| Count |
Library |
Function |
| 16 |
user32.dll |
intptr sendmessage(intptr, uint, intptr, intptr) |
| 10 |
advapi32.dll |
bool gettokeninformation(intptr, tokeninformationclass, intptr, int, int32&) |
| 9 |
ntdll.dll |
ntstatus ntqueryobject(intptr, objectinformationclass, intptr, int, int32&) |
| 8 |
user32.dll |
intptr sendmessagewithstring(intptr, uint, intptr, string) |
| 7 |
ntdll.dll |
ntstatus ntquerysysteminformation(systeminformationclass, intptr, int, int32&) |
| 7 |
user32.dll |
bool changewindowmessagefilter(windowmessage, uipifilterflag) |
| 6 |
iphlpapi.dll |
int getextendedudptable(intptr, int32&, bool, aifamily, udptableclass, int) |
| 6 |
iphlpapi.dll |
int getextendedtcptable(intptr, int32&, bool, aifamily, tcptableclass, int) |
| 6 |
ntdll.dll |
void rtlmovememory(intptr, intptr, intptr) |
| 6 |
user32.dll |
intptr sendmessage(intptr, int, int, extendedlistview/lvgroup&) |
| 5 |
kernel32.dll |
intptr getmodulehandle(string) |
| 5 |
kernel32.dll |
bool closehandle(intptr) |
| 4 |
kernel32.dll |
intptr getprocaddress(intptr, string) |
| 4 |
user32.dll |
int getwindowthreadprocessid(intptr, int32&) |
| 4 |
user32.dll |
bool exitwindowsex(exitwindowsflags, int) |
| 4 |
user32.dll |
bool destroyicon(intptr) |
| 4 |
wtsapi32.dll |
bool wtsquerysessioninformation(intptr, int, wtsinformationclass, intptr&, int32 |
| 3 |
gdi32.dll |
bool deleteobject(intptr) |
| 3 |
kernel32.dll |
void exitprocess(int) |
| 3 |
kernel32.dll |
int getcurrentprocessid() |
| 3 |
kernel32.dll |
bool queryperformancecounter(int64&) |
| 3 |
kernel32.dll |
bool queryinformationjobobject(intptr, jobobjectinformationclass, intptr, int, i |
| 3 |
ntdll.dll |
ntstatus ntduplicateobject(intptr, intptr, intptr, intptr&, int, handleflags, du |
| 3 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, intptr, int, |
| 3 |
psapi.dll |
bool getperformanceinfo(performanceinformation&, int) |
| 3 |
shell32.dll |
bool shellexecuteex(shellexecuteinfo&) |
| 3 |
user32.dll |
intptr sendmessage(intptr, windowmessage, int, int) |
| 3 |
user32.dll |
int getsystemmetrics(int) |
| 3 |
wintrust.dll |
bool cryptcatadminreleasecontext(intptr, int) |
| 2 |
advapi32.dll |
ntstatus lsaremoveprivilegesfromaccount(intptr, bool, intptr) |
| 2 |
advapi32.dll |
bool queryserviceconfig(intptr, intptr, int, int32&) |
| 2 |
advapi32.dll |
bool duplicatetokenex(intptr, tokenaccess, intptr, securityimpersonationlevel, t |
| 2 |
advapi32.dll |
bool enumservicesstatusex(intptr, intptr, servicequerytype, servicequerystate, i |
| 2 |
advapi32.dll |
bool logonuser(string, string, string, logontype, logonprovider, intptr&) |
| 2 |
advapi32.dll |
bool openprocesstoken(intptr, tokenaccess, intptr&) |
| 2 |
advapi32.dll |
bool changeserviceconfig(intptr, servicetype, servicestarttype, serviceerrorcont |
| 2 |
advapi32.dll |
bool adjusttokenprivileges(intptr, bool, tokenprivileges&, int, intptr, intptr) |
| 2 |
advapi32.dll |
bool queryserviceconfig2(intptr, serviceinfolevel, intptr, int, int32&) |
| 2 |
advapi32.dll |
bool settokeninformation(intptr, tokeninformationclass, int32&, int) |
| 2 |
dbghelp.dll |
bool symfromaddr(intptr, uint64, uint64&, intptr) |
| 2 |
dbghelp.dll |
bool syminitialize(intptr, string, bool) |
| 2 |
dbghelp.dll |
intptr symfunctiontableaccess64(intptr, uint64) |
| 2 |
dbghelp.dll |
uint64 symgetmodulebase64(intptr, uint64) |
| 2 |
dwmapi.dll |
int dwmsetwindowattribute(intptr, uint, int32&, uint) |
| 2 |
gdi32.dll |
intptr selectobject(intptr, intptr) |
| 2 |
kernel32.dll |
bool createprocess(string, string, intptr, intptr, bool, processcreationflags, i |
| 2 |
kernel32.dll |
intptr loadlibrary(string) |
| 2 |
kernel32.dll |
bool freelibrary(intptr) |
| 2 |
kernel32.dll |
intptr getprocaddress(intptr, uint16) |
| 2 |
kernel32.dll |
bool getversionex(osversion/osversioninfoex&) |
| 2 |
kernel32.dll |
bool deviceiocontrol(intptr, int, byte*, int, byte*, int, int32&, intptr) |
| 2 |
kernel32.dll |
bool isprocessinjob(intptr, intptr, boolean&) |
| 2 |
kernel32.dll |
int getcurrentthreadid() |
| 2 |
kernel32.dll |
bool mapuserphysicalpages(intptr, intptr, intptr[]) |
| 2 |
ntdll.dll |
ntstatus rtlcreateenvironment(bool, intptr&) |
| 2 |
ntdll.dll |
ntstatus rtlqueryenvironmentvariable_u(intptr, unicodestring&, unicodestring&) |
| 2 |
ntdll.dll |
int rtllengthsid(intptr) |
| 2 |
ntdll.dll |
int rtlgetprocessheaps(int, intptr[]) |
| 2 |
ntdll.dll |
ntstatus ntqueryvolumeinformationfile(intptr, iostatusblock&, intptr, int, fsinf |
| 2 |
ntdll.dll |
ntstatus ntquerysymboliclinkobject(intptr, unicodestring&, int32&) |
| 2 |
ntdll.dll |
ntstatus ntquerysecurityobject(intptr, securityinformation, intptr, int, int32&) |
| 2 |
ntdll.dll |
ntstatus ntquerysysteminformation(systeminformationclass, systembasicinformation |
| 2 |
ntdll.dll |
ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, intptr |
| 2 |
ntdll.dll |
ntstatus ntterminateprocess(intptr, ntstatus) |
| 2 |
ntdll.dll |
ntstatus ntqueryinformationfile(intptr, iostatusblock&, intptr, int, fileinforma |
| 2 |
ntdll.dll |
ntstatus rtldestroyenvironment(intptr) |
| 2 |
ntdll.dll |
ntstatus ntqueryinformationresourcemanager(intptr, resourcemanagerinformationcla |
| 2 |
ntdll.dll |
ntstatus ntterminatethread(intptr, ntstatus) |
| 2 |
ntdll.dll |
ntstatus rtlmakeselfrelativesd(intptr, intptr, int32&) |
| 2 |
ntdll.dll |
ntstatus ntqueryinformationtransaction(intptr, transactioninformationclass, intp |
| 2 |
powrprof.dll |
bool setsuspendstate(bool, bool, bool) |
| 2 |
psapi.dll |
bool enumprocessmodules(intptr, intptr[], int, int32&) |
| 2 |
user32.dll |
bool getwindowrect(intptr, rect&) |
| 2 |
user32.dll |
intptr setwindowlongptr(intptr, getwindowlongoffset, intptr) |
| 2 |
user32.dll |
intptr sendmessage(intptr, int, intptr, columnheaderextensions/lvcolumn&) |
| 2 |
uxtheme.dll |
int setwindowtheme(intptr, string, string) |
| 2 |
wintrust.dll |
bool cryptcatadminreleasecatalogcontext(intptr, intptr, int) |
| 2 |
wintrust.dll |
bool cryptcatadmincalchashfromfilehandle(intptr, int32&, byte[], int) |
| 2 |
wintrust.dll |
uint winverifytrust(intptr, guid, wintrustdata&) |
| 2 |
wtsapi32.dll |
bool wtsenumerateprocesses(intptr, int, int, intptr&, int32&) |
| 1 |
advapi32.dll |
bool adjusttokengroups(intptr, bool, tokengroups&, int, intptr, intptr) |
| 1 |
advapi32.dll |
bool closeservicehandle(intptr) |
| 1 |
advapi32.dll |
ntstatus lsaclose(intptr) |
| 1 |
advapi32.dll |
ntstatus lsacreateaccount(intptr, intptr, lsaaccountaccess, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsadelete(intptr) |
| 1 |
advapi32.dll |
ntstatus lsaenumerateaccounts(intptr, int32&, intptr&, int, int32&) |
| 1 |
advapi32.dll |
ntstatus lsaenumerateaccountswithuserright(intptr, unicodestring&, intptr&, int3 |
| 1 |
advapi32.dll |
ntstatus lsaenumerateprivileges(intptr, int32&, intptr&, int, int32&) |
| 1 |
advapi32.dll |
ntstatus lsaenumerateprivilegesofaccount(intptr, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsafreememory(intptr) |
| 1 |
advapi32.dll |
ntstatus lsagetquotasforaccount(intptr, quotalimits&) |
| 1 |
advapi32.dll |
ntstatus lsagetsystemaccessaccount(intptr, securitysystemaccess&) |
| 1 |
advapi32.dll |
ntstatus lsalookupnames2(intptr, int, int, unicodestring[], intptr&, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsalookupprivilegedisplayname(intptr, unicodestring&, intptr&, int16&) |
| 1 |
advapi32.dll |
ntstatus lsalookupprivilegename(intptr, luid&, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsalookupprivilegevalue(intptr, unicodestring&, luid&) |
| 1 |
advapi32.dll |
ntstatus lsalookupsids(intptr, int, intptr[], intptr&, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsaaddprivilegestoaccount(intptr, intptr) |
| 1 |
advapi32.dll |
intptr openservice(intptr, string, serviceaccess) |
| 1 |
advapi32.dll |
intptr openscmanager(string, string, scmanageraccess) |
| 1 |
advapi32.dll |
bool controlservice(intptr, servicecontrol, servicestatus&) |
| 1 |
advapi32.dll |
bool convertstringsidtosid(string, intptr&) |
| 1 |
advapi32.dll |
bool createprocessasuser(intptr, string, string, intptr, intptr, bool, processcr |
| 1 |
advapi32.dll |
bool createwellknownsid(wellknownsidtype, intptr, intptr, int32&) |
| 1 |
advapi32.dll |
bool equaldomainsid(intptr, intptr, boolean&) |
| 1 |
advapi32.dll |
bool gettokeninformation(intptr, tokeninformationclass, int32&, int, int32&) |
| 1 |
advapi32.dll |
bool gettokeninformation(intptr, tokeninformationclass, intptr&, int, int32&) |
| 1 |
advapi32.dll |
bool gettokeninformation(intptr, tokeninformationclass, tokensource&, int, int32 |
| 1 |
advapi32.dll |
bool gettokeninformation(intptr, tokeninformationclass, tokenstatistics&, int, i |
| 1 |
advapi32.dll |
bool impersonateloggedonuser(intptr) |
| 1 |
advapi32.dll |
bool openthreadtoken(intptr, tokenaccess, bool, intptr&) |
| 1 |
advapi32.dll |
bool queryservicestatusex(intptr, int, servicestatusprocess&, int, int32&) |
| 1 |
advapi32.dll |
bool reverttoself() |
| 1 |
advapi32.dll |
bool startservice(intptr, int, string[]) |
| 1 |
advapi32.dll |
intptr createservice(intptr, string, string, serviceaccess, servicetype, service |
| 1 |
advapi32.dll |
ntstatus lsaopenaccount(intptr, intptr, lsaaccountaccess, intptr&) |
| 1 |
advapi32.dll |
ntstatus lsaopenpolicy(unicodestring&, objectattributes&, lsapolicyaccess, intpt |
| 1 |
advapi32.dll |
bool lookupprivilegevalue(string, string, luid&) |
| 1 |
advapi32.dll |
bool deleteservice(intptr) |
| 1 |
advapi32.dll |
win32error setsecurityinfo(intptr, seobjecttype, securityinformation, intptr, in |
| 1 |
advapi32.dll |
win32error getsecurityinfo(intptr, seobjecttype, securityinformation, intptr&, i |
| 1 |
advapi32.dll |
ntstatus lsasetsystemaccessaccount(intptr, securitysystemaccess) |
| 1 |
advapi32.dll |
ntstatus lsasetsecurityobject(intptr, securityinformation, intptr) |
| 1 |
advapi32.dll |
ntstatus lsasetquotasforaccount(intptr, quotalimits&) |
| 1 |
advapi32.dll |
ntstatus lsaquerysecurityobject(intptr, securityinformation, intptr&) |
| 1 |
comctl32.dll |
void taskdialogindirect(unsafenativemethods/taskdialogconfig&, int32&, int32&, b |
| 1 |
dbghelp.dll |
bool symcleanup(intptr) |
| 1 |
dbghelp.dll |
symboloptions symgetoptions() |
| 1 |
dbghelp.dll |
int64 symloadmodule64(intptr, intptr, string, string, uint64, int) |
| 1 |
dbghelp.dll |
bool symunloadmodule64(intptr, uint64) |
| 1 |
dbghelp.dll |
symboloptions symsetoptions(symboloptions) |
| 1 |
dbghelp.dll |
bool symsetsearchpath(intptr, string) |
| 1 |
dbghelp.dll |
bool symgetsearchpath(intptr, stringbuilder, int) |
| 1 |
dbghelp.dll |
bool symgetlinefromaddr64(intptr, uint64, int32&, imagehlpline64&) |
| 1 |
dbghelp.dll |
bool symfromname(intptr, string, intptr) |
| 1 |
dbghelp.dll |
bool symenumsymbols(intptr, uint64, string, symenumsymbolsproc, intptr) |
| 1 |
dbghelp.dll |
bool stackwalk64(machinetype, intptr, intptr, stackframe64&, contextamd64&, read |
| 1 |
dbghelp.dll |
bool stackwalk64(machinetype, intptr, intptr, stackframe64&, context&, readproce |
| 1 |
dbghelp.dll |
bool minidumpwritedump(intptr, int, intptr, minidumptype, intptr, intptr, intptr |
| 1 |
dwmapi.dll |
int dwmseticonicthumbnail(intptr, intptr, uint) |
| 1 |
dwmapi.dll |
int dwmseticoniclivepreviewbitmap(intptr, intptr, point&, uint) |
| 1 |
dwmapi.dll |
int dwmseticoniclivepreviewbitmap(intptr, intptr, intptr, uint) |
| 1 |
dwmapi.dll |
int dwmextendframeintoclientarea(intptr, minisysinfo/margins&) |
| 1 |
faultrep.dll |
bool adderexcludedapplication(string) |
| 1 |
gdi32.dll |
intptr createpen(gdipenstyle, int, intptr) |
| 1 |
gdi32.dll |
bool restoredc(intptr, int) |
| 1 |
gdi32.dll |
gdiblendmode setrop2(intptr, gdiblendmode) |
| 1 |
gdi32.dll |
intptr getstockobject(gdistockobject) |
| 1 |
gdi32.dll |
bool rectangle(intptr, int, int, int, int) |
| 1 |
gdi32.dll |
int savedc(intptr) |
| 1 |
iphlpapi.dll |
int getudpstatistics(mibudpstats&) |
| 1 |
iphlpapi.dll |
int settcpentry(mibtcprow&) |
| 1 |
iphlpapi.dll |
int gettcpstatistics(mibtcpstats&) |
| 1 |
kernel32.dll |
bool setprocessshutdownparameters(int, int) |
| 1 |
kernel32.dll |
waitresult waitforsingleobject(intptr, uint) |
| 1 |
kernel32.dll |
void outputdebugstring(string) |
| 1 |
kernel32.dll |
void deleteboundarydescriptor(intptr) |
| 1 |
kernel32.dll |
processpriorityclasswin32 getpriorityclass(intptr) |
| 1 |
kernel32.dll |
bool processidtosessionid(int, int32&) |
| 1 |
kernel32.dll |
bool assignprocesstojobobject(intptr, intptr) |
| 1 |
kernel32.dll |
bool queryperformancefrequency(int64&) |
| 1 |
kernel32.dll |
bool allocateuserphysicalpages(intptr, intptr&, intptr[]) |
| 1 |
kernel32.dll |
bool addsidtoboundarydescriptor(intptr&, intptr) |
| 1 |
kernel32.dll |
bool activateactctx(intptr, intptr&) |
| 1 |
kernel32.dll |
bool queryprocesscycletime(intptr, uint64&) |
| 1 |
kernel32.dll |
bool querythreadcycletime(intptr, uint64&) |
| 1 |
kernel32.dll |
bool queueuserapc(apcroutine, intptr, intptr) |
| 1 |
kernel32.dll |
bool queueuserapc(intptr, intptr, intptr) |
| 1 |
kernel32.dll |
bool sethandleinformation(intptr, win32handleflags, win32handleflags) |
| 1 |
kernel32.dll |
bool setpriorityclass(intptr, processpriorityclasswin32) |
| 1 |
kernel32.dll |
bool closeprivatenamespace(intptr, privatenamespaceflags) |
| 1 |
kernel32.dll |
bool queryfullprocessimagename(intptr, bool, stringbuilder, int32&) |
| 1 |
kernel32.dll |
bool queryinformationjobobject(intptr, jobobjectinformationclass, jobobjectbasic |
| 1 |
kernel32.dll |
bool getprocesstimes(intptr, largeinteger&, largeinteger&, largeinteger&, largei |
| 1 |
kernel32.dll |
bool getprocessaffinitymask(intptr, intptr&, intptr&) |
| 1 |
kernel32.dll |
bool heap32listnext(intptr, heaplist32&) |
| 1 |
kernel32.dll |
bool gethandleinformation(intptr, win32handleflags&) |
| 1 |
kernel32.dll |
bool heap32listfirst(intptr, heaplist32&) |
| 1 |
kernel32.dll |
bool getexitcodethread(intptr, int32&) |
| 1 |
kernel32.dll |
bool getexitcodeprocess(intptr, int32&) |
| 1 |
kernel32.dll |
bool getproductinfo(int, int, int, int, windowstype&) |
| 1 |
kernel32.dll |
bool heap32first(heapentry32&, int, intptr) |
| 1 |
kernel32.dll |
bool freeuserphysicalpages(intptr, intptr&, intptr[]) |
| 1 |
kernel32.dll |
bool setprocessaffinitymask(intptr, intptr) |
| 1 |
kernel32.dll |
bool setthreadpriority(intptr, int) |
| 1 |
kernel32.dll |
intptr createfile(string, fileaccess, filesharemode, int, filecreationdispositio |
| 1 |
kernel32.dll |
intptr createprivatenamespace(intptr, intptr, string) |
| 1 |
kernel32.dll |
intptr openprivatenamespace(intptr, string) |
| 1 |
kernel32.dll |
intptr createremotethread(intptr, intptr, intptr, intptr, intptr, processcreatio |
| 1 |
kernel32.dll |
intptr createtoolhelp32snapshot(snapshotflags, int) |
| 1 |
kernel32.dll |
intptr localrealloc(intptr, allocflags, int) |
| 1 |
kernel32.dll |
intptr localfree(intptr) |
| 1 |
kernel32.dll |
intptr getprocessheap() |
| 1 |
kernel32.dll |
intptr loadlibraryex(string, intptr, int) |
| 1 |
kernel32.dll |
intptr localalloc(allocflags, int) |
| 1 |
kernel32.dll |
intptr openprocess(processaccess, bool, int) |
| 1 |
kernel32.dll |
int virtualqueryex(intptr, intptr, memorybasicinformation&, int) |
| 1 |
kernel32.dll |
bool terminatejobobject(intptr, int) |
| 1 |
kernel32.dll |
bool terminateprocess(intptr, int) |
| 1 |
kernel32.dll |
bool terminatethread(intptr, int) |
| 1 |
kernel32.dll |
int formatmessage(int, intptr, int, int, stringbuilder, int, intptr) |
| 1 |
kernel32.dll |
int getprocessid(intptr) |
| 1 |
kernel32.dll |
intptr createboundarydescriptor(string, int) |
| 1 |
kernel32.dll |
int getthreadpriority(intptr) |
| 1 |
kernel32.dll |
intptr openthread(threadaccess, bool, int) |
| 1 |
kernel32.dll |
int heap32next(heapentry32&) |
| 1 |
kernel32.dll |
int querydosdevice(string, intptr, int) |
| 1 |
nprocesshacker.dll |
ntstatus phquerynamefileobject(intptr, intptr, int, int32&) |
| 1 |
nprocesshacker.dll |
ntstatus phqueryprocessws(intptr, nprocesshacker/wsinformationclass, int32&, int |
| 1 |
nprocesshacker.dll |
void kphhookinit() |
| 1 |
ntdll.dll |
ntstatus ntstopprofile(intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetinformationthread(intptr, threadinformationclass, intptr&, int) |
| 1 |
ntdll.dll |
ntstatus ntwaitforkeyedevent(intptr, intptr, bool, int64&) |
| 1 |
ntdll.dll |
ntstatus ntsetsecurityobject(intptr, securityinformation, intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetinformationthread(intptr, threadinformationclass, int32&, int) |
| 1 |
ntdll.dll |
ntstatus ntsetinformationprocess(intptr, processinformationclass, processhandlet |
| 1 |
ntdll.dll |
ntstatus ntsetinformationprocess(intptr, processinformationclass, intptr, int) |
| 1 |
ntdll.dll |
ntstatus ntsetinformationprocess(intptr, processinformationclass, int32&, int) |
| 1 |
ntdll.dll |
ntstatus ntsetinformationfile(intptr, iostatusblock&, intptr, int, fileinformati |
| 1 |
ntdll.dll |
ntstatus ntsetinformationdebugobject(intptr, debugobjectinformationclass, intptr |
| 1 |
ntdll.dll |
ntstatus ntunmapviewofsection(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntsethighwaitloweventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetintervalprofile(int, kprofilesource) |
| 1 |
ntdll.dll |
ntstatus ntunlockfile(intptr, iostatusblock&, int64&, int64&, int) |
| 1 |
ntdll.dll |
ntstatus ntsuspendprocess(intptr) |
| 1 |
ntdll.dll |
ntstatus ntstartprofile(intptr) |
| 1 |
ntdll.dll |
ntstatus ntsinglephasereject(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntsignalandwaitforsingleobject(intptr, intptr, bool, int64&) |
| 1 |
ntdll.dll |
ntstatus ntsuspendthread(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntsettimer(intptr, int64&, timerapcroutine, intptr, bool, int, boolean& |
| 1 |
ntdll.dll |
ntstatus nttestalert() |
| 1 |
ntdll.dll |
ntstatus ntsetlowwaithigheventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus ntunloaddriver(unicodestring&) |
| 1 |
ntdll.dll |
ntstatus ntsetloweventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetiocompletion(intptr, intptr, intptr, ntstatus, intptr) |
| 1 |
ntdll.dll |
ntstatus ntsethigheventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus ntseteventboostpriority(intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetevent(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntremoveiocompletion(intptr, intptr&, intptr&, iostatusblock&, int64&) |
| 1 |
ntdll.dll |
ntstatus ntreleasesemaphore(intptr, int, int32&) |
| 1 |
ntdll.dll |
ntstatus ntreleasemutant(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntreleasekeyedevent(intptr, intptr, bool, int64&) |
| 1 |
ntdll.dll |
ntstatus ntregisterthreadterminateport(intptr) |
| 1 |
ntdll.dll |
ntstatus ntrecovertransactionmanager(intptr) |
| 1 |
ntdll.dll |
ntstatus ntrecoverresourcemanager(intptr) |
| 1 |
ntdll.dll |
ntstatus ntrecoverenlistment(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntreadvirtualmemory(intptr, intptr, intptr, intptr, intptr&) |
| 1 |
ntdll.dll |
ntstatus ntreadonlyenlistment(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntreadfile(intptr, intptr, ioapcroutine, intptr, iostatusblock&, intptr |
| 1 |
ntdll.dll |
ntstatus ntqueueapcthread(intptr, intptr, intptr, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntqueryvirtualmemory(intptr, intptr, memoryinformationclass, memorybasi |
| 1 |
ntdll.dll |
ntstatus ntremoveprocessdebug(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntreplyport(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntreplywaitreceiveport(intptr, intptr&, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetcontextthread(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntsetcontextthread(intptr, context&) |
| 1 |
ntdll.dll |
ntstatus ntrollforwardtransactionmanager(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntrollbacktransaction(intptr, bool) |
| 1 |
ntdll.dll |
ntstatus ntrollbackenlistment(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntrollbackcomplete(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntresumethread(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntresumeprocess(intptr) |
| 1 |
ntdll.dll |
ntstatus ntreadfile(intptr, intptr, ioapcroutine, intptr, intptr, intptr, int, i |
| 1 |
ntdll.dll |
ntstatus ntresetevent(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntrequestwaitreplyport(intptr, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntrequestport(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntreplywaitreplyport(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntquerytimer(intptr, timerinformationclass, timerbasicinformation&, int |
| 1 |
ntdll.dll |
ntstatus ntwaitformultipleobjects(int, intptr[], waittype, bool, int64&) |
| 1 |
ntdll.dll |
win32error rtlntstatustodoserror(ntstatus) |
| 1 |
ntdll.dll |
ntstatus rtlsetgroupsecuritydescriptor(intptr, intptr, bool) |
| 1 |
ntdll.dll |
ntstatus rtlsetenvironmentvariable(intptr, unicodestring&, unicodestring&) |
| 1 |
ntdll.dll |
ntstatus rtlsetenvironmentvariable(intptr&, unicodestring&, unicodestring&) |
| 1 |
ntdll.dll |
ntstatus rtlsetdaclsecuritydescriptor(intptr, bool, intptr, bool) |
| 1 |
ntdll.dll |
ntstatus rtlsetcurrentenvironment(intptr, intptr&) |
| 1 |
ntdll.dll |
ntstatus rtlsetcontrolsecuritydescriptor(intptr, securitydescriptorcontrolflags, |
| 1 |
ntdll.dll |
ntstatus rtlremotecall(intptr, intptr, intptr, int, intptr[], bool, bool) |
| 1 |
ntdll.dll |
ntstatus rtlregisterwait(intptr&, intptr, waitortimercallbackdelegate, intptr, i |
| 1 |
ntdll.dll |
ntstatus rtlqueueworkitem(workercallbackdelegate, intptr, wtflags) |
| 1 |
ntdll.dll |
ntstatus rtlqueryprocesslockinformation(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlqueryprocessheapinformation(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlqueryprocessdebuginformation(intptr, rtlqueryprocessdebugflags, intp |
| 1 |
ntdll.dll |
ntstatus rtlqueryprocessbacktraceinformation(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlqueryinformationacl(intptr, aclsizeinformation&, int, aclinformation |
| 1 |
ntdll.dll |
ntstatus rtlhashunicodestring(unicodestring&, bool, hashstringalgorithm, int32&) |
| 1 |
ntdll.dll |
ntstatus rtlsetownersecuritydescriptor(intptr, intptr, bool) |
| 1 |
ntdll.dll |
ntstatus rtlsetsaclsecuritydescriptor(intptr, bool, intptr, bool) |
| 1 |
ntdll.dll |
ntstatus rtlunicodestringtoansistring(ansistring&, unicodestring&, bool) |
| 1 |
ntdll.dll |
void rtlzeromemory(intptr, intptr) |
| 1 |
ntdll.dll |
void rtlsetbits(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
void rtlsetbit(rtlbitmap&, int) |
| 1 |
ntdll.dll |
void rtlsetallbits(rtlbitmap&) |
| 1 |
ntdll.dll |
void rtlinitializebitmap(rtlbitmap&, intptr, int) |
| 1 |
ntdll.dll |
void rtlfreeunicodestring(unicodestring&) |
| 1 |
ntdll.dll |
void rtlfreeansistring(ansistring&) |
| 1 |
ntdll.dll |
void rtlfillmemory(intptr, intptr, byte) |
| 1 |
ntdll.dll |
void rtlclearbits(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
void rtlclearbit(rtlbitmap&, int) |
| 1 |
ntdll.dll |
void rtlclearallbits(rtlbitmap&) |
| 1 |
ntdll.dll |
sididentifierauthority* rtlidentifierauthoritysid(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlwow64setthreadcontext(intptr, context&) |
| 1 |
ntdll.dll |
ntstatus rtlwow64getthreadcontext(intptr, context&) |
| 1 |
ntdll.dll |
ntstatus rtlupcaseunicodestringtoansistring(ansistring&, unicodestring&, bool) |
| 1 |
ntdll.dll |
ntstatus rtlgetsaclsecuritydescriptor(intptr, boolean&, intptr&, boolean&) |
| 1 |
ntdll.dll |
ntstatus rtlgetownersecuritydescriptor(intptr, intptr&, boolean&) |
| 1 |
ntdll.dll |
ntstatus rtlgetgroupsecuritydescriptor(intptr, intptr&, boolean&) |
| 1 |
ntdll.dll |
ntstatus rtlallocatefrompeb(int, intptr&) |
| 1 |
ntdll.dll |
ntstatus rtladdcompoundace(intptr, int, acetype, int, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus rtladdauditaccessaceex(intptr, int, aceflags, int, intptr, bool, bool) |
| 1 |
ntdll.dll |
ntstatus rtladdauditaccessace(intptr, int, int, intptr, bool, bool) |
| 1 |
ntdll.dll |
ntstatus rtladdace(intptr, int, int, intptr, int) |
| 1 |
ntdll.dll |
ntstatus rtladdaccessdeniedaceex(intptr, int, aceflags, int, intptr) |
| 1 |
ntdll.dll |
ntstatus rtladdaccessdeniedace(intptr, int, int, intptr) |
| 1 |
ntdll.dll |
ntstatus rtladdaccessallowedaceex(intptr, int, aceflags, int, intptr) |
| 1 |
ntdll.dll |
ntstatus rtladdaccessallowedace(intptr, int, int, intptr) |
| 1 |
ntdll.dll |
ntstatus ntyieldexecution() |
| 1 |
ntdll.dll |
ntstatus ntwritevirtualmemory(intptr, intptr, intptr, intptr, intptr&) |
| 1 |
ntdll.dll |
ntstatus ntwritefile(intptr, intptr, ioapcroutine, intptr, iostatusblock&, intpt |
| 1 |
ntdll.dll |
ntstatus ntwritefile(intptr, intptr, ioapcroutine, intptr, intptr, intptr, int, |
| 1 |
ntdll.dll |
ntstatus ntwaitloweventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus ntwaithigheventpair(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlansistringtounicodestring(unicodestring&, ansistring&, bool) |
| 1 |
ntdll.dll |
ntstatus rtlconvertsidtounicodestring(unicodestring&, intptr, bool) |
| 1 |
ntdll.dll |
ntstatus rtlcopysid(int, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus rtlgetdaclsecuritydescriptor(intptr, boolean&, intptr&, boolean&) |
| 1 |
ntdll.dll |
ntstatus rtlgetcontrolsecuritydescriptor(intptr, securitydescriptorcontrolflags& |
| 1 |
ntdll.dll |
ntstatus rtlgetace(intptr, int, intptr&) |
| 1 |
ntdll.dll |
ntstatus rtlfreetopeb(intptr, int) |
| 1 |
ntdll.dll |
ntstatus rtlfindmessage(intptr, int, int, int, intptr&) |
| 1 |
ntdll.dll |
ntstatus rtlduplicateunicodestring(rtlduplicateunicodestringflags, unicodestring |
| 1 |
ntdll.dll |
ntstatus rtldestroyquerydebugbuffer(intptr) |
| 1 |
ntdll.dll |
ntstatus rtldestroyprocessparameters(intptr) |
| 1 |
ntdll.dll |
ntstatus rtlderegisterwait(intptr) |
| 1 |
ntdll.dll |
ntstatus rtldeleteace(intptr, int) |
| 1 |
ntdll.dll |
ntstatus rtlcreateuserthread(intptr, intptr, bool, int, intptr, intptr, intptr, |
| 1 |
ntdll.dll |
ntstatus rtlcreateuserprocess(unicodestring&, objectflags, rtluserprocessparamet |
| 1 |
ntdll.dll |
ntstatus rtlcreatesecuritydescriptor(intptr, int) |
| 1 |
ntdll.dll |
ntstatus rtlcreateprocessparameters(intptr&, unicodestring&, unicodestring&, uni |
| 1 |
ntdll.dll |
ntstatus rtlcreateacl(intptr, int, int) |
| 1 |
ntdll.dll |
ntstatus ntwaitforsingleobject(intptr, bool, int64&) |
| 1 |
ntdll.dll |
ntstatus ntquerysysteminformation(systeminformationclass, systemtimeofdayinforma |
| 1 |
ntdll.dll |
ntstatus ntcreatetransactionmanager(intptr&, tmaccess, objectattributes&, unicod |
| 1 |
ntdll.dll |
ntstatus ntcomparetokens(intptr, intptr, boolean&) |
| 1 |
ntdll.dll |
ntstatus ntcompleteconnectport(intptr) |
| 1 |
ntdll.dll |
ntstatus ntconnectport(intptr&, unicodestring&, securityqualityofservice&, intpt |
| 1 |
ntdll.dll |
ntstatus ntcreatedebugobject(intptr&, debugobjectaccess, objectattributes&, debu |
| 1 |
ntdll.dll |
ntstatus ntcreatedirectoryobject(intptr&, directoryaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntcreateenlistment(intptr&, enlistmentaccess, intptr, intptr, objectatt |
| 1 |
ntdll.dll |
ntstatus ntcreateevent(intptr&, eventaccess, objectattributes&, eventtype, bool) |
| 1 |
ntdll.dll |
ntstatus ntcreateeventpair(intptr&, eventpairaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntcommittransaction(intptr, bool) |
| 1 |
ntdll.dll |
ntstatus ntcommitenlistment(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntallocatevirtualmemory(intptr, intptr&, intptr, intptr&, memoryflags, |
| 1 |
ntdll.dll |
ntstatus ntaremappedfilesthesame(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntcanceliofile(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntcanceliofile(intptr, iostatusblock&) |
| 1 |
ntdll.dll |
ntstatus ntcanceltimer(intptr, boolean&) |
| 1 |
ntdll.dll |
ntstatus ntclearevent(intptr) |
| 1 |
ntdll.dll |
ntstatus ntclose(intptr) |
| 1 |
ntdll.dll |
ntstatus ntcommitcomplete(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntcreatefile(intptr&, fileaccess, objectattributes&, iostatusblock&, in |
| 1 |
ntdll.dll |
ntstatus ntcreateiocompletion(intptr&, iocompletionaccess, objectattributes&, in |
| 1 |
ntdll.dll |
ntstatus ntcreatesection(intptr&, sectionaccess, objectattributes&, int64&, memo |
| 1 |
ntdll.dll |
ntstatus ntcreatesection(intptr&, sectionaccess, objectattributes&, intptr, memo |
| 1 |
ntdll.dll |
ntstatus ntcreatesemaphore(intptr&, semaphoreaccess, objectattributes&, int, int |
| 1 |
ntdll.dll |
ntstatus ntcreatesymboliclinkobject(intptr&, symboliclinkaccess, objectattribute |
| 1 |
ntdll.dll |
ntstatus ntcreatethread(intptr&, threadaccess, objectattributes&, intptr, client |
| 1 |
ntdll.dll |
ntstatus ntcreatetimer(intptr&, timeraccess, objectattributes&, timertype) |
| 1 |
ntdll.dll |
ntstatus ntcreatetoken(intptr&, tokenaccess, objectattributes&, tokentype, luid& |
| 1 |
ntdll.dll |
ntstatus ntcreatetransaction(intptr&, transactionaccess, objectattributes&, guid |
| 1 |
ntdll.dll |
ntstatus ntcreateresourcemanager(intptr&, resourcemanageraccess, intptr, guid&, |
| 1 |
ntdll.dll |
ntstatus ntcreateprofile(intptr&, intptr, intptr, intptr, int, intptr, int, kpro |
| 1 |
ntdll.dll |
ntstatus ntcreatejobobject(intptr&, jobobjectaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntcreatekey(intptr&, keyaccess, objectattributes&, int, intptr, regopti |
| 1 |
ntdll.dll |
ntstatus ntcreatekeyedevent(intptr&, keyedeventaccess, objectattributes&, int) |
| 1 |
ntdll.dll |
ntstatus ntcreatemailslotfile(intptr&, fileaccess, objectattributes&, iostatusbl |
| 1 |
ntdll.dll |
ntstatus ntcreatemutant(intptr&, mutantaccess, objectattributes&, bool) |
| 1 |
ntdll.dll |
ntstatus ntcreatenamedpipefile(intptr&, fileaccess, objectattributes&, iostatusb |
| 1 |
ntdll.dll |
ntstatus ntcreateport(intptr&, objectattributes&, int, int, int) |
| 1 |
ntdll.dll |
ntstatus ntcreateprocess(intptr&, processaccess, objectattributes&, intptr, bool |
| 1 |
ntdll.dll |
ntstatus ntallocatelocallyuniqueid(luid&) |
| 1 |
ntdll.dll |
ntstatus ntalertthread(intptr) |
| 1 |
ntdll.dll |
byte* rtlsubauthoritycountsid(intptr) |
| 1 |
ntdll.dll |
int rtlcompareunicodestring(unicodestring&, unicodestring&, bool) |
| 1 |
ntdll.dll |
int rtlfindclearbits(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
bool rtltestbit(rtlbitmap&, int) |
| 1 |
ntdll.dll |
int rtlfindclearbitsandset(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
int rtlfindclearruns(rtlbitmap&, rtlbitmaprun[], int, bool) |
| 1 |
ntdll.dll |
int rtlfindfirstrunclear(rtlbitmap&, int32&) |
| 1 |
ntdll.dll |
int rtlfindlastbackwardrunclear(rtlbitmap&, int, int32&) |
| 1 |
ntdll.dll |
bool rtlvalidsid(intptr) |
| 1 |
ntdll.dll |
bool rtlvalidsecuritydescriptor(intptr) |
| 1 |
ntdll.dll |
bool rtlarebitsset(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
bool rtlcreateunicodestring(unicodestring&, string) |
| 1 |
ntdll.dll |
bool rtlequalprefixsid(intptr, intptr) |
| 1 |
ntdll.dll |
bool rtlequalsid(intptr, intptr) |
| 1 |
ntdll.dll |
bool rtlequalunicodestring(unicodestring&, unicodestring&, bool) |
| 1 |
ntdll.dll |
bool rtlfreeheap(intptr, heapflags, intptr) |
| 1 |
ntdll.dll |
bool rtlprefixunicodestring(unicodestring&, unicodestring&, bool) |
| 1 |
ntdll.dll |
bool rtlvalidacl(intptr) |
| 1 |
ntdll.dll |
int rtlfindlongestrunclear(rtlbitmap&, int32&) |
| 1 |
ntdll.dll |
int rtlfindnextforwardrunclear(rtlbitmap&, int, int32&) |
| 1 |
ntdll.dll |
intptr rtldestroyheap(intptr) |
| 1 |
ntdll.dll |
intptr rtlreallocateheap(intptr, heapflags, intptr, intptr) |
| 1 |
ntdll.dll |
intptr rtlsizeheap(intptr, heapflags, intptr) |
| 1 |
ntdll.dll |
ntstatus csrclientcallserver(intptr, intptr, int, int) |
| 1 |
ntdll.dll |
ntstatus dbguiconnecttodbg() |
| 1 |
ntdll.dll |
ntstatus ntacceptconnectport(intptr&, intptr, intptr, bool, intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntaccesscheck(intptr, intptr, int, genericmapping&, intptr, int32&, int |
| 1 |
ntdll.dll |
ntstatus ntalertresumethread(intptr, int32&) |
| 1 |
ntdll.dll |
intptr rtlcreatequerydebugbuffer(int, bool) |
| 1 |
ntdll.dll |
intptr rtlcreateheap(heapflags, intptr, intptr, intptr, intptr, intptr) |
| 1 |
ntdll.dll |
int rtlfindsetbits(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
int rtlfindsetbitsandclear(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
int rtllengthsecuritydescriptor(intptr) |
| 1 |
ntdll.dll |
int rtlnumberofclearbits(rtlbitmap&) |
| 1 |
ntdll.dll |
int rtlnumberofsetbits(rtlbitmap&) |
| 1 |
ntdll.dll |
int32* rtlsubauthoritysid(intptr, int) |
| 1 |
ntdll.dll |
intptr rtlallocateheap(intptr, heapflags, intptr) |
| 1 |
ntdll.dll |
intptr rtlcompactheap(intptr, heapflags) |
| 1 |
ntdll.dll |
bool rtlarebitsclear(rtlbitmap&, int, int) |
| 1 |
ntdll.dll |
ntstatus ntcreatewaitableport(intptr&, objectattributes&, int, int, int) |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, processbasic |
| 1 |
ntdll.dll |
ntstatus ntpreprepareenlistment(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntprivilegecheck(intptr, intptr, boolean&) |
| 1 |
ntdll.dll |
ntstatus ntprotectvirtualmemory(intptr, intptr&, intptr&, memoryprotection, memo |
| 1 |
ntdll.dll |
ntstatus ntpulseevent(intptr, int32&) |
| 1 |
ntdll.dll |
ntstatus ntquerydirectoryfile(intptr, intptr, ioapcroutine, intptr, iostatusbloc |
| 1 |
ntdll.dll |
ntstatus ntquerydirectoryobject(intptr, intptr, int, bool, bool, int32&, int32&) |
| 1 |
ntdll.dll |
ntstatus ntqueryevent(intptr, eventinformationclass, eventbasicinformation&, int |
| 1 |
ntdll.dll |
ntstatus ntquerysysteminformation(systeminformationclass, systemperformanceinfor |
| 1 |
ntdll.dll |
ntstatus ntprepreparecomplete(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntprepareenlistment(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntopensemaphore(intptr&, semaphoreaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopensymboliclinkobject(intptr&, symboliclinkaccess, objectattributes& |
| 1 |
ntdll.dll |
ntstatus ntopenthread(intptr&, threadaccess, objectattributes&, clientid&) |
| 1 |
ntdll.dll |
ntstatus ntopenthread(intptr&, threadaccess, objectattributes&, intptr) |
| 1 |
ntdll.dll |
ntstatus ntopentimer(intptr&, timeraccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopentransaction(intptr&, transactionaccess, objectattributes&, guid&, |
| 1 |
ntdll.dll |
ntstatus ntopentransactionmanager(intptr&, tmaccess, objectattributes&, intptr, |
| 1 |
ntdll.dll |
ntstatus ntpreparecomplete(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationenlistment(intptr, enlistmentinformationclass, enlist |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationthread(intptr, threadinformationclass, intptr&, int, |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmbasi |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationtransaction(intptr, transactioninformationclass, tran |
| 1 |
ntdll.dll |
ntstatus ntquerysection(intptr, sectioninformationclass, sectionbasicinformation |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationthread(intptr, threadinformationclass, void*, int, in |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationthread(intptr, threadinformationclass, threadbasicinf |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationthread(intptr, threadinformationclass, int32&, int, i |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, vmcounters&, |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, iocounters&, |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, intptr&, int |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmlogi |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationprocess(intptr, processinformationclass, int32&, int, |
| 1 |
ntdll.dll |
ntstatus ntquerysysteminformation(systeminformationclass, systemcacheinformation |
| 1 |
ntdll.dll |
ntstatus ntquerysemaphore(intptr, semaphoreinformationclass, semaphorebasicinfor |
| 1 |
ntdll.dll |
ntstatus ntquerysection(intptr, sectioninformationclass, sectionimageinformation |
| 1 |
ntdll.dll |
ntstatus ntquerymutant(intptr, mutantinformationclass, mutantownerinformation&, |
| 1 |
ntdll.dll |
ntstatus ntquerymutant(intptr, mutantinformationclass, mutantbasicinformation&, |
| 1 |
ntdll.dll |
ntstatus ntqueryintervalprofile(kprofilesource, int32&) |
| 1 |
ntdll.dll |
ntstatus ntqueryinformationtransactionmanager(intptr, tminformationclass, tmreco |
| 1 |
ntdll.dll |
ntstatus ntopensection(intptr&, sectionaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntdebugactiveprocess(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntfreevirtualmemory(intptr, intptr&, intptr&, memoryflags) |
| 1 |
ntdll.dll |
ntstatus ntfscontrolfile(intptr, intptr, ioapcroutine, intptr, intptr, int, intp |
| 1 |
ntdll.dll |
ntstatus ntfscontrolfile(intptr, intptr, ioapcroutine, intptr, iostatusblock&, i |
| 1 |
ntdll.dll |
ntstatus ntgetcontextthread(intptr, context&) |
| 1 |
ntdll.dll |
ntstatus ntgetcontextthread(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntgetnextprocess(intptr, processaccess, handleflags, int, intptr&) |
| 1 |
ntdll.dll |
ntstatus ntgetnextthread(intptr, intptr, threadaccess, handleflags, int, intptr& |
| 1 |
ntdll.dll |
ntstatus ntimpersonateanonymoustoken(intptr) |
| 1 |
ntdll.dll |
ntstatus ntflushvirtualmemory(intptr, intptr&, intptr&, iostatusblock&) |
| 1 |
ntdll.dll |
ntstatus ntflushbuffersfile(intptr, iostatusblock&) |
| 1 |
ntdll.dll |
ntstatus ntdebugcontinue(intptr, clientid&, ntstatus) |
| 1 |
ntdll.dll |
ntstatus ntdelayexecution(bool, int64&) |
| 1 |
ntdll.dll |
ntstatus ntdeletefile(objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntdeletekey(intptr) |
| 1 |
ntdll.dll |
ntstatus ntdeletevaluekey(intptr, unicodestring&) |
| 1 |
ntdll.dll |
ntstatus ntdeviceiocontrolfile(intptr, intptr, ioapcroutine, intptr, intptr, int |
| 1 |
ntdll.dll |
ntstatus ntdeviceiocontrolfile(intptr, intptr, ioapcroutine, intptr, iostatusblo |
| 1 |
ntdll.dll |
ntstatus ntextendsection(intptr, int64&) |
| 1 |
ntdll.dll |
ntstatus ntimpersonatethread(intptr, intptr, securityqualityofservice&) |
| 1 |
ntdll.dll |
ntstatus ntlistenport(intptr, intptr) |
| 1 |
ntdll.dll |
ntstatus ntloaddriver(unicodestring&) |
| 1 |
ntdll.dll |
ntstatus ntopenfile(intptr&, fileaccess, objectattributes&, iostatusblock&, file |
| 1 |
ntdll.dll |
ntstatus ntopeniocompletion(intptr&, iocompletionaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenjobobject(intptr&, jobobjectaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenkey(intptr&, keyaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenkeyedevent(intptr&, keyedeventaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenmutant(intptr&, mutantaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenprocess(intptr&, processaccess, objectattributes&, clientid&) |
| 1 |
ntdll.dll |
ntstatus ntopenprocess(intptr&, processaccess, objectattributes&, intptr) |
| 1 |
ntdll.dll |
ntstatus ntopeneventpair(intptr&, eventpairaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenevent(intptr&, eventaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntlockfile(intptr, intptr, ioapcroutine, intptr, intptr, int64&, int64& |
| 1 |
ntdll.dll |
ntstatus ntlockfile(intptr, intptr, ioapcroutine, intptr, iostatusblock&, int64& |
| 1 |
ntdll.dll |
ntstatus ntmakepermanentobject(intptr) |
| 1 |
ntdll.dll |
ntstatus ntmaketemporaryobject(intptr) |
| 1 |
ntdll.dll |
ntstatus ntmapviewofsection(intptr, intptr, intptr&, intptr, intptr, int64&, int |
| 1 |
ntdll.dll |
ntstatus ntopendirectoryobject(intptr&, directoryaccess, objectattributes&) |
| 1 |
ntdll.dll |
ntstatus ntopenenlistment(intptr&, enlistmentaccess, intptr, guid&, objectattrib |
| 1 |
ntdll.dll |
ntstatus ntopenresourcemanager(intptr&, resourcemanageraccess, intptr, guid&, ob |
| 1 |
ole32.dll |
int propvariantclear(propvariant&) |
| 1 |
psapi.dll |
bool getmoduleinformation(intptr, intptr, moduleinfo, int) |
| 1 |
psapi.dll |
int getmappedfilename(intptr, intptr, stringbuilder, int) |
| 1 |
psapi.dll |
int getmodulebasename(intptr, intptr, stringbuilder, int) |
| 1 |
psapi.dll |
int getmodulefilenameex(intptr, intptr, stringbuilder, int) |
| 1 |
psapi.dll |
bool emptyworkingset(intptr) |
| 1 |
secur32.dll |
ntstatus lsagetlogonsessiondata(luid&, intptr&) |
| 1 |
secur32.dll |
ntstatus lsafreereturnbuffer(intptr) |
| 1 |
secur32.dll |
ntstatus lsaenumeratelogonsessions(int32&, intptr&) |
| 1 |
shell32 |
uint shcreateitemfromparsingname(string, intptr, guid&, ishellitem&) |
| 1 |
shell32.dll |
bool fileiconinit(bool) |
| 1 |
shell32.dll |
hresult getcurrentprocessexplicitappusermodelid(string&) |
| 1 |
shell32.dll |
hresult setcurrentprocessexplicitappusermodelid(string) |
| 1 |
shell32.dll |
int runfiledlg(intptr, intptr, string, string, string, runfiledialogflags) |
| 1 |
shell32.dll |
int shgetpropertystoreforwindow(intptr, guid&, ipropertystore&) |
| 1 |
shell32.dll |
int shgetfileinfo(string, uint, shfileinfo&, uint, uint) |
| 1 |
symsrv.dll |
bool symbolserversetoptions(symbolserveroption, uint64) |
| 1 |
user32.dll |
intptr sendmessagetimeout(intptr, windowmessage, int, int, smtoflags, int, int32 |
| 1 |
user32.dll |
uint registerwindowmessage(string) |
| 1 |
user32.dll |
int internalgetwindowtext(intptr, intptr, int) |
| 1 |
user32.dll |
int releasedc(intptr, intptr) |
| 1 |
user32.dll |
intptr findwindow(string, string) |
| 1 |
user32.dll |
intptr getdesktopwindow() |
| 1 |
user32.dll |
intptr getforegroundwindow() |
| 1 |
user32.dll |
intptr getparent(intptr) |
| 1 |
user32.dll |
intptr getprocesswindowstation() |
| 1 |
user32.dll |
intptr windowfrompoint(point) |
| 1 |
user32.dll |
intptr getthreaddesktop(int) |
| 1 |
user32.dll |
intptr getwindowdc(intptr) |
| 1 |
user32.dll |
intptr opendesktop(string, int, bool, desktopaccess) |
| 1 |
user32.dll |
intptr openwindowstation(string, bool, windowstationaccess) |
| 1 |
user32.dll |
intptr setcapture(intptr) |
| 1 |
user32.dll |
bool releasecapture() |
| 1 |
user32.dll |
intptr getshellwindow() |
| 1 |
user32.dll |
int getguiresources(intptr, int) |
| 1 |
user32.dll |
bool ishungappwindow(intptr) |
| 1 |
user32.dll |
bool getwindowplacement(intptr, windowplacement&) |
| 1 |
user32.dll |
bool getclientrect(intptr, rect&) |
| 1 |
user32.dll |
bool bringwindowtotop(intptr) |
| 1 |
user32.dll |
bool enumwindows(enumwindowsproc, int) |
| 1 |
user32.dll |
bool enumthreadwindows(int, enumthreadwndproc, int) |
| 1 |
user32.dll |
bool enumchildwindows(intptr, enumchildproc, int) |
| 1 |
user32.dll |
bool closewindowstation(intptr) |
| 1 |
user32.dll |
bool createcaret(intptr, intptr, int, int) |
| 1 |
user32.dll |
bool endtask(intptr, bool, bool) |
| 1 |
user32.dll |
bool destroywindow(intptr) |
| 1 |
user32.dll |
bool closedesktop(intptr) |
| 1 |
user32.dll |
bool iswindow(intptr) |
| 1 |
user32.dll |
bool iswindowvisible(intptr) |
| 1 |
user32.dll |
bool lockworkstation() |
| 1 |
user32.dll |
bool switchdesktop(intptr) |
| 1 |
user32.dll |
bool showwindow(intptr, showwindowtype) |
| 1 |
user32.dll |
bool showcaret(intptr) |
| 1 |
user32.dll |
bool setthreaddesktop(intptr) |
| 1 |
user32.dll |
bool setprocesswindowstation(intptr) |
| 1 |
user32.dll |
bool setmenuiteminfo(handleref, int, bool, menuiteminfo_t_rw) |
| 1 |
user32.dll |
bool destroycaret() |
| 1 |
user32.dll |
bool setmenuinfo(handleref, menuinfo) |
| 1 |
user32.dll |
bool setforegroundwindow(intptr) |
| 1 |
user32.dll |
bool setcaretpos(int, int) |
| 1 |
user32.dll |
bool closewindow(intptr) |
| 1 |
user32.dll |
bool redrawwindow(intptr, intptr, intptr, redrawwindowflags) |
| 1 |
user32.dll |
bool postmessage(intptr, windowmessage, int, int) |
| 1 |
userenv.dll |
bool createenvironmentblock(intptr&, intptr, bool) |
| 1 |
wer.dll |
hresult weraddexcludedapplication(string, bool) |
| 1 |
wintrust.dll |
intptr cryptcatadminenumcatalogfromhash(intptr, byte[], int, int, intptr) |
| 1 |
wintrust.dll |
bool cryptcatcataloginfofromcontext(intptr, cataloginfo&, int) |
| 1 |
wintrust.dll |
bool cryptcatadminacquirecontext(intptr&, guid, int) |
| 1 |
wtsapi32.dll |
bool wtsterminateprocess(intptr, int, int) |
| 1 |
wtsapi32.dll |
bool wtsunregistersessionnotification(intptr) |
| 1 |
wtsapi32.dll |
bool wtsunregistersessionnotificationex(intptr, intptr) |
| 1 |
wtsapi32.dll |
int wtsgetactiveconsolesessionid() |
| 1 |
wtsapi32.dll |
intptr wtsopenserver(string) |
| 1 |
wtsapi32.dll |
bool wtsshutdownsystem(intptr, wtsshutdownflags) |
| 1 |
wtsapi32.dll |
bool wtssendmessage(intptr, int, string, int, string, int, int, int, dialogresul |
| 1 |
wtsapi32.dll |
bool wtsregistersessionnotificationex(intptr, intptr, wtsnotificationflags) |
| 1 |
wtsapi32.dll |
bool wtsregistersessionnotification(intptr, wtsnotificationflags) |
| 1 |
wtsapi32.dll |
bool wtslogoffsession(intptr, int, bool) |
| 1 |
wtsapi32.dll |
bool wtsfreememory(intptr) |
| 1 |
wtsapi32.dll |
bool wtsenumeratesessions(intptr, int, int, intptr&, int32&) |
| 1 |
wtsapi32.dll |
bool wtsdisconnectsession(intptr, int, bool) |
| 1 |
wtsapi32.dll |
void wtscloseserver(intptr) |