UserOOBE.dll

v10.0.19041.1265 64-bit Windows NT Analyzed
Download
Description
UserOOBE
Authors
© Microsoft Corporation. All rights reserved.
File size
411.5 KB
Uploaded
2025-12-01 08:13
Views
41
SHA-256
7fb64c456bdb4db93267ee05e03391ac

Exported functions 2

DllCanUnloadNow #1 · 0x5890
DllGetClassObject #2 · 0x58e0

Imported DLLs & functions 320

api-ms-win-appmodel-runtime-l1-1-1.dll 1
FindPackagesByPackageFamily 0x180048da8
api-ms-win-appmodel-state-l1-2-0.dll 3
CloseState 0x180048db8
GetSystemAppDataKey 0x180048dc0
OpenStateExplicit 0x180048dc8
api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x180048dd8
api-ms-win-core-com-l1-1-0.dll 19
CLSIDFromString 0x180048e40
CoCreateFreeThreadedMarshaler 0x180048e00
CoCreateInstance 0x180048df0
CoGetApartmentType 0x180048de8
CoGetCallContext 0x180048e30
CoGetMalloc 0x180048e50
CoGetStdMarshalEx 0x180048e78
CoImpersonateClient 0x180048e10
CoRegisterClassObject 0x180048e18
CoRevertToSelf 0x180048e70
CoRevokeClassObject 0x180048e20
CoSetProxyBlanket 0x180048df8
CoTaskMemAlloc 0x180048e68
CoTaskMemFree 0x180048e60
CoTaskMemRealloc 0x180048e08
CoWaitForMultipleHandles 0x180048e38
StringFromCLSID 0x180048e58
StringFromGUID2 0x180048e48
StringFromIID 0x180048e28
api-ms-win-core-com-l1-1-1.dll 1
RoGetAgileReference 0x180048e88
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180048ea8
IsDebuggerPresent 0x180048e98
OutputDebugStringW 0x180048ea0
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180048eb8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180048ec8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x180048ee0
RaiseException 0x180048ef8
SetLastError 0x180048ee8
SetUnhandledExceptionFilter 0x180048ef0
UnhandledExceptionFilter 0x180048ed8
api-ms-win-core-file-l1-1-0.dll 11
CreateDirectoryW 0x180048f28
CreateFileW 0x180048f50
DeleteFileW 0x180048f10
FindClose 0x180048f18
FindFirstFileW 0x180048f40
FindNextFileW 0x180048f38
FlushFileBuffers 0x180048f20
GetFileAttributesW 0x180048f48
GetFileInformationByHandle 0x180048f58
GetFullPathNameW 0x180048f30
SetFileInformationByHandle 0x180048f08
api-ms-win-core-file-l2-1-0.dll 1
GetFileInformationByHandleEx 0x180048f68
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x180048f78
DuplicateHandle 0x180048f80
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180048f98
HeapAlloc 0x180048fa0
HeapFree 0x180048f90
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x180048fb0
LocalFree 0x180048fb8
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x180048fc8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
MulDiv 0x180048fd8
api-ms-win-core-libraryloader-l1-2-0.dll 11
DisableThreadLibraryCalls 0x180049028
FindResourceExW 0x180049038
FreeLibrary 0x180049030
GetModuleFileNameA 0x180049010
GetModuleFileNameW 0x180049008
GetModuleHandleExW 0x180048fe8
GetModuleHandleW 0x180049000
GetProcAddress 0x180049020
LoadLibraryExW 0x180049018
LoadResource 0x180048ff8
LockResource 0x180048ff0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180049048
api-ms-win-core-path-l1-1-0.dll 1
PathCchCombine 0x180049058
api-ms-win-core-privateprofile-l1-1-0.dll 1
WritePrivateProfileStringW 0x180049068
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x180049078
api-ms-win-core-processthreads-l1-1-0.dll 10
CreateProcessW 0x180049088
GetCurrentProcess 0x1800490c8
GetCurrentProcessId 0x180049098
GetCurrentThread 0x1800490b8
GetCurrentThreadId 0x1800490a0
GetProcessId 0x1800490a8
OpenProcessToken 0x1800490c0
OpenThreadToken 0x180049090
ProcessIdToSessionId 0x1800490d0
TerminateProcess 0x1800490b0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800490e0
api-ms-win-core-registry-l1-1-0.dll 14
RegCloseKey 0x180049158
RegCreateKeyExW 0x180049150
RegDeleteKeyExW 0x180049110
RegDeleteTreeW 0x180049118
RegDeleteValueW 0x180049108
RegEnumKeyExW 0x180049128
RegEnumValueW 0x180049138
RegFlushKey 0x180049140
RegGetValueW 0x1800490f0
RegOpenCurrentUser 0x180049120
RegOpenKeyExW 0x180049148
RegQueryInfoKeyW 0x1800490f8
RegQueryValueExW 0x180049130
RegSetValueExW 0x180049100
api-ms-win-core-registryuserspecific-l1-1-0.dll 1
SHRegGetUSValueW 0x180049168
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180049188
RtlLookupFunctionEntry 0x180049178
RtlVirtualUnwind 0x180049180
api-ms-win-core-shutdown-l1-1-0.dll 1
InitiateSystemShutdownExW 0x180049198
api-ms-win-core-string-l1-1-0.dll 2
CompareStringOrdinal 0x1800491a8
CompareStringW 0x1800491b0
api-ms-win-core-synch-l1-1-0.dll 24
AcquireSRWLockExclusive 0x180049238
AcquireSRWLockShared 0x180049228
CreateEventExW 0x180049258
CreateEventW 0x1800491f0
CreateMutexExW 0x1800491e8
CreateMutexW 0x1800491e0
CreateSemaphoreExW 0x180049270
DeleteCriticalSection 0x180049278
EnterCriticalSection 0x180049218
InitializeCriticalSection 0x1800491f8
InitializeCriticalSectionEx 0x180049208
InitializeSRWLock 0x180049248
LeaveCriticalSection 0x180049260
OpenEventW 0x1800491d0
OpenSemaphoreW 0x1800491c8
ReleaseMutex 0x180049240
ReleaseSemaphore 0x180049210
ReleaseSRWLockExclusive 0x180049200
ReleaseSRWLockShared 0x180049230
ResetEvent 0x1800491c0
SetEvent 0x180049268
WaitForMultipleObjectsEx 0x180049250
WaitForSingleObject 0x1800491d8
WaitForSingleObjectEx 0x180049220
api-ms-win-core-synch-l1-2-0.dll 6
InitOnceBeginInitialize 0x180049290
InitOnceComplete 0x1800492b0
InitOnceExecuteOnce 0x180049288
Sleep 0x180049298
SleepConditionVariableSRW 0x1800492a0
WakeAllConditionVariable 0x1800492a8
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetLocalTime 0x1800492c0
GetSystemTimeAsFileTime 0x1800492d0
GetTickCount 0x1800492d8
GetTickCount64 0x1800492e0
GetVersionExW 0x1800492c8
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x1800492f0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180049318
CreateThreadpoolTimer 0x180049300
SetThreadpoolTimer 0x180049310
WaitForThreadpoolTimerCallbacks 0x180049308
api-ms-win-core-threadpool-legacy-l1-1-0.dll 2
CreateTimerQueueTimer 0x180049328
DeleteTimerQueueTimer 0x180049330
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x180049348
SystemTimeToFileTime 0x180049340
api-ms-win-core-url-l1-1-0.dll 1
ParseURLW 0x180049358
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x180049368
EncodePointer 0x180049370
api-ms-win-core-winrt-error-l1-1-0.dll 2
RoOriginateError 0x180049388
RoTransformError 0x180049380
api-ms-win-core-winrt-l1-1-0.dll 2
RoActivateInstance 0x180049398
RoGetActivationFactory 0x1800493a0
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll 1
RoCreatePropertySetSerializer 0x1800493b0
api-ms-win-core-winrt-string-l1-1-0.dll 6
WindowsCreateString 0x1800493d0
WindowsCreateStringReference 0x1800493e0
WindowsDeleteString 0x1800493d8
WindowsDuplicateString 0x1800493c0
WindowsGetStringRawBuffer 0x1800493e8
WindowsSubstringWithSpecifiedLength 0x1800493c8
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x180049410
GetTraceEnableLevel 0x180049400
GetTraceLoggerHandle 0x180049408
RegisterTraceGuidsW 0x1800493f8
TraceMessage 0x180049420
UnregisterTraceGuids 0x180049418
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x180049440
EventRegister 0x180049448
EventSetInformation 0x180049438
EventUnregister 0x180049430
EventWriteTransfer 0x180049450
api-ms-win-ntuser-ie-message-l1-1-0.dll 5
DispatchMessageW 0x180049470
MsgWaitForMultipleObjectsEx 0x180049460
PeekMessageW 0x180049478
PostQuitMessage 0x180049480
TranslateMessage 0x180049468
api-ms-win-ntuser-sysparams-l1-1-0.dll 2
GetMonitorInfoW 0x180049490
GetSystemMetrics 0x180049498
api-ms-win-oobe-notification-l1-1-0.dll 1
OOBEComplete 0x1800494a8
api-ms-win-rtcore-ntuser-private-l1-1-0.dll 2
CreateWindowInBand 0x1800494b8
GetWindowBand 0x1800494c0
api-ms-win-rtcore-ntuser-window-l1-1-0.dll 14
CreateWindowExW 0x180049518
DefWindowProcW 0x1800494d0
DestroyWindow 0x180049528
EnumWindows 0x180049510
FindWindowW 0x180049500
GetPropW 0x1800494f8
GetWindowThreadProcessId 0x180049508
IsWindowVisible 0x180049520
RegisterClassExW 0x1800494e0
SetForegroundWindow 0x1800494f0
SetPropW 0x180049530
SetWindowPos 0x180049538
ShowWindow 0x1800494e8
UnregisterClassW 0x1800494d8
api-ms-win-security-base-l1-1-0.dll 11
AdjustTokenPrivileges 0x180049568
AllocateAndInitializeSid 0x180049598
CopySid 0x180049570
CreateWellKnownSid 0x180049580
EqualSid 0x180049590
GetLengthSid 0x180049588
GetTokenInformation 0x180049560
ImpersonateLoggedOnUser 0x180049548
IsValidSid 0x180049578
RevertToSelf 0x180049550
SetTokenInformation 0x180049558
api-ms-win-security-lsalookup-l1-1-2.dll 1
LsaLookupUserAccountType 0x1800495a8
api-ms-win-security-lsalookup-l2-1-0.dll 3
LookupAccountNameW 0x1800495b8
LookupAccountSidW 0x1800495c8
LookupPrivilegeValueW 0x1800495c0
api-ms-win-security-lsapolicy-l1-1-0.dll 6
LsaClose 0x1800495f8
LsaFreeMemory 0x1800495e0
LsaLookupNames2 0x1800495d8
LsaOpenPolicy 0x1800495f0
LsaRetrievePrivateData 0x1800495e8
LsaStorePrivateData 0x180049600
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180049618
ConvertStringSidToSidW 0x180049610
api-ms-win-shcore-comhelpers-l1-1-0.dll 1
IUnknown_QueryService 0x180049628
api-ms-win-shcore-obsolete-l1-1-0.dll 1
SHStrDupW 0x180049638
api-ms-win-shcore-registry-l1-1-0.dll 2
SHDeleteKeyW 0x180049648
SHDeleteValueW 0x180049650
api-ms-win-shcore-scaling-l1-1-1.dll 1
GetDpiForMonitor 0x180049660
api-ms-win-shcore-stream-l1-1-0.dll 1
IStream_Write 0x180049670
api-ms-win-shcore-taskpool-l1-1-0.dll 1
SHTaskPoolQueueTask 0x180049680
api-ms-win-shcore-thread-l1-1-0.dll 2
SHCreateThreadWithHandle 0x180049698
SHGetThreadRef 0x180049690
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x1800496a8
credui.dll 1
CredUnPackAuthenticationBufferW 0x1800496b8
CRYPT32.dll 1
CryptProtectData 0x180048cc0
DUI70.dll 8
?Create@RichText@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z 0x180048cd8
?Destroy@Element@DirectUI@@QEAAJ_N@Z 0x180048ce0
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z 0x180048d08
?SetAccRole@Element@DirectUI@@QEAAJH@Z 0x180048cf0
?SetConstrainLayout@RichText@DirectUI@@QEAAJH@Z 0x180048ce8
?SetContentAlign@Element@DirectUI@@QEAAJH@Z 0x180048cd0
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z 0x180048cf8
?SetID@Element@DirectUI@@QEAAJPEBG@Z 0x180048d00
msvcrt.dll 46
__C_specific_handler 0x180049738
__CxxFrameHandler3 0x1800496e8
__dllonexit 0x180049718
_amsg_exit 0x180049748
_callnewh 0x180049758
_CxxThrowException 0x180049770
_errno 0x1800497d0
_get_errno 0x1800497b8
_initterm 0x180049740
_lock 0x180049728
_onexit 0x180049710
_purecall 0x1800497e0
_set_errno 0x1800497c0
_unlock 0x180049720
_vscwprintf 0x1800497b0
_vsnprintf 0x1800496c8
_vsnprintf_s 0x1800497e8
_vsnwprintf 0x180049818
_wcsicmp 0x1800496e0
_wcsnicmp 0x1800496f8
_XcptFilter 0x180049750
??_V@YAXPEAX@Z 0x180049820
??0exception@@QEAA@AEBQEBD@Z 0x180049788
??0exception@@QEAA@AEBQEBDH@Z 0x180049780
??0exception@@QEAA@AEBV0@@Z 0x1800497f0
??0exception@@QEAA@XZ 0x1800497f8
??1exception@@UEAA@XZ 0x180049800
??1type_info@@UEAA@XZ 0x180049708
??3@YAXPEAX@Z 0x180049808
?terminate@@YAXXZ 0x180049730
?what@exception@@UEBAPEBDXZ 0x180049778
free 0x1800497a0
malloc 0x1800497a8
memcmp 0x180049700
memcpy 0x180049768
memcpy_s 0x180049810
memmove 0x180049760
memmove_s 0x1800497d8
memset 0x180049830
realloc 0x180049790
toupper 0x1800496d8
wcschr 0x1800496f0
wcscspn 0x1800496d0
wcsrchr 0x180049828
wcstok_s 0x180049798
wcstol 0x1800497c8
netutils.dll 1
NetApiBufferFree 0x180049840
ntdll.dll 13
NtQueryInformationToken 0x1800498b0
NtQueryWnfStateData 0x1800498a8
NtSetInformationFile 0x180049858
RtlAllocateHeap 0x180049868
RtlCompareUnicodeString 0x180049878
RtlFreeHeap 0x180049860
RtlInitString 0x1800498a0
RtlInitUnicodeString 0x180049880
RtlNtStatusToDosError 0x180049850
RtlNtStatusToDosErrorNoTeb 0x180049870
RtlPublishWnfStateData 0x180049890
RtlSubscribeWnfStateChangeNotification 0x180049888
RtlUnsubscribeWnfNotificationWaitForCompletion 0x180049898
ole32.dll 1
CoAllowSetForegroundWindow 0x1800498c0
OLEAUT32.dll 2
SysAllocString 0x180048d18
SysFreeString 0x180048d20
policymanager.dll 2
PolicyManager_FreeGetPolicyData 0x1800498d8
PolicyManager_GetPolicy 0x1800498d0
samcli.dll 4
NetLocalGroupDelMembers 0x180049900
NetUserDel 0x1800498f0
NetUserGetInfo 0x1800498e8
NetUserSetInfo 0x1800498f8
SHCORE.dll 1
0x180048d30
SLC.dll 1
SLGetWindowsInformationDWORD 0x180048d40
USER32.dll 8
CallNextHookEx 0x180048d78
GetAsyncKeyState 0x180048d70
LoadCursorW 0x180048d50
MonitorFromPoint 0x180048d58
MonitorFromWindow 0x180048d80
SetCursor 0x180048d88
SetWindowsHookExW 0x180048d60
UnhookWindowsHookEx 0x180048d68
USERENV.dll 1
DeleteProfileW 0x180048d98
wkscli.dll 1
NetGetJoinInformation 0x180049910