NtAcceptConnectPort |
2 |
NtAccessCheck |
0 |
NtAccessCheckAndAuditAlarm |
41 |
NtAccessCheckByType |
99 |
NtAccessCheckByTypeAndAuditAlarm |
89 |
NtAccessCheckByTypeResultList |
100 |
NtAccessCheckByTypeResultListAndAuditAlarm |
101 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
102 |
NtAcquireCrossVmMutant |
103 |
NtAcquireProcessActivityReference |
104 |
NtAddAtom |
71 |
NtAddAtomEx |
105 |
NtAddBootEntry |
106 |
NtAddDriverEntry |
107 |
NtAdjustGroupsToken |
108 |
NtAdjustPrivilegesToken |
65 |
NtAdjustTokenClaimsAndDeviceGroups |
109 |
NtAlertResumeThread |
110 |
NtAlertThread |
111 |
NtAlertThreadByThreadId |
112 |
NtAllocateLocallyUniqueId |
113 |
NtAllocateReserveObject |
114 |
NtAllocateUserPhysicalPages |
115 |
NtAllocateUserPhysicalPagesEx |
116 |
NtAllocateUuids |
117 |
NtAllocateVirtualMemory |
24 |
NtAllocateVirtualMemoryEx |
118 |
NtAlpcAcceptConnectPort |
119 |
NtAlpcCancelMessage |
120 |
NtAlpcConnectPort |
121 |
NtAlpcConnectPortEx |
122 |
NtAlpcCreatePort |
123 |
NtAlpcCreatePortSection |
124 |
NtAlpcCreateResourceReserve |
125 |
NtAlpcCreateSectionView |
126 |
NtAlpcCreateSecurityContext |
127 |
NtAlpcDeletePortSection |
128 |
NtAlpcDeleteResourceReserve |
129 |
NtAlpcDeleteSectionView |
130 |
NtAlpcDeleteSecurityContext |
131 |
NtAlpcDisconnectPort |
132 |
NtAlpcImpersonateClientContainerOfPort |
133 |
NtAlpcImpersonateClientOfPort |
134 |
NtAlpcOpenSenderProcess |
135 |
NtAlpcOpenSenderThread |
136 |
NtAlpcQueryInformation |
137 |
NtAlpcQueryInformationMessage |
138 |
NtAlpcRevokeSecurityContext |
139 |
NtAlpcSendWaitReceivePort |
140 |
NtAlpcSetInformation |
141 |
NtApphelpCacheControl |
76 |
NtAreMappedFilesTheSame |
142 |
NtAssignProcessToJobObject |
143 |
NtAssociateWaitCompletionPacket |
144 |
NtCallEnclave |
145 |
NtCallbackReturn |
5 |
NtCancelIoFile |
93 |
NtCancelIoFileEx |
146 |
NtCancelSynchronousIoFile |
147 |
NtCancelTimer |
97 |
NtCancelTimer2 |
148 |
NtCancelWaitCompletionPacket |
149 |
NtClearEvent |
62 |
NtClose |
15 |
NtCloseObjectAuditAlarm |
59 |
NtCommitComplete |
150 |
NtCommitEnlistment |
151 |
NtCommitRegistryTransaction |
152 |
NtCommitTransaction |
153 |
NtCompactKeys |
154 |
NtCompareObjects |
155 |
NtCompareSigningLevels |
156 |
NtCompareTokens |
157 |
NtCompleteConnectPort |
158 |
NtCompressKey |
159 |
NtConnectPort |
160 |
NtContinue |
67 |
NtContinueEx |
161 |
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
162 |
NtCreateCrossVmEvent |
163 |
NtCreateCrossVmMutant |
164 |
NtCreateDebugObject |
165 |
NtCreateDirectoryObject |
166 |
NtCreateDirectoryObjectEx |
167 |
NtCreateEnclave |
168 |
NtCreateEnlistment |
169 |
NtCreateEvent |
72 |
NtCreateEventPair |
170 |
NtCreateFile |
85 |
NtCreateIRTimer |
171 |
NtCreateIoCompletion |
172 |
NtCreateJobObject |
173 |
NtCreateJobSet |
174 |
NtCreateKey |
29 |
NtCreateKeyTransacted |
175 |
NtCreateKeyedEvent |
176 |
NtCreateLowBoxToken |
177 |
NtCreateMailslotFile |
178 |
NtCreateMutant |
179 |
NtCreateNamedPipeFile |
180 |
NtCreatePagingFile |
181 |
NtCreatePartition |
182 |
NtCreatePort |
183 |
NtCreatePrivateNamespace |
184 |
NtCreateProcess |
185 |
NtCreateProcessEx |
77 |
NtCreateProfile |
186 |
NtCreateProfileEx |
187 |
NtCreateRegistryTransaction |
188 |
NtCreateResourceManager |
189 |
NtCreateSection |
74 |
NtCreateSectionEx |
190 |
NtCreateSemaphore |
191 |
NtCreateSymbolicLinkObject |
192 |
NtCreateThread |
78 |
NtCreateThreadEx |
193 |
NtCreateTimer |
194 |
NtCreateTimer2 |
195 |
NtCreateToken |
196 |
NtCreateTokenEx |
197 |
NtCreateTransaction |
198 |
NtCreateTransactionManager |
199 |
NtCreateUserProcess |
200 |
NtCreateWaitCompletionPacket |
201 |
NtCreateWaitablePort |
202 |
NtCreateWnfStateName |
203 |
NtCreateWorkerFactory |
204 |
NtDebugActiveProcess |
205 |
NtDebugContinue |
206 |
NtDelayExecution |
52 |
NtDeleteAtom |
207 |
NtDeleteBootEntry |
208 |
NtDeleteDriverEntry |
209 |
NtDeleteFile |
210 |
NtDeleteKey |
211 |
NtDeleteObjectAuditAlarm |
212 |
NtDeletePrivateNamespace |
213 |
NtDeleteValueKey |
214 |
NtDeleteWnfStateData |
215 |
NtDeleteWnfStateName |
216 |
NtDeviceIoControlFile |
7 |
NtDirectGraphicsCall |
217 |
NtDisableLastKnownGood |
218 |
NtDisplayString |
219 |
NtDrawText |
220 |
NtDuplicateObject |
60 |
NtDuplicateToken |
66 |
NtEnableLastKnownGood |
221 |
NtEnumerateBootEntries |
222 |
NtEnumerateDriverEntries |
223 |
NtEnumerateKey |
50 |
NtEnumerateSystemEnvironmentValuesEx |
224 |
NtEnumerateTransactionObject |
225 |
NtEnumerateValueKey |
19 |
NtExtendSection |
226 |
NtFilterBootOption |
227 |
NtFilterToken |
228 |
NtFilterTokenEx |
229 |
NtFindAtom |
20 |
NtFlushBuffersFile |
75 |
NtFlushBuffersFileEx |
230 |
NtFlushInstallUILanguage |
231 |
NtFlushInstructionCache |
232 |
NtFlushKey |
233 |
NtFlushProcessWriteBuffers |
234 |
NtFlushVirtualMemory |
235 |
NtFlushWriteBuffer |
236 |
NtFreeUserPhysicalPages |
237 |
NtFreeVirtualMemory |
30 |
NtFreezeRegistry |
238 |
NtFreezeTransactions |
239 |
NtFsControlFile |
57 |
NtGetCachedSigningLevel |
240 |
NtGetCompleteWnfStateSubscription |
241 |
NtGetContextThread |
242 |
NtGetCurrentProcessorNumber |
243 |
NtGetCurrentProcessorNumberEx |
244 |
NtGetDevicePowerState |
245 |
NtGetMUIRegistryInfo |
246 |
NtGetNextProcess |
247 |
NtGetNextThread |
248 |
NtGetNlsSectionPtr |
249 |
NtGetNotificationResourceManager |
250 |
NtGetWriteWatch |
251 |
NtImpersonateAnonymousToken |
252 |
NtImpersonateClientOfPort |
31 |
NtImpersonateThread |
253 |
NtInitializeEnclave |
254 |
NtInitializeNlsFiles |
255 |
NtInitializeRegistry |
256 |
NtInitiatePowerAction |
257 |
NtIsProcessInJob |
79 |
NtIsSystemResumeAutomatic |
258 |
NtIsUILanguageComitted |
259 |
NtListenPort |
260 |
NtLoadDriver |
261 |
NtLoadEnclaveData |
262 |
NtLoadKey |
263 |
NtLoadKey2 |
264 |
NtLoadKey3 |
470 |
NtLoadKeyEx |
265 |
NtLockFile |
266 |
NtLockProductActivationKeys |
267 |
NtLockRegistryKey |
268 |
NtLockVirtualMemory |
269 |
NtMakePermanentObject |
270 |
NtMakeTemporaryObject |
271 |
NtManageHotPatch |
272 |
NtManagePartition |
273 |
NtMapCMFModule |
274 |
NtMapUserPhysicalPages |
275 |
NtMapUserPhysicalPagesScatter |
3 |
NtMapViewOfSection |
40 |
NtMapViewOfSectionEx |
276 |
NtModifyBootEntry |
277 |
NtModifyDriverEntry |
278 |
NtNotifyChangeDirectoryFile |
279 |
NtNotifyChangeDirectoryFileEx |
280 |
NtNotifyChangeKey |
281 |
NtNotifyChangeMultipleKeys |
282 |
NtNotifyChangeSession |
283 |
NtOpenDirectoryObject |
88 |
NtOpenEnlistment |
284 |
NtOpenEvent |
64 |
NtOpenEventPair |
285 |
NtOpenFile |
51 |
NtOpenIoCompletion |
286 |
NtOpenJobObject |
287 |
NtOpenKey |
18 |
NtOpenKeyEx |
288 |
NtOpenKeyTransacted |
289 |
NtOpenKeyTransactedEx |
290 |
NtOpenKeyedEvent |
291 |
NtOpenMutant |
292 |
NtOpenObjectAuditAlarm |
293 |
NtOpenPartition |
294 |
NtOpenPrivateNamespace |
295 |
NtOpenProcess |
38 |
NtOpenProcessToken |
296 |
NtOpenProcessTokenEx |
48 |
NtOpenRegistryTransaction |
297 |
NtOpenResourceManager |
298 |
NtOpenSection |
55 |
NtOpenSemaphore |
299 |
NtOpenSession |
300 |
NtOpenSymbolicLinkObject |
301 |
NtOpenThread |
302 |
NtOpenThreadToken |
36 |
NtOpenThreadTokenEx |
47 |
NtOpenTimer |
303 |
NtOpenTransaction |
304 |
NtOpenTransactionManager |
305 |
NtPlugPlayControl |
306 |
NtPowerInformation |
95 |
NtPrePrepareComplete |
307 |
NtPrePrepareEnlistment |
308 |
NtPrepareComplete |
309 |
NtPrepareEnlistment |
310 |
NtPrivilegeCheck |
311 |
NtPrivilegeObjectAuditAlarm |
312 |
NtPrivilegedServiceAuditAlarm |
313 |
NtPropagationComplete |
314 |
NtPropagationFailed |
315 |
NtProtectVirtualMemory |
80 |
NtPssCaptureVaSpaceBulk |
316 |
NtPulseEvent |
317 |
NtQueryAttributesFile |
61 |
NtQueryAuxiliaryCounterFrequency |
318 |
NtQueryBootEntryOrder |
319 |
NtQueryBootOptions |
320 |
NtQueryDebugFilterState |
321 |
NtQueryDefaultLocale |
21 |
NtQueryDefaultUILanguage |
68 |
NtQueryDirectoryFile |
53 |
NtQueryDirectoryFileEx |
322 |
NtQueryDirectoryObject |
323 |
NtQueryDriverEntryOrder |
324 |
NtQueryEaFile |
325 |
NtQueryEvent |
86 |
NtQueryFullAttributesFile |
326 |
NtQueryInformationAtom |
327 |
NtQueryInformationByName |
328 |
NtQueryInformationEnlistment |
329 |
NtQueryInformationFile |
17 |
NtQueryInformationJobObject |
330 |
NtQueryInformationPort |
331 |
NtQueryInformationProcess |
25 |
NtQueryInformationResourceManager |
332 |
NtQueryInformationThread |
37 |
NtQueryInformationToken |
33 |
NtQueryInformationTransaction |
333 |
NtQueryInformationTransactionManager |
334 |
NtQueryInformationWorkerFactory |
335 |
NtQueryInstallUILanguage |
336 |
NtQueryIntervalProfile |
337 |
NtQueryIoCompletion |
338 |
NtQueryKey |
22 |
NtQueryLicenseValue |
339 |
NtQueryMultipleValueKey |
340 |
NtQueryMutant |
341 |
NtQueryObject |
16 |
NtQueryOpenSubKeys |
342 |
NtQueryOpenSubKeysEx |
343 |
NtQueryPerformanceCounter |
49 |
NtQueryPortInformationProcess |
344 |
NtQueryQuotaInformationFile |
345 |
NtQuerySection |
81 |
NtQuerySecurityAttributesToken |
346 |
NtQuerySecurityObject |
347 |
NtQuerySecurityPolicy |
348 |
NtQuerySemaphore |
349 |
NtQuerySymbolicLinkObject |
350 |
NtQuerySystemEnvironmentValue |
351 |
NtQuerySystemEnvironmentValueEx |
352 |
NtQuerySystemInformation |
54 |
NtQuerySystemInformationEx |
353 |
NtQueryTimer |
56 |
NtQueryTimerResolution |
354 |
NtQueryValueKey |
23 |
NtQueryVirtualMemory |
35 |
NtQueryVolumeInformationFile |
73 |
NtQueryWnfStateData |
355 |
NtQueryWnfStateNameInformation |
356 |
NtQueueApcThread |
69 |
NtQueueApcThreadEx |
357 |
NtRaiseException |
358 |
NtRaiseHardError |
359 |
NtReadFile |
6 |
NtReadFileScatter |
46 |
NtReadOnlyEnlistment |
360 |
NtReadRequestData |
84 |
NtReadVirtualMemory |
63 |
NtRecoverEnlistment |
361 |
NtRecoverResourceManager |
362 |
NtRecoverTransactionManager |
363 |
NtRegisterProtocolAddressInformation |
364 |
NtRegisterThreadTerminatePort |
365 |
NtReleaseKeyedEvent |
366 |
NtReleaseMutant |
32 |
NtReleaseSemaphore |
10 |
NtReleaseWorkerFactoryWorker |
367 |
NtRemoveIoCompletion |
9 |
NtRemoveIoCompletionEx |
368 |
NtRemoveProcessDebug |
369 |
NtRenameKey |
370 |
NtRenameTransactionManager |
371 |
NtReplaceKey |
372 |
NtReplacePartitionUnit |
373 |
NtReplyPort |
12 |
NtReplyWaitReceivePort |
11 |
NtReplyWaitReceivePortEx |
43 |
NtReplyWaitReplyPort |
374 |
NtRequestPort |
375 |
NtRequestWaitReplyPort |
34 |
NtResetEvent |
376 |
NtResetWriteWatch |
377 |
NtRestoreKey |
378 |
NtResumeProcess |
379 |
NtResumeThread |
82 |
NtRevertContainerImpersonation |
380 |
NtRollbackComplete |
381 |
NtRollbackEnlistment |
382 |
NtRollbackRegistryTransaction |
383 |
NtRollbackTransaction |
384 |
NtRollforwardTransactionManager |
385 |
NtSaveKey |
386 |
NtSaveKeyEx |
387 |
NtSaveMergedKeys |
388 |
NtSecureConnectPort |
389 |
NtSerializeBoot |
390 |
NtSetBootEntryOrder |
391 |
NtSetBootOptions |
392 |
NtSetCachedSigningLevel |
393 |
NtSetCachedSigningLevel2 |
394 |
NtSetContextThread |
395 |
NtSetDebugFilterState |
396 |
NtSetDefaultHardErrorPort |
397 |
NtSetDefaultLocale |
398 |
NtSetDefaultUILanguage |
399 |
NtSetDriverEntryOrder |
400 |
NtSetEaFile |
401 |
NtSetEvent |
14 |
NtSetEventBoostPriority |
45 |
NtSetHighEventPair |
402 |
NtSetHighWaitLowEventPair |
403 |
NtSetIRTimer |
404 |
NtSetInformationDebugObject |
405 |
NtSetInformationEnlistment |
406 |
NtSetInformationFile |
39 |
NtSetInformationJobObject |
407 |
NtSetInformationKey |
408 |
NtSetInformationObject |
92 |
NtSetInformationProcess |
28 |
NtSetInformationResourceManager |
409 |
NtSetInformationSymbolicLink |
410 |
NtSetInformationThread |
13 |
NtSetInformationToken |
411 |
NtSetInformationTransaction |
412 |
NtSetInformationTransactionManager |
413 |
NtSetInformationVirtualMemory |
414 |
NtSetInformationWorkerFactory |
415 |
NtSetIntervalProfile |
416 |
NtSetIoCompletion |
417 |
NtSetIoCompletionEx |
418 |
NtSetLdtEntries |
419 |
NtSetLowEventPair |
420 |
NtSetLowWaitHighEventPair |
421 |
NtSetQuotaInformationFile |
422 |
NtSetSecurityObject |
423 |
NtSetSystemEnvironmentValue |
424 |
NtSetSystemEnvironmentValueEx |
425 |
NtSetSystemInformation |
426 |
NtSetSystemPowerState |
427 |
NtSetSystemTime |
428 |
NtSetThreadExecutionState |
429 |
NtSetTimer |
98 |
NtSetTimer2 |
430 |
NtSetTimerEx |
431 |
NtSetTimerResolution |
432 |
NtSetUuidSeed |
433 |
NtSetValueKey |
96 |
NtSetVolumeInformationFile |
434 |
NtSetWnfProcessNotificationEvent |
435 |
NtShutdownSystem |
436 |
NtShutdownWorkerFactory |
437 |
NtSignalAndWaitForSingleObject |
438 |
NtSinglePhaseReject |
439 |
NtStartProfile |
440 |
NtStopProfile |
441 |
NtSubscribeWnfStateChange |
442 |
NtSuspendProcess |
443 |
NtSuspendThread |
444 |
NtSystemDebugControl |
445 |
NtTerminateEnclave |
446 |
NtTerminateJobObject |
447 |
NtTerminateProcess |
44 |
NtTerminateThread |
83 |
NtTestAlert |
448 |
NtThawRegistry |
449 |
NtThawTransactions |
450 |
NtTraceControl |
451 |
NtTraceEvent |
94 |
NtTranslateFilePath |
452 |
NtUmsThreadYield |
453 |
NtUnloadDriver |
454 |
NtUnloadKey |
455 |
NtUnloadKey2 |
456 |
NtUnloadKeyEx |
457 |
NtUnlockFile |
458 |
NtUnlockVirtualMemory |
459 |
NtUnmapViewOfSection |
42 |
NtUnmapViewOfSectionEx |
460 |
NtUnsubscribeWnfStateChange |
461 |
NtUpdateWnfStateData |
462 |
NtVdmControl |
463 |
NtWaitForAlertByThreadId |
464 |
NtWaitForDebugEvent |
465 |
NtWaitForKeyedEvent |
466 |
NtWaitForMultipleObjects |
91 |
NtWaitForMultipleObjects32 |
26 |
NtWaitForSingleObject |
4 |
NtWaitForWorkViaWorkerFactory |
467 |
NtWaitHighEventPair |
468 |
NtWaitLowEventPair |
469 |
NtWorkerFactoryWorkerReady |
1 |
NtWriteFile |
8 |
NtWriteFileGather |
27 |
NtWriteRequestData |
87 |
NtWriteVirtualMemory |
58 |
NtYieldExecution |
70 |