userenv.dll
Description: Userenv
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 32-bit
Operating System: Windows NT
SHA256: feff7ba5f5ef80a3ef4033bdcea69dea
File Size: 138.8 KB
Uploaded At: Dec. 1, 2025, 8:05 a.m.
Views: 9
Exported Functions
- (Ordinal: 104, Address: 0x11d00)
- RsopLoggingEnabled (Ordinal: 105, Address: 0xd720)
- AreThereVisibleLogoffScripts (Ordinal: 106, Address: 0xd730)
- AreThereVisibleShutdownScripts (Ordinal: 107, Address: 0xd750)
- CreateAppContainerProfile (Ordinal: 108, Address: 0x8150)
- CreateEnvironmentBlock (Ordinal: 109, Address: 0x7d20)
- CreateProfile (Ordinal: 110, Address: 0x13c30)
- DeleteAppContainerProfile (Ordinal: 111, Address: 0x11ca0)
- DeleteProfileA (Ordinal: 112, Address: 0x14290)
- DeleteProfileW (Ordinal: 113, Address: 0x13e20)
- DeriveAppContainerSidFromAppContainerName (Ordinal: 114, Address: 0x7e00)
- DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName (Ordinal: 115, Address: 0x7b90)
- DestroyEnvironmentBlock (Ordinal: 116, Address: 0x7d80)
- DllCanUnloadNow (Ordinal: 117, Address: 0x14910)
- DllGetClassObject (Ordinal: 118, Address: 0x14930)
- DllRegisterServer (Ordinal: 119, Address: 0x14970)
- DllUnregisterServer (Ordinal: 120, Address: 0x149a0)
- EnterCriticalPolicySection (Ordinal: 121, Address: 0x8240)
- (Ordinal: 122, Address: 0x11d20)
- ExpandEnvironmentStringsForUserA (Ordinal: 123, Address: 0x14330)
- ExpandEnvironmentStringsForUserW (Ordinal: 124, Address: 0x75e0)
- ForceSyncFgPolicy (Ordinal: 125, Address: 0xd770)
- FreeGPOListA (Ordinal: 126, Address: 0xd790)
- FreeGPOListW (Ordinal: 127, Address: 0xd7b0)
- GenerateGPNotification (Ordinal: 128, Address: 0xd7d0)
- GetAllUsersProfileDirectoryA (Ordinal: 129, Address: 0x143c0)
- GetAllUsersProfileDirectoryW (Ordinal: 130, Address: 0x14450)
- GetAppContainerFolderPath (Ordinal: 131, Address: 0x7ac0)
- GetAppContainerRegistryLocation (Ordinal: 132, Address: 0x7a30)
- GetAppliedGPOListA (Ordinal: 133, Address: 0xd7f0)
- GetAppliedGPOListW (Ordinal: 134, Address: 0x7e30)
- (Ordinal: 135, Address: 0x15030)
- GetDefaultUserProfileDirectoryA (Ordinal: 136, Address: 0x14470)
- (Ordinal: 137, Address: 0x11c60)
- GetDefaultUserProfileDirectoryW (Ordinal: 138, Address: 0x5020)
- (Ordinal: 139, Address: 0x11c80)
- GetGPOListA (Ordinal: 140, Address: 0xd810)
- GetGPOListW (Ordinal: 141, Address: 0xd830)
- GetNextFgPolicyRefreshInfo (Ordinal: 142, Address: 0xd850)
- GetPreviousFgPolicyRefreshInfo (Ordinal: 143, Address: 0xd870)
- GetProfileType (Ordinal: 144, Address: 0x5930)
- GetProfilesDirectoryA (Ordinal: 145, Address: 0x14500)
- GetProfilesDirectoryW (Ordinal: 146, Address: 0x8190)
- GetUserProfileDirectoryA (Ordinal: 147, Address: 0x14590)
- GetUserProfileDirectoryW (Ordinal: 148, Address: 0x7180)
- HasPolicyForegroundProcessingCompleted (Ordinal: 149, Address: 0xd890)
- LeaveCriticalPolicySection (Ordinal: 150, Address: 0x8220)
- LoadProfileExtender (Ordinal: 151, Address: 0x13e60)
- LoadUserProfileA (Ordinal: 152, Address: 0x14620)
- LoadUserProfileW (Ordinal: 153, Address: 0x5430)
- ProcessGroupPolicyCompleted (Ordinal: 154, Address: 0x11da0)
- ProcessGroupPolicyCompletedEx (Ordinal: 155, Address: 0x11dd0)
- RefreshPolicy (Ordinal: 156, Address: 0xd8b0)
- RefreshPolicyEx (Ordinal: 157, Address: 0xd8d0)
- RegisterGPNotification (Ordinal: 158, Address: 0x7dc0)
- RsopAccessCheckByType (Ordinal: 159, Address: 0x11e00)
- RsopFileAccessCheck (Ordinal: 160, Address: 0x11e30)
- RsopResetPolicySettingStatus (Ordinal: 161, Address: 0x11e60)
- RsopSetPolicySettingStatus (Ordinal: 162, Address: 0x11e90)
- UnloadProfileExtender (Ordinal: 163, Address: 0x14160)
- UnloadUserProfile (Ordinal: 164, Address: 0x5040)
- UnregisterGPNotification (Ordinal: 165, Address: 0x7de0)
- WaitForMachinePolicyForegroundProcessing (Ordinal: 166, Address: 0xd8f0)
- WaitForUserPolicyForegroundProcessing (Ordinal: 167, Address: 0xd900)
- (Ordinal: 175, Address: 0x14e80)
- (Ordinal: 202, Address: 0x148f0)
- (Ordinal: 203, Address: 0x148a0)
- (Ordinal: 206, Address: 0x11c10)
- (Ordinal: 207, Address: 0x11c30)
- (Ordinal: 208, Address: 0x13f70)
- (Ordinal: 209, Address: 0x148c0)
- (Ordinal: 210, Address: 0x11ec0)
- (Ordinal: 211, Address: 0x11d70)
- (Ordinal: 212, Address: 0x11be0)
- (Ordinal: 213, Address: 0x11cd0)
- (Ordinal: 214, Address: 0x149d0)
- (Ordinal: 217, Address: 0x81e0)
- (Ordinal: 218, Address: 0x11d40)
- (Ordinal: 219, Address: 0xb300)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x5289c074)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x5289c084)
- IsDebuggerPresent (Address: 0x5289c080)
- OutputDebugStringW (Address: 0x5289c07c)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x5289c08c)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x5289c094)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x5289c09c)
- SetLastError (Address: 0x5289c0a0)
- SetUnhandledExceptionFilter (Address: 0x5289c0a8)
- UnhandledExceptionFilter (Address: 0x5289c0a4)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x5289c0c0)
- CreateDirectoryW (Address: 0x5289c0b0)
- CreateFileW (Address: 0x5289c0b4)
- DeleteFileW (Address: 0x5289c0dc)
- FindClose (Address: 0x5289c0cc)
- FindFirstFileW (Address: 0x5289c0b8)
- FindNextFileW (Address: 0x5289c0e4)
- FlushFileBuffers (Address: 0x5289c0e0)
- GetDiskFreeSpaceExW (Address: 0x5289c0d8)
- GetFileAttributesExW (Address: 0x5289c0c4)
- GetFileAttributesW (Address: 0x5289c0d4)
- RemoveDirectoryW (Address: 0x5289c0bc)
- SetFileAttributesW (Address: 0x5289c0d0)
- SetFileTime (Address: 0x5289c0c8)
api-ms-win-core-file-l2-1-0.dll
- GetFileInformationByHandleEx (Address: 0x5289c0ec)
- MoveFileExW (Address: 0x5289c0f0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x5289c0f8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x5289c10c)
- HeapAlloc (Address: 0x5289c104)
- HeapFree (Address: 0x5289c100)
- HeapReAlloc (Address: 0x5289c108)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x5289c114)
- LocalFree (Address: 0x5289c118)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x5289c120)
api-ms-win-core-kernel32-private-l1-1-1.dll
- PrivCopyFileExW (Address: 0x5289c128)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x5289c134)
- FindResourceExW (Address: 0x5289c14c)
- GetModuleFileNameA (Address: 0x5289c138)
- GetModuleHandleExW (Address: 0x5289c148)
- GetModuleHandleW (Address: 0x5289c130)
- GetProcAddress (Address: 0x5289c140)
- LoadResource (Address: 0x5289c144)
- LockResource (Address: 0x5289c13c)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x5289c154)
api-ms-win-core-path-l1-1-0.dll
- PathCchAddBackslashEx (Address: 0x5289c15c)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x5289c164)
- GetCommandLineW (Address: 0x5289c168)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x5289c180)
- GetCurrentProcess (Address: 0x5289c190)
- GetCurrentProcessId (Address: 0x5289c17c)
- GetCurrentThread (Address: 0x5289c178)
- GetCurrentThreadId (Address: 0x5289c170)
- OpenProcessToken (Address: 0x5289c184)
- OpenThreadToken (Address: 0x5289c188)
- SetThreadToken (Address: 0x5289c18c)
- TerminateProcess (Address: 0x5289c174)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x5289c198)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x5289c1a0)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x5289c1a8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x5289c1bc)
- RegGetValueW (Address: 0x5289c1b4)
- RegOpenKeyExW (Address: 0x5289c1b8)
- RegQueryValueExW (Address: 0x5289c1b0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x5289c1c8)
- CompareStringW (Address: 0x5289c1c4)
- MultiByteToWideChar (Address: 0x5289c1cc)
- WideCharToMultiByte (Address: 0x5289c1d0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x5289c220)
- AcquireSRWLockShared (Address: 0x5289c1e8)
- CreateEventW (Address: 0x5289c204)
- CreateMutexExW (Address: 0x5289c1e0)
- CreateSemaphoreExW (Address: 0x5289c21c)
- DeleteCriticalSection (Address: 0x5289c1ec)
- EnterCriticalSection (Address: 0x5289c210)
- InitializeCriticalSectionAndSpinCount (Address: 0x5289c214)
- InitializeCriticalSectionEx (Address: 0x5289c1fc)
- LeaveCriticalSection (Address: 0x5289c200)
- OpenSemaphoreW (Address: 0x5289c208)
- ReleaseMutex (Address: 0x5289c1f0)
- ReleaseSemaphore (Address: 0x5289c20c)
- ReleaseSRWLockExclusive (Address: 0x5289c1e4)
- ReleaseSRWLockShared (Address: 0x5289c1dc)
- SetEvent (Address: 0x5289c218)
- WaitForMultipleObjectsEx (Address: 0x5289c1f4)
- WaitForSingleObject (Address: 0x5289c1f8)
- WaitForSingleObjectEx (Address: 0x5289c1d8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x5289c22c)
- InitOnceComplete (Address: 0x5289c228)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemInfo (Address: 0x5289c238)
- GetSystemTimeAsFileTime (Address: 0x5289c234)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x5289c244)
- CreateThreadpoolTimer (Address: 0x5289c24c)
- SetThreadpoolTimer (Address: 0x5289c240)
- WaitForThreadpoolTimerCallbacks (Address: 0x5289c248)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x5289c254)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x5289c2b8)
- __std_terminate (Address: 0x5289c2b4)
- _CxxThrowException (Address: 0x5289c2bc)
- _except_handler4_common (Address: 0x5289c290)
- _o___std_exception_copy (Address: 0x5289c2ac)
- _o___std_exception_destroy (Address: 0x5289c2a8)
- _o___std_type_info_destroy_list (Address: 0x5289c2a4)
- _o___stdio_common_vsnprintf_s (Address: 0x5289c2a0)
- _o___stdio_common_vswprintf (Address: 0x5289c29c)
- _o__cexit (Address: 0x5289c298)
- _o__configure_narrow_argv (Address: 0x5289c294)
- _o__crt_atexit (Address: 0x5289c2b0)
- _o__errno (Address: 0x5289c25c)
- _o__execute_onexit_table (Address: 0x5289c260)
- _o__get_errno (Address: 0x5289c264)
- _o__initialize_narrow_environment (Address: 0x5289c268)
- _o__initialize_onexit_table (Address: 0x5289c26c)
- _o__invalid_parameter_noinfo (Address: 0x5289c270)
- _o__purecall (Address: 0x5289c274)
- _o__register_onexit_function (Address: 0x5289c278)
- _o__seh_filter_dll (Address: 0x5289c27c)
- _o__set_errno (Address: 0x5289c280)
- _o_free (Address: 0x5289c288)
- _o_malloc (Address: 0x5289c28c)
- memcmp (Address: 0x5289c2c0)
- memcpy (Address: 0x5289c2c4)
- memmove (Address: 0x5289c284)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x5289c2d0)
- _initterm_e (Address: 0x5289c2cc)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x5289c2d8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x5289c2e0)
- EventWriteTransfer (Address: 0x5289c2e4)
api-ms-win-security-base-l1-1-0.dll
- AllocateAndInitializeSid (Address: 0x5289c2f8)
- CopySid (Address: 0x5289c314)
- EqualSid (Address: 0x5289c2f0)
- FreeSid (Address: 0x5289c2f4)
- GetFileSecurityW (Address: 0x5289c2fc)
- GetLengthSid (Address: 0x5289c308)
- GetSecurityDescriptorOwner (Address: 0x5289c2ec)
- GetTokenInformation (Address: 0x5289c304)
- ImpersonateLoggedOnUser (Address: 0x5289c30c)
- ImpersonateSelf (Address: 0x5289c310)
- PrivilegeCheck (Address: 0x5289c318)
- RevertToSelf (Address: 0x5289c300)
api-ms-win-security-grouppolicy-l1-1-0.dll
- AreThereVisibleLogoffScriptsInternal (Address: 0x5289c35c)
- AreThereVisibleShutdownScriptsInternal (Address: 0x5289c340)
- EnterCriticalPolicySectionInternal (Address: 0x5289c338)
- ForceSyncFgPolicyInternal (Address: 0x5289c324)
- FreeGPOListInternalA (Address: 0x5289c364)
- FreeGPOListInternalW (Address: 0x5289c348)
- GenerateGPNotificationInternal (Address: 0x5289c33c)
- GetAppliedGPOListInternalA (Address: 0x5289c334)
- GetAppliedGPOListInternalW (Address: 0x5289c330)
- GetGPOListInternalA (Address: 0x5289c358)
- GetGPOListInternalW (Address: 0x5289c374)
- GetNextFgPolicyRefreshInfoInternal (Address: 0x5289c354)
- GetPreviousFgPolicyRefreshInfoInternal (Address: 0x5289c320)
- HasPolicyForegroundProcessingCompletedInternal (Address: 0x5289c32c)
- LeaveCriticalPolicySectionInternal (Address: 0x5289c344)
- RefreshPolicyExInternal (Address: 0x5289c34c)
- RefreshPolicyInternal (Address: 0x5289c370)
- RegisterGPNotificationInternal (Address: 0x5289c328)
- RsopLoggingEnabledInternal (Address: 0x5289c36c)
- UnregisterGPNotificationInternal (Address: 0x5289c368)
- WaitForMachinePolicyForegroundProcessingInternal (Address: 0x5289c350)
- WaitForUserPolicyForegroundProcessingInternal (Address: 0x5289c360)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x5289c39c)
- EtwEventRegister (Address: 0x5289c388)
- EtwEventSetInformation (Address: 0x5289c394)
- EtwEventUnregister (Address: 0x5289c390)
- EtwEventWriteTransfer (Address: 0x5289c3a0)
- NtClose (Address: 0x5289c380)
- RtlAdjustPrivilege (Address: 0x5289c398)
- RtlFreeUnicodeString (Address: 0x5289c384)
- RtlNtStatusToDosError (Address: 0x5289c38c)
- RtlStringFromGUID (Address: 0x5289c37c)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x5289c03c)
- CStdStubBuffer_Connect (Address: 0x5289c04c)
- CStdStubBuffer_CountRefs (Address: 0x5289c068)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x5289c028)
- CStdStubBuffer_DebugServerRelease (Address: 0x5289c05c)
- CStdStubBuffer_Disconnect (Address: 0x5289c058)
- CStdStubBuffer_Invoke (Address: 0x5289c020)
- CStdStubBuffer_IsIIDSupported (Address: 0x5289c050)
- CStdStubBuffer_QueryInterface (Address: 0x5289c064)
- I_RpcExceptionFilter (Address: 0x5289c040)
- IUnknown_AddRef_Proxy (Address: 0x5289c024)
- IUnknown_QueryInterface_Proxy (Address: 0x5289c000)
- IUnknown_Release_Proxy (Address: 0x5289c06c)
- NdrClientCall4 (Address: 0x5289c008)
- NdrCStdStubBuffer_Release (Address: 0x5289c01c)
- NdrDllCanUnloadNow (Address: 0x5289c018)
- NdrDllGetClassObject (Address: 0x5289c014)
- NdrDllRegisterProxy (Address: 0x5289c010)
- NdrDllUnregisterProxy (Address: 0x5289c00c)
- NdrOleAllocate (Address: 0x5289c060)
- NdrOleFree (Address: 0x5289c038)
- RpcBindingFree (Address: 0x5289c054)
- RpcBindingFromStringBindingW (Address: 0x5289c02c)
- RpcBindingSetAuthInfoExW (Address: 0x5289c044)
- RpcRevertToSelf (Address: 0x5289c004)
- RpcStringBindingComposeW (Address: 0x5289c034)
- RpcStringFreeW (Address: 0x5289c048)
- UuidCreate (Address: 0x5289c030)