| 192 |
a3300 |
2 |
NtAcceptConnectPort |
| 193 |
a32c0 |
0 |
NtAccessCheck |
| 194 |
a37e0 |
29 |
NtAccessCheckAndAuditAlarm |
| 195 |
a3f10 |
63 |
NtAccessCheckByType |
| 196 |
a3de0 |
59 |
NtAccessCheckByTypeAndAuditAlarm |
| 197 |
a3f30 |
64 |
NtAccessCheckByTypeResultList |
| 198 |
a3f50 |
65 |
NtAccessCheckByTypeResultListAndAuditAlarm |
| 199 |
a3f70 |
66 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
| 200 |
a3f90 |
67 |
NtAcquireCrossVmMutant |
| 201 |
a3fb0 |
68 |
NtAcquireProcessActivityReference |
| 202 |
a3ba0 |
47 |
NtAddAtom |
| 203 |
a3fd0 |
69 |
NtAddAtomEx |
| 204 |
a3ff0 |
6a |
NtAddBootEntry |
| 205 |
a4010 |
6b |
NtAddDriverEntry |
| 206 |
a4030 |
6c |
NtAdjustGroupsToken |
| 207 |
a3ae0 |
41 |
NtAdjustPrivilegesToken |
| 208 |
a4050 |
6d |
NtAdjustTokenClaimsAndDeviceGroups |
| 209 |
a4070 |
6e |
NtAlertResumeThread |
| 210 |
a4090 |
6f |
NtAlertThread |
| 211 |
a40b0 |
70 |
NtAlertThreadByThreadId |
| 212 |
a40d0 |
71 |
NtAllocateLocallyUniqueId |
| 213 |
a40f0 |
72 |
NtAllocateReserveObject |
| 214 |
a4110 |
73 |
NtAllocateUserPhysicalPages |
| 215 |
a4130 |
74 |
NtAllocateUserPhysicalPagesEx |
| 216 |
a4150 |
75 |
NtAllocateUuids |
| 217 |
a35c0 |
18 |
NtAllocateVirtualMemory |
| 218 |
a4170 |
76 |
NtAllocateVirtualMemoryEx |
| 219 |
a4190 |
77 |
NtAlpcAcceptConnectPort |
| 220 |
a41b0 |
78 |
NtAlpcCancelMessage |
| 221 |
a41d0 |
79 |
NtAlpcConnectPort |
| 222 |
a41f0 |
7a |
NtAlpcConnectPortEx |
| 223 |
a4210 |
7b |
NtAlpcCreatePort |
| 224 |
a4230 |
7c |
NtAlpcCreatePortSection |
| 225 |
a4250 |
7d |
NtAlpcCreateResourceReserve |
| 226 |
a4270 |
7e |
NtAlpcCreateSectionView |
| 227 |
a4290 |
7f |
NtAlpcCreateSecurityContext |
| 228 |
a42b0 |
80 |
NtAlpcDeletePortSection |
| 229 |
a42d0 |
81 |
NtAlpcDeleteResourceReserve |
| 230 |
a42f0 |
82 |
NtAlpcDeleteSectionView |
| 231 |
a4310 |
83 |
NtAlpcDeleteSecurityContext |
| 232 |
a4330 |
84 |
NtAlpcDisconnectPort |
| 233 |
a4350 |
85 |
NtAlpcImpersonateClientContainerOfPort |
| 234 |
a4370 |
86 |
NtAlpcImpersonateClientOfPort |
| 235 |
a4390 |
87 |
NtAlpcOpenSenderProcess |
| 236 |
a43b0 |
88 |
NtAlpcOpenSenderThread |
| 237 |
a43d0 |
89 |
NtAlpcQueryInformation |
| 238 |
a43f0 |
8a |
NtAlpcQueryInformationMessage |
| 239 |
a4410 |
8b |
NtAlpcRevokeSecurityContext |
| 240 |
a4430 |
8c |
NtAlpcSendWaitReceivePort |
| 241 |
a4450 |
8d |
NtAlpcSetInformation |
| 242 |
a3c40 |
4c |
NtApphelpCacheControl |
| 243 |
a4470 |
8e |
NtAreMappedFilesTheSame |
| 244 |
a4490 |
8f |
NtAssignProcessToJobObject |
| 245 |
a44b0 |
90 |
NtAssociateWaitCompletionPacket |
| 246 |
a44d0 |
91 |
NtCallEnclave |
| 247 |
a3360 |
5 |
NtCallbackReturn |
| 248 |
a3e50 |
5d |
NtCancelIoFile |
| 249 |
a44f0 |
92 |
NtCancelIoFileEx |
| 250 |
a4510 |
93 |
NtCancelSynchronousIoFile |
| 251 |
a3ed0 |
61 |
NtCancelTimer |
| 252 |
a4530 |
94 |
NtCancelTimer2 |
| 253 |
a4550 |
95 |
NtCancelWaitCompletionPacket |
| 254 |
a4570 |
96 |
NtChangeProcessState |
| 255 |
a4590 |
97 |
NtChangeThreadState |
| 256 |
a3a80 |
3e |
NtClearEvent |
| 257 |
a34a0 |
f |
NtClose |
| 258 |
a3a20 |
3b |
NtCloseObjectAuditAlarm |
| 259 |
a45b0 |
98 |
NtCommitComplete |
| 260 |
a45d0 |
99 |
NtCommitEnlistment |
| 261 |
a45f0 |
9a |
NtCommitRegistryTransaction |
| 262 |
a4610 |
9b |
NtCommitTransaction |
| 263 |
a4630 |
9c |
NtCompactKeys |
| 264 |
a4650 |
9d |
NtCompareObjects |
| 265 |
a4670 |
9e |
NtCompareSigningLevels |
| 266 |
a4690 |
9f |
NtCompareTokens |
| 267 |
a46b0 |
a0 |
NtCompleteConnectPort |
| 268 |
a46d0 |
a1 |
NtCompressKey |
| 269 |
a46f0 |
a2 |
NtConnectPort |
| 270 |
a3b20 |
43 |
NtContinue |
| 271 |
a4710 |
a3 |
NtContinueEx |
| 272 |
a4730 |
a4 |
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
| 273 |
a4750 |
a5 |
NtCreateCrossVmEvent |
| 274 |
a4770 |
a6 |
NtCreateCrossVmMutant |
| 275 |
a4790 |
a7 |
NtCreateDebugObject |
| 276 |
a47b0 |
a8 |
NtCreateDirectoryObject |
| 277 |
a47d0 |
a9 |
NtCreateDirectoryObjectEx |
| 278 |
a47f0 |
aa |
NtCreateEnclave |
| 279 |
a4810 |
ab |
NtCreateEnlistment |
| 280 |
a3bc0 |
48 |
NtCreateEvent |
| 281 |
a4830 |
ac |
NtCreateEventPair |
| 282 |
a3d60 |
55 |
NtCreateFile |
| 283 |
a4850 |
ad |
NtCreateIRTimer |
| 284 |
a4870 |
ae |
NtCreateIoCompletion |
| 285 |
a4890 |
af |
NtCreateIoRing |
| 286 |
a48b0 |
b0 |
NtCreateJobObject |
| 287 |
a48d0 |
b1 |
NtCreateJobSet |
| 288 |
a3660 |
1d |
NtCreateKey |
| 289 |
a48f0 |
b2 |
NtCreateKeyTransacted |
| 290 |
a4910 |
b3 |
NtCreateKeyedEvent |
| 291 |
a4930 |
b4 |
NtCreateLowBoxToken |
| 292 |
a4950 |
b5 |
NtCreateMailslotFile |
| 293 |
a4970 |
b6 |
NtCreateMutant |
| 294 |
a4990 |
b7 |
NtCreateNamedPipeFile |
| 295 |
a49b0 |
b8 |
NtCreatePagingFile |
| 296 |
a49d0 |
b9 |
NtCreatePartition |
| 297 |
a49f0 |
ba |
NtCreatePort |
| 298 |
a4a10 |
bb |
NtCreatePrivateNamespace |
| 299 |
a4a30 |
bc |
NtCreateProcess |
| 300 |
a3c60 |
4d |
NtCreateProcessEx |
| 301 |
a4a50 |
bd |
NtCreateProcessStateChange |
| 302 |
a4a70 |
be |
NtCreateProfile |
| 303 |
a4a90 |
bf |
NtCreateProfileEx |
| 304 |
a4ab0 |
c0 |
NtCreateRegistryTransaction |
| 305 |
a4ad0 |
c1 |
NtCreateResourceManager |
| 306 |
a3c00 |
4a |
NtCreateSection |
| 307 |
a4af0 |
c2 |
NtCreateSectionEx |
| 308 |
a4b10 |
c3 |
NtCreateSemaphore |
| 309 |
a4b30 |
c4 |
NtCreateSymbolicLinkObject |
| 310 |
a3c80 |
4e |
NtCreateThread |
| 311 |
a4b50 |
c5 |
NtCreateThreadEx |
| 312 |
a4b70 |
c6 |
NtCreateThreadStateChange |
| 313 |
a4b90 |
c7 |
NtCreateTimer |
| 314 |
a4bb0 |
c8 |
NtCreateTimer2 |
| 315 |
a4bd0 |
c9 |
NtCreateToken |
| 316 |
a4bf0 |
ca |
NtCreateTokenEx |
| 317 |
a4c10 |
cb |
NtCreateTransaction |
| 318 |
a4c30 |
cc |
NtCreateTransactionManager |
| 319 |
a4c50 |
cd |
NtCreateUserProcess |
| 320 |
a4c70 |
ce |
NtCreateWaitCompletionPacket |
| 321 |
a4c90 |
cf |
NtCreateWaitablePort |
| 322 |
a4cb0 |
d0 |
NtCreateWnfStateName |
| 323 |
a4cd0 |
d1 |
NtCreateWorkerFactory |
| 324 |
a4cf0 |
d2 |
NtDebugActiveProcess |
| 325 |
a4d10 |
d3 |
NtDebugContinue |
| 326 |
a3940 |
34 |
NtDelayExecution |
| 327 |
a4d30 |
d4 |
NtDeleteAtom |
| 328 |
a4d50 |
d5 |
NtDeleteBootEntry |
| 329 |
a4d70 |
d6 |
NtDeleteDriverEntry |
| 330 |
a4d90 |
d7 |
NtDeleteFile |
| 331 |
a4db0 |
d8 |
NtDeleteKey |
| 332 |
a4dd0 |
d9 |
NtDeleteObjectAuditAlarm |
| 333 |
a4df0 |
da |
NtDeletePrivateNamespace |
| 334 |
a4e10 |
db |
NtDeleteValueKey |
| 335 |
a4e30 |
dc |
NtDeleteWnfStateData |
| 336 |
a4e50 |
dd |
NtDeleteWnfStateName |
| 337 |
a33a0 |
7 |
NtDeviceIoControlFile |
| 338 |
a4e70 |
de |
NtDirectGraphicsCall |
| 339 |
a4e90 |
df |
NtDisableLastKnownGood |
| 340 |
a4eb0 |
e0 |
NtDisplayString |
| 341 |
a4ed0 |
e1 |
NtDrawText |
| 342 |
a3a40 |
3c |
NtDuplicateObject |
| 343 |
a3b00 |
42 |
NtDuplicateToken |
| 344 |
a4ef0 |
e2 |
NtEnableLastKnownGood |
| 345 |
a4f10 |
e3 |
NtEnumerateBootEntries |
| 346 |
a4f30 |
e4 |
NtEnumerateDriverEntries |
| 347 |
a3900 |
32 |
NtEnumerateKey |
| 348 |
a4f50 |
e5 |
NtEnumerateSystemEnvironmentValuesEx |
| 349 |
a4f70 |
e6 |
NtEnumerateTransactionObject |
| 350 |
a3520 |
13 |
NtEnumerateValueKey |
| 351 |
a4f90 |
e7 |
NtExtendSection |
| 352 |
a4fb0 |
e8 |
NtFilterBootOption |
| 353 |
a4fd0 |
e9 |
NtFilterToken |
| 354 |
a4ff0 |
ea |
NtFilterTokenEx |
| 355 |
a3540 |
14 |
NtFindAtom |
| 356 |
a3c20 |
4b |
NtFlushBuffersFile |
| 357 |
a5010 |
eb |
NtFlushBuffersFileEx |
| 358 |
a5030 |
ec |
NtFlushInstallUILanguage |
| 359 |
a5050 |
ed |
NtFlushInstructionCache |
| 360 |
a5070 |
ee |
NtFlushKey |
| 361 |
a5090 |
ef |
NtFlushProcessWriteBuffers |
| 362 |
a50b0 |
f0 |
NtFlushVirtualMemory |
| 363 |
a50d0 |
f1 |
NtFlushWriteBuffer |
| 364 |
a50f0 |
f2 |
NtFreeUserPhysicalPages |
| 365 |
a3680 |
1e |
NtFreeVirtualMemory |
| 366 |
a5110 |
f3 |
NtFreezeRegistry |
| 367 |
a5130 |
f4 |
NtFreezeTransactions |
| 368 |
a39e0 |
39 |
NtFsControlFile |
| 369 |
a5150 |
f5 |
NtGetCachedSigningLevel |
| 370 |
a5170 |
f6 |
NtGetCompleteWnfStateSubscription |
| 371 |
a5190 |
f7 |
NtGetContextThread |
| 372 |
a51b0 |
f8 |
NtGetCurrentProcessorNumber |
| 373 |
a51d0 |
f9 |
NtGetCurrentProcessorNumberEx |
| 374 |
a51f0 |
fa |
NtGetDevicePowerState |
| 375 |
a5210 |
fb |
NtGetMUIRegistryInfo |
| 376 |
a5230 |
fc |
NtGetNextProcess |
| 377 |
a5250 |
fd |
NtGetNextThread |
| 378 |
a5270 |
fe |
NtGetNlsSectionPtr |
| 379 |
a5290 |
ff |
NtGetNotificationResourceManager |
| 381 |
a52b0 |
100 |
NtGetWriteWatch |
| 382 |
a52d0 |
101 |
NtImpersonateAnonymousToken |
| 383 |
a36a0 |
1f |
NtImpersonateClientOfPort |
| 384 |
a52f0 |
102 |
NtImpersonateThread |
| 385 |
a5310 |
103 |
NtInitializeEnclave |
| 386 |
a5330 |
104 |
NtInitializeNlsFiles |
| 387 |
a5350 |
105 |
NtInitializeRegistry |
| 388 |
a5370 |
106 |
NtInitiatePowerAction |
| 389 |
a3ca0 |
4f |
NtIsProcessInJob |
| 390 |
a5390 |
107 |
NtIsSystemResumeAutomatic |
| 391 |
a53b0 |
108 |
NtIsUILanguageComitted |
| 392 |
a53d0 |
109 |
NtListenPort |
| 393 |
a53f0 |
10a |
NtLoadDriver |
| 394 |
a5410 |
10b |
NtLoadEnclaveData |
| 395 |
a5430 |
10c |
NtLoadKey |
| 396 |
a5450 |
10d |
NtLoadKey2 |
| 397 |
a5470 |
10e |
NtLoadKey3 |
| 398 |
a5490 |
10f |
NtLoadKeyEx |
| 399 |
a54b0 |
110 |
NtLockFile |
| 400 |
a54d0 |
111 |
NtLockProductActivationKeys |
| 401 |
a54f0 |
112 |
NtLockRegistryKey |
| 402 |
a5510 |
113 |
NtLockVirtualMemory |
| 403 |
a5530 |
114 |
NtMakePermanentObject |
| 404 |
a5550 |
115 |
NtMakeTemporaryObject |
| 405 |
a5570 |
116 |
NtManageHotPatch |
| 406 |
a5590 |
117 |
NtManagePartition |
| 407 |
a55b0 |
118 |
NtMapCMFModule |
| 408 |
a55d0 |
119 |
NtMapUserPhysicalPages |
| 409 |
a3320 |
3 |
NtMapUserPhysicalPagesScatter |
| 410 |
a37c0 |
28 |
NtMapViewOfSection |
| 411 |
a55f0 |
11a |
NtMapViewOfSectionEx |
| 412 |
a5610 |
11b |
NtModifyBootEntry |
| 413 |
a5630 |
11c |
NtModifyDriverEntry |
| 414 |
a5650 |
11d |
NtNotifyChangeDirectoryFile |
| 415 |
a5670 |
11e |
NtNotifyChangeDirectoryFileEx |
| 416 |
a5690 |
11f |
NtNotifyChangeKey |
| 417 |
a56b0 |
120 |
NtNotifyChangeMultipleKeys |
| 418 |
a56d0 |
121 |
NtNotifyChangeSession |
| 419 |
a3dc0 |
58 |
NtOpenDirectoryObject |
| 420 |
a56f0 |
122 |
NtOpenEnlistment |
| 421 |
a3ac0 |
40 |
NtOpenEvent |
| 422 |
a5710 |
123 |
NtOpenEventPair |
| 423 |
a3920 |
33 |
NtOpenFile |
| 424 |
a5730 |
124 |
NtOpenIoCompletion |
| 425 |
a5750 |
125 |
NtOpenJobObject |
| 426 |
a3500 |
12 |
NtOpenKey |
| 427 |
a5770 |
126 |
NtOpenKeyEx |
| 428 |
a5790 |
127 |
NtOpenKeyTransacted |
| 429 |
a57b0 |
128 |
NtOpenKeyTransactedEx |
| 430 |
a57d0 |
129 |
NtOpenKeyedEvent |
| 431 |
a57f0 |
12a |
NtOpenMutant |
| 432 |
a5810 |
12b |
NtOpenObjectAuditAlarm |
| 433 |
a5830 |
12c |
NtOpenPartition |
| 434 |
a5850 |
12d |
NtOpenPrivateNamespace |
| 435 |
a3780 |
26 |
NtOpenProcess |
| 436 |
a5870 |
12e |
NtOpenProcessToken |
| 437 |
a38c0 |
30 |
NtOpenProcessTokenEx |
| 438 |
a5890 |
12f |
NtOpenRegistryTransaction |
| 439 |
a58b0 |
130 |
NtOpenResourceManager |
| 440 |
a39a0 |
37 |
NtOpenSection |
| 441 |
a58d0 |
131 |
NtOpenSemaphore |
| 442 |
a58f0 |
132 |
NtOpenSession |
| 443 |
a5910 |
133 |
NtOpenSymbolicLinkObject |
| 444 |
a5930 |
134 |
NtOpenThread |
| 445 |
a3740 |
24 |
NtOpenThreadToken |
| 446 |
a38a0 |
2f |
NtOpenThreadTokenEx |
| 447 |
a5950 |
135 |
NtOpenTimer |
| 448 |
a5970 |
136 |
NtOpenTransaction |
| 449 |
a5990 |
137 |
NtOpenTransactionManager |
| 450 |
a59b0 |
138 |
NtPlugPlayControl |
| 451 |
a3e90 |
5f |
NtPowerInformation |
| 452 |
a59d0 |
139 |
NtPrePrepareComplete |
| 453 |
a59f0 |
13a |
NtPrePrepareEnlistment |
| 454 |
a5a10 |
13b |
NtPrepareComplete |
| 455 |
a5a30 |
13c |
NtPrepareEnlistment |
| 456 |
a5a50 |
13d |
NtPrivilegeCheck |
| 457 |
a5a70 |
13e |
NtPrivilegeObjectAuditAlarm |
| 458 |
a5a90 |
13f |
NtPrivilegedServiceAuditAlarm |
| 459 |
a5ab0 |
140 |
NtPropagationComplete |
| 460 |
a5ad0 |
141 |
NtPropagationFailed |
| 461 |
a3cc0 |
50 |
NtProtectVirtualMemory |
| 462 |
a5af0 |
142 |
NtPssCaptureVaSpaceBulk |
| 463 |
a5b10 |
143 |
NtPulseEvent |
| 464 |
a3a60 |
3d |
NtQueryAttributesFile |
| 465 |
a5b30 |
144 |
NtQueryAuxiliaryCounterFrequency |
| 466 |
a5b50 |
145 |
NtQueryBootEntryOrder |
| 467 |
a5b70 |
146 |
NtQueryBootOptions |
| 468 |
a5b90 |
147 |
NtQueryDebugFilterState |
| 469 |
a3560 |
15 |
NtQueryDefaultLocale |
| 470 |
a3b40 |
44 |
NtQueryDefaultUILanguage |
| 471 |
a3960 |
35 |
NtQueryDirectoryFile |
| 472 |
a5bb0 |
148 |
NtQueryDirectoryFileEx |
| 473 |
a5bd0 |
149 |
NtQueryDirectoryObject |
| 474 |
a5bf0 |
14a |
NtQueryDriverEntryOrder |
| 475 |
a5c10 |
14b |
NtQueryEaFile |
| 476 |
a3d80 |
56 |
NtQueryEvent |
| 477 |
a5c30 |
14c |
NtQueryFullAttributesFile |
| 478 |
a5c50 |
14d |
NtQueryInformationAtom |
| 479 |
a5c70 |
14e |
NtQueryInformationByName |
| 480 |
a5c90 |
14f |
NtQueryInformationEnlistment |
| 481 |
a34e0 |
11 |
NtQueryInformationFile |
| 482 |
a5cb0 |
150 |
NtQueryInformationJobObject |
| 483 |
a5cd0 |
151 |
NtQueryInformationPort |
| 484 |
a35e0 |
19 |
NtQueryInformationProcess |
| 485 |
a5cf0 |
152 |
NtQueryInformationResourceManager |
| 486 |
a3760 |
25 |
NtQueryInformationThread |
| 487 |
a36e0 |
21 |
NtQueryInformationToken |
| 488 |
a5d10 |
153 |
NtQueryInformationTransaction |
| 489 |
a5d30 |
154 |
NtQueryInformationTransactionManager |
| 490 |
a5d50 |
155 |
NtQueryInformationWorkerFactory |
| 491 |
a5d70 |
156 |
NtQueryInstallUILanguage |
| 492 |
a5d90 |
157 |
NtQueryIntervalProfile |
| 493 |
a5db0 |
158 |
NtQueryIoCompletion |
| 494 |
a5dd0 |
159 |
NtQueryIoRingCapabilities |
| 495 |
a3580 |
16 |
NtQueryKey |
| 496 |
a5df0 |
15a |
NtQueryLicenseValue |
| 497 |
a5e10 |
15b |
NtQueryMultipleValueKey |
| 498 |
a5e30 |
15c |
NtQueryMutant |
| 499 |
a34c0 |
10 |
NtQueryObject |
| 500 |
a5e50 |
15d |
NtQueryOpenSubKeys |
| 501 |
a5e70 |
15e |
NtQueryOpenSubKeysEx |
| 502 |
a38e0 |
31 |
NtQueryPerformanceCounter |
| 503 |
a5e90 |
15f |
NtQueryPortInformationProcess |
| 504 |
a5eb0 |
160 |
NtQueryQuotaInformationFile |
| 505 |
a3ce0 |
51 |
NtQuerySection |
| 506 |
a5ed0 |
161 |
NtQuerySecurityAttributesToken |
| 507 |
a5ef0 |
162 |
NtQuerySecurityObject |
| 508 |
a5f10 |
163 |
NtQuerySecurityPolicy |
| 509 |
a5f30 |
164 |
NtQuerySemaphore |
| 510 |
a5f50 |
165 |
NtQuerySymbolicLinkObject |
| 511 |
a5f70 |
166 |
NtQuerySystemEnvironmentValue |
| 512 |
a5f90 |
167 |
NtQuerySystemEnvironmentValueEx |
| 513 |
a3980 |
36 |
NtQuerySystemInformation |
| 514 |
a5fb0 |
168 |
NtQuerySystemInformationEx |
| 516 |
a39c0 |
38 |
NtQueryTimer |
| 517 |
a5fd0 |
169 |
NtQueryTimerResolution |
| 518 |
a35a0 |
17 |
NtQueryValueKey |
| 519 |
a3720 |
23 |
NtQueryVirtualMemory |
| 520 |
a3be0 |
49 |
NtQueryVolumeInformationFile |
| 521 |
a5ff0 |
16a |
NtQueryWnfStateData |
| 522 |
a6010 |
16b |
NtQueryWnfStateNameInformation |
| 523 |
a3b60 |
45 |
NtQueueApcThread |
| 524 |
a6030 |
16c |
NtQueueApcThreadEx |
| 525 |
a6050 |
16d |
NtQueueApcThreadEx2 |
| 526 |
a6070 |
16e |
NtRaiseException |
| 527 |
a6090 |
16f |
NtRaiseHardError |
| 528 |
a3380 |
6 |
NtReadFile |
| 529 |
a3880 |
2e |
NtReadFileScatter |
| 530 |
a60b0 |
170 |
NtReadOnlyEnlistment |
| 531 |
a3d40 |
54 |
NtReadRequestData |
| 532 |
a3aa0 |
3f |
NtReadVirtualMemory |
| 533 |
a60d0 |
171 |
NtReadVirtualMemoryEx |
| 534 |
a60f0 |
172 |
NtRecoverEnlistment |
| 535 |
a6110 |
173 |
NtRecoverResourceManager |
| 536 |
a6130 |
174 |
NtRecoverTransactionManager |
| 537 |
a6150 |
175 |
NtRegisterProtocolAddressInformation |
| 538 |
a6170 |
176 |
NtRegisterThreadTerminatePort |
| 539 |
a6190 |
177 |
NtReleaseKeyedEvent |
| 540 |
a36c0 |
20 |
NtReleaseMutant |
| 541 |
a3400 |
a |
NtReleaseSemaphore |
| 542 |
a61b0 |
178 |
NtReleaseWorkerFactoryWorker |
| 543 |
a33e0 |
9 |
NtRemoveIoCompletion |
| 544 |
a61d0 |
179 |
NtRemoveIoCompletionEx |
| 545 |
a61f0 |
17a |
NtRemoveProcessDebug |
| 546 |
a6210 |
17b |
NtRenameKey |
| 547 |
a6230 |
17c |
NtRenameTransactionManager |
| 548 |
a6250 |
17d |
NtReplaceKey |
| 549 |
a6270 |
17e |
NtReplacePartitionUnit |
| 550 |
a3440 |
c |
NtReplyPort |
| 551 |
a3420 |
b |
NtReplyWaitReceivePort |
| 552 |
a3820 |
2b |
NtReplyWaitReceivePortEx |
| 553 |
a6290 |
17f |
NtReplyWaitReplyPort |
| 554 |
a62b0 |
180 |
NtRequestPort |
| 555 |
a3700 |
22 |
NtRequestWaitReplyPort |
| 556 |
a62d0 |
181 |
NtResetEvent |
| 557 |
a62f0 |
182 |
NtResetWriteWatch |
| 558 |
a6310 |
183 |
NtRestoreKey |
| 559 |
a6330 |
184 |
NtResumeProcess |
| 560 |
a3d00 |
52 |
NtResumeThread |
| 561 |
a6350 |
185 |
NtRevertContainerImpersonation |
| 562 |
a6370 |
186 |
NtRollbackComplete |
| 563 |
a6390 |
187 |
NtRollbackEnlistment |
| 564 |
a63b0 |
188 |
NtRollbackRegistryTransaction |
| 565 |
a63d0 |
189 |
NtRollbackTransaction |
| 566 |
a63f0 |
18a |
NtRollforwardTransactionManager |
| 567 |
a6410 |
18b |
NtSaveKey |
| 568 |
a6430 |
18c |
NtSaveKeyEx |
| 569 |
a6450 |
18d |
NtSaveMergedKeys |
| 570 |
a6470 |
18e |
NtSecureConnectPort |
| 571 |
a6490 |
18f |
NtSerializeBoot |
| 572 |
a64b0 |
190 |
NtSetBootEntryOrder |
| 573 |
a64d0 |
191 |
NtSetBootOptions |
| 574 |
a64f0 |
192 |
NtSetCachedSigningLevel |
| 575 |
a6510 |
193 |
NtSetCachedSigningLevel2 |
| 576 |
a6530 |
194 |
NtSetContextThread |
| 577 |
a6550 |
195 |
NtSetDebugFilterState |
| 578 |
a6570 |
196 |
NtSetDefaultHardErrorPort |
| 579 |
a6590 |
197 |
NtSetDefaultLocale |
| 580 |
a65b0 |
198 |
NtSetDefaultUILanguage |
| 581 |
a65d0 |
199 |
NtSetDriverEntryOrder |
| 582 |
a65f0 |
19a |
NtSetEaFile |
| 583 |
a3480 |
e |
NtSetEvent |
| 584 |
a3860 |
2d |
NtSetEventBoostPriority |
| 585 |
a6610 |
19b |
NtSetHighEventPair |
| 586 |
a6630 |
19c |
NtSetHighWaitLowEventPair |
| 587 |
a6650 |
19d |
NtSetIRTimer |
| 588 |
a6670 |
19e |
NtSetInformationDebugObject |
| 589 |
a6690 |
19f |
NtSetInformationEnlistment |
| 590 |
a37a0 |
27 |
NtSetInformationFile |
| 591 |
a66b0 |
1a0 |
NtSetInformationIoRing |
| 592 |
a66d0 |
1a1 |
NtSetInformationJobObject |
| 593 |
a66f0 |
1a2 |
NtSetInformationKey |
| 594 |
a3e30 |
5c |
NtSetInformationObject |
| 595 |
a3640 |
1c |
NtSetInformationProcess |
| 596 |
a6710 |
1a3 |
NtSetInformationResourceManager |
| 597 |
a6730 |
1a4 |
NtSetInformationSymbolicLink |
| 598 |
a3460 |
d |
NtSetInformationThread |
| 599 |
a6750 |
1a5 |
NtSetInformationToken |
| 600 |
a6770 |
1a6 |
NtSetInformationTransaction |
| 601 |
a6790 |
1a7 |
NtSetInformationTransactionManager |
| 602 |
a67b0 |
1a8 |
NtSetInformationVirtualMemory |
| 603 |
a67d0 |
1a9 |
NtSetInformationWorkerFactory |
| 604 |
a67f0 |
1aa |
NtSetIntervalProfile |
| 605 |
a6810 |
1ab |
NtSetIoCompletion |
| 606 |
a6830 |
1ac |
NtSetIoCompletionEx |
| 607 |
a6850 |
1ad |
NtSetLdtEntries |
| 608 |
a6870 |
1ae |
NtSetLowEventPair |
| 609 |
a6890 |
1af |
NtSetLowWaitHighEventPair |
| 610 |
a68b0 |
1b0 |
NtSetQuotaInformationFile |
| 611 |
a68d0 |
1b1 |
NtSetSecurityObject |
| 612 |
a68f0 |
1b2 |
NtSetSystemEnvironmentValue |
| 613 |
a6910 |
1b3 |
NtSetSystemEnvironmentValueEx |
| 614 |
a6930 |
1b4 |
NtSetSystemInformation |
| 615 |
a6950 |
1b5 |
NtSetSystemPowerState |
| 616 |
a6970 |
1b6 |
NtSetSystemTime |
| 617 |
a6990 |
1b7 |
NtSetThreadExecutionState |
| 618 |
a3ef0 |
62 |
NtSetTimer |
| 619 |
a69b0 |
1b8 |
NtSetTimer2 |
| 620 |
a69d0 |
1b9 |
NtSetTimerEx |
| 621 |
a69f0 |
1ba |
NtSetTimerResolution |
| 622 |
a6a10 |
1bb |
NtSetUuidSeed |
| 623 |
a3eb0 |
60 |
NtSetValueKey |
| 624 |
a6a30 |
1bc |
NtSetVolumeInformationFile |
| 625 |
a6a50 |
1bd |
NtSetWnfProcessNotificationEvent |
| 626 |
a6a70 |
1be |
NtShutdownSystem |
| 627 |
a6a90 |
1bf |
NtShutdownWorkerFactory |
| 628 |
a6ab0 |
1c0 |
NtSignalAndWaitForSingleObject |
| 629 |
a6ad0 |
1c1 |
NtSinglePhaseReject |
| 630 |
a6af0 |
1c2 |
NtStartProfile |
| 631 |
a6b10 |
1c3 |
NtStopProfile |
| 632 |
a6b30 |
1c4 |
NtSubmitIoRing |
| 633 |
a6b50 |
1c5 |
NtSubscribeWnfStateChange |
| 634 |
a6b70 |
1c6 |
NtSuspendProcess |
| 635 |
a6b90 |
1c7 |
NtSuspendThread |
| 636 |
a6bb0 |
1c8 |
NtSystemDebugControl |
| 637 |
a6bd0 |
1c9 |
NtTerminateEnclave |
| 638 |
a6bf0 |
1ca |
NtTerminateJobObject |
| 639 |
a3840 |
2c |
NtTerminateProcess |
| 640 |
a3d20 |
53 |
NtTerminateThread |
| 641 |
a6c10 |
1cb |
NtTestAlert |
| 642 |
a6c30 |
1cc |
NtThawRegistry |
| 643 |
a6c50 |
1cd |
NtThawTransactions |
| 644 |
a6c70 |
1ce |
NtTraceControl |
| 645 |
a3e70 |
5e |
NtTraceEvent |
| 646 |
a6c90 |
1cf |
NtTranslateFilePath |
| 647 |
a6cb0 |
1d0 |
NtUmsThreadYield |
| 648 |
a6cd0 |
1d1 |
NtUnloadDriver |
| 649 |
a6cf0 |
1d2 |
NtUnloadKey |
| 650 |
a6d10 |
1d3 |
NtUnloadKey2 |
| 651 |
a6d30 |
1d4 |
NtUnloadKeyEx |
| 652 |
a6d50 |
1d5 |
NtUnlockFile |
| 653 |
a6d70 |
1d6 |
NtUnlockVirtualMemory |
| 654 |
a3800 |
2a |
NtUnmapViewOfSection |
| 655 |
a6d90 |
1d7 |
NtUnmapViewOfSectionEx |
| 656 |
a6db0 |
1d8 |
NtUnsubscribeWnfStateChange |
| 657 |
a6dd0 |
1d9 |
NtUpdateWnfStateData |
| 658 |
a6df0 |
1da |
NtVdmControl |
| 659 |
a6e10 |
1db |
NtWaitForAlertByThreadId |
| 660 |
a6e30 |
1dc |
NtWaitForDebugEvent |
| 661 |
a6e50 |
1dd |
NtWaitForKeyedEvent |
| 662 |
a3e10 |
5b |
NtWaitForMultipleObjects |
| 663 |
a3600 |
1a |
NtWaitForMultipleObjects32 |
| 664 |
a3340 |
4 |
NtWaitForSingleObject |
| 665 |
a6e70 |
1de |
NtWaitForWorkViaWorkerFactory |
| 666 |
a6e90 |
1df |
NtWaitHighEventPair |
| 667 |
a6eb0 |
1e0 |
NtWaitLowEventPair |
| 668 |
a32e0 |
1 |
NtWorkerFactoryWorkerReady |
| 669 |
a33c0 |
8 |
NtWriteFile |
| 670 |
a3620 |
1b |
NtWriteFileGather |
| 671 |
a3da0 |
57 |
NtWriteRequestData |
| 672 |
a3a00 |
3a |
NtWriteVirtualMemory |
| 673 |
a3b80 |
46 |
NtYieldExecution |
| 1087 |
a3980 |
36 |
RtlGetNativeSystemInformation |
| 1801 |
a3300 |
2 |
ZwAcceptConnectPort |
| 1802 |
a32c0 |
0 |
ZwAccessCheck |
| 1803 |
a37e0 |
29 |
ZwAccessCheckAndAuditAlarm |
| 1804 |
a3f10 |
63 |
ZwAccessCheckByType |
| 1805 |
a3de0 |
59 |
ZwAccessCheckByTypeAndAuditAlarm |
| 1806 |
a3f30 |
64 |
ZwAccessCheckByTypeResultList |
| 1807 |
a3f50 |
65 |
ZwAccessCheckByTypeResultListAndAuditAlarm |
| 1808 |
a3f70 |
66 |
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle |
| 1809 |
a3f90 |
67 |
ZwAcquireCrossVmMutant |
| 1810 |
a3fb0 |
68 |
ZwAcquireProcessActivityReference |
| 1811 |
a3ba0 |
47 |
ZwAddAtom |
| 1812 |
a3fd0 |
69 |
ZwAddAtomEx |
| 1813 |
a3ff0 |
6a |
ZwAddBootEntry |
| 1814 |
a4010 |
6b |
ZwAddDriverEntry |
| 1815 |
a4030 |
6c |
ZwAdjustGroupsToken |
| 1816 |
a3ae0 |
41 |
ZwAdjustPrivilegesToken |
| 1817 |
a4050 |
6d |
ZwAdjustTokenClaimsAndDeviceGroups |
| 1818 |
a4070 |
6e |
ZwAlertResumeThread |
| 1819 |
a4090 |
6f |
ZwAlertThread |
| 1820 |
a40b0 |
70 |
ZwAlertThreadByThreadId |
| 1821 |
a40d0 |
71 |
ZwAllocateLocallyUniqueId |
| 1822 |
a40f0 |
72 |
ZwAllocateReserveObject |
| 1823 |
a4110 |
73 |
ZwAllocateUserPhysicalPages |
| 1824 |
a4130 |
74 |
ZwAllocateUserPhysicalPagesEx |
| 1825 |
a4150 |
75 |
ZwAllocateUuids |
| 1826 |
a35c0 |
18 |
ZwAllocateVirtualMemory |
| 1827 |
a4170 |
76 |
ZwAllocateVirtualMemoryEx |
| 1828 |
a4190 |
77 |
ZwAlpcAcceptConnectPort |
| 1829 |
a41b0 |
78 |
ZwAlpcCancelMessage |
| 1830 |
a41d0 |
79 |
ZwAlpcConnectPort |
| 1831 |
a41f0 |
7a |
ZwAlpcConnectPortEx |
| 1832 |
a4210 |
7b |
ZwAlpcCreatePort |
| 1833 |
a4230 |
7c |
ZwAlpcCreatePortSection |
| 1834 |
a4250 |
7d |
ZwAlpcCreateResourceReserve |
| 1835 |
a4270 |
7e |
ZwAlpcCreateSectionView |
| 1836 |
a4290 |
7f |
ZwAlpcCreateSecurityContext |
| 1837 |
a42b0 |
80 |
ZwAlpcDeletePortSection |
| 1838 |
a42d0 |
81 |
ZwAlpcDeleteResourceReserve |
| 1839 |
a42f0 |
82 |
ZwAlpcDeleteSectionView |
| 1840 |
a4310 |
83 |
ZwAlpcDeleteSecurityContext |
| 1841 |
a4330 |
84 |
ZwAlpcDisconnectPort |
| 1842 |
a4350 |
85 |
ZwAlpcImpersonateClientContainerOfPort |
| 1843 |
a4370 |
86 |
ZwAlpcImpersonateClientOfPort |
| 1844 |
a4390 |
87 |
ZwAlpcOpenSenderProcess |
| 1845 |
a43b0 |
88 |
ZwAlpcOpenSenderThread |
| 1846 |
a43d0 |
89 |
ZwAlpcQueryInformation |
| 1847 |
a43f0 |
8a |
ZwAlpcQueryInformationMessage |
| 1848 |
a4410 |
8b |
ZwAlpcRevokeSecurityContext |
| 1849 |
a4430 |
8c |
ZwAlpcSendWaitReceivePort |
| 1850 |
a4450 |
8d |
ZwAlpcSetInformation |
| 1851 |
a3c40 |
4c |
ZwApphelpCacheControl |
| 1852 |
a4470 |
8e |
ZwAreMappedFilesTheSame |
| 1853 |
a4490 |
8f |
ZwAssignProcessToJobObject |
| 1854 |
a44b0 |
90 |
ZwAssociateWaitCompletionPacket |
| 1855 |
a44d0 |
91 |
ZwCallEnclave |
| 1856 |
a3360 |
5 |
ZwCallbackReturn |
| 1857 |
a3e50 |
5d |
ZwCancelIoFile |
| 1858 |
a44f0 |
92 |
ZwCancelIoFileEx |
| 1859 |
a4510 |
93 |
ZwCancelSynchronousIoFile |
| 1860 |
a3ed0 |
61 |
ZwCancelTimer |
| 1861 |
a4530 |
94 |
ZwCancelTimer2 |
| 1862 |
a4550 |
95 |
ZwCancelWaitCompletionPacket |
| 1863 |
a4570 |
96 |
ZwChangeProcessState |
| 1864 |
a4590 |
97 |
ZwChangeThreadState |
| 1865 |
a3a80 |
3e |
ZwClearEvent |
| 1866 |
a34a0 |
f |
ZwClose |
| 1867 |
a3a20 |
3b |
ZwCloseObjectAuditAlarm |
| 1868 |
a45b0 |
98 |
ZwCommitComplete |
| 1869 |
a45d0 |
99 |
ZwCommitEnlistment |
| 1870 |
a45f0 |
9a |
ZwCommitRegistryTransaction |
| 1871 |
a4610 |
9b |
ZwCommitTransaction |
| 1872 |
a4630 |
9c |
ZwCompactKeys |
| 1873 |
a4650 |
9d |
ZwCompareObjects |
| 1874 |
a4670 |
9e |
ZwCompareSigningLevels |
| 1875 |
a4690 |
9f |
ZwCompareTokens |
| 1876 |
a46b0 |
a0 |
ZwCompleteConnectPort |
| 1877 |
a46d0 |
a1 |
ZwCompressKey |
| 1878 |
a46f0 |
a2 |
ZwConnectPort |
| 1879 |
a3b20 |
43 |
ZwContinue |
| 1880 |
a4710 |
a3 |
ZwContinueEx |
| 1881 |
a4730 |
a4 |
ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter |
| 1882 |
a4750 |
a5 |
ZwCreateCrossVmEvent |
| 1883 |
a4770 |
a6 |
ZwCreateCrossVmMutant |
| 1884 |
a4790 |
a7 |
ZwCreateDebugObject |
| 1885 |
a47b0 |
a8 |
ZwCreateDirectoryObject |
| 1886 |
a47d0 |
a9 |
ZwCreateDirectoryObjectEx |
| 1887 |
a47f0 |
aa |
ZwCreateEnclave |
| 1888 |
a4810 |
ab |
ZwCreateEnlistment |
| 1889 |
a3bc0 |
48 |
ZwCreateEvent |
| 1890 |
a4830 |
ac |
ZwCreateEventPair |
| 1891 |
a3d60 |
55 |
ZwCreateFile |
| 1892 |
a4850 |
ad |
ZwCreateIRTimer |
| 1893 |
a4870 |
ae |
ZwCreateIoCompletion |
| 1894 |
a4890 |
af |
ZwCreateIoRing |
| 1895 |
a48b0 |
b0 |
ZwCreateJobObject |
| 1896 |
a48d0 |
b1 |
ZwCreateJobSet |
| 1897 |
a3660 |
1d |
ZwCreateKey |
| 1898 |
a48f0 |
b2 |
ZwCreateKeyTransacted |
| 1899 |
a4910 |
b3 |
ZwCreateKeyedEvent |
| 1900 |
a4930 |
b4 |
ZwCreateLowBoxToken |
| 1901 |
a4950 |
b5 |
ZwCreateMailslotFile |
| 1902 |
a4970 |
b6 |
ZwCreateMutant |
| 1903 |
a4990 |
b7 |
ZwCreateNamedPipeFile |
| 1904 |
a49b0 |
b8 |
ZwCreatePagingFile |
| 1905 |
a49d0 |
b9 |
ZwCreatePartition |
| 1906 |
a49f0 |
ba |
ZwCreatePort |
| 1907 |
a4a10 |
bb |
ZwCreatePrivateNamespace |
| 1908 |
a4a30 |
bc |
ZwCreateProcess |
| 1909 |
a3c60 |
4d |
ZwCreateProcessEx |
| 1910 |
a4a50 |
bd |
ZwCreateProcessStateChange |
| 1911 |
a4a70 |
be |
ZwCreateProfile |
| 1912 |
a4a90 |
bf |
ZwCreateProfileEx |
| 1913 |
a4ab0 |
c0 |
ZwCreateRegistryTransaction |
| 1914 |
a4ad0 |
c1 |
ZwCreateResourceManager |
| 1915 |
a3c00 |
4a |
ZwCreateSection |
| 1916 |
a4af0 |
c2 |
ZwCreateSectionEx |
| 1917 |
a4b10 |
c3 |
ZwCreateSemaphore |
| 1918 |
a4b30 |
c4 |
ZwCreateSymbolicLinkObject |
| 1919 |
a3c80 |
4e |
ZwCreateThread |
| 1920 |
a4b50 |
c5 |
ZwCreateThreadEx |
| 1921 |
a4b70 |
c6 |
ZwCreateThreadStateChange |
| 1922 |
a4b90 |
c7 |
ZwCreateTimer |
| 1923 |
a4bb0 |
c8 |
ZwCreateTimer2 |
| 1924 |
a4bd0 |
c9 |
ZwCreateToken |
| 1925 |
a4bf0 |
ca |
ZwCreateTokenEx |
| 1926 |
a4c10 |
cb |
ZwCreateTransaction |
| 1927 |
a4c30 |
cc |
ZwCreateTransactionManager |
| 1928 |
a4c50 |
cd |
ZwCreateUserProcess |
| 1929 |
a4c70 |
ce |
ZwCreateWaitCompletionPacket |
| 1930 |
a4c90 |
cf |
ZwCreateWaitablePort |
| 1931 |
a4cb0 |
d0 |
ZwCreateWnfStateName |
| 1932 |
a4cd0 |
d1 |
ZwCreateWorkerFactory |
| 1933 |
a4cf0 |
d2 |
ZwDebugActiveProcess |
| 1934 |
a4d10 |
d3 |
ZwDebugContinue |
| 1935 |
a3940 |
34 |
ZwDelayExecution |
| 1936 |
a4d30 |
d4 |
ZwDeleteAtom |
| 1937 |
a4d50 |
d5 |
ZwDeleteBootEntry |
| 1938 |
a4d70 |
d6 |
ZwDeleteDriverEntry |
| 1939 |
a4d90 |
d7 |
ZwDeleteFile |
| 1940 |
a4db0 |
d8 |
ZwDeleteKey |
| 1941 |
a4dd0 |
d9 |
ZwDeleteObjectAuditAlarm |
| 1942 |
a4df0 |
da |
ZwDeletePrivateNamespace |
| 1943 |
a4e10 |
db |
ZwDeleteValueKey |
| 1944 |
a4e30 |
dc |
ZwDeleteWnfStateData |
| 1945 |
a4e50 |
dd |
ZwDeleteWnfStateName |
| 1946 |
a33a0 |
7 |
ZwDeviceIoControlFile |
| 1947 |
a4e70 |
de |
ZwDirectGraphicsCall |
| 1948 |
a4e90 |
df |
ZwDisableLastKnownGood |
| 1949 |
a4eb0 |
e0 |
ZwDisplayString |
| 1950 |
a4ed0 |
e1 |
ZwDrawText |
| 1951 |
a3a40 |
3c |
ZwDuplicateObject |
| 1952 |
a3b00 |
42 |
ZwDuplicateToken |
| 1953 |
a4ef0 |
e2 |
ZwEnableLastKnownGood |
| 1954 |
a4f10 |
e3 |
ZwEnumerateBootEntries |
| 1955 |
a4f30 |
e4 |
ZwEnumerateDriverEntries |
| 1956 |
a3900 |
32 |
ZwEnumerateKey |
| 1957 |
a4f50 |
e5 |
ZwEnumerateSystemEnvironmentValuesEx |
| 1958 |
a4f70 |
e6 |
ZwEnumerateTransactionObject |
| 1959 |
a3520 |
13 |
ZwEnumerateValueKey |
| 1960 |
a4f90 |
e7 |
ZwExtendSection |
| 1961 |
a4fb0 |
e8 |
ZwFilterBootOption |
| 1962 |
a4fd0 |
e9 |
ZwFilterToken |
| 1963 |
a4ff0 |
ea |
ZwFilterTokenEx |
| 1964 |
a3540 |
14 |
ZwFindAtom |
| 1965 |
a3c20 |
4b |
ZwFlushBuffersFile |
| 1966 |
a5010 |
eb |
ZwFlushBuffersFileEx |
| 1967 |
a5030 |
ec |
ZwFlushInstallUILanguage |
| 1968 |
a5050 |
ed |
ZwFlushInstructionCache |
| 1969 |
a5070 |
ee |
ZwFlushKey |
| 1970 |
a5090 |
ef |
ZwFlushProcessWriteBuffers |
| 1971 |
a50b0 |
f0 |
ZwFlushVirtualMemory |
| 1972 |
a50d0 |
f1 |
ZwFlushWriteBuffer |
| 1973 |
a50f0 |
f2 |
ZwFreeUserPhysicalPages |
| 1974 |
a3680 |
1e |
ZwFreeVirtualMemory |
| 1975 |
a5110 |
f3 |
ZwFreezeRegistry |
| 1976 |
a5130 |
f4 |
ZwFreezeTransactions |
| 1977 |
a39e0 |
39 |
ZwFsControlFile |
| 1978 |
a5150 |
f5 |
ZwGetCachedSigningLevel |
| 1979 |
a5170 |
f6 |
ZwGetCompleteWnfStateSubscription |
| 1980 |
a5190 |
f7 |
ZwGetContextThread |
| 1981 |
a51b0 |
f8 |
ZwGetCurrentProcessorNumber |
| 1982 |
a51d0 |
f9 |
ZwGetCurrentProcessorNumberEx |
| 1983 |
a51f0 |
fa |
ZwGetDevicePowerState |
| 1984 |
a5210 |
fb |
ZwGetMUIRegistryInfo |
| 1985 |
a5230 |
fc |
ZwGetNextProcess |
| 1986 |
a5250 |
fd |
ZwGetNextThread |
| 1987 |
a5270 |
fe |
ZwGetNlsSectionPtr |
| 1988 |
a5290 |
ff |
ZwGetNotificationResourceManager |
| 1989 |
a52b0 |
100 |
ZwGetWriteWatch |
| 1990 |
a52d0 |
101 |
ZwImpersonateAnonymousToken |
| 1991 |
a36a0 |
1f |
ZwImpersonateClientOfPort |
| 1992 |
a52f0 |
102 |
ZwImpersonateThread |
| 1993 |
a5310 |
103 |
ZwInitializeEnclave |
| 1994 |
a5330 |
104 |
ZwInitializeNlsFiles |
| 1995 |
a5350 |
105 |
ZwInitializeRegistry |
| 1996 |
a5370 |
106 |
ZwInitiatePowerAction |
| 1997 |
a3ca0 |
4f |
ZwIsProcessInJob |
| 1998 |
a5390 |
107 |
ZwIsSystemResumeAutomatic |
| 1999 |
a53b0 |
108 |
ZwIsUILanguageComitted |
| 2000 |
a53d0 |
109 |
ZwListenPort |
| 2001 |
a53f0 |
10a |
ZwLoadDriver |
| 2002 |
a5410 |
10b |
ZwLoadEnclaveData |
| 2003 |
a5430 |
10c |
ZwLoadKey |
| 2004 |
a5450 |
10d |
ZwLoadKey2 |
| 2005 |
a5470 |
10e |
ZwLoadKey3 |
| 2006 |
a5490 |
10f |
ZwLoadKeyEx |
| 2007 |
a54b0 |
110 |
ZwLockFile |
| 2008 |
a54d0 |
111 |
ZwLockProductActivationKeys |
| 2009 |
a54f0 |
112 |
ZwLockRegistryKey |
| 2010 |
a5510 |
113 |
ZwLockVirtualMemory |
| 2011 |
a5530 |
114 |
ZwMakePermanentObject |
| 2012 |
a5550 |
115 |
ZwMakeTemporaryObject |
| 2013 |
a5570 |
116 |
ZwManageHotPatch |
| 2014 |
a5590 |
117 |
ZwManagePartition |
| 2015 |
a55b0 |
118 |
ZwMapCMFModule |
| 2016 |
a55d0 |
119 |
ZwMapUserPhysicalPages |
| 2017 |
a3320 |
3 |
ZwMapUserPhysicalPagesScatter |
| 2018 |
a37c0 |
28 |
ZwMapViewOfSection |
| 2019 |
a55f0 |
11a |
ZwMapViewOfSectionEx |
| 2020 |
a5610 |
11b |
ZwModifyBootEntry |
| 2021 |
a5630 |
11c |
ZwModifyDriverEntry |
| 2022 |
a5650 |
11d |
ZwNotifyChangeDirectoryFile |
| 2023 |
a5670 |
11e |
ZwNotifyChangeDirectoryFileEx |
| 2024 |
a5690 |
11f |
ZwNotifyChangeKey |
| 2025 |
a56b0 |
120 |
ZwNotifyChangeMultipleKeys |
| 2026 |
a56d0 |
121 |
ZwNotifyChangeSession |
| 2027 |
a3dc0 |
58 |
ZwOpenDirectoryObject |
| 2028 |
a56f0 |
122 |
ZwOpenEnlistment |
| 2029 |
a3ac0 |
40 |
ZwOpenEvent |
| 2030 |
a5710 |
123 |
ZwOpenEventPair |
| 2031 |
a3920 |
33 |
ZwOpenFile |
| 2032 |
a5730 |
124 |
ZwOpenIoCompletion |
| 2033 |
a5750 |
125 |
ZwOpenJobObject |
| 2034 |
a3500 |
12 |
ZwOpenKey |
| 2035 |
a5770 |
126 |
ZwOpenKeyEx |
| 2036 |
a5790 |
127 |
ZwOpenKeyTransacted |
| 2037 |
a57b0 |
128 |
ZwOpenKeyTransactedEx |
| 2038 |
a57d0 |
129 |
ZwOpenKeyedEvent |
| 2039 |
a57f0 |
12a |
ZwOpenMutant |
| 2040 |
a5810 |
12b |
ZwOpenObjectAuditAlarm |
| 2041 |
a5830 |
12c |
ZwOpenPartition |
| 2042 |
a5850 |
12d |
ZwOpenPrivateNamespace |
| 2043 |
a3780 |
26 |
ZwOpenProcess |
| 2044 |
a5870 |
12e |
ZwOpenProcessToken |
| 2045 |
a38c0 |
30 |
ZwOpenProcessTokenEx |
| 2046 |
a5890 |
12f |
ZwOpenRegistryTransaction |
| 2047 |
a58b0 |
130 |
ZwOpenResourceManager |
| 2048 |
a39a0 |
37 |
ZwOpenSection |
| 2049 |
a58d0 |
131 |
ZwOpenSemaphore |
| 2050 |
a58f0 |
132 |
ZwOpenSession |
| 2051 |
a5910 |
133 |
ZwOpenSymbolicLinkObject |
| 2052 |
a5930 |
134 |
ZwOpenThread |
| 2053 |
a3740 |
24 |
ZwOpenThreadToken |
| 2054 |
a38a0 |
2f |
ZwOpenThreadTokenEx |
| 2055 |
a5950 |
135 |
ZwOpenTimer |
| 2056 |
a5970 |
136 |
ZwOpenTransaction |
| 2057 |
a5990 |
137 |
ZwOpenTransactionManager |
| 2058 |
a59b0 |
138 |
ZwPlugPlayControl |
| 2059 |
a3e90 |
5f |
ZwPowerInformation |
| 2060 |
a59d0 |
139 |
ZwPrePrepareComplete |
| 2061 |
a59f0 |
13a |
ZwPrePrepareEnlistment |
| 2062 |
a5a10 |
13b |
ZwPrepareComplete |
| 2063 |
a5a30 |
13c |
ZwPrepareEnlistment |
| 2064 |
a5a50 |
13d |
ZwPrivilegeCheck |
| 2065 |
a5a70 |
13e |
ZwPrivilegeObjectAuditAlarm |
| 2066 |
a5a90 |
13f |
ZwPrivilegedServiceAuditAlarm |
| 2067 |
a5ab0 |
140 |
ZwPropagationComplete |
| 2068 |
a5ad0 |
141 |
ZwPropagationFailed |
| 2069 |
a3cc0 |
50 |
ZwProtectVirtualMemory |
| 2070 |
a5af0 |
142 |
ZwPssCaptureVaSpaceBulk |
| 2071 |
a5b10 |
143 |
ZwPulseEvent |
| 2072 |
a3a60 |
3d |
ZwQueryAttributesFile |
| 2073 |
a5b30 |
144 |
ZwQueryAuxiliaryCounterFrequency |
| 2074 |
a5b50 |
145 |
ZwQueryBootEntryOrder |
| 2075 |
a5b70 |
146 |
ZwQueryBootOptions |
| 2076 |
a5b90 |
147 |
ZwQueryDebugFilterState |
| 2077 |
a3560 |
15 |
ZwQueryDefaultLocale |
| 2078 |
a3b40 |
44 |
ZwQueryDefaultUILanguage |
| 2079 |
a3960 |
35 |
ZwQueryDirectoryFile |
| 2080 |
a5bb0 |
148 |
ZwQueryDirectoryFileEx |
| 2081 |
a5bd0 |
149 |
ZwQueryDirectoryObject |
| 2082 |
a5bf0 |
14a |
ZwQueryDriverEntryOrder |
| 2083 |
a5c10 |
14b |
ZwQueryEaFile |
| 2084 |
a3d80 |
56 |
ZwQueryEvent |
| 2085 |
a5c30 |
14c |
ZwQueryFullAttributesFile |
| 2086 |
a5c50 |
14d |
ZwQueryInformationAtom |
| 2087 |
a5c70 |
14e |
ZwQueryInformationByName |
| 2088 |
a5c90 |
14f |
ZwQueryInformationEnlistment |
| 2089 |
a34e0 |
11 |
ZwQueryInformationFile |
| 2090 |
a5cb0 |
150 |
ZwQueryInformationJobObject |
| 2091 |
a5cd0 |
151 |
ZwQueryInformationPort |
| 2092 |
a35e0 |
19 |
ZwQueryInformationProcess |
| 2093 |
a5cf0 |
152 |
ZwQueryInformationResourceManager |
| 2094 |
a3760 |
25 |
ZwQueryInformationThread |
| 2095 |
a36e0 |
21 |
ZwQueryInformationToken |
| 2096 |
a5d10 |
153 |
ZwQueryInformationTransaction |
| 2097 |
a5d30 |
154 |
ZwQueryInformationTransactionManager |
| 2098 |
a5d50 |
155 |
ZwQueryInformationWorkerFactory |
| 2099 |
a5d70 |
156 |
ZwQueryInstallUILanguage |
| 2100 |
a5d90 |
157 |
ZwQueryIntervalProfile |
| 2101 |
a5db0 |
158 |
ZwQueryIoCompletion |
| 2102 |
a5dd0 |
159 |
ZwQueryIoRingCapabilities |
| 2103 |
a3580 |
16 |
ZwQueryKey |
| 2104 |
a5df0 |
15a |
ZwQueryLicenseValue |
| 2105 |
a5e10 |
15b |
ZwQueryMultipleValueKey |
| 2106 |
a5e30 |
15c |
ZwQueryMutant |
| 2107 |
a34c0 |
10 |
ZwQueryObject |
| 2108 |
a5e50 |
15d |
ZwQueryOpenSubKeys |
| 2109 |
a5e70 |
15e |
ZwQueryOpenSubKeysEx |
| 2110 |
a38e0 |
31 |
ZwQueryPerformanceCounter |
| 2111 |
a5e90 |
15f |
ZwQueryPortInformationProcess |
| 2112 |
a5eb0 |
160 |
ZwQueryQuotaInformationFile |
| 2113 |
a3ce0 |
51 |
ZwQuerySection |
| 2114 |
a5ed0 |
161 |
ZwQuerySecurityAttributesToken |
| 2115 |
a5ef0 |
162 |
ZwQuerySecurityObject |
| 2116 |
a5f10 |
163 |
ZwQuerySecurityPolicy |
| 2117 |
a5f30 |
164 |
ZwQuerySemaphore |
| 2118 |
a5f50 |
165 |
ZwQuerySymbolicLinkObject |
| 2119 |
a5f70 |
166 |
ZwQuerySystemEnvironmentValue |
| 2120 |
a5f90 |
167 |
ZwQuerySystemEnvironmentValueEx |
| 2121 |
a3980 |
36 |
ZwQuerySystemInformation |
| 2122 |
a5fb0 |
168 |
ZwQuerySystemInformationEx |
| 2124 |
a39c0 |
38 |
ZwQueryTimer |
| 2125 |
a5fd0 |
169 |
ZwQueryTimerResolution |
| 2126 |
a35a0 |
17 |
ZwQueryValueKey |
| 2127 |
a3720 |
23 |
ZwQueryVirtualMemory |
| 2128 |
a3be0 |
49 |
ZwQueryVolumeInformationFile |
| 2129 |
a5ff0 |
16a |
ZwQueryWnfStateData |
| 2130 |
a6010 |
16b |
ZwQueryWnfStateNameInformation |
| 2131 |
a3b60 |
45 |
ZwQueueApcThread |
| 2132 |
a6030 |
16c |
ZwQueueApcThreadEx |
| 2133 |
a6050 |
16d |
ZwQueueApcThreadEx2 |
| 2134 |
a6070 |
16e |
ZwRaiseException |
| 2135 |
a6090 |
16f |
ZwRaiseHardError |
| 2136 |
a3380 |
6 |
ZwReadFile |
| 2137 |
a3880 |
2e |
ZwReadFileScatter |
| 2138 |
a60b0 |
170 |
ZwReadOnlyEnlistment |
| 2139 |
a3d40 |
54 |
ZwReadRequestData |
| 2140 |
a3aa0 |
3f |
ZwReadVirtualMemory |
| 2141 |
a60d0 |
171 |
ZwReadVirtualMemoryEx |
| 2142 |
a60f0 |
172 |
ZwRecoverEnlistment |
| 2143 |
a6110 |
173 |
ZwRecoverResourceManager |
| 2144 |
a6130 |
174 |
ZwRecoverTransactionManager |
| 2145 |
a6150 |
175 |
ZwRegisterProtocolAddressInformation |
| 2146 |
a6170 |
176 |
ZwRegisterThreadTerminatePort |
| 2147 |
a6190 |
177 |
ZwReleaseKeyedEvent |
| 2148 |
a36c0 |
20 |
ZwReleaseMutant |
| 2149 |
a3400 |
a |
ZwReleaseSemaphore |
| 2150 |
a61b0 |
178 |
ZwReleaseWorkerFactoryWorker |
| 2151 |
a33e0 |
9 |
ZwRemoveIoCompletion |
| 2152 |
a61d0 |
179 |
ZwRemoveIoCompletionEx |
| 2153 |
a61f0 |
17a |
ZwRemoveProcessDebug |
| 2154 |
a6210 |
17b |
ZwRenameKey |
| 2155 |
a6230 |
17c |
ZwRenameTransactionManager |
| 2156 |
a6250 |
17d |
ZwReplaceKey |
| 2157 |
a6270 |
17e |
ZwReplacePartitionUnit |
| 2158 |
a3440 |
c |
ZwReplyPort |
| 2159 |
a3420 |
b |
ZwReplyWaitReceivePort |
| 2160 |
a3820 |
2b |
ZwReplyWaitReceivePortEx |
| 2161 |
a6290 |
17f |
ZwReplyWaitReplyPort |
| 2162 |
a62b0 |
180 |
ZwRequestPort |
| 2163 |
a3700 |
22 |
ZwRequestWaitReplyPort |
| 2164 |
a62d0 |
181 |
ZwResetEvent |
| 2165 |
a62f0 |
182 |
ZwResetWriteWatch |
| 2166 |
a6310 |
183 |
ZwRestoreKey |
| 2167 |
a6330 |
184 |
ZwResumeProcess |
| 2168 |
a3d00 |
52 |
ZwResumeThread |
| 2169 |
a6350 |
185 |
ZwRevertContainerImpersonation |
| 2170 |
a6370 |
186 |
ZwRollbackComplete |
| 2171 |
a6390 |
187 |
ZwRollbackEnlistment |
| 2172 |
a63b0 |
188 |
ZwRollbackRegistryTransaction |
| 2173 |
a63d0 |
189 |
ZwRollbackTransaction |
| 2174 |
a63f0 |
18a |
ZwRollforwardTransactionManager |
| 2175 |
a6410 |
18b |
ZwSaveKey |
| 2176 |
a6430 |
18c |
ZwSaveKeyEx |
| 2177 |
a6450 |
18d |
ZwSaveMergedKeys |
| 2178 |
a6470 |
18e |
ZwSecureConnectPort |
| 2179 |
a6490 |
18f |
ZwSerializeBoot |
| 2180 |
a64b0 |
190 |
ZwSetBootEntryOrder |
| 2181 |
a64d0 |
191 |
ZwSetBootOptions |
| 2182 |
a64f0 |
192 |
ZwSetCachedSigningLevel |
| 2183 |
a6510 |
193 |
ZwSetCachedSigningLevel2 |
| 2184 |
a6530 |
194 |
ZwSetContextThread |
| 2185 |
a6550 |
195 |
ZwSetDebugFilterState |
| 2186 |
a6570 |
196 |
ZwSetDefaultHardErrorPort |
| 2187 |
a6590 |
197 |
ZwSetDefaultLocale |
| 2188 |
a65b0 |
198 |
ZwSetDefaultUILanguage |
| 2189 |
a65d0 |
199 |
ZwSetDriverEntryOrder |
| 2190 |
a65f0 |
19a |
ZwSetEaFile |
| 2191 |
a3480 |
e |
ZwSetEvent |
| 2192 |
a3860 |
2d |
ZwSetEventBoostPriority |
| 2193 |
a6610 |
19b |
ZwSetHighEventPair |
| 2194 |
a6630 |
19c |
ZwSetHighWaitLowEventPair |
| 2195 |
a6650 |
19d |
ZwSetIRTimer |
| 2196 |
a6670 |
19e |
ZwSetInformationDebugObject |
| 2197 |
a6690 |
19f |
ZwSetInformationEnlistment |
| 2198 |
a37a0 |
27 |
ZwSetInformationFile |
| 2199 |
a66b0 |
1a0 |
ZwSetInformationIoRing |
| 2200 |
a66d0 |
1a1 |
ZwSetInformationJobObject |
| 2201 |
a66f0 |
1a2 |
ZwSetInformationKey |
| 2202 |
a3e30 |
5c |
ZwSetInformationObject |
| 2203 |
a3640 |
1c |
ZwSetInformationProcess |
| 2204 |
a6710 |
1a3 |
ZwSetInformationResourceManager |
| 2205 |
a6730 |
1a4 |
ZwSetInformationSymbolicLink |
| 2206 |
a3460 |
d |
ZwSetInformationThread |
| 2207 |
a6750 |
1a5 |
ZwSetInformationToken |
| 2208 |
a6770 |
1a6 |
ZwSetInformationTransaction |
| 2209 |
a6790 |
1a7 |
ZwSetInformationTransactionManager |
| 2210 |
a67b0 |
1a8 |
ZwSetInformationVirtualMemory |
| 2211 |
a67d0 |
1a9 |
ZwSetInformationWorkerFactory |
| 2212 |
a67f0 |
1aa |
ZwSetIntervalProfile |
| 2213 |
a6810 |
1ab |
ZwSetIoCompletion |
| 2214 |
a6830 |
1ac |
ZwSetIoCompletionEx |
| 2215 |
a6850 |
1ad |
ZwSetLdtEntries |
| 2216 |
a6870 |
1ae |
ZwSetLowEventPair |
| 2217 |
a6890 |
1af |
ZwSetLowWaitHighEventPair |
| 2218 |
a68b0 |
1b0 |
ZwSetQuotaInformationFile |
| 2219 |
a68d0 |
1b1 |
ZwSetSecurityObject |
| 2220 |
a68f0 |
1b2 |
ZwSetSystemEnvironmentValue |
| 2221 |
a6910 |
1b3 |
ZwSetSystemEnvironmentValueEx |
| 2222 |
a6930 |
1b4 |
ZwSetSystemInformation |
| 2223 |
a6950 |
1b5 |
ZwSetSystemPowerState |
| 2224 |
a6970 |
1b6 |
ZwSetSystemTime |
| 2225 |
a6990 |
1b7 |
ZwSetThreadExecutionState |
| 2226 |
a3ef0 |
62 |
ZwSetTimer |
| 2227 |
a69b0 |
1b8 |
ZwSetTimer2 |
| 2228 |
a69d0 |
1b9 |
ZwSetTimerEx |
| 2229 |
a69f0 |
1ba |
ZwSetTimerResolution |
| 2230 |
a6a10 |
1bb |
ZwSetUuidSeed |
| 2231 |
a3eb0 |
60 |
ZwSetValueKey |
| 2232 |
a6a30 |
1bc |
ZwSetVolumeInformationFile |
| 2233 |
a6a50 |
1bd |
ZwSetWnfProcessNotificationEvent |
| 2234 |
a6a70 |
1be |
ZwShutdownSystem |
| 2235 |
a6a90 |
1bf |
ZwShutdownWorkerFactory |
| 2236 |
a6ab0 |
1c0 |
ZwSignalAndWaitForSingleObject |
| 2237 |
a6ad0 |
1c1 |
ZwSinglePhaseReject |
| 2238 |
a6af0 |
1c2 |
ZwStartProfile |
| 2239 |
a6b10 |
1c3 |
ZwStopProfile |
| 2240 |
a6b30 |
1c4 |
ZwSubmitIoRing |
| 2241 |
a6b50 |
1c5 |
ZwSubscribeWnfStateChange |
| 2242 |
a6b70 |
1c6 |
ZwSuspendProcess |
| 2243 |
a6b90 |
1c7 |
ZwSuspendThread |
| 2244 |
a6bb0 |
1c8 |
ZwSystemDebugControl |
| 2245 |
a6bd0 |
1c9 |
ZwTerminateEnclave |
| 2246 |
a6bf0 |
1ca |
ZwTerminateJobObject |
| 2247 |
a3840 |
2c |
ZwTerminateProcess |
| 2248 |
a3d20 |
53 |
ZwTerminateThread |
| 2249 |
a6c10 |
1cb |
ZwTestAlert |
| 2250 |
a6c30 |
1cc |
ZwThawRegistry |
| 2251 |
a6c50 |
1cd |
ZwThawTransactions |
| 2252 |
a6c70 |
1ce |
ZwTraceControl |
| 2253 |
a3e70 |
5e |
ZwTraceEvent |
| 2254 |
a6c90 |
1cf |
ZwTranslateFilePath |
| 2255 |
a6cb0 |
1d0 |
ZwUmsThreadYield |
| 2256 |
a6cd0 |
1d1 |
ZwUnloadDriver |
| 2257 |
a6cf0 |
1d2 |
ZwUnloadKey |
| 2258 |
a6d10 |
1d3 |
ZwUnloadKey2 |
| 2259 |
a6d30 |
1d4 |
ZwUnloadKeyEx |
| 2260 |
a6d50 |
1d5 |
ZwUnlockFile |
| 2261 |
a6d70 |
1d6 |
ZwUnlockVirtualMemory |
| 2262 |
a3800 |
2a |
ZwUnmapViewOfSection |
| 2263 |
a6d90 |
1d7 |
ZwUnmapViewOfSectionEx |
| 2264 |
a6db0 |
1d8 |
ZwUnsubscribeWnfStateChange |
| 2265 |
a6dd0 |
1d9 |
ZwUpdateWnfStateData |
| 2266 |
a6df0 |
1da |
ZwVdmControl |
| 2267 |
a6e10 |
1db |
ZwWaitForAlertByThreadId |
| 2268 |
a6e30 |
1dc |
ZwWaitForDebugEvent |
| 2269 |
a6e50 |
1dd |
ZwWaitForKeyedEvent |
| 2270 |
a3e10 |
5b |
ZwWaitForMultipleObjects |
| 2271 |
a3600 |
1a |
ZwWaitForMultipleObjects32 |
| 2272 |
a3340 |
4 |
ZwWaitForSingleObject |
| 2273 |
a6e70 |
1de |
ZwWaitForWorkViaWorkerFactory |
| 2274 |
a6e90 |
1df |
ZwWaitHighEventPair |
| 2275 |
a6eb0 |
1e0 |
ZwWaitLowEventPair |
| 2276 |
a32e0 |
1 |
ZwWorkerFactoryWorkerReady |
| 2277 |
a33c0 |
8 |
ZwWriteFile |
| 2278 |
a3620 |
1b |
ZwWriteFileGather |
| 2279 |
a3da0 |
57 |
ZwWriteRequestData |
| 2280 |
a3a00 |
3a |
ZwWriteVirtualMemory |
| 2281 |
a3b80 |
46 |
ZwYieldExecution |