bindfltapi.dll

Description: BindFlt user mode API

Version: 10.0.19041.5678

Architecture: 64-bit

Operating System: Windows NT

SHA256: 67befbba75c7af4d82db9ff280245fbe

File Size: 102.5 KB

Uploaded At: Dec. 1, 2025, 7:23 a.m.

Views: 11

Exported Functions

BfAttachFilter (Ordinal: 1, Address: 0xec10)
BfConfigureFilter (Ordinal: 2, Address: 0x2360)
BfGenerateBatchedConfig (Ordinal: 3, Address: 0x1450)
BfGenerateMappingConfiguration (Ordinal: 4, Address: 0x1f50)
BfGetMappings (Ordinal: 5, Address: 0x1a60)
BfRemoveMapping (Ordinal: 6, Address: 0xf4f0)
BfRemoveMappingEx (Ordinal: 7, Address: 0x1440)
BfSetupFilter (Ordinal: 8, Address: 0xf160)
BfSetupFilterBatched (Ordinal: 9, Address: 0x1770)
BfSetupFilterEx (Ordinal: 10, Address: 0x1430)
BfTrackWritesFromSilo (Ordinal: 11, Address: 0x1dc0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x180012bd0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180012be8)
SetUnhandledExceptionFilter (Address: 0x180012be0)
UnhandledExceptionFilter (Address: 0x180012bf0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180012c00)
GetFileAttributesW (Address: 0x180012c10)
GetFinalPathNameByHandleW (Address: 0x180012c08)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x180012c20)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180012c30)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180012c40)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180012c50)

api-ms-win-core-localization-l1-2-0.dll

LCMapStringEx (Address: 0x180012c60)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180012c90)
GetCurrentProcessId (Address: 0x180012c98)
GetCurrentThread (Address: 0x180012c70)
GetCurrentThreadId (Address: 0x180012c78)
OpenThreadToken (Address: 0x180012c80)
TerminateProcess (Address: 0x180012c88)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180012ca8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180012cb8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180012cd8)
RtlLookupFunctionEntry (Address: 0x180012cc8)
RtlVirtualUnwind (Address: 0x180012cd0)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x180012d00)
GetStringTypeW (Address: 0x180012cf8)
MultiByteToWideChar (Address: 0x180012ce8)
WideCharToMultiByte (Address: 0x180012cf0)

api-ms-win-core-synch-l1-1-0.dll

DeleteCriticalSection (Address: 0x180012d18)
InitializeCriticalSectionEx (Address: 0x180012d10)
LeaveCriticalSection (Address: 0x180012d20)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180012d38)
Sleep (Address: 0x180012d30)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180012d48)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180012d60)
EncodePointer (Address: 0x180012d58)

api-ms-win-crt-locale-l1-1-0.dll

_lock_locales (Address: 0x180012d70)
_unlock_locales (Address: 0x180012d78)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180012eb0)
__CxxFrameHandler3 (Address: 0x180012f28)
__uncaught_exception (Address: 0x180012ea8)
_CxxThrowException (Address: 0x180012ec0)
_o____lc_codepage_func (Address: 0x180012f18)
_o____lc_collate_cp_func (Address: 0x180012f10)
_o____lc_locale_name_func (Address: 0x180012f08)
_o____mb_cur_max_func (Address: 0x180012f00)
_o___acrt_iob_func (Address: 0x180012ef8)
_o___pctype_func (Address: 0x180012ef0)
_o___std_exception_copy (Address: 0x180012ee8)
_o___std_exception_destroy (Address: 0x180012ee0)
_o___std_type_info_destroy_list (Address: 0x180012ed8)
_o___stdio_common_vfprintf (Address: 0x180012ed0)
_o___stdio_common_vswprintf (Address: 0x180012ec8)
_o__callnewh (Address: 0x180012eb8)
_o__calloc_base (Address: 0x180012df8)
_o__cexit (Address: 0x180012f30)
_o__configure_narrow_argv (Address: 0x180012d88)
_o__crt_atexit (Address: 0x180012d90)
_o__errno (Address: 0x180012d98)
_o__execute_onexit_table (Address: 0x180012da0)
_o__free_base (Address: 0x180012da8)
_o__fseeki64 (Address: 0x180012db0)
_o__initialize_narrow_environment (Address: 0x180012db8)
_o__initialize_onexit_table (Address: 0x180012dc0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180012dc8)
_o__lock_file (Address: 0x180012dd0)
_o__malloc_base (Address: 0x180012dd8)
_o__purecall (Address: 0x180012de0)
_o__register_onexit_function (Address: 0x180012de8)
_o__seh_filter_dll (Address: 0x180012df0)
_o__unlock_file (Address: 0x180012e00)
_o__wcsdup (Address: 0x180012e08)
_o_abort (Address: 0x180012e10)
_o_calloc (Address: 0x180012e18)
_o_fclose (Address: 0x180012e20)
_o_fflush (Address: 0x180012e28)
_o_fgetc (Address: 0x180012e30)
_o_fgetpos (Address: 0x180012e38)
_o_fgetwc (Address: 0x180012e40)
_o_fputwc (Address: 0x180012e48)
_o_free (Address: 0x180012e50)
_o_fsetpos (Address: 0x180012e58)
_o_fwrite (Address: 0x180012e60)
_o_malloc (Address: 0x180012e68)
_o_realloc (Address: 0x180012e70)
_o_setlocale (Address: 0x180012e78)
_o_setvbuf (Address: 0x180012e80)
_o_terminate (Address: 0x180012e88)
_o_ungetc (Address: 0x180012e90)
_o_ungetwc (Address: 0x180012e98)
_o_wcstoul (Address: 0x180012ea0)
memcpy (Address: 0x180012f38)
memmove (Address: 0x180012f40)
strchr (Address: 0x180012f20)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180012f58)
_initterm_e (Address: 0x180012f50)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180012f70)
wcsnlen (Address: 0x180012f68)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x180012f88)
ImpersonateSelf (Address: 0x180012f80)
RevertToSelf (Address: 0x180012f90)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupPrivilegeValueW (Address: 0x180012fa0)

FLTLIB.DLL

FilterAttach (Address: 0x180012b98)
FilterConnectCommunicationPort (Address: 0x180012ba8)
FilterInstanceClose (Address: 0x180012bb0)
FilterInstanceCreate (Address: 0x180012bc0)
FilterLoad (Address: 0x180012bb8)
FilterSendMessage (Address: 0x180012ba0)

ntdll.dll

RtlNtStatusToDosError (Address: 0x180012fb0)