userinitext.dll

Description: UserInit Utility Extension DLL

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 2641276cf4cee0b05d93e8eb575dc594

File Size: 24.5 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 3

Exported Functions

CreateExplorerSessionKey (Ordinal: 1, Address: 0x2b60)
DisplayMessageAndExitWindows (Ordinal: 2, Address: 0x1480)
ImmWorker (Ordinal: 3, Address: 0x2720)
IsSubDesktopSession (Ordinal: 4, Address: 0x1a50)
IsTSAppCompatOn (Ordinal: 5, Address: 0x2a10)
LoadRemoteFontsAndInitMiscWorker (Ordinal: 6, Address: 0x1950)
PerformXForestLogonCheck (Ordinal: 7, Address: 0x14c0)
ProcesRemoteSessionInitialCommand (Ordinal: 8, Address: 0x2220)
ProcessTermSrvIniFiles (Ordinal: 9, Address: 0x2ad0)
SetShellDesktopSwitchEvent (Ordinal: 10, Address: 0x1af0)
SetupHotKeyForKeyboardLayout (Ordinal: 11, Address: 0x27a0)
UserinitExt (Ordinal: 12, Address: 0x2cb0)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180004170)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180004180)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800041a8)
SetLastError (Address: 0x1800041a0)
SetUnhandledExceptionFilter (Address: 0x180004190)
UnhandledExceptionFilter (Address: 0x180004198)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800041b8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800041d0)
LocalFree (Address: 0x1800041c8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1800041f8)
GetModuleFileNameA (Address: 0x1800041e8)
GetProcAddress (Address: 0x1800041e0)
LoadLibraryExW (Address: 0x1800041f0)
LoadStringW (Address: 0x180004200)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180004210)
GetUserDefaultLangID (Address: 0x180004218)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180004228)
SetCurrentDirectoryW (Address: 0x180004230)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180004258)
GetCurrentProcess (Address: 0x180004250)
OpenProcessToken (Address: 0x180004248)
TerminateProcess (Address: 0x180004240)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180004278)
RegCreateKeyExW (Address: 0x180004298)
RegDeleteTreeW (Address: 0x180004290)
RegGetValueW (Address: 0x180004268)
RegOpenKeyExW (Address: 0x180004270)
RegQueryValueExW (Address: 0x180004280)
RegSetValueExW (Address: 0x180004288)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800042b8)
RtlLookupFunctionEntry (Address: 0x1800042a8)
RtlVirtualUnwind (Address: 0x1800042b0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800042f0)
CreateEventW (Address: 0x1800042e8)
OpenEventW (Address: 0x1800042d8)
ReleaseSRWLockExclusive (Address: 0x1800042c8)
SetEvent (Address: 0x1800042d0)
WaitForSingleObject (Address: 0x1800042e0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180004300)

api-ms-win-core-sysinfo-l1-1-0.dll

GetTickCount (Address: 0x180004310)
GetTickCount64 (Address: 0x180004318)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x180004338)
EventRegister (Address: 0x180004348)
EventSetInformation (Address: 0x180004328)
EventUnregister (Address: 0x180004340)
EventWriteTransfer (Address: 0x180004330)

msvcrt.dll

_vsnwprintf (Address: 0x180004358)
memmove (Address: 0x180004368)
memset (Address: 0x180004370)
toupper (Address: 0x180004360)

ntdll.dll

DbgPrint (Address: 0x180004398)
NtClose (Address: 0x180004390)
NtOpenKey (Address: 0x180004388)
RtlInitUnicodeString (Address: 0x180004380)

USER32.dll

ExitWindowsEx (Address: 0x180004140)
GetKeyboardLayout (Address: 0x180004138)
GetSystemMetrics (Address: 0x180004148)
LoadRemoteFonts (Address: 0x180004150)
MessageBoxW (Address: 0x180004130)
SystemParametersInfoW (Address: 0x180004128)

USERENV.dll

(Address: 0x180004160)