FltAcknowledgeEcp | vista | vista.sp2 | w7 | |
FltAcquirePushLockExclusive | xp | vista | vista.sp2 | w7 |
FltAcquirePushLockShared | xp | vista | vista.sp2 | w7 |
FltAcquireResourceExclusive | xp | vista | vista.sp2 | w7 |
FltAcquireResourceShared | xp | vista | vista.sp2 | w7 |
FltAdjustDeviceStackSizeForIoRedirection | w7 | |||
FltAllocateCallbackData | xp | vista | vista.sp2 | w7 |
FltAllocateCallbackDataEx | w7 | |||
FltAllocateContext | xp | vista | vista.sp2 | w7 |
FltAllocateDeferredIoWorkItem | xp | vista | vista.sp2 | w7 |
FltAllocateExtraCreateParameter | vista | vista.sp2 | w7 | |
FltAllocateExtraCreateParameterFromLookasideList | vista | vista.sp2 | w7 | |
FltAllocateExtraCreateParameterList | vista | vista.sp2 | w7 | |
FltAllocateFileLock | xp | vista | vista.sp2 | w7 |
FltAllocateGenericWorkItem | xp | vista | vista.sp2 | w7 |
FltAllocatePoolAlignedWithTag | xp | vista | vista.sp2 | w7 |
FltApplyPriorityInfoThread | vista | vista.sp2 | w7 | |
FltAttachVolume | xp | vista | vista.sp2 | w7 |
FltAttachVolumeAtAltitude | xp | vista | vista.sp2 | w7 |
FltBuildDefaultSecurityDescriptor | xp | vista | vista.sp2 | w7 |
FltCancelFileOpen | xp | vista | vista.sp2 | w7 |
FltCancelIo | xp | vista | vista.sp2 | w7 |
FltCancellableWaitForMultipleObjects | vista | vista.sp2 | w7 | |
FltCancellableWaitForSingleObject | vista | vista.sp2 | w7 | |
FltCbdqDisable | xp | vista | vista.sp2 | w7 |
FltCbdqEnable | xp | vista | vista.sp2 | w7 |
FltCbdqInitialize | xp | vista | vista.sp2 | w7 |
FltCbdqInsertIo | xp | vista | vista.sp2 | w7 |
FltCbdqRemoveIo | xp | vista | vista.sp2 | w7 |
FltCbdqRemoveNextIo | xp | vista | vista.sp2 | w7 |
FltCheckAndGrowNameControl | xp | vista | vista.sp2 | w7 |
FltCheckLockForReadAccess | xp | vista | vista.sp2 | w7 |
FltCheckLockForWriteAccess | xp | vista | vista.sp2 | w7 |
FltCheckOplock | xp | vista | vista.sp2 | w7 |
FltCheckOplockEx | w7 | |||
FltClearCallbackDataDirty | xp | vista | vista.sp2 | w7 |
FltClearCancelCompletion | xp | vista | vista.sp2 | w7 |
FltClose | xp | vista | vista.sp2 | w7 |
FltCloseClientPort | xp | vista | vista.sp2 | w7 |
FltCloseCommunicationPort | xp | vista | vista.sp2 | w7 |
FltCommitComplete | vista | vista.sp2 | w7 | |
FltCommitFinalizeComplete | vista.sp2 | w7 | ||
FltCompareInstanceAltitudes | xp | vista | vista.sp2 | w7 |
FltCompletePendedPostOperation | xp | vista | vista.sp2 | w7 |
FltCompletePendedPreOperation | xp | vista | vista.sp2 | w7 |
FltCreateCommunicationPort | xp | vista | vista.sp2 | w7 |
FltCreateFile | xp | vista | vista.sp2 | w7 |
FltCreateFileEx | xp | vista | vista.sp2 | w7 |
FltCreateFileEx2 | vista | vista.sp2 | w7 | |
FltCreateSystemVolumeInformationFolder | xp | vista | vista.sp2 | w7 |
FltCurrentBatchOplock | xp | vista | vista.sp2 | w7 |
FltCurrentOplock | w7 | |||
FltCurrentOplockH | w7 | |||
FltDecodeParameters | xp | vista | vista.sp2 | w7 |
FltDeleteContext | xp | vista | vista.sp2 | w7 |
FltDeleteExtraCreateParameterLookasideList | vista | vista.sp2 | w7 | |
FltDeleteFileContext | xp | vista | vista.sp2 | w7 |
FltDeleteInstanceContext | xp | vista | vista.sp2 | w7 |
FltDeletePushLock | xp | vista | vista.sp2 | w7 |
FltDeleteStreamContext | xp | vista | vista.sp2 | w7 |
FltDeleteStreamHandleContext | xp | vista | vista.sp2 | w7 |
FltDeleteTransactionContext | vista | vista.sp2 | w7 | |
FltDeleteVolumeContext | xp | vista | vista.sp2 | w7 |
FltDetachVolume | xp | vista | vista.sp2 | w7 |
FltDeviceIoControlFile | xp | vista | vista.sp2 | w7 |
FltDoCompletionProcessingWhenSafe | xp | vista | vista.sp2 | w7 |
FltEnlistInTransaction | vista | vista.sp2 | w7 | |
FltEnumerateFilterInformation | xp | vista | vista.sp2 | w7 |
FltEnumerateFilters | xp | vista | vista.sp2 | w7 |
FltEnumerateInstanceInformationByFilter | xp | vista | vista.sp2 | w7 |
FltEnumerateInstanceInformationByVolume | xp | vista | vista.sp2 | w7 |
FltEnumerateInstances | xp | vista | vista.sp2 | w7 |
FltEnumerateVolumeInformation | xp | vista | vista.sp2 | w7 |
FltEnumerateVolumes | xp | vista | vista.sp2 | w7 |
FltFindExtraCreateParameter | vista | vista.sp2 | w7 | |
FltFlushBuffers | xp | vista | vista.sp2 | w7 |
FltFreeCallbackData | xp | vista | vista.sp2 | w7 |
FltFreeDeferredIoWorkItem | xp | vista | vista.sp2 | w7 |
FltFreeExtraCreateParameter | vista | vista.sp2 | w7 | |
FltFreeExtraCreateParameterList | vista | vista.sp2 | w7 | |
FltFreeFileLock | xp | vista | vista.sp2 | w7 |
FltFreeGenericWorkItem | xp | vista | vista.sp2 | w7 |
FltFreePoolAlignedWithTag | xp | vista | vista.sp2 | w7 |
FltFreeSecurityDescriptor | xp | vista | vista.sp2 | w7 |
FltFsControlFile | xp | vista | vista.sp2 | w7 |
FltGetBottomInstance | xp | vista | vista.sp2 | w7 |
FltGetContexts | xp | vista | vista.sp2 | w7 |
FltGetDestinationFileNameInformation | xp | vista | vista.sp2 | w7 |
FltGetDeviceObject | xp | vista | vista.sp2 | w7 |
FltGetDiskDeviceObject | xp | vista | vista.sp2 | w7 |
FltGetEcpListFromCallbackData | vista | vista.sp2 | w7 | |
FltGetFileContext | xp | vista | vista.sp2 | w7 |
FltGetFileNameInformation | xp | vista | vista.sp2 | w7 |
FltGetFileNameInformationUnsafe | xp | vista | vista.sp2 | w7 |
FltGetFileSystemType | vista | vista.sp2 | w7 | |
FltGetFilterFromInstance | xp | vista | vista.sp2 | w7 |
FltGetFilterFromName | xp | vista | vista.sp2 | w7 |
FltGetFilterInformation | xp | vista | vista.sp2 | w7 |
FltGetInstanceContext | xp | vista | vista.sp2 | w7 |
FltGetInstanceInformation | xp | vista | vista.sp2 | w7 |
FltGetIoPriorityHint | vista | vista.sp2 | w7 | |
FltGetIoPriorityHintFromCallbackData | vista | vista.sp2 | w7 | |
FltGetIoPriorityHintFromFileObject | vista | vista.sp2 | w7 | |
FltGetIoPriorityHintFromThread | vista | vista.sp2 | w7 | |
FltGetIrpName | xp | vista | vista.sp2 | w7 |
FltGetLowerInstance | xp | vista | vista.sp2 | w7 |
FltGetNewSystemBufferAddress | w7 | |||
FltGetNextExtraCreateParameter | vista | vista.sp2 | w7 | |
FltGetRequestorProcess | xp | vista | vista.sp2 | w7 |
FltGetRequestorProcessId | xp | vista | vista.sp2 | w7 |
FltGetRequestorProcessIdEx | vista | vista.sp2 | w7 | |
FltGetRequestorSessionId | w7 | |||
FltGetRoutineAddress | xp | vista | vista.sp2 | w7 |
FltGetStreamContext | xp | vista | vista.sp2 | w7 |
FltGetStreamHandleContext | xp | vista | vista.sp2 | w7 |
FltGetSwappedBufferMdlAddress | xp | vista | vista.sp2 | w7 |
FltGetTopInstance | xp | vista | vista.sp2 | w7 |
FltGetTransactionContext | vista | vista.sp2 | w7 | |
FltGetTunneledName | xp | vista | vista.sp2 | w7 |
FltGetUpperInstance | xp | vista | vista.sp2 | w7 |
FltGetVolumeContext | xp | vista | vista.sp2 | w7 |
FltGetVolumeFromDeviceObject | xp | vista | vista.sp2 | w7 |
FltGetVolumeFromFileObject | xp | vista | vista.sp2 | w7 |
FltGetVolumeFromInstance | xp | vista | vista.sp2 | w7 |
FltGetVolumeFromName | xp | vista | vista.sp2 | w7 |
FltGetVolumeGuidName | xp | vista | vista.sp2 | w7 |
FltGetVolumeInformation | vista | vista.sp2 | w7 | |
FltGetVolumeInstanceFromName | xp | vista | vista.sp2 | w7 |
FltGetVolumeName | xp | vista | vista.sp2 | w7 |
FltGetVolumeProperties | xp | vista | vista.sp2 | w7 |
FltInitExtraCreateParameterLookasideList | vista | vista.sp2 | w7 | |
FltInitializeFileLock | xp | vista | vista.sp2 | w7 |
FltInitializeOplock | xp | vista | vista.sp2 | w7 |
FltInitializePushLock | xp | vista | vista.sp2 | w7 |
FltInsertExtraCreateParameter | vista | vista.sp2 | w7 | |
FltIs32bitProcess | xp | vista | vista.sp2 | w7 |
FltIsCallbackDataDirty | xp | vista | vista.sp2 | w7 |
FltIsDirectory | xp | vista | vista.sp2 | w7 |
FltIsEcpAcknowledged | vista | vista.sp2 | w7 | |
FltIsEcpFromUserMode | vista | vista.sp2 | w7 | |
FltIsFltMgrVolumeDeviceObject | vista | vista.sp2 | w7 | |
FltIsIoCanceled | xp | vista | vista.sp2 | w7 |
FltIsIoRedirectionAllowed | w7 | |||
FltIsIoRedirectionAllowedForOperation | w7 | |||
FltIsOperationSynchronous | xp | vista | vista.sp2 | w7 |
FltIsVolumeSnapshot | vista | vista.sp2 | w7 | |
FltIsVolumeWritable | xp | vista | vista.sp2 | w7 |
FltLoadFilter | xp | vista | vista.sp2 | w7 |
FltLockUserBuffer | xp | vista | vista.sp2 | w7 |
FltNotifyFilterChangeDirectory | xp | vista | vista.sp2 | w7 |
FltObjectDereference | xp | vista | vista.sp2 | w7 |
FltObjectReference | xp | vista | vista.sp2 | w7 |
FltOpenVolume | xp | vista | vista.sp2 | w7 |
FltOplockBreakH | w7 | |||
FltOplockBreakToNone | w7 | |||
FltOplockBreakToNoneEx | w7 | |||
FltOplockFsctrl | xp | vista | vista.sp2 | w7 |
FltOplockIsFastIoPossible | xp | vista | vista.sp2 | w7 |
FltOplockIsSharedRequest | w7 | |||
FltParseFileName | xp | vista | vista.sp2 | w7 |
FltParseFileNameInformation | xp | vista | vista.sp2 | w7 |
FltPerformAsynchronousIo | xp | vista | vista.sp2 | w7 |
FltPerformSynchronousIo | xp | vista | vista.sp2 | w7 |
FltPrePrepareComplete | vista | vista.sp2 | w7 | |
FltPrepareComplete | vista | vista.sp2 | w7 | |
FltProcessFileLock | xp | vista | vista.sp2 | w7 |
FltPurgeFileNameInformationCache | xp | vista | vista.sp2 | w7 |
FltQueryDirectoryFile | vista | vista.sp2 | w7 | |
FltQueryEaFile | xp | vista | vista.sp2 | w7 |
FltQueryInformationFile | xp | vista | vista.sp2 | w7 |
FltQuerySecurityObject | xp | vista | vista.sp2 | w7 |
FltQueryVolumeInformation | xp | vista | vista.sp2 | w7 |
FltQueryVolumeInformationFile | xp | vista | vista.sp2 | w7 |
FltQueueDeferredIoWorkItem | xp | vista | vista.sp2 | w7 |
FltQueueGenericWorkItem | xp | vista | vista.sp2 | w7 |
FltReadFile | xp | vista | vista.sp2 | w7 |
FltReferenceContext | xp | vista | vista.sp2 | w7 |
FltReferenceFileNameInformation | xp | vista | vista.sp2 | w7 |
FltRegisterFilter | xp | vista | vista.sp2 | w7 |
FltReissueSynchronousIo | xp | vista | vista.sp2 | w7 |
FltReleaseContext | xp | vista | vista.sp2 | w7 |
FltReleaseContexts | xp | vista | vista.sp2 | w7 |
FltReleaseFileNameInformation | xp | vista | vista.sp2 | w7 |
FltReleasePushLock | xp | vista | vista.sp2 | w7 |
FltReleaseResource | xp | vista | vista.sp2 | w7 |
FltRemoveExtraCreateParameter | vista | vista.sp2 | w7 | |
FltRequestOperationStatusCallback | xp | vista | vista.sp2 | w7 |
FltRetainSwappedBufferMdlAddress | xp | vista | vista.sp2 | w7 |
FltRetrieveIoPriorityInfo | vista | vista.sp2 | w7 | |
FltReuseCallbackData | xp | vista | vista.sp2 | w7 |
FltRollbackComplete | vista | vista.sp2 | w7 | |
FltRollbackEnlistment | vista | vista.sp2 | w7 | |
FltSendMessage | xp | vista | vista.sp2 | w7 |
FltSetCallbackDataDirty | xp | vista | vista.sp2 | w7 |
FltSetCancelCompletion | xp | vista | vista.sp2 | w7 |
FltSetEaFile | xp | vista | vista.sp2 | w7 |
FltSetEcpListIntoCallbackData | vista | vista.sp2 | w7 | |
FltSetFileContext | xp | vista | vista.sp2 | w7 |
FltSetInformationFile | xp | vista | vista.sp2 | w7 |
FltSetInstanceContext | xp | vista | vista.sp2 | w7 |
FltSetIoPriorityHintIntoCallbackData | vista | vista.sp2 | w7 | |
FltSetIoPriorityHintIntoFileObject | vista | vista.sp2 | w7 | |
FltSetIoPriorityHintIntoThread | vista | vista.sp2 | w7 | |
FltSetSecurityObject | xp | vista | vista.sp2 | w7 |
FltSetStreamContext | xp | vista | vista.sp2 | w7 |
FltSetStreamHandleContext | xp | vista | vista.sp2 | w7 |
FltSetTransactionContext | vista | vista.sp2 | w7 | |
FltSetVolumeContext | xp | vista | vista.sp2 | w7 |
FltSetVolumeInformation | xp | vista | vista.sp2 | w7 |
FltStartFiltering | xp | vista | vista.sp2 | w7 |
FltSupportsFileContexts | xp | vista | vista.sp2 | w7 |
FltSupportsFileContextsEx | vista | vista.sp2 | w7 | |
FltSupportsStreamContexts | xp | vista | vista.sp2 | w7 |
FltSupportsStreamHandleContexts | xp | vista | vista.sp2 | w7 |
FltTagFile | xp | vista | vista.sp2 | w7 |
FltUninitializeFileLock | xp | vista | vista.sp2 | w7 |
FltUninitializeOplock | xp | vista | vista.sp2 | w7 |
FltUnloadFilter | xp | vista | vista.sp2 | w7 |
FltUnregisterFilter | xp | vista | vista.sp2 | w7 |
FltUntagFile | xp | vista | vista.sp2 | w7 |
FltWriteFile | xp | vista | vista.sp2 | w7 |
суббота, 4 сентября 2010 г.
fltmgr.sys 64bit exports
Должен признаться что в предыдущем посте я несколько ошибся - у fltmgr.sys есть механизмы для enumeration (просто я их ни разу не использовал). Нужно смотреть правда насколько сложно их пропатчить/обмануть
Комментариев нет:
Отправить комментарий