DfsShlEx.dll

Description: Distributed File System shell extension

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 59c440c0ff792adb24a542f01e55cc17

File Size: 60.0 KB

Uploaded At: Dec. 1, 2025, 7:55 a.m.

Views: 4

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x6240)
DllGetClassObject (Ordinal: 2, Address: 0x6260)
DllRegisterServer (Ordinal: 3, Address: 0x6270)
DllUnregisterServer (Ordinal: 4, Address: 0x62d0)

Imported DLLs & Functions

ADVAPI32.dll

RegCloseKey (Address: 0x1000d00c)
RegCreateKeyExW (Address: 0x1000d014)
RegDeleteValueW (Address: 0x1000d01c)
RegEnumKeyExW (Address: 0x1000d000)
RegOpenKeyExW (Address: 0x1000d004)
RegQueryInfoKeyW (Address: 0x1000d010)
RegQueryValueExW (Address: 0x1000d008)
RegSetValueExW (Address: 0x1000d018)

dfscli.dll

NetDfsGetClientInfo (Address: 0x1000d16c)
NetDfsSetClientInfo (Address: 0x1000d170)

GDI32.dll

DeleteObject (Address: 0x1000d024)
GetObjectW (Address: 0x1000d028)

KERNEL32.dll

DecodePointer (Address: 0x1000d068)
DeleteCriticalSection (Address: 0x1000d0dc)
DisableThreadLibraryCalls (Address: 0x1000d0c4)
EncodePointer (Address: 0x1000d070)
EnterCriticalSection (Address: 0x1000d0a4)
FindResourceExW (Address: 0x1000d0d0)
FlushInstructionCache (Address: 0x1000d05c)
FormatMessageW (Address: 0x1000d088)
FreeLibrary (Address: 0x1000d0e4)
GetCurrentProcess (Address: 0x1000d07c)
GetCurrentProcessId (Address: 0x1000d03c)
GetCurrentThreadId (Address: 0x1000d08c)
GetDriveTypeW (Address: 0x1000d098)
GetFileAttributesW (Address: 0x1000d090)
GetLastError (Address: 0x1000d0c0)
GetModuleFileNameW (Address: 0x1000d0ac)
GetModuleHandleA (Address: 0x1000d0b8)
GetModuleHandleW (Address: 0x1000d0e0)
GetProcAddress (Address: 0x1000d0d8)
GetProcessHeap (Address: 0x1000d060)
GetSystemTimeAsFileTime (Address: 0x1000d038)
GetTickCount (Address: 0x1000d034)
HeapAlloc (Address: 0x1000d06c)
HeapFree (Address: 0x1000d030)
InitializeCriticalSection (Address: 0x1000d0b4)
InterlockedPopEntrySList (Address: 0x1000d054)
InterlockedPushEntrySList (Address: 0x1000d058)
IsProcessorFeaturePresent (Address: 0x1000d064)
LeaveCriticalSection (Address: 0x1000d0b0)
LoadLibraryA (Address: 0x1000d094)
LoadLibraryExA (Address: 0x1000d074)
LoadLibraryExW (Address: 0x1000d0ec)
LoadLibraryW (Address: 0x1000d0cc)
LoadResource (Address: 0x1000d0d4)
LocalFree (Address: 0x1000d084)
lstrcmpiW (Address: 0x1000d0e8)
MultiByteToWideChar (Address: 0x1000d0bc)
OutputDebugStringA (Address: 0x1000d0a8)
QueryPerformanceCounter (Address: 0x1000d040)
RaiseException (Address: 0x1000d0c8)
SetLastError (Address: 0x1000d0a0)
SetUnhandledExceptionFilter (Address: 0x1000d048)
SizeofResource (Address: 0x1000d09c)
Sleep (Address: 0x1000d050)
TerminateProcess (Address: 0x1000d044)
UnhandledExceptionFilter (Address: 0x1000d04c)
VirtualAlloc (Address: 0x1000d078)
VirtualFree (Address: 0x1000d080)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1000d1e8)
__dllonexit (Address: 0x1000d1fc)
_amsg_exit (Address: 0x1000d1a0)
_callnewh (Address: 0x1000d178)
_CxxThrowException (Address: 0x1000d190)
_errno (Address: 0x1000d1f4)
_except_handler4_common (Address: 0x1000d1a8)
_initterm (Address: 0x1000d1a4)
_lock (Address: 0x1000d1ec)
_onexit (Address: 0x1000d200)
_purecall (Address: 0x1000d1d4)
_unlock (Address: 0x1000d1f0)
_vsnwprintf (Address: 0x1000d1c0)
_wcsdup (Address: 0x1000d1b8)
_XcptFilter (Address: 0x1000d19c)
??_V@YAXPAX@Z (Address: 0x1000d1e4)
??0exception@@QAE@ABQBD@Z (Address: 0x1000d17c)
??0exception@@QAE@ABQBDH@Z (Address: 0x1000d180)
??0exception@@QAE@ABV0@@Z (Address: 0x1000d184)
??1exception@@UAE@XZ (Address: 0x1000d188)
??1type_info@@UAE@XZ (Address: 0x1000d1f8)
??3@YAXPAX@Z (Address: 0x1000d1b4)
?terminate@@YAXXZ (Address: 0x1000d1b0)
?what@exception@@UBEPBDXZ (Address: 0x1000d18c)
calloc (Address: 0x1000d1bc)
free (Address: 0x1000d1d0)
malloc (Address: 0x1000d1cc)
memcpy (Address: 0x1000d194)
memcpy_s (Address: 0x1000d1e0)
memmove (Address: 0x1000d198)
memset (Address: 0x1000d204)
realloc (Address: 0x1000d1ac)
wcscat_s (Address: 0x1000d1d8)
wcscpy_s (Address: 0x1000d1dc)
wcsncpy_s (Address: 0x1000d1c8)
wcsnlen (Address: 0x1000d1c4)

netutils.dll

NetApiBufferFree (Address: 0x1000d20c)

ntdll.dll

NtClose (Address: 0x1000d214)
NtCreateFile (Address: 0x1000d228)
NtFsControlFile (Address: 0x1000d224)
NtOpenFile (Address: 0x1000d220)
NtQueryInformationFile (Address: 0x1000d21c)
RtlInitUnicodeString (Address: 0x1000d218)
RtlNtStatusToDosError (Address: 0x1000d22c)

ole32.dll

CoCreateInstance (Address: 0x1000d23c)
CoGetObject (Address: 0x1000d248)
CoTaskMemAlloc (Address: 0x1000d234)
CoTaskMemFree (Address: 0x1000d240)
CoTaskMemRealloc (Address: 0x1000d24c)
ReleaseStgMedium (Address: 0x1000d244)
StringFromGUID2 (Address: 0x1000d238)

OLEAUT32.dll

LoadTypeLib (Address: 0x1000d0f4)
RegisterTypeLib (Address: 0x1000d108)
SysAllocString (Address: 0x1000d104)
SysAllocStringLen (Address: 0x1000d0f8)
SysFreeString (Address: 0x1000d110)
SysStringLen (Address: 0x1000d100)
VarBstrCat (Address: 0x1000d0fc)
VarUI4FromStr (Address: 0x1000d10c)

SHELL32.dll

DragQueryFileW (Address: 0x1000d118)

USER32.dll

CharNextW (Address: 0x1000d164)
EnableWindow (Address: 0x1000d158)
GetActiveWindow (Address: 0x1000d13c)
GetDlgItem (Address: 0x1000d120)
GetParent (Address: 0x1000d150)
GetSystemMetrics (Address: 0x1000d134)
GetWindowRect (Address: 0x1000d128)
LoadCursorW (Address: 0x1000d15c)
LoadImageW (Address: 0x1000d154)
LoadStringW (Address: 0x1000d138)
MessageBoxW (Address: 0x1000d12c)
SendDlgItemMessageW (Address: 0x1000d144)
SendMessageW (Address: 0x1000d130)
SetCursor (Address: 0x1000d14c)
SetDlgItemTextW (Address: 0x1000d140)
SetWindowLongW (Address: 0x1000d148)
ShowCursor (Address: 0x1000d160)
UnregisterClassA (Address: 0x1000d124)