mfplat.dll

Description: Media Foundation Platform DLL

Version: 10.0.19041.6280

Architecture: 32-bit

Operating System: Windows NT

SHA256: 581be1eb6bc4f78b9d45bfa207a69c3c

File Size: 1.5 MB

Uploaded At: Dec. 1, 2025, 8 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

FormatTagFromWfx (Ordinal: 1, Address: 0x48ec0)
MFEnumLocalMFTRegistrations (Ordinal: 2, Address: 0xa68d0)
MFGetPlatformFlags (Ordinal: 3, Address: 0x74010)
MFGetPlatformVersion (Ordinal: 4, Address: 0x74020)
MFGetRandomNumber (Ordinal: 5, Address: 0x74ad0)
MFIsFeatureEnabled (Ordinal: 6, Address: 0x74050)
MFPlatformBigEndian (Ordinal: 7, Address: 0x433e0)
MFPlatformLittleEndian (Ordinal: 8, Address: 0x48f60)
ValidateWaveFormat (Ordinal: 9, Address: 0x48e70)
CopyPropVariant (Ordinal: 10, Address: 0xa78e0)
CreatePropVariant (Ordinal: 11, Address: 0x34e50)
CreatePropertyStore (Ordinal: 12, Address: 0xb35e0)
DestroyPropVariant (Ordinal: 13, Address: 0x34350)
GetAMSubtypeFromD3DFormat (Ordinal: 14, Address: 0x48560)
GetD3DFormatFromMFSubtype (Ordinal: 15, Address: 0x42ab0)
MFAddPeriodicCallback (Ordinal: 16, Address: 0x15540a)
MFAllocateSerialWorkQueue (Ordinal: 17, Address: 0x155444)
MFAllocateWorkQueue (Ordinal: 18, Address: 0x74540)
MFAllocateWorkQueueEx (Ordinal: 19, Address: 0x155492)
MFAppendCollection (Ordinal: 20, Address: 0xb3610)
MFAverageTimePerFrameToFrameRate (Ordinal: 21, Address: 0x498c0)
MFBeginCreateFile (Ordinal: 22, Address: 0x79760)
MFBeginGetHostByName (Ordinal: 23, Address: 0x7a5a0)
MFBeginRegisterWorkQueueWithMMCSS (Ordinal: 24, Address: 0x74560)
MFBeginRegisterWorkQueueWithMMCSSEx (Ordinal: 25, Address: 0x155551)
MFBeginUnregisterWorkQueueWithMMCSS (Ordinal: 26, Address: 0x1555a1)
MFCalculateBitmapImageSize (Ordinal: 27, Address: 0xa87c0)
MFCalculateImageSize (Ordinal: 28, Address: 0xa8870)
MFCallStackTracingClearSnapshot (Ordinal: 29, Address: 0x74590)
MFCallStackTracingLogSessionErrors (Ordinal: 30, Address: 0x745b0)
MFCallStackTracingRestoreSnapshot (Ordinal: 31, Address: 0x745f0)
MFCallStackTracingTakeSnapshot (Ordinal: 32, Address: 0x74610)
MFCancelCreateFile (Ordinal: 33, Address: 0x79a00)
MFCancelWorkItem (Ordinal: 34, Address: 0x1556a7)
MFCheckEnabledViaAppService (Ordinal: 35, Address: 0xd72e0)
MFClearLocalMFTs (Ordinal: 36, Address: 0xa7800)
MFCombineSamples (Ordinal: 37, Address: 0xb3630)
MFCompareFullToPartialMediaType (Ordinal: 38, Address: 0x7c500)
MFCompareSockaddrAddresses (Ordinal: 39, Address: 0x7a850)
MFConvertColorInfoFromDXVA (Ordinal: 40, Address: 0xaa880)
MFConvertColorInfoToDXVA (Ordinal: 41, Address: 0xaa8a0)
MFConvertFromFP16Array (Ordinal: 42, Address: 0xaa8c0)
MFConvertToFP16Array (Ordinal: 43, Address: 0xaa910)
MFCopyImage (Ordinal: 44, Address: 0xaa9f0)
MFCreate2DMediaBuffer (Ordinal: 45, Address: 0xb3a20)
MFCreate2DMediaBufferOn1DMediaBuffer (Ordinal: 46, Address: 0xb3a50)
MFCreateAMMediaTypeFromMFMediaType (Ordinal: 47, Address: 0x47770)
MFCreateAlignedMemoryBuffer (Ordinal: 48, Address: 0x31f70)
MFCreateAlignedSharedMemoryBuffer (Ordinal: 49, Address: 0xb3a80)
MFCreateAsyncResult (Ordinal: 50, Address: 0x155857)
MFCreateAttributes (Ordinal: 51, Address: 0x44970)
MFCreateAudioMediaType (Ordinal: 52, Address: 0xa5580)
MFCreateByteStreamHandlerAppServiceActivate (Ordinal: 53, Address: 0xd9090)
MFCreateCollection (Ordinal: 54, Address: 0xb3b90)
MFCreateContentDecryptorContext (Ordinal: 55, Address: 0x11dbe0)
MFCreateContentProtectionDevice (Ordinal: 56, Address: 0x11e380)
MFCreateD3D12SynchronizationObject (Ordinal: 57, Address: 0x89610)
MFCreateDXGIDeviceManager (Ordinal: 58, Address: 0xb3c00)
MFCreateDXGISurfaceBuffer (Ordinal: 59, Address: 0xb3c20)
MFCreateDXSurfaceBuffer (Ordinal: 60, Address: 0xb3c60)
MFCreateEMEStoreObject (Ordinal: 61, Address: 0x4f080)
MFCreateEventQueue (Ordinal: 62, Address: 0x44730)
MFCreateFile (Ordinal: 63, Address: 0x79a40)
MFCreateFileFromHandle (Ordinal: 64, Address: 0x79a70)
MFCreateLegacyMediaBufferOnMFMediaBuffer (Ordinal: 65, Address: 0xab560)
MFCreateMFByteStreamOnIStreamWithFlags (Ordinal: 66, Address: 0x35ac0)
MFCreateMFByteStreamOnStream (Ordinal: 67, Address: 0x35aa0)
MFCreateMFByteStreamOnStreamEx (Ordinal: 68, Address: 0xffea0)
MFCreateMFByteStreamWrapper (Ordinal: 69, Address: 0xfae30)
MFCreateMFVideoFormatFromMFMediaType (Ordinal: 70, Address: 0x31bb0)
MFCreateMediaBufferFromMediaType (Ordinal: 71, Address: 0xb3c80)
MFCreateMediaBufferWrapper (Ordinal: 72, Address: 0x44310)
MFCreateMediaEvent (Ordinal: 73, Address: 0x33c40)
MFCreateMediaEventResult (Ordinal: 74, Address: 0x359f0)
MFCreateMediaExtensionActivate (Ordinal: 75, Address: 0xbf820)
MFCreateMediaExtensionActivateNoInit (Ordinal: 76, Address: 0xbf9a0)
MFCreateMediaExtensionAppServiceActivate (Ordinal: 77, Address: 0xd9160)
MFCreateMediaExtensionInprocActivate (Ordinal: 78, Address: 0x45950)
MFCreateMediaType (Ordinal: 79, Address: 0x3c9d0)
MFCreateMediaTypeFromProperties (Ordinal: 80, Address: 0x112a60)
MFCreateMediaTypeFromRepresentation (Ordinal: 81, Address: 0x48f70)
MFCreateMemoryBuffer (Ordinal: 82, Address: 0x409f0)
MFCreateMemoryBufferFromRawBuffer (Ordinal: 83, Address: 0xb3cb0)
MFCreateMemoryStream (Ordinal: 84, Address: 0xac810)
MFCreateMuxStreamAttributes (Ordinal: 85, Address: 0x8c080)
MFCreateMuxStreamMediaType (Ordinal: 86, Address: 0x8c200)
MFCreateMuxStreamSample (Ordinal: 87, Address: 0x8c3d0)
MFCreateOOPMFTProxy (Ordinal: 88, Address: 0xe1390)
MFCreateOOPMFTRemote (Ordinal: 89, Address: 0xe62e0)
MFCreatePathFromURL (Ordinal: 90, Address: 0x32620)
MFCreatePresentationDescriptor (Ordinal: 91, Address: 0x3c3d0)
MFCreatePropertiesFromMediaType (Ordinal: 92, Address: 0x1131f0)
MFCreateReusableByteStream (Ordinal: 93, Address: 0xfafb0)
MFCreateReusableByteStreamWithSharedLock (Ordinal: 94, Address: 0xfafe0)
MFCreateSample (Ordinal: 95, Address: 0x35190)
MFCreateSecureBufferAllocator (Ordinal: 96, Address: 0xb3ce0)
MFCreateSharedMemoryMediaBufferFromMediaType (Ordinal: 97, Address: 0xb3d00)
MFCreateSocket (Ordinal: 98, Address: 0x7a8c0)
MFCreateSocketListener (Ordinal: 99, Address: 0x7d2d0)
MFCreateSourceResolver (Ordinal: 100, Address: 0x2c460)
MFCreateSourceResolverInternal (Ordinal: 101, Address: 0xf2930)
MFCreateStagingSurfaceWrapper (Ordinal: 102, Address: 0xb3d40)
MFCreateStreamDescriptor (Ordinal: 103, Address: 0x3c4f0)
MFCreateStreamOnMFByteStream (Ordinal: 104, Address: 0x8dd00)
MFCreateStreamOnMFByteStreamEx (Ordinal: 105, Address: 0x108820)
MFCreateSystemTimeSource (Ordinal: 106, Address: 0x7f950)
MFCreateTelemetrySession (Ordinal: 107, Address: 0x435f0)
MFCreateTempFile (Ordinal: 108, Address: 0x79ba0)
MFCreateTrackedSample (Ordinal: 109, Address: 0xb3d60)
MFCreateTransformActivate (Ordinal: 110, Address: 0xb6350)
MFCreateURLFromPath (Ordinal: 111, Address: 0x325b0)
MFCreateUdpSockets (Ordinal: 112, Address: 0x7aa30)
MFCreateVideoDecryptorContext (Ordinal: 113, Address: 0x11dbe0)
MFCreateVideoMediaType (Ordinal: 114, Address: 0x33040)
MFCreateVideoMediaTypeFromBitMapInfoHeader (Ordinal: 115, Address: 0xa8920)
MFCreateVideoMediaTypeFromBitMapInfoHeaderEx (Ordinal: 116, Address: 0x47c00)
MFCreateVideoMediaTypeFromSubtype (Ordinal: 117, Address: 0xa8930)
MFCreateVideoMediaTypeFromVideoInfoHeader2 (Ordinal: 118, Address: 0xa89c0)
MFCreateVideoMediaTypeFromVideoInfoHeader (Ordinal: 119, Address: 0x476c0)
MFCreateVideoSampleAllocatorEx (Ordinal: 120, Address: 0x2c3b0)
MFCreateWICBitmapBuffer (Ordinal: 121, Address: 0xb3dc0)
MFCreateWICDecoderProxy (Ordinal: 122, Address: 0xea6e0)
MFCreateWaveFormatExFromMFMediaType (Ordinal: 123, Address: 0x48680)
MFDeserializeAttributesFromStream (Ordinal: 124, Address: 0xb3de0)
MFDeserializeEvent (Ordinal: 125, Address: 0xb3eb0)
MFDeserializeMediaTypeFromStream (Ordinal: 126, Address: 0xb3f60)
MFDeserializePresentationDescriptor (Ordinal: 127, Address: 0xb3fe0)
MFEndCreateFile (Ordinal: 128, Address: 0x79bc0)
MFEndGetHostByName (Ordinal: 129, Address: 0x7b010)
MFEndRegisterWorkQueueWithMMCSS (Ordinal: 130, Address: 0x15614a)
MFEndUnregisterWorkQueueWithMMCSS (Ordinal: 131, Address: 0x156196)
MFFrameRateToAverageTimePerFrame (Ordinal: 132, Address: 0xa8a40)
MFFreeAdaptersAddresses (Ordinal: 133, Address: 0x7fe80)
MFGetAdaptersAddresses (Ordinal: 134, Address: 0x7fea0)
MFGetAttributesAsBlob (Ordinal: 135, Address: 0xa8a60)
MFGetAttributesAsBlobSize (Ordinal: 136, Address: 0xa8ec0)
MFGetCallStackTracingWeakReference (Ordinal: 137, Address: 0x44cc0)
MFGetConfigurationDWORD (Ordinal: 138, Address: 0x41690)
MFGetConfigurationPolicy (Ordinal: 139, Address: 0x74630)
MFGetConfigurationStore (Ordinal: 140, Address: 0x74640)
MFGetConfigurationString (Ordinal: 141, Address: 0x74650)
MFGetContentProtectionSystemCLSID (Ordinal: 142, Address: 0x74660)
MFGetMFTMerit (Ordinal: 143, Address: 0x8de50)
MFGetNumericNameFromSockaddr (Ordinal: 144, Address: 0x7b170)
MFGetPlaneSize (Ordinal: 145, Address: 0xaaae0)
MFGetPluginControl (Ordinal: 146, Address: 0x49850)
MFGetSockaddrFromNumericName (Ordinal: 147, Address: 0x7b480)
MFGetStrideForBitmapInfoHeader (Ordinal: 148, Address: 0x30fb0)
MFGetSupportedMimeTypes (Ordinal: 149, Address: 0xf3140)
MFGetSupportedSchemes (Ordinal: 150, Address: 0xf35b0)
MFGetSystemTime (Ordinal: 151, Address: 0x439a0)
MFGetTimerPeriodicity (Ordinal: 152, Address: 0x74930)
MFGetUncompressedVideoFormat (Ordinal: 153, Address: 0x31260)
MFGetWorkQueueMMCSSClass (Ordinal: 154, Address: 0x1563fc)
MFGetWorkQueueMMCSSPriority (Ordinal: 155, Address: 0x15643b)
MFGetWorkQueueMMCSSTaskId (Ordinal: 156, Address: 0x15647b)
MFHasLocallyRegisteredByteStreamHandlers (Ordinal: 157, Address: 0xf4bb0)
MFHasLocallyRegisteredSchemeHandlers (Ordinal: 158, Address: 0xf4c80)
MFHeapAlloc (Ordinal: 159, Address: 0x7ff00)
MFHeapFree (Ordinal: 160, Address: 0x7ff30)
MFInitAMMediaTypeFromMFMediaType (Ordinal: 161, Address: 0x477d0)
MFInitAttributesFromBlob (Ordinal: 162, Address: 0x37a50)
MFInitMediaTypeFromAMMediaType (Ordinal: 163, Address: 0x3deb0)
MFInitMediaTypeFromMFVideoFormat (Ordinal: 164, Address: 0x330a0)
MFInitMediaTypeFromMPEG1VideoInfo (Ordinal: 165, Address: 0x47650)
MFInitMediaTypeFromMPEG2VideoInfo (Ordinal: 166, Address: 0x34680)
MFInitMediaTypeFromVideoInfoHeader2 (Ordinal: 167, Address: 0x421c0)
MFInitMediaTypeFromVideoInfoHeader (Ordinal: 168, Address: 0x48970)
MFInitMediaTypeFromWaveFormatEx (Ordinal: 169, Address: 0x3eed0)
MFInitVideoFormat (Ordinal: 170, Address: 0xaab10)
MFInitVideoFormat_RGB (Ordinal: 171, Address: 0xaad90)
MFInvalidateMFTEnumCache (Ordinal: 172, Address: 0xb1c60)
MFInvokeCallback (Ordinal: 173, Address: 0x15667b)
MFIsBottomUpFormat (Ordinal: 174, Address: 0xa9b80)
MFIsContentProtectionDeviceSupported (Ordinal: 175, Address: 0x11e3d0)
MFIsLocallyRegisteredMimeType (Ordinal: 176, Address: 0xf4d50)
MFIsLocallyRegisteredSchemeHandler (Ordinal: 177, Address: 0xf4e80)
MFJoinWorkQueue (Ordinal: 178, Address: 0x15671f)
MFLockDXGIDeviceManager (Ordinal: 179, Address: 0xb4090)
MFLockPlatform (Ordinal: 180, Address: 0x156760)
MFLockSharedWorkQueue (Ordinal: 181, Address: 0x15678f)
MFLockWorkQueue (Ordinal: 182, Address: 0x1567bf)
MFMapDX9FormatToDXGIFormat (Ordinal: 183, Address: 0xb4110)
MFMapDXGIFormatToDX9Format (Ordinal: 184, Address: 0xb4150)
MFPutWaitingWorkItem (Ordinal: 185, Address: 0x156824)
MFPutWorkItem2 (Ordinal: 186, Address: 0x37080)
MFPutWorkItem (Ordinal: 187, Address: 0x2c8e0)
MFPutWorkItemEx2 (Ordinal: 188, Address: 0x35350)
MFPutWorkItemEx (Ordinal: 189, Address: 0x749e0)
MFRegisterLocalByteStreamHandler (Ordinal: 190, Address: 0xf4fb0)
MFRegisterLocalSchemeHandler (Ordinal: 191, Address: 0xf5140)
MFRegisterPlatformWithMMCSS (Ordinal: 192, Address: 0x1568db)
MFRemovePeriodicCallback (Ordinal: 193, Address: 0x15691a)
MFScheduleWorkItem (Ordinal: 194, Address: 0x74a00)
MFScheduleWorkItemEx (Ordinal: 195, Address: 0x156965)
MFSerializeAttributesToStream (Ordinal: 196, Address: 0xb4190)
MFSerializeEvent (Ordinal: 197, Address: 0xb4260)
MFSerializeMediaTypeToStream (Ordinal: 198, Address: 0xb4330)
MFSerializePresentationDescriptor (Ordinal: 199, Address: 0xb43b0)
MFSetMinimumMemoryAlignment (Ordinal: 200, Address: 0x736f0)
MFSetSockaddrAny (Ordinal: 201, Address: 0x7b730)
MFSetWindowForContentProtection (Ordinal: 202, Address: 0x11eb60)
MFShutdown (Ordinal: 203, Address: 0x43e60)
MFSplitSample (Ordinal: 204, Address: 0xb4480)
MFStartup (Ordinal: 205, Address: 0x43000)
MFStreamDescriptorProtectMediaType (Ordinal: 206, Address: 0xad540)
MFTEnum2 (Ordinal: 207, Address: 0xb2640)
MFTEnum (Ordinal: 208, Address: 0xb1c70)
MFTEnumEx (Ordinal: 209, Address: 0x38e50)
MFTGetInfo (Ordinal: 210, Address: 0x46740)
MFTRegister (Ordinal: 211, Address: 0xb1f00)
MFTRegisterLocal (Ordinal: 212, Address: 0xa7810)
MFTRegisterLocalByCLSID (Ordinal: 213, Address: 0xa7850)
MFTUnregister (Ordinal: 214, Address: 0xb2030)
MFTUnregisterLocal (Ordinal: 215, Address: 0xa7890)
MFTUnregisterLocalByCLSID (Ordinal: 216, Address: 0xa78a0)
MFTraceError (Ordinal: 217, Address: 0x7ff60)
MFTraceFuncEnter (Ordinal: 218, Address: 0x7ff70)
MFUnjoinWorkQueue (Ordinal: 219, Address: 0x156b49)
MFUnlockDXGIDeviceManager (Ordinal: 220, Address: 0xb4b10)
MFUnlockPlatform (Ordinal: 221, Address: 0x156b90)
MFUnlockWorkQueue (Ordinal: 222, Address: 0x156bbd)
MFUnregisterPlatformFromMMCSS (Ordinal: 223, Address: 0x156bf7)
MFUnwrapMediaType (Ordinal: 224, Address: 0xa9d80)
MFValidateMediaTypeSize (Ordinal: 225, Address: 0x3d850)
MFWrapMediaType (Ordinal: 226, Address: 0xa9ed0)
MFWrapSocket (Ordinal: 227, Address: 0x7b8d0)
MFllMulDiv (Ordinal: 228, Address: 0x3e880)
PropVariantFromStream (Ordinal: 229, Address: 0xa7930)
PropVariantToStream (Ordinal: 230, Address: 0xa7c00)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1015c000)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1015c008)
IsDebuggerPresent (Address: 0x1015c010)
OutputDebugStringW (Address: 0x1015c00c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1015c018)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1015c020)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1015c02c)
RaiseException (Address: 0x1015c038)
SetLastError (Address: 0x1015c030)
SetUnhandledExceptionFilter (Address: 0x1015c034)
UnhandledExceptionFilter (Address: 0x1015c028)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1015c064)
FlushFileBuffers (Address: 0x1015c050)
GetFileAttributesExW (Address: 0x1015c044)
GetFileSize (Address: 0x1015c040)
GetFinalPathNameByHandleW (Address: 0x1015c054)
GetFullPathNameW (Address: 0x1015c04c)
ReadFile (Address: 0x1015c060)
SetEndOfFile (Address: 0x1015c048)
SetFilePointer (Address: 0x1015c05c)
WriteFile (Address: 0x1015c058)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1015c06c)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x1015c074)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1015c080)
DuplicateHandle (Address: 0x1015c07c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1015c088)
HeapAlloc (Address: 0x1015c090)
HeapFree (Address: 0x1015c08c)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1015c098)
GlobalFree (Address: 0x1015c0a4)
LocalAlloc (Address: 0x1015c0a0)
LocalFree (Address: 0x1015c09c)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x1015c0ac)
GlobalUnlock (Address: 0x1015c0b0)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x1015c0bc)
DeviceIoControl (Address: 0x1015c0b8)
GetOverlappedResult (Address: 0x1015c0c0)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x1015c0c8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x1015c0d0)

api-ms-win-core-largeinteger-l1-1-0.dll

MulDiv (Address: 0x1015c0d8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1015c0e4)
GetModuleFileNameA (Address: 0x1015c0f0)
GetModuleFileNameW (Address: 0x1015c0f4)
GetModuleHandleExW (Address: 0x1015c0ec)
GetModuleHandleW (Address: 0x1015c0e0)
GetProcAddress (Address: 0x1015c0e8)
LoadLibraryExW (Address: 0x1015c0f8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryA (Address: 0x1015c100)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1015c108)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1015c120)
MapViewOfFile (Address: 0x1015c11c)
MapViewOfFileEx (Address: 0x1015c124)
UnmapViewOfFile (Address: 0x1015c118)
VirtualAlloc (Address: 0x1015c114)
VirtualFree (Address: 0x1015c110)
VirtualQueryEx (Address: 0x1015c128)

api-ms-win-core-memory-l1-1-1.dll

GetProcessWorkingSetSizeEx (Address: 0x1015c130)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1015c14c)
CreateThread (Address: 0x1015c13c)
GetCurrentProcess (Address: 0x1015c148)
GetCurrentProcessId (Address: 0x1015c140)
GetCurrentThreadId (Address: 0x1015c150)
GetExitCodeThread (Address: 0x1015c138)
GetProcessId (Address: 0x1015c160)
GetProcessTimes (Address: 0x1015c144)
OpenProcessToken (Address: 0x1015c164)
OpenThread (Address: 0x1015c170)
TerminateProcess (Address: 0x1015c16c)
TlsAlloc (Address: 0x1015c154)
TlsFree (Address: 0x1015c158)
TlsGetValue (Address: 0x1015c168)
TlsSetValue (Address: 0x1015c15c)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1015c180)
IsProcessorFeaturePresent (Address: 0x1015c17c)
OpenProcess (Address: 0x1015c178)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1015c188)
QueryPerformanceFrequency (Address: 0x1015c18c)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcessModules (Address: 0x1015c198)
K32GetModuleInformation (Address: 0x1015c194)
K32GetProcessMemoryInfo (Address: 0x1015c19c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1015c1c4)
RegCreateKeyExW (Address: 0x1015c1b4)
RegDeleteTreeW (Address: 0x1015c1cc)
RegDeleteValueW (Address: 0x1015c1d0)
RegEnumKeyExW (Address: 0x1015c1c0)
RegEnumValueW (Address: 0x1015c1a4)
RegGetValueW (Address: 0x1015c1b0)
RegNotifyChangeKeyValue (Address: 0x1015c1a8)
RegOpenKeyExW (Address: 0x1015c1bc)
RegQueryInfoKeyW (Address: 0x1015c1b8)
RegQueryValueExW (Address: 0x1015c1c8)
RegSetValueExW (Address: 0x1015c1ac)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpW (Address: 0x1015c1d8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1015c1e8)
MultiByteToWideChar (Address: 0x1015c1e4)
WideCharToMultiByte (Address: 0x1015c1e0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1015c1f4)
lstrcmpW (Address: 0x1015c1f0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1015c230)
AcquireSRWLockShared (Address: 0x1015c240)
CreateEventExW (Address: 0x1015c214)
CreateEventW (Address: 0x1015c220)
CreateMutexExW (Address: 0x1015c244)
CreateSemaphoreExW (Address: 0x1015c210)
DeleteCriticalSection (Address: 0x1015c218)
EnterCriticalSection (Address: 0x1015c234)
InitializeCriticalSection (Address: 0x1015c208)
InitializeCriticalSectionEx (Address: 0x1015c24c)
InitializeSRWLock (Address: 0x1015c1fc)
LeaveCriticalSection (Address: 0x1015c238)
OpenSemaphoreW (Address: 0x1015c200)
ReleaseMutex (Address: 0x1015c224)
ReleaseSemaphore (Address: 0x1015c20c)
ReleaseSRWLockExclusive (Address: 0x1015c22c)
ReleaseSRWLockShared (Address: 0x1015c228)
ResetEvent (Address: 0x1015c23c)
SetEvent (Address: 0x1015c248)
WaitForSingleObject (Address: 0x1015c21c)
WaitForSingleObjectEx (Address: 0x1015c204)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1015c260)
Sleep (Address: 0x1015c25c)
SleepConditionVariableSRW (Address: 0x1015c258)
WakeAllConditionVariable (Address: 0x1015c254)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1015c26c)
GetSystemDirectoryA (Address: 0x1015c284)
GetSystemDirectoryW (Address: 0x1015c278)
GetSystemInfo (Address: 0x1015c280)
GetSystemTimeAsFileTime (Address: 0x1015c274)
GetTickCount (Address: 0x1015c270)
GetTickCount64 (Address: 0x1015c268)
GetVersion (Address: 0x1015c27c)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x1015c28c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1015c294)
CreateThreadpoolTimer (Address: 0x1015c2a0)
SetThreadpoolTimer (Address: 0x1015c298)
WaitForThreadpoolTimerCallbacks (Address: 0x1015c29c)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x1015c2a8)

api-ms-win-core-url-l1-1-0.dll

PathCreateFromUrlW (Address: 0x1015c2b4)
UrlCreateFromPathW (Address: 0x1015c2b0)

api-ms-win-core-windowserrorreporting-l1-1-0.dll

WerRegisterFile (Address: 0x1015c2c0)
WerUnregisterFile (Address: 0x1015c2bc)

api-ms-win-devices-config-l1-1-1.dll

CM_Get_Device_Interface_List_SizeW (Address: 0x1015c2e8)
CM_Get_Device_Interface_ListW (Address: 0x1015c2e0)
CM_Get_Device_Interface_PropertyW (Address: 0x1015c2d4)
CM_Locate_DevNodeW (Address: 0x1015c2d0)
CM_MapCrToWin32Err (Address: 0x1015c2c8)
CM_Open_Device_Interface_KeyW (Address: 0x1015c2dc)
CM_Open_DevNode_Key (Address: 0x1015c2e4)
CM_Register_Notification (Address: 0x1015c2d8)
CM_Unregister_Notification (Address: 0x1015c2cc)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1015c2fc)
GetTraceEnableLevel (Address: 0x1015c300)
GetTraceLoggerHandle (Address: 0x1015c2f8)
RegisterTraceGuidsW (Address: 0x1015c2f0)
TraceMessage (Address: 0x1015c304)
UnregisterTraceGuids (Address: 0x1015c2f4)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1015c31c)
EventRegister (Address: 0x1015c318)
EventSetInformation (Address: 0x1015c314)
EventUnregister (Address: 0x1015c30c)
EventWriteTransfer (Address: 0x1015c310)

api-ms-win-mm-time-l1-1-0.dll

timeBeginPeriod (Address: 0x1015c328)
timeEndPeriod (Address: 0x1015c324)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1015c330)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x1015c338)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1015c460)
__dllonexit (Address: 0x1015c3f4)
_amsg_exit (Address: 0x1015c43c)
_callnewh (Address: 0x1015c448)
_CIcos (Address: 0x1015c430)
_CIsin (Address: 0x1015c3d4)
_CxxThrowException (Address: 0x1015c354)
_except_handler4_common (Address: 0x1015c404)
_ftol2 (Address: 0x1015c3b4)
_gcvt_s (Address: 0x1015c374)
_i64toa_s (Address: 0x1015c364)
_initterm (Address: 0x1015c434)
_itoa_s (Address: 0x1015c3c0)
_lock (Address: 0x1015c400)
_ltoa_s (Address: 0x1015c360)
_onexit (Address: 0x1015c3e8)
_purecall (Address: 0x1015c3fc)
_splitpath_s (Address: 0x1015c3a8)
_strcmpi (Address: 0x1015c458)
_strnicmp (Address: 0x1015c3b8)
_ultoa_s (Address: 0x1015c34c)
_ultow (Address: 0x1015c370)
_unlock (Address: 0x1015c3f8)
_vsnprintf (Address: 0x1015c378)
_vsnprintf_s (Address: 0x1015c340)
_vsnwprintf (Address: 0x1015c3a0)
_wcsicmp (Address: 0x1015c3cc)
_wcslwr_s (Address: 0x1015c418)
_wcsnicmp (Address: 0x1015c3d8)
_wsplitpath_s (Address: 0x1015c45c)
_XcptFilter (Address: 0x1015c440)
??0exception@@QAE@ABQBD@Z (Address: 0x1015c388)
??0exception@@QAE@ABQBDH@Z (Address: 0x1015c394)
??0exception@@QAE@ABV0@@Z (Address: 0x1015c3ec)
??0exception@@QAE@XZ (Address: 0x1015c36c)
??1exception@@UAE@XZ (Address: 0x1015c39c)
??1type_info@@UAE@XZ (Address: 0x1015c3f0)
?terminate@@YAXXZ (Address: 0x1015c444)
?what@exception@@UBEPBDXZ (Address: 0x1015c3d0)
atoi (Address: 0x1015c408)
calloc (Address: 0x1015c464)
free (Address: 0x1015c454)
iswalpha (Address: 0x1015c420)
iswdigit (Address: 0x1015c41c)
malloc (Address: 0x1015c44c)
memcmp (Address: 0x1015c42c)
memcpy (Address: 0x1015c368)
memcpy_s (Address: 0x1015c390)
memmove (Address: 0x1015c380)
memmove_s (Address: 0x1015c410)
memset (Address: 0x1015c468)
qsort (Address: 0x1015c398)
rand (Address: 0x1015c3c8)
realloc (Address: 0x1015c38c)
sprintf_s (Address: 0x1015c358)
strcat_s (Address: 0x1015c35c)
strchr (Address: 0x1015c438)
strcpy_s (Address: 0x1015c3e4)
strncmp (Address: 0x1015c3ac)
strncpy_s (Address: 0x1015c3a4)
strnlen (Address: 0x1015c3b0)
strstr (Address: 0x1015c3bc)
strtoul (Address: 0x1015c344)
swscanf (Address: 0x1015c414)
swscanf_s (Address: 0x1015c3e0)
towlower (Address: 0x1015c450)
towupper (Address: 0x1015c424)
wcscat_s (Address: 0x1015c350)
wcscpy_s (Address: 0x1015c348)
wcscspn (Address: 0x1015c428)
wcsncmp (Address: 0x1015c3c4)
wcsnlen (Address: 0x1015c37c)
wcsrchr (Address: 0x1015c384)
wcsstr (Address: 0x1015c3dc)
wcstombs_s (Address: 0x1015c40c)

ntdll.dll

NtQueryInformationFile (Address: 0x1015c478)
NtQueryVolumeInformationFile (Address: 0x1015c474)
RtlNtStatusToDosError (Address: 0x1015c470)