PlayToManager.dll

Description: Microsoft Windows PlayTo Manager

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 092b2e073077ec19f0b9adabd5eade94

File Size: 600.5 KB

Uploaded At: Dec. 1, 2025, 7:36 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x23ee0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x23f20)
  • DllGetClassObject (Ordinal: 3, Address: 0x23f60)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x180073ed8)
  • CStdStubBuffer2_CountRefs (Address: 0x180073e88)
  • CStdStubBuffer2_Disconnect (Address: 0x180073e90)
  • CStdStubBuffer2_QueryInterface (Address: 0x180073e98)
  • NdrProxyForwardingFunction3 (Address: 0x180073f10)
  • NdrProxyForwardingFunction4 (Address: 0x180073ea0)
  • NdrProxyForwardingFunction5 (Address: 0x180073ea8)
  • ObjectStublessClient10 (Address: 0x180073eb8)
  • ObjectStublessClient11 (Address: 0x180073e80)
  • ObjectStublessClient12 (Address: 0x180073ec0)
  • ObjectStublessClient13 (Address: 0x180073f08)
  • ObjectStublessClient14 (Address: 0x180073ee0)
  • ObjectStublessClient15 (Address: 0x180073ee8)
  • ObjectStublessClient3 (Address: 0x180073f00)
  • ObjectStublessClient4 (Address: 0x180073f18)
  • ObjectStublessClient5 (Address: 0x180073ef0)
  • ObjectStublessClient6 (Address: 0x180073ed0)
  • ObjectStublessClient7 (Address: 0x180073ef8)
  • ObjectStublessClient8 (Address: 0x180073ec8)
  • ObjectStublessClient9 (Address: 0x180073eb0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180073f28)
  • IsDebuggerPresent (Address: 0x180073f30)
  • OutputDebugStringW (Address: 0x180073f38)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180073f48)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180073f58)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180073f70)
  • RaiseException (Address: 0x180073f88)
  • SetLastError (Address: 0x180073f78)
  • SetUnhandledExceptionFilter (Address: 0x180073f80)
  • UnhandledExceptionFilter (Address: 0x180073f68)
api-ms-win-core-featurestaging-l1-1-0.dll
  • RecordFeatureUsage (Address: 0x180073fa0)
  • SubscribeFeatureStateChangeNotification (Address: 0x180073f98)
  • UnsubscribeFeatureStateChangeNotification (Address: 0x180073fa8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180073fb8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180073fd0)
  • HeapAlloc (Address: 0x180073fc8)
  • HeapFree (Address: 0x180073fd8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180073ff0)
  • LocalFree (Address: 0x180073fe8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180074040)
  • FindResourceExW (Address: 0x180074018)
  • FreeLibrary (Address: 0x180074020)
  • GetModuleFileNameA (Address: 0x180074010)
  • GetModuleHandleExW (Address: 0x180074000)
  • GetModuleHandleW (Address: 0x180074028)
  • GetProcAddress (Address: 0x180074030)
  • LoadResource (Address: 0x180074008)
  • LockResource (Address: 0x180074038)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180074050)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x180074070)
  • GetCurrentProcess (Address: 0x180074080)
  • GetCurrentProcessId (Address: 0x180074068)
  • GetCurrentThread (Address: 0x180074088)
  • GetCurrentThreadId (Address: 0x180074078)
  • GetProcessId (Address: 0x180074060)
  • OpenProcessToken (Address: 0x180074090)
  • OpenThreadToken (Address: 0x180074098)
  • TerminateProcess (Address: 0x1800740a0)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1800740b0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800740c0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800740d8)
  • RegCreateKeyExW (Address: 0x1800740e0)
  • RegGetValueW (Address: 0x1800740e8)
  • RegOpenKeyExW (Address: 0x1800740d0)
  • RegQueryInfoKeyW (Address: 0x1800740f0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x180074100)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180074188)
  • AcquireSRWLockShared (Address: 0x180074190)
  • CreateEventExW (Address: 0x180074178)
  • CreateEventW (Address: 0x180074180)
  • CreateMutexExW (Address: 0x180074158)
  • CreateSemaphoreExW (Address: 0x180074120)
  • DeleteCriticalSection (Address: 0x180074198)
  • EnterCriticalSection (Address: 0x180074170)
  • InitializeCriticalSectionEx (Address: 0x1800741a0)
  • InitializeSRWLock (Address: 0x180074168)
  • LeaveCriticalSection (Address: 0x180074130)
  • OpenSemaphoreW (Address: 0x180074128)
  • ReleaseMutex (Address: 0x180074140)
  • ReleaseSemaphore (Address: 0x180074138)
  • ReleaseSRWLockExclusive (Address: 0x1800741a8)
  • ReleaseSRWLockShared (Address: 0x180074160)
  • ResetEvent (Address: 0x180074110)
  • SetEvent (Address: 0x180074118)
  • WaitForSingleObject (Address: 0x180074150)
  • WaitForSingleObjectEx (Address: 0x180074148)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1800741d8)
  • InitOnceInitialize (Address: 0x1800741d0)
  • Sleep (Address: 0x1800741e8)
  • SleepConditionVariableSRW (Address: 0x1800741c0)
  • WaitOnAddress (Address: 0x1800741e0)
  • WakeAllConditionVariable (Address: 0x1800741b8)
  • WakeByAddressAll (Address: 0x1800741c8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180074200)
  • GetTickCount (Address: 0x1800741f8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWork (Address: 0x180074218)
  • CreateThreadpoolWork (Address: 0x180074210)
  • FreeLibraryWhenCallbackReturns (Address: 0x180074228)
  • SubmitThreadpoolWork (Address: 0x180074220)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180074238)
  • EncodePointer (Address: 0x180074240)
api-ms-win-dx-d3dkmt-l1-1-1.dll
  • D3DKMTNetDispQueryMiracastDisplayDeviceSupport (Address: 0x180074250)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x180074270)
  • GetTraceEnableLevel (Address: 0x180074280)
  • GetTraceLoggerHandle (Address: 0x180074288)
  • RegisterTraceGuidsW (Address: 0x180074268)
  • TraceMessage (Address: 0x180074278)
  • UnregisterTraceGuids (Address: 0x180074260)
api-ms-win-eventing-consumer-l1-1-0.dll
  • CloseTrace (Address: 0x1800742a8)
  • OpenTraceW (Address: 0x180074298)
  • ProcessTrace (Address: 0x1800742a0)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x1800742c0)
  • StartTraceW (Address: 0x1800742b8)
api-ms-win-eventing-legacy-l1-1-0.dll
  • EnableTraceEx (Address: 0x1800742d0)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1800742f0)
  • EventSetInformation (Address: 0x1800742e8)
  • EventUnregister (Address: 0x1800742e0)
  • EventWriteTransfer (Address: 0x1800742f8)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x180074308)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x180074318)
  • OpenSCManagerW (Address: 0x180074328)
  • OpenServiceW (Address: 0x180074320)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x180074338)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180074350)
  • SHTaskPoolQueueTask (Address: 0x180074348)
combase.dll
  • (Address: 0x1800743b0)
  • (Address: 0x1800743c8)
  • (Address: 0x1800743c0)
  • (Address: 0x1800743b8)
  • (Address: 0x180074360)
  • (Address: 0x1800743a8)
  • (Address: 0x1800743a0)
  • (Address: 0x180074398)
  • (Address: 0x180074390)
  • (Address: 0x180074388)
  • (Address: 0x180074380)
  • (Address: 0x180074378)
  • (Address: 0x180074370)
  • (Address: 0x180074368)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800744b8)
  • __CxxFrameHandler3 (Address: 0x180074480)
  • __dllonexit (Address: 0x180074490)
  • _amsg_exit (Address: 0x180074498)
  • _callnewh (Address: 0x180074420)
  • _CxxThrowException (Address: 0x180074448)
  • _get_errno (Address: 0x180074440)
  • _initterm (Address: 0x1800744c0)
  • _lock (Address: 0x1800744a8)
  • _onexit (Address: 0x180074488)
  • _purecall (Address: 0x180074478)
  • _set_errno (Address: 0x180074418)
  • _unlock (Address: 0x1800744a0)
  • _vsnprintf_s (Address: 0x180074410)
  • _vsnwprintf (Address: 0x1800744c8)
  • _wcsicmp (Address: 0x1800743e8)
  • _XcptFilter (Address: 0x180074438)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180074408)
  • ??0exception@@QEAA@XZ (Address: 0x180074400)
  • ??1exception@@UEAA@XZ (Address: 0x1800743f8)
  • ??1type_info@@UEAA@XZ (Address: 0x180074430)
  • ?terminate@@YAXXZ (Address: 0x180074428)
  • free (Address: 0x180074470)
  • malloc (Address: 0x1800744b0)
  • memcmp (Address: 0x180074450)
  • memcpy (Address: 0x180074458)
  • memcpy_s (Address: 0x1800744d0)
  • memmove (Address: 0x180074460)
  • memmove_s (Address: 0x1800743d8)
  • memset (Address: 0x180074468)
  • realloc (Address: 0x1800743e0)
  • wcscmp (Address: 0x1800744d8)
  • wcsstr (Address: 0x1800743f0)
ntdll.dll
  • RtlCaptureContext (Address: 0x180074528)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800744e8)
  • RtlLookupFunctionEntry (Address: 0x180074520)
  • RtlQueryWnfStateData (Address: 0x180074500)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800744f8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800744f0)
  • RtlVirtualUnwind (Address: 0x180074518)
  • WinSqmIncrementDWORD (Address: 0x180074508)
  • WinSqmIsOptedIn (Address: 0x180074510)
OLEAUT32.dll
  • SysFreeString (Address: 0x180073da0)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180073de8)
  • CStdStubBuffer_Connect (Address: 0x180073e60)
  • CStdStubBuffer_CountRefs (Address: 0x180073e00)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180073dd8)
  • CStdStubBuffer_DebugServerRelease (Address: 0x180073e18)
  • CStdStubBuffer_Disconnect (Address: 0x180073e20)
  • CStdStubBuffer_Invoke (Address: 0x180073e70)
  • CStdStubBuffer_IsIIDSupported (Address: 0x180073e30)
  • CStdStubBuffer_QueryInterface (Address: 0x180073e08)
  • IUnknown_AddRef_Proxy (Address: 0x180073dc0)
  • IUnknown_QueryInterface_Proxy (Address: 0x180073e28)
  • IUnknown_Release_Proxy (Address: 0x180073df0)
  • NdrClientCall3 (Address: 0x180073e68)
  • NdrCStdStubBuffer_Release (Address: 0x180073e38)
  • NdrCStdStubBuffer2_Release (Address: 0x180073e58)
  • NdrDllCanUnloadNow (Address: 0x180073e40)
  • NdrDllGetClassObject (Address: 0x180073e48)
  • NdrOleAllocate (Address: 0x180073e10)
  • NdrOleFree (Address: 0x180073de0)
  • NdrStubCall3 (Address: 0x180073df8)
  • NdrStubForwardingFunction (Address: 0x180073e50)
  • RpcBindingFree (Address: 0x180073db0)
  • RpcBindingFromStringBindingW (Address: 0x180073dd0)
  • RpcStringBindingComposeW (Address: 0x180073dc8)
  • RpcStringFreeW (Address: 0x180073db8)