shlwapi.dll - Shell Light-weight Utility Library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	shlwapi.dll
size	350208 (0x55800)
md5	f037db14cf6165c62f4a64d12a25b07c

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
149	30729	1
147	30729	15
1	0	605
132	30729	100
146	30729	1
131	30729	45
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4a5bdb05
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x50e00
SizeOfInitializedData	0x4600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1a24a
BaseOfCode	0x1000
BaseOfData	0x55000
ImageBase	0x6de20000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x57000
SizeOfHeaders	0x400
CheckSum	0x5a8d4
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x50cf0	0x50e00	R-X CODE
.data	0x52000	0xb6c	0xc00	RW- IDATA
.rsrc	0x53000	0xd98	0xe00	R-- IDATA
.reloc	0x54000	0x2b68	0x2c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1faac	0x43b2
IMPORT	0x5015c	0xa0
RESOURCE	0x53000	0xd98
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x54000	0x2b68
DEBUG	0x51c90	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x362b8	0x40
Bound_IAT	0x280	0xb8
IAT	0x1000	0x4d8
Delay_IAT	0x4eeb4	0x260
CLR_Header	0	0

show previews

type	name	size
MUI	#1	216
ICON	#1	744
GROUP_ICON	#300	20
VERSION	#1	932
MANIFEST	#123	1170

module_name	hint	ord	function_name
KERNEL32.dll	1020		ReleaseSRWLockExclusive
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	355		FreeLibraryAndExitThread
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	782		IsWow64Process
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	181		CreateThread
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	534		GetModuleHandleExA
KERNEL32.dll	670		GetUserDefaultUILanguage
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	870		MulDiv
KERNEL32.dll	810		LCIDToLocaleName
KERNEL32.dll	667		GetUserDefaultLCID
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	719		HeapFree
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	531		GetModuleFileNameA
KERNEL32.dll	676		GetVersionExW
KERNEL32.dll	885		OpenEventW
KERNEL32.dll	622		GetSystemDefaultUILanguage
KERNEL32.dll	636		GetSystemWindowsDirectoryW
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	851		LockFileEx
KERNEL32.dll	1237		UnlockFileEx
KERNEL32.dll	960		ReadFile
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	1124		SetFileInformationByHandle
KERNEL32.dll	1035		ReplaceFileW
KERNEL32.dll	493		GetFileInformationByHandleEx
KERNEL32.dll	678		GetVolumeInformationByHandleW
KERNEL32.dll	1127		SetFilePointerEx
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	845		LocalSize
KERNEL32.dll	896		OpenProcess
KERNEL32.dll	232		DuplicateHandle
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	690		GlobalAddAtomW
KERNEL32.dll	700		GlobalGetAtomNameW
KERNEL32.dll	855		MapViewOfFile
KERNEL32.dll	137		CreateFileMappingA
KERNEL32.dll	693		GlobalDeleteAtom
KERNEL32.dll	218		DeleteTimerQueueTimer
KERNEL32.dll	189		CreateTimerQueueTimer
KERNEL32.dll	944		QueueUserWorkItem
KERNEL32.dll	1021		ReleaseSRWLockShared
KERNEL32.dll	1		AcquireSRWLockShared
KERNEL32.dll	577		GetPrivateProfileStringA
KERNEL32.dll	578		GetPrivateProfileStringW
KERNEL32.dll	1323		WritePrivateProfileStringW
KERNEL32.dll	535		GetModuleHandleExW
KERNEL32.dll	350		FormatMessageW
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	1201		SizeofResource
KERNEL32.dll	852		LockResource
KERNEL32.dll	833		LoadResource
KERNEL32.dll	334		FindResourceW
KERNEL32.dll	140		CreateFileMappingW
KERNEL32.dll	889		OpenFileMappingW
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll			AcquireSRWLockExclusive
KERNEL32.dll	744		InitializeSRWLock
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	1238		UnmapViewOfFile
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	222		DisableThreadLibraryCalls
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	830		LoadLibraryExW
KERNEL32.dll	843		LocalReAlloc
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	221		DeviceIoControl
KERNEL32.dll	285		ExpandEnvironmentStringsW
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	1121		SetFileAttributesW
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	687		GetWindowsDirectoryW
KERNEL32.dll	624		GetSystemDirectoryW
KERNEL32.dll	1053		SearchPathW
KERNEL32.dll	507		GetFullPathNameW
KERNEL32.dll	1346		lstrcmpW
KERNEL32.dll	1349		lstrcmpiW
KERNEL32.dll	490		GetFileAttributesW
KERNEL32.dll	476		GetEnvironmentVariableW
KERNEL32.dll	1358		lstrlenW
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	284		ExpandEnvironmentStringsA
KERNEL32.dll	97		CompareStringA
KERNEL32.dll	475		GetEnvironmentVariableA
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	840		LocalFree
KERNEL32.dll	836		LocalAlloc
KERNEL32.dll	811		LCMapStringA
KERNEL32.dll	1118		SetFileAttributesA
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	514		GetLastError
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	829		LoadLibraryExA
KERNEL32.dll	766		IsDBCSLeadByte
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	485		GetFileAttributesA
KERNEL32.dll	1112		SetErrorMode
KERNEL32.dll	1348		lstrcmpiA
KERNEL32.dll	1345		lstrcmpA
KERNEL32.dll	206		DelayLoadFailureHook
KERNEL32.dll	1357		lstrlenA
KERNEL32.dll	504		GetFullPathNameA
KERNEL32.dll	1052		SearchPathA
KERNEL32.dll	302		FindClose
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	623		GetSystemDirectoryA
KERNEL32.dll	686		GetWindowsDirectoryA
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	120		CreateActCtxW
KERNEL32.dll	1014		ReleaseActCtx
KERNEL32.dll	2		ActivateActCtx
KERNEL32.dll	195		DeactivateActCtx
KERNEL32.dll	1198		Sleep
KERNEL32.dll	932		QueryPerformanceCounter
KERNEL32.dll	1212		TerminateProcess
KERNEL32.dll	1231		UnhandledExceptionFilter
KERNEL32.dll	1185		SetUnhandledExceptionFilter
GDI32.dll	493		GetLayout
GDI32.dll	312		ExtTextOutW
GDI32.dll	542		GetTextExtentPoint32W
GDI32.dll	674		SetStretchBltMode
GDI32.dll	84		CreateSolidBrush
GDI32.dll	525		GetStockObject
GDI32.dll	660		SetMapMode
GDI32.dll	607		Rectangle
GDI32.dll	692		StretchDIBits
GDI32.dll	632		SelectPalette
GDI32.dll	604		RealizePalette
GDI32.dll	53		CreateDIBSection
GDI32.dll	458		GetDIBits
GDI32.dll	507		GetObjectA
GDI32.dll	61		CreateFontIndirectA
GDI32.dll	638		SetBkColor
GDI32.dll	459		GetDeviceCaps
GDI32.dll	66		CreateHalftonePalette
GDI32.dll	512		GetPaletteEntries
GDI32.dll	230		DeleteObject
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	530		GetSystemPaletteEntries
GDI32.dll	73		CreatePalette
GDI32.dll	227		DeleteDC
GDI32.dll	545		GetTextExtentPointW
GDI32.dll	481		GetGlyphIndicesW
GDI32.dll	631		SelectObject
GDI32.dll	543		GetTextExtentPointA
GDI32.dll	480		GetGlyphIndicesA
GDI32.dll	538		GetTextExtentExPointI
USER32.dll	587		RegisterClassA
USER32.dll	267		GetClassInfoA
USER32.dll	590		RegisterClassW
USER32.dll	270		GetClassInfoW
USER32.dll	773		UnregisterClassA
USER32.dll	774		UnregisterClassW
USER32.dll	562		PeekMessageA
USER32.dll	540		MsgWaitForMultipleObjects
USER32.dll	457		IsChild
USER32.dll	684		SetPropA
USER32.dll	747		SystemParametersInfoA
USER32.dll	616		RemovePropA
USER32.dll	637		SendNotifyMessageA
USER32.dll	638		SendNotifyMessageW
USER32.dll	568		PostThreadMessageA
USER32.dll	174		DispatchMessageA
USER32.dll	764		TranslateMessage
USER32.dll	345		GetMessageA
USER32.dll			ActivateKeyboardLayout
USER32.dll	318		GetKeyboardLayout
USER32.dll	462		IsDlgButtonChecked
USER32.dll	218		EndDialog
USER32.dll	172		DialogBoxParamW
USER32.dll	171		DialogBoxParamA
USER32.dll	109		CreateWindowExA
USER32.dll	488		LoadCursorA
USER32.dll	708		SetWindowLongW
USER32.dll	110		CreateWindowExW
USER32.dll	307		GetIconInfo
USER32.dll	379		GetSysColor
USER32.dll	591		RegisterClipboardFormatA
USER32.dll	46		CharLowerW
USER32.dll	451		IsCharAlphaNumericW
USER32.dll	49		CharNextW
USER32.dll	63		CheckMenuItem
USER32.dll	107		CreatePopupMenu
USER32.dll	337		GetMenuItemCount
USER32.dll	339		GetMenuItemInfoA
USER32.dll	156		DefWindowProcW
USER32.dll	155		DefWindowProcA
USER32.dll	479		IsWindowUnicode
USER32.dll	566		PostMessageW
USER32.dll	565		PostMessageA
USER32.dll	223		EnumChildWindows
USER32.dll	503		LoadMenuW
USER32.dll	378		GetSubMenu
USER32.dll	615		RemoveMenu
USER32.dll	164		DestroyMenu
USER32.dll	356		GetParent
USER32.dll	678		SetParent
USER32.dll	405		GetWindowLongA
USER32.dll	707		SetWindowLongA
USER32.dll	335		GetMenuDefaultItem
USER32.dll	214		EnableMenuItem
USER32.dll	506		LoadStringW
USER32.dll	419		GetWindowTextW
USER32.dll	363		GetPropW
USER32.dll	382		GetSystemMetrics
USER32.dll	60		CharUpperW
USER32.dll	636		SendMessageW
USER32.dll	715		SetWindowTextW
USER32.dll	52		CharPrevW
USER32.dll	505		LoadStringA
USER32.dll	416		GetWindowTextA
USER32.dll	362		GetPropA
USER32.dll	533		MessageBoxW
USER32.dll	57		CharUpperA
USER32.dll	295		GetDlgItem
USER32.dll	276		GetClientRect
USER32.dll	631		SendMessageA
USER32.dll	714		SetWindowTextA
USER32.dll	289		GetDC
USER32.dll	613		ReleaseDC
USER32.dll	50		CharPrevA
USER32.dll	47		CharNextA
USER32.dll	420		GetWindowThreadProcessId
ntdll.dll	1870		_wcsicmp
ntdll.dll	398		NtQueryInformationProcess
ntdll.dll	1821		_chkstk
ntdll.dll		1
ntdll.dll	56		EtwEventUnregister
ntdll.dll	55		EtwEventRegister
ntdll.dll	81		EtwUnregisterTraceGuids
ntdll.dll	74		EtwRegisterTraceGuidsW
ntdll.dll	67		EtwGetTraceLoggerHandle
ntdll.dll	66		EtwGetTraceEnableLevel
ntdll.dll	65		EtwGetTraceEnableFlags
ntdll.dll	1809		_allmul
ntdll.dll	53		EtwEventEnabled
ntdll.dll	57		EtwEventWrite
ntdll.dll	79		EtwTraceMessage
ntdll.dll	1962		wcschr
ntdll.dll	1901		iswalpha
ntdll.dll	1867		_vsnwprintf
ntdll.dll	1913		memcpy
ntdll.dll	1865		_vsnprintf
ntdll.dll	1851		_strnicmp
ntdll.dll	1915		memmove
ntdll.dll	1892		isalpha
ntdll.dll	1917		memset
msvcrt.dll	934		_unlock
msvcrt.dll	345		_except_handler4_common
msvcrt.dll	747		_onexit
msvcrt.dll	578		_lock
msvcrt.dll	141		__dllonexit
msvcrt.dll	106		_XcptFilter
msvcrt.dll	257		_amsg_exit
msvcrt.dll	469		_initterm
msvcrt.dll	1190		free
msvcrt.dll	1246		malloc
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	24		RegOpenKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	27		RegQueryInfoKeyA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	3		RegDeleteKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	1		RegCreateKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll			RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	29		RegQueryValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	36		RegSetValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	7		RegDeleteValueA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	2		RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25		RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	11		RegEnumKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	37		RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	4		RegDeleteKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	28		RegQueryInfoKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	8		RegDeleteValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30		RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	13		RegEnumValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	10		RegEnumKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	12		RegEnumValueA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	23		RegOpenCurrentUser
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	17		RegGetValueW
KERNELBASE.dll	423		LoadStringByReference

ord	entry_va	function_name
1	0x43b7e	ParseURLA
2	0x15ac0	ParseURLW
3	0x3750b
4	0x2c6d
5	0x380fc
6	0x2bde
7	0x19aa5	SHAllocShared
8	0xea59	SHLockShared
9	0x19a7e	SHUnlockShared
10	0x19bcf	SHFreeShared
11	0x2ff7b
12	0x11999	SHCreateMemStream
13	0x41f94
14	0x42089	GetAcceptLanguagesA
15	0x2b593	GetAcceptLanguagesW
16	0x14870	SHCreateThread
17	0x2d836
18	0x12d13
19	0x124bf
20	0x124fa
21	0x125f5
22	0x12485
23	0x18d3f
24	0x19ff1
25	0x228ad
26	0x228c1
27	0x228d5
28	0x228e9
29	0x2ba2d	IsCharSpaceW
30	0x3d425
31	0x3d2b9
32	0x3d3fd
33	0x3d12a
34	0x3d26d
35	0x3d468
36	0x22904
37	0x22917
38	0x2292e
39	0x22940
40	0x22956
41	0x22967
42	0x22978
43	0x2298a
44	0x2299c
45	0x229b2
46	0x229ca
47	0x229e7
48	0x22a06
49	0x22a16
50	0x22a30
51	0x22a4a
52	0x22a60
53	0x22a75
54	0x22a8f
55	0x22a9f
56	0x22ab6
57	0x22acc
58	0x22ae1
59	0x22b00
60	0x22b17
61	0x22b2f
62	0x22b40
63	0x22b58
64	0x22b72
65	0x22b8e
66	0x22ba6
67	0x22bbd
68	0x22bd0
69	0x22be8
70	0x22bfd
71	0x22c12
72	0x22c27
73	0x22c46
74	0x22c64
75	0x22c7b
76	0x22c97
77	0x22cb1
78	0x22cc9
79	0x22cdf
80	0x22cf2
81	0x22d0e
82	0x22d2b
83	0x22d40
84	0x22d5a
85	0x22d6b
86	0x22d8a
87	0x22da5
88	0x22db5
89	0x22dcf
90	0x22de9
91	0x22dff
92	0x22e1b
93	0x22e2e
94	0x22e44
95	0x22e5a
96	0x22e70
97	0x22e8c
98	0x22eaa
99	0x22ebd
100	0x22ed5
101	0x22eee
102	0x22f01
103	0x22f14
104	0x22f25
105	0x22f37
106	0x22f4f
107	0x22f60
108	0x22f73
109	0x22f8e
110	0x22fa1
111	0x22fb7
112	0x22fd4
113	0x22fe7
114	0x22ffa
115	0x2300c
116	0x23028
117	0x2303c
118	0x23050
119	0x42ab9
120	0x42b0d
121	0x42b49
122	0x42bcd
123	0x42c09
124	0x42c81
125	0x42cd1
126	0x42d0d
127	0x42d49
128	0x42d85
129	0x42dc1
130	0x42dfd
131	0x2306a
132	0x23080
133	0x230a0
134	0x230be
135	0x230d1
136	0x230ec
137	0x23100
138	0x2311e
139	0x23135
140	0x2314d
141	0x2315d
142	0x23173
143	0x2318c
144	0x231a2
145	0x231b2
146	0x231cf
147	0x231ec
148	0x23204
149	0x23216
150	0x23226
151	0xbdad	StrCmpNCA
152	0x16059	StrCmpNCW
153	0xd04f	StrCmpNICA
154	0x17e56	StrCmpNICW
155	0xd0a1	StrCmpCA
156	0x1a801	StrCmpCW
157	0x18bdc	StrCmpICA
158	0x1e7e8	StrCmpICW
159	0x23238
160	0x3f3c9
161	0x3f38e
162	0x137e2
163	0x40051
164	0xf39a
165	0x13e6d
166	0xbf8c
167	0x2fc24
168	0x2f4ff	ConnectToConnectionPoint
169	0x1b86f	IUnknown_AtomicRelease
170	0x395ed
171	0x23250
172	0x1b519	IUnknown_GetWindow
173	0x304d2
174	0x1342e	IUnknown_SetSite
175	0x18b39
176	0x14561	IUnknown_QueryService
177	0x2502d
178	0x13ea3
179	0x2ecfd
180	0x3f4b8
181	0x3f4f5
182	0x3f518
183	0x3f53d
184	0x13c3a	IStream_Read
185	0x3f824	SHMessageBoxCheckA
186	0x3f961
187	0x13dff
188	0x42e75
189	0x42f09
190	0x4070b
191	0x3f6f7	SHMessageBoxCheckW
192	0x2e833
193	0x13f55
194	0x1b3ef
195	0x3f9f4
196	0x2325e
197	0x1fa58
198	0x3fab9
199	0x1b8b7	IUnknown_Set
200	0x403b3
201	0x23fb5
202	0x23ff2
203	0x407a1	SHStripMneumonicA
204	0x1b5f7	SHIsChildOrSelf
205	0x3e500
206	0x3e52a
207	0x3fc9e
208	0x2eb53
209	0x2fbf2
210	0x2ebc0
211	0x24041
212	0x19dbe	IStream_Write
213	0x119ec	IStream_Reset
214	0x2f20c	IStream_Size
215	0x1af47	SHAnsiToUnicode
216	0x1af65
217	0x17a2d	SHUnicodeToAnsi
218	0x17a4b
219	0x23e63	QISearch
220	0x3faf0
221	0x3fba6
222	0x2326c
223	0x2327a
224	0x23288
225	0x142dd	SHStripMneumonicW
226	0x23296
227	0x232a4
228	0x4a5ed
229	0x4a5c8
230	0x4a55d
231	0x3257
232	0x4a4e3
233	0x3284
234	0x4a232
235	0x4a1b4
236	0xe230
237	0x143e5
238	0xf19b
239	0x14905
240	0x1b44b
241	0x232b2
242	0x232c0
243	0x232ce
244	0x232dc
245	0x232ea
246	0x232f8
247	0x23306
248	0x23314
249	0x23322
250	0x23330
251	0x2333e
252	0x2334c
253	0x2335a
254	0x23368
255	0x23376
256	0xf0c6	IUnknown_GetSite
257	0xf1ed
258	0x23384
259	0x23392
260	0x1b6ed
261	0x233a0
262	0x233ae
263	0x45c61
264	0x233bc
265	0x45c45
266	0x14aa5
267	0x18635
268	0x19f51
269	0x17b0b
270	0x17ac8
271	0x1b915
272	0x233ca
273	0x233d8
274	0x233e6
275	0x233f4
276	0x3fbda	WhichPlatform
277	0x23402
278	0x1442a
279	0x407ee
280	0x3e5f5	SHRegGetIntW
281	0x2f5d9
282	0x2e9f1
283	0x2f66f
284	0x2f4b0
285	0x2ecc8
286	0x44c94
287	0x2ec72
288	0x2f0e9
289	0x23410
290	0x23421
291	0x4060c
292	0x40560
293	0x2342f
294	0x49a28
295	0x49973
296	0x2343d
297	0x2344b
298	0x23459
299	0x2347d
300	0x2348f
301	0x234a1
302	0x234b4
303	0x234cc
304	0x234e3
305	0x234f9
306	0x2350f
307	0x23532
308	0x2354c
309	0x23565
310	0x2357b
311	0x23593
312	0x235ab
313	0x235cd
314	0x235e4
315	0x235fc
316	0x18cd7
317	0x2d0a1
318	0x23613
319	0x2362a
320	0x422b1
321	0x42311
322	0x42211
323	0x42261
324	0x4263d
325	0x426d9
326	0x42775
327	0x42815
328	0x42545
329	0x42602
330	0x4298d
331	0x42433
332	0x2363f
333	0x23655
334	0x23670
335	0x2368d
336	0x236a5
337	0x236be
338	0x236d5
339	0x236f1
340	0x2370b
341	0x2371e
342	0x23735
343	0x23759
344	0x1318d
345	0x3e218	SHAnsiToAnsi
346	0x3e273	SHUnicodeToUnicode
347	0x42b91
348	0x24312
349	0x38b74
350	0x4215f
351	0x42199
352	0x421d5
353	0x3bd2f	SHFormatDateTimeA
354	0x2507a	SHFormatDateTimeW
355	0x40151
356	0x23767
357	0x23775
358	0x2378f
359	0x237a9
360	0x237bd
361	0x237d7
362	0x42e39
363	0x4080f
364	0x38f8e
365	0x14b9a
366	0x42c45
367	0x237f2
368	0x23816
369	0x23838
370	0x23850
371	0x23865
372	0x2387b
373	0x23899
374	0x238b0
375	0x238be
376	0x238cc
377	0x3ffa1	MLLoadLibraryA
378	0x3ff5d	MLLoadLibraryW
379	0x238e9
380	0x2390c
381	0x3a942
382	0x2a9fc
383	0x4a745
384	0x3f936
385	0x2392f
386	0x2393d
387	0x2394b
388	0x3c2dd	ShellMessageBoxW
389	0x23959
390	0x23973
391	0x23981
392	0x23997
393	0x239a8
394	0x239ca
395	0x239e1
396	0x239f1
397	0x239ff
398	0x23a0f
399	0x3c560
400	0x3c5a5
401	0x23a1d
402	0x23a34
403	0x23a47
404	0x23a61
405	0x4581d
406	0x456e9
407	0x3a571
408	0x3a3c5
409	0x3a95f
410	0x3abbb
411	0x23a6f
412	0x23a7d
413	0x1429d
414	0x23a8b
415	0x23a99
416	0x23aa7
417	0x23ab5
418	0x3ffe7	MLFreeLibrary
419	0x23ac3
420	0x23ada
421	0x23ae8
422	0x23af6
423	0x23b04
424	0x23b12
425	0x23b20
426	0x23b32
427	0x23b45
428	0x23b5b
429	0x23b73
430	0x23b81
431	0x23b8f
432	0x3fd19	SHSendMessageBroadcastA
433	0x3fd3b	SHSendMessageBroadcastW
434	0x23b9d
435	0x3fe1d
436	0x3fe2e
437	0x1f0d0	IsOS
438	0x3c25e
439	0x13834
440	0x4560d
441	0x455d3
442	0x23bb8
443	0x23bd9
444	0x23bfd
445	0x36586
446	0x13fe2
447	0x3677a
448	0x3c41
449	0x37541
450	0x2e71
451	0x37264
452	0x3b49a
453	0x37242
454	0x201b
455	0x36b7f
456	0x14b24
457	0x23c21
458	0x23c3b
459	0x39861
460	0x17ed1
461	0x1aedb
462	0x44823	UrlFixupW
463	0x38579
464	0x27fe
465	0x36fc2
466	0x2a2fe
467	0x3af99	SHRunIndirectRegClientCommand
468	0x3aec9
469	0x3adc5
470	0x23c55
471	0x17f5e
472	0x46411
473	0x23c63
474	0x23c71
475	0x23c7f
476	0x18e46
477	0x2f26a
478	0x1b595
479	0x11a57
480	0x23c8d
481	0x2a697
482	0x23c9b
483	0x23ca9
484	0x130b9
485	0x45a3c
486	0x126e0
487	0x136a2	SHLoadIndirectString
488	0x23cb7
489	0x23cc5
490	0x23cdd
491	0x3fd5d
492	0x23cf6
493	0x29227
494	0x14308
495	0x2eed9
496	0x2f284
497	0x2efd1
498	0x23d04
499	0x2f7a6
500	0x1b176	AssocCreate
501	0x112af	AssocGetPerceivedType
502	0x3979	AssocIsDangerous
503	0x39f74	AssocQueryKeyA
504	0x1b47d	AssocQueryKeyW
505	0x1410e
506	0x2fb34
507	0x1411f
508	0x2f6cb
509	0x13020
510	0x19af3
511	0x13601
512	0x141ac	IStream_ReadPidl
513	0x19eff	IStream_WritePidl
514	0xf551
515	0xf619	SHGetViewStatePropertyBag
516	0x2a5c7
517	0xe583
518	0x40905
519	0x2d1a0
520	0x14069
521	0x2ee2f
522	0x2fcb2
523	0x2ee40
524	0x2fcc3
525	0x4661e
526	0x4662f
527	0x465a9
528	0x465ba
529	0x465cb
530	0x465dc
531	0xea98
532	0x2f6dc
533	0x1005a
534	0x2f716
535	0x2fb45
536	0xffb5
537	0x3fd7e
538	0x40291
539	0x402fe
540	0x3fc1a
541	0x3fc6b
542	0x3f4af
543	0x23d12
544	0x1b059
545	0x40832
546	0x400c6
547	0x23d2a
548	0x2d620
549	0x4604b
550	0x23d38
551	0x23d46
552	0x23d54
553	0x3fe3f	IsInternetESCEnabled
554	0x23d62
555	0x23d70
556	0x23d7e
557	0x23d8c
558	0x23d9a
559	0x24ecb
560	0x1364f
561	0x3999
562	0x3fe3f
563	0x23da8
564	0x23db6
565	0x23dc4
566	0x23dd2
567	0x2e58d	SHPropertyBag_ReadStrAlloc
568	0x44dd0	IStream_Copy
569	0x3d0a7	DelayLoadFailureHook
570	0x2e068	SHPropertyBag_WriteBSTR
571	0x2e5e2
572	0x1b80
573	0x23de0
574	0x23dee
575	0x4094c
576	0x1b07d
577	0x465ed
578	0x465fe
579	0x39d27	AssocQueryStringA
580	0x41b21
581	0x2f141
582	0x41438
583	0x40b1e
584	0x39e6f	AssocQueryStringByKeyA
585	0x13b95	AssocQueryStringByKeyW
586	0x14f7	AssocQueryStringW
587	0xda4e	ChrCmpIA
588	0x1495d	ChrCmpIW
589	0x3cfee	ColorAdjustLuma
590	0x2eaf0	ColorHLSToRGB
591	0x2ea41	ColorRGBToHLS
592	0x4c410	DllGetVersion
593	0x10105	GetMenuPosFromID
594	0x2b0e5	HashData
595	0x3ca37	IntlStrEqWorkerA
596	0x2df2c	IStream_ReadStr
597	0x2dcde	IStream_WriteStr
598	0x23dfc
599	0x3de9c
600	0x3ddf2
601	0x23e0a
602	0x23e18
603	0x23e26
604	0x23e34
605	0x23e42
606	0x23e50
607	0x1a726	IntlStrEqWorkerW
608	0x3dda5	IsCharSpaceA
609	0xd249	PathAddBackslashA
610	0x1f9b7	PathAddBackslashW
611	0x19f7a
612	0x37fb8	PathAddExtensionA
613	0x2f6ed
614	0x25653
615	0xe16b	SHCreateThreadWithHandle
616	0x254ce
617	0x1b35
618	0x1ea77
619	0x25bd	PathAddExtensionW
620	0xd7ba	PathAppendA
621	0x47af1
622	0x18aa0	PathAppendW
623	0x18a6d	PathBuildRootA
624	0x1b683	PathBuildRootW
625	0x380a5	PathCanonicalizeA
626	0x46473
627	0x29378
628	0x2768
629	0x185d3
630	0x132ee
631	0x3e343
632	0x1e9d1
633	0xc6cf
634	0x49aa5
635	0x178e3
636	0x2e057
637	0x2e57c
638	0x2a6f3
639	0x3fc41
640	0x3fbe3
641	0x45c31
642	0x28b64
643	0x3b279
644	0x44f10
645	0x44e27
646	0xe837	PathCanonicalizeW
647	0x29b30	PathCombineA
648	0x1f8b9	PathCombineW
649	0x375c8	PathCommonPrefixA
650	0x1b774	PathCommonPrefixW
651	0x37908	PathCompactPathA
652	0x37c7d	PathCompactPathExA
653	0x2e083	PathCompactPathExW
654	0x3b4bc	PathCompactPathW
655	0x29792	PathCreateFromUrlA
656	0x443fc	PathCreateFromUrlAlloc
657	0x16408	PathCreateFromUrlW
658	0x39062	PathFileExistsA
659	0x148bb	PathFileExistsW
660	0x2d291	PathFindExtensionA
661	0x1a8a5	PathFindExtensionW
662	0x103ba	PathFindFileNameA
663	0x1e758	PathFindFileNameW
664	0x36a4d	PathFindNextComponentA
665	0x2e3ff	PathFindNextComponentW
666	0x383b8	PathFindOnPathA
667	0x2efa	PathFindOnPathW
668	0x36671	PathFindSuffixArrayA
669	0x2161	PathFindSuffixArrayW
670	0x36534	PathGetArgsA
671	0xe9ad	PathGetArgsW
672	0x36b17	PathGetCharTypeA
673	0x2d118	PathGetCharTypeW
674	0x19e11	PathGetDriveNumberA
675	0x1e9f1	PathGetDriveNumberW
676	0x36a93	PathIsContentTypeA
677	0x3b12b	PathIsContentTypeW
678	0x36835	PathIsDirectoryA
679	0x36919	PathIsDirectoryEmptyA
680	0x3b395	PathIsDirectoryEmptyW
681	0x102cf	PathIsDirectoryW
682	0x36713	PathIsFileSpecA
683	0x3bbf	PathIsFileSpecW
684	0x36ebe	PathIsLFNFileSpecA
685	0x3b226	PathIsLFNFileSpecW
686	0x3789d	PathIsNetworkPathA
687	0x1b3b5	PathIsNetworkPathW
688	0x376e5	PathIsPrefixA
689	0x14c30	PathIsPrefixW
690	0x36746	PathIsRelativeA
691	0x1ec51	PathIsRelativeW
692	0x37047	PathIsRootA
693	0x186e5	PathIsRootW
694	0x37f70	PathIsSameRootA
695	0x2e457	PathIsSameRootW
696	0x2e53a	PathIsSystemFolderA
697	0x3b1eb	PathIsSystemFolderW
698	0x392c0	PathIsUNCA
699	0x3900e	PathIsUNCServerA
700	0x38fad	PathIsUNCServerShareA
701	0x1312b	PathIsUNCServerShareW
702	0x10287	PathIsUNCServerW
703	0x1a776	PathIsUNCW
704	0x395a7	PathIsURLA
705	0x15b4b	PathIsURLW
706	0x37286	PathMakePrettyA
707	0xccc9	PathMakePrettyW
708	0x36d02	PathMakeSystemFolderA
709	0x14d87	PathMakeSystemFolderW
710	0x3925b	PathMatchSpecA
711	0x39276	PathMatchSpecExA
712	0x2fd19	PathMatchSpecExW
713	0x191b6	PathMatchSpecW
714	0x39532	PathParseIconLocationA
715	0x13aef	PathParseIconLocationW
716	0x369f3	PathQuoteSpacesA
717	0x3b435	PathQuoteSpacesW
718	0x37723	PathRelativePathToA
719	0x2da75	PathRelativePathToW
720	0x372e5	PathRemoveArgsA
721	0x3c05	PathRemoveArgsW
722	0x36fe6	PathRemoveBackslashA
723	0x18356	PathRemoveBackslashW
724	0xda03	PathRemoveBlanksA
725	0x1356d	PathRemoveBlanksW
726	0x37057	PathRemoveExtensionA
727	0x11b57	PathRemoveExtensionW
728	0x2c953	PathRemoveFileSpecA
729	0x18965	PathRemoveFileSpecW
730	0x38021	PathRenameExtensionA
731	0x3b93e	PathRenameExtensionW
732	0x367a1	PathSearchAndQualifyA
733	0xcab6	PathSearchAndQualifyW
734	0x37e0d	PathSetDlgItemPathA
735	0x3b829	PathSetDlgItemPathW
736	0x37f20	PathSkipRootA
737	0x2e3b5	PathSkipRootW
738	0x378d7	PathStripPathA
739	0x29f88	PathStripPathW
740	0x38077	PathStripToRootA
741	0x197ee	PathStripToRootW
742	0x3950f	PathUnExpandEnvStringsA
743	0x3bc76	PathUnExpandEnvStringsW
744	0x36f1d	PathUndecorateA
745	0x2a53d	PathUndecorateW
746	0x36e83	PathUnmakeSystemFolderA
747	0x3b1af	PathUnmakeSystemFolderW
748	0x2d26b	PathUnquoteSpacesA
749	0x18863	PathUnquoteSpacesW
750	0x2835b	SHAutoComplete
751	0x3e554	SHCopyKeyA
752	0x2c2c2	SHCopyKeyW
753	0x3cac	SHCreateShellPalette
754	0x45b49	SHCreateStreamOnFileA
755	0x12a4e	SHCreateStreamOnFileEx
756	0xe5e5	SHCreateStreamOnFileW
757	0x22886	SHCreateStreamWrapper
758	0xe92b	SHCreateThreadRef
759	0x39732	SHDeleteEmptyKeyA
760	0x3bc99	SHDeleteEmptyKeyW
761	0x2c15f	SHDeleteKeyA
762	0x2404	SHDeleteKeyW
763	0x42a29	SHDeleteOrphanKeyA
764	0x42a71	SHDeleteOrphanKeyW
765	0x397c8	SHDeleteValueA
766	0xf46e	SHDeleteValueW
767	0x3e2c6	SHEnumKeyExA
768	0xc754	SHEnumKeyExW
769	0x3e2ec	SHEnumValueA
770	0xc729	SHEnumValueW
771	0x3d72	SHGetInverseCMAP
772	0x11854	SHGetThreadRef
773	0xd1a1	SHGetValueA
774	0x1aeb1	SHGetValueW
775	0x46ef9	SHIsLowMemoryMachine
776	0x196e4	SHOpenRegStream2A
777	0x1961d	SHOpenRegStream2W
778	0x44f95	SHOpenRegStreamA
779	0x44f6d	SHOpenRegStreamW
780	0x3e317	SHQueryInfoKeyA
781	0xc77a	SHQueryInfoKeyW
782	0x2af95	SHQueryValueExA
783	0x1b88e	SHQueryValueExW
784	0x11e3a	SHRegCloseUSKey
785	0x4a146	SHRegCreateUSKeyA
786	0x4a0c5	SHRegCreateUSKeyW
787	0x49c62	SHRegDeleteEmptyUSKeyA
788	0x49c44	SHRegDeleteEmptyUSKeyW
789	0x49bdf	SHRegDeleteUSValueA
790	0x49bc1	SHRegDeleteUSValueW
791	0x3e5b8	SHRegDuplicateHKey
792	0x388e3	SHRegEnumUSKeyA
793	0x25676	SHRegEnumUSKeyW
794	0x389af	SHRegEnumUSValueA
795	0x3bb24	SHRegEnumUSValueW
796	0x49cc7	SHRegGetBoolUSValueA
797	0x12164	SHRegGetBoolUSValueW
798	0x3e662	SHRegGetPathA
799	0x259d1	SHRegGetPathW
800	0x38799	SHRegGetUSValueA
801	0x120b5	SHRegGetUSValueW
802	0xd0cb	SHRegGetValueA
803	0x1e894	SHRegGetValueW
804	0x251c6	SHRegOpenUSKeyA
805	0x11e9a	SHRegOpenUSKeyW
806	0x38ab5	SHRegQueryInfoUSKeyA
807	0x2591a	SHRegQueryInfoUSKeyW
808	0x385c7	SHRegQueryUSValueA
809	0x11f10	SHRegQueryUSValueW
810	0x3e471	SHRegSetPathA
811	0x3e3df	SHRegSetPathW
812	0x3887a	SHRegSetUSValueA
813	0x3babb	SHRegSetUSValueW
814	0x386b4	SHRegWriteUSValueA
815	0x3b9d6	SHRegWriteUSValueW
816	0x4a646	SHRegisterValidateTemplate
817	0x284f5	SHReleaseThreadRef
818	0xf2d5	SHSetThreadRef
819	0x396a3	SHSetValueA
820	0x123ab	SHSetValueW
821	0x1879f	SHSkipJunction
822	0x2e2ea	SHStrDupA
823	0x1ae3c	SHStrDupW
824	0x3988d	ShellMessageBoxA
825	0x3c89e	StrCSpnA
826	0x3c8e6	StrCSpnIA
827	0x3ccd4	StrCSpnIW
828	0x1018a	StrCSpnW
829	0x3cdb4	StrCatBuffA
830	0x3cd89	StrCatBuffW
831	0x3cbfc	StrCatChainW
832	0x3c611	StrCatW
833	0xce74	StrChrA
834	0xdaac	StrChrIA
835	0x149ab	StrChrIW
836	0x3cc4c	StrChrNIW
837	0x2bddd	StrChrNW
838	0x14931	StrChrW
839	0x1a757	StrCmpIW
840	0x1244b	StrCmpLogicalW
841	0x2afbe	StrCmpNA
842	0xdb5a	StrCmpNIA
843	0x14a39	StrCmpNIW
844	0x180e3	StrCmpNW
845	0x15aa1	StrCmpW
846	0x3c5f2	StrCpyNW
847	0x3c531	StrCpyW
848	0x2a2b7	StrDupA
849	0x183b8	StrDupW
850	0x3ca6d	StrFormatByteSize64A
851	0x3cab7	StrFormatByteSizeA
852	0xf131	StrFormatByteSizeEx
853	0x2fd44	StrFormatByteSizeW
854	0x3caf5	StrFormatKBSizeA
855	0x3cad5	StrFormatKBSizeW
856	0x3eaa6	StrFromTimeIntervalA
857	0x3eb11	StrFromTimeIntervalW
858	0x3ca37	StrIsIntlEqualA
859	0x1a726	StrIsIntlEqualW
860	0x3cddf	StrNCatA
861	0x3ce14	StrNCatW
862	0x3c6b7	StrPBrkA
863	0xe9f0	StrPBrkW
864	0xd1e6	StrRChrA
865	0x3c64b	StrRChrIA
866	0x3cc8e	StrRChrIW
867	0x13ab0	StrRChrW
868	0x3c92e	StrRStrIA
869	0x2ee72	StrRStrIW
870	0x19d74	StrRetToBSTR
871	0x3cf00	StrRetToBufA
872	0x194a3	StrRetToBufW
873	0x3ce8d	StrRetToStrA
874	0x18c9a	StrRetToStrW
875	0x3c7cf	StrSpnA
876	0x3c838	StrSpnW
877	0xcdb6	StrStrA
878	0xdafe	StrStrIA
879	0x149e1	StrStrIW
880	0x3cd18	StrStrNIW
881	0x3c9c6	StrStrNW
882	0xe8c7	StrStrW
883	0x3c707	StrToInt64ExA
884	0x2e8d9	StrToInt64ExW
885	0xbf27	StrToIntA
886	0x3c78a	StrToIntExA
887	0x2e894	StrToIntExW
888	0x15201	StrToIntW
889	0x3cb48	StrTrimA
890	0x18c1c	StrTrimW
891	0x4431b	UrlApplySchemeA
892	0x2f28	UrlApplySchemeW
893	0x44ab3	UrlCanonicalizeA
894	0x167e9	UrlCanonicalizeW
895	0x44704	UrlCombineA
896	0x169b9	UrlCombineW
897	0x43877	UrlCompareA
898	0x439a6	UrlCompareW
899	0x44224	UrlCreateFromPathA
900	0xc843	UrlCreateFromPathW
901	0x43fd6	UrlEscapeA
902	0x17502	UrlEscapeW
903	0x437f5	UrlGetLocationA
904	0xdf8d	UrlGetLocationW
905	0x440e8	UrlGetPartA
906	0x15c02	UrlGetPartW
907	0x43ad4	UrlHashA
908	0x43b0f	UrlHashW
909	0x44b23	UrlIsA
910	0x44c06	UrlIsNoHistoryA
911	0x4420c	UrlIsNoHistoryW
912	0x44bee	UrlIsOpaqueA
913	0x441f4	UrlIsOpaqueW
914	0x153e6	UrlIsW
915	0x2b28a	UrlUnescapeA
916	0x171e6	UrlUnescapeW
917	0x2d352	wnsprintfA
918	0xcb5b	wnsprintfW
919	0x2d3a2	wvnsprintfA
920	0x3eb7c	wvnsprintfW

module_name	SHLWAPI.dll
flags	0
timestamp	2009-07-13 23:39:26
version	0.0
ordinal_base	1
nFunctions	920
nNames	369
Names(369)	0x20934
Functions(920)	0x1fad4
NameOrdinals(369)	0x20ef8

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Shell Light-weight Utility Library
FileVersion	6.1.7600.16385 (win7_rtm.090713-1255)
InternalName	SHLWAPI
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	SHLWAPI.DLL
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7600.16385

VS_FIXEDFILEINFO

FileVersion	6.1.7600.16385
ProductVersion	6.1.7600.16385
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	350208	DLL	07/14/2009 01:10:29	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x280

shlwapi.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

shlwapi.dll
-