esevss.dll
Description: Microsoft(R) ESENT shadow utilities
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 32-bit
Operating System: Windows NT
SHA256: dcf9d0d5853916083c6b4dc2197179e4
File Size: 33.0 KB
Uploaded At: Dec. 1, 2025, 7:56 a.m.
Views: 4
Exported Functions
- EseShadowCreateShadow (Ordinal: 1, Address: 0x4ca0)
- EseShadowCreateSimpleShadow (Ordinal: 2, Address: 0x5180)
- EseShadowInit (Ordinal: 3, Address: 0x34e0)
- EseShadowMountShadow (Ordinal: 4, Address: 0x3d40)
- EseShadowMountSimpleShadow (Ordinal: 5, Address: 0x3ef0)
- EseShadowPurgeShadow (Ordinal: 6, Address: 0x54a0)
- EseShadowTerm (Ordinal: 7, Address: 0x3770)
- VssIdToString (Ordinal: 8, Address: 0x3880)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoInitializeEx (Address: 0x10009034)
- CoUninitialize (Address: 0x10009030)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x10009044)
- SetUnhandledExceptionFilter (Address: 0x10009040)
- UnhandledExceptionFilter (Address: 0x1000903c)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x10009054)
- FindClose (Address: 0x10009058)
- FindFirstFileW (Address: 0x10009060)
- GetFinalPathNameByHandleW (Address: 0x1000905c)
- GetTempFileNameW (Address: 0x1000904c)
- GetVolumePathNameW (Address: 0x10009050)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x10009068)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x10009070)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x10009078)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1000908c)
- GetCurrentProcessId (Address: 0x10009088)
- GetCurrentThreadId (Address: 0x10009084)
- TerminateProcess (Address: 0x10009080)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10009094)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1000909c)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x100090a8)
- GetTickCount (Address: 0x100090a4)
ESENT.dll
- JetGetDatabaseFileInfoW (Address: 0x10009008)
- JetInit3W (Address: 0x1000900c)
- JetSetSystemParameterW (Address: 0x10009000)
- JetTerm2 (Address: 0x10009004)
msvcrt.dll
- _amsg_exit (Address: 0x100090b8)
- _callnewh (Address: 0x100090c4)
- _except_handler4_common (Address: 0x100090c0)
- _initterm (Address: 0x100090e4)
- _purecall (Address: 0x100090cc)
- _vsnwprintf (Address: 0x100090e0)
- _wcsicmp (Address: 0x100090dc)
- _XcptFilter (Address: 0x100090b4)
- free (Address: 0x100090d4)
- malloc (Address: 0x100090c8)
- memcpy (Address: 0x100090bc)
- memset (Address: 0x100090e8)
- wcscpy_s (Address: 0x100090d8)
- wcsrchr (Address: 0x100090d0)
- wprintf (Address: 0x100090b0)
RPCRT4.dll
- RpcStringFreeW (Address: 0x10009014)
- UuidToStringW (Address: 0x10009018)
VSSAPI.DLL
- CreateVssBackupComponentsInternal (Address: 0x10009024)
- CreateWriter (Address: 0x10009020)
- VssFreeSnapshotPropertiesInternal (Address: 0x10009028)