winsrvext.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Description
Multi-User Windows Server Extension DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
101.0 KB
Uploaded
2025-12-01 07:44
Views
80
SHA-256
265c54edc632e9a284ec05ea4a5eb22b

Exported functions 1

UserServerDllInitializationExt #1 · 0x1370

Imported DLLs & functions 300

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800136d8
api-ms-win-core-com-l1-1-0.dll 1
CoTaskMemFree 0x1800136e8
api-ms-win-core-debug-l1-1-0.dll 1
IsDebuggerPresent 0x1800136f8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180013708
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180013718
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180013728
SetLastError 0x180013738
SetUnhandledExceptionFilter 0x180013730
UnhandledExceptionFilter 0x180013740
api-ms-win-core-file-l1-1-0.dll 2
GetLogicalDrives 0x180013758
ReadFile 0x180013750
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180013768
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x180013778
api-ms-win-core-io-l1-1-0.dll 1
GetOverlappedResult 0x180013788
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
GetComputerNameW 0x180013798
api-ms-win-core-libraryloader-l1-2-0.dll 5
DisableThreadLibraryCalls 0x1800137c8
FreeLibrary 0x1800137a8
GetModuleHandleW 0x1800137b0
GetProcAddress 0x1800137b8
LoadLibraryExW 0x1800137c0
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x180013800
GetCurrentProcessId 0x1800137f0
GetCurrentThread 0x1800137f8
GetCurrentThreadId 0x180013808
GetExitCodeProcess 0x1800137e0
GetExitCodeThread 0x1800137e8
GetThreadId 0x180013810
TerminateProcess 0x1800137d8
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x180013820
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180013830
api-ms-win-core-psapi-l1-1-0.dll 1
QueryFullProcessImageNameW 0x180013840
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x180013858
RegGetValueW 0x180013860
RegLoadAppKeyW 0x180013850
RegOpenKeyExW 0x180013868
api-ms-win-core-synch-l1-1-0.dll 3
CreateEventW 0x180013880
OpenMutexW 0x180013888
WaitForMultipleObjectsEx 0x180013878
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemDirectoryW 0x1800138a8
GetSystemTimeAsFileTime 0x1800138a0
GetTickCount 0x180013898
api-ms-win-core-timezone-private-l1-1-0.dll 2
SetClientDynamicTimeZoneInformation 0x1800138b8
SetClientTimeZoneInformation 0x1800138c0
api-ms-win-core-windowserrorreporting-l1-1-0.dll 1
GetApplicationRestartSettings 0x1800138d0
api-ms-win-devices-swdevice-l1-1-0.dll 2
SwDeviceClose 0x1800138e8
SwDeviceCreate 0x1800138e0
api-ms-win-eventing-provider-l1-1-0.dll 5
EventRegister 0x180013900
EventSetInformation 0x1800138f8
EventUnregister 0x180013908
EventWrite 0x180013918
EventWriteTransfer 0x180013910
api-ms-win-security-base-l1-1-0.dll 1
CheckTokenMembership 0x180013928
BASESRV.dll 4
BaseGetProcessCrtlRoutine 0x180013308
BaseSetProcessCreateNotify 0x1800132f8
BaseSrvNlsLogon 0x180013300
BaseSrvNlsUpdateRegistryCache 0x180013310
CSRSRV.dll 18
CsrAddStaticServerThread 0x180013378
CsrConnectToUser 0x180013398
CsrDereferenceProcess 0x180013338
CsrDereferenceThread 0x1800133a0
CsrExecServerThread 0x1800133a8
CsrGetProcessLuid 0x180013370
CsrImpersonateClient 0x180013388
CsrLockedReferenceProcess 0x180013330
CsrLockProcessByClientId 0x180013350
CsrLockThreadByClientId 0x180013360
CsrQueryApiPort 0x180013380
CsrReferenceThread 0x180013348
CsrReplyToMessage 0x180013320
CsrRevertToSelf 0x180013390
CsrShutdownProcesses 0x180013368
CsrUnlockProcess 0x180013340
CsrUnlockThread 0x180013358
CsrValidateMessageBuffer 0x180013328
GDI32.dll 12
CreateCompatibleDC 0x1800133d0
CreateSolidBrush 0x1800133f0
DeleteDC 0x1800133b8
DeleteObject 0x180013408
GdiAddFontResourceW 0x180013400
GdiAddInitialFonts 0x1800133f8
GdiSupportsFontChangeEvent 0x180013410
GdiTransparentBlt 0x1800133c0
GetLayout 0x1800133e8
GetObjectW 0x1800133d8
SelectObject 0x1800133c8
SetLayout 0x1800133e0
KERNELBASE.dll 6
GetApplicationUserModelId 0x180013440
LocalAlloc 0x180013448
LocalReAlloc 0x180013438
lstrcmpiW 0x180013420
Sleep 0x180013428
WTSGetServiceSessionId 0x180013430
ntdll.dll 111
_strnicmp 0x180013960
_vsnwprintf 0x180013c40
_wtoi 0x180013c48
AlpcGetMessageAttribute 0x180013be8
AlpcInitializeMessageAttribute 0x180013a60
DbgUiIssueRemoteBreakin 0x180013c08
EtwEventEnabled 0x180013b38
EtwEventRegister 0x180013c38
EtwEventUnregister 0x180013bb8
EtwEventWrite 0x180013b30
EtwEventWriteNoRegistration 0x180013c60
EvtIntReportEventAndSourceAsync 0x180013c28
LdrFlushAlternateResourceModules 0x180013c18
memcpy 0x180013bc0
memmove 0x180013a90
memset 0x180013ca8
NtAlertThread 0x180013a78
NtAlpcAcceptConnectPort 0x180013a20
NtAlpcCancelMessage 0x180013a10
NtAlpcConnectPort 0x180013a00
NtAlpcCreatePort 0x180013a80
NtAlpcOpenSenderProcess 0x180013a08
NtAlpcSendWaitReceivePort 0x180013a58
NtClearEvent 0x180013968
NtClose 0x180013ba8
NtCreateEvent 0x180013b90
NtCreateKey 0x180013b48
NtDeleteValueKey 0x180013978
NtDeviceIoControlFile 0x1800139b8
NtDuplicateObject 0x1800139c0
NtDuplicateToken 0x180013bd0
NtEnumerateKey 0x180013ac0
NtEnumerateValueKey 0x180013998
NtNotifyChangeKey 0x180013b18
NtOpenEvent 0x1800139a8
NtOpenKey 0x180013b80
NtOpenProcess 0x1800139d8
NtOpenProcessToken 0x180013bd8
NtOpenSymbolicLinkObject 0x180013a70
NtOpenThread 0x180013a18
NtOpenThreadToken 0x1800139e8
NtPowerInformation 0x180013c10
NtQueryInformationProcess 0x180013b10
NtQueryInformationToken 0x180013948
NtQuerySymbolicLinkObject 0x180013a50
NtQuerySystemInformation 0x180013bf0
NtQueryValueKey 0x180013b28
NtReadVirtualMemory 0x1800139f0
NtResetEvent 0x180013aa8
NtResumeThread 0x180013b70
NtSetEvent 0x180013c00
NtSetInformationThread 0x180013ab8
NtSetSystemInformation 0x180013b20
NtSetValueKey 0x180013be0
NtTerminateProcess 0x180013c30
NtTerminateThread 0x180013a88
NtWaitForMultipleObjects 0x180013ab0
NtWaitForSingleObject 0x180013a98
PssNtCaptureSnapshot 0x180013c58
PssNtFreeSnapshot 0x180013c78
qsort 0x180013a28
RtlAddAccessAllowedAce 0x180013ae0
RtlAllocateAndInitializeSid 0x180013af8
RtlAnsiStringToUnicodeString 0x1800139c8
RtlAppendUnicodeToString 0x180013b50
RtlCaptureContext 0x180013c80
RtlCopySid 0x180013970
RtlCopyUnicodeString 0x180013b58
RtlCreateAcl 0x180013ae8
RtlCreateSecurityDescriptor 0x180013ad8
RtlCreateUnicodeString 0x180013990
RtlCreateUserThread 0x180013b78
RtlDeleteCriticalSection 0x180013bb0
RtlDeriveCapabilitySidsFromName 0x180013a68
RtlEnterCriticalSection 0x180013b98
RtlEqualUnicodeString 0x180013a30
RtlExitUserThread 0x180013aa0
RtlFindMessage 0x180013938
RtlFormatCurrentUserKeyPath 0x180013b60
RtlFreeAnsiString 0x1800139b0
RtlFreeHeap 0x180013950
RtlFreeSid 0x180013ac8
RtlFreeUnicodeString 0x180013b40
RtlGetNtProductType 0x180013c98
RtlInitializeCriticalSection 0x180013ba0
RtlInitUnicodeString 0x180013b88
RtlLeaveCriticalSection 0x180013b68
RtlLengthSid 0x180013af0
RtlLookupFunctionEntry 0x180013c88
RtlNtStatusToDosError 0x180013bc8
RtlOpenCurrentUser 0x180013c20
RtlQueryPackageClaims 0x180013bf8
RtlRegisterThreadWithCsrss 0x180013a38
RtlRunOnceExecuteOnce 0x180013ca0
RtlSetDaclSecurityDescriptor 0x180013ad0
RtlSubscribeWnfStateChangeNotification 0x180013b08
RtlUnicodeStringToAnsiString 0x1800139e0
RtlUnicodeStringToInteger 0x1800139d0
RtlUnsubscribeWnfStateChangeNotification 0x180013b00
RtlUpcaseUnicodeChar 0x180013988
RtlVerifyVersionInfo 0x180013a40
RtlVirtualUnwind 0x180013c90
strstr 0x180013c50
towlower 0x180013980
VerSetConditionMask 0x1800139a0
wcscpy_s 0x180013a48
wcsncmp 0x1800139f8
wcsrchr 0x180013940
WinSqmAddToStream 0x180013958
ZwQueryWnfStateNameInformation 0x180013c70
ZwUpdateWnfStateData 0x180013c68
USER32.dll 79
0x180013510
0x180013550
0x180013630
BeginPaint 0x180013470
BroadcastSystemMessageW 0x1800136c8
CallMsgFilterW 0x1800135f8
ChangeWindowMessageFilterEx 0x180013558
CheckWindowThreadDesktop 0x1800134b8
CreateDialogParamW 0x1800135d8
CtxInitUser32 0x180013518
DestroyIcon 0x1800134b0
DestroyWindow 0x1800135d0
DispatchMessageW 0x1800135e8
DrawEdge 0x180013480
DrawIcon 0x180013478
EndPaint 0x180013498
EnumThreadWindows 0x180013650
EnumWindows 0x180013538
FillRect 0x180013488
GetClassLongW 0x180013660
GetClassNameW 0x180013668
GetClientRect 0x180013560
GetDC 0x1800134a0
GetDlgItem 0x1800135b8
GetGUIThreadInfo 0x180013540
GetReasonTitleFromReasonCode 0x1800134c8
GetSysColor 0x180013570
GetSystemMetrics 0x1800136a8
GetTaskmanWindow 0x1800134d8
GetThreadDesktop 0x1800135a0
GetUserObjectInformationW 0x180013598
GetWindow 0x180013688
GetWindowLongPtrW 0x180013468
GetWindowLongW 0x180013528
GetWindowRect 0x180013568
GetWindowTextLengthW 0x1800134d0
GetWindowTextW 0x180013680
GetWindowThreadProcessId 0x1800136a0
GhostWindowFromHungWindow 0x180013640
HungWindowFromGhostWindow 0x1800134c0
InflateRect 0x180013588
InternalGetWindowIcon 0x180013678
InvalidateRect 0x180013590
IsDialogMessageW 0x180013600
IsHungAppWindow 0x180013638
IsInDesktopWindowBand 0x180013658
IsWindow 0x1800135e0
IsWindowEnabled 0x180013690
IsWindowVisible 0x180013648
KillTimer 0x180013530
LoadBitmapW 0x180013490
LoadIconW 0x180013670
MapWindowPoints 0x180013578
MB_GetString 0x1800134f0
MessageBoxTimeoutW 0x180013500
MsgWaitForMultipleObjects 0x180013610
OffsetRect 0x180013580
PeekMessageW 0x180013608
PostMessageW 0x180013620
PostThreadMessageW 0x180013508
RecordShutdownReason 0x180013698
RegisterWindowMessageW 0x1800136c0
ReleaseDC 0x1800134a8
SendInput 0x180013548
SendMessageCallbackW 0x180013618
SendMessageTimeoutW 0x1800134e8
SendMessageW 0x1800135b0
SendNotifyMessageW 0x1800136b8
SetDlgItemTextW 0x1800135c8
SetFocus 0x1800135a8
SetForegroundWindow 0x180013628
SetTimer 0x1800135c0
SetWindowLongPtrW 0x180013458
SetWindowPos 0x1800134e0
SetWindowTextW 0x180013460
ShutdownBlockReasonQuery 0x180013520
SoftModalMessageBox 0x1800134f8
SystemParametersInfoW 0x1800136b0
TranslateMessage 0x1800135f0
win32u.dll 18
gDispatchTableValues 0x180013d20
NtUserAutoRotateScreen 0x180013ce8
NtUserCallNoParam 0x180013d10
NtUserCallOneParam 0x180013cd8
NtUserCallTwoParam 0x180013cd0
NtUserCtxDisplayIOCtl 0x180013cf8
NtUserHardErrorControl 0x180013d40
NtUserInitialize 0x180013d30
NtUserNotifyProcessCreate 0x180013d38
NtUserProcessConnect 0x180013d18
NtUserQueryInformationThread 0x180013d08
NtUserQueryWindow 0x180013d00
NtUserRemoteConnect 0x180013ce0
NtUserRemoteRedrawRectangle 0x180013cc0
NtUserRemoteRedrawScreen 0x180013cb8
NtUserRemoteStopScreenUpdates 0x180013cc8
NtUserSetInformationThread 0x180013d28
NtUserSetSensorPresence 0x180013cf0