About
Articles
Book Store
Distributed RCE
Downloads
Event Calendar
Forums
Live Discussion
Reference Library
RSS Feeds
Search
Users
What's New
Customize Theme
bluegrey
blackgreen
metal
simple
Flag:
Tornado!
Hurricane!
Login:
Password:
Remember Me
Register
OpenRCE Win32 Call Chains Database
Windows XP SP2
>> NTDLL
AcquireBufferLocation
AllocateMemoryForThreadLocalData
AVrfDllLoadNotification
AVrfDllUnloadNotification
AVrfInitializeVerifier
AVrfPageHeapDllNotification
AVrfpChainDuplicateVerificationLayers
AVrfpDetectVerifiedExports
AVrfpDllLoadNotificationInternal
AVrfpDphDetectSnapRoutines
AVrfpDphDllGlobalAlloc
AVrfpDphDllGlobalFree
AVrfpDphDllGlobalReAlloc
AVrfpDphDllHeapAlloc
AVrfpDphDllHeapCreate
AVrfpDphDllHeapReAlloc
AVrfpDphDllLocalAlloc
AVrfpDphDllLocalFree
AVrfpDphDllLocalReAlloc
AVrfpDphSnapImports
AVrfpDumpProviderList
AVrfpEnableHandleVerifier
AVrfpEnableVerifierOptions
AVrfpFindClosestThunkDuplicate
AVrfpLoadAndInitializeProvider
AVrfpMoveProviderToEndOfInitializationList
AVrfpParseVerifierDllsString
AVrfpSnapAlreadyLoadedDlls
AVrfpSnapDllImports
CleanOnThreadExit
CleanUpAllThreadBuffers
CompareNamesCaseSensitive
CsrAllocateCaptureBuffer
CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrCaptureMessageString
CsrCaptureMessageUnicodeStringInPlace
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrOneTimeInitialize
CsrpConnectToServer
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DaysAndFractionToTime
DbgPrompt
DbgUiConnectToDbg
DbgUiContinue
DbgUiConvertStateChangeStructure
DbgUiDebugActiveProcess
DbgUiIssueRemoteBreakin
DbgUiStopDebugging
DbgUiWaitStateChange
DebugPrint
DebugPrompt
DeleteNodeFromTree
GetLoggerInfo
GetNextWchar
GetPidInfo
ImportTablepFreeFunctionSorted
ImportTablepFreeModuleSorted
ImportTablepHashCanonicalLists
ImportTablepInsertModuleSorted
InitializeAndRegisterNtdllTraceEvents
InitializeWmiHandles
InitSecurityCookie
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserExceptionDispatcher
LdrAccessOutOfProcessResource
LdrAccessResource
LdrAddRefDll
LdrCreateOutOfProcessImage
LdrDestroyOutOfProcessImage
LdrDisableThreadCalloutsForDll
LdrEnumerateLoadedModules
LdrEnumResources
LdrFindCreateProcessManifest
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResourceEx_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetDllHandleEx
LdrGetModuleName
LdrGetProcedureAddress
LdrHotPatchRoutine
LdrInitShimEngineDynamic
LdrLoadAlternateResourceModule
LdrLoadDll
LdrLockLoaderLock
LdrpAccessResourceData
LdrpAccessResourceDataNoMultipleLanguage
LdrpAllocateDataTableEntry
LdrpAllocateUnicodeString
LdrpApplyHotPatch
LdrpCalcResourceChecksum
LdrpCallTlsInitializers
LdrpCheckAppDatabase
LdrpCheckCorImage
LdrpCheckForKnownDll
LdrpCheckForLoadedDll
LdrpCheckForSafeDiscImage
LdrpCheckForSecuROMImage
LdrpCheckNXCompatibility
LdrpCheckNxIncompatibleDllSection
LdrpCheckSafeDiscDll
LdrpCodeAuthzCheckDllAllowed
LdrpCompareResourceChecksum
LdrpCopyUnicodeString
LdrpCorUnloadImage
LdrpCorValidateImage
LdrpCreateDllSection
LdrpCreateKey
LdrpDeallocateDataTableEntry
LdrpDefineDllTag
LdrpFetchAddressOfEntryPoint
LdrpFetchAddressOfSecurityCookie
LdrpFinalizeAndDeallocateDataTableEntry
LdrpForkProcess
LdrpFreeUnicodeString
LdrpGenericExceptionFilter
LdrpGetFileVersion
LdrpGetProcedureAddress
LdrpGetRegValueKey
LdrpGetResourceChecksum
LdrpGetShimEngineInterface
LdrpHandleNewFormatImportDescriptors
LdrpHandleOldFormatImportDescriptors
LdrpHandleOneNewFormatImportDescriptor
LdrpHandleOneOldFormatImportDescriptor
LdrpInitializationFailure
LdrpInitializeApplicationVerifierPackage
LdrpInitializeExecutionOptions
LdrpInitializeProcess
LdrpInitializeProcessWrapperFilter
LdrpInitializeThread
LdrpInitializeTls
LdrpInitSecurityCookie
LdrpInsertMemoryTableEntry
LdrpLoadDll
LdrpLoadImportModule
LdrpLoadShimEngine
LdrpMapDll
LdrpMungHeapImportsForTagging
LdrpOpenFileVersionKey
LdrpOpenImageFileOptionsKey
LdrpOpenKey
LdrpProcessImageProtectionParameter
LdrpQueryImageFileKeyOption
LdrpRecordUnloadEvent
LdrpResolveDllName
LdrpResolveDllNameForAppPrivateRedirection
LdrProcessRelocationBlock
LdrProcessRelocationBlockLongLong
LdrpRundownHotpatchList
LdrpRunInitializeRoutines
LdrpSearchResourceSection_U
LdrpSendDllLoadedNotifications
LdrpSendDllUnloadedNotifications
LdrpSetAlternateResourceModuleHandle
LdrpSetupHotpatch
LdrpSnapIAT
LdrpTagAllocateHeap
LdrpTagAllocateHeap0
LdrpTagAllocateHeap1
LdrpTagAllocateHeap10
LdrpTagAllocateHeap11
LdrpTagAllocateHeap12
LdrpTagAllocateHeap13
LdrpTagAllocateHeap14
LdrpTagAllocateHeap15
LdrpTagAllocateHeap16
LdrpTagAllocateHeap17
LdrpTagAllocateHeap18
LdrpTagAllocateHeap19
LdrpTagAllocateHeap2
LdrpTagAllocateHeap20
LdrpTagAllocateHeap21
LdrpTagAllocateHeap22
LdrpTagAllocateHeap23
LdrpTagAllocateHeap24
LdrpTagAllocateHeap25
LdrpTagAllocateHeap26
LdrpTagAllocateHeap27
LdrpTagAllocateHeap28
LdrpTagAllocateHeap29
LdrpTagAllocateHeap3
LdrpTagAllocateHeap30
LdrpTagAllocateHeap31
LdrpTagAllocateHeap32
LdrpTagAllocateHeap33
LdrpTagAllocateHeap34
LdrpTagAllocateHeap35
LdrpTagAllocateHeap36
LdrpTagAllocateHeap37
LdrpTagAllocateHeap38
LdrpTagAllocateHeap39
LdrpTagAllocateHeap4
LdrpTagAllocateHeap40
LdrpTagAllocateHeap41
LdrpTagAllocateHeap42
LdrpTagAllocateHeap43
LdrpTagAllocateHeap44
LdrpTagAllocateHeap45
LdrpTagAllocateHeap46
LdrpTagAllocateHeap47
LdrpTagAllocateHeap48
LdrpTagAllocateHeap49
LdrpTagAllocateHeap5
LdrpTagAllocateHeap50
LdrpTagAllocateHeap51
LdrpTagAllocateHeap52
LdrpTagAllocateHeap53
LdrpTagAllocateHeap54
LdrpTagAllocateHeap55
LdrpTagAllocateHeap56
LdrpTagAllocateHeap57
LdrpTagAllocateHeap58
LdrpTagAllocateHeap59
LdrpTagAllocateHeap6
LdrpTagAllocateHeap60
LdrpTagAllocateHeap61
LdrpTagAllocateHeap62
LdrpTagAllocateHeap63
LdrpTagAllocateHeap7
LdrpTagAllocateHeap8
LdrpTagAllocateHeap9
LdrpTouchThreadStack
LdrpUnloadShimEngine
LdrpUpdateLoadCount2
LdrpUpdateLoadCount3
LdrpValidateImageForMp
LdrpVerifyAlternateResourceModule
LdrpWalkImportDescriptor
LdrQueryApplicationCompatibilityGoo
LdrQueryImageFileExecutionOptions
LdrQueryInLoadOrderModuleList
LdrQueryModuleInfoFromLdrEntry
LdrQueryModuleInfoLocalLoaderLock
LdrQueryNextListEntry
LdrQueryProcessModuleInformation
LdrQueryProcessModuleInformationEx
LdrQueryProcessPeb
LdrReadMemory
LdrRelocateImage
LdrRelocateImageWithBias
LdrSetAppCompatDllRedirectionCallback
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrUnlockLoaderLock
LdrVerifyImageMatchesChecksum
LdrVerifyMappedImageMatchesChecksum
LoadOle32Export
MD5Final
MD5Update
NtdllCtrlCallback
PfxFindPrefix
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RaiseException
RebalanceNode
RegisterTraceGuidsA
RegisterTraceGuidsW
ReserveBufferSpace
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlActivateActivationContext
RtlActivateActivationContextEx
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAddressInSectionTable
RtlAddVectoredExceptionHandler
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAllocateHeapSlowly
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplicationVerifierStop
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAssert
RtlAssert2
RtlCallKernel32UnhandledExceptionFilter
RtlCancelTimer
RtlCaptureImageExceptionValues
RtlCaptureStackBackTrace
RtlCaptureStackContext
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlCompactHeap
RtlCompareString
RtlCompressBuffer
RtlCompressBufferLZNT1
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConvertExclusiveToShared
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertUiListToApiList
RtlConvertVariantToProperty
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCreateActivationContext
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateEnvironment
RtlCreateHeap
RtlCreateHotPatch
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCutoverTimeToSystemTime
RtlDeactivateActivationContext
RtlDebugAllocateHeap
RtlDebugCompactHeap
RtlDebugCreateHeap
RtlDebugCreateTagHeap
RtlDebugDestroyHeap
RtlDebugFreeHeap
RtlDebugGetUserInfoHeap
RtlDebugQueryTagHeap
RtlDebugReAllocateHeap
RtlDebugSetUserFlagsHeap
RtlDebugSetUserValueHeap
RtlDebugSizeHeap
RtlDebugUsageHeap
RtlDebugWalkHeap
RtlDebugZeroHeap
RtlDecompressBuffer
RtlDecompressBufferLZNT1
RtlDecompressFragment
RtlDecompressFragmentLZNT1
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDispatchException
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDoesFileExists_UEx
RtlDoesFileExists_UStr
RtlDoesFileExists_UstrEx
RtlDosApplyFileIsolationRedirection_Ustr
RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_Ustr
RtlDosSearchPath_U
RtlDosSearchPath_Ustr
RtlDumpResource
RtlDuplicateUnicodeString
RtlEmptyAtomTable
RtlEncodePointer
RtlEnterCriticalSection
RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory
RtlEnumerateGenericTableWithoutSplaying
RtlEnumProcessHeaps
RtlEqualDomainName
RtlExitUserThread
RtlExpandEnvironmentStrings_U
RtlExtendedLargeIntegerDivide
RtlExtendHeap
RtlFinalReleaseOutOfProcessMemoryStream
RtlFindActivationContextSectionGuid
RtlFindActivationContextSectionString
RtlFindCharInUnicodeString
RtlFindClearBitsAndSet
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextActivationContextSection
RtlFindRange
RtlFindSetBitsAndClear
RtlFlushSecureMemoryCache
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHeap
RtlFreeHeapSlowly
RtlFreeHotPatchData
RtlFreeOemString
RtlFreeRangeList
RtlFreeSid
RtlFreeUserThreadStack
RtlGenerate8dot3Name
RtlGetAssemblyStorageRoot
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetCurrentDirectory_U
RtlGetElementGenericTableAvl
RtlGetFullPathName_U
RtlGetFullPathName_Ustr
RtlGetFullPathName_UstrEx
RtlGetHotpatchHeader
RtlGetLengthWithoutLastFullDosOrNtPathElement
RtlGetProcessHeaps
RtlGetSetBootStatusData
RtlGetUserInfoHeap
RtlGetVersion
RtlGUIDFromString
RtlImageDirectoryEntryToData
RtlImageRvaToVa
RtlImpersonateSelf
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeCriticalSectionAndSpinCount
RtlInitializeHeapManager
RtlInitializeHotPatch
RtlInitializeResource
RtlInitializeRXact
RtlInitializeStackTraceDataBase
RtlInitNlsTables
RtlInitStackTraceDataBaseEx
RtlInitUnicodeStringEx
RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl
RtlInt64ToUnicodeString
RtlIntegerToChar
RtlIntegerToUnicode
RtlIntegerToUnicodeString
RtlInterlockedFlushSList
RtlInterlockedPopEntrySList
RtlInterlockedPushEntrySList
RtlInvalidHandlerDetected
RtlInvertRangeList
RtlIpv4AddressToStringA
RtlIpv4AddressToStringExA
RtlIpv4AddressToStringExW
RtlIpv4AddressToStringW
RtlIpv4StringToAddressA
RtlIpv4StringToAddressExA
RtlIpv4StringToAddressExW
RtlIpv4StringToAddressW
RtlIpv6AddressToStringA
RtlIpv6AddressToStringExA
RtlIpv6AddressToStringExW
RtlIpv6AddressToStringW
RtlIpv6StringToAddressA
RtlIpv6StringToAddressExA
RtlIpv6StringToAddressExW
RtlIpv6StringToAddressW
RtlIsDosDeviceName_U
RtlIsDosDeviceName_Ustr
RtlIsNameLegalDOS8Dot3
RtlIsRangeAvailable
RtlIsTextUnicode
RtlIsValidHandler
RtlIsValidIndexHandle
RtlLargeIntegerDivide
RtlLargeIntegerToChar
RtlLargeIntegerToUnicode
RtlLeaveCriticalSection
RtlLengthSidAsUnicodeString
RtlLocalTimeToSystemTime
RtlLockBootStatusData
RtlLockHeap
RtlLogStackBackTrace
RtlLookupAtomInAtomTable
RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl
RtlLookupFunctionTable
RtlMakeSelfRelativeSD
RtlMergeRangeLists
RtlMultiAppendUnicodeStringBuffer
RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess
RtlNewSecurityObject
RtlNewSecurityObjectEx
RtlNtPathNameToDosPathName
RtlNtStatusToDosError
RtlOemStringToUnicodeString
RtlOpenCurrentUser
RtlpAcquireHeapListLock
RtlpAcquireWorker
RtlpActivateLowFragmentationHeap
RtlpAddHeapToProcessList
RtlpAddIntersectingRanges
RtlpAddKnownAce
RtlpAddKnownObjectAce
RtlpAddRange
RtlpAddTimer
RtlpAdjustHeapLookasideDepth
RtlpAllocateActivationContextStackFrame
RtlpAllocateAffinityIndex
RtlpAllocateAtom
RtlpAllocateDebugInfo
RtlpAllocateFromHeapLookaside
RtlpAllocateHeapUsageEntry
RtlpAllocateHotpatchMemory
RtlpAllocateTags
RtlpAllocDeallocQueryBuffer
RtlpApplyAclToObject
RtlpApplyRelocationFixups
RtlpAssemblyStorageMapResolutionDefaultCallback
RtlpAsyncWaitCallbackCompletion
RtlpAtomMapAtomToHandleEntry
RtlpBreakPointHeap
RtlpCancelTimer
RtlpCancelTimerEx
RtlpChangeQueryDebugBufferTarget
RtlpCheckDeferedCriticalSection
RtlpCheckDeviceName
RtlpCheckForCriticalSectionsInMemoryRange
RtlpCheckRelativeDrive
RtlpCoalesceFreeBlocks
RtlpCoalesceHeap
RtlpCommitQueryDebugInfo
RtlpCompareAces
RtlpCompareKnownObjectAces
RtlpComputeBackupIndex
RtlpComputeMergedAcl
RtlpComputeMergedAcl2
RtlpConvertAclToAutoInherit
RtlpConvertToAutoInheritSecurityObject
RtlpConvertToMergedRange
RtlpCopyAces
RtlpCopyAndNormalizePeHeaderForHash
RtlpCopyEffectiveAce
RtlpCopyProcString
RtlpCopyRangeListEntry
RtlpCrackActivationContextStringSectionHeader
RtlpCreateCriticalSectionSem
RtlpCreateHandleForAtom
RtlpCreateLowFragHeap
RtlpCreateRangeListEntry
RtlpCreateServerAcl
RtlpCreateStack
RtlPcToFileHeader
RtlpDeactivateTimer
RtlpDeactivateWait
RtlpDeactivateWaitWithIndex
RtlpDebugPageHeapAddNewPool
RtlpDebugPageHeapAllocate
RtlpDebugPageHeapAllocateNode
RtlpDebugPageHeapAllocateVM
RtlpDebugPageHeapAssert
RtlpDebugPageHeapBreak
RtlpDebugPageHeapCoalesceFreeIntoAvailable
RtlpDebugPageHeapCoalesceNodeIntoAvailable
RtlpDebugPageHeapCommitVM
RtlpDebugPageHeapCompact
RtlpDebugPageHeapCreate
RtlpDebugPageHeapDecommitVM
RtlpDebugPageHeapDestroy
RtlpDebugPageHeapEnterCritSect
RtlpDebugPageHeapException
RtlpDebugPageHeapFindAvailableMem
RtlpDebugPageHeapFree
RtlpDebugPageHeapGetProcessHeaps
RtlpDebugPageHeapGetUserInfo
RtlpDebugPageHeapGrowVirtual
RtlpDebugPageHeapIsLocked
RtlpDebugPageHeapLeaveCritSect
RtlpDebugPageHeapLock
RtlpDebugPageHeapPointerFromHandle
RtlpDebugPageHeapProtectionText
RtlpDebugPageHeapProtectVM
RtlpDebugPageHeapReAllocate
RtlpDebugPageHeapReleaseVM
RtlpDebugPageHeapRobustProtectVM
RtlpDebugPageHeapSerialize
RtlpDebugPageHeapSetUserFlags
RtlpDebugPageHeapSetUserValue
RtlpDebugPageHeapSize
RtlpDebugPageHeapUnlock
RtlpDebugPageHeapUsage
RtlpDebugPageHeapValidate
RtlpDeCommitFreeBlock
RtlpDeleteFromMergedRange
RtlpDeleteRangeListEntry
RtlpDeleteTimer
RtlpDeleteTimerQueue
RtlpDeleteTimerQueueComplete
RtlpDeleteWait
RtlpDeregisterWait
RtlpDestroyHandleTableForAtomTable
RtlpDestroyHeapSegment
RtlpDestroyLockAtomTable
RtlpDestroyLowFragHeap
RtlpDphAddToDelayedFreeQueue
RtlpDphFreeDelayedBlocksFromHeap
RtlpDphGetBlockSizeFromCorruptedBlock
RtlpDphInitializeDelayedFreeQueue
RtlpDphInternalValidatePageHeap
RtlpDphIsDllTargeted
RtlpDphIsNormalFreeHeapBlock
RtlpDphIsNormalHeapBlock
RtlpDphIsPageHeapBlock
RtlpDphLogStackTrace
RtlpDphNeedToTrimDelayedFreeQueue
RtlpDphNormalHeapAllocate
RtlpDphNormalHeapFree
RtlpDphNormalHeapGetUserInfo
RtlpDphNormalHeapReAllocate
RtlpDphNormalHeapSetUserFlags
RtlpDphNormalHeapSetUserValue
RtlpDphNormalHeapSize
RtlpDphNormalHeapValidate
RtlpDphReportCorruptedBlock
RtlpDphSameVirtualRegion
RtlpDphShouldAllocateInPageHeap
RtlpDphShouldFaultInject
RtlpDphTargetDllsLogicInitialize
RtlpDphTrimDelayedFreeQueue
RtlpDphUnexpectedExceptionFilter
RtlpDphVmLimitCanUsePageHeap
RtlpDphWriteNormalHeapBlockInformation
RtlpDphWritePageHeapBlockInformation
RtlpDumpEntryFlagDescription
RtlpDumpEntryHeader
RtlpDumpEntryInfo
RtlpEnsureBufferSize
RtlpExecuteIOWorkItem
RtlpExecuteLongIOWorkItem
RtlpExecuteWorkerRequest
RtlpExitThread
RtlpExtendStackTraceDataBase
RtlpFindAndCommitPages
RtlpFindEntry
RtlpFindFirstActivationContextSection
RtlpFindGuidInSection
RtlpFindNextActivationContextSection
RtlpFindSectionHeader
RtlpFindUnicodeStringInSection
RtlpFindWaitThread
RtlpFireTimers
RtlpFireTimersAndReorder
RtlpFlushLargestCacheBlock
RtlpFreeActivationContextStackFrame
RtlpFreeAtom
RtlpFreeDebugInfo
RtlpFreeHandleForAtom
RtlpFreeStack
RtlpFreeToHeapLookaside
RtlpFreeWaitEvent
RtlpGenerateInheritAcl
RtlpGenerateInheritedAce
RtlpGetActivationContextDataStorageMapAndRosterHeader
RtlpGetAssemblyStorageMapRootLocation
RtlpGetColdpatchDebugSignature
RtlpGetDefaultsSubjectContext
RtlpGetHeapBlock
RtlpGetLengthWithoutLastPathElement
RtlpGetRegistryHandle
RtlpGetTagName
RtlpGetTimeRemaining
RtlpGetTimeZoneInfoHandle
RtlpGetWaitEvent
RtlpGrowBlockInPlace
RtlpHashStringToAtom
RtlpHeapReportCorruption
RtlpImageDirectoryEntryToData64
RtlpImageNtHeader
RtlPinAtomInAtomTable
RtlpInheritAcl
RtlpInheritAcl2
RtlpInitDeferedCriticalSection
RtlpInitializeAllowedAce
RtlpInitializeAuditAce
RtlpInitializeDeniedAce
RtlpInitializeHandleTableForAtomTable
RtlpInitializeHeapSegment
RtlpInitializeLeakDetection
RtlpInitializeListIndex
RtlpInitializeLockAtomTable
RtlpInitializeLowFragHeapManager
RtlpInitializeTimerThreadPool
RtlpInitializeWaitThreadPool
RtlpInitializeWorkerThreadPool
RtlpInsertAssemblyStorageMapEntry
RtlpInsertFreeBlock
RtlpInsertUnCommittedPages
RtlpIOWorkerThread
RtlpIsLFHZoneAllocation
RtlpIsRangeAvailable
RtlpIsSameImage
RtlpLocateActivationContextSection
RtlpLocateActivationContextSectionForQuery
RtlpLockAtomTable
RtlpLowFragHeapAlloc
RtlpLowFragHeapFree
RtlpNewSecurityObject
RtlpNotOwnerCriticalSection
RtlpNtCreateKey
RtlpNtEnumerateSubKey
RtlpNtOpenKey
RtlpNtQueryValueKey
RtlpNtSetValueKey
RtlpOpenImageFile
RtlpProcessTimeouts
RtlpProcessWaitCompletion
RtlpPushPageDescriptor
RtlpQueryAssemblyInformationActivationContextDetailedInformation
RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation
RtlpQueryInformationActivationContextBasicInformation
RtlpQueryInformationActivationContextDetailedInformation
RtlpQueryProcessDebugInformationRemote
RtlpQueryProcessEnumHeapsRoutine
RtlpQueueIOWorkerRequest
RtlpQueueWorkerRequest
RtlpReadHeapData
RtlpReadProcessHeaps
RtlpReadSingleHookInformation
RtlpRegisterHeapBlocks
RtlpReleaseHeapListLock
RtlpRemoveHeapFromProcessList
RtlpReOrderDeltaList
RtlpResetDriveEnvironment
RtlpResetTimer
RtlpResolveAssemblyStorageMapEntry
RtlpRestartImpersonation
RtlpResync64BitTickCount
RtlProtectHeap
RtlpScanHeapAllocBlocks
RtlpScanProcessVirtualMemory
RtlpSearchValidationCode
RtlpSecMemFreeVirtualMemory
RtlpSerializeHeap
RtlpSetBlockInfo
RtlpSetSecurityObject
RtlpSingleRangeValidate
RtlpStartIOWorkerThread
RtlpStartThread
RtlpStartThreadpoolThread
RtlpStartWaitThread
RtlpStartWorkerThread
RtlpSysVolAllocate
RtlpSysVolCheckOwnerAndSecurity
RtlpSysVolCreateSecurityDescriptor
RtlpSysVolTakeOwnership
RtlpThreadPoolGetActiveActivationContext
RtlpTimerThread
RtlpTraceDatabaseAcquireLock
RtlpTraceDatabaseAllocate
RtlpTraceDatabaseFree
RtlpTraceDatabaseInitializeLock
RtlpTraceDatabaseInternalAdd
RtlpTraceDatabaseReleaseLock
RtlpTraceDatabaseUninitializeLock
RtlpUnlockAtomTable
RtlpUnWaitCriticalSection
RtlpUpdateTimer
RtlpValidateCurrentDirectory
RtlpValidateHeap
RtlpValidateHeapEntry
RtlpValidateHeapHeaders
RtlpValidateHeapSegment
RtlpValidatePeChecksum
RtlpValidatePeHeaderHash2
RtlpValidateTargetModule
RtlpValidateTargetRanges
RtlpValidOwnerSubjectContext
RtlpVerCompare
RtlpVerGetConditionMask
RtlpWaitForCriticalSection
RtlpWaitForEvent
RtlpWaitOrTimerCallout
RtlpWaitThread
RtlpWalkFrameChainFuzzy
RtlpWalkLFHBlock
RtlpWin32NTNameToNtPathName_U
RtlpWorkerCallout
RtlpWorkerThread
RtlpWorkerThreadCancelTimer
RtlpWorkerThreadSetTimer
RtlpWorkerThreadTimerCallback
RtlQueryAtomInAtomTable
RtlQueryEnvironmentVariable_U
RtlQueryInformationAcl
RtlQueryInformationActivationContext
RtlQueryInformationActiveActivationContext
RtlQueryProcessBackTraceInformation
RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation
RtlQueryProcessLockInformation
RtlQueryProcessModuleInformation
RtlQueryRegistryValues
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryTimeZoneInformation
RtlQueueWorkItem
RtlRaiseStatus
RtlReadHookInformation
RtlReadOutOfProcessMemoryStream
RtlReadSingleHookValidation
RtlReAllocateHeap
RtlRegisterSecureMemoryCacheCallback
RtlRegisterWait
RtlReleaseResource
RtlRemoteCall
RtlRemoveVectoredExceptionHandler
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSelfRelativeToAbsoluteSD2
RtlSetAllBits
RtlSetAttributesSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetEnvironmentVariable
RtlSetHeapInformation
RtlSetIoCompletionCallback
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlSetSecurityObject
RtlSetSecurityObjectEx
RtlSetTimeZoneInformation
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlStartRXact
RtlStringFromGUID
RtlSystemTimeToLocalTime
RtlTimeFieldsToTime
RtlTraceDatabaseAdd
RtlTraceDatabaseCreate
RtlTraceDatabaseDestroy
RtlTraceDatabaseEnumerate
RtlTraceDatabaseFind
RtlTraceDatabaseValidate
RtlUnhandledExceptionFilter
RtlUnhandledExceptionFilter2
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger
RtlUnicodeStringToOemString
RtlUnlockBootStatusData
RtlUnlockHeap
RtlUnwind
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpdateTimer
RtlUpperString
RtlUsageHeap
RtlValidAcl
RtlValidateHeap
RtlValidateProcessHeaps
RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor
RtlValidSid
RtlVerifyVersionInfo
RtlWalkFrameChain
RtlWalkHeap
RtlWriteRegistryValue
RtlxOemStringToUnicodeSize
RtlxUnicodeStringToOemSize
RtlZeroHeap
RXactpCommit
RXactpOpenTargetKey
ShutDownWmiHandles
tolower
UnregisterTraceGuids
vDbgPrintEx
vDbgPrintExWithPrefix
WmipAddHandleToEventPump
WmipAddInstanceIdToNames
WmipAddLogHeaderToLogFile
WmipAddToGNList
WmipAllocateCookie
WmipAllocateTraceBuffers
WmipAllocDontFail
WmipAllocEvent
WmipAnsiToUnicode
WmipBaseFormatObjectAttributes
WmipBaseGetNamedObjectDirectory
WmipBasep8BitStringToStaticUnicodeString
WmipBuildReceiveNotification
WmipCancelIo
WmipCloseHandle
WmipConvertEventToAnsi
WmipConvertWADToAnsi
WmipCopyStringToCountedUnicode
WmipCountedUnicodeToCountedAnsi
WmipCreateEventA
WmipCreateEventW
WmipCreateFile
WmipCreateFileA
WmipCreateFileW
WmipCreateHeap
WmipCreateThread
WmipDeinitializeDll
WmipDeliverAllEvents
WmipDereferenceGNEntry
WmipDeviceIoControl
WmipDisableTraceProvider
WmipDumpHardwareConfig
WmipDuplicateHandle
WmipEstablishEventPump
WmipEventPump
WmipExitThread
WmipExternalNotification
WmipFinalizeLogFileHeader
WmipFindCookie
WmipFindGuidNotification
WmipFlushAllBuffers
WmipFreeCookie
WmipFreeLoggerContext
WmipGenericTraceEnable
WmipGetErrorMode
WmipGetFreeBuffer
WmipGetFullFreeBuffer
WmipGetGuidInCookie
WmipGetOverlappedResult
WmipGetSystemInfo
WmipGetTimeZoneInformation
WmipGetTraceBuffer
WmipGetVersionExA
WmipGetVersionExW
WmipGlobalMemoryStatus
WmipInitializeDll
WmipInitLoggerContext
WmipLogger
WmipLogImageLoadEvent
WmipLookupCookie
WmipMemCommit
WmipMemFree
WmipMemReserve
WmipProcessEventBuffer
WmipProcessExternalEvent
WmipProcessModuleRunDown
WmipProcessRunDown
WmipProcessUMRequest
WmipQueryLogger
WmipQueryUmLogger
WmipReadFile
WmipReceiveReply
WmipRegisterGuids
WmipRegOpenKey
WmipRegQueryValueKey
WmipReleaseFullBuffer
WmipSendUmLogRequest
WmipSendWmiKMRequest
WmipSetDosError
WmipSetErrorMode
WmipSetEvent
WmipSetFilePointer
WmipSetLastError
WmipSetNtStatus
WmipSetThreadPriority
WmipSleep
WmipSleepEx
WmipStartUmLogger
WmipStopLoggerInstance
WmipStopUmLogger
WmipSwitchFullBuffer
WmipSysModuleRunDown
WmipThreadRunDown
WmipTlsAlloc
WmipTlsFree
WmipTlsGetValue
WmipTlsSetValue
WmipUnicodeToAnsi
WmipUpdateUmLogger
WmipUuidCreateSequential
WmipUuidGetValues
WmipWaitForMultipleObjectsEx
WmipWaitForSingleObject
WmipWaitForSingleObjectEx
WmiUnregisterGuids
xProtectHandle
xUnProtectHandle
_AVrfpDphDllcalloc
_AVrfpDphDllfree
_AVrfpDphDllNewArray
_AVrfpDphDllrealloc
_cos
_DbgPrint
_DbgPrintEx
_DbgPrintReturnControlC
_fabs
_isalnum
_isalpha
_iscntrl
_isgraph
_islower
_isprint
_ispunct
_isspace
_isupper
_iswalpha
_iswdigit
_iswlower
_iswspace
_iswxdigit
_isxdigit
_LdrpInitialize
_mbstowcs
_mbtowc
_RtlSetProcessIsCritical
_seh_longjmp_unwind
_sin
_SlashSystem32SlashMscoreeDllWCharArray
_sprintf
_sqrt
_sscanf
_swprintf
_SystemTraceControlGuid
_tan
_toupper
_towlower
_towupper
_ungetc
_vsprintf
_wcstombs
_wctomb
__87except
__atan_default
__atoi64
__ceil_pentium4
__check_overflow_exit
__CIatan_default
__CIcos
__CIlog_default
__CIsin
__CIsqrt
__CItan
__decomp
__d_inttype
__except1
__except_handler3
__fFEXP
__floor_default
__floor_pentium4
__fpclass
__fptrap
__global_unwind2
__handle_exc
__handle_qnan1
__input
__local_unwind2
__log_default
__math_exit
__output
__powhlp
__pow_default
__raise_exc
__rtnospopde
__rttospopde
__snprintf
__snwprintf
__splitpath
__startOneArgErrorHandling
__umatherr
__vsnprintf
__vsnwprintf
__wtoi64
__wtol
___iscsym
___iscsymf
___report_gsfailure
___security_init_cookie
___security_init_cookie_ex
There are
31,320
total registered users.
Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM
oleavr
Oct/24
Anatomy of a code tracer
hasherezade
Sep/24
IAT Patcher - new tool for ...
oleavr
Aug/27
CryptoShark: code tracer ba...
oleavr
Jun/25
Build a debugger in 5 minutes
More ...
Recent Blog Comments
nieo
on:
Mar/22
IAT Patcher - new tool for ...
djnemo
on:
Nov/17
Kernel debugger vs user mod...
acel
on:
Nov/14
Kernel debugger vs user mod...
pedram
on:
Dec/21
frida.github.io: scriptable...
capadleman
on:
Jun/19
Using NtCreateThreadEx for ...
More ...
Imagery
SoySauce Blueprint
Jun 6, 2008
[+] expand
View Gallery
(11) /
Submit