mfplat.dll

Description: Media Foundation Platform DLL

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: e8c6b702173aba871d64bafab609d92c

File Size: 1.7 MB

Uploaded At: Dec. 1, 2025, 7:33 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

FormatTagFromWfx (Ordinal: 1, Address: 0x3a5e0)
MFEnumLocalMFTRegistrations (Ordinal: 2, Address: 0x1f1b0)
MFGetPlatformFlags (Ordinal: 3, Address: 0x6c670)
MFGetPlatformVersion (Ordinal: 4, Address: 0x224f0)
MFGetRandomNumber (Ordinal: 5, Address: 0x20de0)
MFIsFeatureEnabled (Ordinal: 6, Address: 0x6c690)
MFPlatformBigEndian (Ordinal: 7, Address: 0x38880)
MFPlatformLittleEndian (Ordinal: 8, Address: 0x3a690)
ValidateWaveFormat (Ordinal: 9, Address: 0x3a590)
CopyPropVariant (Ordinal: 10, Address: 0x24ea0)
CreatePropVariant (Ordinal: 11, Address: 0x15150)
CreatePropertyStore (Ordinal: 12, Address: 0x2f730)
DestroyPropVariant (Ordinal: 13, Address: 0x19a40)
GetAMSubtypeFromD3DFormat (Ordinal: 14, Address: 0x38710)
GetD3DFormatFromMFSubtype (Ordinal: 15, Address: 0x382a0)
MFAddPeriodicCallback (Ordinal: 16, Address: 0x19c0ea)
MFAllocateSerialWorkQueue (Ordinal: 17, Address: 0x19c124)
MFAllocateWorkQueue (Ordinal: 18, Address: 0x22970)
MFAllocateWorkQueueEx (Ordinal: 19, Address: 0x19c172)
MFAppendCollection (Ordinal: 20, Address: 0xade00)
MFAverageTimePerFrameToFrameRate (Ordinal: 21, Address: 0x3add0)
MFBeginCreateFile (Ordinal: 22, Address: 0x5230)
MFBeginGetHostByName (Ordinal: 23, Address: 0x70170)
MFBeginRegisterWorkQueueWithMMCSS (Ordinal: 24, Address: 0x6cb50)
MFBeginRegisterWorkQueueWithMMCSSEx (Ordinal: 25, Address: 0x19c231)
MFBeginUnregisterWorkQueueWithMMCSS (Ordinal: 26, Address: 0x19c281)
MFCalculateBitmapImageSize (Ordinal: 27, Address: 0xa2660)
MFCalculateImageSize (Ordinal: 28, Address: 0x22190)
MFCallStackTracingClearSnapshot (Ordinal: 29, Address: 0x6cb80)
MFCallStackTracingLogSessionErrors (Ordinal: 30, Address: 0x6cba0)
MFCallStackTracingRestoreSnapshot (Ordinal: 31, Address: 0x6cbe0)
MFCallStackTracingTakeSnapshot (Ordinal: 32, Address: 0x6cc00)
MFCancelCreateFile (Ordinal: 33, Address: 0x6f6c0)
MFCancelWorkItem (Ordinal: 34, Address: 0x19c387)
MFCheckEnabledViaAppService (Ordinal: 35, Address: 0xd1e50)
MFClearLocalMFTs (Ordinal: 36, Address: 0xa15d0)
MFCombineSamples (Ordinal: 37, Address: 0x5b60)
MFCompareFullToPartialMediaType (Ordinal: 38, Address: 0x1ab00)
MFCompareSockaddrAddresses (Ordinal: 39, Address: 0x70430)
MFConvertColorInfoFromDXVA (Ordinal: 40, Address: 0xa4340)
MFConvertColorInfoToDXVA (Ordinal: 41, Address: 0xa4350)
MFConvertFromFP16Array (Ordinal: 42, Address: 0xa4360)
MFConvertToFP16Array (Ordinal: 43, Address: 0xa43b0)
MFCopyImage (Ordinal: 44, Address: 0x3020)
MFCreate2DMediaBuffer (Ordinal: 45, Address: 0xade10)
MFCreate2DMediaBufferOn1DMediaBuffer (Ordinal: 46, Address: 0xade20)
MFCreateAMMediaTypeFromMFMediaType (Ordinal: 47, Address: 0x36200)
MFCreateAlignedMemoryBuffer (Ordinal: 48, Address: 0x4710)
MFCreateAlignedSharedMemoryBuffer (Ordinal: 49, Address: 0xade30)
MFCreateAsyncResult (Ordinal: 50, Address: 0x19c537)
MFCreateAttributes (Ordinal: 51, Address: 0x33850)
MFCreateAudioMediaType (Ordinal: 52, Address: 0x9f160)
MFCreateByteStreamHandlerAppServiceActivate (Ordinal: 53, Address: 0xd4490)
MFCreateCollection (Ordinal: 54, Address: 0x18da0)
MFCreateContentDecryptorContext (Ordinal: 55, Address: 0x126be0)
MFCreateContentProtectionDevice (Ordinal: 56, Address: 0x1274d0)
MFCreateD3D12SynchronizationObject (Ordinal: 57, Address: 0x81960)
MFCreateDXGIDeviceManager (Ordinal: 58, Address: 0x1a250)
MFCreateDXGISurfaceBuffer (Ordinal: 59, Address: 0x3a00)
MFCreateDXSurfaceBuffer (Ordinal: 60, Address: 0x3df0)
MFCreateEMEStoreObject (Ordinal: 61, Address: 0xb7910)
MFCreateEventQueue (Ordinal: 62, Address: 0x36090)
MFCreateFile (Ordinal: 63, Address: 0x6f730)
MFCreateFileFromHandle (Ordinal: 64, Address: 0x13f10)
MFCreateLegacyMediaBufferOnMFMediaBuffer (Ordinal: 65, Address: 0x14920)
MFCreateMFByteStreamOnIStreamWithFlags (Ordinal: 66, Address: 0x25760)
MFCreateMFByteStreamOnStream (Ordinal: 67, Address: 0x25750)
MFCreateMFByteStreamOnStreamEx (Ordinal: 68, Address: 0x145c0)
MFCreateMFByteStreamWrapper (Ordinal: 69, Address: 0x100c40)
MFCreateMFVideoFormatFromMFMediaType (Ordinal: 70, Address: 0x4c50)
MFCreateMediaBufferFromMediaType (Ordinal: 71, Address: 0xadf50)
MFCreateMediaBufferWrapper (Ordinal: 72, Address: 0x344e0)
MFCreateMediaEvent (Ordinal: 73, Address: 0x16b50)
MFCreateMediaEventResult (Ordinal: 74, Address: 0x18c30)
MFCreateMediaExtensionActivate (Ordinal: 75, Address: 0x128e0)
MFCreateMediaExtensionActivateNoInit (Ordinal: 76, Address: 0x131a0)
MFCreateMediaExtensionAppServiceActivate (Ordinal: 77, Address: 0xd4560)
MFCreateMediaExtensionInprocActivate (Ordinal: 78, Address: 0x39390)
MFCreateMediaType (Ordinal: 79, Address: 0x2b390)
MFCreateMediaTypeFromProperties (Ordinal: 80, Address: 0x119690)
MFCreateMediaTypeFromRepresentation (Ordinal: 81, Address: 0x2b610)
MFCreateMemoryBuffer (Ordinal: 82, Address: 0x22990)
MFCreateMemoryBufferFromRawBuffer (Ordinal: 83, Address: 0xadf80)
MFCreateMemoryStream (Ordinal: 84, Address: 0x1cb70)
MFCreateMuxStreamAttributes (Ordinal: 85, Address: 0x848c0)
MFCreateMuxStreamMediaType (Ordinal: 86, Address: 0x84a90)
MFCreateMuxStreamSample (Ordinal: 87, Address: 0x84cb0)
MFCreateOOPMFTProxy (Ordinal: 88, Address: 0xddaa0)
MFCreateOOPMFTRemote (Ordinal: 89, Address: 0xe32d0)
MFCreatePathFromURL (Ordinal: 90, Address: 0x8c10)
MFCreatePresentationDescriptor (Ordinal: 91, Address: 0x265f0)
MFCreatePropertiesFromMediaType (Ordinal: 92, Address: 0x119df0)
MFCreateReusableByteStream (Ordinal: 93, Address: 0x100dd0)
MFCreateReusableByteStreamWithSharedLock (Ordinal: 94, Address: 0x100e00)
MFCreateSample (Ordinal: 95, Address: 0x184d0)
MFCreateSecureBufferAllocator (Ordinal: 96, Address: 0xadfc0)
MFCreateSharedMemoryMediaBufferFromMediaType (Ordinal: 97, Address: 0xadfd0)
MFCreateSocket (Ordinal: 98, Address: 0x704c0)
MFCreateSocketListener (Ordinal: 99, Address: 0x736b0)
MFCreateSourceResolver (Ordinal: 100, Address: 0x216e0)
MFCreateSourceResolverInternal (Ordinal: 101, Address: 0x20d20)
MFCreateStagingSurfaceWrapper (Ordinal: 102, Address: 0xae010)
MFCreateStreamDescriptor (Ordinal: 103, Address: 0x26fe0)
MFCreateStreamOnMFByteStream (Ordinal: 104, Address: 0x86620)
MFCreateStreamOnMFByteStreamEx (Ordinal: 105, Address: 0x10fa00)
MFCreateSystemTimeSource (Ordinal: 106, Address: 0x75e80)
MFCreateTelemetrySession (Ordinal: 107, Address: 0x35080)
MFCreateTempFile (Ordinal: 108, Address: 0x6f760)
MFCreateTrackedSample (Ordinal: 109, Address: 0x6790)
MFCreateTransformActivate (Ordinal: 110, Address: 0x2e050)
MFCreateURLFromPath (Ordinal: 111, Address: 0x8b40)
MFCreateUdpSockets (Ordinal: 112, Address: 0x70650)
MFCreateVideoDecryptorContext (Ordinal: 113, Address: 0x126be0)
MFCreateVideoMediaType (Ordinal: 114, Address: 0x112a0)
MFCreateVideoMediaTypeFromBitMapInfoHeader (Ordinal: 115, Address: 0xa2740)
MFCreateVideoMediaTypeFromBitMapInfoHeaderEx (Ordinal: 116, Address: 0x39e10)
MFCreateVideoMediaTypeFromSubtype (Ordinal: 117, Address: 0xa2750)
MFCreateVideoMediaTypeFromVideoInfoHeader (Ordinal: 118, Address: 0x36a70)
MFCreateVideoMediaTypeFromVideoInfoHeader2 (Ordinal: 119, Address: 0xa2800)
MFCreateVideoSampleAllocatorEx (Ordinal: 120, Address: 0x1d60)
MFCreateWICBitmapBuffer (Ordinal: 121, Address: 0xae020)
MFCreateWICDecoderProxy (Ordinal: 122, Address: 0xf0660)
MFCreateWaveFormatExFromMFMediaType (Ordinal: 123, Address: 0x37ef0)
MFDeserializeAttributesFromStream (Ordinal: 124, Address: 0xe0f0)
MFDeserializeEvent (Ordinal: 125, Address: 0xae030)
MFDeserializeMediaTypeFromStream (Ordinal: 126, Address: 0x21bf0)
MFDeserializePresentationDescriptor (Ordinal: 127, Address: 0x1b2d0)
MFEndCreateFile (Ordinal: 128, Address: 0x21940)
MFEndGetHostByName (Ordinal: 129, Address: 0x70ce0)
MFEndRegisterWorkQueueWithMMCSS (Ordinal: 130, Address: 0x19ce2a)
MFEndUnregisterWorkQueueWithMMCSS (Ordinal: 131, Address: 0x19ce76)
MFFrameRateToAverageTimePerFrame (Ordinal: 132, Address: 0xa28b0)
MFFreeAdaptersAddresses (Ordinal: 133, Address: 0x76570)
MFGetAdaptersAddresses (Ordinal: 134, Address: 0x76590)
MFGetAttributesAsBlob (Ordinal: 135, Address: 0xcba0)
MFGetAttributesAsBlobSize (Ordinal: 136, Address: 0xcb50)
MFGetCallStackTracingWeakReference (Ordinal: 137, Address: 0x367d0)
MFGetConfigurationDWORD (Ordinal: 138, Address: 0x30300)
MFGetConfigurationPolicy (Ordinal: 139, Address: 0x6cc20)
MFGetConfigurationStore (Ordinal: 140, Address: 0x6cc50)
MFGetConfigurationString (Ordinal: 141, Address: 0x161f0)
MFGetContentProtectionSystemCLSID (Ordinal: 142, Address: 0x6cc80)
MFGetMFTMerit (Ordinal: 143, Address: 0x867d0)
MFGetNumericNameFromSockaddr (Ordinal: 144, Address: 0x70e60)
MFGetPlaneSize (Ordinal: 145, Address: 0xa4490)
MFGetPluginControl (Ordinal: 146, Address: 0x3ac80)
MFGetSockaddrFromNumericName (Ordinal: 147, Address: 0x71190)
MFGetStrideForBitmapInfoHeader (Ordinal: 148, Address: 0x4370)
MFGetSupportedMimeTypes (Ordinal: 149, Address: 0xf7760)
MFGetSupportedSchemes (Ordinal: 150, Address: 0xf7c00)
MFGetSystemTime (Ordinal: 151, Address: 0x29690)
MFGetTimerPeriodicity (Ordinal: 152, Address: 0x218b0)
MFGetUncompressedVideoFormat (Ordinal: 153, Address: 0x4b10)
MFGetWorkQueueMMCSSClass (Ordinal: 154, Address: 0x19d0dc)
MFGetWorkQueueMMCSSPriority (Ordinal: 155, Address: 0x19d11b)
MFGetWorkQueueMMCSSTaskId (Ordinal: 156, Address: 0x19d15b)
MFHasLocallyRegisteredByteStreamHandlers (Ordinal: 157, Address: 0xf8bf0)
MFHasLocallyRegisteredSchemeHandlers (Ordinal: 158, Address: 0x21fd0)
MFHeapAlloc (Ordinal: 159, Address: 0x76600)
MFHeapFree (Ordinal: 160, Address: 0x76640)
MFInitAMMediaTypeFromMFMediaType (Ordinal: 161, Address: 0x2a6f0)
MFInitAttributesFromBlob (Ordinal: 162, Address: 0x33c70)
MFInitMediaTypeFromAMMediaType (Ordinal: 163, Address: 0x2ac90)
MFInitMediaTypeFromMFVideoFormat (Ordinal: 164, Address: 0x10b90)
MFInitMediaTypeFromMPEG1VideoInfo (Ordinal: 165, Address: 0x3aca0)
MFInitMediaTypeFromMPEG2VideoInfo (Ordinal: 166, Address: 0x1d110)
MFInitMediaTypeFromVideoInfoHeader (Ordinal: 167, Address: 0x36bc0)
MFInitMediaTypeFromVideoInfoHeader2 (Ordinal: 168, Address: 0x36db0)
MFInitMediaTypeFromWaveFormatEx (Ordinal: 169, Address: 0x2c490)
MFInitVideoFormat (Ordinal: 170, Address: 0xa44c0)
MFInitVideoFormat_RGB (Ordinal: 171, Address: 0x1dc30)
MFInvalidateMFTEnumCache (Ordinal: 172, Address: 0xabea0)
MFInvokeCallback (Ordinal: 173, Address: 0x19d35b)
MFIsBottomUpFormat (Ordinal: 174, Address: 0xa3750)
MFIsContentProtectionDeviceSupported (Ordinal: 175, Address: 0x127540)
MFIsLocallyRegisteredMimeType (Ordinal: 176, Address: 0xf8cd0)
MFIsLocallyRegisteredSchemeHandler (Ordinal: 177, Address: 0xf8e10)
MFJoinWorkQueue (Ordinal: 178, Address: 0x19d3ff)
MFLockDXGIDeviceManager (Ordinal: 179, Address: 0x1a260)
MFLockPlatform (Ordinal: 180, Address: 0x19d440)
MFLockSharedWorkQueue (Ordinal: 181, Address: 0x19d46f)
MFLockWorkQueue (Ordinal: 182, Address: 0x19d49f)
MFMapDX9FormatToDXGIFormat (Ordinal: 183, Address: 0x1d690)
MFMapDXGIFormatToDX9Format (Ordinal: 184, Address: 0x46e0)
MFPutWaitingWorkItem (Ordinal: 185, Address: 0x19d504)
MFPutWorkItem (Ordinal: 186, Address: 0x87f0)
MFPutWorkItem2 (Ordinal: 187, Address: 0x2fe20)
MFPutWorkItemEx (Ordinal: 188, Address: 0x21c90)
MFPutWorkItemEx2 (Ordinal: 189, Address: 0x18ce0)
MFRegisterLocalByteStreamHandler (Ordinal: 190, Address: 0x8b90)
MFRegisterLocalSchemeHandler (Ordinal: 191, Address: 0xf8f50)
MFRegisterPlatformWithMMCSS (Ordinal: 192, Address: 0x19d5bb)
MFRemovePeriodicCallback (Ordinal: 193, Address: 0x19d5fa)
MFScheduleWorkItem (Ordinal: 194, Address: 0x19be0)
MFScheduleWorkItemEx (Ordinal: 195, Address: 0x19d645)
MFSerializeAttributesToStream (Ordinal: 196, Address: 0xc940)
MFSerializeEvent (Ordinal: 197, Address: 0xae0c0)
MFSerializeMediaTypeToStream (Ordinal: 198, Address: 0x21c40)
MFSerializePresentationDescriptor (Ordinal: 199, Address: 0x1b210)
MFSetMinimumMemoryAlignment (Ordinal: 200, Address: 0x6bf80)
MFSetSockaddrAny (Ordinal: 201, Address: 0x71430)
MFSetWindowForContentProtection (Ordinal: 202, Address: 0x21670)
MFShutdown (Ordinal: 203, Address: 0x35cc0)
MFSplitSample (Ordinal: 204, Address: 0x57d0)
MFStartup (Ordinal: 205, Address: 0x33af0)
MFStreamDescriptorProtectMediaType (Ordinal: 206, Address: 0xa6110)
MFTEnum (Ordinal: 207, Address: 0xabeb0)
MFTEnum2 (Ordinal: 208, Address: 0xacb40)
MFTEnumEx (Ordinal: 209, Address: 0x236f0)
MFTGetInfo (Ordinal: 210, Address: 0x3a3c0)
MFTRegister (Ordinal: 211, Address: 0xac1a0)
MFTRegisterLocal (Ordinal: 212, Address: 0xa16c0)
MFTRegisterLocalByCLSID (Ordinal: 213, Address: 0xa1730)
MFTUnregister (Ordinal: 214, Address: 0xac350)
MFTUnregisterLocal (Ordinal: 215, Address: 0xa17a0)
MFTUnregisterLocalByCLSID (Ordinal: 216, Address: 0xa17b0)
MFTraceError (Ordinal: 217, Address: 0x31c60)
MFTraceFuncEnter (Ordinal: 218, Address: 0x31c60)
MFUnjoinWorkQueue (Ordinal: 219, Address: 0x19d829)
MFUnlockDXGIDeviceManager (Ordinal: 220, Address: 0x22870)
MFUnlockPlatform (Ordinal: 221, Address: 0x19d870)
MFUnlockWorkQueue (Ordinal: 222, Address: 0x19d89d)
MFUnregisterPlatformFromMMCSS (Ordinal: 223, Address: 0x19d8d7)
MFUnwrapMediaType (Ordinal: 224, Address: 0xa3970)
MFValidateMediaTypeSize (Ordinal: 225, Address: 0x2afb0)
MFWrapMediaType (Ordinal: 226, Address: 0xa3ae0)
MFWrapSocket (Ordinal: 227, Address: 0x715f0)
MFllMulDiv (Ordinal: 228, Address: 0x296f0)
PropVariantFromStream (Ordinal: 229, Address: 0xa17d0)
PropVariantToStream (Ordinal: 230, Address: 0xa1b80)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180169e60)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180169e80)
IsDebuggerPresent (Address: 0x180169e70)
OutputDebugStringW (Address: 0x180169e78)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180169e90)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180169ea0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180169eb0)
RaiseException (Address: 0x180169ed0)
SetLastError (Address: 0x180169ec8)
SetUnhandledExceptionFilter (Address: 0x180169ec0)
UnhandledExceptionFilter (Address: 0x180169eb8)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180169ee8)
FlushFileBuffers (Address: 0x180169f00)
GetFileAttributesExW (Address: 0x180169f28)
GetFileSize (Address: 0x180169ee0)
GetFinalPathNameByHandleW (Address: 0x180169f18)
GetFullPathNameW (Address: 0x180169f08)
ReadFile (Address: 0x180169ef8)
SetEndOfFile (Address: 0x180169f10)
SetFilePointer (Address: 0x180169ef0)
WriteFile (Address: 0x180169f20)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x180169f38)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x180169f48)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180169f58)
DuplicateHandle (Address: 0x180169f60)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180169f80)
HeapAlloc (Address: 0x180169f78)
HeapFree (Address: 0x180169f70)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x180169fa0)
GlobalFree (Address: 0x180169fa8)
LocalAlloc (Address: 0x180169f90)
LocalFree (Address: 0x180169f98)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x180169fc0)
GlobalUnlock (Address: 0x180169fb8)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x180169fd8)
DeviceIoControl (Address: 0x180169fd0)
GetOverlappedResult (Address: 0x180169fe0)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x180169ff0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x18016a000)

api-ms-win-core-largeinteger-l1-1-0.dll

MulDiv (Address: 0x18016a010)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18016a040)
GetModuleFileNameA (Address: 0x18016a028)
GetModuleFileNameW (Address: 0x18016a020)
GetModuleHandleExW (Address: 0x18016a050)
GetModuleHandleW (Address: 0x18016a030)
GetProcAddress (Address: 0x18016a038)
LoadLibraryExW (Address: 0x18016a048)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryA (Address: 0x18016a060)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18016a070)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18016a0b0)
MapViewOfFile (Address: 0x18016a088)
MapViewOfFileEx (Address: 0x18016a080)
UnmapViewOfFile (Address: 0x18016a0a0)
VirtualAlloc (Address: 0x18016a0a8)
VirtualFree (Address: 0x18016a090)
VirtualQueryEx (Address: 0x18016a098)

api-ms-win-core-memory-l1-1-1.dll

GetProcessWorkingSetSizeEx (Address: 0x18016a0c0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x18016a0f0)
CreateThread (Address: 0x18016a138)
GetCurrentProcess (Address: 0x18016a108)
GetCurrentProcessId (Address: 0x18016a128)
GetCurrentThreadId (Address: 0x18016a0e8)
GetExitCodeThread (Address: 0x18016a120)
GetProcessId (Address: 0x18016a130)
GetProcessTimes (Address: 0x18016a0f8)
OpenProcessToken (Address: 0x18016a140)
OpenThread (Address: 0x18016a100)
TerminateProcess (Address: 0x18016a110)
TlsAlloc (Address: 0x18016a0d8)
TlsFree (Address: 0x18016a0d0)
TlsGetValue (Address: 0x18016a0e0)
TlsSetValue (Address: 0x18016a118)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x18016a158)
IsProcessorFeaturePresent (Address: 0x18016a150)
OpenProcess (Address: 0x18016a160)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18016a178)
QueryPerformanceFrequency (Address: 0x18016a170)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcessModules (Address: 0x18016a188)
K32GetModuleInformation (Address: 0x18016a198)
K32GetProcessMemoryInfo (Address: 0x18016a190)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18016a1c0)
RegCreateKeyExW (Address: 0x18016a1b0)
RegDeleteTreeW (Address: 0x18016a1d0)
RegDeleteValueW (Address: 0x18016a1f0)
RegEnumKeyExW (Address: 0x18016a1e8)
RegEnumValueW (Address: 0x18016a1e0)
RegGetValueW (Address: 0x18016a1a8)
RegNotifyChangeKeyValue (Address: 0x18016a200)
RegOpenKeyExW (Address: 0x18016a1d8)
RegQueryInfoKeyW (Address: 0x18016a1c8)
RegQueryValueExW (Address: 0x18016a1b8)
RegSetValueExW (Address: 0x18016a1f8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18016a220)
RtlLookupFunctionEntry (Address: 0x18016a210)
RtlVirtualUnwind (Address: 0x18016a218)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpW (Address: 0x18016a230)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18016a250)
MultiByteToWideChar (Address: 0x18016a248)
WideCharToMultiByte (Address: 0x18016a240)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18016a268)
lstrcmpW (Address: 0x18016a260)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18016a2b0)
AcquireSRWLockShared (Address: 0x18016a278)
CreateEventExW (Address: 0x18016a318)
CreateEventW (Address: 0x18016a2c0)
CreateMutexExW (Address: 0x18016a288)
CreateSemaphoreExW (Address: 0x18016a2b8)
DeleteCriticalSection (Address: 0x18016a2f8)
EnterCriticalSection (Address: 0x18016a2a0)
InitializeCriticalSection (Address: 0x18016a2e8)
InitializeCriticalSectionEx (Address: 0x18016a2a8)
InitializeSRWLock (Address: 0x18016a280)
LeaveCriticalSection (Address: 0x18016a298)
OpenSemaphoreW (Address: 0x18016a2e0)
ReleaseMutex (Address: 0x18016a2c8)
ReleaseSemaphore (Address: 0x18016a300)
ReleaseSRWLockExclusive (Address: 0x18016a2d0)
ReleaseSRWLockShared (Address: 0x18016a2d8)
ResetEvent (Address: 0x18016a290)
SetEvent (Address: 0x18016a310)
WaitForSingleObject (Address: 0x18016a2f0)
WaitForSingleObjectEx (Address: 0x18016a308)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18016a328)
Sleep (Address: 0x18016a338)
SleepConditionVariableSRW (Address: 0x18016a330)
WakeAllConditionVariable (Address: 0x18016a340)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18016a370)
GetSystemDirectoryA (Address: 0x18016a368)
GetSystemDirectoryW (Address: 0x18016a388)
GetSystemInfo (Address: 0x18016a360)
GetSystemTimeAsFileTime (Address: 0x18016a378)
GetTickCount (Address: 0x18016a380)
GetTickCount64 (Address: 0x18016a350)
GetVersion (Address: 0x18016a358)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x18016a398)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18016a3b8)
CreateThreadpoolTimer (Address: 0x18016a3b0)
SetThreadpoolTimer (Address: 0x18016a3a8)
WaitForThreadpoolTimerCallbacks (Address: 0x18016a3c0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x18016a3d0)

api-ms-win-core-url-l1-1-0.dll

PathCreateFromUrlW (Address: 0x18016a3e8)
UrlCreateFromPathW (Address: 0x18016a3e0)

api-ms-win-core-windowserrorreporting-l1-1-0.dll

WerRegisterFile (Address: 0x18016a3f8)
WerUnregisterFile (Address: 0x18016a400)

api-ms-win-devices-config-l1-1-1.dll

CM_Get_Device_Interface_List_SizeW (Address: 0x18016a450)
CM_Get_Device_Interface_ListW (Address: 0x18016a420)
CM_Get_Device_Interface_PropertyW (Address: 0x18016a410)
CM_Locate_DevNodeW (Address: 0x18016a440)
CM_MapCrToWin32Err (Address: 0x18016a428)
CM_Open_Device_Interface_KeyW (Address: 0x18016a418)
CM_Open_DevNode_Key (Address: 0x18016a448)
CM_Register_Notification (Address: 0x18016a438)
CM_Unregister_Notification (Address: 0x18016a430)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18016a478)
GetTraceEnableLevel (Address: 0x18016a470)
GetTraceLoggerHandle (Address: 0x18016a480)
RegisterTraceGuidsW (Address: 0x18016a468)
TraceMessage (Address: 0x18016a488)
UnregisterTraceGuids (Address: 0x18016a460)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18016a4a8)
EventRegister (Address: 0x18016a4b8)
EventSetInformation (Address: 0x18016a4b0)
EventUnregister (Address: 0x18016a498)
EventWriteTransfer (Address: 0x18016a4a0)

api-ms-win-mm-time-l1-1-0.dll

timeBeginPeriod (Address: 0x18016a4d0)
timeEndPeriod (Address: 0x18016a4c8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18016a4e0)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x18016a4f0)

msvcrt.dll

__C_specific_handler (Address: 0x18016a708)
__CxxFrameHandler3 (Address: 0x18016a580)
__dllonexit (Address: 0x18016a680)
_amsg_exit (Address: 0x18016a6f8)
_callnewh (Address: 0x18016a718)
_CxxThrowException (Address: 0x18016a5c0)
_gcvt_s (Address: 0x18016a530)
_i64toa_s (Address: 0x18016a5a0)
_initterm (Address: 0x18016a6f0)
_itoa_s (Address: 0x18016a738)
_lock (Address: 0x18016a6d8)
_ltoa_s (Address: 0x18016a500)
_onexit (Address: 0x18016a670)
_purecall (Address: 0x18016a540)
_splitpath_s (Address: 0x18016a648)
_strcmpi (Address: 0x18016a620)
_strnicmp (Address: 0x18016a560)
_ultoa_s (Address: 0x18016a518)
_ultow (Address: 0x18016a5e8)
_unlock (Address: 0x18016a688)
_vsnprintf (Address: 0x18016a568)
_vsnprintf_s (Address: 0x18016a590)
_vsnwprintf (Address: 0x18016a538)
_wcsicmp (Address: 0x18016a660)
_wcslwr_s (Address: 0x18016a6b0)
_wcsnicmp (Address: 0x18016a548)
_wsplitpath_s (Address: 0x18016a550)
_XcptFilter (Address: 0x18016a700)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18016a5d8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18016a5f0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18016a588)
??0exception@@QEAA@XZ (Address: 0x18016a578)
??1exception@@UEAA@XZ (Address: 0x18016a570)
??1type_info@@UEAA@XZ (Address: 0x18016a640)
?terminate@@YAXXZ (Address: 0x18016a710)
?what@exception@@UEBAPEBDXZ (Address: 0x18016a608)
atoi (Address: 0x18016a690)
calloc (Address: 0x18016a558)
cosf (Address: 0x18016a628)
free (Address: 0x18016a730)
iswalpha (Address: 0x18016a6c0)
iswdigit (Address: 0x18016a6b8)
malloc (Address: 0x18016a728)
memcmp (Address: 0x18016a5e0)
memcpy (Address: 0x18016a5c8)
memcpy_s (Address: 0x18016a5f8)
memmove (Address: 0x18016a5d0)
memmove_s (Address: 0x18016a6a0)
memset (Address: 0x18016a658)
qsort (Address: 0x18016a638)
rand (Address: 0x18016a528)
realloc (Address: 0x18016a5b0)
sinf (Address: 0x18016a6e8)
sprintf_s (Address: 0x18016a508)
strcat_s (Address: 0x18016a678)
strchr (Address: 0x18016a510)
strcpy_s (Address: 0x18016a520)
strncmp (Address: 0x18016a650)
strncpy_s (Address: 0x18016a598)
strnlen (Address: 0x18016a668)
strstr (Address: 0x18016a740)
strtoul (Address: 0x18016a610)
swscanf (Address: 0x18016a6a8)
swscanf_s (Address: 0x18016a630)
towlower (Address: 0x18016a618)
towupper (Address: 0x18016a6c8)
wcscat_s (Address: 0x18016a5b8)
wcscmp (Address: 0x18016a750)
wcscpy_s (Address: 0x18016a5a8)
wcscspn (Address: 0x18016a6d0)
wcsncmp (Address: 0x18016a720)
wcsnlen (Address: 0x18016a6e0)
wcsrchr (Address: 0x18016a748)
wcsstr (Address: 0x18016a600)
wcstombs_s (Address: 0x18016a698)

ntdll.dll

NtQueryInformationFile (Address: 0x18016a770)
NtQueryVolumeInformationFile (Address: 0x18016a768)
RtlNtStatusToDosError (Address: 0x18016a760)