NtAccessCheck(>) | 1 |
NtRegisterThreadTerminatePort(>) | 1 |
NtDuplicateObject(>) | 3 |
NtCreateFile(>) | 9 |
NtAdjustPrivilegesToken(>) | 1 |
NtResumeThread(>) | 1 |
NtGdiCreateCompatibleDC(>) | 3 |
NtQuerySystemInformation(>) | 11 |
NtCallbackReturn(>) | 1 |
NtSecureConnectPort(>) | 1 |
NtQueryDefaultLocale(>) | 3 |
NtQueryDirectoryFile(>) | 14 |
NtCreateThread(>) | 1 |
NtSetInformationProcess(>) | 1 |
NtQueryVolumeInformationFile(>) | 3 |
NtQueryValueKey(>) | 18 |
NtDelayExecution(>) | 1 |
NtTestAlert(>) | 1 |
NtSetInformationThread(>) | 3 |
NtFlushInstructionCache(>) | 22 |
NtGdiCreateBitmap(>) | 1 |
NtUserCallNoParam(>) | 1 |
NtOpenProcessToken(>) | 4 |
NtAllocateVirtualMemory(>) | 24 |
NtGdiInit(>) | 1 |
NtUserGetThreadDesktop(>) | 1 |
NtQueryDefaultUILanguage(>) | 4 |
NtUserFindExistingCursorIcon(>) | 25 |
NtGdiQueryFontAssocInfo(>) | 1 |
NtUserRegisterWindowMessage(>) | 1 |
NtUserSystemParametersInfo(>) | 4 |
NtOpenProcess(>) | 30 |
NtGdiSelectBitmap(>) | 1 |
NtWriteFile(>) | 1 |
NtFsControlFile(>) | 5 |
NtUserRegisterClassExWOW(>) | 33 |
NtOpenKeyedEvent(>) | 1 |
NtCreateIoCompletion(>) | 2 |
NtGdiGetStockObject(>) | 5 |
NtOpenKey(>) | 39 |
NtOpenSymbolicLinkObject(>) | 1 |
NtFreeVirtualMemory(>) | 2 |
NtOpenProcessTokenEx(>) | 5 |
NtUnmapViewOfSection(>) | 39 |
NtQueryDebugFilterState(>) | 1 |
NtGdiCreateSolidBrush(>) | 2 |
NtOpenThreadTokenEx(>) | 5 |
NtOpenSection(>) | 42 |
NtQueryInformationFile(>) | 1 |
NtOpenDirectoryObject(>) | 2 |
NtQueryVirtualMemory(>) | 6 |
NtCreateSection(>) | 57 |
NtQueryInformationJobObject(>) | 1 |
NtOpenThreadToken(>) | 2 |
NtRequestWaitReplyPort(>) | 6 |
NtMapViewOfSection(>) | 82 |
NtQueryInstallUILanguage(>) | 1 |
NtQuerySection(>) | 2 |
NtCreateEvent(>) | 7 |
NtWriteVirtualMemory(>) | 116 |
NtQueryObject(>) | 1 |
NtReadFile(>) | 2 |
NtQueryAttributesFile(>) | 7 |
NtProtectVirtualMemory(>) | 161 |
NtQuerySymbolicLinkObject(>) | 1 |
NtSetInformationFile(>) | 2 |
NtOpenFile(>) | 8 |
NtClose(>) | 222 |
NtQuerySystemTime(>) | 1 |
NtSetInformationObject(>) | 2 |
NtQueryInformationProcess(>) | 8 |
NtRaiseHardError(>) | 1 |
NtContinue(>) | 3 |