Flag: Tornado! Hurricane!

OpenRCE Win32 Call Chains Database

 Windows 2003 SE SP1 >> ADVAPI32
AbortShutdownCallback AbortSystemShutdownA
AbortSystemShutdownW AccessCheck
AccessCheckAndAuditAlarmA AccessCheckAndAuditAlarmW
AccessCheckByType AccessCheckByTypeAndAuditAlarmA
AccessCheckByTypeAndAuditAlarmW AccessCheckByTypeResultList
AccessCheckByTypeResultListAndAuditAlarmA AccessCheckByTypeResultListAndAuditAlarmByHandleA
AccessCheckByTypeResultListAndAuditAlarmByHandleW AccessCheckByTypeResultListAndAuditAlarmW
AccProvpAllocateProviderList AccProvpGetProviderCapabilities
AccProvpGetProviderForHandle AccProvpGetProviderForPath
AccProvpGetStringFromRegistry AccProvpInitProviders
AccProvpLoadProviderDef AccProvpProbeProviderForObject
AccProvUnload AddAccessAllowedAce
AddAccessAllowedAceEx AddAccessAllowedObjectAce
AddAccessDeniedAce AddAccessDeniedAceEx
AddAccessDeniedObjectAce AddAce
AddAuditAccessAce AddAuditAccessAceEx
AddAuditAccessObjectAce AddUsersToEncryptedFile
AdjustTokenGroups AdjustTokenPrivileges
AdvApi_InitializeTermsrvFpns AllocAndInsertCNode
AllocateAndInitializeSid AllocateLocallyUniqueId
AnsiSizeForUnicodeString AnsiToUnicode
AppmgmtGetUserSid AppmgmtInitialize
AreAllAccessesGranted AreAnyAccessesGranted
ARPRemoveApp A_SHAFinal
A_SHAFinalNS A_SHAUpdateNS
BackupEventLogA BackupEventLogW
BaseAbortShutdown BaseAbortSystemShutdown
BaseBindToMachine BaseBindToMachineShutdownInterface
BaseInitiateShutdown BaseInitiateShutdownEx
BaseInitiateSystemShutdown BaseInitiateSystemShutdownEx
BaseRegCchSpecialKeyLen BaseRegCloseKey
BaseRegConstructUserClassPrefix BaseRegCreateKey
BaseRegCreateMultipartKey BaseRegDeleteKey
BaseRegDeleteKeyEx BaseRegDeleteValue
BaseRegFlushKey BaseRegGetBestAncestor
BaseRegGetClassKeyValueState BaseRegGetKeySemantics
BaseRegGetUserAndMachineClass BaseRegGetUserPrefixLength
BaseRegGetVersion BaseRegLoadKey
BaseRegMapClassOnAccessDenied BaseRegMapClassRegistrationKey
BaseRegNotifyClassKey BaseRegOpenClassKey
BaseRegOpenClassKeyFromLocation BaseRegOpenClassKeyRoot
BaseRegOpenKey BaseRegQueryAndMergeValues
BaseRegQueryMultipleClassKeyValues BaseRegQueryValue
BaseRegReplaceKey BaseRegRestoreKey
BaseRegSaveKey BaseRegSaveKeyEx
BaseRegSetKeySecurity BaseRegSetValue
BaseRegTranslateToMachineClassKey BaseRegTranslateToUserClassKey
BaseRegUnLoadKey BaseSetLastNTError
BenalohMod BenalohModExp
BenalohModSquare BenalohSetup
Bind BSafeEncPublic
BuildExplicitAccessWithNameA BuildImpersonateExplicitAccessWithNameA
BuildSecurityDescriptorA BuildSecurityDescriptorW
BuildTrusteeWithObjectsAndSidW BuildVHash
BuildVKey CacheDomainAndDnsDomainSids
CancelOverlappedAccess CEvents::ZAPInstall
CEventsBase::Install CEventsBase::Uninstall
ChangeServiceConfig2A ChangeServiceConfig2W
ChangeServiceConfigA ChangeServiceConfigW
CheckAllSignatures CheckEventLogBuffer
CheckSignature CheckSignatureInFile
CheckTokenMembership ClassKeyCountSubKeys
CleanupClassesEnumTable CleanupConvertNode
CleanupPredefinedHandles CleanupPredefinedHandlesTable
ClearEventLogA ClearEventLogW
CLoadMsi::~CLoadMsi CloseEventLog
CloseExtObjectLibrary ClosePredefinedHandle
CloseServiceHandle CloseTrace
CodeAuthzCloseLevelHandle CodeAuthzCreateLevelHandle
CodeAuthzDeinitializeGlobals CodeAuthzFullyQualifyFilename
CodeAuthzGuidIdentsEntireTableFree CodeAuthzGuidIdentsInitializeTable
CodeAuthzHandleToLevelStruct CodeAuthzIdentsLookupByGuid
CodeAuthzInitialize CodeAuthzInitializeGlobals
CodeAuthzIsExecutableFileType CodeAuthzLevelObjpEntireTableFree
CodeAuthzLevelObjpInitializeTable CodeAuthzLevelObjpLookupByLevelId
CodeAuthzpCompareImagePath CodeAuthzpCompareUnicodeImagePath
CodeAuthzpCompareWildcardSidWithSid CodeAuthzpComputeImageHash
CodeAuthzpConvertWildcardStringSidToSidW CodeAuthzpDeleteKeyRecursively
CodeAuthzpExpandWildcardList CodeAuthzpFormatIdentityKeyPath
CodeAuthzpFormatLevelKeyPath CodeAuthzpGetInformationCodeAuthzPolicy
CodeAuthzpGetTokenInformation CodeAuthzpImmediateReloadCacheTables
CodeAuthzpInvertAndAddSids CodeAuthzpInvertPrivs
CodeAuthzpModifyTokenOwner CodeAuthzpModifyTokenPermissions
CodeAuthzPol_GetInfoCached_DefaultLevel CodeAuthzPol_GetInfoCached_HonorUserIdentities
CodeAuthzPol_GetInfoCached_LevelListRaw CodeAuthzPol_GetInfoRegistry_DefaultLevel
CodeAuthzPol_GetInfoRegistry_ScopeFlags CodeAuthzPol_GetInfoRegistry_TransparentEnabled
CodeAuthzPol_SetInfoDual_DefaultLevel CodeAuthzPol_SetInfoDual_HonorUserIdentities
CodeAuthzPol_SetInfoRegistry_ScopeFlags CodeAuthzPol_SetInfoRegistry_TransparentEnabled
CodeAuthzpRecomputeEffectiveDefaultLevel CodeAuthzpSetAuthzLevelInfo
CodeAuthzpSetInformationCodeAuthzPolicy CodeAuthzpSidInSidAndAttributes
CodeAuthzpSidInWildcardList CodeAuthzReloadCacheTables
ControlService ConvertAccessToSecurityDescriptorA
ConvertAccessToSecurityDescriptorW ConvertAListAToNamedBasedW
ConvertAListToNamedBasedW ConvertAListWToAlistAInplace
ConvertExplicitAccessAToExplicitAccessW ConvertOemToCharW
ConvertSDToAccessA ConvertSDToAccessW
ConvertSDToStringSDRootDomainA ConvertSDToStringSDRootDomainW
ConvertSecurityDescriptorToAccessNamedA ConvertSecurityDescriptorToAccessW
ConvertSecurityDescriptorToStringSecurityDescriptorA ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertSidToStringSidA ConvertSidToStringSidW
ConvertStringAToStringW ConvertStringSDToSDDomainA
ConvertStringSDToSDDomainW ConvertStringSDToSDRootDomainA
ConvertStringSDToSDRootDomainW ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidA
ConvertStringSidToSidW ConvertStringWToStringA
ConvertToAutoInheritPrivateObjectSecurity ConvertTrusteeAToTrusteeW
ConvertTrusteeWToTrusteeA CopySid
CPReturnhWnd CProvVerifyImage
CreateMultipartUserClassKey CreatePrivateObjectSecurity
CreatePrivateObjectSecurityEx CreatePrivateObjectSecurityWithMultipleInheritance
CreateProcessAsUserA CreateProcessAsUserW
CreateProcessWithLogonCommonW CreateProcessWithLogonW
CreateProcessWithTokenW CreateRemoteSessionProcessA
CreateRemoteSessionProcessW CreateRestrictedToken
CreateServiceA CreateServiceW
CreateWellKnownSid CredDeleteA
CredDeleteW CredEnumerateA
CredEnumerateW CredGetSessionTypes
CredGetTargetInfoA CredGetTargetInfoW
CredIsMarshaledCredentialA CredIsMarshaledCredentialW
CredMarshalCredentialA CredMarshalCredentialW
CredpAllocStrFromStr CredpConvertCredential
CredpConvertCredentials CredpConvertOneCredential
CredpConvertOneCredentialSize CredpConvertString
CredpConvertStringSize CredpConvertTargetInfo
CredpDecodeCredential CredpEncodeCredential
CredpMarshalBytes CredpMarshalChar
CredProfileLoaded CredpUnmarshalBytes
CredrDelete CredReadA
CredReadDomainCredentialsA CredReadDomainCredentialsW
CredReadW CredRenameA
CredRenameW CredrEnumerate
CredrGetSessionTypes CredrGetTargetInfo
CredrProfileLoaded CredrRead
CredrReadDomainCredentials CredrRename
CredrWrite CredrWriteDomainCredentials
CredUnmarshalCredentialA CredUnmarshalCredentialW
CredWriteA CredWriteDomainCredentialsA
CredWriteDomainCredentialsW CredWriteW
CryptAcquireContextW CryptContextAddRef
CryptCreateHash CryptDecrypt
CryptDeriveKey CryptDestroyHash
CryptDestroyKey CryptDuplicateHash
CryptDuplicateKey CryptEncrypt
CryptEnumProvidersA CryptEnumProvidersW
CryptEnumProviderTypesA CryptEnumProviderTypesW
CryptExportKey CryptGenKey
CryptGenRandom CryptGetDefaultProviderA
CryptGetDefaultProviderW CryptGetHashParam
CryptGetKeyParam CryptGetProvParam
CryptGetUserKey CryptHashData
CryptHashSessionKey CryptImportKey
CryptReleaseContext CryptSetHashParam
CryptSetKeyParam CryptSetProviderA
CryptSetProviderExA CryptSetProviderExW
CryptSetProviderW CryptSetProvParam
CryptSignHashA CryptVerifySignatureA
CSList::Insert CSList::InsertIfUnique
CSList::~CSList CSPInCacheCheck
c_SeclCreateProcessWithLogonW DecryptDataLength
DecryptFileA DecryptFileW
DecryptFullBlock DecryptPartialBlock
DeInitRand DeleteAce
DeleteAdvapiCriticalSections DeleteService
DeregisterEventSource DeRegisterExtObjListAccess
DestroyPerflibFunctionTimer DestroyPrivateObjectSecurity
DetectWow64Process DisableLibrary
DisablePerfLibrary DisablePredefinedHandleTable
DllInitialize DuplicateEncryptionInfoFile
DuplicateToken DuplicateTokenEx
ElfBackupEventLogFileA ElfBackupEventLogFileW
ElfChangeNotify ElfClearEventLogFileA
ElfClearEventLogFileW ElfCloseEventLog
ElfDeregisterEventSource ElfFlushEventLog
ElfGetLogInformation ElfNumberOfRecords
ElfOldestRecord ElfOpenBackupEventLogA
ElfOpenBackupEventLogW ElfOpenEventLogA
ElfOpenEventLogW ElfpGetComputerName
ElfrBackupELFA ElfrBackupELFW
ElfrChangeNotify ElfrClearELFA
ElfrClearELFW ElfrCloseEL
ElfrDeregisterEventSource ElfReadEventLogA
ElfReadEventLogW ElfRegisterEventSourceA
ElfRegisterEventSourceW ElfReportEventA
ElfReportEventAndSourceW ElfReportEventW
ElfrFlushEL ElfrGetLogInformation
ElfrNumberOfRecords ElfrOldestRecord
ElfrOpenBELA ElfrOpenBELW
ElfrOpenELA ElfrOpenELW
ElfrReadELA ElfrReadELW
ElfrRegisterEventSourceA ElfrRegisterEventSourceW
ElfrReportEventA ElfrReportEventAndSourceW
ElfrReportEventW EncryptDataLength
EncryptedFileKeyInfo EncryptFileA
EncryptFileW EncryptFullBlock
EncryptionDisable EncryptKey
EncryptMemoryInitialize EncryptPartialBlock
EndpointConn_np EnterHashCritSec
EnterKeyCritSec EnterProviderCritSec
EnumClassKey EnumDependentServicesA
EnumDependentServicesW EnumerateValue
EnumServiceGroupW EnumServicesStatusA
EnumServicesStatusExA EnumServicesStatusExW
EnumServicesStatusW EnumStateChooseNext
EnumStateClear EnumStateDestroy
EnumStateGetNextEnum EnumStateInit
EnumTableAddKey EnumTableClear
EnumTableFindKeyState EnumTableGetKeyState
EnumTableGetNextEnum EnumTableGetRootState
EnumTableInit EnumTableRemoveKey
EnumTableUpdateRootState EnumUILanguageCallback
EqualDomainSid EqualPrefixSid
EqualSid EstimateQuotient
EtwpAddGuidHandleToGuidMapList EtwpAdvanceToNewEvent
EtwpAdvanceToNewEventEx EtwpAllocateTraceHandle
EtwpAllocEvent EtwpAllocTraceBuffer
EtwpBuildEventTable EtwpBuildMUIPath
EtwpCalculateCurrentTime EtwpCallHWConfig
EtwpCheckForRealTimeLoggers EtwpCheckGuidAccess
EtwpCleanupGuidMapList EtwpCleanupStreamList
EtwpCleanupTraceLog EtwpConvertWADToAnsi
EtwpCopyCurrentEvent EtwpCopyLogfileInfo
EtwpCopyMRString EtwpCountedToSzAndTrim
EtwpCountedUnicodeToCountedAnsi EtwpCreateGuidMapping
EtwpCreateHeap EtwpDeinitializeDll
EtwpDoEventCallbacks EtwpDumpHardwareConfig
EtwpEnumerateGuids EtwpEnumRegGuids
EtwpFileExists EtwpFreeEvent
EtwpFreeRealTimeContext EtwpFreeTraceBuffer
EtwpFreeTraceHandle EtwpGetBuffersWrittenFromQuery
EtwpGetCallbackRoutine EtwpGetCpuConfig
EtwpGetCurrentBuffer EtwpGetDevInstInfo
EtwpGetDiskInfo EtwpGetLanguageList
EtwpGetLastBufferWithMarker EtwpGetMofResourceList
EtwpGetPowerInfo EtwpGetServiceInfo
EtwpGetWindowsDirectory EtwpGuidMapCallback
EtwpInitializeDll EtwpInternalProvider
EtwpLookforRealTimeBuffers EtwpLookupTraceHandle
EtwpMemCommit EtwpMemFree
EtwpMemReserve EtwpOpenKernelGuid
EtwpParseTraceEvent EtwpProcessGuidMaps
EtwpProcessRealTimeTraces EtwpProcessTraceLogEx
EtwpQueryAllInstanceInfo EtwpQueryInstanceInfo
EtwpQuerySingleInstanceInfo EtwpReadGuidMapRecords
EtwpRealTimeCallback EtwpRegOpenKey
EtwpRegQueryValueKey EtwpSendWmiKMRequest
EtwpSendWmiRequest EtwpSetDosError
EtwpSetupLogFileStreams EtwpSetupRealTimeContext
EtwpSynchReadFile EtwpUnicodeToAnsi
EtwpUpdateServiceStatus EVENTLOG_HANDLE_W_bind
EVENTLOG_HANDLE_W_unbind EXCLUDE_LIST::Add
EXCLUDE_LIST::EXCLUDE_LIST EXCLUDE_LIST::~EXCLUDE_LIST
ExtractClassKey FileEncryptionStatusA
FileEncryptionStatusW FindFirstFreeAce
FixRegData FreeApplicationInfo
FreeInheritedFromArray GatherRandomKeyFastUserMode
GenRandom GetAccessPermissionsForObjectA
GetAccessPermissionsForObjectW GetAce
GetAclInformation GetAuditedPermissionsFromAclA
GetAuditedPermissionsFromAclW GetCallStack
GetCryptSigResourcePtr GetCurrentHwProfileA
GetDebugLogFileName GetEffectiveRightsFromAclA
GetEffectiveRightsFromAclW GetEventLogInformation
GetExplicitEntriesFromAclW GetFileSecurityA
GetFileSecurityW GetFixedKeyInfo
GetInheritanceSourceW GetKernelObjectSecurity
GetLangIdFromSzLang GetLeakStack
GetLengthSid GetLocalManagedApplicationData
GetLocalManagedApplications GetManagedAppCategories
GetManagedApplicationCategories GetManagedApplications
GetManagedApps GetNamedSecurityInfoA
GetNamedSecurityInfoExA GetNamedSecurityInfoExW
GetNamedSecurityInfoW GetNumberOfEventLogRecords
GetOldestEventLogRecord GetOverlappedAccessResults
GetPerfDllFileInfo GetPrivateObjectSecurity
GetSecurityDescriptorControl GetSecurityDescriptorDacl
GetSecurityDescriptorGroup GetSecurityDescriptorOwner
GetSecurityDescriptorRMControl GetSecurityDescriptorSacl
GetSecurityInfo GetSecurityInfoExA
GetSecurityInfoExW GetServiceDisplayNameA
GetServiceDisplayNameW GetServiceKeyNameA
GetServiceKeyNameW GetSidIdentifierAuthority
GetSidLengthRequired GetSidSubAuthority
GetSidSubAuthorityCount GetStack
GetSubKeyCount GetTimeAsLongLong
GetTokenInformation GetTrusteeWForSid
GetUserNameA GetUserNameW
GetWindowsAccountDomainSid HashBytesOfFile
HashTheFile imagehack_ImageGetCertificateData
imagehack_ImageGetDigestStream ImpersonateAnonymousToken
ImpersonateLoggedOnUser ImpersonateNamedPipeClient
ImpersonateSelf InitDebug
InitDebugSupport InitializeAcl
InitializeAdvapiCriticalSections InitializeClassesEnumTable
InitializeClassesRoot InitializeLeakTrackTable
InitializePredefinedHandlesTable InitializeSecurityDescriptor
InitializeSid InitializeSidLookupTable
InitializeStatusBinding InitiateSystemShutdownA
InitiateSystemShutdownExA InitiateSystemShutdownExW
InitiateSystemShutdownW InitKeyLM
InitSecurityAcls InstallApplication
InstallBegin InstallEnd
InstallManageApp InstallUnmanageApp
IsRNGWinNT IsSaferDisabled
IsSystemLUID IsTerminalServerCompatible
IsTextUnicode IsTokenRestricted
IsTokenUntrusted IsValidAcl
IsValidSecurityDescriptor IsValidSid
IsWellKnownSid ItCliRegisterIdleTask
ItCliUnregisterIdleTask ITRPC_HANDLE_bind
ITRPC_HANDLE_unbind ItSrvProcessIdleTasks
ItSrvRegisterIdleTask ItSrvUnregisterIdleTask
I_CalculateImagePtrs I_CheckIsTestRootAllowed
I_ConvertParsedRSAPubKeyToBSafePubKey I_DigestFunction
I_FindCertificate I_GetAuthAttributes
I_MapIt I_MinCryptFindRootByKey
I_MinCryptMapFile I_MinCryptVerifySignerAuthenticatedAttributes
I_QueryTagInformation I_ScPnPGetServiceName
I_ScQueryServiceTagInfo I_ScSendTSMessage
I_ScSetServiceBitsA I_ScSetServiceBitsW
I_VerifyPKCS1SigningFormat KeyStateGetValueState
KeyStateListDestroy KeyStateListInit
KillPerflibFunctionTimer L32CommonCreate
L32CreateTokenForNewProcess L32FindLogonSid
L32GetDefaultDomainName L32pInitLsa
L32pLogonUser L32RevertOpenProcess
L32SetProcessQuotas L32SetProcessToken
LeaveHashCritSec LeaveKeyCritSec
LeaveProviderCritSec LoadAndInitFeClient
LoadImageHLP LocalBaseRegCloseKey
LocalBaseRegCreateKey LocalBaseRegDeleteKey
LocalBaseRegDeleteKeyEx LocalBaseRegDeleteValue
LocalBaseRegEnumKey LocalBaseRegEnumValue
LocalBaseRegFlushKey LocalBaseRegGetKeySecurity
LocalBaseRegLoadKey LocalBaseRegOpenKey
LocalBaseRegQueryInfoKey LocalBaseRegQueryMultipleValues
LocalBaseRegQueryMultipleValues2 LocalBaseRegQueryValue
LocalBaseRegReplaceKey LocalBaseRegRestoreKey
LocalBaseRegSaveKey LocalBaseRegSaveKeyEx
LocalBaseRegSetKeySecurity LocalBaseRegSetValue
LocalBaseRegUnLoadKey LocalConvertStringSDToSD_Rev1
LocalConvertStringSidToSid LocalGetAclForString
LocalGetSDControlForString LocalGetSidForString
LocalGetStringForControl LocalGetStringForSid
LocalOpenClassesRoot LocalOpenCurrentConfig
LocalOpenCurrentUser LocalOpenLocalMachine
LocalOpenPerformanceData LocalOpenPredefHandle
LocalSignHashW LocalVerifySignatureW
LockServiceDatabase LogonUserA
LogonUserCommonA LogonUserCommonW
LogonUserExA LogonUserExW
LogonUserW LookupAccessMaskInTable
LookupAccountNameA LookupAccountNameInternal
LookupAccountNameW LookupAccountSidA
LookupAccountSidInternal LookupAccountSidW
LookupAceFlagsInTable LookupAceTypeInTable
LookupPrivilegeDisplayNameA LookupPrivilegeDisplayNameW
LookupPrivilegeNameA LookupPrivilegeNameW
LookupPrivilegeValueA LookupPrivilegeValueW
LookupSecurityDescriptorPartsA LookupSecurityDescriptorPartsW
LookupSidInTable LsaAddAccountRights
LsaAddPrivilegesToAccount LsaClearAuditLog
LsaClose LsaCreateAccount
LsaCreateSecret LsaCreateTrustedDomain
LsaCreateTrustedDomainEx LsaDelete
LsaDeleteTrustedDomain LsaEnumerateAccountRights
LsaEnumerateAccounts LsaEnumerateAccountsWithUserRight
LsaEnumeratePrivileges LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains LsaEnumerateTrustedDomainsEx
LsaFreeMemory LsaGetQuotasForAccount
LsaGetRemoteUserName LsaGetSystemAccessAccount
LsaGetUserName LsaICLookupNames
LsaICLookupNamesWithCreds LsaICLookupSids
LsaICLookupSidsWithCreds LsaLookupNames
LsaLookupNames2 LsaLookupPrivilegeDisplayName
LsaLookupPrivilegeName LsaLookupPrivilegeValue
LsaLookupSids LsaOpenAccount
LsaOpenPolicy LsaOpenPolicySce
LsaOpenSecret LsaOpenTrustedDomain
LsaOpenTrustedDomainByName LsapAddAccountRights
LsapApiConvertPrivilegesToRights LsapApiConvertRightsToPrivileges
LsapCrClientGetSessionKey LsapCrDecryptValue
LsapCrEncryptValue LsapDeleteTrustedDomain
LsapDsMarshalAuthInfoHalf LsapEncryptAuthInfo
LsapEnumerateAccountRights LsapEnumerateAccountsWithUserRight
LsapNeutralizeNt4Emulation LsapQueryTrustedDomainInfo
LsapRandomFill LsapRemoveAccountRights
LsapRetrievePrivateData LsapSetTrustedDomainInformation
LsapStorePrivateData LsaQueryDomainInformationPolicy
LsaQueryForestTrustInformation LsaQueryInformationPolicy
LsaQueryInfoTrustedDomain LsaQuerySecret
LsaQuerySecurityObject LsaQueryTrustedDomainInfo
LsaQueryTrustedDomainInfoByName LsarAddAccountRights
LsarAddPrivilegesToAccount LsarClearAuditLog
LsarClose LsarCreateAccount
LsarCreateSecret LsarCreateTrustedDomain
LsarCreateTrustedDomainEx LsarCreateTrustedDomainEx2
LsarDelete LsarDeleteObject
LsarDeleteTrustedDomain LsaRemoveAccountRights
LsaRemovePrivilegesFromAccount LsarEnumerateAccountRights
LsarEnumerateAccounts LsarEnumerateAccountsWithUserRight
LsarEnumeratePrivileges LsarEnumeratePrivilegesAccount
LsarEnumerateTrustedDomains LsarEnumerateTrustedDomainsEx
LsaRetrievePrivateData LsarGetQuotasForAccount
LsarGetSystemAccessAccount LsarGetUserName
LsarLookupNames LsarLookupNames2
LsarLookupNames3 LsarLookupNames4
LsarLookupPrivilegeDisplayName LsarLookupPrivilegeName
LsarLookupPrivilegeValue LsarLookupSids
LsarLookupSids2 LsarLookupSids3
LsarOpenAccount LsarOpenPolicy2
LsarOpenPolicyRPC LsarOpenPolicySce
LsarOpenSecret LsarOpenTrustedDomain
LsarOpenTrustedDomainByName LsarQueryDomainInformationPolicy
LsarQueryForestTrustInformation LsarQueryInformationPolicy2
LsarQueryInfoTrustedDomain LsarQuerySecret
LsarQuerySecurityObject LsarQueryTrustedDomainInfo
LsarQueryTrustedDomainInfoByName LsarRemoveAccountRights
LsarRemovePrivilegesFromAccount LsarRetrievePrivateData
LsarSetDomainInformationPolicy LsarSetForestTrustInformation
LsarSetInformationPolicy LsarSetInformationPolicy2
LsarSetInformationTrustedDomain LsarSetQuotasForAccount
LsarSetSecret LsarSetSecurityObject
LsarSetSystemAccessAccount LsarSetTrustedDomainInfo
LsarSetTrustedDomainInfoByName LsarStorePrivateData
LsaSetDomainInformationPolicy LsaSetForestTrustInformation
LsaSetInformationPolicy LsaSetInformationTrustedDomain
LsaSetQuotasForAccount LsaSetSecret
LsaSetSecurityObject LsaSetSystemAccessAccount
LsaSetTrustedDomainInfoByName LsaSetTrustedDomainInformation
LsaStorePrivateData MakeAbsoluteSD
MakeAbsoluteSD2 MakeSelfRelativeSD
MapSAToRpcSA MapSDToRpcSD
MarshallString MartaDllInitialize
MartaInitialize MD4Final
MD4Update MD5Final
MD5HashData MD5Update
MIDL_user_allocate MinAsn1ExtractContent
MinAsn1ExtractValues MinAsn1ParseAlgorithmIdentifier
MinAsn1ParseAttributes MinAsn1ParseCertificate
MinAsn1ParseIndirectData MinAsn1ParsePublicKeyInfo
MinAsn1ParseRSAPublicKey MinAsn1ParseSignedData
MinAsn1ParseSignedDataCertificates MinCryptDecodeHashAlgorithmIdentifier
MinCryptHashFile MinCryptHashMemory
MinCryptVerifyCertificate MinCryptVerifySignedData
MinCryptVerifySignedFile MinCryptVerifySignedHash
Mod MonBuildPerfDataBlock
MSChapSrvChangePassword MSChapSrvChangePassword2
Multiply NewAbortShutdownCallback
NewGenRandom NewGenRandomEx
NewShutdownCallback NewShutdownCallbackEx
NewVerifyImage NotifyBootConfigStatus
NotifyChangeEventLog NullTerminateRegExpandSzString
ObjectCloseAuditAlarmA ObjectCloseAuditAlarmW
ObjectDeleteAuditAlarmA ObjectDeleteAuditAlarmW
ObjectOpenAuditAlarmA ObjectOpenAuditAlarmW
ObjectPrivilegeAuditAlarmA ObjectPrivilegeAuditAlarmW
OemToCharW_WithAllocation OpenBackupEventLogA
OpenBackupEventLogW OpenClassesRoot
OpenCombinedClassesRoot OpenCurrentUser
OpenEncryptedFileRawA OpenEncryptedFileRawW
OpenEventLogA OpenEventLogW
OpenExtObjectLibrary OpenLocalMachine
OpenPerformanceData OpenPerformanceNlsText
OpenPerformanceText OpenPredefinedKeyForSpecialAccess
OpenProcessToken OpenSCManagerA
OpenSCManagerW OpenServiceA
OpenServiceW OpenThreadToken
OpenTraceA OpenTraceW
OpenUnicodeLogFile OpenUsers
PerfGetLangId PerfGetNames
Perflib004Update PerflibCheckPerfFile
PerflibCreateSD PerflibFindCounterFile
PerflibRename004File PerflibTimerFunction
PerfOpenKey PerfpCheckErrorTime
PerfpDeleteErrorLogs PerfpFindError
PerfpThrottleError PerfRegCleanup
PerfRegEnumKey PerfRegEnumValue
PerfRegInitialize PerfRegQueryInfoKey
PerfRegQueryValue PerfRegSetValue
PrivateRegQueryValueExT PrivilegeCheck
PrivilegedServiceAuditAlarmA PrivilegedServiceAuditAlarmW
ProcessIdleTasks ProcessTrace
QueryExtensibleData QueryKeyInfo
QueryKeyTag QueryRecoveryAgentsOnEncryptedFile
QueryServiceConfig2A QueryServiceConfig2W
QueryServiceConfigA QueryServiceConfigW
QueryServiceLockStatusA QueryServiceLockStatusW
QueryServiceObjectSecurity QueryServiceStatus
QueryServiceStatusEx QueryUsersOnEncryptedFile
QueryValueInternalA QueryValueInternalW
RandomFillBuffer rc4_safe
rc4_safe_key rc4_safe_shutdown
rc4_safe_startup RChangeServiceConfig2A
RChangeServiceConfig2W RChangeServiceConfigA
RChangeServiceConfigW RCloseServiceHandle
RControlService RCreateServiceA
RCreateServiceW RCreateServiceWOW64A
RCreateServiceWOW64W RDeleteService
ReadEventLogA ReadEventLogW
ReadMem RegCloseKey
RegConnectRegistryA RegConnectRegistryExA
RegConnectRegistryExW RegConnectRegistryW
RegConn_ip_tcp RegConn_nb_tcp
RegConn_np RegConn_spx
RegCreateKeyA RegCreateKeyExA
RegCreateKeyExW RegCreateKeyW
RegDeleteKeyA RegDeleteKeyExA
RegDeleteKeyExW RegDeleteKeyW
RegDeleteValueA RegDeleteValueW
RegDisablePredefinedCache RegDisableReflectionKey
RegEnableReflectionKey RegEnumKeyA
RegEnumKeyExA RegEnumKeyExW
RegEnumKeyW RegEnumValueA
RegEnumValueW RegFlushKey
RegGetKeySecurity RegGetValueA
RegGetValueW RegisterEventSourceA
RegisterEventSourceW RegisterExtObjListAccess
RegisterServiceCtrlHandlerA RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerExW RegisterServiceCtrlHandlerHelp
RegisterServiceCtrlHandlerW RegLeakTableAddKey
RegLeakTableClear RegLeakTableInit
RegLeakTableIsTrackedObject RegLeakTableRemoveKey
RegLoadKeyA RegLoadKeyW
RegNotifyChangeKeyValue RegOpenCurrentUser
RegOpenKeyA RegOpenKeyExA
RegOpenKeyExW RegOpenKeyW
RegOverridePredefKey RegQueryInfoKeyA
RegQueryInfoKeyW RegQueryMultipleValuesA
RegQueryMultipleValuesW RegQueryReflectionKey
RegQueryValueA RegQueryValueExA
RegQueryValueExW RegQueryValueW
RegReplaceKeyA RegReplaceKeyW
RegRestoreKeyA RegRestoreKeyW
RegSaveKeyA RegSaveKeyExA
RegSaveKeyExW RegSaveKeyW
RegSetKeySecurity RegSetValueA
RegSetValueExA RegSetValueExW
RegSetValueW RegStrDup
RegUnLoadKeyA RegUnLoadKeyW
RemapPredefinedHandle RemoteRegEnumKeyWrapper
RemoteRegEnumValueWrapper RemoteRegQueryInfoKeyWrapper
RemoteRegQueryMultipleValues2Wrapper RemoteRegQueryMultipleValuesWrapper
RemoteRegQueryValueWrapper RemoveTraceCallback
RemoveUsersFromEncryptedFile REnumDependentServicesA
REnumDependentServicesW REnumServiceGroupW
REnumServicesStatusA REnumServicesStatusExA
REnumServicesStatusExW REnumServicesStatusW
ReportEventA ReportEventW
RevertToSelf RGetServiceDisplayNameA
RGetServiceDisplayNameW RGetServiceKeyNameA
RGetServiceKeyNameW RI_ScQueryServiceTagInfo
RI_ScSendTSMessage RI_ScSetServiceBitsW
RLockServiceDatabase RNotifyBootConfigStatus
ROpenSCManagerA ROpenSCManagerW
ROpenServiceA ROpenServiceW
RpcpBindRpc RpcpUnbindRpc
Rpc_OpenPredefHandle RQueryServiceConfig2A
RQueryServiceConfig2W RQueryServiceConfigA
RQueryServiceConfigW RQueryServiceLockStatusA
RQueryServiceLockStatusW RQueryServiceObjectSecurity
RQueryServiceStatus RQueryServiceStatusEx
RSetServiceObjectSecurity RSetServiceStatus
RsopReportInstallFailure RStartServiceA
RStartServiceW RUnlockServiceDatabase
SafeBaseRegEnumKey SafeBaseRegEnumValue
SafeBaseRegGetKeySecurity SafeBaseRegQueryInfoKey
SafeBaseRegQueryMultipleValues SafeBaseRegQueryMultipleValues2
SaferCloseLevel SaferComputeTokenFromLevel
SaferCreateLevel SaferGetLevelInformation
SaferGetPolicyInformation SaferiChangeRegistryScope
SaferiCompareTokenLevels SaferIdentifyLevel
SaferiIsExecutableFileType SaferiReplaceProcessThreadTokens
SaferiSearchMatchingHashRules SaferpBuildRestrictedToken
SaferpCheckKeyStamp SaferpCreateNewSingleIdentification
SaferpDeleteSingleIdentificationGuid SaferpEnforceDefaultLevelDefinitions
SaferpEnterCriticalPolicySection SaferpEnumerateHiddenLevels
SaferpGenericTableAllocate SaferpGenericTableFree
SaferpGuidIdentsLoadTable SaferpGuidIdentsTableCompare
SaferpIsNetworkVolume SaferpLevelObjpCleanupEntry
SaferpLoadUnicodeResourceString SaferpLogResultsToFile
SaferpPol_GetInfoCommon_DefaultLevel SaferpPol_GetInfoCommon_HonorUserIdentities
SaferpReleaseGroupPolicyLocks SaferpSetExistingSingleIdentification
SaferpSetSingleIdentificationHash SaferpSetSingleIdentificationPath
SaferpSetSingleIdentificationZone SaferpSkipPolicyForAdmins
SaferRecordEventLogEntry SaferSetLevelInformation
SaferSetPolicyInformation ScAddWStrToWStrArray
ScClientBindToServer ScConnectServiceController
ScConvertToAnsi ScConvertToUnicode
ScCreateAndSetSD ScCreateDispatchTableA
ScCreateDispatchTableW ScCreateStartEventSD
ScDispatcherLoop ScEncryptPassword
ScExpungeMessage ScGetDispatchEntry
ScGetPipeInput ScInitializeAllowedAce
ScInitializeAuditAce ScInitializeDeniedAce
ScNormalizeCmdLineArgs ScNotifyNdr
ScReadServiceParms ScSendResponse
ScSvcctrlThreadA ScWStrArraySize
SddlpAnsiStringToUnicodeString SddlpGetRootDomainSid
SeclCreateProcessWithLogonExW SeclCreateProcessWithLogonW
SECL_HANDLE_to_xmit SECL_HANDLE_XmitFreeInst
SECL_HANDLE_XmitFreeXmit SECL_HANDLE_XmitTranslateFromXmit
SECL_HANDLE_XmitTranslateToXmit ServiceIsTrustedByDefault
SetAclInformation SetEntriesInAccessListA
SetEntriesInAccessListW SetEntriesInAclA
SetEntriesInAclW SetEntriesInAListA
SetEntriesInAListW SetEntriesInAuditListA
SetEntriesInAuditListW SetErrorChecks
SetFileSecurityA SetFileSecurityW
SetHandleProtection SetKernelObjectSecurity
SetNamedSecurityInfoA SetNamedSecurityInfoExA
SetNamedSecurityInfoExW SetNamedSecurityInfoW
SetPrivateObjectSecurity SetPrivateObjectSecurityEx
SetSecurityDescriptorControl SetSecurityDescriptorDacl
SetSecurityDescriptorGroup SetSecurityDescriptorOwner
SetSecurityDescriptorRMControl SetSecurityDescriptorSacl
SetSecurityInfo SetSecurityInfoExA
SetSecurityInfoExW SetServiceBits
SetServiceObjectSecurity SetServiceStatus
SetThreadToken SetTokenInformation
SetTraceCallback SetupLocalRPCSecurity
SetUserFileEncryptionKey ShutdownCallback
ShutdownCallbackEx Square
StartPerflibFunctionTimer StartServiceA
StartServiceCtrlDispatcherA StartServiceCtrlDispatcherW
StartServiceW StateObjectListInit
StateObjectListRemove StopDebug
StringCatWorkerA StringCatWorkerW
StringCbCopyExA StringCchCopyExW
StringCchLengthA StringCchLengthW
StringDuplicate StringVPrintfWorkerA
StringVPrintfWorkerW SVCCTL_HANDLEA_bind
SVCCTL_HANDLEW_bind SVCCTL_HANDLEW_unbind
SystemFunction001 SystemFunction002
SystemFunction003 SystemFunction004
SystemFunction005 SystemFunction006
SystemFunction007 SystemFunction008
SystemFunction010 SystemFunction012
SystemFunction013 SystemFunction016
SystemFunction017 SystemFunction024
SystemFunction025 SystemFunction028
SystemFunction029 SystemFunction030
SystemFunction032 SystemFunction034
SystemFunction036 SystemFunction040
SystemFunction041 TestClientForAccess
TestSid TmpGetComputerNameA
To_SECL_BLOB_A To_SECL_BLOB_W
TrackObject TrackObjectDataClear
TreeResetNamedSecurityInfoW TrusteeAccessToObjectA
TrusteeAccessToObjectW TrusteeAllocationSizeAToW
UnicodeToAnsi UnicodeToMultiByte
UninstallApplication UnlockServiceDatabase
UnregisterIdleTask UnTrackObject
UpdateCircularHash UpdateKeyTag
UseOutsideStringToKey ValStateAddValueToSortedValues
ValStateInitialize ValStateReleaseValues
ValStateUpdate WdmWmiServiceMain
WmiCloseBlock WmiCloseTraceWithCursor
WmiConvertTimestamp WmiDevInstToInstanceNameA
WmiDevInstToInstanceNameW WmiDllInitialize
WmiEnumerateGuids WmiExecuteMethodA
WmiExecuteMethodW WmiFileHandleToInstanceNameA
WmiFileHandleToInstanceNameW WmiFreeBuffer
WmiGetNextEvent WmiGetTraceHeader
WmiMofEnumerateResourcesA WmiMofEnumerateResourcesW
WmiOpenBlock WmiOpenTraceWithCursor
WmiParseTraceEvent WmiQueryAllDataA
WmiQueryAllDataMultipleA WmiQueryAllDataMultipleW
WmiQueryAllDataW WmiQueryGuidInformation
WmiQuerySingleInstanceA WmiQuerySingleInstanceMultipleA
WmiQuerySingleInstanceMultipleW WmiQuerySingleInstanceW
WmiServiceCtrlHandler WmiSetSingleInstanceA
WmiSetSingleInstanceW WmiSetSingleItemA
WmiSetSingleItemW wRegConn_bind
wRegConn_Netbios w_GetComputerName
_DebugMsg _DES_ECB_LM
_DllMainCRTStartupForGS2 _ExpandRegString
_HeapGuid _StringCbPrintfA
_StringCbPrintfW _StringCchPrintfW
_SubFileNameTemplate _WinPerfDbgTrace
__CodeAuthzpCheckIdentityCertificateRules __CodeAuthzpCheckIdentityHashRules
__CodeAuthzpCheckIdentityPathRules __CodeAuthzpCompareCodeAuthzLevelWithToken
__CodeAuthzpCompareImagePathHelper __CodeAuthzpComputeAccessTokenFromCodeAuthzObject
__CodeAuthzpCountIdentsForLevel __CodeAuthzpEnsureMapped
__CodeAuthzpEnsureUnmapped __CodeAuthzpFetchIdentsForLevel
__CodeAuthzpGetAuthzLevelInfo __CodeAuthzpIdentifyOneCodeAuthzLevel
__CodeAuthzpOpenIdentifierKey __CodeAuthzpQueryIdentityRegValue
__CodeAuthzpQuerySingleIdentification __delayLoadHelper2
__except_handler3 __global_unwind2
__tailMerge_Secur32 __tailMerge_WINSTA
__ValidateEH3RN ___report_gsfailure

There are 31,314 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit