NtAdjustPrivilegesToken(>) | 1 |
NtQuerySymbolicLinkObject(>) | 1 |
NtQueryVirtualMemory(>) | 2 |
NtRequestWaitReplyPort(>) | 7 |
NtConnectPort(>) | 1 |
NtQuerySystemTime(>) | 1 |
NtSetInformationObject(>) | 2 |
NtQueryValueKey(>) | 8 |
NtCreateKey(>) | 1 |
NtReadFile(>) | 1 |
NtSetInformationProcess(>) | 2 |
NtSetInformationFile(>) | 8 |
NtDuplicateObject(>) | 1 |
NtRegisterThreadTerminatePort(>) | 1 |
NtContinue(>) | 3 |
NtWriteFile(>) | 8 |
NtDuplicateToken(>) | 1 |
NtSecureConnectPort(>) | 1 |
NtFsControlFile(>) | 3 |
NtOpenSection(>) | 9 |
NtOpenEvent(>) | 1 |
NtSetValueKey(>) | 1 |
NtQueryInformationFile(>) | 3 |
NtCreateFile(>) | 12 |
NtOpenKeyedEvent(>) | 1 |
NtTestAlert(>) | 1 |
NtQueryDefaultLocale(>) | 4 |
NtProtectVirtualMemory(>) | 14 |
NtOpenProcessTokenEx(>) | 1 |
NtWaitForSingleObject(>) | 1 |
NtSetInformationThread(>) | 4 |
NtQueryDirectoryFile(>) | 14 |
NtOpenSymbolicLinkObject(>) | 1 |
NtDeviceIoControlFile(>) | 2 |
NtCreateEvent(>) | 5 |
NtQuerySystemInformation(>) | 15 |
NtOpenThreadTokenEx(>) | 1 |
NtOpenDirectoryObject(>) | 2 |
NtOpenFile(>) | 5 |
NtAllocateVirtualMemory(>) | 16 |
NtQueryAttributesFile(>) | 1 |
NtOpenProcessToken(>) | 2 |
NtQueryInformationProcess(>) | 5 |
NtOpenKey(>) | 19 |
NtQueryInstallUILanguage(>) | 1 |
NtOpenThreadToken(>) | 2 |
NtQueryVolumeInformationFile(>) | 5 |
NtCreateSection(>) | 51 |
NtQueryObject(>) | 1 |
NtQueryDefaultUILanguage(>) | 2 |
NtFlushInstructionCache(>) | 7 |
NtClose(>) | 137 |
NtQuerySection(>) | 1 |
NtQueryInformationToken(>) | 2 |
NtMapViewOfSection(>) | 7 |