NtAcceptConnectPort |
2 |
NtAccessCheck |
0 |
NtAccessCheckAndAuditAlarm |
41 |
NtAccessCheckByType |
99 |
NtAccessCheckByTypeAndAuditAlarm |
89 |
NtAccessCheckByTypeResultList |
100 |
NtAccessCheckByTypeResultListAndAuditAlarm |
101 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
102 |
NtAcquireProcessActivityReference |
103 |
NtAddAtom |
71 |
NtAddAtomEx |
104 |
NtAddBootEntry |
105 |
NtAddDriverEntry |
106 |
NtAdjustGroupsToken |
107 |
NtAdjustPrivilegesToken |
65 |
NtAdjustTokenClaimsAndDeviceGroups |
108 |
NtAlertResumeThread |
109 |
NtAlertThread |
110 |
NtAlertThreadByThreadId |
111 |
NtAllocateLocallyUniqueId |
112 |
NtAllocateReserveObject |
113 |
NtAllocateUserPhysicalPages |
114 |
NtAllocateUuids |
115 |
NtAllocateVirtualMemory |
24 |
NtAllocateVirtualMemoryEx |
116 |
NtAlpcAcceptConnectPort |
117 |
NtAlpcCancelMessage |
118 |
NtAlpcConnectPort |
119 |
NtAlpcConnectPortEx |
120 |
NtAlpcCreatePort |
121 |
NtAlpcCreatePortSection |
122 |
NtAlpcCreateResourceReserve |
123 |
NtAlpcCreateSectionView |
124 |
NtAlpcCreateSecurityContext |
125 |
NtAlpcDeletePortSection |
126 |
NtAlpcDeleteResourceReserve |
127 |
NtAlpcDeleteSectionView |
128 |
NtAlpcDeleteSecurityContext |
129 |
NtAlpcDisconnectPort |
130 |
NtAlpcImpersonateClientContainerOfPort |
131 |
NtAlpcImpersonateClientOfPort |
132 |
NtAlpcOpenSenderProcess |
133 |
NtAlpcOpenSenderThread |
134 |
NtAlpcQueryInformation |
135 |
NtAlpcQueryInformationMessage |
136 |
NtAlpcRevokeSecurityContext |
137 |
NtAlpcSendWaitReceivePort |
138 |
NtAlpcSetInformation |
139 |
NtApphelpCacheControl |
76 |
NtAreMappedFilesTheSame |
140 |
NtAssignProcessToJobObject |
141 |
NtAssociateWaitCompletionPacket |
142 |
NtCallEnclave |
143 |
NtCallbackReturn |
5 |
NtCancelIoFile |
93 |
NtCancelIoFileEx |
144 |
NtCancelSynchronousIoFile |
145 |
NtCancelTimer |
97 |
NtCancelTimer2 |
146 |
NtCancelWaitCompletionPacket |
147 |
NtClearEvent |
62 |
NtClose |
15 |
NtCloseObjectAuditAlarm |
59 |
NtCommitComplete |
148 |
NtCommitEnlistment |
149 |
NtCommitRegistryTransaction |
150 |
NtCommitTransaction |
151 |
NtCompactKeys |
152 |
NtCompareObjects |
153 |
NtCompareSigningLevels |
154 |
NtCompareTokens |
155 |
NtCompleteConnectPort |
156 |
NtCompressKey |
157 |
NtConnectPort |
158 |
NtContinue |
67 |
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter |
159 |
NtCreateDebugObject |
160 |
NtCreateDirectoryObject |
161 |
NtCreateDirectoryObjectEx |
162 |
NtCreateEnclave |
163 |
NtCreateEnlistment |
164 |
NtCreateEvent |
72 |
NtCreateEventPair |
165 |
NtCreateFile |
85 |
NtCreateIRTimer |
166 |
NtCreateIoCompletion |
167 |
NtCreateJobObject |
168 |
NtCreateJobSet |
169 |
NtCreateKey |
29 |
NtCreateKeyTransacted |
170 |
NtCreateKeyedEvent |
171 |
NtCreateLowBoxToken |
172 |
NtCreateMailslotFile |
173 |
NtCreateMutant |
174 |
NtCreateNamedPipeFile |
175 |
NtCreatePagingFile |
176 |
NtCreatePartition |
177 |
NtCreatePort |
178 |
NtCreatePrivateNamespace |
179 |
NtCreateProcess |
180 |
NtCreateProcessEx |
77 |
NtCreateProfile |
181 |
NtCreateProfileEx |
182 |
NtCreateRegistryTransaction |
183 |
NtCreateResourceManager |
184 |
NtCreateSection |
74 |
NtCreateSemaphore |
185 |
NtCreateSymbolicLinkObject |
186 |
NtCreateThread |
78 |
NtCreateThreadEx |
187 |
NtCreateTimer |
188 |
NtCreateTimer2 |
189 |
NtCreateToken |
190 |
NtCreateTokenEx |
191 |
NtCreateTransaction |
192 |
NtCreateTransactionManager |
193 |
NtCreateUserProcess |
194 |
NtCreateWaitCompletionPacket |
195 |
NtCreateWaitablePort |
196 |
NtCreateWnfStateName |
197 |
NtCreateWorkerFactory |
198 |
NtDebugActiveProcess |
199 |
NtDebugContinue |
200 |
NtDelayExecution |
52 |
NtDeleteAtom |
201 |
NtDeleteBootEntry |
202 |
NtDeleteDriverEntry |
203 |
NtDeleteFile |
204 |
NtDeleteKey |
205 |
NtDeleteObjectAuditAlarm |
206 |
NtDeletePrivateNamespace |
207 |
NtDeleteValueKey |
208 |
NtDeleteWnfStateData |
209 |
NtDeleteWnfStateName |
210 |
NtDeviceIoControlFile |
7 |
NtDisableLastKnownGood |
211 |
NtDisplayString |
212 |
NtDrawText |
213 |
NtDuplicateObject |
60 |
NtDuplicateToken |
66 |
NtEnableLastKnownGood |
214 |
NtEnumerateBootEntries |
215 |
NtEnumerateDriverEntries |
216 |
NtEnumerateKey |
50 |
NtEnumerateSystemEnvironmentValuesEx |
217 |
NtEnumerateTransactionObject |
218 |
NtEnumerateValueKey |
19 |
NtExtendSection |
219 |
NtFilterBootOption |
220 |
NtFilterToken |
221 |
NtFilterTokenEx |
222 |
NtFindAtom |
20 |
NtFlushBuffersFile |
75 |
NtFlushBuffersFileEx |
223 |
NtFlushInstallUILanguage |
224 |
NtFlushInstructionCache |
225 |
NtFlushKey |
226 |
NtFlushProcessWriteBuffers |
227 |
NtFlushVirtualMemory |
228 |
NtFlushWriteBuffer |
229 |
NtFreeUserPhysicalPages |
230 |
NtFreeVirtualMemory |
30 |
NtFreezeRegistry |
231 |
NtFreezeTransactions |
232 |
NtFsControlFile |
57 |
NtGetCachedSigningLevel |
233 |
NtGetCompleteWnfStateSubscription |
234 |
NtGetContextThread |
235 |
NtGetCurrentProcessorNumber |
236 |
NtGetCurrentProcessorNumberEx |
237 |
NtGetDevicePowerState |
238 |
NtGetMUIRegistryInfo |
239 |
NtGetNextProcess |
240 |
NtGetNextThread |
241 |
NtGetNlsSectionPtr |
242 |
NtGetNotificationResourceManager |
243 |
NtGetWriteWatch |
244 |
NtImpersonateAnonymousToken |
245 |
NtImpersonateClientOfPort |
31 |
NtImpersonateThread |
246 |
NtInitializeEnclave |
247 |
NtInitializeNlsFiles |
248 |
NtInitializeRegistry |
249 |
NtInitiatePowerAction |
250 |
NtIsProcessInJob |
79 |
NtIsSystemResumeAutomatic |
251 |
NtIsUILanguageComitted |
252 |
NtListenPort |
253 |
NtLoadDriver |
254 |
NtLoadEnclaveData |
255 |
NtLoadHotPatch |
256 |
NtLoadKey |
257 |
NtLoadKey2 |
258 |
NtLoadKeyEx |
259 |
NtLockFile |
260 |
NtLockProductActivationKeys |
261 |
NtLockRegistryKey |
262 |
NtLockVirtualMemory |
263 |
NtMakePermanentObject |
264 |
NtMakeTemporaryObject |
265 |
NtManagePartition |
266 |
NtMapCMFModule |
267 |
NtMapUserPhysicalPages |
268 |
NtMapUserPhysicalPagesScatter |
3 |
NtMapViewOfSection |
40 |
NtMapViewOfSectionEx |
269 |
NtModifyBootEntry |
270 |
NtModifyDriverEntry |
271 |
NtNotifyChangeDirectoryFile |
272 |
NtNotifyChangeDirectoryFileEx |
273 |
NtNotifyChangeKey |
274 |
NtNotifyChangeMultipleKeys |
275 |
NtNotifyChangeSession |
276 |
NtOpenDirectoryObject |
88 |
NtOpenEnlistment |
277 |
NtOpenEvent |
64 |
NtOpenEventPair |
278 |
NtOpenFile |
51 |
NtOpenIoCompletion |
279 |
NtOpenJobObject |
280 |
NtOpenKey |
18 |
NtOpenKeyEx |
281 |
NtOpenKeyTransacted |
282 |
NtOpenKeyTransactedEx |
283 |
NtOpenKeyedEvent |
284 |
NtOpenMutant |
285 |
NtOpenObjectAuditAlarm |
286 |
NtOpenPartition |
287 |
NtOpenPrivateNamespace |
288 |
NtOpenProcess |
38 |
NtOpenProcessToken |
289 |
NtOpenProcessTokenEx |
48 |
NtOpenRegistryTransaction |
290 |
NtOpenResourceManager |
291 |
NtOpenSection |
55 |
NtOpenSemaphore |
292 |
NtOpenSession |
293 |
NtOpenSymbolicLinkObject |
294 |
NtOpenThread |
295 |
NtOpenThreadToken |
36 |
NtOpenThreadTokenEx |
47 |
NtOpenTimer |
296 |
NtOpenTransaction |
297 |
NtOpenTransactionManager |
298 |
NtPlugPlayControl |
299 |
NtPowerInformation |
95 |
NtPrePrepareComplete |
300 |
NtPrePrepareEnlistment |
301 |
NtPrepareComplete |
302 |
NtPrepareEnlistment |
303 |
NtPrivilegeCheck |
304 |
NtPrivilegeObjectAuditAlarm |
305 |
NtPrivilegedServiceAuditAlarm |
306 |
NtPropagationComplete |
307 |
NtPropagationFailed |
308 |
NtProtectVirtualMemory |
80 |
NtPulseEvent |
309 |
NtQueryAttributesFile |
61 |
NtQueryAuxiliaryCounterFrequency |
310 |
NtQueryBootEntryOrder |
311 |
NtQueryBootOptions |
312 |
NtQueryDebugFilterState |
313 |
NtQueryDefaultLocale |
21 |
NtQueryDefaultUILanguage |
68 |
NtQueryDirectoryFile |
53 |
NtQueryDirectoryFileEx |
314 |
NtQueryDirectoryObject |
315 |
NtQueryDriverEntryOrder |
316 |
NtQueryEaFile |
317 |
NtQueryEvent |
86 |
NtQueryFullAttributesFile |
318 |
NtQueryInformationAtom |
319 |
NtQueryInformationByName |
320 |
NtQueryInformationEnlistment |
321 |
NtQueryInformationFile |
17 |
NtQueryInformationJobObject |
322 |
NtQueryInformationPort |
323 |
NtQueryInformationProcess |
25 |
NtQueryInformationResourceManager |
324 |
NtQueryInformationThread |
37 |
NtQueryInformationToken |
33 |
NtQueryInformationTransaction |
325 |
NtQueryInformationTransactionManager |
326 |
NtQueryInformationWorkerFactory |
327 |
NtQueryInstallUILanguage |
328 |
NtQueryIntervalProfile |
329 |
NtQueryIoCompletion |
330 |
NtQueryKey |
22 |
NtQueryLicenseValue |
331 |
NtQueryMultipleValueKey |
332 |
NtQueryMutant |
333 |
NtQueryObject |
16 |
NtQueryOpenSubKeys |
334 |
NtQueryOpenSubKeysEx |
335 |
NtQueryPerformanceCounter |
49 |
NtQueryPortInformationProcess |
336 |
NtQueryQuotaInformationFile |
337 |
NtQuerySection |
81 |
NtQuerySecurityAttributesToken |
338 |
NtQuerySecurityObject |
339 |
NtQuerySecurityPolicy |
340 |
NtQuerySemaphore |
341 |
NtQuerySymbolicLinkObject |
342 |
NtQuerySystemEnvironmentValue |
343 |
NtQuerySystemEnvironmentValueEx |
344 |
NtQuerySystemInformation |
54 |
NtQuerySystemInformationEx |
345 |
NtQueryTimer |
56 |
NtQueryTimerResolution |
346 |
NtQueryValueKey |
23 |
NtQueryVirtualMemory |
35 |
NtQueryVolumeInformationFile |
73 |
NtQueryWnfStateData |
347 |
NtQueryWnfStateNameInformation |
348 |
NtQueueApcThread |
69 |
NtQueueApcThreadEx |
349 |
NtRaiseException |
350 |
NtRaiseHardError |
351 |
NtReadFile |
6 |
NtReadFileScatter |
46 |
NtReadOnlyEnlistment |
352 |
NtReadRequestData |
84 |
NtReadVirtualMemory |
63 |
NtRecoverEnlistment |
353 |
NtRecoverResourceManager |
354 |
NtRecoverTransactionManager |
355 |
NtRegisterProtocolAddressInformation |
356 |
NtRegisterThreadTerminatePort |
357 |
NtReleaseKeyedEvent |
358 |
NtReleaseMutant |
32 |
NtReleaseSemaphore |
10 |
NtReleaseWorkerFactoryWorker |
359 |
NtRemoveIoCompletion |
9 |
NtRemoveIoCompletionEx |
360 |
NtRemoveProcessDebug |
361 |
NtRenameKey |
362 |
NtRenameTransactionManager |
363 |
NtReplaceKey |
364 |
NtReplacePartitionUnit |
365 |
NtReplyPort |
12 |
NtReplyWaitReceivePort |
11 |
NtReplyWaitReceivePortEx |
43 |
NtReplyWaitReplyPort |
366 |
NtRequestPort |
367 |
NtRequestWaitReplyPort |
34 |
NtResetEvent |
368 |
NtResetWriteWatch |
369 |
NtRestoreKey |
370 |
NtResumeProcess |
371 |
NtResumeThread |
82 |
NtRevertContainerImpersonation |
372 |
NtRollbackComplete |
373 |
NtRollbackEnlistment |
374 |
NtRollbackRegistryTransaction |
375 |
NtRollbackTransaction |
376 |
NtRollforwardTransactionManager |
377 |
NtSaveKey |
378 |
NtSaveKeyEx |
379 |
NtSaveMergedKeys |
380 |
NtSecureConnectPort |
381 |
NtSerializeBoot |
382 |
NtSetBootEntryOrder |
383 |
NtSetBootOptions |
384 |
NtSetCachedSigningLevel |
385 |
NtSetCachedSigningLevel2 |
386 |
NtSetContextThread |
387 |
NtSetDebugFilterState |
388 |
NtSetDefaultHardErrorPort |
389 |
NtSetDefaultLocale |
390 |
NtSetDefaultUILanguage |
391 |
NtSetDriverEntryOrder |
392 |
NtSetEaFile |
393 |
NtSetEvent |
14 |
NtSetEventBoostPriority |
45 |
NtSetHighEventPair |
394 |
NtSetHighWaitLowEventPair |
395 |
NtSetIRTimer |
396 |
NtSetInformationDebugObject |
397 |
NtSetInformationEnlistment |
398 |
NtSetInformationFile |
39 |
NtSetInformationJobObject |
399 |
NtSetInformationKey |
400 |
NtSetInformationObject |
92 |
NtSetInformationProcess |
28 |
NtSetInformationResourceManager |
401 |
NtSetInformationSymbolicLink |
402 |
NtSetInformationThread |
13 |
NtSetInformationToken |
403 |
NtSetInformationTransaction |
404 |
NtSetInformationTransactionManager |
405 |
NtSetInformationVirtualMemory |
406 |
NtSetInformationWorkerFactory |
407 |
NtSetIntervalProfile |
408 |
NtSetIoCompletion |
409 |
NtSetIoCompletionEx |
410 |
NtSetLdtEntries |
411 |
NtSetLowEventPair |
412 |
NtSetLowWaitHighEventPair |
413 |
NtSetQuotaInformationFile |
414 |
NtSetSecurityObject |
415 |
NtSetSystemEnvironmentValue |
416 |
NtSetSystemEnvironmentValueEx |
417 |
NtSetSystemInformation |
418 |
NtSetSystemPowerState |
419 |
NtSetSystemTime |
420 |
NtSetThreadExecutionState |
421 |
NtSetTimer |
98 |
NtSetTimer2 |
422 |
NtSetTimerEx |
423 |
NtSetTimerResolution |
424 |
NtSetUuidSeed |
425 |
NtSetValueKey |
96 |
NtSetVolumeInformationFile |
426 |
NtSetWnfProcessNotificationEvent |
427 |
NtShutdownSystem |
428 |
NtShutdownWorkerFactory |
429 |
NtSignalAndWaitForSingleObject |
430 |
NtSinglePhaseReject |
431 |
NtStartProfile |
432 |
NtStopProfile |
433 |
NtSubscribeWnfStateChange |
434 |
NtSuspendProcess |
435 |
NtSuspendThread |
436 |
NtSystemDebugControl |
437 |
NtTerminateEnclave |
438 |
NtTerminateJobObject |
439 |
NtTerminateProcess |
44 |
NtTerminateThread |
83 |
NtTestAlert |
440 |
NtThawRegistry |
441 |
NtThawTransactions |
442 |
NtTraceControl |
443 |
NtTraceEvent |
94 |
NtTranslateFilePath |
444 |
NtUmsThreadYield |
445 |
NtUnloadDriver |
446 |
NtUnloadKey |
447 |
NtUnloadKey2 |
448 |
NtUnloadKeyEx |
449 |
NtUnlockFile |
450 |
NtUnlockVirtualMemory |
451 |
NtUnmapViewOfSection |
42 |
NtUnmapViewOfSectionEx |
452 |
NtUnsubscribeWnfStateChange |
453 |
NtUpdateWnfStateData |
454 |
NtVdmControl |
455 |
NtWaitForAlertByThreadId |
456 |
NtWaitForDebugEvent |
457 |
NtWaitForKeyedEvent |
458 |
NtWaitForMultipleObjects |
91 |
NtWaitForMultipleObjects32 |
26 |
NtWaitForSingleObject |
4 |
NtWaitForWorkViaWorkerFactory |
459 |
NtWaitHighEventPair |
460 |
NtWaitLowEventPair |
461 |
NtWorkerFactoryWorkerReady |
1 |
NtWriteFile |
8 |
NtWriteFileGather |
27 |
NtWriteRequestData |
87 |
NtWriteVirtualMemory |
58 |
NtYieldExecution |
70 |