2 InitializeObjectAttributes
5 NtAccessCheckAndAuditAlarm@44
8 NtAdjustPrivilegesToken@24
11 NtAllocateLocallyUniqueId@4
13 NtAllocateVirtualMemory@24
19 NtCloseObjectAuditAlarm@12
20 NtCompleteConnectPort@4
23 NtCreateDirectoryObject@12
27 NtCreateIoCompletion@16
29 NtCreateMailslotFile@32
31 NtCreateNamedPipeFile@56
38 NtCreateSymbolicLinkObject@16
46 NtDeleteObjectAuditAlarm@12
48 NtDeviceIoControlFile@40
53 NtEnumerateValueKey@24
57 NtFlushInstructionCache@12
59 NtFlushVirtualMemory@16
61 NtFreeVirtualMemory@16
66 NtImpersonateClientOfPort@8
67 NtImpersonateThread@12
68 NtInitializeRegistry@4
74 NtLockVirtualMemory@16
75 NtMakeTemporaryObject@4
77 NtNotifyChangeDirectoryFile@36
79 NtOpenDirectoryObject@12
86 NtOpenObjectAuditAlarm@48
91 NtOpenSymbolicLinkObject@12
97 NtPrivilegedServiceAuditAlarm@20
98 NtPrivilegeObjectAuditAlarm@24
99 NtProtectVirtualMemory@20
101 NtQueryInformationAtom@20
102 NtQueryAttributesFile@8
103 NtQueryDefaultLocale@8
104 NtQueryDirectoryFile@44
105 NtQueryDirectoryObject@28
108 NtQueryFullAttributesFile@8
109 NtQueryInformationFile@20
110 NtQueryIoCompletion@20
111 NtQueryInformationPort@20
112 NtQueryInformationProcess@20
113 NtQueryInformationThread@20
114 NtQueryInformationToken@20
115 NtQueryIntervalProfile@8
117 NtQueryMultipleValueKey@24
120 NtQueryOleDirectoryFile@44
121 NtQueryPerformanceCounter@8
123 NtQuerySecurityObject@20
125 NtQuerySymbolicLinkObject@12
126 NtQuerySystemEnvironmentValue@16
127 NtQuerySystemInformation@16
130 NtQueryTimerResolution@12
132 NtQueryVirtualMemory@24
133 NtQueryVolumeInformationFile@20
140 NtReadVirtualMemory@20
141 NtRegisterThreadTerminatePort@4
143 NtReleaseSemaphore@12
144 NtRemoveIoCompletion@20
147 NtReplyWaitReceivePort@16
148 NtReplyWaitReplyPort@8
150 NtRequestWaitReplyPort@12
157 NtSetDefaultHardErrorPort@4
162 NtSetHighWaitLowEventPair@4
163 NtSetInformationFile@20
164 NtSetInformationKey@16
165 NtSetInformationObject@16
166 NtSetInformationProcess@16
167 NtSetInformationThread@16
168 NtSetInformationToken@16
169 NtSetIntervalProfile@8
172 NtSetLowWaitHighEventPair@4
173 NtSetSecurityObject@12
174 NtSetSystemEnvironmentValue@8
175 NtSetSystemInformation@12
176 NtSetSystemPowerState@12
179 NtSetTimerResolution@12
181 NtSetVolumeInformationFile@20
183 NtSignalAndWaitForSingleObject@16
187 NtSystemDebugControl@24
194 NtUnlockVirtualMemory@16
195 NtUnmapViewOfSection@8
197 NtWaitForMultipleObjects@20
198 NtWaitForSingleObject@12
199 NtWaitHighEventPair@4
203 NtWriteRequestData@24
204 NtWriteVirtualMemory@20
209 NtReplyWaitSendChannel@12
210 NtSendWaitReplyChannel@16
211 NtSetContextChannel@4
213 ZwAcceptConnectPort@24
215 ZwAccessCheckAndAuditAlarm@44
217 ZwAdjustGroupsToken@24
218 ZwAdjustPrivilegesToken@24
219 ZwAlertResumeThread@8
221 ZwAllocateLocallyUniqueId@4
223 ZwAllocateVirtualMemory@24
229 ZwCloseObjectAuditAlarm@12
230 ZwCompleteConnectPort@4
233 ZwCreateDirectoryObject@12
237 ZwCreateIoCompletion@16
239 ZwCreateMailslotFile@32
241 ZwCreateNamedPipeFile@56
242 ZwCreatePagingFile@16
248 ZwCreateSymbolicLinkObject@16
256 ZwDeleteObjectAuditAlarm@12
258 ZwDeviceIoControlFile@40
263 ZwEnumerateValueKey@24
267 ZwFlushInstructionCache@12
269 ZwFlushVirtualMemory@16
271 ZwFreeVirtualMemory@16
274 ZwGetPlugPlayEvent@16
276 ZwImpersonateClientOfPort@8
277 ZwImpersonateThread@12
278 ZwInitializeRegistry@4
284 ZwLockVirtualMemory@16
285 ZwMakeTemporaryObject@4
286 ZwMapViewOfSection@40
287 ZwNotifyChangeDirectoryFile@36
289 ZwOpenDirectoryObject@12
293 ZwOpenIoCompletion@12
296 ZwOpenObjectAuditAlarm@48
298 ZwOpenProcessToken@12
301 ZwOpenSymbolicLinkObject@12
307 ZwPrivilegedServiceAuditAlarm@20
308 ZwPrivilegeObjectAuditAlarm@24
309 ZwProtectVirtualMemory@20
311 ZwQueryInformationAtom@20
312 ZwQueryAttributesFile@8
313 ZwQueryDefaultLocale@8
314 ZwQueryDirectoryFile@44
315 ZwQueryDirectoryObject@28
318 ZwQueryFullAttributesFile@8
319 ZwQueryInformationFile@20
320 ZwQueryIoCompletion@20
321 ZwQueryInformationPort@20
322 ZwQueryInformationProcess@20
323 ZwQueryInformationThread@20
324 ZwQueryInformationToken@20
325 ZwQueryIntervalProfile@8
327 ZwQueryMultipleValueKey@24
330 ZwQueryOleDirectoryFile@44
331 ZwQueryPerformanceCounter@8
333 ZwQuerySecurityObject@20
335 ZwQuerySymbolicLinkObject@12
336 ZwQuerySystemEnvironmentValue@16
337 ZwQuerySystemInformation@16
340 ZwQueryTimerResolution@12
342 ZwQueryVirtualMemory@24
343 ZwQueryVolumeInformationFile@20
350 ZwReadVirtualMemory@20
351 ZwRegisterThreadTerminatePort@4
353 ZwReleaseSemaphore@12
354 ZwRemoveIoCompletion@20
357 ZwReplyWaitReceivePort@16
358 ZwReplyWaitReplyPort@8
360 ZwRequestWaitReplyPort@12
367 ZwSetDefaultHardErrorPort@4
372 ZwSetHighWaitLowEventPair@4
373 ZwSetInformationFile@20
374 ZwSetInformationKey@16
375 ZwSetInformationObject@16
376 ZwSetInformationProcess@16
377 ZwSetInformationThread@16
378 ZwSetInformationToken@16
379 ZwSetIntervalProfile@8
382 ZwSetLowWaitHighEventPair@4
383 ZwSetSecurityObject@12
384 ZwSetSystemEnvironmentValue@8
385 ZwSetSystemInformation@12
386 ZwSetSystemPowerState@12
389 ZwSetTimerResolution@12
391 ZwSetVolumeInformationFile@20
393 ZwSignalAndWaitForSingleObject@16
397 ZwSystemDebugControl@24
404 ZwUnlockVirtualMemory@16
405 ZwUnmapViewOfSection@8
407 ZwWaitForMultipleObjects@20
408 ZwWaitForSingleObject@12
409 ZwWaitHighEventPair@4
413 ZwWriteRequestData@24
414 ZwWriteVirtualMemory@20
419 ZwReplyWaitSendChannel@12
420 ZwSendWaitReplyChannel@16
421 ZwSetContextChannel@4
437 RtlLargeIntegerDivide
438 RtlEnlargedIntegerMultiply
439 RtlEnlargedUnsignedMultiply
440 RtlExtendedIntegerMultiply
464 LdrMapNTDllForProcess