| NtAccessCheck(>) | 1 |
NtCreateIoCompletion(>) | 2 |
NtOpenProcessToken(>) | 5 |
NtCreateThread(>) | 26 |
| NtConnectPort(>) | 1 |
NtEnumerateKey(>) | 2 |
NtReadFile(>) | 5 |
NtRegisterThreadTerminatePort(>) | 26 |
| NtCreateMutant(>) | 1 |
NtFlushInstructionCache(>) | 2 |
NtSetInformationFile(>) | 5 |
NtResumeThread(>) | 26 |
| NtCreateProcessEx(>) | 1 |
NtGdiCreateSolidBrush(>) | 2 |
NtQueryDefaultUILanguage(>) | 6 |
NtTestAlert(>) | 26 |
| NtDuplicateToken(>) | 1 |
NtQueryInformationJobObject(>) | 2 |
NtQueryVolumeInformationFile(>) | 6 |
NtQueryInformationProcess(>) | 28 |
| NtGdiCreateBitmap(>) | 1 |
NtQueryInstallUILanguage(>) | 2 |
NtFsControlFile(>) | 7 |
NtOpenFile(>) | 31 |
| NtGdiInit(>) | 1 |
NtUserCloseWindowStation(>) | 2 |
NtOpenThreadToken(>) | 7 |
NtCreateEvent(>) | 32 |
| NtGdiQueryFontAssocInfo(>) | 1 |
NtUserRegisterWindowMessage(>) | 2 |
NtQuerySection(>) | 10 |
NtQueryInformationToken(>) | 33 |
| NtGdiSelectBitmap(>) | 1 |
NtCallbackReturn(>) | 3 |
NtWriteFile(>) | 10 |
NtUserRegisterClassExWOW(>) | 34 |
| NtNotifyChangeKey(>) | 1 |
NtCreateKey(>) | 3 |
NtQueryInformationFile(>) | 11 |
NtSetInformationThread(>) | 36 |
| NtOpenKeyedEvent(>) | 1 |
NtGdiCreateCompatibleDC(>) | 3 |
NtQueryDirectoryFile(>) | 16 |
NtProtectVirtualMemory(>) | 37 |
| NtOpenProcess(>) | 1 |
NtOpenDirectoryObject(>) | 3 |
NtUnmapViewOfSection(>) | 17 |
NtRequestWaitReplyPort(>) | 37 |
| NtQueryDebugFilterState(>) | 1 |
NtOpenMutant(>) | 3 |
NtCreateFile(>) | 18 |
NtMapViewOfSection(>) | 43 |
| NtQueryKey(>) | 1 |
NtOpenSymbolicLinkObject(>) | 3 |
NtSetInformationProcess(>) | 18 |
NtQueryAttributesFile(>) | 43 |
| NtQueryObject(>) | 1 |
NtQuerySymbolicLinkObject(>) | 3 |
NtUserGetClassInfo(>) | 18 |
NtQueryDefaultLocale(>) | 45 |
| NtQuerySystemTime(>) | 1 |
NtQueryVirtualMemory(>) | 3 |
NtFreeVirtualMemory(>) | 20 |
NtContinue(>) | 64 |
| NtQueryTimerResolution(>) | 1 |
NtReadVirtualMemory(>) | 3 |
NtCreateSection(>) | 22 |
NtSetEvent(>) | 86 |
| NtRaiseException(>) | 1 |
NtReleaseMutant(>) | 3 |
NtQuerySystemInformation(>) | 23 |
NtQueryValueKey(>) | 97 |
| NtSecureConnectPort(>) | 1 |
NtSetInformationObject(>) | 3 |
NtWaitForMultipleObjects(>) | 23 |
NtOpenKey(>) | 101 |
| NtUserCallNoParam(>) | 1 |
NtDuplicateObject(>) | 4 |
NtUserFindExistingCursorIcon(>) | 24 |
NtWaitForSingleObject(>) | 117 |
| NtUserGetForegroundWindow(>) | 1 |
NtUserSystemParametersInfo(>) | 4 |
NtOpenProcessTokenEx(>) | 25 |
NtClose(>) | 159 |
| NtUserGetThreadDesktop(>) | 1 |
NtWriteVirtualMemory(>) | 4 |
NtOpenSection(>) | 25 |
NtUserFindWindowEx(>) | 160 |
| NtUserOpenWindowStation(>) | 1 |
NtCreateSemaphore(>) | 5 |
NtOpenThreadTokenEx(>) | 25 |
NtAllocateVirtualMemory(>) | 165 |
| NtUserQueryWindow(>) | 1 |
NtGdiGetStockObject(>) | 5 |
NtQueryInformationThread(>) | 25 |
NtDelayExecution(>) | 700 |