Flag: Tornado! Hurricane!

OpenRCE Win32 Call Chains Database

 Windows 2003 SE SP1 >> NTDLL
AcquireBufferLocation AllocateMemoryForThreadLocalData
ARRAY_FITS AVrfDllLoadNotification
AVrfDllUnloadNotification AVrfInitializeVerifier
AVrfInternalHeapFreeNotification AVrfPageHeapDllNotification
AVrfpChainDuplicateVerificationLayers AVrfpDetectVerifiedExports
AVrfpDllLoadNotificationInternal AVrfpDphDetectSnapRoutines
AVrfpDphDllGlobalAlloc AVrfpDphDllGlobalFree
AVrfpDphDllGlobalReAlloc AVrfpDphDllHeapAlloc
AVrfpDphDllHeapCreate AVrfpDphDllHeapReAlloc
AVrfpDphDllLocalAlloc AVrfpDphDllLocalFree
AVrfpDphDllLocalReAlloc AVrfpDphSnapImports
AVrfpDumpProviderList AVrfpEnableHandleVerifier
AVrfpEnableStackVerifier AVrfpEnableVerifierOptions
AVrfpFindClosestThunkDuplicate AVrfpLoadAndInitializeProvider
AVrfpMoveProviderToEndOfInitializationList AVrfpSnapAlreadyLoadedDlls
AVrfpSnapDllImports AVrfpVerifierStopInitialize
CleanOnThreadExit CleanUpAllThreadBuffers
CompareNamesCaseSensitive CsrAllocateCaptureBuffer
CsrCaptureMessageBuffer CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString CsrCaptureMessageUnicodeStringInPlace
CsrCaptureTimeout CsrClientCallServer
CsrClientConnectToServer CsrFreeCaptureBuffer
CsrNewThread CsrOneTimeInitialize
CsrpConnectToServer CsrProbeForRead
CsrProbeForWrite DaysAndFractionToTime
DbgPrompt DbgUiConnectToDbg
DbgUiContinue DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess DbgUiIssueRemoteBreakin
DbgUiStopDebugging DbgUiWaitStateChange
DebugPrint DebugPrompt
DeleteNodeFromTree DumpHeapSnapShot
EnumUILanguageCallback EtwControlTraceA
EtwControlTraceW EtwCreateTraceInstanceId
EtwEnableTrace EtwEnumerateTraceGuids
EtwFlushTraceA EtwFlushTraceW
EtwGetTraceLoggerHandle EtwNotificationRegistrationA
EtwNotificationRegistrationW EtwpAddHandleToEventPump
EtwpAddLogHeaderToLogFile EtwpAddToGNList
EtwpAllocateGuidMaps EtwpAllocateTraceBuffers
EtwpAllocDontFail EtwpBaseFindFirstDevice
EtwpBaseGetNamedObjectDirectory EtwpBasep8BitStringToDynamicUnicodeString
EtwpBasepInitializeFindFileHandle EtwpBuildMofAddRemoveEvent
EtwpBuildReceiveNotification EtwpCancelIo
EtwpCheckForEnoughFreeSpace EtwpCheckGuidAccess
EtwpCloseHandle EtwpCloseNotifyee
EtwpClosePendingHandles EtwpConvertEventToAnsi
EtwpConvertWADToAnsi EtwpCopyCountedString
EtwpCopyMRString EtwpCopyStringToCountedUnicode
EtwpCountedUnicodeToCountedAnsi EtwpCreateEventW
EtwpCreateFileW EtwpCreateHeap
EtwpCreateThread EtwpDeinitializeDll
EtwpDeliverAllEvents EtwpDereferenceGNEntry
EtwpDeviceIoControl EtwpDisableTraceProvider
EtwpDuplicateHandle EtwpEnableDisableGuid
EtwpEnableDisableKernelTrace EtwpEnumRegGuids
EtwpEstablishEventPump EtwpEventPump
EtwpEventPumpFromKernel EtwpExpandEnvironmentStringsW
EtwpExternalNotification EtwpFileExists
EtwpFinalizeLogFileHeader EtwpFindAndLockGuidNotification
EtwpFindClose EtwpFindFirstFileExW
EtwpFindFirstFileW EtwpFixLogFileHeaderForWow64
EtwpFlushAllBuffers EtwpFlushBuffer
EtwpFlushLogger EtwpFlushUmLogger
EtwpFreeLoggerContext EtwpGetDiskFreeSpaceExW
EtwpGetFileAttributesExW EtwpGetFreeBuffer
EtwpGetFullFreeBuffer EtwpGetFullPathNameA
EtwpGetFullPathNameW EtwpGetLanguageList
EtwpGetMofResourceList EtwpGetOverlappedResult
EtwpGetSystemDefaultUILanguage EtwpGetSystemWindowsDirectoryW
EtwpGetTimeZoneInformation EtwpGetTraceBuffer
EtwpInitializeDll EtwpInitLoggerContext
EtwpInternalNotification EtwpLogger
EtwpLogImageLoadEvent EtwpMakeCallbacks
EtwpMakeEventCallbacks EtwpMarkPendingCloseNotifyee
EtwpMemCommit EtwpMemFree
EtwpMemReserve EtwpNlsConvertIntegerToString
EtwpNotificationRegistration EtwpOpenKernelGuid
EtwpProcessEventBuffer EtwpProcessExternalEvent
EtwpProcessLanguageAddRemoveEvent EtwpProcessModuleRunDown
EtwpProcessMofAddRemoveEvent EtwpProcessRunDown
EtwpProcessUMRequest EtwpQueryAllTraces
EtwpQueryAllUmTraceW EtwpQueryUmLogger
EtwpReadFile EtwpReceiveNotifications
EtwpReceiveReply EtwpRegisterGuids
EtwpRegOpenKey EtwpRegQueryValueKey
EtwpReleaseFullBuffer EtwpReleaseTraceBuffer
EtwpRelogEvent EtwpRelogHeaderToLogFile
EtwpRemoveFromGNList EtwpReserveTraceBuffer
EtwpSendUmLogRequest EtwpSendWmiKMRequest
EtwpSetDosError EtwpSetEvent
EtwpSetFilePointer EtwpSetThreadPriority
EtwpSleep EtwpSleepEx
EtwpStartLogger EtwpStartUmLogger
EtwpStopLogger EtwpStopLoggerInstance
EtwpStopUmLogger EtwpSwitchBuffer
EtwpSwitchFullBuffer EtwpSysModuleRunDown
EtwpThreadRunDown EtwpTlsAlloc
EtwpTlsFree EtwpTlsGetValue
EtwpTlsSetValue EtwpTraceEvent
EtwpTraceMessage EtwpTraceUmEvent
EtwpTraceUmMessage EtwpUnicodeToAnsi
EtwpUpdateUmLogger EtwpUuidCreateSequential
EtwpUuidGetValues EtwpWaitForMultipleObjectsEx
EtwpWaitForSingleObject EtwpWaitForSingleObjectEx
EtwQueryAllTracesA EtwQueryAllTracesW
EtwQueryTraceA EtwQueryTraceW
EtwReceiveNotificationsA EtwReceiveNotificationsW
EtwRegisterTraceGuidsA EtwRegisterTraceGuidsW
EtwStartTraceW EtwStopTraceA
EtwStopTraceW EtwTraceEvent
EtwTraceEventInstance EtwTraceMessageVa
EtwUnregisterTraceGuids EtwUpdateTraceA
EtwUpdateTraceW GetLoggerInfo
GetNextWchar GetPidInfo
ImportTablepFreeFunctionSorted ImportTablepFreeModuleSorted
ImportTablepHashCanonicalLists ImportTablepInsertModuleSorted
InitializeAndRegisterNtdllTraceEvents InitializeEtwHandles
InitSecurityCookie KiRaiseUserExceptionDispatcher
KiUserApcDispatcher KiUserApcExceptionHandler
KiUserCallbackDispatcher KiUserCallbackExceptionHandler
KiUserExceptionDispatcher LdrAccessOutOfProcessResource
LdrAccessResource LdrAddRefDll
LdrCreateOutOfProcessImage LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll LdrEnumerateLoadedModules
LdrEnumResources LdrFindCreateProcessManifest
LdrFindEntryForAddress LdrFindResourceDirectory_U
LdrFindResourceEx_U LdrFindResource_U
LdrFlushAlternateResourceModules LdrGetDllHandle
LdrGetDllHandleEx LdrGetModuleName
LdrGetProcedureAddress LdrInitShimEngineDynamic
LdrLoadAlternateResourceModule LdrLoadDll
LdrLockLoaderLock LdrOpenImageFileOptionsKey
LdrpAccessResourceData LdrpAccessResourceDataNoMultipleLanguage
LdrpAllocateUnicodeString LdrpApplyHotPatch
LdrpCalcResourceChecksum LdrpCallTlsInitializers
LdrpCheckAppDatabase LdrpCheckCorImage
LdrpCheckForKnownDll LdrpCheckForLoadedDll
LdrpCheckForSafeDiscImage LdrpCheckForSecuROMImage
LdrpCheckNXCompatibility LdrpCheckNxIncompatibleDllSection
LdrpCheckSafeDiscDll LdrpCodeAuthzCheckDllAllowed
LdrpCompareResourceChecksum LdrpCopyUnicodeString
LdrpCorUnloadImage LdrpCorValidateImage
LdrpCreateKey LdrpDefineDllTag
LdrpFetchAddressOfSecurityCookie LdrpFinalizeAndDeallocateDataTableEntry
LdrpFixSectionProtection LdrpForkProcess
LdrpGenericExceptionFilter LdrpGetAlternateResourceModuleHandle
LdrpGetFileVersion LdrpGetProcedureAddress
LdrpGetRegValueKey LdrpGetResourceChecksum
LdrpGetShimEngineInterface LdrpHandleNewFormatImportDescriptors
LdrpHandleOldFormatImportDescriptors LdrpHandleOneNewFormatImportDescriptor
LdrpHandleOneOldFormatImportDescriptor LdrpInitializationFailure
LdrpInitializeApplicationVerifierPackage LdrpInitializeExecutionOptions
LdrpInitializeProcessWrapperFilter LdrpInitializeThread
LdrpInitializeTls LdrpInitSecurityCookie
LdrpLoadDll LdrpLoadImportModule
LdrpLoadShimEngine LdrpMapDll
LdrpMungHeapImportsForTagging LdrpOpenFileVersionKey
LdrpOpenKey LdrpProcessImageProtectionParameter
LdrpQueryDllExecuteOptions LdrpRecordUnloadEvent
LdrpResolveFullName LdrProcessRelocationBlock
LdrpRundownHotpatchList LdrpRunInitializeRoutines
LdrpRunShimEngineInitRoutine LdrpSearchPath
LdrpSearchResourceSection_U LdrpSetAlternateResourceModuleHandle
LdrpSetHotpatchProtection LdrpSetProtection
LdrpSetupHotpatch LdrpSnapIAT
LdrpSnapThunk LdrpTagAllocateHeap
LdrpTagAllocateHeap0 LdrpTagAllocateHeap1
LdrpTagAllocateHeap10 LdrpTagAllocateHeap11
LdrpTagAllocateHeap12 LdrpTagAllocateHeap13
LdrpTagAllocateHeap14 LdrpTagAllocateHeap15
LdrpTagAllocateHeap16 LdrpTagAllocateHeap17
LdrpTagAllocateHeap18 LdrpTagAllocateHeap19
LdrpTagAllocateHeap2 LdrpTagAllocateHeap20
LdrpTagAllocateHeap21 LdrpTagAllocateHeap22
LdrpTagAllocateHeap23 LdrpTagAllocateHeap24
LdrpTagAllocateHeap25 LdrpTagAllocateHeap26
LdrpTagAllocateHeap27 LdrpTagAllocateHeap28
LdrpTagAllocateHeap29 LdrpTagAllocateHeap3
LdrpTagAllocateHeap30 LdrpTagAllocateHeap31
LdrpTagAllocateHeap32 LdrpTagAllocateHeap33
LdrpTagAllocateHeap34 LdrpTagAllocateHeap35
LdrpTagAllocateHeap36 LdrpTagAllocateHeap37
LdrpTagAllocateHeap38 LdrpTagAllocateHeap39
LdrpTagAllocateHeap4 LdrpTagAllocateHeap40
LdrpTagAllocateHeap41 LdrpTagAllocateHeap42
LdrpTagAllocateHeap43 LdrpTagAllocateHeap44
LdrpTagAllocateHeap45 LdrpTagAllocateHeap46
LdrpTagAllocateHeap47 LdrpTagAllocateHeap48
LdrpTagAllocateHeap49 LdrpTagAllocateHeap5
LdrpTagAllocateHeap50 LdrpTagAllocateHeap51
LdrpTagAllocateHeap52 LdrpTagAllocateHeap53
LdrpTagAllocateHeap54 LdrpTagAllocateHeap55
LdrpTagAllocateHeap56 LdrpTagAllocateHeap57
LdrpTagAllocateHeap58 LdrpTagAllocateHeap59
LdrpTagAllocateHeap6 LdrpTagAllocateHeap60
LdrpTagAllocateHeap61 LdrpTagAllocateHeap62
LdrpTagAllocateHeap63 LdrpTagAllocateHeap7
LdrpTagAllocateHeap8 LdrpTagAllocateHeap9
LdrpTouchThreadStack LdrpUnloadShimEngine
LdrpUpdateLoadCount2 LdrpUpdateLoadCount3
LdrpValidateImageForMp LdrpVerifyAlternateResourceModule
LdrpWalkImportDescriptor LdrQueryApplicationCompatibilityGoo
LdrQueryImageFileExecutionOptions LdrQueryImageFileExecutionOptionsEx
LdrQueryImageFileKeyOption LdrQueryModuleInfoFromLdrEntry
LdrQueryModuleInfoLocalLoaderLock LdrQueryNextListEntry
LdrQueryProcessModuleInformation LdrQueryProcessModuleInformationEx
LdrReadMemory LdrRelocateImage
LdrRelocateImageWithBias LdrSetAppCompatDllRedirectionCallback
LdrShutdownProcess LdrShutdownThread
LdrUnloadAlternateResourceModule LdrUnloadDll
LdrUnlockLoaderLock LdrVerifyImageMatchesChecksum
LdrVerifyMappedImageMatchesChecksum MD5Final
MD5Update NtdllCtrlCallback
PfxFindPrefix PfxInsertPrefix
PfxRemovePrefix PropertyLengthAsVariant
RaiseException RebalanceNode
RegisterNtdllTraceEvents ReserveBufferSpace
RtlAbortRXact RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock RtlAcquirePrivilege
RtlActivateActivationContext RtlActivateActivationContextEx
RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce
RtlAddAce RtlAddActionToRXact
RtlAddAtomToAtomTable RtlAddAttributeActionToRXact
RtlAddAuditAccessAce RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce RtlAddCompoundAce
RtlAddressInSectionTable RtlAddVectoredContinueHandler
RtlAddVectoredExceptionHandler RtlAdjustPrivilege
RtlAllocateActivationContextStack RtlAllocateAndInitializeSid
RtlAllocateHandle RtlAllocateHeap
RtlAllocateHeapSlowly RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeString RtlAppendAsciizToString
RtlAppendPathElement RtlAppendStringToString
RtlAppendUnicodeStringToString RtlAppendUnicodeToString
RtlApplyRXact RtlApplyRXactNoFlush
RtlAssert RtlCallKernel32UnhandledExceptionFilter
RtlCallVectoredContinueHandlers RtlCallVectoredExceptionHandlers
RtlCancelTimer RtlCaptureStackBackTrace
RtlCaptureStackContext RtlCharToInteger
RtlCheckForOrphanedCriticalSections RtlCheckRegistryKey
RtlCompactHeap RtlCompareString
RtlCompressBuffer RtlCompressBufferLZNT1
RtlComputeImportTableHash RtlComputePrivatizedDllName_U
RtlConvertPropertyToVariant RtlConvertSidToUnicodeString
RtlConvertUiListToApiList RtlConvertVariantToProperty
RtlCopyMappedMemory RtlCopySecurityDescriptor
RtlCopySid RtlCopySidAndAttributesArray
RtlCreateActivationContext RtlCreateAndSetSD
RtlCreateAtomTable RtlCreateBootStatusDataFile
RtlCreateEnvironment RtlCreateHeap
RtlCreateHotPatch RtlCreateProcessParameters
RtlCreateQueryDebugBuffer RtlCreateRegistryKey
RtlCreateSystemVolumeInformationFolder RtlCreateTagHeap
RtlCreateTimer RtlCreateTimerQueue
RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess RtlCreateUserSecurityObject
RtlCreateUserThread RtlCutoverTimeToSystemTime
RtlDeactivateActivationContext RtlDebugAllocateHeap
RtlDebugCompactHeap RtlDebugCreateHeap
RtlDebugCreateTagHeap RtlDebugDestroyHeap
RtlDebugFreeHeap RtlDebugGetUserInfoHeap
RtlDebugQueryTagHeap RtlDebugReAllocateHeap
RtlDebugSetUserFlagsHeap RtlDebugSetUserValueHeap
RtlDebugSizeHeap RtlDebugUsageHeap
RtlDebugWalkHeap RtlDebugZeroHeap
RtlDecompressBuffer RtlDecompressBufferLZNT1
RtlDecompressFragment RtlDecompressFragmentLZNT1
RtlDefaultNpAcl RtlDeleteAce
RtlDeleteAtomFromAtomTable RtlDeleteCriticalSection
RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay RtlDeleteRegistryValue
RtlDeleteResource RtlDeleteSecurityObject
RtlDeleteTimer RtlDeleteTimerQueue
RtlDeleteTimerQueueEx RtlDeregisterWait
RtlDeregisterWaitEx RtlDestroyAtomTable
RtlDestroyEnvironment RtlDestroyHeap
RtlDestroyProcessParameters RtlDestroyQueryDebugBuffer
RtlDispatchException RtlDnsHostNameToComputerName
RtlDoesFileExists_U RtlDoesFileExists_UEx
RtlDoesFileExists_UStr RtlDoesFileExists_UstrEx
RtlDosApplyFileIsolationRedirection_Ustr RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_U_WithStatus RtlDosPathNameToRelativeNtPathName_U
RtlDosPathNameToRelativeNtPathName_Ustr RtlDosPathNameToRelativeNtPathName_U_WithStatus
RtlDosSearchPath_U RtlDosSearchPath_Ustr
RtlDumpResource RtlDuplicateUnicodeString
RtlEmptyAtomTable RtlEncodePointer
RtlEnumerateGenericTable RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory RtlEnumProcessHeaps
RtlEqualDomainName RtlExitUserThread
RtlExpandEnvironmentStrings_U RtlExtendedLargeIntegerDivide
RtlExtendHeap RtlFinalReleaseOutOfProcessMemoryStream
RtlFindActivationContextSectionGuid RtlFindActivationContextSectionString
RtlFindCharInUnicodeString RtlFindClearBitsAndSet
RtlFindLeastSignificantBit RtlFindLongestRunClear
RtlFindMessage RtlFindMostSignificantBit
RtlFindNextActivationContextSection RtlFindSetBitsAndClear
RtlFlushSecureMemoryCache RtlFormatCurrentUserKeyPath
RtlFormatMessage RtlFormatMessageEx
RtlFreeActivationContextStack RtlFreeHeap
RtlFreeHeapSlowly RtlFreeHotPatchData
RtlFreeOemString RtlFreeSid
RtlFreeThreadActivationContextStack RtlFreeUserThreadStack
RtlGenerate8dot3Name RtlGetAssemblyStorageRoot
RtlGetCallersAddress RtlGetCompressionWorkSpaceSize
RtlGetCurrentDirectory_U RtlGetElementGenericTableAvl
RtlGetFullPathName_U RtlGetFullPathName_Ustr
RtlGetFullPathName_UstrEx RtlGetHotpatchHeader
RtlGetLengthWithoutLastFullDosOrNtPathElement RtlGetProcessHeaps
RtlGetSetBootStatusData RtlGetUserInfoHeap
RtlGetVersion RtlGUIDFromString
RtlImageDirectoryEntryToData RtlImageNtHeader
RtlImageNtHeaderEx RtlImageRvaToVa
RtlImpersonateSelf RtlInitializeContext
RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount
RtlInitializeHeapManager RtlInitializeHotPatch
RtlInitializeResource RtlInitializeRXact
RtlInitializeStackTraceDataBase RtlInitNlsTables
RtlInitUnicodeStringEx RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl RtlInt64ToUnicodeString
RtlIntegerToChar RtlIntegerToUnicode
RtlIntegerToUnicodeString RtlInterlockedFlushSList
RtlInterlockedPopEntrySList RtlInterlockedPushEntrySList
RtlInvalidHandlerDetected RtlIpv4AddressToStringA
RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW
RtlIpv4AddressToStringW RtlIpv4StringToAddressA
RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW
RtlIpv4StringToAddressW RtlIpv6AddressToStringA
RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW
RtlIpv6AddressToStringW RtlIpv6StringToAddressA
RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW
RtlIpv6StringToAddressW RtlIsDosDeviceName_U
RtlIsDosDeviceName_Ustr RtlIsNameLegalDOS8Dot3
RtlIsValidHandler RtlIsValidIndexHandle
RtlLargeIntegerDivide RtlLargeIntegerToChar
RtlLargeIntegerToUnicode RtlLengthSidAsUnicodeString
RtlLocalTimeToSystemTime RtlLockBootStatusData
RtlLockHeap RtlLogStackBackTrace
RtlLookupAtomInAtomTable RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl RtlLookupFunctionTable
RtlMakeSelfRelativeSD RtlMultiAppendUnicodeStringBuffer
RtlMultipleAllocateHeap RtlMultipleFreeHeap
RtlNewInstanceSecurityObject RtlNewSecurityGrantedAccess
RtlNewSecurityObject RtlNewSecurityObjectEx
RtlNtPathNameToDosPathName RtlNtStatusToDosError
RtlNumberOfClearBits RtlOemStringToUnicodeString
RtlOpenCurrentUser RtlpAcquireHeapListLock
RtlpAcquireStackTraceDataBase RtlpAcquireWorker
RtlpActivateLowFragmentationHeap RtlpAddHeapToProcessList
RtlpAddKnownAce RtlpAddKnownObjectAce
RtlpAddTimer RtlpAddVectoredHandler
RtlpAddWait RtlpAdjustHeapLookasideDepth
RtlpAllocateActivationContextStackFrame RtlpAllocateAffinityIndex
RtlpAllocateAtom RtlpAllocateFromHeapLookaside
RtlpAllocateHeapUsageEntry RtlpAllocateHotpatchMemory
RtlpAllocateTags RtlpAllocateUserBlock
RtlpAllocDeallocQueryBuffer RtlpApcCallout
RtlpApplyAclToObject RtlpApplyRelocationFixups
RtlpAssemblyStorageMapResolutionDefaultCallback RtlpAsyncTimerCallbackCompletion
RtlpAsyncWaitCallbackCompletion RtlpAtomMapAtomToHandleEntry
RtlpBreakPointHeap RtlpCancelTimer
RtlpCancelTimerEx RtlpCaptureStackTraceForLogging
RtlpChangeQueryDebugBufferTarget RtlpCheckDeviceName
RtlpCheckRelativeDrive RtlpCoalesceFreeBlocks
RtlpCommitQueryDebugInfo RtlpCompareAces
RtlpCompareKnownObjectAces RtlpComputeBackupIndex
RtlpComputeMergedAcl RtlpComputeMergedAcl2
RtlpConvertAclToAutoInherit RtlpConvertToAutoInheritSecurityObject
RtlpCopyAces RtlpCopyAndNormalizePeHeaderForHash
RtlpCopyEffectiveAce RtlpCopyMappedMemoryEx
RtlpCreateCriticalSectionSem RtlpCreateHandleForAtom
RtlpCreateLowFragHeap RtlpCreateServerAcl
RtlpCreateStack RtlPcToFileHeader
RtlpDeactivateTimer RtlpDeactivateWait
RtlpDeactivateWaitWithIndex RtlpDebugPageHeapAllocate
RtlpDebugPageHeapCompact RtlpDebugPageHeapCreate
RtlpDebugPageHeapDestroy RtlpDebugPageHeapFree
RtlpDebugPageHeapGetProcessHeaps RtlpDebugPageHeapGetUserInfo
RtlpDebugPageHeapIsLocked RtlpDebugPageHeapLock
RtlpDebugPageHeapReAllocate RtlpDebugPageHeapSerialize
RtlpDebugPageHeapSetUserFlags RtlpDebugPageHeapSetUserValue
RtlpDebugPageHeapSize RtlpDebugPageHeapUnlock
RtlpDebugPageHeapUsage RtlpDebugPageHeapValidate
RtlpDeCommitFreeBlock RtlpDeleteTimer
RtlpDeleteTimerQueue RtlpDeleteTimerQueueComplete
RtlpDeleteWait RtlpDeregisterWait
RtlpDestroyHandleTableForAtomTable RtlpDestroyHeapSegment
RtlpDestroyLockAtomTable RtlpDestroyLowFragHeap
RtlpDosPathNameToRelativeNtPathName_U RtlpDosPathNameToRelativeNtPathName_Ustr
RtlpDphAddNewPool RtlpDphAddToDelayedFreeQueue
RtlpDphAllocateNode RtlpDphAllocateVm
RtlpDphCheckFillPattern RtlpDphCoalesceFreeIntoAvailable
RtlpDphCoalesceNodeIntoAvailable RtlpDphEnterCriticalSection
RtlpDphFindAvailableMemory RtlpDphFindBusyMemory
RtlpDphFreeDelayedBlocksFromHeap RtlpDphGetBlockSizeFromCorruptedBlock
RtlpDphGrowVirtual RtlpDphInitializeDelayedFreeQueue
RtlpDphInternalValidatePageHeap RtlpDphIsDllTargeted
RtlpDphIsNormalFreeHeapBlock RtlpDphIsNormalHeapBlock
RtlpDphIsPageHeapBlock RtlpDphLeaveCriticalSection
RtlpDphLogStackTrace RtlpDphNormalHeapAllocate
RtlpDphNormalHeapFree RtlpDphNormalHeapGetUserInfo
RtlpDphNormalHeapReAllocate RtlpDphNormalHeapSetUserFlags
RtlpDphNormalHeapSetUserValue RtlpDphNormalHeapSize
RtlpDphNormalHeapValidate RtlpDphPlaceOnBusyList
RtlpDphPointerFromHandle RtlpDphPostProcessing
RtlpDphPreProcessing RtlpDphProcessStartupInitialization
RtlpDphProtectVm RtlpDphRaiseException
RtlpDphRemoveFromBusyList RtlpDphReportCorruptedBlock
RtlpDphSearchBlockInTree RtlpDphSetProtectionsAfterUse
RtlpDphSetProtectionsBeforeUse RtlpDphShouldAllocateInPageHeap
RtlpDphShouldFaultInject RtlpDphTargetDllsLogicInitialize
RtlpDphUnexpectedExceptionFilter RtlpDphValidateInternalLists
RtlpDphVerifyIntegrity RtlpDphVerifyList
RtlpDphVerifyList2 RtlpDphVerifyTree
RtlpDphVmLimitCanUsePageHeap RtlpDphWriteNormalHeapBlockInformation
RtlpDphWritePageHeapBlockInformation RtlpDumpEntryFlagDescription
RtlpDumpEntryHeader RtlpDumpEntryInfo
RtlpEnsureBufferSize RtlpEnsureLiveDeadListsInitialized
RtlpExecuteIOWorkItem RtlpExecuteLongIOWorkItem
RtlpExecuteWorkerRequest RtlpExitThread
RtlpExtendHeap RtlpExtendStackTraceDataBase
RtlpFindActivationContextSection_FillOutReturnedData RtlpFindAndCommitPages
RtlpFindEntry RtlpFindFirstActivationContextSection
RtlpFindGuidInSection RtlpFindNextActivationContextSection
RtlpFindSectionHeader RtlpFindUnicodeStringInSection
RtlpFindWaitThread RtlpFireTimers
RtlpFireTimersAndReorder RtlpFlushLargestCacheBlock
RtlpFreeActivationContext RtlpFreeActivationContextStackFrame
RtlpFreeAtom RtlpFreeDebugInfo
RtlpFreeHandleForAtom RtlpFreeStack
RtlpFreeToHeapLookaside RtlpFreeUserBlock
RtlpFreeWaitEvent RtlpGenerateInheritAcl
RtlpGenerateInheritedAce RtlpGetActivationContextDataStorageMapAndRosterHeader
RtlpGetAssemblyStorageMapRootLocation RtlpGetColdpatchDebugSignature
RtlpGetDefaultsSubjectContext RtlpGetHeapBlock
RtlpGetLengthWithoutLastPathElement RtlpGetRegistryHandle
RtlpGetTagName RtlpGetTimeRemaining
RtlpGetTimeZoneInfoHandle RtlpGetWaitEvent
RtlpHashStringToAtom RtlpHeapReportCorruption
RtlpImageDirectoryEntryToData64 RtlpImageNtHeader
RtlpImpersonateSelfEx RtlPinAtomInAtomTable
RtlpInheritAcl RtlpInheritAcl2
RtlpInitDeferredCriticalSection RtlpInitializeAllowedAce
RtlpInitializeAuditAce RtlpInitializeDeniedAce
RtlpInitializeHandleTableForAtomTable RtlpInitializeHeapSegment
RtlpInitializeLeakDetection RtlpInitializeListIndex
RtlpInitializeLockAtomTable RtlpInitializeLowFragHeapManager
RtlpInitializeTimerThreadPool RtlpInitializeWaitThreadPool
RtlpInitializeWorkerThreadPool RtlpInsertFreeBlock
RtlpInsertTimersIntoDeltaList RtlpInsertUnCommittedPages
RtlpIOWorkerThread RtlpIsDuplicateAce
RtlpIsLFHZoneAllocation RtlpIsSameImage
RtlpLocateActivationContextSection RtlpLocateActivationContextSectionForQuery
RtlpLockAtomTable RtlpLogCapturedStackTrace
RtlpLowFragHeapAlloc RtlpLowFragHeapFree
RtlpLowFragHeapMultipleAlloc RtlpLowFragHeapMultipleFree
RtlpMoveActCtxToFreeList RtlpNewSecurityObject
RtlpNtCreateKey RtlpNtEnumerateSubKey
RtlpNtOpenKey RtlpNtQueryValueKey
RtlpNtSetValueKey RtlpOpenImageFile
RtlpOpenThreadToken RtlpPageHeapStop
RtlpPlaceActivationContextOnLiveList RtlpPossibleDeadlock
RtlpProbeAssemblyStorageRootForAssembly RtlpProcessTimeouts
RtlpProcessWaitCompletion RtlpPushPageDescriptor
RtlpQueryAssemblyInformationActivationContextDetailedInformation RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation
RtlpQueryInformationActivationContextBasicInformation RtlpQueryInformationActivationContextDetailedInformation
RtlpQueryProcessDebugInformationRemote RtlpQueryProcessEnumHeapsRoutine
RtlpQueryRegistryDirect RtlpQueueIOWorkerRequest
RtlpQueueWorkerRequest RtlpReadHeapData
RtlpReadProcessHeaps RtlpReadSingleHookInformation
RtlpRegisterHeapBlocks RtlpReleaseHeapListLock
RtlpReleaseStackTraceDataBase RtlpRemoveHeapFromProcessList
RtlpRemoveVectoredHandler RtlpReOrderDeltaList
RtlpResetDriveEnvironment RtlpResetTimer
RtlpResolveAssemblyStorageMapEntry RtlpRestartImpersonation
RtlpResync64BitTickCount RtlProtectHeap
RtlpScanHeapAllocBlocks RtlpScanProcessVirtualMemory
RtlpSearchValidationCode RtlpSecMemFreeVirtualMemory
RtlpSerializeHeap RtlpServiceTimer
RtlpSetBlockInfo RtlpSetSecurityObject
RtlpSingleRangeValidate RtlpStartIOWorkerThread
RtlpStartThread RtlpStartThreadpoolThread
RtlpStartWaitThread RtlpStartWorkerThread
RtlpSubSegmentAllocateAll RtlpSubSegmentFreeAll
RtlpSubSegmentInitialize RtlpSysVolAllocate
RtlpSysVolCheckOwnerAndSecurity RtlpSysVolCreateSecurityDescriptor
RtlpSysVolTakeOwnership RtlpThreadPoolGetActiveActivationContext
RtlpTimerThread RtlpTraceDatabaseAcquireLock
RtlpTraceDatabaseAllocate RtlpTraceDatabaseFree
RtlpTraceDatabaseInitializeLock RtlpTraceDatabaseInternalAdd
RtlpTraceDatabaseReleaseLock RtlpTraceDatabaseUninitializeLock
RtlpUnlockAtomTable RtlpUnWaitCriticalSection
RtlpUpdateTimer RtlpValidateCurrentDirectory
RtlpValidateHeap RtlpValidateHeapHeaders
RtlpValidateHeapSegment RtlpValidatePeChecksum
RtlpValidatePeHeaderHash2 RtlpValidateTargetModule
RtlpValidateTargetRanges RtlpValidOwnerSubjectContext
RtlpVerCompare RtlpVerGetConditionMask
RtlpWaitForEvent RtlpWaitOnCriticalSection
RtlpWaitOrTimerCallout RtlpWaitThread
RtlpWalkFrameChainFuzzy RtlpWalkLFHBlock
RtlpWin32NTNameToNtPathName_U RtlpWorkerCallout
RtlpWorkerThread RtlpWorkerThreadCancelTimer
RtlpWorkerThreadSetTimer RtlpWorkerThreadTimerCallback
RtlQueryAtomInAtomTable RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl RtlQueryInformationActivationContext
RtlQueryInformationActiveActivationContext RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation RtlQueryProcessModuleInformation
RtlQueryRegistryValues RtlQuerySecurityObject
RtlQueryTagHeap RtlQueryTimeZoneInformation
RtlQueueWorkItem RtlRaiseException
RtlRaiseStatus RtlReadHookInformation
RtlReadMemoryStream RtlReadOutOfProcessMemoryStream
RtlReadSingleHookValidation RtlReAllocateHeap
RtlRegisterSecureMemoryCacheCallback RtlRegisterWait
RtlReleasePebLock RtlReleasePrivilege
RtlReleaseResource RtlRemoteCall
RtlRemoveVectoredContinueHandler RtlRemoveVectoredExceptionHandler
RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD RtlSelfRelativeToAbsoluteSD2
RtlSetAllBits RtlSetAttributesSecurityDescriptor
RtlSetCurrentDirectory_U RtlSetCurrentEnvironment
RtlSetEnvironmentStrings RtlSetEnvironmentVariable
RtlSetHeapInformation RtlSetIoCompletionCallback
RtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlSetSecurityObject
RtlSetSecurityObjectEx RtlSetTimeZoneInformation
RtlSetUnhandledExceptionFilter RtlSetUserFlagsHeap
RtlSetUserValueHeap RtlStartRXact
RtlStringCbCopyExW RtlStringFromGUID
RtlSystemTimeToLocalTime RtlTimeFieldsToTime
RtlTimeToSecondsSince1970 RtlTimeToTimeFields
RtlTraceDatabaseAdd RtlTraceDatabaseCreate
RtlTraceDatabaseDestroy RtlTraceDatabaseEnumerate
RtlTraceDatabaseFind RtlTraceDatabaseValidate
RtlUnhandledExceptionFilter RtlUnhandledExceptionFilter2
RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger RtlUnicodeStringToOemString
RtlUnlockBootStatusData RtlUnlockHeap
RtlUnwind RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString
RtlUpdateTimer RtlUpperChar
RtlUpperString RtlUsageHeap
RtlValidAcl RtlValidateHeap
RtlValidateProcessHeaps RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor RtlValidSid
RtlVerifyVersionInfo RtlWalkFrameChain
RtlWalkHeap RtlWriteRegistryValue
RtlxOemStringToUnicodeSize RtlxUnicodeStringToOemSize
RtlZeroHeap RXactpCommit
RXactpOpenTargetKey ShutDownEtwHandles
StringCatWorkerW StringCbCopyW
StringVPrintfWorkerW tolower
vDbgPrintEx vDbgPrintExWithPrefix
vDbgPrintExWithPrefixInternal WmiUnregisterGuids
_AVrfpDphDllcalloc _AVrfpDphDllfree
_AVrfpDphDllNewArray _AVrfpDphDllrealloc
_cos _DbgPrint
_DbgPrintEx _DbgPrintReturnControlC
_EtwTraceMessage _fabs
_GUID_MOF_RESOURCE_ADDED_NOTIFICATION _GUID_MOF_RESOURCE_REMOVED_NOTIFICATION
_isalnum _isalpha
_iscntrl _isgraph
_islower _isprint
_ispunct _isspace
_isupper _iswalpha
_iswdigit _iswlower
_iswspace _iswxdigit
_isxdigit _LdrpDllTagProcedures
_LdrpInitialize _Magic10000000
_mbstowcs _mbtowc
_MscoreeDllString _RtlpDosCOMDevice
_seh_longjmp_unwind _sin
_sprintf _sqrt
_sscanf _StringCbPrintfW
_StringCchPrintfW _swprintf
_SystemTraceControlGuid _tan
_toupper _towlower
_towupper _ungetc
_vsprintf _wcstombs
_wctomb _WmiEventLoggerGuid
__87except __atan_default
__atoi64 __ceil_default
__ceil_pentium4 __check_overflow_exit
__CIatan_default __CIcos
__CIlog_default __CIsin
__CIsqrt __CItan
__decomp __d_inttype
__except1 __except_handler3
__fFEXP __floor_default
__floor_pentium4 __fpclass
__global_unwind2 __handle_exc
__handle_qnan1 __input
__local_unwind2 __log_default
__math_exit __powhlp
__pow_default __raise_exc
__raise_exc_ex __rtnospopde
__rttospopde __snprintf
__snwprintf __splitpath
__startOneArgErrorHandling __umatherr
__vscwprintf __vsnprintf
__vsnwprintf __woutput
__wtoi64 __wtol
___iscsym ___iscsymf
___report_gsfailure ___security_init_cookie
___security_init_cookie_ex  

There are 31,320 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit