WaaSMedicSvc.dll

Description: WaasMedic Service Dll

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6033

Architecture: 64-bit

Operating System: Windows NT

SHA256: d2d4af5f65b28bed5969beb87feea98c

File Size: 424.0 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 5

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x248b0)
  • SvchostPushServiceGlobals (Ordinal: 2, Address: 0x23fc0)
  • DllMain (Ordinal: 3, Address: 0x6460)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18003ed00)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateGuid (Address: 0x18003ed68)
  • CoCreateInstance (Address: 0x18003ed58)
  • CoDisconnectContext (Address: 0x18003ed70)
  • CoImpersonateClient (Address: 0x18003ed48)
  • CoInitializeEx (Address: 0x18003ed18)
  • CoRegisterClassObject (Address: 0x18003ed28)
  • CoResumeClassObjects (Address: 0x18003ed30)
  • CoRevertToSelf (Address: 0x18003ed50)
  • CoRevokeClassObject (Address: 0x18003ed40)
  • CoSetProxyBlanket (Address: 0x18003ed78)
  • CoTaskMemAlloc (Address: 0x18003ed10)
  • CoTaskMemFree (Address: 0x18003ed60)
  • CoTaskMemRealloc (Address: 0x18003ed20)
  • CoUninitialize (Address: 0x18003ed38)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18003ed88)
  • IsDebuggerPresent (Address: 0x18003ed90)
  • OutputDebugStringW (Address: 0x18003ed98)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18003eda8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18003edb8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18003edd0)
  • RaiseException (Address: 0x18003edc8)
  • SetLastError (Address: 0x18003edd8)
  • SetUnhandledExceptionFilter (Address: 0x18003ede0)
  • UnhandledExceptionFilter (Address: 0x18003ede8)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x18003ee18)
  • CreateFileW (Address: 0x18003ee28)
  • DeleteFileW (Address: 0x18003ee20)
  • FindClose (Address: 0x18003ee08)
  • FindFirstFileW (Address: 0x18003ee00)
  • FindNextFileW (Address: 0x18003ee10)
  • GetFileAttributesW (Address: 0x18003edf8)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x18003ee38)
api-ms-win-core-file-l1-2-1.dll
  • GetCompressedFileSizeW (Address: 0x18003ee48)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x18003ee58)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18003ee68)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18003ee88)
  • HeapAlloc (Address: 0x18003ee78)
  • HeapFree (Address: 0x18003ee80)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18003eea0)
  • LocalFree (Address: 0x18003ee98)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18003eeb0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18003ef00)
  • FindResourceExW (Address: 0x18003ef10)
  • FreeLibrary (Address: 0x18003eef0)
  • GetModuleFileNameA (Address: 0x18003eef8)
  • GetModuleFileNameW (Address: 0x18003ef08)
  • GetModuleHandleExW (Address: 0x18003eec8)
  • GetModuleHandleW (Address: 0x18003eec0)
  • GetProcAddress (Address: 0x18003eed0)
  • LoadLibraryExW (Address: 0x18003eed8)
  • LoadResource (Address: 0x18003eee0)
  • LockResource (Address: 0x18003eee8)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x18003ef20)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18003ef38)
  • GetUserDefaultLocaleName (Address: 0x18003ef30)
api-ms-win-core-path-l1-1-0.dll
  • PathCchAppend (Address: 0x18003ef48)
  • PathCchCombine (Address: 0x18003ef58)
  • PathCchStripPrefix (Address: 0x18003ef50)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18003ef68)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x18003efb8)
  • CreateThread (Address: 0x18003efa0)
  • GetCurrentProcess (Address: 0x18003ef88)
  • GetCurrentProcessId (Address: 0x18003ef80)
  • GetCurrentThread (Address: 0x18003efc0)
  • GetCurrentThreadId (Address: 0x18003ef90)
  • GetExitCodeProcess (Address: 0x18003efb0)
  • GetExitCodeThread (Address: 0x18003efa8)
  • OpenThreadToken (Address: 0x18003efc8)
  • SetThreadPriority (Address: 0x18003ef98)
  • TerminateProcess (Address: 0x18003ef78)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x18003efe0)
  • IsProcessorFeaturePresent (Address: 0x18003efd8)
  • SetProcessMitigationPolicy (Address: 0x18003efe8)
api-ms-win-core-processthreads-l1-1-2.dll
  • SetThreadInformation (Address: 0x18003eff8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18003f008)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18003f058)
  • RegCreateKeyExW (Address: 0x18003f018)
  • RegDeleteTreeW (Address: 0x18003f030)
  • RegDeleteValueW (Address: 0x18003f040)
  • RegEnumValueW (Address: 0x18003f028)
  • RegGetValueW (Address: 0x18003f020)
  • RegOpenKeyExW (Address: 0x18003f050)
  • RegQueryValueExW (Address: 0x18003f048)
  • RegSetValueExW (Address: 0x18003f038)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x18003f068)
  • RegSetKeyValueW (Address: 0x18003f070)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x18003f088)
  • PathRemoveFileSpecW (Address: 0x18003f080)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • QISearch (Address: 0x18003f098)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x18003f0b0)
  • MultiByteToWideChar (Address: 0x18003f0a8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18003f0d8)
  • AcquireSRWLockShared (Address: 0x18003f0c0)
  • CreateEventW (Address: 0x18003f120)
  • CreateMutexExW (Address: 0x18003f148)
  • CreateMutexW (Address: 0x18003f160)
  • CreateSemaphoreExW (Address: 0x18003f138)
  • DeleteCriticalSection (Address: 0x18003f108)
  • EnterCriticalSection (Address: 0x18003f130)
  • InitializeCriticalSection (Address: 0x18003f158)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18003f118)
  • InitializeCriticalSectionEx (Address: 0x18003f128)
  • LeaveCriticalSection (Address: 0x18003f0e0)
  • OpenSemaphoreW (Address: 0x18003f140)
  • ReleaseMutex (Address: 0x18003f0e8)
  • ReleaseSemaphore (Address: 0x18003f100)
  • ReleaseSRWLockExclusive (Address: 0x18003f150)
  • ReleaseSRWLockShared (Address: 0x18003f0d0)
  • ResetEvent (Address: 0x18003f0f0)
  • SetEvent (Address: 0x18003f0f8)
  • WaitForSingleObject (Address: 0x18003f0c8)
  • WaitForSingleObjectEx (Address: 0x18003f110)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18003f178)
  • InitOnceComplete (Address: 0x18003f170)
  • Sleep (Address: 0x18003f180)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x18003f1a8)
  • GetSystemTime (Address: 0x18003f1a0)
  • GetSystemTimeAsFileTime (Address: 0x18003f198)
  • GetWindowsDirectoryW (Address: 0x18003f190)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x18003f1b8)
  • GetProductInfo (Address: 0x18003f1c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18003f1e0)
  • CreateThreadpoolTimer (Address: 0x18003f1d8)
  • SetThreadpoolTimer (Address: 0x18003f1e8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18003f1d0)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x18003f1f8)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x18003f208)
  • SystemTimeToFileTime (Address: 0x18003f210)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x18003f228)
  • GetFileVersionInfoSizeExW (Address: 0x18003f220)
  • VerQueryValueW (Address: 0x18003f230)
api-ms-win-core-version-l1-1-1.dll
  • GetFileVersionInfoSizeW (Address: 0x18003f240)
  • GetFileVersionInfoW (Address: 0x18003f248)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
  • WerRegisterFile (Address: 0x18003f258)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18003f310)
  • __CxxFrameHandler3 (Address: 0x18003f358)
  • __CxxFrameHandler4 (Address: 0x18003f3c0)
  • __std_terminate (Address: 0x18003f3b8)
  • _CxxThrowException (Address: 0x18003f350)
  • _o___std_exception_copy (Address: 0x18003f3b0)
  • _o___std_exception_destroy (Address: 0x18003f3a8)
  • _o___std_type_info_destroy_list (Address: 0x18003f3a0)
  • _o___stdio_common_vsnprintf_s (Address: 0x18003f398)
  • _o___stdio_common_vsprintf (Address: 0x18003f390)
  • _o___stdio_common_vsprintf_s (Address: 0x18003f388)
  • _o___stdio_common_vswprintf (Address: 0x18003f380)
  • _o___stdio_common_vswprintf_s (Address: 0x18003f378)
  • _o__beginthreadex (Address: 0x18003f348)
  • _o__callnewh (Address: 0x18003f340)
  • _o__cexit (Address: 0x18003f338)
  • _o__configure_narrow_argv (Address: 0x18003f330)
  • _o__crt_atexit (Address: 0x18003f328)
  • _o__errno (Address: 0x18003f320)
  • _o__execute_onexit_table (Address: 0x18003f318)
  • _o__initialize_narrow_environment (Address: 0x18003f268)
  • _o__initialize_onexit_table (Address: 0x18003f270)
  • _o__invalid_parameter_noinfo (Address: 0x18003f278)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18003f280)
  • _o__purecall (Address: 0x18003f288)
  • _o__register_onexit_function (Address: 0x18003f290)
  • _o__seh_filter_dll (Address: 0x18003f298)
  • _o__set_errno (Address: 0x18003f2a0)
  • _o__wcsicmp (Address: 0x18003f2a8)
  • _o__wcsnicmp (Address: 0x18003f2b0)
  • _o__wtol (Address: 0x18003f2c0)
  • _o_free (Address: 0x18003f2c8)
  • _o_malloc (Address: 0x18003f2d0)
  • _o_rand (Address: 0x18003f2d8)
  • _o_srand (Address: 0x18003f2e0)
  • _o_strncpy_s (Address: 0x18003f2e8)
  • _o_strtol (Address: 0x18003f2f0)
  • _o_terminate (Address: 0x18003f2f8)
  • _o_tolower (Address: 0x18003f300)
  • _o_wcstoul (Address: 0x18003f308)
  • memcmp (Address: 0x18003f3c8)
  • memcpy (Address: 0x18003f3d0)
  • memmove (Address: 0x18003f2b8)
  • strchr (Address: 0x18003f368)
  • strrchr (Address: 0x18003f360)
  • wcsstr (Address: 0x18003f370)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18003f3e8)
  • _initterm_e (Address: 0x18003f3e0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18003f3f8)
  • wcscmp (Address: 0x18003f400)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x18003f410)
  • GetTraceEnableLevel (Address: 0x18003f428)
  • GetTraceLoggerHandle (Address: 0x18003f420)
  • RegisterTraceGuidsW (Address: 0x18003f430)
  • UnregisterTraceGuids (Address: 0x18003f418)
api-ms-win-eventing-consumer-l1-1-0.dll
  • CloseTrace (Address: 0x18003f440)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x18003f460)
  • EnableTraceEx2 (Address: 0x18003f458)
  • StartTraceW (Address: 0x18003f450)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18003f490)
  • EventRegister (Address: 0x18003f478)
  • EventSetInformation (Address: 0x18003f470)
  • EventUnregister (Address: 0x18003f488)
  • EventWriteTransfer (Address: 0x18003f480)
api-ms-win-security-base-l1-1-0.dll
  • CheckTokenMembership (Address: 0x18003f4c0)
  • DuplicateTokenEx (Address: 0x18003f4b8)
  • GetSecurityDescriptorControl (Address: 0x18003f4e0)
  • GetSecurityDescriptorDacl (Address: 0x18003f4a8)
  • GetSecurityDescriptorSacl (Address: 0x18003f4a0)
  • GetTokenInformation (Address: 0x18003f4b0)
  • ImpersonateLoggedOnUser (Address: 0x18003f4d8)
  • ImpersonateSelf (Address: 0x18003f4c8)
  • RevertToSelf (Address: 0x18003f4d0)
api-ms-win-security-provider-l1-1-0.dll
  • SetSecurityInfo (Address: 0x18003f4f0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18003f508)
  • ConvertStringSidToSidW (Address: 0x18003f500)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x18003f520)
  • SetServiceStatus (Address: 0x18003f518)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x18003f538)
  • OpenSCManagerW (Address: 0x18003f540)
  • OpenServiceW (Address: 0x18003f530)
  • StartServiceW (Address: 0x18003f548)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfig2W (Address: 0x18003f560)
  • ChangeServiceConfigW (Address: 0x18003f558)
  • QueryServiceConfig2W (Address: 0x18003f568)
api-ms-win-service-winsvc-l1-1-0.dll
  • ControlService (Address: 0x18003f580)
  • QueryServiceStatus (Address: 0x18003f578)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x18003f598)
  • BCryptCreateHash (Address: 0x18003f5b8)
  • BCryptDestroyHash (Address: 0x18003f5b0)
  • BCryptFinishHash (Address: 0x18003f5c8)
  • BCryptGenRandom (Address: 0x18003f5a0)
  • BCryptGetProperty (Address: 0x18003f590)
  • BCryptHashData (Address: 0x18003f5c0)
  • BCryptOpenAlgorithmProvider (Address: 0x18003f5a8)
combase.dll
  • (Address: 0x18003f5f0)
  • (Address: 0x18003f5e8)
  • (Address: 0x18003f5e0)
  • (Address: 0x18003f5d8)
msvcp_win.dll
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x18003f600)
  • _Thrd_detach (Address: 0x18003f608)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18003f6b0)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x18003f678)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x18003f670)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x18003f618)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18003f610)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18003f6b8)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18003f628)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18003f630)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18003f658)
  • ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z (Address: 0x18003f688)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18003f650)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18003f690)
  • ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18003f638)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18003f6a0)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x18003f680)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x18003f660)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18003f620)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x18003f6e0)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x18003f698)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x18003f6c0)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x18003f6a8)
  • ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x18003f648)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x18003f668)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x18003f6c8)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x18003f640)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x18003f6d0)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x18003f6d8)
ntdll.dll
  • NtQuerySystemInformation (Address: 0x18003f708)
  • NtSetInformationThread (Address: 0x18003f710)
  • RtlCaptureContext (Address: 0x18003f700)
  • RtlConvertDeviceFamilyInfoToString (Address: 0x18003f6f8)
  • RtlGetPersistedStateLocation (Address: 0x18003f728)
  • RtlIsStateSeparationEnabled (Address: 0x18003f720)
  • RtlLookupFunctionEntry (Address: 0x18003f730)
  • RtlNtStatusToDosError (Address: 0x18003f718)
  • RtlVirtualUnwind (Address: 0x18003f6f0)
OLEAUT32.dll
  • DispGetIDsOfNames (Address: 0x18003ec58)
  • DispInvoke (Address: 0x18003ec60)
  • LoadRegTypeLib (Address: 0x18003ec68)
  • SafeArrayAccessData (Address: 0x18003ec78)
  • SafeArrayCreate (Address: 0x18003ec80)
  • SafeArrayGetDim (Address: 0x18003ec50)
  • SafeArrayUnaccessData (Address: 0x18003ec70)
  • SysAllocString (Address: 0x18003ec90)
  • SysFreeString (Address: 0x18003eca0)
  • SysStringLen (Address: 0x18003ec48)
  • VariantChangeTypeEx (Address: 0x18003ec40)
  • VariantClear (Address: 0x18003ec88)
  • VariantInit (Address: 0x18003ec98)
RPCRT4.dll
  • NdrClientCall3 (Address: 0x18003ecb0)
  • RpcBindingFree (Address: 0x18003ecc0)
  • RpcBindingFromStringBindingW (Address: 0x18003ecb8)
  • RpcBindingSetAuthInfoW (Address: 0x18003ecd0)
  • RpcStringBindingComposeW (Address: 0x18003ece0)
  • RpcStringFreeW (Address: 0x18003ecc8)
  • UuidCreate (Address: 0x18003ecd8)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x18003ecf0)