usermgr.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Description
UserMgr
Authors
© Microsoft Corporation. All rights reserved.
File size
1.4 MB
Uploaded
2025-12-01 07:41
Views
78
SHA-256
1e9e175f62724f8f6696ec0da0f2ed88

Exported functions 1

ServiceMain #1 · 0x28f20

Imported DLLs & functions 415

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800e7b80
api-ms-win-core-com-l1-1-0.dll 32
CoAddRefServerProcess 0x1800e7c50
CoCopyProxy 0x1800e7c68
CoCreateFreeThreadedMarshaler 0x1800e7c88
CoCreateGuid 0x1800e7ba0
CoCreateInstance 0x1800e7bc0
CoDecrementMTAUsage 0x1800e7c40
CoDisableCallCancellation 0x1800e7be0
CoDisconnectContext 0x1800e7bb0
CoEnableCallCancellation 0x1800e7c00
CoGetApartmentType 0x1800e7c30
CoGetCallContext 0x1800e7b98
CoGetCancelObject 0x1800e7c70
CoGetInterfaceAndReleaseStream 0x1800e7ba8
CoGetMalloc 0x1800e7c10
CoImpersonateClient 0x1800e7c60
CoIncrementMTAUsage 0x1800e7bb8
CoInitializeSecurity 0x1800e7bd0
CoMarshalInterface 0x1800e7c08
CoRegisterClassObject 0x1800e7bf0
CoReleaseMarshalData 0x1800e7c18
CoReleaseServerProcess 0x1800e7c78
CoResumeClassObjects 0x1800e7c48
CoRevertToSelf 0x1800e7c38
CoRevokeClassObject 0x1800e7c80
CoSetProxyBlanket 0x1800e7bf8
CoTaskMemAlloc 0x1800e7c58
CoTaskMemFree 0x1800e7b90
CoTaskMemRealloc 0x1800e7bc8
CoWaitForMultipleHandles 0x1800e7be8
CreateStreamOnHGlobal 0x1800e7bd8
PropVariantClear 0x1800e7c20
StringFromCLSID 0x1800e7c28
api-ms-win-core-com-l1-1-1.dll 1
RoGetAgileReference 0x1800e7c98
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800e7cb8
IsDebuggerPresent 0x1800e7cb0
OutputDebugStringW 0x1800e7ca8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800e7cc8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800e7cd8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800e7cf0
RaiseException 0x1800e7cf8
SetLastError 0x1800e7d08
SetUnhandledExceptionFilter 0x1800e7d00
UnhandledExceptionFilter 0x1800e7ce8
api-ms-win-core-file-l1-1-0.dll 4
CreateFileW 0x1800e7d20
GetFileSizeEx 0x1800e7d30
ReadFile 0x1800e7d18
WriteFile 0x1800e7d28
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x1800e7d40
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1800e7d58
DuplicateHandle 0x1800e7d50
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800e7d68
HeapAlloc 0x1800e7d70
HeapFree 0x1800e7d78
api-ms-win-core-heap-l2-1-0.dll 3
LocalAlloc 0x1800e7d90
LocalFree 0x1800e7d88
LocalReAlloc 0x1800e7d98
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalSize 0x1800e7da8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 2
MulDiv 0x1800e7db8
RegisterWaitForSingleObject 0x1800e7dc0
api-ms-win-core-libraryloader-l1-2-0.dll 7
FreeLibrary 0x1800e7df0
GetModuleFileNameA 0x1800e7e00
GetModuleFileNameW 0x1800e7dd8
GetModuleHandleExW 0x1800e7de8
GetModuleHandleW 0x1800e7de0
GetProcAddress 0x1800e7dd0
LoadLibraryExW 0x1800e7df8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800e7e10
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800e7e20
api-ms-win-core-processthreads-l1-1-0.dll 12
CreateProcessAsUserW 0x1800e7e48
CreateThread 0x1800e7e38
GetCurrentProcess 0x1800e7e30
GetCurrentProcessId 0x1800e7e80
GetCurrentThread 0x1800e7e68
GetCurrentThreadId 0x1800e7e70
GetProcessId 0x1800e7e58
OpenProcessToken 0x1800e7e88
OpenThreadToken 0x1800e7e40
ProcessIdToSessionId 0x1800e7e60
ResumeThread 0x1800e7e78
TerminateProcess 0x1800e7e50
api-ms-win-core-processthreads-l1-1-1.dll 2
GetProcessMitigationPolicy 0x1800e7ea0
OpenProcess 0x1800e7e98
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800e7eb0
api-ms-win-core-psapi-l1-1-0.dll 1
QueryFullProcessImageNameW 0x1800e7ec0
api-ms-win-core-registry-l1-1-0.dll 14
RegCloseKey 0x1800e7f10
RegCreateKeyExW 0x1800e7f18
RegDeleteTreeW 0x1800e7ef0
RegDeleteValueW 0x1800e7f20
RegEnumKeyExW 0x1800e7f00
RegEnumValueW 0x1800e7ed8
RegFlushKey 0x1800e7f38
RegGetValueW 0x1800e7ed0
RegOpenKeyExA 0x1800e7f30
RegOpenKeyExW 0x1800e7f08
RegQueryInfoKeyW 0x1800e7ef8
RegQueryValueExA 0x1800e7f28
RegQueryValueExW 0x1800e7ee0
RegSetValueExW 0x1800e7ee8
api-ms-win-core-registry-l1-1-1.dll 2
RegDeleteKeyValueW 0x1800e7f50
RegSetKeyValueW 0x1800e7f48
api-ms-win-core-registry-l2-1-0.dll 1
RegDeleteKeyW 0x1800e7f60
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800e7f80
RtlLookupFunctionEntry 0x1800e7f70
RtlVirtualUnwind 0x1800e7f78
api-ms-win-core-string-l1-1-0.dll 4
CompareStringOrdinal 0x1800e7f90
GetStringTypeW 0x1800e7fa0
MultiByteToWideChar 0x1800e7f98
WideCharToMultiByte 0x1800e7fa8
api-ms-win-core-synch-l1-1-0.dll 20
AcquireSRWLockExclusive 0x1800e8030
AcquireSRWLockShared 0x1800e8020
CreateEventExW 0x1800e7fc0
CreateEventW 0x1800e8018
CreateMutexExW 0x1800e7fd0
CreateSemaphoreExW 0x1800e7fc8
DeleteCriticalSection 0x1800e7ff8
EnterCriticalSection 0x1800e7fb8
InitializeCriticalSectionEx 0x1800e7fe8
InitializeSRWLock 0x1800e8038
LeaveCriticalSection 0x1800e7fd8
OpenSemaphoreW 0x1800e8010
ReleaseMutex 0x1800e8008
ReleaseSemaphore 0x1800e8040
ReleaseSRWLockExclusive 0x1800e8048
ReleaseSRWLockShared 0x1800e7ff0
SetEvent 0x1800e8050
TryAcquireSRWLockExclusive 0x1800e7fe0
WaitForSingleObject 0x1800e8000
WaitForSingleObjectEx 0x1800e8028
api-ms-win-core-synch-l1-2-0.dll 6
InitOnceBeginInitialize 0x1800e8088
InitOnceComplete 0x1800e8068
InitOnceExecuteOnce 0x1800e8060
Sleep 0x1800e8070
SleepConditionVariableSRW 0x1800e8078
WakeAllConditionVariable 0x1800e8080
api-ms-win-core-sysinfo-l1-1-0.dll 4
GetComputerNameExW 0x1800e80a0
GetSystemTimeAsFileTime 0x1800e8098
GetTickCount 0x1800e80a8
GetTickCount64 0x1800e80b0
api-ms-win-core-threadpool-l1-2-0.dll 8
CloseThreadpoolTimer 0x1800e80d8
CloseThreadpoolWork 0x1800e80d0
CreateThreadpoolTimer 0x1800e80f8
CreateThreadpoolWork 0x1800e80e0
SetThreadpoolTimer 0x1800e80c8
SubmitThreadpoolWork 0x1800e80c0
WaitForThreadpoolTimerCallbacks 0x1800e80e8
WaitForThreadpoolWorkCallbacks 0x1800e80f0
api-ms-win-core-threadpool-legacy-l1-1-0.dll 2
QueueUserWorkItem 0x1800e8108
UnregisterWaitEx 0x1800e8110
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1800e8120
EncodePointer 0x1800e8128
api-ms-win-core-winrt-error-l1-1-0.dll 5
GetRestrictedErrorInfo 0x1800e8158
RoOriginateError 0x1800e8138
RoOriginateErrorW 0x1800e8150
RoTransformError 0x1800e8140
SetRestrictedErrorInfo 0x1800e8148
api-ms-win-core-winrt-error-l1-1-1.dll 3
IsErrorPropagationEnabled 0x1800e8170
RoGetMatchingRestrictedErrorInfo 0x1800e8178
RoReportFailedDelegate 0x1800e8168
api-ms-win-core-winrt-l1-1-0.dll 6
RoActivateInstance 0x1800e8188
RoGetActivationFactory 0x1800e81b0
RoInitialize 0x1800e8190
RoRegisterActivationFactories 0x1800e8198
RoRevokeActivationFactories 0x1800e81a0
RoUninitialize 0x1800e81a8
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll 1
RoCreatePropertySetSerializer 0x1800e81c0
api-ms-win-core-winrt-string-l1-1-0.dll 10
WindowsCompareStringOrdinal 0x1800e8218
WindowsConcatString 0x1800e8208
WindowsCreateString 0x1800e81e0
WindowsCreateStringReference 0x1800e81d0
WindowsDeleteString 0x1800e81f8
WindowsDuplicateString 0x1800e81e8
WindowsGetStringLen 0x1800e81d8
WindowsGetStringRawBuffer 0x1800e8200
WindowsIsStringEmpty 0x1800e8210
WindowsStringHasEmbeddedNull 0x1800e81f0
api-ms-win-eventing-controller-l1-1-0.dll 3
ControlTraceW 0x1800e8228
EnableTraceEx2 0x1800e8238
StartTraceW 0x1800e8230
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x1800e8268
EventProviderEnabled 0x1800e8250
EventRegister 0x1800e8260
EventSetInformation 0x1800e8258
EventUnregister 0x1800e8248
EventWriteTransfer 0x1800e8270
api-ms-win-security-base-l1-1-0.dll 20
AccessCheck 0x1800e8298
AccessCheckByType 0x1800e82a0
AdjustTokenPrivileges 0x1800e8290
AllocateAndInitializeSid 0x1800e82e8
AllocateLocallyUniqueId 0x1800e82c0
CheckTokenMembership 0x1800e82b8
CopySid 0x1800e8318
CreateRestrictedToken 0x1800e8280
CreateWellKnownSid 0x1800e82e0
DuplicateToken 0x1800e8308
DuplicateTokenEx 0x1800e8288
FreeSid 0x1800e82d0
GetLengthSid 0x1800e8310
GetTokenInformation 0x1800e82f8
ImpersonateLoggedOnUser 0x1800e82f0
IsValidSid 0x1800e82b0
MakeAbsoluteSD 0x1800e82d8
PrivilegeCheck 0x1800e82a8
RevertToSelf 0x1800e8300
SetTokenInformation 0x1800e82c8
api-ms-win-security-base-l1-2-0.dll 2
CheckTokenCapability 0x1800e8328
CheckTokenMembershipEx 0x1800e8330
api-ms-win-security-base-private-l1-1-1.dll 1
CreateAppContainerToken 0x1800e8340
api-ms-win-security-credentials-l1-1-0.dll 1
CredProtectW 0x1800e8350
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupAccountNameW 0x1800e8360
api-ms-win-security-provider-l1-1-0.dll 2
GetSecurityInfo 0x1800e8378
SetSecurityInfo 0x1800e8370
api-ms-win-security-sddl-l1-1-0.dll 3
ConvertSidToStringSidW 0x1800e8388
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800e8390
ConvertStringSidToSidW 0x1800e8398
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x1800e83a8
SetServiceStatus 0x1800e83b0
api-ms-win-service-private-l1-1-0.dll 1
I_ScBroadcastServiceControlMessage 0x1800e83c0
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x1800e83d0
bcrypt.dll 5
BCryptCreateHash 0x1800e8400
BCryptDestroyHash 0x1800e83e8
BCryptFinishHash 0x1800e83f0
BCryptGetProperty 0x1800e83f8
BCryptHashData 0x1800e83e0
combase.dll 5
0x1800e8430
0x1800e8428
0x1800e8420
0x1800e8418
0x1800e8410
CRYPT32.dll 1
CryptBinaryToStringW 0x1800e7970
logoncli.dll 1
DsGetDcNameW 0x1800e8440
msvcrt.dll 68
___lc_codepage_func 0x1800e8660
___lc_handle_func 0x1800e8658
___mb_cur_max_func 0x1800e8650
__C_specific_handler 0x1800e84a0
__crtLCMapStringW 0x1800e84b0
__CxxFrameHandler3 0x1800e8538
__dllonexit 0x1800e8478
__pctype_func 0x1800e84d8
__uncaught_exception 0x1800e8640
_amsg_exit 0x1800e8548
_callnewh 0x1800e8618
_CxxThrowException 0x1800e8628
_errno 0x1800e8578
_get_errno 0x1800e85e8
_initterm 0x1800e8540
_ismbblead 0x1800e84e0
_lock 0x1800e8460
_onexit 0x1800e8528
_purecall 0x1800e8500
_set_errno 0x1800e85e0
_ui64tow_s 0x1800e8558
_unlock 0x1800e8468
_vscwprintf 0x1800e85f0
_vsnprintf_s 0x1800e8490
_vsnwprintf 0x1800e8518
_wcsdup 0x1800e84b8
_wcsicmp 0x1800e8550
_wcsnicmp 0x1800e85d0
_wsetlocale 0x1800e84a8
_wtoi 0x1800e8568
_wtol 0x1800e85c8
_XcptFilter 0x1800e8480
??_V@YAXPEAX@Z 0x1800e8520
??0bad_cast@@QEAA@AEBV0@@Z 0x1800e85a0
??0bad_cast@@QEAA@PEBD@Z 0x1800e85b0
??0exception@@QEAA@AEBQEBD@Z 0x1800e8590
??0exception@@QEAA@AEBQEBDH@Z 0x1800e8620
??0exception@@QEAA@AEBV0@@Z 0x1800e84e8
??0exception@@QEAA@XZ 0x1800e84f0
??1bad_cast@@UEAA@XZ 0x1800e85a8
??1exception@@UEAA@XZ 0x1800e84f8
??1type_info@@UEAA@XZ 0x1800e8530
??3@YAXPEAX@Z 0x1800e8508
?terminate@@YAXXZ 0x1800e8458
?what@exception@@UEBAPEBDXZ 0x1800e8588
abort 0x1800e84c8
calloc 0x1800e84d0
free 0x1800e8470
localeconv 0x1800e85b8
malloc 0x1800e8450
memcmp 0x1800e8498
memcpy 0x1800e8630
memcpy_s 0x1800e8510
memmove 0x1800e8638
memmove_s 0x1800e8488
memset 0x1800e84c0
rand 0x1800e85f8
realloc 0x1800e8560
setlocale 0x1800e8648
sprintf_s 0x1800e8598
strcspn 0x1800e85c0
swprintf_s 0x1800e8600
toupper 0x1800e8610
wcschr 0x1800e85d8
wcscmp 0x1800e8668
wcsnlen 0x1800e8608
wcsstr 0x1800e8570
wcstol 0x1800e8580
ntdll.dll 56
EtwTraceMessage 0x1800e86a0
NtAllocateLocallyUniqueId 0x1800e87e0
NtClose 0x1800e87a8
NtCompareTokens 0x1800e87c8
NtCreateDirectoryObjectEx 0x1800e8710
NtCreateFile 0x1800e86c0
NtCreateSymbolicLinkObject 0x1800e86d0
NtDeviceIoControlFile 0x1800e8828
NtOpenDirectoryObject 0x1800e86e0
NtOpenFile 0x1800e8820
NtQueryInformationToken 0x1800e8778
NtQuerySecurityObject 0x1800e86b8
NtQuerySystemInformation 0x1800e8818
NtSetInformationProcess 0x1800e8780
NtSetInformationToken 0x1800e86f8
RtlAddAccessAllowedAce 0x1800e8740
RtlAddAccessAllowedAceEx 0x1800e86f0
RtlAddAce 0x1800e8748
RtlAdjustPrivilege 0x1800e8698
RtlAllocateAndInitializeSid 0x1800e86e8
RtlAllocateHeap 0x1800e8730
RtlCapabilityCheck 0x1800e8770
RtlCheckSandboxedToken 0x1800e8790
RtlCompareUnicodeString 0x1800e8690
RtlConvertSidToUnicodeString 0x1800e8700
RtlCopySid 0x1800e86a8
RtlCreateAcl 0x1800e8758
RtlCreateSecurityDescriptor 0x1800e86c8
RtlDeriveCapabilitySidsFromName 0x1800e8718
RtlEqualSid 0x1800e87a0
RtlFreeHeap 0x1800e8830
RtlFreeSid 0x1800e86d8
RtlGetAce 0x1800e8750
RtlGetCurrentServiceSessionId 0x1800e8810
RtlGetDaclSecurityDescriptor 0x1800e86b0
RtlGetDeviceFamilyInfoEnum 0x1800e87f8
RtlGetNtProductType 0x1800e8678
RtlInitString 0x1800e87e8
RtlInitUnicodeString 0x1800e8798
RtlIsCapabilitySid 0x1800e87b8
RtlIsMultiSessionSku 0x1800e87f0
RtlLengthSid 0x1800e8768
RtlNtStatusToDosError 0x1800e87b0
RtlNtStatusToDosErrorNoTeb 0x1800e8688
RtlPublishWnfStateData 0x1800e8808
RtlQueryInformationAcl 0x1800e8760
RtlQueryRegistryValuesEx 0x1800e8728
RtlQueryWnfStateData 0x1800e87d8
RtlRunOnceExecuteOnce 0x1800e8720
RtlSetDaclSecurityDescriptor 0x1800e8708
RtlSetProcessIsCritical 0x1800e8788
RtlSubAuthorityCountSid 0x1800e8738
RtlSubAuthoritySid 0x1800e8680
RtlSubscribeWnfStateChangeNotification 0x1800e87d0
RtlUnsubscribeWnfStateChangeNotification 0x1800e8800
RtlValidSid 0x1800e87c0
OLEAUT32.dll 4
SysAllocString 0x1800e7998
SysFreeString 0x1800e7990
VariantClear 0x1800e7988
VariantInit 0x1800e7980
profapi.dll 2
0x1800e8840
0x1800e8848
RPCRT4.dll 22
I_RpcExceptionFilter 0x1800e79a8
I_RpcMapWin32Status 0x1800e7a48
NdrClientCall3 0x1800e79b0
NdrServerCall2 0x1800e79f0
NdrServerCallAll 0x1800e79c8
RpcBindingBind 0x1800e79d0
RpcBindingCreateW 0x1800e7a30
RpcBindingFree 0x1800e7a38
RpcBindingFromStringBindingW 0x1800e79f8
RpcBindingVectorFree 0x1800e7a10
RpcEpRegisterW 0x1800e7a28
RpcEpUnregister 0x1800e7a08
RpcImpersonateClient 0x1800e7a00
RpcRevertToSelf 0x1800e79e8
RpcServerInqBindings 0x1800e79b8
RpcServerInqCallAttributesW 0x1800e7a40
RpcServerRegisterIf3 0x1800e7a50
RpcServerUnregisterIf 0x1800e79e0
RpcServerUseProtseqW 0x1800e79c0
RpcSsDestroyClientContext 0x1800e79d8
RpcStringBindingComposeW 0x1800e7a18
RpcStringFreeW 0x1800e7a20
SHCORE.dll 4
CreateRandomAccessStreamOverStream 0x1800e7a68
CreateStreamOverRandomAccessStream 0x1800e7a60
SHTaskPoolAllowThreadReuse 0x1800e7a70
SHTaskPoolQueueTask 0x1800e7a78
SspiCli.dll 12
GetUserNameExW 0x1800e7ac0
LogonUserExExW 0x1800e7ab8
LsaCallAuthenticationPackage 0x1800e7aa8
LsaConnectUntrusted 0x1800e7a88
LsaDeregisterLogonProcess 0x1800e7ac8
LsaFreeReturnBuffer 0x1800e7ad8
LsaLogonUser 0x1800e7ad0
LsaLookupAuthenticationPackage 0x1800e7ab0
LsaRegisterLogonProcess 0x1800e7a98
SeciAllocateAndSetCallFlags 0x1800e7aa0
SeciAllocateAndSetIPAddress 0x1800e7ae0
SeciFreeCallContext 0x1800e7a90
USERENV.dll 6
CreateProfile 0x1800e7b18
DeleteProfileW 0x1800e7af8
GetDefaultUserProfileDirectoryW 0x1800e7b10
GetUserProfileDirectoryW 0x1800e7b00
LoadUserProfileW 0x1800e7af0
UnloadUserProfile 0x1800e7b08
WLDAP32.dll 10
0x1800e7b28
0x1800e7b30
0x1800e7b38
0x1800e7b40
0x1800e7b48
0x1800e7b50
0x1800e7b58
0x1800e7b60
0x1800e7b68
0x1800e7b70