UiaManager.dll
Description: UiaManager
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 32-bit
Operating System: Windows NT
SHA256: ef2b57e36228de449493fc9860fab208
File Size: 504.5 KB
Uploaded At: Dec. 1, 2025, 8:05 a.m.
Views: 20
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, VirtualAllocEx
Exported Functions
- UiaInitCrossMachineConnection (Ordinal: 1, Address: 0x59fc0)
- UiaInitCrossMachineConnectionW (Ordinal: 2, Address: 0x59fc0)
- DllCanUnloadNow (Ordinal: 3, Address: 0xeff0)
- DllGetClassObject (Ordinal: 4, Address: 0xdb10)
- GetProxyDllInfo (Ordinal: 5, Address: 0x2b910)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x100760c4)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalAddAtomW (Address: 0x100760d0)
- GlobalDeleteAtom (Address: 0x100760cc)
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromString (Address: 0x100760e8)
- CoCreateFreeThreadedMarshaler (Address: 0x100760d8)
- CoCreateInstance (Address: 0x100760e4)
- CoImpersonateClient (Address: 0x10076104)
- CoInitializeEx (Address: 0x100760f0)
- CoRegisterClassObject (Address: 0x100760f8)
- CoRevertToSelf (Address: 0x100760dc)
- CoRevokeClassObject (Address: 0x100760fc)
- CoTaskMemAlloc (Address: 0x100760e0)
- CoTaskMemFree (Address: 0x100760f4)
- CoUninitialize (Address: 0x100760ec)
- StringFromGUID2 (Address: 0x10076100)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- ObjectStublessClient10 (Address: 0x10076164)
- ObjectStublessClient11 (Address: 0x10076118)
- ObjectStublessClient12 (Address: 0x10076138)
- ObjectStublessClient13 (Address: 0x1007611c)
- ObjectStublessClient14 (Address: 0x10076128)
- ObjectStublessClient15 (Address: 0x10076134)
- ObjectStublessClient16 (Address: 0x10076150)
- ObjectStublessClient17 (Address: 0x10076114)
- ObjectStublessClient18 (Address: 0x10076140)
- ObjectStublessClient19 (Address: 0x1007615c)
- ObjectStublessClient20 (Address: 0x10076158)
- ObjectStublessClient21 (Address: 0x10076144)
- ObjectStublessClient22 (Address: 0x1007610c)
- ObjectStublessClient23 (Address: 0x10076110)
- ObjectStublessClient24 (Address: 0x1007612c)
- ObjectStublessClient25 (Address: 0x10076120)
- ObjectStublessClient3 (Address: 0x1007614c)
- ObjectStublessClient4 (Address: 0x10076124)
- ObjectStublessClient5 (Address: 0x10076160)
- ObjectStublessClient6 (Address: 0x10076130)
- ObjectStublessClient7 (Address: 0x10076154)
- ObjectStublessClient8 (Address: 0x1007613c)
- ObjectStublessClient9 (Address: 0x10076148)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x10076174)
- IsDebuggerPresent (Address: 0x1007616c)
- OutputDebugStringW (Address: 0x10076170)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1007617c)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x10076184)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1007619c)
- RaiseException (Address: 0x10076194)
- SetLastError (Address: 0x10076190)
- SetUnhandledExceptionFilter (Address: 0x10076198)
- UnhandledExceptionFilter (Address: 0x1007618c)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x100761ac)
- ReadFile (Address: 0x100761a8)
- WriteFile (Address: 0x100761a4)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x100761b4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x100761bc)
- HeapAlloc (Address: 0x100761c4)
- HeapFree (Address: 0x100761c0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x100761d0)
- LocalFree (Address: 0x100761cc)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x100761d8)
api-ms-win-core-io-l1-1-0.dll
- GetOverlappedResult (Address: 0x100761e0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- WTSGetActiveConsoleSessionId (Address: 0x100761e8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x10076200)
- GetModuleFileNameA (Address: 0x100761f4)
- GetModuleHandleExW (Address: 0x100761f0)
- GetModuleHandleW (Address: 0x100761fc)
- GetProcAddress (Address: 0x100761f8)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x10076208)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x10076210)
api-ms-win-core-marshal-l1-1-0.dll
- HWND_UserFree (Address: 0x10076224)
- HWND_UserMarshal (Address: 0x1007621c)
- HWND_UserSize (Address: 0x10076218)
- HWND_UserUnmarshal (Address: 0x10076220)
api-ms-win-core-memory-l1-1-0.dll
- ReadProcessMemory (Address: 0x10076234)
- VirtualAllocEx (Address: 0x1007622c)
- VirtualFreeEx (Address: 0x10076230)
api-ms-win-core-namedpipe-l1-1-0.dll
- ConnectNamedPipe (Address: 0x10076244)
- CreateNamedPipeW (Address: 0x10076240)
- SetNamedPipeHandleState (Address: 0x1007623c)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x10076264)
- GetCurrentProcessId (Address: 0x1007625c)
- GetCurrentThread (Address: 0x10076254)
- GetCurrentThreadId (Address: 0x10076260)
- OpenProcessToken (Address: 0x1007624c)
- OpenThreadToken (Address: 0x10076250)
- ProcessIdToSessionId (Address: 0x10076268)
- TerminateProcess (Address: 0x10076258)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x10076274)
- OpenProcess (Address: 0x10076270)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1007627c)
api-ms-win-core-realtime-l1-1-0.dll
- QueryUnbiasedInterruptTime (Address: 0x10076284)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x10076298)
- RegGetValueW (Address: 0x10076294)
- RegOpenKeyExW (Address: 0x1007628c)
- RegQueryValueExW (Address: 0x10076290)
api-ms-win-core-string-l1-1-0.dll
- CompareStringW (Address: 0x100762a0)
api-ms-win-core-string-l2-1-0.dll
- CharLowerW (Address: 0x100762a8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x100762b0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x100762cc)
- AcquireSRWLockShared (Address: 0x100762c0)
- CreateEventExW (Address: 0x10076300)
- CreateMutexExW (Address: 0x100762b8)
- CreateSemaphoreExW (Address: 0x100762f0)
- DeleteCriticalSection (Address: 0x100762c4)
- EnterCriticalSection (Address: 0x100762e4)
- InitializeCriticalSectionEx (Address: 0x100762d4)
- LeaveCriticalSection (Address: 0x100762d8)
- OpenSemaphoreW (Address: 0x100762e8)
- ReleaseMutex (Address: 0x100762c8)
- ReleaseSemaphore (Address: 0x100762e0)
- ReleaseSRWLockExclusive (Address: 0x100762bc)
- ReleaseSRWLockShared (Address: 0x100762f8)
- ResetEvent (Address: 0x100762fc)
- SetEvent (Address: 0x100762f4)
- SetWaitableTimer (Address: 0x100762ec)
- WaitForSingleObject (Address: 0x100762d0)
- WaitForSingleObjectEx (Address: 0x100762dc)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1007631c)
- InitOnceComplete (Address: 0x10076310)
- InitOnceExecuteOnce (Address: 0x10076314)
- Sleep (Address: 0x10076318)
- WaitOnAddress (Address: 0x10076308)
- WakeByAddressAll (Address: 0x1007630c)
api-ms-win-core-synch-l1-2-1.dll
- CreateWaitableTimerW (Address: 0x10076324)
- WaitForMultipleObjects (Address: 0x10076328)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x10076334)
- GetTickCount (Address: 0x10076330)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1007633c)
- CreateThreadpoolTimer (Address: 0x10076344)
- SetThreadpoolTimer (Address: 0x10076348)
- WaitForThreadpoolTimerCallbacks (Address: 0x10076340)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x10076354)
- EncodePointer (Address: 0x10076350)
api-ms-win-core-winrt-error-l1-1-0.dll
- RoOriginateError (Address: 0x10076360)
- SetRestrictedErrorInfo (Address: 0x1007635c)
api-ms-win-core-winrt-error-l1-1-1.dll
- RoGetMatchingRestrictedErrorInfo (Address: 0x10076368)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x10076370)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateString (Address: 0x10076378)
- WindowsCreateStringReference (Address: 0x1007637c)
- WindowsDeleteString (Address: 0x10076380)
- WindowsGetStringRawBuffer (Address: 0x10076384)
api-ms-win-crt-math-l1-1-0.dll
- _finite (Address: 0x1007638c)
- _isnan (Address: 0x10076390)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x1007640c)
- __std_terminate (Address: 0x10076408)
- __std_type_info_compare (Address: 0x10076404)
- _CxxThrowException (Address: 0x100763dc)
- _except_handler4_common (Address: 0x100763d8)
- _o___std_exception_copy (Address: 0x100763fc)
- _o___std_exception_destroy (Address: 0x100763f8)
- _o___std_type_info_destroy_list (Address: 0x100763f4)
- _o___stdio_common_vsnprintf_s (Address: 0x100763f0)
- _o___stdio_common_vswprintf (Address: 0x100763ec)
- _o__beginthreadex (Address: 0x100763e8)
- _o__callnewh (Address: 0x100763e4)
- _o__cexit (Address: 0x100763e0)
- _o__configure_narrow_argv (Address: 0x10076400)
- _o__crt_atexit (Address: 0x10076410)
- _o__errno (Address: 0x10076398)
- _o__execute_onexit_table (Address: 0x1007639c)
- _o__initialize_narrow_environment (Address: 0x100763a0)
- _o__initialize_onexit_table (Address: 0x100763a4)
- _o__invalid_parameter_noinfo (Address: 0x100763a8)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x100763ac)
- _o__purecall (Address: 0x100763b0)
- _o__register_onexit_function (Address: 0x100763b4)
- _o__seh_filter_dll (Address: 0x100763b8)
- _o__wcsicmp (Address: 0x100763c0)
- _o_ceil (Address: 0x100763c4)
- _o_free (Address: 0x100763c8)
- _o_malloc (Address: 0x100763cc)
- _o_terminate (Address: 0x100763d0)
- _o_towlower (Address: 0x100763d4)
- memcmp (Address: 0x10076418)
- memcpy (Address: 0x1007641c)
- memmove (Address: 0x100763bc)
- wcsstr (Address: 0x10076414)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x10076428)
- _initterm_e (Address: 0x10076424)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x10076430)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x1007643c)
- EventSetInformation (Address: 0x10076438)
- EventUnregister (Address: 0x10076444)
- EventWriteTransfer (Address: 0x10076440)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
- MsgWaitForMultipleObjects (Address: 0x1007644c)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
- DispatchMessageW (Address: 0x10076468)
- GetClassNameW (Address: 0x10076460)
- GetWindowLongW (Address: 0x10076464)
- PeekMessageW (Address: 0x10076454)
- PostThreadMessageW (Address: 0x10076458)
- SendMessageW (Address: 0x1007645c)
- TranslateMessage (Address: 0x1007646c)
api-ms-win-security-accesshlpr-l1-1-0.dll
- FreeTransientObjectSecurityDescriptor (Address: 0x10076474)
api-ms-win-security-base-l1-1-0.dll
- AllocateAndInitializeSid (Address: 0x1007647c)
- GetSidLengthRequired (Address: 0x10076488)
- GetSidSubAuthority (Address: 0x10076480)
- GetTokenInformation (Address: 0x1007648c)
- InitializeSid (Address: 0x10076484)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x10076494)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x100764a0)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1007649c)
CoreMessaging.dll
- CoreUICreate (Address: 0x10076000)
CoreUIComponents.dll
- CoreUIFactoryCreate (Address: 0x10076008)
msvcp_win.dll
- _Cnd_do_broadcast_at_thread_exit (Address: 0x10076584)
- _Lock_shared_ptr_spin_lock (Address: 0x100764d0)
- _Mtx_destroy_in_situ (Address: 0x10076598)
- _Mtx_init_in_situ (Address: 0x100764e0)
- _Mtx_lock (Address: 0x100764f8)
- _Mtx_unlock (Address: 0x10076500)
- _Thrd_detach (Address: 0x100764cc)
- _Thrd_id (Address: 0x10076588)
- _Thrd_join (Address: 0x1007658c)
- _Unlock_shared_ptr_spin_lock (Address: 0x10076528)
- ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x10076558)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1007654c)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x100764f0)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ (Address: 0x10076510)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ (Address: 0x10076568)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x100764fc)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x10076590)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ (Address: 0x10076504)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x10076594)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100764f4)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x10076550)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1007656c)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x100764c8)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ (Address: 0x1007651c)
- ??1_Lockit@std@@QAE@XZ (Address: 0x10076554)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x10076580)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x1007657c)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ (Address: 0x10076564)
- ??Bid@locale@std@@QAEIXZ (Address: 0x10076544)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100764a8)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100764b4)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x100764c0)
- ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ (Address: 0x100764e4)
- ?flags@ios_base@std@@QBEHXZ (Address: 0x1007650c)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ (Address: 0x10076534)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z (Address: 0x10076570)
- ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x10076540)
- ?good@ios_base@std@@QBE_NXZ (Address: 0x1007653c)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10076578)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x10076548)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x10076514)
- ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10076520)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ (Address: 0x10076574)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x10076530)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z (Address: 0x100764dc)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x100764bc)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z (Address: 0x10076524)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z (Address: 0x100764c4)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z (Address: 0x10076560)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ (Address: 0x100764ac)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z (Address: 0x100764e8)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z (Address: 0x10076518)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ (Address: 0x1007652c)
- ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x10076538)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ (Address: 0x100764b8)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x10076508)
- ?widen@?$ctype@G@std@@QBEGD@Z (Address: 0x1007655c)
- ?width@ios_base@std@@QAE_J_J@Z (Address: 0x100764b0)
- ?width@ios_base@std@@QBE_JXZ (Address: 0x100764ec)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z (Address: 0x100764d4)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z (Address: 0x100764d8)
OLEAUT32.dll
- BSTR_UserFree (Address: 0x10076030)
- BSTR_UserMarshal (Address: 0x10076050)
- BSTR_UserSize (Address: 0x10076024)
- BSTR_UserUnmarshal (Address: 0x10076064)
- LPSAFEARRAY_UserFree (Address: 0x10076054)
- LPSAFEARRAY_UserMarshal (Address: 0x10076034)
- LPSAFEARRAY_UserSize (Address: 0x10076038)
- LPSAFEARRAY_UserUnmarshal (Address: 0x10076058)
- SafeArrayAccessData (Address: 0x1007604c)
- SafeArrayCreateVector (Address: 0x10076014)
- SafeArrayDestroy (Address: 0x10076018)
- SafeArrayGetDim (Address: 0x1007603c)
- SafeArrayGetLBound (Address: 0x1007602c)
- SafeArrayGetUBound (Address: 0x10076028)
- SafeArrayGetVartype (Address: 0x10076040)
- SafeArrayUnaccessData (Address: 0x10076010)
- SysAllocString (Address: 0x1007601c)
- SysAllocStringLen (Address: 0x1007606c)
- SysFreeString (Address: 0x10076020)
- VARIANT_UserFree (Address: 0x1007605c)
- VARIANT_UserMarshal (Address: 0x10076060)
- VARIANT_UserSize (Address: 0x10076070)
- VARIANT_UserUnmarshal (Address: 0x10076068)
- VariantClear (Address: 0x10076048)
- VariantInit (Address: 0x10076044)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1007608c)
- CStdStubBuffer_Connect (Address: 0x10076098)
- CStdStubBuffer_CountRefs (Address: 0x100760ac)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x100760bc)
- CStdStubBuffer_DebugServerRelease (Address: 0x100760a8)
- CStdStubBuffer_Disconnect (Address: 0x100760a4)
- CStdStubBuffer_Invoke (Address: 0x10076080)
- CStdStubBuffer_IsIIDSupported (Address: 0x1007609c)
- CStdStubBuffer_QueryInterface (Address: 0x100760b4)
- IUnknown_AddRef_Proxy (Address: 0x100760b8)
- IUnknown_QueryInterface_Proxy (Address: 0x100760a0)
- IUnknown_Release_Proxy (Address: 0x10076090)
- NdrCStdStubBuffer_Release (Address: 0x10076084)
- NdrDllCanUnloadNow (Address: 0x10076088)
- NdrDllGetClassObject (Address: 0x10076094)
- NdrOleAllocate (Address: 0x100760b0)
- NdrOleFree (Address: 0x1007607c)
- UuidFromStringW (Address: 0x10076078)