NtCreateMutant(>) | 1 |
NtOpenDirectoryObject(>) | 2 |
NtQueryVolumeInformationFile(>) | 9 |
NtMapViewOfSection(>) | 53 |
NtCreateProcessEx(>) | 1 |
NtOpenSymbolicLinkObject(>) | 2 |
NtWriteFile(>) | 9 |
NtQueryVirtualMemory(>) | 58 |
NtDelayExecution(>) | 1 |
NtQueryPerformanceCounter(>) | 2 |
NtFsControlFile(>) | 10 |
NtOpenFile(>) | 59 |
NtEnumerateValueKey(>) | 1 |
NtQuerySymbolicLinkObject(>) | 2 |
NtEnumerateKey(>) | 12 |
NtUserRegisterClassExWOW(>) | 61 |
NtGdiCreateBitmap(>) | 1 |
NtQuerySystemTime(>) | 2 |
NtQueryDefaultUILanguage(>) | 12 |
NtQueryAttributesFile(>) | 65 |
NtGdiInit(>) | 1 |
NtReadVirtualMemory(>) | 2 |
NtUserSystemParametersInfo(>) | 12 |
NtCreateSection(>) | 83 |
NtGdiQueryFontAssocInfo(>) | 1 |
NtSecureConnectPort(>) | 2 |
NtQuerySection(>) | 14 |
NtFlushInstructionCache(>) | 93 |
NtGdiSelectBitmap(>) | 1 |
NtUserGetDC(>) | 2 |
NtQueryDefaultLocale(>) | 16 |
NtQuerySystemInformation(>) | 112 |
NtOpenEvent(>) | 1 |
NtWaitForMultipleObjects(>) | 2 |
NtSetValueKey(>) | 16 |
NtSetEventBoostPriority(>) | 125 |
NtOpenKeyedEvent(>) | 1 |
NtConnectPort(>) | 3 |
NtCreateKey(>) | 17 |
NtContinue(>) | 136 |
NtOpenProcess(>) | 1 |
NtDeleteValueKey(>) | 3 |
NtQueryInformationProcess(>) | 17 |
NtQueryInformationThread(>) | 152 |
NtQueryEvent(>) | 1 |
NtGdiCreateCompatibleDC(>) | 3 |
NtQueryInformationFile(>) | 18 |
NtCreateThread(>) | 153 |
NtQueryInformationJobObject(>) | 1 |
NtReleaseSemaphore(>) | 3 |
NtOpenThreadToken(>) | 19 |
NtResumeThread(>) | 157 |
NtQueryInstallUILanguage(>) | 1 |
NtSetInformationObject(>) | 3 |
NtSetInformationFile(>) | 20 |
NtTestAlert(>) | 161 |
NtQueryObject(>) | 1 |
NtUserRegisterWindowMessage(>) | 3 |
NtUnmapViewOfSection(>) | 20 |
NtRegisterThreadTerminatePort(>) | 163 |
NtRaiseException(>) | 1 |
NtWriteVirtualMemory(>) | 4 |
NtQueryDebugFilterState(>) | 22 |
NtRequestWaitReplyPort(>) | 182 |
NtUserCallNoParam(>) | 1 |
NtAccessCheck(>) | 5 |
NtOpenSection(>) | 28 |
NtSetInformationThread(>) | 264 |
NtUserCallOneParam(>) | 1 |
NtGdiGetStockObject(>) | 5 |
NtFreeVirtualMemory(>) | 29 |
NtWaitForSingleObject(>) | 271 |
NtUserGetThreadDesktop(>) | 1 |
NtReadFile(>) | 5 |
NtOpenProcessTokenEx(>) | 29 |
NtOpenKey(>) | 297 |
NtUserGetThreadState(>) | 1 |
NtSetEvent(>) | 5 |
NtOpenThreadTokenEx(>) | 29 |
NtQueryValueKey(>) | 339 |
NtAddAtom(>) | 2 |
NtSetInformationProcess(>) | 5 |
NtQueryDirectoryFile(>) | 31 |
NtProtectVirtualMemory(>) | 387 |
NtCallbackReturn(>) | 2 |
NtCreateSemaphore(>) | 6 |
NtCreateFile(>) | 35 |
NtAllocateVirtualMemory(>) | 432 |
NtCreateIoCompletion(>) | 2 |
NtOpenMutant(>) | 7 |
NtQueryInformationToken(>) | 35 |
NtClose(>) | 462 |
NtDuplicateToken(>) | 2 |
NtOpenProcessToken(>) | 8 |
NtCreateEvent(>) | 45 |
NtGdiCreateSolidBrush(>) | 2 |
NtReleaseMutant(>) | 8 |
NtDeviceIoControlFile(>) | 46 |
NtNotifyChangeKey(>) | 2 |