enum { OS_NT_SP3, OS_NT_SP4, OS_NT_SP5, OS_NT_SP6, OS_2K_SP0, OS_2K_SP1, OS_2K_SP2, OS_2K_SP3, OS_2K_SP4, OS_XP_SP0, OS_XP_SP1, OS_XP_SP2, OS_XP_SP3, OS_2003_SP0, OS_2003_SP1, OS_VISTA_SP0, OS_SEVEN_SP0, }; struct SCENTRY { char* name; int x[17]; } syscalls[] = { {"NtAcceptConnectPort", 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, }, {"NtAccessCheck", 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, }, {"NtAccessCheckAndAuditAlarm", 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, }, {"NtAccessCheckByType", -1, -1, -1, -1, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, 0x0003, }, {"NtAccessCheckByTypeAndAuditAlarm", -1, -1, -1, -1, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, }, {"NtAccessCheckByTypeResultList", -1, -1, -1, -1, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, 0x0005, }, {"NtAccessCheckByTypeResultListAndAuditAlarm", -1, -1, -1, -1, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, 0x0006, }, {"NtAccessCheckByTypeResultListAndAuditAlarmByHandle", -1, -1, -1, -1, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, 0x0007, }, {"NtAddAtom", 0x0003, 0x0003, 0x0003, 0x0003, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, 0x0008, }, {"NtAddBootEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0009, 0x0009, 0x0009, -1, 0x0009, 0x0009, 0x0009, 0x0009, }, {"NtAddDriverEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x000A, 0x000A, 0x000A, 0x000A, }, {"NtAdjustGroupsToken", 0x0004, 0x0004, 0x0004, 0x0004, 0x0009, 0x0009, 0x0009, 0x0009, 0x0009, 0x000A, 0x000A, 0x000A, 0x000A, 0x000B, 0x000B, 0x000B, 0x000B, }, {"NtAdjustPrivilegesToken", 0x0005, 0x0005, 0x0005, 0x0005, 0x000A, 0x000A, 0x000A, 0x000A, 0x000A, 0x000B, 0x000B, 0x000B, 0x000B, 0x000C, 0x000C, 0x000C, 0x000C, }, {"NtAlertResumeThread", 0x0006, 0x0006, 0x0006, 0x0006, 0x000B, 0x000B, 0x000B, 0x000B, 0x000B, 0x000C, 0x000C, 0x000C, 0x000C, 0x000D, 0x000D, 0x000D, 0x000D, }, {"NtAlertThread", 0x0007, 0x0007, 0x0007, 0x0007, 0x000C, 0x000C, 0x000C, 0x000C, 0x000C, 0x000D, 0x000D, 0x000D, 0x000D, 0x000E, 0x000E, 0x000E, 0x000E, }, {"NtAllocateLocallyUniqueId", 0x0008, 0x0008, 0x0008, 0x0008, 0x000D, 0x000D, 0x000D, 0x000D, 0x000D, 0x000E, 0x000E, 0x000E, 0x000E, 0x000F, 0x000F, 0x000F, 0x000F, }, {"NtAllocateReserveObject", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0010, }, {"NtAllocateUserPhysicalPages", -1, -1, -1, -1, 0x000E, 0x000E, 0x000E, 0x000E, 0x000E, 0x000F, 0x000F, 0x000F, 0x000F, 0x0010, 0x0010, 0x0010, 0x0011, }, {"NtAllocateUuids", 0x0009, 0x0009, 0x0009, 0x0009, 0x000F, 0x000F, 0x000F, 0x000F, 0x000F, 0x0010, 0x0010, 0x0010, 0x0010, 0x0011, 0x0011, 0x0011, 0x0012, }, {"NtAllocateVirtualMemory", 0x000A, 0x000A, 0x000A, 0x000A, 0x0010, 0x0010, 0x0010, 0x0010, 0x0010, 0x0011, 0x0011, 0x0011, 0x0011, 0x0012, 0x0012, 0x0012, 0x0013, }, {"NtAlpcAcceptConnectPort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0013, 0x0014, }, {"NtAlpcCancelMessage", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0014, 0x0015, }, {"NtAlpcConnectPort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0015, 0x0016, }, {"NtAlpcCreatePort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0016, 0x0017, }, {"NtAlpcCreatePortSection", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0017, 0x0018, }, {"NtAlpcCreateResourceReserve", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0018, 0x0019, }, {"NtAlpcCreateSectionView", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0019, 0x001A, }, {"NtAlpcCreateSecurityContext", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001A, 0x001B, }, {"NtAlpcDeletePortSection", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001B, 0x001C, }, {"NtAlpcDeleteResourceReserve", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001C, 0x001D, }, {"NtAlpcDeleteSectionView", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001D, 0x001E, }, {"NtAlpcDeleteSecurityContext", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001E, 0x001F, }, {"NtAlpcDisconnectPort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001F, 0x0020, }, {"NtAlpcImpersonateClientOfPort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0020, 0x0021, }, {"NtAlpcOpenSenderProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0021, 0x0022, }, {"NtAlpcOpenSenderThread", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0022, 0x0023, }, {"NtAlpcQueryInformation", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0023, 0x0024, }, {"NtAlpcQueryInformationMessage", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0024, 0x0025, }, {"NtAlpcRevokeSecurityContext", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0026, }, {"NtAlpcSendWaitReceivePort", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0025, 0x0027, }, {"NtAlpcSetInformation", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0026, 0x0028, }, {"NtApphelpCacheControl", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0013, 0x0013, 0x0027, 0x0029, }, {"NtAreMappedFilesTheSame", -1, -1, -1, -1, 0x0011, 0x0011, 0x0011, 0x0011, 0x0011, 0x0012, 0x0012, 0x0012, 0x0012, 0x0014, 0x0014, 0x0028, 0x002A, }, {"NtAssignProcessToJobObject", -1, -1, -1, -1, 0x0012, 0x0012, 0x0012, 0x0012, 0x0012, 0x0013, 0x0013, 0x0013, 0x0013, 0x0015, 0x0015, 0x0029, 0x002B, }, {"NtCallbackReturn", 0x000B, 0x000B, 0x000B, 0x000B, 0x0013, 0x0013, 0x0013, 0x0013, 0x0013, 0x0014, 0x0014, 0x0014, 0x0014, 0x0016, 0x0016, 0x002A, 0x002C, }, {"NtCancelDeviceWakeupRequest", -1, -1, -1, -1, 0x0016, 0x0016, 0x0016, 0x0016, 0x0016, 0x0015, 0x0015, 0x0015, -1, 0x0017, 0x0017, 0x002B, -1, }, {"NtCancelIoFile", 0x000C, 0x000C, 0x000C, 0x000C, 0x0014, 0x0014, 0x0014, 0x0014, 0x0014, 0x0016, 0x0016, 0x0016, 0x0016, 0x0018, 0x0018, 0x002C, 0x002D, }, {"NtCancelIoFileEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0172, 0x002E, }, {"NtCancelSynchronousIoFile", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0173, 0x002F, }, {"NtCancelTimer", 0x000D, 0x000D, 0x000D, 0x000D, 0x0015, 0x0015, 0x0015, 0x0015, 0x0015, 0x0017, 0x0017, 0x0017, 0x0017, 0x0019, 0x0019, 0x002D, 0x0030, }, {"NtClearAllSavepointsTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011B, -1, }, {"NtClearEvent", 0x000E, 0x000E, 0x000E, 0x000E, 0x0017, 0x0017, 0x0017, 0x0017, 0x0017, 0x0018, 0x0018, 0x0018, 0x0018, 0x001A, 0x001A, 0x002E, 0x0031, }, {"NtClearMUILicenseInfo", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0187, -1, }, {"NtClearSavepointTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011A, -1, }, {"NtClose", 0x000F, 0x000F, 0x000F, 0x000F, 0x0018, 0x0018, 0x0018, 0x0018, 0x0018, 0x0019, 0x0019, 0x0019, 0x0019, 0x001B, 0x001B, 0x002F, 0x0032, }, {"NtCloseObjectAuditAlarm", 0x0010, 0x0010, 0x0010, 0x0010, 0x0019, 0x0019, 0x0019, 0x0019, 0x0019, 0x001A, 0x001A, 0x001A, 0x001A, 0x001C, 0x001C, 0x0030, 0x0033, }, {"NtCommitComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005D, 0x0034, }, {"NtCommitEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0055, 0x0035, }, {"NtCommitTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0059, 0x0036, }, {"NtCompactKeys", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001B, 0x001B, 0x001B, 0x001B, 0x001D, 0x001D, 0x0031, 0x0037, }, {"NtCompareTokens", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001C, 0x001C, 0x001C, 0x001C, 0x001E, 0x001E, 0x0032, 0x0038, }, {"NtCompleteConnectPort", 0x0011, 0x0011, 0x0011, 0x0011, 0x001A, 0x001A, 0x001A, 0x001A, 0x001A, 0x001D, 0x001D, 0x001D, 0x001D, 0x001F, 0x001F, 0x0033, 0x0039, }, {"NtCompressKey", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x001E, 0x001E, 0x001E, 0x001E, 0x0020, 0x0020, 0x0034, 0x003A, }, {"NtConnectPort", 0x0012, 0x0012, 0x0012, 0x0012, 0x001B, 0x001B, 0x001B, 0x001B, 0x001B, 0x001F, 0x001F, 0x001F, 0x001F, 0x0021, 0x0021, 0x0035, 0x003B, }, {"NtContinue", 0x0013, 0x0013, 0x0013, 0x0013, 0x001C, 0x001C, 0x001C, 0x001C, 0x001C, 0x0020, 0x0020, 0x0020, 0x0020, 0x0022, 0x0022, 0x0036, 0x003C, }, {"NtCreateChannel", 0x00CD, 0x00CC, 0x00CC, 0x00CC, 0x00F1, 0x00F1, 0x00F1, 0x00F1, 0x00F1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtCreateDebugObject", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0021, 0x0021, 0x0021, 0x0021, 0x0023, 0x0023, 0x0037, 0x003D, }, {"NtCreateDirectoryObject", 0x0014, 0x0014, 0x0014, 0x0014, 0x001D, 0x001D, 0x001D, 0x001D, 0x001D, 0x0022, 0x0022, 0x0022, 0x0022, 0x0024, 0x0024, 0x0038, 0x003E, }, {"NtCreateEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006D, 0x003F, }, {"NtCreateEvent", 0x0015, 0x0015, 0x0015, 0x0015, 0x001E, 0x001E, 0x001E, 0x001E, 0x001E, 0x0023, 0x0023, 0x0023, 0x0023, 0x0025, 0x0025, 0x0039, 0x0040, }, {"NtCreateEventPair", 0x0016, 0x0016, 0x0016, 0x0016, 0x001F, 0x001F, 0x001F, 0x001F, 0x001F, 0x0024, 0x0024, 0x0024, 0x0024, 0x0026, 0x0026, 0x003A, 0x0041, }, {"NtCreateFile", 0x0017, 0x0017, 0x0017, 0x0017, 0x0020, 0x0020, 0x0020, 0x0020, 0x0020, 0x0025, 0x0025, 0x0025, 0x0025, 0x0027, 0x0027, 0x003B, 0x0042, }, {"NtCreateIoCompletion", 0x0018, 0x0018, 0x0018, 0x0018, 0x0021, 0x0021, 0x0021, 0x0021, 0x0021, 0x0026, 0x0026, 0x0026, 0x0026, 0x0028, 0x0028, 0x003C, 0x0043, }, {"NtCreateJobObject", -1, -1, -1, -1, 0x0022, 0x0022, 0x0022, 0x0022, 0x0022, 0x0027, 0x0027, 0x0027, 0x0027, 0x0029, 0x0029, 0x003D, 0x0044, }, {"NtCreateJobSet", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0028, 0x0028, 0x0028, 0x0028, 0x002A, 0x002A, 0x003E, 0x0045, }, {"NtCreateKey", 0x0019, 0x0019, 0x0019, 0x0019, 0x0023, 0x0023, 0x0023, 0x0023, 0x0023, 0x0029, 0x0029, 0x0029, 0x0029, 0x002B, 0x002B, 0x003F, 0x0046, }, {"NtCreateKeyTransacted", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0048, }, {"NtCreateKeyedEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0117, 0x0117, 0x0117, 0x0117, 0x0121, 0x0121, 0x0169, 0x0047, }, {"NtCreateMailslotFile", 0x001A, 0x001A, 0x001A, 0x001A, 0x0024, 0x0024, 0x0024, 0x0024, 0x0024, 0x002A, 0x002A, 0x002A, 0x002A, 0x002C, 0x002C, 0x0040, 0x0049, }, {"NtCreateMutant", 0x001B, 0x001B, 0x001B, 0x001B, 0x0025, 0x0025, 0x0025, 0x0025, 0x0025, 0x002B, 0x002B, 0x002B, 0x002B, 0x002D, 0x002D, 0x0041, 0x004A, }, {"NtCreateNamedPipeFile", 0x001C, 0x001C, 0x001C, 0x001C, 0x0026, 0x0026, 0x0026, 0x0026, 0x0026, 0x002C, 0x002C, 0x002C, 0x002C, 0x002E, 0x002E, 0x0042, 0x004B, }, {"NtCreatePagingFile", 0x001D, 0x001D, 0x001D, 0x001D, 0x0027, 0x0027, 0x0027, 0x0027, 0x0027, 0x002D, 0x002D, 0x002D, 0x002D, 0x002F, 0x002F, 0x0044, 0x004C, }, {"NtCreatePort", 0x001E, 0x001C, 0x001E, 0x001E, 0x0028, 0x0028, 0x0028, 0x0028, 0x0028, 0x002E, 0x002E, 0x002E, 0x002E, 0x0030, 0x0030, 0x0045, 0x004D, }, {"NtCreatePrivateNamespace", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0043, 0x004E, }, {"NtCreateProcess", 0x001F, 0x001F, 0x001F, 0x001F, 0x0029, 0x0029, 0x0029, 0x0029, 0x0029, 0x002F, 0x002F, 0x002F, 0x002F, 0x0031, 0x0031, 0x0046, 0x004F, }, {"NtCreateProcessEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0030, 0x0030, 0x0030, 0x0030, 0x0032, 0x0032, 0x0047, 0x0050, }, {"NtCreateProfile", 0x0020, 0x0020, 0x0020, 0x0020, 0x002A, 0x002A, 0x002A, 0x002A, 0x002A, 0x0031, 0x0031, 0x0031, 0x0031, 0x0033, 0x0033, 0x0048, 0x0051, }, {"NtCreateProfileEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0052, }, {"NtCreateResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0069, 0x0053, }, {"NtCreateSection", 0x0021, 0x0021, 0x0021, 0x0021, 0x002B, 0x002B, 0x002B, 0x002B, 0x002B, 0x0032, 0x0032, 0x0032, 0x0032, 0x0034, 0x0034, 0x0049, 0x0054, }, {"NtCreateSemaphore", 0x0022, 0x0022, 0x0022, 0x0022, 0x002C, 0x002C, 0x002C, 0x002C, 0x002C, 0x0033, 0x0033, 0x0033, 0x0033, 0x0035, 0x0035, 0x004A, 0x0055, }, {"NtCreateSymbolicLinkObject", 0x0023, 0x0023, 0x0023, 0x0023, 0x002D, 0x002D, 0x002D, 0x002D, 0x002D, 0x0034, 0x0034, 0x0034, 0x0034, 0x0036, 0x0036, 0x004B, 0x0056, }, {"NtCreateThread", 0x0024, 0x0024, 0x0024, 0x0024, 0x002E, 0x002E, 0x002E, 0x002E, 0x002E, 0x0035, 0x0035, 0x0035, 0x0035, 0x0037, 0x0037, 0x004C, 0x0057, }, {"NtCreateThreadEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0181, 0x0058, }, {"NtCreateTimer", 0x0025, 0x0025, 0x0025, 0x0025, 0x002F, 0x002F, 0x002F, 0x002F, 0x002F, 0x0036, 0x0036, 0x0036, 0x0036, 0x0038, 0x0038, 0x004D, 0x0059, }, {"NtCreateToken", 0x0026, 0x0026, 0x0026, 0x0026, 0x0030, 0x0030, 0x0030, 0x0030, 0x0030, 0x0037, 0x0037, 0x0037, 0x0037, 0x0039, 0x0039, 0x004E, 0x005A, }, {"NtCreateTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x004F, 0x005B, }, {"NtCreateTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0062, 0x005C, }, {"NtCreateUserProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005D, }, {"NtCreateWaitablePort", -1, -1, -1, -1, 0x0031, 0x0031, 0x0031, 0x0031, 0x0031, 0x0038, 0x0038, 0x0038, 0x0038, 0x003A, 0x003A, 0x0072, 0x005E, }, {"NtCreateWinStation", -1, 0x00D3, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtCreateWorkerFactory", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017A, 0x005F, }, {"NtDebugActiveProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0039, 0x0039, 0x0039, 0x0039, 0x003B, 0x003B, 0x0073, 0x0060, }, {"NtDebugContinue", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x003A, 0x003A, 0x003A, 0x003A, 0x003C, 0x003C, 0x0074, 0x0061, }, {"NtDelayExecution", 0x0027, 0x0027, 0x0027, 0x0027, 0x0032, 0x0032, 0x0032, 0x0032, 0x0032, 0x003B, 0x003B, 0x003B, 0x003B, 0x003D, 0x003D, 0x0075, 0x0062, }, {"NtDeleteAtom", 0x0028, 0x0028, 0x0028, 0x0028, 0x0033, 0x0033, 0x0033, 0x0033, 0x0033, 0x003C, 0x003C, 0x003C, 0x003C, 0x003E, 0x003E, 0x0076, 0x0063, }, {"NtDeleteBootEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x003D, 0x003D, 0x003D, -1, 0x003F, 0x003F, 0x0077, 0x0064, }, {"NtDeleteDriverEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0040, 0x0040, 0x0078, 0x0065, }, {"NtDeleteFile", 0x0029, 0x0029, 0x0029, 0x0029, 0x0034, 0x0034, 0x0034, 0x0034, 0x0034, 0x003E, 0x003E, 0x003E, 0x003E, 0x0041, 0x0041, 0x0079, 0x0066, }, {"NtDeleteKey", 0x002A, 0x002A, 0x002A, 0x002A, 0x0035, 0x0035, 0x0035, 0x0035, 0x0035, 0x003F, 0x003F, 0x003F, 0x003F, 0x0042, 0x0042, 0x007A, 0x0067, }, {"NtDeleteObjectAuditAlarm", 0x002B, 0x002B, 0x002B, 0x002B, 0x0036, 0x0036, 0x0036, 0x0036, 0x0036, 0x0040, 0x0040, 0x0040, 0x0040, 0x0043, 0x0043, 0x007C, 0x0068, }, {"NtDeletePrivateNamespace", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x007B, 0x0069, }, {"NtDeleteValueKey", 0x002C, 0x002C, 0x002C, 0x002C, 0x0037, 0x0037, 0x0037, 0x0037, 0x0037, 0x0041, 0x0041, 0x0041, 0x0041, 0x0044, 0x0044, 0x007D, 0x006A, }, {"NtDeviceIoControlFile", 0x002D, 0x002D, 0x002D, 0x002D, 0x0038, 0x0038, 0x0038, 0x0038, 0x0038, 0x0042, 0x0042, 0x0042, 0x0042, 0x0045, 0x0045, 0x007E, 0x006B, }, {"NtDisableLastKnownGood", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006C, }, {"NtDisplayString", 0x002E, 0x002E, 0x002E, 0x002E, 0x0039, 0x0039, 0x0039, 0x0039, 0x0039, 0x0043, 0x0043, 0x0043, 0x0043, 0x0046, 0x0046, 0x007F, 0x006D, }, {"NtDrawText", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006E, }, {"NtDuplicateObject", 0x002F, 0x002F, 0x002F, 0x002F, 0x003A, 0x003A, 0x003A, 0x003A, 0x003A, 0x0044, 0x0044, 0x0044, 0x0044, 0x0047, 0x0047, 0x0080, 0x006F, }, {"NtDuplicateToken", 0x0030, 0x0030, 0x0030, 0x0030, 0x003B, 0x003B, 0x003B, 0x003B, 0x003B, 0x0045, 0x0045, 0x0045, 0x0045, 0x0048, 0x0048, 0x0081, 0x0070, }, {"NtEnableLastKnownGood", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0071, }, {"NtEnumerateBootEntries", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0046, 0x0046, 0x0046, 0x0009, 0x0049, 0x0049, 0x0082, 0x0072, }, {"NtEnumerateDriverEntries", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x004A, 0x004A, 0x0083, 0x0073, }, {"NtEnumerateKey", 0x0031, 0x0031, 0x0031, 0x0031, 0x003C, 0x003C, 0x003C, 0x003C, 0x003C, 0x0047, 0x0047, 0x0047, 0x0047, 0x004B, 0x004B, 0x0084, 0x0074, }, {"NtEnumerateSystemEnvironmentValuesEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0048, 0x0048, 0x0048, 0x0048, 0x004C, 0x004C, 0x0085, 0x0075, }, {"NtEnumerateTransactionObject", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0076, }, {"NtEnumerateValueKey", 0x0032, 0x0032, 0x0032, 0x0032, 0x003D, 0x003D, 0x003D, 0x003D, 0x003D, 0x0049, 0x0049, 0x0049, 0x0049, 0x004D, 0x004D, 0x0086, 0x0077, }, {"NtExtendSection", 0x0033, 0x0033, 0x0033, 0x0033, 0x003E, 0x003E, 0x003E, 0x003E, 0x003E, 0x004A, 0x004A, 0x004A, 0x004A, 0x004E, 0x004E, 0x0087, 0x0078, }, {"NtFilterToken", -1, -1, -1, -1, 0x003F, 0x003F, 0x003F, 0x003F, 0x003F, 0x004B, 0x004B, 0x004B, 0x004B, 0x004F, 0x004F, 0x0088, 0x0079, }, {"NtFindAtom", 0x0034, 0x0034, 0x0034, 0x0034, 0x0040, 0x0040, 0x0040, 0x0040, 0x0040, 0x004C, 0x004C, 0x004C, 0x004C, 0x0050, 0x0050, 0x0089, 0x007A, }, {"NtFlushBuffersFile", 0x0035, 0x0035, 0x0035, 0x0035, 0x0041, 0x0041, 0x0041, 0x0041, 0x0041, 0x004D, 0x004D, 0x004D, 0x004D, 0x0051, 0x0051, 0x008A, 0x007B, }, {"NtFlushInstallUILanguage", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0189, 0x007C, }, {"NtFlushInstructionCache", 0x0036, 0x0036, 0x0036, 0x0036, 0x0042, 0x0042, 0x0042, 0x0042, 0x0042, 0x004E, 0x004E, 0x004E, 0x004E, 0x0052, 0x0052, 0x008B, 0x007D, }, {"NtFlushKey", 0x0037, 0x0037, 0x0037, 0x0037, 0x0043, 0x0043, 0x0043, 0x0043, 0x0043, 0x004F, 0x004F, 0x004F, 0x004F, 0x0053, 0x0053, 0x008C, 0x007E, }, {"NtFlushProcessWriteBuffers", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x008D, 0x007F, }, {"NtFlushVirtualMemory", 0x0038, 0x0038, 0x0038, 0x0038, 0x0044, 0x0044, 0x0044, 0x0044, 0x0044, 0x0050, 0x0050, 0x0050, 0x0050, 0x0054, 0x0054, 0x008E, 0x0080, }, {"NtFlushWriteBuffer", 0x0039, 0x0039, 0x0039, 0x0039, 0x0045, 0x0045, 0x0045, 0x0045, 0x0045, 0x0051, 0x0051, 0x0051, 0x0051, 0x0055, 0x0055, 0x008F, 0x0081, }, {"NtFreeUserPhysicalPages", -1, -1, -1, -1, 0x0046, 0x0046, 0x0046, 0x0046, 0x0046, 0x0052, 0x0052, 0x0052, 0x0052, 0x0056, 0x0056, 0x0090, 0x0082, }, {"NtFreeVirtualMemory", 0x003A, 0x003A, 0x003A, 0x003A, 0x0047, 0x0047, 0x0047, 0x0047, 0x0047, 0x0053, 0x0053, 0x0053, 0x0053, 0x0057, 0x0057, 0x0091, 0x0083, }, {"NtFreezeRegistry", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0092, 0x0084, }, {"NtFreezeTransactions", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0093, 0x0085, }, {"NtFsControlFile", 0x003B, 0x003B, 0x003B, 0x003B, 0x0048, 0x0048, 0x0048, 0x0048, 0x0048, 0x0054, 0x0054, 0x0054, 0x0054, 0x0058, 0x0058, 0x0094, 0x0086, }, {"NtGetContextThread", 0x003C, 0x003C, 0x003C, 0x003C, 0x0049, 0x0049, 0x0049, 0x0049, 0x0049, 0x0055, 0x0055, 0x0055, 0x0055, 0x0059, 0x0059, 0x0095, 0x0087, }, {"NtGetCurrentProcessorNumber", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0126, 0x0126, 0x016E, 0x0088, }, {"NtGetDevicePowerState", -1, -1, -1, -1, 0x004A, 0x004A, 0x004A, 0x004A, 0x004A, 0x0056, 0x0056, 0x0056, 0x0056, 0x005A, 0x005A, 0x0096, 0x0089, }, {"NtGetMUILicenseInfo", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0186, -1, }, {"NtGetMUIRegistryInfo", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x018A, 0x008A, }, {"NtGetNextProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0170, 0x008B, }, {"NtGetNextThread", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0171, 0x008C, }, {"NtGetNlsSectionPtr", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0097, 0x008D, }, {"NtGetNotificationResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006B, 0x008E, }, {"NtGetPlugPlayEvent", 0x003D, 0x003D, 0x003D, 0x003D, 0x004B, 0x004B, 0x004B, 0x004B, 0x004B, 0x0057, 0x0057, 0x0057, 0x0057, 0x005B, 0x005B, 0x0098, 0x008F, }, {"NtGetTickCount", 0x003E, 0x003E, 0x003E, 0x003E, 0x004C, 0x004C, 0x004C, 0x004C, 0x004C, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtGetWriteWatch", -1, -1, -1, -1, 0x004D, 0x004D, 0x004D, 0x004D, 0x004D, 0x0058, 0x0058, 0x0058, 0x0058, 0x005C, 0x005C, 0x0099, 0x0090, }, {"NtImpersonateAnonymousToken", -1, -1, -1, -1, 0x004E, 0x004E, 0x004E, 0x004E, 0x004E, 0x0059, 0x0059, 0x0059, 0x0059, 0x005D, 0x005D, 0x009A, 0x0091, }, {"NtImpersonateClientOfPort", 0x003F, 0x003F, 0x003F, 0x003F, 0x004F, 0x004F, 0x004F, 0x004F, 0x004F, 0x005A, 0x005A, 0x005A, 0x005A, 0x005E, 0x005E, 0x009B, 0x0092, }, {"NtImpersonateThread", 0x0040, 0x0040, 0x0040, 0x0040, 0x0050, 0x0050, 0x0050, 0x0050, 0x0050, 0x005B, 0x005B, 0x005B, 0x005B, 0x005F, 0x005F, 0x009C, 0x0093, }, {"NtInitializeNlsFiles", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x009D, 0x0094, }, {"NtInitializeRegistry", 0x0041, 0x0041, 0x0041, 0x0041, 0x0051, 0x0051, 0x0051, 0x0051, 0x0051, 0x005C, 0x005C, 0x005C, 0x005C, 0x0060, 0x0060, 0x009E, 0x0095, }, {"NtInitiatePowerAction", -1, -1, -1, -1, 0x0052, 0x0052, 0x0052, 0x0052, 0x0052, 0x005D, 0x005D, 0x005D, 0x005D, 0x0061, 0x0061, 0x009F, 0x0096, }, {"NtIsProcessInJob", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005E, 0x005E, 0x005E, 0x005E, 0x0062, 0x0062, 0x00A0, 0x0097, }, {"NtIsSystemResumeAutomatic", -1, -1, -1, -1, 0x0053, 0x0053, 0x0053, 0x0053, 0x0053, 0x005F, 0x005F, 0x005F, 0x005F, 0x0063, 0x0063, 0x00A1, 0x0098, }, {"NtIsUILanguageComitted", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0188, 0x0099, }, {"NtListTransactions", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0185, -1, }, {"NtListenChannel", 0x00CE, 0x00CD, 0x00CD, 0x00CD, 0x00F2, 0x00F2, 0x00F2, 0x00F2, 0x00F2, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtListenPort", 0x0042, 0x0042, 0x0042, 0x0042, 0x0054, 0x0054, 0x0054, 0x0054, 0x0054, 0x0060, 0x0060, 0x0060, 0x0060, 0x0064, 0x0064, 0x00A2, 0x009A, }, {"NtLoadDriver", 0x0043, 0x0043, 0x0043, 0x0043, 0x0055, 0x0055, 0x0055, 0x0055, 0x0055, 0x0061, 0x0061, 0x0061, 0x0061, 0x0065, 0x0065, 0x00A3, 0x009B, }, {"NtLoadKey", 0x0044, 0x0044, 0x0044, 0x0044, 0x0056, 0x0056, 0x0056, 0x0056, 0x0056, 0x0062, 0x0062, 0x0062, 0x0062, 0x0066, 0x0066, 0x00A4, 0x009C, }, {"NtLoadKey2", 0x0045, 0x0045, 0x0045, 0x0045, 0x0057, 0x0057, 0x0057, 0x0057, 0x0057, 0x0063, 0x0063, 0x0063, 0x0063, 0x0067, 0x0067, 0x00A5, 0x009D, }, {"NtLoadKeyEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0068, 0x0068, 0x00A6, 0x009E, }, {"NtLockFile", 0x0046, 0x0046, 0x0046, 0x0046, 0x0058, 0x0058, 0x0058, 0x0058, 0x0058, 0x0064, 0x0064, 0x0064, 0x0064, 0x0069, 0x0069, 0x00A7, 0x009F, }, {"NtLockProductActivationKeys", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0065, 0x0065, 0x0065, 0x0065, 0x006A, 0x006A, 0x00A8, 0x00A0, }, {"NtLockRegistryKey", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0066, 0x0066, 0x0066, 0x0066, 0x006B, 0x006B, 0x00A9, 0x00A1, }, {"NtLockVirtualMemory", 0x0047, 0x0047, 0x0047, 0x0047, 0x0059, 0x0059, 0x0059, 0x0059, 0x0059, 0x0067, 0x0067, 0x0067, 0x0067, 0x006C, 0x006C, 0x00AA, 0x00A2, }, {"NtMakePermanentObject", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0068, 0x0068, 0x0068, 0x0068, 0x006D, 0x006D, 0x00AB, 0x00A3, }, {"NtMakeTemporaryObject", 0x0048, 0x0048, 0x0048, 0x0048, 0x005A, 0x005A, 0x005A, 0x005A, 0x005A, 0x0069, 0x0069, 0x0069, 0x0069, 0x006E, 0x006E, 0x00AC, 0x00A4, }, {"NtMapCMFModule", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0184, 0x00A5, }, {"NtMapUserPhysicalPages", -1, -1, -1, -1, 0x005B, 0x005B, 0x005B, 0x005B, 0x005B, 0x006A, 0x006A, 0x006A, 0x006A, 0x006F, 0x006F, 0x00AD, 0x00A6, }, {"NtMapUserPhysicalPagesScatter", -1, -1, -1, -1, 0x005C, 0x005C, 0x005C, 0x005C, 0x005C, 0x006B, 0x006B, 0x006B, 0x006B, 0x0070, 0x0070, 0x00AE, 0x00A7, }, {"NtMapViewOfSection", 0x0049, 0x0049, 0x0049, 0x0049, 0x005D, 0x005D, 0x005D, 0x005D, 0x005D, 0x006C, 0x006C, 0x006C, 0x006C, 0x0071, 0x0071, 0x00AF, 0x00A8, }, {"NtMarshallTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0177, -1, }, {"NtModifyBootEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006D, 0x006D, 0x006D, 0x0015, 0x0072, 0x0072, 0x00B0, 0x00A9, }, {"NtModifyDriverEntry", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0073, 0x0073, 0x00B1, 0x00AA, }, {"NtNotifyChangeDirectoryFile", 0x004A, 0x004A, 0x004A, 0x004A, 0x005E, 0x005E, 0x005E, 0x005E, 0x005E, 0x006E, 0x006E, 0x006E, 0x006E, 0x0074, 0x0074, 0x00B2, 0x00AB, }, {"NtNotifyChangeKey", 0x004B, 0x004B, 0x004B, 0x004B, 0x005F, 0x005F, 0x005F, 0x005F, 0x005F, 0x006F, 0x006F, 0x006F, 0x006F, 0x0075, 0x0075, 0x00B3, 0x00AC, }, {"NtNotifyChangeMultipleKeys", -1, -1, -1, -1, 0x0060, 0x0060, 0x0060, 0x0060, 0x0060, 0x0070, 0x0070, 0x0070, 0x0070, 0x0076, 0x0076, 0x00B4, 0x00AD, }, {"NtNotifyChangeSession", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00AE, }, {"NtOpenChannel", 0x00CF, 0x00CE, 0x00CE, 0x00CE, 0x00F3, 0x00F3, 0x00F3, 0x00F3, 0x00F3, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtOpenDirectoryObject", 0x004C, 0x004C, 0x004C, 0x004C, 0x0061, 0x0061, 0x0061, 0x0061, 0x0061, 0x0071, 0x0071, 0x0071, 0x0071, 0x0077, 0x0077, 0x00B5, 0x00AF, }, {"NtOpenEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006E, 0x00B0, }, {"NtOpenEvent", 0x004D, 0x004D, 0x004D, 0x004D, 0x0062, 0x0062, 0x0062, 0x0062, 0x0062, 0x0072, 0x0072, 0x0072, 0x0072, 0x0078, 0x0078, 0x00B6, 0x00B1, }, {"NtOpenEventPair", 0x004E, 0x004E, 0x004E, 0x004E, 0x0063, 0x0063, 0x0063, 0x0063, 0x0063, 0x0073, 0x0073, 0x0073, 0x0073, 0x0079, 0x0079, 0x00B7, 0x00B2, }, {"NtOpenFile", 0x004F, 0x004F, 0x004F, 0x004F, 0x0064, 0x0064, 0x0064, 0x0064, 0x0064, 0x0074, 0x0074, 0x0074, 0x0074, 0x007A, 0x007A, 0x00B8, 0x00B3, }, {"NtOpenIoCompletion", 0x0050, 0x0050, 0x0050, 0x0050, 0x0065, 0x0065, 0x0065, 0x0065, 0x0065, 0x0075, 0x0075, 0x0075, 0x0075, 0x007B, 0x007B, 0x00B9, 0x00B4, }, {"NtOpenJobObject", -1, -1, -1, -1, 0x0066, 0x0066, 0x0066, 0x0066, 0x0066, 0x0076, 0x0076, 0x0076, 0x0076, 0x007C, 0x007C, 0x00BA, 0x00B5, }, {"NtOpenKey", 0x0051, 0x0051, 0x0051, 0x0051, 0x0067, 0x0067, 0x0067, 0x0067, 0x0067, 0x0077, 0x0077, 0x0077, 0x0077, 0x007D, 0x007D, 0x00BB, 0x00B6, }, {"NtOpenKeyEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00B7, }, {"NtOpenKeyTransacted", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00B9, }, {"NtOpenKeyTransactedEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00BA, }, {"NtOpenKeyedEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0118, 0x0118, 0x0118, 0x0118, 0x0122, 0x0122, 0x016A, 0x00B8, }, {"NtOpenMutant", 0x0052, 0x0052, 0x0052, 0x0052, 0x0068, 0x0068, 0x0068, 0x0068, 0x0068, 0x0078, 0x0078, 0x0078, 0x0078, 0x007E, 0x007E, 0x00BC, 0x00BB, }, {"NtOpenObjectAuditAlarm", 0x0053, 0x0053, 0x0053, 0x0053, 0x0069, 0x0069, 0x0069, 0x0069, 0x0069, 0x0079, 0x0079, 0x0079, 0x0079, 0x007F, 0x007F, 0x00BE, 0x00BC, }, {"NtOpenPrivateNamespace", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00BD, 0x00BD, }, {"NtOpenProcess", 0x0054, 0x0054, 0x0054, 0x0054, 0x006A, 0x006A, 0x006A, 0x006A, 0x006A, 0x007A, 0x007A, 0x007A, 0x007A, 0x0080, 0x0080, 0x00BF, 0x00BE, }, {"NtOpenProcessToken", 0x0055, 0x0055, 0x0055, 0x0055, 0x006B, 0x006B, 0x006B, 0x006B, 0x006B, 0x007B, 0x007B, 0x007B, 0x007B, 0x0081, 0x0081, 0x00C0, 0x00BF, }, {"NtOpenProcessTokenEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x007C, 0x007C, 0x007C, 0x007C, 0x0082, 0x0082, 0x00C1, 0x00C0, }, {"NtOpenResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006A, 0x00C1, }, {"NtOpenSection", 0x0056, 0x0056, 0x0056, 0x0056, 0x006C, 0x006C, 0x006C, 0x006C, 0x006C, 0x007D, 0x007D, 0x007D, 0x007D, 0x0083, 0x0083, 0x00C2, 0x00C2, }, {"NtOpenSemaphore", 0x0057, 0x0057, 0x0057, 0x0057, 0x006D, 0x006D, 0x006D, 0x006D, 0x006D, 0x007E, 0x007E, 0x007E, 0x007E, 0x0084, 0x0084, 0x00C3, 0x00C3, }, {"NtOpenSession", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00C4, 0x00C4, }, {"NtOpenSymbolicLinkObject", 0x0058, 0x0058, 0x0058, 0x0058, 0x006E, 0x006E, 0x006E, 0x006E, 0x006E, 0x007F, 0x007F, 0x007F, 0x007F, 0x0085, 0x0085, 0x00C5, 0x00C5, }, {"NtOpenThread", 0x0059, 0x0059, 0x0059, 0x0059, 0x006F, 0x006F, 0x006F, 0x006F, 0x006F, 0x0080, 0x0080, 0x0080, 0x0080, 0x0086, 0x0086, 0x00C6, 0x00C6, }, {"NtOpenThreadToken", 0x005A, 0x005A, 0x005A, 0x005A, 0x0070, 0x0070, 0x0070, 0x0070, 0x0070, 0x0081, 0x0081, 0x0081, 0x0081, 0x0087, 0x0087, 0x00C7, 0x00C7, }, {"NtOpenThreadTokenEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0082, 0x0082, 0x0082, 0x0082, 0x0088, 0x0088, 0x00C8, 0x00C8, }, {"NtOpenTimer", 0x005B, 0x005B, 0x005B, 0x005B, 0x0071, 0x0071, 0x0071, 0x0071, 0x0071, 0x0083, 0x0083, 0x0083, 0x0083, 0x0089, 0x0089, 0x00C9, 0x00C9, }, {"NtOpenTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0050, 0x00CA, }, {"NtOpenTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0063, 0x00CB, }, {"NtOpenWinStation", -1, 0x00D4, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtPlugPlayControl", 0x005C, 0x005C, 0x005C, 0x005C, 0x0072, 0x0072, 0x0072, 0x0072, 0x0072, 0x0084, 0x0084, 0x0084, 0x0084, 0x008A, 0x008A, 0x00CA, 0x00CC, }, {"NtPowerInformation", -1, -1, -1, -1, 0x0073, 0x0073, 0x0073, 0x0073, 0x0073, 0x0085, 0x0085, 0x0085, 0x0085, 0x008B, 0x008B, 0x00CB, 0x00CD, }, {"NtPrePrepareComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005B, 0x00D0, }, {"NtPrePrepareEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0053, 0x00D1, }, {"NtPrepareComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005C, 0x00CE, }, {"NtPrepareEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0054, 0x00CF, }, {"NtPrivilegeCheck", 0x005D, 0x005D, 0x005D, 0x005D, 0x0074, 0x0074, 0x0074, 0x0074, 0x0074, 0x0086, 0x0086, 0x0086, 0x0086, 0x008C, 0x008C, 0x00CC, 0x00D2, }, {"NtPrivilegeObjectAuditAlarm", 0x005F, 0x005F, 0x005F, 0x005F, 0x0076, 0x0076, 0x0076, 0x0076, 0x0076, 0x0087, 0x0087, 0x0087, 0x0087, 0x008D, 0x008D, 0x00CD, 0x00D4, }, {"NtPrivilegedServiceAuditAlarm", 0x005E, 0x005E, 0x005E, 0x005E, 0x0075, 0x0075, 0x0075, 0x0075, 0x0075, 0x0088, 0x0088, 0x0088, 0x0088, 0x008E, 0x008E, 0x00CE, 0x00D3, }, {"NtPropagationComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0178, 0x00D5, }, {"NtPropagationFailed", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0179, 0x00D6, }, {"NtProtectVirtualMemory", 0x0060, 0x0060, 0x0060, 0x0060, 0x0077, 0x0077, 0x0077, 0x0077, 0x0077, 0x0089, 0x0089, 0x0089, 0x0089, 0x008F, 0x008F, 0x00CF, 0x00D7, }, {"NtPullTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0176, -1, }, {"NtPulseEvent", 0x0061, 0x0061, 0x0061, 0x0061, 0x0078, 0x0078, 0x0078, 0x0078, 0x0078, 0x008A, 0x008A, 0x008A, 0x008A, 0x0090, 0x0090, 0x00D0, 0x00D8, }, {"NtQueryAttributesFile", 0x0063, 0x0063, 0x0063, 0x0063, 0x007A, 0x007A, 0x007A, 0x007A, 0x007A, 0x008B, 0x008B, 0x008B, 0x008B, 0x0091, 0x0091, 0x00D1, 0x00D9, }, {"NtQueryBootEntryOrder", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x008C, 0x008C, 0x008C, -1, 0x0092, 0x0092, 0x00D2, 0x00DA, }, {"NtQueryBootOptions", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x008D, 0x008D, 0x008D, -1, 0x0093, 0x0093, 0x00D3, 0x00DB, }, {"NtQueryDebugFilterState", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x008E, 0x008E, 0x008E, 0x008E, 0x0094, 0x0094, 0x00D4, 0x00DC, }, {"NtQueryDefaultLocale", 0x0064, 0x0064, 0x0064, 0x0064, 0x007B, 0x007B, 0x007B, 0x007B, 0x007B, 0x008F, 0x008F, 0x008F, 0x008F, 0x0095, 0x0095, 0x00D5, 0x00DD, }, {"NtQueryDefaultUILanguage", -1, -1, -1, -1, 0x007C, 0x007C, 0x007C, 0x007C, 0x007C, 0x0090, 0x0090, 0x0090, 0x0090, 0x0096, 0x0096, 0x00D6, 0x00DE, }, {"NtQueryDirectoryFile", 0x0065, 0x0065, 0x0065, 0x0065, 0x007D, 0x007D, 0x007D, 0x007D, 0x007D, 0x0091, 0x0091, 0x0091, 0x0091, 0x0097, 0x0097, 0x00D7, 0x00DF, }, {"NtQueryDirectoryObject", 0x0066, 0x0066, 0x0066, 0x0066, 0x007E, 0x007E, 0x007E, 0x007E, 0x007E, 0x0092, 0x0092, 0x0092, 0x0092, 0x0098, 0x0098, 0x00D8, 0x00E0, }, {"NtQueryDriverEntryOrder", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0099, 0x0099, 0x00D9, 0x00E1, }, {"NtQueryEaFile", 0x0067, 0x0067, 0x0067, 0x0067, 0x007F, 0x007F, 0x007F, 0x007F, 0x007F, 0x0093, 0x0093, 0x0093, 0x0093, 0x009A, 0x009A, 0x00DA, 0x00E2, }, {"NtQueryEvent", 0x0068, 0x0068, 0x0068, 0x0068, 0x0080, 0x0080, 0x0080, 0x0080, 0x0080, 0x0094, 0x0094, 0x0094, 0x0094, 0x009B, 0x009B, 0x00DB, 0x00E3, }, {"NtQueryFullAttributesFile", 0x0069, 0x0069, 0x0069, 0x0069, 0x0081, 0x0081, 0x0081, 0x0081, 0x0081, 0x0095, 0x0095, 0x0095, 0x0095, 0x009C, 0x009C, 0x00DC, 0x00E4, }, {"NtQueryInformationAtom", 0x0062, 0x0062, 0x0062, 0x0062, 0x0079, 0x0079, 0x0079, 0x0079, 0x0079, 0x0096, 0x0096, 0x0096, 0x0096, 0x009D, 0x009D, 0x00DD, 0x00E5, }, {"NtQueryInformationEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0070, 0x00E6, }, {"NtQueryInformationFile", 0x006A, 0x006A, 0x006A, 0x006A, 0x0082, 0x0082, 0x0082, 0x0082, 0x0082, 0x0097, 0x0097, 0x0097, 0x0097, 0x009E, 0x009E, 0x00DE, 0x00E7, }, {"NtQueryInformationJobObject", -1, -1, -1, -1, 0x0083, 0x0083, 0x0083, 0x0083, 0x0083, 0x0098, 0x0098, 0x0098, 0x0098, 0x009F, 0x009F, 0x00DF, 0x00E8, }, {"NtQueryInformationPort", 0x006C, 0x006C, 0x006C, 0x006C, 0x0085, 0x0085, 0x0085, 0x0085, 0x0085, 0x0099, 0x0099, 0x0099, 0x0099, 0x00A0, 0x00A0, 0x00E0, 0x00E9, }, {"NtQueryInformationProcess", 0x006D, 0x006D, 0x006D, 0x006D, 0x0086, 0x0086, 0x0086, 0x0086, 0x0086, 0x009A, 0x009A, 0x009A, 0x009A, 0x00A1, 0x00A1, 0x00E1, 0x00EA, }, {"NtQueryInformationResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006C, 0x00EB, }, {"NtQueryInformationThread", 0x006E, 0x006E, 0x006E, 0x006E, 0x0087, 0x0087, 0x0087, 0x0087, 0x0087, 0x009B, 0x009B, 0x009B, 0x009B, 0x00A2, 0x00A2, 0x00E2, 0x00EC, }, {"NtQueryInformationToken", 0x006F, 0x006F, 0x006F, 0x006F, 0x0088, 0x0088, 0x0088, 0x0088, 0x0088, 0x009C, 0x009C, 0x009C, 0x009C, 0x00A3, 0x00A3, 0x00E3, 0x00ED, }, {"NtQueryInformationTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0051, 0x00EE, }, {"NtQueryInformationTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0052, 0x00EF, }, {"NtQueryInformationWorkerFactory", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017E, 0x00F0, }, {"NtQueryInstallUILanguage", -1, -1, -1, -1, 0x0089, 0x0089, 0x0089, 0x0089, 0x0089, 0x009D, 0x009D, 0x009D, 0x009D, 0x00A4, 0x00A4, 0x00E4, 0x00F1, }, {"NtQueryIntervalProfile", 0x0070, 0x0070, 0x0070, 0x0070, 0x008A, 0x008A, 0x008A, 0x008A, 0x008A, 0x009E, 0x009E, 0x009E, 0x009E, 0x00A5, 0x00A5, 0x00E5, 0x00F2, }, {"NtQueryIoCompletion", 0x006B, 0x006B, 0x006B, 0x006B, 0x0084, 0x0084, 0x0084, 0x0084, 0x0084, 0x009F, 0x009F, 0x009F, 0x009F, 0x00A6, 0x00A6, 0x00E6, 0x00F3, }, {"NtQueryKey", 0x0071, 0x0071, 0x0071, 0x0071, 0x008B, 0x008B, 0x008B, 0x008B, 0x008B, 0x00A0, 0x00A0, 0x00A0, 0x00A0, 0x00A7, 0x00A7, 0x00E7, 0x00F4, }, {"NtQueryLicenseValue", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0183, 0x00F5, }, {"NtQueryMultipleValueKey", 0x0072, 0x0072, 0x0072, 0x0072, 0x008C, 0x008C, 0x008C, 0x008C, 0x008C, 0x00A1, 0x00A1, 0x00A1, 0x00A1, 0x00A8, 0x00A8, 0x00E8, 0x00F6, }, {"NtQueryMutant", 0x0073, 0x0073, 0x0073, 0x0073, 0x008D, 0x008D, 0x008D, 0x008D, 0x008D, 0x00A2, 0x00A2, 0x00A2, 0x00A2, 0x00A9, 0x00A9, 0x00E9, 0x00F7, }, {"NtQueryObject", 0x0074, 0x0074, 0x0074, 0x0074, 0x008E, 0x008E, 0x008E, 0x008E, 0x008E, 0x00A3, 0x00A3, 0x00A3, 0x00A3, 0x00AA, 0x00AA, 0x00EA, 0x00F8, }, {"NtQueryOleDirectoryFile", 0x0075, 0x0075, 0x0075, 0x0075, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtQueryOpenSubKeys", -1, -1, -1, -1, 0x008F, 0x008F, 0x008F, 0x008F, 0x008F, 0x00A4, 0x00A4, 0x00A4, 0x00A4, 0x00AB, 0x00AB, 0x00EB, 0x00F9, }, {"NtQueryOpenSubKeysEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00AC, 0x00AC, 0x00EC, 0x00FA, }, {"NtQueryPerformanceCounter", 0x0076, 0x0076, 0x0076, 0x0076, 0x0090, 0x0090, 0x0090, 0x0090, 0x0090, 0x00A5, 0x00A5, 0x00A5, 0x00A5, 0x00AD, 0x00AD, 0x00ED, 0x00FB, }, {"NtQueryPortInformationProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011B, 0x011B, 0x011B, 0x011B, 0x0125, 0x0125, 0x016D, 0x00FC, }, {"NtQueryQuotaInformationFile", -1, -1, -1, -1, 0x0091, 0x0091, 0x0091, 0x0091, 0x0091, 0x00A6, 0x00A6, 0x00A6, 0x00A6, 0x00AE, 0x00AE, 0x00EE, 0x00FD, }, {"NtQuerySection", 0x0077, 0x0077, 0x0077, 0x0077, 0x0092, 0x0092, 0x0092, 0x0092, 0x0092, 0x00A7, 0x00A7, 0x00A7, 0x00A7, 0x00AF, 0x00AF, 0x00EF, 0x00FE, }, {"NtQuerySecurityAttributesToken", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00FF, }, {"NtQuerySecurityObject", 0x0078, 0x0078, 0x0078, 0x0078, 0x0093, 0x0093, 0x0093, 0x0093, 0x0093, 0x00A8, 0x00A8, 0x00A8, 0x00A8, 0x00B0, 0x00B0, 0x00F0, 0x0100, }, {"NtQuerySemaphore", 0x0079, 0x0079, 0x0079, 0x0079, 0x0094, 0x0094, 0x0094, 0x0094, 0x0094, 0x00A9, 0x00A9, 0x00A9, 0x00A9, 0x00B1, 0x00B1, 0x00F1, 0x0101, }, {"NtQuerySymbolicLinkObject", 0x007A, 0x007A, 0x007A, 0x007A, 0x0095, 0x0095, 0x0095, 0x0095, 0x0095, 0x00AA, 0x00AA, 0x00AA, 0x00AA, 0x00B2, 0x00B2, 0x00F2, 0x0102, }, {"NtQuerySystemEnvironmentValue", 0x007B, 0x007B, 0x007B, 0x007B, 0x0096, 0x0096, 0x0096, 0x0096, 0x0096, 0x00AB, 0x00AB, 0x00AB, 0x00AB, 0x00B3, 0x00B3, 0x00F3, 0x0103, }, {"NtQuerySystemEnvironmentValueEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00AC, 0x00AC, 0x00AC, 0x00AC, 0x00B4, 0x00B4, 0x00F4, 0x0104, }, {"NtQuerySystemInformation", 0x007C, 0x007C, 0x007C, 0x007C, 0x0097, 0x0097, 0x0097, 0x0097, 0x0097, 0x00AD, 0x00AD, 0x00AD, 0x00AD, 0x00B5, 0x00B5, 0x00F5, 0x0105, }, {"NtQuerySystemInformationEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0106, }, {"NtQuerySystemTime", 0x007D, 0x007D, 0x007D, 0x007D, 0x0098, 0x0098, 0x0098, 0x0098, 0x0098, 0x00AE, 0x00AE, 0x00AE, 0x00AE, 0x00B6, 0x00B6, 0x00F6, 0x0107, }, {"NtQueryTimer", 0x007E, 0x007E, 0x007E, 0x007E, 0x0099, 0x0099, 0x0099, 0x0099, 0x0099, 0x00AF, 0x00AF, 0x00AF, 0x00AF, 0x00B7, 0x00B7, 0x00F7, 0x0108, }, {"NtQueryTimerResolution", 0x007F, 0x007F, 0x007F, 0x007F, 0x009A, 0x009A, 0x009A, 0x009A, 0x009A, 0x00B0, 0x00B0, 0x00B0, 0x00B0, 0x00B8, 0x00B8, 0x00F8, 0x0109, }, {"NtQueryValueKey", 0x0080, 0x0080, 0x0080, 0x0080, 0x009B, 0x009B, 0x009B, 0x009B, 0x009B, 0x00B1, 0x00B1, 0x00B1, 0x00B1, 0x00B9, 0x00B9, 0x00F9, 0x010A, }, {"NtQueryVirtualMemory", 0x0081, 0x0081, 0x0081, 0x0081, 0x009C, 0x009C, 0x009C, 0x009C, 0x009C, 0x00B2, 0x00B2, 0x00B2, 0x00B2, 0x00BA, 0x00BA, 0x00FA, 0x010B, }, {"NtQueryVolumeInformationFile", 0x0082, 0x0082, 0x0082, 0x0082, 0x009D, 0x009D, 0x009D, 0x009D, 0x009D, 0x00B3, 0x00B3, 0x00B3, 0x00B3, 0x00BB, 0x00BB, 0x00FB, 0x010C, }, {"NtQueryWinStationInformation", -1, 0x00D5, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtQueueApcThread", 0x0083, 0x0083, 0x0083, 0x0083, 0x009E, 0x009E, 0x009E, 0x009E, 0x009E, 0x00B4, 0x00B4, 0x00B4, 0x00B4, 0x00BC, 0x00BC, 0x00FC, 0x010D, }, {"NtQueueApcThreadEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x010E, }, {"NtRaiseException", 0x0084, 0x0084, 0x0084, 0x0084, 0x009F, 0x009F, 0x009F, 0x009F, 0x009F, 0x00B5, 0x00B5, 0x00B5, 0x00B5, 0x00BD, 0x00BD, 0x00FD, 0x010F, }, {"NtRaiseHardError", 0x0085, 0x0085, 0x0085, 0x0085, 0x00A0, 0x00A0, 0x00A0, 0x00A0, 0x00A0, 0x00B6, 0x00B6, 0x00B6, 0x00B6, 0x00BE, 0x00BE, 0x00FE, 0x0110, }, {"NtReadFile", 0x0086, 0x0086, 0x0086, 0x0086, 0x00A1, 0x00A1, 0x00A1, 0x00A1, 0x00A1, 0x00B7, 0x00B7, 0x00B7, 0x00B7, 0x00BF, 0x00BF, 0x00FF, 0x0111, }, {"NtReadFileScatter", 0x0087, 0x0087, 0x0087, 0x0087, 0x00A2, 0x00A2, 0x00A2, 0x00A2, 0x00A2, 0x00B8, 0x00B8, 0x00B8, 0x00B8, 0x00C0, 0x00C0, 0x0100, 0x0112, }, {"NtReadOnlyEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0056, 0x0113, }, {"NtReadRequestData", 0x0088, 0x0088, 0x0088, 0x0088, 0x00A3, 0x00A3, 0x00A3, 0x00A3, 0x00A3, 0x00B9, 0x00B9, 0x00B9, 0x00B9, 0x00C1, 0x00C1, 0x0101, 0x0114, }, {"NtReadVirtualMemory", 0x0089, 0x0089, 0x0089, 0x0089, 0x00A4, 0x00A4, 0x00A4, 0x00A4, 0x00A4, 0x00BA, 0x00BA, 0x00BA, 0x00BA, 0x00C2, 0x00C2, 0x0102, 0x0115, }, {"NtRecoverEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0066, 0x0116, }, {"NtRecoverResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0067, 0x0117, }, {"NtRecoverTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0068, 0x0118, }, {"NtRegisterProtocolAddressInformation", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0175, 0x0119, }, {"NtRegisterThreadTerminatePort", 0x008A, 0x008A, 0x008A, 0x008A, 0x00A5, 0x00A5, 0x00A5, 0x00A5, 0x00A5, 0x00BB, 0x00BB, 0x00BB, 0x00BB, 0x00C3, 0x00C3, 0x0103, 0x011A, }, {"NtReleaseKeyedEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0119, 0x0119, 0x0119, 0x0119, 0x0123, 0x0123, 0x016B, 0x011B, }, {"NtReleaseMutant", 0x008B, 0x008B, 0x008B, 0x008B, 0x00A6, 0x00A6, 0x00A6, 0x00A6, 0x00A6, 0x00BC, 0x00BC, 0x00BC, 0x00BC, 0x00C4, 0x00C4, 0x0104, 0x011C, }, {"NtReleaseSemaphore", 0x008C, 0x008C, 0x008C, 0x008C, 0x00A7, 0x00A7, 0x00A7, 0x00A7, 0x00A7, 0x00BD, 0x00BD, 0x00BD, 0x00BD, 0x00C5, 0x00C5, 0x0105, 0x011D, }, {"NtReleaseWorkerFactoryWorker", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017B, 0x011E, }, {"NtRemoveIoCompletion", 0x008D, 0x008D, 0x008D, 0x008D, 0x00A8, 0x00A8, 0x00A8, 0x00A8, 0x00A8, 0x00BE, 0x00BE, 0x00BE, 0x00BE, 0x00C6, 0x00C6, 0x0106, 0x011F, }, {"NtRemoveIoCompletionEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0174, 0x0120, }, {"NtRemoveProcessDebug", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00BF, 0x00BF, 0x00BF, 0x00BF, 0x00C7, 0x00C7, 0x0107, 0x0121, }, {"NtRenameKey", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00C0, 0x00C0, 0x00C0, 0x00C0, 0x00C8, 0x00C8, 0x0108, 0x0122, }, {"NtRenameTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0064, 0x0123, }, {"NtReplaceKey", 0x008E, 0x008E, 0x008E, 0x008E, 0x00A9, 0x00A9, 0x00A9, 0x00A9, 0x00A9, 0x00C1, 0x00C1, 0x00C1, 0x00C1, 0x00C9, 0x00C9, 0x0109, 0x0124, }, {"NtReplacePartitionUnit", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0125, }, {"NtReplyPort", 0x008F, 0x008F, 0x008F, 0x008F, 0x00AA, 0x00AA, 0x00AA, 0x00AA, 0x00AA, 0x00C2, 0x00C2, 0x00C2, 0x00C2, 0x00CA, 0x00CA, 0x010A, 0x0126, }, {"NtReplyWaitReceivePort", 0x0090, 0x0090, 0x0090, 0x0090, 0x00AB, 0x00AB, 0x00AB, 0x00AB, 0x00AB, 0x00C3, 0x00C3, 0x00C3, 0x00C3, 0x00CB, 0x00CB, 0x010B, 0x0127, }, {"NtReplyWaitReceivePortEx", -1, -1, -1, -1, 0x00AC, 0x00AC, 0x00AC, 0x00AC, 0x00AC, 0x00C4, 0x00C4, 0x00C4, 0x00C4, 0x00CC, 0x00CC, 0x010C, 0x0128, }, {"NtReplyWaitReplyPort", 0x0091, 0x0091, 0x0091, 0x0091, 0x00AD, 0x00AD, 0x00AD, 0x00AD, 0x00AD, 0x00C5, 0x00C5, 0x00C5, 0x00C5, 0x00CD, 0x00CD, 0x010D, 0x0129, }, {"NtReplyWaitSendChannel", 0x00D0, 0x00CF, 0x00CF, 0x00CF, 0x00F4, 0x00F4, 0x00F4, 0x00F4, 0x00F4, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtRequestDeviceWakeup", -1, -1, -1, -1, 0x00AE, 0x00AE, 0x00AE, 0x00AE, 0x00AE, 0x00C6, 0x00C6, 0x00C6, 0x00C6, 0x00CE, 0x00CE, 0x010E, -1, }, {"NtRequestPort", 0x0092, 0x0092, 0x0092, 0x0092, 0x00AF, 0x00AF, 0x00AF, 0x00AF, 0x00AF, 0x00C7, 0x00C7, 0x00C7, 0x00C7, 0x00CF, 0x00CF, 0x010F, 0x012A, }, {"NtRequestWaitReplyPort", 0x0093, 0x0093, 0x0093, 0x0093, 0x00B0, 0x00B0, 0x00B0, 0x00B0, 0x00B0, 0x00C8, 0x00C8, 0x00C8, 0x00C8, 0x00D0, 0x00D0, 0x0110, 0x012B, }, {"NtRequestWakeupLatency", -1, -1, -1, -1, 0x00B1, 0x00B1, 0x00B1, 0x00B1, 0x00B1, 0x00C9, 0x00C9, 0x00C9, 0x00C9, 0x00D1, 0x00D1, 0x0111, -1, }, {"NtResetEvent", 0x0094, 0x0094, 0x0094, 0x0094, 0x00B2, 0x00B2, 0x00B2, 0x00B2, 0x00B2, 0x00CA, 0x00CA, 0x00CA, 0x00CA, 0x00D2, 0x00D2, 0x0112, 0x012C, }, {"NtResetWriteWatch", -1, -1, -1, -1, 0x00B3, 0x00B3, 0x00B3, 0x00B3, 0x00B3, 0x00CB, 0x00CB, 0x00CB, 0x00CB, 0x00D3, 0x00D3, 0x0113, 0x012D, }, {"NtRestoreKey", 0x0095, 0x0095, 0x0095, 0x0095, 0x00B4, 0x00B4, 0x00B4, 0x00B4, 0x00B4, 0x00CC, 0x00CC, 0x00CC, 0x00CC, 0x00D4, 0x00D4, 0x0114, 0x012E, }, {"NtResumeProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00CD, 0x00CD, 0x00CD, 0x00CD, 0x00D5, 0x00D5, 0x0115, 0x012F, }, {"NtResumeThread", 0x0096, 0x0096, 0x0096, 0x0096, 0x00B5, 0x00B5, 0x00B5, 0x00B5, 0x00B5, 0x00CE, 0x00CE, 0x00CE, 0x00CE, 0x00D6, 0x00D6, 0x0116, 0x0130, }, {"NtRollbackComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0057, 0x0131, }, {"NtRollbackEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0058, 0x0132, }, {"NtRollbackSavepointTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011C, -1, }, {"NtRollbackTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005A, 0x0133, }, {"NtRollforwardTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0065, 0x0134, }, {"NtSaveKey", 0x0097, 0x0097, 0x0097, 0x0097, 0x00B6, 0x00B6, 0x00B6, 0x00B6, 0x00B6, 0x00CF, 0x00CF, 0x00CF, 0x00CF, 0x00D7, 0x00D7, 0x0117, 0x0135, }, {"NtSaveKeyEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00D0, 0x00D0, 0x00D0, 0x00D0, 0x00D8, 0x00D8, 0x0118, 0x0136, }, {"NtSaveMergedKeys", -1, -1, -1, -1, 0x00B7, 0x00B7, 0x00B7, 0x00B7, 0x00B7, 0x00D1, 0x00D1, 0x00D1, 0x00D1, 0x00D9, 0x00D9, 0x0119, 0x0137, }, {"NtSavepointComplete", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011E, -1, }, {"NtSavepointTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011D, -1, }, {"NtSecureConnectPort", -1, -1, -1, -1, 0x00B8, 0x00B8, 0x00B8, 0x00B8, 0x00B8, 0x00D2, 0x00D2, 0x00D2, 0x00D2, 0x00DA, 0x00DA, 0x011F, 0x0138, }, {"NtSendWaitReplyChannel", 0x00D1, 0x00D0, 0x00D0, 0x00D0, 0x00F5, 0x00F5, 0x00F5, 0x00F5, 0x00F5, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtSerializeBoot", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0139, }, {"NtSetBootEntryOrder", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00D3, 0x00D3, 0x00D3, -1, 0x00DB, 0x00DB, 0x0120, 0x013A, }, {"NtSetBootOptions", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00D4, 0x00D4, 0x00D4, -1, 0x00DC, 0x00DC, 0x0121, 0x013B, }, {"NtSetContextChannel", 0x00D2, 0x00D1, 0x00D1, 0x00D1, 0x00F6, 0x00F6, 0x00F6, 0x00F6, 0x00F6, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtSetContextThread", 0x0099, 0x0099, 0x0099, 0x0099, 0x00BA, 0x00BA, 0x00BA, 0x00BA, 0x00BA, 0x00D5, 0x00D5, 0x00D5, 0x00D5, 0x00DD, 0x00DD, 0x0122, 0x013C, }, {"NtSetDebugFilterState", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00D6, 0x00D6, 0x00D6, 0x00D6, 0x00DE, 0x00DE, 0x0123, 0x013D, }, {"NtSetDefaultHardErrorPort", 0x009A, 0x009A, 0x009A, 0x009A, 0x00BB, 0x00BB, 0x00BB, 0x00BB, 0x00BB, 0x00D7, 0x00D7, 0x00D7, 0x00D7, 0x00DF, 0x00DF, 0x0124, 0x013E, }, {"NtSetDefaultLocale", 0x009B, 0x009B, 0x009B, 0x009B, 0x00BC, 0x00BC, 0x00BC, 0x00BC, 0x00BC, 0x00D8, 0x00D8, 0x00D8, 0x00D8, 0x00E0, 0x00E0, 0x0125, 0x013F, }, {"NtSetDefaultUILanguage", -1, -1, -1, -1, 0x00BD, 0x00BD, 0x00BD, 0x00BD, 0x00BD, 0x00D9, 0x00D9, 0x00D9, 0x00D9, 0x00E1, 0x00E1, 0x0126, 0x0140, }, {"NtSetDriverEntryOrder", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00E2, 0x00E2, 0x0127, 0x0141, }, {"NtSetEaFile", 0x009C, 0x009C, 0x009C, 0x009C, 0x00BE, 0x00BE, 0x00BE, 0x00BE, 0x00BE, 0x00DA, 0x00DA, 0x00DA, 0x00DA, 0x00E3, 0x00E3, 0x0128, 0x0142, }, {"NtSetEvent", 0x009D, 0x009D, 0x009D, 0x009D, 0x00BF, 0x00BF, 0x00BF, 0x00BF, 0x00BF, 0x00DB, 0x00DB, 0x00DB, 0x00DB, 0x00E4, 0x00E4, 0x0129, 0x0143, }, {"NtSetEventBoostPriority", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00DC, 0x00DC, 0x00DC, 0x00DC, 0x00E5, 0x00E5, 0x012A, 0x0144, }, {"NtSetHighEventPair", 0x009E, 0x009E, 0x009E, 0x009E, 0x00C0, 0x00C0, 0x00C0, 0x00C0, 0x00C0, 0x00DD, 0x00DD, 0x00DD, 0x00DD, 0x00E6, 0x00E6, 0x012B, 0x0145, }, {"NtSetHighWaitLowEventPair", 0x009F, 0x009F, 0x009F, 0x009F, 0x00C1, 0x00C1, 0x00C1, 0x00C1, 0x00C1, 0x00DE, 0x00DE, 0x00DE, 0x00DE, 0x00E7, 0x00E7, 0x012C, 0x0146, }, {"NtSetHighWaitLowThread", 0x00A0, 0x00A0, 0x00A0, 0x00A0, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtSetInformationDebugObject", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00DF, 0x00DF, 0x00DF, 0x00DF, 0x00E8, 0x00E8, 0x012D, 0x0147, }, {"NtSetInformationEnlistment", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x006F, 0x0148, }, {"NtSetInformationFile", 0x00A1, 0x00A1, 0x00A1, 0x00A1, 0x00C2, 0x00C2, 0x00C2, 0x00C2, 0x00C2, 0x00E0, 0x00E0, 0x00E0, 0x00E0, 0x00E9, 0x00E9, 0x012E, 0x0149, }, {"NtSetInformationJobObject", -1, -1, -1, -1, 0x00C3, 0x00C3, 0x00C3, 0x00C3, 0x00C3, 0x00E1, 0x00E1, 0x00E1, 0x00E1, 0x00EA, 0x00EA, 0x012F, 0x014A, }, {"NtSetInformationKey", 0x00A2, 0x00A2, 0x00A2, 0x00A2, 0x00C4, 0x00C4, 0x00C4, 0x00C4, 0x00C4, 0x00E2, 0x00E2, 0x00E2, 0x00E2, 0x00EB, 0x00EB, 0x0130, 0x014B, }, {"NtSetInformationObject", 0x00A3, 0x00A3, 0x00A3, 0x00A3, 0x00C5, 0x00C5, 0x00C5, 0x00C5, 0x00C5, 0x00E3, 0x00E3, 0x00E3, 0x00E3, 0x00EC, 0x00EC, 0x0131, 0x014C, }, {"NtSetInformationProcess", 0x00A4, 0x00A4, 0x00A4, 0x00A4, 0x00C6, 0x00C6, 0x00C6, 0x00C6, 0x00C6, 0x00E4, 0x00E4, 0x00E4, 0x00E4, 0x00ED, 0x00ED, 0x0132, 0x014D, }, {"NtSetInformationResourceManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0061, 0x014E, }, {"NtSetInformationThread", 0x00A5, 0x00A5, 0x00A5, 0x00A5, 0x00C7, 0x00C7, 0x00C7, 0x00C7, 0x00C7, 0x00E5, 0x00E5, 0x00E5, 0x00E5, 0x00EE, 0x00EE, 0x0133, 0x014F, }, {"NtSetInformationToken", 0x00A6, 0x00A6, 0x00A6, 0x00A6, 0x00C8, 0x00C8, 0x00C8, 0x00C8, 0x00C8, 0x00E6, 0x00E6, 0x00E6, 0x00E6, 0x00EF, 0x00EF, 0x0134, 0x0150, }, {"NtSetInformationTransaction", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005F, 0x0151, }, {"NtSetInformationTransactionManager", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0060, 0x0152, }, {"NtSetInformationWorkerFactory", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017D, 0x0153, }, {"NtSetIntervalProfile", 0x00A7, 0x00A7, 0x00A7, 0x00A7, 0x00C9, 0x00C9, 0x00C9, 0x00C9, 0x00C9, 0x00E7, 0x00E7, 0x00E7, 0x00E7, 0x00F0, 0x00F0, 0x0135, 0x0154, }, {"NtSetIoCompletion", 0x0098, 0x0098, 0x0098, 0x0098, 0x00B9, 0x00B9, 0x00B9, 0x00B9, 0x00B9, 0x00E8, 0x00E8, 0x00E8, 0x00E8, 0x00F1, 0x00F1, 0x0136, 0x0155, }, {"NtSetIoCompletionEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0156, }, {"NtSetLdtEntries", 0x00A8, 0x00A8, 0x00A8, 0x00A8, 0x00CA, 0x00CA, 0x00CA, 0x00CA, 0x00CA, 0x00E9, 0x00E9, 0x00E9, 0x00E9, 0x00F2, 0x00F2, 0x0137, 0x0157, }, {"NtSetLowEventPair", 0x00A9, 0x00A9, 0x00A9, 0x00A9, 0x00CB, 0x00CB, 0x00CB, 0x00CB, 0x00CB, 0x00EA, 0x00EA, 0x00EA, 0x00EA, 0x00F3, 0x00F3, 0x0138, 0x0158, }, {"NtSetLowWaitHighEventPair", 0x00AA, 0x00AA, 0x00AA, 0x00AA, 0x00CC, 0x00CC, 0x00CC, 0x00CC, 0x00CC, 0x00EB, 0x00EB, 0x00EB, 0x00EB, 0x00F4, 0x00F4, 0x0139, 0x0159, }, {"NtSetLowWaitHighThread", 0x00AB, 0x00AB, 0x00AB, 0x00AB, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtSetQuotaInformationFile", -1, -1, -1, -1, 0x00CD, 0x00CD, 0x00CD, 0x00CD, 0x00CD, 0x00EC, 0x00EC, 0x00EC, 0x00EC, 0x00F5, 0x00F5, 0x013A, 0x015A, }, {"NtSetSecurityObject", 0x00AC, 0x00AC, 0x00AC, 0x00AC, 0x00CE, 0x00CE, 0x00CE, 0x00CE, 0x00CE, 0x00ED, 0x00ED, 0x00ED, 0x00ED, 0x00F6, 0x00F6, 0x013B, 0x015B, }, {"NtSetSystemEnvironmentValue", 0x00AD, 0x00AD, 0x00AD, 0x00AD, 0x00CF, 0x00CF, 0x00CF, 0x00CF, 0x00CF, 0x00EE, 0x00EE, 0x00EE, 0x00EE, 0x00F7, 0x00F7, 0x013C, 0x015C, }, {"NtSetSystemEnvironmentValueEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00EF, 0x00EF, 0x00EF, -1, 0x00F8, 0x00F8, 0x013D, 0x015D, }, {"NtSetSystemInformation", 0x00AE, 0x00AE, 0x00AE, 0x00AE, 0x00D0, 0x00D0, 0x00D0, 0x00D0, 0x00D0, 0x00F0, 0x00F0, 0x00F0, 0x00F0, 0x00F9, 0x00F9, 0x013E, 0x015E, }, {"NtSetSystemPowerState", 0x00AF, 0x00AF, 0x00AF, 0x00AF, 0x00D1, 0x00D1, 0x00D1, 0x00D1, 0x00D1, 0x00F1, 0x00F1, 0x00F1, 0x00F1, 0x00FA, 0x00FA, 0x013F, 0x015F, }, {"NtSetSystemTime", 0x00B0, 0x00B0, 0x00B0, 0x00B0, 0x00D2, 0x00D2, 0x00D2, 0x00D2, 0x00D2, 0x00F2, 0x00F2, 0x00F2, 0x00F2, 0x00FB, 0x00FB, 0x0140, 0x0160, }, {"NtSetThreadExecutionState", -1, -1, -1, -1, 0x00D3, 0x00D3, 0x00D3, 0x00D3, 0x00D3, 0x00F3, 0x00F3, 0x00F3, 0x00F3, 0x00FC, 0x00FC, 0x0141, 0x0161, }, {"NtSetTimer", 0x00B1, 0x00B1, 0x00B1, 0x00B1, 0x00D4, 0x00D4, 0x00D4, 0x00D4, 0x00D4, 0x00F4, 0x00F4, 0x00F4, 0x00F4, 0x00FD, 0x00FD, 0x0142, 0x0162, }, {"NtSetTimerEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0163, }, {"NtSetTimerResolution", 0x00B2, 0x00B2, 0x00B2, 0x00B2, 0x00D5, 0x00D5, 0x00D5, 0x00D5, 0x00D5, 0x00F5, 0x00F5, 0x00F5, 0x00F5, 0x00FE, 0x00FE, 0x0143, 0x0164, }, {"NtSetUuidSeed", -1, -1, -1, -1, 0x00D6, 0x00D6, 0x00D6, 0x00D6, 0x00D6, 0x00F6, 0x00F6, 0x00F6, 0x00F6, 0x00FF, 0x00FF, 0x0144, 0x0165, }, {"NtSetValueKey", 0x00B3, 0x00B3, 0x00B3, 0x00B3, 0x00D7, 0x00D7, 0x00D7, 0x00D7, 0x00D7, 0x00F7, 0x00F7, 0x00F7, 0x00F7, 0x0100, 0x0100, 0x0145, 0x0166, }, {"NtSetVolumeInformationFile", 0x00B4, 0x00B4, 0x00B4, 0x00B4, 0x00D8, 0x00D8, 0x00D8, 0x00D8, 0x00D8, 0x00F8, 0x00F8, 0x00F8, 0x00F8, 0x0101, 0x0101, 0x0146, 0x0167, }, {"NtSetWinStationInformation", -1, 0x00D6, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtShutdownSystem", 0x00B5, 0x00B5, 0x00B5, 0x00B5, 0x00D9, 0x00D9, 0x00D9, 0x00D9, 0x00D9, 0x00F9, 0x00F9, 0x00F9, 0x00F9, 0x0102, 0x0102, 0x0147, 0x0168, }, {"NtShutdownWorkerFactory", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0180, 0x0169, }, {"NtSignalAndWaitForSingleObject", 0x00B6, 0x00B6, 0x00B6, 0x00B6, 0x00DA, 0x00DA, 0x00DA, 0x00DA, 0x00DA, 0x00FA, 0x00FA, 0x00FA, 0x00FA, 0x0103, 0x0103, 0x0148, 0x016A, }, {"NtSinglePhaseReject", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x005E, 0x016B, }, {"NtStartProfile", 0x00B7, 0x00B7, 0x00B7, 0x00B7, 0x00DB, 0x00DB, 0x00DB, 0x00DB, 0x00DB, 0x00FB, 0x00FB, 0x00FB, 0x00FB, 0x0104, 0x0104, 0x0149, 0x016C, }, {"NtStartTm", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0071, -1, }, {"NtStopProfile", 0x00B8, 0x00B8, 0x00B8, 0x00B8, 0x00DC, 0x00DC, 0x00DC, 0x00DC, 0x00DC, 0x00FC, 0x00FC, 0x00FC, 0x00FC, 0x0105, 0x0105, 0x014A, 0x016D, }, {"NtSuspendProcess", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x00FD, 0x00FD, 0x00FD, 0x00FD, 0x0106, 0x0106, 0x014B, 0x016E, }, {"NtSuspendThread", 0x00B9, 0x00B9, 0x00B9, 0x00B9, 0x00DD, 0x00DD, 0x00DD, 0x00DD, 0x00DD, 0x00FE, 0x00FE, 0x00FE, 0x00FE, 0x0107, 0x0107, 0x014C, 0x016F, }, {"NtSystemDebugControl", 0x00BA, 0x00BA, 0x00BA, 0x00BA, 0x00DE, 0x00DE, 0x00DE, 0x00DE, 0x00DE, 0x00FF, 0x00FF, 0x00FF, 0x00FF, 0x0108, 0x0108, 0x014D, 0x0170, }, {"NtTerminateJobObject", -1, -1, -1, -1, 0x00DF, 0x00DF, 0x00DF, 0x00DF, 0x00DF, 0x0100, 0x0100, 0x0100, 0x0100, 0x0109, 0x0109, 0x014E, 0x0171, }, {"NtTerminateProcess", 0x00BB, 0x00BB, 0x00BB, 0x00BB, 0x00E0, 0x00E0, 0x00E0, 0x00E0, 0x00E0, 0x0101, 0x0101, 0x0101, 0x0101, 0x010A, 0x010A, 0x014F, 0x0172, }, {"NtTerminateThread", 0x00BC, 0x00BC, 0x00BC, 0x00BC, 0x00E1, 0x00E1, 0x00E1, 0x00E1, 0x00E1, 0x0102, 0x0102, 0x0102, 0x0102, 0x010B, 0x010B, 0x0150, 0x0173, }, {"NtTestAlert", 0x00BD, 0x00BD, 0x00BD, 0x00BD, 0x00E2, 0x00E2, 0x00E2, 0x00E2, 0x00E2, 0x0103, 0x0103, 0x0103, 0x0103, 0x010C, 0x010C, 0x0151, 0x0174, }, {"NtThawRegistry", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0152, 0x0175, }, {"NtThawTransactions", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0153, 0x0176, }, {"NtTraceControl", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0155, 0x0177, }, {"NtTraceEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0104, 0x0104, 0x0104, 0x0104, 0x010D, 0x010D, 0x0154, 0x0178, }, {"NtTranslateFilePath", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0105, 0x0105, 0x0105, 0x0105, 0x010E, 0x010E, 0x0156, 0x0179, }, {"NtUmsThreadYield", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017A, }, {"NtUnloadDriver", 0x00BE, 0x00BE, 0x00BE, 0x00BE, 0x00E3, 0x00E3, 0x00E3, 0x00E3, 0x00E3, 0x0106, 0x0106, 0x0106, 0x0106, 0x010F, 0x010F, 0x0157, 0x017B, }, {"NtUnloadKey", 0x00BF, 0x00BF, 0x00BF, 0x00BF, 0x00E4, 0x00E4, 0x00E4, 0x00E4, 0x00E4, 0x0107, 0x0107, 0x0107, 0x0107, 0x0110, 0x0110, 0x0158, 0x017C, }, {"NtUnloadKey2", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0111, 0x0111, 0x0159, 0x017D, }, {"NtUnloadKeyEx", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0108, 0x0108, 0x0108, 0x0108, 0x0112, 0x0112, 0x015A, 0x017E, }, {"NtUnlockFile", 0x00C0, 0x00C0, 0x00C0, 0x00C0, 0x00E5, 0x00E5, 0x00E5, 0x00E5, 0x00E5, 0x0109, 0x0109, 0x0109, 0x0109, 0x0113, 0x0113, 0x015B, 0x017F, }, {"NtUnlockVirtualMemory", 0x00C1, 0x00C1, 0x00C1, 0x00C1, 0x00E6, 0x00E6, 0x00E6, 0x00E6, 0x00E6, 0x010A, 0x010A, 0x010A, 0x010A, 0x0114, 0x0114, 0x015C, 0x0180, }, {"NtUnmapViewOfSection", 0x00C2, 0x00C2, 0x00C2, 0x00C2, 0x00E7, 0x00E7, 0x00E7, 0x00E7, 0x00E7, 0x010B, 0x010B, 0x010B, 0x010B, 0x0115, 0x0115, 0x015D, 0x0181, }, {"NtVdmControl", 0x00C3, 0x00C3, 0x00C3, 0x00C3, 0x00E8, 0x00E8, 0x00E8, 0x00E8, 0x00E8, 0x010C, 0x010C, 0x010C, 0x010C, 0x0116, 0x0116, 0x015E, 0x0182, }, {"NtW32Call", 0x00CC, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtWaitForDebugEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x010D, 0x010D, 0x010D, 0x010D, 0x0117, 0x0117, 0x015F, 0x0183, }, {"NtWaitForKeyedEvent", -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x011A, 0x011A, 0x011A, 0x011A, 0x0124, 0x0124, 0x016C, 0x0184, }, {"NtWaitForMultipleObjects", 0x00C4, 0x00C4, 0x00C4, 0x00C4, 0x00E9, 0x00E9, 0x00E9, 0x00E9, 0x00E9, 0x010E, 0x010E, 0x010E, 0x010E, 0x0118, 0x0118, 0x0160, 0x0185, }, {"NtWaitForMultipleObjects32", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x0127, 0x016F, 0x0186, }, {"NtWaitForSingleObject", 0x00C5, 0x00C5, 0x00C5, 0x00C5, 0x00EA, 0x00EA, 0x00EA, 0x00EA, 0x00EA, 0x010F, 0x010F, 0x010F, 0x010F, 0x0119, 0x0119, 0x0161, 0x0187, }, {"NtWaitForWorkViaWorkerFactory", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017C, 0x0188, }, {"NtWaitHighEventPair", 0x00C6, 0x00C6, 0x00C6, 0x00C6, 0x00EB, 0x00EB, 0x00EB, 0x00EB, 0x00EB, 0x0110, 0x0110, 0x0110, 0x0110, 0x011A, 0x011A, 0x0162, 0x0189, }, {"NtWaitLowEventPair", 0x00C7, 0x00C7, 0x00C7, 0x00C7, 0x00EC, 0x00EC, 0x00EC, 0x00EC, 0x00EC, 0x0111, 0x0111, 0x0111, 0x0111, 0x011B, 0x011B, 0x0163, 0x018A, }, {"NtWorkerFactoryWorkerReady", -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 0x017F, 0x018B, }, {"NtWriteErrorLogEntry", -1, 0x00D7, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, }, {"NtWriteFile", 0x00C8, 0x00C8, 0x00C8, 0x00C8, 0x00ED, 0x00ED, 0x00ED, 0x00ED, 0x00ED, 0x0112, 0x0112, 0x0112, 0x0112, 0x011C, 0x011C, 0x0164, 0x018C, }, {"NtWriteFileGather", 0x00C9, 0x00C9, 0x00C9, 0x00C9, 0x00EE, 0x00EE, 0x00EE, 0x00EE, 0x00EE, 0x0113, 0x0113, 0x0113, 0x0113, 0x011D, 0x011D, 0x0165, 0x018D, }, {"NtWriteRequestData", 0x00CA, 0x00CA, 0x00CA, 0x00CA, 0x00EF, 0x00EF, 0x00EF, 0x00EF, 0x00EF, 0x0114, 0x0114, 0x0114, 0x0114, 0x011E, 0x011E, 0x0166, 0x018E, }, {"NtWriteVirtualMemory", 0x00CB, 0x00CB, 0x00CB, 0x00CB, 0x00F0, 0x00F0, 0x00F0, 0x00F0, 0x00F0, 0x0115, 0x0115, 0x0115, 0x0115, 0x011F, 0x011F, 0x0167, 0x018F, }, {"NtYieldExecution", 0x00D3, 0x00D2, 0x00D2, 0x00D2, 0x00F7, 0x00F7, 0x00F7, 0x00F7, 0x00F7, 0x0116, 0x0116, 0x0116, 0x0116, 0x0120, 0x0120, 0x0168, 0x0190, }, }; // generated by pnf, added xp-sp3 and seven-sp0 to the tables from the ms project