NtAccessCheck(>) | 1 |
NtUserOpenWindowStation(>) | 1 |
NtDuplicateObject(>) | 5 |
NtFreeVirtualMemory(>) | 15 |
NtCallbackReturn(>) | 1 |
NtUserRegisterWindowMessage(>) | 1 |
NtGdiGetStockObject(>) | 5 |
NtDeviceIoControlFile(>) | 16 |
NtCreateProcessEx(>) | 1 |
NtUserSystemParametersInfo(>) | 1 |
NtSetInformationFile(>) | 5 |
NtCreateEvent(>) | 17 |
NtCreateThread(>) | 1 |
NtConnectPort(>) | 2 |
NtWriteVirtualMemory(>) | 5 |
NtCreateFile(>) | 22 |
NtDuplicateToken(>) | 1 |
NtCreateIoCompletion(>) | 2 |
NtOpenProcessToken(>) | 6 |
NtSetInformationProcess(>) | 25 |
NtGdiCreateBitmap(>) | 1 |
NtGdiCreateSolidBrush(>) | 2 |
NtQueryDefaultUILanguage(>) | 6 |
NtOpenSection(>) | 27 |
NtGdiCreatePatternBrushInternal(>) | 1 |
NtGdiHfontCreate(>) | 2 |
NtQueryVolumeInformationFile(>) | 6 |
NtOpenProcessTokenEx(>) | 28 |
NtGdiInit(>) | 1 |
NtQueryInformationJobObject(>) | 2 |
NtSetInformationThread(>) | 6 |
NtOpenThreadTokenEx(>) | 28 |
NtGdiQueryFontAssocInfo(>) | 1 |
NtQueryPerformanceCounter(>) | 2 |
NtWaitForMultipleObjects(>) | 6 |
NtQueryInformationToken(>) | 37 |
NtGdiSelectBitmap(>) | 1 |
NtReleaseMutant(>) | 2 |
NtOpenThreadToken(>) | 7 |
NtQueryDirectoryFile(>) | 38 |
NtLockVirtualMemory(>) | 1 |
NtUserCloseWindowStation(>) | 2 |
NtEnumerateKey(>) | 8 |
NtQueryInformationProcess(>) | 38 |
NtOpenEvent(>) | 1 |
NtUserGetObjectInformation(>) | 2 |
NtFsControlFile(>) | 8 |
NtOpenFile(>) | 41 |
NtOpenKeyedEvent(>) | 1 |
NtUserGetProcessWindowStation(>) | 2 |
NtQueryInformationFile(>) | 8 |
NtUnmapViewOfSection(>) | 43 |
NtOpenMutant(>) | 1 |
NtYieldExecution(>) | 2 |
NtSetValueKey(>) | 8 |
NtQueryDefaultLocale(>) | 48 |
NtQueryDebugFilterState(>) | 1 |
NtGdiCreateCompatibleDC(>) | 3 |
NtUserCallNoParam(>) | 9 |
NtQueryAttributesFile(>) | 56 |
NtQueryInstallUILanguage(>) | 1 |
NtNotifyChangeKey(>) | 3 |
NtUserFindExistingCursorIcon(>) | 9 |
NtAllocateVirtualMemory(>) | 57 |
NtQueryObject(>) | 1 |
NtOpenDirectoryObject(>) | 3 |
NtWaitForSingleObject(>) | 9 |
NtMapViewOfSection(>) | 75 |
NtQuerySystemTime(>) | 1 |
NtOpenSymbolicLinkObject(>) | 3 |
NtUserGetWindowDC(>) | 10 |
NtFlushInstructionCache(>) | 77 |
NtRegisterThreadTerminatePort(>) | 1 |
NtQuerySymbolicLinkObject(>) | 3 |
NtCreateKey(>) | 11 |
NtQuerySystemInformation(>) | 78 |
NtResumeThread(>) | 1 |
NtReadFile(>) | 3 |
NtUserCallOneParam(>) | 11 |
NtCreateSection(>) | 80 |
NtSecureConnectPort(>) | 1 |
NtReadVirtualMemory(>) | 3 |
NtWriteFile(>) | 11 |
NtOpenKey(>) | 193 |
NtTestAlert(>) | 1 |
NtSetInformationObject(>) | 3 |
NtQuerySection(>) | 13 |
NtQueryValueKey(>) | 228 |
NtUnlockVirtualMemory(>) | 1 |
NtCreateMutant(>) | 4 |
NtQueryVirtualMemory(>) | 13 |
NtProtectVirtualMemory(>) | 284 |
NtUserGetGUIThreadInfo(>) | 1 |
NtCreateSemaphore(>) | 4 |
NtRequestWaitReplyPort(>) | 14 |
NtClose(>) | 363 |
NtUserGetThreadDesktop(>) | 1 |
NtContinue(>) | 5 |
NtUserRegisterClassExWOW(>) | 14 |