NtCreateEvent(>) | 1 |
NtQuerySymbolicLinkObject(>) | 1 |
NtQueryDefaultLocale(>) | 2 |
NtQueryAttributesFile(>) | 10 |
NtDuplicateObject(>) | 1 |
NtQueryVolumeInformationFile(>) | 1 |
NtSetInformationObject(>) | 2 |
NtQueryValueKey(>) | 10 |
NtFreeVirtualMemory(>) | 1 |
NtRegisterThreadTerminatePort(>) | 1 |
NtUnmapViewOfSection(>) | 2 |
NtAllocateVirtualMemory(>) | 18 |
NtFsControlFile(>) | 1 |
NtSecureConnectPort(>) | 1 |
NtQueryInformationProcess(>) | 4 |
NtOpenSection(>) | 19 |
NtGdiCreateBitmap(>) | 1 |
NtSetInformationProcess(>) | 1 |
NtQuerySection(>) | 4 |
NtMapViewOfSection(>) | 21 |
NtGdiCreateSolidBrush(>) | 1 |
NtUserCallNoParam(>) | 1 |
NtQueryVirtualMemory(>) | 4 |
NtOpenKey(>) | 29 |
NtGdiQueryFontAssocInfo(>) | 1 |
NtGdiCreateCompatibleDC(>) | 2 |
NtRequestWaitReplyPort(>) | 4 |
NtClose(>) | 41 |
NtOpenDirectoryObject(>) | 1 |
NtGdiGetStockObject(>) | 2 |
NtQueryInformationToken(>) | 5 |
NtFlushInstructionCache(>) | 47 |
NtOpenKeyedEvent(>) | 1 |
NtOpenProcessToken(>) | 2 |
NtCreateSection(>) | 6 |
NtProtectVirtualMemory(>) | 94 |
NtOpenSymbolicLinkObject(>) | 1 |
NtOpenProcessTokenEx(>) | 2 |
NtOpenFile(>) | 7 |
NtQueryObject(>) | 1 |
NtOpenThreadTokenEx(>) | 2 |