WorkFoldersShell.dll

Description: Microsoft (C) Work Folders Shell Extension

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: ca61b67837a12cea980fa204d23a6ce7

File Size: 225.0 KB

Uploaded At: Dec. 1, 2025, 7:45 a.m.

Views: 6

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3880)
DllGetClassObject (Ordinal: 2, Address: 0x3d00)
DllRegisterServer (Ordinal: 3, Address: 0x10f30)
DllUnregisterServer (Ordinal: 4, Address: 0x10f90)

Imported DLLs & Functions

ADVAPI32.dll

EventRegister (Address: 0x18001c220)
EventUnregister (Address: 0x18001c228)
GetTraceEnableFlags (Address: 0x18001c208)
GetTraceEnableLevel (Address: 0x18001c210)
GetTraceLoggerHandle (Address: 0x18001c218)
RegEnumKeyW (Address: 0x18001c238)
RegisterTraceGuidsW (Address: 0x18001c1f8)
TraceMessage (Address: 0x18001c230)
UnregisterTraceGuids (Address: 0x18001c200)

GDI32.dll

DeleteObject (Address: 0x18001c248)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18001c258)
CloseHandle (Address: 0x18001c388)
CreateEventW (Address: 0x18001c468)
CreateMutexExW (Address: 0x18001c3d0)
CreateSemaphoreExW (Address: 0x18001c3d8)
CreateThread (Address: 0x18001c460)
DebugBreak (Address: 0x18001c368)
DeleteCriticalSection (Address: 0x18001c328)
EnterCriticalSection (Address: 0x18001c2f8)
FileTimeToLocalFileTime (Address: 0x18001c498)
FileTimeToSystemTime (Address: 0x18001c4a0)
FindResourceExW (Address: 0x18001c310)
FormatMessageW (Address: 0x18001c330)
FreeLibrary (Address: 0x18001c280)
GetCurrentProcess (Address: 0x18001c3f8)
GetCurrentProcessId (Address: 0x18001c3c8)
GetCurrentThreadId (Address: 0x18001c458)
GetDateFormatEx (Address: 0x18001c448)
GetLastError (Address: 0x18001c288)
GetModuleFileNameA (Address: 0x18001c360)
GetModuleFileNameW (Address: 0x18001c318)
GetModuleHandleExW (Address: 0x18001c358)
GetModuleHandleW (Address: 0x18001c2a0)
GetProcAddress (Address: 0x18001c290)
GetProcessHeap (Address: 0x18001c348)
GetSystemTimeAsFileTime (Address: 0x18001c410)
GetThreadLocale (Address: 0x18001c3b8)
GetTickCount (Address: 0x18001c418)
GetTimeFormatEx (Address: 0x18001c440)
GetVolumeNameForVolumeMountPointW (Address: 0x18001c490)
GetVolumePathNameW (Address: 0x18001c488)
GlobalLock (Address: 0x18001c428)
GlobalUnlock (Address: 0x18001c270)
HeapAlloc (Address: 0x18001c340)
HeapFree (Address: 0x18001c350)
InitializeCriticalSection (Address: 0x18001c320)
IsDebuggerPresent (Address: 0x18001c370)
LeaveCriticalSection (Address: 0x18001c2e8)
LoadLibraryExW (Address: 0x18001c298)
LoadResource (Address: 0x18001c308)
LocalFree (Address: 0x18001c438)
lstrcmpiW (Address: 0x18001c2c8)
MultiByteToWideChar (Address: 0x18001c300)
OpenSemaphoreW (Address: 0x18001c3b0)
OutputDebugStringA (Address: 0x18001c420)
OutputDebugStringW (Address: 0x18001c378)
QueryPerformanceCounter (Address: 0x18001c408)
RaiseException (Address: 0x18001c2f0)
RegCloseKey (Address: 0x18001c2a8)
RegCreateKeyExW (Address: 0x18001c2d8)
RegDeleteValueW (Address: 0x18001c2e0)
RegEnumKeyExW (Address: 0x18001c2b8)
RegGetValueW (Address: 0x18001c268)
RegNotifyChangeKeyValue (Address: 0x18001c430)
RegOpenKeyExW (Address: 0x18001c2c0)
RegQueryInfoKeyW (Address: 0x18001c2b0)
RegSetValueExW (Address: 0x18001c2d0)
ReleaseMutex (Address: 0x18001c398)
ReleaseSemaphore (Address: 0x18001c390)
ReleaseSRWLockExclusive (Address: 0x18001c260)
ResetEvent (Address: 0x18001c470)
ResumeThread (Address: 0x18001c450)
SetEvent (Address: 0x18001c478)
SetLastError (Address: 0x18001c380)
SetThreadLocale (Address: 0x18001c3c0)
SetUnhandledExceptionFilter (Address: 0x18001c3f0)
SizeofResource (Address: 0x18001c480)
Sleep (Address: 0x18001c3e0)
SleepConditionVariableSRW (Address: 0x18001c338)
TerminateProcess (Address: 0x18001c400)
UnhandledExceptionFilter (Address: 0x18001c3e8)
WaitForSingleObject (Address: 0x18001c3a8)
WaitForSingleObjectEx (Address: 0x18001c3a0)
WakeAllConditionVariable (Address: 0x18001c278)

msvcrt.dll

__C_specific_handler (Address: 0x18001c6c0)
__CxxFrameHandler3 (Address: 0x18001c6d0)
__dllonexit (Address: 0x18001c5f0)
_amsg_exit (Address: 0x18001c610)
_callnewh (Address: 0x18001c650)
_CxxThrowException (Address: 0x18001c630)
_errno (Address: 0x18001c5d8)
_initterm (Address: 0x18001c680)
_lock (Address: 0x18001c5f8)
_onexit (Address: 0x18001c5e8)
_purecall (Address: 0x18001c6c8)
_unlock (Address: 0x18001c6d8)
_vsnprintf_s (Address: 0x18001c688)
_vsnwprintf (Address: 0x18001c690)
_wcsicmp (Address: 0x18001c5c0)
_wcsnicmp (Address: 0x18001c608)
_XcptFilter (Address: 0x18001c618)
??_V@YAXPEAX@Z (Address: 0x18001c698)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18001c648)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18001c640)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18001c668)
??0exception@@QEAA@XZ (Address: 0x18001c678)
??1exception@@UEAA@XZ (Address: 0x18001c670)
??1type_info@@UEAA@XZ (Address: 0x18001c5e0)
??3@YAXPEAX@Z (Address: 0x18001c5b8)
?terminate@@YAXXZ (Address: 0x18001c600)
?what@exception@@UEBAPEBDXZ (Address: 0x18001c638)
free (Address: 0x18001c6a8)
malloc (Address: 0x18001c6b0)
memcmp (Address: 0x18001c5c8)
memcpy (Address: 0x18001c628)
memcpy_s (Address: 0x18001c6a0)
memmove (Address: 0x18001c620)
memset (Address: 0x18001c6e0)
realloc (Address: 0x18001c5d0)
wcscat_s (Address: 0x18001c658)
wcscpy_s (Address: 0x18001c660)
wcsncpy_s (Address: 0x18001c6b8)

ntdll.dll

RtlCaptureContext (Address: 0x18001c6f0)
RtlLookupFunctionEntry (Address: 0x18001c700)
RtlVirtualUnwind (Address: 0x18001c6f8)

ole32.dll

CoCreateInstance (Address: 0x18001c718)
CoInitializeEx (Address: 0x18001c720)
CoQueryProxyBlanket (Address: 0x18001c750)
CoSetProxyBlanket (Address: 0x18001c758)
CoTaskMemAlloc (Address: 0x18001c728)
CoTaskMemFree (Address: 0x18001c738)
CoTaskMemRealloc (Address: 0x18001c730)
CoUninitialize (Address: 0x18001c748)
ReleaseStgMedium (Address: 0x18001c710)
StringFromGUID2 (Address: 0x18001c740)

OLEAUT32.dll

DispCallFunc (Address: 0x18001c4c8)
LoadRegTypeLib (Address: 0x18001c500)
LoadTypeLib (Address: 0x18001c4b8)
RegisterTypeLib (Address: 0x18001c4d0)
SysAllocString (Address: 0x18001c4b0)
SysFreeString (Address: 0x18001c4c0)
SysStringLen (Address: 0x18001c4d8)
UnRegisterTypeLib (Address: 0x18001c4e8)
VariantClear (Address: 0x18001c4f8)
VariantInit (Address: 0x18001c4f0)
VarUI4FromStr (Address: 0x18001c4e0)

PROPSYS.dll

PSCreateMemoryPropertyStore (Address: 0x18001c510)

SHELL32.dll

(Address: 0x18001c538)
DragQueryFileW (Address: 0x18001c530)
SHChangeNotify (Address: 0x18001c540)
SHGetDesktopFolder (Address: 0x18001c520)
SHGetPathFromIDListW (Address: 0x18001c528)

USER32.dll

CharNextW (Address: 0x18001c5a0)
DispatchMessageW (Address: 0x18001c550)
GetMenuItemCount (Address: 0x18001c578)
GetMenuItemInfoW (Address: 0x18001c580)
InsertMenuItemW (Address: 0x18001c570)
InsertMenuW (Address: 0x18001c590)
LoadImageW (Address: 0x18001c560)
LoadStringW (Address: 0x18001c558)
MsgWaitForMultipleObjects (Address: 0x18001c568)
PeekMessageW (Address: 0x18001c598)
PostThreadMessageW (Address: 0x18001c588)
UnregisterClassA (Address: 0x18001c5a8)