Flag: Tornado! Hurricane!

OpenRCE Win32 Call Chains Database

 Windows XP SP1 >> ADVAPI32
AbortShutdownCallback AbortSystemShutdownA
AbortSystemShutdownW AccessCheck
AccessCheckAndAuditAlarmA AccessCheckAndAuditAlarmW
AccessCheckByType AccessCheckByTypeAndAuditAlarmA
AccessCheckByTypeAndAuditAlarmW AccessCheckByTypeResultList
AccessCheckByTypeResultListAndAuditAlarmA AccessCheckByTypeResultListAndAuditAlarmByHandleA
AccessCheckByTypeResultListAndAuditAlarmByHandleW AccessCheckByTypeResultListAndAuditAlarmW
AccProvpAllocateProviderList AccProvpGetProviderCapabilities
AccProvpGetProviderForHandle AccProvpGetProviderForPath
AccProvpGetStringFromRegistry AccProvpInitProviders
AccProvpLoadDllEntryPoints AccProvpLoadProviderDef
AccProvpProbeProviderForObject AddAccessAllowedAce
AddAccessAllowedAceEx AddAccessAllowedObjectAce
AddAccessDeniedAce AddAccessDeniedAceEx
AddAccessDeniedObjectAce AddAce
AddAuditAccessAce AddAuditAccessAceEx
AddAuditAccessObjectAce AddDataToGroup
AddTagToGroup AddUsersToEncryptedFile
AdjustTokenGroups AdjustTokenPrivileges
AdvApi_InitializeTermsrvFpns AllocAndInsertCNode
AllocateAndInitializeExtObject AllocateAndInitializeSid
AllocateLocallyUniqueId AnsiSizeForUnicodeString
AnsiToUnicode AppmgmtGetUserSid
AppmgmtInitialize AreAllAccessesGranted
AreAnyAccessesGranted ARPRemoveApp
A_SHAFinal A_SHAFinalNS
A_SHAUpdateNS BackupEventLogA
BackupEventLogW BaseAbortShutdown
BaseAbortSystemShutdown BaseBindToMachine
BaseBindToMachineShutdownInterface BaseInitiateShutdown
BaseInitiateShutdownEx BaseInitiateSystemShutdown
BaseInitiateSystemShutdownEx BaseRegCchSpecialKeyLen
BaseRegCloseKey BaseRegCloseKeyInternal
BaseRegConstructUserClassPrefix BaseRegCreateKey
BaseRegCreateMultipartKey BaseRegDeleteKey
BaseRegDeleteValue BaseRegEnumKey
BaseRegEnumValue BaseRegFlushKey
BaseRegGetBestAncestor BaseRegGetClassKeyValueState
BaseRegGetKeySecurity BaseRegGetKeySemantics
BaseRegGetUserAndMachineClass BaseRegGetUserPrefixLength
BaseRegGetVersion BaseRegLoadKey
BaseRegMapClassOnAccessDenied BaseRegMapClassRegistrationKey
BaseRegNotifyClassKey BaseRegOpenClassKey
BaseRegOpenClassKeyFromLocation BaseRegOpenClassKeyRoot
BaseRegOpenKey BaseRegQueryAndMergeValues
BaseRegQueryInfoKey BaseRegQueryMultipleClassKeyValues
BaseRegQueryMultipleValues BaseRegQueryValue
BaseRegReplaceKey BaseRegRestoreKey
BaseRegSaveKey BaseRegSaveKeyEx
BaseRegSetKeySecurity BaseRegSetValue
BaseRegTranslateToMachineClassKey BaseRegTranslateToUserClassKey
BaseRegUnLoadKey BaseSetLastNTError
BenalohMod BenalohModExp
BenalohSetup Bind
BSafeEncPublic BuildExplicitAccessWithNameA
BuildImpersonateExplicitAccessWithNameA BuildSecurityDescriptorA
BuildSecurityDescriptorW BuildVHash
BuildVKey CancelOverlappedAccess
CEvents::ZAPInstall CEventsBase::Install
CEventsBase::Report CEventsBase::Uninstall
ChangeServiceConfig2A ChangeServiceConfig2W
ChangeServiceConfigA ChangeServiceConfigW
CheckAllSignatures CheckSignature
CheckSignatureInFile CheckTokenMembership
ClassKeyCountSubKeys CleanupClassesEnumTable
CleanupConvertNode CleanupPredefinedHandles
CleanupPredefinedHandlesTable ClearEventLogA
ClearEventLogW CLoadMsi::CLoadMsi
CLoadMsi::~CLoadMsi CloseEventLog
CloseExtObjectLibrary ClosePredefinedHandle
CloseServiceHandle CloseTrace
CodeAuthzCloseLevelHandle CodeAuthzCreateLevelHandle
CodeAuthzDeinitializeGlobals CodeAuthzGuidIdentsEntireTableFree
CodeAuthzGuidIdentsInitializeTable CodeAuthzGuidIdentsLoadTableAll
CodeAuthzHandleToLevelStruct CodeAuthzIdentsLookupByGuid
CodeAuthzInitialize CodeAuthzInitializeGlobals
CodeAuthzIsExecutableFileType CodeAuthzLevelObjpEntireTableFree
CodeAuthzLevelObjpInitializeTable CodeAuthzLevelObjpLoadTable
CodeAuthzLevelObjpLookupByLevelId CodeAuthzpCompareImagePath
CodeAuthzpCompareUnicodeImagePath CodeAuthzpCompareWildcardSidWithSid
CodeAuthzpComputeImageHash CodeAuthzpConvertWildcardStringSidToSidW
CodeAuthzpCreateLevelHandleFromRecord CodeAuthzpDeleteKeyRecursively
CodeAuthzpExpandWildcardList CodeAuthzpFormatIdentityKeyPath
CodeAuthzpFormatLevelKeyPath CodeAuthzpGetInformationCodeAuthzPolicy
CodeAuthzpGetTokenInformation CodeAuthzpImmediateReloadCacheTables
CodeAuthzpInvertAndAddSids CodeAuthzpInvertPrivs
CodeAuthzpModifyTokenOwner CodeAuthzpModifyTokenPermissions
CodeAuthzPol_GetInfoCached_DefaultLevel CodeAuthzPol_GetInfoCached_HonorUserIdentities
CodeAuthzPol_GetInfoCached_LevelListRaw CodeAuthzPol_GetInfoRegistry_DefaultLevel
CodeAuthzPol_GetInfoRegistry_ScopeFlags CodeAuthzPol_GetInfoRegistry_TransparentEnabled
CodeAuthzPol_SetInfoDual_DefaultLevel CodeAuthzPol_SetInfoDual_HonorUserIdentities
CodeAuthzPol_SetInfoRegistry_ScopeFlags CodeAuthzPol_SetInfoRegistry_TransparentEnabled
CodeAuthzpOpenPolicyRootKey CodeAuthzpSetAuthzLevelInfo
CodeAuthzpSetInformationCodeAuthzPolicy CodeAuthzpSidInSidAndAttributes
CodeAuthzpSidInWildcardList CodeAuthzReloadCacheTables
CommandLineFromMsiDescriptor ControlService
ControlTraceA ControlTraceW
ConvertAccessToSecurityDescriptorA ConvertAccessToSecurityDescriptorW
ConvertAListAToNamedBasedW ConvertAListToNamedBasedW
ConvertAListWToAlistAInplace ConvertExplicitAccessAToExplicitAccessW
ConvertIconBits ConvertOemToCharW
ConvertSDToAccessA ConvertSDToAccessW
ConvertSDToStringSDRootDomainA ConvertSDToStringSDRootDomainW
ConvertSecurityDescriptorToAccessNamedA ConvertSecurityDescriptorToAccessW
ConvertSecurityDescriptorToStringSecurityDescriptorA ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertSidToStringSidA ConvertSidToStringSidW
ConvertStringAToStringW ConvertStringSDToSDDomainA
ConvertStringSDToSDDomainW ConvertStringSDToSDRootDomainA
ConvertStringSDToSDRootDomainW ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidA
ConvertStringSidToSidW ConvertStringWToStringA
ConvertToAutoInheritPrivateObjectSecurity ConvertTrusteeAToTrusteeW
ConvertTrusteeWToTrusteeA ConvertWindows31GroupsToRegistry
CopySid CPReturnhWnd
CProvVerifyImage CreateGroupFromGroup16
CreateMultipartUserClassKey CreatePrivateObjectSecurity
CreatePrivateObjectSecurityEx CreatePrivateObjectSecurityWithMultipleInheritance
CreateProcessAsUserA CreateProcessAsUserW
CreateProcessWithLogonW CreateRegistryClassesFromRegistry16
CreateRemoteSessionProcessA CreateRemoteSessionProcessW
CreateRestrictedToken CreateServiceA
CreateServiceW CreateTraceInstanceId
CreateWellKnownSid CredDeleteA
CredDeleteW CredEnumerateA
CredEnumerateW CredGetSessionTypes
CredGetTargetInfoA CredGetTargetInfoW
CredIsMarshaledCredentialA CredIsMarshaledCredentialW
CredMarshalCredentialA CredMarshalCredentialW
CredpAllocStrFromStr CredpConvertCredential
CredpConvertCredentials CredpConvertOneCredential
CredpConvertOneCredentialSize CredpConvertString
CredpConvertStringSize CredpConvertTargetInfo
CredpDecodeCredential CredpEncodeCredential
CredpMarshalBytes CredProfileLoaded
CredpUnmarshalBytes CredrDelete
CredReadA CredReadDomainCredentialsA
CredReadDomainCredentialsW CredReadW
CredRenameA CredRenameW
CredrEnumerate CredrGetSessionTypes
CredrGetTargetInfo CredrProfileLoaded
CredrRead CredrReadDomainCredentials
CredrRename CredrWrite
CredrWriteDomainCredentials CredUnmarshalCredentialA
CredUnmarshalCredentialW CredWriteA
CredWriteDomainCredentialsA CredWriteDomainCredentialsW
CredWriteW CryptAcquireContextA
CryptAcquireContextW CryptContextAddRef
CryptCreateHash CryptDecrypt
CryptDeriveKey CryptDestroyHash
CryptDestroyKey CryptDuplicateHash
CryptDuplicateKey CryptEncrypt
CryptEnumProvidersA CryptEnumProvidersW
CryptEnumProviderTypesA CryptEnumProviderTypesW
CryptExportKey CryptGenKey
CryptGenRandom CryptGetDefaultProviderA
CryptGetDefaultProviderW CryptGetHashParam
CryptGetKeyParam CryptGetProvParam
CryptGetUserKey CryptHashData
CryptHashSessionKey CryptImportKey
CryptReleaseContext CryptSetHashParam
CryptSetKeyParam CryptSetProviderA
CryptSetProviderExA CryptSetProviderExW
CryptSetProviderW CryptSetProvParam
CryptSignHashA CryptVerifySignatureA
CSList::Insert CSList::InsertIfUnique
CSList::~CSList CSPInCacheCheck
c_SeclCreateProcessWithLogonW DecryptDataLength
DecryptFileA DecryptFileW
DecryptFullBlock DecryptPartialBlock
DeInitRand DeleteAce
DeleteGroup DeleteService
DeregisterEventSource DeRegisterExtObjListAccess
DestroyPerflibFunctionTimer DestroyPrivateObjectSecurity
DetectWow64Process DisableLibrary
DisablePerfLibrary DisablePredefinedHandleTable
DllInitialize DoesExistGroup
DuplicateEncryptionInfoFile DuplicateToken
DuplicateTokenEx ElfBackupEventLogFileA
ElfBackupEventLogFileW ElfChangeNotify
ElfClearEventLogFileA ElfClearEventLogFileW
ElfCloseEventLog ElfDeregisterEventSource
ElfGetLogInformation ElfNumberOfRecords
ElfOldestRecord ElfOpenBackupEventLogA
ElfOpenBackupEventLogW ElfOpenEventLogA
ElfOpenEventLogW ElfpGetComputerName
ElfrBackupELFA ElfrBackupELFW
ElfrChangeNotify ElfrClearELFA
ElfrClearELFW ElfrCloseEL
ElfrDeregisterEventSource ElfReadEventLogA
ElfReadEventLogW ElfRegisterEventSourceA
ElfRegisterEventSourceW ElfReportEventA
ElfReportEventW ElfrGetLogInformation
ElfrNumberOfRecords ElfrOldestRecord
ElfrOpenBELA ElfrOpenBELW
ElfrOpenELA ElfrOpenELW
ElfrReadELA ElfrReadELW
ElfrRegisterEventSourceA ElfrRegisterEventSourceW
ElfrReportEventA ElfrReportEventW
EnableTrace EncryptDataLength
EncryptedFileKeyInfo EncryptFileA
EncryptFileW EncryptFullBlock
EncryptionDisable EncryptKey
EncryptMemoryInitialize EncryptPartialBlock
EndpointConn_np EnterHashCritSec
EnterKeyCritSec EnterProviderCritSec
EnumClassKey EnumDependentServicesA
EnumDependentServicesW EnumerateTraceGuids
EnumerateValue EnumServiceGroupW
EnumServicesStatusA EnumServicesStatusExA
EnumServicesStatusExW EnumServicesStatusW
EnumStateChooseNext EnumStateClear
EnumStateDestroy EnumStateGetNextEnum
EnumStateInit EnumTableAddKey
EnumTableClear EnumTableFindKeyState
EnumTableGetKeyState EnumTableGetNextEnum
EnumTableGetRootState EnumTableInit
EnumTableRemoveKey EnumTableUpdateRootState
EnumUILanguageCallback EqualDomainSid
EqualPrefixSid EqualSid
EstimateQuotient EVENTLOG_HANDLE_A_bind
EVENTLOG_HANDLE_A_unbind EVENTLOG_HANDLE_W_bind
EVENTLOG_HANDLE_W_unbind ExtendGroup
ExtractClassKey FileEncryptionStatusA
FileEncryptionStatusW FindFirstFreeAce
FlushTraceA FlushTraceW
FreeApplicationInfo FreeInheritedFromArray
GatherRandomKeyFastUserMode GenRandom
GetAccessPermissionsForObjectA GetAccessPermissionsForObjectW
GetAce GetAclInformation
GetAuditedPermissionsFromAclA GetAuditedPermissionsFromAclW
GetCallStack GetCompatFlags
GetCryptSigResourcePtr GetCurrentHwProfileA
GetCurrentHwProfileW GetEffectiveRightsFromAclA
GetEffectiveRightsFromAclW GetEventLogInformation
GetExplicitEntriesFromAclW GetFileSecurityA
GetFileSecurityW GetFixedKeyInfo
GetInheritanceSourceW GetIoFixedDrive
GetKernelObjectSecurity GetLangIdFromSzLang
GetLeakStack GetLengthSid
GetLocalManagedApplicationData GetLocalManagedApplications
GetManagedAppCategories GetManagedApplicationCategories
GetManagedApplications GetManagedApps
GetNamedSecurityInfoA GetNamedSecurityInfoExA
GetNamedSecurityInfoExW GetNamedSecurityInfoW
GetNumberOfEventLogRecords GetOldestEventLogRecord
GetOverlappedAccessResults GetPerfDllFileInfo
GetPerflibKeyValue GetPrivateObjectSecurity
GetQueryType GetRegistryExtensionFlags
GetSecurityDescriptorControl GetSecurityDescriptorDacl
GetSecurityDescriptorGroup GetSecurityDescriptorOwner
GetSecurityDescriptorRMControl GetSecurityDescriptorSacl
GetSecurityInfo GetSecurityInfoExA
GetSecurityInfoExW GetServiceDisplayNameA
GetServiceDisplayNameW GetServiceKeyNameA
GetServiceKeyNameW GetSidIdentifierAuthority
GetSidLengthRequired GetSidSubAuthority
GetSidSubAuthorityCount GetStack
GetSubKeyCount GetTimeAsLongLong
GetTokenInformation GetTraceEnableFlags
GetTraceEnableLevel GetTraceLoggerHandle
GetTrusteeWForSid GetUserNameA
GetUserNameW GetWindowsAccountDomainSid
GuidToWString HashBytesOfFile
HashTheFile ImpersonateAnonymousToken
ImpersonateLoggedOnUser ImpersonateNamedPipeClient
ImpersonateSelf InitDebug
InitDebugSupport InitializeAcl
InitializeClassesEnumTable InitializeClassesRoot
InitializeLeakTrackTable InitializePredefinedHandlesTable
InitializeSecurityDescriptor InitializeSid
InitializeSidLookupTable InitializeStatusBinding
InitializeWin31State InitiateSystemShutdownA
InitiateSystemShutdownExA InitiateSystemShutdownExW
InitiateSystemShutdownW InitKeyLM
InitSecurityAcls InstallApplication
InstallBegin InstallEnd
InstallManageApp InstallUnmanageApp
IsSystemLUID IsTerminalServerCompatible
IsTextUnicode IsTokenRestricted
IsTokenUntrusted IsTSAppCompatEnabled
IsValidAcl IsValidSecurityDescriptor
IsValidSid IsWellKnownSid
ItCliRegisterIdleTask ItCliUnregisterIdleTask
ITRPC_HANDLE_bind ITRPC_HANDLE_unbind
ItSrvProcessIdleTasks ItSrvRegisterIdleTask
ItSrvUnregisterIdleTask I_ScPnPGetServiceName
I_ScSendTSMessage I_ScSetServiceBitsA
I_ScSetServiceBitsW KeyStateGetValueState
KeyStateListDestroy KeyStateListInit
KillPerflibFunctionTimer L32CommonCreate
L32FindLogonSid L32GetDefaultDomainName
L32pInitLsa L32pLogonUser
L32SetProcessQuotas L32SetProcessToken
LeaveHashCritSec LeaveKeyCritSec
LeaveProviderCritSec LoadAndInitFeClient
LoadImageHLP LoadLoadString
LoadRegistry16 LocalBaseRegCreateKey
LocalBaseRegDeleteKey LocalBaseRegDeleteValue
LocalBaseRegEnumKey LocalBaseRegEnumValue
LocalBaseRegFlushKey LocalBaseRegGetKeySecurity
LocalBaseRegLoadKey LocalBaseRegOpenKey
LocalBaseRegQueryInfoKey LocalBaseRegQueryMultipleValues
LocalBaseRegQueryValue LocalBaseRegReplaceKey
LocalBaseRegRestoreKey LocalBaseRegSaveKey
LocalBaseRegSaveKeyEx LocalBaseRegSetKeySecurity
LocalBaseRegSetValue LocalBaseRegUnLoadKey
LocalConvertAclToString LocalConvertSDToStringSD_Rev1
LocalConvertStringSDToSD_Rev1 LocalConvertStringSidToSid
LocalGetAclForString LocalGetSDControlForString
LocalGetSidForString LocalGetStringForControl
LocalGetStringForSid LocalOpenClassesRoot
LocalOpenCurrentConfig LocalOpenCurrentUser
LocalOpenLocalMachine LocalOpenPerformanceData
LocalOpenPredefHandle LocalSignHashW
LocalVerifySignatureW LockServiceDatabase
LogonUserA LogonUserCommonA
LogonUserCommonW LogonUserExA
LogonUserExW LogonUserW
LookupAccessMaskInTable LookupAccountNameA
LookupAccountNameInternal LookupAccountNameW
LookupAccountSidA LookupAccountSidInternal
LookupAccountSidW LookupAceFlagsInTable
LookupAceTypeInTable LookupPrivilegeDisplayNameA
LookupPrivilegeDisplayNameW LookupPrivilegeNameA
LookupPrivilegeNameW LookupPrivilegeValueA
LookupPrivilegeValueW LookupSecurityDescriptorPartsA
LookupSecurityDescriptorPartsW LookupSidInTable
LsaAddAccountRights LsaAddPrivilegesToAccount
LsaClearAuditLog LsaClose
LsaCreateAccount LsaCreateSecret
LsaCreateTrustedDomain LsaCreateTrustedDomainEx
LsaDelete LsaDeleteTrustedDomain
LsaEnumerateAccountRights LsaEnumerateAccounts
LsaEnumerateAccountsWithUserRight LsaEnumeratePrivileges
LsaEnumeratePrivilegesOfAccount LsaEnumerateTrustedDomains
LsaEnumerateTrustedDomainsEx LsaFreeMemory
LsaGetQuotasForAccount LsaGetRemoteUserName
LsaGetSystemAccessAccount LsaGetUserName
LsaICLookupNames LsaICLookupNamesWithCreds
LsaICLookupSids LsaICLookupSidsWithCreds
LsaLookupNames LsaLookupNames2
LsaLookupPrivilegeDisplayName LsaLookupPrivilegeName
LsaLookupPrivilegeValue LsaLookupSids
LsaOpenAccount LsaOpenPolicy
LsaOpenPolicySce LsaOpenSecret
LsaOpenTrustedDomain LsaOpenTrustedDomainByName
LsapAddAccountRights LsapApiBuildSecretName
LsapApiConvertPrivilegesToRights LsapApiConvertRightsToPrivileges
LsapCrClientGetSessionKey LsapCrDecryptValue
LsapCrEncryptValue LsapDeleteTrustedDomain
LsapDsMarshalAuthInfoHalf LsapEncryptAuthInfo
LsapEnumerateAccountRights LsapEnumerateAccountsWithUserRight
LsapNeutralizeNt4Emulation LsapQueryTrustedDomainInfo
LsapRandomFill LsapRemoveAccountRights
LsapRetrievePrivateData LsapSetTrustedDomainInformation
LsapStorePrivateData LsaQueryDomainInformationPolicy
LsaQueryForestTrustInformation LsaQueryInformationPolicy
LsaQueryInfoTrustedDomain LsaQuerySecret
LsaQuerySecurityObject LsaQueryTrustedDomainInfo
LsaQueryTrustedDomainInfoByName LsarAddAccountRights
LsarAddPrivilegesToAccount LsarClearAuditLog
LsarClose LsarCreateAccount
LsarCreateSecret LsarCreateTrustedDomain
LsarCreateTrustedDomainEx LsarCreateTrustedDomainEx2
LsarDelete LsarDeleteObject
LsarDeleteTrustedDomain LsaRemoveAccountRights
LsaRemovePrivilegesFromAccount LsarEnumerateAccountRights
LsarEnumerateAccounts LsarEnumerateAccountsWithUserRight
LsarEnumeratePrivileges LsarEnumeratePrivilegesAccount
LsarEnumerateTrustedDomains LsarEnumerateTrustedDomainsEx
LsaRetrievePrivateData LsarGetQuotasForAccount
LsarGetSystemAccessAccount LsarGetUserName
LsarLookupNames LsarLookupNames2
LsarLookupNames3 LsarLookupNames4
LsarLookupPrivilegeDisplayName LsarLookupPrivilegeName
LsarLookupPrivilegeValue LsarLookupSids
LsarLookupSids2 LsarLookupSids3
LsarOpenAccount LsarOpenPolicy
LsarOpenPolicy2 LsarOpenPolicySce
LsarOpenSecret LsarOpenTrustedDomain
LsarOpenTrustedDomainByName LsarQueryDomainInformationPolicy
LsarQueryForestTrustInformation LsarQueryInformationPolicy
LsarQueryInformationPolicy2 LsarQueryInfoTrustedDomain
LsarQuerySecret LsarQuerySecurityObject
LsarQueryTrustedDomainInfo LsarQueryTrustedDomainInfoByName
LsarRemoveAccountRights LsarRemovePrivilegesFromAccount
LsarRetrievePrivateData LsarSetDomainInformationPolicy
LsarSetForestTrustInformation LsarSetInformationPolicy
LsarSetInformationPolicy2 LsarSetInformationTrustedDomain
LsarSetQuotasForAccount LsarSetSecret
LsarSetSecurityObject LsarSetSystemAccessAccount
LsarSetTrustedDomainInfo LsarSetTrustedDomainInfoByName
LsarStorePrivateData LsaSetDomainInformationPolicy
LsaSetForestTrustInformation LsaSetInformationPolicy
LsaSetInformationTrustedDomain LsaSetQuotasForAccount
LsaSetSecret LsaSetSecurityObject
LsaSetSystemAccessAccount LsaSetTrustedDomainInfoByName
LsaSetTrustedDomainInformation LsaStorePrivateData
MakeAbsoluteSD MakeAbsoluteSD2
MakeSelfRelativeSD MapPredefinedHandle
MapSAToRpcSA MapSDToRpcSD
MarshallString MartaDllInitialize
MartaInitialize MD4Final
MD5Final MD5HashData
MD5Update MIDL_user_allocate
Mod MonBuildPerfDataBlock
MSChapSrvChangePassword MSChapSrvChangePassword2
Multiply NewAbortShutdownCallback
NewGenRandom NewGenRandomEx
NewPersonalGroupName NewShutdownCallback
NewShutdownCallbackEx NewVerifyImage
NotifyBootConfigStatus NotifyChangeEventLog
ObjectCloseAuditAlarmA ObjectCloseAuditAlarmW
ObjectDeleteAuditAlarmA ObjectDeleteAuditAlarmW
ObjectOpenAuditAlarmA ObjectOpenAuditAlarmW
ObjectPrivilegeAuditAlarmA ObjectPrivilegeAuditAlarmW
OemToCharW_WithAllocation OpenBackupEventLogA
OpenBackupEventLogW OpenClassesRoot
OpenCombinedClassesRoot OpenCreateKey
OpenCurrentUser OpenEncryptedFileRawA
OpenEncryptedFileRawW OpenEventLogA
OpenEventLogW OpenExtensibleObjects
OpenExtObjectLibrary OpenLocalMachine
OpenPerformanceData OpenPerformanceNlsText
OpenPerformanceText OpenPredefinedKeyForSpecialAccess
OpenProcessToken OpenSCManagerA
OpenSCManagerW OpenServiceA
OpenServiceW OpenThreadToken
OpenTraceA OpenTraceW
OpenUsers PAUTHZ_AUDIT_EVENT_TYPE_OLD_bind
PerfGetLangId PerfGetNames
Perflib004Update PerflibCheckPerfFile
PerflibFindCounterFile PerflibRename004File
PerflibTimerFunction PerfOpenKey
PerfRegEnumValue PerfRegQueryInfoKey
PerfRegQueryValue PerfRegSetValue
PerfUpdateErrorCount PLSAPR_SERVER_NAME_bind
PrivateRegQueryValueExT PrivilegeCheck
PrivilegedServiceAuditAlarmA PrivilegedServiceAuditAlarmW
ProcessIdleTasks ProcessTrace
QueryAllTracesA QueryAllTracesW
QueryExtensibleData QueryKeyInfo
QueryNumberOfPersonalGroupNames QueryRecoveryAgentsOnEncryptedFile
QueryServiceConfig2A QueryServiceConfig2W
QueryServiceConfigA QueryServiceConfigW
QueryServiceLockStatusA QueryServiceLockStatusW
QueryServiceObjectSecurity QueryServiceStatus
QueryServiceStatusEx QueryTraceA
QueryTraceW QueryUsersOnEncryptedFile
QueryWindows31FilesMigration RandomFillBuffer
rc4_safe rc4_safe_key
rc4_safe_shutdown rc4_safe_startup
RChangeServiceConfig2A RChangeServiceConfig2W
RChangeServiceConfigA RChangeServiceConfigW
RCloseServiceHandle RControlService
RCreateServiceA RCreateServiceW
RDeleteService ReadEventLogA
ReadEventLogW ReadMem
ReadRegLeakTrackInfo ReadStringValue
RegCloseKey RegConnectRegistryA
RegConnectRegistryW RegConn_ip_tcp
RegConn_nb_ipx RegConn_nb_nb
RegConn_nb_tcp RegConn_np
RegConn_spx RegCreateKeyA
RegCreateKeyExA RegCreateKeyExW
RegCreateKeyW RegDeleteKeyA
RegDeleteKeyW RegDeleteValueA
RegDeleteValueW RegDisablePredefinedCache
RegEnumKeyA RegEnumKeyExA
RegEnumKeyExW RegEnumKeyW
RegEnumValueA RegEnumValueW
RegFlushKey RegGetKeySecurity
RegInitialize RegisterEventSourceA
RegisterEventSourceW RegisterExtObjListAccess
RegisterServiceCtrlHandlerA RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerExW RegisterServiceCtrlHandlerHelp
RegisterServiceCtrlHandlerW RegisterTraceGuidsA
RegisterTraceGuidsW RegLeakTableAddKey
RegLeakTableClear RegLeakTableInit
RegLeakTableIsTrackedObject RegLeakTableRemoveKey
RegLoadKeyA RegLoadKeyW
RegNotifyChangeKeyValue RegOpenCurrentUser
RegOpenKeyA RegOpenKeyExA
RegOpenKeyExW RegOpenKeyW
RegOpenUserClassesRoot RegOverridePredefKey
RegQueryInfoKeyA RegQueryInfoKeyW
RegQueryMultipleValuesA RegQueryMultipleValuesW
RegQueryValueA RegQueryValueExA
RegQueryValueExW RegQueryValueW
RegReplaceKeyA RegReplaceKeyW
RegRestoreKeyA RegRestoreKeyW
RegSaveKeyA RegSaveKeyExA
RegSaveKeyExW RegSaveKeyW
RegSetKeySecurity RegSetValueA
RegSetValueExA RegSetValueExW
RegSetValueW RegUnLoadKeyA
RegUnLoadKeyW RemapPredefinedHandle
RemoveTraceCallback RemoveUsersFromEncryptedFile
REnumDependentServicesA REnumDependentServicesW
REnumServiceGroupW REnumServicesStatusA
REnumServicesStatusExA REnumServicesStatusExW
REnumServicesStatusW ReportEventA
ReportEventW RevertToSelf
RGetServiceDisplayNameA RGetServiceDisplayNameW
RGetServiceKeyNameA RGetServiceKeyNameW
RI_ScSendTSMessage RI_ScSetServiceBitsA
RI_ScSetServiceBitsW RLockServiceDatabase
RNotifyBootConfigStatus ROpenSCManagerA
ROpenSCManagerW ROpenServiceA
ROpenServiceW RpcpBindRpc
RpcpUnbindRpc Rpc_OpenPredefHandle
RQueryServiceConfig2A RQueryServiceConfig2W
RQueryServiceConfigA RQueryServiceConfigW
RQueryServiceLockStatusA RQueryServiceLockStatusW
RQueryServiceObjectSecurity RQueryServiceStatus
RQueryServiceStatusEx RSetServiceObjectSecurity
RSetServiceStatus RsopReportInstallFailure
RStartServiceA RStartServiceW
RUnlockServiceDatabase SaferCloseLevel
SaferComputeTokenFromLevel SaferCreateLevel
SaferGetLevelInformation SaferGetPolicyInformation
SaferiChangeRegistryScope SaferiCompareTokenLevels
SaferIdentifyLevel SaferiIsExecutableFileType
SaferiPopulateDefaultsInRegistry SaferiReplaceProcessThreadTokens
SaferiSearchMatchingHashRules SaferpBuildRestrictedToken
SaferpCreateNewSingleIdentification SaferpDeleteSingleIdentificationGuid
SaferpEnforceDefaultLevelDefinitions SaferpEnumerateHiddenLevels
SaferpGenericTableAllocate SaferpGenericTableFree
SaferpGuidIdentsLoadTable SaferpLevelObjpCleanupEntry
SaferpLoadUnicodeResourceString SaferpLogResultsToFile
SaferpPol_GetInfoCommon_DefaultLevel SaferpPol_GetInfoCommon_HonorUserIdentities
SaferpRecordEventLogEntryHelper SaferpSetExistingSingleIdentification
SaferpSetSingleIdentificationHash SaferpSetSingleIdentificationPath
SaferpSetSingleIdentificationZone SaferRecordEventLogEntry
SaferSetLevelInformation SaferSetPolicyInformation
SaveGroup ScAddWStrToWStrArray
ScConnectServiceController ScConvertToAnsi
ScConvertToUnicode ScCreateAndSetSD
ScCreateDispatchTableA ScCreateDispatchTableW
ScCreateStartEventSD ScDispatcherLoop
ScEncryptPassword ScExpungeMessage
ScGetDispatchEntry ScGetPipeInput
ScInitializeAllowedAce ScInitializeAuditAce
ScInitializeDeniedAce ScNormalizeCmdLineArgs
ScReadServiceParms ScSendResponse
ScSvcctrlThreadA ScWaitForStart
ScWStrArraySize SddlpAnsiStringToUnicodeString
SddlpGetRootDomainSid SeclCreateProcessWithLogonW
ServiceIsTrustedByDefault SetAclInformation
SetEntriesInAccessListA SetEntriesInAccessListW
SetEntriesInAclA SetEntriesInAclW
SetEntriesInAListA SetEntriesInAListW
SetEntriesInAuditListA SetEntriesInAuditListW
SetErrorChecks SetFileSecurityA
SetFileSecurityW SetHandleProtection
SetKernelObjectSecurity SetNamedSecurityInfoA
SetNamedSecurityInfoExA SetNamedSecurityInfoExW
SetNamedSecurityInfoW SetPrivateObjectSecurity
SetPrivateObjectSecurityEx SetSecurityDescriptorControl
SetSecurityDescriptorDacl SetSecurityDescriptorGroup
SetSecurityDescriptorOwner SetSecurityDescriptorRMControl
SetSecurityDescriptorSacl SetSecurityInfo
SetSecurityInfoExA SetSecurityInfoExW
SetServiceBits SetServiceObjectSecurity
SetServiceStatus SetThreadToken
SetTokenInformation SetTraceCallback
SetUserFileEncryptionKey ShutdownCallback
ShutdownCallbackEx SnapShotWin31GroupsToRegistry
SnapShotWin31IniFileKey SnapShotWin31IniFileSection
SnapShotWin31IniFileSections SnapShotWin31IniFilesToRegistry
SnapShotWin31RegDatToRegistry Square
StartPerflibFunctionTimer StartSeclogonService
StartServiceA StartServiceCtrlDispatcherA
StartServiceCtrlDispatcherW StartServiceW
StartTraceA StartTraceW
StateObjectListRemove StopDebug
StopTraceA StopTraceW
StringDuplicate SVCCTL_HANDLEA_bind
SVCCTL_HANDLEW_bind SynchronizeWindows31FilesAndWindowsNTRegistry
SystemFunction001 SystemFunction002
SystemFunction003 SystemFunction004
SystemFunction005 SystemFunction006
SystemFunction007 SystemFunction008
SystemFunction010 SystemFunction012
SystemFunction013 SystemFunction016
SystemFunction017 SystemFunction024
SystemFunction025 SystemFunction028
SystemFunction029 SystemFunction030
SystemFunction032 SystemFunction034
SystemFunction036 SystemFunction040
SystemFunction041 TerminateWin31State
TestClientForAccess TmpGetComputerNameA
To_SECL_BLOB_A To_SECL_BLOB_W
TraceEvent TraceEventInstance
TraceMessageVa TrackObject
TrackObjectDataClear TrackObjectDataPrint
TreeResetNamedSecurityInfoW TrusteeAccessToObjectA
TrusteeAccessToObjectW TrusteeAllocationSizeAToW
UnicodeToAnsi UnicodeToMultiByte
UninstallApplication UnloadGroup
UnlockServiceDatabase UnregisterIdleTask
UnregisterTraceGuids UnTrackObject
UpdateCircularHash UpdateTraceA
UpdateTraceW UseOutsideStringToKey
ValStateAddValueToSortedValues ValStateInitialize
ValStateReleaseValues ValStateUpdate
WaitForEventLogToStart WdmWmiServiceMain
Win31IOExceptionHandler WinPerfStartTrace
WmiCloseBlock WmiCloseTraceWithCursor
WmiConvertTimestamp WmiDevInstToInstanceNameA
WmiDevInstToInstanceNameW WmiDllInitialize
WmiEnumerateGuids WmiExecuteMethodA
WmiExecuteMethodW WmiFileHandleToInstanceNameA
WmiFileHandleToInstanceNameW WmiFreeBuffer
WmiGetNextEvent WmiGetTraceHeader
WmiMofEnumerateResourcesA WmiMofEnumerateResourcesW
WmiNotificationRegistrationA WmiNotificationRegistrationW
WmiOpenBlock WmiOpenTraceWithCursor
WmipAddGuidHandleToGuidMapList WmipAddHandleToEventPump
WmipAddInstanceIdToNames WmipAddLogHeaderToLogFile
WmipAddToGNList WmipAdvanceToNewEvent
WmipAllocateCookie WmipAllocateTraceBuffers
WmipAllocateTraceHandle WmipAllocDontFail
WmipAllocEvent WmipAllocTraceBuffer
WmiParseTraceEvent WmipBuildEventTable
WmipBuildGuidObjectAttributes WmipBuildMofAddRemoveEvent
WmipBuildMUIPath WmipBuildReceiveNotification
WmipCalculateCurrentTime WmipCheckForEnoughFreeSpace
WmipCheckForRealTimeLoggers WmipCheckGuidAccess
WmipCleanupGuidMapList WmipCleanupTraceLog
WmipClosePendingHandles WmipConvertEventToAnsi
WmipConvertWADToAnsi WmipCopyCountedString
WmipCopyCurrentEvent WmipCopyLogfileInfo
WmipCopyMRString WmipCopyStringToCountedUnicode
WmipCountedToSzAndTrim WmipCountedUnicodeToCountedAnsi
WmipCreateFile WmipCreateGuidMapping
WmipCreateHeap WmipDeinitializeDll
WmipDeliverAllEvents WmipDereferenceGNEntry
WmipDisableTraceProvider WmipDoEventCallbacks
WmipDumpGuidMaps WmipDumpHardwareConfig
WmipEnumerateGuids WmipEnumRegGuids
WmipEstablishEventPump WmipEventPump
WmipEventPumpFromKernel WmipExternalNotification
WmipFileExists WmipFinalizeLogFileHeader
WmipFindGuidNotification WmipFlushAllBuffers
WmipFlushBuffer WmipFlushLogger
WmipFlushUmLogger WmipFreeCookie
WmipFreeEvent WmipFreeLoggerContext
WmipFreeRealTimeContext WmipFreeTraceBuffer
WmipFreeTraceHandle WmipGenericTraceEnable
WmipGetBuffersWrittenFromQuery WmipGetCallbackRoutine
WmipGetCpuConfig WmipGetCpuSpeed
WmipGetCurrentBuffer WmipGetDevInstInfo
WmipGetDiskInfo WmipGetFreeBuffer
WmipGetGuidInCookie WmipGetLanguageList
WmipGetMofResourceList WmipGetNetworkAdapters
WmipGetPowerInfo WmipGetServiceInfo
WmipGetTraceBuffer WmipGetVideoAdapters
WmipGetWindowsDirectory WmipGuidMapCallback
WmipGuidMapHandleToGuid WmipInitializeDll
WmipInitLoggerContext WmipInternalNotification
WmipInternalProvider WmipLogger
WmipLogImageLoadEvent WmipLookforRealTimeBuffers
WmipLookupCookie WmipLookupTraceHandle
WmipMakeEventCallbacks WmipMemCommit
WmipMemFree WmipMemReserve
WmipNotificationRegistration WmipOpenKernelGuid
WmipParseTraceEvent WmipProcessEventBuffer
WmipProcessExternalEvent WmipProcessGuidMaps
WmipProcessLanguageAddRemoveEvent WmipProcessLogHeader
WmipProcessModuleRunDown WmipProcessMofAddRemoveEvent
WmipProcessRealTimeTraces WmipProcessRunDown
WmipProcessTraceLog WmipProcessUMRequest
WmipQueryAllInstanceInfo WmipQueryAllUmTraceA
WmipQueryAllUmTraceW WmipQueryInstanceInfo
WmipQueryLogger WmipQuerySingleInstanceInfo
WmipQueryUmLogger WmipReadGuidMapRecords
WmipRealTimeCallback WmipReceiveNotifications
WmipReceiveReply WmipRegisterGuids
WmipRegistryToImagePath WmipRegOpenKey
WmipRegQueryValueKey WmipReleaseTraceBuffer
WmipRelogEvent WmipRelogHeaderToLogFile
WmipRemoveFromGNList WmipReserveTraceBuffer
WmipSendUmLogRequest WmipSendWmiKMRequest
WmipSendWmiRequest WmipSetupRealTimeContext
WmipStartLogger WmipStartUmLogger
WmipStopLogger WmipStopLoggerInstance
WmipStopUmLogger WmipSwitchBuffer
WmipSynchReadFile WmipSysModuleRunDown
WmipThreadRunDown WmipTraceEvent
WmipTraceMessage WmipTraceUmMessage
WmipUpdateServiceStatus WmipUpdateUmLogger
WmiQueryAllDataA WmiQueryAllDataMultipleA
WmiQueryAllDataMultipleW WmiQueryAllDataW
WmiQueryGuidInformation WmiQuerySingleInstanceA
WmiQuerySingleInstanceMultipleA WmiQuerySingleInstanceMultipleW
WmiQuerySingleInstanceW WmiReceiveNotificationsA
WmiReceiveNotificationsW WmiServiceCtrlHandler
WmiSetSingleInstanceA WmiSetSingleInstanceW
WmiSetSingleItemA WmiSetSingleItemW
WmiTraceUmEvent WmiUnregisterGuids
wRegConn_bind wRegConn_Netbios
w_GetComputerName _DebugMsg
_DES_ECB_LM _ReportWin31IOEvent
_TraceMessage _WinPerfDbgTrace
__CodeAuthzIsExecutableFileTypeHelper __CodeAuthzpCheckIdentityPathRules
__CodeAuthzpCompareCodeAuthzLevelWithToken __CodeAuthzpCompareImagePathHelper
__CodeAuthzpComputeAccessTokenFromCodeAuthzObject __CodeAuthzpEnsureMapped
__CodeAuthzpFetchIdentsForLevel __CodeAuthzpGetAuthzLevelInfo
__CodeAuthzpIdentifyOneCodeAuthzLevel __CodeAuthzpOpenIdentifierKey
__CodeAuthzpQueryIdentityRegValue __CodeAuthzpQuerySingleIdentification
__delayLoadHelper2 __except_handler3
__global_unwind2 __tailMerge_Secur32
__tailMerge_WINTRUST  

There are 31,320 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit