shsetup.dll

Description: Shell setup helper

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: c377e452334b1fbcd25669d39b29061a

File Size: 137.5 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 3

Exported Functions

SHUnattendedSetup (Ordinal: 1, Address: 0xf9e0)
SHUnattendedSetupA (Ordinal: 2, Address: 0xf9e0)
SHUnattendedSetupW (Ordinal: 3, Address: 0xf650)
Sysprep_Cleanup_Shell (Ordinal: 4, Address: 0xe6e0)
Sysprep_Generalize_Shell (Ordinal: 5, Address: 0xe920)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x180016228)
CoCreateInstance (Address: 0x180016258)
CoGetMalloc (Address: 0x180016248)
CoInitializeEx (Address: 0x180016238)
CoTaskMemAlloc (Address: 0x180016250)
CoTaskMemFree (Address: 0x180016230)
CoUninitialize (Address: 0x180016240)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180016268)
IsDebuggerPresent (Address: 0x180016278)
OutputDebugStringW (Address: 0x180016270)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180016288)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180016298)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800162c0)
SetLastError (Address: 0x1800162a8)
SetUnhandledExceptionFilter (Address: 0x1800162b0)
UnhandledExceptionFilter (Address: 0x1800162b8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800162e0)
CreateDirectoryW (Address: 0x180016308)
DeleteFileW (Address: 0x1800162f8)
GetFileAttributesExW (Address: 0x1800162f0)
GetFileAttributesW (Address: 0x1800162d0)
GetVolumeInformationW (Address: 0x1800162e8)
GetVolumePathNameW (Address: 0x180016300)
SetFileAttributesW (Address: 0x1800162d8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180016318)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180016338)
HeapAlloc (Address: 0x180016328)
HeapFree (Address: 0x180016330)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180016348)
LocalFree (Address: 0x180016350)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180016378)
FreeLibrary (Address: 0x180016388)
GetModuleFileNameA (Address: 0x180016360)
GetModuleHandleExW (Address: 0x180016368)
GetModuleHandleW (Address: 0x180016370)
GetProcAddress (Address: 0x180016380)
LoadLibraryExW (Address: 0x180016390)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800163a8)
GetACP (Address: 0x1800163b0)
GetLocaleInfoW (Address: 0x1800163a0)

api-ms-win-core-path-l1-1-0.dll

PathCchAddBackslash (Address: 0x1800163d0)
PathCchAppend (Address: 0x1800163c8)
PathCchCombine (Address: 0x1800163c0)
PathCchRemoveFileSpec (Address: 0x1800163d8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1800163e8)

api-ms-win-core-processthreads-l1-1-0.dll

ExitProcess (Address: 0x180016400)
GetCurrentProcess (Address: 0x180016418)
GetCurrentProcessId (Address: 0x180016430)
GetCurrentThread (Address: 0x180016428)
GetCurrentThreadId (Address: 0x1800163f8)
OpenProcessToken (Address: 0x180016408)
OpenThreadToken (Address: 0x180016410)
TerminateProcess (Address: 0x180016420)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180016440)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180016470)
RegCreateKeyExW (Address: 0x180016480)
RegDeleteValueW (Address: 0x180016498)
RegEnumKeyExW (Address: 0x180016468)
RegGetValueW (Address: 0x180016488)
RegLoadKeyW (Address: 0x180016450)
RegOpenKeyExW (Address: 0x180016478)
RegQueryInfoKeyW (Address: 0x180016490)
RegSetValueExW (Address: 0x180016460)
RegUnLoadKeyW (Address: 0x180016458)

api-ms-win-core-registry-l2-1-0.dll

RegEnumKeyW (Address: 0x1800164a8)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegGetBoolUSValueW (Address: 0x1800164b8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800164c8)
RtlLookupFunctionEntry (Address: 0x1800164d8)
RtlVirtualUnwind (Address: 0x1800164d0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x1800164e8)
PathIsRelativeW (Address: 0x1800164f0)
SHExpandEnvironmentStringsW (Address: 0x1800164f8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpICW (Address: 0x180016508)
StrCmpIW (Address: 0x180016528)
StrCmpLogicalW (Address: 0x180016510)
StrCmpNIW (Address: 0x180016520)
StrToIntW (Address: 0x180016518)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180016538)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180016550)
lstrlenW (Address: 0x180016548)

api-ms-win-core-synch-l1-1-0.dll

CreateMutexExW (Address: 0x180016568)
CreateSemaphoreExW (Address: 0x180016590)
OpenSemaphoreW (Address: 0x180016588)
ReleaseMutex (Address: 0x180016560)
ReleaseSemaphore (Address: 0x180016570)
WaitForSingleObject (Address: 0x180016580)
WaitForSingleObjectEx (Address: 0x180016578)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1800165a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1800165b8)
GetLocalTime (Address: 0x1800165c0)
GetSystemDirectoryW (Address: 0x1800165c8)
GetSystemTimeAsFileTime (Address: 0x1800165d8)
GetTickCount (Address: 0x1800165d0)
SetLocalTime (Address: 0x1800165b0)

api-ms-win-core-sysinfo-l1-2-0.dll

SetComputerNameExW (Address: 0x1800165e8)

api-ms-win-core-timezone-l1-1-0.dll

GetDynamicTimeZoneInformation (Address: 0x180016600)
SetDynamicTimeZoneInformation (Address: 0x1800165f8)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x180016650)
CopySid (Address: 0x180016630)
CreateWellKnownSid (Address: 0x180016610)
GetLengthSid (Address: 0x180016658)
GetSecurityDescriptorDacl (Address: 0x180016620)
GetSecurityDescriptorOwner (Address: 0x180016638)
GetSidIdentifierAuthority (Address: 0x180016648)
GetSidLengthRequired (Address: 0x180016628)
GetSidSubAuthority (Address: 0x180016640)
GetSidSubAuthorityCount (Address: 0x180016618)
GetTokenInformation (Address: 0x180016668)
InitializeSid (Address: 0x180016660)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x180016680)
LookupPrivilegeValueW (Address: 0x180016678)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x180016698)
LsaFreeMemory (Address: 0x180016690)
LsaOpenPolicy (Address: 0x1800166a0)
LsaQueryInformationPolicy (Address: 0x1800166b0)
LsaStorePrivateData (Address: 0x1800166a8)

api-ms-win-security-provider-l1-1-0.dll

SetNamedSecurityInfoW (Address: 0x1800166c0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800166d8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800166d0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1800166e8)
OpenSCManagerW (Address: 0x1800166f0)
OpenServiceW (Address: 0x180016700)
StartServiceW (Address: 0x1800166f8)

api-ms-win-service-management-l2-1-0.dll

QueryServiceStatusEx (Address: 0x180016710)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x180016720)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x180016730)

api-ms-win-shcore-registry-l1-1-0.dll

SHDeleteKeyW (Address: 0x180016750)
SHDeleteValueW (Address: 0x180016758)
SHRegGetValueW (Address: 0x180016740)
SHSetValueW (Address: 0x180016748)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x180016768)

api-ms-win-shcore-unicodeansi-l1-1-0.dll

SHAnsiToUnicode (Address: 0x180016778)

api-ms-win-shell-shdirectory-l1-1-0.dll

(Address: 0x180016788)

api-ms-win-shell-shellcom-l1-1-0.dll

SHCoCreateInstance (Address: 0x180016798)

msvcrt.dll

__C_specific_handler (Address: 0x180016820)
__CxxFrameHandler3 (Address: 0x1800167f0)
__dllonexit (Address: 0x180016810)
_amsg_exit (Address: 0x1800167e0)
_callnewh (Address: 0x1800167b8)
_initterm (Address: 0x180016818)
_lock (Address: 0x180016828)
_onexit (Address: 0x180016800)
_purecall (Address: 0x180016838)
_unlock (Address: 0x180016830)
_vsnwprintf (Address: 0x1800167d0)
_XcptFilter (Address: 0x1800167c8)
free (Address: 0x1800167d8)
malloc (Address: 0x1800167e8)
memcpy (Address: 0x180016808)
memcpy_s (Address: 0x1800167a8)
memmove (Address: 0x1800167c0)
memset (Address: 0x180016840)
towupper (Address: 0x1800167f8)
wcschr (Address: 0x1800167b0)

ntdll.dll

NtClose (Address: 0x180016858)
NtDeviceIoControlFile (Address: 0x180016850)
NtOpenFile (Address: 0x1800168a0)
RtlAppendUnicodeStringToString (Address: 0x180016870)
RtlAppendUnicodeToString (Address: 0x180016878)
RtlInitUnicodeString (Address: 0x180016898)
RtlNtStatusToDosError (Address: 0x180016860)
RtlWriteRegistryValue (Address: 0x180016868)
ZwClose (Address: 0x180016888)
ZwEnumerateKey (Address: 0x180016880)
ZwOpenKey (Address: 0x180016890)