fltLib.dll

Description: Filter Library

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8efadea41916b544e3d93362c28437ab

File Size: 33.4 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 11

Exported Functions

  • FilterAttach (Ordinal: 1, Address: 0x1a00)
  • FilterAttachAtAltitude (Ordinal: 2, Address: 0x1a40)
  • FilterClose (Ordinal: 3, Address: 0x1570)
  • FilterConnectCommunicationPort (Ordinal: 4, Address: 0x21d0)
  • FilterCreate (Ordinal: 5, Address: 0x13a0)
  • FilterDetach (Ordinal: 6, Address: 0x1a70)
  • FilterFindClose (Ordinal: 7, Address: 0x1570)
  • FilterFindFirst (Ordinal: 8, Address: 0x1cd0)
  • FilterFindNext (Ordinal: 9, Address: 0x1e30)
  • FilterGetDosName (Ordinal: 10, Address: 0x24e0)
  • FilterGetInformation (Ordinal: 11, Address: 0x2180)
  • FilterGetMessage (Ordinal: 12, Address: 0x2460)
  • FilterInstanceClose (Ordinal: 13, Address: 0x1570)
  • FilterInstanceCreate (Ordinal: 14, Address: 0x15b0)
  • FilterInstanceFindClose (Ordinal: 15, Address: 0x1570)
  • FilterInstanceFindFirst (Ordinal: 16, Address: 0x1fe0)
  • FilterInstanceFindNext (Ordinal: 17, Address: 0x1e30)
  • FilterInstanceGetInformation (Ordinal: 18, Address: 0x2180)
  • FilterLoad (Ordinal: 19, Address: 0x1060)
  • FilterReplyMessage (Ordinal: 20, Address: 0x24a0)
  • FilterSendMessage (Ordinal: 21, Address: 0x2420)
  • FilterUnload (Ordinal: 22, Address: 0x1200)
  • FilterVolumeClose (Ordinal: 23, Address: 0x1570)
  • FilterVolumeFindClose (Ordinal: 24, Address: 0x1570)
  • FilterVolumeFindFirst (Ordinal: 25, Address: 0x1e80)
  • FilterVolumeFindNext (Ordinal: 26, Address: 0x1e30)
  • FilterVolumeInstanceFindClose (Ordinal: 27, Address: 0x1570)
  • FilterVolumeInstanceFindFirst (Ordinal: 28, Address: 0x20b0)
  • FilterVolumeInstanceFindNext (Ordinal: 29, Address: 0x1e30)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • IsDebuggerPresent (Address: 0x180005128)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180005148)
  • SetUnhandledExceptionFilter (Address: 0x180005140)
  • UnhandledExceptionFilter (Address: 0x180005138)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180005158)
api-ms-win-core-file-l1-2-0.dll
  • GetVolumeNameForVolumeMountPointW (Address: 0x180005168)
  • GetVolumePathNamesForVolumeNameW (Address: 0x180005170)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180005180)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180005190)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800051a0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800051c8)
  • GetCurrentProcessId (Address: 0x1800051b0)
  • GetCurrentThreadId (Address: 0x1800051b8)
  • TerminateProcess (Address: 0x1800051c0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800051d8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800051e8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800051f8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180005250)
  • _o___std_type_info_destroy_list (Address: 0x180005208)
  • _o__cexit (Address: 0x180005210)
  • _o__configure_narrow_argv (Address: 0x180005218)
  • _o__execute_onexit_table (Address: 0x180005220)
  • _o__initialize_narrow_environment (Address: 0x180005228)
  • _o__initialize_onexit_table (Address: 0x180005230)
  • _o__seh_filter_dll (Address: 0x180005238)
  • _o_wcscat_s (Address: 0x180005240)
  • _o_wcscpy_s (Address: 0x180005248)
  • memcpy (Address: 0x180005258)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180005268)
  • _initterm_e (Address: 0x180005270)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180005280)
ntdll.dll
  • DbgPrint (Address: 0x1800052a0)
  • NtCreateFile (Address: 0x1800052c0)
  • NtDeviceIoControlFile (Address: 0x1800052d0)
  • NtFsControlFile (Address: 0x1800052e8)
  • NtWaitForSingleObject (Address: 0x1800052d8)
  • RtlAllocateHeap (Address: 0x1800052b0)
  • RtlCaptureContext (Address: 0x180005298)
  • RtlFreeHeap (Address: 0x180005290)
  • RtlInitUnicodeString (Address: 0x1800052a8)
  • RtlLookupFunctionEntry (Address: 0x1800052c8)
  • RtlNtStatusToDosError (Address: 0x1800052b8)
  • RtlVirtualUnwind (Address: 0x1800052e0)