NtAccessCheck 0x00 0x61 0x61 0x01 0x20 NtWorkerFactoryWorkerReady 0x01 0x190 - - 0x04 NtAcceptConnectPort 0x02 0x60 0x60 - 0x18 NtMapUserPhysicalPagesScatter 0x03 0x00 0x00 0x6B 0x0C NtWaitForSingleObject 0x04 0x01 0x01 0x10F 0x0C NtCallbackReturn 0x05 0x02 0x02 0x14 0x0C NtReadFile 0x06 0x03 0x03 0xB7 0x24 NtDeviceIoControlFile 0x07 0x04 0x04 0x42 0x28 NtWriteFile 0x08 0x05 0x05 0x112 0x24 NtRemoveIoCompletion 0x09 0x06 0x06 0xBE 0x14 NtReleaseSemaphore 0x0A 0x07 0x07 0xBD 0x0C NtReplyWaitReceivePort 0x0B 0x08 0x08 0xC3 0x10 NtReplyPort 0x0C 0x09 0x09 0xC2 0x08 NtSetInformationThread 0x0D 0x0A 0x0A 0xE5 0x10 NtSetEvent 0x0E 0x0B 0x0B 0xDB 0x08 NtClose 0x0F 0x0C 0x0C 0x19 0x04 NtQueryObject 0x10 0x0D 0x0D 0xA3 0x14 NtQueryInformationFile 0x11 0x0E 0x0E 0x97 0x14 NtOpenKey 0x12 0x0F 0x0F 0x77 0x0C NtEnumerateValueKey 0x13 0x10 0x10 0x49 0x18 NtFindAtom 0x14 0x11 0x11 0x4C 0x0C NtQueryDefaultLocale 0x15 0x12 0x12 0x8F 0x08 NtQueryKey 0x16 0x13 0x13 0xA0 0x14 NtQueryValueKey 0x17 0x14 0x14 0xB1 0x18 NtAllocateVirtualMemory 0x18 0x15 0x15 0x11 0x18 NtQueryInformationProcess 0x19 0x16 0x16 0x9A 0x14 NtWaitForMultipleObjects32 0x1A 0x17 0x17 - 0x14 NtWriteFileGather 0x1B 0x18 0x18 0x113 0x24 NtSetInformationProcess 0x1C 0x19 0x19 0xE4 0x10 NtCreateKey 0x1D 0x1A 0x1A 0x29 0x1C NtFreeVirtualMemory 0x1E 0x1B 0x1B 0x53 0x10 NtImpersonateClientOfPort 0x1F 0x1C 0x1C 0x5A 0x08 NtReleaseMutant 0x20 0x1D 0x1D 0xBC 0x08 NtQueryInformationToken 0x21 0x1E 0x1E 0x9C 0x14 NtRequestWaitReplyPort 0x22 0x1F 0x1F 0xC8 0x0C NtQueryVirtualMemory 0x23 0x20 0x20 0xB2 0x18 NtOpenThreadToken 0x24 0x21 0x21 0x81 0x10 NtQueryInformationThread 0x25 0x22 0x22 0x9B 0x14 NtOpenProcess 0x26 0x23 0x23 0x7A 0x10 NtSetInformationFile 0x27 0x24 0x24 0xE0 0x14 NtMapViewOfSection 0x28 0x25 0x25 0x6C 0x28 NtAccessCheckAndAuditAlarm 0x29 0x26 0x26 0x02 0x2C NtUnmapViewOfSection 0x2A 0x27 0x27 0x10B 0x08 NtReplyWaitReceivePortEx 0x2B 0x28 0x28 0xC4 0x14 NtTerminateProcess 0x2C 0x29 0x29 0x101 0x08 NtSetEventBoostPriority 0x2D 0x2A 0x2A 0xDC 0x04 NtReadFileScatter 0x2E 0x2B 0x2B 0xB8 0x24 NtOpenThreadTokenEx 0x2F 0x2C 0x2C 0x82 0x14 NtOpenProcessTokenEx 0x30 0x2D 0x2D 0x7C 0x10 NtQueryPerformanceCounter 0x31 0x2E 0x2E 0xA5 0x08 NtEnumerateKey 0x32 0x2F 0x2F 0x47 0x18 NtOpenFile 0x33 0x30 0x30 0x74 0x18 NtDelayExecution 0x34 0x31 0x31 0x3B 0x08 NtQueryDirectoryFile 0x35 0x32 0x32 0x91 0x2C NtQuerySystemInformation 0x36 0x33 0x33 - 0x10 NtOpenSection 0x37 0x34 0x34 0x7D 0x0C NtQueryTimer 0x38 0x35 0x35 0xAF 0x14 NtFsControlFile 0x39 0x36 0x36 0x54 0x28 NtWriteVirtualMemory 0x3A 0x37 0x37 0x115 0x14 NtCloseObjectAuditAlarm 0x3B 0x38 0x38 0x1A 0x0C NtDuplicateObject 0x3C 0x39 0x39 0x44 0x1C NtQueryAttributesFile 0x3D 0x3A 0x3A 0x8B 0x08 NtClearEvent 0x3E 0x3B 0x3B 0x18 0x04 NtReadVirtualMemory 0x3F 0x3C 0x3C 0xBA 0x14 NtOpenEvent 0x40 0x3D 0x3D 0x72 0x0C NtAdjustPrivilegesToken 0x41 0x3E 0x3E 0x0B 0x18 NtDuplicateToken 0x42 0x3F 0x3F 0x45 0x18 NtContinue 0x43 0x40 0x40 0x20 0x08 NtQueryDefaultUILanguage 0x44 0x41 0x41 0x90 0x04 NtQueueApcThread 0x45 0x42 0x42 0xB4 0x14 NtYieldExecution 0x46 0x43 0x43 0x116 0x00 NtAddAtom 0x47 0x44 0x44 0x08 0x0C NtCreateEvent 0x48 0x45 0x45 0x23 0x14 NtQueryVolumeInformationFile 0x49 0x46 0x46 0xB3 0x14 NtCreateSection 0x4A 0x47 0x47 0x32 0x1C NtFlushBuffersFile 0x4B 0x48 0x48 0x4D 0x08 NtApphelpCacheControl 0x4C 0x49 0x49 - 0x08 NtCreateProcessEx 0x4D 0x4A 0x4A 0x30 0x24 NtCreateThread 0x4E 0x4B 0x4B 0x35 0x20 NtIsProcessInJob 0x4F 0x4C 0x4C 0x5E 0x08 NtProtectVirtualMemory 0x50 0x4D 0x4D 0x89 0x14 NtQuerySection 0x51 0x4E 0x4E 0xA7 0x14 NtResumeThread 0x52 0x4F 0x4F 0xCE 0x08 NtTerminateThread 0x53 0x50 0x50 0x102 0x08 NtReadRequestData 0x54 0x51 0x51 0xB9 0x18 NtCreateFile 0x55 0x52 0x52 0x25 0x2C NtQueryEvent 0x56 0x53 0x53 0x94 0x14 NtWriteRequestData 0x57 0x54 0x54 0x114 0x18 NtOpenDirectoryObject 0x58 0x55 0x55 0x71 0x0C NtAccessCheckByTypeAndAuditAlarm 0x59 0x56 0x56 0x04 0x40 NtQuerySystemTime 0x5A ILINE ILINE 0xAE 0x04 NtWaitForMultipleObjects 0x5B 0x57 0x57 0x10E 0x14 NtSetInformationObject 0x5C 0x58 0x58 0xE3 0x10 NtCancelIoFile 0x5D 0x59 0x59 0x16 0x08 NtTraceEvent 0x5E 0x5B 0x5B 0x104 0x10 NtPowerInformation 0x5F 0x5C 0x5C 0x85 0x14 NtSetValueKey 0x60 0x5D 0x5D 0xF7 0x18 NtCancelTimer 0x61 0x5E 0x5E 0x17 0x08 NtSetTimer 0x62 0x5F 0x5F 0xF4 0x1C NtAcceptConnectPort 2 0x60 0x60 - see2 NtAccessCheck 0 0x61 0x61 0x01 see0 NtAccessCheckByType 0x63 0x62 0x62 0x03 0x2C NtAccessCheckByTypeResultList 0x64 0x63 0x63 0x05 0x2C NtAccessCheckByTypeResultListAndAuditAlarm 0x65 0x64 0x64 0x06 0x40 NtAccessCheckByTypeResultListAndAuditAlarmByHandle 0x66 0x65 0x65 0x07 0x44 NtAcquireCrossVmMutant 0x67 - - - 0x08 NtAcquireProcessActivityReference 0x68 - - - 0x0C NtAddAtomEx 0x69 - - - 0x10 NtAddBootEntry 0x6A 0x66 0x66 0x09 0x08 NtAddDriverEntry 0x6B 0x67 0x67 - 0x08 NtAdjustGroupsToken 0x6C 0x68 0x68 0x0A 0x18 NtAdjustTokenClaimsAndDeviceGroups 0x6D - - - 0x40 NtAlertResumeThread 0x6E 0x69 0x69 0x0C 0x08 NtAlertThread 0x6F 0x6A 0x6A 0x0D 0x04 NtAlertThreadByThreadId 0x70 - - - 0x04 NtAllocateLocallyUniqueId 0x71 0x6B 0x6B 0x0E 0x04 NtAllocateReserveObject 0x72 0x6C - - 0x0C NtAllocateUserPhysicalPages 0x73 0x6D 0x6C 0x0F 0x0C NtAllocateUserPhysicalPagesEx 0x74 - - - 0x14 NtAllocateUuids 0x75 0x6E 0x6D 0x10 0x10 NtAllocateVirtualMemoryEx 0x76 - - - 0x1C NtAlpcAcceptConnectPort 0x77 0x6F - - 0x24 NtAlpcCancelMessage 0x78 0x70 - - 0x0C NtAlpcConnectPort 0x79 0x71 - - 0x2C NtAlpcConnectPortEx 0x7A - - - 0x2C NtAlpcCreatePort 0x7B 0x72 - - 0x0C NtAlpcCreatePortSection 0x7C 0x73 - - 0x18 NtAlpcCreateResourceReserve 0x7D 0x74 - - 0x10 NtAlpcCreateSectionView 0x7E 0x75 - - 0x0C NtAlpcCreateSecurityContext 0x7F 0x76 - - 0x0C NtAlpcDeletePortSection 0x80 0x77 - - 0x0C NtAlpcDeleteResourceReserve 0x81 0x78 - - 0x0C NtAlpcDeleteSectionView 0x82 0x79 - - 0x0C NtAlpcDeleteSecurityContext 0x83 0x7A - - 0x0C NtAlpcDisconnectPort 0x84 0x7B - - 0x08 NtAlpcImpersonateClientContainerOfPort 0x85 - - - 0x0C NtAlpcImpersonateClientOfPort 0x86 0x7C - - 0x0C NtAlpcOpenSenderProcess 0x87 0x7D - - 0x18 NtAlpcOpenSenderThread 0x88 0x7E - - 0x18 NtAlpcQueryInformation 0x89 0x7F - - 0x14 NtAlpcQueryInformationMessage 0x8A 0x80 - - 0x18 NtAlpcRevokeSecurityContext 0x8B 0x81 - - 0x0C NtAlpcSendWaitReceivePort 0x8C 0x82 - - 0x20 NtAlpcSetInformation 0x8D 0x83 - - 0x10 NtAreMappedFilesTheSame 0x8E 0x84 0x6E 0x12 0x08 NtAssignProcessToJobObject 0x8F 0x85 0x6F 0x13 0x08 NtAssociateWaitCompletionPacket 0x90 - - - 0x20 NtCallEnclave 0x91 - - - 0x10 NtCancelIoFileEx 0x92 0x86 - - 0x0C NtCancelSynchronousIoFile 0x93 0x87 - - 0x0C NtCancelTimer2 0x94 - - - 0x08 NtCancelWaitCompletionPacket 0x95 - - - 0x08 NtChangeProcessState 0x96 - - - 0x18 NtChangeThreadState 0x97 - - - 0x18 NtCommitComplete 0x98 0x88 - - 0x08 NtCommitEnlistment 0x99 0x89 - - 0x08 NtCommitRegistryTransaction 0x9A - - - 0x08 NtCommitTransaction 0x9B 0x8A - - 0x08 NtCancelDeviceWakeupRequest - - 0x70 0x15 0x04 NtCompactKeys 0x9C 0x8B 0x71 0x1B 0x08 NtCompareObjects 0x9D - - - 0x08 NtCompareSigningLevels 0x9E - - - 0x08 NtCompareTokens 0x9F 0x8C 0x72 0x1C 0x0C NtCompleteConnectPort 0xA0 0x8D 0x73 0x1D 0x04 NtCompressKey 0xA1 0x8E 0x74 0x1E 0x04 NtConnectPort 0xA2 0x8F 0x75 0x1F 0x20 NtContinueEx 0xA3 - - - 0x08 NtConvertBetweenAuxiliaryCounterAndPerformanceCounter 0xA4 - - - 0x10 NtCopyFileChunk 0xA5 - - - 0x28 NtCreateCpuPartition 0xA6 - - - 0x0C NtCreateCrossVmEvent 0xA7 - - - 0x18 NtCreateCrossVmMutant 0xA8 - - - 0x18 NtCreateDebugObject 0xA9 0x90 0x76 0x21 0x10 NtCreateDirectoryObject 0xAA 0x91 0x77 0x22 0x0C NtCreateDirectoryObjectEx 0xAB - - - 0x14 NtCreateEnclave 0xAC - - - 0x24 NtCreateEnlistment 0xAD 0x92 - - 0x20 NtCreateEventPair 0xAE 0x93 0x78 0x24 0x0C NtCreateIRTimer 0xAF - - - 0x0C NtCreateIoCompletion 0xB0 0x94 0x79 0x26 0x10 NtCreateIoRing 0xB1 - - - 0x14 NtCreateJobObject 0xB2 0x95 0x7A 0x27 0x0C NtCreateJobSet 0xB3 0x96 - 0x28 0x0C NtCreateKeyTransacted 0xB4 0x97 0x7B - 0x20 NtCreateKeyedEvent 0xB5 0x98 0x7C 0x117 0x10 NtCreateLowBoxToken 0xB6 - - - 0x24 NtCreateMailslotFile 0xB7 0x99 0x7D 0x2A 0x20 NtCreateMutant 0xB8 0x9A 0x7E 0x2B 0x10 NtCreateNamedPipeFile 0xB9 0x9B 0x7F 0x2C 0x38 NtCreatePagingFile 0xBA 0x9C 0x80 0x2D 0x10 NtCreatePartition 0xBB - - - 0x10 NtCreatePort 0xBC 0x9D 0x81 0x2E 0x14 NtCreatePrivateNamespace 0xBD 0x9E - - 0x10 NtCreateProcess 0xBE 0x9F 0x82 0x2F 0x20 NtCreateProcessStateChange 0xBF - - - 0x14 NtCreateProfile 0xC0 0xA0 0x83 0x31 0x24 NtCreateProfileEx 0xC1 0xA1 0x84 - 0x28 NtCreateRegistryTransaction 0xC2 - - - 0x10 NtCreateResourceManager 0xC3 0xA2 - - 0x1C NtCreateSectionEx 0xC4 - - - 0x24 NtCreateSemaphore 0xC5 0xA3 - 0x33 0x14 NtCreateSymbolicLinkObject 0xC6 0xA4 0x85 0x34 0x10 NtCreateThreadEx 0xC7 0xA5 - - 0x2C NtCreateThreadStateChange 0xC8 - - - 0x14 NtCreateTimer 0xC9 0xA6 0x86 0x36 0x10 NtCreateTimer2 0xCA - - - 0x14 NtCreateToken 0xCB 0xA7 0x87 0x37 0x34 NtCreateTokenEx 0xCC - - - 0x44 NtCreateTransaction 0xCD 0xA8 - - 0x28 NtCreateTransactionManager 0xCE 0xA9 - - 0x18 NtCreateUserProcess 0xCF 0xAA - - 0x2C NtCreateWaitCompletionPacket 0xD0 - - - 0x0C NtCreateWaitablePort 0xD1 0xAB 0x88 0x38 0x14 NtCreateWnfStateName 0xD2 - - - 0x1C NtCreateWorkerFactory 0xD3 0xAC - - 0x28 NtDebugActiveProcess 0xD4 0xAD 0x89 0x39 0x08 NtDebugContinue 0xD5 0xAE 0x8A 0x3A 0x0C NtDeleteAtom 0xD6 0xAF 0x8B 0x3C 0x04 NtDeleteBootEntry 0xD7 0xB0 0x8C 0x3D 0x04 NtDeleteDriverEntry 0xD8 0xB1 0x8D - 0x04 NtDeleteFile 0xD9 0xB2 0x8E 0x3E 0x04 NtDeleteKey 0xDA 0xB3 0x8F 0x3F 0x04 NtDeleteObjectAuditAlarm 0xDB 0xB4 0x90 0x40 0x0C NtDeletePrivateNamespace 0xDC 0xB5 - - 0x04 NtDeleteValueKey 0xDD 0xB6 0x91 0x41 0x08 NtDeleteWnfStateData 0xDE 0xB7 - - 0x08 NtDeleteWnfStateName 0xDF - - - 0x04 NtDirectGraphicsCall 0xE0 - - - 0x14 NtDisableLastKnownGood 0xE1 - - - 0x00 NtDisplayString 0xE2 0xB8 0x92 0x43 0x04 NtDrawText 0xE3 0xB9 - - 0x04 NtEnableLastKnownGood 0xE4 0xBA - - 0x00 NtEnumerateBootEntries 0xE5 0xBB 0x93 0x46 0x08 NtEnumerateDriverEntries 0xE6 0xBC 0x94 - 0x08 NtEnumerateSystemEnvironmentValuesEx 0xE7 0xBD 0x95 0x48 0x0C NtEnumerateTransactionObject 0xE8 0xBE - - 0x14 NtExtendSection 0xE9 0xBF 0x96 0x4A 0x08 NtFilterBootOption 0xEA - - - 0x14 NtFilterToken 0xEB 0xC0 0x97 0x4B 0x18 NtFilterTokenEx 0xEC - - - 0x38 NtFlushBuffersFileEx 0xED - - - 0x14 NtFlushInstallUILanguage 0xEE 0xC1 - - 0x08 NtFlushInstructionCache 0xEF 0xC2 0x98 0x4E 0x0C NtFlushKey 0xF0 0xC3 0x99 0x4F 0x04 NtFlushProcessWriteBuffers 0xF1 0xC4 - - 0x00 NtFlushVirtualMemory 0xF2 0xC5 0x99 0x50 0x10 NtFlushWriteBuffer 0xF3 0xC6 0x9A 0x51 0x00 NtFreeUserPhysicalPages 0xF4 0xC7 0x9B 0x52 0x0C NtFreezeRegistry 0xF5 0xC8 0x9C - 0x04 NtFreezeTransactions 0xF6 0xC9 - - 0x08 NtGetCachedSigningLevel 0xF7 - - - 0x18 NtGetCompleteWnfStateSubscription 0xF8 - - - 0x18 NtGetContextThread 0xF9 0xCA 0x9D 0x55 0x08 NtGetCurrentProcessorNumber 0xFA 0xCB 0x9E - 0x00 NtGetCurrentProcessorNumberEx 0xFB - - - 0x04 NtGetDevicePowerState 0xFC 0xCC 0x9F 0x56 0x08 NtGetMUIRegistryInfo 0xFD 0xCD - - 0x0C NtGetNextProcess 0xFE 0xCE - - 0x14 NtGetNextThread 0xFF 0xCF - - 0x18 NtGetNlsSectionPtr 0x100 0xD0 - - 0x14 NtGetNotificationResourceManager 0x101 0xD1 - - 0x1C NtGetPlugPlayEvent - 0xD2 0xA0 0x57 0x10 NtGetWriteWatch 0x102 0xD3 0xA1 0x58 0x1C NtImpersonateAnonymousToken 0x103 0xD4 0xA2 0x59 0x04 NtImpersonateThread 0x104 0xD5 0xA3 0x5B 0x0C NtInitializeEnclave 0x105 - - - 0x14 NtInitializeNlsFiles 0x106 0xD6 - - 0x0C NtInitializeRegistry 0x107 0xD7 0xA4 0x5C 0x04 NtInitiatePowerAction 0x108 0xD8 0xA5 0x5D 0x10 NtIsSystemResumeAutomatic 0x109 0xD9 0xA6 0x5F 0x00 NtIsUILanguageComitted 0x10A 0xDA - - 0x00 NtListenPort 0x10B 0xDB 0xA7 0x60 0x08 NtLoadDriver 0x10C 0xDC 0xA8 0x61 0x04 NtLoadEnclaveData 0x10D - - - 0x24 NtLoadKey 0x10E 0xDD 0xA9 0x62 0x08 NtLoadKey2 0x10F 0xDE 0xAA 0x63 0x0C NtLoadKey3 0x110 - - - 0x20 NtLoadKeyEx 0x111 0xDF 0xAB - 0x20 NtLockFile 0x112 0xE0 0xAC 0x64 0x28 NtLockProductActivationKeys 0x113 0xE1 0xAD 0x65 0x08 NtLockRegistryKey 0x114 0xE2 0xAE 0x66 0x04 NtLockVirtualMemory 0x115 0xE3 0xAF 0x67 0x10 NtMakePermanentObject 0x116 0xE4 0xB0 0x68 0x04 NtMakeTemporaryObject 0x117 0xE5 0xB1 0x69 0x04 NtManageHotPatch 0x118 - - - 0x10 NtManagePartition 0x119 - - - 0x14 NtMapCMFModule 0x11A 0xE6 - - 0x18 NtMapUserPhysicalPages 0x11B 0xE7 0xB2 0x6A 0x0C NtMapViewOfSectionEx 0x11C - - - 0x24 NtModifyBootEntry 0x11D 0xE8 0xB3 0x6D 0x04 NtModifyDriverEntry 0x11E 0xE9 0xB4 - 0x04 NtNotifyChangeDirectoryFile 0x11F 0xEA 0xB5 0x6E 0x24 NtNotifyChangeDirectoryFileEx 0x120 - 0xB6 - 0x28 NtNotifyChangeKey 0x121 0xEB 0xB7 0x6F 0x28 NtNotifyChangeMultipleKeys 0x122 0xEC - 0x70 0x30 NtNotifyChangeSession 0x123 0xED - - 0x20 NtOpenCpuPartition 0x124 - - - 0x0C NtOpenEnlistment 0x125 0xEE - - 0x14 NtOpenEventPair 0x126 0xEF 0xB8 0x73 0x0C NtOpenIoCompletion 0x127 0xF0 0xB9 0x75 0x0C NtOpenJobObject 0x128 0xF1 0xBA 0x76 0x0C NtOpenKeyEx 0x129 0xF2 - - 0x10 NtOpenKeyTransacted 0x12A 0xF3 - - 0x10 NtOpenKeyTransactedEx 0x12B 0xF4 - - 0x14 NtOpenKeyedEvent 0x12C 0xF5 0xBB 0x118 0x0C NtOpenMutant 0x12D 0xF6 0xBC 0x78 0x0C NtOpenObjectAuditAlarm 0x12E 0xF7 0xBD 0x79 0x30 NtOpenPartition 0x12F 0xF8 - - 0x0C NtOpenPrivateNamespace 0x130 0xF9 - - 0x10 NtOpenProcessToken 0x131 - 0xBE 0x7B 0x0C NtOpenRegistryTransaction 0x132 - - - 0x0C NtOpenResourceManager 0x133 0xFA - - 0x14 NtOpenSemaphore 0x134 0xFB 0xBF 0x7E 0x0C NtOpenSession 0x135 0xFC - - 0x0C NtOpenSymbolicLinkObject 0x136 0xFD 0xC0 0x7F 0x0C NtOpenThread 0x137 0xFE 0xC1 0x80 0x10 NtOpenTimer 0x138 0xFF 0xC2 0x83 0x0C NtOpenTransaction 0x139 0x100 - - 0x14 NtOpenTransactionManager 0x13A 0x101 - - 0x18 NtPlugPlayControl 0x13B 0x102 0xC3 0x84 0x0C NtPrePrepareComplete 0x13C 0x103 - - 0x08 NtPrePrepareEnlistment 0x13D 0x104 - - 0x08 NtPrepareComplete 0x13E 0x105 - - 0x08 NtPrepareEnlistment 0x13F 0x106 - - 0x08 NtPrivilegeCheck 0x140 0x107 0xC4 0x86 0x0C NtPrivilegeObjectAuditAlarm 0x141 0x108 0xC5 0x87 0x18 NtPrivilegedServiceAuditAlarm 0x142 0x109 0xC6 0x88 0x14 NtPropagationComplete 0x143 0x10A - - 0x10 NtPropagationFailed 0x144 0x10B - - 0x0C NtPssCaptureVaSpaceBulk 0x145 - - - 0x14 NtPulseEvent 0x146 0x10C 0xC7 0x8A 0x08 NtQueryAuxiliaryCounterFrequency 0x147 - - - 0x04 NtQueryBootEntryOrder 0x148 0x10D 0xC8 0x8C 0x08 NtQueryBootOptions 0x149 0x10E 0xC9 0x8D 0x08 NtQueryDebugFilterState 0x14A 0x10F 0xCA 0x8E 0x08 NtQueryDirectoryFileEx 0x14B - - - 0x28 NtQueryDirectoryObject 0x14C 0x110 0xCB 0x92 0x1C NtQueryDriverEntryOrder 0x14D 0x111 0xCC - 0x08 NtQueryEaFile 0x14E 0x112 0xCD 0x93 0x24 NtQueryFullAttributesFile 0x14F 0x113 0xCE 0x95 0x08 NtQueryInformationAtom 0x150 0x114 0xCF 0x96 0x14 NtQueryInformationByName 0x151 - 0xD0 - 0x14 NtQueryInformationCpuPartition 0x152 - - - 0x14 NtQueryInformationEnlistment 0x153 0x115 - - 0x14 NtQueryInformationJobObject 0x154 0x116 - 0x98 0x14 NtQueryInformationPort 0x155 0x117 0xD1 0x99 0x14 NtQueryInformationResourceManager 0x156 0x118 - - 0x14 NtQueryInformationTransaction 0x157 0x119 - - 0x14 NtQueryInformationTransactionManager 0x158 0x11A - - 0x14 NtQueryInformationWorkerFactory 0x159 0x11B - - 0x14 NtQueryInstallUILanguage 0x15A 0x11C 0xD2 0x9D 0x04 NtQueryIntervalProfile 0x15B 0x11D 0xD3 0x9E 0x08 NtQueryIoCompletion 0x15C 0x11E 0xD4 0x9F 0x14 NtQueryIoRingCapabilities 0x15D - - - 0x08 NtQueryLicenseValue 0x15E 0x11F - - 0x14 NtQueryMultipleValueKey 0x15F 0x120 0xD5 0xA1 0x18 NtQueryMutant 0x160 0x121 0xD6 0xA2 0x14 NtQueryOpenSubKeys 0x161 0x122 0xD7 0xA4 0x08 NtQueryOpenSubKeysEx 0x162 0x123 0xD8 - 0x10 NtQueryPortInformationProcess 0x163 0x124 0xD9 0x11B 0x00 NtQueryQuotaInformationFile 0x164 0x125 0xDA 0xA6 0x24 NtQuerySecurityAttributesToken 0x165 0x126 - - 0x18 NtQuerySecurityObject 0x166 0x127 0xDB 0xA8 0x14 NtQuerySecurityPolicy 0x167 - - - 0x18 NtQuerySemaphore 0x168 0x128 0xDC 0xA9 0x14 NtQuerySymbolicLinkObject 0x169 0x129 0xDD 0xAA 0x0C NtQuerySystemEnvironmentValue 0x16A 0x12A 0xDE 0xAB 0x10 NtQuerySystemEnvironmentValueEx 0x16B 0x12B 0xDF 0xAC 0x14 NtQuerySystemInformationEx 0x16C 0x12C - - 0x18 NtQueryTimerResolution 0x16D 0x12D 0xE0 0xB0 0x0C NtQueryWnfStateData 0x16E - - - 0x18 NtQueryWnfStateNameInformation 0x16F - - - 0x14 NtQueueApcThreadEx 0x170 0x12E - - 0x18 NtQueueApcThreadEx2 0x171 - - - 0x1C NtRaiseException 0x172 0x12F 0xE1 0xB5 0x0C NtRaiseHardError 0x173 0x130 0xE2 0xB6 0x18 NtReadOnlyEnlistment 0x174 0x131 - - 0x08 NtReadVirtualMemoryEx 0x175 - - - 0x18 NtRecoverEnlistment 0x176 0x132 - - 0x08 NtRecoverResourceManager 0x177 0x133 - - 0x04 NtRecoverTransactionManager 0x178 0x134 - - 0x04 NtRegisterProtocolAddressInformation 0x179 0x135 - - 0x14 NtRegisterThreadTerminatePort 0x17A 0x136 0xE3 0xBB 0x04 NtReleaseKeyedEvent 0x17B 0x137 0xE4 0x119 0x10 NtReleaseWorkerFactoryWorker 0x17C 0x138 - - 0x04 NtRemoveIoCompletionEx 0x17D 0x139 - - 0x18 NtRemoveProcessDebug 0x17E 0x13A 0xE5 0xBF 0x08 NtRenameKey 0x17F 0x13B 0xE6 0xC0 0x08 NtRenameTransactionManager 0x180 0x13C - - 0x08 NtReplaceKey 0x181 0x13D 0xE7 0xC1 0x0C NtReplacePartitionUnit 0x182 0x13E - - 0x0C NtReplyWaitReplyPort 0x183 0x13F 0xE8 0xC5 0x08 NtRequestDeviceWakeup - - 0xE9 0xC6 0x04 NtRequestPort 0x184 0x140 0xEA 0xC7 0x08 NtRequestWakeupLatency - - 0xEB 0xC9 0x04 NtResetEvent 0x185 0x141 0xEC 0xCA 0x08 NtResetWriteWatch 0x186 0x142 0xED 0xCB 0x0C NtRestoreKey 0x187 0x143 0xEE 0xCC 0x0C NtResumeProcess 0x188 0x144 0xEF 0xCD 0x04 NtRevertContainerImpersonation 0x189 - - - 0x00 NtRollbackComplete 0x18A 0x145 - - 0x08 NtRollbackEnlistment 0x18B 0x146 - - 0x08 NtRollbackRegistryTransaction 0x18C - - - 0x08 NtRollbackTransaction 0x18D 0x147 - - 0x08 NtRollforwardTransactionManager 0x18E 0x148 - - 0x08 NtSaveKey 0x18F 0x149 0xF0 0xCF 0x08 NtSaveKeyEx 0x190 0x14A 0xF1 0xD0 0x0C NtSaveMergedKeys 0x191 0x14B 0xF2 0xD1 0x0C NtSecureConnectPort 0x192 0x14C 0xF3 0xD2 0x24 NtSerializeBoot 0x193 0x14D - - 0x00 NtSetBootEntryOrder 0x194 0x14E 0xF4 0xD3 0x08 NtSetBootOptions 0x195 0x14F 0xF5 0xD4 0x08 NtSetCachedSigningLevel 0x196 - - - 0x14 NtSetCachedSigningLevel2 0x197 - - - 0x18 NtSetContextThread 0x198 0x150 0xF6 0xD5 0x08 NtSetDebugFilterState 0x199 0x151 0xF7 0xD6 0x0C NtSetDefaultHardErrorPort 0x19A 0x152 0xF8 0xD7 0x04 NtSetDefaultLocale 0x19B 0x153 0xF9 0xD8 0x08 NtSetDefaultUILanguage 0x19C 0x154 0xFA 0xD9 0x04 NtSetDriverEntryOrder 0x19D 0x155 0xFB - 0x08 NtSetEaFile 0x19E 0x156 0xFC 0xDA 0x10 NtSetHighEventPair 0x19F 0x157 0xFD 0xDD 0x04 NtSetHighWaitLowEventPair 0x1A0 0x158 0xFE 0xDE 0x04 NtSetIRTimer 0x1A1 - - - 0x08 NtSetInformationCpuPartition 0x1A2 - - - 0x1C NtSetInformationDebugObject 0x1A3 0x159 0xFF 0xDF 0x14 NtSetInformationEnlistment 0x1A4 0x15A 0x100 - 0x10 NtSetInformationIoRing 0x1A5 0x15B 0x101 - 0x10 NtSetInformationJobObject 0x1A6 0x15C 0x102 0xE1 0x10 NtSetInformationKey 0x1A7 0x15D - 0xE2 0x10 NtSetInformationResourceManager 0x1A8 - - - 0x10 NtSetInformationSymbolicLink 0x1A9 - - - 0x10 NtSetInformationToken 0x1AA 0x15E - 0xE6 0x10 NtSetInformationTransaction 0x1AB 0x15F - - 0x10 NtSetInformationTransactionManager 0x1AC 0x160 - - 0x10 NtSetInformationVirtualMemory 0x1AD - - - 0x18 NtSetInformationWorkerFactory 0x1AE 0x161 - - 0x10 NtSetIntervalProfile 0x1AF 0x162 0x103 0xE7 0x08 NtSetIoCompletion 0x1B0 0x163 0x104 0xE8 0x14 NtSetIoCompletionEx 0x1B1 0x164 - - 0x18 NtSetLdtEntries 0x1B2 0x165 0x105 0xE9 0x18 NtSetLowEventPair 0x1B3 0x166 0x106 0xEA 0x04 NtSetLowWaitHighEventPair 0x1B4 0x167 0x107 0xEB 0x04 NtSetQuotaInformationFile 0x1B5 0x168 0x108 0xEC 0x10 NtSetSecurityObject 0x1B6 0x169 0x109 0xED 0x0C NtSetSystemEnvironmentValue 0x1B7 0x16A 0x10A 0xEE 0x08 NtSetSystemEnvironmentValueEx 0x1B8 0x16B 0x10B 0xEF 0x14 NtSetSystemInformation 0x1B9 0x16C 0x10C 0xF0 0x0C NtSetSystemPowerState 0x1BA 0x16D 0x10D 0xF1 0x0C NtSetSystemTime 0x1BB 0x16E 0x10E 0xF2 0x08 NtSetThreadExecutionState 0x1BC 0x16F 0x10F 0xF3 0x08 NtSetTimer2 0x1BD - - - 0x10 NtSetTimerEx 0x1BE 0x170 - - 0x10 NtSetTimerResolution 0x1BF 0x171 0x110 0xF5 0x0C NtSetUuidSeed 0x1C0 0x172 0x111 0xF6 0x04 NtSetVolumeInformationFile 0x1C1 0x173 0x112 0xF8 0x14 NtSetWnfProcessNotificationEvent 0x1C2 - 0x113 - 0x04 NtShutdownSystem 0x1C3 0x174 - 0xF9 0x04 NtShutdownWorkerFactory 0x1C4 0x175 - - 0x08 NtSinglePhaseReject 0x1C6 0x177 - - 0x10 NtStartProfile 0x1C7 0x178 - 0xFB 0x08 NtSignalAndWaitForSingleObject 0x1C5 0x176 0x114 0xFA 0x04 NtStartProfile - - 0x115 0xFB 0x04 NtStopProfile 0x1C8 0x179 0x116 0xFC 0x04 NtSubmitIoRing 0x1C9 - - - 0x10 NtSubscribeWnfStateChange 0x1CA - - - 0x10 NtSuspendProcess 0x1CB 0x17A 0x117 0xFD 0x04 NtSuspendThread 0x1CC 0x17B 0x118 0xFE 0x08 NtSystemDebugControl 0x1CD 0x17C 0x119 0xFF 0x18 NtTerminateEnclave 0x1CE - - - 0x08 NtTerminateJobObject 0x1CF 0x17D 0x11A 0x100 0x08 NtTestAlert 0x1D0 0x17E 0x11B 0x103 0x00 NtThawRegistry 0x1D1 0x17F - - 0x00 NtThawTransactions 0x1D2 0x180 - - 0x00 NtTraceControl 0x1D3 0x181 - - 0x18 NtTranslateFilePath 0x1D4 0x182 0x11C 0x105 0x10 NtUmsThreadYield 0x1D5 0x183 - - 0x04 NtUnloadDriver 0x1D6 0x184 0x11D 0x106 0x04 NtUnloadKey 0x1D7 0x185 0x11E 0x107 0x04 NtUnloadKey2 0x1D8 0x186 0x11F - 0x08 NtUnloadKeyEx 0x1D9 0x187 0x120 0x108 0x08 NtUnlockFile 0x1DA 0x188 0x121 0x109 0x14 NtUnlockVirtualMemory 0x1DB 0x189 0x122 0x10A 0x10 NtUnmapViewOfSectionEx 0x1DC - - - 0x0C NtUnsubscribeWnfStateChange 0x1DD - - - 0x04 NtUpdateWnfStateData 0x1DE - - - 0x1C NtVdmControl 0x1DF 0x18A 0x123 0x10C 0x08 NtWaitForAlertByThreadId 0x1E0 - - - 0x08 NtWaitForDebugEvent 0x1E1 0x18B 0x124 0x10D 0x10 NtWaitForKeyedEvent 0x1E2 0x18C 0x125 0x11A 0x10 NtWaitForWorkViaWorkerFactory 0x1E3 0x18D - - 0x14 NtWaitHighEventPair 0x1E4 0x18E 0x126 0x110 0x04 NtWaitLowEventPair 0x1E5 0x18F 0x127 0x111 0x04 ------------------------------------------------------- ------- ------- ------- ------- ------- NtWow64CsrClientConnectToServer 0x1E6 - - - 0x14 NtWow64CsrIdentifyAlertableThread 0x1E7 - - - 0x00 NtWow64CsrClientCallServer 0x1E8 - - - 0x10 NtWow64CsrAllocateCaptureBuffer 0x1E9 - - - 0x08 NtWow64CsrFreeCaptureBuffer 0x1EA - - - 0x04 NtWow64CsrAllocateMessagePointer 0x1EB - - - 0x0C NtWow64CsrCaptureMessageBuffer 0x1EC - - - 0x10 NtWow64CsrCaptureMessageString 0x1ED - - - 0x14 NtWow64CsrGetProcessId 0x1EE - - - 0x00 NtWow64CsrVerifyRegion 0x1EF - - - 0x08 NtWow64DebuggerCall 0x1F0 - - - 0x14 NtWow64GetCurrentProcessorNumberEx 0x1F1 - - - 0x04 NtWow64GetNativeSystemInformation 0x1F2 - - - 0x10 NtWow64QueryInformationProcess64 0x1F3 - - - 0x14 NtWow64AllocateVirtualMemory64 0x1F4 - - - 0x1C NtWow64ReadVirtualMemory64 0x1F5 - - - 0x1C NtWow64WriteVirtualMemory64 0x1F6 - - - 0x1C NtWow64CallFunction64 0x1F7 - - - 0x1C NtWow64IsProcessorFeaturePresent 0x1F8 - - - 0x04