Windows 8 DLL File Information - untfs.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	NTFS Utility DLL
File Version:	6.2.9200.16611 (win8_gdr.130513-1805)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - 1 other DLL files in system32 directory are statically linked to this file.
File Size:	471 KB
Total Number of Exported Functions:	161
Total Number of Exported Functions With Names:	161

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	445,440 Bytes	92.3%	Read, Execute	Code
.data	0x0006e000	9,216 Bytes	1.9%	Write, Read	Initialized Data
.idata	0x00071000	12,288 Bytes	2.5%	Read	Initialized Data
.rsrc	0x00074000	1,024 Bytes	0.2%	Read	Initialized Data
.reloc	0x00075000	13,824 Bytes	2.9%	Read, Discardable	Initialized Data

Static Linking

untfs.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-eventlog-legacy-l1-1-0.dll
ulib.dll
ifsutil.dll

This means that when untfs.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, untfs.dll won't be loaded.

List of files that are statically linked to untfs.dll

cnvfat.dll

This means that when one of the above files is loaded, untfs.dll will be loaded too. (The opposite of the previous 'Static Linking' section)

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	1	888 Bytes	0.2%
Total	1	888 Bytes	0.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

Chkdsk

ChkdskEx

CreateFormatCorruptionRecordContext

DeleteFormatCorruptionRecordContext

Extend

Format

FormatCorruptionRecordA

FormatCorruptionRecordW

FormatEx

GetFilesystemInformation

Recover

SetOriginalVolumeName

SetWriteViewCacheVolumeName

long __stdcall NtfsUpcaseCompare(unsigned short const *,unsigned long,unsigned short const *,unsigned long,class NTFS_UPCASE_TABLE const *,unsigned char)

private: static void __stdcall NTFS_MFT_INFO::ComputeDupInfoSignature(struct _DUPLICATED_INFORMATION *,unsigned char * const)

private: static void __stdcall NTFS_MFT_INFO::ComputeFileNameSignature(unsigned long,struct _FILE_NAME *,unsigned char * const)

public: __thiscall NTFS_ATTRIBUTE::NTFS_ATTRIBUTE(void)

public: __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::NTFS_ATTRIBUTE_DEFINITION_TABLE(void)

public: __thiscall NTFS_ATTRIBUTE_LIST::NTFS_ATTRIBUTE_LIST(void)

public: __thiscall NTFS_ATTRIBUTE_RECORD::NTFS_ATTRIBUTE_RECORD(void)

public: __thiscall NTFS_BAD_CLUSTER_FILE::NTFS_BAD_CLUSTER_FILE(void)

public: __thiscall NTFS_BITMAP::NTFS_BITMAP(void)

public: __thiscall NTFS_BITMAP_FILE::NTFS_BITMAP_FILE(void)

public: __thiscall NTFS_BOOT_FILE::NTFS_BOOT_FILE(void)

public: __thiscall NTFS_CLUSTER_RUN::NTFS_CLUSTER_RUN(void)

public: __thiscall NTFS_EXTENT_LIST::NTFS_EXTENT_LIST(void)

public: __thiscall NTFS_FILE_RECORD_SEGMENT::NTFS_FILE_RECORD_SEGMENT(void)

public: __thiscall NTFS_FRS_STRUCTURE::NTFS_FRS_STRUCTURE(void)

public: __thiscall NTFS_INDEX_TREE::NTFS_INDEX_TREE(void)

public: __thiscall NTFS_LOG_FILE::NTFS_LOG_FILE(void)

public: __thiscall NTFS_MFT_FILE::NTFS_MFT_FILE(void)

public: __thiscall NTFS_MFT_INFO::NTFS_MFT_INFO(void)

public: __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::NTFS_REFLECTED_MASTER_FILE_TABLE(void)

public: __thiscall NTFS_SA::NTFS_SA(void)

public: __thiscall NTFS_UPCASE_FILE::NTFS_UPCASE_FILE(void)

public: __thiscall NTFS_UPCASE_TABLE::NTFS_UPCASE_TABLE(void)

public: __thiscall NTFS_VOLUME_FILE::NTFS_VOLUME_FILE(void)

public: static struct _MFT_SEGMENT_REFERENCE __stdcall NTFS_MFT_INFO::QuerySegmentReference(void *)

public: static unsigned char __stdcall NTFS_MFT_INFO::CompareDupInfo(void *,struct _FILE_NAME *)

public: static unsigned char __stdcall NTFS_MFT_INFO::CompareFileName(void *,unsigned long,struct _FILE_NAME *,unsigned short *)

public: static unsigned char __stdcall NTFS_MFT_INFO::QueryFlags(void *,unsigned short)

public: static unsigned char __stdcall NTFS_SA::GetRootFrsIndex(class NTFS_MFT_FILE *,class NTFS_FILE_RECORD_SEGMENT *,class NTFS_INDEX_TREE *)

public: static unsigned char __stdcall NTFS_SA::IsDosName(struct _FILE_NAME const *)

public: static unsigned char __stdcall NTFS_SA::IsNtfsName(struct _FILE_NAME const *)

public: static unsigned long __stdcall NTFS_SA::QueryDefaultClustersPerIndexBuffer(class DP_DRIVE const *,unsigned long)

public: static unsigned long __stdcall NTFS_SA::QuerySectorsInElementaryStructures(class DP_DRIVE *,unsigned long,unsigned long,unsigned long,unsigned long)

public: struct _ATTRIBUTE_LIST_ENTRY const * __thiscall NTFS_ATTRIBUTE_LIST::GetNextAttributeListEntry(struct _ATTRIBUTE_LIST_ENTRY const *)const

public: struct _INDEX_ENTRY const * __thiscall NTFS_INDEX_TREE::GetNext(unsigned long *,unsigned char *,unsigned char)

public: unsigned char __thiscall NTFS_ATTRIBUTE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_EXTENT_LIST const *,class BIG_INT,class BIG_INT,unsigned long,class WSTRING const *,unsigned short)

public: unsigned char __thiscall NTFS_ATTRIBUTE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,void const *,unsigned long,unsigned long,class WSTRING const *,unsigned short)

public: unsigned char __thiscall NTFS_ATTRIBUTE::Prefetch(class BIG_INT,unsigned long)

public: unsigned char __thiscall NTFS_ATTRIBUTE::Read(void *,class BIG_INT,unsigned long,unsigned long *)

public: unsigned char __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::Initialize(class NTFS_MASTER_FILE_TABLE *,unsigned char)

public: unsigned char __thiscall NTFS_ATTRIBUTE_LIST::QueryNextEntry(struct _ATTR_LIST_CURR_ENTRY *,unsigned long *,class BIG_INT *,struct _MFT_SEGMENT_REFERENCE *,unsigned short *,class WSTRING *)const

public: unsigned char __thiscall NTFS_ATTRIBUTE_LIST::ReadList(void)

public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::Initialize(class IO_DP_DRIVE *,void *)

public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::QueryExtentList(class NTFS_EXTENT_LIST *)const

public: unsigned char __thiscall NTFS_ATTRIBUTE_RECORD::QueryName(class WSTRING *)const

public: unsigned char __thiscall NTFS_BAD_CLUSTER_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_BITMAP::Initialize(class BIG_INT,unsigned char,class LOG_IO_DP_DRIVE *,unsigned long,unsigned char)

public: unsigned char __thiscall NTFS_BITMAP::IsAllocated(class BIG_INT,class BIG_INT)const

public: unsigned char __thiscall NTFS_BITMAP::IsFree(class BIG_INT,class BIG_INT)const

public: unsigned char __thiscall NTFS_BITMAP::Write(class NTFS_ATTRIBUTE *,class NTFS_BITMAP *)

public: unsigned char __thiscall NTFS_BITMAP::WriteModified(class NTFS_ATTRIBUTE *,class NTFS_BITMAP *)

public: unsigned char __thiscall NTFS_BITMAP_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_BOOT_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_CLUSTER_RUN::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,unsigned long)

public: unsigned char __thiscall NTFS_EXTENT_LIST::AddExtent(class BIG_INT,class BIG_INT,class BIG_INT)

public: unsigned char __thiscall NTFS_EXTENT_LIST::Initialize(class BIG_INT,class BIG_INT)

public: unsigned char __thiscall NTFS_EXTENT_LIST::QueryExtent(unsigned long,class BIG_INT *,class BIG_INT *,class BIG_INT *)const

public: unsigned char __thiscall NTFS_EXTENT_LIST::QueryLcnFromVcn(class BIG_INT,class BIG_INT *,class BIG_INT *)const

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddFileNameAttribute(struct _FILE_NAME *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptor(enum _CANNED_SECURITY_TYPE,class NTFS_BITMAP *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptorData(class NTFS_ATTRIBUTE *,void *,struct _SECURITY_ENTRY * *,unsigned long,enum _CANNED_SECURITY_TYPE,class NTFS_BITMAP *,unsigned char)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Create(struct _STANDARD_INFORMATION const *,unsigned short)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Flush(class NTFS_BITMAP *,class NTFS_INDEX_TREE *,unsigned char)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,class NTFS_MFT_FILE *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT,unsigned long,class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class NTFS_FRS_STRUCTURE *,class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(void)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::IsAttributePresent(unsigned long,class WSTRING const *,unsigned char)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttribute(class NTFS_ATTRIBUTE *,unsigned char *,unsigned long,class WSTRING const *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttributeByOrdinal(class NTFS_ATTRIBUTE *,unsigned char *,unsigned long,unsigned long)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttributeListAttribute(class NTFS_ATTRIBUTE *,unsigned char *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryDuplicatedInformation(struct _DUPLICATED_INFORMATION *)

public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryFileSizes(class BIG_INT *,class BIG_INT *,unsigned char *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *,unsigned long)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class NTFS_ATTRIBUTE *,class BIG_INT,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM *,class NTFS_ATTRIBUTE *,class BIG_INT,unsigned long,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(struct _FILE_RECORD_SEGMENT_HEADER *,class NTFS_ATTRIBUTE *,class BIG_INT,unsigned long,unsigned long,class BIG_INT,unsigned long,class NTFS_UPCASE_TABLE *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Prefetch(class BIG_INT,class BIG_INT)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::QueryAttributeList(class NTFS_ATTRIBUTE_LIST *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Read(class BIG_INT)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadAgain(class BIG_INT)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadAt(class BIG_INT)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::ReadNext(class BIG_INT)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::SafeQueryAttribute(unsigned long,class NTFS_ATTRIBUTE *,class NTFS_ATTRIBUTE *,class WSTRING *)

public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Write(void)

public: unsigned char __thiscall NTFS_INDEX_TREE::CopyIterator(class NTFS_INDEX_TREE *)

public: unsigned char __thiscall NTFS_INDEX_TREE::Initialize(class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *,unsigned long,class NTFS_FILE_RECORD_SEGMENT *,class WSTRING const *)

public: unsigned char __thiscall NTFS_INDEX_TREE::Initialize(unsigned long,class LOG_IO_DP_DRIVE *,unsigned long,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *,unsigned long,unsigned long,unsigned long,class WSTRING const *)

public: unsigned char __thiscall NTFS_INDEX_TREE::InsertEntry(unsigned long,void *,struct _MFT_SEGMENT_REFERENCE,unsigned char)

public: unsigned char __thiscall NTFS_INDEX_TREE::QueryEntry(unsigned long,void *,unsigned long,struct _INDEX_ENTRY * *,class NTFS_INDEX_BUFFER * *,unsigned char *)

public: unsigned char __thiscall NTFS_INDEX_TREE::QueryFileReference(unsigned long,void *,unsigned long,struct _MFT_SEGMENT_REFERENCE *,unsigned char *)

public: unsigned char __thiscall NTFS_INDEX_TREE::ResetIterator(unsigned char)

public: unsigned char __thiscall NTFS_INDEX_TREE::Save(class NTFS_FILE_RECORD_SEGMENT *)

public: unsigned char __thiscall NTFS_LOG_FILE::CreateDataAttribute(class BIG_INT,unsigned long,class NTFS_BITMAP *)

public: unsigned char __thiscall NTFS_LOG_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_MASTER_FILE_TABLE::AllocateFileRecordSegment(class BIG_INT *,unsigned char)

public: unsigned char __thiscall NTFS_MASTER_FILE_TABLE::Extend(unsigned long)

public: unsigned char __thiscall NTFS_MFT_FILE::Flush(void)

public: unsigned char __thiscall NTFS_MFT_FILE::Initialize(class LOG_IO_DP_DRIVE *,class BIG_INT,unsigned long,unsigned long,class BIG_INT,class NTFS_BITMAP *,class NTFS_UPCASE_TABLE *,class NTFS_ATTRIBUTE *)

public: unsigned char __thiscall NTFS_MFT_INFO::Initialize(class BIG_INT,class NTFS_UPCASE_TABLE *,unsigned char,unsigned char,unsigned __int64)

public: unsigned char __thiscall NTFS_MFT_INFO::Initialize(void)

public: unsigned char __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_SA::CreateElementaryStructures(class NTFS_BITMAP *,unsigned long,unsigned long,unsigned long,unsigned long,class NUMBER_SET const *,unsigned char,unsigned char,unsigned char,class MESSAGE *,struct BIOS_PARAMETER_BLOCK *,class WSTRING const *)

public: unsigned char __thiscall NTFS_SA::Initialize(class LOG_IO_DP_DRIVE *,class MESSAGE *,class BIG_INT,class BIG_INT)

public: unsigned char __thiscall NTFS_SA::QueryClusterFactor(void)const

public: unsigned char __thiscall NTFS_SA::QueryFrsFromPath(class WSTRING const *,class NTFS_MASTER_FILE_TABLE *,class NTFS_BITMAP *,class NTFS_FILE_RECORD_SEGMENT *,unsigned char *,unsigned char *)

public: unsigned char __thiscall NTFS_SA::Read(class MESSAGE *)

public: unsigned char __thiscall NTFS_SA::SetVolumeFlag(unsigned short,unsigned char *)

public: unsigned char __thiscall NTFS_SA::TakeCensus(class NTFS_MASTER_FILE_TABLE *,unsigned long,struct NTFS_CENSUS_INFO *)

public: unsigned char __thiscall NTFS_SA::WriteRemainingBootCode(void)

public: unsigned char __thiscall NTFS_UPCASE_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *)

public: unsigned char __thiscall NTFS_UPCASE_TABLE::Initialize(class NTFS_ATTRIBUTE *,unsigned __int64 *)

public: unsigned char __thiscall NTFS_VOLUME_FILE::Initialize(class LOG_IO_DP_DRIVE *,class NTFS_MASTER_FILE_TABLE *,class NTFS_FILE_RECORD_SEGMENT *,class NTFS_INDEX_TREE *,struct _VOLUME_INFORMATION *,class WSTRING *,enum FIX_LEVEL)

public: unsigned long __thiscall NTFS_EXTENT_LIST::QueryNumberOfExtents(void)const

public: unsigned short __thiscall NTFS_SA::QueryVolumeFlagsAndLabel(unsigned char *,unsigned char *,unsigned char *,class WSTRING *)

public: virtual __thiscall NTFS_ATTRIBUTE::~NTFS_ATTRIBUTE(void)

public: virtual __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::~NTFS_ATTRIBUTE_DEFINITION_TABLE(void)

public: virtual __thiscall NTFS_ATTRIBUTE_LIST::~NTFS_ATTRIBUTE_LIST(void)

public: virtual __thiscall NTFS_ATTRIBUTE_RECORD::~NTFS_ATTRIBUTE_RECORD(void)

public: virtual __thiscall NTFS_BAD_CLUSTER_FILE::~NTFS_BAD_CLUSTER_FILE(void)

public: virtual __thiscall NTFS_BITMAP::~NTFS_BITMAP(void)

public: virtual __thiscall NTFS_BITMAP_FILE::~NTFS_BITMAP_FILE(void)

public: virtual __thiscall NTFS_BOOT_FILE::~NTFS_BOOT_FILE(void)

public: virtual __thiscall NTFS_CLUSTER_RUN::~NTFS_CLUSTER_RUN(void)

public: virtual __thiscall NTFS_EXTENT_LIST::~NTFS_EXTENT_LIST(void)

public: virtual __thiscall NTFS_FILE_RECORD_SEGMENT::~NTFS_FILE_RECORD_SEGMENT(void)

public: virtual __thiscall NTFS_FRS_STRUCTURE::~NTFS_FRS_STRUCTURE(void)

public: virtual __thiscall NTFS_INDEX_TREE::~NTFS_INDEX_TREE(void)

public: virtual __thiscall NTFS_LOG_FILE::~NTFS_LOG_FILE(void)

public: virtual __thiscall NTFS_MFT_FILE::~NTFS_MFT_FILE(void)

public: virtual __thiscall NTFS_MFT_INFO::~NTFS_MFT_INFO(void)

public: virtual __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::~NTFS_REFLECTED_MASTER_FILE_TABLE(void)

public: virtual __thiscall NTFS_SA::~NTFS_SA(void)

public: virtual __thiscall NTFS_UPCASE_FILE::~NTFS_UPCASE_FILE(void)

public: virtual __thiscall NTFS_UPCASE_TABLE::~NTFS_UPCASE_TABLE(void)

public: virtual __thiscall NTFS_VOLUME_FILE::~NTFS_VOLUME_FILE(void)

public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::InsertIntoFile(class NTFS_FILE_RECORD_SEGMENT *,class NTFS_BITMAP *)

public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::MakeNonresident(class NTFS_BITMAP *)

public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::Resize(class BIG_INT,class NTFS_BITMAP *)

public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::SetSparse(class BIG_INT,class NTFS_BITMAP *,unsigned char)

public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::Write(void const *,class BIG_INT,unsigned long,unsigned long *,class NTFS_BITMAP *)

public: virtual unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Write(void)

public: virtual unsigned char __thiscall NTFS_FRS_STRUCTURE::Read(void)

public: virtual unsigned char __thiscall NTFS_MFT_FILE::Read(void)

public: virtual unsigned char __thiscall NTFS_SA::Read(void)

public: void * __thiscall NTFS_FRS_STRUCTURE::GetNextAttributeRecord(void const *,class MESSAGE *,unsigned char *)

public: void __thiscall NTFS_CLUSTER_RUN::Relocate(class BIG_INT)

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	_amsg_exit	_except_handler4_common	_initterm
  _purecall	_vsnprintf	_vsnwprintf_s	_wcsicmp
  free	malloc	memcmp	memcpy
  memmove	memset	qsort	wcscpy_s

• ntdll.dll:
  

  DbgPrint	NtClose	NtDeviceIoControlFile
  NtFlushBuffersFile	NtFsControlFile	NtOpenFile
  NtQueryDirectoryFile	NtQueryInformationFile	NtQueryPerformanceCounter
  NtQuerySystemTime	NtWriteFile	RtlAllocateHeap
  RtlComputeCrc32	RtlCrc64	RtlCreateSystemVolumeInformationFolder
  RtlDecompressBuffer	RtlDeleteRegistryValue	RtlFreeHeap
  RtlGetVersion	RtlInitializeBitMap	RtlLengthSecurityDescriptor
  RtlQueryRegistryValuesEx	RtlRaiseStatus	RtlSetBits
  RtlUpcaseUnicodeString	WinSqmEndSession	WinSqmStartSession

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetErrorMode	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!FreeLibrary

  KernelBase!GetModuleFileNameW

  KernelBase!LoadLibraryExW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-core-localization-l1-2-0.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-core-com-l1-1-0.dll:
  

  combase!CoTaskMemFree

  combase!StringFromIID

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetSystemTimeAsFileTime

  KernelBase!GetTickCount

  KernelBase!GetWindowsDirectoryW

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange

  KernelBase!InterlockedExchange

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!FindClose

  KernelBase!FindFirstFileExW

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!WideCharToMultiByte

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!Sleep

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  kernel32!GetCurrentProcess

  kernel32!GetCurrentProcessId

  kernel32!GetCurrentThreadId

  kernel32!TerminateProcess

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-eventlog-legacy-l1-1-0.dll:
  

  advapi32!DeregisterEventSource

  advapi32!RegisterEventSourceW

  advapi32!ReportEventW

• ulib.dll:
  

  private: unsigned long __thiscall BITVECTOR::ComputeCountSet(void)const

  protected: __thiscall OBJECT::OBJECT(void)

  public: __thiscall ADMINFILEPRIVS::ADMINFILEPRIVS(void)

  public: __thiscall ADMINFILEPRIVS::~ADMINFILEPRIVS(void)

  public: __thiscall ARRAY::ARRAY(void)

  public: __thiscall BITVECTOR::BITVECTOR(void)

  public: __thiscall CHKDSK_MESSAGE::CHKDSK_MESSAGE(void)

  public: __thiscall CLASS_DESCRIPTOR::CLASS_DESCRIPTOR(void)

  public: __thiscall DSTRING::DSTRING(void)

  public: __thiscall FSTRING::FSTRING(void)

  public: __thiscall HMEM::HMEM(void)

  public: __thiscall LIST::LIST(void)

  public: __thiscall MEM_ALLOCATOR::MEM_ALLOCATOR(void)

  public: __thiscall MESSAGE::MESSAGE(void)

  public: __thiscall PATH::PATH(void)

  public: char * __thiscall WSTRING::QuerySTR(unsigned long,unsigned long,char *,unsigned long,unsigned char)const

  public: class ARRAY * __thiscall PATH::QueryComponentArray(class ARRAY *)const

  public: class WSTRING * __thiscall ARGUMENT::GetLexeme(void)

  public: class WSTRING * __thiscall FSTRING::Initialize(unsigned short *,unsigned long)

  public: class WSTRING * __thiscall WSTRING::QueryString(unsigned long,unsigned long)const

  public: long __thiscall ADMINFILEPRIVS::EnablePrivileges(void)

  public: long __thiscall WSTRING::Stricmp(class WSTRING const *)const

  public: long __thiscall WSTRING::Stricmp(class WSTRING const *,unsigned long,unsigned long,unsigned long,unsigned long)const

  public: static unsigned __int64 __stdcall MESSAGE::MakeFileToken(char const *)

  public: static unsigned char __cdecl SQMEXPORT::SqmExport(void *,unsigned long,unsigned char,char *,...)

  public: unsigned char __cdecl MESSAGE::Display(char const *,...)

  public: unsigned char __cdecl MESSAGE::DisplayMsg(unsigned long,char const *,...)

  public: unsigned char __cdecl MESSAGE::DisplayMsg(unsigned long,enum MESSAGE_TYPE,unsigned long,char const *,...)

  public: unsigned char __cdecl MESSAGE::Log(char const *,...)

  public: unsigned char __cdecl MESSAGE::LogMsg(unsigned long,char const *,...)

  public: unsigned char __thiscall ARRAY::Initialize(unsigned long,unsigned long)

  public: unsigned char __thiscall BITVECTOR::Initialize(unsigned long,enum BIT,unsigned long *)

  public: unsigned char __thiscall BSTRING::Initialize(void)

  public: unsigned char __thiscall CLASS_DESCRIPTOR::Initialize(void)

  public: unsigned char __thiscall HMEM::Initialize(void)

  public: unsigned char __thiscall HMEM::Resize(unsigned long,unsigned long)

  public: unsigned char __thiscall LIST::Initialize(void)

  public: unsigned char __thiscall LIST::Insert(class OBJECT *,class ITERATOR *)

  public: unsigned char __thiscall MEM_ALLOCATOR::Initialize(unsigned __int64,unsigned long)

  public: unsigned char __thiscall MESSAGE::DisplayMsg(unsigned long)

  public: unsigned char __thiscall MESSAGE::DisplayMsg(unsigned long,enum MESSAGE_TYPE,unsigned long)

  public: unsigned char __thiscall MESSAGE::DumpDataToLog(void *,unsigned long)

  public: unsigned char __thiscall MESSAGE::LogMsg(unsigned long)

  public: unsigned char __thiscall MESSAGE::QueryPackedLog(class HMEM *,unsigned long *)

  public: unsigned char __thiscall MESSAGE::SetLogOnly(unsigned char)

  public: unsigned char __thiscall PATH::Initialize(class WSTRING const *,unsigned char)

  public: unsigned char __thiscall WSTRING::Initialize(char const *,unsigned long)

  public: unsigned char __thiscall WSTRING::Initialize(class WSTRING const *,unsigned long,unsigned long)

  public: unsigned char __thiscall WSTRING::Initialize(unsigned short const *,unsigned long)

  public: unsigned char __thiscall WSTRING::Split(class ARRAY *,class WSTRING const *,unsigned char)const

  public: unsigned char __thiscall WSTRING::Strcat(class WSTRING const *)

  public: unsigned char __thiscall WSTRING::Strcat(unsigned short const *)

  public: unsigned long __thiscall OBJECT::QueryClassId(void)const

  public: unsigned long __thiscall WSTRING::Strrchr(unsigned short,unsigned long)const

  public: unsigned short * __thiscall WSTRING::QueryWSTR(unsigned long,unsigned long,unsigned short *,unsigned long,unsigned char)const

  public: virtual __thiscall ARRAY::~ARRAY(void)

  public: virtual __thiscall BITVECTOR::~BITVECTOR(void)

  public: virtual __thiscall BSTRING::~BSTRING(void)

  public: virtual __thiscall BSTRING::~BSTRING(void)

  public: virtual __thiscall DSTRING::~DSTRING(void)

  public: virtual __thiscall HMEM::~HMEM(void)

  public: virtual __thiscall LIST::~LIST(void)

  public: virtual __thiscall MEM_ALLOCATOR::~MEM_ALLOCATOR(void)

  public: virtual __thiscall MESSAGE::~MESSAGE(void)

  public: virtual __thiscall PATH::~PATH(void)

  public: virtual class ITERATOR * __thiscall ARRAY::QueryIterator(void)const

  public: virtual class ITERATOR * __thiscall LIST::QueryIterator(void)const

  public: virtual class OBJECT * __thiscall ARRAY::GetAt(unsigned long)const

  public: virtual class OBJECT * __thiscall ARRAY::RemoveAt(unsigned long)

  public: virtual long __thiscall OBJECT::Compare(class OBJECT const *)const

  public: virtual unsigned char __cdecl DSTRING::SPrintf(unsigned short const *,...)

  public: virtual unsigned char __cdecl DSTRING::SPrintfAppend(unsigned short const *,...)

  public: virtual unsigned char __thiscall ARRAY::DeleteAllMembers(void)

  public: virtual unsigned char __thiscall ARRAY::Put(class OBJECT *)

  public: virtual unsigned char __thiscall ARRAY::Sort(unsigned char)

  public: virtual unsigned char __thiscall DSTRING::NewBuf(unsigned long)

  public: virtual unsigned char __thiscall DSTRING::Resize(unsigned long)

  public: virtual unsigned char __thiscall LIST::Put(class OBJECT *)

  public: virtual unsigned char __thiscall SEQUENTIAL_CONTAINER::DeleteAllMembers(void)

  public: virtual unsigned long __thiscall LIST::QueryMemberCount(void)const

  public: virtual void * __thiscall HMEM::Acquire(unsigned long,unsigned long)

  public: void * __thiscall MEM_ALLOCATOR::Allocate(unsigned long)

  public: void __thiscall BITVECTOR::Initialize(unsigned long *,unsigned long)

  public: void __thiscall BITVECTOR::ResetBit(unsigned long,unsigned long)

  public: void __thiscall BITVECTOR::SetBit(unsigned long,unsigned long)

  public: void __thiscall MESSAGE::Lock(void)

  public: void __thiscall MESSAGE::Unlock(void)

  public: void __thiscall WSTRING::DeleteChAt(unsigned long,unsigned long)

• ifsutil.dll:
  

  protected: __thiscall SUPERAREA::SUPERAREA(void)

  protected: __thiscall VOL_LIODPDRV::VOL_LIODPDRV(void)

  protected: enum FORMAT_ERROR_CODE __thiscall VOL_LIODPDRV::Initialize(class WSTRING const *,class SUPERAREA *,class MESSAGE *,unsigned char,unsigned char,enum _MEDIA_TYPE,unsigned short,unsigned char,unsigned int,unsigned char)

  protected: unsigned char __thiscall SUPERAREA::Initialize(class MEM *,class LOG_IO_DP_DRIVE *,unsigned long,class MESSAGE *)

  public: __thiscall BLOCK_CACHE::BLOCK_CACHE(void)

  public: __thiscall DIGRAPH::DIGRAPH(void)

  public: __thiscall DIGRAPH_EDGE::DIGRAPH_EDGE(void)

  public: __thiscall DP_DRIVE::DP_DRIVE(void)

  public: __thiscall INTSTACK::INTSTACK(void)

  public: __thiscall LOG_IO_DP_DRIVE::LOG_IO_DP_DRIVE(void)

  public: __thiscall NUMBER_SET::NUMBER_SET(void)

  public: __thiscall SECRUN::SECRUN(void)

  public: __thiscall SPARSE_SET::SPARSE_SET(void)

  public: __thiscall WRITEVIEW_CACHE::WRITEVIEW_CACHE(void)

  public: class BIG_INT __thiscall INTSTACK::Look(unsigned long)const

  public: class BIG_INT __thiscall NUMBER_SET::QueryNumber(class BIG_INT)const

  public: enum FORMAT_ERROR_CODE __thiscall VOL_LIODPDRV::Format(class WSTRING const *,class MESSAGE *,unsigned long,unsigned long,unsigned long)

  public: static class CANNED_SECURITY * __stdcall IFS_SYSTEM::GetCannedSecurity(void)

  public: static unsigned char __stdcall IFS_SYSTEM::CheckValidSecurityDescriptor(unsigned long,struct _SECURITY_DESCRIPTOR *)

  public: static unsigned char __stdcall IFS_SYSTEM::DismountVolume(class WSTRING const *)

  public: static unsigned char __stdcall IFS_SYSTEM::DosDriveNameToNtDriveName(class WSTRING const *,class WSTRING *)

  public: static unsigned char __stdcall IFS_SYSTEM::FormatScaleTotalFreeClusters(unsigned __int64,unsigned __int64,unsigned long *,unsigned long *,unsigned __int64 *,unsigned __int64 *)

  public: static unsigned char __stdcall IFS_SYSTEM::IsThisNtfs(class BIG_INT,unsigned long,void *)

  public: static unsigned char __stdcall IFS_SYSTEM::QuerySystemMemory(unsigned long *,unsigned __int64 *,unsigned __int64 *,unsigned __int64 *)

  public: static unsigned long __stdcall IFS_SYSTEM::QueryPageSize(void)

  public: static unsigned long __stdcall SUPERAREA::ComputeVolId(unsigned long)

  public: static void __stdcall DRIVE_CACHE::GetPhaseSubPhase(unsigned short * *,unsigned short * *)

  public: static void __stdcall DRIVE_CACHE::SetPhaseSubPhase(unsigned short *,unsigned short *)

  public: static void __stdcall IFS_SYSTEM::GetSystemTime(struct _TIME_FIELDS *)

  public: static void __stdcall IFS_SYSTEM::QueryNtfsTime(union _LARGE_INTEGER *)

  public: unsigned char __thiscall BLOCK_CACHE::Initialize(class IO_DP_DRIVE *)

  public: unsigned char __thiscall DIGRAPH::AddEdge(unsigned long,unsigned long)

  public: unsigned char __thiscall DIGRAPH::EliminateCycles(class CONTAINER *,unsigned char *)

  public: unsigned char __thiscall DIGRAPH::Initialize(unsigned long)

  public: unsigned char __thiscall DIGRAPH::QueryChildren(unsigned long,class NUMBER_SET *)const

  public: unsigned char __thiscall DIGRAPH::QueryParents(unsigned long,class NUMBER_SET *)const

  public: unsigned char __thiscall DIGRAPH::QueryParentsWithChildren(class NUMBER_SET *,unsigned long)const

  public: unsigned char __thiscall DIGRAPH::RemoveEdge(unsigned long,unsigned long)

  public: unsigned char __thiscall DP_DRIVE::Initialize(class WSTRING const *,class MESSAGE *,unsigned char,unsigned char,unsigned short)

  public: unsigned char __thiscall DP_DRIVE::QueryID(struct _GUID *,class WSTRING const *)

  public: unsigned char __thiscall DP_DRIVE::QueryMediaByte(void)const

  public: unsigned char __thiscall INTSTACK::Initialize(void)

  public: unsigned char __thiscall INTSTACK::Push(class BIG_INT)

  public: unsigned char __thiscall INTSTACK::ReverseCopy(class INTSTACK *)

  public: unsigned char __thiscall IO_DP_DRIVE::DismountAndLock(void)

  public: unsigned char __thiscall IO_DP_DRIVE::Lock(void)

  public: unsigned char __thiscall IO_DP_DRIVE::Prefetch(class BIG_INT,unsigned long)

  public: unsigned char __thiscall IO_DP_DRIVE::QueryMemoryLimit(unsigned __int64 *,unsigned char *)

  public: unsigned char __thiscall IO_DP_DRIVE::Read(class BIG_INT,unsigned long,void *)

  public: unsigned char __thiscall IO_DP_DRIVE::SqmExport(class WSTRING const *,unsigned char (__cdecl*)(void *,unsigned long,unsigned char,char *,...),void *)

  public: unsigned char __thiscall IO_DP_DRIVE::Verify(class BIG_INT,class BIG_INT)

  public: unsigned char __thiscall IO_DP_DRIVE::Verify(class BIG_INT,class BIG_INT,class NUMBER_SET *)

  public: unsigned char __thiscall LOG_IO_DP_DRIVE::Initialize(class WSTRING const *,class MESSAGE *,unsigned char,unsigned short)

  public: unsigned char __thiscall LOG_IO_DP_DRIVE::Read(class BIG_INT,unsigned long,void *)

  public: unsigned char __thiscall LOG_IO_DP_DRIVE::SetSystemId(unsigned char)

  public: unsigned char __thiscall LOG_IO_DP_DRIVE::Write(class BIG_INT,unsigned long,void *)

  public: unsigned char __thiscall NUMBER_SET::Add(class BIG_INT)

  public: unsigned char __thiscall NUMBER_SET::Add(class BIG_INT,class BIG_INT)

  public: unsigned char __thiscall NUMBER_SET::Add(class NUMBER_SET const *)

  public: unsigned char __thiscall NUMBER_SET::CheckAndAdd(class BIG_INT,unsigned char *)

  public: unsigned char __thiscall NUMBER_SET::DoesIntersectSet(class BIG_INT,class BIG_INT)const

  public: unsigned char __thiscall NUMBER_SET::Initialize(void)

  public: unsigned char __thiscall NUMBER_SET::Remove(class BIG_INT)

  public: unsigned char __thiscall NUMBER_SET::Remove(class BIG_INT,class BIG_INT)

  public: unsigned char __thiscall NUMBER_SET::Remove(class NUMBER_SET const *)

  public: unsigned char __thiscall NUMBER_SET::RemoveAll(void)

  public: unsigned char __thiscall NUMBER_SET::Subtract(class NUMBER_SET *,class NUMBER_SET *)

  public: unsigned char __thiscall SECRUN::Initialize(class MEM *,class IO_DP_DRIVE *,class BIG_INT,unsigned long)

  public: unsigned char __thiscall SPARSE_SET::Add(class BIG_INT)

  public: unsigned char __thiscall SPARSE_SET::Add(class SPARSE_SET const *)

  public: unsigned char __thiscall SPARSE_SET::CheckAndRemove(class BIG_INT,unsigned char *)

  public: unsigned char __thiscall SPARSE_SET::Initialize(void)

  public: unsigned char __thiscall VOL_LIODPDRV::ChkDsk(enum FIX_LEVEL,class MESSAGE *,unsigned long,unsigned long,unsigned short,unsigned long *,class WSTRING const *)

  public: unsigned char __thiscall VOL_LIODPDRV::ForceAutochk(unsigned char,unsigned long,unsigned long,unsigned short,class WSTRING const *)

  public: unsigned char __thiscall VOL_LIODPDRV::Recover(class WSTRING const *,class MESSAGE *)

  public: unsigned char __thiscall VOL_LIODPDRV::SetFileSystemName(unsigned short const *)

  public: unsigned char __thiscall WRITEVIEW_CACHE::Initialize(class IO_DP_DRIVE *,class DRIVE_CACHE *,class WSTRING const *,unsigned short,unsigned char)

  public: virtual __thiscall DIGRAPH::~DIGRAPH(void)

  public: virtual __thiscall DP_DRIVE::~DP_DRIVE(void)

  public: virtual __thiscall INTSTACK::~INTSTACK(void)

  public: virtual __thiscall LOG_IO_DP_DRIVE::~LOG_IO_DP_DRIVE(void)

  public: virtual __thiscall NUMBER_SET::~NUMBER_SET(void)

  public: virtual __thiscall SECRUN::~SECRUN(void)

  public: virtual __thiscall SPARSE_SET::~SPARSE_SET(void)

  public: virtual __thiscall SUPERAREA::~SUPERAREA(void)

  public: virtual __thiscall VOL_LIODPDRV::~VOL_LIODPDRV(void)

  public: virtual class BIG_INT __thiscall DP_DRIVE::QuerySectors(void)const

  public: virtual enum FORMAT_ERROR_CODE __thiscall VOL_LIODPDRV::WriteEntireDrive(class MESSAGE *,void *,unsigned long,unsigned int,unsigned int)

  public: virtual unsigned char __thiscall SECRUN::Read(void)

  public: virtual unsigned char __thiscall SECRUN::VerifyRead(void)

  public: virtual unsigned char __thiscall SECRUN::Write(void)

  public: virtual unsigned long __thiscall DP_DRIVE::QueryDataRedundancyCount(void)

  public: virtual unsigned long __thiscall DP_DRIVE::QuerySectorSize(void)const

  public: virtual unsigned long __thiscall DP_DRIVE::QueryWriteBlockSize(void)const

  public: void * __thiscall CANNED_SECURITY::GetCannedSecurityDescriptor(enum _CANNED_SECURITY_TYPE,unsigned long *)

  public: void * __thiscall IO_DP_DRIVE::QueryVerifyHandle(void)

  public: void * __thiscall IO_DP_DRIVE::SetVerifyHandle(void *)

  public: void __thiscall BIG_INT::QueryCompressedInteger(unsigned char *,unsigned char *)const

  public: void __thiscall BIG_INT::Set(unsigned char,unsigned char const *)

  public: void __thiscall INTSTACK::Pop(unsigned long)

  public: void __thiscall IO_DP_DRIVE::AdjustCacheSize(unsigned __int64 *,unsigned __int64 *)

  public: void __thiscall IO_DP_DRIVE::QueryCacheSize(unsigned __int64 *,unsigned __int64 *)

  public: void __thiscall IO_DP_DRIVE::QueryReadUsage(unsigned __int64 *,unsigned __int64 *)

  public: void __thiscall IO_DP_DRIVE::SetCache(class DRIVE_CACHE *)

  public: void __thiscall NUMBER_SET::QueryDisjointRange(unsigned long,class BIG_INT *,class BIG_INT *)const