shlwapi.dll - Shell Light-weight Utility Library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	shlwapi.dll
size	350208 (0x55800)
md5	8cc3c111d653e96f3ea1590891491d71

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
149	30729	1
147	30729	15
1	0	605
132	30729	100
146	30729	1
131	30729	45
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ce7b9e2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x50e00
SizeOfInitializedData	0x4600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x19ba6
BaseOfCode	0x1000
BaseOfData	0x55000
ImageBase	0x6de20000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x57000
SizeOfHeaders	0x400
CheckSum	0x5db58
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x50d50	0x50e00	R-X CODE
.data	0x52000	0xb6c	0xc00	RW- IDATA
.rsrc	0x53000	0xda0	0xe00	R-- IDATA
.reloc	0x54000	0x2b60	0x2c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1f4e8	0x43b2
IMPORT	0x501bc	0xa0
RESOURCE	0x53000	0xda0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x54000	0x2b60
DEBUG	0x51cf0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x38020	0x40
Bound_IAT	0x280	0xb8
IAT	0x1000	0x4d8
Delay_IAT	0x4ef50	0x260
CLR_Header	0	0

show previews

type	name	size
MUI	#1	216
ICON	#1	744
GROUP_ICON	#300	20
VERSION	#1	940
MANIFEST	#123	1170

module_name	hint	ord	function_name
KERNEL32.dll	1019		ReleaseSRWLockExclusive
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	658		GetTickCount
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	355		FreeLibraryAndExitThread
KERNEL32.dll	1112		SetEvent
KERNEL32.dll	782		IsWow64Process
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	181		CreateThread
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	532		GetModuleHandleExA
KERNEL32.dll	669		GetUserDefaultUILanguage
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	869		MulDiv
KERNEL32.dll	810		LCIDToLocaleName
KERNEL32.dll	666		GetUserDefaultLCID
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	584		GetProcessHeap
KERNEL32.dll	719		HeapFree
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	529		GetModuleFileNameA
KERNEL32.dll	675		GetVersionExW
KERNEL32.dll	884		OpenEventW
KERNEL32.dll	621		GetSystemDefaultUILanguage
KERNEL32.dll	635		GetSystemWindowsDirectoryW
KERNEL32.dll	530		GetModuleFileNameW
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	850		LockFileEx
KERNEL32.dll	1237		UnlockFileEx
KERNEL32.dll	959		ReadFile
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	1122		SetFileInformationByHandle
KERNEL32.dll	1034		ReplaceFileW
KERNEL32.dll	491		GetFileInformationByHandleEx
KERNEL32.dll	677		GetVolumeInformationByHandleW
KERNEL32.dll	1125		SetFilePointerEx
KERNEL32.dll	1124		SetFilePointer
KERNEL32.dll	1106		SetEndOfFile
KERNEL32.dll	845		LocalSize
KERNEL32.dll	895		OpenProcess
KERNEL32.dll	232		DuplicateHandle
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	690		GlobalAddAtomW
KERNEL32.dll	700		GlobalGetAtomNameW
KERNEL32.dll	854		MapViewOfFile
KERNEL32.dll	137		CreateFileMappingA
KERNEL32.dll	693		GlobalDeleteAtom
KERNEL32.dll	218		DeleteTimerQueueTimer
KERNEL32.dll	189		CreateTimerQueueTimer
KERNEL32.dll	943		QueueUserWorkItem
KERNEL32.dll	1020		ReleaseSRWLockShared
KERNEL32.dll	1		AcquireSRWLockShared
KERNEL32.dll	575		GetPrivateProfileStringA
KERNEL32.dll	576		GetPrivateProfileStringW
KERNEL32.dll	1323		WritePrivateProfileStringW
KERNEL32.dll	533		GetModuleHandleExW
KERNEL32.dll	350		FormatMessageW
KERNEL32.dll	516		GetLocaleInfoW
KERNEL32.dll	1201		SizeofResource
KERNEL32.dll	851		LockResource
KERNEL32.dll	833		LoadResource
KERNEL32.dll	334		FindResourceW
KERNEL32.dll	140		CreateFileMappingW
KERNEL32.dll	888		OpenFileMappingW
KERNEL32.dll	534		GetModuleHandleW
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll			AcquireSRWLockExclusive
KERNEL32.dll	744		InitializeSRWLock
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	531		GetModuleHandleA
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	1238		UnmapViewOfFile
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	222		DisableThreadLibraryCalls
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	830		LoadLibraryExW
KERNEL32.dll	843		LocalReAlloc
KERNEL32.dll	870		MultiByteToWideChar
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	221		DeviceIoControl
KERNEL32.dll	285		ExpandEnvironmentStringsW
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	1119		SetFileAttributesW
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	686		GetWindowsDirectoryW
KERNEL32.dll	623		GetSystemDirectoryW
KERNEL32.dll	1052		SearchPathW
KERNEL32.dll	505		GetFullPathNameW
KERNEL32.dll	1346		lstrcmpW
KERNEL32.dll	1349		lstrcmpiW
KERNEL32.dll	488		GetFileAttributesW
KERNEL32.dll	476		GetEnvironmentVariableW
KERNEL32.dll	1358		lstrlenW
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	284		ExpandEnvironmentStringsA
KERNEL32.dll	97		CompareStringA
KERNEL32.dll	475		GetEnvironmentVariableA
KERNEL32.dll	1137		SetLastError
KERNEL32.dll	840		LocalFree
KERNEL32.dll	836		LocalAlloc
KERNEL32.dll	811		LCMapStringA
KERNEL32.dll	1116		SetFileAttributesA
KERNEL32.dll	632		GetSystemTimeAsFileTime
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	579		GetProcAddress
KERNEL32.dll	512		GetLastError
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	829		LoadLibraryExA
KERNEL32.dll	766		IsDBCSLeadByte
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	483		GetFileAttributesA
KERNEL32.dll	1111		SetErrorMode
KERNEL32.dll	1348		lstrcmpiA
KERNEL32.dll	1345		lstrcmpA
KERNEL32.dll	206		DelayLoadFailureHook
KERNEL32.dll	1357		lstrlenA
KERNEL32.dll	502		GetFullPathNameA
KERNEL32.dll	1051		SearchPathA
KERNEL32.dll	302		FindClose
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	622		GetSystemDirectoryA
KERNEL32.dll	685		GetWindowsDirectoryA
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	1128		SetFileTime
KERNEL32.dll	120		CreateActCtxW
KERNEL32.dll	1013		ReleaseActCtx
KERNEL32.dll	2		ActivateActCtx
KERNEL32.dll	195		DeactivateActCtx
KERNEL32.dll	1198		Sleep
KERNEL32.dll	931		QueryPerformanceCounter
KERNEL32.dll	1212		TerminateProcess
KERNEL32.dll	1231		UnhandledExceptionFilter
KERNEL32.dll	1184		SetUnhandledExceptionFilter
GDI32.dll	493		GetLayout
GDI32.dll	312		ExtTextOutW
GDI32.dll	542		GetTextExtentPoint32W
GDI32.dll	674		SetStretchBltMode
GDI32.dll	84		CreateSolidBrush
GDI32.dll	525		GetStockObject
GDI32.dll	660		SetMapMode
GDI32.dll	607		Rectangle
GDI32.dll	692		StretchDIBits
GDI32.dll	632		SelectPalette
GDI32.dll	604		RealizePalette
GDI32.dll	53		CreateDIBSection
GDI32.dll	458		GetDIBits
GDI32.dll	507		GetObjectA
GDI32.dll	61		CreateFontIndirectA
GDI32.dll	638		SetBkColor
GDI32.dll	459		GetDeviceCaps
GDI32.dll	66		CreateHalftonePalette
GDI32.dll	512		GetPaletteEntries
GDI32.dll	230		DeleteObject
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	530		GetSystemPaletteEntries
GDI32.dll	73		CreatePalette
GDI32.dll	227		DeleteDC
GDI32.dll	545		GetTextExtentPointW
GDI32.dll	481		GetGlyphIndicesW
GDI32.dll	631		SelectObject
GDI32.dll	543		GetTextExtentPointA
GDI32.dll	480		GetGlyphIndicesA
GDI32.dll	538		GetTextExtentExPointI
USER32.dll	587		RegisterClassA
USER32.dll	267		GetClassInfoA
USER32.dll	590		RegisterClassW
USER32.dll	270		GetClassInfoW
USER32.dll	773		UnregisterClassA
USER32.dll	774		UnregisterClassW
USER32.dll	562		PeekMessageA
USER32.dll	540		MsgWaitForMultipleObjects
USER32.dll	457		IsChild
USER32.dll	684		SetPropA
USER32.dll	747		SystemParametersInfoA
USER32.dll	616		RemovePropA
USER32.dll	637		SendNotifyMessageA
USER32.dll	638		SendNotifyMessageW
USER32.dll	568		PostThreadMessageA
USER32.dll	174		DispatchMessageA
USER32.dll	764		TranslateMessage
USER32.dll	345		GetMessageA
USER32.dll			ActivateKeyboardLayout
USER32.dll	318		GetKeyboardLayout
USER32.dll	462		IsDlgButtonChecked
USER32.dll	218		EndDialog
USER32.dll	172		DialogBoxParamW
USER32.dll	171		DialogBoxParamA
USER32.dll	109		CreateWindowExA
USER32.dll	488		LoadCursorA
USER32.dll	708		SetWindowLongW
USER32.dll	110		CreateWindowExW
USER32.dll	307		GetIconInfo
USER32.dll	379		GetSysColor
USER32.dll	591		RegisterClipboardFormatA
USER32.dll	46		CharLowerW
USER32.dll	451		IsCharAlphaNumericW
USER32.dll	49		CharNextW
USER32.dll	63		CheckMenuItem
USER32.dll	107		CreatePopupMenu
USER32.dll	337		GetMenuItemCount
USER32.dll	339		GetMenuItemInfoA
USER32.dll	156		DefWindowProcW
USER32.dll	155		DefWindowProcA
USER32.dll	479		IsWindowUnicode
USER32.dll	566		PostMessageW
USER32.dll	565		PostMessageA
USER32.dll	223		EnumChildWindows
USER32.dll	503		LoadMenuW
USER32.dll	378		GetSubMenu
USER32.dll	615		RemoveMenu
USER32.dll	164		DestroyMenu
USER32.dll	356		GetParent
USER32.dll	678		SetParent
USER32.dll	405		GetWindowLongA
USER32.dll	707		SetWindowLongA
USER32.dll	335		GetMenuDefaultItem
USER32.dll	214		EnableMenuItem
USER32.dll	506		LoadStringW
USER32.dll	419		GetWindowTextW
USER32.dll	363		GetPropW
USER32.dll	382		GetSystemMetrics
USER32.dll	60		CharUpperW
USER32.dll	636		SendMessageW
USER32.dll	715		SetWindowTextW
USER32.dll	52		CharPrevW
USER32.dll	505		LoadStringA
USER32.dll	416		GetWindowTextA
USER32.dll	362		GetPropA
USER32.dll	533		MessageBoxW
USER32.dll	57		CharUpperA
USER32.dll	295		GetDlgItem
USER32.dll	276		GetClientRect
USER32.dll	631		SendMessageA
USER32.dll	714		SetWindowTextA
USER32.dll	289		GetDC
USER32.dll	613		ReleaseDC
USER32.dll	50		CharPrevA
USER32.dll	47		CharNextA
USER32.dll	420		GetWindowThreadProcessId
ntdll.dll	1871		_wcsicmp
ntdll.dll	398		NtQueryInformationProcess
ntdll.dll	1822		_chkstk
ntdll.dll		1
ntdll.dll	56		EtwEventUnregister
ntdll.dll	55		EtwEventRegister
ntdll.dll	81		EtwUnregisterTraceGuids
ntdll.dll	74		EtwRegisterTraceGuidsW
ntdll.dll	67		EtwGetTraceLoggerHandle
ntdll.dll	66		EtwGetTraceEnableLevel
ntdll.dll	65		EtwGetTraceEnableFlags
ntdll.dll	1810		_allmul
ntdll.dll	53		EtwEventEnabled
ntdll.dll	57		EtwEventWrite
ntdll.dll	79		EtwTraceMessage
ntdll.dll	1963		wcschr
ntdll.dll	1902		iswalpha
ntdll.dll	1868		_vsnwprintf
ntdll.dll	1914		memcpy
ntdll.dll	1866		_vsnprintf
ntdll.dll	1852		_strnicmp
ntdll.dll	1916		memmove
ntdll.dll	1893		isalpha
ntdll.dll	1918		memset
msvcrt.dll	934		_unlock
msvcrt.dll	345		_except_handler4_common
msvcrt.dll	747		_onexit
msvcrt.dll	578		_lock
msvcrt.dll	141		__dllonexit
msvcrt.dll	106		_XcptFilter
msvcrt.dll	257		_amsg_exit
msvcrt.dll	469		_initterm
msvcrt.dll	1190		free
msvcrt.dll	1246		malloc
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	24		RegOpenKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	27		RegQueryInfoKeyA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	3		RegDeleteKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	1		RegCreateKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll			RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	29		RegQueryValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	36		RegSetValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	7		RegDeleteValueA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	2		RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25		RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	11		RegEnumKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	37		RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	4		RegDeleteKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	28		RegQueryInfoKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	8		RegDeleteValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30		RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	13		RegEnumValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	10		RegEnumKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	12		RegEnumValueA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	23		RegOpenCurrentUser
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	17		RegGetValueW
KERNELBASE.dll	423		LoadStringByReference

ord	entry_va	function_name
1	0x4566e	ParseURLA
2	0x15534	ParseURLW
3	0x391c7
4	0x2c6e
5	0x39db8
6	0x2bdf
7	0x192d0	SHAllocShared
8	0xee2b	SHLockShared
9	0x1931e	SHUnlockShared
10	0x19235	SHFreeShared
11	0x318d4
12	0x1158a	SHCreateMemStream
13	0x43a84
14	0x43b79	GetAcceptLanguagesA
15	0x2cdae	GetAcceptLanguagesW
16	0x14574	SHCreateThread
17	0x2f44a
18	0x11e58
19	0x11f80
20	0x11fbb
21	0x12828
22	0x11e1e
23	0x18a2d
24	0x1a80e
25	0x222e9
26	0x222fd
27	0x22311
28	0x22325
29	0x2d24d	IsCharSpaceW
30	0x3ef15
31	0x3eda9
32	0x3eeed
33	0x3ec1e
34	0x3ed5d
35	0x3ef58
36	0x22340
37	0x22353
38	0x2236a
39	0x2237c
40	0x22392
41	0x223a3
42	0x223b4
43	0x223c6
44	0x223d8
45	0x223ee
46	0x22406
47	0x22423
48	0x22442
49	0x22452
50	0x2246c
51	0x22486
52	0x2249c
53	0x224b1
54	0x224cb
55	0x224db
56	0x224f2
57	0x22508
58	0x2251d
59	0x2253c
60	0x22553
61	0x2256b
62	0x2257c
63	0x22594
64	0x225ae
65	0x225ca
66	0x225e2
67	0x225f9
68	0x2260c
69	0x22624
70	0x22639
71	0x2264e
72	0x22663
73	0x22682
74	0x226a0
75	0x226b7
76	0x226d3
77	0x226ed
78	0x22705
79	0x2271b
80	0x2272e
81	0x2274a
82	0x22767
83	0x2277c
84	0x22796
85	0x227a7
86	0x227c6
87	0x227e1
88	0x227f1
89	0x2280b
90	0x22825
91	0x2283b
92	0x22857
93	0x2286a
94	0x22880
95	0x22896
96	0x228ac
97	0x228c8
98	0x228e6
99	0x228f9
100	0x22911
101	0x2292a
102	0x2293d
103	0x22950
104	0x22961
105	0x22973
106	0x2298b
107	0x2299c
108	0x229af
109	0x229ca
110	0x229dd
111	0x229f3
112	0x22a10
113	0x22a23
114	0x22a36
115	0x22a48
116	0x22a64
117	0x22a78
118	0x22a8c
119	0x445a9
120	0x445fd
121	0x44639
122	0x446bd
123	0x446f9
124	0x44771
125	0x447c1
126	0x447fd
127	0x44839
128	0x44875
129	0x448b1
130	0x448ed
131	0x22aa6
132	0x22abc
133	0x22adc
134	0x22afa
135	0x22b0d
136	0x22b28
137	0x22b3c
138	0x22b5a
139	0x22b71
140	0x22b89
141	0x22b99
142	0x22baf
143	0x22bc8
144	0x22bde
145	0x22bee
146	0x22c0b
147	0x22c28
148	0x22c40
149	0x22c52
150	0x22c62
151	0x2cb3d	StrCmpNCA
152	0x16053	StrCmpNCW
153	0xcdae	StrCmpNICA
154	0x15605	StrCmpNICW
155	0xd2ac	StrCmpCA
156	0x1ace9	StrCmpCW
157	0x1947e	StrCmpICA
158	0x1bb2d	StrCmpICW
159	0x22c74
160	0x40eb9
161	0x40e7e
162	0x13c73
163	0x41b3d
164	0xf0cd
165	0x13cc5
166	0xbdd9
167	0x31518
168	0x30def	ConnectToConnectionPoint
169	0x1b122	IUnknown_AtomicRelease
170	0x3b039
171	0x22c8c
172	0x1af5a	IUnknown_GetWindow
173	0x31e34
174	0x13472	IUnknown_SetSite
175	0x18939
176	0x14266	IUnknown_QueryService
177	0x25dcc
178	0x13cfb
179	0x30749
180	0x40fa8
181	0x40fe5
182	0x41008
183	0x4102d
184	0x13881	IStream_Read
185	0x41314	SHMessageBoxCheckA
186	0x41451
187	0x139ff
188	0x44965
189	0x449f9
190	0x421f7
191	0x411e7	SHMessageBoxCheckW
192	0x30335
193	0x137f0
194	0x1ac8d
195	0x414e4
196	0x22c9a
197	0x2389f
198	0x415a9
199	0x1b141	IUnknown_Set
200	0x41e9f
201	0x25204
202	0x25241
203	0x4228d	SHStripMneumonicA
204	0x1b176	SHIsChildOrSelf
205	0x3fff0
206	0x4001a
207	0x4178e
208	0x3059e
209	0x314d8
210	0x3060b
211	0x2528d
212	0x1985e	IStream_Write
213	0x115d7	IStream_Reset
214	0x30afd	IStream_Size
215	0x1ad74	SHAnsiToUnicode
216	0x1ad92
217	0x17173	SHUnicodeToAnsi
218	0x17191
219	0x1c4c5	QISearch
220	0x415e0
221	0x41696
222	0x22ca8
223	0x22cb6
224	0x22cc4
225	0x1417a	SHStripMneumonicW
226	0x22cd2
227	0x22ce0
228	0x4a799
229	0x4a774
230	0x4a709
231	0x32e8
232	0x4a68f
233	0x3315
234	0x4a3de
235	0x4a360
236	0xddac
237	0x139ba
238	0xe017
239	0x14609
240	0x1a08a
241	0x22cee
242	0x22cfc
243	0x22d0a
244	0x22d18
245	0x22d26
246	0x22d34
247	0x22d42
248	0x22d50
249	0x22d5e
250	0x22d6c
251	0x22d7a
252	0x22d88
253	0x22d96
254	0x22da4
255	0x22db2
256	0xedb6	IUnknown_GetSite
257	0xe065
258	0x22dc0
259	0x22dce
260	0x1b2cf
261	0x22ddc
262	0x22dea
263	0x47721
264	0x22df8
265	0x47705
266	0x14d41
267	0x182f8
268	0x1999a
269	0x17251
270	0x1720e
271	0x1d42d
272	0x22e06
273	0x22e14
274	0x22e22
275	0x22e30
276	0x416ca	WhichPlatform
277	0x22e3e
278	0xefe6
279	0x422da
280	0x400e5	SHRegGetIntW
281	0x30ec9
282	0x303a1
283	0x30f5f
284	0x30d8c
285	0x30713
286	0x46758
287	0x306bd
288	0x30aa5
289	0x22e4c
290	0x22e5d
291	0x420f8
292	0x4204c
293	0x22e6b
294	0x49bd4
295	0x49b1f
296	0x22e79
297	0x22e87
298	0x22e95
299	0x22eb9
300	0x22ecb
301	0x22edd
302	0x22ef0
303	0x22f08
304	0x22f1f
305	0x22f35
306	0x22f4b
307	0x22f6e
308	0x22f88
309	0x22fa1
310	0x22fb7
311	0x22fcf
312	0x22fe7
313	0x23009
314	0x23020
315	0x23038
316	0x18578
317	0x2eb05
318	0x2304f
319	0x23066
320	0x43da1
321	0x43e01
322	0x43d01
323	0x43d51
324	0x4412d
325	0x441c9
326	0x44265
327	0x44305
328	0x44035
329	0x440f2
330	0x4447d
331	0x43f23
332	0x2307b
333	0x23091
334	0x230ac
335	0x230c9
336	0x230e1
337	0x230fa
338	0x23111
339	0x2312d
340	0x23147
341	0x2315a
342	0x23171
343	0x23195
344	0x13503
345	0x3fd08	SHAnsiToAnsi
346	0x3fd63	SHUnicodeToUnicode
347	0x44681
348	0x2562c
349	0x3a82c
350	0x43c4f
351	0x43c89
352	0x43cc5
353	0x3d71b	SHFormatDateTimeA
354	0x25e19	SHFormatDateTimeW
355	0x41c3d
356	0x231a3
357	0x231b1
358	0x231cb
359	0x231e5
360	0x231f9
361	0x23213
362	0x44929
363	0x422fb
364	0x3ac46
365	0x14db4
366	0x44735
367	0x2322e
368	0x23252
369	0x23274
370	0x2328c
371	0x232a1
372	0x232b7
373	0x232d5
374	0x232ec
375	0x232fa
376	0x23308
377	0x41a91	MLLoadLibraryA
378	0x41a4d	MLLoadLibraryW
379	0x23325
380	0x23348
381	0x3c32e
382	0x2bda8
383	0x4a8f5
384	0x41426
385	0x2336b
386	0x23379
387	0x23387
388	0x3ddd1	ShellMessageBoxW
389	0x23395
390	0x233af
391	0x233bd
392	0x233d3
393	0x233e4
394	0x23406
395	0x2341d
396	0x2342d
397	0x2343b
398	0x2344b
399	0x3e054
400	0x3e099
401	0x23459
402	0x23470
403	0x23483
404	0x2349d
405	0x472dd
406	0x471a9
407	0x3bf5b
408	0x3bdad
409	0x3c34b
410	0x3c5a7
411	0x234ab
412	0x234b9
413	0x1413a
414	0x234c7
415	0x234d5
416	0x234e3
417	0x234f1
418	0x41ad5	MLFreeLibrary
419	0x234ff
420	0x23516
421	0x23524
422	0x23532
423	0x23540
424	0x2354e
425	0x2355c
426	0x2356e
427	0x23581
428	0x23597
429	0x235af
430	0x235bd
431	0x235cb
432	0x41809	SHSendMessageBroadcastA
433	0x4182b	SHSendMessageBroadcastW
434	0x235d9
435	0x4190d
436	0x4191e
437	0x1bee6	IsOS
438	0x3dd52
439	0x12dc9
440	0x470cd
441	0x47093
442	0x235f4
443	0x23615
444	0x23639
445	0x382b9
446	0x12e8d
447	0x384ad
448	0x3259
449	0x391fd
450	0x2e8d
451	0x38f22
452	0x3ce86
453	0x38f00
454	0x21dd
455	0x388b3
456	0x14e08
457	0x2365d
458	0x23677
459	0x2aeb0
460	0x158dd
461	0x1ad26
462	0x462e7	UrlFixupW
463	0x3a231
464	0x27f2
465	0x38cf6
466	0x2ba67
467	0x3c985	SHRunIndirectRegClientCommand
468	0x3c8b5
469	0x3c7b1
470	0x23691
471	0x1577e
472	0x47ecf
473	0x2369f
474	0x236ad
475	0x236bb
476	0x184ae
477	0x30b5b
478	0x1b1c1
479	0x11615
480	0x236c9
481	0x2bc95
482	0x236d7
483	0x236e5
484	0x12c59
485	0x474fc
486	0x118b1
487	0x12ccb	SHLoadIndirectString
488	0x236f3
489	0x23701
490	0x23719
491	0x4184d
492	0x23732
493	0x2a61e
494	0x141a5
495	0x30878
496	0x30b75
497	0x30a16
498	0x23740
499	0x3108c
500	0x1a8cc	AssocCreate
501	0x10f7f	AssocGetPerceivedType
502	0x3a09	AssocIsDangerous
503	0x3b95c	AssocQueryKeyA
504	0x1aebe	AssocQueryKeyW
505	0x13dbe
506	0x312bd
507	0x13e63
508	0x30fbb
509	0x12bd4
510	0x19345
511	0x12f17
512	0x138c9	IStream_ReadPidl
513	0x19948	IStream_WritePidl
514	0xf169
515	0xf211	SHGetViewStatePropertyBag
516	0x25375
517	0x2f9cd
518	0x423f1
519	0x2ebfc
520	0x13dad
521	0x30169
522	0x315a6
523	0x3017a
524	0x315b7
525	0x480dc
526	0x480ed
527	0x48067
528	0x48078
529	0x48089
530	0x4809a
531	0xe6c1
532	0x30fcc
533	0xfc14
534	0x31006
535	0x3142b
536	0xfb5e
537	0x4186e
538	0x41d7d
539	0x41dea
540	0x4170a
541	0x4175b
542	0x40f9f
543	0x2374e
544	0x1aa54
545	0x4231e
546	0x41bb2
547	0x23766
548	0x2f234
549	0x47b09
550	0x23774
551	0x23782
552	0x23790
553	0x4192f	IsInternetESCEnabled
554	0x2379e
555	0x237ac
556	0x237ba
557	0x237c8
558	0x237d6
559	0x253c9
560	0x13fd5
561	0x3a29
562	0x4192f
563	0x237e4
564	0x237f2
565	0x23800
566	0x2380e
567	0x2fe2e	SHPropertyBag_ReadStrAlloc
568	0x46894	IStream_Copy
569	0x3eb9b	DelayLoadFailureHook
570	0x264a4	SHPropertyBag_WriteBSTR
571	0x2fe64
572	0x1b48
573	0x2381c
574	0x2382a
575	0x42438
576	0x1aa78
577	0x480ab
578	0x480bc
579	0x3b70f	AssocQueryStringA
580	0x4360d
581	0x303c1
582	0x42f24
583	0x4260a
584	0x3b857	AssocQueryStringByKeyA
585	0x14013	AssocQueryStringByKeyW
586	0x14f7	AssocQueryStringW
587	0xd1a0	ChrCmpIA
588	0x14669	ChrCmpIW
589	0x3eae2	ColorAdjustLuma
590	0x3053b	ColorHLSToRGB
591	0x3048c	ColorRGBToHLS
592	0x4c5c0	DllGetVersion
593	0xfd42	GetMenuPosFromID
594	0x2cbd7	HashData
595	0x3e52b	IntlStrEqWorkerA
596	0x2e9da	IStream_ReadStr
597	0x2e959	IStream_WriteStr
598	0x23838
599	0x3f98c
600	0x3f8e2
601	0x23846
602	0x23854
603	0x23862
604	0x23870
605	0x2387e
606	0x2388c
607	0x1a166	IntlStrEqWorkerW
608	0x3f895	IsCharSpaceA
609	0xcf33	PathAddBackslashA
610	0x1c177	PathAddBackslashW
611	0x199c3
612	0x39c74	PathAddExtensionA
613	0x30fdd
614	0x30324
615	0xdd18	SHCreateThreadWithHandle
616	0x264dd
617	0x1afd
618	0x1f319
619	0x2589	PathAddExtensionW
620	0xd65e	PathAppendA
621	0x24785
622	0x181ef	PathAppendW
623	0x183d5	PathBuildRootA
624	0x1b265	PathBuildRootW
625	0x39d61	PathCanonicalizeA
626	0x47f31
627	0x2a770
628	0x275c
629	0x18296
630	0x1340a
631	0x3fe33
632	0x1f2d1
633	0xc6c2
634	0x49c51
635	0x15179
636	0x2a603
637	0x2fda7
638	0x2bcf1
639	0x41731
640	0x416d3
641	0x476f1
642	0x2957e
643	0x3cc65
644	0x469d4
645	0x468eb
646	0xe3af	PathCanonicalizeW
647	0x2b136	PathCombineA
648	0x1c39c	PathCombineW
649	0x39284	PathCommonPrefixA
650	0x1afd5	PathCommonPrefixW
651	0x395c4	PathCompactPathA
652	0x39939	PathCompactPathExA
653	0x2f0eb	PathCompactPathExW
654	0x3cea8	PathCompactPathW
655	0x2c1e9	PathCreateFromUrlA
656	0x45ebf	PathCreateFromUrlAlloc
657	0x16ce1	PathCreateFromUrlW
658	0x3ad1a	PathFileExistsA
659	0x145bf	PathFileExistsW
660	0x2eced	PathFindExtensionA
661	0x1a1b9	PathFindExtensionW
662	0x100aa	PathFindFileNameA
663	0x1bb71	PathFindFileNameW
664	0x38781	PathFindNextComponentA
665	0x2fc3f	PathFindNextComponentW
666	0x3a074	PathFindOnPathA
667	0x2ca4	PathFindOnPathW
668	0x383a4	PathFindSuffixArrayA
669	0x1f43	PathFindSuffixArrayW
670	0x38267	PathGetArgsA
671	0xe8c3	PathGetArgsW
672	0x3884b	PathGetCharTypeA
673	0x2eb74	PathGetCharTypeW
674	0x194c9	PathGetDriveNumberA
675	0x1bf44	PathGetDriveNumberW
676	0x387c7	PathIsContentTypeA
677	0x3cb17	PathIsContentTypeW
678	0x38569	PathIsDirectoryA
679	0x3864d	PathIsDirectoryEmptyA
680	0x3cd81	PathIsDirectoryEmptyW
681	0xff07	PathIsDirectoryW
682	0x38446	PathIsFileSpecA
683	0x3219	PathIsFileSpecW
684	0x38bf2	PathIsLFNFileSpecA
685	0x3cc12	PathIsLFNFileSpecW
686	0x39559	PathIsNetworkPathA
687	0x1ae84	PathIsNetworkPathW
688	0x393a1	PathIsPrefixA
689	0x1500d	PathIsPrefixW
690	0x38479	PathIsRelativeA
691	0x1bfa2	PathIsRelativeW
692	0x38d7b	PathIsRootA
693	0x15bfc	PathIsRootW
694	0x39c2c	PathIsSameRootA
695	0x2fc97	PathIsSameRootW
696	0x2fd77	PathIsSystemFolderA
697	0x3cbd7	PathIsSystemFolderW
698	0x3af5c	PathIsUNCA
699	0x3acc6	PathIsUNCServerA
700	0x3ac65	PathIsUNCServerShareA
701	0x12d81	PathIsUNCServerShareW
702	0xfebf	PathIsUNCServerW
703	0x1a197	PathIsUNCW
704	0x3aff3	PathIsURLA
705	0x155bf	PathIsURLW
706	0x38f44	PathMakePrettyA
707	0xcc23	PathMakePrettyW
708	0x38a36	PathMakeSystemFolderA
709	0x14769	PathMakeSystemFolderW
710	0x3af13	PathMatchSpecA
711	0x3af2e	PathMatchSpecExA
712	0x31672	PathMatchSpecExW
713	0x186f7	PathMatchSpecW
714	0x3af7e	PathParseIconLocationA
715	0x13f2f	PathParseIconLocationW
716	0x38727	PathQuoteSpacesA
717	0x3ce21	PathQuoteSpacesW
718	0x393df	PathRelativePathToA
719	0x2f69b	PathRelativePathToW
720	0x38fa3	PathRemoveArgsA
721	0x32b4	PathRemoveArgsW
722	0x38d1a	PathRemoveBackslashA
723	0x15c62	PathRemoveBackslashW
724	0xd8bc	PathRemoveBlanksA
725	0x13828	PathRemoveBlanksW
726	0x38d8b	PathRemoveExtensionA
727	0x11c53	PathRemoveExtensionW
728	0x2e20b	PathRemoveFileSpecA
729	0x13248	PathRemoveFileSpecW
730	0x39cdd	PathRenameExtensionA
731	0x3d32a	PathRenameExtensionW
732	0x384d4	PathSearchAndQualifyA
733	0xca35	PathSearchAndQualifyW
734	0x39ac9	PathSetDlgItemPathA
735	0x3d215	PathSetDlgItemPathW
736	0x39bdc	PathSkipRootA
737	0x2fbf5	PathSkipRootW
738	0x39593	PathStripPathA
739	0x2b549	PathStripPathW
740	0x39d33	PathStripToRootA
741	0x15b36	PathStripToRootW
742	0x2ab7b	PathUnExpandEnvStringsA
743	0x3d662	PathUnExpandEnvStringsW
744	0x38c51	PathUndecorateA
745	0x2bbd8	PathUndecorateW
746	0x38bb7	PathUnmakeSystemFolderA
747	0x3cb9b	PathUnmakeSystemFolderW
748	0x2ecc7	PathUnquoteSpacesA
749	0x15331	PathUnquoteSpacesW
750	0x29353	SHAutoComplete
751	0x40044	SHCopyKeyA
752	0x2db5a	SHCopyKeyW
753	0x3cbc	SHCreateShellPalette
754	0x47609	SHCreateStreamOnFileA
755	0x12926	SHCreateStreamOnFileEx
756	0xe15d	SHCreateStreamOnFileW
757	0x222c2	SHCreateStreamWrapper
758	0xe5a9	SHCreateThreadRef
759	0x3b17e	SHDeleteEmptyKeyA
760	0x3d685	SHDeleteEmptyKeyW
761	0x2d9f6	SHDeleteKeyA
762	0x23eb	SHDeleteKeyW
763	0x44519	SHDeleteOrphanKeyA
764	0x44561	SHDeleteOrphanKeyW
765	0x3b214	SHDeleteValueA
766	0xfcca	SHDeleteValueW
767	0x3fdb6	SHEnumKeyExA
768	0xc6ea	SHEnumKeyExW
769	0x3fddc	SHEnumValueA
770	0xcafd	SHEnumValueW
771	0x3d82	SHGetInverseCMAP
772	0x1111b	SHGetThreadRef
773	0xcf09	SHGetValueA
774	0x1a955	SHGetValueW
775	0x48255	SHIsLowMemoryMachine
776	0x19650	SHOpenRegStream2A
777	0x19589	SHOpenRegStream2W
778	0x46a59	SHOpenRegStreamA
779	0x46a31	SHOpenRegStreamW
780	0x3fe07	SHQueryInfoKeyA
781	0xcad1	SHQueryInfoKeyW
782	0x2c189	SHQueryValueExA
783	0x1b0c9	SHQueryValueExW
784	0x121a6	SHRegCloseUSKey
785	0x4a2f2	SHRegCreateUSKeyA
786	0x4a271	SHRegCreateUSKeyW
787	0x49e0e	SHRegDeleteEmptyUSKeyA
788	0x49df0	SHRegDeleteEmptyUSKeyW
789	0x49d8b	SHRegDeleteUSValueA
790	0x49d6d	SHRegDeleteUSValueW
791	0x400a8	SHRegDuplicateHKey
792	0x3a59b	SHRegEnumUSKeyA
793	0x26675	SHRegEnumUSKeyW
794	0x3a667	SHRegEnumUSValueA
795	0x3d510	SHRegEnumUSValueW
796	0x49e73	SHRegGetBoolUSValueA
797	0x12419	SHRegGetBoolUSValueW
798	0x40152	SHRegGetPathA
799	0x269d7	SHRegGetPathW
800	0x3a451	SHRegGetUSValueA
801	0x1252d	SHRegGetUSValueW
802	0xce33	SHRegGetValueA
803	0x1b8ba	SHRegGetValueW
804	0x25fb1	SHRegOpenUSKeyA
805	0x12206	SHRegOpenUSKeyW
806	0x3a76d	SHRegQueryInfoUSKeyA
807	0x26919	SHRegQueryInfoUSKeyW
808	0x3a27f	SHRegQueryUSValueA
809	0x122f6	SHRegQueryUSValueW
810	0x3ff61	SHRegSetPathA
811	0x3fecf	SHRegSetPathW
812	0x3a532	SHRegSetUSValueA
813	0x3d4a7	SHRegSetUSValueW
814	0x3a36c	SHRegWriteUSValueA
815	0x3d3c2	SHRegWriteUSValueW
816	0x4a7f2	SHRegisterValidateTemplate
817	0x294ed	SHReleaseThreadRef
818	0xee46	SHSetThreadRef
819	0x3b0ef	SHSetValueA
820	0x1170c	SHSetValueW
821	0x136cf	SHSkipJunction
822	0x2fb2a	SHStrDupA
823	0x1a0b7	SHStrDupW
824	0x3b272	ShellMessageBoxA
825	0x3e392	StrCSpnA
826	0x3e3da	StrCSpnIA
827	0x3e7c8	StrCSpnIW
828	0xfe2a	StrCSpnW
829	0x3e8a8	StrCatBuffA
830	0x3e87d	StrCatBuffW
831	0x3e6f0	StrCatChainW
832	0x3e105	StrCatW
833	0xc5e6	StrChrA
834	0xd1fe	StrChrIA
835	0x146b7	StrChrIW
836	0x3e740	StrChrNIW
837	0x2d5fd	StrChrNW
838	0x14640	StrChrW
839	0x1a147	StrCmpIW
840	0x12b71	StrCmpLogicalW
841	0x2c57c	StrCmpNA
842	0xd11c	StrCmpNIA
843	0x14745	StrCmpNIW
844	0x15cc4	StrCmpNW
845	0x18277	StrCmpW
846	0x3e0e6	StrCpyNW
847	0x3e025	StrCpyW
848	0x2b93f	StrDupA
849	0x14fca	StrDupW
850	0x3e561	StrFormatByteSize64A
851	0x3e5ab	StrFormatByteSizeA
852	0x30301	StrFormatByteSizeEx
853	0x3169d	StrFormatByteSizeW
854	0x3e5e9	StrFormatKBSizeA
855	0x3e5c9	StrFormatKBSizeW
856	0x40596	StrFromTimeIntervalA
857	0x40601	StrFromTimeIntervalW
858	0x3e52b	StrIsIntlEqualA
859	0x1a166	StrIsIntlEqualW
860	0x3e8d3	StrNCatA
861	0x3e908	StrNCatW
862	0x3e1ab	StrPBrkA
863	0xe871	StrPBrkW
864	0xccf5	StrRChrA
865	0x3e13f	StrRChrIA
866	0x3e782	StrRChrIW
867	0x13ef0	StrRChrW
868	0x3e422	StrRStrIA
869	0x307af	StrRStrIW
870	0x19515	StrRetToBSTR
871	0x3e9f4	StrRetToBufA
872	0x189c1	StrRetToBufW
873	0x3e981	StrRetToStrA
874	0x1853b	StrRetToStrW
875	0x3e2c3	StrSpnA
876	0x3e32c	StrSpnW
877	0x2c45b	StrStrA
878	0xd250	StrStrIA
879	0x146e9	StrStrIW
880	0x3e80c	StrStrNIW
881	0x3e4ba	StrStrNW
882	0xe52d	StrStrW
883	0x3e1fb	StrToInt64ExA
884	0x301db	StrToInt64ExW
885	0x2cd65	StrToIntA
886	0x3e27e	StrToIntExA
887	0x30196	StrToIntExW
888	0x150be	StrToIntW
889	0x3e63c	StrTrimA
890	0x131bc	StrTrimW
891	0x45dde	UrlApplySchemeA
892	0x2f29	UrlApplySchemeW
893	0x46577	UrlCanonicalizeA
894	0x17472	UrlCanonicalizeW
895	0x461c7	UrlCombineA
896	0x175fb	UrlCombineW
897	0x45367	UrlCompareA
898	0x45496	UrlCompareW
899	0x45ce7	UrlCreateFromPathA
900	0xc9a1	UrlCreateFromPathW
901	0x45a99	UrlEscapeA
902	0x18ca7	UrlEscapeW
903	0x452e5	UrlGetLocationA
904	0x2cad2	UrlGetLocationW
905	0x45bab	UrlGetPartA
906	0x180b4	UrlGetPartW
907	0x455c4	UrlHashA
908	0x455ff	UrlHashW
909	0x465e7	UrlIsA
910	0x466ca	UrlIsNoHistoryA
911	0x45ccf	UrlIsNoHistoryW
912	0x466b2	UrlIsOpaqueA
913	0x45cb7	UrlIsOpaqueW
914	0x16763	UrlIsW
915	0x2c6fb	UrlUnescapeA
916	0x166b7	UrlUnescapeW
917	0x2edae	wnsprintfA
918	0x2ef87	wnsprintfW
919	0x2edfe	wvnsprintfA
920	0x4066c	wvnsprintfW

module_name	SHLWAPI.dll
flags	0
timestamp	2010-11-20 09:35:54
version	0.0
ordinal_base	1
nFunctions	920
nNames	369
Names(369)	0x20370
Functions(920)	0x1f510
NameOrdinals(369)	0x20934

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Shell Light-weight Utility Library
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	SHLWAPI
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	SHLWAPI.DLL
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	350208	DLL	11/20/2010 12:06:58	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x280

shlwapi.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

shlwapi.dll
-