audiosrv.dll
Description: Windows Audio Service
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 64-bit
Operating System: Windows NT
SHA256: 165b5a5ab9c9e872566a4dec1268702c
File Size: 1.8 MB
Uploaded At: Dec. 1, 2025, 7:23 a.m.
Views: 7
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x61950)
- SvchostPushServiceGlobals (Ordinal: 2, Address: 0x69100)
Imported DLLs & Functions
api-ms-win-appmodel-identity-l1-2-0.dll
- AppContainerDeriveSidFromMoniker (Address: 0x180156b00)
api-ms-win-appmodel-runtime-l1-1-0.dll
- PackageFamilyNameFromFullName (Address: 0x180156b10)
api-ms-win-appmodel-runtime-l1-1-1.dll
- GetStagedPackageOrigin (Address: 0x180156b20)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180156b30)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180156b40)
- IsDebuggerPresent (Address: 0x180156b48)
- OutputDebugStringW (Address: 0x180156b50)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180156b60)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180156b70)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180156b98)
- RaiseException (Address: 0x180156b90)
- SetLastError (Address: 0x180156b80)
- SetUnhandledExceptionFilter (Address: 0x180156b88)
- UnhandledExceptionFilter (Address: 0x180156ba0)
api-ms-win-core-featurestaging-l1-1-0.dll
- GetFeatureEnabledState (Address: 0x180156bd0)
- RecordFeatureError (Address: 0x180156bb0)
- RecordFeatureUsage (Address: 0x180156bb8)
- SubscribeFeatureStateChangeNotification (Address: 0x180156bc0)
- UnsubscribeFeatureStateChangeNotification (Address: 0x180156bc8)
api-ms-win-core-featurestaging-l1-1-1.dll
- GetFeatureVariant (Address: 0x180156be0)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x180156bf0)
- CreateFileW (Address: 0x180156bf8)
- FileTimeToLocalFileTime (Address: 0x180156c00)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180156c18)
- DuplicateHandle (Address: 0x180156c10)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180156c38)
- HeapAlloc (Address: 0x180156c40)
- HeapDestroy (Address: 0x180156c28)
- HeapFree (Address: 0x180156c50)
- HeapReAlloc (Address: 0x180156c48)
- HeapSize (Address: 0x180156c30)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180156c60)
- LocalFree (Address: 0x180156c68)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180156c78)
api-ms-win-core-io-l1-1-0.dll
- CreateIoCompletionPort (Address: 0x180156c98)
- GetQueuedCompletionStatus (Address: 0x180156c88)
- PostQueuedCompletionStatus (Address: 0x180156c90)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- GetSystemPowerStatus (Address: 0x180156cb0)
- RegisterWaitForSingleObject (Address: 0x180156ca8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180156d08)
- FindResourceExW (Address: 0x180156cd0)
- FreeLibrary (Address: 0x180156cc8)
- GetModuleFileNameA (Address: 0x180156d10)
- GetModuleFileNameW (Address: 0x180156d20)
- GetModuleHandleExW (Address: 0x180156cc0)
- GetModuleHandleW (Address: 0x180156d18)
- GetProcAddress (Address: 0x180156cd8)
- LoadLibraryExW (Address: 0x180156ce0)
- LoadResource (Address: 0x180156d00)
- LoadStringW (Address: 0x180156ce8)
- LockResource (Address: 0x180156cf0)
- SizeofResource (Address: 0x180156cf8)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180156d30)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x180156d40)
- MapViewOfFile (Address: 0x180156d48)
- UnmapViewOfFile (Address: 0x180156d50)
api-ms-win-core-memory-l1-1-1.dll
- GetProcessWorkingSetSizeEx (Address: 0x180156d68)
- SetProcessWorkingSetSizeEx (Address: 0x180156d60)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x180156d78)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x180156d98)
- CreateThread (Address: 0x180156dd8)
- GetCurrentProcess (Address: 0x180156da0)
- GetCurrentProcessId (Address: 0x180156dc0)
- GetCurrentThread (Address: 0x180156d88)
- GetCurrentThreadId (Address: 0x180156da8)
- GetExitCodeProcess (Address: 0x180156d90)
- GetProcessId (Address: 0x180156de8)
- GetProcessTimes (Address: 0x180156db8)
- OpenThreadToken (Address: 0x180156de0)
- ProcessIdToSessionId (Address: 0x180156db0)
- SetThreadPriority (Address: 0x180156dd0)
- TerminateProcess (Address: 0x180156dc8)
api-ms-win-core-processthreads-l1-1-1.dll
- GetProcessMitigationPolicy (Address: 0x180156df8)
- IsProcessorFeaturePresent (Address: 0x180156e08)
- OpenProcess (Address: 0x180156e00)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180156e18)
- QueryPerformanceFrequency (Address: 0x180156e20)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180156e70)
- RegCreateKeyExW (Address: 0x180156e60)
- RegDeleteValueW (Address: 0x180156e68)
- RegEnumKeyExW (Address: 0x180156e98)
- RegEnumValueW (Address: 0x180156e50)
- RegGetKeySecurity (Address: 0x180156e40)
- RegGetValueW (Address: 0x180156e90)
- RegNotifyChangeKeyValue (Address: 0x180156e58)
- RegOpenCurrentUser (Address: 0x180156e78)
- RegOpenKeyExW (Address: 0x180156e30)
- RegQueryInfoKeyW (Address: 0x180156e80)
- RegQueryValueExW (Address: 0x180156e48)
- RegSetKeySecurity (Address: 0x180156e38)
- RegSetValueExW (Address: 0x180156e88)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180156eb0)
- CompareStringW (Address: 0x180156eb8)
- MultiByteToWideChar (Address: 0x180156ea8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x180156ed0)
- lstrcmpW (Address: 0x180156ec8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180156f18)
- AcquireSRWLockShared (Address: 0x180156f28)
- CreateEventExW (Address: 0x180156f40)
- CreateEventW (Address: 0x180156f90)
- CreateMutexExW (Address: 0x180156f50)
- CreateMutexW (Address: 0x180156f70)
- CreateSemaphoreExW (Address: 0x180156fa8)
- DeleteCriticalSection (Address: 0x180156ef0)
- EnterCriticalSection (Address: 0x180156ee8)
- InitializeCriticalSection (Address: 0x180156f08)
- InitializeCriticalSectionAndSpinCount (Address: 0x180156f30)
- InitializeCriticalSectionEx (Address: 0x180156ef8)
- InitializeSRWLock (Address: 0x180156f10)
- LeaveCriticalSection (Address: 0x180156ee0)
- OpenEventW (Address: 0x180156f00)
- OpenSemaphoreW (Address: 0x180156f58)
- ReleaseMutex (Address: 0x180156f80)
- ReleaseSemaphore (Address: 0x180156fa0)
- ReleaseSRWLockExclusive (Address: 0x180156f20)
- ReleaseSRWLockShared (Address: 0x180156f38)
- ResetEvent (Address: 0x180156f98)
- SetEvent (Address: 0x180156f48)
- TryEnterCriticalSection (Address: 0x180156f78)
- WaitForMultipleObjectsEx (Address: 0x180156f60)
- WaitForSingleObject (Address: 0x180156f88)
- WaitForSingleObjectEx (Address: 0x180156f68)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180156fc8)
- InitOnceComplete (Address: 0x180156fd0)
- InitOnceExecuteOnce (Address: 0x180156fc0)
- Sleep (Address: 0x180156fb8)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x180156fe0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180156ff0)
- GetSystemTimeAsFileTime (Address: 0x180156ff8)
- GetTickCount (Address: 0x180157008)
- GetTickCount64 (Address: 0x180157000)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetSystemTimePreciseAsFileTime (Address: 0x180157018)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpool (Address: 0x180157048)
- CloseThreadpoolCleanupGroup (Address: 0x180157040)
- CloseThreadpoolCleanupGroupMembers (Address: 0x1801570c8)
- CloseThreadpoolTimer (Address: 0x180157060)
- CloseThreadpoolWait (Address: 0x1801570a0)
- CloseThreadpoolWork (Address: 0x180157080)
- CreateThreadpool (Address: 0x180157028)
- CreateThreadpoolCleanupGroup (Address: 0x180157030)
- CreateThreadpoolTimer (Address: 0x180157088)
- CreateThreadpoolWait (Address: 0x180157058)
- CreateThreadpoolWork (Address: 0x180157078)
- IsThreadpoolTimerSet (Address: 0x180157090)
- SetEventWhenCallbackReturns (Address: 0x1801570a8)
- SetThreadpoolThreadMaximum (Address: 0x1801570c0)
- SetThreadpoolThreadMinimum (Address: 0x180157050)
- SetThreadpoolTimer (Address: 0x180157068)
- SetThreadpoolWait (Address: 0x180157038)
- SubmitThreadpoolWork (Address: 0x1801570b8)
- WaitForThreadpoolTimerCallbacks (Address: 0x180157098)
- WaitForThreadpoolWaitCallbacks (Address: 0x1801570b0)
- WaitForThreadpoolWorkCallbacks (Address: 0x180157070)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x1801570e8)
- DeleteTimerQueueTimer (Address: 0x1801570d8)
- UnregisterWaitEx (Address: 0x1801570e0)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x180157100)
- SystemTimeToFileTime (Address: 0x1801570f8)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x180157110)
- EncodePointer (Address: 0x180157118)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x180157140)
- RoRegisterActivationFactories (Address: 0x180157138)
- RoRevokeActivationFactories (Address: 0x180157128)
- RoUninitialize (Address: 0x180157130)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x180157160)
- floorf (Address: 0x180157150)
- sinf (Address: 0x180157158)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1801572c0)
- __CxxFrameHandler3 (Address: 0x180157238)
- __CxxFrameHandler4 (Address: 0x1801572d0)
- __std_terminate (Address: 0x1801572c8)
- _CxxThrowException (Address: 0x1801572d8)
- _o___std_exception_copy (Address: 0x180157288)
- _o___std_exception_destroy (Address: 0x180157280)
- _o___std_type_info_destroy_list (Address: 0x180157278)
- _o___stdio_common_vsnprintf_s (Address: 0x180157270)
- _o___stdio_common_vsprintf (Address: 0x180157268)
- _o___stdio_common_vswprintf (Address: 0x180157260)
- _o___stdio_common_vswprintf_s (Address: 0x180157258)
- _o__aligned_free (Address: 0x180157250)
- _o__aligned_malloc (Address: 0x180157248)
- _o__cexit (Address: 0x180157240)
- _o__configure_narrow_argv (Address: 0x1801572a0)
- _o__crt_atexit (Address: 0x1801572f0)
- _o__errno (Address: 0x180157298)
- _o__execute_onexit_table (Address: 0x180157290)
- _o__initialize_narrow_environment (Address: 0x180157170)
- _o__initialize_onexit_table (Address: 0x180157178)
- _o__invalid_parameter_noinfo (Address: 0x180157180)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x180157188)
- _o__purecall (Address: 0x180157190)
- _o__recalloc (Address: 0x180157198)
- _o__register_onexit_function (Address: 0x1801571a0)
- _o__resetstkoflw (Address: 0x1801571a8)
- _o__seh_filter_dll (Address: 0x1801571b0)
- _o__wcsicmp (Address: 0x1801571b8)
- _o__wcsnicmp (Address: 0x1801571c0)
- _o__wcsupr_s (Address: 0x1801572f8)
- _o__wtof (Address: 0x1801571c8)
- _o__wtoi (Address: 0x1801571d0)
- _o_calloc (Address: 0x1801571d8)
- _o_free (Address: 0x1801571e0)
- _o_log10 (Address: 0x1801571e8)
- _o_malloc (Address: 0x1801571f0)
- _o_pow (Address: 0x1801571f8)
- _o_terminate (Address: 0x180157200)
- _o_toupper (Address: 0x180157208)
- _o_towlower (Address: 0x180157210)
- _o_wcscpy_s (Address: 0x180157218)
- _o_wcsncpy_s (Address: 0x180157220)
- _o_wcstoul (Address: 0x180157228)
- _o_wmemcpy_s (Address: 0x180157230)
- memcmp (Address: 0x1801572e0)
- memcpy (Address: 0x1801572e8)
- memmove (Address: 0x180157300)
- wcschr (Address: 0x1801572a8)
- wcsrchr (Address: 0x1801572b8)
- wcsstr (Address: 0x1801572b0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180157318)
- _initterm_e (Address: 0x180157310)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180157330)
- wcscmp (Address: 0x180157328)
- wcscspn (Address: 0x180157340)
- wcsncmp (Address: 0x180157350)
- wcsnlen (Address: 0x180157348)
- wcsspn (Address: 0x180157338)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x180157360)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180157390)
- EventProviderEnabled (Address: 0x180157398)
- EventRegister (Address: 0x180157370)
- EventSetInformation (Address: 0x180157378)
- EventUnregister (Address: 0x180157380)
- EventWriteTransfer (Address: 0x180157388)
api-ms-win-shcore-stream-l1-1-0.dll
- SHCreateStreamOnFileW (Address: 0x1801573a8)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolGetUniqueContext (Address: 0x1801573c0)
- SHTaskPoolQueueTask (Address: 0x1801573b8)
AUDIOSRVPOLICYMANAGER.dll
- ActivatePolicyManager (Address: 0x1801568d0)
- HHOSTEDAPPMANAGERCONTEXTRundown (Address: 0x180156970)
- PbmAllowMediaPlaybackForApp (Address: 0x180156910)
- PbmCastingAppStateChanged (Address: 0x180156968)
- PbmGetSoundLevel (Address: 0x180156930)
- PbmIsPlaying (Address: 0x180156938)
- PbmLaunchBackgroundTask (Address: 0x180156998)
- PbmPlayToStreamStateChanged (Address: 0x180156960)
- PbmRegisterAppClosureNotification (Address: 0x180156950)
- PbmRegisterAppManagerNotification (Address: 0x180156940)
- PbmRegisterPlaybackManagerNotifications (Address: 0x180156918)
- PbmReportAppClosing (Address: 0x180156908)
- PbmReportAppInteractivityChange (Address: 0x180156900)
- PbmReportApplicationState (Address: 0x180156990)
- PbmReportHostedAppStateChange (Address: 0x180156980)
- PbmSetScreenReaderState (Address: 0x180156978)
- PbmSetSmtcSubscriptionState (Address: 0x180156928)
- PbmSwitchSoftNonInteractiveAppsToHardNonInteractive (Address: 0x180156988)
- PbmUnregisterAppClosureNotification (Address: 0x180156958)
- PbmUnregisterAppManagerNotification (Address: 0x180156948)
- PbmUnregisterPlaybackManagerNotifications (Address: 0x180156920)
- TS_AudioProtocolNotifyRundown (Address: 0x1801568f8)
- TS_RegisterAudioProtocolNotification (Address: 0x1801568e8)
- TS_SessionChanged (Address: 0x1801568d8)
- TS_SessionGetAudioProtocol (Address: 0x1801568e0)
- TS_UnregisterAudioProtocolNotification (Address: 0x1801568f0)
combase.dll
- (Address: 0x1801573d0)
- (Address: 0x1801573d8)
- (Address: 0x1801573e0)
- (Address: 0x1801573e8)
- (Address: 0x1801573f0)
MMDevAPI.DLL
- (Address: 0x1801569a8)
- (Address: 0x1801569b0)
- (Address: 0x1801569b8)
- (Address: 0x1801569c0)
- (Address: 0x1801569c8)
- (Address: 0x1801569d0)
- (Address: 0x1801569d8)
- (Address: 0x1801569e0)
- (Address: 0x1801569e8)
- (Address: 0x1801569f0)
- (Address: 0x1801569f8)
msvcp_win.dll
- _Mtx_destroy_in_situ (Address: 0x180157420)
- _Mtx_init_in_situ (Address: 0x180157418)
- _Mtx_lock (Address: 0x180157400)
- _Mtx_unlock (Address: 0x180157410)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x180157408)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x180157430)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180157428)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x180157458)
- EtwEventRegister (Address: 0x180157480)
- EtwEventSetInformation (Address: 0x180157488)
- EtwEventUnregister (Address: 0x1801574a8)
- EtwEventWriteTransfer (Address: 0x180157490)
- EtwGetTraceEnableFlags (Address: 0x180157538)
- EtwGetTraceEnableLevel (Address: 0x180157528)
- EtwGetTraceLoggerHandle (Address: 0x180157530)
- EtwLogTraceEvent (Address: 0x180157508)
- EtwRegisterTraceGuidsW (Address: 0x180157520)
- EtwTraceMessage (Address: 0x180157478)
- EtwUnregisterTraceGuids (Address: 0x180157540)
- NtCreateWnfStateName (Address: 0x180157450)
- NtDeleteWnfStateName (Address: 0x180157460)
- NtQueryInformationProcess (Address: 0x180157580)
- NtQueryWnfStateData (Address: 0x180157498)
- RtlAcquireResourceExclusive (Address: 0x1801574c8)
- RtlAcquireResourceShared (Address: 0x180157500)
- RtlAllocateMemoryBlockLookaside (Address: 0x180157578)
- RtlCaptureContext (Address: 0x1801574f0)
- RtlCreateMemoryBlockLookaside (Address: 0x1801574e8)
- RtlDeleteResource (Address: 0x1801574a0)
- RtlDestroyMemoryBlockLookaside (Address: 0x1801574d8)
- RtlDllShutdownInProgress (Address: 0x180157548)
- RtlExtendMemoryBlockLookaside (Address: 0x1801574e0)
- RtlFreeMemoryBlockLookaside (Address: 0x1801574c0)
- RtlFreeSid (Address: 0x180157470)
- RtlGetActiveConsoleId (Address: 0x1801574b8)
- RtlGetCurrentServiceSessionId (Address: 0x1801574b0)
- RtlGetDeviceFamilyInfoEnum (Address: 0x180157468)
- RtlGetPersistedStateLocation (Address: 0x180157440)
- RtlInitializeResource (Address: 0x180157510)
- RtlLookupFunctionEntry (Address: 0x1801574f8)
- RtlNtStatusToDosError (Address: 0x180157448)
- RtlPublishWnfStateData (Address: 0x180157588)
- RtlQueryWnfStateData (Address: 0x180157550)
- RtlReleaseResource (Address: 0x1801574d0)
- RtlReportException (Address: 0x180157570)
- RtlSubscribeWnfStateChangeNotification (Address: 0x180157558)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180157560)
- RtlVirtualUnwind (Address: 0x180157568)
- ShipAssert (Address: 0x180157518)
RPCRT4.dll
- I_RpcBindingInqLocalClientPID (Address: 0x180156a18)
- I_RpcBindingInqTransportType (Address: 0x180156a58)
- I_RpcExceptionFilter (Address: 0x180156a30)
- NdrClientCall3 (Address: 0x180156a70)
- NdrServerCall2 (Address: 0x180156a48)
- NdrServerCallAll (Address: 0x180156a50)
- RpcBindingFree (Address: 0x180156a10)
- RpcBindingFromStringBindingW (Address: 0x180156a40)
- RpcBindingToStringBindingW (Address: 0x180156a80)
- RpcBindingVectorFree (Address: 0x180156a98)
- RpcImpersonateClient (Address: 0x180156a08)
- RpcRevertToSelf (Address: 0x180156a20)
- RpcServerInqBindings (Address: 0x180156a60)
- RpcServerRegisterIf3 (Address: 0x180156a78)
- RpcServerUnregisterIfEx (Address: 0x180156a68)
- RpcServerUseProtseqEpW (Address: 0x180156a90)
- RpcStringBindingComposeW (Address: 0x180156a38)
- RpcStringBindingParseW (Address: 0x180156aa0)
- RpcStringFreeW (Address: 0x180156aa8)
- UuidCreate (Address: 0x180156a88)
- UuidEqual (Address: 0x180156a28)
UMPDC.dll
- Pdcv2ActivationClientActivate (Address: 0x180156ab8)
- Pdcv2ActivationClientDeactivate (Address: 0x180156ac0)
- Pdcv2ActivationClientRegister (Address: 0x180156ad0)
- Pdcv2ActivationClientRenewActivation (Address: 0x180156ad8)
- Pdcv2ActivationClientSetBrokeredProcessId (Address: 0x180156ae0)
- Pdcv2ActivationClientUnregister (Address: 0x180156ac8)
XmlLite.dll
- CreateXmlReader (Address: 0x180156af0)