Flag: Tornado! Hurricane!

OpenRCE Win32 Call Chains Database

 Windows 2003 SE >> ADVAPI32
AbortShutdownCallback AbortSystemShutdownA
AbortSystemShutdownW AccessCheck
AccessCheckAndAuditAlarmA AccessCheckAndAuditAlarmW
AccessCheckByType AccessCheckByTypeAndAuditAlarmA
AccessCheckByTypeAndAuditAlarmW AccessCheckByTypeResultList
AccessCheckByTypeResultListAndAuditAlarmA AccessCheckByTypeResultListAndAuditAlarmByHandleA
AccessCheckByTypeResultListAndAuditAlarmByHandleW AccessCheckByTypeResultListAndAuditAlarmW
AccProvpAllocateProviderList AccProvpGetProviderCapabilities
AccProvpGetProviderForHandle AccProvpGetProviderForPath
AccProvpGetStringFromRegistry AccProvpInitProviders
AccProvpLoadDllEntryPoints AccProvpLoadProviderDef
AccProvpProbeProviderForObject AccProvUnload
AddAccessAllowedAce AddAccessAllowedAceEx
AddAccessAllowedObjectAce AddAccessDeniedAce
AddAccessDeniedAceEx AddAccessDeniedObjectAce
AddAce AddAuditAccessAce
AddAuditAccessAceEx AddAuditAccessObjectAce
AddUsersToEncryptedFile AdjustTokenGroups
AdjustTokenPrivileges AdvApi_InitializeTermsrvFpns
AllocAndInsertCNode AllocateAndInitializeExtObject
AllocateAndInitializeSid AllocateLocallyUniqueId
AnsiSizeForUnicodeString AnsiToUnicode
AppmgmtGetUserSid AppmgmtInitialize
AreAllAccessesGranted AreAnyAccessesGranted
ARPRemoveApp A_SHAFinal
A_SHAFinalNS A_SHAUpdateNS
BackupEventLogA BackupEventLogW
BaseAbortShutdown BaseAbortSystemShutdown
BaseBindToMachine BaseBindToMachineShutdownInterface
BaseInitiateShutdown BaseInitiateShutdownEx
BaseInitiateSystemShutdown BaseInitiateSystemShutdownEx
BaseRegCchSpecialKeyLen BaseRegCloseKey
BaseRegCloseKeyInternal BaseRegConstructUserClassPrefix
BaseRegCreateKey BaseRegCreateMultipartKey
BaseRegDeleteKey BaseRegDeleteValue
BaseRegEnumKey BaseRegEnumValue
BaseRegFlushKey BaseRegGetBestAncestor
BaseRegGetClassKeyValueState BaseRegGetKeySecurity
BaseRegGetKeySemantics BaseRegGetUserAndMachineClass
BaseRegGetUserPrefixLength BaseRegGetVersion
BaseRegLoadKey BaseRegMapClassOnAccessDenied
BaseRegMapClassRegistrationKey BaseRegNotifyClassKey
BaseRegOpenClassKey BaseRegOpenClassKeyFromLocation
BaseRegOpenClassKeyRoot BaseRegOpenKey
BaseRegQueryAndMergeValues BaseRegQueryInfoKey
BaseRegQueryMultipleClassKeyValues BaseRegQueryMultipleValues
BaseRegQueryMultipleValues2 BaseRegQueryValue
BaseRegReplaceKey BaseRegRestoreKey
BaseRegSaveKey BaseRegSaveKeyEx
BaseRegSetKeySecurity BaseRegSetValue
BaseRegTranslateToMachineClassKey BaseRegTranslateToUserClassKey
BaseRegUnLoadKey BaseSetLastNTError
BenalohMod BenalohModExp
BenalohModSquare BenalohSetup
Bind BSafeEncPublic
BuildExplicitAccessWithNameA BuildImpersonateExplicitAccessWithNameA
BuildSecurityDescriptorA BuildSecurityDescriptorW
BuildTrusteeWithObjectsAndSidW BuildVHash
BuildVKey CacheDomainAndDnsDomainSids
CancelOverlappedAccess CEvents::ZAPInstall
CEventsBase::Install CEventsBase::Report
CEventsBase::Uninstall ChangeServiceConfig2A
ChangeServiceConfig2W ChangeServiceConfigA
ChangeServiceConfigW CheckAllSignatures
CheckSignature CheckSignatureInFile
CheckTokenMembership ClassKeyCountSubKeys
CleanupClassesEnumTable CleanupConvertNode
CleanupPredefinedHandles CleanupPredefinedHandlesTable
ClearEventLogA ClearEventLogW
CLoadMsi::CLoadMsi CLoadMsi::~CLoadMsi
CloseEventLog CloseExtObjectLibrary
ClosePredefinedHandle CloseServiceHandle
CloseTrace CodeAuthzCloseLevelHandle
CodeAuthzCreateLevelHandle CodeAuthzDeinitializeGlobals
CodeAuthzGuidIdentsEntireTableFree CodeAuthzGuidIdentsInitializeTable
CodeAuthzGuidIdentsLoadTableAll CodeAuthzHandleToLevelStruct
CodeAuthzIdentsLookupByGuid CodeAuthzInitialize
CodeAuthzInitializeGlobals CodeAuthzIsExecutableFileType
CodeAuthzLevelObjpEntireTableFree CodeAuthzLevelObjpInitializeTable
CodeAuthzLevelObjpLoadTable CodeAuthzLevelObjpLookupByLevelId
CodeAuthzpCompareImagePath CodeAuthzpCompareUnicodeImagePath
CodeAuthzpCompareWildcardSidWithSid CodeAuthzpComputeImageHash
CodeAuthzpConvertWildcardStringSidToSidW CodeAuthzpCreateLevelHandleFromRecord
CodeAuthzpDeleteKeyRecursively CodeAuthzpExpandWildcardList
CodeAuthzpFormatIdentityKeyPath CodeAuthzpFormatLevelKeyPath
CodeAuthzpGetInformationCodeAuthzPolicy CodeAuthzpGetTokenInformation
CodeAuthzpImmediateReloadCacheTables CodeAuthzpInvertAndAddSids
CodeAuthzpInvertPrivs CodeAuthzpModifyTokenOwner
CodeAuthzpModifyTokenPermissions CodeAuthzPol_GetInfoCached_DefaultLevel
CodeAuthzPol_GetInfoCached_HonorUserIdentities CodeAuthzPol_GetInfoCached_LevelListRaw
CodeAuthzPol_GetInfoRegistry_DefaultLevel CodeAuthzPol_GetInfoRegistry_ScopeFlags
CodeAuthzPol_GetInfoRegistry_TransparentEnabled CodeAuthzPol_SetInfoDual_DefaultLevel
CodeAuthzPol_SetInfoDual_HonorUserIdentities CodeAuthzPol_SetInfoRegistry_ScopeFlags
CodeAuthzPol_SetInfoRegistry_TransparentEnabled CodeAuthzpOpenPolicyRootKey
CodeAuthzpRecomputeEffectiveDefaultLevel CodeAuthzpSetAuthzLevelInfo
CodeAuthzpSetInformationCodeAuthzPolicy CodeAuthzpSidInSidAndAttributes
CodeAuthzpSidInWildcardList CodeAuthzReloadCacheTables
CommandLineFromMsiDescriptor ControlService
ConvertAccessToSecurityDescriptorA ConvertAccessToSecurityDescriptorW
ConvertAListAToNamedBasedW ConvertAListToNamedBasedW
ConvertAListWToAlistAInplace ConvertExplicitAccessAToExplicitAccessW
ConvertOemToCharW ConvertSDToAccessA
ConvertSDToAccessW ConvertSDToStringSDRootDomainA
ConvertSDToStringSDRootDomainW ConvertSecurityDescriptorToAccessNamedA
ConvertSecurityDescriptorToAccessW ConvertSecurityDescriptorToStringSecurityDescriptorA
ConvertSecurityDescriptorToStringSecurityDescriptorW ConvertSidToStringSidA
ConvertSidToStringSidW ConvertStringAToStringW
ConvertStringSDToSDDomainA ConvertStringSDToSDDomainW
ConvertStringSDToSDRootDomainA ConvertStringSDToSDRootDomainW
ConvertStringSecurityDescriptorToSecurityDescriptorA ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidA ConvertStringSidToSidW
ConvertStringWToStringA ConvertToAutoInheritPrivateObjectSecurity
ConvertTrusteeAToTrusteeW ConvertTrusteeWToTrusteeA
CopySid CPReturnhWnd
CProvVerifyImage CreateMultipartUserClassKey
CreatePrivateObjectSecurity CreatePrivateObjectSecurityEx
CreatePrivateObjectSecurityWithMultipleInheritance CreateProcessAsUserA
CreateProcessAsUserW CreateProcessWithLogonCommonW
CreateProcessWithLogonW CreateProcessWithTokenW
CreateRemoteSessionProcessA CreateRemoteSessionProcessW
CreateRestrictedToken CreateServiceA
CreateServiceW CreateWellKnownSid
CredDeleteA CredDeleteW
CredEnumerateA CredEnumerateW
CredGetSessionTypes CredGetTargetInfoA
CredGetTargetInfoW CredIsMarshaledCredentialA
CredIsMarshaledCredentialW CredMarshalCredentialA
CredMarshalCredentialW CredpAllocStrFromStr
CredpConvertCredential CredpConvertCredentials
CredpConvertOneCredential CredpConvertOneCredentialSize
CredpConvertString CredpConvertStringSize
CredpConvertTargetInfo CredpDecodeCredential
CredpEncodeCredential CredpMarshalBytes
CredpMarshalChar CredProfileLoaded
CredpUnmarshalBytes CredrDelete
CredReadA CredReadDomainCredentialsA
CredReadDomainCredentialsW CredReadW
CredRenameA CredRenameW
CredrEnumerate CredrGetSessionTypes
CredrGetTargetInfo CredrProfileLoaded
CredrRead CredrReadDomainCredentials
CredrRename CredrWrite
CredrWriteDomainCredentials CredUnmarshalCredentialA
CredUnmarshalCredentialW CredWriteA
CredWriteDomainCredentialsA CredWriteDomainCredentialsW
CredWriteW CryptAcquireContextA
CryptAcquireContextW CryptContextAddRef
CryptCreateHash CryptDecrypt
CryptDeriveKey CryptDestroyHash
CryptDestroyKey CryptDuplicateHash
CryptDuplicateKey CryptEncrypt
CryptEnumProvidersA CryptEnumProvidersW
CryptEnumProviderTypesA CryptEnumProviderTypesW
CryptExportKey CryptGenKey
CryptGenRandom CryptGetDefaultProviderA
CryptGetDefaultProviderW CryptGetHashParam
CryptGetKeyParam CryptGetProvParam
CryptGetUserKey CryptHashData
CryptHashSessionKey CryptImportKey
CryptReleaseContext CryptSetHashParam
CryptSetKeyParam CryptSetProviderA
CryptSetProviderExA CryptSetProviderExW
CryptSetProviderW CryptSetProvParam
CryptSignHashA CryptVerifySignatureA
CSList::Insert CSList::InsertIfUnique
CSList::~CSList CSPInCacheCheck
c_SeclCreateProcessWithLogonW DecryptDataLength
DecryptFileA DecryptFileW
DecryptFullBlock DecryptPartialBlock
DeInitRand DeleteAce
DeleteAdvapiCriticalSections DeleteService
DeregisterEventSource DeRegisterExtObjListAccess
DestroyPerflibFunctionTimer DestroyPrivateObjectSecurity
DetectWow64Process DisableLibrary
DisablePerfLibrary DisablePredefinedHandleTable
DuplicateEncryptionInfoFile DuplicateToken
DuplicateTokenEx ElfBackupEventLogFileA
ElfBackupEventLogFileW ElfChangeNotify
ElfClearEventLogFileA ElfClearEventLogFileW
ElfCloseEventLog ElfDeregisterEventSource
ElfFlushEventLog ElfGetLogInformation
ElfNumberOfRecords ElfOldestRecord
ElfOpenBackupEventLogA ElfOpenBackupEventLogW
ElfOpenEventLogA ElfOpenEventLogW
ElfpGetComputerName ElfrBackupELFA
ElfrBackupELFW ElfrChangeNotify
ElfrClearELFA ElfrClearELFW
ElfrCloseEL ElfrDeregisterEventSource
ElfReadEventLogA ElfReadEventLogW
ElfRegisterEventSourceA ElfRegisterEventSourceW
ElfReportEventA ElfReportEventW
ElfrFlushEL ElfrGetLogInformation
ElfrNumberOfRecords ElfrOldestRecord
ElfrOpenBELA ElfrOpenBELW
ElfrOpenELA ElfrOpenELW
ElfrReadELA ElfrReadELW
ElfrRegisterEventSourceA ElfrRegisterEventSourceW
ElfrReportEventA ElfrReportEventW
EncryptDataLength EncryptedFileKeyInfo
EncryptFileA EncryptFileW
EncryptFullBlock EncryptionDisable
EncryptKey EncryptMemoryInitialize
EncryptMemoryShutdown EncryptPartialBlock
EndpointConn_np EnterHashCritSec
EnterKeyCritSec EnterProviderCritSec
EnumClassKey EnumDependentServicesA
EnumDependentServicesW EnumerateValue
EnumServiceGroupW EnumServicesStatusA
EnumServicesStatusExA EnumServicesStatusExW
EnumServicesStatusW EnumStateChooseNext
EnumStateGetNextEnum EnumStateInit
EnumSubtreeStateClear EnumTableAddKey
EnumTableClear EnumTableFindKeyState
EnumTableGetKeyState EnumTableGetNextEnum
EnumTableGetRootState EnumTableInit
EnumTableRemoveKey EnumTableUpdateRootState
EnumUILanguageCallback EqualDomainSid
EqualPrefixSid EqualSid
EstimateQuotient EtwpAddGuidHandleToGuidMapList
EtwpAddTraceStream EtwpAdvanceToNewEvent
EtwpAdvanceToNewEventEx EtwpAllocateTraceHandle
EtwpAllocEvent EtwpAllocTraceBuffer
EtwpBuildEventTable EtwpBuildGuidObjectAttributes
EtwpBuildMUIPath EtwpCalculateCurrentTime
EtwpCallHWConfig EtwpCheckForRealTimeLoggers
EtwpCheckGuidAccess EtwpCleanupGuidMapList
EtwpCleanupStreamList EtwpCleanupTraceLog
EtwpConvertWADToAnsi EtwpCopyCurrentEvent
EtwpCopyLogfileInfo EtwpCopyMRString
EtwpCountedToSzAndTrim EtwpCountedUnicodeToCountedAnsi
EtwpCreateGuidMapping EtwpCreateHeap
EtwpDeinitializeDll EtwpDoEventCallbacks
EtwpDumpHardwareConfig EtwpEnumerateGuids
EtwpEnumRegGuids EtwpFileExists
EtwpFreeEvent EtwpFreeRealTimeContext
EtwpFreeTraceBuffer EtwpFreeTraceHandle
EtwpGetBuffersWrittenFromQuery EtwpGetCallbackRoutine
EtwpGetCpuConfig EtwpGetCpuSpeed
EtwpGetCurrentBuffer EtwpGetDevInstInfo
EtwpGetDiskInfo EtwpGetLanguageList
EtwpGetLastBufferWithMarker EtwpGetMofResourceList
EtwpGetNetworkAdapters EtwpGetNextBuffer
EtwpGetPowerInfo EtwpGetServiceInfo
EtwpGetVideoAdapters EtwpGetWindowsDirectory
EtwpGuidMapCallback EtwpGuidMapHandleToGuid
EtwpInitializeDll EtwpInternalProvider
EtwpLookforRealTimeBuffers EtwpLookupTraceHandle
EtwpMemCommit EtwpMemFree
EtwpMemReserve EtwpOpenKernelGuid
EtwpParseTraceEvent EtwpProcessGuidMaps
EtwpProcessLogHeader EtwpProcessRealTimeTraces
EtwpProcessTraceLog EtwpProcessTraceLogEx
EtwpQueryAllInstanceInfo EtwpQueryInstanceInfo
EtwpQuerySingleInstanceInfo EtwpReadGuidMapRecords
EtwpRealTimeCallback EtwpRegistryToImagePath
EtwpRegOpenKey EtwpRegQueryValueKey
EtwpSendWmiKMRequest EtwpSendWmiRequest
EtwpSetDosError EtwpSetupLogFileStreams
EtwpSetupRealTimeContext EtwpSynchReadFile
EtwpUnicodeToAnsi EtwpUpdateServiceStatus
EVENTLOG_HANDLE_A_bind EVENTLOG_HANDLE_A_unbind
EVENTLOG_HANDLE_W_bind EVENTLOG_HANDLE_W_unbind
EXCLUDE_LIST::Add EXCLUDE_LIST::EXCLUDE_LIST
EXCLUDE_LIST::~EXCLUDE_LIST ExtractClassKey
FileEncryptionStatusA FileEncryptionStatusW
FindFirstFreeAce FreeApplicationInfo
FreeInheritedFromArray GatherRandomKeyFastUserMode
GenRandom GetAccessPermissionsForObjectA
GetAccessPermissionsForObjectW GetAce
GetAclInformation GetAuditedPermissionsFromAclA
GetAuditedPermissionsFromAclW GetCallStack
GetCompatFlags GetCryptSigResourcePtr
GetCurrentHwProfileA GetCurrentHwProfileW
GetDebugLogFileName GetEffectiveRightsFromAclA
GetEffectiveRightsFromAclW GetEventLogInformation
GetExplicitEntriesFromAclW GetFileSecurityA
GetFileSecurityW GetFixedKeyInfo
GetInheritanceSourceW GetIoFixedDrive
GetKernelObjectSecurity GetLangIdFromSzLang
GetLeakStack GetLengthSid
GetLocalManagedApplicationData GetLocalManagedApplications
GetManagedAppCategories GetManagedApplicationCategories
GetManagedApplications GetManagedApps
GetNamedSecurityInfoA GetNamedSecurityInfoExA
GetNamedSecurityInfoExW GetNamedSecurityInfoW
GetNumberOfEventLogRecords GetOldestEventLogRecord
GetOverlappedAccessResults GetPerfDllFileInfo
GetPerflibKeyValue GetPrivateObjectSecurity
GetQueryType GetRegistryExtensionFlags
GetSecurityDescriptorControl GetSecurityDescriptorDacl
GetSecurityDescriptorGroup GetSecurityDescriptorOwner
GetSecurityDescriptorRMControl GetSecurityDescriptorSacl
GetSecurityInfo GetSecurityInfoExA
GetSecurityInfoExW GetServiceDisplayNameA
GetServiceDisplayNameW GetServiceKeyNameA
GetServiceKeyNameW GetSidIdentifierAuthority
GetSidLengthRequired GetSidSubAuthority
GetSidSubAuthorityCount GetStack
GetSubKeyCount GetTimeAsLongLong
GetTokenInformation GetTrusteeWForSid
GetUserNameA GetUserNameW
GetWindowsAccountDomainSid GuidToWString
HashBytesOfFile HashTheFile
imagehack_ImageGetCertificateData imagehack_ImageGetDigestStream
ImpersonateAnonymousToken ImpersonateLoggedOnUser
ImpersonateNamedPipeClient ImpersonateSelf
InitDebug InitDebugSupport
InitializeAcl InitializeAdvapiCriticalSections
InitializeClassesEnumTable InitializeClassesRoot
InitializeLeakTrackTable InitializePredefinedHandlesTable
InitializeSecurityDescriptor InitializeSid
InitializeSidLookupTable InitializeStatusBinding
InitiateSystemShutdownA InitiateSystemShutdownExA
InitiateSystemShutdownExW InitiateSystemShutdownW
InitKeyLM InitSecurityAcls
InstallApplication InstallBegin
InstallEnd InstallManageApp
InstallUnmanageApp IsRNGWinNT
IsSaferDisabled IsSystemLUID
IsTerminalServerCompatible IsTextUnicode
IsTokenRestricted IsTokenUntrusted
IsTSAppCompatEnabled IsValidAcl
IsValidSecurityDescriptor IsValidSid
IsWellKnownSid ItCliRegisterIdleTask
ItCliUnregisterIdleTask ITRPC_HANDLE_bind
ITRPC_HANDLE_unbind ItSrvProcessIdleTasks
ItSrvRegisterIdleTask ItSrvUnregisterIdleTask
I_CalculateImagePtrs I_CheckIsTestRootAllowed
I_ConvertParsedRSAPubKeyToBSafePubKey I_DigestFunction
I_FindCertificate I_GetAuthAttributes
I_MapIt I_MinCryptFindRootByKey
I_MinCryptMapFile I_MinCryptVerifySignerAuthenticatedAttributes
I_ScPnPGetServiceName I_ScSendTSMessage
I_ScSetServiceBitsA I_ScSetServiceBitsW
I_VerifyPKCS1SigningFormat KeyStateGetValueState
KeyStateListDestroy KeyStateListInit
KillPerflibFunctionTimer L32CommonCreate
L32CreateTokenForNewProcess L32FindLogonSid
L32GetDefaultDomainName L32pInitLsa
L32pLogonUser L32pNotifyMpr
L32RevertOpenProcess L32SetProcessQuotas
L32SetProcessToken LeaveHashCritSec
LeaveKeyCritSec LeaveProviderCritSec
LoadAndInitFeClient LoadImageHLP
LoadLoadString LoadUser32Funcs
LocalBaseRegCreateKey LocalBaseRegDeleteKey
LocalBaseRegDeleteValue LocalBaseRegEnumKey
LocalBaseRegEnumValue LocalBaseRegFlushKey
LocalBaseRegGetKeySecurity LocalBaseRegLoadKey
LocalBaseRegOpenKey LocalBaseRegQueryInfoKey
LocalBaseRegQueryMultipleValues LocalBaseRegQueryMultipleValues2
LocalBaseRegQueryValue LocalBaseRegReplaceKey
LocalBaseRegRestoreKey LocalBaseRegSaveKey
LocalBaseRegSaveKeyEx LocalBaseRegSetKeySecurity
LocalBaseRegSetValue LocalBaseRegUnLoadKey
LocalConvertAclToString LocalConvertSDToStringSD_Rev1
LocalConvertStringSDToSD_Rev1 LocalConvertStringSidToSid
LocalGetAclForString LocalGetSDControlForString
LocalGetSidForString LocalGetStringForControl
LocalGetStringForSid LocalOpenClassesRoot
LocalOpenCurrentConfig LocalOpenCurrentUser
LocalOpenLocalMachine LocalOpenPerformanceData
LocalOpenPredefHandle LocalOpenUsers
LocalSignHashW LocalVerifySignatureW
LockServiceDatabase LogonUserA
LogonUserCommonA LogonUserCommonW
LogonUserExA LogonUserExW
LogonUserW LookupAccessMaskInTable
LookupAccountNameA LookupAccountNameInternal
LookupAccountNameW LookupAccountSidA
LookupAccountSidInternal LookupAccountSidW
LookupAceFlagsInTable LookupAceTypeInTable
LookupPrivilegeDisplayNameA LookupPrivilegeDisplayNameW
LookupPrivilegeNameA LookupPrivilegeNameW
LookupPrivilegeValueA LookupPrivilegeValueW
LookupSecurityDescriptorPartsA LookupSecurityDescriptorPartsW
LookupSidInTable LsaAddAccountRights
LsaAddPrivilegesToAccount LsaClearAuditLog
LsaClose LsaCreateAccount
LsaCreateSecret LsaCreateTrustedDomain
LsaCreateTrustedDomainEx LsaDelete
LsaDeleteTrustedDomain LsaEnumerateAccountRights
LsaEnumerateAccounts LsaEnumerateAccountsWithUserRight
LsaEnumeratePrivileges LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains LsaEnumerateTrustedDomainsEx
LsaFreeMemory LsaGetQuotasForAccount
LsaGetRemoteUserName LsaGetSystemAccessAccount
LsaGetUserName LsaICLookupNames
LsaICLookupNamesWithCreds LsaICLookupSids
LsaICLookupSidsWithCreds LsaLookupNames
LsaLookupNames2 LsaLookupPrivilegeDisplayName
LsaLookupPrivilegeName LsaLookupPrivilegeValue
LsaLookupSids LsaOpenAccount
LsaOpenPolicy LsaOpenPolicySce
LsaOpenSecret LsaOpenTrustedDomain
LsaOpenTrustedDomainByName LsapAddAccountRights
LsapApiBuildSecretName LsapApiConvertPrivilegesToRights
LsapApiConvertRightsToPrivileges LsapCrClientGetSessionKey
LsapCrDecryptValue LsapCrEncryptValue
LsapDeleteTrustedDomain LsapDsMarshalAuthInfoHalf
LsapEncryptAuthInfo LsapEnumerateAccountRights
LsapEnumerateAccountsWithUserRight LsapNeutralizeNt4Emulation
LsapQueryTrustedDomainInfo LsapRandomFill
LsapRemoveAccountRights LsapRetrievePrivateData
LsapSetTrustedDomainInformation LsapStorePrivateData
LsaQueryDomainInformationPolicy LsaQueryForestTrustInformation
LsaQueryInformationPolicy LsaQueryInfoTrustedDomain
LsaQuerySecret LsaQuerySecurityObject
LsaQueryTrustedDomainInfo LsaQueryTrustedDomainInfoByName
LsarAddAccountRights LsarAddPrivilegesToAccount
LsarClearAuditLog LsarClose
LsarCreateAccount LsarCreateSecret
LsarCreateTrustedDomain LsarCreateTrustedDomainEx
LsarCreateTrustedDomainEx2 LsarDelete
LsarDeleteObject LsarDeleteTrustedDomain
LsaRemoveAccountRights LsaRemovePrivilegesFromAccount
LsarEnumerateAccountRights LsarEnumerateAccounts
LsarEnumerateAccountsWithUserRight LsarEnumeratePrivileges
LsarEnumeratePrivilegesAccount LsarEnumerateTrustedDomains
LsarEnumerateTrustedDomainsEx LsaRetrievePrivateData
LsarGetQuotasForAccount LsarGetSystemAccessAccount
LsarGetUserName LsarLookupNames
LsarLookupNames2 LsarLookupNames3
LsarLookupNames4 LsarLookupPrivilegeDisplayName
LsarLookupPrivilegeName LsarLookupPrivilegeValue
LsarLookupSids LsarLookupSids2
LsarLookupSids3 LsarOpenAccount
LsarOpenPolicy LsarOpenPolicy2
LsarOpenPolicySce LsarOpenSecret
LsarOpenTrustedDomain LsarOpenTrustedDomainByName
LsarQueryDomainInformationPolicy LsarQueryForestTrustInformation
LsarQueryInformationPolicy LsarQueryInformationPolicy2
LsarQueryInfoTrustedDomain LsarQuerySecret
LsarQuerySecurityObject LsarQueryTrustedDomainInfo
LsarQueryTrustedDomainInfoByName LsarRemoveAccountRights
LsarRemovePrivilegesFromAccount LsarRetrievePrivateData
LsarSetDomainInformationPolicy LsarSetForestTrustInformation
LsarSetInformationPolicy LsarSetInformationPolicy2
LsarSetInformationTrustedDomain LsarSetQuotasForAccount
LsarSetSecret LsarSetSecurityObject
LsarSetSystemAccessAccount LsarSetTrustedDomainInfo
LsarSetTrustedDomainInfoByName LsarStorePrivateData
LsaSetDomainInformationPolicy LsaSetForestTrustInformation
LsaSetInformationPolicy LsaSetInformationTrustedDomain
LsaSetQuotasForAccount LsaSetSecret
LsaSetSecurityObject LsaSetSystemAccessAccount
LsaSetTrustedDomainInfoByName LsaSetTrustedDomainInformation
LsaStorePrivateData MakeAbsoluteSD
MakeAbsoluteSD2 MakeSelfRelativeSD
MapSAToRpcSA MapSDToRpcSD
MarshallString MartaDllInitialize
MartaInitialize MD4Final
MD4Update MD5Final
MD5HashData MD5Update
MIDL_user_allocate MinAsn1ExtractContent
MinAsn1ExtractValues MinAsn1ParseAlgorithmIdentifier
MinAsn1ParseAttributes MinAsn1ParseCertificate
MinAsn1ParseIndirectData MinAsn1ParsePublicKeyInfo
MinAsn1ParseRSAPublicKey MinAsn1ParseSignedData
MinAsn1ParseSignedDataCertificates MinCryptDecodeHashAlgorithmIdentifier
MinCryptHashFile MinCryptHashMemory
MinCryptVerifyCertificate MinCryptVerifySignedData
MinCryptVerifySignedFile MinCryptVerifySignedHash
Mod MonBuildPerfDataBlock
MSChapSrvChangePassword MSChapSrvChangePassword2
Multiply NewAbortShutdownCallback
NewGenRandom NewGenRandomEx
NewShutdownCallback NewShutdownCallbackEx
NewVerifyImage NotifyBootConfigStatus
NotifyChangeEventLog ObjectCloseAuditAlarmA
ObjectCloseAuditAlarmW ObjectDeleteAuditAlarmA
ObjectDeleteAuditAlarmW ObjectOpenAuditAlarmA
ObjectOpenAuditAlarmW ObjectPrivilegeAuditAlarmA
ObjectPrivilegeAuditAlarmW OemToCharW_WithAllocation
OpenBackupEventLogA OpenBackupEventLogW
OpenClassesRoot OpenCombinedClassesRoot
OpenCurrentUser OpenEncryptedFileRawA
OpenEncryptedFileRawW OpenEventLogA
OpenEventLogW OpenExtensibleObjects
OpenExtObjectLibrary OpenLocalMachine
OpenPerformanceData OpenPerformanceNlsText
OpenPerformanceText OpenPredefinedKeyForSpecialAccess
OpenProcessToken OpenSCManagerA
OpenSCManagerW OpenServiceA
OpenServiceW OpenThreadToken
OpenTraceA OpenTraceW
OpenUnicodeLogFile OpenUsers
PAUTHZ_AUDIT_EVENT_TYPE_OLD_bind PerfEnumTextValue
PerfGetLangId PerfGetNames
Perflib004Update PerflibCreateSD
PerflibRename004File PerflibTimerFunction
PerfOpenKey PerfpCheckErrorTime
PerfpDeleteErrorLogs PerfpFindError
PerfpThrottleError PerfRegCleanup
PerfRegEnumKey PerfRegEnumValue
PerfRegInitialize PerfRegQueryInfoKey
PerfRegQueryValue PerfRegSetValue
PLSAPR_SERVER_NAME_bind PrivateRegQueryValueExT
PrivilegeCheck PrivilegedServiceAuditAlarmA
PrivilegedServiceAuditAlarmW ProcessIdleTasks
ProcessTrace PSECURITY_SOURCE_NAME_bind
QueryExtensibleData QueryKeyInfo
QueryRecoveryAgentsOnEncryptedFile QueryServiceConfig2A
QueryServiceConfig2W QueryServiceConfigA
QueryServiceConfigW QueryServiceLockStatusA
QueryServiceLockStatusW QueryServiceObjectSecurity
QueryServiceStatus QueryServiceStatusEx
QueryUsersOnEncryptedFile RandomFillBuffer
rc4_safe rc4_safe_key
rc4_safe_shutdown rc4_safe_startup
RChangeServiceConfig2A RChangeServiceConfig2W
RChangeServiceConfigA RChangeServiceConfigW
RCloseServiceHandle RControlService
RCreateServiceA RCreateServiceW
RDeleteService ReadEventLogA
ReadEventLogW ReadMem
ReadRegLeakTrackInfo ReadStringValue
RegCloseKey RegConnectRegistryA
RegConnectRegistryW RegConn_ip_tcp
RegConn_nb_ipx RegConn_nb_nb
RegConn_nb_tcp RegConn_np
RegConn_spx RegCreateKeyA
RegCreateKeyExA RegCreateKeyExW
RegCreateKeyW RegDeleteKeyA
RegDeleteKeyW RegDeleteValueA
RegDeleteValueW RegDisablePredefinedCache
RegEnumKeyA RegEnumKeyExA
RegEnumKeyExW RegEnumKeyW
RegEnumValueA RegEnumValueW
RegFlushKey RegGetKeySecurity
RegInitialize RegisterEventSourceA
RegisterEventSourceW RegisterExtObjListAccess
RegisterServiceCtrlHandlerA RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerExW RegisterServiceCtrlHandlerHelp
RegisterServiceCtrlHandlerW RegLeakTableAddKey
RegLeakTableClear RegLeakTableInit
RegLeakTableIsTrackedObject RegLeakTableRemoveKey
RegLoadKeyA RegLoadKeyW
RegNotifyChangeKeyValue RegOpenCurrentUser
RegOpenKeyA RegOpenKeyExA
RegOpenKeyExW RegOpenKeyW
RegOpenUserClassesRoot RegOverridePredefKey
RegQueryInfoKeyA RegQueryInfoKeyW
RegQueryMultipleValuesA RegQueryMultipleValuesW
RegQueryValueA RegQueryValueExA
RegQueryValueExW RegQueryValueW
RegReplaceKeyA RegReplaceKeyW
RegRestoreKeyA RegRestoreKeyW
RegSaveKeyA RegSaveKeyExA
RegSaveKeyExW RegSaveKeyW
RegSetKeySecurity RegSetValueA
RegSetValueExA RegSetValueExW
RegSetValueW RegUnLoadKeyA
RegUnLoadKeyW RemapPredefinedHandle
RemoveTraceCallback RemoveUsersFromEncryptedFile
REnumDependentServicesA REnumDependentServicesW
REnumServiceGroupW REnumServicesStatusA
REnumServicesStatusExA REnumServicesStatusExW
REnumServicesStatusW ReportEventA
ReportEventW RevertToSelf
RGetServiceDisplayNameA RGetServiceDisplayNameW
RGetServiceKeyNameA RGetServiceKeyNameW
RI_ScSendTSMessage RI_ScSetServiceBitsW
RLockServiceDatabase RNotifyBootConfigStatus
ROpenSCManagerA ROpenSCManagerW
ROpenServiceA ROpenServiceW
RpcpBindRpc RpcpUnbindRpc
Rpc_OpenPredefHandle RQueryServiceConfig2A
RQueryServiceConfig2W RQueryServiceConfigA
RQueryServiceConfigW RQueryServiceLockStatusA
RQueryServiceLockStatusW RQueryServiceObjectSecurity
RQueryServiceStatus RQueryServiceStatusEx
RSetServiceObjectSecurity RSetServiceStatus
RsopReportInstallFailure RStartServiceA
RStartServiceW RUnlockServiceDatabase
SaferCloseLevel SaferComputeTokenFromLevel
SaferCreateLevel SaferGetLevelInformation
SaferGetPolicyInformation SaferiChangeRegistryScope
SaferiCompareTokenLevels SaferIdentifyLevel
SaferiIsExecutableFileType SaferiPopulateDefaultsInRegistry
SaferiReplaceProcessThreadTokens SaferiSearchMatchingHashRules
SaferpBuildRestrictedToken SaferpCheckKeyStamp
SaferpCreateNewSingleIdentification SaferpDeleteSingleIdentificationGuid
SaferpEnforceDefaultLevelDefinitions SaferpEnterCriticalPolicySection
SaferpEnumerateHiddenLevels SaferpGenericTableAllocate
SaferpGenericTableFree SaferpGrabGroupPolicyLocks
SaferpGuidIdentsLoadTable SaferpLevelObjpCleanupEntry
SaferpLoadUnicodeResourceString SaferpLogResultsToFile
SaferpPol_GetInfoCommon_DefaultLevel SaferpPol_GetInfoCommon_HonorUserIdentities
SaferpRecordEventLogEntryHelper SaferpReleaseGroupPolicyLocks
SaferpReloadPolicyIfNeeded SaferpSetExistingSingleIdentification
SaferpSetSingleIdentificationHash SaferpSetSingleIdentificationPath
SaferpSetSingleIdentificationZone SaferpSkipPolicyForAdmins
SaferRecordEventLogEntry SaferSetLevelInformation
SaferSetPolicyInformation ScAddWStrToWStrArray
ScConnectServiceController ScConvertToAnsi
ScConvertToUnicode ScCreateAndSetSD
ScCreateDispatchTableA ScCreateDispatchTableW
ScCreateStartEventSD ScDispatcherLoop
ScEncryptPassword ScExpungeMessage
ScGetDispatchEntry ScGetPipeInput
ScInitializeAllowedAce ScInitializeAuditAce
ScInitializeDeniedAce ScNormalizeCmdLineArgs
ScReadServiceParms ScSendResponse
ScSvcctrlThreadA ScWaitForStart
ScWStrArraySize SddlpAnsiStringToUnicodeString
SddlpGetRootDomainSid SeclCreateProcessWithLogonW
ServiceIsTrustedByDefault SetAclInformation
SetEntriesInAccessListA SetEntriesInAccessListW
SetEntriesInAclA SetEntriesInAclW
SetEntriesInAListA SetEntriesInAListW
SetEntriesInAuditListA SetEntriesInAuditListW
SetErrorChecks SetFileSecurityA
SetFileSecurityW SetHandleProtection
SetKernelObjectSecurity SetNamedSecurityInfoA
SetNamedSecurityInfoExA SetNamedSecurityInfoExW
SetNamedSecurityInfoW SetPrivateObjectSecurity
SetPrivateObjectSecurityEx SetSecurityDescriptorControl
SetSecurityDescriptorDacl SetSecurityDescriptorGroup
SetSecurityDescriptorOwner SetSecurityDescriptorRMControl
SetSecurityDescriptorSacl SetSecurityInfo
SetSecurityInfoExA SetSecurityInfoExW
SetServiceBits SetServiceObjectSecurity
SetServiceStatus SetThreadToken
SetTokenInformation SetTraceCallback
SetupLocalRPCSecurity SetUserFileEncryptionKey
ShutdownCallback ShutdownCallbackEx
Square StartPerflibFunctionTimer
StartSeclogonService StartServiceA
StartServiceCtrlDispatcherA StartServiceCtrlDispatcherW
StartServiceW StateObjectListRemove
StopDebug StringCatWorkerA
StringCatWorkerW StringCbCopyExA
StringCchCopyExW StringDuplicate
StringVPrintfWorkerA StringVPrintfWorkerW
SVCCTL_HANDLEA_bind SVCCTL_HANDLEW_bind
SystemFunction001 SystemFunction002
SystemFunction003 SystemFunction004
SystemFunction005 SystemFunction006
SystemFunction007 SystemFunction008
SystemFunction010 SystemFunction012
SystemFunction013 SystemFunction016
SystemFunction017 SystemFunction024
SystemFunction025 SystemFunction028
SystemFunction029 SystemFunction030
SystemFunction032 SystemFunction034
SystemFunction036 SystemFunction040
SystemFunction041 TmpGetComputerNameA
To_SECL_BLOB_A To_SECL_BLOB_W
TrackObject TrackObjectDataClear
TrackObjectDataPrint TreeResetNamedSecurityInfoW
TrusteeAccessToObjectA TrusteeAccessToObjectW
TrusteeAllocationSizeAToW UnicodeToAnsi
UnicodeToMultiByte UninstallApplication
UnlockServiceDatabase UnregisterIdleTask
UnTrackObject UpdateCircularHash
UseOutsideStringToKey ValStateAddValueToSortedValues
ValStateInitialize ValStateReleaseValues
ValStateSetPhysicalIndexFromLogical ValStateUpdate
WdmWmiServiceMain WinPerfStartTrace
WmiCloseBlock WmiCloseTraceWithCursor
WmiConvertTimestamp WmiDevInstToInstanceNameA
WmiDevInstToInstanceNameW WmiDllInitialize
WmiEnumerateGuids WmiExecuteMethodA
WmiExecuteMethodW WmiFileHandleToInstanceNameA
WmiFileHandleToInstanceNameW WmiFreeBuffer
WmiGetNextEvent WmiGetTraceHeader
WmiMofEnumerateResourcesA WmiMofEnumerateResourcesW
WmiOpenBlock WmiOpenTraceWithCursor
WmiParseTraceEvent WmiQueryAllDataA
WmiQueryAllDataMultipleA WmiQueryAllDataMultipleW
WmiQueryAllDataW WmiQueryGuidInformation
WmiQuerySingleInstanceA WmiQuerySingleInstanceMultipleA
WmiQuerySingleInstanceMultipleW WmiQuerySingleInstanceW
WmiServiceCtrlHandler WmiSetSingleInstanceA
WmiSetSingleInstanceW WmiSetSingleItemA
WmiSetSingleItemW wRegConn_bind
wRegConn_Netbios w_GetComputerName
_DebugMsg _DES_ECB_LM
_StringCbPrintfA _StringCbPrintfW
_StringCchPrintfW _WinPerfDbgTrace
__CodeAuthzIsExecutableFileTypeHelper __CodeAuthzpCheckIdentityCertificateRules
__CodeAuthzpCheckIdentityPathRules __CodeAuthzpCompareCodeAuthzLevelWithToken
__CodeAuthzpCompareImagePathHelper __CodeAuthzpComputeAccessTokenFromCodeAuthzObject
__CodeAuthzpEnsureMapped __CodeAuthzpFetchIdentsForLevel
__CodeAuthzpGetAuthzLevelInfo __CodeAuthzpIdentifyOneCodeAuthzLevel
__CodeAuthzpOpenIdentifierKey __CodeAuthzpQueryIdentityRegValue
__CodeAuthzpQuerySingleIdentification __delayLoadHelper2
__except_handler3 __global_unwind2
__tailMerge_Secur32 __tailMerge_WINSTA
__tailMerge_WINTRUST ___report_gsfailure

There are 31,314 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit