| Windows XP DLL File Information - untfs.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows XP, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | NTFS Utility DLL |
| File Version: | 5.1.2600.5512 (xpsp.080413-2111) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft Windows Operating System |
| DLL popularity | Very Low - 1 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 309 KB |
| Total Number of Exported Functions: | 150 |
| Total Number of Exported Functions With Names: | 150 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 289,280 Bytes | 91.4% | Read, Execute | Code |
| .data | 0x00048000 | 16,896 Bytes | 5.3% | Write, Read | Initialized Data |
| .rsrc | 0x0004d000 | 1,024 Bytes | 0.3% | Read | Initialized Data |
| .reloc | 0x0004e000 | 8,192 Bytes | 2.6% | Read, Discardable | Initialized Data |
Static Linking
untfs.dll is statically linked to the following files:msvcrt.dll
ntdll.dll
KERNEL32.dll
USER32.dll
ADVAPI32.dll
ulib.dll
ifsutil.dll
This means that when untfs.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, untfs.dll won't be loaded.
List of files that are statically linked to untfs.dll
cnvfat.dll
This means that when one of the above files is loaded, untfs.dll will be loaded too. (The opposite of the previous 'Static Linking' section)
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 1 | 876 Bytes | 0.3% |
| Total | 1 | 876 Bytes | 0.3% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| Chkdsk |
| ChkdskEx |
| Extend |
| Format |
| FormatEx |
| InitializeUntfs |
| Recover |
| long __stdcall NtfsUpcaseCompare(unsigned short const *,unsigned long,unsigned short const *,unsigned long,class NTFS_UPCASE_TABLE const *,unsigned char) |
| private: static void __stdcall NTFS_MFT_INFO::ComputeDupInfoSignature(struct _DUPLICATED_INFORMATION *,unsigned char * const) |
| private: static void __stdcall NTFS_MFT_INFO::ComputeFileNameSignature(unsigned long,struct _FILE_NAME *,unsigned char * const) |
| public: __thiscall NTFS_ATTRIBUTE::NTFS_ATTRIBUTE(void) |
| public: __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::NTFS_ATTRIBUTE_DEFINITION_TABLE(void) |
| public: __thiscall NTFS_ATTRIBUTE_LIST::NTFS_ATTRIBUTE_LIST(void) |
| public: __thiscall NTFS_ATTRIBUTE_RECORD::NTFS_ATTRIBUTE_RECORD(void) |
| public: __thiscall NTFS_BAD_CLUSTER_FILE::NTFS_BAD_CLUSTER_FILE(void) |
| public: __thiscall NTFS_BITMAP::NTFS_BITMAP(void) |
| public: __thiscall NTFS_BITMAP_FILE::NTFS_BITMAP_FILE(void) |
| public: __thiscall NTFS_BOOT_FILE::NTFS_BOOT_FILE(void) |
| public: __thiscall NTFS_CLUSTER_RUN::NTFS_CLUSTER_RUN(void) |
| public: __thiscall NTFS_EXTENT_LIST::NTFS_EXTENT_LIST(void) |
| public: __thiscall NTFS_FILE_RECORD_SEGMENT::NTFS_FILE_RECORD_SEGMENT(void) |
| public: __thiscall NTFS_FRS_STRUCTURE::NTFS_FRS_STRUCTURE(void) |
| public: __thiscall NTFS_INDEX_TREE::NTFS_INDEX_TREE(void) |
| public: __thiscall NTFS_LOG_FILE::NTFS_LOG_FILE(void) |
| public: __thiscall NTFS_MFT_FILE::NTFS_MFT_FILE(void) |
| public: __thiscall NTFS_MFT_INFO::NTFS_MFT_INFO(void) |
| public: __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::NTFS_REFLECTED_MASTER_FILE_TABLE(void) |
| public: __thiscall NTFS_SA::NTFS_SA(void) |
| public: __thiscall NTFS_UPCASE_FILE::NTFS_UPCASE_FILE(void) |
| public: __thiscall NTFS_UPCASE_TABLE::NTFS_UPCASE_TABLE(void) |
| public: __thiscall RA_PROCESS_FILE::RA_PROCESS_FILE(void) |
| public: __thiscall RA_PROCESS_SD::RA_PROCESS_SD(void) |
| public: static struct _MFT_SEGMENT_REFERENCE __stdcall NTFS_MFT_INFO::QuerySegmentReference(void *) |
| public: static unsigned char __stdcall NTFS_MFT_INFO::CompareDupInfo(void *,struct _FILE_NAME *) |
| public: static unsigned char __stdcall NTFS_MFT_INFO::CompareFileName(void *,unsigned long,struct _FILE_NAME *,unsigned short *) |
| public: static unsigned char __stdcall NTFS_MFT_INFO::QueryFlags(void *,unsigned short) |
| public: static unsigned char __stdcall NTFS_SA::IsDosName(struct _FILE_NAME const *) |
| public: static unsigned char __stdcall NTFS_SA::IsNtfsName(struct _FILE_NAME const *) |
| public: static unsigned char __stdcall RA_PROCESS_FILE::Initialize(class NTFS_SA *,class BIG_INT,class BIG_INT *,unsigned long *,class NTFS_FRS_STRUCTURE *,class NTFS_FRS_STRUCTURE *,class HMEM *,class HMEM *,void *,void *,class NTFS_ATTRIBUTE *,class NTFS_UPCASE_TABLE *) |
| public: static unsigned char __stdcall RA_PROCESS_SD::Initialize(class NTFS_SA *,class BIG_INT,class BIG_INT *,unsigned long *,class NTFS_FILE_RECORD_SEGMENT *,class NTFS_FILE_RECORD_SEGMENT *,void *,void *,class NTFS_MASTER_FILE_TABLE *) |
| public: static unsigned long __stdcall NTFS_SA::QueryDefaultClustersPerIndexBuffer(class DP_DRIVE const *,unsigned long) |
| public: static unsigned long __stdcall NTFS_SA::QuerySectorsInElementaryStructures(class DP_DRIVE const *,unsigned long,unsigned long,unsigned long,unsigned long) |
| public: struct _ATTRIBUTE_LIST_ENTRY const * __thiscall NTFS_ATTRIBUTE_LIST::GetNextAttributeListEntry(struct _ATTRIBUTE_LIST_ENTRY const *)const |
| public: struct _INDEX_ENTRY const * __thiscall NTFS_INDEX_TREE::GetNext(unsigned long *,unsigned char *,unsigned char) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_EXTENT_LIST const *,class BIG_INT,class BIG_INT,unsigned long,class WSTRING const *,unsigned short) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,void const *,unsigned long,unsigned long,class WSTRING const *,unsigned short) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE::Read(void *,class BIG_INT,unsigned long,unsigned long *) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::Initialize(class NTFS_MASTER_FILE_TABLE *,unsigned char) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_LIST::QueryNextEntry(struct _ATTR_LIST_CURR_ENTRY *,unsigned long *,class BIG_INT *,struct _MFT_SEGMENT_REFERENCE *,unsigned short *,class WSTRING *)const |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_LIST::ReadList(void) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::Initialize(class IO_DP_DRIVE *,void *) |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::QueryExtentList(class NTFS_EXTENT_LIST *)const |
| public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::QueryName(class WSTRING *)const |
| public: unsigned char __thiscall NTFS_BAD_CLUSTER_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_BITMAP::Initialize(class BIG_INT,unsigned char,class LOG_IO_DP_DRIVE *,unsigned long) |
| public: unsigned char __thiscall NTFS_BITMAP::IsAllocated(class BIG_INT,class BIG_INT)const |
| public: unsigned char __thiscall NTFS_BITMAP::IsFree(class BIG_INT,class BIG_INT)const |
| public: unsigned char __thiscall NTFS_BITMAP::Write(class NTFS_ATTRIBUTE *,class NTFS_BITMAP *) |
| public: unsigned char __thiscall NTFS_BITMAP_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_BOOT_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_CLUSTER_RUN::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,unsigned long) |
| public: unsigned char __thiscall NTFS_EXTENT_LIST::AddExtent(class BIG_INT,class BIG_INT,class BIG_INT) |
| public: unsigned char __thiscall NTFS_EXTENT_LIST::Initialize(class BIG_INT,class BIG_INT) |
| public: unsigned char __thiscall NTFS_EXTENT_LIST::QueryExtent(unsigned long,class BIG_INT *,class BIG_INT *,class BIG_INT *)const |
| public: unsigned char __thiscall NTFS_EXTENT_LIST::QueryLcnFromVcn(class BIG_INT,class BIG_INT *,class BIG_INT *)const |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddFileNameAttribute(struct _FILE_NAME *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptor(enum _CANNED_SECURITY_TYPE,class NTFS_BITMAP *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptorData(class NTFS_ATTRIBUTE *,void *,struct _SECURITY_ENTRY * *,unsigned long,enum _CANNED_SECURITY_TYPE,class NTFS_BITMAP *,unsigned char) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Create(struct _STANDARD_INFORMATION const *,unsigned short) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Flush(class NTFS_BITMAP *,class NTFS_INDEX_TREE *,unsigned char) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,class NTFS_MFT_FILE *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,unsigned long,class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(void) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::IsAttributePresent(unsigned long,class WSTRING const *,unsigned char) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttribute(class NTFS_ATTRIBUTE *,unsigned char *,unsigned long,class WSTRING const *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttributeByOrdinal(class NTFS_ATTRIBUTE *,unsigned char *,unsigned long,unsigned long) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttributeListAttribute(class NTFS_ATTRIBUTE *,unsigned char *) |
| public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryFileSizes(class BIG_INT *,class BIG_INT *,unsigned char *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *,unsigned long) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class NTFS_ATTRIBUTE *,class BIG_INT,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class NTFS_ATTRIBUTE *,class BIG_INT,unsigned long,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::QueryAttributeList(class NTFS_ATTRIBUTE_LIST *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadAgain(class BIG_INT) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadNext(class BIG_INT) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadSet(class TLINK *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::SafeQueryAttribute(unsigned long,class NTFS_ATTRIBUTE *,class NTFS_ATTRIBUTE *) |
| public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Write(void) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::CopyIterator(class NTFS_INDEX_TREE *) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *,unsigned long,class NTFS_FILE_RECORD_SEGMENT *,class WSTRING const *) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::Initialize(unsigned long,class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *,unsigned long,unsigned long,unsigned long,class WSTRING const *) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::InsertEntry(unsigned long,void *,struct _MFT_SEGMENT_REFERENCE,unsigned char) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::QueryEntry(unsigned long,void *,unsigned long,struct _INDEX_ENTRY * *,class NTFS_INDEX_BUFFER * *,unsigned char *) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::QueryFileReference(unsigned long,void *,unsigned long,struct _MFT_SEGMENT_REFERENCE *,unsigned char *) |
| public: unsigned char __thiscall NTFS_INDEX_TREE::Save(class NTFS_FILE_RECORD_SEGMENT *) |
| public: unsigned char __thiscall NTFS_LOG_FILE::CreateDataAttribute(class BIG_INT,unsigned long,class NTFS_BITMAP *) |
| public: unsigned char __thiscall NTFS_LOG_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_MASTER_FILE_TABLE::AllocateFileRecordSegment(class BIG_INT *,unsigned char) |
| public: unsigned char __thiscall NTFS_MASTER_FILE_TABLE::Extend(unsigned long) |
| public: unsigned char __thiscall NTFS_MFT_FILE::Flush(void) |
| public: unsigned char __thiscall NTFS_MFT_FILE::Initialize(class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,unsigned long,class BIG_INT,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *) |
| public: unsigned char __thiscall NTFS_MFT_INFO::Initialize(class BIG_INT,class NTFS_UPCASE_TABLE *,unsigned char,unsigned char,unsigned __int64) |
| public: unsigned char __thiscall NTFS_MFT_INFO::Initialize(void) |
| public: unsigned char __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_SA::CreateElementaryStructures(class NTFS_BITMAP *,unsigned long,unsigned long,unsigned long,unsigned long,class NUMBER_SET const *,unsigned char,unsigned char,class MESSAGE *,struct BIOS_PARAMETER_BLOCK *,class WSTRING const *) |
| public: unsigned char __thiscall NTFS_SA::Initialize(class LOG_IO_DP_DRIVE *,class MESSAGE *,class BIG_INT,class BIG_INT) |
| public: unsigned char __thiscall NTFS_SA::QueryClusterFactor(void)const |
| public: unsigned char __thiscall NTFS_SA::QueryFrsFromPath(class WSTRING const *,class NTFS_MASTER_FILE_TABLE *,class NTFS_BITMAP *,class NTFS_FILE_RECORD_SEGMENT *,unsigned char *,unsigned char *) |
| public: unsigned char __thiscall NTFS_SA::Read(class MESSAGE *) |
| public: unsigned char __thiscall NTFS_SA::SetVolumeFlag(unsigned short,unsigned char *) |
| public: unsigned char __thiscall NTFS_SA::TakeCensus(class NTFS_MASTER_FILE_TABLE *,unsigned long,struct NTFS_CENSUS_INFO *) |
| public: unsigned char __thiscall NTFS_SA::WriteRemainingBootCode(void) |
| public: unsigned char __thiscall NTFS_UPCASE_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) |
| public: unsigned char __thiscall NTFS_UPCASE_TABLE::Initialize(class NTFS_ATTRIBUTE *) |
| public: unsigned long __thiscall NTFS_EXTENT_LIST::QueryNumberOfExtents(void)const |
| public: unsigned short __thiscall NTFS_SA::QueryVolumeFlagsAndLabel(unsigned char *,unsigned char *,unsigned char *,class WSTRING *) |
| public: virtual __thiscall NTFS_ATTRIBUTE::~NTFS_ATTRIBUTE(void) |
| public: virtual __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::~NTFS_ATTRIBUTE_DEFINITION_TABLE(void) |
| public: virtual __thiscall NTFS_ATTRIBUTE_LIST::~NTFS_ATTRIBUTE_LIST(void) |
| public: virtual __thiscall NTFS_ATTRIBUTE_RECORD::~NTFS_ATTRIBUTE_RECORD(void) |
| public: virtual __thiscall NTFS_BAD_CLUSTER_FILE::~NTFS_BAD_CLUSTER_FILE(void) |
| public: virtual __thiscall NTFS_BITMAP::~NTFS_BITMAP(void) |
| public: virtual __thiscall NTFS_BITMAP_FILE::~NTFS_BITMAP_FILE(void) |
| public: virtual __thiscall NTFS_BOOT_FILE::~NTFS_BOOT_FILE(void) |
| public: virtual __thiscall NTFS_CLUSTER_RUN::~NTFS_CLUSTER_RUN(void) |
| public: virtual __thiscall NTFS_EXTENT_LIST::~NTFS_EXTENT_LIST(void) |
| public: virtual __thiscall NTFS_FILE_RECORD_SEGMENT::~NTFS_FILE_RECORD_SEGMENT(void) |
| public: virtual __thiscall NTFS_FRS_STRUCTURE::~NTFS_FRS_STRUCTURE(void) |
| public: virtual __thiscall NTFS_INDEX_TREE::~NTFS_INDEX_TREE(void) |
| public: virtual __thiscall NTFS_LOG_FILE::~NTFS_LOG_FILE(void) |
| public: virtual __thiscall NTFS_MFT_FILE::~NTFS_MFT_FILE(void) |
| public: virtual __thiscall NTFS_MFT_INFO::~NTFS_MFT_INFO(void) |
| public: virtual __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::~NTFS_REFLECTED_MASTER_FILE_TABLE(void) |
| public: virtual __thiscall NTFS_SA::~NTFS_SA(void) |
| public: virtual __thiscall NTFS_UPCASE_FILE::~NTFS_UPCASE_FILE(void) |
| public: virtual __thiscall NTFS_UPCASE_TABLE::~NTFS_UPCASE_TABLE(void) |
| public: virtual __thiscall RA_PROCESS_FILE::~RA_PROCESS_FILE(void) |
| public: virtual __thiscall RA_PROCESS_SD::~RA_PROCESS_SD(void) |
| public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::InsertIntoFile(class NTFS_FILE_RECORD_SEGMENT *,class NTFS_BITMAP *) |
| public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::MakeNonresident(class NTFS_BITMAP *) |
| public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::Resize(class BIG_INT,class NTFS_BITMAP *) |
| public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::SetSparse(class BIG_INT,class NTFS_BITMAP *) |
| public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::Write(void const *,class BIG_INT,unsigned long,unsigned long *,class NTFS_BITMAP *) |
| public: virtual unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Write(void) |
| public: virtual unsigned char __thiscall NTFS_FRS_STRUCTURE::Read(void) |
| public: virtual unsigned char __thiscall NTFS_MFT_FILE::Read(void) |
| public: virtual unsigned char __thiscall NTFS_SA::Read(void) |
| public: void * __thiscall NTFS_FRS_STRUCTURE::GetNextAttributeRecord(void const *,class MESSAGE *,unsigned char *) |
| public: void __thiscall NTFS_CLUSTER_RUN::Relocate(class BIG_INT) |
| public: void __thiscall NTFS_INDEX_TREE::ResetIterator(void) |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_abnormal_termination _except_handler3 memmove sprintf wcslen - ntdll.dll:
DbgPrint NtClose NtCreateEvent NtQueryInformationThread NtQueryPerformanceCounter NtQuerySystemInformation NtQuerySystemTime NtSetEvent NtTerminateThread NtWaitForSingleObject RtlAllocateHeap RtlComputeCrc32 RtlCreateUserThread RtlDecompressBuffer RtlFreeHeap RtlLengthSecurityDescriptor RtlRaiseStatus RtlUpcaseUnicodeString - KERNEL32.dll:
FormatMessageA FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount GetWindowsDirectoryW InterlockedCompareExchange LoadLibraryExW QueryPerformanceCounter SetErrorMode SetUnhandledExceptionFilter TerminateProcess UnhandledExceptionFilter ntdll!RtlGetLastWin32Error - USER32.dll:
CharToOemA MessageBoxA - ADVAPI32.dll:
DeregisterEventSource RegisterEventSourceW ReportEventW - ulib.dll:
private: unsigned long __thiscall BITVECTOR::ComputeCountSet(void)const protected: __thiscall OBJECT::OBJECT(void) protected: void __thiscall OBJECT::SetClassDescriptor(class CLASS_DESCRIPTOR const *) public: __thiscall BITVECTOR::BITVECTOR(void) public: __thiscall CLASS_DESCRIPTOR::CLASS_DESCRIPTOR(void) public: __thiscall DSTRING::DSTRING(void) public: __thiscall FSTRING::FSTRING(void) public: __thiscall HMEM::HMEM(void) public: __thiscall LIST::LIST(void) public: __thiscall MEM_ALLOCATOR::MEM_ALLOCATOR(void) public: __thiscall MESSAGE::MESSAGE(void) public: __thiscall PATH::PATH(void) public: class ARRAY * __thiscall PATH::QueryComponentArray(class ARRAY *)const public: class WSTRING * __thiscall ARGUMENT::GetLexeme(void) public: class WSTRING * __thiscall FSTRING::Initialize(unsigned short *,unsigned long) public: class WSTRING * __thiscall WSTRING::QueryString(unsigned long,unsigned long)const public: long __thiscall WSTRING::Strcmp(class WSTRING const *)const public: long __thiscall WSTRING::Stricmp(class WSTRING const *)const public: static int __stdcall WSTRING::Stricmp(unsigned short *,unsigned short *) public: unsigned char __cdecl MESSAGE::Display(char const *,...) public: unsigned char __cdecl MESSAGE::DisplayMsg(unsigned long,char const *,...) public: unsigned char __cdecl MESSAGE::DisplayMsg(unsigned long,enum MESSAGE_TYPE,unsigned long,char const *,...) public: unsigned char __cdecl MESSAGE::Log(char const *,...) public: unsigned char __cdecl MESSAGE::LogMsg(unsigned long,char const *,...) public: unsigned char __thiscall BITVECTOR::Initialize(unsigned long,enum BIT,unsigned long *) public: unsigned char __thiscall BSTRING::Initialize(void) public: unsigned char __thiscall CLASS_DESCRIPTOR::Initialize(void) public: unsigned char __thiscall HMEM::Initialize(void) public: unsigned char __thiscall HMEM::Resize(unsigned long,unsigned long) public: unsigned char __thiscall LIST::Initialize(void) public: unsigned char __thiscall LIST::Insert(class OBJECT *,class ITERATOR *) public: unsigned char __thiscall MEM_ALLOCATOR::Initialize(unsigned __int64,unsigned long) public: unsigned char __thiscall MESSAGE::DisplayMsg(unsigned long) public: unsigned char __thiscall MESSAGE::DisplayMsg(unsigned long,enum MESSAGE_TYPE,unsigned long) public: unsigned char __thiscall MESSAGE::DumpDataToLog(void *,unsigned long) public: unsigned char __thiscall MESSAGE::IsLoggingEnabled(void) public: unsigned char __thiscall MESSAGE::LogMsg(unsigned long) public: unsigned char __thiscall MESSAGE::QueryPackedLog(class HMEM *,unsigned long *) public: unsigned char __thiscall PATH::Initialize(class WSTRING const *,unsigned char) public: unsigned char __thiscall WSTRING::Initialize(char const *,unsigned long) public: unsigned char __thiscall WSTRING::Initialize(class WSTRING const *,unsigned long,unsigned long) public: unsigned char __thiscall WSTRING::Initialize(unsigned short const *,unsigned long) public: unsigned char __thiscall WSTRING::Strcat(class WSTRING const *) public: unsigned long __thiscall OBJECT::QueryClassId(void)const public: unsigned short * __thiscall WSTRING::QueryWSTR(unsigned long,unsigned long,unsigned short *,unsigned long,unsigned char)const public: unsigned short __thiscall WSTRING::QueryChAt(unsigned long)const public: unsigned short const * __thiscall WSTRING::GetWSTR(void)const public: virtual __thiscall BITVECTOR::~BITVECTOR(void) public: virtual __thiscall DSTRING::~DSTRING(void) public: virtual __thiscall HMEM::~HMEM(void) public: virtual __thiscall LIST::~LIST(void) public: virtual __thiscall MEM_ALLOCATOR::~MEM_ALLOCATOR(void) public: virtual __thiscall MESSAGE::~MESSAGE(void) public: virtual __thiscall OBJECT::~OBJECT(void) public: virtual __thiscall PATH::~PATH(void) public: virtual class ITERATOR * __thiscall LIST::QueryIterator(void)const public: virtual long __thiscall OBJECT::Compare(class OBJECT const *)const public: virtual unsigned char __thiscall DSTRING::NewBuf(unsigned long) public: virtual unsigned char __thiscall DSTRING::Resize(unsigned long) public: virtual unsigned char __thiscall LIST::Put(class OBJECT *) public: virtual unsigned char __thiscall SEQUENTIAL_CONTAINER::DeleteAllMembers(void) public: virtual void * __thiscall HMEM::Acquire(unsigned long,unsigned long) public: void * __thiscall MEM_ALLOCATOR::Allocate(unsigned long) public: void __thiscall BITVECTOR::ResetBit(unsigned long,unsigned long) public: void __thiscall BITVECTOR::SetBit(unsigned long,unsigned long) public: void __thiscall MESSAGE::Lock(void) public: void __thiscall MESSAGE::SetLoggingEnabled(unsigned char) public: void __thiscall MESSAGE::Unlock(void) - ifsutil.dll:
protected: __thiscall SUPERAREA::SUPERAREA(void) protected: __thiscall VOL_LIODPDRV::VOL_LIODPDRV(void) protected: enum FORMAT_ERROR_CODE __thiscall VOL_LIODPDRV::Initialize(class WSTRING const *,class SUPERAREA *,class MESSAGE *,unsigned char,unsigned char,enum _MEDIA_TYPE,unsigned short) protected: unsigned char __thiscall SUPERAREA::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,unsigned long,class MESSAGE *) public: __thiscall DIGRAPH::DIGRAPH(void) public: __thiscall DIGRAPH_EDGE::DIGRAPH_EDGE(void) public: __thiscall DP_DRIVE::DP_DRIVE(void) public: __thiscall INTSTACK::INTSTACK(void) public: __thiscall LOG_IO_DP_DRIVE::LOG_IO_DP_DRIVE(void) public: __thiscall NUMBER_SET::NUMBER_SET(void) public: __thiscall READ_CACHE::READ_CACHE(void) public: __thiscall SECRUN::SECRUN(void) public: __thiscall SPARSE_SET::SPARSE_SET(void) public: __thiscall TLINK::TLINK(void) public: class BIG_INT & __thiscall TLINK::GetData(void *) public: class BIG_INT & __thiscall TLINK::GetNextDataSlot(void) public: class BIG_INT __thiscall INTSTACK::Look(unsigned long)const public: class BIG_INT __thiscall NUMBER_SET::QueryNumber(class BIG_INT)const public: class IO_DP_DRIVE * __thiscall SECRUN::GetDrive(void) public: class IO_DP_DRIVE * __thiscall SUPERAREA::GetDrive(void) public: class MESSAGE * __thiscall IO_DP_DRIVE::GetMessageW(void) public: enum FORMAT_ERROR_CODE __thiscall VOL_LIODPDRV::Format(class WSTRING const *,class MESSAGE *,unsigned long,unsigned long,unsigned long) public: static class CANNED_SECURITY * __stdcall IFS_SYSTEM::GetCannedSecurity(void) public: static unsigned char __stdcall IFS_SYSTEM::CheckValidSecurityDescriptor(unsigned long,struct _SECURITY_DESCRIPTOR *) public: static unsigned char __stdcall IFS_SYSTEM::DismountVolume(class WSTRING const *) public: static unsigned char __stdcall IFS_SYSTEM::DosDriveNameToNtDriveName(class WSTRING const *,class WSTRING *) public: static unsigned char __stdcall IFS_SYSTEM::IsThisNtfs(class BIG_INT,unsigned long,void *) public: static unsigned long __stdcall IFS_SYSTEM::QueryPageSize(void) public: static unsigned long __stdcall SUPERAREA::ComputeVolId(unsigned long) public: static void __stdcall IFS_SYSTEM::QueryNtfsTime(union _LARGE_INTEGER *) public: unsigned char __thiscall DIGRAPH::AddEdge(unsigned long,unsigned long) public: unsigned char __thiscall DIGRAPH::EliminateCycles(class CONTAINER *) public: unsigned char __thiscall DIGRAPH::Initialize(unsigned long) public: unsigned char __thiscall DIGRAPH::QueryChildren(unsigned long,class NUMBER_SET *)const public: unsigned char __thiscall DIGRAPH::QueryParents(unsigned long,class NUMBER_SET *)const public: unsigned char __thiscall DIGRAPH::QueryParentsWithChildren(class NUMBER_SET *,unsigned long)const public: unsigned char __thiscall DIGRAPH::RemoveEdge(unsigned long,unsigned long) public: unsigned char __thiscall DP_DRIVE::Initialize(class WSTRING const *,class MESSAGE *,unsigned char,unsigned char,unsigned short) public: unsigned char __thiscall DP_DRIVE::IsATformat(void)const public: unsigned char __thiscall DP_DRIVE::QueryMediaByte(void)const public: unsigned char __thiscall INTSTACK::Initialize(void) public: unsigned char __thiscall INTSTACK::Push(class BIG_INT) public: unsigned char __thiscall INTSTACK::ReverseCopy(class INTSTACK *) public: unsigned char __thiscall IO_DP_DRIVE::Lock(void) public: unsigned char __thiscall IO_DP_DRIVE::Verify(class BIG_INT,class BIG_INT) public: unsigned char __thiscall IO_DP_DRIVE::Verify(class BIG_INT,class BIG_INT,class NUMBER_SET *) public: unsigned char __thiscall LOG_IO_DP_DRIVE::Initialize(class WSTRING const *,class MESSAGE *,unsigned char,unsigned short) public: unsigned char __thiscall LOG_IO_DP_DRIVE::SetSystemId(unsigned char) public: unsigned char __thiscall LOG_IO_DP_DRIVE::Write(class BIG_INT,unsigned long,void *) public: unsigned char __thiscall NUMBER_SET::Add(class BIG_INT) public: unsigned char __thiscall NUMBER_SET::Add(class BIG_INT,class BIG_INT) public: unsigned char __thiscall NUMBER_SET::Add(class NUMBER_SET const *) public: unsigned char __thiscall NUMBER_SET::CheckAndAdd(class BIG_INT,unsigned char *) public: unsigned char __thiscall NUMBER_SET::DoesIntersectSet(class BIG_INT,class BIG_INT)const public: unsigned char __thiscall NUMBER_SET::Initialize(void) public: unsigned char __thiscall NUMBER_SET::Remove(class BIG_INT) public: unsigned char __thiscall NUMBER_SET::Remove(class BIG_INT,class BIG_INT) public: unsigned char __thiscall NUMBER_SET::Remove(class NUMBER_SET const *) public: unsigned char __thiscall NUMBER_SET::RemoveAll(void) public: unsigned char __thiscall READ_CACHE::Initialize(class IO_DP_DRIVE *,unsigned long) public: unsigned char __thiscall SECRUN::Initialize(class MEM *,class IO_DP_DRIVE *,class BIG_INT,unsigned long) public: unsigned char __thiscall SPARSE_SET::CheckAndAdd(class BIG_INT,unsigned char *) public: unsigned char __thiscall SPARSE_SET::CheckAndRemove(class BIG_INT,unsigned char *) public: unsigned char __thiscall SPARSE_SET::Initialize(void) public: unsigned char __thiscall TLINK::Initialize(unsigned short) public: unsigned char __thiscall VOL_LIODPDRV::ChkDsk(enum FIX_LEVEL,class MESSAGE *,unsigned long,unsigned long,unsigned short,unsigned long *,class WSTRING const *) public: unsigned char __thiscall VOL_LIODPDRV::ForceAutochk(unsigned char,unsigned long,unsigned long,unsigned short,class WSTRING const *) public: unsigned char __thiscall VOL_LIODPDRV::Recover(class WSTRING const *,class MESSAGE *) public: unsigned short __thiscall TLINK::QueryMemberCount(void)const public: virtual __thiscall DIGRAPH::~DIGRAPH(void) public: virtual __thiscall DP_DRIVE::~DP_DRIVE(void) public: virtual __thiscall INTSTACK::~INTSTACK(void) public: virtual __thiscall LOG_IO_DP_DRIVE::~LOG_IO_DP_DRIVE(void) public: virtual __thiscall NUMBER_SET::~NUMBER_SET(void) public: virtual __thiscall SECRUN::~SECRUN(void) public: virtual __thiscall SPARSE_SET::~SPARSE_SET(void) public: virtual __thiscall SUPERAREA::~SUPERAREA(void) public: virtual __thiscall TLINK::~TLINK(void) public: virtual __thiscall VOL_LIODPDRV::~VOL_LIODPDRV(void) public: virtual class BIG_INT __thiscall DP_DRIVE::QuerySectors(void)const public: virtual unsigned char __thiscall SECRUN::Read(void) public: virtual unsigned char __thiscall SECRUN::Write(void) public: virtual unsigned long __thiscall DP_DRIVE::QuerySectorSize(void)const public: void * __thiscall CANNED_SECURITY::GetCannedSecurityDescriptor(enum _CANNED_SECURITY_TYPE,unsigned long *) public: void * __thiscall TLINK::GetBuffer(void *) public: void * __thiscall TLINK::GetFirst(void) public: void * __thiscall TLINK::GetNext(void *) public: void * __thiscall TLINK::GetSortedFirst(void) public: void * __thiscall TLINK::QueryDisjointRangeAndAssignBuffer(class BIG_INT *,unsigned short *,unsigned short *,void *,unsigned long,void *) public: void __thiscall BIG_INT::QueryCompressedInteger(unsigned char *,unsigned char *)const public: void __thiscall BIG_INT::Set(unsigned char,unsigned char const *) public: void __thiscall INTSTACK::Pop(unsigned long) public: void __thiscall IO_DP_DRIVE::SetCache(class DRIVE_CACHE *) public: void __thiscall NUMBER_SET::QueryDisjointRange(unsigned long,class BIG_INT *,class BIG_INT *)const public: void __thiscall TLINK::Sort(void)