Windows System Call Table

System Call SymbolNT-SP3NT-SP4NT-SP5NT-SP62K-SP02K-SP12K-SP22K-SP32K-SP4XP-SP0XP-SP1XP-SP2XP-SP32003-SP02003-SP1VISTA-SP0SEVEN-SP0
NtAcceptConnectPort0x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x00000x0000
NtAccessCheck0x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x00010x0001
NtAccessCheckAndAuditAlarm0x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x00020x0002
NtAccessCheckByType    0x00030x00030x00030x00030x00030x00030x00030x00030x00030x00030x00030x00030x0003
NtAccessCheckByTypeAndAuditAlarm    0x00040x00040x00040x00040x00040x00040x00040x00040x00040x00040x00040x00040x0004
NtAccessCheckByTypeResultList    0x00050x00050x00050x00050x00050x00050x00050x00050x00050x00050x00050x00050x0005
NtAccessCheckByTypeResultListAndAuditAlarm    0x00060x00060x00060x00060x00060x00060x00060x00060x00060x00060x00060x00060x0006
NtAccessCheckByTypeResultListAndAuditAlarmByHandle    0x00070x00070x00070x00070x00070x00070x00070x00070x00070x00070x00070x00070x0007
NtAddAtom0x00030x00030x00030x00030x00080x00080x00080x00080x00080x00080x00080x00080x00080x00080x00080x00080x0008
NtAddBootEntry         0x00090x00090x0009 0x00090x00090x00090x0009
NtAddDriverEntry             0x000A0x000A0x000A0x000A
NtAdjustGroupsToken0x00040x00040x00040x00040x00090x00090x00090x00090x00090x000A0x000A0x000A0x000A0x000B0x000B0x000B0x000B
NtAdjustPrivilegesToken0x00050x00050x00050x00050x000A0x000A0x000A0x000A0x000A0x000B0x000B0x000B0x000B0x000C0x000C0x000C0x000C
NtAlertResumeThread0x00060x00060x00060x00060x000B0x000B0x000B0x000B0x000B0x000C0x000C0x000C0x000C0x000D0x000D0x000D0x000D
NtAlertThread0x00070x00070x00070x00070x000C0x000C0x000C0x000C0x000C0x000D0x000D0x000D0x000D0x000E0x000E0x000E0x000E
NtAllocateLocallyUniqueId0x00080x00080x00080x00080x000D0x000D0x000D0x000D0x000D0x000E0x000E0x000E0x000E0x000F0x000F0x000F0x000F
NtAllocateReserveObject                0x0010
NtAllocateUserPhysicalPages    0x000E0x000E0x000E0x000E0x000E0x000F0x000F0x000F0x000F0x00100x00100x00100x0011
NtAllocateUuids0x00090x00090x00090x00090x000F0x000F0x000F0x000F0x000F0x00100x00100x00100x00100x00110x00110x00110x0012
NtAllocateVirtualMemory0x000A0x000A0x000A0x000A0x00100x00100x00100x00100x00100x00110x00110x00110x00110x00120x00120x00120x0013
NtAlpcAcceptConnectPort               0x00130x0014
NtAlpcCancelMessage               0x00140x0015
NtAlpcConnectPort               0x00150x0016
NtAlpcCreatePort               0x00160x0017
NtAlpcCreatePortSection               0x00170x0018
NtAlpcCreateResourceReserve               0x00180x0019
NtAlpcCreateSectionView               0x00190x001A
NtAlpcCreateSecurityContext               0x001A0x001B
NtAlpcDeletePortSection               0x001B0x001C
NtAlpcDeleteResourceReserve               0x001C0x001D
NtAlpcDeleteSectionView               0x001D0x001E
NtAlpcDeleteSecurityContext               0x001E0x001F
NtAlpcDisconnectPort               0x001F0x0020
NtAlpcImpersonateClientOfPort               0x00200x0021
NtAlpcOpenSenderProcess               0x00210x0022
NtAlpcOpenSenderThread               0x00220x0023
NtAlpcQueryInformation               0x00230x0024
NtAlpcQueryInformationMessage               0x00240x0025
NtAlpcRevokeSecurityContext                0x0026
NtAlpcSendWaitReceivePort               0x00250x0027
NtAlpcSetInformation               0x00260x0028
NtApphelpCacheControl             0x00130x00130x00270x0029
NtAreMappedFilesTheSame    0x00110x00110x00110x00110x00110x00120x00120x00120x00120x00140x00140x00280x002A
NtAssignProcessToJobObject    0x00120x00120x00120x00120x00120x00130x00130x00130x00130x00150x00150x00290x002B
NtCallbackReturn0x000B0x000B0x000B0x000B0x00130x00130x00130x00130x00130x00140x00140x00140x00140x00160x00160x002A0x002C
NtCancelDeviceWakeupRequest    0x00160x00160x00160x00160x00160x00150x00150x0015 0x00170x00170x002B 
NtCancelIoFile0x000C0x000C0x000C0x000C0x00140x00140x00140x00140x00140x00160x00160x00160x00160x00180x00180x002C0x002D
NtCancelIoFileEx               0x01720x002E
NtCancelSynchronousIoFile               0x01730x002F
NtCancelTimer0x000D0x000D0x000D0x000D0x00150x00150x00150x00150x00150x00170x00170x00170x00170x00190x00190x002D0x0030
NtClearAllSavepointsTransaction               0x011B 
NtClearEvent0x000E0x000E0x000E0x000E0x00170x00170x00170x00170x00170x00180x00180x00180x00180x001A0x001A0x002E0x0031
NtClearMUILicenseInfo               0x0187 
NtClearSavepointTransaction               0x011A 
NtClose0x000F0x000F0x000F0x000F0x00180x00180x00180x00180x00180x00190x00190x00190x00190x001B0x001B0x002F0x0032
NtCloseObjectAuditAlarm0x00100x00100x00100x00100x00190x00190x00190x00190x00190x001A0x001A0x001A0x001A0x001C0x001C0x00300x0033
NtCommitComplete               0x005D0x0034
NtCommitEnlistment               0x00550x0035
NtCommitTransaction               0x00590x0036
NtCompactKeys         0x001B0x001B0x001B0x001B0x001D0x001D0x00310x0037
NtCompareTokens         0x001C0x001C0x001C0x001C0x001E0x001E0x00320x0038
NtCompleteConnectPort0x00110x00110x00110x00110x001A0x001A0x001A0x001A0x001A0x001D0x001D0x001D0x001D0x001F0x001F0x00330x0039
NtCompressKey         0x001E0x001E0x001E0x001E0x00200x00200x00340x003A
NtConnectPort0x00120x00120x00120x00120x001B0x001B0x001B0x001B0x001B0x001F0x001F0x001F0x001F0x00210x00210x00350x003B
NtContinue0x00130x00130x00130x00130x001C0x001C0x001C0x001C0x001C0x00200x00200x00200x00200x00220x00220x00360x003C
NtCreateChannel0x00CD0x00CC0x00CC0x00CC0x00F10x00F10x00F10x00F10x00F1        
NtCreateDebugObject         0x00210x00210x00210x00210x00230x00230x00370x003D
NtCreateDirectoryObject0x00140x00140x00140x00140x001D0x001D0x001D0x001D0x001D0x00220x00220x00220x00220x00240x00240x00380x003E
NtCreateEnlistment               0x006D0x003F
NtCreateEvent0x00150x00150x00150x00150x001E0x001E0x001E0x001E0x001E0x00230x00230x00230x00230x00250x00250x00390x0040
NtCreateEventPair0x00160x00160x00160x00160x001F0x001F0x001F0x001F0x001F0x00240x00240x00240x00240x00260x00260x003A0x0041
NtCreateFile0x00170x00170x00170x00170x00200x00200x00200x00200x00200x00250x00250x00250x00250x00270x00270x003B0x0042
NtCreateIoCompletion0x00180x00180x00180x00180x00210x00210x00210x00210x00210x00260x00260x00260x00260x00280x00280x003C0x0043
NtCreateJobObject    0x00220x00220x00220x00220x00220x00270x00270x00270x00270x00290x00290x003D0x0044
NtCreateJobSet         0x00280x00280x00280x00280x002A0x002A0x003E0x0045
NtCreateKey0x00190x00190x00190x00190x00230x00230x00230x00230x00230x00290x00290x00290x00290x002B0x002B0x003F0x0046
NtCreateKeyTransacted                0x0048
NtCreateKeyedEvent         0x01170x01170x01170x01170x01210x01210x01690x0047
NtCreateMailslotFile0x001A0x001A0x001A0x001A0x00240x00240x00240x00240x00240x002A0x002A0x002A0x002A0x002C0x002C0x00400x0049
NtCreateMutant0x001B0x001B0x001B0x001B0x00250x00250x00250x00250x00250x002B0x002B0x002B0x002B0x002D0x002D0x00410x004A
NtCreateNamedPipeFile0x001C0x001C0x001C0x001C0x00260x00260x00260x00260x00260x002C0x002C0x002C0x002C0x002E0x002E0x00420x004B
NtCreatePagingFile0x001D0x001D0x001D0x001D0x00270x00270x00270x00270x00270x002D0x002D0x002D0x002D0x002F0x002F0x00440x004C
NtCreatePort0x001E0x001C0x001E0x001E0x00280x00280x00280x00280x00280x002E0x002E0x002E0x002E0x00300x00300x00450x004D
NtCreatePrivateNamespace               0x00430x004E
NtCreateProcess0x001F0x001F0x001F0x001F0x00290x00290x00290x00290x00290x002F0x002F0x002F0x002F0x00310x00310x00460x004F
NtCreateProcessEx         0x00300x00300x00300x00300x00320x00320x00470x0050
NtCreateProfile0x00200x00200x00200x00200x002A0x002A0x002A0x002A0x002A0x00310x00310x00310x00310x00330x00330x00480x0051
NtCreateProfileEx                0x0052
NtCreateResourceManager               0x00690x0053
NtCreateSection0x00210x00210x00210x00210x002B0x002B0x002B0x002B0x002B0x00320x00320x00320x00320x00340x00340x00490x0054
NtCreateSemaphore0x00220x00220x00220x00220x002C0x002C0x002C0x002C0x002C0x00330x00330x00330x00330x00350x00350x004A0x0055
NtCreateSymbolicLinkObject0x00230x00230x00230x00230x002D0x002D0x002D0x002D0x002D0x00340x00340x00340x00340x00360x00360x004B0x0056
NtCreateThread0x00240x00240x00240x00240x002E0x002E0x002E0x002E0x002E0x00350x00350x00350x00350x00370x00370x004C0x0057
NtCreateThreadEx               0x01810x0058
NtCreateTimer0x00250x00250x00250x00250x002F0x002F0x002F0x002F0x002F0x00360x00360x00360x00360x00380x00380x004D0x0059
NtCreateToken0x00260x00260x00260x00260x00300x00300x00300x00300x00300x00370x00370x00370x00370x00390x00390x004E0x005A
NtCreateTransaction               0x004F0x005B
NtCreateTransactionManager               0x00620x005C
NtCreateUserProcess                0x005D
NtCreateWaitablePort    0x00310x00310x00310x00310x00310x00380x00380x00380x00380x003A0x003A0x00720x005E
NtCreateWinStation 0x00D3               
NtCreateWorkerFactory               0x017A0x005F
NtDebugActiveProcess         0x00390x00390x00390x00390x003B0x003B0x00730x0060
NtDebugContinue         0x003A0x003A0x003A0x003A0x003C0x003C0x00740x0061
NtDelayExecution0x00270x00270x00270x00270x00320x00320x00320x00320x00320x003B0x003B0x003B0x003B0x003D0x003D0x00750x0062
NtDeleteAtom0x00280x00280x00280x00280x00330x00330x00330x00330x00330x003C0x003C0x003C0x003C0x003E0x003E0x00760x0063
NtDeleteBootEntry         0x003D0x003D0x003D 0x003F0x003F0x00770x0064
NtDeleteDriverEntry             0x00400x00400x00780x0065
NtDeleteFile0x00290x00290x00290x00290x00340x00340x00340x00340x00340x003E0x003E0x003E0x003E0x00410x00410x00790x0066
NtDeleteKey0x002A0x002A0x002A0x002A0x00350x00350x00350x00350x00350x003F0x003F0x003F0x003F0x00420x00420x007A0x0067
NtDeleteObjectAuditAlarm0x002B0x002B0x002B0x002B0x00360x00360x00360x00360x00360x00400x00400x00400x00400x00430x00430x007C0x0068
NtDeletePrivateNamespace               0x007B0x0069
NtDeleteValueKey0x002C0x002C0x002C0x002C0x00370x00370x00370x00370x00370x00410x00410x00410x00410x00440x00440x007D0x006A
NtDeviceIoControlFile0x002D0x002D0x002D0x002D0x00380x00380x00380x00380x00380x00420x00420x00420x00420x00450x00450x007E0x006B
NtDisableLastKnownGood                0x006C
NtDisplayString0x002E0x002E0x002E0x002E0x00390x00390x00390x00390x00390x00430x00430x00430x00430x00460x00460x007F0x006D
NtDrawText                0x006E
NtDuplicateObject0x002F0x002F0x002F0x002F0x003A0x003A0x003A0x003A0x003A0x00440x00440x00440x00440x00470x00470x00800x006F
NtDuplicateToken0x00300x00300x00300x00300x003B0x003B0x003B0x003B0x003B0x00450x00450x00450x00450x00480x00480x00810x0070
NtEnableLastKnownGood                0x0071
NtEnumerateBootEntries         0x00460x00460x00460x00090x00490x00490x00820x0072
NtEnumerateDriverEntries             0x004A0x004A0x00830x0073
NtEnumerateKey0x00310x00310x00310x00310x003C0x003C0x003C0x003C0x003C0x00470x00470x00470x00470x004B0x004B0x00840x0074
NtEnumerateSystemEnvironmentValuesEx         0x00480x00480x00480x00480x004C0x004C0x00850x0075
NtEnumerateTransactionObject                0x0076
NtEnumerateValueKey0x00320x00320x00320x00320x003D0x003D0x003D0x003D0x003D0x00490x00490x00490x00490x004D0x004D0x00860x0077
NtExtendSection0x00330x00330x00330x00330x003E0x003E0x003E0x003E0x003E0x004A0x004A0x004A0x004A0x004E0x004E0x00870x0078
NtFilterToken    0x003F0x003F0x003F0x003F0x003F0x004B0x004B0x004B0x004B0x004F0x004F0x00880x0079
NtFindAtom0x00340x00340x00340x00340x00400x00400x00400x00400x00400x004C0x004C0x004C0x004C0x00500x00500x00890x007A
NtFlushBuffersFile0x00350x00350x00350x00350x00410x00410x00410x00410x00410x004D0x004D0x004D0x004D0x00510x00510x008A0x007B
NtFlushInstallUILanguage               0x01890x007C
NtFlushInstructionCache0x00360x00360x00360x00360x00420x00420x00420x00420x00420x004E0x004E0x004E0x004E0x00520x00520x008B0x007D
NtFlushKey0x00370x00370x00370x00370x00430x00430x00430x00430x00430x004F0x004F0x004F0x004F0x00530x00530x008C0x007E
NtFlushProcessWriteBuffers               0x008D0x007F
NtFlushVirtualMemory0x00380x00380x00380x00380x00440x00440x00440x00440x00440x00500x00500x00500x00500x00540x00540x008E0x0080
NtFlushWriteBuffer0x00390x00390x00390x00390x00450x00450x00450x00450x00450x00510x00510x00510x00510x00550x00550x008F0x0081
NtFreeUserPhysicalPages    0x00460x00460x00460x00460x00460x00520x00520x00520x00520x00560x00560x00900x0082
NtFreeVirtualMemory0x003A0x003A0x003A0x003A0x00470x00470x00470x00470x00470x00530x00530x00530x00530x00570x00570x00910x0083
NtFreezeRegistry               0x00920x0084
NtFreezeTransactions               0x00930x0085
NtFsControlFile0x003B0x003B0x003B0x003B0x00480x00480x00480x00480x00480x00540x00540x00540x00540x00580x00580x00940x0086
NtGetContextThread0x003C0x003C0x003C0x003C0x00490x00490x00490x00490x00490x00550x00550x00550x00550x00590x00590x00950x0087
NtGetCurrentProcessorNumber             0x01260x01260x016E0x0088
NtGetDevicePowerState    0x004A0x004A0x004A0x004A0x004A0x00560x00560x00560x00560x005A0x005A0x00960x0089
NtGetMUILicenseInfo               0x0186 
NtGetMUIRegistryInfo               0x018A0x008A
NtGetNextProcess               0x01700x008B
NtGetNextThread               0x01710x008C
NtGetNlsSectionPtr               0x00970x008D
NtGetNotificationResourceManager               0x006B0x008E
NtGetPlugPlayEvent0x003D0x003D0x003D0x003D0x004B0x004B0x004B0x004B0x004B0x00570x00570x00570x00570x005B0x005B0x00980x008F
NtGetTickCount0x003E0x003E0x003E0x003E0x004C0x004C0x004C0x004C0x004C        
NtGetWriteWatch    0x004D0x004D0x004D0x004D0x004D0x00580x00580x00580x00580x005C0x005C0x00990x0090
NtImpersonateAnonymousToken    0x004E0x004E0x004E0x004E0x004E0x00590x00590x00590x00590x005D0x005D0x009A0x0091
NtImpersonateClientOfPort0x003F0x003F0x003F0x003F0x004F0x004F0x004F0x004F0x004F0x005A0x005A0x005A0x005A0x005E0x005E0x009B0x0092
NtImpersonateThread0x00400x00400x00400x00400x00500x00500x00500x00500x00500x005B0x005B0x005B0x005B0x005F0x005F0x009C0x0093
NtInitializeNlsFiles               0x009D0x0094
NtInitializeRegistry0x00410x00410x00410x00410x00510x00510x00510x00510x00510x005C0x005C0x005C0x005C0x00600x00600x009E0x0095
NtInitiatePowerAction    0x00520x00520x00520x00520x00520x005D0x005D0x005D0x005D0x00610x00610x009F0x0096
NtIsProcessInJob         0x005E0x005E0x005E0x005E0x00620x00620x00A00x0097
NtIsSystemResumeAutomatic    0x00530x00530x00530x00530x00530x005F0x005F0x005F0x005F0x00630x00630x00A10x0098
NtIsUILanguageComitted               0x01880x0099
NtListTransactions               0x0185 
NtListenChannel0x00CE0x00CD0x00CD0x00CD0x00F20x00F20x00F20x00F20x00F2        
NtListenPort0x00420x00420x00420x00420x00540x00540x00540x00540x00540x00600x00600x00600x00600x00640x00640x00A20x009A
NtLoadDriver0x00430x00430x00430x00430x00550x00550x00550x00550x00550x00610x00610x00610x00610x00650x00650x00A30x009B
NtLoadKey0x00440x00440x00440x00440x00560x00560x00560x00560x00560x00620x00620x00620x00620x00660x00660x00A40x009C
NtLoadKey20x00450x00450x00450x00450x00570x00570x00570x00570x00570x00630x00630x00630x00630x00670x00670x00A50x009D
NtLoadKeyEx             0x00680x00680x00A60x009E
NtLockFile0x00460x00460x00460x00460x00580x00580x00580x00580x00580x00640x00640x00640x00640x00690x00690x00A70x009F
NtLockProductActivationKeys         0x00650x00650x00650x00650x006A0x006A0x00A80x00A0
NtLockRegistryKey         0x00660x00660x00660x00660x006B0x006B0x00A90x00A1
NtLockVirtualMemory0x00470x00470x00470x00470x00590x00590x00590x00590x00590x00670x00670x00670x00670x006C0x006C0x00AA0x00A2
NtMakePermanentObject         0x00680x00680x00680x00680x006D0x006D0x00AB0x00A3
NtMakeTemporaryObject0x00480x00480x00480x00480x005A0x005A0x005A0x005A0x005A0x00690x00690x00690x00690x006E0x006E0x00AC0x00A4
NtMapCMFModule               0x01840x00A5
NtMapUserPhysicalPages    0x005B0x005B0x005B0x005B0x005B0x006A0x006A0x006A0x006A0x006F0x006F0x00AD0x00A6
NtMapUserPhysicalPagesScatter    0x005C0x005C0x005C0x005C0x005C0x006B0x006B0x006B0x006B0x00700x00700x00AE0x00A7
NtMapViewOfSection0x00490x00490x00490x00490x005D0x005D0x005D0x005D0x005D0x006C0x006C0x006C0x006C0x00710x00710x00AF0x00A8
NtMarshallTransaction               0x0177 
NtModifyBootEntry         0x006D0x006D0x006D0x00150x00720x00720x00B00x00A9
NtModifyDriverEntry             0x00730x00730x00B10x00AA
NtNotifyChangeDirectoryFile0x004A0x004A0x004A0x004A0x005E0x005E0x005E0x005E0x005E0x006E0x006E0x006E0x006E0x00740x00740x00B20x00AB
NtNotifyChangeKey0x004B0x004B0x004B0x004B0x005F0x005F0x005F0x005F0x005F0x006F0x006F0x006F0x006F0x00750x00750x00B30x00AC
NtNotifyChangeMultipleKeys    0x00600x00600x00600x00600x00600x00700x00700x00700x00700x00760x00760x00B40x00AD
NtNotifyChangeSession                0x00AE
NtOpenChannel0x00CF0x00CE0x00CE0x00CE0x00F30x00F30x00F30x00F30x00F3        
NtOpenDirectoryObject0x004C0x004C0x004C0x004C0x00610x00610x00610x00610x00610x00710x00710x00710x00710x00770x00770x00B50x00AF
NtOpenEnlistment               0x006E0x00B0
NtOpenEvent0x004D0x004D0x004D0x004D0x00620x00620x00620x00620x00620x00720x00720x00720x00720x00780x00780x00B60x00B1
NtOpenEventPair0x004E0x004E0x004E0x004E0x00630x00630x00630x00630x00630x00730x00730x00730x00730x00790x00790x00B70x00B2
NtOpenFile0x004F0x004F0x004F0x004F0x00640x00640x00640x00640x00640x00740x00740x00740x00740x007A0x007A0x00B80x00B3
NtOpenIoCompletion0x00500x00500x00500x00500x00650x00650x00650x00650x00650x00750x00750x00750x00750x007B0x007B0x00B90x00B4
NtOpenJobObject    0x00660x00660x00660x00660x00660x00760x00760x00760x00760x007C0x007C0x00BA0x00B5
NtOpenKey0x00510x00510x00510x00510x00670x00670x00670x00670x00670x00770x00770x00770x00770x007D0x007D0x00BB0x00B6
NtOpenKeyEx                0x00B7
NtOpenKeyTransacted                0x00B9
NtOpenKeyTransactedEx                0x00BA
NtOpenKeyedEvent         0x01180x01180x01180x01180x01220x01220x016A0x00B8
NtOpenMutant0x00520x00520x00520x00520x00680x00680x00680x00680x00680x00780x00780x00780x00780x007E0x007E0x00BC0x00BB
NtOpenObjectAuditAlarm0x00530x00530x00530x00530x00690x00690x00690x00690x00690x00790x00790x00790x00790x007F0x007F0x00BE0x00BC
NtOpenPrivateNamespace               0x00BD0x00BD
NtOpenProcess0x00540x00540x00540x00540x006A0x006A0x006A0x006A0x006A0x007A0x007A0x007A0x007A0x00800x00800x00BF0x00BE
NtOpenProcessToken0x00550x00550x00550x00550x006B0x006B0x006B0x006B0x006B0x007B0x007B0x007B0x007B0x00810x00810x00C00x00BF
NtOpenProcessTokenEx         0x007C0x007C0x007C0x007C0x00820x00820x00C10x00C0
NtOpenResourceManager               0x006A0x00C1
NtOpenSection0x00560x00560x00560x00560x006C0x006C0x006C0x006C0x006C0x007D0x007D0x007D0x007D0x00830x00830x00C20x00C2
NtOpenSemaphore0x00570x00570x00570x00570x006D0x006D0x006D0x006D0x006D0x007E0x007E0x007E0x007E0x00840x00840x00C30x00C3
NtOpenSession               0x00C40x00C4
NtOpenSymbolicLinkObject0x00580x00580x00580x00580x006E0x006E0x006E0x006E0x006E0x007F0x007F0x007F0x007F0x00850x00850x00C50x00C5
NtOpenThread0x00590x00590x00590x00590x006F0x006F0x006F0x006F0x006F0x00800x00800x00800x00800x00860x00860x00C60x00C6
NtOpenThreadToken0x005A0x005A0x005A0x005A0x00700x00700x00700x00700x00700x00810x00810x00810x00810x00870x00870x00C70x00C7
NtOpenThreadTokenEx         0x00820x00820x00820x00820x00880x00880x00C80x00C8
NtOpenTimer0x005B0x005B0x005B0x005B0x00710x00710x00710x00710x00710x00830x00830x00830x00830x00890x00890x00C90x00C9
NtOpenTransaction               0x00500x00CA
NtOpenTransactionManager               0x00630x00CB
NtOpenWinStation 0x00D4               
NtPlugPlayControl0x005C0x005C0x005C0x005C0x00720x00720x00720x00720x00720x00840x00840x00840x00840x008A0x008A0x00CA0x00CC
NtPowerInformation    0x00730x00730x00730x00730x00730x00850x00850x00850x00850x008B0x008B0x00CB0x00CD
NtPrePrepareComplete               0x005B0x00D0
NtPrePrepareEnlistment               0x00530x00D1
NtPrepareComplete               0x005C0x00CE
NtPrepareEnlistment               0x00540x00CF
NtPrivilegeCheck0x005D0x005D0x005D0x005D0x00740x00740x00740x00740x00740x00860x00860x00860x00860x008C0x008C0x00CC0x00D2
NtPrivilegeObjectAuditAlarm0x005F0x005F0x005F0x005F0x00760x00760x00760x00760x00760x00870x00870x00870x00870x008D0x008D0x00CD0x00D4
NtPrivilegedServiceAuditAlarm0x005E0x005E0x005E0x005E0x00750x00750x00750x00750x00750x00880x00880x00880x00880x008E0x008E0x00CE0x00D3
NtPropagationComplete               0x01780x00D5
NtPropagationFailed               0x01790x00D6
NtProtectVirtualMemory0x00600x00600x00600x00600x00770x00770x00770x00770x00770x00890x00890x00890x00890x008F0x008F0x00CF0x00D7
NtPullTransaction               0x0176 
NtPulseEvent0x00610x00610x00610x00610x00780x00780x00780x00780x00780x008A0x008A0x008A0x008A0x00900x00900x00D00x00D8
NtQueryAttributesFile0x00630x00630x00630x00630x007A0x007A0x007A0x007A0x007A0x008B0x008B0x008B0x008B0x00910x00910x00D10x00D9
NtQueryBootEntryOrder         0x008C0x008C0x008C 0x00920x00920x00D20x00DA
NtQueryBootOptions         0x008D0x008D0x008D 0x00930x00930x00D30x00DB
NtQueryDebugFilterState         0x008E0x008E0x008E0x008E0x00940x00940x00D40x00DC
NtQueryDefaultLocale0x00640x00640x00640x00640x007B0x007B0x007B0x007B0x007B0x008F0x008F0x008F0x008F0x00950x00950x00D50x00DD
NtQueryDefaultUILanguage    0x007C0x007C0x007C0x007C0x007C0x00900x00900x00900x00900x00960x00960x00D60x00DE
NtQueryDirectoryFile0x00650x00650x00650x00650x007D0x007D0x007D0x007D0x007D0x00910x00910x00910x00910x00970x00970x00D70x00DF
NtQueryDirectoryObject0x00660x00660x00660x00660x007E0x007E0x007E0x007E0x007E0x00920x00920x00920x00920x00980x00980x00D80x00E0
NtQueryDriverEntryOrder             0x00990x00990x00D90x00E1
NtQueryEaFile0x00670x00670x00670x00670x007F0x007F0x007F0x007F0x007F0x00930x00930x00930x00930x009A0x009A0x00DA0x00E2
NtQueryEvent0x00680x00680x00680x00680x00800x00800x00800x00800x00800x00940x00940x00940x00940x009B0x009B0x00DB0x00E3
NtQueryFullAttributesFile0x00690x00690x00690x00690x00810x00810x00810x00810x00810x00950x00950x00950x00950x009C0x009C0x00DC0x00E4
NtQueryInformationAtom0x00620x00620x00620x00620x00790x00790x00790x00790x00790x00960x00960x00960x00960x009D0x009D0x00DD0x00E5
NtQueryInformationEnlistment               0x00700x00E6
NtQueryInformationFile0x006A0x006A0x006A0x006A0x00820x00820x00820x00820x00820x00970x00970x00970x00970x009E0x009E0x00DE0x00E7
NtQueryInformationJobObject    0x00830x00830x00830x00830x00830x00980x00980x00980x00980x009F0x009F0x00DF0x00E8
NtQueryInformationPort0x006C0x006C0x006C0x006C0x00850x00850x00850x00850x00850x00990x00990x00990x00990x00A00x00A00x00E00x00E9
NtQueryInformationProcess0x006D0x006D0x006D0x006D0x00860x00860x00860x00860x00860x009A0x009A0x009A0x009A0x00A10x00A10x00E10x00EA
NtQueryInformationResourceManager               0x006C0x00EB
NtQueryInformationThread0x006E0x006E0x006E0x006E0x00870x00870x00870x00870x00870x009B0x009B0x009B0x009B0x00A20x00A20x00E20x00EC
NtQueryInformationToken0x006F0x006F0x006F0x006F0x00880x00880x00880x00880x00880x009C0x009C0x009C0x009C0x00A30x00A30x00E30x00ED
NtQueryInformationTransaction               0x00510x00EE
NtQueryInformationTransactionManager               0x00520x00EF
NtQueryInformationWorkerFactory               0x017E0x00F0
NtQueryInstallUILanguage    0x00890x00890x00890x00890x00890x009D0x009D0x009D0x009D0x00A40x00A40x00E40x00F1
NtQueryIntervalProfile0x00700x00700x00700x00700x008A0x008A0x008A0x008A0x008A0x009E0x009E0x009E0x009E0x00A50x00A50x00E50x00F2
NtQueryIoCompletion0x006B0x006B0x006B0x006B0x00840x00840x00840x00840x00840x009F0x009F0x009F0x009F0x00A60x00A60x00E60x00F3
NtQueryKey0x00710x00710x00710x00710x008B0x008B0x008B0x008B0x008B0x00A00x00A00x00A00x00A00x00A70x00A70x00E70x00F4
NtQueryLicenseValue               0x01830x00F5
NtQueryMultipleValueKey0x00720x00720x00720x00720x008C0x008C0x008C0x008C0x008C0x00A10x00A10x00A10x00A10x00A80x00A80x00E80x00F6
NtQueryMutant0x00730x00730x00730x00730x008D0x008D0x008D0x008D0x008D0x00A20x00A20x00A20x00A20x00A90x00A90x00E90x00F7
NtQueryObject0x00740x00740x00740x00740x008E0x008E0x008E0x008E0x008E0x00A30x00A30x00A30x00A30x00AA0x00AA0x00EA0x00F8
NtQueryOleDirectoryFile0x00750x00750x00750x0075             
NtQueryOpenSubKeys    0x008F0x008F0x008F0x008F0x008F0x00A40x00A40x00A40x00A40x00AB0x00AB0x00EB0x00F9
NtQueryOpenSubKeysEx             0x00AC0x00AC0x00EC0x00FA
NtQueryPerformanceCounter0x00760x00760x00760x00760x00900x00900x00900x00900x00900x00A50x00A50x00A50x00A50x00AD0x00AD0x00ED0x00FB
NtQueryPortInformationProcess         0x011B0x011B0x011B0x011B0x01250x01250x016D0x00FC
NtQueryQuotaInformationFile    0x00910x00910x00910x00910x00910x00A60x00A60x00A60x00A60x00AE0x00AE0x00EE0x00FD
NtQuerySection0x00770x00770x00770x00770x00920x00920x00920x00920x00920x00A70x00A70x00A70x00A70x00AF0x00AF0x00EF0x00FE
NtQuerySecurityAttributesToken                0x00FF
NtQuerySecurityObject0x00780x00780x00780x00780x00930x00930x00930x00930x00930x00A80x00A80x00A80x00A80x00B00x00B00x00F00x0100
NtQuerySemaphore0x00790x00790x00790x00790x00940x00940x00940x00940x00940x00A90x00A90x00A90x00A90x00B10x00B10x00F10x0101
NtQuerySymbolicLinkObject0x007A0x007A0x007A0x007A0x00950x00950x00950x00950x00950x00AA0x00AA0x00AA0x00AA0x00B20x00B20x00F20x0102
NtQuerySystemEnvironmentValue0x007B0x007B0x007B0x007B0x00960x00960x00960x00960x00960x00AB0x00AB0x00AB0x00AB0x00B30x00B30x00F30x0103
NtQuerySystemEnvironmentValueEx         0x00AC0x00AC0x00AC0x00AC0x00B40x00B40x00F40x0104
NtQuerySystemInformation0x007C0x007C0x007C0x007C0x00970x00970x00970x00970x00970x00AD0x00AD0x00AD0x00AD0x00B50x00B50x00F50x0105
NtQuerySystemInformationEx                0x0106
NtQuerySystemTime0x007D0x007D0x007D0x007D0x00980x00980x00980x00980x00980x00AE0x00AE0x00AE0x00AE0x00B60x00B60x00F60x0107
NtQueryTimer0x007E0x007E0x007E0x007E0x00990x00990x00990x00990x00990x00AF0x00AF0x00AF0x00AF0x00B70x00B70x00F70x0108
NtQueryTimerResolution0x007F0x007F0x007F0x007F0x009A0x009A0x009A0x009A0x009A0x00B00x00B00x00B00x00B00x00B80x00B80x00F80x0109
NtQueryValueKey0x00800x00800x00800x00800x009B0x009B0x009B0x009B0x009B0x00B10x00B10x00B10x00B10x00B90x00B90x00F90x010A
NtQueryVirtualMemory0x00810x00810x00810x00810x009C0x009C0x009C0x009C0x009C0x00B20x00B20x00B20x00B20x00BA0x00BA0x00FA0x010B
NtQueryVolumeInformationFile0x00820x00820x00820x00820x009D0x009D0x009D0x009D0x009D0x00B30x00B30x00B30x00B30x00BB0x00BB0x00FB0x010C
NtQueryWinStationInformation 0x00D5               
NtQueueApcThread0x00830x00830x00830x00830x009E0x009E0x009E0x009E0x009E0x00B40x00B40x00B40x00B40x00BC0x00BC0x00FC0x010D
NtQueueApcThreadEx                0x010E
NtRaiseException0x00840x00840x00840x00840x009F0x009F0x009F0x009F0x009F0x00B50x00B50x00B50x00B50x00BD0x00BD0x00FD0x010F
NtRaiseHardError0x00850x00850x00850x00850x00A00x00A00x00A00x00A00x00A00x00B60x00B60x00B60x00B60x00BE0x00BE0x00FE0x0110
NtReadFile0x00860x00860x00860x00860x00A10x00A10x00A10x00A10x00A10x00B70x00B70x00B70x00B70x00BF0x00BF0x00FF0x0111
NtReadFileScatter0x00870x00870x00870x00870x00A20x00A20x00A20x00A20x00A20x00B80x00B80x00B80x00B80x00C00x00C00x01000x0112
NtReadOnlyEnlistment               0x00560x0113
NtReadRequestData0x00880x00880x00880x00880x00A30x00A30x00A30x00A30x00A30x00B90x00B90x00B90x00B90x00C10x00C10x01010x0114
NtReadVirtualMemory0x00890x00890x00890x00890x00A40x00A40x00A40x00A40x00A40x00BA0x00BA0x00BA0x00BA0x00C20x00C20x01020x0115
NtRecoverEnlistment               0x00660x0116
NtRecoverResourceManager               0x00670x0117
NtRecoverTransactionManager               0x00680x0118
NtRegisterProtocolAddressInformation               0x01750x0119
NtRegisterThreadTerminatePort0x008A0x008A0x008A0x008A0x00A50x00A50x00A50x00A50x00A50x00BB0x00BB0x00BB0x00BB0x00C30x00C30x01030x011A
NtReleaseKeyedEvent         0x01190x01190x01190x01190x01230x01230x016B0x011B
NtReleaseMutant0x008B0x008B0x008B0x008B0x00A60x00A60x00A60x00A60x00A60x00BC0x00BC0x00BC0x00BC0x00C40x00C40x01040x011C
NtReleaseSemaphore0x008C0x008C0x008C0x008C0x00A70x00A70x00A70x00A70x00A70x00BD0x00BD0x00BD0x00BD0x00C50x00C50x01050x011D
NtReleaseWorkerFactoryWorker               0x017B0x011E
NtRemoveIoCompletion0x008D0x008D0x008D0x008D0x00A80x00A80x00A80x00A80x00A80x00BE0x00BE0x00BE0x00BE0x00C60x00C60x01060x011F
NtRemoveIoCompletionEx               0x01740x0120
NtRemoveProcessDebug         0x00BF0x00BF0x00BF0x00BF0x00C70x00C70x01070x0121
NtRenameKey         0x00C00x00C00x00C00x00C00x00C80x00C80x01080x0122
NtRenameTransactionManager               0x00640x0123
NtReplaceKey0x008E0x008E0x008E0x008E0x00A90x00A90x00A90x00A90x00A90x00C10x00C10x00C10x00C10x00C90x00C90x01090x0124
NtReplacePartitionUnit                0x0125
NtReplyPort0x008F0x008F0x008F0x008F0x00AA0x00AA0x00AA0x00AA0x00AA0x00C20x00C20x00C20x00C20x00CA0x00CA0x010A0x0126
NtReplyWaitReceivePort0x00900x00900x00900x00900x00AB0x00AB0x00AB0x00AB0x00AB0x00C30x00C30x00C30x00C30x00CB0x00CB0x010B0x0127
NtReplyWaitReceivePortEx    0x00AC0x00AC0x00AC0x00AC0x00AC0x00C40x00C40x00C40x00C40x00CC0x00CC0x010C0x0128
NtReplyWaitReplyPort0x00910x00910x00910x00910x00AD0x00AD0x00AD0x00AD0x00AD0x00C50x00C50x00C50x00C50x00CD0x00CD0x010D0x0129
NtReplyWaitSendChannel0x00D00x00CF0x00CF0x00CF0x00F40x00F40x00F40x00F40x00F4        
NtRequestDeviceWakeup    0x00AE0x00AE0x00AE0x00AE0x00AE0x00C60x00C60x00C60x00C60x00CE0x00CE0x010E 
NtRequestPort0x00920x00920x00920x00920x00AF0x00AF0x00AF0x00AF0x00AF0x00C70x00C70x00C70x00C70x00CF0x00CF0x010F0x012A
NtRequestWaitReplyPort0x00930x00930x00930x00930x00B00x00B00x00B00x00B00x00B00x00C80x00C80x00C80x00C80x00D00x00D00x01100x012B
NtRequestWakeupLatency    0x00B10x00B10x00B10x00B10x00B10x00C90x00C90x00C90x00C90x00D10x00D10x0111 
NtResetEvent0x00940x00940x00940x00940x00B20x00B20x00B20x00B20x00B20x00CA0x00CA0x00CA0x00CA0x00D20x00D20x01120x012C
NtResetWriteWatch    0x00B30x00B30x00B30x00B30x00B30x00CB0x00CB0x00CB0x00CB0x00D30x00D30x01130x012D
NtRestoreKey0x00950x00950x00950x00950x00B40x00B40x00B40x00B40x00B40x00CC0x00CC0x00CC0x00CC0x00D40x00D40x01140x012E
NtResumeProcess         0x00CD0x00CD0x00CD0x00CD0x00D50x00D50x01150x012F
NtResumeThread0x00960x00960x00960x00960x00B50x00B50x00B50x00B50x00B50x00CE0x00CE0x00CE0x00CE0x00D60x00D60x01160x0130
NtRollbackComplete               0x00570x0131
NtRollbackEnlistment               0x00580x0132
NtRollbackSavepointTransaction               0x011C 
NtRollbackTransaction               0x005A0x0133
NtRollforwardTransactionManager               0x00650x0134
NtSaveKey0x00970x00970x00970x00970x00B60x00B60x00B60x00B60x00B60x00CF0x00CF0x00CF0x00CF0x00D70x00D70x01170x0135
NtSaveKeyEx         0x00D00x00D00x00D00x00D00x00D80x00D80x01180x0136
NtSaveMergedKeys    0x00B70x00B70x00B70x00B70x00B70x00D10x00D10x00D10x00D10x00D90x00D90x01190x0137
NtSavepointComplete               0x011E 
NtSavepointTransaction               0x011D 
NtSecureConnectPort    0x00B80x00B80x00B80x00B80x00B80x00D20x00D20x00D20x00D20x00DA0x00DA0x011F0x0138
NtSendWaitReplyChannel0x00D10x00D00x00D00x00D00x00F50x00F50x00F50x00F50x00F5        
NtSerializeBoot                0x0139
NtSetBootEntryOrder         0x00D30x00D30x00D3 0x00DB0x00DB0x01200x013A
NtSetBootOptions         0x00D40x00D40x00D4 0x00DC0x00DC0x01210x013B
NtSetContextChannel0x00D20x00D10x00D10x00D10x00F60x00F60x00F60x00F60x00F6        
NtSetContextThread0x00990x00990x00990x00990x00BA0x00BA0x00BA0x00BA0x00BA0x00D50x00D50x00D50x00D50x00DD0x00DD0x01220x013C
NtSetDebugFilterState         0x00D60x00D60x00D60x00D60x00DE0x00DE0x01230x013D
NtSetDefaultHardErrorPort0x009A0x009A0x009A0x009A0x00BB0x00BB0x00BB0x00BB0x00BB0x00D70x00D70x00D70x00D70x00DF0x00DF0x01240x013E
NtSetDefaultLocale0x009B0x009B0x009B0x009B0x00BC0x00BC0x00BC0x00BC0x00BC0x00D80x00D80x00D80x00D80x00E00x00E00x01250x013F
NtSetDefaultUILanguage    0x00BD0x00BD0x00BD0x00BD0x00BD0x00D90x00D90x00D90x00D90x00E10x00E10x01260x0140
NtSetDriverEntryOrder             0x00E20x00E20x01270x0141
NtSetEaFile0x009C0x009C0x009C0x009C0x00BE0x00BE0x00BE0x00BE0x00BE0x00DA0x00DA0x00DA0x00DA0x00E30x00E30x01280x0142
NtSetEvent0x009D0x009D0x009D0x009D0x00BF0x00BF0x00BF0x00BF0x00BF0x00DB0x00DB0x00DB0x00DB0x00E40x00E40x01290x0143
NtSetEventBoostPriority         0x00DC0x00DC0x00DC0x00DC0x00E50x00E50x012A0x0144
NtSetHighEventPair0x009E0x009E0x009E0x009E0x00C00x00C00x00C00x00C00x00C00x00DD0x00DD0x00DD0x00DD0x00E60x00E60x012B0x0145
NtSetHighWaitLowEventPair0x009F0x009F0x009F0x009F0x00C10x00C10x00C10x00C10x00C10x00DE0x00DE0x00DE0x00DE0x00E70x00E70x012C0x0146
NtSetHighWaitLowThread0x00A00x00A00x00A00x00A0             
NtSetInformationDebugObject         0x00DF0x00DF0x00DF0x00DF0x00E80x00E80x012D0x0147
NtSetInformationEnlistment               0x006F0x0148
NtSetInformationFile0x00A10x00A10x00A10x00A10x00C20x00C20x00C20x00C20x00C20x00E00x00E00x00E00x00E00x00E90x00E90x012E0x0149
NtSetInformationJobObject    0x00C30x00C30x00C30x00C30x00C30x00E10x00E10x00E10x00E10x00EA0x00EA0x012F0x014A
NtSetInformationKey0x00A20x00A20x00A20x00A20x00C40x00C40x00C40x00C40x00C40x00E20x00E20x00E20x00E20x00EB0x00EB0x01300x014B
NtSetInformationObject0x00A30x00A30x00A30x00A30x00C50x00C50x00C50x00C50x00C50x00E30x00E30x00E30x00E30x00EC0x00EC0x01310x014C
NtSetInformationProcess0x00A40x00A40x00A40x00A40x00C60x00C60x00C60x00C60x00C60x00E40x00E40x00E40x00E40x00ED0x00ED0x01320x014D
NtSetInformationResourceManager               0x00610x014E
NtSetInformationThread0x00A50x00A50x00A50x00A50x00C70x00C70x00C70x00C70x00C70x00E50x00E50x00E50x00E50x00EE0x00EE0x01330x014F
NtSetInformationToken0x00A60x00A60x00A60x00A60x00C80x00C80x00C80x00C80x00C80x00E60x00E60x00E60x00E60x00EF0x00EF0x01340x0150
NtSetInformationTransaction               0x005F0x0151
NtSetInformationTransactionManager               0x00600x0152
NtSetInformationWorkerFactory               0x017D0x0153
NtSetIntervalProfile0x00A70x00A70x00A70x00A70x00C90x00C90x00C90x00C90x00C90x00E70x00E70x00E70x00E70x00F00x00F00x01350x0154
NtSetIoCompletion0x00980x00980x00980x00980x00B90x00B90x00B90x00B90x00B90x00E80x00E80x00E80x00E80x00F10x00F10x01360x0155
NtSetIoCompletionEx                0x0156
NtSetLdtEntries0x00A80x00A80x00A80x00A80x00CA0x00CA0x00CA0x00CA0x00CA0x00E90x00E90x00E90x00E90x00F20x00F20x01370x0157
NtSetLowEventPair0x00A90x00A90x00A90x00A90x00CB0x00CB0x00CB0x00CB0x00CB0x00EA0x00EA0x00EA0x00EA0x00F30x00F30x01380x0158
NtSetLowWaitHighEventPair0x00AA0x00AA0x00AA0x00AA0x00CC0x00CC0x00CC0x00CC0x00CC0x00EB0x00EB0x00EB0x00EB0x00F40x00F40x01390x0159
NtSetLowWaitHighThread0x00AB0x00AB0x00AB0x00AB             
NtSetQuotaInformationFile    0x00CD0x00CD0x00CD0x00CD0x00CD0x00EC0x00EC0x00EC0x00EC0x00F50x00F50x013A0x015A
NtSetSecurityObject0x00AC0x00AC0x00AC0x00AC0x00CE0x00CE0x00CE0x00CE0x00CE0x00ED0x00ED0x00ED0x00ED0x00F60x00F60x013B0x015B
NtSetSystemEnvironmentValue0x00AD0x00AD0x00AD0x00AD0x00CF0x00CF0x00CF0x00CF0x00CF0x00EE0x00EE0x00EE0x00EE0x00F70x00F70x013C0x015C
NtSetSystemEnvironmentValueEx         0x00EF0x00EF0x00EF 0x00F80x00F80x013D0x015D
NtSetSystemInformation0x00AE0x00AE0x00AE0x00AE0x00D00x00D00x00D00x00D00x00D00x00F00x00F00x00F00x00F00x00F90x00F90x013E0x015E
NtSetSystemPowerState0x00AF0x00AF0x00AF0x00AF0x00D10x00D10x00D10x00D10x00D10x00F10x00F10x00F10x00F10x00FA0x00FA0x013F0x015F
NtSetSystemTime0x00B00x00B00x00B00x00B00x00D20x00D20x00D20x00D20x00D20x00F20x00F20x00F20x00F20x00FB0x00FB0x01400x0160
NtSetThreadExecutionState    0x00D30x00D30x00D30x00D30x00D30x00F30x00F30x00F30x00F30x00FC0x00FC0x01410x0161
NtSetTimer0x00B10x00B10x00B10x00B10x00D40x00D40x00D40x00D40x00D40x00F40x00F40x00F40x00F40x00FD0x00FD0x01420x0162
NtSetTimerEx                0x0163
NtSetTimerResolution0x00B20x00B20x00B20x00B20x00D50x00D50x00D50x00D50x00D50x00F50x00F50x00F50x00F50x00FE0x00FE0x01430x0164
NtSetUuidSeed    0x00D60x00D60x00D60x00D60x00D60x00F60x00F60x00F60x00F60x00FF0x00FF0x01440x0165
NtSetValueKey0x00B30x00B30x00B30x00B30x00D70x00D70x00D70x00D70x00D70x00F70x00F70x00F70x00F70x01000x01000x01450x0166
NtSetVolumeInformationFile0x00B40x00B40x00B40x00B40x00D80x00D80x00D80x00D80x00D80x00F80x00F80x00F80x00F80x01010x01010x01460x0167
NtSetWinStationInformation 0x00D6               
NtShutdownSystem0x00B50x00B50x00B50x00B50x00D90x00D90x00D90x00D90x00D90x00F90x00F90x00F90x00F90x01020x01020x01470x0168
NtShutdownWorkerFactory               0x01800x0169
NtSignalAndWaitForSingleObject0x00B60x00B60x00B60x00B60x00DA0x00DA0x00DA0x00DA0x00DA0x00FA0x00FA0x00FA0x00FA0x01030x01030x01480x016A
NtSinglePhaseReject               0x005E0x016B
NtStartProfile0x00B70x00B70x00B70x00B70x00DB0x00DB0x00DB0x00DB0x00DB0x00FB0x00FB0x00FB0x00FB0x01040x01040x01490x016C
NtStartTm               0x0071 
NtStopProfile0x00B80x00B80x00B80x00B80x00DC0x00DC0x00DC0x00DC0x00DC0x00FC0x00FC0x00FC0x00FC0x01050x01050x014A0x016D
NtSuspendProcess         0x00FD0x00FD0x00FD0x00FD0x01060x01060x014B0x016E
NtSuspendThread0x00B90x00B90x00B90x00B90x00DD0x00DD0x00DD0x00DD0x00DD0x00FE0x00FE0x00FE0x00FE0x01070x01070x014C0x016F
NtSystemDebugControl0x00BA0x00BA0x00BA0x00BA0x00DE0x00DE0x00DE0x00DE0x00DE0x00FF0x00FF0x00FF0x00FF0x01080x01080x014D0x0170
NtTerminateJobObject    0x00DF0x00DF0x00DF0x00DF0x00DF0x01000x01000x01000x01000x01090x01090x014E0x0171
NtTerminateProcess0x00BB0x00BB0x00BB0x00BB0x00E00x00E00x00E00x00E00x00E00x01010x01010x01010x01010x010A0x010A0x014F0x0172
NtTerminateThread0x00BC0x00BC0x00BC0x00BC0x00E10x00E10x00E10x00E10x00E10x01020x01020x01020x01020x010B0x010B0x01500x0173
NtTestAlert0x00BD0x00BD0x00BD0x00BD0x00E20x00E20x00E20x00E20x00E20x01030x01030x01030x01030x010C0x010C0x01510x0174
NtThawRegistry               0x01520x0175
NtThawTransactions               0x01530x0176
NtTraceControl               0x01550x0177
NtTraceEvent         0x01040x01040x01040x01040x010D0x010D0x01540x0178
NtTranslateFilePath         0x01050x01050x01050x01050x010E0x010E0x01560x0179
NtUmsThreadYield                0x017A
NtUnloadDriver0x00BE0x00BE0x00BE0x00BE0x00E30x00E30x00E30x00E30x00E30x01060x01060x01060x01060x010F0x010F0x01570x017B
NtUnloadKey0x00BF0x00BF0x00BF0x00BF0x00E40x00E40x00E40x00E40x00E40x01070x01070x01070x01070x01100x01100x01580x017C
NtUnloadKey2             0x01110x01110x01590x017D
NtUnloadKeyEx         0x01080x01080x01080x01080x01120x01120x015A0x017E
NtUnlockFile0x00C00x00C00x00C00x00C00x00E50x00E50x00E50x00E50x00E50x01090x01090x01090x01090x01130x01130x015B0x017F
NtUnlockVirtualMemory0x00C10x00C10x00C10x00C10x00E60x00E60x00E60x00E60x00E60x010A0x010A0x010A0x010A0x01140x01140x015C0x0180
NtUnmapViewOfSection0x00C20x00C20x00C20x00C20x00E70x00E70x00E70x00E70x00E70x010B0x010B0x010B0x010B0x01150x01150x015D0x0181
NtVdmControl0x00C30x00C30x00C30x00C30x00E80x00E80x00E80x00E80x00E80x010C0x010C0x010C0x010C0x01160x01160x015E0x0182
NtW32Call0x00CC                
NtWaitForDebugEvent         0x010D0x010D0x010D0x010D0x01170x01170x015F0x0183
NtWaitForKeyedEvent         0x011A0x011A0x011A0x011A0x01240x01240x016C0x0184
NtWaitForMultipleObjects0x00C40x00C40x00C40x00C40x00E90x00E90x00E90x00E90x00E90x010E0x010E0x010E0x010E0x01180x01180x01600x0185
NtWaitForMultipleObjects32              0x01270x016F0x0186
NtWaitForSingleObject0x00C50x00C50x00C50x00C50x00EA0x00EA0x00EA0x00EA0x00EA0x010F0x010F0x010F0x010F0x01190x01190x01610x0187
NtWaitForWorkViaWorkerFactory               0x017C0x0188
NtWaitHighEventPair0x00C60x00C60x00C60x00C60x00EB0x00EB0x00EB0x00EB0x00EB0x01100x01100x01100x01100x011A0x011A0x01620x0189
NtWaitLowEventPair0x00C70x00C70x00C70x00C70x00EC0x00EC0x00EC0x00EC0x00EC0x01110x01110x01110x01110x011B0x011B0x01630x018A
NtWorkerFactoryWorkerReady               0x017F0x018B
NtWriteErrorLogEntry 0x00D7               
NtWriteFile0x00C80x00C80x00C80x00C80x00ED0x00ED0x00ED0x00ED0x00ED0x01120x01120x01120x01120x011C0x011C0x01640x018C
NtWriteFileGather0x00C90x00C90x00C90x00C90x00EE0x00EE0x00EE0x00EE0x00EE0x01130x01130x01130x01130x011D0x011D0x01650x018D
NtWriteRequestData0x00CA0x00CA0x00CA0x00CA0x00EF0x00EF0x00EF0x00EF0x00EF0x01140x01140x01140x01140x011E0x011E0x01660x018E
NtWriteVirtualMemory0x00CB0x00CB0x00CB0x00CB0x00F00x00F00x00F00x00F00x00F00x01150x01150x01150x01150x011F0x011F0x01670x018F
NtYieldExecution0x00D30x00D20x00D20x00D20x00F70x00F70x00F70x00F70x00F70x01160x01160x01160x01160x01200x01200x01680x0190