SHCore.dll - Online Dependency Analysis & Download

Description

SHCORE

Authors

File size

533.8 KB

Uploaded

2025-12-01 08:04

Views

159

SHA-256

a504f83ce4457071bbeed45cf92475c6

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 197

#1 · 0x198c0

CommandLineToArgvW #2 · 0x33670

CreateRandomAccessStreamOnFile #3 · 0x3de40

CreateRandomAccessStreamOverStream #4 · 0x2edd0

CreateStreamOverRandomAccessStream #5 · 0x33000

DllCanUnloadNow #6 · 0x373e0

DllGetActivationFactory #7 · 0x56c70

DllGetClassObject #8 · 0x3b770

GetCurrentProcessExplicitAppUserModelID #9 · 0x6ef00

GetDpiForMonitor #10 · 0x375b0

GetDpiForShellUIComponent #11 · 0x3bdb0

GetFeatureEnabledState #12 · 0x40580

GetFeatureVariant #13 · 0x40670

GetProcessDpiAwareness #14 · 0x40150

GetProcessReference #15 · 0x1eb30

GetScaleFactorForDevice #16 · 0x3bc30

GetScaleFactorForMonitor #17 · 0x3b8b0

IStream_Copy #18 · 0x41640

IStream_Read #19 · 0x1dbf0

IStream_ReadStr #20 · 0x21b20

IStream_Reset #21 · 0x221f0

IStream_Size #22 · 0x2f640

IStream_Write #23 · 0x297a0

IStream_WriteStr #24 · 0x251a0

IUnknown_AtomicRelease #25 · 0x56d20

IUnknown_GetSite #26 · 0x36600

IUnknown_QueryService #27 · 0x36380

IUnknown_Set #28 · 0x33de0

IUnknown_SetSite #29 · 0x36680

IsOS #30 · 0x14f90

IsProcessInIsolatedContainer #31 · 0x3d0e0

IsProcessInWDAGContainer #32 · 0x3d1b0

RecordFeatureError #33 · 0x57380

RecordFeatureUsage #34 · 0x15200

RegisterScaleChangeEvent #35 · 0x3f180

RegisterScaleChangeNotifications #36 · 0x41e30

RevokeScaleChangeNotifications #37 · 0x41f00

SHAnsiToAnsi #38 · 0x73660

SHAnsiToUnicode #39 · 0x33e40

SHCopyKeyA #40 · 0x57d60

SHCopyKeyW #41 · 0x3adb0

SHCreateMemStream #42 · 0x23770

SHCreateStreamOnFileA #43 · 0x66f30

SHCreateStreamOnFileEx #44 · 0x3c710

SHCreateStreamOnFileW #45 · 0x380a0

SHCreateThread #46 · 0x39ff0

SHCreateThreadRef #47 · 0x39040

SHCreateThreadWithHandle #48 · 0x39fc0

SHDeleteEmptyKeyA #49 · 0x57960

SHDeleteEmptyKeyW #50 · 0x57ae0

SHDeleteKeyA #51 · 0x57dd0

SHDeleteKeyW #52 · 0x41d40

SHDeleteValueA #53 · 0x579f0

SHDeleteValueW #54 · 0x3f480

SHEnumKeyExA #55 · 0x57e30

SHEnumKeyExW #56 · 0x3e8e0

SHEnumValueA #57 · 0x57e60

SHEnumValueW #58 · 0x3ef50

SHGetThreadRef #59 · 0x1b250

SHGetValueA #60 · 0x57e90

SHGetValueW #61 · 0x17f80

SHOpenRegStream2A #62 · 0x66ba0

SHOpenRegStream2W #63 · 0x37600

SHOpenRegStreamA #64 · 0x66c40

SHOpenRegStreamW #65 · 0x66c70

SHQueryInfoKeyA #66 · 0x57f20

SHQueryInfoKeyW #67 · 0x3eff0

SHQueryValueExA #68 · 0x57f50

SHQueryValueExW #69 · 0x18010

SHRegDuplicateHKey #70 · 0x57f80

SHRegGetIntW #71 · 0x57fb0

SHRegGetPathA #72 · 0x58030

SHRegGetPathW #73 · 0x58070

SHRegGetValueA #74 · 0x580b0

SHRegGetValueW #75 · 0x17e00

SHRegSetPathA #76 · 0x58160

SHRegSetPathW #77 · 0x581f0

SHReleaseThreadRef #78 · 0x415f0

SHSetThreadRef #79 · 0x39010

SHSetValueA #80 · 0x57a50

SHSetValueW #81 · 0x3bb90

SHStrDupA #82 · 0x3f6e0

SHStrDupW #83 · 0x1e690

SHTaskPoolAllowThreadReuse #84 · 0x3aff0

SHTaskPoolDoNotWaitForMoreTasks #85 · 0x406c0

SHTaskPoolGetCurrentThreadLifetime #86 · 0x1ca70

SHTaskPoolGetUniqueContext #87 · 0x3d040

SHTaskPoolQueueTask #88 · 0x28460

SHTaskPoolSetThreadReuseAllowed #89 · 0x57470

SHUnicodeToAnsi #90 · 0x36720

SHUnicodeToUnicode #91 · 0x73940

SetCurrentProcessExplicitAppUserModelID #92 · 0x369e0

SetProcessDpiAwareness #93 · 0x3ff50

SetProcessReference #94 · 0x406a0

SubscribeFeatureStateChangeNotification #95 · 0x14830

UnregisterScaleChangeEvent #96 · 0x41340

UnsubscribeFeatureStateChangeNotification #97 · 0x40cb0

#100 · 0x20190

#101 · 0x22d30

#102 · 0x30620

#103 · 0x41700

#104 · 0x202a0

#105 · 0x18ef0

#106 · 0x41280

#107 · 0x66ab0

#108 · 0x66b10

#109 · 0x3a9d0

#110 · 0x3a800

#111 · 0x668e0

#115 · 0x20910

#116 · 0x69c80

#117 · 0x62080

#120 · 0x2a240

#121 · 0x3ff90

SHRegGetValueFromHKCUHKLM #122 · 0x16f80

#123 · 0x16c80

#124 · 0x57ec0

#125 · 0x57ef0

#126 · 0x14e60

#127 · 0x334f0

#130 · 0x183b0

#131 · 0x14c10

#132 · 0x57490

#133 · 0x574d0

#140 · 0x362f0

#141 · 0x36550

#142 · 0x14840

#143 · 0x365c0

#144 · 0x38940

#145 · 0x36410

#150 · 0x736b0

#151 · 0x367b0

#152 · 0x73870

#153 · 0x737a0

#160 · 0x73640

#161 · 0x3a240

#162 · 0x3a580

#170 · 0x1fa40

#171 · 0x575b0

#172 · 0x1b430

#173 · 0x36740

#174 · 0x36900

#175 · 0x57500

#181 · 0x25840

#182 · 0x2b860

#183 · 0x21e90

#184 · 0x40620

#185 · 0x73b20

#186 · 0x39be0

#187 · 0x1c680

#188 · 0x3b940

#189 · 0x2a3d0

#190 · 0x22a60

#191 · 0x3fed0

#192 · 0x15210

#193 · 0x17bb0

#200 · 0x33a20

#220 · 0x58a20

#222 · 0x41f60

#223 · 0x58c50

#224 · 0x58ea0

#225 · 0x589d0

#226 · 0x58af0

#227 · 0x58c80

#228 · 0x58ed0

#229 · 0x58a70

#230 · 0x390d0

#231 · 0x6eda0

#232 · 0x6ee40

#233 · 0x394b0

#234 · 0x3ba10

#240 · 0x39c10

#241 · 0x58e60

#242 · 0x58ce0

#244 · 0x227a0

#245 · 0x3c240

#246 · 0x3f2d0

#247 · 0x3dfb0

#248 · 0x3f400

#249 · 0x59950

#250 · 0x195c0

#251 · 0x343f0

#252 · 0x73f30

#253 · 0x74380

#254 · 0x34760

#255 · 0x1aba0

#260 · 0x58b50

#261 · 0x58d60

#270 · 0x37870

#280 · 0x38470

#281 · 0x744f0

#282 · 0x744c0

#283 · 0x74430

#284 · 0x38660

#290 · 0x38450

#291 · 0x74460

#292 · 0x38430

Imported DLLs & functions 239

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x10079000

api-ms-win-core-atoms-l1-1-0.dll 3

GlobalAddAtomExW 0x10079008

GlobalDeleteAtom 0x10079010

GlobalGetAtomNameW 0x1007900c

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x1007901c

IsDebuggerPresent 0x10079020

OutputDebugStringW 0x10079018

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x10079028

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x10079030

api-ms-win-core-errorhandling-l1-1-0.dll 5

GetLastError 0x10079040

RaiseException 0x1007903c

SetLastError 0x10079048

SetUnhandledExceptionFilter 0x10079044

UnhandledExceptionFilter 0x10079038

api-ms-win-core-errorhandling-l1-1-2.dll 1

RaiseFailFastException 0x10079050

api-ms-win-core-file-l1-1-0.dll 18

CreateDirectoryW 0x10079068

CreateFileW 0x10079070

DeleteFileW 0x1007909c

FlushFileBuffers 0x1007906c

GetDriveTypeW 0x10079078

GetFileAttributesExW 0x1007905c

GetFileAttributesW 0x10079098

GetFileInformationByHandle 0x10079058

GetFileSizeEx 0x10079060

GetVolumeInformationByHandleW 0x10079080

LockFileEx 0x10079084

ReadFile 0x10079074

SetEndOfFile 0x10079088

SetFileInformationByHandle 0x10079094

SetFilePointer 0x1007907c

SetFilePointerEx 0x1007908c

UnlockFileEx 0x10079090

WriteFile 0x10079064

api-ms-win-core-file-l1-2-0.dll 1

CreateFile2 0x100790a4

api-ms-win-core-file-l2-1-0.dll 2

GetFileInformationByHandleEx 0x100790b0

ReplaceFileW 0x100790ac

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x100790b8

DuplicateHandle 0x100790bc

api-ms-win-core-heap-l1-1-0.dll 3

GetProcessHeap 0x100790c4

HeapAlloc 0x100790cc

HeapFree 0x100790c8

api-ms-win-core-heap-l2-1-0.dll 3

LocalAlloc 0x100790dc

LocalFree 0x100790d4

LocalReAlloc 0x100790d8

api-ms-win-core-io-l1-1-0.dll 3

CancelIoEx 0x100790ec

DeviceIoControl 0x100790e4

GetOverlappedResult 0x100790e8

api-ms-win-core-largeinteger-l1-1-0.dll 1

MulDiv 0x100790f4

api-ms-win-core-libraryloader-l1-2-0.dll 13

DisableThreadLibraryCalls 0x10079104

FindResourceExW 0x1007910c

FreeLibrary 0x1007911c

FreeLibraryAndExitThread 0x10079108

GetModuleFileNameA 0x10079114

GetModuleFileNameW 0x10079120

GetModuleHandleExW 0x10079110

GetModuleHandleW 0x100790fc

GetProcAddress 0x10079124

LoadLibraryExW 0x10079100

LoadResource 0x10079118

LockResource 0x1007912c

SizeofResource 0x10079128

api-ms-win-core-localization-l1-2-0.dll 2

FormatMessageW 0x10079134

GetLocaleInfoW 0x10079138

api-ms-win-core-localization-obsolete-l1-2-0.dll 1

GetUserDefaultUILanguage 0x10079140

api-ms-win-core-memory-l1-1-0.dll 4

CreateFileMappingW 0x1007914c

MapViewOfFile 0x10079154

OpenFileMappingW 0x10079150

UnmapViewOfFile 0x10079148

api-ms-win-core-path-l1-1-0.dll 1

PathCchAddBackslashEx 0x1007915c

api-ms-win-core-processenvironment-l1-1-0.dll 2

ExpandEnvironmentStringsA 0x10079164

ExpandEnvironmentStringsW 0x10079168

api-ms-win-core-processthreads-l1-1-0.dll 17

CreateThread 0x10079184

GetCurrentProcess 0x10079170

GetCurrentProcessId 0x100791a8

GetCurrentThread 0x100791a4

GetCurrentThreadId 0x1007918c

GetProcessId 0x10079190

GetStartupInfoW 0x100791a0

GetThreadPriority 0x1007917c

OpenProcessToken 0x10079178

OpenThreadToken 0x10079188

ResumeThread 0x10079198

SetThreadPriority 0x10079174

TerminateProcess 0x1007919c

TlsAlloc 0x10079180

TlsFree 0x10079194

TlsGetValue 0x100791b0

TlsSetValue 0x100791ac

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x100791b8

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x100791c0

api-ms-win-core-quirks-l1-1-0.dll 1

QuirkIsEnabled 0x100791c8

api-ms-win-core-registry-l1-1-0.dll 20

RegCloseKey 0x10079218

RegCreateKeyExA 0x10079210

RegCreateKeyExW 0x1007921c

RegDeleteKeyExA 0x100791ec

RegDeleteKeyExW 0x100791d8

RegDeleteValueA 0x10079208

RegDeleteValueW 0x1007920c

RegEnumKeyExA 0x10079214

RegEnumKeyExW 0x100791d4

RegEnumValueA 0x100791e4

RegEnumValueW 0x10079204

RegGetValueW 0x100791d0

RegOpenKeyExA 0x100791fc

RegOpenKeyExW 0x100791f0

RegQueryInfoKeyA 0x100791e8

RegQueryInfoKeyW 0x100791e0

RegQueryValueExA 0x100791f8

RegQueryValueExW 0x100791f4

RegSetValueExA 0x100791dc

RegSetValueExW 0x10079200

api-ms-win-core-shlwapi-legacy-l1-1-0.dll 10

PathCombineW 0x1007923c

PathFileExistsW 0x10079248

PathFindExtensionW 0x10079244

PathFindFileNameW 0x10079240

PathGetDriveNumberW 0x1007922c

PathIsRelativeW 0x10079234

PathIsUNCW 0x10079224

PathRemoveFileSpecW 0x10079238

PathUnExpandEnvStringsA 0x10079228

PathUnExpandEnvStringsW 0x10079230

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 8

QISearch 0x1007925c

StrChrW 0x10079254

StrCmpICW 0x10079258

StrCmpNICW 0x1007926c

StrCmpNIW 0x10079250

StrDupA 0x10079268

StrDupW 0x10079260

StrToIntW 0x10079264

api-ms-win-core-string-l1-1-0.dll 2

MultiByteToWideChar 0x10079278

WideCharToMultiByte 0x10079274

api-ms-win-core-string-l2-1-1.dll 1

SHLoadIndirectString 0x10079280

api-ms-win-core-string-obsolete-l1-1-0.dll 1

lstrcmpiW 0x10079288

api-ms-win-core-synch-l1-1-0.dll 24

AcquireSRWLockExclusive 0x10079290

AcquireSRWLockShared 0x100792c4

CreateEventExW 0x100792ec

CreateEventW 0x100792dc

CreateMutexExW 0x100792a8

CreateMutexW 0x100792b4

CreateSemaphoreExW 0x100792cc

DeleteCriticalSection 0x100792e4

EnterCriticalSection 0x100792e0

InitializeCriticalSection 0x100792d4

InitializeCriticalSectionEx 0x100792a0

InitializeSRWLock 0x100792b0

LeaveCriticalSection 0x100792c8

OpenEventW 0x100792c0

OpenSemaphoreW 0x10079294

ReleaseMutex 0x1007929c

ReleaseSemaphore 0x100792bc

ReleaseSRWLockExclusive 0x100792e8

ReleaseSRWLockShared 0x10079298

SetEvent 0x100792a4

TryAcquireSRWLockExclusive 0x100792d0

WaitForMultipleObjectsEx 0x100792d8

WaitForSingleObject 0x100792ac

WaitForSingleObjectEx 0x100792b8

api-ms-win-core-synch-l1-2-0.dll 4

InitOnceBeginInitialize 0x10079300

InitOnceComplete 0x100792f4

InitOnceExecuteOnce 0x100792f8

Sleep 0x100792fc

api-ms-win-core-sysinfo-l1-1-0.dll 4

GetSystemTimeAsFileTime 0x10079310

GetTickCount 0x10079314

GetTickCount64 0x1007930c

GetVersionExW 0x10079308

api-ms-win-core-sysinfo-l1-2-0.dll 1

GetOsSafeBootMode 0x1007931c

api-ms-win-core-threadpool-l1-2-0.dll 12

CallbackMayRunLong 0x10079324

CloseThreadpoolTimer 0x10079350

CloseThreadpoolWait 0x10079340

CreateThreadpoolTimer 0x10079328

CreateThreadpoolWait 0x10079348

DisassociateCurrentThreadFromCallback 0x10079334

FreeLibraryWhenCallbackReturns 0x1007933c

SetThreadpoolTimer 0x10079338

SetThreadpoolWait 0x1007934c

TrySubmitThreadpoolCallback 0x10079330

WaitForThreadpoolTimerCallbacks 0x1007932c

WaitForThreadpoolWaitCallbacks 0x10079344

api-ms-win-core-threadpool-legacy-l1-1-0.dll 3

CreateTimerQueueTimer 0x10079360

DeleteTimerQueueTimer 0x1007935c

QueueUserWorkItem 0x10079358

api-ms-win-core-util-l1-1-0.dll 2

DecodePointer 0x10079368

EncodePointer 0x1007936c

api-ms-win-core-version-l1-1-0.dll 3

GetFileVersionInfoExW 0x1007937c

GetFileVersionInfoSizeExW 0x10079374

VerQueryValueW 0x10079378

api-ms-win-core-wow64-l1-1-0.dll 1

IsWow64Process 0x10079384

api-ms-win-eventing-provider-l1-1-0.dll 5

EventProviderEnabled 0x10079394

EventRegister 0x1007939c

EventSetInformation 0x1007938c

EventUnregister 0x10079390

EventWriteTransfer 0x10079398

api-ms-win-security-base-l1-1-0.dll 5

AdjustTokenPrivileges 0x100793b0

CheckTokenMembership 0x100793b4

GetTokenInformation 0x100793a8

ImpersonateLoggedOnUser 0x100793a4

RevertToSelf 0x100793ac

combase.dll 1

0x100793bc

msvcrt.dll 22

__CxxFrameHandler3 0x100793c8

__dllonexit 0x100793ec

_amsg_exit 0x10079400

_callnewh 0x100793c4

_except_handler4_common 0x100793e4

_ftol2 0x100793cc

_ftol2_sse 0x100793d4

_initterm 0x100793f8

_lock 0x100793f4

_onexit 0x100793e8

_purecall 0x1007940c

_unlock 0x100793f0

_vsnwprintf 0x100793d0

_XcptFilter 0x10079404

floor 0x10079414

free 0x10079408

malloc 0x100793fc

memcmp 0x100793d8

memcpy 0x100793dc

memcpy_s 0x10079410

memmove 0x100793e0

memset 0x10079418

ntdll.dll 19

_vsnprintf_s 0x10079420

memmove_s 0x10079444

NtCreateFile 0x10079454

NtQueryInformationProcess 0x10079450

NtQuerySystemInformation 0x10079440

RtlAcquireSRWLockExclusive 0x1007944c

RtlAreLongPathsEnabled 0x10079430

RtlInitUnicodeString 0x10079458

RtlNtStatusToDosError 0x1007945c

RtlQueryWnfStateData 0x10079464

RtlReleaseSRWLockExclusive 0x10079448

RtlSleepConditionVariableSRW 0x1007943c

RtlSubscribeWnfStateChangeNotification 0x10079468

RtlUnsubscribeWnfNotificationWaitForCompletion 0x10079460

RtlWakeAllConditionVariable 0x10079438

toupper 0x10079434

wcschr 0x10079428

wcsncmp 0x10079424

wcsrchr 0x1007942c