EhStorShell.dll

Description: Windows Enhanced Storage Shell Extension DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 76f58724e8cdae707bb6ff0b764cfd35

File Size: 205.0 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 7

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x17c0)
  • DllGetClassObject (Ordinal: 2, Address: 0x27c0)
  • DllRegisterServer (Ordinal: 3, Address: 0x2830)
  • DllUnregisterServer (Ordinal: 4, Address: 0x2830)

Imported DLLs & Functions

ADVAPI32.dll
  • GetTraceEnableFlags (Address: 0x18000da58)
  • GetTraceEnableLevel (Address: 0x18000da50)
  • GetTraceLoggerHandle (Address: 0x18000da48)
  • RegCloseKey (Address: 0x18000da38)
  • RegCreateKeyExW (Address: 0x18000da90)
  • RegDeleteValueW (Address: 0x18000da68)
  • RegEnumKeyExW (Address: 0x18000da80)
  • RegisterTraceGuidsW (Address: 0x18000da60)
  • RegOpenKeyExW (Address: 0x18000da70)
  • RegQueryInfoKeyW (Address: 0x18000da30)
  • RegSetValueExW (Address: 0x18000da78)
  • TraceMessage (Address: 0x18000da40)
  • UnregisterTraceGuids (Address: 0x18000da88)
COMCTL32.dll
  • (Address: 0x18000daa0)
KERNEL32.dll
  • CompareStringOrdinal (Address: 0x18000db68)
  • CompareStringW (Address: 0x18000db40)
  • DeleteCriticalSection (Address: 0x18000db18)
  • DisableThreadLibraryCalls (Address: 0x18000db70)
  • EnterCriticalSection (Address: 0x18000db48)
  • FindResourceExW (Address: 0x18000db00)
  • FreeLibrary (Address: 0x18000db28)
  • GetCurrentProcess (Address: 0x18000dba8)
  • GetCurrentProcessId (Address: 0x18000dab8)
  • GetCurrentThreadId (Address: 0x18000dac0)
  • GetDriveTypeW (Address: 0x18000db60)
  • GetLastError (Address: 0x18000daf0)
  • GetLogicalDrives (Address: 0x18000db58)
  • GetModuleFileNameW (Address: 0x18000dad8)
  • GetModuleHandleW (Address: 0x18000db20)
  • GetProcAddress (Address: 0x18000db10)
  • GetSystemTimeAsFileTime (Address: 0x18000dac8)
  • GetTickCount (Address: 0x18000dab0)
  • InitializeCriticalSection (Address: 0x18000dae0)
  • LeaveCriticalSection (Address: 0x18000db50)
  • LoadLibraryExW (Address: 0x18000db38)
  • LoadResource (Address: 0x18000db08)
  • lstrcmpiW (Address: 0x18000db30)
  • MultiByteToWideChar (Address: 0x18000dae8)
  • OutputDebugStringA (Address: 0x18000dbc0)
  • QueryPerformanceCounter (Address: 0x18000dbb8)
  • RaiseException (Address: 0x18000daf8)
  • RtlCaptureContext (Address: 0x18000db80)
  • RtlLookupFunctionEntry (Address: 0x18000db88)
  • RtlVirtualUnwind (Address: 0x18000db90)
  • SetUnhandledExceptionFilter (Address: 0x18000dba0)
  • SizeofResource (Address: 0x18000dad0)
  • Sleep (Address: 0x18000db78)
  • TerminateProcess (Address: 0x18000dbb0)
  • UnhandledExceptionFilter (Address: 0x18000db98)
msvcrt.dll
  • __C_specific_handler (Address: 0x18000dda8)
  • __CxxFrameHandler3 (Address: 0x18000dd70)
  • __dllonexit (Address: 0x18000dd58)
  • _amsg_exit (Address: 0x18000dd18)
  • _callnewh (Address: 0x18000dd28)
  • _CxxThrowException (Address: 0x18000dd08)
  • _errno (Address: 0x18000ddb0)
  • _initterm (Address: 0x18000dcf8)
  • _lock (Address: 0x18000dd48)
  • _onexit (Address: 0x18000dd60)
  • _purecall (Address: 0x18000dd98)
  • _unlock (Address: 0x18000dd50)
  • _vsnwprintf (Address: 0x18000dd78)
  • _XcptFilter (Address: 0x18000dd20)
  • ??1type_info@@UEAA@XZ (Address: 0x18000dd10)
  • ?terminate@@YAXXZ (Address: 0x18000dce8)
  • calloc (Address: 0x18000dd38)
  • free (Address: 0x18000dd90)
  • malloc (Address: 0x18000dd88)
  • memcmp (Address: 0x18000dd00)
  • memcpy (Address: 0x18000dd68)
  • memcpy_s (Address: 0x18000dda0)
  • memmove_s (Address: 0x18000dd30)
  • memset (Address: 0x18000ddb8)
  • realloc (Address: 0x18000dcf0)
  • toupper (Address: 0x18000dd40)
  • wcsncpy_s (Address: 0x18000dd80)
ole32.dll
  • CoCreateInstance (Address: 0x18000ddf0)
  • CoGetMalloc (Address: 0x18000dde8)
  • CoTaskMemAlloc (Address: 0x18000dde0)
  • CoTaskMemFree (Address: 0x18000ddd8)
  • CoTaskMemRealloc (Address: 0x18000ddd0)
  • PropVariantClear (Address: 0x18000ddc8)
OLEAUT32.dll
  • SysAllocString (Address: 0x18000dbe0)
  • VariantClear (Address: 0x18000dbd0)
  • VariantInit (Address: 0x18000dbe8)
  • VarUI4FromStr (Address: 0x18000dbd8)
PROPSYS.dll
  • InitVariantFromBuffer (Address: 0x18000dc28)
  • PropVariantCompareEx (Address: 0x18000dc18)
  • PropVariantToString (Address: 0x18000dc10)
  • PropVariantToStrRet (Address: 0x18000dc08)
  • PropVariantToVariant (Address: 0x18000dc20)
  • PSCreateMemoryPropertyStore (Address: 0x18000dbf8)
  • PSGetPropertyFromPropertyStorage (Address: 0x18000dc00)
SETUPAPI.dll
  • SetupDiDestroyDeviceInfoList (Address: 0x18000dc38)
  • SetupDiEnumDeviceInterfaces (Address: 0x18000dc40)
  • SetupDiGetClassDevsExW (Address: 0x18000dc48)
SHELL32.dll
  • (Address: 0x18000dc70)
  • (Address: 0x18000dc78)
  • SHCreateDefaultExtractIcon (Address: 0x18000dc68)
  • SHCreateItemFromIDList (Address: 0x18000dc58)
  • SHGetIDListFromObject (Address: 0x18000dc60)
SHLWAPI.dll
  • (Address: 0x18000dc88)
  • (Address: 0x18000dc90)
  • (Address: 0x18000dc98)
  • (Address: 0x18000dca8)
  • SHStrDupW (Address: 0x18000dca0)
USER32.dll
  • CharNextW (Address: 0x18000dcc8)
  • InsertMenuW (Address: 0x18000dcb8)
  • LoadStringW (Address: 0x18000dcd0)
  • SetMenuDefaultItem (Address: 0x18000dcd8)
  • UnregisterClassA (Address: 0x18000dcc0)