NtAcceptConnectPort |
2 |
NtAccessCheck |
0 |
NtAccessCheckAndAuditAlarm |
41 |
NtAccessCheckByType |
99 |
NtAccessCheckByTypeAndAuditAlarm |
89 |
NtAccessCheckByTypeResultList |
100 |
NtAccessCheckByTypeResultListAndAuditAlarm |
101 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
102 |
NtAcquireCrossVmMutant |
103 |
NtAcquireProcessActivityReference |
104 |
NtAddAtom |
71 |
NtAddAtomEx |
105 |
NtAddBootEntry |
106 |
NtAddDriverEntry |
107 |
NtAdjustGroupsToken |
108 |
NtAdjustPrivilegesToken |
65 |
NtAdjustTokenClaimsAndDeviceGroups |
109 |
NtAlertResumeThread |
110 |
NtAlertThread |
111 |
NtAlertThreadByThreadId |
112 |
NtAllocateLocallyUniqueId |
113 |
NtAllocateReserveObject |
114 |
NtAllocateUserPhysicalPages |
115 |
NtAllocateUserPhysicalPagesEx |
116 |
NtAllocateUuids |
117 |
NtAllocateVirtualMemory |
24 |
NtAllocateVirtualMemoryEx |
118 |
NtAlpcAcceptConnectPort |
119 |
NtAlpcCancelMessage |
120 |
NtAlpcConnectPort |
121 |
NtAlpcConnectPortEx |
122 |
NtAlpcCreatePort |
123 |
NtAlpcCreatePortSection |
124 |
NtAlpcCreateResourceReserve |
125 |
NtAlpcCreateSectionView |
126 |
NtAlpcCreateSecurityContext |
127 |
NtAlpcDeletePortSection |
128 |
NtAlpcDeleteResourceReserve |
129 |
NtAlpcDeleteSectionView |
130 |
NtAlpcDeleteSecurityContext |
131 |
NtAlpcDisconnectPort |
132 |
NtAlpcImpersonateClientContainerOfPort |
133 |
NtAlpcImpersonateClientOfPort |
134 |
NtAlpcOpenSenderProcess |
135 |
NtAlpcOpenSenderThread |
136 |
NtAlpcQueryInformation |
137 |
NtAlpcQueryInformationMessage |
138 |
NtAlpcRevokeSecurityContext |
139 |
NtAlpcSendWaitReceivePort |
140 |
NtAlpcSetInformation |
141 |
NtApphelpCacheControl |
76 |
NtAreMappedFilesTheSame |
142 |
NtAssignProcessToJobObject |
143 |
NtAssociateWaitCompletionPacket |
144 |
NtCallEnclave |
145 |
NtCallbackReturn |
5 |
NtCancelIoFile |
93 |
NtCancelIoFileEx |
146 |
NtCancelSynchronousIoFile |
147 |
NtCancelTimer |
97 |
NtCancelTimer2 |
148 |
NtCancelWaitCompletionPacket |
149 |
NtChangeProcessState |
150 |
NtChangeThreadState |
151 |
NtClearEvent |
62 |
NtClose |
15 |
NtCloseObjectAuditAlarm |
59 |
NtCommitComplete |
152 |
NtCommitEnlistment |
153 |
NtCommitRegistryTransaction |
154 |
NtCommitTransaction |
155 |
NtCompactKeys |
156 |
NtCompareObjects |
157 |
NtCompareSigningLevels |
158 |
NtCompareTokens |
159 |
NtCompleteConnectPort |
160 |
NtCompressKey |
161 |
NtConnectPort |
162 |
NtContinue |
67 |
NtContinueEx |
163 |
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
164 |
NtCreateCrossVmEvent |
165 |
NtCreateCrossVmMutant |
166 |
NtCreateDebugObject |
167 |
NtCreateDirectoryObject |
168 |
NtCreateDirectoryObjectEx |
169 |
NtCreateEnclave |
170 |
NtCreateEnlistment |
171 |
NtCreateEvent |
72 |
NtCreateEventPair |
172 |
NtCreateFile |
85 |
NtCreateIRTimer |
173 |
NtCreateIoCompletion |
174 |
NtCreateJobObject |
175 |
NtCreateJobSet |
176 |
NtCreateKey |
29 |
NtCreateKeyTransacted |
177 |
NtCreateKeyedEvent |
178 |
NtCreateLowBoxToken |
179 |
NtCreateMailslotFile |
180 |
NtCreateMutant |
181 |
NtCreateNamedPipeFile |
182 |
NtCreatePagingFile |
183 |
NtCreatePartition |
184 |
NtCreatePort |
185 |
NtCreatePrivateNamespace |
186 |
NtCreateProcess |
187 |
NtCreateProcessEx |
77 |
NtCreateProcessStateChange |
188 |
NtCreateProfile |
189 |
NtCreateProfileEx |
190 |
NtCreateRegistryTransaction |
191 |
NtCreateResourceManager |
192 |
NtCreateSection |
74 |
NtCreateSectionEx |
193 |
NtCreateSemaphore |
194 |
NtCreateSymbolicLinkObject |
195 |
NtCreateThread |
78 |
NtCreateThreadEx |
196 |
NtCreateThreadStateChange |
197 |
NtCreateTimer |
198 |
NtCreateTimer2 |
199 |
NtCreateToken |
200 |
NtCreateTokenEx |
201 |
NtCreateTransaction |
202 |
NtCreateTransactionManager |
203 |
NtCreateUserProcess |
204 |
NtCreateWaitCompletionPacket |
205 |
NtCreateWaitablePort |
206 |
NtCreateWnfStateName |
207 |
NtCreateWorkerFactory |
208 |
NtDebugActiveProcess |
209 |
NtDebugContinue |
210 |
NtDelayExecution |
52 |
NtDeleteAtom |
211 |
NtDeleteBootEntry |
212 |
NtDeleteDriverEntry |
213 |
NtDeleteFile |
214 |
NtDeleteKey |
215 |
NtDeleteObjectAuditAlarm |
216 |
NtDeletePrivateNamespace |
217 |
NtDeleteValueKey |
218 |
NtDeleteWnfStateData |
219 |
NtDeleteWnfStateName |
220 |
NtDeviceIoControlFile |
7 |
NtDirectGraphicsCall |
221 |
NtDisableLastKnownGood |
222 |
NtDisplayString |
223 |
NtDrawText |
224 |
NtDuplicateObject |
60 |
NtDuplicateToken |
66 |
NtEnableLastKnownGood |
225 |
NtEnumerateBootEntries |
226 |
NtEnumerateDriverEntries |
227 |
NtEnumerateKey |
50 |
NtEnumerateSystemEnvironmentValuesEx |
228 |
NtEnumerateTransactionObject |
229 |
NtEnumerateValueKey |
19 |
NtExtendSection |
230 |
NtFilterBootOption |
231 |
NtFilterToken |
232 |
NtFilterTokenEx |
233 |
NtFindAtom |
20 |
NtFlushBuffersFile |
75 |
NtFlushBuffersFileEx |
234 |
NtFlushInstallUILanguage |
235 |
NtFlushInstructionCache |
236 |
NtFlushKey |
237 |
NtFlushProcessWriteBuffers |
238 |
NtFlushVirtualMemory |
239 |
NtFlushWriteBuffer |
240 |
NtFreeUserPhysicalPages |
241 |
NtFreeVirtualMemory |
30 |
NtFreezeRegistry |
242 |
NtFreezeTransactions |
243 |
NtFsControlFile |
57 |
NtGetCachedSigningLevel |
244 |
NtGetCompleteWnfStateSubscription |
245 |
NtGetContextThread |
246 |
NtGetCurrentProcessorNumber |
247 |
NtGetCurrentProcessorNumberEx |
248 |
NtGetDevicePowerState |
249 |
NtGetMUIRegistryInfo |
250 |
NtGetNextProcess |
251 |
NtGetNextThread |
252 |
NtGetNlsSectionPtr |
253 |
NtGetNotificationResourceManager |
254 |
NtGetWriteWatch |
255 |
NtImpersonateAnonymousToken |
256 |
NtImpersonateClientOfPort |
31 |
NtImpersonateThread |
257 |
NtInitializeEnclave |
258 |
NtInitializeNlsFiles |
259 |
NtInitializeRegistry |
260 |
NtInitiatePowerAction |
261 |
NtIsProcessInJob |
79 |
NtIsSystemResumeAutomatic |
262 |
NtIsUILanguageComitted |
263 |
NtListenPort |
264 |
NtLoadDriver |
265 |
NtLoadEnclaveData |
266 |
NtLoadKey |
267 |
NtLoadKey2 |
268 |
NtLoadKey3 |
269 |
NtLoadKeyEx |
270 |
NtLockFile |
271 |
NtLockProductActivationKeys |
272 |
NtLockRegistryKey |
273 |
NtLockVirtualMemory |
274 |
NtMakePermanentObject |
275 |
NtMakeTemporaryObject |
276 |
NtManageHotPatch |
277 |
NtManagePartition |
278 |
NtMapCMFModule |
279 |
NtMapUserPhysicalPages |
280 |
NtMapUserPhysicalPagesScatter |
3 |
NtMapViewOfSection |
40 |
NtMapViewOfSectionEx |
281 |
NtModifyBootEntry |
282 |
NtModifyDriverEntry |
283 |
NtNotifyChangeDirectoryFile |
284 |
NtNotifyChangeDirectoryFileEx |
285 |
NtNotifyChangeKey |
286 |
NtNotifyChangeMultipleKeys |
287 |
NtNotifyChangeSession |
288 |
NtOpenDirectoryObject |
88 |
NtOpenEnlistment |
289 |
NtOpenEvent |
64 |
NtOpenEventPair |
290 |
NtOpenFile |
51 |
NtOpenIoCompletion |
291 |
NtOpenJobObject |
292 |
NtOpenKey |
18 |
NtOpenKeyEx |
293 |
NtOpenKeyTransacted |
294 |
NtOpenKeyTransactedEx |
295 |
NtOpenKeyedEvent |
296 |
NtOpenMutant |
297 |
NtOpenObjectAuditAlarm |
298 |
NtOpenPartition |
299 |
NtOpenPrivateNamespace |
300 |
NtOpenProcess |
38 |
NtOpenProcessToken |
301 |
NtOpenProcessTokenEx |
48 |
NtOpenRegistryTransaction |
302 |
NtOpenResourceManager |
303 |
NtOpenSection |
55 |
NtOpenSemaphore |
304 |
NtOpenSession |
305 |
NtOpenSymbolicLinkObject |
306 |
NtOpenThread |
307 |
NtOpenThreadToken |
36 |
NtOpenThreadTokenEx |
47 |
NtOpenTimer |
308 |
NtOpenTransaction |
309 |
NtOpenTransactionManager |
310 |
NtPlugPlayControl |
311 |
NtPowerInformation |
95 |
NtPrePrepareComplete |
312 |
NtPrePrepareEnlistment |
313 |
NtPrepareComplete |
314 |
NtPrepareEnlistment |
315 |
NtPrivilegeCheck |
316 |
NtPrivilegeObjectAuditAlarm |
317 |
NtPrivilegedServiceAuditAlarm |
318 |
NtPropagationComplete |
319 |
NtPropagationFailed |
320 |
NtProtectVirtualMemory |
80 |
NtPssCaptureVaSpaceBulk |
321 |
NtPulseEvent |
322 |
NtQueryAttributesFile |
61 |
NtQueryAuxiliaryCounterFrequency |
323 |
NtQueryBootEntryOrder |
324 |
NtQueryBootOptions |
325 |
NtQueryDebugFilterState |
326 |
NtQueryDefaultLocale |
21 |
NtQueryDefaultUILanguage |
68 |
NtQueryDirectoryFile |
53 |
NtQueryDirectoryFileEx |
327 |
NtQueryDirectoryObject |
328 |
NtQueryDriverEntryOrder |
329 |
NtQueryEaFile |
330 |
NtQueryEvent |
86 |
NtQueryFullAttributesFile |
331 |
NtQueryInformationAtom |
332 |
NtQueryInformationByName |
333 |
NtQueryInformationEnlistment |
334 |
NtQueryInformationFile |
17 |
NtQueryInformationJobObject |
335 |
NtQueryInformationPort |
336 |
NtQueryInformationProcess |
25 |
NtQueryInformationResourceManager |
337 |
NtQueryInformationThread |
37 |
NtQueryInformationToken |
33 |
NtQueryInformationTransaction |
338 |
NtQueryInformationTransactionManager |
339 |
NtQueryInformationWorkerFactory |
340 |
NtQueryInstallUILanguage |
341 |
NtQueryIntervalProfile |
342 |
NtQueryIoCompletion |
343 |
NtQueryKey |
22 |
NtQueryLicenseValue |
344 |
NtQueryMultipleValueKey |
345 |
NtQueryMutant |
346 |
NtQueryObject |
16 |
NtQueryOpenSubKeys |
347 |
NtQueryOpenSubKeysEx |
348 |
NtQueryPerformanceCounter |
49 |
NtQueryPortInformationProcess |
349 |
NtQueryQuotaInformationFile |
350 |
NtQuerySection |
81 |
NtQuerySecurityAttributesToken |
351 |
NtQuerySecurityObject |
352 |
NtQuerySecurityPolicy |
353 |
NtQuerySemaphore |
354 |
NtQuerySymbolicLinkObject |
355 |
NtQuerySystemEnvironmentValue |
356 |
NtQuerySystemEnvironmentValueEx |
357 |
NtQuerySystemInformation |
54 |
NtQuerySystemInformationEx |
358 |
NtQueryTimer |
56 |
NtQueryTimerResolution |
359 |
NtQueryValueKey |
23 |
NtQueryVirtualMemory |
35 |
NtQueryVolumeInformationFile |
73 |
NtQueryWnfStateData |
360 |
NtQueryWnfStateNameInformation |
361 |
NtQueueApcThread |
69 |
NtQueueApcThreadEx |
362 |
NtQueueApcThreadEx2 |
363 |
NtRaiseException |
364 |
NtRaiseHardError |
365 |
NtReadFile |
6 |
NtReadFileScatter |
46 |
NtReadOnlyEnlistment |
366 |
NtReadRequestData |
84 |
NtReadVirtualMemory |
63 |
NtReadVirtualMemoryEx |
367 |
NtRecoverEnlistment |
368 |
NtRecoverResourceManager |
369 |
NtRecoverTransactionManager |
370 |
NtRegisterProtocolAddressInformation |
371 |
NtRegisterThreadTerminatePort |
372 |
NtReleaseKeyedEvent |
373 |
NtReleaseMutant |
32 |
NtReleaseSemaphore |
10 |
NtReleaseWorkerFactoryWorker |
374 |
NtRemoveIoCompletion |
9 |
NtRemoveIoCompletionEx |
375 |
NtRemoveProcessDebug |
376 |
NtRenameKey |
377 |
NtRenameTransactionManager |
378 |
NtReplaceKey |
379 |
NtReplacePartitionUnit |
380 |
NtReplyPort |
12 |
NtReplyWaitReceivePort |
11 |
NtReplyWaitReceivePortEx |
43 |
NtReplyWaitReplyPort |
381 |
NtRequestPort |
382 |
NtRequestWaitReplyPort |
34 |
NtResetEvent |
383 |
NtResetWriteWatch |
384 |
NtRestoreKey |
385 |
NtResumeProcess |
386 |
NtResumeThread |
82 |
NtRevertContainerImpersonation |
387 |
NtRollbackComplete |
388 |
NtRollbackEnlistment |
389 |
NtRollbackRegistryTransaction |
390 |
NtRollbackTransaction |
391 |
NtRollforwardTransactionManager |
392 |
NtSaveKey |
393 |
NtSaveKeyEx |
394 |
NtSaveMergedKeys |
395 |
NtSecureConnectPort |
396 |
NtSerializeBoot |
397 |
NtSetBootEntryOrder |
398 |
NtSetBootOptions |
399 |
NtSetCachedSigningLevel |
400 |
NtSetCachedSigningLevel2 |
401 |
NtSetContextThread |
402 |
NtSetDebugFilterState |
403 |
NtSetDefaultHardErrorPort |
404 |
NtSetDefaultLocale |
405 |
NtSetDefaultUILanguage |
406 |
NtSetDriverEntryOrder |
407 |
NtSetEaFile |
408 |
NtSetEvent |
14 |
NtSetEventBoostPriority |
45 |
NtSetHighEventPair |
409 |
NtSetHighWaitLowEventPair |
410 |
NtSetIRTimer |
411 |
NtSetInformationDebugObject |
412 |
NtSetInformationEnlistment |
413 |
NtSetInformationFile |
39 |
NtSetInformationJobObject |
414 |
NtSetInformationKey |
415 |
NtSetInformationObject |
92 |
NtSetInformationProcess |
28 |
NtSetInformationResourceManager |
416 |
NtSetInformationSymbolicLink |
417 |
NtSetInformationThread |
13 |
NtSetInformationToken |
418 |
NtSetInformationTransaction |
419 |
NtSetInformationTransactionManager |
420 |
NtSetInformationVirtualMemory |
421 |
NtSetInformationWorkerFactory |
422 |
NtSetIntervalProfile |
423 |
NtSetIoCompletion |
424 |
NtSetIoCompletionEx |
425 |
NtSetLdtEntries |
426 |
NtSetLowEventPair |
427 |
NtSetLowWaitHighEventPair |
428 |
NtSetQuotaInformationFile |
429 |
NtSetSecurityObject |
430 |
NtSetSystemEnvironmentValue |
431 |
NtSetSystemEnvironmentValueEx |
432 |
NtSetSystemInformation |
433 |
NtSetSystemPowerState |
434 |
NtSetSystemTime |
435 |
NtSetThreadExecutionState |
436 |
NtSetTimer |
98 |
NtSetTimer2 |
437 |
NtSetTimerEx |
438 |
NtSetTimerResolution |
439 |
NtSetUuidSeed |
440 |
NtSetValueKey |
96 |
NtSetVolumeInformationFile |
441 |
NtSetWnfProcessNotificationEvent |
442 |
NtShutdownSystem |
443 |
NtShutdownWorkerFactory |
444 |
NtSignalAndWaitForSingleObject |
445 |
NtSinglePhaseReject |
446 |
NtStartProfile |
447 |
NtStopProfile |
448 |
NtSubscribeWnfStateChange |
449 |
NtSuspendProcess |
450 |
NtSuspendThread |
451 |
NtSystemDebugControl |
452 |
NtTerminateEnclave |
453 |
NtTerminateJobObject |
454 |
NtTerminateProcess |
44 |
NtTerminateThread |
83 |
NtTestAlert |
455 |
NtThawRegistry |
456 |
NtThawTransactions |
457 |
NtTraceControl |
458 |
NtTraceEvent |
94 |
NtTranslateFilePath |
459 |
NtUmsThreadYield |
460 |
NtUnloadDriver |
461 |
NtUnloadKey |
462 |
NtUnloadKey2 |
463 |
NtUnloadKeyEx |
464 |
NtUnlockFile |
465 |
NtUnlockVirtualMemory |
466 |
NtUnmapViewOfSection |
42 |
NtUnmapViewOfSectionEx |
467 |
NtUnsubscribeWnfStateChange |
468 |
NtUpdateWnfStateData |
469 |
NtVdmControl |
470 |
NtWaitForAlertByThreadId |
471 |
NtWaitForDebugEvent |
472 |
NtWaitForKeyedEvent |
473 |
NtWaitForMultipleObjects |
91 |
NtWaitForMultipleObjects32 |
26 |
NtWaitForSingleObject |
4 |
NtWaitForWorkViaWorkerFactory |
474 |
NtWaitHighEventPair |
475 |
NtWaitLowEventPair |
476 |
NtWorkerFactoryWorkerReady |
1 |
NtWriteFile |
8 |
NtWriteFileGather |
27 |
NtWriteRequestData |
87 |
NtWriteVirtualMemory |
58 |
NtYieldExecution |
70 |