You'll notice that CryptExtAddCERHwnd often calls CryptExtAddCERMachineOnly internally if the user selects "Local Machine" and the "Show physical store locations" checkbox is unchecked.
When this command is executed, Windows triggers the cryptext.dll library to perform the following: