UserDataService.dll

v10.0.19041.4355 64-bit Windows NT Analyzed
Description
The endpoint for 3rd party APIs to read/write user data
Authors
© Microsoft Corporation. All rights reserved.
File size
1.5 MB
Uploaded
2025-12-01 07:41
Views
72
SHA-256
b06826a7f894aba987a422315a462c8d

Exported functions 5

CleanupUDSGlobals #1 · 0x5b690
CreateInprocConnectionHandle #2 · 0x5c330
ServiceMain #3 · 0x5c590
SvchostPushServiceGlobals #4 · 0x5c5a0
TeardownInprocConnectionHandle #5 · 0x5c5b0

Imported DLLs & functions 319

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x18013ea60
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18013ea80
IsDebuggerPresent 0x18013ea78
OutputDebugStringW 0x18013ea70
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18013ea90
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18013eaa0
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18013eab0
RaiseException 0x18013eac8
SetLastError 0x18013ead0
SetUnhandledExceptionFilter 0x18013eab8
UnhandledExceptionFilter 0x18013eac0
api-ms-win-core-file-l1-1-0.dll 15
CompareFileTime 0x18013eb38
CreateFileW 0x18013eb48
DeleteFileW 0x18013eb30
FindClose 0x18013eb20
FindCloseChangeNotification 0x18013eaf8
FindFirstChangeNotificationW 0x18013eae0
FindFirstFileW 0x18013eb08
FindNextChangeNotification 0x18013eae8
FindNextFileW 0x18013eb40
GetFileAttributesExW 0x18013eaf0
GetFileAttributesW 0x18013eb28
GetFullPathNameW 0x18013eb18
LocalFileTimeToFileTime 0x18013eb00
RemoveDirectoryW 0x18013eb50
WriteFile 0x18013eb10
api-ms-win-core-file-l2-1-0.dll 2
GetFileInformationByHandleEx 0x18013eb68
MoveFileExW 0x18013eb60
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x18013eb78
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x18013eb88
DuplicateHandle 0x18013eb90
api-ms-win-core-heap-l1-1-0.dll 9
GetProcessHeap 0x18013ebd0
HeapAlloc 0x18013eba8
HeapCompact 0x18013ebb0
HeapCreate 0x18013ebc8
HeapDestroy 0x18013ebe0
HeapFree 0x18013eba0
HeapReAlloc 0x18013ebb8
HeapSize 0x18013ebc0
HeapValidate 0x18013ebd8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18013ebf0
LocalFree 0x18013ebf8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
GetSystemPowerStatus 0x18013ec08
RegisterWaitForSingleObject 0x18013ec10
api-ms-win-core-libraryloader-l1-2-0.dll 9
DisableThreadLibraryCalls 0x18013ec38
FreeLibrary 0x18013ec50
FreeLibraryAndExitThread 0x18013ec60
GetModuleFileNameA 0x18013ec28
GetModuleHandleExW 0x18013ec40
GetModuleHandleW 0x18013ec58
GetProcAddress 0x18013ec20
LoadLibraryExW 0x18013ec48
LoadStringW 0x18013ec30
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x18013ec70
api-ms-win-core-localization-l1-2-0.dll 2
FormatMessageW 0x18013ec88
GetUserDefaultLangID 0x18013ec80
api-ms-win-core-path-l1-1-0.dll 1
PathAllocCombine 0x18013ec98
api-ms-win-core-processthreads-l1-1-0.dll 9
CreateThread 0x18013ecb8
GetCurrentProcess 0x18013ecb0
GetCurrentProcessId 0x18013ecc0
GetCurrentThread 0x18013ecd0
GetCurrentThreadId 0x18013ecc8
OpenProcessToken 0x18013ecd8
OpenThreadToken 0x18013eca8
SetThreadToken 0x18013ece8
TerminateProcess 0x18013ece0
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18013ecf8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18013ed08
api-ms-win-core-psapi-l1-1-0.dll 1
QueryFullProcessImageNameW 0x18013ed18
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x18013ed58
RegCreateKeyExW 0x18013ed38
RegDeleteValueW 0x18013ed40
RegGetValueW 0x18013ed28
RegNotifyChangeKeyValue 0x18013ed60
RegOpenKeyExW 0x18013ed30
RegQueryValueExW 0x18013ed50
RegSetValueExW 0x18013ed48
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 2
PathFileExistsW 0x18013ed78
PathFindExtensionW 0x18013ed70
api-ms-win-core-string-l1-1-0.dll 2
CompareStringW 0x18013ed90
WideCharToMultiByte 0x18013ed88
api-ms-win-core-string-l2-1-0.dll 1
CharLowerBuffW 0x18013eda0
api-ms-win-core-string-l2-1-1.dll 1
SHLoadIndirectString 0x18013edb0
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x18013edc0
lstrcmpW 0x18013edc8
api-ms-win-core-synch-l1-1-0.dll 22
AcquireSRWLockExclusive 0x18013ee70
AcquireSRWLockShared 0x18013ee80
CreateEventExW 0x18013ee00
CreateEventW 0x18013ede0
CreateMutexExW 0x18013ee60
CreateSemaphoreExW 0x18013ee68
DeleteCriticalSection 0x18013ee30
EnterCriticalSection 0x18013ee58
InitializeCriticalSection 0x18013ee28
InitializeCriticalSectionEx 0x18013ee20
InitializeSRWLock 0x18013edd8
LeaveCriticalSection 0x18013ee38
OpenSemaphoreW 0x18013ee08
ReleaseMutex 0x18013edf8
ReleaseSemaphore 0x18013ee50
ReleaseSRWLockExclusive 0x18013ee78
ReleaseSRWLockShared 0x18013ede8
ResetEvent 0x18013ee10
SetEvent 0x18013ee40
TryAcquireSRWLockShared 0x18013edf0
WaitForSingleObject 0x18013ee18
WaitForSingleObjectEx 0x18013ee48
api-ms-win-core-synch-l1-2-0.dll 4
InitOnceBeginInitialize 0x18013eea0
InitOnceComplete 0x18013ee90
InitOnceExecuteOnce 0x18013eea8
Sleep 0x18013ee98
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetLocalTime 0x18013eeb8
GetSystemTime 0x18013eec8
GetSystemTimeAsFileTime 0x18013eed0
GetTickCount 0x18013eec0
GetTickCount64 0x18013eed8
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemTimePreciseAsFileTime 0x18013eee8
api-ms-win-core-threadpool-l1-2-0.dll 20
CloseThreadpool 0x18013ef00
CloseThreadpoolCleanupGroup 0x18013ef18
CloseThreadpoolCleanupGroupMembers 0x18013ef20
CloseThreadpoolTimer 0x18013ef80
CloseThreadpoolWait 0x18013ef50
CloseThreadpoolWork 0x18013ef78
CreateThreadpool 0x18013ef58
CreateThreadpoolCleanupGroup 0x18013ef08
CreateThreadpoolTimer 0x18013ef10
CreateThreadpoolWait 0x18013ef48
CreateThreadpoolWork 0x18013ef60
FreeLibraryWhenCallbackReturns 0x18013ef68
IsThreadpoolTimerSet 0x18013ef30
SetThreadpoolThreadMaximum 0x18013ef28
SetThreadpoolTimer 0x18013ef88
SetThreadpoolWait 0x18013ef40
SubmitThreadpoolWork 0x18013ef70
WaitForThreadpoolTimerCallbacks 0x18013ef90
WaitForThreadpoolWaitCallbacks 0x18013ef38
WaitForThreadpoolWorkCallbacks 0x18013eef8
api-ms-win-core-threadpool-legacy-l1-1-0.dll 1
UnregisterWaitEx 0x18013efa0
api-ms-win-core-timezone-l1-1-0.dll 3
FileTimeToSystemTime 0x18013efb0
GetTimeZoneInformation 0x18013efc0
SystemTimeToFileTime 0x18013efb8
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x18013eff0
EventRegister 0x18013efe8
EventSetInformation 0x18013efd8
EventUnregister 0x18013efd0
EventWriteTransfer 0x18013efe0
api-ms-win-shell-shdirectory-l1-1-0.dll 1
0x18013f000
ESENT.dll 39
JetAddColumnA 0x18013e6b8
JetAttachDatabaseW 0x18013e7c8
JetBeginSessionA 0x18013e728
JetBeginTransaction2 0x18013e790
JetCloseDatabase 0x18013e6f8
JetCloseTable 0x18013e748
JetCommitTransaction 0x18013e6c0
JetCommitTransaction2 0x18013e788
JetCreateDatabaseW 0x18013e708
JetCreateIndex2A 0x18013e738
JetCreateInstanceW 0x18013e750
JetCreateTableColumnIndexA 0x18013e740
JetDelete 0x18013e700
JetDeleteIndexA 0x18013e6e0
JetEndSession 0x18013e720
JetEnumerateColumns 0x18013e6b0
JetGetErrorInfoW 0x18013e710
JetGetSecondaryIndexBookmark 0x18013e6a8
JetGetTableColumnInfoA 0x18013e6e8
JetGetTableIndexInfoA 0x18013e730
JetGotoSecondaryIndexBookmark 0x18013e6d8
JetIndexRecordCount 0x18013e6c8
JetInit2 0x18013e6a0
JetMakeKey 0x18013e760
JetMove 0x18013e718
JetOpenDatabaseW 0x18013e6d0
JetOpenTableA 0x18013e698
JetPrepareUpdate 0x18013e798
JetRetrieveColumn 0x18013e7b0
JetRetrieveColumns 0x18013e7a0
JetRollback 0x18013e780
JetSeek 0x18013e770
JetSetColumn 0x18013e7c0
JetSetColumns 0x18013e7b8
JetSetCurrentIndexA 0x18013e778
JetSetIndexRange 0x18013e768
JetSetSystemParameterW 0x18013e758
JetTerm2 0x18013e6f0
JetUpdate 0x18013e7a8
MessagingDataModel2.DLL 32
?DeleteTempFiles@MessagingDeferredAttachment@@YAJPEAUISmMessage@@@Z 0x18013e7f0
?GetDeferredAttachmentFilePath@MessagingDeferredAttachment@@YAJPEAUISmMessage@@KPEAHPEAV?$basic_string@GU?$char_traits@G@utl@@V?$allocator@G@2@@utl@@@Z 0x18013e828
Messaging_ChatTransportIdToStoreId 0x18013e880
Messaging_FormatRecipientFromAggregate 0x18013e7d8
Messaging_GetFileExtensionFromContentType 0x18013e878
Messaging_GetMediaTempFolder 0x18013e868
Messaging_GetMediaTypeFromMimeTag 0x18013e860
Messaging_GetMessageAttachmentText 0x18013e7e8
Messaging_GetRecipientsString 0x18013e7e0
Messaging_GetSmsCharacterCount 0x18013e808
Messaging_GetValidSimId 0x18013e840
Messaging_IsCustomAppProviderId 0x18013e890
Messaging_IsDataRoamingRestrictionActive 0x18013e7f8
Messaging_IsFilterProviderId 0x18013e848
Messaging_IsMmsMessage 0x18013e830
Messaging_IsRcsEnabled 0x18013e858
Messaging_IsRcsMessage 0x18013e870
Messaging_IsSIMMessage 0x18013e838
Messaging_IsThreadedByRemoteConversationId 0x18013e850
Messaging_IsVoiceRoamingRestrictionActive 0x18013e800
Messaging_MessagingOMStartupShutdown 0x18013e898
Messaging_MessagingOMStartupStoreScan 0x18013e8c0
Messaging_RetryDownloadCloudServiceMessage 0x18013e820
Messaging_ShowToastForRcsEndUserMessage 0x18013e810
Messaging_ShutdownCloudServices 0x18013e8a0
Messaging_ShutdownMessageMaintenance 0x18013e8c8
Messaging_ShutdownNotification 0x18013e8b8
Messaging_SmEntryIdToUdmObjectId 0x18013e888
Messaging_StartCloudServices 0x18013e818
Messaging_StartMessageMaintenance 0x18013e8a8
Messaging_StartNotification 0x18013e8d0
UnInitMessagingObjectModelModule 0x18013e8b0
msvcrt.dll 45
__C_specific_handler 0x18013f150
__CxxFrameHandler3 0x18013f030
__dllonexit 0x18013f0b0
_amsg_exit 0x18013f020
_callnewh 0x18013f038
_errno 0x18013f128
_initterm 0x18013f018
_lock 0x18013f010
_onexit 0x18013f098
_purecall 0x18013f158
_strnicmp 0x18013f050
_unlock 0x18013f048
_vsnwprintf 0x18013f168
_vsnwprintf_s 0x18013f130
_wcsicmp 0x18013f148
_wcsnicmp 0x18013f0f8
_wcstoi64 0x18013f0a0
_wcstoui64 0x18013f0b8
_wtoi 0x18013f120
_XcptFilter 0x18013f028
?terminate@@YAXXZ 0x18013f110
free 0x18013f0e0
iswdigit 0x18013f070
iswspace 0x18013f118
malloc 0x18013f0e8
memcmp 0x18013f090
memcpy 0x18013f080
memcpy_s 0x18013f160
memmove 0x18013f068
memmove_s 0x18013f138
memset 0x18013f058
realloc 0x18013f0d8
strncpy_s 0x18013f040
tolower 0x18013f0a8
toupper 0x18013f100
towlower 0x18013f078
towupper 0x18013f0d0
wcschr 0x18013f0f0
wcscmp 0x18013f170
wcscpy_s 0x18013f060
wcsncmp 0x18013f140
wcstod 0x18013f0c8
wcstok_s 0x18013f108
wcstol 0x18013f0c0
wcstoul 0x18013f088
ntdll.dll 12
RtlCaptureContext 0x18013f198
RtlClearThreadWorkOnBehalfTicket 0x18013f1a8
RtlDeriveCapabilitySidsFromName 0x18013f180
RtlEqualSid 0x18013f1d8
RtlGetDeviceFamilyInfoEnum 0x18013f1b8
RtlLookupFunctionEntry 0x18013f190
RtlNtStatusToDosError 0x18013f1c0
RtlPublishWnfStateData 0x18013f1d0
RtlSetThreadWorkOnBehalfTicket 0x18013f1a0
RtlUnsubscribeWnfNotificationWaitForCompletion 0x18013f1b0
RtlVirtualUnwind 0x18013f188
ZwQueryWnfStateData 0x18013f1c8
PhoneUtil.dll 13
CauseCode_GetCodeFriendlyText 0x18013e9e0
ComparePhoneNumbers 0x18013e9c8
GetCchTailMin 0x18013e9c0
GetDialableNumberEtc 0x18013e9e8
GetDialStringFromTelUri 0x18013ea00
GetTelUriFromDialString 0x18013e9d0
IsCellularVoiceCapableDevice 0x18013e9d8
IsDialableChar 0x18013e9b8
IsNumberDialable 0x18013ea08
MaskPhoneNumber 0x18013e9f0
MaskPhoneUri 0x18013ea10
Phone_FmtText_NonDialerFormat 0x18013e9f8
RemoveMetadataFromNumber 0x18013ea18
PimIndexMaintenanceClient.DLL 1
CreateIndexedFilterClient 0x18013ea28
PIMSTORE.dll 26
?Submit@AccountProviderHostJobBase@@QEAAJPEAK@Z 0x18013e958
?SubmitSynchronously@AccountProviderHostJobBase@@QEAAJPEAXKPEAT_SNJobOutParams@@@Z 0x18013e920
ClearPreferenceAndOverride 0x18013e908
CreateAttendeeList 0x18013e950
CreateRecurrenceFromData 0x18013e8f8
FindAllMatchingAggregates 0x18013e8e0
FindAllMatchingContactsEx 0x18013e978
FindAllMatchingContactsEx2 0x18013e9a8
FindMatchingContactEx2 0x18013e968
GetContactDisplayAndSortPropertiesFromRegistry 0x18013e940
GetDefaultFolderFromStoreEx 0x18013e928
GetDefaultStoreFilter 0x18013e8e8
GetDefaultStoreId 0x18013e960
GetMeetingNotificationFromMessage 0x18013e918
GetPartnerGUID 0x18013e910
GetSortBy 0x18013e900
GetStartAndEndDate 0x18013e8f0
HandleMeetingResponseForAppointment 0x18013e9a0
IsDefaultStore 0x18013e930
IsEmptyProp 0x18013e948
OlObjectTypeFromOLITEMID 0x18013e970
PimBinaryBodyToString 0x18013e938
POutlookAppManager_CreateInstance 0x18013e998
SetDisplayBy 0x18013e988
SetIncludeMiddle 0x18013e980
SetSortBy 0x18013e990
SystemEventsBrokerClient.dll 4
SebEnumerateEventsByType 0x18013ea38
SebQueryEventPackage 0x18013ea50
SebSignalEvent 0x18013ea40
SebSignalSyncEvent 0x18013ea48