msrahc.dll

Description: Remote Assistance Diagnostics Provider

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8a52815d8b976508251704dec20fe5e3

File Size: 134.0 KB

Uploaded At: Dec. 1, 2025, 7:34 a.m.

Views: 4

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1530)
DllGetClassObject (Ordinal: 2, Address: 0x1550)
DllRegisterServer (Ordinal: 3, Address: 0x1680)
DllUnregisterServer (Ordinal: 4, Address: 0x1780)

Imported DLLs & Functions

ADVAPI32.dll

CloseServiceHandle (Address: 0x1800190f8)
ControlService (Address: 0x1800190e8)
EventActivityIdControl (Address: 0x180019130)
EventProviderEnabled (Address: 0x1800190e0)
EventRegister (Address: 0x180019138)
EventSetInformation (Address: 0x1800190d8)
EventUnregister (Address: 0x180019140)
EventWrite (Address: 0x180019120)
EventWriteTransfer (Address: 0x180019128)
OpenSCManagerW (Address: 0x180019110)
OpenServiceW (Address: 0x180019108)
QueryServiceStatusEx (Address: 0x180019100)
RegCloseKey (Address: 0x180019178)
RegCreateKeyExW (Address: 0x180019150)
RegDeleteValueW (Address: 0x180019148)
RegEnumKeyExW (Address: 0x180019168)
RegOpenKeyExW (Address: 0x180019160)
RegQueryInfoKeyW (Address: 0x180019170)
RegQueryValueExW (Address: 0x180019118)
RegSetValueExW (Address: 0x180019158)
StartServiceW (Address: 0x1800190f0)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x180019498)
CoTaskMemAlloc (Address: 0x1800194b8)
CoTaskMemFree (Address: 0x1800194a0)
CoTaskMemRealloc (Address: 0x1800194b0)
StringFromGUID2 (Address: 0x1800194a8)

IPHLPAPI.DLL

CancelMibChangeNotify2 (Address: 0x180019198)
FreeMibTable (Address: 0x180019190)
NotifyStableUnicastIpAddressTable (Address: 0x180019188)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800192e8)
CloseHandle (Address: 0x180019220)
CompareStringW (Address: 0x1800191d8)
CreateEventW (Address: 0x180019260)
CreateMutexW (Address: 0x180019248)
DeleteCriticalSection (Address: 0x180019300)
DisableThreadLibraryCalls (Address: 0x1800192f8)
EnterCriticalSection (Address: 0x180019338)
FileTimeToLocalFileTime (Address: 0x1800191f8)
FileTimeToSystemTime (Address: 0x1800191f0)
FindResourceExW (Address: 0x180019318)
FormatMessageW (Address: 0x1800192c0)
FreeLibrary (Address: 0x180019370)
GetCurrentProcess (Address: 0x1800191b0)
GetCurrentProcessId (Address: 0x180019288)
GetCurrentThreadId (Address: 0x180019290)
GetDateFormatEx (Address: 0x1800191e0)
GetDateFormatW (Address: 0x180019268)
GetLastError (Address: 0x180019378)
GetModuleFileNameA (Address: 0x1800192b0)
GetModuleFileNameW (Address: 0x180019310)
GetModuleHandleW (Address: 0x180019358)
GetProcAddress (Address: 0x180019368)
GetProcessHeap (Address: 0x180019228)
GetSystemTimeAsFileTime (Address: 0x1800192a0)
GetTickCount (Address: 0x1800191d0)
GetTimeFormatEx (Address: 0x1800191e8)
GetTimeFormatW (Address: 0x180019270)
HeapAlloc (Address: 0x180019298)
HeapDestroy (Address: 0x1800192d0)
HeapFree (Address: 0x180019230)
HeapReAlloc (Address: 0x1800192d8)
HeapSize (Address: 0x1800192e0)
InitializeCriticalSection (Address: 0x180019308)
LeaveCriticalSection (Address: 0x180019348)
LoadLibraryExW (Address: 0x180019360)
LoadLibraryW (Address: 0x180019240)
LoadResource (Address: 0x180019320)
LocalAlloc (Address: 0x1800192a8)
LocalFree (Address: 0x1800192b8)
LockResource (Address: 0x1800192c8)
lstrcmpiW (Address: 0x180019350)
MultiByteToWideChar (Address: 0x180019330)
OpenEventW (Address: 0x180019218)
OpenMutexW (Address: 0x180019250)
OutputDebugStringA (Address: 0x180019238)
QueryPerformanceCounter (Address: 0x180019200)
RaiseException (Address: 0x180019340)
ReleaseMutex (Address: 0x180019258)
ReleaseSRWLockExclusive (Address: 0x1800192f0)
ResetEvent (Address: 0x180019280)
SetEvent (Address: 0x180019210)
SetUnhandledExceptionFilter (Address: 0x1800191b8)
SizeofResource (Address: 0x180019328)
Sleep (Address: 0x1800191c8)
TerminateProcess (Address: 0x1800191a8)
UnhandledExceptionFilter (Address: 0x1800191c0)
WaitForMultipleObjects (Address: 0x180019278)
WaitForSingleObject (Address: 0x180019208)

msvcrt.dll

__C_specific_handler (Address: 0x180019588)
__CxxFrameHandler3 (Address: 0x180019598)
__dllonexit (Address: 0x1800195b8)
_amsg_exit (Address: 0x1800194c8)
_callnewh (Address: 0x180019510)
_CxxThrowException (Address: 0x1800194e0)
_errno (Address: 0x180019568)
_initterm (Address: 0x180019500)
_lock (Address: 0x1800195a8)
_onexit (Address: 0x1800195c0)
_purecall (Address: 0x180019538)
_time64 (Address: 0x180019520)
_unlock (Address: 0x1800195b0)
_vscwprintf (Address: 0x1800195e8)
_vsnwprintf (Address: 0x1800195d0)
_XcptFilter (Address: 0x180019608)
??_V@YAXPEAX@Z (Address: 0x180019590)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180019508)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800195c8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800194f8)
??1exception@@UEAA@XZ (Address: 0x1800194f0)
??1type_info@@UEAA@XZ (Address: 0x180019558)
??3@YAXPEAX@Z (Address: 0x180019560)
?terminate@@YAXXZ (Address: 0x180019530)
?what@exception@@UEBAPEBDXZ (Address: 0x1800194e8)
free (Address: 0x180019570)
malloc (Address: 0x180019578)
memcpy (Address: 0x1800194d8)
memcpy_s (Address: 0x180019550)
memmove (Address: 0x1800194d0)
memmove_s (Address: 0x180019518)
memset (Address: 0x180019610)
realloc (Address: 0x1800195a0)
toupper (Address: 0x180019600)
vswprintf_s (Address: 0x1800195f0)
wcscat_s (Address: 0x180019540)
wcscpy_s (Address: 0x180019548)
wcsncmp (Address: 0x180019528)
wcsncpy_s (Address: 0x180019580)
wcsnlen (Address: 0x1800195e0)
wcsstr (Address: 0x1800195f8)
wcstoul (Address: 0x1800195d8)

ntdll.dll

RtlCaptureContext (Address: 0x180019630)
RtlLookupFunctionEntry (Address: 0x180019620)
RtlVirtualUnwind (Address: 0x180019628)

OLEAUT32.dll

LoadTypeLib (Address: 0x1800193b0)
RegisterTypeLib (Address: 0x180019398)
SysAllocString (Address: 0x1800193a8)
SysAllocStringByteLen (Address: 0x1800193d0)
SysAllocStringLen (Address: 0x1800193c8)
SysFreeString (Address: 0x180019388)
SysStringLen (Address: 0x1800193a0)
UnRegisterTypeLib (Address: 0x1800193b8)
VariantClear (Address: 0x1800193d8)
VariantInit (Address: 0x1800193c0)
VarUI4FromStr (Address: 0x180019390)

SHELL32.dll

SHGetKnownFolderPath (Address: 0x1800193e8)
SHGetSpecialFolderPathW (Address: 0x1800193f0)

USER32.dll

CharNextW (Address: 0x180019408)
LoadStringW (Address: 0x180019400)
UnregisterClassA (Address: 0x180019410)

wevtapi.dll

EvtClose (Address: 0x180019658)
EvtCreateRenderContext (Address: 0x180019648)
EvtNext (Address: 0x180019640)
EvtQuery (Address: 0x180019660)
EvtRender (Address: 0x180019650)

WS2_32.dll

closesocket (Address: 0x180019478)
connect (Address: 0x180019428)
FreeAddrInfoW (Address: 0x180019460)
GetAddrInfoW (Address: 0x180019468)
recv (Address: 0x180019488)
send (Address: 0x180019420)
socket (Address: 0x180019430)
WSACleanup (Address: 0x180019458)
WSAEventSelect (Address: 0x180019480)
WSAGetLastError (Address: 0x180019440)
WSALookupServiceBeginW (Address: 0x180019450)
WSALookupServiceEnd (Address: 0x180019438)
WSALookupServiceNextW (Address: 0x180019448)
WSAStartup (Address: 0x180019470)