usermgrcli.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Description
UserMgr API DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
80.3 KB
Uploaded
2025-12-01 07:41
Views
117
SHA-256
cf4294513725cb439b3ab530738981f0

Exported functions 48

CamCleanupDisardedCandidateAccounts #1 · 0x3860
CamConnectCandidateUser #2 · 0x9210
CamFreeAuthBuffer #3 · 0x9250
CamFreeBuffer #4 · 0x92a0
CamGetCandidateAccountCredz #5 · 0x92d0
CamGetCandidateUserSessionIds #6 · 0x9300
CamGetNonCandidateUserSessionIds #7 · 0x9330
CamIsCandidateUser #8 · 0x3b80
CamIsEphemeralCandidateUser #9 · 0x9360
CamRefreshCandidateUser #10 · 0x9390
IsInteractiveUserSession #11 · 0x97f0
QueryActiveSession #12 · 0x9860
QueryUserToken #13 · 0x98e0
RegisterUsertokenForNoWinlogon #14 · 0x99d0
UMgrChangeSessionActiveShellUser #15 · 0x9480
UMgrChangeSessionUserToken #16 · 0x94b0
UMgrClearDefaultSignInAccount #17 · 0x94c0
UMgrConnectLocalUser #18 · 0x94d0
UMgrDisconnectLocalUser #19 · 0x9520
UMgrEnumerateSessionUsers #20 · 0x17f0
UMgrFreeSessionUsers #21 · 0x1250
UMgrFreeUserCredentials #22 · 0x9580
UMgrGetCachedCredentials #23 · 0x95e0
UMgrGetConstrainedUserToken #24 · 0x16a0
UMgrGetDefaultSignInAccount #25 · 0x9610
UMgrGetImpersonationTokenForContext #26 · 0x9620
UMgrGetSessionActiveShellUserToken #27 · 0x9650
UMgrInformFlags #28 · 0x3930
UMgrInformUserLogoff #29 · 0x3850
UMgrInformUserLogon #30 · 0x39d0
UMgrIsAllowedToActivateAsUser #31 · 0x1aa0
UMgrLaunchShell #32 · 0x39b0
UMgrLaunchShellInfrastructureHost #33 · 0x39a0
UMgrLogonUser #34 · 0x12a0
UMgrOpenProcessHandleForAccess #35 · 0x11a0
UMgrOpenProcessTokenForQuery #36 · 0x1100
UMgrQueryDefaultAccountToken #37 · 0x3c40
UMgrQuerySessionUserToken #38 · 0x9680
UMgrQuerySessionVirtualAccountToken #39 · 0x96b0
UMgrQueryUserContext #40 · 0x23f0
UMgrQueryUserContextFromName #41 · 0x96e0
UMgrQueryUserContextFromSid #42 · 0x9710
UMgrQueryUserToken #43 · 0x1f50
UMgrQueryUserTokenFromName #44 · 0x9740
UMgrQueryUserTokenFromSid #45 · 0x9770
UMgrSetCachedCredentials #46 · 0x97a0
UMgrSetShellInformation #47 · 0x39c0
UMgrpGetRegistryLocation #48 · 0x97e0

Imported DLLs & functions 80

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x18000be40
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18000be58
IsDebuggerPresent 0x18000be60
OutputDebugStringW 0x18000be50
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18000be70
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18000be80
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18000bea8
SetLastError 0x18000be90
SetUnhandledExceptionFilter 0x18000bea0
UnhandledExceptionFilter 0x18000be98
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000beb8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18000bec8
HeapAlloc 0x18000bed0
HeapFree 0x18000bed8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18000bef0
LocalFree 0x18000bee8
api-ms-win-core-libraryloader-l1-2-0.dll 4
GetModuleFileNameA 0x18000bf00
GetModuleHandleExW 0x18000bf10
GetModuleHandleW 0x18000bf08
GetProcAddress 0x18000bf18
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18000bf28
api-ms-win-core-processthreads-l1-1-0.dll 5
GetCurrentProcess 0x18000bf40
GetCurrentProcessId 0x18000bf50
GetCurrentThreadId 0x18000bf58
OpenProcessToken 0x18000bf48
TerminateProcess 0x18000bf38
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18000bf68
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000bf78
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18000bf90
RtlLookupFunctionEntry 0x18000bf88
RtlVirtualUnwind 0x18000bf98
api-ms-win-core-synch-l1-1-0.dll 7
CreateMutexExW 0x18000bfb0
CreateSemaphoreExW 0x18000bfb8
OpenSemaphoreW 0x18000bfd0
ReleaseMutex 0x18000bfd8
ReleaseSemaphore 0x18000bfa8
WaitForSingleObject 0x18000bfc0
WaitForSingleObjectEx 0x18000bfc8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18000bfe8
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x18000c000
GetTickCount 0x18000bff8
api-ms-win-eventing-provider-l1-1-0.dll 1
EventWriteTransfer 0x18000c010
api-ms-win-security-base-l1-1-0.dll 1
CreateWellKnownSid 0x18000c020
msvcrt.dll 28
__C_specific_handler 0x18000c0f8
__CxxFrameHandler3 0x18000c038
__dllonexit 0x18000c100
_amsg_exit 0x18000c070
_callnewh 0x18000c0a8
_CxxThrowException 0x18000c098
_initterm 0x18000c088
_lock 0x18000c0a0
_onexit 0x18000c0e8
_purecall 0x18000c0d0
_unlock 0x18000c0b8
_vsnprintf_s 0x18000c048
_vsnwprintf 0x18000c0f0
_XcptFilter 0x18000c060
??0exception@@QEAA@AEBQEBD@Z 0x18000c0b0
??0exception@@QEAA@AEBQEBDH@Z 0x18000c0c8
??0exception@@QEAA@AEBV0@@Z 0x18000c068
??0exception@@QEAA@XZ 0x18000c078
??1exception@@UEAA@XZ 0x18000c090
??1type_info@@UEAA@XZ 0x18000c0c0
??3@YAXPEAX@Z 0x18000c0d8
?what@exception@@UEBAPEBDXZ 0x18000c040
free 0x18000c080
malloc 0x18000c058
memcpy 0x18000c030
memcpy_s 0x18000c0e0
memmove 0x18000c050
memset 0x18000c108
ntdll.dll 2
RtlGetCurrentServiceSessionId 0x18000c120
RtlIsMultiSessionSku 0x18000c118
RPCRT4.dll 7
I_RpcExceptionFilter 0x18000be18
NdrClientCall3 0x18000be30
RpcBindingFree 0x18000be00
RpcBindingFromStringBindingW 0x18000be08
RpcBindingSetAuthInfoExW 0x18000be20
RpcStringBindingComposeW 0x18000be10
RpcStringFreeW 0x18000be28