipObjectCreate (Address: 0x18017e878)
- NtFlipObjectDisconnectEndpoint (Address: 0x18017e880)
- NtFlipObjectEnablePresentStatisticsType (Address: 0x18017e8a8)
- NtFlipObjectOpen (Address: 0x18017e8b8)
- NtFlipObjectPresentCancel (Address: 0x18017e8a0)
- NtFlipObjectQueryBufferAvailableEvent (Address: 0x18017e890)
- NtFlipObjectQueryEndpointConnected (Address: 0x18017e888)
- NtFlipObjectQueryNextMessageToProducer (Address: 0x18017e928)
- NtFlipObjectReadNextMessageToProducer (Address: 0x18017e930)
- NtFlipObjectRemoveContent (Address: 0x18017e8f8)
- NtFlipObjectRemovePoolBuffer (Address: 0x18017e920)
- NtFlipObjectSetContent (Address: 0x18017e900)
- NtFlipObjectSetMaximumBackchannelQueueDepth (Address: 0x18017e8b0)
- NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager (Address: 0x18017e910)
- NtTokenManagerCreateCompositionTokenHandle (Address: 0x18017e940)
- NtTokenManagerCreateFlipObjectReturnTokenHandle (Address: 0x18017e8e0)
- NtTokenManagerCreateFlipObjectTokenHandle (Address: 0x18017e898)
- NtVisualCaptureBits (Address: 0x18017e948)