NtAccessCheck(>) | 1 |
NtSecureConnectPort(>) | 1 |
NtQueryVolumeInformationFile(>) | 3 |
NtQuerySystemInformation(>) | 15 |
NtCallbackReturn(>) | 1 |
NtSetInformationThread(>) | 1 |
NtReadVirtualMemory(>) | 3 |
NtOpenSection(>) | 17 |
NtCreateMutant(>) | 1 |
NtTestAlert(>) | 1 |
NtFreeVirtualMemory(>) | 4 |
NtQueryDefaultLocale(>) | 17 |
NtCreateProcessEx(>) | 1 |
NtUserCallNoParam(>) | 1 |
NtOpenProcessToken(>) | 4 |
NtQueryInformationProcess(>) | 18 |
NtCreateThread(>) | 1 |
NtUserGetThreadDesktop(>) | 1 |
NtQueryInformationFile(>) | 4 |
NtQueryAttributesFile(>) | 21 |
NtDuplicateToken(>) | 1 |
NtDuplicateObject(>) | 2 |
NtGdiGetStockObject(>) | 5 |
NtFlushInstructionCache(>) | 22 |
NtFsControlFile(>) | 1 |
NtGdiCreateSolidBrush(>) | 2 |
NtRequestWaitReplyPort(>) | 5 |
NtOpenProcessTokenEx(>) | 22 |
NtGdiCreateBitmap(>) | 1 |
NtNotifyChangeKey(>) | 2 |
NtWaitForSingleObject(>) | 5 |
NtOpenThreadTokenEx(>) | 22 |
NtGdiInit(>) | 1 |
NtOpenDirectoryObject(>) | 2 |
NtWriteVirtualMemory(>) | 5 |
NtOpenFile(>) | 23 |
NtGdiQueryFontAssocInfo(>) | 1 |
NtOpenSymbolicLinkObject(>) | 2 |
NtQuerySection(>) | 6 |
NtMapViewOfSection(>) | 27 |
NtGdiSelectBitmap(>) | 1 |
NtOpenThreadToken(>) | 2 |
NtCreateFile(>) | 7 |
NtQueryInformationToken(>) | 28 |
NtOpenKeyedEvent(>) | 1 |
NtQueryDefaultUILanguage(>) | 2 |
NtEnumerateKey(>) | 8 |
NtAllocateVirtualMemory(>) | 44 |
NtOpenMutant(>) | 1 |
NtQuerySymbolicLinkObject(>) | 2 |
NtQueryVirtualMemory(>) | 8 |
NtProtectVirtualMemory(>) | 44 |
NtQueryDebugFilterState(>) | 1 |
NtReleaseMutant(>) | 2 |
NtUnmapViewOfSection(>) | 9 |
NtOpenKey(>) | 122 |
NtQueryInformationJobObject(>) | 1 |
NtSetInformationObject(>) | 2 |
NtUserFindExistingCursorIcon(>) | 9 |
NtClose(>) | 141 |
NtQueryInstallUILanguage(>) | 1 |
NtWriteFile(>) | 2 |
NtQueryDirectoryFile(>) | 10 |
NtQueryValueKey(>) | 168 |
NtQueryObject(>) | 1 |
NtContinue(>) | 3 |
NtSetInformationProcess(>) | 11 |
NtRegisterThreadTerminatePort(>) | 1 |
NtCreateEvent(>) | 3 |
NtUserRegisterClassExWOW(>) | 14 |
NtResumeThread(>) | 1 |