Windows.UI.dll

Description: Windows Runtime UI Foundation DLL

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 71cb637b901b7eaae93272cd7b9dadf3

File Size: 976.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 1500, Address: 0x43b90)
DllCanUnloadNow (Ordinal: 1501, Address: 0x52a70)
DllGetActivationFactory (Ordinal: 1502, Address: 0x55450)
DllGetClassObject (Ordinal: 1503, Address: 0x52b60)
DllRegisterServer (Ordinal: 1504, Address: 0x84720)
DllUnregisterServer (Ordinal: 1505, Address: 0x84740)
(Ordinal: 1600, Address: 0x8b260)
CreateControlInput (Ordinal: 1601, Address: 0x8dc40)
(Ordinal: 1602, Address: 0x8b290)
CreateControlInputEx (Ordinal: 1603, Address: 0x3dd90)
(Ordinal: 1604, Address: 0x8b2d0)
(Ordinal: 1700, Address: 0x39fd0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100dc114)

api-ms-win-core-atoms-l1-1-0.dll

GlobalAddAtomW (Address: 0x100dc11c)
GlobalDeleteAtom (Address: 0x100dc120)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100dc12c)
IsDebuggerPresent (Address: 0x100dc128)
OutputDebugStringW (Address: 0x100dc130)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100dc138)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100dc140)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100dc148)
RaiseException (Address: 0x100dc14c)
SetLastError (Address: 0x100dc158)
SetUnhandledExceptionFilter (Address: 0x100dc150)
UnhandledExceptionFilter (Address: 0x100dc154)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x100dc160)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100dc16c)
DuplicateHandle (Address: 0x100dc168)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100dc178)
HeapAlloc (Address: 0x100dc174)
HeapFree (Address: 0x100dc17c)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x100dc184)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x100dc18c)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100dc1a8)
GetModuleFileNameA (Address: 0x100dc194)
GetModuleFileNameW (Address: 0x100dc198)
GetModuleHandleExW (Address: 0x100dc19c)
GetModuleHandleW (Address: 0x100dc1a0)
GetProcAddress (Address: 0x100dc1a4)
LoadLibraryExW (Address: 0x100dc1ac)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100dc1b4)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100dc1c0)
GetCurrentProcessId (Address: 0x100dc1c8)
GetCurrentThread (Address: 0x100dc1d0)
GetCurrentThreadId (Address: 0x100dc1cc)
GetProcessId (Address: 0x100dc1bc)
OpenProcessToken (Address: 0x100dc1c4)
TerminateProcess (Address: 0x100dc1e4)
TlsAlloc (Address: 0x100dc1d4)
TlsFree (Address: 0x100dc1d8)
TlsGetValue (Address: 0x100dc1dc)
TlsSetValue (Address: 0x100dc1e0)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x100dc1f0)
OpenProcess (Address: 0x100dc1ec)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100dc1fc)
QueryPerformanceFrequency (Address: 0x100dc1f8)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x100dc204)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100dc218)
RegGetValueW (Address: 0x100dc214)
RegOpenKeyExW (Address: 0x100dc20c)
RegQueryValueExW (Address: 0x100dc210)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x100dc220)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrStrIW (Address: 0x100dc228)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100dc230)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100dc274)
AcquireSRWLockShared (Address: 0x100dc254)
CreateEventExW (Address: 0x100dc23c)
CreateEventW (Address: 0x100dc244)
CreateMutexExW (Address: 0x100dc258)
CreateSemaphoreExW (Address: 0x100dc280)
DeleteCriticalSection (Address: 0x100dc25c)
EnterCriticalSection (Address: 0x100dc27c)
InitializeCriticalSectionEx (Address: 0x100dc238)
InitializeSRWLock (Address: 0x100dc260)
LeaveCriticalSection (Address: 0x100dc268)
OpenSemaphoreW (Address: 0x100dc26c)
ReleaseMutex (Address: 0x100dc250)
ReleaseSemaphore (Address: 0x100dc278)
ReleaseSRWLockExclusive (Address: 0x100dc284)
ReleaseSRWLockShared (Address: 0x100dc264)
SetEvent (Address: 0x100dc24c)
SleepEx (Address: 0x100dc248)
WaitForSingleObject (Address: 0x100dc240)
WaitForSingleObjectEx (Address: 0x100dc270)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100dc294)
InitOnceComplete (Address: 0x100dc298)
InitOnceExecuteOnce (Address: 0x100dc28c)
Sleep (Address: 0x100dc290)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100dc2a4)
GetTickCount (Address: 0x100dc2a0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x100dc2ac)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100dc2c0)
CloseThreadpoolWait (Address: 0x100dc2c4)
CreateThreadpoolTimer (Address: 0x100dc2cc)
CreateThreadpoolWait (Address: 0x100dc2d0)
SetThreadpoolTimer (Address: 0x100dc2bc)
SetThreadpoolWait (Address: 0x100dc2b8)
WaitForThreadpoolTimerCallbacks (Address: 0x100dc2b4)
WaitForThreadpoolWaitCallbacks (Address: 0x100dc2c8)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x100dc2d8)
DeleteTimerQueueTimer (Address: 0x100dc2dc)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100dc2e8)
EncodePointer (Address: 0x100dc2e4)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x100dc300)
GetTraceEnableLevel (Address: 0x100dc304)
GetTraceLoggerHandle (Address: 0x100dc2fc)
RegisterTraceGuidsW (Address: 0x100dc2f0)
TraceMessage (Address: 0x100dc2f4)
UnregisterTraceGuids (Address: 0x100dc2f8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100dc31c)
EventRegister (Address: 0x100dc318)
EventSetInformation (Address: 0x100dc310)
EventUnregister (Address: 0x100dc30c)
EventWriteTransfer (Address: 0x100dc314)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x100dc328)
GetTokenInformation (Address: 0x100dc324)

api-ms-win-security-lsalookup-l1-1-0.dll

LsaLookupClose (Address: 0x100dc330)
LsaLookupFreeMemory (Address: 0x100dc33c)
LsaLookupGetDomainInfo (Address: 0x100dc338)
LsaLookupOpenLocalPolicy (Address: 0x100dc334)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x100dc344)

api-ms-win-shcore-scaling-l1-1-0.dll

GetScaleFactorForDevice (Address: 0x100dc34c)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x100dc358)
GetScaleFactorForMonitor (Address: 0x100dc354)

combase.dll

(Address: 0x100dc360)
(Address: 0x100dc364)
(Address: 0x100dc368)
(Address: 0x100dc36c)
(Address: 0x100dc370)
(Address: 0x100dc374)
(Address: 0x100dc378)
(Address: 0x100dc37c)
(Address: 0x100dc380)
(Address: 0x100dc384)
(Address: 0x100dc388)
(Address: 0x100dc38c)
(Address: 0x100dc390)
(Address: 0x100dc394)
(Address: 0x100dc398)
(Address: 0x100dc39c)
(Address: 0x100dc3ac)
(Address: 0x100dc3b0)
(Address: 0x100dc3b8)
(Address: 0x100dc3c4)
(Address: 0x100dc3c8)
(Address: 0x100dc3d0)
(Address: 0x100dc3d4)
(Address: 0x100dc3d8)
(Address: 0x100dc3dc)
(Address: 0x100dc3e0)
(Address: 0x100dc3e8)
(Address: 0x100dc3f0)
(Address: 0x100dc3f4)
(Address: 0x100dc3fc)
(Address: 0x100dc400)
(Address: 0x100dc404)
(Address: 0x100dc408)
(Address: 0x100dc40c)
(Address: 0x100dc410)
(Address: 0x100dc41c)
(Address: 0x100dc420)
(Address: 0x100dc424)
(Address: 0x100dc42c)
CStdStubBuffer_AddRef (Address: 0x100dc3e4)
CStdStubBuffer_Connect (Address: 0x100dc3a0)
CStdStubBuffer_CountRefs (Address: 0x100dc3cc)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x100dc414)
CStdStubBuffer_DebugServerRelease (Address: 0x100dc3bc)
CStdStubBuffer_Disconnect (Address: 0x100dc3b4)
CStdStubBuffer_Invoke (Address: 0x100dc428)
CStdStubBuffer_IsIIDSupported (Address: 0x100dc3a8)
CStdStubBuffer_QueryInterface (Address: 0x100dc3c0)
CStdStubBuffer2_Connect (Address: 0x100dc3a4)
CStdStubBuffer2_CountRefs (Address: 0x100dc418)
CStdStubBuffer2_Disconnect (Address: 0x100dc3f8)
CStdStubBuffer2_QueryInterface (Address: 0x100dc3ec)

InputHost.dll

CreateInputSystemClientConnection (Address: 0x100dc000)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100dc4bc)
__dllonexit (Address: 0x100dc43c)
_amsg_exit (Address: 0x100dc458)
_callnewh (Address: 0x100dc4cc)
_CIatan2 (Address: 0x100dc4b0)
_CIcos (Address: 0x100dc4ac)
_CIfmod (Address: 0x100dc4a8)
_CIsin (Address: 0x100dc4a4)
_CIsqrt (Address: 0x100dc4a0)
_CxxThrowException (Address: 0x100dc49c)
_except_handler4_common (Address: 0x100dc4b8)
_finite (Address: 0x100dc4c8)
_ftol2 (Address: 0x100dc498)
_ftol2_sse (Address: 0x100dc494)
_initterm (Address: 0x100dc44c)
_isnan (Address: 0x100dc4c4)
_lock (Address: 0x100dc444)
_onexit (Address: 0x100dc438)
_purecall (Address: 0x100dc474)
_unlock (Address: 0x100dc440)
_vsnprintf_s (Address: 0x100dc464)
_vsnwprintf (Address: 0x100dc480)
_XcptFilter (Address: 0x100dc45c)
??_V@YAXPAX@Z (Address: 0x100dc484)
??0exception@@QAE@ABV0@@Z (Address: 0x100dc468)
??0exception@@QAE@XZ (Address: 0x100dc46c)
??1exception@@UAE@XZ (Address: 0x100dc470)
??1type_info@@UAE@XZ (Address: 0x100dc434)
??3@YAXPAX@Z (Address: 0x100dc478)
?terminate@@YAXXZ (Address: 0x100dc448)
floor (Address: 0x100dc490)
free (Address: 0x100dc454)
malloc (Address: 0x100dc450)
memcmp (Address: 0x100dc48c)
memcpy (Address: 0x100dc488)
memcpy_s (Address: 0x100dc47c)
memmove (Address: 0x100dc4b4)
memmove_s (Address: 0x100dc460)
memset (Address: 0x100dc4d0)
realloc (Address: 0x100dc4c0)

ntdll.dll

NtQueryWnfStateData (Address: 0x100dc4e8)
RtlGetDeviceFamilyInfoEnum (Address: 0x100dc4ec)
RtlIsMultiSessionSku (Address: 0x100dc4e4)
RtlIsParentOfChildAppContainer (Address: 0x100dc4f0)
RtlLoadString (Address: 0x100dc4d8)
RtlSubscribeWnfStateChangeNotification (Address: 0x100dc4dc)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100dc4e0)

OLEAUT32.dll

VariantClear (Address: 0x100dc008)

RPCRT4.dll

IUnknown_AddRef_Proxy (Address: 0x100dc010)
IUnknown_QueryInterface_Proxy (Address: 0x100dc024)
IUnknown_Release_Proxy (Address: 0x100dc034)
NdrCStdStubBuffer_Release (Address: 0x100dc03c)
NdrCStdStubBuffer2_Release (Address: 0x100dc028)
NdrDllCanUnloadNow (Address: 0x100dc038)
NdrDllGetClassObject (Address: 0x100dc030)
NdrDllRegisterProxy (Address: 0x100dc02c)
NdrDllUnregisterProxy (Address: 0x100dc044)
NdrOleAllocate (Address: 0x100dc020)
NdrOleFree (Address: 0x100dc014)
NdrStubCall2 (Address: 0x100dc018)
NdrStubForwardingFunction (Address: 0x100dc01c)
UuidHash (Address: 0x100dc040)

SHCORE.dll

(Address: 0x100dc04c)
(Address: 0x100dc054)
(Address: 0x100dc058)
SHTaskPoolAllowThreadReuse (Address: 0x100dc05c)
SHTaskPoolQueueTask (Address: 0x100dc050)

TextInputFramework.dll

NavigateFocusInfoCreate (Address: 0x100dc064)

USER32.dll

(Address: 0x100dc098)
AreDpiAwarenessContextsEqual (Address: 0x100dc090)
DispatchMessageW (Address: 0x100dc06c)
GetAsyncKeyState (Address: 0x100dc0c4)
GetAwarenessFromDpiAwarenessContext (Address: 0x100dc074)
GetClassInfoExW (Address: 0x100dc088)
GetDpiForSystem (Address: 0x100dc07c)
GetDpiForWindow (Address: 0x100dc094)
GetKeyState (Address: 0x100dc0c8)
GetMessageTime (Address: 0x100dc0c0)
GetMessageW (Address: 0x100dc070)
GetPointerDevice (Address: 0x100dc09c)
GetPointerDeviceProperties (Address: 0x100dc0a4)
GetPointerDeviceRects (Address: 0x100dc0a0)
GetPointerDevices (Address: 0x100dc0b0)
GetPointerInfo (Address: 0x100dc0ac)
GetPointerInfoHistory (Address: 0x100dc0bc)
GetPointerInputTransform (Address: 0x100dc0a8)
GetPointerTouchInfoHistory (Address: 0x100dc0b8)
GetQueueStatus (Address: 0x100dc100)
GetRawPointerDeviceData (Address: 0x100dc0b4)
GetThreadDpiAwarenessContext (Address: 0x100dc078)
GetWindowDpiAwarenessContext (Address: 0x100dc08c)
GetWindowFeedbackSetting (Address: 0x100dc0f4)
GetWindowLongW (Address: 0x100dc0d8)
IsGUIThread (Address: 0x100dc0ec)
PeekMessageW (Address: 0x100dc0fc)
PostMessageW (Address: 0x100dc0e8)
PostQuitMessage (Address: 0x100dc0dc)
PostThreadMessageW (Address: 0x100dc080)
RegisterClassExW (Address: 0x100dc0cc)
RegisterWindowMessageW (Address: 0x100dc0e4)
SendMessageW (Address: 0x100dc0e0)
SendNotifyMessageW (Address: 0x100dc0f0)
SetWindowFeedbackSetting (Address: 0x100dc0f8)
SetWindowLongW (Address: 0x100dc0d0)
TranslateMessage (Address: 0x100dc084)
UnregisterClassW (Address: 0x100dc0d4)

WindowManagementAPI.dll

CreateWindowInformation (Address: 0x100dc108)
CreateWindowLayout (Address: 0x100dc10c)