ShellHost.exe

v10.0.26100.7920 64-bit Windows NT Analyzed
Download
Description
ShellHost
Authors
© Microsoft Corporation. All rights reserved.
File size
548.0 KB
Uploaded
2026-05-09 22:49
Views
104
SHA-256
5fbb50f2b80d97ad5ae53ef1b00094b5

Exported functions 0

No exported functions.

Imported DLLs & functions 273

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x14006a768
IsDebuggerPresent 0x14006a770
OutputDebugStringW 0x14006a760
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x14006a780
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x14006a790
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x14006a7a0
SetLastError 0x14006a7b8
SetUnhandledExceptionFilter 0x14006a7b0
UnhandledExceptionFilter 0x14006a7a8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x14006a7c8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x14006a7d8
HeapAlloc 0x14006a7e0
HeapFree 0x14006a7e8
api-ms-win-core-interlocked-l1-1-0.dll 2
InitializeSListHead 0x14006a800
InterlockedPushEntrySList 0x14006a7f8
api-ms-win-core-libraryloader-l1-2-0.dll 7
FreeLibrary 0x14006a830
GetModuleFileNameA 0x14006a818
GetModuleFileNameW 0x14006a828
GetModuleHandleExW 0x14006a820
GetModuleHandleW 0x14006a840
GetProcAddress 0x14006a838
LoadLibraryExW 0x14006a810
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x14006a850
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x14006a860
api-ms-win-core-processthreads-l1-1-0.dll 10
CreateThread 0x14006a8b0
GetCurrentProcess 0x14006a8a8
GetCurrentProcessId 0x14006a880
GetCurrentThread 0x14006a878
GetCurrentThreadId 0x14006a890
GetProcessIdOfThread 0x14006a898
GetStartupInfoW 0x14006a8b8
ProcessIdToSessionId 0x14006a870
SetProcessShutdownParameters 0x14006a888
TerminateProcess 0x14006a8a0
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x14006a8c8
api-ms-win-core-processthreads-l1-1-3.dll 1
SetThreadDescription 0x14006a8d8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x14006a8e8
api-ms-win-core-psapi-l1-1-0.dll 1
K32GetModuleFileNameExW 0x14006a8f8
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x14006a918
RegCreateKeyExW 0x14006a908
RegGetValueW 0x14006a910
RegOpenKeyExW 0x14006a920
api-ms-win-core-registry-l1-1-1.dll 2
RegDeleteKeyValueW 0x14006a930
RegSetKeyValueW 0x14006a938
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x14006a948
RtlLookupFunctionEntry 0x14006a950
RtlVirtualUnwind 0x14006a958
api-ms-win-core-string-l1-1-0.dll 3
CompareStringOrdinal 0x14006a970
MultiByteToWideChar 0x14006a978
WideCharToMultiByte 0x14006a968
api-ms-win-core-synch-l1-1-0.dll 22
AcquireSRWLockExclusive 0x14006aa18
AcquireSRWLockShared 0x14006a9c0
CreateEventExW 0x14006aa00
CreateEventW 0x14006a9d8
CreateMutexExW 0x14006a9c8
CreateMutexW 0x14006a990
CreateSemaphoreExW 0x14006a9e8
DeleteCriticalSection 0x14006a9b8
EnterCriticalSection 0x14006a9f8
InitializeCriticalSection 0x14006a9a8
InitializeCriticalSectionAndSpinCount 0x14006aa30
InitializeCriticalSectionEx 0x14006a9d0
LeaveCriticalSection 0x14006a9e0
OpenSemaphoreW 0x14006aa08
ReleaseMutex 0x14006a9b0
ReleaseSemaphore 0x14006aa28
ReleaseSRWLockExclusive 0x14006aa20
ReleaseSRWLockShared 0x14006a998
ResetEvent 0x14006a9a0
SetEvent 0x14006a988
WaitForSingleObject 0x14006a9f0
WaitForSingleObjectEx 0x14006aa10
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x14006aa48
InitOnceComplete 0x14006aa50
Sleep 0x14006aa40
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetSystemTimeAsFileTime 0x14006aa60
api-ms-win-core-threadpool-l1-2-0.dll 8
CloseThreadpoolTimer 0x14006aa90
CloseThreadpoolWait 0x14006aaa0
CreateThreadpoolTimer 0x14006aa88
SetThreadpoolTimer 0x14006aa98
SetThreadpoolWait 0x14006aa80
TrySubmitThreadpoolCallback 0x14006aaa8
WaitForThreadpoolTimerCallbacks 0x14006aa78
WaitForThreadpoolWaitCallbacks 0x14006aa70
api-ms-win-core-winrt-error-l1-1-0.dll 2
RoFailFastWithErrorContext 0x14006aab8
RoOriginateErrorW 0x14006aac0
api-ms-win-core-winrt-error-l1-1-1.dll 1
RoOriginateLanguageException 0x14006aad0
api-ms-win-core-winrt-l1-1-0.dll 1
RoGetActivationFactory 0x14006aae0
api-ms-win-core-winrt-robuffer-l1-1-0.dll 1
RoGetBufferMarshaler 0x14006aaf0
api-ms-win-core-winrt-string-l1-1-0.dll 2
WindowsCreateString 0x14006ab08
WindowsDeleteString 0x14006ab00
api-ms-win-crt-private-l1-1-0.dll 61
__C_specific_handler 0x14006ac80
__current_exception 0x14006ac90
__current_exception_context 0x14006ac98
__CxxFrameHandler3 0x14006ac88
__CxxFrameHandler4 0x14006acd8
__std_terminate 0x14006acd0
_CxxThrowException 0x14006aca0
_o___p__commode 0x14006acc0
_o___std_exception_copy 0x14006acb8
_o___std_exception_destroy 0x14006acb0
_o___stdio_common_vswprintf 0x14006aca8
_o__callnewh 0x14006ab18
_o__cexit 0x14006ab20
_o__configthreadlocale 0x14006ab28
_o__configure_wide_argv 0x14006ab30
_o__crt_atexit 0x14006ab38
_o__dupenv_s 0x14006ab40
_o__errno 0x14006ab48
_o__exit 0x14006ab50
_o__fseeki64 0x14006ab58
_o__get_stream_buffer_pointers 0x14006ab60
_o__get_wide_winmain_command_line 0x14006ab68
_o__initialize_onexit_table 0x14006ab70
_o__initialize_wide_environment 0x14006ab78
_o__invalid_parameter_noinfo 0x14006ab80
_o__invalid_parameter_noinfo_noreturn 0x14006ab88
_o__lock_file 0x14006ab90
_o__purecall 0x14006ab98
_o__register_onexit_function 0x14006aba0
_o__seh_filter_exe 0x14006aba8
_o__set_app_type 0x14006abb0
_o__set_fmode 0x14006abb8
_o__set_new_mode 0x14006abc0
_o__stat64 0x14006abc8
_o__unlock_file 0x14006abd0
_o_abort 0x14006abd8
_o_exit 0x14006abe0
_o_fclose 0x14006abe8
_o_fflush 0x14006abf0
_o_fgetc 0x14006abf8
_o_fgetpos 0x14006ac00
_o_fputc 0x14006ac08
_o_fread 0x14006ac10
_o_free 0x14006ac18
_o_fsetpos 0x14006ac20
_o_fwrite 0x14006ac28
_o_isprint 0x14006ac30
_o_iswspace 0x14006ac38
_o_malloc 0x14006ac40
_o_setvbuf 0x14006ac48
_o_strtold 0x14006ac50
_o_strtoll 0x14006ac58
_o_strtoull 0x14006ac60
_o_terminate 0x14006ac68
_o_ungetc 0x14006ac70
_o_wcsncpy_s 0x14006ac78
memchr 0x14006ace0
memcmp 0x14006ace8
memcpy 0x14006acf0
memmove 0x14006acf8
wcsrchr 0x14006acc8
api-ms-win-crt-runtime-l1-1-0.dll 4
_c_exit 0x14006ad08
_initterm 0x14006ad18
_initterm_e 0x14006ad20
_register_thread_local_exe_atexit_callback 0x14006ad10
api-ms-win-crt-string-l1-1-0.dll 1
memset 0x14006ad30
api-ms-win-eventing-provider-l1-1-0.dll 4
EventRegister 0x14006ad40
EventSetInformation 0x14006ad50
EventUnregister 0x14006ad58
EventWriteTransfer 0x14006ad48
api-ms-win-ro-typeresolution-l1-1-1.dll 1
RoCreatePropertySetSerializer 0x14006ad68
api-ms-win-rtcore-ntuser-window-l1-1-0.dll 9
AllowSetForegroundWindow 0x14006ad90
DefWindowProcW 0x14006adb0
DestroyWindow 0x14006ad88
GetWindowLongPtrW 0x14006ad78
GetWindowThreadProcessId 0x14006ada8
IsWindow 0x14006ad98
SendMessageTimeoutW 0x14006adb8
SendNotifyMessageW 0x14006ada0
SetWindowLongPtrW 0x14006ad80
api-ms-win-shlwapi-winrt-storage-l1-1-1.dll 1
SHCreateWorkerWindowW 0x14006adc8
msvcp_win.dll 100
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x14006b050
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z 0x14006b038
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x14006af68
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x14006b0c8
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x14006ae98
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ 0x14006afc0
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x14006afb0
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x14006afb8
?_Incref@facet@locale@std@@UEAAXXZ 0x14006b048
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z 0x14006afe0
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ 0x14006afd8
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x14006af18
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z 0x14006b030
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z 0x14006af20
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x14006ae70
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z 0x14006b098
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x14006b0b8
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ 0x14006afd0
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x14006af08
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x14006ae68
?_Xbad_alloc@std@@YAXXZ 0x14006b0f0
?_Xbad_function_call@std@@YAXXZ 0x14006ade0
?_Xlength_error@std@@YAXPEBD@Z 0x14006b0e8
?_Xout_of_range@std@@YAXPEBD@Z 0x14006aef0
??0_Lockit@std@@QEAA@H@Z 0x14006ae20
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x14006ae88
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x14006ae80
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x14006b020
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x14006aec0
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x14006b0d0
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z 0x14006af40
??1_Lockit@std@@QEAA@XZ 0x14006ade8
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x14006ae28
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x14006ae10
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x14006b028
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x14006aeb8
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x14006ae78
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ 0x14006af48
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z 0x14006af10
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z 0x14006aed0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z 0x14006aee0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z 0x14006aec8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z 0x14006b000
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z 0x14006b008
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z 0x14006ae18
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z 0x14006aff0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x14006aff8
??7ios_base@std@@QEBA_NXZ 0x14006af78
??Bid@locale@std@@QEAA_KXZ 0x14006aea8
??Bios_base@std@@QEBA_NXZ 0x14006af70
?always_noconv@codecvt_base@std@@QEBA_NXZ 0x14006af28
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A 0x14006add8
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A 0x14006ae40
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ 0x14006b0a8
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ 0x14006b088
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ 0x14006b070
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ 0x14006ae90
?flags@ios_base@std@@QEBAHXZ 0x14006adf8
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x14006b0b0
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z 0x14006b080
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ 0x14006af90
?good@ios_base@std@@QEBA_NXZ 0x14006adf0
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ 0x14006b0a0
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x14006b060
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A 0x14006b058
?id@?$ctype@D@std@@2V0locale@2@A 0x14006aea0
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x14006ae30
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x14006af50
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z 0x14006af30
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x14006af58
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z 0x14006af38
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z 0x14006afc8
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ 0x14006b090
?precision@ios_base@std@@QEAA_J_J@Z 0x14006af88
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z 0x14006b010
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ 0x14006aef8
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ 0x14006af98
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x14006aed8
?setf@ios_base@std@@QEAAHHH@Z 0x14006af80
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z 0x14006b078
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z 0x14006b068
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x14006af00
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x14006b040
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ 0x14006afa0
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x14006ae60
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ 0x14006afa8
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x14006b0d8
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x14006b0e0
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x14006ae38
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ 0x14006b018
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ 0x14006b0c0
?tolower@?$ctype@D@std@@QEBADD@Z 0x14006aeb0
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x14006ae58
?uncaught_exception@std@@YA_NXZ 0x14006aee8
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z 0x14006af60
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z 0x14006afe8
?width@ios_base@std@@QEAA_J_J@Z 0x14006ae08
?width@ios_base@std@@QEBA_JXZ 0x14006ae00
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x14006ae50
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x14006ae48
USER32.dll 1
ReplyMessage 0x14006a750