Application Report


The following 21 APIs (used 39 times) might not work:

There are 504 P/Invokes (used 1158 times):

Count Library Function
20 advapi32.dll bool gettokeninformation(intptr, tokeninformationclass, intptr, int, int32&)
18 ntdll.dll ntstatus ntqueryobject(intptr, objectinformationclass, intptr, int, int32&)
15 user32.dll intptr sendmessage(intptr, uint, intptr, intptr)
9 ntdll.dll ntstatus ntquerysysteminformation(systeminformationclass, intptr, int, int32&)
8 iphlpapi.dll int getextendedudptable(intptr, int32&, bool, int, udptableclass, int)
8 iphlpapi.dll int getextendedtcptable(intptr, int32&, bool, int, tcptableclass, int)
8 user32.dll intptr sendmessagewithstring(intptr, uint, intptr, string)
8 wtsapi32.dll bool wtsquerysessioninformation(intptr, int, wtsinformationclass, intptr&, int32
7 kernel32.dll intptr getmodulehandle(string)
6 kernel32.dll bool queryinformationjobobject(intptr, jobobjectinformationclass, intptr, int, i
6 kernel32.dll bool queryperformancecounter(int64&)
6 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, intptr, int,
6 ntdll.dll ntstatus ntduplicateobject(intptr, intptr, intptr, intptr&, int, handleflags, du
6 psapi.dll bool enumdevicedrivers(intptr[], int, int32&)
6 wintrust.dll bool cryptcatadminreleasecontext(intptr, int)
5 kernel32.dll bool closehandle(intptr)
5 kernel32.dll intptr getprocaddress(intptr, string)
5 kernel32.dll int getcurrentprocessid()
5 user32.dll int getwindowthreadprocessid(intptr, int32&)
4 advapi32.dll bool queryserviceconfig2(intptr, serviceinfolevel, intptr, int, int32&)
4 advapi32.dll bool queryserviceconfig(intptr, intptr, int, int32&)
4 advapi32.dll bool lookupprivilegevalue(string, string, luid&)
4 advapi32.dll bool adjusttokenprivileges(intptr, bool, tokenprivileges&, int, intptr, intptr)
4 advapi32.dll bool lookupprivilegename(string, luid&, stringbuilder, int32&)
4 advapi32.dll bool lookupprivilegedisplayname(string, string, stringbuilder, int32&, int32&)
4 advapi32.dll bool lookupaccountsid(string, intptr, stringbuilder, int32&, stringbuilder, int3
4 advapi32.dll bool enumservicesstatusex(intptr, intptr, servicequerytype, servicequerystate, i
4 dbghelp.dll uint64 symgetmodulebase64(intptr, uint64)
4 dbghelp.dll intptr symfunctiontableaccess64(intptr, uint64)
4 dbghelp.dll bool symfromaddr(intptr, uint64, uint64&, intptr)
4 dbghelp.dll bool syminitialize(intptr, string, bool)
4 kernel32.dll bool deviceiocontrol(intptr, int, byte*, int, byte*, int, int32&, intptr)
4 kernel32.dll void exitprocess(int)
4 kernel32.dll bool mapuserphysicalpages(intptr, intptr, intptr[])
4 kernel32.dll int getcurrentthreadid()
4 kernel32.dll bool isprocessinjob(intptr, intptr, boolean&)
4 ntdll.dll int rtllengthsid(intptr)
4 ntdll.dll ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, intptr
4 ntdll.dll ntstatus ntqueryinformationtransaction(intptr, transactioninformationclass, intp
4 ntdll.dll ntstatus ntqueryinformationresourcemanager(intptr, resourcemanagerinformationcla
4 ntdll.dll ntstatus ntquerysymboliclinkobject(intptr, unicodestring&, int32&)
4 ntdll.dll int rtlgetprocessheaps(int, intptr[])
4 psapi.dll bool enumprocessmodules(intptr, intptr[], int, int32&)
4 shell32.dll bool shellexecuteex(shellexecuteinfo&)
4 user32.dll bool exitwindowsex(exitwindowsflags, int)
4 user32.dll bool destroyicon(intptr)
4 wintrust.dll bool cryptcatadminreleasecatalogcontext(intptr, intptr, int)
4 wintrust.dll bool cryptcatadmincalchashfromfilehandle(intptr, int32&, byte[], int)
4 wintrust.dll uint winverifytrust(intptr, guid, wintrustdata&)
4 wtsapi32.dll bool wtsenumerateprocesses(intptr, int, int, intptr&, int32&)
3 advapi32.dll bool duplicatetokenex(intptr, tokenaccess, intptr, securityimpersonationlevel, t
3 advapi32.dll bool openprocesstoken(intptr, tokenaccess, intptr&)
3 advapi32.dll bool logonuser(string, string, string, logontype, logonprovider, intptr&)
3 advapi32.dll bool settokeninformation(intptr, tokeninformationclass, int32&, int)
3 gdi32.dll bool deleteobject(intptr)
3 kernel32.dll bool freelibrary(intptr)
3 kernel32.dll intptr loadlibrary(string)
3 kernel32.dll intptr getprocaddress(intptr, uint16)
3 ntdll.dll ntstatus ntterminatethread(intptr, ntstatus)
3 ntdll.dll ntstatus ntterminateprocess(intptr, ntstatus)
3 ntdll.dll ntstatus ntquerysysteminformation(systeminformationclass, systembasicinformation
3 psapi.dll int getdevicedriverfilename(intptr, stringbuilder, int)
3 psapi.dll int getdevicedriverbasename(intptr, stringbuilder, int)
3 psapi.dll bool getperformanceinfo(performanceinformation&, int)
3 user32.dll bool getwindowrect(intptr, rect&)
3 user32.dll intptr sendmessage(intptr, windowmessage, int, int)
2 advapi32.dll bool changeserviceconfig(intptr, servicetype, servicestarttype, serviceerrorcont
2 advapi32.dll bool openthreadtoken(intptr, tokenaccess, bool, intptr&)
2 advapi32.dll bool reverttoself()
2 advapi32.dll ntstatus lsaopenpolicy(intptr, objectattributes&, policyaccess, intptr&)
2 advapi32.dll ntstatus lsafreememory(intptr)
2 advapi32.dll ntstatus lsaenumerateaccountswithuserright(intptr, intptr, intptr&, int32&)
2 advapi32.dll ntstatus lsaclose(intptr)
2 advapi32.dll intptr openservice(intptr, string, serviceaccess)
2 advapi32.dll intptr openscmanager(string, string, scmanageraccess)
2 advapi32.dll intptr createservice(intptr, string, string, serviceaccess, servicetype, service
2 advapi32.dll int setsecurityinfo(intptr, seobjecttype, securityinformation, intptr, intptr, i
2 advapi32.dll int getsecurityinfo(intptr, seobjecttype, securityinformation, intptr&, intptr&,
2 advapi32.dll bool lookupaccountname(string, string, intptr, int32&, stringbuilder, int32&, si
2 advapi32.dll bool impersonateloggedonuser(intptr)
2 advapi32.dll bool gettokeninformation(intptr, tokeninformationclass, tokenstatistics&, int, i
2 advapi32.dll bool closeservicehandle(intptr)
2 advapi32.dll bool controlservice(intptr, servicecontrol, servicestatus&)
2 advapi32.dll bool convertstringsidtosid(string, intptr&)
2 advapi32.dll bool adjusttokengroups(intptr, bool, tokengroups&, int, intptr, intptr)
2 advapi32.dll bool queryservicestatusex(intptr, int, servicestatusprocess&, int, int32&)
2 advapi32.dll bool createwellknownsid(wellknownsidtype, intptr, intptr, int32&)
2 advapi32.dll bool deleteservice(intptr)
2 advapi32.dll bool gettokeninformation(intptr, tokeninformationclass, tokensource&, int, int32
2 advapi32.dll bool equaldomainsid(intptr, intptr, boolean&)
2 advapi32.dll bool gettokeninformation(intptr, tokeninformationclass, int32&, int, int32&)
2 advapi32.dll bool gettokeninformation(intptr, tokeninformationclass, intptr&, int, int32&)
2 advapi32.dll bool startservice(intptr, int, string[])
2 dbghelp.dll bool symunloadmodule64(intptr, uint64)
2 dbghelp.dll bool minidumpwritedump(intptr, int, intptr, minidumptype, intptr, intptr, intptr
2 dbghelp.dll symboloptions symgetoptions()
2 dbghelp.dll symboloptions symsetoptions(symboloptions)
2 dbghelp.dll bool symsetsearchpath(intptr, string)
2 dbghelp.dll bool symgetsearchpath(intptr, stringbuilder, int)
2 dbghelp.dll bool symgetlinefromaddr64(intptr, uint64, int32&, imagehlpline64&)
2 dbghelp.dll bool symenumsymbols(intptr, uint64, string, symenumsymbolsproc, intptr)
2 dbghelp.dll int64 symloadmodule64(intptr, intptr, string, string, uint64, int)
2 dbghelp.dll bool stackwalk64(machinetype, intptr, intptr, stackframe64&, context&, readproce
2 dbghelp.dll bool stackwalk64(machinetype, intptr, intptr, stackframe64&, contextamd64&, read
2 dbghelp.dll bool symcleanup(intptr)
2 dbghelp.dll bool symfromname(intptr, string, intptr)
2 gdi32.dll intptr selectobject(intptr, intptr)
2 iphlpapi.dll int gettcpstatistics(mibtcpstats&)
2 iphlpapi.dll int getudpstatistics(mibudpstats&)
2 iphlpapi.dll int settcpentry(mibtcprow&)
2 kernel32.dll intptr createremotethread(intptr, intptr, intptr, intptr, intptr, creationflags,
2 kernel32.dll intptr createprivatenamespace(intptr, intptr, string)
2 kernel32.dll intptr createnamedpipe(string, pipeaccessmode, pipemode, int, int, int, int, int
2 kernel32.dll intptr createfile(string, fileaccess, filesharemode, int, filecreationdispositio
2 kernel32.dll intptr createboundarydescriptor(string, int)
2 kernel32.dll int virtualqueryex(intptr, intptr, memorybasicinformation&, int)
2 kernel32.dll int querydosdevice(string, stringbuilder, int)
2 kernel32.dll intptr getprocessheap()
2 kernel32.dll void outputdebugstring(string)
2 kernel32.dll void deleteboundarydescriptor(intptr)
2 kernel32.dll intptr openthread(threadaccess, bool, int)
2 kernel32.dll intptr openprocess(processaccess, bool, int)
2 kernel32.dll intptr openprivatenamespace(intptr, string)
2 kernel32.dll intptr localrealloc(intptr, allocflags, int)
2 kernel32.dll intptr localfree(intptr)
2 kernel32.dll intptr localalloc(allocflags, int)
2 kernel32.dll bool queryprocesscycletime(intptr, uint64&)
2 kernel32.dll bool gethandleinformation(intptr, win32handleflags&)
2 kernel32.dll bool querythreadcycletime(intptr, uint64&)
2 kernel32.dll bool queryperformancefrequency(int64&)
2 kernel32.dll bool queryinformationjobobject(intptr, jobobjectinformationclass, jobobjectbasic
2 kernel32.dll bool queryfullprocessimagename(intptr, bool, stringbuilder, int32&)
2 kernel32.dll bool processidtosessionid(int, int32&)
2 kernel32.dll bool allocateuserphysicalpages(intptr, intptr&, intptr[])
2 kernel32.dll bool getprocesstimes(intptr, filetime&, filetime&, filetime&, filetime&)
2 kernel32.dll bool assignprocesstojobobject(intptr, intptr)
2 kernel32.dll bool checkremotedebuggerpresent(intptr, boolean&)
2 kernel32.dll bool getexitcodeprocess(intptr, int32&)
2 kernel32.dll bool closeprivatenamespace(intptr, privatenamespaceflags)
2 kernel32.dll bool connectnamedpipe(intptr, intptr)
2 kernel32.dll bool disconnectnamedpipe(intptr)
2 kernel32.dll bool freeuserphysicalpages(intptr, intptr&, intptr[])
2 kernel32.dll bool getexitcodethread(intptr, int32&)
2 kernel32.dll bool getprocessaffinitymask(intptr, intptr&, intptr&)
2 kernel32.dll bool queueuserapc(apcroutine, intptr, intptr)
2 kernel32.dll bool queueuserapc(intptr, intptr, intptr)
2 kernel32.dll bool addsidtoboundarydescriptor(intptr&, intptr)
2 kernel32.dll bool terminatethread(intptr, int)
2 kernel32.dll bool writefile(intptr, byte[], int, int32&, intptr)
2 kernel32.dll bool writefile(intptr, void*, int, int32&, intptr)
2 kernel32.dll int formatmessage(int, intptr, int, int, stringbuilder, int, intptr)
2 kernel32.dll int getpriorityclass(intptr)
2 kernel32.dll int getprocessid(intptr)
2 kernel32.dll int getthreadpriority(intptr)
2 kernel32.dll bool terminateprocess(intptr, int)
2 kernel32.dll bool getfilesizeex(intptr, int64&)
2 kernel32.dll bool sethandleinformation(intptr, win32handleflags, win32handleflags)
2 kernel32.dll bool setpriorityclass(intptr, int)
2 kernel32.dll bool setprocessaffinitymask(intptr, intptr)
2 kernel32.dll bool setthreadpriority(intptr, int)
2 kernel32.dll bool terminatejobobject(intptr, int)
2 kernel32.dll bool readfile(intptr, byte[], int, int32&, intptr)
2 nprocesshacker.dll ntstatus phquerynamefileobject(intptr, intptr, int, int32&)
2 ntdll.dll ntstatus ntsethighwaitloweventpair(intptr)
2 ntdll.dll ntstatus ntsetinformationdebugobject(intptr, debugobjectinformationclass, intptr
2 ntdll.dll ntstatus ntsethigheventpair(intptr)
2 ntdll.dll ntstatus ntseteventboostpriority(intptr)
2 ntdll.dll ntstatus ntsetinformationprocess(intptr, processinformationclass, int32&, int)
2 ntdll.dll ntstatus ntsetevent(intptr, int32&)
2 ntdll.dll ntstatus ntrollbackenlistment(intptr, int64&)
2 ntdll.dll ntstatus ntsetcontextthread(intptr, context&)
2 ntdll.dll ntstatus ntrollbackcomplete(intptr, int64&)
2 ntdll.dll ntstatus ntrollforwardtransactionmanager(intptr, int64&)
2 ntdll.dll ntstatus ntrollbacktransaction(intptr, bool)
2 ntdll.dll ntstatus ntsetinformationprocess(intptr, processinformationclass, intptr, int)
2 ntdll.dll ntstatus ntsetinformationprocess(intptr, processinformationclass, processhandlet
2 ntdll.dll ntstatus ntsuspendprocess(intptr)
2 ntdll.dll ntstatus ntstopprofile(intptr)
2 ntdll.dll ntstatus ntstartprofile(intptr)
2 ntdll.dll ntstatus ntsinglephasereject(intptr, int64&)
2 ntdll.dll ntstatus ntsignalandwaitforsingleobject(intptr, intptr, bool, int64&)
2 ntdll.dll ntstatus ntsettimer(intptr, int64&, timerapcroutine, intptr, bool, int, boolean&
2 ntdll.dll ntstatus ntsetlowwaithigheventpair(intptr)
2 ntdll.dll ntstatus ntsetloweventpair(intptr)
2 ntdll.dll ntstatus ntsetiocompletion(intptr, intptr, intptr, ntstatus, intptr)
2 ntdll.dll ntstatus ntsetintervalprofile(int, kprofilesource)
2 ntdll.dll ntstatus ntsetinformationthread(intptr, threadinformationclass, int32&, int)
2 ntdll.dll ntstatus ntsetcontextthread(intptr, intptr)
2 ntdll.dll ntstatus ntresumethread(intptr, int32&)
2 ntdll.dll ntstatus ntresumeprocess(intptr)
2 ntdll.dll ntstatus ntrecoverenlistment(intptr, intptr)
2 ntdll.dll ntstatus ntreadvirtualmemory(intptr, intptr, intptr, intptr, intptr&)
2 ntdll.dll ntstatus ntreadonlyenlistment(intptr, int64&)
2 ntdll.dll ntstatus ntqueueapcthread(intptr, intptr, intptr, intptr, intptr)
2 ntdll.dll ntstatus ntqueryvolumeinformationfile(intptr, iostatusblock&, intptr, int, fsinf
2 ntdll.dll ntstatus ntqueryvirtualmemory(intptr, intptr, memoryinformationclass, memorybasi
2 ntdll.dll ntstatus ntquerytimer(intptr, timerinformationclass, timerbasicinformation&, int
2 ntdll.dll ntstatus ntquerysemaphore(intptr, semaphoreinformationclass, semaphorebasicinfor
2 ntdll.dll ntstatus ntquerysection(intptr, sectioninformationclass, sectionimageinformation
2 ntdll.dll ntstatus ntquerysection(intptr, sectioninformationclass, sectionbasicinformation
2 ntdll.dll ntstatus ntquerymutant(intptr, mutantinformationclass, mutantbasicinformation&,
2 ntdll.dll ntstatus ntqueryintervalprofile(kprofilesource, int32&)
2 ntdll.dll ntstatus ntrecoverresourcemanager(intptr)
2 ntdll.dll ntstatus ntrecovertransactionmanager(intptr)
2 ntdll.dll ntstatus ntresetevent(intptr, int32&)
2 ntdll.dll ntstatus ntrequestwaitreplyport(intptr, intptr, intptr)
2 ntdll.dll ntstatus ntrequestport(intptr, intptr)
2 ntdll.dll ntstatus ntreplywaitreplyport(intptr, intptr)
2 ntdll.dll ntstatus ntreplywaitreceiveport(intptr, intptr&, intptr, intptr)
2 ntdll.dll ntstatus ntreplyport(intptr, intptr)
2 ntdll.dll ntstatus ntremoveprocessdebug(intptr, intptr)
2 ntdll.dll ntstatus ntremoveiocompletion(intptr, intptr&, intptr&, iostatusblock&, int64&)
2 ntdll.dll ntstatus ntreleasesemaphore(intptr, int, int32&)
2 ntdll.dll ntstatus ntreleasemutant(intptr, int32&)
2 ntdll.dll ntstatus ntreleasekeyedevent(intptr, intptr, bool, int64&)
2 ntdll.dll ntstatus ntregisterthreadterminateport(intptr)
2 ntdll.dll ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmreco
2 ntdll.dll ntstatus ntsuspendthread(intptr, int32&)
2 ntdll.dll void rtlmovememory(intptr, intptr, intptr)
2 ntdll.dll ntstatus rtlqueryprocessheapinformation(intptr)
2 ntdll.dll ntstatus rtlqueryprocessdebuginformation(intptr, rtlqueryprocessdebugflags, intp
2 ntdll.dll ntstatus rtlqueryprocessbacktraceinformation(intptr)
2 ntdll.dll ntstatus rtlqueryinformationacl(intptr, aclsizeinformation&, int, aclinformation
2 ntdll.dll ntstatus rtlhashunicodestring(unicodestring&, bool, hashstringalgorithm, int32&)
2 ntdll.dll ntstatus rtlgetsaclsecuritydescriptor(intptr, boolean&, intptr&, boolean&)
2 ntdll.dll ntstatus rtlgetownersecuritydescriptor(intptr, intptr&, boolean&)
2 ntdll.dll ntstatus rtlgetgroupsecuritydescriptor(intptr, intptr&, boolean&)
2 ntdll.dll ntstatus rtlgetdaclsecuritydescriptor(intptr, boolean&, intptr&, boolean&)
2 ntdll.dll ntstatus rtlgetcontrolsecuritydescriptor(intptr, securitydescriptorcontrolflags&
2 ntdll.dll ntstatus rtlgetace(intptr, int, intptr&)
2 ntdll.dll ntstatus rtlfreetopeb(intptr, int)
2 ntdll.dll ntstatus rtlfindmessage(intptr, int, int, int, intptr&)
2 ntdll.dll ntstatus rtlqueryprocesslockinformation(intptr)
2 ntdll.dll ntstatus rtlqueueworkitem(workercallbackdelegate, intptr, wtflags)
2 ntdll.dll ntstatus rtlregisterwait(intptr&, intptr, waitortimercallbackdelegate, intptr, i
2 ntdll.dll void rtlfreeunicodestring(unicodestring&)
2 ntdll.dll void rtlfreeansistring(ansistring&)
2 ntdll.dll sididentifierauthority* rtlidentifierauthoritysid(intptr)
2 ntdll.dll ntstatus rtlwow64setthreadcontext(intptr, context&)
2 ntdll.dll ntstatus rtlwow64getthreadcontext(intptr, context&)
2 ntdll.dll ntstatus rtlupcaseunicodestringtoansistring(ansistring&, unicodestring&, bool)
2 ntdll.dll ntstatus rtlunicodestringtoansistring(ansistring&, unicodestring&, bool)
2 ntdll.dll ntstatus rtlsetsaclsecuritydescriptor(intptr, bool, intptr, bool)
2 ntdll.dll ntstatus rtlsetownersecuritydescriptor(intptr, intptr, bool)
2 ntdll.dll ntstatus rtlsetgroupsecuritydescriptor(intptr, intptr, bool)
2 ntdll.dll ntstatus rtlsetdaclsecuritydescriptor(intptr, bool, intptr, bool)
2 ntdll.dll ntstatus rtlsetcontrolsecuritydescriptor(intptr, securitydescriptorcontrolflags,
2 ntdll.dll ntstatus rtlremotecall(intptr, intptr, intptr, int, intptr[], bool, bool)
2 ntdll.dll ntstatus rtlduplicateunicodestring(rtlduplicateunicodestringflags, unicodestring
2 ntdll.dll ntstatus rtldestroyquerydebugbuffer(intptr)
2 ntdll.dll ntstatus rtldestroyenvironment(intptr)
2 ntdll.dll ntstatus rtladdaccessdeniedace(intptr, int, int, intptr)
2 ntdll.dll ntstatus rtladdaccessallowedaceex(intptr, int, aceflags, int, intptr)
2 ntdll.dll ntstatus rtladdaccessallowedace(intptr, int, int, intptr)
2 ntdll.dll ntstatus ntyieldexecution()
2 ntdll.dll ntstatus ntwritevirtualmemory(intptr, intptr, intptr, intptr, intptr&)
2 ntdll.dll ntstatus ntwaitloweventpair(intptr)
2 ntdll.dll ntstatus ntwaithigheventpair(intptr)
2 ntdll.dll ntstatus ntwaitforsingleobject(intptr, bool, int64&)
2 ntdll.dll ntstatus ntwaitformultipleobjects(int, intptr[], waittype, bool, int64&)
2 ntdll.dll ntstatus ntwaitforkeyedevent(intptr, intptr, bool, int64&)
2 ntdll.dll ntstatus ntwaitfordebugevent(intptr, bool, int64&, dbguiwaitstatechange&)
2 ntdll.dll ntstatus ntunmapviewofsection(intptr, intptr)
2 ntdll.dll ntstatus ntunloaddriver(unicodestring&)
2 ntdll.dll ntstatus rtladdaccessdeniedaceex(intptr, int, aceflags, int, intptr)
2 ntdll.dll ntstatus rtladdace(intptr, int, int, intptr, int)
2 ntdll.dll ntstatus rtladdauditaccessace(intptr, int, int, intptr, bool, bool)
2 ntdll.dll ntstatus rtlderegisterwait(intptr)
2 ntdll.dll ntstatus rtldeleteace(intptr, int)
2 ntdll.dll ntstatus rtlcreateuserthread(intptr, intptr, bool, int, intptr, intptr, intptr,
2 ntdll.dll ntstatus rtlcreateuserprocess(unicodestring&, objectflags, rtluserprocessparamet
2 ntdll.dll ntstatus rtlcreatesecuritydescriptor(intptr, int)
2 ntdll.dll ntstatus rtlcreateenvironment(bool, intptr&)
2 ntdll.dll ntstatus rtlcreateacl(intptr, int, int)
2 ntdll.dll ntstatus rtlcopysid(int, intptr, intptr)
2 ntdll.dll ntstatus rtlconvertsidtounicodestring(unicodestring&, intptr, bool)
2 ntdll.dll ntstatus rtlansistringtounicodestring(unicodestring&, ansistring&, bool)
2 ntdll.dll ntstatus rtlallocatefrompeb(int, intptr&)
2 ntdll.dll ntstatus rtladdcompoundace(intptr, int, acetype, int, intptr, intptr)
2 ntdll.dll ntstatus rtladdauditaccessaceex(intptr, int, aceflags, int, intptr, bool, bool)
2 ntdll.dll ntstatus nttestalert()
2 ntdll.dll ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmlogi
2 ntdll.dll ntstatus ntcreatewaitableport(intptr&, objectattributes&, int, int, int)
2 ntdll.dll ntstatus ntcreatejobobject(intptr&, jobobjectaccess, objectattributes&)
2 ntdll.dll ntstatus ntcreateiocompletion(intptr&, iocompletionaccess, objectattributes&, in
2 ntdll.dll ntstatus ntcreateeventpair(intptr&, eventpairaccess, objectattributes&)
2 ntdll.dll ntstatus ntcreateevent(intptr&, eventaccess, objectattributes&, eventtype, bool)
2 ntdll.dll ntstatus ntcreateenlistment(intptr&, enlistmentaccess, intptr, intptr, objectatt
2 ntdll.dll ntstatus ntcreatedirectoryobject(intptr&, directoryaccess, objectattributes&)
2 ntdll.dll ntstatus ntcreatedebugobject(intptr&, debugobjectaccess, objectattributes&, debu
2 ntdll.dll ntstatus ntconnectport(intptr&, unicodestring&, securityqualityofservice&, intpt
2 ntdll.dll ntstatus ntcompleteconnectport(intptr)
2 ntdll.dll ntstatus ntcomparetokens(intptr, intptr, boolean&)
2 ntdll.dll ntstatus ntcommittransaction(intptr, bool)
2 ntdll.dll ntstatus ntcommitenlistment(intptr, int64&)
2 ntdll.dll ntstatus ntcommitcomplete(intptr, int64&)
2 ntdll.dll ntstatus ntcreatekeyedevent(intptr&, keyedeventaccess, objectattributes&, int)
2 ntdll.dll ntstatus ntcreatemutant(intptr&, mutantaccess, objectattributes&, bool)
2 ntdll.dll ntstatus ntcreatetransactionmanager(intptr&, tmaccess, objectattributes&, unicod
2 ntdll.dll ntstatus ntcreatetransaction(intptr&, transactionaccess, objectattributes&, guid
2 ntdll.dll ntstatus ntcreatetoken(intptr&, tokenaccess, objectattributes&, tokentype, luid&
2 ntdll.dll ntstatus ntcreatetimer(intptr&, timeraccess, objectattributes&, timertype)
2 ntdll.dll ntstatus ntcreatethread(intptr&, threadaccess, objectattributes&, intptr, client
2 ntdll.dll ntstatus ntcreatesymboliclinkobject(intptr&, symboliclinkaccess, objectattribute
2 ntdll.dll ntstatus ntcreatesemaphore(intptr&, semaphoreaccess, objectattributes&, int, int
2 ntdll.dll ntstatus ntcreatesection(intptr&, sectionaccess, objectattributes&, intptr, memo
2 ntdll.dll ntstatus ntcreatesection(intptr&, sectionaccess, objectattributes&, int64&, memo
2 ntdll.dll ntstatus ntcreateresourcemanager(intptr&, resourcemanageraccess, intptr, guid&,
2 ntdll.dll ntstatus ntcreateprofile(intptr&, intptr, intptr, intptr, int, intptr, int, kpro
2 ntdll.dll ntstatus ntcreateprocess(intptr&, processaccess, objectattributes&, intptr, bool
2 ntdll.dll ntstatus ntcreateport(intptr&, objectattributes&, int, int, int)
2 ntdll.dll ntstatus ntclose(intptr)
2 ntdll.dll ntstatus ntclearevent(intptr)
2 ntdll.dll ntstatus ntcanceltimer(intptr, boolean&)
2 ntdll.dll int rtlntstatustodoserror(ntstatus)
2 ntdll.dll int rtllengthsecuritydescriptor(intptr)
2 ntdll.dll int rtlcompareunicodestring(unicodestring&, unicodestring&, bool)
2 ntdll.dll byte* rtlsubauthoritycountsid(intptr)
2 ntdll.dll bool rtlvalidsid(intptr)
2 ntdll.dll bool rtlvalidsecuritydescriptor(intptr)
2 ntdll.dll bool rtlvalidacl(intptr)
2 ntdll.dll bool rtlprefixunicodestring(unicodestring&, unicodestring&, bool)
2 ntdll.dll bool rtlfreeheap(intptr, heapflags, intptr)
2 ntdll.dll bool rtlequalunicodestring(unicodestring&, unicodestring&, bool)
2 ntdll.dll bool rtlequalsid(intptr, intptr)
2 ntdll.dll bool rtlequalprefixsid(intptr, intptr)
2 ntdll.dll bool rtlcreateunicodestring(unicodestring&, string)
2 ntdll.dll int32* rtlsubauthoritysid(intptr, int)
2 ntdll.dll intptr rtlallocateheap(intptr, heapflags, intptr)
2 ntdll.dll ntstatus ntaremappedfilesthesame(intptr, intptr)
2 ntdll.dll ntstatus ntallocatevirtualmemory(intptr, intptr&, intptr, intptr&, memoryflags,
2 ntdll.dll ntstatus ntallocatelocallyuniqueid(luid&)
2 ntdll.dll ntstatus ntalertthread(intptr)
2 ntdll.dll ntstatus ntalertresumethread(intptr, int32&)
2 ntdll.dll ntstatus ntaccesscheck(intptr, intptr, int, genericmapping&, intptr, int32&, int
2 ntdll.dll ntstatus ntacceptconnectport(intptr&, intptr, intptr, bool, intptr, intptr)
2 ntdll.dll intptr rtlsizeheap(intptr, heapflags, intptr)
2 ntdll.dll intptr rtlreallocateheap(intptr, heapflags, intptr, intptr)
2 ntdll.dll intptr rtldestroyheap(intptr)
2 ntdll.dll intptr rtlcreatequerydebugbuffer(int, bool)
2 ntdll.dll intptr rtlcreateheap(heapflags, intptr, intptr, intptr, intptr, intptr)
2 ntdll.dll intptr rtlcompactheap(intptr, heapflags)
2 ntdll.dll ntstatus ntopentimer(intptr&, timeraccess, objectattributes&)
2 ntdll.dll ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmbasi
2 ntdll.dll ntstatus ntprivilegecheck(intptr, intptr, boolean&)
2 ntdll.dll ntstatus ntpreprepareenlistment(intptr, int64&)
2 ntdll.dll ntstatus ntprepreparecomplete(intptr, int64&)
2 ntdll.dll ntstatus ntprepareenlistment(intptr, int64&)
2 ntdll.dll ntstatus ntpreparecomplete(intptr, int64&)
2 ntdll.dll ntstatus ntopentransactionmanager(intptr&, tmaccess, objectattributes&, intptr,
2 ntdll.dll ntstatus ntopentransaction(intptr&, transactionaccess, objectattributes&, guid&,
2 ntdll.dll ntstatus ntqueryinformationthread(intptr, threadinformationclass, intptr&, int,
2 ntdll.dll ntstatus ntopenthread(intptr&, threadaccess, objectattributes&, intptr)
2 ntdll.dll ntstatus ntopenthread(intptr&, threadaccess, objectattributes&, clientid&)
2 ntdll.dll ntstatus ntopensymboliclinkobject(intptr&, symboliclinkaccess, objectattributes&
2 ntdll.dll ntstatus ntopensemaphore(intptr&, semaphoreaccess, objectattributes&)
2 ntdll.dll ntstatus ntprotectvirtualmemory(intptr, intptr&, intptr&, memoryprotection, memo
2 ntdll.dll ntstatus ntpulseevent(intptr, int32&)
2 ntdll.dll ntstatus ntquerydirectoryobject(intptr, intptr, int, bool, bool, int32&, int32&)
2 ntdll.dll ntstatus ntqueryinformationtransaction(intptr, transactioninformationclass, tran
2 ntdll.dll ntstatus ntqueryinformationthread(intptr, threadinformationclass, void*, int, in
2 ntdll.dll ntstatus ntqueryinformationthread(intptr, threadinformationclass, threadbasicinf
2 ntdll.dll ntstatus ntqueryinformationthread(intptr, threadinformationclass, int32&, int, i
2 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, vmcounters&,
2 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, processbasic
2 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, iocounters&,
2 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, intptr&, int
2 ntdll.dll ntstatus ntqueryinformationprocess(intptr, processinformationclass, int32&, int,
2 ntdll.dll ntstatus ntqueryinformationfile(intptr, iostatusblock&, intptr, int, fileinforma
2 ntdll.dll ntstatus ntqueryinformationenlistment(intptr, enlistmentinformationclass, enlist
2 ntdll.dll ntstatus ntqueryevent(intptr, eventinformationclass, eventbasicinformation&, int
2 ntdll.dll ntstatus ntopensection(intptr&, sectionaccess, objectattributes&)
2 ntdll.dll ntstatus ntdebugactiveprocess(intptr, intptr)
2 ntdll.dll ntstatus ntimpersonatethread(intptr, intptr, securityqualityofservice&)
2 ntdll.dll ntstatus ntimpersonateanonymoustoken(intptr)
2 ntdll.dll ntstatus ntgetnextthread(intptr, intptr, threadaccess, handleflags, int, intptr&
2 ntdll.dll ntstatus ntgetnextprocess(intptr, processaccess, handleflags, int, intptr&)
2 ntdll.dll ntstatus ntgetcontextthread(intptr, intptr)
2 ntdll.dll ntstatus ntgetcontextthread(intptr, context&)
2 ntdll.dll ntstatus ntfreevirtualmemory(intptr, intptr&, intptr&, memoryflags)
2 ntdll.dll ntstatus ntflushvirtualmemory(intptr, intptr&, intptr&, iostatusblock&)
2 ntdll.dll ntstatus ntextendsection(intptr, int64&)
2 ntdll.dll ntstatus ntdeviceiocontrolfile(intptr, intptr, intptr, intptr, iostatusblock&, i
2 ntdll.dll ntstatus ntdelayexecution(bool, int64&)
2 ntdll.dll ntstatus ntdebugcontinue(intptr, clientid&, ntstatus)
2 ntdll.dll ntstatus ntlistenport(intptr, intptr)
2 ntdll.dll ntstatus ntloaddriver(unicodestring&)
2 ntdll.dll ntstatus ntmakepermanentobject(intptr)
2 ntdll.dll ntstatus ntopenprocess(intptr&, processaccess, objectattributes&, intptr)
2 ntdll.dll ntstatus ntopenprocess(intptr&, processaccess, objectattributes&, clientid&)
2 ntdll.dll ntstatus ntopenmutant(intptr&, mutantaccess, objectattributes&)
2 ntdll.dll ntstatus ntopenkeyedevent(intptr&, keyedeventaccess, objectattributes&)
2 ntdll.dll ntstatus ntopenresourcemanager(intptr&, resourcemanageraccess, intptr, guid&, ob
2 ntdll.dll ntstatus ntopeniocompletion(intptr&, iocompletionaccess, objectattributes&)
2 ntdll.dll ntstatus ntopeneventpair(intptr&, eventpairaccess, objectattributes&)
2 ntdll.dll ntstatus ntopenevent(intptr&, eventaccess, objectattributes&)
2 ntdll.dll ntstatus ntmaketemporaryobject(intptr)
2 ntdll.dll ntstatus ntmapviewofsection(intptr, intptr, intptr&, intptr, intptr, int64&, int
2 ntdll.dll ntstatus ntopendirectoryobject(intptr&, directoryaccess, objectattributes&)
2 ntdll.dll ntstatus ntopenenlistment(intptr&, enlistmentaccess, intptr, guid&, objectattrib
2 ntdll.dll ntstatus ntopenjobobject(intptr&, jobobjectaccess, objectattributes&)
2 powrprof.dll bool setsuspendstate(bool, bool, bool)
2 psapi.dll int getmappedfilename(intptr, intptr, stringbuilder, int)
2 psapi.dll int getmodulebasename(intptr, intptr, stringbuilder, int)
2 psapi.dll bool getmoduleinformation(intptr, intptr, moduleinfo, int)
2 psapi.dll bool emptyworkingset(intptr)
2 psapi.dll int getmodulefilenameex(intptr, intptr, stringbuilder, int)
2 shell32.dll int shgetfileinfo(string, uint, shfileinfo&, uint, uint)
2 user32.dll bool enumchildwindows(intptr, enumchildproc, int)
2 user32.dll bool enumthreadwindows(int, enumthreadwndproc, int)
2 user32.dll intptr openwindowstation(string, bool, windowstationaccess)
2 user32.dll bool setforegroundwindow(intptr)
2 user32.dll intptr sendmessagetimeout(intptr, windowmessage, int, int, smtoflags, int, int32
2 user32.dll bool postmessage(intptr, windowmessage, int, int)
2 user32.dll bool iswindowvisible(intptr)
2 user32.dll intptr setwindowlongptr(intptr, getwindowlongoffset, intptr)
2 user32.dll bool getwindowplacement(intptr, windowplacement&)
2 user32.dll bool iswindow(intptr)
2 user32.dll bool enumwindows(enumwindowsproc, int)
2 user32.dll bool setprocesswindowstation(intptr)
2 user32.dll intptr opendesktop(string, int, bool, desktopaccess)
2 user32.dll bool setthreaddesktop(intptr)
2 user32.dll bool switchdesktop(intptr)
2 user32.dll int getguiresources(intptr, int)
2 user32.dll int internalgetwindowtext(intptr, stringbuilder, int)
2 user32.dll intptr findwindow(string, string)
2 user32.dll intptr getdesktopwindow()
2 user32.dll intptr getforegroundwindow()
2 user32.dll intptr getparent(intptr)
2 user32.dll intptr getprocesswindowstation()
2 user32.dll intptr getshellwindow()
2 user32.dll intptr getthreaddesktop(int)
2 user32.dll bool showwindow(intptr, showwindowtype)
2 user32.dll bool endtask(intptr, bool, bool)
2 user32.dll bool destroywindow(intptr)
2 user32.dll bool ishungappwindow(intptr)
2 user32.dll bool bringwindowtotop(intptr)
2 user32.dll bool closedesktop(intptr)
2 user32.dll bool closewindow(intptr)
2 user32.dll bool closewindowstation(intptr)
2 wintrust.dll bool cryptcatadminacquirecontext(intptr&, guid, int)
2 wintrust.dll bool cryptcatcataloginfofromcontext(intptr, cataloginfo&, int)
2 wintrust.dll intptr cryptcatadminenumcatalogfromhash(intptr, byte[], int, int, intptr)
2 wtsapi32.dll bool wtsregistersessionnotificationex(intptr, intptr, wtsnotificationflags)
2 wtsapi32.dll void wtscloseserver(intptr)
2 wtsapi32.dll bool wtsdisconnectsession(intptr, int, bool)
2 wtsapi32.dll bool wtsenumeratesessions(intptr, int, int, intptr&, int32&)
2 wtsapi32.dll bool wtsfreememory(intptr)
2 wtsapi32.dll bool wtslogoffsession(intptr, int, bool)
2 wtsapi32.dll bool wtsregistersessionnotification(intptr, wtsnotificationflags)
2 wtsapi32.dll intptr wtsopenserver(string)
2 wtsapi32.dll bool wtsshutdownsystem(intptr, wtsshutdownflags)
2 wtsapi32.dll bool wtsterminateprocess(intptr, int, int)
2 wtsapi32.dll int wtsgetactiveconsolesessionid()
2 wtsapi32.dll bool wtsunregistersessionnotification(intptr)
2 wtsapi32.dll bool wtsunregistersessionnotificationex(intptr, intptr)
2 wtsapi32.dll bool wtssendmessage(intptr, int, string, int, string, int, int, int, dialogresul
1 advapi32.dll bool createprocessasuser(intptr, string, string, intptr, intptr, bool, creationf
1 advapi32.dll bool initializesecuritydescriptor(intptr, int)
1 advapi32.dll bool setsecuritydescriptordacl(intptr, bool, intptr, bool)
1 comctl32.dll void taskdialogindirect(unsafenativemethods/taskdialogconfig&, int32&, int32&, b
1 dwmapi.dll int dwmextendframeintoclientarea(intptr, minisysinfo/margins&)
1 gdi32.dll bool rectangle(intptr, int, int, int, int)
1 gdi32.dll intptr getstockobject(gdistockobject)
1 gdi32.dll intptr createpen(gdipenstyle, int, intptr)
1 gdi32.dll int savedc(intptr)
1 gdi32.dll bool restoredc(intptr, int)
1 gdi32.dll gdiblendmode setrop2(intptr, gdiblendmode)
1 kernel32.dll intptr loadlibraryex(string, intptr, int)
1 kernel32.dll bool activateactctx(intptr, intptr&)
1 kernel32.dll bool createprocess(string, string, intptr, intptr, bool, creationflags, intptr,
1 kernel32.dll bool heap32first(heapentry32&, int, intptr)
1 kernel32.dll intptr createtoolhelp32snapshot(snapshotflags, int)
1 kernel32.dll intptr createmutex(intptr, bool, string)
1 kernel32.dll int heap32next(heapentry32&)
1 kernel32.dll waitresult waitforsingleobject(intptr, uint)
1 kernel32.dll bool heap32listnext(intptr, heaplist32&)
1 kernel32.dll bool setprocessshutdownparameters(int, int)
1 kernel32.dll bool heap32listfirst(intptr, heaplist32&)
1 nprocesshacker.dll void kphhookinit()
1 nprocesshacker.dll ntstatus phqueryprocessws(intptr, nprocesshacker/wsinformationclass, int32&, int
1 ntdll.dll ntstatus ntquerysysteminformation(systeminformationclass, systemperformanceinfor
1 ntdll.dll ntstatus ntquerysysteminformation(systeminformationclass, systemcacheinformation
1 shell32.dll int runfiledlg(intptr, intptr, string, string, string, runfiledialogflags)
1 shell32.dll bool fileiconinit(bool)
1 symsrv.dll bool symbolserversetoptions(symbolserveroption, uint64)
1 user32.dll bool lockworkstation()
1 user32.dll bool destroycaret()
1 user32.dll bool createcaret(intptr, intptr, int, int)
1 user32.dll intptr setcapture(intptr)
1 user32.dll bool changewindowmessagefilter(windowmessage, uipifilterflag)
1 user32.dll bool setuserobjectsecurity(intptr, sirequested&, intptr)
1 user32.dll bool redrawwindow(intptr, intptr, intptr, redrawwindowflags)
1 user32.dll intptr getwindowdc(intptr)
1 user32.dll bool releasecapture()
1 user32.dll int getsystemmetrics(int)
1 user32.dll bool setcaretpos(int, int)
1 user32.dll int releasedc(intptr, intptr)
1 user32.dll bool setmenuinfo(handleref, menuinfo)
1 user32.dll intptr windowfrompoint(point)
1 user32.dll bool setmenuiteminfo(handleref, int, bool, menuiteminfo_t_rw)
1 user32.dll bool showcaret(intptr)
1 userenv.dll bool createenvironmentblock(intptr&, intptr, bool)
1 uxtheme.dll int setwindowtheme(intptr, string, string)