About
Articles
Book Store
Distributed RCE
Downloads
Event Calendar
Forums
Live Discussion
Reference Library
RSS Feeds
Search
Users
What's New
Customize Theme
bluegrey
blackgreen
metal
simple
Flag:
Tornado!
Hurricane!
Login:
Password:
Remember Me
Register
OpenRCE Win32 Call Chains Database
Windows 2003 SE SP1
>> NTDLL
AcquireBufferLocation
AllocateMemoryForThreadLocalData
ARRAY_FITS
AVrfDllLoadNotification
AVrfDllUnloadNotification
AVrfInitializeVerifier
AVrfInternalHeapFreeNotification
AVrfPageHeapDllNotification
AVrfpChainDuplicateVerificationLayers
AVrfpDetectVerifiedExports
AVrfpDllLoadNotificationInternal
AVrfpDphDetectSnapRoutines
AVrfpDphDllGlobalAlloc
AVrfpDphDllGlobalFree
AVrfpDphDllGlobalReAlloc
AVrfpDphDllHeapAlloc
AVrfpDphDllHeapCreate
AVrfpDphDllHeapReAlloc
AVrfpDphDllLocalAlloc
AVrfpDphDllLocalFree
AVrfpDphDllLocalReAlloc
AVrfpDphSnapImports
AVrfpDumpProviderList
AVrfpEnableHandleVerifier
AVrfpEnableStackVerifier
AVrfpEnableVerifierOptions
AVrfpFindClosestThunkDuplicate
AVrfpLoadAndInitializeProvider
AVrfpMoveProviderToEndOfInitializationList
AVrfpSnapAlreadyLoadedDlls
AVrfpSnapDllImports
AVrfpVerifierStopInitialize
CleanOnThreadExit
CleanUpAllThreadBuffers
CompareNamesCaseSensitive
CsrAllocateCaptureBuffer
CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString
CsrCaptureMessageUnicodeStringInPlace
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrNewThread
CsrOneTimeInitialize
CsrpConnectToServer
CsrProbeForRead
CsrProbeForWrite
DaysAndFractionToTime
DbgPrompt
DbgUiConnectToDbg
DbgUiContinue
DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess
DbgUiIssueRemoteBreakin
DbgUiStopDebugging
DbgUiWaitStateChange
DebugPrint
DebugPrompt
DeleteNodeFromTree
DumpHeapSnapShot
EnumUILanguageCallback
EtwControlTraceA
EtwControlTraceW
EtwCreateTraceInstanceId
EtwEnableTrace
EtwEnumerateTraceGuids
EtwFlushTraceA
EtwFlushTraceW
EtwGetTraceLoggerHandle
EtwNotificationRegistrationA
EtwNotificationRegistrationW
EtwpAddHandleToEventPump
EtwpAddLogHeaderToLogFile
EtwpAddToGNList
EtwpAllocateGuidMaps
EtwpAllocateTraceBuffers
EtwpAllocDontFail
EtwpBaseFindFirstDevice
EtwpBaseGetNamedObjectDirectory
EtwpBasep8BitStringToDynamicUnicodeString
EtwpBasepInitializeFindFileHandle
EtwpBuildMofAddRemoveEvent
EtwpBuildReceiveNotification
EtwpCancelIo
EtwpCheckForEnoughFreeSpace
EtwpCheckGuidAccess
EtwpCloseHandle
EtwpCloseNotifyee
EtwpClosePendingHandles
EtwpConvertEventToAnsi
EtwpConvertWADToAnsi
EtwpCopyCountedString
EtwpCopyMRString
EtwpCopyStringToCountedUnicode
EtwpCountedUnicodeToCountedAnsi
EtwpCreateEventW
EtwpCreateFileW
EtwpCreateHeap
EtwpCreateThread
EtwpDeinitializeDll
EtwpDeliverAllEvents
EtwpDereferenceGNEntry
EtwpDeviceIoControl
EtwpDisableTraceProvider
EtwpDuplicateHandle
EtwpEnableDisableGuid
EtwpEnableDisableKernelTrace
EtwpEnumRegGuids
EtwpEstablishEventPump
EtwpEventPump
EtwpEventPumpFromKernel
EtwpExpandEnvironmentStringsW
EtwpExternalNotification
EtwpFileExists
EtwpFinalizeLogFileHeader
EtwpFindAndLockGuidNotification
EtwpFindClose
EtwpFindFirstFileExW
EtwpFindFirstFileW
EtwpFixLogFileHeaderForWow64
EtwpFlushAllBuffers
EtwpFlushBuffer
EtwpFlushLogger
EtwpFlushUmLogger
EtwpFreeLoggerContext
EtwpGetDiskFreeSpaceExW
EtwpGetFileAttributesExW
EtwpGetFreeBuffer
EtwpGetFullFreeBuffer
EtwpGetFullPathNameA
EtwpGetFullPathNameW
EtwpGetLanguageList
EtwpGetMofResourceList
EtwpGetOverlappedResult
EtwpGetSystemDefaultUILanguage
EtwpGetSystemWindowsDirectoryW
EtwpGetTimeZoneInformation
EtwpGetTraceBuffer
EtwpInitializeDll
EtwpInitLoggerContext
EtwpInternalNotification
EtwpLogger
EtwpLogImageLoadEvent
EtwpMakeCallbacks
EtwpMakeEventCallbacks
EtwpMarkPendingCloseNotifyee
EtwpMemCommit
EtwpMemFree
EtwpMemReserve
EtwpNlsConvertIntegerToString
EtwpNotificationRegistration
EtwpOpenKernelGuid
EtwpProcessEventBuffer
EtwpProcessExternalEvent
EtwpProcessLanguageAddRemoveEvent
EtwpProcessModuleRunDown
EtwpProcessMofAddRemoveEvent
EtwpProcessRunDown
EtwpProcessUMRequest
EtwpQueryAllTraces
EtwpQueryAllUmTraceW
EtwpQueryUmLogger
EtwpReadFile
EtwpReceiveNotifications
EtwpReceiveReply
EtwpRegisterGuids
EtwpRegOpenKey
EtwpRegQueryValueKey
EtwpReleaseFullBuffer
EtwpReleaseTraceBuffer
EtwpRelogEvent
EtwpRelogHeaderToLogFile
EtwpRemoveFromGNList
EtwpReserveTraceBuffer
EtwpSendUmLogRequest
EtwpSendWmiKMRequest
EtwpSetDosError
EtwpSetEvent
EtwpSetFilePointer
EtwpSetThreadPriority
EtwpSleep
EtwpSleepEx
EtwpStartLogger
EtwpStartUmLogger
EtwpStopLogger
EtwpStopLoggerInstance
EtwpStopUmLogger
EtwpSwitchBuffer
EtwpSwitchFullBuffer
EtwpSysModuleRunDown
EtwpThreadRunDown
EtwpTlsAlloc
EtwpTlsFree
EtwpTlsGetValue
EtwpTlsSetValue
EtwpTraceEvent
EtwpTraceMessage
EtwpTraceUmEvent
EtwpTraceUmMessage
EtwpUnicodeToAnsi
EtwpUpdateUmLogger
EtwpUuidCreateSequential
EtwpUuidGetValues
EtwpWaitForMultipleObjectsEx
EtwpWaitForSingleObject
EtwpWaitForSingleObjectEx
EtwQueryAllTracesA
EtwQueryAllTracesW
EtwQueryTraceA
EtwQueryTraceW
EtwReceiveNotificationsA
EtwReceiveNotificationsW
EtwRegisterTraceGuidsA
EtwRegisterTraceGuidsW
EtwStartTraceW
EtwStopTraceA
EtwStopTraceW
EtwTraceEvent
EtwTraceEventInstance
EtwTraceMessageVa
EtwUnregisterTraceGuids
EtwUpdateTraceA
EtwUpdateTraceW
GetLoggerInfo
GetNextWchar
GetPidInfo
ImportTablepFreeFunctionSorted
ImportTablepFreeModuleSorted
ImportTablepHashCanonicalLists
ImportTablepInsertModuleSorted
InitializeAndRegisterNtdllTraceEvents
InitializeEtwHandles
InitSecurityCookie
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserApcExceptionHandler
KiUserCallbackDispatcher
KiUserCallbackExceptionHandler
KiUserExceptionDispatcher
LdrAccessOutOfProcessResource
LdrAccessResource
LdrAddRefDll
LdrCreateOutOfProcessImage
LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll
LdrEnumerateLoadedModules
LdrEnumResources
LdrFindCreateProcessManifest
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResourceEx_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetModuleName
LdrGetProcedureAddress
LdrInitShimEngineDynamic
LdrLoadAlternateResourceModule
LdrLoadDll
LdrLockLoaderLock
LdrOpenImageFileOptionsKey
LdrpAccessResourceData
LdrpAccessResourceDataNoMultipleLanguage
LdrpAllocateUnicodeString
LdrpApplyHotPatch
LdrpCalcResourceChecksum
LdrpCallTlsInitializers
LdrpCheckAppDatabase
LdrpCheckCorImage
LdrpCheckForKnownDll
LdrpCheckForLoadedDll
LdrpCheckForSafeDiscImage
LdrpCheckForSecuROMImage
LdrpCheckNXCompatibility
LdrpCheckNxIncompatibleDllSection
LdrpCheckSafeDiscDll
LdrpCodeAuthzCheckDllAllowed
LdrpCompareResourceChecksum
LdrpCopyUnicodeString
LdrpCorUnloadImage
LdrpCorValidateImage
LdrpCreateKey
LdrpDefineDllTag
LdrpFetchAddressOfSecurityCookie
LdrpFinalizeAndDeallocateDataTableEntry
LdrpFixSectionProtection
LdrpForkProcess
LdrpGenericExceptionFilter
LdrpGetAlternateResourceModuleHandle
LdrpGetFileVersion
LdrpGetProcedureAddress
LdrpGetRegValueKey
LdrpGetResourceChecksum
LdrpGetShimEngineInterface
LdrpHandleNewFormatImportDescriptors
LdrpHandleOldFormatImportDescriptors
LdrpHandleOneNewFormatImportDescriptor
LdrpHandleOneOldFormatImportDescriptor
LdrpInitializationFailure
LdrpInitializeApplicationVerifierPackage
LdrpInitializeExecutionOptions
LdrpInitializeProcessWrapperFilter
LdrpInitializeThread
LdrpInitializeTls
LdrpInitSecurityCookie
LdrpLoadDll
LdrpLoadImportModule
LdrpLoadShimEngine
LdrpMapDll
LdrpMungHeapImportsForTagging
LdrpOpenFileVersionKey
LdrpOpenKey
LdrpProcessImageProtectionParameter
LdrpQueryDllExecuteOptions
LdrpRecordUnloadEvent
LdrpResolveFullName
LdrProcessRelocationBlock
LdrpRundownHotpatchList
LdrpRunInitializeRoutines
LdrpRunShimEngineInitRoutine
LdrpSearchPath
LdrpSearchResourceSection_U
LdrpSetAlternateResourceModuleHandle
LdrpSetHotpatchProtection
LdrpSetProtection
LdrpSetupHotpatch
LdrpSnapIAT
LdrpSnapThunk
LdrpTagAllocateHeap
LdrpTagAllocateHeap0
LdrpTagAllocateHeap1
LdrpTagAllocateHeap10
LdrpTagAllocateHeap11
LdrpTagAllocateHeap12
LdrpTagAllocateHeap13
LdrpTagAllocateHeap14
LdrpTagAllocateHeap15
LdrpTagAllocateHeap16
LdrpTagAllocateHeap17
LdrpTagAllocateHeap18
LdrpTagAllocateHeap19
LdrpTagAllocateHeap2
LdrpTagAllocateHeap20
LdrpTagAllocateHeap21
LdrpTagAllocateHeap22
LdrpTagAllocateHeap23
LdrpTagAllocateHeap24
LdrpTagAllocateHeap25
LdrpTagAllocateHeap26
LdrpTagAllocateHeap27
LdrpTagAllocateHeap28
LdrpTagAllocateHeap29
LdrpTagAllocateHeap3
LdrpTagAllocateHeap30
LdrpTagAllocateHeap31
LdrpTagAllocateHeap32
LdrpTagAllocateHeap33
LdrpTagAllocateHeap34
LdrpTagAllocateHeap35
LdrpTagAllocateHeap36
LdrpTagAllocateHeap37
LdrpTagAllocateHeap38
LdrpTagAllocateHeap39
LdrpTagAllocateHeap4
LdrpTagAllocateHeap40
LdrpTagAllocateHeap41
LdrpTagAllocateHeap42
LdrpTagAllocateHeap43
LdrpTagAllocateHeap44
LdrpTagAllocateHeap45
LdrpTagAllocateHeap46
LdrpTagAllocateHeap47
LdrpTagAllocateHeap48
LdrpTagAllocateHeap49
LdrpTagAllocateHeap5
LdrpTagAllocateHeap50
LdrpTagAllocateHeap51
LdrpTagAllocateHeap52
LdrpTagAllocateHeap53
LdrpTagAllocateHeap54
LdrpTagAllocateHeap55
LdrpTagAllocateHeap56
LdrpTagAllocateHeap57
LdrpTagAllocateHeap58
LdrpTagAllocateHeap59
LdrpTagAllocateHeap6
LdrpTagAllocateHeap60
LdrpTagAllocateHeap61
LdrpTagAllocateHeap62
LdrpTagAllocateHeap63
LdrpTagAllocateHeap7
LdrpTagAllocateHeap8
LdrpTagAllocateHeap9
LdrpTouchThreadStack
LdrpUnloadShimEngine
LdrpUpdateLoadCount2
LdrpUpdateLoadCount3
LdrpValidateImageForMp
LdrpVerifyAlternateResourceModule
LdrpWalkImportDescriptor
LdrQueryApplicationCompatibilityGoo
LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptionsEx
LdrQueryImageFileKeyOption
LdrQueryModuleInfoFromLdrEntry
LdrQueryModuleInfoLocalLoaderLock
LdrQueryNextListEntry
LdrQueryProcessModuleInformation
LdrQueryProcessModuleInformationEx
LdrReadMemory
LdrRelocateImage
LdrRelocateImageWithBias
LdrSetAppCompatDllRedirectionCallback
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrUnlockLoaderLock
LdrVerifyImageMatchesChecksum
LdrVerifyMappedImageMatchesChecksum
MD5Final
MD5Update
NtdllCtrlCallback
PfxFindPrefix
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RaiseException
RebalanceNode
RegisterNtdllTraceEvents
ReserveBufferSpace
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquirePrivilege
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddressInSectionTable
RtlAddVectoredContinueHandler
RtlAddVectoredExceptionHandler
RtlAdjustPrivilege
RtlAllocateActivationContextStack
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAllocateHeapSlowly
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendPathElement
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAssert
RtlCallKernel32UnhandledExceptionFilter
RtlCallVectoredContinueHandlers
RtlCallVectoredExceptionHandlers
RtlCancelTimer
RtlCaptureStackBackTrace
RtlCaptureStackContext
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlCompactHeap
RtlCompareString
RtlCompressBuffer
RtlCompressBufferLZNT1
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConvertPropertyToVariant
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertVariantToProperty
RtlCopyMappedMemory
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCreateActivationContext
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlCreateHeap
RtlCreateHotPatch
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCutoverTimeToSystemTime
RtlDeactivateActivationContext
RtlDebugAllocateHeap
RtlDebugCompactHeap
RtlDebugCreateHeap
RtlDebugCreateTagHeap
RtlDebugDestroyHeap
RtlDebugFreeHeap
RtlDebugGetUserInfoHeap
RtlDebugQueryTagHeap
RtlDebugReAllocateHeap
RtlDebugSetUserFlagsHeap
RtlDebugSetUserValueHeap
RtlDebugSizeHeap
RtlDebugUsageHeap
RtlDebugWalkHeap
RtlDebugZeroHeap
RtlDecompressBuffer
RtlDecompressBufferLZNT1
RtlDecompressFragment
RtlDecompressFragmentLZNT1
RtlDefaultNpAcl
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDispatchException
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDoesFileExists_UEx
RtlDoesFileExists_UStr
RtlDoesFileExists_UstrEx
RtlDosApplyFileIsolationRedirection_Ustr
RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_U_WithStatus
RtlDosPathNameToRelativeNtPathName_U
RtlDosPathNameToRelativeNtPathName_Ustr
RtlDosPathNameToRelativeNtPathName_U_WithStatus
RtlDosSearchPath_U
RtlDosSearchPath_Ustr
RtlDumpResource
RtlDuplicateUnicodeString
RtlEmptyAtomTable
RtlEncodePointer
RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory
RtlEnumProcessHeaps
RtlEqualDomainName
RtlExitUserThread
RtlExpandEnvironmentStrings_U
RtlExtendedLargeIntegerDivide
RtlExtendHeap
RtlFinalReleaseOutOfProcessMemoryStream
RtlFindActivationContextSectionGuid
RtlFindActivationContextSectionString
RtlFindCharInUnicodeString
RtlFindClearBitsAndSet
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextActivationContextSection
RtlFindSetBitsAndClear
RtlFlushSecureMemoryCache
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFormatMessageEx
RtlFreeActivationContextStack
RtlFreeHeap
RtlFreeHeapSlowly
RtlFreeHotPatchData
RtlFreeOemString
RtlFreeSid
RtlFreeThreadActivationContextStack
RtlFreeUserThreadStack
RtlGenerate8dot3Name
RtlGetAssemblyStorageRoot
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetCurrentDirectory_U
RtlGetElementGenericTableAvl
RtlGetFullPathName_U
RtlGetFullPathName_Ustr
RtlGetFullPathName_UstrEx
RtlGetHotpatchHeader
RtlGetLengthWithoutLastFullDosOrNtPathElement
RtlGetProcessHeaps
RtlGetSetBootStatusData
RtlGetUserInfoHeap
RtlGetVersion
RtlGUIDFromString
RtlImageDirectoryEntryToData
RtlImageNtHeader
RtlImageNtHeaderEx
RtlImageRvaToVa
RtlImpersonateSelf
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeCriticalSectionAndSpinCount
RtlInitializeHeapManager
RtlInitializeHotPatch
RtlInitializeResource
RtlInitializeRXact
RtlInitializeStackTraceDataBase
RtlInitNlsTables
RtlInitUnicodeStringEx
RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl
RtlInt64ToUnicodeString
RtlIntegerToChar
RtlIntegerToUnicode
RtlIntegerToUnicodeString
RtlInterlockedFlushSList
RtlInterlockedPopEntrySList
RtlInterlockedPushEntrySList
RtlInvalidHandlerDetected
RtlIpv4AddressToStringA
RtlIpv4AddressToStringExA
RtlIpv4AddressToStringExW
RtlIpv4AddressToStringW
RtlIpv4StringToAddressA
RtlIpv4StringToAddressExA
RtlIpv4StringToAddressExW
RtlIpv4StringToAddressW
RtlIpv6AddressToStringA
RtlIpv6AddressToStringExA
RtlIpv6AddressToStringExW
RtlIpv6AddressToStringW
RtlIpv6StringToAddressA
RtlIpv6StringToAddressExA
RtlIpv6StringToAddressExW
RtlIpv6StringToAddressW
RtlIsDosDeviceName_U
RtlIsDosDeviceName_Ustr
RtlIsNameLegalDOS8Dot3
RtlIsValidHandler
RtlIsValidIndexHandle
RtlLargeIntegerDivide
RtlLargeIntegerToChar
RtlLargeIntegerToUnicode
RtlLengthSidAsUnicodeString
RtlLocalTimeToSystemTime
RtlLockBootStatusData
RtlLockHeap
RtlLogStackBackTrace
RtlLookupAtomInAtomTable
RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl
RtlLookupFunctionTable
RtlMakeSelfRelativeSD
RtlMultiAppendUnicodeStringBuffer
RtlMultipleAllocateHeap
RtlMultipleFreeHeap
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNewSecurityObjectEx
RtlNtPathNameToDosPathName
RtlNtStatusToDosError
RtlNumberOfClearBits
RtlOemStringToUnicodeString
RtlOpenCurrentUser
RtlpAcquireHeapListLock
RtlpAcquireStackTraceDataBase
RtlpAcquireWorker
RtlpActivateLowFragmentationHeap
RtlpAddHeapToProcessList
RtlpAddKnownAce
RtlpAddKnownObjectAce
RtlpAddTimer
RtlpAddVectoredHandler
RtlpAddWait
RtlpAdjustHeapLookasideDepth
RtlpAllocateActivationContextStackFrame
RtlpAllocateAffinityIndex
RtlpAllocateAtom
RtlpAllocateFromHeapLookaside
RtlpAllocateHeapUsageEntry
RtlpAllocateHotpatchMemory
RtlpAllocateTags
RtlpAllocateUserBlock
RtlpAllocDeallocQueryBuffer
RtlpApcCallout
RtlpApplyAclToObject
RtlpApplyRelocationFixups
RtlpAssemblyStorageMapResolutionDefaultCallback
RtlpAsyncTimerCallbackCompletion
RtlpAsyncWaitCallbackCompletion
RtlpAtomMapAtomToHandleEntry
RtlpBreakPointHeap
RtlpCancelTimer
RtlpCancelTimerEx
RtlpCaptureStackTraceForLogging
RtlpChangeQueryDebugBufferTarget
RtlpCheckDeviceName
RtlpCheckRelativeDrive
RtlpCoalesceFreeBlocks
RtlpCommitQueryDebugInfo
RtlpCompareAces
RtlpCompareKnownObjectAces
RtlpComputeBackupIndex
RtlpComputeMergedAcl
RtlpComputeMergedAcl2
RtlpConvertAclToAutoInherit
RtlpConvertToAutoInheritSecurityObject
RtlpCopyAces
RtlpCopyAndNormalizePeHeaderForHash
RtlpCopyEffectiveAce
RtlpCopyMappedMemoryEx
RtlpCreateCriticalSectionSem
RtlpCreateHandleForAtom
RtlpCreateLowFragHeap
RtlpCreateServerAcl
RtlpCreateStack
RtlPcToFileHeader
RtlpDeactivateTimer
RtlpDeactivateWait
RtlpDeactivateWaitWithIndex
RtlpDebugPageHeapAllocate
RtlpDebugPageHeapCompact
RtlpDebugPageHeapCreate
RtlpDebugPageHeapDestroy
RtlpDebugPageHeapFree
RtlpDebugPageHeapGetProcessHeaps
RtlpDebugPageHeapGetUserInfo
RtlpDebugPageHeapIsLocked
RtlpDebugPageHeapLock
RtlpDebugPageHeapReAllocate
RtlpDebugPageHeapSerialize
RtlpDebugPageHeapSetUserFlags
RtlpDebugPageHeapSetUserValue
RtlpDebugPageHeapSize
RtlpDebugPageHeapUnlock
RtlpDebugPageHeapUsage
RtlpDebugPageHeapValidate
RtlpDeCommitFreeBlock
RtlpDeleteTimer
RtlpDeleteTimerQueue
RtlpDeleteTimerQueueComplete
RtlpDeleteWait
RtlpDeregisterWait
RtlpDestroyHandleTableForAtomTable
RtlpDestroyHeapSegment
RtlpDestroyLockAtomTable
RtlpDestroyLowFragHeap
RtlpDosPathNameToRelativeNtPathName_U
RtlpDosPathNameToRelativeNtPathName_Ustr
RtlpDphAddNewPool
RtlpDphAddToDelayedFreeQueue
RtlpDphAllocateNode
RtlpDphAllocateVm
RtlpDphCheckFillPattern
RtlpDphCoalesceFreeIntoAvailable
RtlpDphCoalesceNodeIntoAvailable
RtlpDphEnterCriticalSection
RtlpDphFindAvailableMemory
RtlpDphFindBusyMemory
RtlpDphFreeDelayedBlocksFromHeap
RtlpDphGetBlockSizeFromCorruptedBlock
RtlpDphGrowVirtual
RtlpDphInitializeDelayedFreeQueue
RtlpDphInternalValidatePageHeap
RtlpDphIsDllTargeted
RtlpDphIsNormalFreeHeapBlock
RtlpDphIsNormalHeapBlock
RtlpDphIsPageHeapBlock
RtlpDphLeaveCriticalSection
RtlpDphLogStackTrace
RtlpDphNormalHeapAllocate
RtlpDphNormalHeapFree
RtlpDphNormalHeapGetUserInfo
RtlpDphNormalHeapReAllocate
RtlpDphNormalHeapSetUserFlags
RtlpDphNormalHeapSetUserValue
RtlpDphNormalHeapSize
RtlpDphNormalHeapValidate
RtlpDphPlaceOnBusyList
RtlpDphPointerFromHandle
RtlpDphPostProcessing
RtlpDphPreProcessing
RtlpDphProcessStartupInitialization
RtlpDphProtectVm
RtlpDphRaiseException
RtlpDphRemoveFromBusyList
RtlpDphReportCorruptedBlock
RtlpDphSearchBlockInTree
RtlpDphSetProtectionsAfterUse
RtlpDphSetProtectionsBeforeUse
RtlpDphShouldAllocateInPageHeap
RtlpDphShouldFaultInject
RtlpDphTargetDllsLogicInitialize
RtlpDphUnexpectedExceptionFilter
RtlpDphValidateInternalLists
RtlpDphVerifyIntegrity
RtlpDphVerifyList
RtlpDphVerifyList2
RtlpDphVerifyTree
RtlpDphVmLimitCanUsePageHeap
RtlpDphWriteNormalHeapBlockInformation
RtlpDphWritePageHeapBlockInformation
RtlpDumpEntryFlagDescription
RtlpDumpEntryHeader
RtlpDumpEntryInfo
RtlpEnsureBufferSize
RtlpEnsureLiveDeadListsInitialized
RtlpExecuteIOWorkItem
RtlpExecuteLongIOWorkItem
RtlpExecuteWorkerRequest
RtlpExitThread
RtlpExtendHeap
RtlpExtendStackTraceDataBase
RtlpFindActivationContextSection_FillOutReturnedData
RtlpFindAndCommitPages
RtlpFindEntry
RtlpFindFirstActivationContextSection
RtlpFindGuidInSection
RtlpFindNextActivationContextSection
RtlpFindSectionHeader
RtlpFindUnicodeStringInSection
RtlpFindWaitThread
RtlpFireTimers
RtlpFireTimersAndReorder
RtlpFlushLargestCacheBlock
RtlpFreeActivationContext
RtlpFreeActivationContextStackFrame
RtlpFreeAtom
RtlpFreeDebugInfo
RtlpFreeHandleForAtom
RtlpFreeStack
RtlpFreeToHeapLookaside
RtlpFreeUserBlock
RtlpFreeWaitEvent
RtlpGenerateInheritAcl
RtlpGenerateInheritedAce
RtlpGetActivationContextDataStorageMapAndRosterHeader
RtlpGetAssemblyStorageMapRootLocation
RtlpGetColdpatchDebugSignature
RtlpGetDefaultsSubjectContext
RtlpGetHeapBlock
RtlpGetLengthWithoutLastPathElement
RtlpGetRegistryHandle
RtlpGetTagName
RtlpGetTimeRemaining
RtlpGetTimeZoneInfoHandle
RtlpGetWaitEvent
RtlpHashStringToAtom
RtlpHeapReportCorruption
RtlpImageDirectoryEntryToData64
RtlpImageNtHeader
RtlpImpersonateSelfEx
RtlPinAtomInAtomTable
RtlpInheritAcl
RtlpInheritAcl2
RtlpInitDeferredCriticalSection
RtlpInitializeAllowedAce
RtlpInitializeAuditAce
RtlpInitializeDeniedAce
RtlpInitializeHandleTableForAtomTable
RtlpInitializeHeapSegment
RtlpInitializeLeakDetection
RtlpInitializeListIndex
RtlpInitializeLockAtomTable
RtlpInitializeLowFragHeapManager
RtlpInitializeTimerThreadPool
RtlpInitializeWaitThreadPool
RtlpInitializeWorkerThreadPool
RtlpInsertFreeBlock
RtlpInsertTimersIntoDeltaList
RtlpInsertUnCommittedPages
RtlpIOWorkerThread
RtlpIsDuplicateAce
RtlpIsLFHZoneAllocation
RtlpIsSameImage
RtlpLocateActivationContextSection
RtlpLocateActivationContextSectionForQuery
RtlpLockAtomTable
RtlpLogCapturedStackTrace
RtlpLowFragHeapAlloc
RtlpLowFragHeapFree
RtlpLowFragHeapMultipleAlloc
RtlpLowFragHeapMultipleFree
RtlpMoveActCtxToFreeList
RtlpNewSecurityObject
RtlpNtCreateKey
RtlpNtEnumerateSubKey
RtlpNtOpenKey
RtlpNtQueryValueKey
RtlpNtSetValueKey
RtlpOpenImageFile
RtlpOpenThreadToken
RtlpPageHeapStop
RtlpPlaceActivationContextOnLiveList
RtlpPossibleDeadlock
RtlpProbeAssemblyStorageRootForAssembly
RtlpProcessTimeouts
RtlpProcessWaitCompletion
RtlpPushPageDescriptor
RtlpQueryAssemblyInformationActivationContextDetailedInformation
RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation
RtlpQueryInformationActivationContextBasicInformation
RtlpQueryInformationActivationContextDetailedInformation
RtlpQueryProcessDebugInformationRemote
RtlpQueryProcessEnumHeapsRoutine
RtlpQueryRegistryDirect
RtlpQueueIOWorkerRequest
RtlpQueueWorkerRequest
RtlpReadHeapData
RtlpReadProcessHeaps
RtlpReadSingleHookInformation
RtlpRegisterHeapBlocks
RtlpReleaseHeapListLock
RtlpReleaseStackTraceDataBase
RtlpRemoveHeapFromProcessList
RtlpRemoveVectoredHandler
RtlpReOrderDeltaList
RtlpResetDriveEnvironment
RtlpResetTimer
RtlpResolveAssemblyStorageMapEntry
RtlpRestartImpersonation
RtlpResync64BitTickCount
RtlProtectHeap
RtlpScanHeapAllocBlocks
RtlpScanProcessVirtualMemory
RtlpSearchValidationCode
RtlpSecMemFreeVirtualMemory
RtlpSerializeHeap
RtlpServiceTimer
RtlpSetBlockInfo
RtlpSetSecurityObject
RtlpSingleRangeValidate
RtlpStartIOWorkerThread
RtlpStartThread
RtlpStartThreadpoolThread
RtlpStartWaitThread
RtlpStartWorkerThread
RtlpSubSegmentAllocateAll
RtlpSubSegmentFreeAll
RtlpSubSegmentInitialize
RtlpSysVolAllocate
RtlpSysVolCheckOwnerAndSecurity
RtlpSysVolCreateSecurityDescriptor
RtlpSysVolTakeOwnership
RtlpThreadPoolGetActiveActivationContext
RtlpTimerThread
RtlpTraceDatabaseAcquireLock
RtlpTraceDatabaseAllocate
RtlpTraceDatabaseFree
RtlpTraceDatabaseInitializeLock
RtlpTraceDatabaseInternalAdd
RtlpTraceDatabaseReleaseLock
RtlpTraceDatabaseUninitializeLock
RtlpUnlockAtomTable
RtlpUnWaitCriticalSection
RtlpUpdateTimer
RtlpValidateCurrentDirectory
RtlpValidateHeap
RtlpValidateHeapHeaders
RtlpValidateHeapSegment
RtlpValidatePeChecksum
RtlpValidatePeHeaderHash2
RtlpValidateTargetModule
RtlpValidateTargetRanges
RtlpValidOwnerSubjectContext
RtlpVerCompare
RtlpVerGetConditionMask
RtlpWaitForEvent
RtlpWaitOnCriticalSection
RtlpWaitOrTimerCallout
RtlpWaitThread
RtlpWalkFrameChainFuzzy
RtlpWalkLFHBlock
RtlpWin32NTNameToNtPathName_U
RtlpWorkerCallout
RtlpWorkerThread
RtlpWorkerThreadCancelTimer
RtlpWorkerThreadSetTimer
RtlpWorkerThreadTimerCallback
RtlQueryAtomInAtomTable
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryInformationActivationContext
RtlQueryInformationActiveActivationContext
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryProcessModuleInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlQueueWorkItem
RtlRaiseException
RtlRaiseStatus
RtlReadHookInformation
RtlReadMemoryStream
RtlReadOutOfProcessMemoryStream
RtlReadSingleHookValidation
RtlReAllocateHeap
RtlRegisterSecureMemoryCacheCallback
RtlRegisterWait
RtlReleasePebLock
RtlReleasePrivilege
RtlReleaseResource
RtlRemoteCall
RtlRemoveVectoredContinueHandler
RtlRemoveVectoredExceptionHandler
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSelfRelativeToAbsoluteSD2
RtlSetAllBits
RtlSetAttributesSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetEnvironmentStrings
RtlSetEnvironmentVariable
RtlSetHeapInformation
RtlSetIoCompletionCallback
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlSetSecurityObject
RtlSetSecurityObjectEx
RtlSetTimeZoneInformation
RtlSetUnhandledExceptionFilter
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlStartRXact
RtlStringCbCopyExW
RtlStringFromGUID
RtlSystemTimeToLocalTime
RtlTimeFieldsToTime
RtlTimeToSecondsSince1970
RtlTimeToTimeFields
RtlTraceDatabaseAdd
RtlTraceDatabaseCreate
RtlTraceDatabaseDestroy
RtlTraceDatabaseEnumerate
RtlTraceDatabaseFind
RtlTraceDatabaseValidate
RtlUnhandledExceptionFilter
RtlUnhandledExceptionFilter2
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger
RtlUnicodeStringToOemString
RtlUnlockBootStatusData
RtlUnlockHeap
RtlUnwind
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpdateTimer
RtlUpperChar
RtlUpperString
RtlUsageHeap
RtlValidAcl
RtlValidateHeap
RtlValidateProcessHeaps
RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor
RtlValidSid
RtlVerifyVersionInfo
RtlWalkFrameChain
RtlWalkHeap
RtlWriteRegistryValue
RtlxOemStringToUnicodeSize
RtlxUnicodeStringToOemSize
RtlZeroHeap
RXactpCommit
RXactpOpenTargetKey
ShutDownEtwHandles
StringCatWorkerW
StringCbCopyW
StringVPrintfWorkerW
tolower
vDbgPrintEx
vDbgPrintExWithPrefix
vDbgPrintExWithPrefixInternal
WmiUnregisterGuids
_AVrfpDphDllcalloc
_AVrfpDphDllfree
_AVrfpDphDllNewArray
_AVrfpDphDllrealloc
_cos
_DbgPrint
_DbgPrintEx
_DbgPrintReturnControlC
_EtwTraceMessage
_fabs
_GUID_MOF_RESOURCE_ADDED_NOTIFICATION
_GUID_MOF_RESOURCE_REMOVED_NOTIFICATION
_isalnum
_isalpha
_iscntrl
_isgraph
_islower
_isprint
_ispunct
_isspace
_isupper
_iswalpha
_iswdigit
_iswlower
_iswspace
_iswxdigit
_isxdigit
_LdrpDllTagProcedures
_LdrpInitialize
_Magic10000000
_mbstowcs
_mbtowc
_MscoreeDllString
_RtlpDosCOMDevice
_seh_longjmp_unwind
_sin
_sprintf
_sqrt
_sscanf
_StringCbPrintfW
_StringCchPrintfW
_swprintf
_SystemTraceControlGuid
_tan
_toupper
_towlower
_towupper
_ungetc
_vsprintf
_wcstombs
_wctomb
_WmiEventLoggerGuid
__87except
__atan_default
__atoi64
__ceil_default
__ceil_pentium4
__check_overflow_exit
__CIatan_default
__CIcos
__CIlog_default
__CIsin
__CIsqrt
__CItan
__decomp
__d_inttype
__except1
__except_handler3
__fFEXP
__floor_default
__floor_pentium4
__fpclass
__global_unwind2
__handle_exc
__handle_qnan1
__input
__local_unwind2
__log_default
__math_exit
__powhlp
__pow_default
__raise_exc
__raise_exc_ex
__rtnospopde
__rttospopde
__snprintf
__snwprintf
__splitpath
__startOneArgErrorHandling
__umatherr
__vscwprintf
__vsnprintf
__vsnwprintf
__woutput
__wtoi64
__wtol
___iscsym
___iscsymf
___report_gsfailure
___security_init_cookie
___security_init_cookie_ex
There are
31,320
total registered users.
Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM
oleavr
Oct/24
Anatomy of a code tracer
hasherezade
Sep/24
IAT Patcher - new tool for ...
oleavr
Aug/27
CryptoShark: code tracer ba...
oleavr
Jun/25
Build a debugger in 5 minutes
More ...
Recent Blog Comments
nieo
on:
Mar/22
IAT Patcher - new tool for ...
djnemo
on:
Nov/17
Kernel debugger vs user mod...
acel
on:
Nov/14
Kernel debugger vs user mod...
pedram
on:
Dec/21
frida.github.io: scriptable...
capadleman
on:
Jun/19
Using NtCreateThreadEx for ...
More ...
Imagery
SoySauce Blueprint
Jun 6, 2008
[+] expand
View Gallery
(11) /
Submit