Generated by JEB on 2019/08/01
PE: C:\Windows\System32\fltLib.dll Base=0x180000000 SHA-256=5AF9EC3A4F8724083EDB3F020807C36A45BE2A0EBF0CF6A40417F46086467F3C
PDB: fltLib.pdb GUID={2581A486-4A3B-18A1-C55D8DD1C5A9D71D} Age=1
259 located named symbols:
0x180001784: FilterVolumeCreate
0x180002ED8: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004420: "\\.\FltMgr" ??_C@_1BG@PBELCNLB@?$AA?2?$AA?2?$AA?4?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AA?$AA@
0x1800014F0: FilterFindClose
0x180001D30: FilterVolumeFindNext
0x180004150: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180003278: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x1800014F0: FilterInstanceFindClose
0x180001040: FilterLoad
0x180004F68: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180004210: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x180004F54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180006600: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180006008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004438: "FLTPORT" ??_C@_07CLBAFLDO@FLTPORT?$AA@
0x1800041A8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003ACE: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180003B0C: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x1800042A0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180003BC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180004148: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180004328: "__cdecl _xp_a" __xp_a
0x180004218: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180003B18: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x180003808: "__cdecl RTC_Initialize" _RTC_Initialize
0x180003B0C: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180004F90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x180004770: "__cdecl _rtc_taa" __rtc_taa
0x180004F7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180004260: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180004268: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x180003A68: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x180003B0C: "__cdecl _vcrt_initialize" __vcrt_initialize
0x180004220: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x1800042F0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004760: "__cdecl _rtc_iaa" __rtc_iaa
0x180003B0C: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x1800042F8: "__cdecl _xc_a" __xc_a
0x1800043D0: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180004208: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180006020: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180006018: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x180003BA9: memcpy
0x180004270: "__cdecl _imp_memset" __imp_memset
0x180003B0C: "__cdecl _acrt_initialize" __acrt_initialize
0x180004168: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x180003A86: "__cdecl initterm" _initterm
0x1800042C8: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x180003AF2: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180001D30: FilterVolumeInstanceFindNext
0x180005030: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180006650: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004320: "__cdecl _xi_z" __xi_z
0x180004128: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180003AAA: "__cdecl _C_specific_handler" __C_specific_handler
0x180003B0C: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180003660: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x180004178: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180003B48: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003AB6: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180003594: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x180003AC2: "__cdecl cexit" _cexit
0x180003464: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180003B0C: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180004278: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x180003ADA: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000328C: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x1800042A8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180003B0C: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180003410: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x180003AE6: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x1800011C0: FilterUnload
0x180002330: FilterGetMessage
0x180003B0C: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x180004140: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004228: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180004338: "__cdecl _xt_a" __xt_a
0x180006644: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x1800041B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004228: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x180001BE0: FilterFindFirst
0x180001008: DllMain
0x180001EC0: FilterInstanceFindFirst
0x180003B0C: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x18000384C: "__cdecl RTC_Terminate" _RTC_Terminate
0x180004230: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180004240: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004290: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004198: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800014F0: FilterClose
0x1800014F0: FilterInstanceClose
0x180004138: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180003B24: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003AE6: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x180002A34: FilterHResultFromNtStatus
0x1800042C0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180006014: "__cdecl _isa_enabled" __isa_enabled
0x180001530: FilterInstanceCreate
0x1800041A0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001340: FilterCreate
0x180003AF2: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x180006608: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180003B0C: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x180004288: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800041C8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x180004310: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180004FB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180004440: "\Global??\FltMgrMsg" ??_C@_1CI@BBNNKPNN@?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$DP?$AA?$DP?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AAM?$AAs?$AAg?$AA?$AA@
0x1800043D8: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180004158: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x180003340: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180002E60: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004258: "__cdecl _imp__initterm" __imp__initterm
0x180004FE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180003ACE: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x1800032A0: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x1800042B8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800034B4: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x1800042E8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800036A4: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x1800041B0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180004280: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180004118: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x1800014F0: FilterVolumeClose
0x1800041F0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004308: "__cdecl _xi_a" __xi_a
0x1800041D0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180004120: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000338C: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x1800032C4: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x180003AC2: "__cdecl o__cexit" _o__cexit
0x180003AFE: "__cdecl seh_filter_dll" _seh_filter_dll
0x180004210: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180004FF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180005008: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180003018: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1800043D0: "__cdecl pRawDllMain" _pRawDllMain
0x18000389C: "__cdecl _isa_available_init" __isa_available_init
0x180001F90: FilterVolumeInstanceFindFirst
0x1800022F0: FilterSendMessage
0x180003A5C: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x180004768: "__cdecl _rtc_izz" __rtc_izz
0x180002EB0: "__cdecl _security_check_cookie" __security_check_cookie
0x180004300: "__cdecl _xc_z" __xc_z
0x1800041C0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003B0C: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x1800028A0: FilterpDeviceIoControl
0x1800041E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000335C: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180003AFE: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180003AB6: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x180001D70: FilterVolumeFindFirst
0x180004330: "__cdecl _xp_z" __xp_z
0x1800041E0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004778: "__cdecl _rtc_tzz" __rtc_tzz
0x180004348: "__cdecl _guard_fids_table" __guard_fids_table
0x180004238: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x180004010: "__cdecl load_config_used" _load_config_used
0x180004160: "__cdecl _imp_GetVolumePathNamesForVolumeNameW" __imp_GetVolumePathNamesForVolumeNameW
0x180002370: FilterReplyMessage
0x180004318: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180003694: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180004190: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800042B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800041D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004F40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180003B0C: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x180004218: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x1800042D8: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x180004180: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1800042D0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006050: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180003890: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003B0C: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180003B18: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180005044: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180004FCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800023B0: FilterGetDosName
0x180001980: FilterAttachAtAltitude
0x1800043E0: "fltLib.dll: DisableThreadLibrary" ??_C@_0DP@HIGIHFPD@fltLib?4dll?3?5DisableThreadLibrary@
0x180004230: "__cdecl _imp__o_wcscat_s" __imp__o_wcscat_s
0x180003A92: "__cdecl initterm_e" _initterm_e
0x180003634: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180003448: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x1800042E0: ntdll_NULL_THUNK_DATA
0x180004248: "__cdecl _imp_memcpy" __imp_memcpy
0x1800014F0: FilterVolumeFindClose
0x1800025AC: FilterpCommonAttach
0x180003B0C: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180004238: "__cdecl _imp__o_wcscpy_s" __imp__o_wcscpy_s
0x180006000: "__cdecl _security_cookie" __security_cookie
0x1800036B4: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180004F2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180004170: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004FA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180004188: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x180004250: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x1800041F8: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180006010: "__cdecl _isa_available" __isa_available
0x180004298: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x180004130: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180002AD4: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x180004220: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180006648: "__cdecl _favor" __favor
0x1800031C4: "__cdecl _security_init_cookie" __security_init_cookie
0x180002060: FilterGetInformation
0x180002060: FilterInstanceGetInformation
0x180004200: "__cdecl _imp__cexit" __imp__cexit
0x180004340: "__cdecl _xt_z" __xt_z
0x1800019B0: FilterDetach
0x180003304: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x1800033A8: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180002F40: "__cdecl _report_gsfailure" __report_gsfailure
0x180002AC4: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x1800065F0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180004208: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x1800014F0: FilterVolumeInstanceFindClose
0x18000501C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800041F8: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x180004200: "__cdecl _imp__o__cexit" __imp__o__cexit
0x1800020A0: FilterConnectCommunicationPort
0x180001D30: FilterInstanceFindNext
0x180001940: FilterAttach
0x180001D30: FilterFindNext
0x180003ADA: "__cdecl execute_onexit_table" _execute_onexit_table
0x180003A9E: memset
0x180005058: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180003034: "__cdecl _report_securityfailure" __report_securityfailure
0x180006058: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
[JEB Decompiler by PNF Software]