MpRtp.dll

v4.18.1909.6 64-bit Windows NT Analyzed
Description
AntiMalware Realtime Monitor
Authors
© Microsoft Corporation. All rights reserved.
File size
872.4 KB
Uploaded
2025-12-01 08:30
Views
66
SHA-256
4c9324e03fc5ce4bc363bdd331a0f294

Exported functions 26

MpPluginCheckExclusion #1 · 0x3960
MpPluginConfigChange #2 · 0x2cb0
MpPluginConfigDirectoryMonitoring #3 · 0x2d50
MpPluginConfigSyncMonitoring #4 · 0x2d30
MpPluginFlushLogData #5 · 0x2ad0
MpPluginGetConfigOperations #6 · 0x2df0
MpPluginGetHeartBeatData #7 · 0x2c80
MpPluginGetState #8 · 0x2810
MpPluginInitialize #9 · 0x2290
MpPluginIsSuspended #10 · 0x2b60
MpPluginNotifySetupProgress #11 · 0x2b00
MpPluginRegisterFriendlyProcess #12 · 0x2bc0
MpPluginReportThreadStatus #13 · 0x2920
MpPluginSetDefaultConfigs #14 · 0x34f0
MpPluginSetEngine #15 · 0x2550
MpPluginSetLastAccessTimeSuppressionMode #16 · 0x3990
MpPluginSetState #17 · 0x2640
MpPluginSetUserInformation #18 · 0x2a00
MpPluginShutdown #19 · 0x2470
MpPluginSignatureChange #20 · 0x2af0
MpPluginStop #21 · 0x2710
MpPluginUpdateDlpData #22 · 0x3970
MpPluginUpdateFolderGuardData #23 · 0x2d10
MpPluginUpdateMonitoringInfo #24 · 0x2b80
MpPluginUpdateMonitoringInfoEx #25 · 0x2ba0
MpPluginUpdateTPState #26 · 0x3880

Imported DLLs & functions 184

ConvertSecurityDescriptorToStringSecurityDescriptorW 0x75e89ed78
ConvertSidToStringSidW 0x75e89ed00
CopySid 0x75e89ece0
DuplicateToken 0x75e89ed08
DuplicateTokenEx 0x75e89ed18
GetLengthSid 0x75e89ecd0
GetTokenInformation 0x75e89ecc8
GetTraceEnableFlags 0x75e89ed60
GetTraceEnableLevel 0x75e89ed68
GetTraceLoggerHandle 0x75e89ed70
IsValidSid 0x75e89ecd8
OpenProcessToken 0x75e89ed20
OpenThreadToken 0x75e89ed28
RegCloseKey 0x75e89ecf8
RegDeleteKeyValueW 0x75e89ed40
RegisterTraceGuidsW 0x75e89ed58
RegOpenKeyExW 0x75e89ece8
RegQueryValueExW 0x75e89ecf0
RevertToSelf 0x75e89ed30
SetThreadToken 0x75e89ed10
TraceEvent 0x75e89ed38
TraceMessage 0x75e89ed48
UnregisterTraceGuids 0x75e89ed50
AcquireSRWLockExclusive 0x75e89eec8
AcquireSRWLockShared 0x75e89eeb8
CloseHandle 0x75e89ede8
CreateEventW 0x75e89edc8
CreateFileW 0x75e89ef30
CreateIoCompletionPort 0x75e89ee88
CreateSemaphoreW 0x75e89ef10
CreateThread 0x75e89ef60
DecodePointer 0x75e89ef48
DeleteCriticalSection 0x75e89f090
DeviceIoControl 0x75e89ee50
EncodePointer 0x75e89edb0
EnterCriticalSection 0x75e89f0a0
EnumSystemLocalesW 0x75e89f018
ExitProcess 0x75e89efd8
ExitThread 0x75e89ef68
ExpandEnvironmentStringsW 0x75e89eee8
FindClose 0x75e89ee68
FindFirstFileExW 0x75e89ef78
FindFirstFileW 0x75e89eed8
FindNextFileW 0x75e89eee0
FlushFileBuffers 0x75e89ee20
FreeEnvironmentStringsW 0x75e89ef98
FreeLibrary 0x75e89f058
FreeLibraryAndExitThread 0x75e89ef70
GetACP 0x75e89f008
GetCommandLineA 0x75e89ef80
GetCommandLineW 0x75e89ef88
GetConsoleCP 0x75e89efb8
GetConsoleMode 0x75e89efc0
GetCPInfo 0x75e89eff8
GetCurrentProcess 0x75e89f0e8
GetCurrentProcessId 0x75e89ed90
GetCurrentThread 0x75e89f0c0
GetCurrentThreadId 0x75e89f0b8
GetDateFormatW 0x75e89f048
GetEnvironmentStringsW 0x75e89ef90
GetFileAttributesW 0x75e89ef00
GetFileType 0x75e89efa8
GetLastError 0x75e89f0d0
GetLocaleInfoW 0x75e89f030
GetLocalTime 0x75e89ee10
GetLogicalDriveStringsW 0x75e89ee58
GetModuleFileNameW 0x75e89eef0
GetModuleHandleExW 0x75e89efd0
GetModuleHandleW 0x75e89f128
GetOEMCP 0x75e89f000
GetProcAddress 0x75e89f120
GetProcessHeap 0x75e89efe0
GetProcessTimes 0x75e89f150
GetQueuedCompletionStatus 0x75e89ee98
GetStartupInfoW 0x75e89ee08
GetStdHandle 0x75e89efa0
GetStringTypeW 0x75e89eff0
GetSystemDirectoryW 0x75e89ef08
GetSystemInfo 0x75e89ee38
GetSystemTimeAsFileTime 0x75e89f060
GetThreadPriority 0x75e89eea8
GetTickCount 0x75e89ee40
GetTimeFormatW 0x75e89f040
GetUserDefaultLCID 0x75e89f020
GetVersionExW 0x75e89f130
GlobalMemoryStatusEx 0x75e89ee78
HeapAlloc 0x75e89f0a8
HeapFree 0x75e89f0b0
HeapReAlloc 0x75e89edf0
HeapSize 0x75e89edf8
InitializeCriticalSectionAndSpinCount 0x75e89f088
InitializeCriticalSectionEx 0x75e89ef50
InitializeSListHead 0x75e89ed98
InitializeSRWLock 0x75e89eeb0
InitOnceExecuteOnce 0x75e89ef40
InterlockedFlushSList 0x75e89eda8
IsDebuggerPresent 0x75e89f100
IsProcessorFeaturePresent 0x75e89f0d8
IsValidCodePage 0x75e89f010
IsValidLocale 0x75e89f028
K32GetModuleFileNameExW 0x75e89f158
K32GetProcessImageFileNameW 0x75e89f160
LCMapStringEx 0x75e89ef58
LCMapStringW 0x75e89f038
LeaveCriticalSection 0x75e89f098
LoadLibraryExA 0x75e89f140
LoadLibraryExW 0x75e89f050
LocalFree 0x75e89ee80
MultiByteToWideChar 0x75e89efe8
OpenProcess 0x75e89ee30
OpenThread 0x75e89ee28
PostQueuedCompletionStatus 0x75e89ee90
ProcessIdToSessionId 0x75e89ee70
QueryDosDeviceW 0x75e89ee48
QueryPerformanceCounter 0x75e89ed88
RaiseException 0x75e89edb8
ReleaseSemaphore 0x75e89f138
ReleaseSRWLockExclusive 0x75e89eed0
ReleaseSRWLockShared 0x75e89eec0
ResetEvent 0x75e89edd8
RtlCaptureContext 0x75e89f118
RtlLookupFunctionEntry 0x75e89f110
RtlPcToFileHeader 0x75e89edc0
RtlUnwindEx 0x75e89eda0
RtlVirtualUnwind 0x75e89f108
SetEvent 0x75e89ede0
SetFilePointerEx 0x75e89ef38
SetLastError 0x75e89f0c8
SetStdHandle 0x75e89efb0
SetThreadPriority 0x75e89eea0
SetUnhandledExceptionFilter 0x75e89f0f0
Sleep 0x75e89ee18
SwitchToThread 0x75e89ef20
TerminateProcess 0x75e89f0e0
TlsAlloc 0x75e89f080
TlsFree 0x75e89f068
TlsGetValue 0x75e89f078
TlsSetValue 0x75e89f070
UnhandledExceptionFilter 0x75e89f0f8
UnmapViewOfFile 0x75e89ee60
VirtualProtect 0x75e89f148
VirtualQuery 0x75e89ef18
WaitForSingleObject 0x75e89eef8
WaitForSingleObjectEx 0x75e89edd0
WideCharToMultiByte 0x75e89ee00
WriteConsoleW 0x75e89efc8
WriteFile 0x75e89ef28
MpAllocMemory 0x75e89f1d0
MpClientUtilExportFunctions 0x75e89f1c8
MpConfigClose 0x75e89f1f8
MpConfigGetValue 0x75e89f1f0
MpConfigGetValueAlloc 0x75e89f200
MpConfigOpen 0x75e89f1e8
MpConfigRegisterForNotifications 0x75e89f208
MpConfigSetValue 0x75e89f1b8
MpConfigUnregisterNotifications 0x75e89f210
MpFreeMemory 0x75e89f1d8
MpHandleClose 0x75e89f218
MpManagerOpen 0x75e89f1c0
MpManagerVersionQuery 0x75e89f1e0
MpUtilsExportFunctions 0x75e89f220
NtClose 0x75e89f248
NtCreateFile 0x75e89f260
NtDeviceIoControlFile 0x75e89f268
NtMapViewOfSection 0x75e89f238
NtWaitForSingleObject 0x75e89f250
RtlCompareUnicodeString 0x75e89f240
RtlInitUnicodeString 0x75e89f258
RtlNtStatusToDosError 0x75e89f270
RtlPrefixUnicodeString 0x75e89f230
CoCreateGuid 0x75e89f298
CoCreateInstance 0x75e89f290
CoInitializeEx 0x75e89f280
CoSetProxyBlanket 0x75e89f288
CoUninitialize 0x75e89f2a8
IIDFromString 0x75e89f2a0
StringFromGUID2 0x75e89f2b0
SysAllocString 0x75e89f190
SysFreeString 0x75e89f198
SysStringLen 0x75e89f188
VariantChangeType 0x75e89f180
VariantClear 0x75e89f178
VariantInit 0x75e89f170
GetSystemMetrics 0x75e89f1a8