| NtAcceptConnectPort |
2 |
| NtAccessCheck |
0 |
| NtAccessCheckAndAuditAlarm |
41 |
| NtAccessCheckByType |
99 |
| NtAccessCheckByTypeAndAuditAlarm |
89 |
| NtAccessCheckByTypeResultList |
100 |
| NtAccessCheckByTypeResultListAndAuditAlarm |
101 |
| NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
102 |
| NtAcquireCrossVmMutant |
103 |
| NtAcquireProcessActivityReference |
104 |
| NtAddAtom |
71 |
| NtAddAtomEx |
105 |
| NtAddBootEntry |
106 |
| NtAddDriverEntry |
107 |
| NtAdjustGroupsToken |
108 |
| NtAdjustPrivilegesToken |
65 |
| NtAdjustTokenClaimsAndDeviceGroups |
109 |
| NtAlertResumeThread |
110 |
| NtAlertThread |
111 |
| NtAlertThreadByThreadId |
112 |
| NtAllocateLocallyUniqueId |
113 |
| NtAllocateReserveObject |
114 |
| NtAllocateUserPhysicalPages |
115 |
| NtAllocateUserPhysicalPagesEx |
116 |
| NtAllocateUuids |
117 |
| NtAllocateVirtualMemory |
24 |
| NtAllocateVirtualMemoryEx |
118 |
| NtAlpcAcceptConnectPort |
119 |
| NtAlpcCancelMessage |
120 |
| NtAlpcConnectPort |
121 |
| NtAlpcConnectPortEx |
122 |
| NtAlpcCreatePort |
123 |
| NtAlpcCreatePortSection |
124 |
| NtAlpcCreateResourceReserve |
125 |
| NtAlpcCreateSectionView |
126 |
| NtAlpcCreateSecurityContext |
127 |
| NtAlpcDeletePortSection |
128 |
| NtAlpcDeleteResourceReserve |
129 |
| NtAlpcDeleteSectionView |
130 |
| NtAlpcDeleteSecurityContext |
131 |
| NtAlpcDisconnectPort |
132 |
| NtAlpcImpersonateClientContainerOfPort |
133 |
| NtAlpcImpersonateClientOfPort |
134 |
| NtAlpcOpenSenderProcess |
135 |
| NtAlpcOpenSenderThread |
136 |
| NtAlpcQueryInformation |
137 |
| NtAlpcQueryInformationMessage |
138 |
| NtAlpcRevokeSecurityContext |
139 |
| NtAlpcSendWaitReceivePort |
140 |
| NtAlpcSetInformation |
141 |
| NtApphelpCacheControl |
76 |
| NtAreMappedFilesTheSame |
142 |
| NtAssignProcessToJobObject |
143 |
| NtAssociateWaitCompletionPacket |
144 |
| NtCallEnclave |
145 |
| NtCallbackReturn |
5 |
| NtCancelIoFile |
93 |
| NtCancelIoFileEx |
146 |
| NtCancelSynchronousIoFile |
147 |
| NtCancelTimer |
97 |
| NtCancelTimer2 |
148 |
| NtCancelWaitCompletionPacket |
149 |
| NtChangeProcessState |
150 |
| NtChangeThreadState |
151 |
| NtClearEvent |
62 |
| NtClose |
15 |
| NtCloseObjectAuditAlarm |
59 |
| NtCommitComplete |
152 |
| NtCommitEnlistment |
153 |
| NtCommitRegistryTransaction |
154 |
| NtCommitTransaction |
155 |
| NtCompactKeys |
156 |
| NtCompareObjects |
157 |
| NtCompareSigningLevels |
158 |
| NtCompareTokens |
159 |
| NtCompleteConnectPort |
160 |
| NtCompressKey |
161 |
| NtConnectPort |
162 |
| NtContinue |
67 |
| NtContinueEx |
163 |
| NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
164 |
| NtCopyFileChunk |
165 |
| NtCreateCrossVmEvent |
166 |
| NtCreateCrossVmMutant |
167 |
| NtCreateDebugObject |
168 |
| NtCreateDirectoryObject |
169 |
| NtCreateDirectoryObjectEx |
170 |
| NtCreateEnclave |
171 |
| NtCreateEnlistment |
172 |
| NtCreateEvent |
72 |
| NtCreateEventPair |
173 |
| NtCreateFile |
85 |
| NtCreateIRTimer |
174 |
| NtCreateIoCompletion |
175 |
| NtCreateJobObject |
176 |
| NtCreateJobSet |
177 |
| NtCreateKey |
29 |
| NtCreateKeyTransacted |
178 |
| NtCreateKeyedEvent |
179 |
| NtCreateLowBoxToken |
180 |
| NtCreateMailslotFile |
181 |
| NtCreateMutant |
182 |
| NtCreateNamedPipeFile |
183 |
| NtCreatePagingFile |
184 |
| NtCreatePartition |
185 |
| NtCreatePort |
186 |
| NtCreatePrivateNamespace |
187 |
| NtCreateProcess |
188 |
| NtCreateProcessEx |
77 |
| NtCreateProcessStateChange |
189 |
| NtCreateProfile |
190 |
| NtCreateProfileEx |
191 |
| NtCreateRegistryTransaction |
192 |
| NtCreateResourceManager |
193 |
| NtCreateSection |
74 |
| NtCreateSectionEx |
194 |
| NtCreateSemaphore |
195 |
| NtCreateSymbolicLinkObject |
196 |
| NtCreateThread |
78 |
| NtCreateThreadEx |
197 |
| NtCreateThreadStateChange |
198 |
| NtCreateTimer |
199 |
| NtCreateTimer2 |
200 |
| NtCreateToken |
201 |
| NtCreateTokenEx |
202 |
| NtCreateTransaction |
203 |
| NtCreateTransactionManager |
204 |
| NtCreateUserProcess |
205 |
| NtCreateWaitCompletionPacket |
206 |
| NtCreateWaitablePort |
207 |
| NtCreateWnfStateName |
208 |
| NtCreateWorkerFactory |
209 |
| NtDebugActiveProcess |
210 |
| NtDebugContinue |
211 |
| NtDelayExecution |
52 |
| NtDeleteAtom |
212 |
| NtDeleteBootEntry |
213 |
| NtDeleteDriverEntry |
214 |
| NtDeleteFile |
215 |
| NtDeleteKey |
216 |
| NtDeleteObjectAuditAlarm |
217 |
| NtDeletePrivateNamespace |
218 |
| NtDeleteValueKey |
219 |
| NtDeleteWnfStateData |
220 |
| NtDeleteWnfStateName |
221 |
| NtDeviceIoControlFile |
7 |
| NtDirectGraphicsCall |
222 |
| NtDisableLastKnownGood |
223 |
| NtDisplayString |
224 |
| NtDrawText |
225 |
| NtDuplicateObject |
60 |
| NtDuplicateToken |
66 |
| NtEnableLastKnownGood |
226 |
| NtEnumerateBootEntries |
227 |
| NtEnumerateDriverEntries |
228 |
| NtEnumerateKey |
50 |
| NtEnumerateSystemEnvironmentValuesEx |
229 |
| NtEnumerateTransactionObject |
230 |
| NtEnumerateValueKey |
19 |
| NtExtendSection |
231 |
| NtFilterBootOption |
232 |
| NtFilterToken |
233 |
| NtFilterTokenEx |
234 |
| NtFindAtom |
20 |
| NtFlushBuffersFile |
75 |
| NtFlushBuffersFileEx |
235 |
| NtFlushInstallUILanguage |
236 |
| NtFlushInstructionCache |
237 |
| NtFlushKey |
238 |
| NtFlushProcessWriteBuffers |
239 |
| NtFlushVirtualMemory |
240 |
| NtFlushWriteBuffer |
241 |
| NtFreeUserPhysicalPages |
242 |
| NtFreeVirtualMemory |
30 |
| NtFreezeRegistry |
243 |
| NtFreezeTransactions |
244 |
| NtFsControlFile |
57 |
| NtGetCachedSigningLevel |
245 |
| NtGetCompleteWnfStateSubscription |
246 |
| NtGetContextThread |
247 |
| NtGetCurrentProcessorNumber |
248 |
| NtGetCurrentProcessorNumberEx |
249 |
| NtGetDevicePowerState |
250 |
| NtGetMUIRegistryInfo |
251 |
| NtGetNextProcess |
252 |
| NtGetNextThread |
253 |
| NtGetNlsSectionPtr |
254 |
| NtGetNotificationResourceManager |
255 |
| NtGetWriteWatch |
256 |
| NtImpersonateAnonymousToken |
257 |
| NtImpersonateClientOfPort |
31 |
| NtImpersonateThread |
258 |
| NtInitializeEnclave |
259 |
| NtInitializeNlsFiles |
260 |
| NtInitializeRegistry |
261 |
| NtInitiatePowerAction |
262 |
| NtIsProcessInJob |
79 |
| NtIsSystemResumeAutomatic |
263 |
| NtIsUILanguageComitted |
264 |
| NtListenPort |
265 |
| NtLoadDriver |
266 |
| NtLoadEnclaveData |
267 |
| NtLoadKey |
268 |
| NtLoadKey2 |
269 |
| NtLoadKey3 |
270 |
| NtLoadKeyEx |
271 |
| NtLockFile |
272 |
| NtLockProductActivationKeys |
273 |
| NtLockRegistryKey |
274 |
| NtLockVirtualMemory |
275 |
| NtMakePermanentObject |
276 |
| NtMakeTemporaryObject |
277 |
| NtManageHotPatch |
278 |
| NtManagePartition |
279 |
| NtMapCMFModule |
280 |
| NtMapUserPhysicalPages |
281 |
| NtMapUserPhysicalPagesScatter |
3 |
| NtMapViewOfSection |
40 |
| NtMapViewOfSectionEx |
282 |
| NtModifyBootEntry |
283 |
| NtModifyDriverEntry |
284 |
| NtNotifyChangeDirectoryFile |
285 |
| NtNotifyChangeDirectoryFileEx |
286 |
| NtNotifyChangeKey |
287 |
| NtNotifyChangeMultipleKeys |
288 |
| NtNotifyChangeSession |
289 |
| NtOpenDirectoryObject |
88 |
| NtOpenEnlistment |
290 |
| NtOpenEvent |
64 |
| NtOpenEventPair |
291 |
| NtOpenFile |
51 |
| NtOpenIoCompletion |
292 |
| NtOpenJobObject |
293 |
| NtOpenKey |
18 |
| NtOpenKeyEx |
294 |
| NtOpenKeyTransacted |
295 |
| NtOpenKeyTransactedEx |
296 |
| NtOpenKeyedEvent |
297 |
| NtOpenMutant |
298 |
| NtOpenObjectAuditAlarm |
299 |
| NtOpenPartition |
300 |
| NtOpenPrivateNamespace |
301 |
| NtOpenProcess |
38 |
| NtOpenProcessToken |
302 |
| NtOpenProcessTokenEx |
48 |
| NtOpenRegistryTransaction |
303 |
| NtOpenResourceManager |
304 |
| NtOpenSection |
55 |
| NtOpenSemaphore |
305 |
| NtOpenSession |
306 |
| NtOpenSymbolicLinkObject |
307 |
| NtOpenThread |
308 |
| NtOpenThreadToken |
36 |
| NtOpenThreadTokenEx |
47 |
| NtOpenTimer |
309 |
| NtOpenTransaction |
310 |
| NtOpenTransactionManager |
311 |
| NtPlugPlayControl |
312 |
| NtPowerInformation |
95 |
| NtPrePrepareComplete |
313 |
| NtPrePrepareEnlistment |
314 |
| NtPrepareComplete |
315 |
| NtPrepareEnlistment |
316 |
| NtPrivilegeCheck |
317 |
| NtPrivilegeObjectAuditAlarm |
318 |
| NtPrivilegedServiceAuditAlarm |
319 |
| NtPropagationComplete |
320 |
| NtPropagationFailed |
321 |
| NtProtectVirtualMemory |
80 |
| NtPssCaptureVaSpaceBulk |
322 |
| NtPulseEvent |
323 |
| NtQueryAttributesFile |
61 |
| NtQueryAuxiliaryCounterFrequency |
324 |
| NtQueryBootEntryOrder |
325 |
| NtQueryBootOptions |
326 |
| NtQueryDebugFilterState |
327 |
| NtQueryDefaultLocale |
21 |
| NtQueryDefaultUILanguage |
68 |
| NtQueryDirectoryFile |
53 |
| NtQueryDirectoryFileEx |
328 |
| NtQueryDirectoryObject |
329 |
| NtQueryDriverEntryOrder |
330 |
| NtQueryEaFile |
331 |
| NtQueryEvent |
86 |
| NtQueryFullAttributesFile |
332 |
| NtQueryInformationAtom |
333 |
| NtQueryInformationByName |
334 |
| NtQueryInformationEnlistment |
335 |
| NtQueryInformationFile |
17 |
| NtQueryInformationJobObject |
336 |
| NtQueryInformationPort |
337 |
| NtQueryInformationProcess |
25 |
| NtQueryInformationResourceManager |
338 |
| NtQueryInformationThread |
37 |
| NtQueryInformationToken |
33 |
| NtQueryInformationTransaction |
339 |
| NtQueryInformationTransactionManager |
340 |
| NtQueryInformationWorkerFactory |
341 |
| NtQueryInstallUILanguage |
342 |
| NtQueryIntervalProfile |
343 |
| NtQueryIoCompletion |
344 |
| NtQueryKey |
22 |
| NtQueryLicenseValue |
345 |
| NtQueryMultipleValueKey |
346 |
| NtQueryMutant |
347 |
| NtQueryObject |
16 |
| NtQueryOpenSubKeys |
348 |
| NtQueryOpenSubKeysEx |
349 |
| NtQueryPerformanceCounter |
49 |
| NtQueryPortInformationProcess |
350 |
| NtQueryQuotaInformationFile |
351 |
| NtQuerySection |
81 |
| NtQuerySecurityAttributesToken |
352 |
| NtQuerySecurityObject |
353 |
| NtQuerySecurityPolicy |
354 |
| NtQuerySemaphore |
355 |
| NtQuerySymbolicLinkObject |
356 |
| NtQuerySystemEnvironmentValue |
357 |
| NtQuerySystemEnvironmentValueEx |
358 |
| NtQuerySystemInformation |
54 |
| NtQuerySystemInformationEx |
359 |
| NtQueryTimer |
56 |
| NtQueryTimerResolution |
360 |
| NtQueryValueKey |
23 |
| NtQueryVirtualMemory |
35 |
| NtQueryVolumeInformationFile |
73 |
| NtQueryWnfStateData |
361 |
| NtQueryWnfStateNameInformation |
362 |
| NtQueueApcThread |
69 |
| NtQueueApcThreadEx |
363 |
| NtQueueApcThreadEx2 |
364 |
| NtRaiseException |
365 |
| NtRaiseHardError |
366 |
| NtReadFile |
6 |
| NtReadFileScatter |
46 |
| NtReadOnlyEnlistment |
367 |
| NtReadRequestData |
84 |
| NtReadVirtualMemory |
63 |
| NtReadVirtualMemoryEx |
368 |
| NtRecoverEnlistment |
369 |
| NtRecoverResourceManager |
370 |
| NtRecoverTransactionManager |
371 |
| NtRegisterProtocolAddressInformation |
372 |
| NtRegisterThreadTerminatePort |
373 |
| NtReleaseKeyedEvent |
374 |
| NtReleaseMutant |
32 |
| NtReleaseSemaphore |
10 |
| NtReleaseWorkerFactoryWorker |
375 |
| NtRemoveIoCompletion |
9 |
| NtRemoveIoCompletionEx |
376 |
| NtRemoveProcessDebug |
377 |
| NtRenameKey |
378 |
| NtRenameTransactionManager |
379 |
| NtReplaceKey |
380 |
| NtReplacePartitionUnit |
381 |
| NtReplyPort |
12 |
| NtReplyWaitReceivePort |
11 |
| NtReplyWaitReceivePortEx |
43 |
| NtReplyWaitReplyPort |
382 |
| NtRequestPort |
383 |
| NtRequestWaitReplyPort |
34 |
| NtResetEvent |
384 |
| NtResetWriteWatch |
385 |
| NtRestoreKey |
386 |
| NtResumeProcess |
387 |
| NtResumeThread |
82 |
| NtRevertContainerImpersonation |
388 |
| NtRollbackComplete |
389 |
| NtRollbackEnlistment |
390 |
| NtRollbackRegistryTransaction |
391 |
| NtRollbackTransaction |
392 |
| NtRollforwardTransactionManager |
393 |
| NtSaveKey |
394 |
| NtSaveKeyEx |
395 |
| NtSaveMergedKeys |
396 |
| NtSecureConnectPort |
397 |
| NtSerializeBoot |
398 |
| NtSetBootEntryOrder |
399 |
| NtSetBootOptions |
400 |
| NtSetCachedSigningLevel |
401 |
| NtSetCachedSigningLevel2 |
402 |
| NtSetContextThread |
403 |
| NtSetDebugFilterState |
404 |
| NtSetDefaultHardErrorPort |
405 |
| NtSetDefaultLocale |
406 |
| NtSetDefaultUILanguage |
407 |
| NtSetDriverEntryOrder |
408 |
| NtSetEaFile |
409 |
| NtSetEvent |
14 |
| NtSetEventBoostPriority |
45 |
| NtSetHighEventPair |
410 |
| NtSetHighWaitLowEventPair |
411 |
| NtSetIRTimer |
412 |
| NtSetInformationDebugObject |
413 |
| NtSetInformationEnlistment |
414 |
| NtSetInformationFile |
39 |
| NtSetInformationJobObject |
415 |
| NtSetInformationKey |
416 |
| NtSetInformationObject |
92 |
| NtSetInformationProcess |
28 |
| NtSetInformationResourceManager |
417 |
| NtSetInformationSymbolicLink |
418 |
| NtSetInformationThread |
13 |
| NtSetInformationToken |
419 |
| NtSetInformationTransaction |
420 |
| NtSetInformationTransactionManager |
421 |
| NtSetInformationVirtualMemory |
422 |
| NtSetInformationWorkerFactory |
423 |
| NtSetIntervalProfile |
424 |
| NtSetIoCompletion |
425 |
| NtSetIoCompletionEx |
426 |
| NtSetLdtEntries |
427 |
| NtSetLowEventPair |
428 |
| NtSetLowWaitHighEventPair |
429 |
| NtSetQuotaInformationFile |
430 |
| NtSetSecurityObject |
431 |
| NtSetSystemEnvironmentValue |
432 |
| NtSetSystemEnvironmentValueEx |
433 |
| NtSetSystemInformation |
434 |
| NtSetSystemPowerState |
435 |
| NtSetSystemTime |
436 |
| NtSetThreadExecutionState |
437 |
| NtSetTimer |
98 |
| NtSetTimer2 |
438 |
| NtSetTimerEx |
439 |
| NtSetTimerResolution |
440 |
| NtSetUuidSeed |
441 |
| NtSetValueKey |
96 |
| NtSetVolumeInformationFile |
442 |
| NtSetWnfProcessNotificationEvent |
443 |
| NtShutdownSystem |
444 |
| NtShutdownWorkerFactory |
445 |
| NtSignalAndWaitForSingleObject |
446 |
| NtSinglePhaseReject |
447 |
| NtStartProfile |
448 |
| NtStopProfile |
449 |
| NtSubscribeWnfStateChange |
450 |
| NtSuspendProcess |
451 |
| NtSuspendThread |
452 |
| NtSystemDebugControl |
453 |
| NtTerminateEnclave |
454 |
| NtTerminateJobObject |
455 |
| NtTerminateProcess |
44 |
| NtTerminateThread |
83 |
| NtTestAlert |
456 |
| NtThawRegistry |
457 |
| NtThawTransactions |
458 |
| NtTraceControl |
459 |
| NtTraceEvent |
94 |
| NtTranslateFilePath |
460 |
| NtUmsThreadYield |
461 |
| NtUnloadDriver |
462 |
| NtUnloadKey |
463 |
| NtUnloadKey2 |
464 |
| NtUnloadKeyEx |
465 |
| NtUnlockFile |
466 |
| NtUnlockVirtualMemory |
467 |
| NtUnmapViewOfSection |
42 |
| NtUnmapViewOfSectionEx |
468 |
| NtUnsubscribeWnfStateChange |
469 |
| NtUpdateWnfStateData |
470 |
| NtVdmControl |
471 |
| NtWaitForAlertByThreadId |
472 |
| NtWaitForDebugEvent |
473 |
| NtWaitForKeyedEvent |
474 |
| NtWaitForMultipleObjects |
91 |
| NtWaitForMultipleObjects32 |
26 |
| NtWaitForSingleObject |
4 |
| NtWaitForWorkViaWorkerFactory |
475 |
| NtWaitHighEventPair |
476 |
| NtWaitLowEventPair |
477 |
| NtWorkerFactoryWorkerReady |
1 |
| NtWriteFile |
8 |
| NtWriteFileGather |
27 |
| NtWriteRequestData |
87 |
| NtWriteVirtualMemory |
58 |
| NtYieldExecution |
70 |