shsetup.dll

Description: Shell setup helper

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 667feb1ae7709cae6f230369c64276bc

File Size: 105.0 KB

Uploaded At: Dec. 1, 2025, 8:04 a.m.

Views: 17

Exported Functions

SHUnattendedSetup (Ordinal: 1, Address: 0x13040)
SHUnattendedSetupA (Ordinal: 2, Address: 0x13040)
SHUnattendedSetupW (Ordinal: 3, Address: 0x12de0)
Sysprep_Cleanup_Shell (Ordinal: 4, Address: 0x12540)
Sysprep_Generalize_Shell (Ordinal: 5, Address: 0x12660)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x10019018)
CoCreateInstance (Address: 0x10019008)
CoGetMalloc (Address: 0x10019000)
CoInitializeEx (Address: 0x10019010)
CoTaskMemAlloc (Address: 0x10019004)
CoTaskMemFree (Address: 0x1001900c)
CoUninitialize (Address: 0x10019014)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10019024)
IsDebuggerPresent (Address: 0x10019020)
OutputDebugStringW (Address: 0x10019028)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10019030)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10019038)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10019048)
SetLastError (Address: 0x10019040)
SetUnhandledExceptionFilter (Address: 0x10019044)
UnhandledExceptionFilter (Address: 0x1001904c)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x10019068)
CreateDirectoryW (Address: 0x10019060)
DeleteFileW (Address: 0x1001906c)
GetFileAttributesExW (Address: 0x10019064)
GetFileAttributesW (Address: 0x1001905c)
GetVolumeInformationW (Address: 0x10019054)
GetVolumePathNameW (Address: 0x10019058)
SetFileAttributesW (Address: 0x10019070)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10019078)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10019084)
HeapAlloc (Address: 0x10019088)
HeapFree (Address: 0x10019080)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10019090)
LocalFree (Address: 0x10019094)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100190a0)
FreeLibrary (Address: 0x100190b4)
GetModuleFileNameA (Address: 0x100190b0)
GetModuleHandleExW (Address: 0x100190ac)
GetModuleHandleW (Address: 0x100190a4)
GetProcAddress (Address: 0x1001909c)
LoadLibraryExW (Address: 0x100190a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100190c4)
GetACP (Address: 0x100190c0)
GetLocaleInfoW (Address: 0x100190bc)

api-ms-win-core-path-l1-1-0.dll

PathCchAddBackslash (Address: 0x100190d4)
PathCchAppend (Address: 0x100190d0)
PathCchCombine (Address: 0x100190cc)
PathCchRemoveFileSpec (Address: 0x100190d8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x100190e0)

api-ms-win-core-processthreads-l1-1-0.dll

ExitProcess (Address: 0x100190fc)
GetCurrentProcess (Address: 0x10019104)
GetCurrentProcessId (Address: 0x10019100)
GetCurrentThread (Address: 0x100190f4)
GetCurrentThreadId (Address: 0x100190e8)
OpenProcessToken (Address: 0x100190f8)
OpenThreadToken (Address: 0x100190f0)
TerminateProcess (Address: 0x100190ec)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001910c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10019130)
RegCreateKeyExW (Address: 0x10019118)
RegDeleteValueW (Address: 0x10019120)
RegEnumKeyExW (Address: 0x1001911c)
RegGetValueW (Address: 0x10019128)
RegLoadKeyW (Address: 0x1001912c)
RegOpenKeyExW (Address: 0x10019114)
RegQueryInfoKeyW (Address: 0x10019124)
RegSetValueExW (Address: 0x10019134)
RegUnLoadKeyW (Address: 0x10019138)

api-ms-win-core-registry-l2-1-0.dll

RegEnumKeyW (Address: 0x10019140)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegGetBoolUSValueW (Address: 0x10019148)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x10019150)
PathIsRelativeW (Address: 0x10019158)
SHExpandEnvironmentStringsW (Address: 0x10019154)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpICW (Address: 0x10019164)
StrCmpIW (Address: 0x10019160)
StrCmpLogicalW (Address: 0x1001916c)
StrCmpNIW (Address: 0x10019170)
StrToIntW (Address: 0x10019168)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10019178)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x10019184)
lstrlenW (Address: 0x10019180)

api-ms-win-core-synch-l1-1-0.dll

CreateMutexExW (Address: 0x100191a0)
CreateSemaphoreExW (Address: 0x1001919c)
OpenSemaphoreW (Address: 0x10019194)
ReleaseMutex (Address: 0x1001918c)
ReleaseSemaphore (Address: 0x10019190)
WaitForSingleObject (Address: 0x10019198)
WaitForSingleObjectEx (Address: 0x100191a4)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x100191ac)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x100191c4)
GetLocalTime (Address: 0x100191b8)
GetSystemDirectoryW (Address: 0x100191b4)
GetSystemTimeAsFileTime (Address: 0x100191bc)
GetTickCount (Address: 0x100191c8)
SetLocalTime (Address: 0x100191c0)

api-ms-win-core-sysinfo-l1-2-0.dll

SetComputerNameExW (Address: 0x100191d0)

api-ms-win-core-timezone-l1-1-0.dll

GetDynamicTimeZoneInformation (Address: 0x100191dc)
SetDynamicTimeZoneInformation (Address: 0x100191d8)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x100191e4)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x100191ec)
CopySid (Address: 0x10019210)
CreateWellKnownSid (Address: 0x10019200)
GetLengthSid (Address: 0x10019214)
GetSecurityDescriptorDacl (Address: 0x10019208)
GetSecurityDescriptorOwner (Address: 0x10019204)
GetSidIdentifierAuthority (Address: 0x100191f8)
GetSidLengthRequired (Address: 0x100191f0)
GetSidSubAuthority (Address: 0x100191fc)
GetSidSubAuthorityCount (Address: 0x100191f4)
GetTokenInformation (Address: 0x1001920c)
InitializeSid (Address: 0x10019218)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x10019220)
LookupPrivilegeValueW (Address: 0x10019224)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x10019238)
LsaFreeMemory (Address: 0x1001922c)
LsaOpenPolicy (Address: 0x1001923c)
LsaQueryInformationPolicy (Address: 0x10019230)
LsaStorePrivateData (Address: 0x10019234)

api-ms-win-security-provider-l1-1-0.dll

SetNamedSecurityInfoW (Address: 0x10019244)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1001924c)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10019250)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1001925c)
OpenSCManagerW (Address: 0x10019264)
OpenServiceW (Address: 0x10019260)
StartServiceW (Address: 0x10019258)

api-ms-win-service-management-l2-1-0.dll

QueryServiceStatusEx (Address: 0x1001926c)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x10019274)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x1001927c)

api-ms-win-shcore-registry-l1-1-0.dll

SHDeleteKeyW (Address: 0x10019288)
SHDeleteValueW (Address: 0x10019284)
SHRegGetValueW (Address: 0x10019290)
SHSetValueW (Address: 0x1001928c)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x10019298)

api-ms-win-shcore-unicodeansi-l1-1-0.dll

SHAnsiToUnicode (Address: 0x100192a0)

api-ms-win-shell-shdirectory-l1-1-0.dll

(Address: 0x100192a8)

api-ms-win-shell-shellcom-l1-1-0.dll

SHCoCreateInstance (Address: 0x100192b0)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100192f8)
__dllonexit (Address: 0x100192d4)
_amsg_exit (Address: 0x100192c8)
_callnewh (Address: 0x100192b8)
_except_handler4_common (Address: 0x100192e8)
_initterm (Address: 0x100192c0)
_lock (Address: 0x100192bc)
_onexit (Address: 0x100192ec)
_purecall (Address: 0x100192dc)
_unlock (Address: 0x100192c4)
_vsnwprintf (Address: 0x100192e0)
_XcptFilter (Address: 0x100192cc)
free (Address: 0x100192d0)
malloc (Address: 0x10019300)
memcpy (Address: 0x100192f0)
memcpy_s (Address: 0x100192e4)
memmove (Address: 0x100192d8)
memset (Address: 0x10019304)
towupper (Address: 0x100192f4)
wcschr (Address: 0x100192fc)

ntdll.dll

NtClose (Address: 0x10019310)
NtDeviceIoControlFile (Address: 0x1001930c)
NtOpenFile (Address: 0x10019334)
RtlAppendUnicodeStringToString (Address: 0x1001931c)
RtlAppendUnicodeToString (Address: 0x10019320)
RtlInitUnicodeString (Address: 0x10019330)
RtlNtStatusToDosError (Address: 0x10019314)
RtlWriteRegistryValue (Address: 0x10019318)
ZwClose (Address: 0x10019328)
ZwEnumerateKey (Address: 0x10019324)
ZwOpenKey (Address: 0x1001932c)