UserOOBE.dll

v10.0.19041.5848 64-bit Windows NT Analyzed
Download
Description
UserOOBE
Authors
© Microsoft Corporation. All rights reserved.
File size
427.5 KB
Uploaded
2025-12-01 07:50
Views
123
SHA-256
ae50a85b9c1c5df0022e74174084c84c

Exported functions 2

DllCanUnloadNow #1 · 0x5b70
DllGetClassObject #2 · 0x5bc0

Imported DLLs & functions 353

api-ms-win-appmodel-runtime-l1-1-1.dll 1
FindPackagesByPackageFamily 0x18004f7c8
api-ms-win-appmodel-state-l1-2-0.dll 3
CloseState 0x18004f7e8
GetSystemAppDataKey 0x18004f7e0
OpenStateExplicit 0x18004f7d8
api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x18004f7f8
api-ms-win-core-com-l1-1-0.dll 19
CLSIDFromString 0x18004f870
CoCreateFreeThreadedMarshaler 0x18004f820
CoCreateInstance 0x18004f890
CoGetApartmentType 0x18004f858
CoGetCallContext 0x18004f840
CoGetMalloc 0x18004f860
CoGetStdMarshalEx 0x18004f898
CoImpersonateClient 0x18004f878
CoRegisterClassObject 0x18004f828
CoRevertToSelf 0x18004f880
CoRevokeClassObject 0x18004f830
CoSetProxyBlanket 0x18004f818
CoTaskMemAlloc 0x18004f808
CoTaskMemFree 0x18004f810
CoTaskMemRealloc 0x18004f850
CoWaitForMultipleHandles 0x18004f888
StringFromCLSID 0x18004f848
StringFromGUID2 0x18004f868
StringFromIID 0x18004f838
api-ms-win-core-com-l1-1-1.dll 1
RoGetAgileReference 0x18004f8a8
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18004f8b8
IsDebuggerPresent 0x18004f8c8
OutputDebugStringW 0x18004f8c0
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18004f8d8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18004f8e8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18004f908
RaiseException 0x18004f8f8
SetLastError 0x18004f900
SetUnhandledExceptionFilter 0x18004f918
UnhandledExceptionFilter 0x18004f910
api-ms-win-core-file-l1-1-0.dll 11
CreateDirectoryW 0x18004f960
CreateFileW 0x18004f938
DeleteFileW 0x18004f978
FindClose 0x18004f930
FindFirstFileW 0x18004f940
FindNextFileW 0x18004f950
FlushFileBuffers 0x18004f970
GetFileAttributesW 0x18004f968
GetFileInformationByHandle 0x18004f948
GetFullPathNameW 0x18004f928
SetFileInformationByHandle 0x18004f958
api-ms-win-core-file-l2-1-0.dll 1
GetFileInformationByHandleEx 0x18004f988
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x18004f9a0
DuplicateHandle 0x18004f998
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18004f9b8
HeapAlloc 0x18004f9b0
HeapFree 0x18004f9c0
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18004f9d8
LocalFree 0x18004f9d0
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x18004f9e8
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x18004f9f8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
MulDiv 0x18004fa08
api-ms-win-core-libraryloader-l1-2-0.dll 11
DisableThreadLibraryCalls 0x18004fa38
FindResourceExW 0x18004fa28
FreeLibrary 0x18004fa20
GetModuleFileNameA 0x18004fa68
GetModuleFileNameW 0x18004fa48
GetModuleHandleExW 0x18004fa58
GetModuleHandleW 0x18004fa50
GetProcAddress 0x18004fa30
LoadLibraryExW 0x18004fa60
LoadResource 0x18004fa18
LockResource 0x18004fa40
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18004fa78
api-ms-win-core-path-l1-1-0.dll 1
PathCchCombine 0x18004fa88
api-ms-win-core-privateprofile-l1-1-0.dll 1
WritePrivateProfileStringW 0x18004fa98
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x18004faa8
api-ms-win-core-processthreads-l1-1-0.dll 10
CreateProcessW 0x18004fae0
GetCurrentProcess 0x18004faf8
GetCurrentProcessId 0x18004fae8
GetCurrentThread 0x18004fac0
GetCurrentThreadId 0x18004fad0
GetProcessId 0x18004fab8
OpenProcessToken 0x18004faf0
OpenThreadToken 0x18004fb00
ProcessIdToSessionId 0x18004fac8
TerminateProcess 0x18004fad8
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x18004fb10
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18004fb20
api-ms-win-core-registry-l1-1-0.dll 14
RegCloseKey 0x18004fb40
RegCreateKeyExW 0x18004fb38
RegDeleteKeyExW 0x18004fb70
RegDeleteTreeW 0x18004fb88
RegDeleteValueW 0x18004fb80
RegEnumKeyExW 0x18004fb90
RegEnumValueW 0x18004fb98
RegFlushKey 0x18004fb60
RegGetValueW 0x18004fb48
RegOpenCurrentUser 0x18004fb30
RegOpenKeyExW 0x18004fb68
RegQueryInfoKeyW 0x18004fb78
RegQueryValueExW 0x18004fb58
RegSetValueExW 0x18004fb50
api-ms-win-core-registryuserspecific-l1-1-0.dll 1
SHRegGetUSValueW 0x18004fba8
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18004fbc0
RtlLookupFunctionEntry 0x18004fbc8
RtlVirtualUnwind 0x18004fbb8
api-ms-win-core-shutdown-l1-1-0.dll 1
InitiateSystemShutdownExW 0x18004fbd8
api-ms-win-core-string-l1-1-0.dll 2
CompareStringOrdinal 0x18004fbe8
CompareStringW 0x18004fbf0
api-ms-win-core-synch-l1-1-0.dll 25
AcquireSRWLockExclusive 0x18004fc38
AcquireSRWLockShared 0x18004fc50
CreateEventExW 0x18004fc10
CreateEventW 0x18004fc98
CreateMutexExW 0x18004fc28
CreateMutexW 0x18004fcb0
CreateSemaphoreExW 0x18004fc18
DeleteCriticalSection 0x18004fcb8
EnterCriticalSection 0x18004fca0
InitializeCriticalSection 0x18004fc20
InitializeCriticalSectionAndSpinCount 0x18004fc68
InitializeCriticalSectionEx 0x18004fcc0
InitializeSRWLock 0x18004fc30
LeaveCriticalSection 0x18004fc80
OpenEventW 0x18004fca8
OpenSemaphoreW 0x18004fc40
ReleaseMutex 0x18004fc88
ReleaseSemaphore 0x18004fc70
ReleaseSRWLockExclusive 0x18004fc00
ReleaseSRWLockShared 0x18004fc48
ResetEvent 0x18004fc90
SetEvent 0x18004fc08
WaitForMultipleObjectsEx 0x18004fc60
WaitForSingleObject 0x18004fc78
WaitForSingleObjectEx 0x18004fc58
api-ms-win-core-synch-l1-2-0.dll 4
InitOnceBeginInitialize 0x18004fce0
InitOnceComplete 0x18004fcd8
InitOnceExecuteOnce 0x18004fcd0
Sleep 0x18004fce8
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetLocalTime 0x18004fd18
GetSystemTimeAsFileTime 0x18004fd10
GetTickCount 0x18004fd00
GetTickCount64 0x18004fcf8
GetVersionExW 0x18004fd08
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x18004fd28
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18004fd50
CreateThreadpoolTimer 0x18004fd48
SetThreadpoolTimer 0x18004fd40
WaitForThreadpoolTimerCallbacks 0x18004fd38
api-ms-win-core-threadpool-legacy-l1-1-0.dll 2
CreateTimerQueueTimer 0x18004fd68
DeleteTimerQueueTimer 0x18004fd60
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x18004fd78
SystemTimeToFileTime 0x18004fd80
api-ms-win-core-url-l1-1-0.dll 1
ParseURLW 0x18004fd90
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x18004fda8
EncodePointer 0x18004fda0
api-ms-win-core-winrt-error-l1-1-0.dll 2
RoOriginateError 0x18004fdb8
RoTransformError 0x18004fdc0
api-ms-win-core-winrt-error-l1-1-1.dll 3
IsErrorPropagationEnabled 0x18004fdd0
RoGetMatchingRestrictedErrorInfo 0x18004fde0
RoReportFailedDelegate 0x18004fdd8
api-ms-win-core-winrt-l1-1-0.dll 2
RoActivateInstance 0x18004fdf8
RoGetActivationFactory 0x18004fdf0
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll 1
RoCreatePropertySetSerializer 0x18004fe08
api-ms-win-core-winrt-string-l1-1-0.dll 6
WindowsCreateString 0x18004fe20
WindowsCreateStringReference 0x18004fe38
WindowsDeleteString 0x18004fe18
WindowsDuplicateString 0x18004fe40
WindowsGetStringRawBuffer 0x18004fe30
WindowsSubstringWithSpecifiedLength 0x18004fe28
api-ms-win-crt-math-l1-1-0.dll 1
ceilf 0x18004fe50
api-ms-win-crt-private-l1-1-0.dll 40
__C_specific_handler 0x18004fed0
__CxxFrameHandler3 0x18004fed8
__CxxFrameHandler4 0x18004ff88
__std_terminate 0x18004ff80
_CxxThrowException 0x18004fee0
_o___std_exception_copy 0x18004ff30
_o___std_exception_destroy 0x18004ff28
_o___std_type_info_destroy_list 0x18004ff20
_o___stdio_common_vsnprintf_s 0x18004ff18
_o___stdio_common_vsprintf 0x18004ff10
_o___stdio_common_vswprintf 0x18004fee8
_o__callnewh 0x18004ff68
_o__cexit 0x18004ff60
_o__configure_narrow_argv 0x18004ff58
_o__crt_atexit 0x18004ff50
_o__errno 0x18004ff48
_o__execute_onexit_table 0x18004ff40
_o__get_errno 0x18004ff38
_o__initialize_narrow_environment 0x18004ff08
_o__initialize_onexit_table 0x18004ff00
_o__invalid_parameter_noinfo 0x18004fef8
_o__invalid_parameter_noinfo_noreturn 0x18004fef0
_o__purecall 0x18004fe60
_o__register_onexit_function 0x18004fe68
_o__seh_filter_dll 0x18004fe70
_o__set_errno 0x18004fe78
_o__wcsicmp 0x18004fe80
_o__wcsnicmp 0x18004fe88
_o_free 0x18004fe98
_o_malloc 0x18004fea0
_o_realloc 0x18004fea8
_o_terminate 0x18004feb0
_o_toupper 0x18004feb8
_o_wcstok_s 0x18004fec0
_o_wcstol 0x18004fec8
memcmp 0x18004ff90
memcpy 0x18004ff98
memmove 0x18004fe90
wcschr 0x18004ff78
wcsrchr 0x18004ff70
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x18004ffa8
_initterm_e 0x18004ffb0
api-ms-win-crt-string-l1-1-0.dll 2
memset 0x18004ffc0
wcscspn 0x18004ffc8
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x18004fff0
GetTraceEnableLevel 0x18004ffd8
GetTraceLoggerHandle 0x18004fff8
RegisterTraceGuidsW 0x18004ffe8
TraceMessage 0x18004ffe0
UnregisterTraceGuids 0x180050000
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x180050028
EventRegister 0x180050030
EventSetInformation 0x180050020
EventUnregister 0x180050018
EventWriteTransfer 0x180050010
api-ms-win-ntuser-ie-message-l1-1-0.dll 5
DispatchMessageW 0x180050058
MsgWaitForMultipleObjectsEx 0x180050048
PeekMessageW 0x180050060
PostQuitMessage 0x180050040
TranslateMessage 0x180050050
api-ms-win-ntuser-sysparams-l1-1-0.dll 2
GetMonitorInfoW 0x180050070
GetSystemMetrics 0x180050078
api-ms-win-oobe-notification-l1-1-0.dll 1
OOBEComplete 0x180050088
api-ms-win-rtcore-ntuser-private-l1-1-0.dll 2
CreateWindowInBand 0x1800500a0
GetWindowBand 0x180050098
api-ms-win-rtcore-ntuser-window-l1-1-0.dll 14
CreateWindowExW 0x1800500b8
DefWindowProcW 0x1800500f8
DestroyWindow 0x1800500d8
EnumWindows 0x1800500b0
FindWindowW 0x1800500e0
GetPropW 0x1800500d0
GetWindowThreadProcessId 0x1800500c0
IsWindowVisible 0x180050118
RegisterClassExW 0x180050108
SetForegroundWindow 0x1800500e8
SetPropW 0x1800500c8
SetWindowPos 0x1800500f0
ShowWindow 0x180050110
UnregisterClassW 0x180050100
api-ms-win-security-base-l1-1-0.dll 11
AdjustTokenPrivileges 0x180050170
AllocateAndInitializeSid 0x180050158
CopySid 0x180050178
CreateWellKnownSid 0x180050148
EqualSid 0x180050160
GetLengthSid 0x180050168
GetTokenInformation 0x180050128
ImpersonateLoggedOnUser 0x180050138
IsValidSid 0x180050140
RevertToSelf 0x180050130
SetTokenInformation 0x180050150
api-ms-win-security-lsalookup-l1-1-2.dll 1
LsaLookupUserAccountType 0x180050188
api-ms-win-security-lsalookup-l2-1-0.dll 3
LookupAccountNameW 0x180050198
LookupAccountSidW 0x1800501a0
LookupPrivilegeValueW 0x1800501a8
api-ms-win-security-lsapolicy-l1-1-0.dll 6
LsaClose 0x1800501c8
LsaFreeMemory 0x1800501d0
LsaLookupNames2 0x1800501c0
LsaOpenPolicy 0x1800501e0
LsaRetrievePrivateData 0x1800501d8
LsaStorePrivateData 0x1800501b8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800501f8
ConvertStringSidToSidW 0x1800501f0
api-ms-win-shcore-comhelpers-l1-1-0.dll 1
IUnknown_QueryService 0x180050208
api-ms-win-shcore-obsolete-l1-1-0.dll 1
SHStrDupW 0x180050218
api-ms-win-shcore-registry-l1-1-0.dll 2
SHDeleteKeyW 0x180050228
SHDeleteValueW 0x180050230
api-ms-win-shcore-scaling-l1-1-1.dll 1
GetDpiForMonitor 0x180050240
api-ms-win-shcore-stream-l1-1-0.dll 1
IStream_Write 0x180050250
api-ms-win-shcore-taskpool-l1-1-0.dll 1
SHTaskPoolQueueTask 0x180050260
api-ms-win-shcore-thread-l1-1-0.dll 2
SHCreateThreadWithHandle 0x180050278
SHGetThreadRef 0x180050270
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x180050288
credui.dll 1
CredUnPackAuthenticationBufferW 0x180050298
CRYPT32.dll 1
CryptProtectData 0x18004f6e0
DUI70.dll 8
?Create@RichText@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z 0x18004f6f8
?Destroy@Element@DirectUI@@QEAAJ_N@Z 0x18004f700
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z 0x18004f718
?SetAccRole@Element@DirectUI@@QEAAJH@Z 0x18004f710
?SetConstrainLayout@RichText@DirectUI@@QEAAJH@Z 0x18004f708
?SetContentAlign@Element@DirectUI@@QEAAJH@Z 0x18004f6f0
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z 0x18004f728
?SetID@Element@DirectUI@@QEAAJPEBG@Z 0x18004f720
msvcp_win.dll 30
_Cnd_broadcast 0x1800502f8
_Cnd_destroy_in_situ 0x180050320
_Cnd_init_in_situ 0x180050388
_Cnd_register_at_thread_exit 0x180050368
_Cnd_timedwait 0x180050360
_Cnd_unregister_at_thread_exit 0x180050370
_Cnd_wait 0x180050328
_Mtx_current_owns 0x180050358
_Mtx_destroy_in_situ 0x180050308
_Mtx_init_in_situ 0x1800502b0
_Mtx_lock 0x1800502b8
_Mtx_unlock 0x1800502d0
_Query_perf_counter 0x1800502e8
_Query_perf_frequency 0x180050338
_Xtime_get_ticks 0x180050340
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z 0x1800502a8
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z 0x180050378
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z 0x1800502c8
?__ExceptionPtrCreate@@YAXPEAX@Z 0x180050390
?__ExceptionPtrDestroy@@YAXPEAX@Z 0x180050380
?__ExceptionPtrToBool@@YA_NPEBX@Z 0x180050310
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z 0x1800502d8
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x180050300
?_Syserror_map@std@@YAPEBDH@Z 0x1800502e0
?_Throw_C_error@std@@YAXH@Z 0x1800502c0
?_Throw_Cpp_error@std@@YAXH@Z 0x1800502f0
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z 0x180050318
?_Xinvalid_argument@std@@YAXPEBD@Z 0x180050350
?_Xlength_error@std@@YAXPEBD@Z 0x180050330
?_Xout_of_range@std@@YAXPEBD@Z 0x180050348
netutils.dll 1
NetApiBufferFree 0x1800503a0
ntdll.dll 13
NtQueryInformationToken 0x1800503f8
NtQueryWnfStateData 0x1800503d0
NtSetInformationFile 0x1800503c8
RtlAllocateHeap 0x180050410
RtlCompareUnicodeString 0x180050400
RtlFreeHeap 0x1800503b0
RtlInitString 0x1800503d8
RtlInitUnicodeString 0x1800503b8
RtlNtStatusToDosError 0x1800503c0
RtlNtStatusToDosErrorNoTeb 0x180050408
RtlPublishWnfStateData 0x1800503e8
RtlSubscribeWnfStateChangeNotification 0x1800503f0
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800503e0
ole32.dll 1
CoAllowSetForegroundWindow 0x180050420
OLEAUT32.dll 2
SysAllocString 0x18004f738
SysFreeString 0x18004f740
policymanager.dll 2
PolicyManager_FreeGetPolicyData 0x180050430
PolicyManager_GetPolicy 0x180050438
samcli.dll 4
NetLocalGroupDelMembers 0x180050458
NetUserDel 0x180050448
NetUserGetInfo 0x180050450
NetUserSetInfo 0x180050460
SHCORE.dll 1
0x18004f750
SLC.dll 1
SLGetWindowsInformationDWORD 0x18004f760
USER32.dll 8
CallNextHookEx 0x18004f7a0
GetAsyncKeyState 0x18004f7a8
LoadCursorW 0x18004f780
MonitorFromPoint 0x18004f788
MonitorFromWindow 0x18004f770
SetCursor 0x18004f778
SetWindowsHookExW 0x18004f790
UnhookWindowsHookEx 0x18004f798
USERENV.dll 1
DeleteProfileW 0x18004f7b8
wkscli.dll 1
NetGetJoinInformation 0x180050470