PlayToManager.dll

Description: Microsoft Windows PlayTo Manager

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 779850d93d5187176e47fb954dae76b6

File Size: 415.5 KB

Uploaded At: Dec. 1, 2025, 8:03 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1c2a0)
DllGetActivationFactory (Ordinal: 2, Address: 0x1cb00)
DllGetClassObject (Ordinal: 3, Address: 0x3ac00)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1005e09c)
CStdStubBuffer2_CountRefs (Address: 0x1005e074)
CStdStubBuffer2_Disconnect (Address: 0x1005e078)
CStdStubBuffer2_QueryInterface (Address: 0x1005e07c)
NdrProxyForwardingFunction3 (Address: 0x1005e0b8)
NdrProxyForwardingFunction4 (Address: 0x1005e080)
NdrProxyForwardingFunction5 (Address: 0x1005e084)
ObjectStublessClient10 (Address: 0x1005e08c)
ObjectStublessClient11 (Address: 0x1005e090)
ObjectStublessClient12 (Address: 0x1005e0bc)
ObjectStublessClient13 (Address: 0x1005e0b4)
ObjectStublessClient14 (Address: 0x1005e0a0)
ObjectStublessClient15 (Address: 0x1005e0a4)
ObjectStublessClient3 (Address: 0x1005e0b0)
ObjectStublessClient4 (Address: 0x1005e070)
ObjectStublessClient5 (Address: 0x1005e0a8)
ObjectStublessClient6 (Address: 0x1005e098)
ObjectStublessClient7 (Address: 0x1005e0ac)
ObjectStublessClient8 (Address: 0x1005e094)
ObjectStublessClient9 (Address: 0x1005e088)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1005e0c4)
IsDebuggerPresent (Address: 0x1005e0c8)
OutputDebugStringW (Address: 0x1005e0cc)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1005e0d4)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1005e0dc)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1005e0f0)
RaiseException (Address: 0x1005e0f4)
SetLastError (Address: 0x1005e0e4)
SetUnhandledExceptionFilter (Address: 0x1005e0ec)
UnhandledExceptionFilter (Address: 0x1005e0e8)

api-ms-win-core-featurestaging-l1-1-0.dll

RecordFeatureUsage (Address: 0x1005e100)
SubscribeFeatureStateChangeNotification (Address: 0x1005e0fc)
UnsubscribeFeatureStateChangeNotification (Address: 0x1005e104)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1005e10c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1005e11c)
HeapAlloc (Address: 0x1005e114)
HeapFree (Address: 0x1005e118)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1005e128)
LocalFree (Address: 0x1005e124)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1005e140)
FindResourceExW (Address: 0x1005e148)
FreeLibrary (Address: 0x1005e150)
GetModuleFileNameA (Address: 0x1005e13c)
GetModuleHandleExW (Address: 0x1005e14c)
GetModuleHandleW (Address: 0x1005e130)
GetProcAddress (Address: 0x1005e138)
LoadResource (Address: 0x1005e144)
LockResource (Address: 0x1005e134)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1005e158)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1005e160)
GetCurrentProcess (Address: 0x1005e170)
GetCurrentProcessId (Address: 0x1005e178)
GetCurrentThread (Address: 0x1005e16c)
GetCurrentThreadId (Address: 0x1005e174)
GetProcessId (Address: 0x1005e168)
OpenProcessToken (Address: 0x1005e164)
OpenThreadToken (Address: 0x1005e17c)
TerminateProcess (Address: 0x1005e180)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1005e188)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1005e190)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1005e198)
RegCreateKeyExW (Address: 0x1005e1a0)
RegGetValueW (Address: 0x1005e19c)
RegOpenKeyExW (Address: 0x1005e1a8)
RegQueryInfoKeyW (Address: 0x1005e1a4)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1005e1b0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1005e1fc)
AcquireSRWLockShared (Address: 0x1005e1f8)
CreateEventExW (Address: 0x1005e1e0)
CreateEventW (Address: 0x1005e1e4)
CreateMutexExW (Address: 0x1005e1f0)
CreateSemaphoreExW (Address: 0x1005e1d0)
DeleteCriticalSection (Address: 0x1005e1dc)
EnterCriticalSection (Address: 0x1005e1c0)
InitializeCriticalSectionEx (Address: 0x1005e1c8)
InitializeSRWLock (Address: 0x1005e1f4)
LeaveCriticalSection (Address: 0x1005e1cc)
OpenSemaphoreW (Address: 0x1005e1d8)
ReleaseMutex (Address: 0x1005e204)
ReleaseSemaphore (Address: 0x1005e1bc)
ReleaseSRWLockExclusive (Address: 0x1005e1c4)
ReleaseSRWLockShared (Address: 0x1005e1d4)
ResetEvent (Address: 0x1005e1e8)
SetEvent (Address: 0x1005e1b8)
WaitForSingleObject (Address: 0x1005e1ec)
WaitForSingleObjectEx (Address: 0x1005e200)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1005e214)
InitOnceInitialize (Address: 0x1005e210)
Sleep (Address: 0x1005e220)
SleepConditionVariableSRW (Address: 0x1005e218)
WaitOnAddress (Address: 0x1005e20c)
WakeAllConditionVariable (Address: 0x1005e21c)
WakeByAddressAll (Address: 0x1005e224)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1005e230)
GetTickCount (Address: 0x1005e22c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x1005e23c)
CreateThreadpoolWork (Address: 0x1005e244)
FreeLibraryWhenCallbackReturns (Address: 0x1005e238)
SubmitThreadpoolWork (Address: 0x1005e240)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1005e24c)
EncodePointer (Address: 0x1005e250)

api-ms-win-dx-d3dkmt-l1-1-1.dll

D3DKMTNetDispQueryMiracastDisplayDeviceSupport (Address: 0x1005e258)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1005e268)
GetTraceEnableLevel (Address: 0x1005e270)
GetTraceLoggerHandle (Address: 0x1005e260)
RegisterTraceGuidsW (Address: 0x1005e264)
TraceMessage (Address: 0x1005e26c)
UnregisterTraceGuids (Address: 0x1005e274)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x1005e284)
OpenTraceW (Address: 0x1005e280)
ProcessTrace (Address: 0x1005e27c)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1005e28c)
StartTraceW (Address: 0x1005e290)

api-ms-win-eventing-legacy-l1-1-0.dll

EnableTraceEx (Address: 0x1005e298)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1005e2ac)
EventSetInformation (Address: 0x1005e2a8)
EventUnregister (Address: 0x1005e2a0)
EventWriteTransfer (Address: 0x1005e2a4)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1005e2b4)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1005e2bc)
OpenSCManagerW (Address: 0x1005e2c0)
OpenServiceW (Address: 0x1005e2c4)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x1005e2cc)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1005e2d8)
SHTaskPoolQueueTask (Address: 0x1005e2d4)

combase.dll

(Address: 0x1005e2f8)
(Address: 0x1005e2fc)
(Address: 0x1005e300)
(Address: 0x1005e304)
(Address: 0x1005e308)
(Address: 0x1005e30c)
(Address: 0x1005e310)
(Address: 0x1005e314)
(Address: 0x1005e2f4)
(Address: 0x1005e2f0)
(Address: 0x1005e2ec)
(Address: 0x1005e2e8)
(Address: 0x1005e2e4)
(Address: 0x1005e2e0)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1005e364)
__dllonexit (Address: 0x1005e36c)
_amsg_exit (Address: 0x1005e378)
_callnewh (Address: 0x1005e330)
_CxxThrowException (Address: 0x1005e350)
_except_handler4_common (Address: 0x1005e360)
_get_errno (Address: 0x1005e344)
_initterm (Address: 0x1005e37c)
_lock (Address: 0x1005e374)
_onexit (Address: 0x1005e368)
_purecall (Address: 0x1005e38c)
_set_errno (Address: 0x1005e348)
_unlock (Address: 0x1005e370)
_vsnprintf_s (Address: 0x1005e32c)
_vsnwprintf (Address: 0x1005e380)
_wcsicmp (Address: 0x1005e34c)
_XcptFilter (Address: 0x1005e340)
??0exception@@QAE@ABV0@@Z (Address: 0x1005e328)
??0exception@@QAE@XZ (Address: 0x1005e324)
??1exception@@UAE@XZ (Address: 0x1005e320)
??1type_info@@UAE@XZ (Address: 0x1005e338)
?terminate@@YAXXZ (Address: 0x1005e394)
free (Address: 0x1005e388)
malloc (Address: 0x1005e384)
memcmp (Address: 0x1005e354)
memcpy (Address: 0x1005e358)
memcpy_s (Address: 0x1005e390)
memmove (Address: 0x1005e35c)
memmove_s (Address: 0x1005e33c)
memset (Address: 0x1005e398)
realloc (Address: 0x1005e334)
wcsstr (Address: 0x1005e31c)

ntdll.dll

RtlGetDeviceFamilyInfoEnum (Address: 0x1005e3a0)
RtlQueryWnfStateData (Address: 0x1005e3ac)
RtlSubscribeWnfStateChangeNotification (Address: 0x1005e3a8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1005e3a4)
WinSqmIncrementDWORD (Address: 0x1005e3b0)
WinSqmIsOptedIn (Address: 0x1005e3b4)

OLEAUT32.dll

SysFreeString (Address: 0x1005e000)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1005e024)
CStdStubBuffer_Connect (Address: 0x1005e048)
CStdStubBuffer_CountRefs (Address: 0x1005e02c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1005e01c)
CStdStubBuffer_DebugServerRelease (Address: 0x1005e038)
CStdStubBuffer_Disconnect (Address: 0x1005e03c)
CStdStubBuffer_Invoke (Address: 0x1005e068)
CStdStubBuffer_IsIIDSupported (Address: 0x1005e044)
CStdStubBuffer_QueryInterface (Address: 0x1005e030)
IUnknown_AddRef_Proxy (Address: 0x1005e010)
IUnknown_QueryInterface_Proxy (Address: 0x1005e040)
IUnknown_Release_Proxy (Address: 0x1005e028)
NdrClientCall4 (Address: 0x1005e058)
NdrCStdStubBuffer_Release (Address: 0x1005e050)
NdrCStdStubBuffer2_Release (Address: 0x1005e05c)
NdrDllCanUnloadNow (Address: 0x1005e064)
NdrDllGetClassObject (Address: 0x1005e060)
NdrOleAllocate (Address: 0x1005e034)
NdrOleFree (Address: 0x1005e020)
NdrStubCall2 (Address: 0x1005e054)
NdrStubForwardingFunction (Address: 0x1005e04c)
RpcBindingFree (Address: 0x1005e018)
RpcBindingFromStringBindingW (Address: 0x1005e00c)
RpcStringBindingComposeW (Address: 0x1005e008)
RpcStringFreeW (Address: 0x1005e014)