UXInit.dll

Description: Windows User Experience Session Initialization Dll

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 32-bit

Operating System: Windows NT

SHA256: 9de14c6473831df716df03a913946d25

File Size: 83.5 KB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 15

Exported Functions

  • ThemeWatchForStart (Ordinal: 1, Address: 0x35b0)
  • (Ordinal: 2, Address: 0x121ef)
  • ThemeUserLogoff (Ordinal: 3, Address: 0xfe50)
  • ThemeUserLogon (Ordinal: 4, Address: 0xfe80)
  • ThemeUserStartShell (Ordinal: 5, Address: 0xfec0)
  • ThemeUserTSReconnect (Ordinal: 6, Address: 0xfee0)
  • ThemesOnCreateSession (Ordinal: 7, Address: 0x3420)
  • ThemesOnTerminateSession (Ordinal: 8, Address: 0x2a10)
  • ThemesOnLogon (Ordinal: 9, Address: 0x5d90)
  • ThemesOnLogoff (Ordinal: 10, Address: 0x2e70)
  • ThemesOnReconnect (Ordinal: 11, Address: 0xfef0)
  • ThemesOnDisconnect (Ordinal: 12, Address: 0xb330)
  • ThemesOnEarlyCreateSession (Ordinal: 13, Address: 0x3580)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateGuid (Address: 0x10014068)
  • StringFromGUID2 (Address: 0x10014064)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10014078)
  • IsDebuggerPresent (Address: 0x10014070)
  • OutputDebugStringW (Address: 0x10014074)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10014080)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10014088)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10014098)
  • SetLastError (Address: 0x1001409c)
  • SetUnhandledExceptionFilter (Address: 0x10014090)
  • UnhandledExceptionFilter (Address: 0x10014094)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x100140a8)
  • GetFileSize (Address: 0x100140ac)
  • GetFinalPathNameByHandleW (Address: 0x100140b8)
  • ReadFile (Address: 0x100140a4)
  • SetFilePointer (Address: 0x100140b4)
  • WriteFile (Address: 0x100140b0)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x100140c0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100140cc)
  • DuplicateHandle (Address: 0x100140c8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100140e0)
  • HeapAlloc (Address: 0x100140d4)
  • HeapFree (Address: 0x100140dc)
  • HeapReAlloc (Address: 0x100140d8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x100140ec)
  • LocalFree (Address: 0x100140e8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • RegisterWaitForSingleObject (Address: 0x100140f8)
  • UnregisterWait (Address: 0x100140f4)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x10014120)
  • FreeLibrary (Address: 0x10014104)
  • GetModuleFileNameA (Address: 0x10014108)
  • GetModuleHandleExW (Address: 0x10014114)
  • GetModuleHandleW (Address: 0x10014124)
  • GetProcAddress (Address: 0x1001411c)
  • LoadLibraryExW (Address: 0x10014110)
  • LoadResource (Address: 0x1001410c)
  • LockResource (Address: 0x10014100)
  • SizeofResource (Address: 0x10014118)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1001412c)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • GetUserDefaultUILanguage (Address: 0x10014134)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x10014144)
  • MapViewOfFile (Address: 0x10014140)
  • UnmapViewOfFile (Address: 0x1001413c)
api-ms-win-core-path-l1-1-0.dll
  • PathCchRemoveFileSpec (Address: 0x1001414c)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x10014154)
api-ms-win-core-processthreads-l1-1-0.dll
  • ExitThread (Address: 0x10014168)
  • GetCurrentProcess (Address: 0x1001415c)
  • GetCurrentProcessId (Address: 0x10014178)
  • GetCurrentThread (Address: 0x10014170)
  • GetCurrentThreadId (Address: 0x10014174)
  • OpenProcessToken (Address: 0x1001416c)
  • OpenThreadToken (Address: 0x10014164)
  • SetThreadToken (Address: 0x1001417c)
  • TerminateProcess (Address: 0x10014160)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10014184)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100141a4)
  • RegCreateKeyExW (Address: 0x100141a8)
  • RegDeleteValueW (Address: 0x1001418c)
  • RegEnumValueW (Address: 0x10014194)
  • RegOpenCurrentUser (Address: 0x100141a0)
  • RegOpenKeyExW (Address: 0x1001419c)
  • RegQueryValueExW (Address: 0x10014198)
  • RegSetValueExW (Address: 0x10014190)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x100141b0)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x100141bc)
  • lstrlenW (Address: 0x100141b8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10014208)
  • AcquireSRWLockShared (Address: 0x100141d0)
  • CreateEventW (Address: 0x100141d4)
  • CreateMutexExW (Address: 0x10014204)
  • CreateSemaphoreExW (Address: 0x100141e8)
  • DeleteCriticalSection (Address: 0x100141f0)
  • EnterCriticalSection (Address: 0x100141f4)
  • InitializeCriticalSection (Address: 0x100141dc)
  • InitializeCriticalSectionEx (Address: 0x100141ec)
  • LeaveCriticalSection (Address: 0x100141fc)
  • OpenSemaphoreW (Address: 0x100141e4)
  • ReleaseMutex (Address: 0x100141f8)
  • ReleaseSemaphore (Address: 0x100141d8)
  • ReleaseSRWLockExclusive (Address: 0x100141c4)
  • ReleaseSRWLockShared (Address: 0x100141cc)
  • ResetEvent (Address: 0x100141c8)
  • WaitForSingleObject (Address: 0x10014200)
  • WaitForSingleObjectEx (Address: 0x100141e0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x10014210)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10014218)
  • GetTickCount (Address: 0x1001421c)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1001422c)
  • CloseThreadpoolWait (Address: 0x10014224)
  • CreateThreadpoolTimer (Address: 0x10014234)
  • CreateThreadpoolWait (Address: 0x1001423c)
  • SetThreadpoolTimer (Address: 0x10014230)
  • SetThreadpoolWait (Address: 0x10014228)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10014238)
  • WaitForThreadpoolWaitCallbacks (Address: 0x10014240)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x10014248)
api-ms-win-core-threadpool-private-l1-1-0.dll
  • RegisterWaitForSingleObjectEx (Address: 0x10014250)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventWriteTransfer (Address: 0x10014258)
api-ms-win-shcore-scaling-l1-1-1.dll
  • RegisterScaleChangeEvent (Address: 0x10014260)
  • UnregisterScaleChangeEvent (Address: 0x10014264)
dwmapi.dll
  • (Address: 0x1001426c)
GDI32.dll
  • ClearBitmapAttributes (Address: 0x10014014)
  • CreateDIBSection (Address: 0x10014004)
  • CreateSessionMappedDIBSection (Address: 0x10014008)
  • DeleteObject (Address: 0x1001400c)
  • GetDeviceCaps (Address: 0x10014010)
  • SetBitmapAttributes (Address: 0x10014000)
msvcrt.dll
  • __dllonexit (Address: 0x100142a8)
  • _amsg_exit (Address: 0x100142c0)
  • _except_handler4_common (Address: 0x100142a0)
  • _initterm (Address: 0x100142b4)
  • _lock (Address: 0x100142b0)
  • _onexit (Address: 0x100142a4)
  • _purecall (Address: 0x10014290)
  • _unlock (Address: 0x100142ac)
  • _vsnwprintf (Address: 0x10014278)
  • _wcsicmp (Address: 0x10014280)
  • _XcptFilter (Address: 0x100142c4)
  • free (Address: 0x100142bc)
  • malloc (Address: 0x100142b8)
  • memcmp (Address: 0x10014298)
  • memcpy (Address: 0x10014294)
  • memcpy_s (Address: 0x100142c8)
  • memmove (Address: 0x1001429c)
  • memmove_s (Address: 0x1001427c)
  • memset (Address: 0x100142d0)
  • rand_s (Address: 0x10014274)
  • swprintf_s (Address: 0x1001428c)
  • wcschr (Address: 0x100142cc)
  • wcsncmp (Address: 0x10014284)
  • wcsrchr (Address: 0x10014288)
ntdll.dll
  • EtwEventRegister (Address: 0x1001431c)
  • EtwEventUnregister (Address: 0x10014320)
  • NtAlpcSendWaitReceivePort (Address: 0x10014318)
  • NtClose (Address: 0x100142f8)
  • NtConnectPort (Address: 0x100142ec)
  • NtCreateEvent (Address: 0x10014310)
  • NtCreateSection (Address: 0x100142e0)
  • NtDuplicateToken (Address: 0x10014300)
  • NtOpenSection (Address: 0x100142e4)
  • NtQuerySystemInformation (Address: 0x10014308)
  • NtSetInformationThread (Address: 0x100142fc)
  • RtlCompressBuffer (Address: 0x100142e8)
  • RtlDecompressBufferEx (Address: 0x10014324)
  • RtlDeleteCriticalSection (Address: 0x100142f0)
  • RtlGetCompressionWorkSpaceSize (Address: 0x100142d8)
  • RtlImageNtHeader (Address: 0x10014304)
  • RtlInitializeCriticalSection (Address: 0x100142f4)
  • RtlInitUnicodeString (Address: 0x10014314)
  • RtlNtStatusToDosError (Address: 0x1001430c)
  • RtlUnhandledExceptionFilter (Address: 0x100142dc)
USER32.dll
  • (Address: 0x10014020)
  • CloseDesktop (Address: 0x10014024)
  • DisplayConfigGetDeviceInfo (Address: 0x1001404c)
  • EnumDisplayDevicesW (Address: 0x10014044)
  • EnumDisplayMonitors (Address: 0x1001401c)
  • EnumDisplaySettingsW (Address: 0x10014048)
  • GetDC (Address: 0x1001403c)
  • GetDpiForMonitorInternal (Address: 0x10014058)
  • GetSystemMetrics (Address: 0x10014054)
  • GetThreadDesktop (Address: 0x10014030)
  • GetWindowDC (Address: 0x1001405c)
  • IsProcessDPIAware (Address: 0x10014038)
  • OpenInputDesktop (Address: 0x1001402c)
  • RegisterDManipHook (Address: 0x10014034)
  • ReleaseDC (Address: 0x10014040)
  • SetThreadDesktop (Address: 0x10014028)
  • SystemParametersInfoW (Address: 0x10014050)