| MSDN |
|
1. NtOpenProcess |
|
|
| MSDN |
|
2. RtlpChangeQueryDebugBufferTarget |
|
NTDLL |
| MSDN |
|
3. RtlCreateUserThread |
|
NTDLL |
| MSDN |
|
4. NtSetInformationThread |
|
|
| MSDN |
|
5. NtTerminateThread |
|
|
| MSDN |
|
6. NtClose |
|
|
| MSDN |
|
7. NtResumeThread |
|
|
| MSDN |
|
8. NtSetLowWaitHighEventPair |
|
|
| MSDN |
|
9. NtWaitForSingleObject |
|
|
| MSDN |
|
10. NtQueryInformationThread |
|
|
| MSDN |
|
11. RtlQueryProcessModuleInformation |
|
NTDLL |
| MSDN |
|
12. RtlQueryProcessBackTraceInformation |
|
NTDLL |
| MSDN |
|
13. RtlQueryProcessLockInformation |
|
NTDLL |
| MSDN |
|
14. RtlQueryProcessHeapInformation |
|
NTDLL |
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}