NtCreateWnfStateName |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
196 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
207 |
207 |
207 |
207 |
208 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
207 |
207 |
207 |
207 |
207 |
207 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
205 |
205 |
205 |
205 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
NtOpenProcess |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
38 |
NtCreateDirectoryObjectEx |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
169 |
169 |
169 |
169 |
170 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
169 |
169 |
169 |
169 |
169 |
169 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
NtQueryQuotaInformationFile |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
335 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
350 |
350 |
350 |
350 |
351 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
350 |
350 |
350 |
350 |
350 |
350 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
343 |
343 |
343 |
344 |
344 |
344 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
348 |
348 |
348 |
348 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
339 |
339 |
NtSetInformationTransaction |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
402 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
419 |
419 |
419 |
419 |
420 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
419 |
419 |
419 |
419 |
419 |
419 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
410 |
410 |
410 |
411 |
411 |
411 |
412 |
412 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
416 |
416 |
416 |
416 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
NtQueryPortInformationProcess |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
334 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
349 |
349 |
349 |
349 |
350 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
349 |
349 |
349 |
349 |
349 |
349 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
342 |
342 |
342 |
343 |
343 |
343 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
347 |
347 |
347 |
347 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
338 |
338 |
NtRaiseException |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
348 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
364 |
364 |
364 |
364 |
365 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
364 |
364 |
364 |
364 |
364 |
364 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
356 |
356 |
356 |
357 |
357 |
357 |
358 |
358 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
362 |
362 |
362 |
362 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
352 |
352 |
NtRemoveIoCompletion |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
9 |
NtQueryTimer |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
56 |
NtAlertThread |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
NtTerminateThread |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
83 |
NtCompactKeys |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
151 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
155 |
155 |
155 |
155 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
NtAddDriverEntry |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
NtMakePermanentObject |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
275 |
275 |
275 |
275 |
276 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
275 |
275 |
275 |
275 |
275 |
275 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
268 |
268 |
268 |
269 |
269 |
269 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
273 |
273 |
273 |
273 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
265 |
265 |
NtCreateSemaphore |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
184 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
194 |
194 |
194 |
194 |
195 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
194 |
194 |
194 |
194 |
194 |
194 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
NtAlpcCreateResourceReserve |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
122 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
NtSetDefaultHardErrorPort |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
387 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
404 |
404 |
404 |
404 |
405 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
404 |
404 |
404 |
404 |
404 |
404 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
395 |
395 |
395 |
396 |
396 |
396 |
397 |
397 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
401 |
401 |
401 |
401 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
NtRollforwardTransactionManager |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
375 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
392 |
392 |
392 |
392 |
393 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
392 |
392 |
392 |
392 |
392 |
392 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
383 |
383 |
383 |
384 |
384 |
384 |
385 |
385 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
389 |
389 |
389 |
389 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
NtRegisterProtocolAddressInformation |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
354 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
371 |
371 |
371 |
371 |
372 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
371 |
371 |
371 |
371 |
371 |
371 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
362 |
362 |
362 |
363 |
363 |
363 |
364 |
364 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
368 |
368 |
368 |
368 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
358 |
358 |
NtQueryInformationResourceManager |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
322 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
337 |
337 |
337 |
337 |
338 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
337 |
337 |
337 |
337 |
337 |
337 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
330 |
330 |
330 |
331 |
331 |
331 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
335 |
335 |
335 |
335 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
326 |
326 |
NtSetLdtEntries |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
409 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
426 |
426 |
426 |
426 |
427 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
426 |
426 |
426 |
426 |
426 |
426 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
417 |
417 |
417 |
418 |
418 |
418 |
419 |
419 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
423 |
423 |
423 |
423 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
NtFlushInstallUILanguage |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
223 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
235 |
235 |
235 |
235 |
236 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
235 |
235 |
235 |
235 |
235 |
235 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
229 |
229 |
229 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
233 |
233 |
233 |
233 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
NtCallEnclave |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
142 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
NtCancelTimer2 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
145 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
NtUnmapViewOfSectionEx |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
450 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
467 |
467 |
467 |
467 |
468 |
467 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
467 |
467 |
467 |
467 |
467 |
467 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
458 |
458 |
458 |
459 |
459 |
459 |
460 |
460 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
464 |
464 |
464 |
464 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
NtSetEaFile |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
391 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
408 |
408 |
408 |
408 |
409 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
408 |
408 |
408 |
408 |
408 |
408 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
399 |
399 |
399 |
400 |
400 |
400 |
401 |
401 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
405 |
405 |
405 |
405 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
NtUmsThreadYield |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
443 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
460 |
460 |
460 |
460 |
461 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
460 |
460 |
460 |
460 |
460 |
460 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
451 |
451 |
451 |
452 |
452 |
452 |
453 |
453 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
457 |
457 |
457 |
457 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
NtOpenKeyEx |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
279 |
281 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
293 |
293 |
293 |
293 |
294 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
293 |
293 |
293 |
293 |
293 |
293 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
286 |
286 |
286 |
287 |
287 |
287 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
291 |
291 |
291 |
291 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
283 |
283 |
NtRollbackTransaction |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
374 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
391 |
391 |
391 |
391 |
392 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
391 |
391 |
391 |
391 |
391 |
391 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
382 |
382 |
382 |
383 |
383 |
383 |
384 |
384 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
388 |
388 |
388 |
388 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
NtRenameKey |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
360 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
377 |
377 |
377 |
377 |
378 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
377 |
377 |
377 |
377 |
377 |
377 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
368 |
368 |
368 |
369 |
369 |
369 |
370 |
370 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
374 |
374 |
374 |
374 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
364 |
364 |
NtQueryInformationJobObject |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
320 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
335 |
335 |
335 |
335 |
336 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
335 |
335 |
335 |
335 |
335 |
335 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
328 |
328 |
328 |
329 |
329 |
329 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
333 |
333 |
333 |
333 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
324 |
324 |
NtQueryDefaultLocale |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
21 |
NtCompareTokens |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
154 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
158 |
158 |
158 |
158 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
NtAcceptConnectPort |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
2 |
NtSetLowWaitHighEventPair |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
411 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
428 |
428 |
428 |
428 |
429 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
428 |
428 |
428 |
428 |
428 |
428 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
419 |
419 |
419 |
420 |
420 |
420 |
421 |
421 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
425 |
425 |
425 |
425 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
NtMapViewOfSection |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
40 |
NtPrivilegeObjectAuditAlarm |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
303 |
305 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
317 |
317 |
317 |
317 |
318 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
317 |
317 |
317 |
317 |
317 |
317 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
310 |
310 |
310 |
311 |
311 |
311 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
315 |
315 |
315 |
315 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
307 |
307 |
NtSetHighEventPair |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
392 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
409 |
409 |
409 |
409 |
410 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
409 |
409 |
409 |
409 |
409 |
409 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
400 |
400 |
400 |
401 |
401 |
401 |
402 |
402 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
406 |
406 |
406 |
406 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
NtAlpcCancelMessage |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
117 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
NtAlpcDeleteSecurityContext |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
128 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
NtAlpcDisconnectPort |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
129 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
NtQueryValueKey |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
23 |
NtQueueApcThreadEx |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
347 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
362 |
362 |
362 |
362 |
363 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
362 |
362 |
362 |
362 |
362 |
362 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
355 |
355 |
355 |
356 |
356 |
356 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
360 |
360 |
360 |
360 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
351 |
351 |
NtDeleteWnfStateName |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
209 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
220 |
220 |
220 |
220 |
221 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
220 |
220 |
220 |
220 |
220 |
220 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
218 |
218 |
218 |
218 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
NtQueryWnfStateNameInformation |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
346 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
361 |
361 |
361 |
361 |
362 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
361 |
361 |
361 |
361 |
361 |
361 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
354 |
354 |
354 |
355 |
355 |
355 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
359 |
359 |
359 |
359 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
350 |
350 |
NtSetInformationEnlistment |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
396 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
413 |
413 |
413 |
413 |
414 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
413 |
413 |
413 |
413 |
413 |
413 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
404 |
404 |
404 |
405 |
405 |
405 |
406 |
406 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
410 |
410 |
410 |
410 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
NtQueryDirectoryFileEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
312 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
327 |
327 |
327 |
327 |
328 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
327 |
327 |
327 |
327 |
327 |
327 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
320 |
320 |
320 |
321 |
321 |
321 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
325 |
325 |
325 |
325 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
316 |
316 |
NtQueryVolumeInformationFile |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
73 |
NtCreateEventPair |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
172 |
172 |
172 |
172 |
173 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
172 |
172 |
172 |
172 |
172 |
172 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
NtClearEvent |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
62 |
NtRegisterThreadTerminatePort |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
355 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
372 |
372 |
372 |
372 |
373 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
372 |
372 |
372 |
372 |
372 |
372 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
363 |
363 |
363 |
364 |
364 |
364 |
365 |
365 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
369 |
369 |
369 |
369 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
359 |
359 |
NtImpersonateClientOfPort |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
31 |
NtEnumerateDriverEntries |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
215 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
227 |
227 |
227 |
227 |
228 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
227 |
227 |
227 |
227 |
227 |
227 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
221 |
221 |
221 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
225 |
225 |
225 |
225 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
NtSetInformationTransactionManager |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
403 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
420 |
420 |
420 |
420 |
421 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
420 |
420 |
420 |
420 |
420 |
420 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
411 |
411 |
411 |
412 |
412 |
412 |
413 |
413 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
417 |
417 |
417 |
417 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
NtCreateProfileEx |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
190 |
190 |
190 |
190 |
191 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
190 |
190 |
190 |
190 |
190 |
190 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
NtModifyBootEntry |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
268 |
270 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
282 |
282 |
282 |
282 |
283 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
282 |
282 |
282 |
282 |
282 |
282 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
275 |
275 |
275 |
276 |
276 |
276 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
280 |
280 |
280 |
280 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
272 |
272 |
NtSetVolumeInformationFile |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
424 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
441 |
441 |
441 |
441 |
442 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
441 |
441 |
441 |
441 |
441 |
441 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
432 |
432 |
432 |
433 |
433 |
433 |
434 |
434 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
438 |
438 |
438 |
438 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
NtQueryDriverEntryOrder |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
314 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
329 |
329 |
329 |
329 |
330 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
329 |
329 |
329 |
329 |
329 |
329 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
322 |
322 |
322 |
323 |
323 |
323 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
327 |
327 |
327 |
327 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
318 |
318 |
NtSuspendProcess |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
433 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
450 |
450 |
450 |
450 |
451 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
450 |
450 |
450 |
450 |
450 |
450 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
441 |
441 |
441 |
442 |
442 |
442 |
443 |
443 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
447 |
447 |
447 |
447 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
NtCreateIRTimer |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
173 |
173 |
173 |
173 |
174 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
173 |
173 |
173 |
173 |
173 |
173 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
NtAlpcConnectPort |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
118 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
NtTestAlert |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
438 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
455 |
455 |
455 |
455 |
456 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
455 |
455 |
455 |
455 |
455 |
455 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
446 |
446 |
446 |
447 |
447 |
447 |
448 |
448 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
452 |
452 |
452 |
452 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
NtOpenSection |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
55 |
NtReadFile |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
6 |
NtOpenDirectoryObject |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
88 |
NtPrePrepareEnlistment |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
299 |
301 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
313 |
313 |
313 |
313 |
314 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
313 |
313 |
313 |
313 |
313 |
313 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
306 |
306 |
306 |
307 |
307 |
307 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
311 |
311 |
311 |
311 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
303 |
303 |
NtLoadDriver |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
253 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
265 |
265 |
265 |
265 |
266 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
265 |
265 |
265 |
265 |
265 |
265 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
259 |
259 |
259 |
260 |
260 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
263 |
263 |
263 |
263 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
NtSetIoCompletion |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
407 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
424 |
424 |
424 |
424 |
425 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
424 |
424 |
424 |
424 |
424 |
424 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
415 |
415 |
415 |
416 |
416 |
416 |
417 |
417 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
421 |
421 |
421 |
421 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
NtOpenEventPair |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
276 |
278 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
290 |
290 |
290 |
290 |
291 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
290 |
290 |
290 |
290 |
290 |
290 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
283 |
283 |
283 |
284 |
284 |
284 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
288 |
288 |
288 |
288 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
280 |
280 |
NtGetMUIRegistryInfo |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
238 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
250 |
250 |
250 |
250 |
251 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
250 |
250 |
250 |
250 |
250 |
250 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
244 |
244 |
244 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
248 |
248 |
248 |
248 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
NtGetNlsSectionPtr |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
241 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
253 |
253 |
253 |
253 |
254 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
253 |
253 |
253 |
253 |
253 |
253 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
247 |
247 |
247 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
251 |
251 |
251 |
251 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
NtQuerySystemEnvironmentValueEx |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
342 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
357 |
357 |
357 |
357 |
358 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
357 |
357 |
357 |
357 |
357 |
357 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
350 |
350 |
350 |
351 |
351 |
351 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
355 |
355 |
355 |
355 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
346 |
346 |
NtAlpcDeleteResourceReserve |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
126 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
NtSetInformationKey |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
398 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
415 |
415 |
415 |
415 |
416 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
415 |
415 |
415 |
415 |
415 |
415 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
406 |
406 |
406 |
407 |
407 |
407 |
408 |
408 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
412 |
412 |
412 |
412 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
NtAllocateVirtualMemoryEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
NtDeleteDriverEntry |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
202 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
213 |
213 |
213 |
213 |
214 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
213 |
213 |
213 |
213 |
213 |
213 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
211 |
211 |
211 |
211 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
NtOpenKeyedEvent |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
282 |
284 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
296 |
296 |
296 |
296 |
297 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
296 |
296 |
296 |
296 |
296 |
296 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
289 |
289 |
289 |
290 |
290 |
290 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
294 |
294 |
294 |
294 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
286 |
286 |
NtCreateProcess |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
187 |
187 |
187 |
187 |
188 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
187 |
187 |
187 |
187 |
187 |
187 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
NtSetInformationResourceManager |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
399 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
416 |
416 |
416 |
416 |
417 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
416 |
416 |
416 |
416 |
416 |
416 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
407 |
407 |
407 |
408 |
408 |
408 |
409 |
409 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
413 |
413 |
413 |
413 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
NtCreateSection |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
74 |
NtQueryWnfStateData |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
345 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
360 |
360 |
360 |
360 |
361 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
360 |
360 |
360 |
360 |
360 |
360 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
353 |
353 |
353 |
354 |
354 |
354 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
358 |
358 |
358 |
358 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
349 |
349 |
NtFilterTokenEx |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
221 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
233 |
233 |
233 |
233 |
234 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
233 |
233 |
233 |
233 |
233 |
233 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
227 |
227 |
227 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
231 |
231 |
231 |
231 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
NtCreateThread |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
78 |
NtLoadKeyEx |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
270 |
270 |
270 |
270 |
271 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
270 |
270 |
270 |
270 |
270 |
270 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
263 |
263 |
263 |
264 |
264 |
264 |
265 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
268 |
268 |
268 |
268 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
260 |
260 |
NtSetInformationWorkerFactory |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
405 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
422 |
422 |
422 |
422 |
423 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
422 |
422 |
422 |
422 |
422 |
422 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
413 |
413 |
413 |
414 |
414 |
414 |
415 |
415 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
419 |
419 |
419 |
419 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
NtFlushVirtualMemory |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
227 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
239 |
239 |
239 |
239 |
240 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
239 |
239 |
239 |
239 |
239 |
239 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
233 |
233 |
233 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
237 |
237 |
237 |
237 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
NtOpenTimer |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
294 |
296 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
308 |
308 |
308 |
308 |
309 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
308 |
308 |
308 |
308 |
308 |
308 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
301 |
301 |
301 |
302 |
302 |
302 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
306 |
306 |
306 |
306 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
298 |
298 |
NtCreateTransactionManager |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
192 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
203 |
203 |
203 |
203 |
204 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
203 |
203 |
203 |
203 |
203 |
203 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
201 |
201 |
201 |
201 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
NtNotifyChangeDirectoryFile |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
270 |
272 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
284 |
284 |
284 |
284 |
285 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
284 |
284 |
284 |
284 |
284 |
284 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
277 |
277 |
277 |
278 |
278 |
278 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
282 |
282 |
282 |
282 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
274 |
274 |
NtDeleteValueKey |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
207 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
218 |
218 |
218 |
218 |
219 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
218 |
218 |
218 |
218 |
218 |
218 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
216 |
216 |
216 |
216 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
NtReleaseKeyedEvent |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
356 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
373 |
373 |
373 |
373 |
374 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
373 |
373 |
373 |
373 |
373 |
373 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
364 |
364 |
364 |
365 |
365 |
365 |
366 |
366 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
370 |
370 |
370 |
370 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
360 |
360 |
NtMapUserPhysicalPages |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
267 |
268 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
280 |
280 |
280 |
280 |
281 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
280 |
280 |
280 |
280 |
280 |
280 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
273 |
273 |
273 |
274 |
274 |
274 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
278 |
278 |
278 |
278 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
270 |
270 |
NtWorkerFactoryWorkerReady |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
1 |
NtOpenThreadTokenEx |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
47 |
NtRemoveProcessDebug |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
359 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
376 |
376 |
376 |
376 |
377 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
376 |
376 |
376 |
376 |
376 |
376 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
367 |
367 |
367 |
368 |
368 |
368 |
369 |
369 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
373 |
373 |
373 |
373 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
363 |
363 |
NtSetDriverEntryOrder |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
390 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
407 |
407 |
407 |
407 |
408 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
407 |
407 |
407 |
407 |
407 |
407 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
398 |
398 |
398 |
399 |
399 |
399 |
400 |
400 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
404 |
404 |
404 |
404 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
NtAddBootEntry |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
NtDuplicateObject |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
60 |
NtOpenMutant |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
283 |
285 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
297 |
297 |
297 |
297 |
298 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
297 |
297 |
297 |
297 |
297 |
297 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
290 |
290 |
290 |
291 |
291 |
291 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
295 |
295 |
295 |
295 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
287 |
287 |
NtCreateKeyedEvent |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
178 |
178 |
178 |
178 |
179 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
178 |
178 |
178 |
178 |
178 |
178 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
NtLockFile |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
271 |
271 |
271 |
271 |
272 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
271 |
271 |
271 |
271 |
271 |
271 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
264 |
264 |
264 |
265 |
265 |
265 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
269 |
269 |
269 |
269 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
261 |
261 |
NtSetLowEventPair |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
410 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
427 |
427 |
427 |
427 |
428 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
427 |
427 |
427 |
427 |
427 |
427 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
418 |
418 |
418 |
419 |
419 |
419 |
420 |
420 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
424 |
424 |
424 |
424 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
NtMapUserPhysicalPagesScatter |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
3 |
NtExtendSection |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
218 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
230 |
230 |
230 |
230 |
231 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
230 |
230 |
230 |
230 |
230 |
230 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
224 |
224 |
224 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
228 |
228 |
228 |
228 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
NtRemoveIoCompletionEx |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
358 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
375 |
375 |
375 |
375 |
376 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
375 |
375 |
375 |
375 |
375 |
375 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
366 |
366 |
366 |
367 |
367 |
367 |
368 |
368 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
372 |
372 |
372 |
372 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
362 |
362 |
NtFsControlFile |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
57 |
NtOpenIoCompletion |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
277 |
279 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
291 |
291 |
291 |
291 |
292 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
291 |
291 |
291 |
291 |
291 |
291 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
284 |
284 |
284 |
285 |
285 |
285 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
289 |
289 |
289 |
289 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
281 |
281 |
NtSetIntervalProfile |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
406 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
423 |
423 |
423 |
423 |
424 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
423 |
423 |
423 |
423 |
423 |
423 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
414 |
414 |
414 |
415 |
415 |
415 |
416 |
416 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
420 |
420 |
420 |
420 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
NtAlpcOpenSenderProcess |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
132 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
NtLoadHotPatch |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
255 |
256 |
256 |
256 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtQueryInformationToken |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
33 |
NtCreateTimer |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
187 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
198 |
198 |
198 |
198 |
199 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
198 |
198 |
198 |
198 |
198 |
198 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
196 |
196 |
196 |
196 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
NtOpenKeyTransactedEx |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
281 |
283 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
295 |
295 |
295 |
295 |
296 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
295 |
295 |
295 |
295 |
295 |
295 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
288 |
288 |
288 |
289 |
289 |
289 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
293 |
293 |
293 |
293 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
285 |
285 |
NtReadVirtualMemoryEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
367 |
367 |
367 |
367 |
368 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
367 |
367 |
367 |
367 |
367 |
367 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtListenPort |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
252 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
264 |
264 |
264 |
264 |
265 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
264 |
264 |
264 |
264 |
264 |
264 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
258 |
258 |
258 |
259 |
259 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
262 |
262 |
262 |
262 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
NtWaitForMultipleObjects32 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
26 |
NtCompareObjects |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
152 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
156 |
156 |
156 |
156 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
NtDirectGraphicsCall |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
221 |
221 |
221 |
221 |
222 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
221 |
221 |
221 |
221 |
221 |
221 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
219 |
219 |
219 |
219 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtQueryTimerResolution |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
344 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
359 |
359 |
359 |
359 |
360 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
359 |
359 |
359 |
359 |
359 |
359 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
352 |
352 |
352 |
353 |
353 |
353 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
357 |
357 |
357 |
357 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
348 |
348 |
NtAlpcQueryInformation |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
134 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
NtUnloadKeyEx |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
447 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
464 |
464 |
464 |
464 |
465 |
464 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
464 |
464 |
464 |
464 |
464 |
464 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
455 |
455 |
455 |
456 |
456 |
456 |
457 |
457 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
461 |
461 |
461 |
461 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
NtCreateWorkerFactory |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
197 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
208 |
208 |
208 |
208 |
209 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
208 |
208 |
208 |
208 |
208 |
208 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
206 |
206 |
206 |
206 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
NtQueryInformationAtom |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
317 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
332 |
332 |
332 |
332 |
333 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
332 |
332 |
332 |
332 |
332 |
332 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
325 |
325 |
325 |
326 |
326 |
326 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
330 |
330 |
330 |
330 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
321 |
321 |
NtSetEvent |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
14 |
NtTraceEvent |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
94 |
NtRaiseHardError |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
349 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
365 |
365 |
365 |
365 |
366 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
365 |
365 |
365 |
365 |
365 |
365 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
357 |
357 |
357 |
358 |
358 |
358 |
359 |
359 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
363 |
363 |
363 |
363 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
353 |
353 |
NtStartProfile |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
430 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
447 |
447 |
447 |
447 |
448 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
447 |
447 |
447 |
447 |
447 |
447 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
438 |
438 |
438 |
439 |
439 |
439 |
440 |
440 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
444 |
444 |
444 |
444 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
NtQuerySystemInformationEx |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
343 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
358 |
358 |
358 |
358 |
359 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
358 |
358 |
358 |
358 |
358 |
358 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
348 |
348 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
351 |
351 |
351 |
352 |
352 |
352 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
356 |
356 |
356 |
356 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
347 |
347 |
NtCommitTransaction |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
150 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
154 |
154 |
154 |
154 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
NtDeleteBootEntry |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
201 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
212 |
212 |
212 |
212 |
213 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
212 |
212 |
212 |
212 |
212 |
212 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
210 |
210 |
210 |
210 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
NtFreeUserPhysicalPages |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
229 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
241 |
241 |
241 |
241 |
242 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
241 |
241 |
241 |
241 |
241 |
241 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
235 |
235 |
235 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
239 |
239 |
239 |
239 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
NtAlpcAcceptConnectPort |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
116 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
NtSetBootOptions |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
382 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
399 |
399 |
399 |
399 |
400 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
399 |
399 |
399 |
399 |
399 |
399 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
390 |
390 |
390 |
391 |
391 |
391 |
392 |
392 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
396 |
396 |
396 |
396 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
NtNotifyChangeDirectoryFileEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
271 |
273 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
285 |
285 |
285 |
285 |
286 |
285 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
285 |
285 |
285 |
285 |
285 |
285 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
278 |
278 |
278 |
279 |
279 |
279 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
283 |
283 |
283 |
283 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
275 |
275 |
NtQuerySystemInformation |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
54 |
NtSetCachedSigningLevel |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
383 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
400 |
400 |
400 |
400 |
401 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
400 |
400 |
400 |
400 |
400 |
400 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
391 |
391 |
391 |
392 |
392 |
392 |
393 |
393 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
397 |
397 |
397 |
397 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
NtQueryDefaultUILanguage |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
68 |
NtCreateDebugObject |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
159 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
167 |
167 |
167 |
167 |
168 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
167 |
167 |
167 |
167 |
167 |
167 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
NtFreezeRegistry |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
230 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
242 |
242 |
242 |
242 |
243 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
242 |
242 |
242 |
242 |
242 |
242 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
236 |
236 |
236 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
240 |
240 |
240 |
240 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
NtAllocateUuids |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
117 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
NtUnloadKey |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
445 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
462 |
462 |
462 |
462 |
463 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
462 |
462 |
462 |
462 |
462 |
462 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
453 |
453 |
453 |
454 |
454 |
454 |
455 |
455 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
459 |
459 |
459 |
459 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
NtTerminateJobObject |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
437 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
454 |
454 |
454 |
454 |
455 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
454 |
454 |
454 |
454 |
454 |
454 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
445 |
445 |
445 |
446 |
446 |
446 |
447 |
447 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
451 |
451 |
451 |
451 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
NtDeleteWnfStateData |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
208 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
219 |
219 |
219 |
219 |
220 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
219 |
219 |
219 |
219 |
219 |
219 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
217 |
217 |
217 |
217 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
NtUnlockFile |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
448 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
465 |
465 |
465 |
465 |
466 |
465 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
465 |
465 |
465 |
465 |
465 |
465 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
456 |
456 |
456 |
457 |
457 |
457 |
458 |
458 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
462 |
462 |
462 |
462 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
NtSetBootEntryOrder |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
381 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
398 |
398 |
398 |
398 |
399 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
398 |
398 |
398 |
398 |
398 |
398 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
389 |
389 |
389 |
390 |
390 |
390 |
391 |
391 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
395 |
395 |
395 |
395 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
NtQuerySymbolicLinkObject |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
340 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
355 |
355 |
355 |
355 |
356 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
355 |
355 |
355 |
355 |
355 |
355 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
348 |
348 |
348 |
349 |
349 |
349 |
350 |
350 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
353 |
353 |
353 |
353 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
344 |
344 |
NtReadRequestData |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
84 |
NtReplaceKey |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
362 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
379 |
379 |
379 |
379 |
380 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
379 |
379 |
379 |
379 |
379 |
379 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
370 |
370 |
370 |
371 |
371 |
371 |
372 |
372 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
376 |
376 |
376 |
376 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
366 |
366 |
NtWriteVirtualMemory |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
58 |
NtQueryDebugFilterState |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
311 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
326 |
326 |
326 |
326 |
327 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
326 |
326 |
326 |
326 |
326 |
326 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
319 |
319 |
319 |
320 |
320 |
320 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
324 |
324 |
324 |
324 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
315 |
315 |
NtSetWnfProcessNotificationEvent |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
425 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
442 |
442 |
442 |
442 |
443 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
442 |
442 |
442 |
442 |
442 |
442 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
433 |
433 |
433 |
434 |
434 |
434 |
435 |
435 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
439 |
439 |
439 |
439 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
NtQueryOpenSubKeysEx |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
333 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
348 |
348 |
348 |
348 |
349 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
348 |
348 |
348 |
348 |
348 |
348 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
341 |
341 |
341 |
342 |
342 |
342 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
346 |
346 |
346 |
346 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
337 |
337 |
NtTranslateFilePath |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
442 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
459 |
459 |
459 |
459 |
460 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
459 |
459 |
459 |
459 |
459 |
459 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
450 |
450 |
450 |
451 |
451 |
451 |
452 |
452 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
456 |
456 |
456 |
456 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
NtCreateDirectoryObject |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
168 |
168 |
168 |
168 |
169 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
168 |
168 |
168 |
168 |
168 |
168 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
NtSetInformationProcess |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
28 |
NtUnloadDriver |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
444 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
461 |
461 |
461 |
461 |
462 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
461 |
461 |
461 |
461 |
461 |
461 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
452 |
452 |
452 |
453 |
453 |
453 |
454 |
454 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
458 |
458 |
458 |
458 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
NtQueryInstallUILanguage |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
326 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
341 |
341 |
341 |
341 |
342 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
341 |
341 |
341 |
341 |
341 |
341 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
334 |
334 |
334 |
335 |
335 |
335 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
339 |
339 |
339 |
339 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
330 |
330 |
NtReadOnlyEnlistment |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
350 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
366 |
366 |
366 |
366 |
367 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
366 |
366 |
366 |
366 |
366 |
366 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
358 |
358 |
358 |
359 |
359 |
359 |
360 |
360 |
361 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
364 |
364 |
364 |
364 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
354 |
354 |
NtSaveKeyEx |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
377 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
394 |
394 |
394 |
394 |
395 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
394 |
394 |
394 |
394 |
394 |
394 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
385 |
385 |
385 |
386 |
386 |
386 |
387 |
387 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
391 |
391 |
391 |
391 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
NtContinue |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
67 |
NtCreateWaitCompletionPacket |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
194 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
205 |
205 |
205 |
205 |
206 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
205 |
205 |
205 |
205 |
205 |
205 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
203 |
203 |
203 |
203 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
NtFlushBuffersFile |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
75 |
NtCreatePagingFile |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
183 |
183 |
183 |
183 |
184 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
183 |
183 |
183 |
183 |
183 |
183 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
NtChangeProcessState |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtRestoreKey |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
368 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
385 |
385 |
385 |
385 |
386 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
385 |
385 |
385 |
385 |
385 |
385 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
376 |
376 |
376 |
377 |
377 |
377 |
378 |
378 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
382 |
382 |
382 |
382 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
NtReplyWaitReceivePort |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
11 |
NtQuerySecurityObject |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
337 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
352 |
352 |
352 |
352 |
353 |
352 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
352 |
352 |
352 |
352 |
352 |
352 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
345 |
345 |
345 |
346 |
346 |
346 |
347 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
350 |
350 |
350 |
350 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
341 |
341 |
NtFreeVirtualMemory |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
30 |
NtQueryMultipleValueKey |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
330 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
345 |
345 |
345 |
345 |
346 |
345 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
345 |
345 |
345 |
345 |
345 |
345 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
338 |
338 |
338 |
339 |
339 |
339 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
343 |
343 |
343 |
343 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
334 |
334 |
NtWaitLowEventPair |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
459 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
476 |
476 |
476 |
476 |
477 |
476 |
477 |
477 |
477 |
477 |
477 |
477 |
477 |
477 |
477 |
476 |
476 |
476 |
476 |
476 |
476 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
464 |
464 |
464 |
464 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
467 |
467 |
467 |
468 |
468 |
468 |
469 |
469 |
470 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
473 |
473 |
473 |
473 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
476 |
476 |
476 |
476 |
476 |
476 |
476 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
463 |
463 |
NtCompressKey |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
156 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
NtApphelpCacheControl |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
76 |
NtAddAtomEx |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
105 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
NtEnumerateKey |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
50 |
NtReplyPort |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
12 |
NtQueryObject |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
16 |
NtSetDebugFilterState |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
386 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
403 |
403 |
403 |
403 |
404 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
403 |
403 |
403 |
403 |
403 |
403 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
394 |
394 |
394 |
395 |
395 |
395 |
396 |
396 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
400 |
400 |
400 |
400 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
NtIsProcessInJob |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
79 |
NtLoadKey2 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
268 |
268 |
268 |
268 |
269 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
268 |
268 |
268 |
268 |
268 |
268 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
262 |
262 |
262 |
263 |
263 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
266 |
266 |
266 |
266 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
259 |
259 |
NtQueryBootEntryOrder |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
309 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
324 |
324 |
324 |
324 |
325 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
324 |
324 |
324 |
324 |
324 |
324 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
317 |
317 |
317 |
318 |
318 |
318 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
322 |
322 |
322 |
322 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
313 |
313 |
NtSuspendThread |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
434 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
451 |
451 |
451 |
451 |
452 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
451 |
451 |
451 |
451 |
451 |
451 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
442 |
442 |
442 |
443 |
443 |
443 |
444 |
444 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
448 |
448 |
448 |
448 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
NtCompareSigningLevels |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
153 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
157 |
157 |
157 |
157 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
NtAdjustTokenClaimsAndDeviceGroups |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
NtCreateResourceManager |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
192 |
192 |
192 |
192 |
193 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
192 |
192 |
192 |
192 |
192 |
192 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
NtAddAtom |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
71 |
NtPlugPlayControl |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
297 |
299 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
311 |
311 |
311 |
311 |
312 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
311 |
311 |
311 |
311 |
311 |
311 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
304 |
304 |
304 |
305 |
305 |
305 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
309 |
309 |
309 |
309 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
301 |
301 |
NtFilterBootOption |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
219 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
231 |
231 |
231 |
231 |
232 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
231 |
231 |
231 |
231 |
231 |
231 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
225 |
225 |
225 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
229 |
229 |
229 |
229 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
NtSaveMergedKeys |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
378 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
395 |
395 |
395 |
395 |
396 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
395 |
395 |
395 |
395 |
395 |
395 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
386 |
386 |
386 |
387 |
387 |
387 |
388 |
388 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
392 |
392 |
392 |
392 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
NtQueryInformationPort |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
321 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
336 |
336 |
336 |
336 |
337 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
336 |
336 |
336 |
336 |
336 |
336 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
329 |
329 |
329 |
330 |
330 |
330 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
334 |
334 |
334 |
334 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
325 |
325 |
NtSetContextThread |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
385 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
402 |
402 |
402 |
402 |
403 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
402 |
402 |
402 |
402 |
402 |
402 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
393 |
393 |
393 |
394 |
394 |
394 |
395 |
395 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
399 |
399 |
399 |
399 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
NtQuerySemaphore |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
339 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
354 |
354 |
354 |
354 |
355 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
354 |
354 |
354 |
354 |
354 |
354 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
347 |
347 |
347 |
348 |
348 |
348 |
349 |
349 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
350 |
352 |
352 |
352 |
352 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
343 |
343 |
NtGetCurrentProcessorNumberEx |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
236 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
248 |
248 |
248 |
248 |
249 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
248 |
248 |
248 |
248 |
248 |
248 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
242 |
242 |
242 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
246 |
246 |
246 |
246 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
NtDeleteObjectAuditAlarm |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
205 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
216 |
216 |
216 |
216 |
217 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
216 |
216 |
216 |
216 |
216 |
216 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
214 |
214 |
214 |
214 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
NtSetValueKey |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
96 |
NtSetHighWaitLowEventPair |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
393 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
410 |
410 |
410 |
410 |
411 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
410 |
410 |
410 |
410 |
410 |
410 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
401 |
401 |
401 |
402 |
402 |
402 |
403 |
403 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
407 |
407 |
407 |
407 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
NtTerminateEnclave |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
436 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
453 |
453 |
453 |
453 |
454 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
453 |
453 |
453 |
453 |
453 |
453 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
444 |
444 |
444 |
445 |
445 |
445 |
446 |
446 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
450 |
450 |
450 |
450 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
NtUnsubscribeWnfStateChange |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
451 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
468 |
468 |
468 |
468 |
469 |
468 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
468 |
468 |
468 |
468 |
468 |
468 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
459 |
459 |
459 |
460 |
460 |
460 |
461 |
461 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
465 |
465 |
465 |
465 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
NtWaitForAlertByThreadId |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
454 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
471 |
471 |
471 |
471 |
472 |
471 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
471 |
471 |
471 |
471 |
471 |
471 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
462 |
462 |
462 |
463 |
463 |
463 |
464 |
464 |
465 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
468 |
468 |
468 |
468 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
NtAccessCheck |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
0 |
NtAdjustGroupsToken |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
106 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
107 |
NtDisableLastKnownGood |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
210 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
222 |
222 |
222 |
222 |
223 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
222 |
222 |
222 |
222 |
222 |
222 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
216 |
216 |
216 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
220 |
220 |
220 |
220 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
NtContinueEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtAlertResumeThread |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
108 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
109 |
NtStopProfile |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
431 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
448 |
448 |
448 |
448 |
449 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
448 |
448 |
448 |
448 |
448 |
448 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
439 |
439 |
439 |
440 |
440 |
440 |
441 |
441 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
445 |
445 |
445 |
445 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
NtSetSystemEnvironmentValueEx |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
415 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
432 |
432 |
432 |
432 |
433 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
432 |
432 |
432 |
432 |
432 |
432 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
423 |
423 |
423 |
424 |
424 |
424 |
425 |
425 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
429 |
429 |
429 |
429 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
NtGetCurrentProcessorNumber |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
235 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
247 |
247 |
247 |
247 |
248 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
247 |
247 |
247 |
247 |
247 |
247 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
241 |
241 |
241 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
245 |
245 |
245 |
245 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
NtQueryAttributesFile |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
61 |
NtSetUuidSeed |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
423 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
440 |
440 |
440 |
440 |
441 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
440 |
440 |
440 |
440 |
440 |
440 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
431 |
431 |
431 |
432 |
432 |
432 |
433 |
433 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
437 |
437 |
437 |
437 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
NtRequestPort |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
365 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
382 |
382 |
382 |
382 |
383 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
382 |
382 |
382 |
382 |
382 |
382 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
373 |
373 |
373 |
374 |
374 |
374 |
375 |
375 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
379 |
379 |
379 |
379 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
NtEnumerateValueKey |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
19 |
NtRollbackEnlistment |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
372 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
389 |
389 |
389 |
389 |
390 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
389 |
389 |
389 |
389 |
389 |
389 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
380 |
380 |
380 |
381 |
381 |
381 |
382 |
382 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
386 |
386 |
386 |
386 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
NtAllocateUserPhysicalPages |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
NtOpenResourceManager |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
289 |
291 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
303 |
303 |
303 |
303 |
304 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
303 |
303 |
303 |
303 |
303 |
303 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
296 |
296 |
296 |
297 |
297 |
297 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
301 |
301 |
301 |
301 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
293 |
293 |
NtMapViewOfSectionEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
269 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
281 |
281 |
281 |
281 |
282 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
281 |
281 |
281 |
281 |
281 |
281 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
274 |
274 |
274 |
275 |
275 |
275 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
279 |
279 |
279 |
279 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
271 |
271 |
NtCreateIoCompletion |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
174 |
174 |
174 |
174 |
175 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
174 |
174 |
174 |
174 |
174 |
174 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
NtQueryKey |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
22 |
NtTraceControl |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
441 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
458 |
458 |
458 |
458 |
459 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
458 |
458 |
458 |
458 |
458 |
458 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
449 |
449 |
449 |
450 |
450 |
450 |
451 |
451 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
455 |
455 |
455 |
455 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
NtInitializeNlsFiles |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
247 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
259 |
259 |
259 |
259 |
260 |
259 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
259 |
259 |
259 |
259 |
259 |
259 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
253 |
253 |
253 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
257 |
257 |
257 |
257 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
NtIsSystemResumeAutomatic |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
250 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
262 |
262 |
262 |
262 |
263 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
262 |
262 |
262 |
262 |
262 |
262 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
256 |
256 |
256 |
257 |
257 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
260 |
260 |
260 |
260 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
NtAlpcCreatePortSection |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
121 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
NtLockProductActivationKeys |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
272 |
272 |
272 |
272 |
273 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
272 |
272 |
272 |
272 |
272 |
272 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
265 |
265 |
265 |
266 |
266 |
266 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
270 |
270 |
270 |
270 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
262 |
262 |
NtSetCachedSigningLevel2 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
384 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
401 |
401 |
401 |
401 |
402 |
401 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
401 |
401 |
401 |
401 |
401 |
401 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
392 |
392 |
392 |
393 |
393 |
393 |
394 |
394 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
398 |
398 |
398 |
398 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
NtCancelSynchronousIoFile |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
144 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
NtManagePartition |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
265 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
278 |
278 |
278 |
278 |
279 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
278 |
278 |
278 |
278 |
278 |
278 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
271 |
271 |
271 |
272 |
272 |
272 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
276 |
276 |
276 |
276 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
NtGetNotificationResourceManager |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
242 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
254 |
254 |
254 |
254 |
255 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
254 |
254 |
254 |
254 |
254 |
254 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
248 |
248 |
248 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
252 |
252 |
252 |
252 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
NtRollbackComplete |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
371 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
388 |
388 |
388 |
388 |
389 |
388 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
388 |
388 |
388 |
388 |
388 |
388 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
379 |
379 |
379 |
380 |
380 |
380 |
381 |
381 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
385 |
385 |
385 |
385 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
NtQueryInformationByName |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
318 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
333 |
333 |
333 |
333 |
334 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
333 |
333 |
333 |
333 |
333 |
333 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
326 |
326 |
326 |
327 |
327 |
327 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
331 |
331 |
331 |
331 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
322 |
322 |
NtCreateUserProcess |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
193 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
204 |
204 |
204 |
204 |
205 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
204 |
204 |
204 |
204 |
204 |
204 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
202 |
202 |
202 |
202 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
NtRecoverTransactionManager |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
353 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
370 |
370 |
370 |
370 |
371 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
370 |
370 |
370 |
370 |
370 |
370 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
361 |
361 |
361 |
362 |
362 |
362 |
363 |
363 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
367 |
367 |
367 |
367 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
357 |
357 |
NtSetInformationSymbolicLink |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
400 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
417 |
417 |
417 |
417 |
418 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
417 |
417 |
417 |
417 |
417 |
417 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
408 |
408 |
408 |
409 |
409 |
409 |
410 |
410 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
414 |
414 |
414 |
414 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
NtOpenPrivateNamespace |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
286 |
288 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
300 |
300 |
300 |
300 |
301 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
300 |
300 |
300 |
300 |
300 |
300 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
293 |
293 |
293 |
294 |
294 |
294 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
298 |
298 |
298 |
298 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
290 |
290 |
NtShutdownWorkerFactory |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
427 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
444 |
444 |
444 |
444 |
445 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
444 |
444 |
444 |
444 |
444 |
444 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
435 |
435 |
435 |
436 |
436 |
436 |
437 |
437 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
441 |
441 |
441 |
441 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
NtCreateKeyTransacted |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
177 |
177 |
177 |
177 |
178 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
177 |
177 |
177 |
177 |
177 |
177 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
NtCreatePartition |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
184 |
184 |
184 |
184 |
185 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
184 |
184 |
184 |
184 |
184 |
184 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
NtAllocateLocallyUniqueId |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
NtCreateProfile |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
189 |
189 |
189 |
189 |
190 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
189 |
189 |
189 |
189 |
189 |
189 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
182 |
182 |
NtSetInformationObject |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
92 |
NtSinglePhaseReject |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
429 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
446 |
446 |
446 |
446 |
447 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
446 |
446 |
446 |
446 |
446 |
446 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
437 |
437 |
437 |
438 |
438 |
438 |
439 |
439 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
443 |
443 |
443 |
443 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
NtFreezeTransactions |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
231 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
243 |
243 |
243 |
243 |
244 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
243 |
243 |
243 |
243 |
243 |
243 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
237 |
237 |
237 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
241 |
241 |
241 |
241 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
NtProtectVirtualMemory |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
80 |
NtFindAtom |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
20 |
NtQueryMutant |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
331 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
346 |
346 |
346 |
346 |
347 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
346 |
346 |
346 |
346 |
346 |
346 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
339 |
339 |
339 |
340 |
340 |
340 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
344 |
344 |
344 |
344 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
335 |
335 |
NtQueryEvent |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
86 |
NtPrivilegeCheck |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
302 |
304 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
316 |
316 |
316 |
316 |
317 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
316 |
316 |
316 |
316 |
316 |
316 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
309 |
309 |
309 |
310 |
310 |
310 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
314 |
314 |
314 |
314 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
306 |
306 |
NtSetThreadExecutionState |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
419 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
436 |
436 |
436 |
436 |
437 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
436 |
436 |
436 |
436 |
436 |
436 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
427 |
427 |
427 |
428 |
428 |
428 |
429 |
429 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
433 |
433 |
433 |
433 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
NtPrePrepareComplete |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
298 |
300 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
312 |
312 |
312 |
312 |
313 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
312 |
312 |
312 |
312 |
312 |
312 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
305 |
305 |
305 |
306 |
306 |
306 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
310 |
310 |
310 |
310 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
302 |
302 |
NtDrawText |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
212 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
224 |
224 |
224 |
224 |
225 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
224 |
224 |
224 |
224 |
224 |
224 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
218 |
218 |
218 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
222 |
222 |
222 |
222 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
NtQueryInformationFile |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
17 |
NtAlpcSetInformation |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
138 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
NtSetInformationDebugObject |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
395 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
412 |
412 |
412 |
412 |
413 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
412 |
412 |
412 |
412 |
412 |
412 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
403 |
403 |
403 |
404 |
404 |
404 |
405 |
405 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
409 |
409 |
409 |
409 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
NtInitiatePowerAction |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
249 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
261 |
261 |
261 |
261 |
262 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
261 |
261 |
261 |
261 |
261 |
261 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
255 |
255 |
255 |
256 |
256 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
259 |
259 |
259 |
259 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
NtWaitHighEventPair |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
458 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
475 |
475 |
475 |
475 |
476 |
475 |
476 |
476 |
476 |
476 |
476 |
476 |
476 |
476 |
476 |
475 |
475 |
475 |
475 |
475 |
475 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
463 |
463 |
463 |
463 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
466 |
466 |
466 |
467 |
467 |
467 |
468 |
468 |
469 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
472 |
472 |
472 |
472 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
NtOpenRegistryTransaction |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
288 |
290 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
302 |
302 |
302 |
302 |
303 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
302 |
302 |
302 |
302 |
302 |
302 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
295 |
295 |
295 |
296 |
296 |
296 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
300 |
300 |
300 |
300 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
292 |
292 |
NtPulseEvent |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
307 |
309 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
322 |
322 |
322 |
322 |
323 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
322 |
322 |
322 |
322 |
322 |
322 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
315 |
315 |
315 |
316 |
316 |
316 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
320 |
320 |
320 |
320 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
311 |
311 |
NtVdmControl |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
453 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
470 |
470 |
470 |
470 |
471 |
470 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
470 |
470 |
470 |
470 |
470 |
470 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
461 |
461 |
461 |
462 |
462 |
462 |
463 |
463 |
464 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
467 |
467 |
467 |
467 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
NtConnectPort |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
157 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
NtCreateTimer2 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
188 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
199 |
199 |
199 |
199 |
200 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
199 |
199 |
199 |
199 |
199 |
199 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
197 |
197 |
197 |
197 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
NtChangeThreadState |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtUnmapViewOfSection |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
42 |
NtDelayExecution |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
52 |
NtLockRegistryKey |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
273 |
273 |
273 |
273 |
274 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
273 |
273 |
273 |
273 |
273 |
273 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
266 |
266 |
266 |
267 |
267 |
267 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
271 |
271 |
271 |
271 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
263 |
263 |
NtAccessCheckByType |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
99 |
NtCreatePrivateNamespace |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
186 |
186 |
186 |
186 |
187 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
186 |
186 |
186 |
186 |
186 |
186 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
NtDeviceIoControlFile |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
7 |
NtSetInformationFile |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
39 |
NtQueryLicenseValue |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
329 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
344 |
344 |
344 |
344 |
345 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
344 |
344 |
344 |
344 |
344 |
344 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
337 |
337 |
337 |
338 |
338 |
338 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
342 |
342 |
342 |
342 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
333 |
333 |
NtGetCompleteWnfStateSubscription |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
233 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
245 |
245 |
245 |
245 |
246 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
245 |
245 |
245 |
245 |
245 |
245 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
239 |
239 |
239 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
243 |
243 |
243 |
243 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
NtSetIRTimer |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
394 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
411 |
411 |
411 |
411 |
412 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
411 |
411 |
411 |
411 |
411 |
411 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
402 |
402 |
402 |
403 |
403 |
403 |
404 |
404 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
408 |
408 |
408 |
408 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
398 |
398 |
NtSetTimer |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
98 |
NtAllocateVirtualMemory |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
24 |
NtQueryDirectoryObject |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
313 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
328 |
328 |
328 |
328 |
329 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
328 |
328 |
328 |
328 |
328 |
328 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
321 |
321 |
321 |
322 |
322 |
322 |
323 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
326 |
326 |
326 |
326 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
317 |
317 |
NtTerminateProcess |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
44 |
NtAlpcOpenSenderThread |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
133 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
NtGetNextProcess |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
239 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
251 |
251 |
251 |
251 |
252 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
251 |
251 |
251 |
251 |
251 |
251 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
245 |
245 |
245 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
249 |
249 |
249 |
249 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
NtOpenPartition |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
285 |
287 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
299 |
299 |
299 |
299 |
300 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
299 |
299 |
299 |
299 |
299 |
299 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
292 |
292 |
292 |
293 |
293 |
293 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
297 |
297 |
297 |
297 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
289 |
289 |
NtCreateMutant |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
181 |
181 |
181 |
181 |
182 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
181 |
181 |
181 |
181 |
181 |
181 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
NtMapCMFModule |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
266 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
279 |
279 |
279 |
279 |
280 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
279 |
279 |
279 |
279 |
279 |
279 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
272 |
272 |
272 |
273 |
273 |
273 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
277 |
277 |
277 |
277 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
269 |
269 |
NtWaitForWorkViaWorkerFactory |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
457 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
474 |
474 |
474 |
474 |
475 |
474 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
475 |
474 |
474 |
474 |
474 |
474 |
474 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
465 |
465 |
465 |
466 |
466 |
466 |
467 |
467 |
468 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
471 |
471 |
471 |
471 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
NtFlushWriteBuffer |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
228 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
240 |
240 |
240 |
240 |
241 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
240 |
240 |
240 |
240 |
240 |
240 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
234 |
234 |
234 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
238 |
238 |
238 |
238 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
231 |
231 |
NtDeleteFile |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
203 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
214 |
214 |
214 |
214 |
215 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
214 |
214 |
214 |
214 |
214 |
214 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
212 |
212 |
212 |
212 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
NtModifyDriverEntry |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
269 |
271 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
283 |
283 |
283 |
283 |
284 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
283 |
283 |
283 |
283 |
283 |
283 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
276 |
276 |
276 |
277 |
277 |
277 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
281 |
281 |
281 |
281 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
273 |
273 |
NtQueryInformationWorkerFactory |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
325 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
340 |
340 |
340 |
340 |
341 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
340 |
340 |
340 |
340 |
340 |
340 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
333 |
333 |
333 |
334 |
334 |
334 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
338 |
338 |
338 |
338 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
329 |
329 |
NtQueryVirtualMemory |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
35 |
NtNotifyChangeKey |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
272 |
274 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
286 |
286 |
286 |
286 |
287 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
286 |
286 |
286 |
286 |
286 |
286 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
279 |
279 |
279 |
280 |
280 |
280 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
284 |
284 |
284 |
284 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
276 |
276 |
NtInitializeEnclave |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
246 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
258 |
258 |
258 |
258 |
259 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
258 |
258 |
258 |
258 |
258 |
258 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
252 |
252 |
252 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
256 |
256 |
256 |
256 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
NtAllocateReserveObject |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
114 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
113 |
NtFlushBuffersFileEx |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
222 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
234 |
234 |
234 |
234 |
235 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
234 |
234 |
234 |
234 |
234 |
234 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
228 |
228 |
228 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
232 |
232 |
232 |
232 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
NtLoadEnclaveData |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
254 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
266 |
266 |
266 |
266 |
267 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
266 |
266 |
266 |
266 |
266 |
266 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
260 |
260 |
260 |
261 |
261 |
261 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
264 |
264 |
264 |
264 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
257 |
257 |
NtLoadKey |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
267 |
267 |
267 |
267 |
268 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
267 |
267 |
267 |
267 |
267 |
267 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
261 |
261 |
261 |
262 |
262 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
265 |
265 |
265 |
265 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
258 |
258 |
NtUnloadKey2 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
446 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
463 |
463 |
463 |
463 |
464 |
463 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
463 |
463 |
463 |
463 |
463 |
463 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
454 |
454 |
454 |
455 |
455 |
455 |
456 |
456 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
460 |
460 |
460 |
460 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
450 |
450 |
NtWriteFileGather |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
27 |
NtPssCaptureVaSpaceBulk |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
321 |
321 |
321 |
321 |
322 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
321 |
321 |
321 |
321 |
321 |
321 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
311 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
314 |
314 |
314 |
315 |
315 |
315 |
316 |
316 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
319 |
319 |
319 |
319 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtAcquireCrossVmMutant |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtSetSystemPowerState |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
417 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
434 |
434 |
434 |
434 |
435 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
434 |
434 |
434 |
434 |
434 |
434 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
425 |
425 |
425 |
426 |
426 |
426 |
427 |
427 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
431 |
431 |
431 |
431 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
NtUpdateWnfStateData |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
452 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
469 |
469 |
469 |
469 |
470 |
469 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
469 |
469 |
469 |
469 |
469 |
469 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
460 |
460 |
460 |
461 |
461 |
461 |
462 |
462 |
463 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
466 |
466 |
466 |
466 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
469 |
469 |
469 |
469 |
469 |
469 |
469 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
NtReplyWaitReceivePortEx |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
43 |
NtCompleteConnectPort |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
155 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
155 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
157 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
159 |
159 |
159 |
159 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
156 |
NtCommitComplete |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
147 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
151 |
151 |
151 |
151 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
NtCreateEnlistment |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
171 |
171 |
171 |
171 |
172 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
171 |
171 |
171 |
171 |
171 |
171 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
NtAlpcCreateSectionView |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
123 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
NtCreateRegistryTransaction |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
191 |
191 |
191 |
191 |
192 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
191 |
191 |
191 |
191 |
191 |
191 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
NtCreateJobObject |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
175 |
175 |
175 |
175 |
176 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
175 |
175 |
175 |
175 |
175 |
175 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
NtCreateMailslotFile |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
180 |
180 |
180 |
180 |
181 |
180 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
180 |
180 |
180 |
180 |
180 |
180 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
NtOpenSymbolicLinkObject |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
292 |
294 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
306 |
306 |
306 |
306 |
307 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
306 |
306 |
306 |
306 |
306 |
306 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
299 |
299 |
299 |
300 |
300 |
300 |
301 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
304 |
304 |
304 |
304 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
296 |
296 |
NtSetIoCompletionEx |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
408 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
425 |
425 |
425 |
425 |
426 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
425 |
425 |
425 |
425 |
425 |
425 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
416 |
416 |
416 |
417 |
417 |
417 |
418 |
418 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
422 |
422 |
422 |
422 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
412 |
412 |
NtQuerySecurityAttributesToken |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
336 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
346 |
351 |
351 |
351 |
351 |
352 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
351 |
351 |
351 |
351 |
351 |
351 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
344 |
344 |
344 |
345 |
345 |
345 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
349 |
349 |
349 |
349 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
340 |
340 |
NtCancelTimer |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
97 |
NtAdjustPrivilegesToken |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
65 |
NtAlertThreadByThreadId |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
112 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
110 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
111 |
NtReleaseSemaphore |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
10 |
NtSetSystemInformation |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
416 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
433 |
433 |
433 |
433 |
434 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
433 |
433 |
433 |
433 |
433 |
433 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
424 |
424 |
424 |
425 |
425 |
425 |
426 |
426 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
430 |
430 |
430 |
430 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
420 |
420 |
NtCreateWaitablePort |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
195 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
206 |
206 |
206 |
206 |
207 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
206 |
206 |
206 |
206 |
206 |
206 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
204 |
204 |
204 |
204 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
NtCreateCrossVmMutant |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
166 |
166 |
166 |
166 |
167 |
166 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
166 |
166 |
166 |
166 |
166 |
166 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtDuplicateToken |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
66 |
NtDeleteKey |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
204 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
215 |
215 |
215 |
215 |
216 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
215 |
215 |
215 |
215 |
215 |
215 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
210 |
210 |
210 |
210 |
210 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
213 |
213 |
213 |
213 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
NtQueueApcThread |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
69 |
NtReadVirtualMemory |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
63 |
NtOpenJobObject |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
278 |
280 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
292 |
292 |
292 |
292 |
293 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
292 |
292 |
292 |
292 |
292 |
292 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
285 |
285 |
285 |
286 |
286 |
286 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
290 |
290 |
290 |
290 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
282 |
282 |
NtIsUILanguageComitted |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
251 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
263 |
263 |
263 |
263 |
264 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
263 |
263 |
263 |
263 |
263 |
263 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
254 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
257 |
257 |
257 |
258 |
258 |
258 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
261 |
261 |
261 |
261 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
254 |
254 |
NtPrivilegedServiceAuditAlarm |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
304 |
306 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
318 |
318 |
318 |
318 |
319 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
318 |
318 |
318 |
318 |
318 |
318 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
311 |
311 |
311 |
312 |
312 |
312 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
316 |
316 |
316 |
316 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
308 |
308 |
NtReplyWaitReplyPort |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
364 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
381 |
381 |
381 |
381 |
382 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
381 |
381 |
381 |
381 |
381 |
381 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
372 |
372 |
372 |
373 |
373 |
373 |
374 |
374 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
378 |
378 |
378 |
378 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
NtAssignProcessToJobObject |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
140 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
NtSecureConnectPort |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
379 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
396 |
396 |
396 |
396 |
397 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
396 |
396 |
396 |
396 |
396 |
396 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
387 |
387 |
387 |
388 |
388 |
388 |
389 |
389 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
393 |
393 |
393 |
393 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
NtCommitEnlistment |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
148 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
152 |
152 |
152 |
152 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
153 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
NtOpenEvent |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
64 |
NtSerializeBoot |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
380 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
397 |
397 |
397 |
397 |
398 |
397 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
397 |
397 |
397 |
397 |
397 |
397 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
388 |
388 |
388 |
389 |
389 |
389 |
390 |
390 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
394 |
394 |
394 |
394 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
396 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
NtAlpcDeletePortSection |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
125 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
NtInitializeRegistry |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
248 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
260 |
260 |
260 |
260 |
261 |
260 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
261 |
260 |
260 |
260 |
260 |
260 |
260 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
254 |
254 |
254 |
255 |
255 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
258 |
258 |
258 |
258 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
260 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
251 |
251 |
NtCommitRegistryTransaction |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
149 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
151 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
152 |
153 |
153 |
153 |
153 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
154 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
150 |
NtGetContextThread |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
234 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
246 |
246 |
246 |
246 |
247 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
246 |
246 |
246 |
246 |
246 |
246 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
240 |
240 |
240 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
244 |
244 |
244 |
244 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
237 |
237 |
NtQueryEaFile |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
315 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
330 |
330 |
330 |
330 |
331 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
330 |
330 |
330 |
330 |
330 |
330 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
317 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
323 |
323 |
323 |
324 |
324 |
324 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
328 |
328 |
328 |
328 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
319 |
319 |
NtCallbackReturn |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
5 |
NtAlpcCreateSecurityContext |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
124 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
124 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
125 |
NtAccessCheckAndAuditAlarm |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
41 |
NtSetQuotaInformationFile |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
412 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
429 |
429 |
429 |
429 |
430 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
429 |
429 |
429 |
429 |
429 |
429 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
420 |
420 |
420 |
421 |
421 |
421 |
422 |
422 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
426 |
426 |
426 |
426 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
NtCreateNamedPipeFile |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
182 |
182 |
182 |
182 |
183 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
182 |
182 |
182 |
182 |
182 |
182 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
181 |
181 |
181 |
181 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
175 |
176 |
176 |
NtSetSecurityObject |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
413 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
430 |
430 |
430 |
430 |
431 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
430 |
430 |
430 |
430 |
430 |
430 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
421 |
421 |
421 |
422 |
422 |
422 |
423 |
423 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
427 |
427 |
427 |
427 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
NtNotifyChangeMultipleKeys |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
273 |
275 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
287 |
287 |
287 |
287 |
288 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
287 |
287 |
287 |
287 |
287 |
287 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
280 |
280 |
280 |
281 |
281 |
281 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
285 |
285 |
285 |
285 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
277 |
277 |
NtAccessCheckByTypeResultListAndAuditAlarm |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
101 |
NtLockVirtualMemory |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
274 |
274 |
274 |
274 |
275 |
274 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
274 |
274 |
274 |
274 |
274 |
274 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
262 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
267 |
267 |
267 |
268 |
268 |
268 |
269 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
272 |
272 |
272 |
272 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
263 |
264 |
264 |
NtSetTimer2 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
420 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
437 |
437 |
437 |
437 |
438 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
437 |
437 |
437 |
437 |
437 |
437 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
428 |
428 |
428 |
429 |
429 |
429 |
430 |
430 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
434 |
434 |
434 |
434 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
NtCreateKey |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
29 |
NtResumeProcess |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
369 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
386 |
386 |
386 |
386 |
387 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
386 |
386 |
386 |
386 |
386 |
386 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
377 |
377 |
377 |
378 |
378 |
378 |
379 |
379 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
383 |
383 |
383 |
383 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
NtReplacePartitionUnit |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
363 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
380 |
380 |
380 |
380 |
381 |
380 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
381 |
380 |
380 |
380 |
380 |
380 |
380 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
371 |
371 |
371 |
372 |
372 |
372 |
373 |
373 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
377 |
377 |
377 |
377 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
367 |
367 |
NtSubscribeWnfStateChange |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
432 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
449 |
449 |
449 |
449 |
450 |
449 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
449 |
449 |
449 |
449 |
449 |
449 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
440 |
440 |
440 |
441 |
441 |
441 |
442 |
442 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
446 |
446 |
446 |
446 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
448 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
436 |
436 |
NtGetDevicePowerState |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
237 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
249 |
249 |
249 |
249 |
250 |
249 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
250 |
249 |
249 |
249 |
249 |
249 |
249 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
243 |
243 |
243 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
247 |
247 |
247 |
247 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
240 |
240 |
NtCreateTransaction |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
191 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
202 |
202 |
202 |
202 |
203 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
202 |
202 |
202 |
202 |
202 |
202 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
197 |
197 |
197 |
197 |
197 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
200 |
200 |
200 |
200 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
NtSignalAndWaitForSingleObject |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
428 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
445 |
445 |
445 |
445 |
446 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
445 |
445 |
445 |
445 |
445 |
445 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
433 |
433 |
433 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
436 |
436 |
436 |
437 |
437 |
437 |
438 |
438 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
442 |
442 |
442 |
442 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
432 |
432 |
NtPrepareComplete |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
300 |
302 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
314 |
314 |
314 |
314 |
315 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
314 |
314 |
314 |
314 |
314 |
314 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
307 |
307 |
307 |
308 |
308 |
308 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
312 |
312 |
312 |
312 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
304 |
304 |
NtQueryPerformanceCounter |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
49 |
NtResetWriteWatch |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
367 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
384 |
384 |
384 |
384 |
385 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
384 |
384 |
384 |
384 |
384 |
384 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
375 |
375 |
375 |
376 |
376 |
376 |
377 |
377 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
381 |
381 |
381 |
381 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
NtOpenFile |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
51 |
NtOpenTransactionManager |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
296 |
298 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
310 |
310 |
310 |
310 |
311 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
310 |
310 |
310 |
310 |
310 |
310 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
303 |
303 |
303 |
304 |
304 |
304 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
308 |
308 |
308 |
308 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
300 |
300 |
NtSetDefaultLocale |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
388 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
398 |
405 |
405 |
405 |
405 |
406 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
405 |
405 |
405 |
405 |
405 |
405 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
396 |
396 |
396 |
397 |
397 |
397 |
398 |
398 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
402 |
402 |
402 |
402 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
NtSetInformationThread |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
13 |
NtCreatePort |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
185 |
185 |
185 |
185 |
186 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
185 |
185 |
185 |
185 |
185 |
185 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
182 |
182 |
182 |
182 |
182 |
182 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
183 |
184 |
184 |
184 |
184 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
178 |
179 |
179 |
NtQueryFullAttributesFile |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
316 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
331 |
331 |
331 |
331 |
332 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
331 |
331 |
331 |
331 |
331 |
331 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
321 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
324 |
324 |
324 |
325 |
325 |
325 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
329 |
329 |
329 |
329 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
320 |
320 |
NtOpenThread |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
293 |
295 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
307 |
307 |
307 |
307 |
308 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
307 |
307 |
307 |
307 |
307 |
307 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
300 |
300 |
300 |
301 |
301 |
301 |
302 |
302 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
305 |
305 |
305 |
305 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
297 |
297 |
NtOpenEnlistment |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
275 |
277 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
289 |
289 |
289 |
289 |
290 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
289 |
289 |
289 |
289 |
289 |
289 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
275 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
282 |
282 |
282 |
283 |
283 |
283 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
287 |
287 |
287 |
287 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
279 |
279 |
NtSetEventBoostPriority |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
45 |
NtOpenSession |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
291 |
293 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
305 |
305 |
305 |
305 |
306 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
305 |
305 |
305 |
305 |
305 |
305 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
298 |
298 |
298 |
299 |
299 |
299 |
300 |
300 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
303 |
303 |
303 |
303 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
295 |
295 |
NtAlpcCreatePort |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
120 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
123 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
NtSetTimerEx |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
421 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
438 |
438 |
438 |
438 |
439 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
438 |
438 |
438 |
438 |
438 |
438 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
427 |
429 |
429 |
429 |
430 |
430 |
430 |
431 |
431 |
432 |
433 |
433 |
433 |
433 |
433 |
433 |
433 |
435 |
435 |
435 |
435 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
412 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
NtCreateEnclave |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
170 |
170 |
170 |
170 |
171 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
170 |
170 |
170 |
170 |
170 |
170 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
167 |
167 |
167 |
167 |
167 |
167 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
NtCreateTokenEx |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
190 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
201 |
201 |
201 |
201 |
202 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
201 |
201 |
201 |
201 |
201 |
201 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
196 |
196 |
196 |
196 |
196 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
199 |
199 |
199 |
199 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
NtShutdownSystem |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
426 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
443 |
443 |
443 |
443 |
444 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
443 |
443 |
443 |
443 |
443 |
443 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
434 |
434 |
434 |
435 |
435 |
435 |
436 |
436 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
440 |
440 |
440 |
440 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
430 |
430 |
NtCancelIoFile |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
93 |
NtFlushKey |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
225 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
237 |
237 |
237 |
237 |
238 |
237 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
237 |
237 |
237 |
237 |
237 |
237 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
231 |
231 |
231 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
235 |
235 |
235 |
235 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
NtSetDefaultUILanguage |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
389 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
406 |
406 |
406 |
406 |
407 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
406 |
406 |
406 |
406 |
406 |
406 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
394 |
394 |
394 |
394 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
397 |
397 |
397 |
398 |
398 |
398 |
399 |
399 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
403 |
403 |
403 |
403 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
NtQueryInformationTransaction |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
323 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
338 |
338 |
338 |
338 |
339 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
338 |
338 |
338 |
338 |
338 |
338 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
331 |
331 |
331 |
332 |
332 |
332 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
336 |
336 |
336 |
336 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
327 |
327 |
NtWaitForSingleObject |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
4 |
NtSetInformationJobObject |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
397 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
414 |
414 |
414 |
414 |
415 |
414 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
415 |
414 |
414 |
414 |
414 |
414 |
414 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
397 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
399 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
402 |
402 |
402 |
402 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
405 |
405 |
405 |
406 |
406 |
406 |
407 |
407 |
408 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
411 |
411 |
411 |
411 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
400 |
401 |
401 |
NtDeletePrivateNamespace |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
206 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
217 |
217 |
217 |
217 |
218 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
217 |
217 |
217 |
217 |
217 |
217 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
215 |
215 |
215 |
215 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
208 |
209 |
209 |
NtCancelWaitCompletionPacket |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
146 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
148 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
149 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
147 |
NtCreateCrossVmEvent |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
165 |
165 |
165 |
165 |
166 |
165 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
166 |
165 |
165 |
165 |
165 |
165 |
165 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
160 |
160 |
NtCreateProcessStateChange |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
188 |
188 |
188 |
188 |
189 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
188 |
188 |
188 |
188 |
188 |
188 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtCreateJobSet |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
176 |
176 |
176 |
176 |
177 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
176 |
176 |
176 |
176 |
176 |
176 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
168 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
170 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
175 |
175 |
175 |
175 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
176 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
169 |
170 |
170 |
NtCreateProcessEx |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
77 |
NtAlpcDeleteSectionView |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
127 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
127 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
126 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
128 |
NtEnumerateTransactionObject |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
217 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
229 |
229 |
229 |
229 |
230 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
229 |
229 |
229 |
229 |
229 |
229 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
223 |
223 |
223 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
227 |
227 |
227 |
227 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
NtAssociateWaitCompletionPacket |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
141 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
NtOpenKey |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
18 |
NtQueueApcThreadEx2 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
363 |
363 |
363 |
363 |
364 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
363 |
363 |
363 |
363 |
363 |
363 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
361 |
361 |
361 |
361 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtRequestWaitReplyPort |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
34 |
NtQueryInformationTransactionManager |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
324 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
339 |
339 |
339 |
339 |
340 |
339 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
339 |
339 |
339 |
339 |
339 |
339 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
329 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
332 |
332 |
332 |
333 |
333 |
333 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
337 |
337 |
337 |
337 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
328 |
328 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
102 |
NtWriteRequestData |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
87 |
NtWaitForMultipleObjects |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
91 |
NtPowerInformation |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
95 |
NtWriteFile |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
8 |
NtThawTransactions |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
440 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
457 |
457 |
457 |
457 |
458 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
457 |
457 |
457 |
457 |
457 |
457 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
448 |
448 |
448 |
449 |
449 |
449 |
450 |
450 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
454 |
454 |
454 |
454 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
NtAlpcImpersonateClientOfPort |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
131 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
NtPropagationFailed |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
306 |
308 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
320 |
320 |
320 |
320 |
321 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
320 |
320 |
320 |
320 |
320 |
320 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
313 |
313 |
313 |
314 |
314 |
314 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
318 |
318 |
318 |
318 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
310 |
310 |
NtQueryInformationThread |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
37 |
NtOpenProcessToken |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
287 |
289 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
296 |
301 |
301 |
301 |
301 |
302 |
301 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
302 |
301 |
301 |
301 |
301 |
301 |
301 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
291 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
294 |
294 |
294 |
295 |
295 |
295 |
296 |
296 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
299 |
299 |
299 |
299 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
281 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
291 |
291 |
NtRevertContainerImpersonation |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
370 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
387 |
387 |
387 |
387 |
388 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
387 |
387 |
387 |
387 |
387 |
387 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
378 |
378 |
378 |
379 |
379 |
379 |
380 |
380 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
384 |
384 |
384 |
384 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
387 |
387 |
387 |
387 |
387 |
387 |
387 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
NtYieldExecution |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
70 |
NtQuerySecurityPolicy |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
338 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
353 |
353 |
353 |
353 |
354 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
353 |
353 |
353 |
353 |
353 |
353 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
340 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
343 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
346 |
346 |
346 |
347 |
347 |
347 |
348 |
348 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
349 |
351 |
351 |
351 |
351 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
342 |
342 |
NtCreateFile |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
85 |
NtQuerySystemEnvironmentValue |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
341 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
356 |
356 |
356 |
356 |
357 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
356 |
356 |
356 |
356 |
356 |
356 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
341 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
345 |
346 |
346 |
346 |
346 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
349 |
349 |
349 |
350 |
350 |
350 |
351 |
351 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
354 |
354 |
354 |
354 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
345 |
345 |
NtDebugContinue |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
199 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
210 |
210 |
210 |
210 |
211 |
210 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
210 |
210 |
210 |
210 |
210 |
210 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
205 |
205 |
205 |
205 |
205 |
205 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
206 |
208 |
208 |
208 |
208 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
NtQueryInformationProcess |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
25 |
NtImpersonateThread |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
245 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
257 |
257 |
257 |
257 |
258 |
257 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
258 |
257 |
257 |
257 |
257 |
257 |
257 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
249 |
251 |
251 |
251 |
252 |
252 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
255 |
255 |
255 |
255 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
NtResetEvent |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
366 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
383 |
383 |
383 |
383 |
384 |
383 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
384 |
383 |
383 |
383 |
383 |
383 |
383 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
366 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
371 |
371 |
371 |
371 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
372 |
374 |
374 |
374 |
375 |
375 |
375 |
376 |
376 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
380 |
380 |
380 |
380 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
370 |
370 |
NtGetNextThread |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
240 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
252 |
252 |
252 |
252 |
253 |
252 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
253 |
252 |
252 |
252 |
252 |
252 |
252 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
241 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
246 |
246 |
246 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
250 |
250 |
250 |
250 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
242 |
243 |
243 |
NtReadFileScatter |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
46 |
NtRenameTransactionManager |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
361 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
371 |
378 |
378 |
378 |
378 |
379 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
378 |
378 |
378 |
378 |
378 |
378 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
365 |
366 |
366 |
366 |
366 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
369 |
369 |
369 |
370 |
370 |
370 |
371 |
371 |
372 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
375 |
375 |
375 |
375 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
365 |
365 |
NtCreateSymbolicLinkObject |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
185 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
195 |
195 |
195 |
195 |
196 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
195 |
195 |
195 |
195 |
195 |
195 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
194 |
194 |
194 |
194 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
195 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
181 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
NtOpenObjectAuditAlarm |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
284 |
286 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
298 |
298 |
298 |
298 |
299 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
298 |
298 |
298 |
298 |
298 |
298 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
286 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
291 |
291 |
291 |
292 |
292 |
292 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
296 |
296 |
296 |
296 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
287 |
288 |
288 |
NtSetTimerResolution |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
422 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
439 |
439 |
439 |
439 |
440 |
439 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
440 |
439 |
439 |
439 |
439 |
439 |
439 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
427 |
427 |
427 |
427 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
430 |
430 |
430 |
431 |
431 |
431 |
432 |
432 |
433 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
436 |
436 |
436 |
436 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
425 |
426 |
426 |
NtOpenTransaction |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
295 |
297 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
309 |
309 |
309 |
309 |
310 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
309 |
309 |
309 |
309 |
309 |
309 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
297 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
302 |
302 |
302 |
303 |
303 |
303 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
307 |
307 |
307 |
307 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
298 |
299 |
299 |
NtRollbackRegistryTransaction |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
373 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
383 |
390 |
390 |
390 |
390 |
391 |
390 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
391 |
390 |
390 |
390 |
390 |
390 |
390 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
377 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
381 |
381 |
381 |
382 |
382 |
382 |
383 |
383 |
384 |
385 |
385 |
385 |
385 |
385 |
385 |
385 |
387 |
387 |
387 |
387 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
389 |
390 |
390 |
390 |
390 |
390 |
390 |
390 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
377 |
377 |
NtOpenProcessTokenEx |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
48 |
NtEnumerateBootEntries |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
214 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
226 |
226 |
226 |
226 |
227 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
226 |
226 |
226 |
226 |
226 |
226 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
220 |
220 |
220 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
224 |
224 |
224 |
224 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
NtSaveKey |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
376 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
386 |
393 |
393 |
393 |
393 |
394 |
393 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
394 |
393 |
393 |
393 |
393 |
393 |
393 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
376 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
378 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
380 |
381 |
381 |
381 |
381 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
382 |
384 |
384 |
384 |
385 |
385 |
385 |
386 |
386 |
387 |
388 |
388 |
388 |
388 |
388 |
388 |
388 |
390 |
390 |
390 |
390 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
393 |
393 |
393 |
393 |
393 |
393 |
393 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
379 |
380 |
380 |
NtQuerySection |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
81 |
NtCreateThreadStateChange |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
197 |
197 |
197 |
197 |
198 |
197 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
197 |
197 |
197 |
197 |
197 |
197 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
158 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
158 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
160 |
161 |
161 |
161 |
161 |
161 |
161 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
162 |
163 |
163 |
163 |
163 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
164 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
159 |
NtDebugActiveProcess |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
198 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
209 |
209 |
209 |
209 |
210 |
209 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
210 |
209 |
209 |
209 |
209 |
209 |
209 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
198 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
199 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
204 |
204 |
204 |
204 |
204 |
204 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
205 |
207 |
207 |
207 |
207 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
NtAlpcConnectPortEx |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
119 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
119 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
121 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
122 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
118 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
120 |
NtUnlockVirtualMemory |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
449 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
466 |
466 |
466 |
466 |
467 |
466 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
466 |
466 |
466 |
466 |
466 |
466 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
454 |
454 |
454 |
454 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
457 |
457 |
457 |
458 |
458 |
458 |
459 |
459 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
463 |
463 |
463 |
463 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
453 |
453 |
NtAlpcRevokeSecurityContext |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
136 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
NtCreateToken |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
189 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
200 |
200 |
200 |
200 |
201 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
200 |
200 |
200 |
200 |
200 |
200 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
195 |
195 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
198 |
198 |
198 |
198 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
191 |
192 |
192 |
NtQueryDirectoryFile |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
53 |
NtResumeThread |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
82 |
NtCopyFileChunk |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
165 |
N/A |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
165 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtGetCachedSigningLevel |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
232 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
244 |
244 |
244 |
244 |
245 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
244 |
244 |
244 |
244 |
244 |
244 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
235 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
238 |
238 |
238 |
239 |
239 |
239 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
242 |
242 |
242 |
242 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
235 |
235 |
NtCreateSectionEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
193 |
193 |
193 |
193 |
194 |
193 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
194 |
193 |
193 |
193 |
193 |
193 |
193 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
185 |
186 |
186 |
NtDeleteAtom |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
200 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
211 |
211 |
211 |
211 |
212 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
211 |
211 |
211 |
211 |
211 |
211 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
200 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
201 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
203 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
204 |
206 |
206 |
206 |
206 |
206 |
206 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
209 |
209 |
209 |
209 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
202 |
203 |
203 |
NtWaitForKeyedEvent |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
456 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
466 |
473 |
473 |
473 |
473 |
474 |
473 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
474 |
473 |
473 |
473 |
473 |
473 |
473 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
462 |
464 |
464 |
464 |
465 |
465 |
465 |
466 |
466 |
467 |
468 |
468 |
468 |
468 |
468 |
468 |
468 |
470 |
470 |
470 |
470 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
446 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
NtAccessCheckByTypeAndAuditAlarm |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
89 |
NtPrepareEnlistment |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
301 |
303 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
315 |
315 |
315 |
315 |
316 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
315 |
315 |
315 |
315 |
315 |
315 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
301 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
306 |
308 |
308 |
308 |
309 |
309 |
309 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
313 |
313 |
313 |
313 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
305 |
305 |
NtFlushProcessWriteBuffers |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
226 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
238 |
238 |
238 |
238 |
239 |
238 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
238 |
238 |
238 |
238 |
238 |
238 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
230 |
232 |
232 |
232 |
233 |
233 |
233 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
234 |
236 |
236 |
236 |
236 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
238 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
229 |
229 |
NtDisplayString |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
211 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
223 |
223 |
223 |
223 |
224 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
223 |
223 |
223 |
223 |
223 |
223 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
211 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
217 |
217 |
217 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
221 |
221 |
221 |
221 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
207 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
NtSetSystemEnvironmentValue |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
414 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
431 |
431 |
431 |
431 |
432 |
431 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
432 |
431 |
431 |
431 |
431 |
431 |
431 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
419 |
419 |
419 |
419 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
422 |
422 |
422 |
423 |
423 |
423 |
424 |
424 |
425 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
428 |
428 |
428 |
428 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
431 |
431 |
431 |
431 |
431 |
431 |
431 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
NtOpenKeyTransacted |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
280 |
282 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
294 |
294 |
294 |
294 |
295 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
294 |
294 |
294 |
294 |
294 |
294 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
280 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
282 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
285 |
287 |
287 |
287 |
288 |
288 |
288 |
289 |
289 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
292 |
292 |
292 |
292 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
284 |
284 |
NtCloseObjectAuditAlarm |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
59 |
NtQueryIntervalProfile |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
327 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
337 |
342 |
342 |
342 |
342 |
343 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
342 |
342 |
342 |
342 |
342 |
342 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
327 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
333 |
335 |
335 |
335 |
336 |
336 |
336 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
340 |
340 |
340 |
340 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
331 |
331 |
NtAlpcQueryInformationMessage |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
135 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
135 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
134 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
NtNotifyChangeSession |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
274 |
276 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
283 |
288 |
288 |
288 |
288 |
289 |
288 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
289 |
288 |
288 |
288 |
288 |
288 |
288 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
274 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
279 |
281 |
281 |
281 |
282 |
282 |
282 |
283 |
283 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
286 |
286 |
286 |
286 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
288 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
278 |
278 |
NtQueryBootOptions |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
310 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
325 |
325 |
325 |
325 |
326 |
325 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
326 |
325 |
325 |
325 |
325 |
325 |
325 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
315 |
315 |
315 |
315 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
316 |
318 |
318 |
318 |
319 |
319 |
319 |
320 |
320 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
323 |
323 |
323 |
323 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
303 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
313 |
314 |
314 |
NtEnableLastKnownGood |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
213 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
225 |
225 |
225 |
225 |
226 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
225 |
225 |
225 |
225 |
225 |
225 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
213 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
214 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
219 |
219 |
219 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
223 |
223 |
223 |
223 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
209 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
215 |
216 |
216 |
NtSetInformationVirtualMemory |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
404 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
414 |
421 |
421 |
421 |
421 |
422 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
421 |
421 |
421 |
421 |
421 |
421 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
408 |
409 |
409 |
409 |
409 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
410 |
412 |
412 |
412 |
413 |
413 |
413 |
414 |
414 |
415 |
416 |
416 |
416 |
416 |
416 |
416 |
416 |
418 |
418 |
418 |
418 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
395 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
408 |
408 |
NtAlpcSendWaitReceivePort |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
137 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
137 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
136 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
NtLoadKey3 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
462 |
N/A |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
N/A |
463 |
463 |
463 |
463 |
N/A |
463 |
463 |
463 |
N/A |
463 |
463 |
463 |
463 |
463 |
463 |
N/A |
N/A |
463 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
464 |
464 |
464 |
N/A |
464 |
464 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
464 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
470 |
269 |
269 |
269 |
269 |
270 |
269 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
270 |
269 |
269 |
269 |
269 |
269 |
269 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
267 |
267 |
267 |
267 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
269 |
N/A |
N/A |
N/A |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
450 |
463 |
463 |
463 |
463 |
463 |
463 |
463 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtCreateThreadEx |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
186 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
196 |
196 |
196 |
196 |
197 |
196 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
197 |
196 |
196 |
196 |
196 |
196 |
196 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
186 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
187 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
189 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
190 |
192 |
192 |
192 |
192 |
192 |
192 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
193 |
195 |
195 |
195 |
195 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
196 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
182 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
188 |
189 |
189 |
NtEnumerateSystemEnvironmentValuesEx |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
216 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
228 |
228 |
228 |
228 |
229 |
228 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
229 |
228 |
228 |
228 |
228 |
228 |
228 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
217 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
219 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
222 |
222 |
222 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
226 |
226 |
226 |
226 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
212 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
218 |
219 |
219 |
NtClose |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
15 |
NtImpersonateAnonymousToken |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
244 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
256 |
256 |
256 |
256 |
257 |
256 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
257 |
256 |
256 |
256 |
256 |
256 |
256 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
248 |
250 |
250 |
250 |
251 |
251 |
251 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
252 |
254 |
254 |
254 |
254 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
240 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
NtSetSystemTime |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
418 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
428 |
435 |
435 |
435 |
435 |
436 |
435 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
436 |
435 |
435 |
435 |
435 |
435 |
435 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
420 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
422 |
423 |
423 |
423 |
423 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
424 |
426 |
426 |
426 |
427 |
427 |
427 |
428 |
428 |
429 |
430 |
430 |
430 |
430 |
430 |
430 |
430 |
432 |
432 |
432 |
432 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
434 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
409 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
421 |
422 |
422 |
NtRecoverEnlistment |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
351 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
368 |
368 |
368 |
368 |
369 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
368 |
368 |
368 |
368 |
368 |
368 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
351 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
353 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
359 |
359 |
359 |
360 |
360 |
360 |
361 |
361 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
365 |
365 |
365 |
365 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
355 |
355 |
NtOpenSemaphore |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
290 |
292 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
304 |
304 |
304 |
304 |
305 |
304 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
304 |
304 |
304 |
304 |
304 |
304 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
290 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
292 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
294 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
295 |
297 |
297 |
297 |
298 |
298 |
298 |
299 |
299 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
300 |
302 |
302 |
302 |
302 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
304 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
284 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
293 |
294 |
294 |
NtQueryInformationEnlistment |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
319 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
329 |
334 |
334 |
334 |
334 |
335 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
334 |
334 |
334 |
334 |
334 |
334 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
321 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
324 |
324 |
324 |
324 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
325 |
327 |
327 |
327 |
328 |
328 |
328 |
329 |
329 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
332 |
332 |
332 |
332 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
322 |
323 |
323 |
NtReleaseMutant |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
32 |
NtFlushInstructionCache |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
224 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
236 |
236 |
236 |
236 |
237 |
236 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
237 |
236 |
236 |
236 |
236 |
236 |
236 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
225 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
230 |
230 |
230 |
231 |
231 |
231 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
234 |
234 |
234 |
234 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
236 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
226 |
227 |
227 |
NtAllocateUserPhysicalPagesEx |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
115 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
116 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
NtAlpcImpersonateClientContainerOfPort |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
130 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
130 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
132 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
133 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
129 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
131 |
NtSystemDebugControl |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
435 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
452 |
452 |
452 |
452 |
453 |
452 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
453 |
452 |
452 |
452 |
452 |
452 |
452 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
435 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
437 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
440 |
440 |
440 |
440 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
443 |
443 |
443 |
444 |
444 |
444 |
445 |
445 |
446 |
447 |
447 |
447 |
447 |
447 |
447 |
447 |
449 |
449 |
449 |
449 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
452 |
452 |
452 |
452 |
452 |
452 |
452 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
426 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
438 |
439 |
439 |
NtCreateEvent |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
72 |
NtCancelIoFileEx |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
143 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
143 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
145 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
146 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
144 |
NtAccessCheckByTypeResultList |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
100 |
NtThawRegistry |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
439 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
449 |
456 |
456 |
456 |
456 |
457 |
456 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
456 |
456 |
456 |
456 |
456 |
456 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
439 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
441 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
443 |
444 |
444 |
444 |
444 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
447 |
447 |
447 |
448 |
448 |
448 |
449 |
449 |
450 |
451 |
451 |
451 |
451 |
451 |
451 |
451 |
453 |
453 |
453 |
453 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
456 |
456 |
456 |
456 |
456 |
456 |
456 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
429 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
442 |
443 |
443 |
NtFilterToken |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
220 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
232 |
232 |
232 |
232 |
233 |
232 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
233 |
232 |
232 |
232 |
232 |
232 |
232 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
220 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
221 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
223 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
224 |
226 |
226 |
226 |
227 |
227 |
227 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
228 |
230 |
230 |
230 |
230 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
232 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
216 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
222 |
223 |
223 |
NtOpenThreadToken |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
36 |
NtReleaseWorkerFactoryWorker |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
357 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
367 |
374 |
374 |
374 |
374 |
375 |
374 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
375 |
374 |
374 |
374 |
374 |
374 |
374 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
357 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
359 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
361 |
362 |
362 |
362 |
362 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
363 |
365 |
365 |
365 |
366 |
366 |
366 |
367 |
367 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
371 |
371 |
371 |
371 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
373 |
374 |
374 |
374 |
374 |
374 |
374 |
374 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
360 |
361 |
361 |
NtSetInformationToken |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
401 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
411 |
418 |
418 |
418 |
418 |
419 |
418 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
419 |
418 |
418 |
418 |
418 |
418 |
418 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
401 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
403 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
405 |
406 |
406 |
406 |
406 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
407 |
409 |
409 |
409 |
410 |
410 |
410 |
411 |
411 |
412 |
413 |
413 |
413 |
413 |
413 |
413 |
413 |
415 |
415 |
415 |
415 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
417 |
418 |
418 |
418 |
418 |
418 |
418 |
418 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
392 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
404 |
405 |
405 |
NtRecoverResourceManager |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
352 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
362 |
369 |
369 |
369 |
369 |
370 |
369 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
370 |
369 |
369 |
369 |
369 |
369 |
369 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
352 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
354 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
356 |
357 |
357 |
357 |
357 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
358 |
360 |
360 |
360 |
361 |
361 |
361 |
362 |
362 |
363 |
364 |
364 |
364 |
364 |
364 |
364 |
364 |
366 |
366 |
366 |
366 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
368 |
369 |
369 |
369 |
369 |
369 |
369 |
369 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
355 |
356 |
356 |
NtAcquireProcessActivityReference |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
104 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
103 |
NtQueryIoCompletion |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
328 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
343 |
343 |
343 |
343 |
344 |
343 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
344 |
343 |
343 |
343 |
343 |
343 |
343 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
328 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
330 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
333 |
333 |
333 |
333 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
336 |
336 |
336 |
337 |
337 |
337 |
338 |
338 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
339 |
341 |
341 |
341 |
341 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
331 |
332 |
332 |
NtMakeTemporaryObject |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
271 |
276 |
276 |
276 |
276 |
277 |
276 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
276 |
276 |
276 |
276 |
276 |
276 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
264 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
269 |
269 |
269 |
270 |
270 |
270 |
271 |
271 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
274 |
274 |
274 |
274 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
276 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
259 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
265 |
266 |
266 |
NtCreateLowBoxToken |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
179 |
179 |
179 |
179 |
180 |
179 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
180 |
179 |
179 |
179 |
179 |
179 |
179 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
171 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
173 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
174 |
176 |
176 |
176 |
176 |
176 |
176 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
177 |
178 |
178 |
178 |
178 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
179 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
167 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
172 |
173 |
173 |
NtPropagationComplete |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
305 |
307 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
319 |
319 |
319 |
319 |
320 |
319 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
320 |
319 |
319 |
319 |
319 |
319 |
319 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
305 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
307 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
309 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
312 |
312 |
312 |
313 |
313 |
313 |
314 |
314 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
315 |
317 |
317 |
317 |
317 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
299 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
309 |
309 |
NtManageHotPatch |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
272 |
277 |
277 |
277 |
277 |
278 |
277 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
278 |
277 |
277 |
277 |
277 |
277 |
277 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
267 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
268 |
270 |
270 |
270 |
271 |
271 |
271 |
272 |
272 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
273 |
275 |
275 |
275 |
275 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
277 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
266 |
267 |
267 |
NtAreMappedFilesTheSame |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
139 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
139 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
141 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
142 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
138 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
140 |
NtWaitForDebugEvent |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
455 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
465 |
472 |
472 |
472 |
472 |
473 |
472 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
473 |
472 |
472 |
472 |
472 |
472 |
472 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
455 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
457 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
459 |
460 |
460 |
460 |
460 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
461 |
463 |
463 |
463 |
464 |
464 |
464 |
465 |
465 |
466 |
467 |
467 |
467 |
467 |
467 |
467 |
467 |
469 |
469 |
469 |
469 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
471 |
472 |
472 |
472 |
472 |
472 |
472 |
472 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
445 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
458 |
459 |
459 |
NtQueryAuxiliaryCounterFrequency |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
308 |
310 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
318 |
323 |
323 |
323 |
323 |
324 |
323 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
324 |
323 |
323 |
323 |
323 |
323 |
323 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
308 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
310 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
312 |
313 |
313 |
313 |
313 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
314 |
316 |
316 |
316 |
317 |
317 |
317 |
318 |
318 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
319 |
321 |
321 |
321 |
321 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
311 |
312 |
312 |
NtGetWriteWatch |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
243 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
255 |
255 |
255 |
255 |
256 |
255 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
256 |
255 |
255 |
255 |
255 |
255 |
255 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
243 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
244 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
246 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
247 |
249 |
249 |
249 |
250 |
250 |
250 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
251 |
253 |
253 |
253 |
253 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
255 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
239 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
245 |
246 |
246 |
NtQueryOpenSubKeys |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
332 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
342 |
347 |
347 |
347 |
347 |
348 |
347 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
348 |
347 |
347 |
347 |
347 |
347 |
347 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
332 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
334 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
336 |
337 |
337 |
337 |
337 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
338 |
340 |
340 |
340 |
341 |
341 |
341 |
342 |
342 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
343 |
345 |
345 |
345 |
345 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
347 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
323 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
335 |
336 |
336 |