About
Articles
Book Store
Distributed RCE
Downloads
Event Calendar
Forums
Live Discussion
Reference Library
RSS Feeds
Search
Users
What's New
Customize Theme
bluegrey
blackgreen
metal
simple
Flag:
Tornado!
Hurricane!
Login:
Password:
Remember Me
Register
OpenRCE Win32 Call Chains Database
Windows XP SP1
>> NTDLL
AcquireBufferLocation
AllocateMemoryForThreadLocalData
AVrfDllLoadNotification
AVrfDllUnloadNotification
AVrfInitializeVerifier
AVrfPageHeapDllNotification
AVrfpChainDuplicateVerificationLayers
AVrfpDetectVerifiedExports
AVrfpDllLoadNotificationInternal
AVrfpDphDetectSnapRoutines
AVrfpDphDllGlobalAlloc
AVrfpDphDllGlobalFree
AVrfpDphDllGlobalReAlloc
AVrfpDphDllHeapAlloc
AVrfpDphDllHeapCreate
AVrfpDphDllHeapReAlloc
AVrfpDphDllLocalAlloc
AVrfpDphDllLocalFree
AVrfpDphDllLocalReAlloc
AVrfpDphSnapImports
AVrfpDumpProviderList
AVrfpEnableHandleVerifier
AVrfpEnableVerifierOptions
AVrfpFindClosestThunkDuplicate
AVrfpLoadAndInitializeProvider
AVrfpMoveProviderToEndOfInitializationList
AVrfpParseVerifierDllsString
AVrfpSnapAlreadyLoadedDlls
AVrfpSnapDllImports
CleanOnThreadExit
CleanUpAllThreadBuffers
CompareNamesCaseSensitive
CsrAllocateCaptureBuffer
CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString
CsrCaptureMessageUnicodeStringInPlace
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrOneTimeInitialize
CsrpConnectToServer
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DaysAndFractionToTime
DbgPrompt
DbgUiConnectToDbg
DbgUiContinue
DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess
DbgUiIssueRemoteBreakin
DbgUiRemoteBreakin
DbgUiStopDebugging
DbgUiWaitStateChange
DebugPrint
DebugPrompt
DeleteNodeFromTree
EmExcept
GetLoggerInfo
GetNextWchar
GetPidInfo
ImportTablepFreeFunctionSorted
ImportTablepFreeModuleSorted
ImportTablepHashCanonicalLists
ImportTablepInsertModuleSorted
InitializeAndRegisterNtdllTraceEvents
InitializeWmiHandles
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserExceptionDispatcher
LdrAccessOutOfProcessResource
LdrAccessResource
LdrAddRefDll
LdrAlternateResourcesEnabled
LdrCreateOutOfProcessImage
LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll
LdrEnumerateLoadedModules
LdrEnumResources
LdrFindCreateProcessManifest
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResourceEx_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetModuleName
LdrGetProcedureAddress
LdrInitShimEngineDynamic
LdrLoadAlternateResourceModule
LdrLoadDll
LdrLockLoaderLock
LdrpAccessResourceData
LdrpAccessResourceDataNoMultipleLanguage
LdrpAllocateDataTableEntry
LdrpAllocateTls
LdrpAllocateUnicodeString
LdrpCalcResourceChecksum
LdrpCallTlsInitializers
LdrpCheckCorImage
LdrpCheckForKnownDll
LdrpCheckForLoadedDll
LdrpCodeAuthzCheckDllAllowed
LdrpCompareResourceChecksum
LdrpCompareResourceNames_U
LdrpCopyUnicodeString
LdrpCorUnloadImage
LdrpCorValidateImage
LdrpCreateDllSection
LdrpCreateKey
LdrpDeallocateDataTableEntry
LdrpDefineDllTag
LdrpEnforceExecuteForCurrentThreadStack
LdrpEnsureLoaderLockIsHeld
LdrpFetchAddressOfEntryPoint
LdrpFinalizeAndDeallocateDataTableEntry
LdrpForkProcess
LdrpFreeTls
LdrpFreeUnicodeString
LdrpGenericExceptionFilter
LdrpGetFileVersion
LdrpGetProcedureAddress
LdrpGetRegValueKey
LdrpGetResourceChecksum
LdrpGetShimEngineInterface
LdrpHandleNewFormatImportDescriptors
LdrpHandleOldFormatImportDescriptors
LdrpHandleOneNewFormatImportDescriptor
LdrpHandleOneOldFormatImportDescriptor
LdrpInitializationFailure
LdrpInitialize
LdrpInitializeApplicationVerifierPackage
LdrpInitializeExecutionOptions
LdrpInitializeProcess
LdrpInitializeProcessWrapperFilter
LdrpInitializeThread
LdrpInitializeTls
LdrpInsertMemoryTableEntry
LdrpLoadDll
LdrpLoadImportModule
LdrpLoadShimEngine
LdrpMapDll
LdrpMungHeapImportsForTagging
LdrpOpenFileVersionKey
LdrpOpenImageFileOptionsKey
LdrpOpenKey
LdrpQueryImageFileKeyOption
LdrpResolveDllName
LdrpResolveDllNameForAppPrivateRedirection
LdrProcessRelocationBlock
LdrpRunInitializeRoutines
LdrpSearchResourceSection_U
LdrpSendDllLoadedNotifications
LdrpSendDllUnloadedNotifications
LdrpSetAlternateResourceModuleHandle
LdrpSetProtection
LdrpSnapIAT
LdrpSnapThunk
LdrpTagAllocateHeap
LdrpTagAllocateHeap0
LdrpTagAllocateHeap1
LdrpTagAllocateHeap10
LdrpTagAllocateHeap11
LdrpTagAllocateHeap12
LdrpTagAllocateHeap13
LdrpTagAllocateHeap14
LdrpTagAllocateHeap15
LdrpTagAllocateHeap16
LdrpTagAllocateHeap17
LdrpTagAllocateHeap18
LdrpTagAllocateHeap19
LdrpTagAllocateHeap2
LdrpTagAllocateHeap20
LdrpTagAllocateHeap21
LdrpTagAllocateHeap22
LdrpTagAllocateHeap23
LdrpTagAllocateHeap24
LdrpTagAllocateHeap25
LdrpTagAllocateHeap26
LdrpTagAllocateHeap27
LdrpTagAllocateHeap28
LdrpTagAllocateHeap29
LdrpTagAllocateHeap3
LdrpTagAllocateHeap30
LdrpTagAllocateHeap31
LdrpTagAllocateHeap32
LdrpTagAllocateHeap33
LdrpTagAllocateHeap34
LdrpTagAllocateHeap35
LdrpTagAllocateHeap36
LdrpTagAllocateHeap37
LdrpTagAllocateHeap38
LdrpTagAllocateHeap39
LdrpTagAllocateHeap4
LdrpTagAllocateHeap40
LdrpTagAllocateHeap41
LdrpTagAllocateHeap42
LdrpTagAllocateHeap43
LdrpTagAllocateHeap44
LdrpTagAllocateHeap45
LdrpTagAllocateHeap46
LdrpTagAllocateHeap47
LdrpTagAllocateHeap48
LdrpTagAllocateHeap49
LdrpTagAllocateHeap5
LdrpTagAllocateHeap50
LdrpTagAllocateHeap51
LdrpTagAllocateHeap52
LdrpTagAllocateHeap53
LdrpTagAllocateHeap54
LdrpTagAllocateHeap55
LdrpTagAllocateHeap56
LdrpTagAllocateHeap57
LdrpTagAllocateHeap58
LdrpTagAllocateHeap59
LdrpTagAllocateHeap6
LdrpTagAllocateHeap60
LdrpTagAllocateHeap61
LdrpTagAllocateHeap62
LdrpTagAllocateHeap63
LdrpTagAllocateHeap7
LdrpTagAllocateHeap8
LdrpTagAllocateHeap9
LdrpTouchThreadStack
LdrpUnloadShimEngine
LdrpUpdateLoadCount2
LdrpUpdateLoadCount3
LdrpValidateImageForMp
LdrpVerifyAlternateResourceModule
LdrpWalkImportDescriptor
LdrQueryApplicationCompatibilityGoo
LdrQueryImageFileExecutionOptions
LdrQueryInLoadOrderModuleList
LdrQueryModuleInfoFromLdrEntry
LdrQueryModuleInfoLocalLoaderLock
LdrQueryNextListEntry
LdrQueryProcessModuleInformation
LdrQueryProcessModuleInformationEx
LdrQueryProcessPeb
LdrReadMemory
LdrRelocateImage
LdrRelocateImageWithBias
LdrSetAppCompatDllRedirectionCallback
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrUnlockLoaderLock
LdrVerifyImageMatchesChecksum
LdrVerifyMappedImageMatchesChecksum
LoadOle32Export
MD5Final
MD5Update
NPXNPHandler
NpxNpSkipInstruction
NtdllCtrlCallback
PfxFindPrefix
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RaiseException
RebalanceNode
RegisterNtdllTraceEvents
RegisterTraceGuidsA
RegisterTraceGuidsW
ReserveBufferSpace
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAddressInSectionTable
RtlAddVectoredExceptionHandler
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAllocateHeapSlowly
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendPathElement
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplicationVerifierStop
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAssert
RtlAssert2
RtlCallVectoredExceptionHandlers
RtlCancelTimer
RtlCaptureStackBackTrace
RtlCaptureStackContext
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlCompactHeap
RtlCompareString
RtlCompressBuffer
RtlCompressBufferLZNT1
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertVariantToProperty
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCreateActivationContext
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlCreateHeap
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCutoverTimeToSystemTime
RtlDeactivateActivationContext
RtlDeactivateActivationContextUnsafeFast
RtlDebugAllocateHeap
RtlDebugCompactHeap
RtlDebugCreateHeap
RtlDebugCreateTagHeap
RtlDebugDestroyHeap
RtlDebugFreeHeap
RtlDebugGetUserInfoHeap
RtlDebugQueryTagHeap
RtlDebugReAllocateHeap
RtlDebugSetUserFlagsHeap
RtlDebugSetUserValueHeap
RtlDebugSizeHeap
RtlDebugUsageHeap
RtlDebugWalkHeap
RtlDebugZeroHeap
RtlDecompressBuffer
RtlDecompressBufferLZNT1
RtlDecompressFragment
RtlDecompressFragmentLZNT1
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetectHeapLeaks
RtlDispatchException
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDoesFileExists_UEx
RtlDoesFileExists_UstrEx
RtlDosApplyFileIsolationRedirection_Ustr
RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_Ustr
RtlDosSearchPath_U
RtlDosSearchPath_Ustr
RtlDumpResource
RtlDuplicateUnicodeString
RtlEmptyAtomTable
RtlEnterCriticalSection
RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory
RtlEnumerateGenericTableWithoutSplaying
RtlEnumerateGenericTableWithoutSplayingAvl
RtlEnumProcessHeaps
RtlEqualDomainName
RtlEqualString
RtlExitUserThread
RtlExpandEnvironmentStrings_U
RtlExtendedLargeIntegerDivide
RtlExtendHeap
RtlFinalReleaseOutOfProcessMemoryStream
RtlFindActivationContextSectionGuid
RtlFindActivationContextSectionString
RtlFindCharInUnicodeString
RtlFindClearBitsAndSet
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextActivationContextSection
RtlFindRange
RtlFindSetBitsAndClear
RtlFlushSecureMemoryCache
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeHeap
RtlFreeHeapSlowly
RtlFreeRangeList
RtlFreeSid
RtlFreeThreadActivationContextStack
RtlFreeUserThreadStack
RtlGenerate8dot3Name
RtlGetActiveActivationContext
RtlGetAssemblyStorageRoot
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetCurrentDirectory_U
RtlGetElementGenericTableAvl
RtlGetFullPathName_U
RtlGetFullPathName_Ustr
RtlGetFullPathName_UstrEx
RtlGetLengthWithoutLastFullDosOrNtPathElement
RtlGetNtProductType
RtlGetProcessHeaps
RtlGetSetBootStatusData
RtlGetUserInfoHeap
RtlGetVersion
RtlImageDirectoryEntryToData
RtlImageRvaToVa
RtlImpersonateSelf
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeCriticalSectionAndSpinCount
RtlInitializeHeapManager
RtlInitializeResource
RtlInitializeRXact
RtlInitializeStackTraceDataBase
RtlInitNlsTables
RtlInitStackTraceDataBaseEx
RtlInitUnicodeStringEx
RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl
RtlInt64ToUnicodeString
RtlIntegerToChar
RtlIntegerToUnicode
RtlIntegerToUnicodeString
RtlInterlockedFlushSList
RtlInterlockedPopEntrySList
RtlInterlockedPushEntrySList
RtlInvertRangeList
RtlIpv4AddressToStringA
RtlIpv4AddressToStringW
RtlIpv4StringToAddressA
RtlIpv4StringToAddressW
RtlIpv6AddressToStringA
RtlIpv6AddressToStringW
RtlIpv6StringToAddressA
RtlIpv6StringToAddressW
RtlIsDosDeviceName_U
RtlIsDosDeviceName_Ustr
RtlIsNameLegalDOS8Dot3
RtlIsRangeAvailable
RtlIsValidIndexHandle
RtlLargeIntegerDivide
RtlLargeIntegerToChar
RtlLargeIntegerToUnicode
RtlLeaveCriticalSection
RtlLengthSidAsUnicodeString
RtlLocalTimeToSystemTime
RtlLockBootStatusData
RtlLockHeap
RtlLogStackBackTrace
RtlLookupAtomInAtomTable
RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl
RtlMakeSelfRelativeSD
RtlMergeRangeLists
RtlMultiAppendUnicodeStringBuffer
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNewSecurityObjectEx
RtlNtPathNameToDosPathName
RtlNtStatusToDosError
RtlNtStatusToDosErrorNoTeb
RtlOemStringToUnicodeString
RtlOpenCurrentUser
RtlpAcquireWorker
RtlpActivateLowFragmentationHeap
RtlpAddHeapToProcessList
RtlpAddIntersectingRanges
RtlpAddKnownAce
RtlpAddKnownObjectAce
RtlpAddRange
RtlpAddTimer
RtlpAddWait
RtlpAllocateActivationContextStackFrame
RtlpAllocateAffinityIndex
RtlpAllocateAtom
RtlpAllocateDebugInfo
RtlpAllocateFromHeapLookaside
RtlpAllocateHeapUsageEntry
RtlpAllocateTags
RtlpAllocateUserBlock
RtlpAllocDeallocQueryBuffer
RtlpApplyAclToObject
RtlpAssemblyStorageMapResolutionDefaultCallback
RtlpAsyncTimerCallbackCompletion
RtlpAsyncWaitCallbackCompletion
RtlpAtomMapAtomToHandleEntry
RtlpBreakPointHeap
RtlpCallQueryRegistryRoutine
RtlpCancelTimer
RtlpCancelTimerEx
RtlpChangeQueryDebugBufferTarget
RtlpCheckBusyBlockTail
RtlpCheckDeferedCriticalSection
RtlpCheckDeviceName
RtlpCheckForCriticalSectionsInMemoryRange
RtlpCheckHeapSignature
RtlpCheckRelativeDrive
RtlpCoalesceFreeBlocks
RtlpCoalesceHeap
RtlpCommitQueryDebugInfo
RtlpCompareAces
RtlpCompareKnownAces
RtlpCompareKnownObjectAces
RtlpComputeBackupIndex
RtlpComputeMergedAcl
RtlpComputeMergedAcl2
RtlpConvertAclToAutoInherit
RtlpConvertHeapBucket
RtlpConvertSegmentToHeap
RtlpConvertToAutoInheritSecurityObject
RtlpConvertToMergedRange
RtlpCopyAces
RtlpCopyEffectiveAce
RtlpCopyProcString
RtlpCopyRangeListEntry
RtlpCrackActivationContextStringSectionHeader
RtlpCreateCriticalSectionSem
RtlpCreateHandleForAtom
RtlpCreateLowFragHeap
RtlpCreateRangeListEntry
RtlpCreateServerAcl
RtlpCreateStack
RtlpCreateUnCommittedRange
RtlPcToFileHeader
RtlpDeactivateTimer
RtlpDeactivateWait
RtlpDeactivateWaitWithIndex
RtlpDebugPageHeapAddNewPool
RtlpDebugPageHeapAllocate
RtlpDebugPageHeapAllocateNode
RtlpDebugPageHeapAllocateVM
RtlpDebugPageHeapAssert
RtlpDebugPageHeapBreak
RtlpDebugPageHeapCoalesceFreeIntoAvailable
RtlpDebugPageHeapCoalesceNodeIntoAvailable
RtlpDebugPageHeapCommitVM
RtlpDebugPageHeapCompact
RtlpDebugPageHeapCreate
RtlpDebugPageHeapDecommitVM
RtlpDebugPageHeapDestroy
RtlpDebugPageHeapEnterCritSect
RtlpDebugPageHeapException
RtlpDebugPageHeapFindAvailableMem
RtlpDebugPageHeapFree
RtlpDebugPageHeapGetProcessHeaps
RtlpDebugPageHeapGetUserInfo
RtlpDebugPageHeapGrowVirtual
RtlpDebugPageHeapIsLocked
RtlpDebugPageHeapLock
RtlpDebugPageHeapPointerFromHandle
RtlpDebugPageHeapProtectionText
RtlpDebugPageHeapProtectVM
RtlpDebugPageHeapReAllocate
RtlpDebugPageHeapReleaseVM
RtlpDebugPageHeapRobustProtectVM
RtlpDebugPageHeapSerialize
RtlpDebugPageHeapSetUserFlags
RtlpDebugPageHeapSetUserValue
RtlpDebugPageHeapSize
RtlpDebugPageHeapUnlock
RtlpDebugPageHeapUsage
RtlpDebugPageHeapValidate
RtlpDeCommitFreeBlock
RtlpDeleteFromMergedRange
RtlpDeleteRangeListEntry
RtlpDeleteTimer
RtlpDeleteTimerQueue
RtlpDeleteTimerQueueComplete
RtlpDeleteWait
RtlpDeregisterWait
RtlpDestroyHandleTableForAtomTable
RtlpDestroyHeapSegment
RtlpDestroyLockAtomTable
RtlpDestroyLowFragHeap
RtlpDestroyTags
RtlpDetermineDosPathNameType4
RtlpDphAddToDelayedFreeQueue
RtlpDphFreeDelayedBlocksFromHeap
RtlpDphGetBlockSizeFromCorruptedBlock
RtlpDphInitializeDelayedFreeQueue
RtlpDphInternalValidatePageHeap
RtlpDphIsDllTargeted
RtlpDphIsNormalFreeHeapBlock
RtlpDphIsNormalHeapBlock
RtlpDphIsPageHeapBlock
RtlpDphLogStackTrace
RtlpDphNeedToTrimDelayedFreeQueue
RtlpDphNormalHeapAllocate
RtlpDphNormalHeapFree
RtlpDphNormalHeapGetUserInfo
RtlpDphNormalHeapReAllocate
RtlpDphNormalHeapSetUserFlags
RtlpDphNormalHeapSetUserValue
RtlpDphNormalHeapSize
RtlpDphNormalHeapValidate
RtlpDphPostProcessing
RtlpDphReportCorruptedBlock
RtlpDphSameVirtualRegion
RtlpDphShouldAllocateInPageHeap
RtlpDphShouldFaultInject
RtlpDphTargetDllsLogicInitialize
RtlpDphTrimDelayedFreeQueue
RtlpDphUnexpectedExceptionFilter
RtlpDphVmLimitCanUsePageHeap
RtlpDphWriteNormalHeapBlockInformation
RtlpDphWritePageHeapBlockInformation
RtlpDumpEntryFlagDescription
RtlpDumpEntryHeader
RtlpDumpEntryInfo
RtlpExecuteIOWorkItem
RtlpExecuteLongIOWorkItem
RtlpExecuteWorkerRequest
RtlpExitThread
RtlpExtendHeap
RtlpExtendStackTraceDataBase
RtlpFindActivationContextSection_CheckParameters
RtlpFindActivationContextSection_FillOutReturnedData
RtlpFindAndCommitPages
RtlpFindEntry
RtlpFindFirstActivationContextSection
RtlpFindGuidInSection
RtlpFindNextActivationContextSection
RtlpFindUnicodeStringInSection
RtlpFindWaitThread
RtlpFireTimers
RtlpFireTimersAndReorder
RtlpFlushCacheContents
RtlpFlushLargestCacheBlock
RtlpFlushLFHeapCache
RtlpFreeActivationContextStackFrame
RtlpFreeAtom
RtlpFreeDebugInfo
RtlpFreeHandleForAtom
RtlpFreeStack
RtlpFreeToHeapLookaside
RtlpFreeUserBlock
RtlpFreeWaitEvent
RtlpGenerateInheritAcl
RtlpGenerateInheritedAce
RtlpGetActivationContextDataStorageMapAndRosterHeader
RtlpGetAssemblyStorageMapRootLocation
RtlpGetDefaultsSubjectContext
RtlpGetHeapBlock
RtlpGetIntegerAtom
RtlpGetLengthWithoutLastPathElement
RtlpGetRegistryHandle
RtlpGetTagName
RtlpGetTimeRemaining
RtlpGetTimeZoneInfoHandle
RtlpGetWaitEvent
RtlpGrowBlockInPlace
RtlpHashStringToAtom
RtlpHeapIsLocked
RtlpImageDirectoryEntryToData32
RtlpImageDirectoryEntryToData64
RtlpImageNtHeader
RtlPinAtomInAtomTable
RtlpInheritAcl
RtlpInheritAcl2
RtlpInitDeferedCriticalSection
RtlpInitializeAffinityManager
RtlpInitializeAllowedAce
RtlpInitializeAssemblyStorageMap
RtlpInitializeAuditAce
RtlpInitializeDeniedAce
RtlpInitializeHandleTableForAtomTable
RtlpInitializeHeapSegment
RtlpInitializeLeakDetection
RtlpInitializeListIndex
RtlpInitializeLockAtomTable
RtlpInitializeLowFragHeapManager
RtlpInitializeTimerThreadPool
RtlpInitializeWaitThreadPool
RtlpInitializeWorkerThreadPool
RtlpInsertAssemblyStorageMapEntry
RtlpInsertFreeBlock
RtlpInsertTimersIntoDeltaList
RtlpInsertUnCommittedPages
RtlpIOWorkerThread
RtlpIsDuplicateAce
RtlpIsRangeAvailable
RtlpLocateActivationContextSection
RtlpLocateActivationContextSectionForQuery
RtlpLockAtomTable
RtlpLowFragHeapAlloc
RtlpLowFragHeapAllocateFromZone
RtlpLowFragHeapFree
RtlpNewSecurityObject
RtlpNotOwnerCriticalSection
RtlpNtCreateKey
RtlpNtEnumerateSubKey
RtlpNtOpenKey
RtlpNtQueryValueKey
RtlpNtSetValueKey
RtlpOpenImageFile
RtlpProbeAssemblyStorageRootForAssembly
RtlpProcessTimeouts
RtlpProcessWaitCompletion
RtlpPushPageDescriptor
RtlpQueryAssemblyInformationActivationContextDetailedInformation
RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation
RtlpQueryInformationActivationContextBasicInformation
RtlpQueryInformationActivationContextDetailedInformation
RtlpQueryProcessEnumHeapsRoutine
RtlpQueueIOWorkerRequest
RtlpQueueWorkerRequest
RtlpReadHeapData
RtlpReadProcessHeaps
RtlPrefixString
RtlpRegisterHeapBlocks
RtlpRemoveHeapFromProcessList
RtlpReOrderDeltaList
RtlpResetDriveEnvironment
RtlpResetTimer
RtlpResolveAssemblyStorageMapEntry
RtlpResync64BitTickCount
RtlProtectHeap
RtlpScanHeapAllocBlocks
RtlpScanProcessVirtualMemory
RtlpSecMemFreeVirtualMemory
RtlpSerializeHeap
RtlpServiceTimer
RtlpSetBlockInfo
RtlpSetSecurityObject
RtlpStartIOWorkerThread
RtlpStartThread
RtlpStartThreadpoolThread
RtlpStartWaitThread
RtlpStartWorkerThread
RtlpStkMarkDllRange
RtlpSubSegmentInitialize
RtlpSysVolAllocate
RtlpSysVolCheckOwnerAndSecurity
RtlpSysVolCreateSecurityDescriptor
RtlpSysVolTakeOwnership
RtlpThreadPoolGetActiveActivationContext
RtlpTimerThread
RtlpTraceDatabaseAcquireLock
RtlpTraceDatabaseAllocate
RtlpTraceDatabaseFree
RtlpTraceDatabaseInitializeLock
RtlpTraceDatabaseInternalAdd
RtlpTraceDatabaseReleaseLock
RtlpTraceDatabaseUninitializeLock
RtlpUninitializeAssemblyStorageMap
RtlpUnlockAtomTable
RtlpUnWaitCriticalSection
RtlpUpdateIndexInsertBlock
RtlpUpdateIndexRemoveBlock
RtlpUpdateTimer
RtlpValidateActivationContextData
RtlpValidateCurrentDirectory
RtlpValidateHeap
RtlpValidateHeapEntry
RtlpValidateHeapHeaders
RtlpValidateHeapSegment
RtlpValidOwnerSubjectContext
RtlpVerCompare
RtlpVerGetConditionMask
RtlpWaitForCriticalSection
RtlpWaitForEvent
RtlpWaitOrTimerCallout
RtlpWaitThread
RtlpWalkFrameChainFuzzy
RtlpWin32NTNameToNtPathName_U
RtlpWorkerCallout
RtlpWorkerThread
RtlpWorkerThreadCancelTimer
RtlpWorkerThreadSetTimer
RtlpWorkerThreadTimerCallback
RtlQueryAtomInAtomTable
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryInformationActivationContext
RtlQueryInformationActiveActivationContext
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryProcessModuleInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlQueueWorkItem
RtlRaiseException
RtlRaiseStatus
RtlReadOutOfProcessMemoryStream
RtlReAllocateHeap
RtlRegisterSecureMemoryCacheCallback
RtlRegisterWait
RtlReleaseActivationContext
RtlReleaseResource
RtlRemoteCall
RtlRemoveVectoredExceptionHandler
RtlReserveChunkLZNT1
RtlResetRtlTranslations
RtlRunEncodeUnicodeString
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSelfRelativeToAbsoluteSD2
RtlSetAllBits
RtlSetAttributesSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetEnvironmentVariable
RtlSetHeapInformation
RtlSetIoCompletionCallback
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlSetSecurityObject
RtlSetSecurityObjectEx
RtlSetTimeZoneInformation
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlSizeHeap
RtlStartRXact
RtlStringFromGUID
RtlSystemTimeToLocalTime
RtlTimeFieldsToTime
RtlTimeToSecondsSince1970
RtlTimeToSecondsSince1980
RtlTimeToTimeFields
RtlTraceDatabaseAdd
RtlTraceDatabaseCreate
RtlTraceDatabaseDestroy
RtlTraceDatabaseEnumerate
RtlTraceDatabaseFind
RtlTraceDatabaseValidate
RtlUnhandledExceptionFilter
RtlUnhandledExceptionFilter2
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger
RtlUnicodeStringToOemString
RtlUnlockBootStatusData
RtlUnlockHeap
RtlUnwind
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpdateTimer
RtlUpperString
RtlUsageHeap
RtlValidAcl
RtlValidateHeap
RtlValidateProcessHeaps
RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor
RtlValidSid
RtlVerifyVersionInfo
RtlWalkFrameChain
RtlWalkHeap
RtlWriteRegistryValue
RtlxOemStringToUnicodeSize
RtlxUnicodeStringToOemSize
RtlZeroHeap
RXactpCommit
RXactpOpenTargetKey
ShutDownWmiHandles
tolower
UnregisterTraceGuids
vDbgPrintEx
vDbgPrintExWithPrefix
WmipAddHandleToEventPump
WmipAddInstanceIdToNames
WmipAddLogHeaderToLogFile
WmipAddToGNList
WmipAllocateCookie
WmipAllocateTraceBuffers
WmipAllocDontFail
WmipAllocEvent
WmipAnsiToUnicode
WmipBaseFormatObjectAttributes
WmipBaseGetNamedObjectDirectory
WmipBasep8BitStringToStaticUnicodeString
WmipBuildGuidObjectAttributes
WmipBuildReceiveNotification
WmipCancelIo
WmipCloseHandle
WmipConvertEventToAnsi
WmipConvertWADToAnsi
WmipCopyStringToCountedUnicode
WmipCountedUnicodeToCountedAnsi
WmipCreateEventA
WmipCreateEventW
WmipCreateFile
WmipCreateFileA
WmipCreateFileW
WmipCreateHeap
WmipCreateThread
WmipDeinitializeDll
WmipDeliverAllEvents
WmipDereferenceGNEntry
WmipDeviceIoControl
WmipDisableTraceProvider
WmipDumpHardwareConfig
WmipDuplicateHandle
WmipEstablishEventPump
WmipEventPump
WmipEventPumpFromKernel
WmipExitThread
WmipExternalNotification
WmipFinalizeLogFileHeader
WmipFindCookie
WmipFindGuidNotification
WmipFlushAllBuffers
WmipFlushBuffer
WmipFreeCookie
WmipFreeLoggerContext
WmipGenericTraceEnable
WmipGetCpuConfig
WmipGetDiskInfo
WmipGetErrorMode
WmipGetFreeBuffer
WmipGetFullFreeBuffer
WmipGetGuidInCookie
WmipGetNetworkAdapters
WmipGetOverlappedResult
WmipGetSystemInfo
WmipGetTimeZoneInformation
WmipGetTraceBuffer
WmipGetVersionExA
WmipGetVersionExW
WmipGlobalMemoryStatus
WmipInitializeDll
WmipInitLoggerContext
WmipInternalNotification
WmipLogger
WmipLogImageLoadEvent
WmipLookupCookie
WmipMemCommit
WmipMemFree
WmipMemReserve
WmipProcessEventBuffer
WmipProcessExternalEvent
WmipProcessModuleRunDown
WmipProcessRunDown
WmipProcessUMRequest
WmipQueryLogger
WmipQueryUmLogger
WmipReadFile
WmipReceiveReply
WmipRegisterGuids
WmipRegOpenKey
WmipRegQueryValueKey
WmipReleaseFullBuffer
WmipSendUmLogRequest
WmipSendWmiKMRequest
WmipSetErrorMode
WmipSetEvent
WmipSetFilePointer
WmipSetLastError
WmipSetNtStatus
WmipSetThreadPriority
WmipSleep
WmipSleepEx
WmipStartUmLogger
WmipStopLoggerInstance
WmipStopUmLogger
WmipSwitchFullBuffer
WmipSysModuleRunDown
WmipThreadRunDown
WmipTlsAlloc
WmipTlsFree
WmipTlsGetValue
WmipTlsSetValue
WmipUnicodeToAnsi
WmipUpdateUmLogger
WmipUuidCreateSequential
WmipUuidGetValues
WmipWaitForMultipleObjectsEx
WmipWaitForSingleObject
WmipWaitForSingleObjectEx
WmiUnregisterGuids
xProtectHandle
xUnProtectHandle
_atol
_AVrfpDphDllcalloc
_AVrfpDphDllfree
_AVrfpDphDllNewArray
_AVrfpDphDllrealloc
_cos
_DbgPrint
_DbgPrintEx
_DbgPrintReturnControlC
_fabs
_fputwc
_isalnum
_isalpha
_iscntrl
_isdigit
_isgraph
_islower
_isprint
_ispunct
_isspace
_isupper
_iswalpha
_iswdigit
_iswlower
_iswspace
_iswxdigit
_isxdigit
_mbstowcs
_mbtowc
_RestoreEm87Context
_RtlSetProcessIsCritical
_RtlSetThreadIsCritical
_seh_longjmp_unwind
_sin
_sprintf
_sqrt
_sscanf
_swprintf
_tan
_toupper
_towlower
_towupper
_TransformMD5
_ungetc
_vsprintf
_wcstombs
_wctomb
__87except
__atan_default
__atoi64
__ceil_default
__ceil_pentium4
__check_overflow_exit
__CIatan
__CIcos
__CIlog_default
__CIsin
__CIsqrt
__CItan
__decomp
__d_inttype
__except1
__except_handler3
__fFEXP
__floor_default
__floor_pentium4
__fpclass
__fptrap
__global_unwind2
__handle_exc
__handle_qnan1
__i64tow
__input
__itow
__local_unwind2
__log_default
__ltow
__math_exit
__mbstrlen
__output
__powhlp
__pow_default
__raise_exc
__rtnospopde
__rttospopde
__snprintf
__snwprintf
__splitpath
__startOneArgErrorHandling
__ui64tow
__ultow
__umatherr
__vsnprintf
__vsnwprintf
__woutput
__wtoi64
__wtol
___eCommonExceptions
___eFSTENV
___iscsym
___iscsymf
___libm_error_support
There are
31,320
total registered users.
Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM
oleavr
Oct/24
Anatomy of a code tracer
hasherezade
Sep/24
IAT Patcher - new tool for ...
oleavr
Aug/27
CryptoShark: code tracer ba...
oleavr
Jun/25
Build a debugger in 5 minutes
More ...
Recent Blog Comments
nieo
on:
Mar/22
IAT Patcher - new tool for ...
djnemo
on:
Nov/17
Kernel debugger vs user mod...
acel
on:
Nov/14
Kernel debugger vs user mod...
pedram
on:
Dec/21
frida.github.io: scriptable...
capadleman
on:
Jun/19
Using NtCreateThreadEx for ...
More ...
Imagery
SoySauce Blueprint
Jun 6, 2008
[+] expand
View Gallery
(11) /
Submit