uReFSv1.dll

Description: NTFS Utility DLL

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: e7b0c13516dfaf398f7175a682bfe858

File Size: 555.0 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 2

Exported Functions

??0REFS_SA@@QEAA@XZ (Ordinal: 1, Address: 0xd050)
??0REFS_UPCASE_TABLE@@QEAA@XZ (Ordinal: 2, Address: 0xda10)
??1REFS_SA@@UEAA@XZ (Ordinal: 3, Address: 0xd160)
??1REFS_UPCASE_TABLE@@UEAA@XZ (Ordinal: 4, Address: 0xda60)
Chkdsk (Ordinal: 5, Address: 0x1060)
ChkdskEx (Ordinal: 6, Address: 0x1060)
Extend (Ordinal: 7, Address: 0x1060)
Format (Ordinal: 8, Address: 0xab20)
FormatEx (Ordinal: 9, Address: 0xada0)
GetFilesystemInformation (Ordinal: 10, Address: 0xab10)
?Initialize@REFS_SA@@QEAAEPEAVLOG_IO_DP_DRIVE@@PEAVMESSAGE@@@Z (Ordinal: 11, Address: 0xd1c0)
Recover (Ordinal: 12, Address: 0x1060)
SetOriginalVolumeName (Ordinal: 13, Address: 0x1070)

Imported DLLs & Functions

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180067d10)
SetLastError (Address: 0x180067d00)
SetUnhandledExceptionFilter (Address: 0x180067cf8)
UnhandledExceptionFilter (Address: 0x180067d08)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180067d20)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180067d38)
HeapAlloc (Address: 0x180067d30)
HeapFree (Address: 0x180067d40)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180067d50)
LocalFree (Address: 0x180067d58)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180067d68)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x180067d80)
GetModuleFileNameW (Address: 0x180067d78)
GetModuleHandleExW (Address: 0x180067d88)
GetProcAddress (Address: 0x180067d90)
LoadLibraryExW (Address: 0x180067d98)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180067da8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180067dc0)
VirtualFree (Address: 0x180067db8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180067df8)
GetCurrentProcess (Address: 0x180067dd8)
GetCurrentProcessId (Address: 0x180067de8)
GetCurrentThreadId (Address: 0x180067de0)
TerminateProcess (Address: 0x180067e08)
TlsAlloc (Address: 0x180067df0)
TlsFree (Address: 0x180067e10)
TlsGetValue (Address: 0x180067e00)
TlsSetValue (Address: 0x180067dd0)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180067e20)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180067e30)

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte (Address: 0x180067e40)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180067e50)
CreateMutexW (Address: 0x180067e68)
ReleaseMutex (Address: 0x180067e58)
ResetEvent (Address: 0x180067e70)
SetEvent (Address: 0x180067e78)
WaitForSingleObject (Address: 0x180067e60)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180067e88)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180067e98)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180067eb0)
GetTickCount (Address: 0x180067ea8)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x180067ec0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x180067ed0)

IfsUtil.dll

??0DP_DRIVE@@QEAA@XZ (Address: 0x180067cd8)
??0SECRUN@@QEAA@XZ (Address: 0x180067c88)
??0SUPERAREA@@IEAA@XZ (Address: 0x180067c58)
??0VOL_LIODPDRV@@IEAA@XZ (Address: 0x180067c18)
??1DP_DRIVE@@UEAA@XZ (Address: 0x180067cd0)
??1SECRUN@@UEAA@XZ (Address: 0x180067c80)
??1SUPERAREA@@UEAA@XZ (Address: 0x180067c50)
??1VOL_LIODPDRV@@UEAA@XZ (Address: 0x180067c10)
?CloseDriveHandle@DP_DRIVE@@QEAAXXZ (Address: 0x180067bd8)
?ComputeVolId@SUPERAREA@@SAKK@Z (Address: 0x180067c60)
?DismountVolume@IFS_SYSTEM@@SAEPEBVWSTRING@@@Z (Address: 0x180067c98)
?Format@VOL_LIODPDRV@@QEAA?AW4FORMAT_ERROR_CODE@@PEBVWSTRING@@PEAVMESSAGE@@KKK@Z (Address: 0x180067ca8)
?FormatScaleTotalFreeClusters@IFS_SYSTEM@@SAE_K0PEAK1PEA_K2@Z (Address: 0x180067c70)
?Initialize@DP_DRIVE@@QEAAEPEBVWSTRING@@PEAVMESSAGE@@EE@Z (Address: 0x180067cc8)
?Initialize@SUPERAREA@@IEAAEPEAVMEM@@PEAVLOG_IO_DP_DRIVE@@KPEAVMESSAGE@@@Z (Address: 0x180067c48)
?Initialize@VOL_LIODPDRV@@IEAA?AW4FORMAT_ERROR_CODE@@PEBVWSTRING@@PEAVSUPERAREA@@PEAVMESSAGE@@EEW4_MEDIA_TYPE@@GEIE@Z (Address: 0x180067c08)
?IsThisReFS@IFS_SYSTEM@@SAEVBIG_INT@@KPEAX@Z (Address: 0x180067c38)
?QueryDataRedundancyCount@DP_DRIVE@@UEAAJPEAK0@Z (Address: 0x180067ca0)
?QueryNtfsTime@IFS_SYSTEM@@SAXPEAT_LARGE_INTEGER@@@Z (Address: 0x180067c68)
?QueryPartitionInfo@DP_DRIVE@@UEAAEPEAU_PARTITION_INFORMATION_EX@@@Z (Address: 0x180067be8)
?QueryReadCacheSize@DP_DRIVE@@UEAAJPEA_K@Z (Address: 0x180067bf8)
?QuerySectors@DP_DRIVE@@UEBA?AVBIG_INT@@XZ (Address: 0x180067cb8)
?QuerySectorSize@DP_DRIVE@@UEBAKXZ (Address: 0x180067cc0)
?QueryTierCount@DP_DRIVE@@UEAAJPEAK@Z (Address: 0x180067bf0)
?QueryWriteBlockSize@DP_DRIVE@@UEBAKXZ (Address: 0x180067c00)
?Read@IO_DP_DRIVE@@QEAAEVBIG_INT@@KPEAX@Z (Address: 0x180067c28)
?Read@SECRUN@@UEAAEXZ (Address: 0x180067c40)
?SetFileSystemName@VOL_LIODPDRV@@QEAAEPEBG@Z (Address: 0x180067cb0)
?SetSystemId@LOG_IO_DP_DRIVE@@QEAAEE@Z (Address: 0x180067c78)
?VerifyRead@SECRUN@@UEAAEPEAE@Z (Address: 0x180067c20)
?Write@IO_DP_DRIVE@@QEAAEVBIG_INT@@KPEAX@Z (Address: 0x180067c90)
?Write@SECRUN@@UEAAEXZ (Address: 0x180067c30)
?WriteEntireDrive@VOL_LIODPDRV@@UEAA?AW4FORMAT_ERROR_CODE@@PEAVMESSAGE@@PEAXKII@Z (Address: 0x180067be0)

msvcrt.dll

__C_specific_handler (Address: 0x180067f18)
__CxxFrameHandler3 (Address: 0x180067f50)
_amsg_exit (Address: 0x180067f28)
_initterm (Address: 0x180067f20)
_purecall (Address: 0x180067f58)
_vsnprintf (Address: 0x180067ee0)
_XcptFilter (Address: 0x180067f30)
??1type_info@@UEAA@XZ (Address: 0x180067ee8)
?terminate@@YAXXZ (Address: 0x180067ef0)
free (Address: 0x180067f40)
malloc (Address: 0x180067f48)
memcmp (Address: 0x180067ef8)
memcpy (Address: 0x180067f00)
memmove (Address: 0x180067f08)
memset (Address: 0x180067f10)
printf (Address: 0x180067f60)
qsort (Address: 0x180067f68)
realloc (Address: 0x180067f38)
wcscmp (Address: 0x180067f70)

ntdll.dll

DbgPrintEx (Address: 0x180068040)
NtQuerySystemTime (Address: 0x180067fe8)
RtlAcquireResourceExclusive (Address: 0x180067fc8)
RtlAcquireResourceShared (Address: 0x180067fd0)
RtlAllocateHeap (Address: 0x180067f80)
RtlAreBitsClear (Address: 0x180067fe0)
RtlAreBitsSet (Address: 0x180067fc0)
RtlCaptureContext (Address: 0x180068058)
RtlCaptureStackBackTrace (Address: 0x180067ff0)
RtlClearBit (Address: 0x180068018)
RtlClearBits (Address: 0x180067f90)
RtlCompareMemory (Address: 0x180067ff8)
RtlConvertExclusiveToShared (Address: 0x180068000)
RtlDeleteResource (Address: 0x180067fa0)
RtlFindLongestRunClear (Address: 0x180068020)
RtlFindNextForwardRunClear (Address: 0x180068008)
RtlFindSetBits (Address: 0x180067fa8)
RtlFreeHeap (Address: 0x180068050)
RtlGetLastNtStatus (Address: 0x180068038)
RtlInitializeBitMap (Address: 0x180067fb8)
RtlInitializeResource (Address: 0x180067f98)
RtlLookupFunctionEntry (Address: 0x180068060)
RtlNtStatusToDosError (Address: 0x180068030)
RtlNumberOfClearBits (Address: 0x180068028)
RtlReleaseResource (Address: 0x180067fd8)
RtlSetAllBits (Address: 0x180068010)
RtlSetBits (Address: 0x180067f88)
RtlTestBit (Address: 0x180067fb0)
RtlUpcaseUnicodeString (Address: 0x180068048)
RtlVirtualUnwind (Address: 0x180068068)

RPCRT4.dll

UuidCreate (Address: 0x180067ce8)

ulib.dll

??0CLASS_DESCRIPTOR@@QEAA@XZ (Address: 0x180068120)
??0DSTRING@@QEAA@XZ (Address: 0x1800680e0)
??0HMEM@@QEAA@XZ (Address: 0x180068088)
??0MESSAGE@@QEAA@XZ (Address: 0x1800680f8)
??0OBJECT@@IEAA@XZ (Address: 0x180068108)
??1DSTRING@@UEAA@XZ (Address: 0x1800680d0)
??1HMEM@@UEAA@XZ (Address: 0x180068080)
??1MESSAGE@@UEAA@XZ (Address: 0x180068100)
??1OBJECT@@UEAA@XZ (Address: 0x180068110)
?Compare@OBJECT@@UEBAJPEBV1@@Z (Address: 0x1800680b8)
?DebugDump@OBJECT@@UEBAXE@Z (Address: 0x1800680b0)
?Display@MESSAGE@@QEAAEPEBDZZ (Address: 0x180068078)
?DisplayMsg@MESSAGE@@QEAAEK@Z (Address: 0x1800680c0)
?DisplayMsg@MESSAGE@@QEAAEKPEBDZZ (Address: 0x1800680c8)
?Initialize@CLASS_DESCRIPTOR@@QEAAEPEBD@Z (Address: 0x180068118)
?Initialize@HMEM@@QEAAEXZ (Address: 0x1800680f0)
?Initialize@WSTRING@@QEAAEPEBV1@KK@Z (Address: 0x1800680d8)
?NewBuf@DSTRING@@UEAAEK@Z (Address: 0x1800680a0)
?QueryWSTR@WSTRING@@QEBAPEAGKKPEAGKE@Z (Address: 0x1800680e8)
?Resize@DSTRING@@UEAAEK@Z (Address: 0x1800680a8)
?SPrintf@DSTRING@@UEAAEPEBGZZ (Address: 0x180068098)
?SPrintfAppend@DSTRING@@UEAAEPEBGZZ (Address: 0x180068090)