System Call Symbol | Windows NT | Windows 2000 | Windows XP | Windows 2003 Server | Vista |
SP3 | SP4 | SP5 | SP6 | SP0 | SP1 | SP2 | SP3 | SP4 | SP0 | SP1 | SP2 | SP0 | SP1 | SP0 |
NtAcceptConnectPort | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 |
NtAccessCheck | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 |
NtAccessCheckAndAuditAlarm | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 |
NtAccessCheckByType | | | | | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 |
NtAccessCheckByTypeAndAuditAlarm | | | | | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 |
NtAccessCheckByTypeResultList | | | | | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 |
NtAccessCheckByTypeResultListAndAuditAlarm | | | | | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle | | | | | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 |
NtAddAtom | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 |
NtAddBootEntry | | | | | | | | | | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 |
NtAddDriverEntry | | | | | | | | | | | | | 0x000a | 0x000a | 0x000a |
NtAdjustGroupsToken | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x000a | 0x000a | 0x000a | 0x000b | 0x000b | 0x000b |
NtAdjustPrivilegesToken | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000b | 0x000b | 0x000b | 0x000c | 0x000c | 0x000c |
NtAlertResumeThread | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000c | 0x000c | 0x000c | 0x000d | 0x000d | 0x000d |
NtAlertThread | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000d | 0x000d | 0x000d | 0x000e | 0x000e | 0x000e |
NtAllocateLocallyUniqueId | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000e | 0x000e | 0x000e | 0x000f | 0x000f | 0x000f |
NtAllocateUserPhysicalPages | | | | | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000f | 0x000f | 0x000f | 0x0010 | 0x0010 | 0x0010 |
NtAllocateUuids | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x0010 | 0x0010 | 0x0010 | 0x0011 | 0x0011 | 0x0011 |
NtAllocateVirtualMemory | 0x000a | 0x000a | 0x000a | 0x000a | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0011 | 0x0011 | 0x0011 | 0x0012 | 0x0012 | 0x0012 |
NtAlpcAcceptConnectPort | | | | | | | | | | | | | | | 0x0013 |
NtAlpcCancelMessage | | | | | | | | | | | | | | | 0x0014 |
NtAlpcConnectPort | | | | | | | | | | | | | | | 0x0015 |
NtAlpcCreatePort | | | | | | | | | | | | | | | 0x0016 |
NtAlpcCreatePortSection | | | | | | | | | | | | | | | 0x0017 |
NtAlpcCreateResourceReserve | | | | | | | | | | | | | | | 0x0018 |
NtAlpcCreateSectionView | | | | | | | | | | | | | | | 0x0019 |
NtAlpcCreateSecurityContext | | | | | | | | | | | | | | | 0x001a |
NtAlpcDeletePortSection | | | | | | | | | | | | | | | 0x001b |
NtAlpcDeleteResourceReserve | | | | | | | | | | | | | | | 0x001c |
NtAlpcDeleteSectionView | | | | | | | | | | | | | | | 0x001d |
NtAlpcDeleteSecurityContext | | | | | | | | | | | | | | | 0x001e |
NtAlpcDisconnectPort | | | | | | | | | | | | | | | 0x001f |
NtAlpcImpersonateClientOfPort | | | | | | | | | | | | | | | 0x0020 |
NtAlpcOpenSenderProcess | | | | | | | | | | | | | | | 0x0021 |
NtAlpcOpenSenderThread | | | | | | | | | | | | | | | 0x0022 |
NtAlpcQueryInformation | | | | | | | | | | | | | | | 0x0023 |
NtAlpcQueryInformationMessage | | | | | | | | | | | | | | | 0x0024 |
NtAlpcSendWaitReceivePort | | | | | | | | | | | | | | | 0x0025 |
NtAlpcSetInformation | | | | | | | | | | | | | | | 0x0026 |
NtApphelpCacheControl | | | | | | | | | | | | | 0x0013 | 0x0013 | 0x0027 |
NtAreMappedFilesTheSame | | | | | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0012 | 0x0012 | 0x0012 | 0x0014 | 0x0014 | 0x0028 |
NtAssignProcessToJobObject | | | | | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0013 | 0x0013 | 0x0013 | 0x0015 | 0x0015 | 0x0029 |
NtCallbackReturn | 0x000b | 0x000b | 0x000b | 0x000b | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0014 | 0x0014 | 0x0014 | 0x0016 | 0x0016 | 0x002a |
NtCancelDeviceWakeupRequest | | | | | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0015 | 0x0015 | 0x0015 | 0x0017 | 0x0017 | 0x002b |
NtCancelIoFile | 0x000c | 0x000c | 0x000c | 0x000c | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0016 | 0x0016 | 0x0016 | 0x0018 | 0x0018 | 0x002c |
NtCancelIoFileEx | | | | | | | | | | | | | | | 0x0172 |
NtCancelSynchronousIoFile | | | | | | | | | | | | | | | 0x0173 |
NtCancelTimer | 0x000d | 0x000d | 0x000d | 0x000d | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0017 | 0x0017 | 0x0017 | 0x0019 | 0x0019 | 0x002d |
NtClearAllSavepointsTransaction | | | | | | | | | | | | | | | 0x011b |
NtClearEvent | 0x000e | 0x000e | 0x000e | 0x000e | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0018 | 0x0018 | 0x0018 | 0x001a | 0x001a | 0x002e |
NtClearMUILicenseInfo | | | | | | | | | | | | | | | 0x0187 |
NtClearSavepointTransaction | | | | | | | | | | | | | | | 0x011a |
NtClose | 0x000f | 0x000f | 0x000f | 0x000f | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0019 | 0x0019 | 0x0019 | 0x001b | 0x001b | 0x002f |
NtCloseObjectAuditAlarm | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x001a | 0x001a | 0x001a | 0x001c | 0x001c | 0x0030 |
NtCommitComplete | | | | | | | | | | | | | | | 0x005d |
NtCommitEnlistment | | | | | | | | | | | | | | | 0x0055 |
NtCommitTransaction | | | | | | | | | | | | | | | 0x0059 |
NtCompactKeys | | | | | | | | | | 0x001b | 0x001b | 0x001b | 0x001d | 0x001d | 0x0031 |
NtCompareTokens | | | | | | | | | | 0x001c | 0x001c | 0x001c | 0x001e | 0x001e | 0x0032 |
NtCompleteConnectPort | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001d | 0x001d | 0x001d | 0x001f | 0x001f | 0x0033 |
NtCompressKey | | | | | | | | | | 0x001e | 0x001e | 0x001e | 0x0020 | 0x0020 | 0x0034 |
NtConnectPort | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001f | 0x001f | 0x001f | 0x0021 | 0x0021 | 0x0035 |
NtContinue | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x0020 | 0x0020 | 0x0020 | 0x0022 | 0x0022 | 0x0036 |
NtCreateChannel | 0x00cd | 0x00cc | 0x00cc | 0x00cc | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | | | | | | |
NtCreateDebugObject | | | | | | | | | | 0x0021 | 0x0021 | 0x0021 | 0x0023 | 0x0023 | 0x0037 |
NtCreateDirectoryObject | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x0022 | 0x0022 | 0x0022 | 0x0024 | 0x0024 | 0x0038 |
NtCreateEnlistment | | | | | | | | | | | | | | | 0x006d |
NtCreateEvent | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x0023 | 0x0023 | 0x0023 | 0x0025 | 0x0025 | 0x0039 |
NtCreateEventPair | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x0024 | 0x0024 | 0x0024 | 0x0026 | 0x0026 | 0x003a |
NtCreateFile | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0025 | 0x0025 | 0x0025 | 0x0027 | 0x0027 | 0x003b |
NtCreateIoCompletion | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0026 | 0x0026 | 0x0026 | 0x0028 | 0x0028 | 0x003c |
NtCreateJobObject | | | | | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0027 | 0x0027 | 0x0027 | 0x0029 | 0x0029 | 0x003d |
NtCreateJobSet | | | | | | | | | | 0x0028 | 0x0028 | 0x0028 | 0x002a | 0x002a | 0x003e |
NtCreateKey | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0029 | 0x0029 | 0x0029 | 0x002b | 0x002b | 0x003f |
NtCreateKeyedEvent | | | | | | | | | | 0x0117 | 0x0117 | 0x0117 | 0x0121 | 0x0121 | 0x0169 |
NtCreateMailslotFile | 0x001a | 0x001a | 0x001a | 0x001a | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x002a | 0x002a | 0x002a | 0x002c | 0x002c | 0x0040 |
NtCreateMutant | 0x001b | 0x001b | 0x001b | 0x001b | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x002b | 0x002b | 0x002b | 0x002d | 0x002d | 0x0041 |
NtCreateNamedPipeFile | 0x001c | 0x001c | 0x001c | 0x001c | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x002c | 0x002c | 0x002c | 0x002e | 0x002e | 0x0042 |
NtCreatePagingFile | 0x001d | 0x001d | 0x001d | 0x001d | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x002d | 0x002d | 0x002d | 0x002f | 0x002f | 0x0044 |
NtCreatePort | 0x001e | 0x001c | 0x001e | 0x001e | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x002e | 0x002e | 0x002e | 0x0030 | 0x0030 | 0x0045 |
NtCreatePrivateNamespace | | | | | | | | | | | | | | | 0x0043 |
NtCreateProcess | 0x001f | 0x001f | 0x001f | 0x001f | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x002f | 0x002f | 0x002f | 0x0031 | 0x0031 | 0x0046 |
NtCreateProcessEx | | | | | | | | | | 0x0030 | 0x0030 | 0x0030 | 0x0032 | 0x0032 | 0x0047 |
NtCreateProfile | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x0031 | 0x0031 | 0x0031 | 0x0033 | 0x0033 | 0x0048 |
NtCreateResourceManager | | | | | | | | | | | | | | | 0x0069 |
NtCreateSection | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x0032 | 0x0032 | 0x0032 | 0x0034 | 0x0034 | 0x0049 |
NtCreateSemaphore | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x0033 | 0x0033 | 0x0033 | 0x0035 | 0x0035 | 0x004a |
NtCreateSymbolicLinkObject | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x0034 | 0x0034 | 0x0034 | 0x0036 | 0x0036 | 0x004b |
NtCreateThread | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x0035 | 0x0035 | 0x0035 | 0x0037 | 0x0037 | 0x004c |
NtCreateThreadEx | | | | | | | | | | | | | | | 0x0181 |
NtCreateTimer | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x0036 | 0x0036 | 0x0036 | 0x0038 | 0x0038 | 0x004d |
NtCreateToken | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0037 | 0x0037 | 0x0037 | 0x0039 | 0x0039 | 0x004e |
NtCreateTransaction | | | | | | | | | | | | | | | 0x004f |
NtCreateTransactionManager | | | | | | | | | | | | | | | 0x0062 |
NtCreateWaitablePort | | | | | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0038 | 0x0038 | 0x0038 | 0x003a | 0x003a | 0x0072 |
NtCreateWinStation | | 0x00d3 | | | | | | | | | | | | | |
NtCreateWorkerFactory | | | | | | | | | | | | | | | 0x017a |
NtDebugActiveProcess | | | | | | | | | | 0x0039 | 0x0039 | 0x0039 | 0x003b | 0x003b | 0x0073 |
NtDebugContinue | | | | | | | | | | 0x003a | 0x003a | 0x003a | 0x003c | 0x003c | 0x0074 |
NtDelayExecution | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x003b | 0x003b | 0x003b | 0x003d | 0x003d | 0x0075 |
NtDeleteAtom | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x003c | 0x003c | 0x003c | 0x003e | 0x003e | 0x0076 |
NtDeleteBootEntry | | | | | | | | | | 0x003d | 0x003d | 0x003d | 0x003f | 0x003f | 0x0077 |
NtDeleteDriverEntry | | | | | | | | | | | | | 0x0040 | 0x0040 | 0x0078 |
NtDeleteFile | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x003e | 0x003e | 0x003e | 0x0041 | 0x0041 | 0x0079 |
NtDeleteKey | 0x002a | 0x002a | 0x002a | 0x002a | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x003f | 0x003f | 0x003f | 0x0042 | 0x0042 | 0x007a |
NtDeleteObjectAuditAlarm | 0x002b | 0x002b | 0x002b | 0x002b | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0040 | 0x0040 | 0x0040 | 0x0043 | 0x0043 | 0x007c |
NtDeletePrivateNamespace | | | | | | | | | | | | | | | 0x007b |
NtDeleteValueKey | 0x002c | 0x002c | 0x002c | 0x002c | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0041 | 0x0041 | 0x0041 | 0x0044 | 0x0044 | 0x007d |
NtDeviceIoControlFile | 0x002d | 0x002d | 0x002d | 0x002d | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0042 | 0x0042 | 0x0042 | 0x0045 | 0x0045 | 0x007e |
NtDisplayString | 0x002e | 0x002e | 0x002e | 0x002e | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0043 | 0x0043 | 0x0043 | 0x0046 | 0x0046 | 0x007f |
NtDuplicateObject | 0x002f | 0x002f | 0x002f | 0x002f | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x0044 | 0x0044 | 0x0044 | 0x0047 | 0x0047 | 0x0080 |
NtDuplicateToken | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x0045 | 0x0045 | 0x0045 | 0x0048 | 0x0048 | 0x0081 |
NtEnumerateBootEntries | | | | | | | | | | 0x0046 | 0x0046 | 0x0046 | 0x0049 | 0x0049 | 0x0082 |
NtEnumerateDriverEntries | | | | | | | | | | | | | 0x004a | 0x004a | 0x0083 |
NtEnumerateKey | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x0047 | 0x0047 | 0x0047 | 0x004b | 0x004b | 0x0084 |
NtEnumerateSystemEnvironmentValuesEx | | | | | | | | | | 0x0048 | 0x0048 | 0x0048 | 0x004c | 0x004c | 0x0085 |
NtEnumerateValueKey | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x0049 | 0x0049 | 0x0049 | 0x004d | 0x004d | 0x0086 |
NtExtendSection | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x004a | 0x004a | 0x004a | 0x004e | 0x004e | 0x0087 |
NtFilterToken | | | | | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x004b | 0x004b | 0x004b | 0x004f | 0x004f | 0x0088 |
NtFindAtom | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x004c | 0x004c | 0x004c | 0x0050 | 0x0050 | 0x0089 |
NtFlushBuffersFile | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x004d | 0x004d | 0x004d | 0x0051 | 0x0051 | 0x008a |
NtFlushInstallUILanguage | | | | | | | | | | | | | | | 0x0189 |
NtFlushInstructionCache | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x004e | 0x004e | 0x004e | 0x0052 | 0x0052 | 0x008b |
NtFlushKey | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x004f | 0x004f | 0x004f | 0x0053 | 0x0053 | 0x008c |
NtFlushProcessWriteBuffers | | | | | | | | | | | | | | | 0x008d |
NtFlushVirtualMemory | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0050 | 0x0050 | 0x0050 | 0x0054 | 0x0054 | 0x008e |
NtFlushWriteBuffer | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0051 | 0x0051 | 0x0051 | 0x0055 | 0x0055 | 0x008f |
NtFreeUserPhysicalPages | | | | | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0052 | 0x0052 | 0x0052 | 0x0056 | 0x0056 | 0x0090 |
NtFreeVirtualMemory | 0x003a | 0x003a | 0x003a | 0x003a | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0053 | 0x0053 | 0x0053 | 0x0057 | 0x0057 | 0x0091 |
NtFreezeRegistry | | | | | | | | | | | | | | | 0x0092 |
NtFreezeTransactions | | | | | | | | | | | | | | | 0x0093 |
NtFsControlFile | 0x003b | 0x003b | 0x003b | 0x003b | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0054 | 0x0054 | 0x0054 | 0x0058 | 0x0058 | 0x0094 |
NtGetContextThread | 0x003c | 0x003c | 0x003c | 0x003c | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0055 | 0x0055 | 0x0055 | 0x0059 | 0x0059 | 0x0095 |
NtGetCurrentProcessorNumber | | | | | | | | | | | | | 0x0126 | 0x0126 | 0x016e |
NtGetDevicePowerState | | | | | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x0056 | 0x0056 | 0x0056 | 0x005a | 0x005a | 0x0096 |
NtGetMUILicenseInfo | | | | | | | | | | | | | | | 0x0186 |
NtGetMUIRegistryInfo | | | | | | | | | | | | | | | 0x018a |
NtGetNextProcess | | | | | | | | | | | | | | | 0x0170 |
NtGetNextThread | | | | | | | | | | | | | | | 0x0171 |
NtGetNlsSectionPtr | | | | | | | | | | | | | | | 0x0097 |
NtGetNotificationResourceManager | | | | | | | | | | | | | | | 0x006b |
NtGetPlugPlayEvent | 0x003d | 0x003d | 0x003d | 0x003d | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x0057 | 0x0057 | 0x0057 | 0x005b | 0x005b | 0x0098 |
NtGetTickCount | 0x003e | 0x003e | 0x003e | 0x003e | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | | | | | | |
NtGetWriteWatch | | | | | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x0058 | 0x0058 | 0x0058 | 0x005c | 0x005c | 0x0099 |
NtImpersonateAnonymousToken | | | | | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x0059 | 0x0059 | 0x0059 | 0x005d | 0x005d | 0x009a |
NtImpersonateClientOfPort | 0x003f | 0x003f | 0x003f | 0x003f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x005a | 0x005a | 0x005a | 0x005e | 0x005e | 0x009b |
NtImpersonateThread | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x005b | 0x005b | 0x005b | 0x005f | 0x005f | 0x009c |
NtInitializeNlsFiles | | | | | | | | | | | | | | | 0x009d |
NtInitializeRegistry | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x005c | 0x005c | 0x005c | 0x0060 | 0x0060 | 0x009e |
NtInitiatePowerAction | | | | | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x005d | 0x005d | 0x005d | 0x0061 | 0x0061 | 0x009f |
NtIsProcessInJob | | | | | | | | | | 0x005e | 0x005e | 0x005e | 0x0062 | 0x0062 | 0x00a0 |
NtIsSystemResumeAutomatic | | | | | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x005f | 0x005f | 0x005f | 0x0063 | 0x0063 | 0x00a1 |
NtIsUILanguageComitted | | | | | | | | | | | | | | | 0x0188 |
NtListTransactions | | | | | | | | | | | | | | | 0x0185 |
NtListenChannel | 0x00ce | 0x00cd | 0x00cd | 0x00cd | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | | | | | | |
NtListenPort | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0060 | 0x0060 | 0x0060 | 0x0064 | 0x0064 | 0x00a2 |
NtLoadDriver | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0061 | 0x0061 | 0x0061 | 0x0065 | 0x0065 | 0x00a3 |
NtLoadKey | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0062 | 0x0062 | 0x0062 | 0x0066 | 0x0066 | 0x00a4 |
NtLoadKey2 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0063 | 0x0063 | 0x0063 | 0x0067 | 0x0067 | 0x00a5 |
NtLoadKeyEx | | | | | | | | | | | | | 0x0068 | 0x0068 | 0x00a6 |
NtLockFile | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0064 | 0x0064 | 0x0064 | 0x0069 | 0x0069 | 0x00a7 |
NtLockProductActivationKeys | | | | | | | | | | 0x0065 | 0x0065 | 0x0065 | 0x006a | 0x006a | 0x00a8 |
NtLockRegistryKey | | | | | | | | | | 0x0066 | 0x0066 | 0x0066 | 0x006b | 0x006b | 0x00a9 |
NtLockVirtualMemory | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0067 | 0x0067 | 0x0067 | 0x006c | 0x006c | 0x00aa |
NtMakePermanentObject | | | | | | | | | | 0x0068 | 0x0068 | 0x0068 | 0x006d | 0x006d | 0x00ab |
NtMakeTemporaryObject | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x0069 | 0x0069 | 0x0069 | 0x006e | 0x006e | 0x00ac |
NtMapCMFModule | | | | | | | | | | | | | | | 0x0184 |
NtMapUserPhysicalPages | | | | | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x006a | 0x006a | 0x006a | 0x006f | 0x006f | 0x00ad |
NtMapUserPhysicalPagesScatter | | | | | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x006b | 0x006b | 0x006b | 0x0070 | 0x0070 | 0x00ae |
NtMapViewOfSection | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x006c | 0x006c | 0x006c | 0x0071 | 0x0071 | 0x00af |
NtMarshallTransaction | | | | | | | | | | | | | | | 0x0177 |
NtModifyBootEntry | | | | | | | | | | 0x006d | 0x006d | 0x006d | 0x0072 | 0x0072 | 0x00b0 |
NtModifyDriverEntry | | | | | | | | | | | | | 0x0073 | 0x0073 | 0x00b1 |
NtNotifyChangeDirectoryFile | 0x004a | 0x004a | 0x004a | 0x004a | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x006e | 0x006e | 0x006e | 0x0074 | 0x0074 | 0x00b2 |
NtNotifyChangeKey | 0x004b | 0x004b | 0x004b | 0x004b | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x006f | 0x006f | 0x006f | 0x0075 | 0x0075 | 0x00b3 |
NtNotifyChangeMultipleKeys | | | | | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0070 | 0x0070 | 0x0070 | 0x0076 | 0x0076 | 0x00b4 |
NtOpenChannel | 0x00cf | 0x00ce | 0x00ce | 0x00ce | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | | | | | | |
NtOpenDirectoryObject | 0x004c | 0x004c | 0x004c | 0x004c | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0071 | 0x0071 | 0x0071 | 0x0077 | 0x0077 | 0x00b5 |
NtOpenEnlistment | | | | | | | | | | | | | | | 0x006e |
NtOpenEvent | 0x004d | 0x004d | 0x004d | 0x004d | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0072 | 0x0072 | 0x0072 | 0x0078 | 0x0078 | 0x00b6 |
NtOpenEventPair | 0x004e | 0x004e | 0x004e | 0x004e | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0073 | 0x0073 | 0x0073 | 0x0079 | 0x0079 | 0x00b7 |
NtOpenFile | 0x004f | 0x004f | 0x004f | 0x004f | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0074 | 0x0074 | 0x0074 | 0x007a | 0x007a | 0x00b8 |
NtOpenIoCompletion | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0075 | 0x0075 | 0x0075 | 0x007b | 0x007b | 0x00b9 |
NtOpenJobObject | | | | | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0076 | 0x0076 | 0x0076 | 0x007c | 0x007c | 0x00ba |
NtOpenKey | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x0077 | 0x0077 | 0x0077 | 0x007d | 0x007d | 0x00bb |
NtOpenKeyedEvent | | | | | | | | | | 0x0118 | 0x0118 | 0x0118 | 0x0122 | 0x0122 | 0x016a |
NtOpenMutant | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0078 | 0x0078 | 0x0078 | 0x007e | 0x007e | 0x00bc |
NtOpenObjectAuditAlarm | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0079 | 0x0079 | 0x0079 | 0x007f | 0x007f | 0x00be |
NtOpenPrivateNamespace | | | | | | | | | | | | | | | 0x00bd |
NtOpenProcess | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x006a | 0x006a | 0x006a | 0x006a | 0x006a | 0x007a | 0x007a | 0x007a | 0x0080 | 0x0080 | 0x00bf |
NtOpenProcessToken | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x006b | 0x006b | 0x006b | 0x006b | 0x006b | 0x007b | 0x007b | 0x007b | 0x0081 | 0x0081 | 0x00c0 |
NtOpenProcessTokenEx | | | | | | | | | | 0x007c | 0x007c | 0x007c | 0x0082 | 0x0082 | 0x00c1 |
NtOpenResourceManager | | | | | | | | | | | | | | | 0x006a |
NtOpenSection | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x006c | 0x006c | 0x006c | 0x006c | 0x006c | 0x007d | 0x007d | 0x007d | 0x0083 | 0x0083 | 0x00c2 |
NtOpenSemaphore | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x007e | 0x007e | 0x007e | 0x0084 | 0x0084 | 0x00c3 |
NtOpenSession | | | | | | | | | | | | | | | 0x00c4 |
NtOpenSymbolicLinkObject | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x007f | 0x007f | 0x007f | 0x0085 | 0x0085 | 0x00c5 |
NtOpenThread | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x0080 | 0x0080 | 0x0080 | 0x0086 | 0x0086 | 0x00c6 |
NtOpenThreadToken | 0x005a | 0x005a | 0x005a | 0x005a | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0081 | 0x0081 | 0x0081 | 0x0087 | 0x0087 | 0x00c7 |
NtOpenThreadTokenEx | | | | | | | | | | 0x0082 | 0x0082 | 0x0082 | 0x0088 | 0x0088 | 0x00c8 |
NtOpenTimer | 0x005b | 0x005b | 0x005b | 0x005b | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0083 | 0x0083 | 0x0083 | 0x0089 | 0x0089 | 0x00c9 |
NtOpenTransaction | | | | | | | | | | | | | | | 0x0050 |
NtOpenTransactionManager | | | | | | | | | | | | | | | 0x0063 |
NtOpenWinStation | | 0x00d4 | | | | | | | | | | | | | |
NtPlugPlayControl | 0x005c | 0x005c | 0x005c | 0x005c | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0084 | 0x0084 | 0x0084 | 0x008a | 0x008a | 0x00ca |
NtPowerInformation | | | | | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0085 | 0x0085 | 0x0085 | 0x008b | 0x008b | 0x00cb |
NtPrePrepareComplete | | | | | | | | | | | | | | | 0x005b |
NtPrePrepareEnlistment | | | | | | | | | | | | | | | 0x0053 |
NtPrepareComplete | | | | | | | | | | | | | | | 0x005c |
NtPrepareEnlistment | | | | | | | | | | | | | | | 0x0054 |
NtPrivilegeCheck | 0x005d | 0x005d | 0x005d | 0x005d | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0086 | 0x0086 | 0x0086 | 0x008c | 0x008c | 0x00cc |
NtPrivilegeObjectAuditAlarm | 0x005f | 0x005f | 0x005f | 0x005f | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0087 | 0x0087 | 0x0087 | 0x008d | 0x008d | 0x00cd |
NtPrivilegedServiceAuditAlarm | 0x005e | 0x005e | 0x005e | 0x005e | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0088 | 0x0088 | 0x0088 | 0x008e | 0x008e | 0x00ce |
NtPropagationComplete | | | | | | | | | | | | | | | 0x0178 |
NtPropagationFailed | | | | | | | | | | | | | | | 0x0179 |
NtProtectVirtualMemory | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0089 | 0x0089 | 0x0089 | 0x008f | 0x008f | 0x00cf |
NtPullTransaction | | | | | | | | | | | | | | | 0x0176 |
NtPulseEvent | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x008a | 0x008a | 0x008a | 0x0090 | 0x0090 | 0x00d0 |
NtQueryAttributesFile | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x008b | 0x008b | 0x008b | 0x0091 | 0x0091 | 0x00d1 |
NtQueryBootEntryOrder | | | | | | | | | | 0x008c | 0x008c | 0x008c | 0x0092 | 0x0092 | 0x00d2 |
NtQueryBootOptions | | | | | | | | | | 0x008d | 0x008d | 0x008d | 0x0093 | 0x0093 | 0x00d3 |
NtQueryDebugFilterState | | | | | | | | | | 0x008e | 0x008e | 0x008e | 0x0094 | 0x0094 | 0x00d4 |
NtQueryDefaultLocale | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x008f | 0x008f | 0x008f | 0x0095 | 0x0095 | 0x00d5 |
NtQueryDefaultUILanguage | | | | | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x0090 | 0x0090 | 0x0090 | 0x0096 | 0x0096 | 0x00d6 |
NtQueryDirectoryFile | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x0091 | 0x0091 | 0x0091 | 0x0097 | 0x0097 | 0x00d7 |
NtQueryDirectoryObject | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x0092 | 0x0092 | 0x0092 | 0x0098 | 0x0098 | 0x00d8 |
NtQueryDriverEntryOrder | | | | | | | | | | | | | 0x0099 | 0x0099 | 0x00d9 |
NtQueryEaFile | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x0093 | 0x0093 | 0x0093 | 0x009a | 0x009a | 0x00da |
NtQueryEvent | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0094 | 0x0094 | 0x0094 | 0x009b | 0x009b | 0x00db |
NtQueryFullAttributesFile | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0095 | 0x0095 | 0x0095 | 0x009c | 0x009c | 0x00dc |
NtQueryInformationAtom | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0096 | 0x0096 | 0x0096 | 0x009d | 0x009d | 0x00dd |
NtQueryInformationEnlistment | | | | | | | | | | | | | | | 0x0070 |
NtQueryInformationFile | 0x006a | 0x006a | 0x006a | 0x006a | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0097 | 0x0097 | 0x0097 | 0x009e | 0x009e | 0x00de |
NtQueryInformationJobObject | | | | | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0098 | 0x0098 | 0x0098 | 0x009f | 0x009f | 0x00df |
NtQueryInformationPort | 0x006c | 0x006c | 0x006c | 0x006c | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0099 | 0x0099 | 0x0099 | 0x00a0 | 0x00a0 | 0x00e0 |
NtQueryInformationProcess | 0x006d | 0x006d | 0x006d | 0x006d | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x009a | 0x009a | 0x009a | 0x00a1 | 0x00a1 | 0x00e1 |
NtQueryInformationResourceManager | | | | | | | | | | | | | | | 0x006c |
NtQueryInformationThread | 0x006e | 0x006e | 0x006e | 0x006e | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x009b | 0x009b | 0x009b | 0x00a2 | 0x00a2 | 0x00e2 |
NtQueryInformationToken | 0x006f | 0x006f | 0x006f | 0x006f | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x009c | 0x009c | 0x009c | 0x00a3 | 0x00a3 | 0x00e3 |
NtQueryInformationTransaction | | | | | | | | | | | | | | | 0x0051 |
NtQueryInformationTransactionManager | | | | | | | | | | | | | | | 0x0052 |
NtQueryInformationWorkerFactory | | | | | | | | | | | | | | | 0x017e |
NtQueryInstallUILanguage | | | | | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x009d | 0x009d | 0x009d | 0x00a4 | 0x00a4 | 0x00e4 |
NtQueryIntervalProfile | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x008a | 0x008a | 0x008a | 0x008a | 0x008a | 0x009e | 0x009e | 0x009e | 0x00a5 | 0x00a5 | 0x00e5 |
NtQueryIoCompletion | 0x006b | 0x006b | 0x006b | 0x006b | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x009f | 0x009f | 0x009f | 0x00a6 | 0x00a6 | 0x00e6 |
NtQueryKey | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x008b | 0x008b | 0x008b | 0x008b | 0x008b | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a7 | 0x00a7 | 0x00e7 |
NtQueryLicenseValue | | | | | | | | | | | | | | | 0x0183 |
NtQueryMultipleValueKey | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x008c | 0x008c | 0x008c | 0x008c | 0x008c | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a8 | 0x00a8 | 0x00e8 |
NtQueryMutant | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x008d | 0x008d | 0x008d | 0x008d | 0x008d | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a9 | 0x00a9 | 0x00e9 |
NtQueryObject | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x008e | 0x008e | 0x008e | 0x008e | 0x008e | 0x00a3 | 0x00a3 | 0x00a3 | 0x00aa | 0x00aa | 0x00ea |
NtQueryOleDirectoryFile | 0x0075 | 0x0075 | 0x0075 | 0x0075 | | | | | | | | | | | |
NtQueryOpenSubKeys | | | | | 0x008f | 0x008f | 0x008f | 0x008f | 0x008f | 0x00a4 | 0x00a4 | 0x00a4 | 0x00ab | 0x00ab | 0x00eb |
NtQueryOpenSubKeysEx | | | | | | | | | | | | | 0x00ac | 0x00ac | 0x00ec |
NtQueryPerformanceCounter | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00ad | 0x00ad | 0x00ed |
NtQueryPortInformationProcess | | | | | | | | | | 0x011b | 0x011b | 0x011b | 0x0125 | 0x0125 | 0x016d |
NtQueryQuotaInformationFile | | | | | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00ae | 0x00ae | 0x00ee |
NtQuerySection | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00af | 0x00af | 0x00ef |
NtQuerySecurityObject | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0093 | 0x0093 | 0x0093 | 0x0093 | 0x0093 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00b0 | 0x00b0 | 0x00f0 |
NtQuerySemaphore | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0094 | 0x0094 | 0x0094 | 0x0094 | 0x0094 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00b1 | 0x00b1 | 0x00f1 |
NtQuerySymbolicLinkObject | 0x007a | 0x007a | 0x007a | 0x007a | 0x0095 | 0x0095 | 0x0095 | 0x0095 | 0x0095 | 0x00aa | 0x00aa | 0x00aa | 0x00b2 | 0x00b2 | 0x00f2 |
NtQuerySystemEnvironmentValue | 0x007b | 0x007b | 0x007b | 0x007b | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x00ab | 0x00ab | 0x00ab | 0x00b3 | 0x00b3 | 0x00f3 |
NtQuerySystemEnvironmentValueEx | | | | | | | | | | 0x00ac | 0x00ac | 0x00ac | 0x00b4 | 0x00b4 | 0x00f4 |
NtQuerySystemInformation | 0x007c | 0x007c | 0x007c | 0x007c | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x00ad | 0x00ad | 0x00ad | 0x00b5 | 0x00b5 | 0x00f5 |
NtQuerySystemTime | 0x007d | 0x007d | 0x007d | 0x007d | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x00ae | 0x00ae | 0x00ae | 0x00b6 | 0x00b6 | 0x00f6 |
NtQueryTimer | 0x007e | 0x007e | 0x007e | 0x007e | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x00af | 0x00af | 0x00af | 0x00b7 | 0x00b7 | 0x00f7 |
NtQueryTimerResolution | 0x007f | 0x007f | 0x007f | 0x007f | 0x009a | 0x009a | 0x009a | 0x009a | 0x009a | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b8 | 0x00b8 | 0x00f8 |
NtQueryValueKey | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x009b | 0x009b | 0x009b | 0x009b | 0x009b | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b9 | 0x00b9 | 0x00f9 |
NtQueryVirtualMemory | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x009c | 0x009c | 0x009c | 0x009c | 0x009c | 0x00b2 | 0x00b2 | 0x00b2 | 0x00ba | 0x00ba | 0x00fa |
NtQueryVolumeInformationFile | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x009d | 0x009d | 0x009d | 0x009d | 0x009d | 0x00b3 | 0x00b3 | 0x00b3 | 0x00bb | 0x00bb | 0x00fb |
NtQueryWinStationInformation | | 0x00d5 | | | | | | | | | | | | | |
NtQueueApcThread | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x009e | 0x009e | 0x009e | 0x009e | 0x009e | 0x00b4 | 0x00b4 | 0x00b4 | 0x00bc | 0x00bc | 0x00fc |
NtRaiseException | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x009f | 0x009f | 0x009f | 0x009f | 0x009f | 0x00b5 | 0x00b5 | 0x00b5 | 0x00bd | 0x00bd | 0x00fd |
NtRaiseHardError | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00be | 0x00be | 0x00fe |
NtReadFile | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00bf | 0x00bf | 0x00ff |
NtReadFileScatter | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00c0 | 0x00c0 | 0x0100 |
NtReadOnlyEnlistment | | | | | | | | | | | | | | | 0x0056 |
NtReadRequestData | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00c1 | 0x00c1 | 0x0101 |
NtReadVirtualMemory | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00ba | 0x00ba | 0x00ba | 0x00c2 | 0x00c2 | 0x0102 |
NtRecoverEnlistment | | | | | | | | | | | | | | | 0x0066 |
NtRecoverResourceManager | | | | | | | | | | | | | | | 0x0067 |
NtRecoverTransactionManager | | | | | | | | | | | | | | | 0x0068 |
NtRegisterProtocolAddressInformation | | | | | | | | | | | | | | | 0x0175 |
NtRegisterThreadTerminatePort | 0x008a | 0x008a | 0x008a | 0x008a | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00bb | 0x00bb | 0x00bb | 0x00c3 | 0x00c3 | 0x0103 |
NtReleaseKeyedEvent | | | | | | | | | | 0x0119 | 0x0119 | 0x0119 | 0x0123 | 0x0123 | 0x016b |
NtReleaseMutant | 0x008b | 0x008b | 0x008b | 0x008b | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00bc | 0x00bc | 0x00bc | 0x00c4 | 0x00c4 | 0x0104 |
NtReleaseSemaphore | 0x008c | 0x008c | 0x008c | 0x008c | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00bd | 0x00bd | 0x00bd | 0x00c5 | 0x00c5 | 0x0105 |
NtReleaseWorkerFactoryWorker | | | | | | | | | | | | | | | 0x017b |
NtRemoveIoCompletion | 0x008d | 0x008d | 0x008d | 0x008d | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00be | 0x00be | 0x00be | 0x00c6 | 0x00c6 | 0x0106 |
NtRemoveIoCompletionEx | | | | | | | | | | | | | | | 0x0174 |
NtRemoveProcessDebug | | | | | | | | | | 0x00bf | 0x00bf | 0x00bf | 0x00c7 | 0x00c7 | 0x0107 |
NtRenameKey | | | | | | | | | | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c8 | 0x00c8 | 0x0108 |
NtRenameTransactionManager | | | | | | | | | | | | | | | 0x0064 |
NtReplaceKey | 0x008e | 0x008e | 0x008e | 0x008e | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c9 | 0x00c9 | 0x0109 |
NtReplyPort | 0x008f | 0x008f | 0x008f | 0x008f | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00c2 | 0x00c2 | 0x00c2 | 0x00ca | 0x00ca | 0x010a |
NtReplyWaitReceivePort | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00c3 | 0x00c3 | 0x00c3 | 0x00cb | 0x00cb | 0x010b |
NtReplyWaitReceivePortEx | | | | | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00c4 | 0x00c4 | 0x00c4 | 0x00cc | 0x00cc | 0x010c |
NtReplyWaitReplyPort | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00c5 | 0x00c5 | 0x00c5 | 0x00cd | 0x00cd | 0x010d |
NtReplyWaitSendChannel | 0x00d0 | 0x00cf | 0x00cf | 0x00cf | 0x00f4 | 0x00f4 | 0x00f4 | 0x00f4 | 0x00f4 | | | | | | |
NtRequestDeviceWakeup | | | | | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00c6 | 0x00c6 | 0x00c6 | 0x00ce | 0x00ce | 0x010e |
NtRequestPort | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00c7 | 0x00c7 | 0x00c7 | 0x00cf | 0x00cf | 0x010f |
NtRequestWaitReplyPort | 0x0093 | 0x0093 | 0x0093 | 0x0093 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00d0 | 0x00d0 | 0x0110 |
NtRequestWakeupLatency | | | | | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00d1 | 0x00d1 | 0x0111 |
NtResetEvent | 0x0094 | 0x0094 | 0x0094 | 0x0094 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00ca | 0x00ca | 0x00ca | 0x00d2 | 0x00d2 | 0x0112 |
NtResetWriteWatch | | | | | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00cb | 0x00cb | 0x00cb | 0x00d3 | 0x00d3 | 0x0113 |
NtRestoreKey | 0x0095 | 0x0095 | 0x0095 | 0x0095 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00cc | 0x00cc | 0x00cc | 0x00d4 | 0x00d4 | 0x0114 |
NtResumeProcess | | | | | | | | | | 0x00cd | 0x00cd | 0x00cd | 0x00d5 | 0x00d5 | 0x0115 |
NtResumeThread | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00ce | 0x00ce | 0x00ce | 0x00d6 | 0x00d6 | 0x0116 |
NtRollbackComplete | | | | | | | | | | | | | | | 0x0057 |
NtRollbackEnlistment | | | | | | | | | | | | | | | 0x0058 |
NtRollbackSavepointTransaction | | | | | | | | | | | | | | | 0x011c |
NtRollbackTransaction | | | | | | | | | | | | | | | 0x005a |
NtRollforwardTransactionManager | | | | | | | | | | | | | | | 0x0065 |
NtSaveKey | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00cf | 0x00cf | 0x00cf | 0x00d7 | 0x00d7 | 0x0117 |
NtSaveKeyEx | | | | | | | | | | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d8 | 0x00d8 | 0x0118 |
NtSaveMergedKeys | | | | | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d9 | 0x00d9 | 0x0119 |
NtSavepointComplete | | | | | | | | | | | | | | | 0x011e |
NtSavepointTransaction | | | | | | | | | | | | | | | 0x011d |
NtSecureConnectPort | | | | | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00da | 0x00da | 0x011f |
NtSendWaitReplyChannel | 0x00d1 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00f5 | | | | | | |
NtSetBootEntryOrder | | | | | | | | | | 0x00d3 | 0x00d3 | 0x00d3 | 0x00db | 0x00db | 0x0120 |
NtSetBootOptions | | | | | | | | | | 0x00d4 | 0x00d4 | 0x00d4 | 0x00dc | 0x00dc | 0x0121 |
NtSetContextChannel | 0x00d2 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | | | | | | |
NtSetContextThread | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00d5 | 0x00d5 | 0x00d5 | 0x00dd | 0x00dd | 0x0122 |
NtSetDebugFilterState | | | | | | | | | | 0x00d6 | 0x00d6 | 0x00d6 | 0x00de | 0x00de | 0x0123 |
NtSetDefaultHardErrorPort | 0x009a | 0x009a | 0x009a | 0x009a | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00d7 | 0x00d7 | 0x00d7 | 0x00df | 0x00df | 0x0124 |
NtSetDefaultLocale | 0x009b | 0x009b | 0x009b | 0x009b | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00d8 | 0x00d8 | 0x00d8 | 0x00e0 | 0x00e0 | 0x0125 |
NtSetDefaultUILanguage | | | | | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00d9 | 0x00d9 | 0x00d9 | 0x00e1 | 0x00e1 | 0x0126 |
NtSetDriverEntryOrder | | | | | | | | | | | | | 0x00e2 | 0x00e2 | 0x0127 |
NtSetEaFile | 0x009c | 0x009c | 0x009c | 0x009c | 0x00be | 0x00be | 0x00be | 0x00be | 0x00be | 0x00da | 0x00da | 0x00da | 0x00e3 | 0x00e3 | 0x0128 |
NtSetEvent | 0x009d | 0x009d | 0x009d | 0x009d | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00db | 0x00db | 0x00db | 0x00e4 | 0x00e4 | 0x0129 |
NtSetEventBoostPriority | | | | | | | | | | 0x00dc | 0x00dc | 0x00dc | 0x00e5 | 0x00e5 | 0x012a |
NtSetHighEventPair | 0x009e | 0x009e | 0x009e | 0x009e | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00dd | 0x00dd | 0x00dd | 0x00e6 | 0x00e6 | 0x012b |
NtSetHighWaitLowEventPair | 0x009f | 0x009f | 0x009f | 0x009f | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00de | 0x00de | 0x00de | 0x00e7 | 0x00e7 | 0x012c |
NtSetHighWaitLowThread | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | | | | | | | | | | | |
NtSetInformationDebugObject | | | | | | | | | | 0x00df | 0x00df | 0x00df | 0x00e8 | 0x00e8 | 0x012d |
NtSetInformationEnlistment | | | | | | | | | | | | | | | 0x006f |
NtSetInformationFile | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e9 | 0x00e9 | 0x012e |
NtSetInformationJobObject | | | | | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00ea | 0x00ea | 0x012f |
NtSetInformationKey | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00eb | 0x00eb | 0x0130 |
NtSetInformationObject | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00ec | 0x00ec | 0x0131 |
NtSetInformationProcess | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00ed | 0x00ed | 0x0132 |
NtSetInformationResourceManager | | | | | | | | | | | | | | | 0x0061 |
NtSetInformationThread | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00ee | 0x00ee | 0x0133 |
NtSetInformationToken | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00ef | 0x00ef | 0x0134 |
NtSetInformationTransaction | | | | | | | | | | | | | | | 0x005f |
NtSetInformationTransactionManager | | | | | | | | | | | | | | | 0x0060 |
NtSetInformationWorkerFactory | | | | | | | | | | | | | | | 0x017d |
NtSetIntervalProfile | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00f0 | 0x00f0 | 0x0135 |
NtSetIoCompletion | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00f1 | 0x00f1 | 0x0136 |
NtSetLdtEntries | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00e9 | 0x00e9 | 0x00e9 | 0x00f2 | 0x00f2 | 0x0137 |
NtSetLowEventPair | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00ea | 0x00ea | 0x00ea | 0x00f3 | 0x00f3 | 0x0138 |
NtSetLowWaitHighEventPair | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00cc | 0x00cc | 0x00cc | 0x00cc | 0x00cc | 0x00eb | 0x00eb | 0x00eb | 0x00f4 | 0x00f4 | 0x0139 |
NtSetLowWaitHighThread | 0x00ab | 0x00ab | 0x00ab | 0x00ab | | | | | | | | | | | |
NtSetQuotaInformationFile | | | | | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00ec | 0x00ec | 0x00ec | 0x00f5 | 0x00f5 | 0x013a |
NtSetSecurityObject | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00ed | 0x00ed | 0x00ed | 0x00f6 | 0x00f6 | 0x013b |
NtSetSystemEnvironmentValue | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00ee | 0x00ee | 0x00ee | 0x00f7 | 0x00f7 | 0x013c |
NtSetSystemEnvironmentValueEx | | | | | | | | | | 0x00ef | 0x00ef | 0x00ef | 0x00f8 | 0x00f8 | 0x013d |
NtSetSystemInformation | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f9 | 0x00f9 | 0x013e |
NtSetSystemPowerState | 0x00af | 0x00af | 0x00af | 0x00af | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00fa | 0x00fa | 0x013f |
NtSetSystemTime | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00fb | 0x00fb | 0x0140 |
NtSetThreadExecutionState | | | | | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00fc | 0x00fc | 0x0141 |
NtSetTimer | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00f4 | 0x00f4 | 0x00f4 | 0x00fd | 0x00fd | 0x0142 |
NtSetTimerResolution | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00fe | 0x00fe | 0x0143 |
NtSetUuidSeed | | | | | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00ff | 0x00ff | 0x0144 |
NtSetValueKey | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x0100 | 0x0100 | 0x0145 |
NtSetVolumeInformationFile | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x0101 | 0x0101 | 0x0146 |
NtSetWinStationInformation | | 0x00d6 | | | | | | | | | | | | | |
NtShutdownSystem | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x0102 | 0x0102 | 0x0147 |
NtShutdownWorkerFactory | | | | | | | | | | | | | | | 0x0180 |
NtSignalAndWaitForSingleObject | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00da | 0x00da | 0x00da | 0x00da | 0x00da | 0x00fa | 0x00fa | 0x00fa | 0x0103 | 0x0103 | 0x0148 |
NtSinglePhaseReject | | | | | | | | | | | | | | | 0x005e |
NtStartProfile | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00db | 0x00db | 0x00db | 0x00db | 0x00db | 0x00fb | 0x00fb | 0x00fb | 0x0104 | 0x0104 | 0x0149 |
NtStartTm | | | | | | | | | | | | | | | 0x0071 |
NtStopProfile | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00fc | 0x00fc | 0x00fc | 0x0105 | 0x0105 | 0x014a |
NtSuspendProcess | | | | | | | | | | 0x00fd | 0x00fd | 0x00fd | 0x0106 | 0x0106 | 0x014b |
NtSuspendThread | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00fe | 0x00fe | 0x00fe | 0x0107 | 0x0107 | 0x014c |
NtSystemDebugControl | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00de | 0x00de | 0x00de | 0x00de | 0x00de | 0x00ff | 0x00ff | 0x00ff | 0x0108 | 0x0108 | 0x014d |
NtTerminateJobObject | | | | | 0x00df | 0x00df | 0x00df | 0x00df | 0x00df | 0x0100 | 0x0100 | 0x0100 | 0x0109 | 0x0109 | 0x014e |
NtTerminateProcess | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x0101 | 0x0101 | 0x0101 | 0x010a | 0x010a | 0x014f |
NtTerminateThread | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x0102 | 0x0102 | 0x0102 | 0x010b | 0x010b | 0x0150 |
NtTestAlert | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x0103 | 0x0103 | 0x0103 | 0x010c | 0x010c | 0x0151 |
NtThawRegistry | | | | | | | | | | | | | | | 0x0152 |
NtThawTransactions | | | | | | | | | | | | | | | 0x0153 |
NtTraceControl | | | | | | | | | | | | | | | 0x0155 |
NtTraceEvent | | | | | | | | | | 0x0104 | 0x0104 | 0x0104 | 0x010d | 0x010d | 0x0154 |
NtTranslateFilePath | | | | | | | | | | 0x0105 | 0x0105 | 0x0105 | 0x010e | 0x010e | 0x0156 |
NtUnloadDriver | 0x00be | 0x00be | 0x00be | 0x00be | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x0106 | 0x0106 | 0x0106 | 0x010f | 0x010f | 0x0157 |
NtUnloadKey | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x0107 | 0x0107 | 0x0107 | 0x0110 | 0x0110 | 0x0158 |
NtUnloadKey2 | | | | | | | | | | | | | 0x0111 | 0x0111 | 0x0159 |
NtUnloadKeyEx | | | | | | | | | | 0x0108 | 0x0108 | 0x0108 | 0x0112 | 0x0112 | 0x015a |
NtUnlockFile | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x0109 | 0x0109 | 0x0109 | 0x0113 | 0x0113 | 0x015b |
NtUnlockVirtualMemory | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x010a | 0x010a | 0x010a | 0x0114 | 0x0114 | 0x015c |
NtUnmapViewOfSection | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x010b | 0x010b | 0x010b | 0x0115 | 0x0115 | 0x015d |
NtVdmControl | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x010c | 0x010c | 0x010c | 0x0116 | 0x0116 | 0x015e |
NtW32Call | 0x00cc | | | | | | | | | | | | | | |
NtWaitForDebugEvent | | | | | | | | | | 0x010d | 0x010d | 0x010d | 0x0117 | 0x0117 | 0x015f |
NtWaitForKeyedEvent | | | | | | | | | | 0x011a | 0x011a | 0x011a | 0x0124 | 0x0124 | 0x016c |
NtWaitForMultipleObjects | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00e9 | 0x00e9 | 0x00e9 | 0x00e9 | 0x00e9 | 0x010e | 0x010e | 0x010e | 0x0118 | 0x0118 | 0x0160 |
NtWaitForMultipleObjects32 | | | | | | | | | | | | | | 0x0127 | 0x016f |
NtWaitForSingleObject | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x010f | 0x010f | 0x010f | 0x0119 | 0x0119 | 0x0161 |
NtWaitForWorkViaWorkerFactory | | | | | | | | | | | | | | | 0x017c |
NtWaitHighEventPair | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x0110 | 0x0110 | 0x0110 | 0x011a | 0x011a | 0x0162 |
NtWaitLowEventPair | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x0111 | 0x0111 | 0x0111 | 0x011b | 0x011b | 0x0163 |
NtWorkerFactoryWorkerReady | | | | | | | | | | | | | | | 0x017f |
NtWriteErrorLogEntry | | 0x00d7 | | | | | | | | | | | | | |
NtWriteFile | 0x00c8 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x0112 | 0x0112 | 0x0112 | 0x011c | 0x011c | 0x0164 |
NtWriteFileGather | 0x00c9 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x0113 | 0x0113 | 0x0113 | 0x011d | 0x011d | 0x0165 |
NtWriteRequestData | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x0114 | 0x0114 | 0x0114 | 0x011e | 0x011e | 0x0166 |
NtWriteVirtualMemory | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x0115 | 0x0115 | 0x0115 | 0x011f | 0x011f | 0x0167 |
NtYieldExecution | 0x00d3 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x0116 | 0x0116 | 0x0116 | 0x0120 | 0x0120 | 0x0168 |