ttdrecord.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Description
Time Travel Debugging Recording Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
437.3 KB
Uploaded
2025-12-01 08:05
Views
55
SHA-256
696aeadb625d570cea6f361e3ecec91a

Exported functions 1

ExecuteTTTracerCommandLine #1 · 0x26f90

Imported DLLs & functions 284

api-ms-win-core-com-l1-1-0.dll 8
CoCreateInstance 0x1004a0f0
CoGetApartmentType 0x1004a0ec
CoGetObjectContext 0x1004a0dc
CoInitializeEx 0x1004a0f8
CoTaskMemAlloc 0x1004a0e0
CoTaskMemFree 0x1004a0f4
CoUninitialize 0x1004a0e4
StringFromGUID2 0x1004a0e8
api-ms-win-core-console-l1-1-0.dll 2
GetConsoleMode 0x1004a104
SetConsoleCtrlHandler 0x1004a100
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1004a10c
IsDebuggerPresent 0x1004a110
OutputDebugStringA 0x1004a118
OutputDebugStringW 0x1004a114
api-ms-win-core-debug-l1-1-1.dll 1
DebugActiveProcessStop 0x1004a120
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1004a128
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1004a140
RaiseException 0x1004a13c
SetLastError 0x1004a134
SetUnhandledExceptionFilter 0x1004a130
UnhandledExceptionFilter 0x1004a138
api-ms-win-core-fibers-l1-1-0.dll 4
FlsAlloc 0x1004a154
FlsFree 0x1004a150
FlsGetValue 0x1004a14c
FlsSetValue 0x1004a148
api-ms-win-core-file-l1-1-0.dll 10
CreateFileW 0x1004a17c
DeleteFileW 0x1004a178
FlushFileBuffers 0x1004a168
GetFileAttributesW 0x1004a170
GetFileSizeEx 0x1004a16c
GetFullPathNameW 0x1004a180
ReadFile 0x1004a174
SetFilePointer 0x1004a15c
SetFilePointerEx 0x1004a164
WriteFile 0x1004a160
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x1004a188
api-ms-win-core-handle-l1-1-0.dll 3
CloseHandle 0x1004a190
DuplicateHandle 0x1004a194
GetHandleInformation 0x1004a198
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1004a1a8
HeapAlloc 0x1004a1a4
HeapFree 0x1004a1a0
api-ms-win-core-heap-obsolete-l1-1-0.dll 1
LocalFree 0x1004a1b0
api-ms-win-core-interlocked-l1-1-0.dll 2
InitializeSListHead 0x1004a1b8
InterlockedFlushSList 0x1004a1bc
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x1004a1c4
api-ms-win-core-kernel32-legacy-l1-1-0.dll 5
FindResourceW 0x1004a1dc
GetConsoleWindow 0x1004a1d8
GetSystemWow64DirectoryW 0x1004a1d4
LoadLibraryW 0x1004a1cc
WaitForMultipleObjects 0x1004a1d0
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
VerifyVersionInfoW 0x1004a1e4
api-ms-win-core-libraryloader-l1-1-0.dll 11
FreeLibrary 0x1004a200
GetModuleFileNameA 0x1004a1f4
GetModuleFileNameW 0x1004a1ec
GetModuleHandleExW 0x1004a1f0
GetModuleHandleW 0x1004a214
GetProcAddress 0x1004a210
LoadLibraryExA 0x1004a208
LoadLibraryExW 0x1004a20c
LoadResource 0x1004a1fc
LockResource 0x1004a204
SizeofResource 0x1004a1f8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1004a21c
api-ms-win-core-memory-l1-1-0.dll 5
CreateFileMappingW 0x1004a234
MapViewOfFile 0x1004a230
OpenFileMappingW 0x1004a22c
ReadProcessMemory 0x1004a224
UnmapViewOfFile 0x1004a228
api-ms-win-core-processenvironment-l1-1-0.dll 2
GetCurrentDirectoryW 0x1004a240
GetStdHandle 0x1004a23c
api-ms-win-core-processthreads-l1-1-0.dll 17
CreateProcessW 0x1004a248
CreateThread 0x1004a26c
DeleteProcThreadAttributeList 0x1004a284
GetCurrentProcess 0x1004a24c
GetCurrentProcessId 0x1004a25c
GetCurrentThread 0x1004a274
GetCurrentThreadId 0x1004a278
GetExitCodeProcess 0x1004a280
InitializeProcThreadAttributeList 0x1004a250
OpenProcessToken 0x1004a268
OpenThread 0x1004a264
ProcessIdToSessionId 0x1004a270
ResumeThread 0x1004a254
SetThreadPriority 0x1004a288
SuspendThread 0x1004a260
TerminateProcess 0x1004a27c
UpdateProcThreadAttribute 0x1004a258
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1004a290
OpenProcess 0x1004a294
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1004a29c
api-ms-win-core-psapi-l1-1-0.dll 2
K32EnumProcesses 0x1004a2a8
QueryFullProcessImageNameW 0x1004a2a4
api-ms-win-core-registry-l1-1-0.dll 12
RegCloseKey 0x1004a2d8
RegCreateKeyExW 0x1004a2dc
RegDeleteKeyExW 0x1004a2cc
RegDeleteValueW 0x1004a2b0
RegEnumKeyExW 0x1004a2c4
RegEnumValueW 0x1004a2b4
RegGetValueW 0x1004a2d4
RegOpenKeyExW 0x1004a2bc
RegQueryInfoKeyW 0x1004a2c8
RegQueryValueExW 0x1004a2d0
RegSetKeySecurity 0x1004a2b8
RegSetValueExW 0x1004a2c0
api-ms-win-core-registry-l2-1-0.dll 2
RegDeleteKeyA 0x1004a2e8
RegSetKeyValueW 0x1004a2e4
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1004a2f4
WideCharToMultiByte 0x1004a2f0
api-ms-win-core-synch-l1-1-0.dll 25
AcquireSRWLockExclusive 0x1004a348
CreateEventExW 0x1004a35c
CreateEventW 0x1004a340
CreateMutexExW 0x1004a318
CreateMutexW 0x1004a350
CreateSemaphoreExW 0x1004a338
CreateWaitableTimerExW 0x1004a310
DeleteCriticalSection 0x1004a304
EnterCriticalSection 0x1004a308
InitializeCriticalSectionAndSpinCount 0x1004a330
InitializeCriticalSectionEx 0x1004a31c
InitializeSRWLock 0x1004a328
LeaveCriticalSection 0x1004a314
OpenEventW 0x1004a32c
OpenMutexW 0x1004a320
OpenSemaphoreW 0x1004a2fc
ReleaseMutex 0x1004a334
ReleaseSemaphore 0x1004a33c
ReleaseSRWLockExclusive 0x1004a34c
ResetEvent 0x1004a354
SetEvent 0x1004a358
SetWaitableTimer 0x1004a30c
TryAcquireSRWLockExclusive 0x1004a324
WaitForSingleObject 0x1004a344
WaitForSingleObjectEx 0x1004a300
api-ms-win-core-synch-l1-2-0.dll 7
InitializeConditionVariable 0x1004a36c
InitOnceExecuteOnce 0x1004a374
Sleep 0x1004a364
SleepConditionVariableCS 0x1004a378
SleepConditionVariableSRW 0x1004a370
WakeAllConditionVariable 0x1004a368
WakeConditionVariable 0x1004a37c
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetLocalTime 0x1004a384
GetSystemDirectoryW 0x1004a388
GetSystemTimeAsFileTime 0x1004a398
GetTickCount 0x1004a394
GetVersion 0x1004a38c
GetVersionExW 0x1004a390
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetNativeSystemInfo 0x1004a3a0
api-ms-win-core-threadpool-l1-2-0.dll 8
CloseThreadpoolWait 0x1004a3b8
CloseThreadpoolWork 0x1004a3c4
CreateThreadpoolWait 0x1004a3bc
CreateThreadpoolWork 0x1004a3b0
FreeLibraryWhenCallbackReturns 0x1004a3b4
SetThreadpoolWait 0x1004a3ac
SubmitThreadpoolWork 0x1004a3c0
WaitForThreadpoolWaitCallbacks 0x1004a3a8
api-ms-win-core-toolhelp-l1-1-0.dll 3
CreateToolhelp32Snapshot 0x1004a3cc
Process32FirstW 0x1004a3d0
Process32NextW 0x1004a3d4
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1004a3e0
EncodePointer 0x1004a3dc
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x1004a3f0
GetFileVersionInfoSizeExW 0x1004a3e8
VerQueryValueW 0x1004a3ec
api-ms-win-core-wow64-l1-1-0.dll 1
IsWow64Process 0x1004a3f8
api-ms-win-crt-convert-l1-1-0.dll 2
wcstoul 0x1004a400
wcstoull 0x1004a404
api-ms-win-crt-heap-l1-1-0.dll 6
_callnewh 0x1004a410
_calloc_base 0x1004a41c
_free_base 0x1004a40c
calloc 0x1004a414
free 0x1004a420
malloc 0x1004a418
api-ms-win-crt-math-l1-1-0.dll 3
_fdopen 0x1004a430
ceil 0x1004a42c
log2 0x1004a428
api-ms-win-crt-runtime-l1-1-0.dll 16
__doserrno 0x1004a458
_cexit 0x1004a43c
_configure_narrow_argv 0x1004a468
_crt_atexit 0x1004a448
_errno 0x1004a44c
_execute_onexit_table 0x1004a454
_initialize_narrow_environment 0x1004a464
_initialize_onexit_table 0x1004a460
_initterm 0x1004a474
_initterm_e 0x1004a470
_invalid_parameter_noinfo 0x1004a440
_invalid_parameter_noinfo_noreturn 0x1004a450
_register_onexit_function 0x1004a45c
_seh_filter_dll 0x1004a46c
abort 0x1004a438
terminate 0x1004a444
api-ms-win-crt-stdio-l1-1-0.dll 15
__acrt_iob_func 0x1004a490
__stdio_common_vfprintf 0x1004a484
__stdio_common_vfwprintf 0x1004a47c
__stdio_common_vfwprintf_s 0x1004a494
__stdio_common_vsnprintf_s 0x1004a49c
__stdio_common_vsprintf 0x1004a4b0
__stdio_common_vsprintf_s 0x1004a488
__stdio_common_vswprintf 0x1004a498
__stdio_common_vswprintf_s 0x1004a4b4
__stdio_common_vswscanf 0x1004a4a0
_close 0x1004a480
_flushall 0x1004a4a8
_open_osfhandle 0x1004a4a4
fclose 0x1004a48c
fflush 0x1004a4ac
api-ms-win-crt-string-l1-1-0.dll 7
_wcsicmp 0x1004a4d4
_wcslwr 0x1004a4c8
_wcsnicmp 0x1004a4c4
iswxdigit 0x1004a4bc
strcpy_s 0x1004a4c0
towlower 0x1004a4d0
wcscpy_s 0x1004a4cc
api-ms-win-eventing-provider-l1-1-0.dll 2
EventRegister 0x1004a4e0
EventWriteTransfer 0x1004a4dc
api-ms-win-security-base-l1-1-0.dll 22
AddAccessAllowedAceEx 0x1004a534
AddAce 0x1004a504
AdjustTokenPrivileges 0x1004a53c
AllocateAndInitializeSid 0x1004a50c
CheckTokenMembership 0x1004a520
DestroyPrivateObjectSecurity 0x1004a4f8
DuplicateTokenEx 0x1004a538
FreeSid 0x1004a510
GetAce 0x1004a4f4
GetAclInformation 0x1004a4f0
GetKernelObjectSecurity 0x1004a4ec
GetSecurityDescriptorDacl 0x1004a4e8
GetSecurityDescriptorSacl 0x1004a51c
GetTokenInformation 0x1004a4fc
ImpersonateLoggedOnUser 0x1004a52c
InitializeAcl 0x1004a518
InitializeSecurityDescriptor 0x1004a514
IsTokenRestricted 0x1004a528
RevertToSelf 0x1004a530
SetKernelObjectSecurity 0x1004a524
SetSecurityDescriptorDacl 0x1004a508
SetSecurityDescriptorSacl 0x1004a500
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1004a544
api-ms-win-security-provider-l1-1-0.dll 3
GetNamedSecurityInfoW 0x1004a550
SetEntriesInAclW 0x1004a54c
SetNamedSecurityInfoW 0x1004a554
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1004a560
ConvertStringSidToSidW 0x1004a55c
api-ms-win-service-core-l1-1-1.dll 1
EnumServicesStatusExW 0x1004a568
api-ms-win-service-management-l1-1-0.dll 6
CloseServiceHandle 0x1004a57c
CreateServiceW 0x1004a578
DeleteService 0x1004a580
OpenSCManagerW 0x1004a584
OpenServiceW 0x1004a574
StartServiceW 0x1004a570
api-ms-win-service-management-l2-1-0.dll 1
QueryServiceConfigW 0x1004a58c
api-ms-win-service-winsvc-l1-1-0.dll 1
ControlService 0x1004a594
CRYPT32.dll 1
CryptStringToBinaryW 0x1004a094
ntdll.dll 17
NtAllocateVirtualMemory 0x1004a5b4
NtClose 0x1004a5dc
NtCreateFile 0x1004a5d0
NtCreateSection 0x1004a5d4
NtDeviceIoControlFile 0x1004a5a8
NtFlushVirtualMemory 0x1004a5a4
NtFreeVirtualMemory 0x1004a5c0
NtMapViewOfSection 0x1004a5b0
NtOpenDirectoryObject 0x1004a5a0
NtQueryDirectoryObject 0x1004a5c4
NtQueryInformationProcess 0x1004a5d8
NtSetInformationProcess 0x1004a5ac
NtSystemDebugControl 0x1004a5bc
NtUnmapViewOfSection 0x1004a59c
RtlInitUnicodeString 0x1004a5cc
RtlUnwind 0x1004a5b8
VerSetConditionMask 0x1004a5c8
OLEAUT32.dll 5
BSTR_UserFree 0x1004a0a8
BSTR_UserMarshal 0x1004a0a0
BSTR_UserSize 0x1004a0ac
BSTR_UserUnmarshal 0x1004a0a4
SysFreeString 0x1004a09c
RPCRT4.dll 6
NdrClientCall2 0x1004a0b4
RpcBindingFree 0x1004a0c4
RpcBindingFromStringBindingW 0x1004a0b8
RpcStringBindingComposeW 0x1004a0bc
RpcStringFreeW 0x1004a0c0
UuidCreate 0x1004a0c8
USERENV.dll 2
CreateEnvironmentBlock 0x1004a0d0
DestroyEnvironmentBlock 0x1004a0d4