audiosrv.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x61950
SvchostPushServiceGlobals
#2 · 0x69100
No function matches your filter.
Imported DLLs & functions 355
AppContainerDeriveSidFromMoniker
0x180156b00
PackageFamilyNameFromFullName
0x180156b10
GetStagedPackageOrigin
0x180156b20
ApiSetQueryApiSetPresence
0x180156b30
DebugBreak
0x180156b40
IsDebuggerPresent
0x180156b48
OutputDebugStringW
0x180156b50
DelayLoadFailureHook
0x180156b60
ResolveDelayLoadedAPI
0x180156b70
GetLastError
0x180156b98
RaiseException
0x180156b90
SetLastError
0x180156b80
SetUnhandledExceptionFilter
0x180156b88
UnhandledExceptionFilter
0x180156ba0
GetFeatureEnabledState
0x180156bd0
RecordFeatureError
0x180156bb0
RecordFeatureUsage
0x180156bb8
SubscribeFeatureStateChangeNotification
0x180156bc0
UnsubscribeFeatureStateChangeNotification
0x180156bc8
GetFeatureVariant
0x180156be0
CompareFileTime
0x180156bf0
CreateFileW
0x180156bf8
FileTimeToLocalFileTime
0x180156c00
GetProcessHeap
0x180156c38
HeapAlloc
0x180156c40
HeapDestroy
0x180156c28
HeapFree
0x180156c50
HeapReAlloc
0x180156c48
HeapSize
0x180156c30
InitializeSListHead
0x180156c78
CreateIoCompletionPort
0x180156c98
GetQueuedCompletionStatus
0x180156c88
PostQueuedCompletionStatus
0x180156c90
GetSystemPowerStatus
0x180156cb0
RegisterWaitForSingleObject
0x180156ca8
DisableThreadLibraryCalls
0x180156d08
FindResourceExW
0x180156cd0
FreeLibrary
0x180156cc8
GetModuleFileNameA
0x180156d10
GetModuleFileNameW
0x180156d20
GetModuleHandleExW
0x180156cc0
GetModuleHandleW
0x180156d18
GetProcAddress
0x180156cd8
LoadLibraryExW
0x180156ce0
LoadResource
0x180156d00
LoadStringW
0x180156ce8
LockResource
0x180156cf0
SizeofResource
0x180156cf8
FormatMessageW
0x180156d30
CreateFileMappingW
0x180156d40
MapViewOfFile
0x180156d48
UnmapViewOfFile
0x180156d50
GetProcessWorkingSetSizeEx
0x180156d68
SetProcessWorkingSetSizeEx
0x180156d60
ExpandEnvironmentStringsW
0x180156d78
CreateProcessW
0x180156d98
CreateThread
0x180156dd8
GetCurrentProcess
0x180156da0
GetCurrentProcessId
0x180156dc0
GetCurrentThread
0x180156d88
GetCurrentThreadId
0x180156da8
GetExitCodeProcess
0x180156d90
GetProcessId
0x180156de8
GetProcessTimes
0x180156db8
OpenThreadToken
0x180156de0
ProcessIdToSessionId
0x180156db0
SetThreadPriority
0x180156dd0
TerminateProcess
0x180156dc8
GetProcessMitigationPolicy
0x180156df8
IsProcessorFeaturePresent
0x180156e08
OpenProcess
0x180156e00
QueryPerformanceCounter
0x180156e18
QueryPerformanceFrequency
0x180156e20
RegCloseKey
0x180156e70
RegCreateKeyExW
0x180156e60
RegDeleteValueW
0x180156e68
RegEnumKeyExW
0x180156e98
RegEnumValueW
0x180156e50
RegGetKeySecurity
0x180156e40
RegGetValueW
0x180156e90
RegNotifyChangeKeyValue
0x180156e58
RegOpenCurrentUser
0x180156e78
RegOpenKeyExW
0x180156e30
RegQueryInfoKeyW
0x180156e80
RegQueryValueExW
0x180156e48
RegSetKeySecurity
0x180156e38
RegSetValueExW
0x180156e88
CompareStringOrdinal
0x180156eb0
CompareStringW
0x180156eb8
MultiByteToWideChar
0x180156ea8
AcquireSRWLockExclusive
0x180156f18
AcquireSRWLockShared
0x180156f28
CreateEventExW
0x180156f40
CreateEventW
0x180156f90
CreateMutexExW
0x180156f50
CreateMutexW
0x180156f70
CreateSemaphoreExW
0x180156fa8
DeleteCriticalSection
0x180156ef0
EnterCriticalSection
0x180156ee8
InitializeCriticalSection
0x180156f08
InitializeCriticalSectionAndSpinCount
0x180156f30
InitializeCriticalSectionEx
0x180156ef8
InitializeSRWLock
0x180156f10
LeaveCriticalSection
0x180156ee0
OpenEventW
0x180156f00
OpenSemaphoreW
0x180156f58
ReleaseMutex
0x180156f80
ReleaseSemaphore
0x180156fa0
ReleaseSRWLockExclusive
0x180156f20
ReleaseSRWLockShared
0x180156f38
ResetEvent
0x180156f98
SetEvent
0x180156f48
TryEnterCriticalSection
0x180156f78
WaitForMultipleObjectsEx
0x180156f60
WaitForSingleObject
0x180156f88
WaitForSingleObjectEx
0x180156f68
InitOnceBeginInitialize
0x180156fc8
InitOnceComplete
0x180156fd0
InitOnceExecuteOnce
0x180156fc0
Sleep
0x180156fb8
WaitForMultipleObjects
0x180156fe0
GetSystemDirectoryW
0x180156ff0
GetSystemTimeAsFileTime
0x180156ff8
GetTickCount
0x180157008
GetTickCount64
0x180157000
GetSystemTimePreciseAsFileTime
0x180157018
CloseThreadpool
0x180157048
CloseThreadpoolCleanupGroup
0x180157040
CloseThreadpoolCleanupGroupMembers
0x1801570c8
CloseThreadpoolTimer
0x180157060
CloseThreadpoolWait
0x1801570a0
CloseThreadpoolWork
0x180157080
CreateThreadpool
0x180157028
CreateThreadpoolCleanupGroup
0x180157030
CreateThreadpoolTimer
0x180157088
CreateThreadpoolWait
0x180157058
CreateThreadpoolWork
0x180157078
IsThreadpoolTimerSet
0x180157090
SetEventWhenCallbackReturns
0x1801570a8
SetThreadpoolThreadMaximum
0x1801570c0
SetThreadpoolThreadMinimum
0x180157050
SetThreadpoolTimer
0x180157068
SetThreadpoolWait
0x180157038
SubmitThreadpoolWork
0x1801570b8
WaitForThreadpoolTimerCallbacks
0x180157098
WaitForThreadpoolWaitCallbacks
0x1801570b0
WaitForThreadpoolWorkCallbacks
0x180157070
CreateTimerQueueTimer
0x1801570e8
DeleteTimerQueueTimer
0x1801570d8
UnregisterWaitEx
0x1801570e0
FileTimeToSystemTime
0x180157100
SystemTimeToFileTime
0x1801570f8
RoGetActivationFactory
0x180157140
RoRegisterActivationFactories
0x180157138
RoRevokeActivationFactories
0x180157128
RoUninitialize
0x180157130
__C_specific_handler
0x1801572c0
__CxxFrameHandler3
0x180157238
__CxxFrameHandler4
0x1801572d0
__std_terminate
0x1801572c8
_CxxThrowException
0x1801572d8
_o___std_exception_copy
0x180157288
_o___std_exception_destroy
0x180157280
_o___std_type_info_destroy_list
0x180157278
_o___stdio_common_vsnprintf_s
0x180157270
_o___stdio_common_vsprintf
0x180157268
_o___stdio_common_vswprintf
0x180157260
_o___stdio_common_vswprintf_s
0x180157258
_o__aligned_free
0x180157250
_o__aligned_malloc
0x180157248
_o__cexit
0x180157240
_o__configure_narrow_argv
0x1801572a0
_o__crt_atexit
0x1801572f0
_o__errno
0x180157298
_o__execute_onexit_table
0x180157290
_o__initialize_narrow_environment
0x180157170
_o__initialize_onexit_table
0x180157178
_o__invalid_parameter_noinfo
0x180157180
_o__invalid_parameter_noinfo_noreturn
0x180157188
_o__purecall
0x180157190
_o__recalloc
0x180157198
_o__register_onexit_function
0x1801571a0
_o__resetstkoflw
0x1801571a8
_o__seh_filter_dll
0x1801571b0
_o__wcsicmp
0x1801571b8
_o__wcsnicmp
0x1801571c0
_o__wcsupr_s
0x1801572f8
_o__wtof
0x1801571c8
_o__wtoi
0x1801571d0
_o_calloc
0x1801571d8
_o_free
0x1801571e0
_o_log10
0x1801571e8
_o_malloc
0x1801571f0
_o_pow
0x1801571f8
_o_terminate
0x180157200
_o_toupper
0x180157208
_o_towlower
0x180157210
_o_wcscpy_s
0x180157218
_o_wcsncpy_s
0x180157220
_o_wcstoul
0x180157228
_o_wmemcpy_s
0x180157230
memcmp
0x1801572e0
memcpy
0x1801572e8
memmove
0x180157300
wcschr
0x1801572a8
wcsrchr
0x1801572b8
wcsstr
0x1801572b0
memset
0x180157330
wcscmp
0x180157328
wcscspn
0x180157340
wcsncmp
0x180157350
wcsnlen
0x180157348
wcsspn
0x180157338
TraceMessage
0x180157360
EventActivityIdControl
0x180157390
EventProviderEnabled
0x180157398
EventRegister
0x180157370
EventSetInformation
0x180157378
EventUnregister
0x180157380
EventWriteTransfer
0x180157388
SHCreateStreamOnFileW
0x1801573a8
SHTaskPoolGetUniqueContext
0x1801573c0
SHTaskPoolQueueTask
0x1801573b8
ActivatePolicyManager
0x1801568d0
HHOSTEDAPPMANAGERCONTEXTRundown
0x180156970
PbmAllowMediaPlaybackForApp
0x180156910
PbmCastingAppStateChanged
0x180156968
PbmGetSoundLevel
0x180156930
PbmIsPlaying
0x180156938
PbmLaunchBackgroundTask
0x180156998
PbmPlayToStreamStateChanged
0x180156960
PbmRegisterAppClosureNotification
0x180156950
PbmRegisterAppManagerNotification
0x180156940
PbmRegisterPlaybackManagerNotifications
0x180156918
PbmReportAppClosing
0x180156908
PbmReportAppInteractivityChange
0x180156900
PbmReportApplicationState
0x180156990
PbmReportHostedAppStateChange
0x180156980
PbmSetScreenReaderState
0x180156978
PbmSetSmtcSubscriptionState
0x180156928
PbmSwitchSoftNonInteractiveAppsToHardNonInteractive
0x180156988
PbmUnregisterAppClosureNotification
0x180156958
PbmUnregisterAppManagerNotification
0x180156948
PbmUnregisterPlaybackManagerNotifications
0x180156920
TS_AudioProtocolNotifyRundown
0x1801568f8
TS_RegisterAudioProtocolNotification
0x1801568e8
TS_SessionChanged
0x1801568d8
TS_SessionGetAudioProtocol
0x1801568e0
TS_UnregisterAudioProtocolNotification
0x1801568f0
MMDevAPI.DLL
11
0x1801569a8
0x1801569b0
0x1801569b8
0x1801569c0
0x1801569c8
0x1801569d0
0x1801569d8
0x1801569e0
0x1801569e8
0x1801569f0
0x1801569f8
_Mtx_destroy_in_situ
0x180157420
_Mtx_init_in_situ
0x180157418
_Mtx_lock
0x180157400
_Mtx_unlock
0x180157410
?_Throw_C_error@std@@YAXH@Z
0x180157408
?_Xbad_function_call@std@@YAXXZ
0x180157430
?_Xlength_error@std@@YAXPEBD@Z
0x180157428
ntdll.dll
42
EtwEventActivityIdControl
0x180157458
EtwEventRegister
0x180157480
EtwEventSetInformation
0x180157488
EtwEventUnregister
0x1801574a8
EtwEventWriteTransfer
0x180157490
EtwGetTraceEnableFlags
0x180157538
EtwGetTraceEnableLevel
0x180157528
EtwGetTraceLoggerHandle
0x180157530
EtwLogTraceEvent
0x180157508
EtwRegisterTraceGuidsW
0x180157520
EtwTraceMessage
0x180157478
EtwUnregisterTraceGuids
0x180157540
NtCreateWnfStateName
0x180157450
NtDeleteWnfStateName
0x180157460
NtQueryInformationProcess
0x180157580
NtQueryWnfStateData
0x180157498
RtlAcquireResourceExclusive
0x1801574c8
RtlAcquireResourceShared
0x180157500
RtlAllocateMemoryBlockLookaside
0x180157578
RtlCaptureContext
0x1801574f0
RtlCreateMemoryBlockLookaside
0x1801574e8
RtlDeleteResource
0x1801574a0
RtlDestroyMemoryBlockLookaside
0x1801574d8
RtlDllShutdownInProgress
0x180157548
RtlExtendMemoryBlockLookaside
0x1801574e0
RtlFreeMemoryBlockLookaside
0x1801574c0
RtlFreeSid
0x180157470
RtlGetActiveConsoleId
0x1801574b8
RtlGetCurrentServiceSessionId
0x1801574b0
RtlGetDeviceFamilyInfoEnum
0x180157468
RtlGetPersistedStateLocation
0x180157440
RtlInitializeResource
0x180157510
RtlLookupFunctionEntry
0x1801574f8
RtlNtStatusToDosError
0x180157448
RtlPublishWnfStateData
0x180157588
RtlQueryWnfStateData
0x180157550
RtlReleaseResource
0x1801574d0
RtlReportException
0x180157570
RtlSubscribeWnfStateChangeNotification
0x180157558
RtlUnsubscribeWnfNotificationWaitForCompletion
0x180157560
RtlVirtualUnwind
0x180157568
ShipAssert
0x180157518
RPCRT4.dll
21
I_RpcBindingInqLocalClientPID
0x180156a18
I_RpcBindingInqTransportType
0x180156a58
I_RpcExceptionFilter
0x180156a30
NdrClientCall3
0x180156a70
NdrServerCall2
0x180156a48
NdrServerCallAll
0x180156a50
RpcBindingFree
0x180156a10
RpcBindingFromStringBindingW
0x180156a40
RpcBindingToStringBindingW
0x180156a80
RpcBindingVectorFree
0x180156a98
RpcImpersonateClient
0x180156a08
RpcRevertToSelf
0x180156a20
RpcServerInqBindings
0x180156a60
RpcServerRegisterIf3
0x180156a78
RpcServerUnregisterIfEx
0x180156a68
RpcServerUseProtseqEpW
0x180156a90
RpcStringBindingComposeW
0x180156a38
RpcStringBindingParseW
0x180156aa0
RpcStringFreeW
0x180156aa8
UuidCreate
0x180156a88
UuidEqual
0x180156a28
Pdcv2ActivationClientActivate
0x180156ab8
Pdcv2ActivationClientDeactivate
0x180156ac0
Pdcv2ActivationClientRegister
0x180156ad0
Pdcv2ActivationClientRenewActivation
0x180156ad8
Pdcv2ActivationClientSetBrokeredProcessId
0x180156ae0
Pdcv2ActivationClientUnregister
0x180156ac8
CreateXmlReader
0x180156af0
No function matches your filter.