NtAccessCheck(>) | 1 |
NtCreateIoCompletion(>) | 2 |
NtQueryInformationFile(>) | 5 |
NtFsControlFile(>) | 17 |
NtCreateProcessEx(>) | 1 |
NtCreateThread(>) | 2 |
NtQueryVolumeInformationFile(>) | 5 |
NtOpenProcessTokenEx(>) | 19 |
NtDuplicateToken(>) | 1 |
NtDuplicateObject(>) | 2 |
NtWriteFile(>) | 5 |
NtOpenThreadTokenEx(>) | 19 |
NtGetContextThread(>) | 1 |
NtOpenDirectoryObject(>) | 2 |
NtQueryAttributesFile(>) | 6 |
NtQueryInformationToken(>) | 24 |
NtOpenKeyedEvent(>) | 1 |
NtOpenSymbolicLinkObject(>) | 2 |
NtReadFile(>) | 6 |
NtAllocateVirtualMemory(>) | 28 |
NtOpenMutant(>) | 1 |
NtQueryDefaultUILanguage(>) | 2 |
NtRequestWaitReplyPort(>) | 6 |
NtOpenProcess(>) | 29 |
NtQueryDebugFilterState(>) | 1 |
NtQuerySection(>) | 2 |
NtEnumerateKey(>) | 8 |
NtUnmapViewOfSection(>) | 37 |
NtQueryInformationJobObject(>) | 1 |
NtQuerySymbolicLinkObject(>) | 2 |
NtQueryInformationProcess(>) | 8 |
NtOpenSection(>) | 40 |
NtQueryInstallUILanguage(>) | 1 |
NtQueryVirtualMemory(>) | 2 |
NtFlushInstructionCache(>) | 9 |
NtQueryValueKey(>) | 40 |
NtQueryObject(>) | 1 |
NtResumeThread(>) | 2 |
NtQuerySystemInformation(>) | 9 |
NtCreateSection(>) | 55 |
NtQuerySystemTime(>) | 1 |
NtSetInformationObject(>) | 2 |
NtCreateEvent(>) | 10 |
NtOpenKey(>) | 72 |
NtRegisterThreadTerminatePort(>) | 1 |
NtSetSecurityObject(>) | 2 |
NtOpenFile(>) | 10 |
NtMapViewOfSection(>) | 76 |
NtReleaseMutant(>) | 1 |
NtTerminateProcess(>) | 2 |
NtQueryDefaultLocale(>) | 11 |
NtDelayExecution(>) | 108 |
NtSecureConnectPort(>) | 1 |
NtSetInformationProcess(>) | 3 |
NtSetInformationThread(>) | 11 |
NtWriteVirtualMemory(>) | 126 |
NtSetContextThread(>) | 1 |
NtReadVirtualMemory(>) | 4 |
NtOpenThreadToken(>) | 12 |
NtProtectVirtualMemory(>) | 140 |
NtTestAlert(>) | 1 |
NtAdjustPrivilegesToken(>) | 5 |
NtSetInformationFile(>) | 12 |
NtClose(>) | 249 |
NtWaitForSingleObject(>) | 1 |
NtFreeVirtualMemory(>) | 5 |
NtCreateFile(>) | 13 |
NtContinue(>) | 2 |
NtOpenProcessToken(>) | 5 |