1 NtAcceptConnectPort ZwAcceptConnectPort 24
2 NtAccessCheck ZwAccessCheck 32
3 NtAccessCheckAndAuditAlarm ZwAccessCheckAndAuditAlarm 44
5 NtAdjustGroupsToken ZwAdjustGroupsToken 24
6 NtAdjustPrivilegesToken ZwAdjustPrivilegesToken 24
7 NtAlertResumeThread ZwAlertResumeThread 8
8 NtAlertThread ZwAlertThread 4
9 NtAllocateLocallyUniqueId ZwAllocateLocallyUniqueId 4
10 NtAllocateUuids ZwAllocateUuids 12
11 NtAllocateVirtualMemory ZwAllocateVirtualMemory 24
12 NtCallbackReturn ZwCallbackReturn 12
13 NtCancelIoFile ZwCancelIoFile 8
14 NtCancelTimer ZwCancelTimer 8
15 NtClearEvent ZwClearEvent 4
17 NtCloseObjectAuditAlarm ZwCloseObjectAuditAlarm 12
18 NtCompleteConnectPort ZwCompleteConnectPort 4
19 NtConnectPort ZwConnectPort 32
20 NtContinue ZwContinue 8
21 NtCreateDirectoryObject ZwCreateDirectoryObject 12
22 NtCreateEvent ZwCreateEvent 20
23 NtCreateEventPair ZwCreateEventPair 12
24 NtCreateFile ZwCreateFile 44
25 NtCreateIoCompletion ZwCreateIoCompletion 16
26 NtCreateKey ZwCreateKey 28
27 NtCreateMailslotFile ZwCreateMailslotFile 32
28 NtCreateMutant ZwCreateMutant 16
29 NtCreateNamedPipeFile ZwCreateNamedPipeFile 56
30 NtCreatePagingFile ZwCreatePagingFile 16
31 NtCreatePort ZwCreatePort 20
32 NtCreateProcess ZwCreateProcess 32
33 NtCreateProfile ZwCreateProfile 36
34 NtCreateSection ZwCreateSection 28
35 NtCreateSemaphore ZwCreateSemaphore 20
36 NtCreateSymbolicLinkObject ZwCreateSymbolicLinkObject 16
37 NtCreateThread ZwCreateThread 32
38 NtCreateTimer ZwCreateTimer 16
39 NtCreateToken ZwCreateToken 52
40 NtCreateWaitablePort ZwCreateWaitablePort 20
41 NtDelayExecution ZwDelayExecution 8
42 NtDeleteAtom ZwDeleteAtom 4
43 NtDeleteFile ZwDeleteFile 4
44 NtDeleteKey ZwDeleteKey 4
45 NtDeleteObjectAuditAlarm ZwDeleteObjectAuditAlarm 12
46 NtDeleteValueKey ZwDeleteValueKey 8
47 NtDeviceIoControlFile ZwDeviceIoControlFile 40
48 NtDisplayString ZwDisplayString 4
49 NtDuplicateObject ZwDuplicateObject 28
50 NtDuplicateToken ZwDuplicateToken 24
51 NtEnumerateKey ZwEnumerateKey 24
52 NtEnumerateValueKey ZwEnumerateValueKey 24
53 NtExtendSection ZwExtendSection 8
54 NtFindAtom ZwFindAtom 8
55 NtFlushBuffersFile ZwFlushBuffersFile 8
56 NtFlushInstructionCache ZwFlushInstructionCache 12
57 NtFlushKey ZwFlushKey 4
58 NtFlushVirtualMemory ZwFlushVirtualMemory 16
59 NtFlushWriteBuffer ZwFlushWriteBuffer 0
60 NtFreeVirtualMemory ZwFreeVirtualMemory 16
61 NtFsControlFile ZwFsControlFile 40
62 NtGetContextThread ZwGetContextThread 8
63 NtGetPlugPlayEvent ZwGetPlugPlayEvent 16
64 NtGetTickCount ZwGetTickCount 4
65 NtImpersonateClientOfPort ZwImpersonateClientOfPort 8
66 NtImpersonateThread ZwImpersonateThread 12
67 NtInitializeRegistry ZwInitializeRegistry 4
68 NtListenPort ZwListenPort 8
69 NtLoadDriver ZwLoadDriver 4
71 NtLoadKey2 ZwLoadKey2 12
72 NtLockFile ZwLockFile 40
73 NtLockVirtualMemory ZwLockVirtualMemory 16
74 NtMakeTemporaryObject ZwMakeTemporaryObject 4
75 NtMapViewOfSection ZwMapViewOfSection 40
76 NtNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFile 36
77 NtNotifyChangeKey ZwNotifyChangeKey 40
78 NtOpenDirectoryObject ZwOpenDirectoryObject 12
79 NtOpenEvent ZwOpenEvent 12
80 NtOpenEventPair ZwOpenEventPair 12
81 NtOpenFile ZwOpenFile 24
82 NtOpenIoCompletion ZwOpenIoCompletion 12
83 NtOpenKey ZwOpenKey 12
84 NtOpenMutant ZwOpenMutant 12
85 NtOpenObjectAuditAlarm ZwOpenObjectAuditAlarm 48
86 NtOpenProcess ZwOpenProcess 16
87 NtOpenProcessToken ZwOpenProcessToken 12
88 NtOpenSection ZwOpenSection 12
89 NtOpenSemaphore ZwOpenSemaphore 12
90 NtOpenSymbolicLinkObject ZwOpenSymbolicLinkObject 12
91 NtOpenThread ZwOpenThread 16
92 NtOpenThreadToken ZwOpenThreadToken 16
93 NtOpenTimer ZwOpenTimer 12
94 NtPlugPlayControl ZwPlugPlayControl 16
95 NtPrivilegeCheck ZwPrivilegeCheck 12
96 NtPrivilegedServiceAuditAlarm ZwPrivilegedServiceAuditAlarm 20
97 NtPrivilegeObjectAuditAlarm ZwPrivilegeObjectAuditAlarm 24
98 NtProtectVirtualMemory ZwProtectVirtualMemory 20
99 NtPulseEvent ZwPulseEvent 8
100 NtQueryInformationAtom ZwQueryInformationAtom 20
101 NtQueryAttributesFile ZwQueryAttributesFile 8
102 NtQueryDefaultLocale ZwQueryDefaultLocale 8
103 NtQueryDirectoryFile ZwQueryDirectoryFile 44
104 NtQueryDirectoryObject ZwQueryDirectoryObject 28
105 NtQueryEaFile ZwQueryEaFile 36
106 NtQueryEvent ZwQueryEvent 20
107 NtQueryFullAttributesFile ZwQueryFullAttributesFile 8
108 NtQueryInformationFile ZwQueryInformationFile 20
109 NtQueryInformationPort ZwQueryInformationPort 20
110 NtQueryInformationProcess ZwQueryInformationProcess 20
111 NtQueryInformationThread ZwQueryInformationThread 20
112 NtQueryInformationToken ZwQueryInformationToken 20
113 NtQueryIntervalProfile ZwQueryIntervalProfile 8
114 NtQueryIoCompletion ZwQueryIoCompletion 20
115 NtQueryKey ZwQueryKey 20
116 NtQueryMultipleValueKey ZwQueryMultipleValueKey 24
117 NtQueryMutant ZwQueryMutant 20
118 NtQueryObject ZwQueryObject 20
119 NtQueryOleDirectoryFile ZwQueryOleDirectoryFile 44
120 NtQueryPerformanceCounter ZwQueryPerformanceCounter 8
121 NtQuerySection ZwQuerySection 20
122 NtQuerySecurityObject ZwQuerySecurityObject 20
123 NtQuerySemaphore ZwQuerySemaphore 20
124 NtQuerySymbolicLinkObject ZwQuerySymbolicLinkObject 12
125 NtQuerySystemEnvironmentValue ZwQuerySystemEnvironmentValue 16
126 NtQuerySystemInformation ZwQuerySystemInformation 16
127 NtQuerySystemTime ZwQuerySystemTime 4
128 NtQueryTimer ZwQueryTimer 20
129 NtQueryTimerResolution ZwQueryTimerResolution 12
130 NtQueryValueKey ZwQueryValueKey 24
131 NtQueryVirtualMemory ZwQueryVirtualMemory 24
132 NtQueryVolumeInformationFile ZwQueryVolumeInformationFile 20
133 NtQueueApcThread ZwQueueApcThread 20
134 NtRaiseException ZwRaiseException 12
135 NtRaiseHardError ZwRaiseHardError 24
136 NtReadFile ZwReadFile 36
137 NtReadFileScatter ZwReadFileScatter 36
138 NtReadRequestData ZwReadRequestData 24
139 NtReadVirtualMemory ZwReadVirtualMemory 20
140 NtRegisterThreadTerminatePort ZwRegisterThreadTerminatePort 4
141 NtReleaseMutant ZwReleaseMutant 8
142 NtReleaseSemaphore ZwReleaseSemaphore 12
143 NtRemoveIoCompletion ZwRemoveIoCompletion 20
144 NtReplaceKey ZwReplaceKey 12
145 NtReplyPort ZwReplyPort 8
146 NtReplyWaitReceivePort ZwReplyWaitReceivePort 16
147 NtReplyWaitReplyPort ZwReplyWaitReplyPort 8
148 NtRequestPort ZwRequestPort 8
149 NtRequestWaitReplyPort ZwRequestWaitReplyPort 12
150 NtResetEvent ZwResetEvent 8
151 NtRestoreKey ZwRestoreKey 12
152 NtResumeThread ZwResumeThread 8
153 NtSaveKey ZwSaveKey 8
154 NtSetIoCompletion ZwSetIoCompletion 20
155 NtSetContextThread ZwSetContextThread 8
156 NtSetDefaultHardErrorPort ZwSetDefaultHardErrorPort 4
157 NtSetDefaultLocale ZwSetDefaultLocale 8
158 NtSetEaFile ZwSetEaFile 16
159 NtSetEvent ZwSetEvent 8
160 NtSetHighEventPair ZwSetHighEventPair 4
161 NtSetHighWaitLowEventPair ZwSetHighWaitLowEventPair 4
162 NtSetHighWaitLowThread ZwSetHighWaitLowThread 0
163 NtSetInformationFile ZwSetInformationFile 20
164 NtSetInformationKey ZwSetInformationKey 16
165 NtSetInformationObject ZwSetInformationObject 16
166 NtSetInformationProcess ZwSetInformationProcess 16
167 NtSetInformationThread ZwSetInformationThread 16
168 NtSetInformationToken ZwSetInformationToken 16
169 NtSetIntervalProfile ZwSetIntervalProfile 8
170 NtSetLdtEntries ZwSetLdtEntries 24
171 NtSetLowEventPair ZwSetLowEventPair 4
172 NtSetLowWaitHighEventPair ZwSetLowWaitHighEventPair 4
173 NtSetLowWaitHighThread ZwSetLowWaitHighThread 0
174 NtSetSecurityObject ZwSetSecurityObject 12
175 NtSetSystemEnvironmentValue ZwSetSystemEnvironmentValue 8
176 NtSetSystemInformation ZwSetSystemInformation 12
177 NtSetSystemPowerState ZwSetSystemPowerState 12
178 NtSetSystemTime ZwSetSystemTime 8
179 NtSetTimer ZwSetTimer 28
180 NtSetTimerResolution ZwSetTimerResolution 12
181 NtSetValueKey ZwSetValueKey 24
182 NtSetVolumeInformationFile ZwSetVolumeInformationFile 20
183 NtShutdownSystem ZwShutdownSystem 4
184 NtSignalAndWaitForSingleObject ZwSignalAndWaitForSingleObject 16
185 NtStartProfile ZwStartProfile 4
186 NtStopProfile ZwStopProfile 4
187 NtSuspendThread ZwSuspendThread 8
188 NtSystemDebugControl ZwSystemDebugControl 24
189 NtTerminateProcess ZwTerminateProcess 8
190 NtTerminateThread ZwTerminateThread 8
191 NtTestAlert ZwTestAlert 0
192 NtUnloadDriver ZwUnloadDriver 4
193 NtUnloadKey ZwUnloadKey 4
194 NtUnlockFile ZwUnlockFile 20
195 NtUnlockVirtualMemory ZwUnlockVirtualMemory 16
196 NtUnmapViewOfSection ZwUnmapViewOfSection 8
197 NtVdmControl ZwVdmControl 8
198 NtWaitForMultipleObjects ZwWaitForMultipleObjects 20
199 NtWaitForSingleObject ZwWaitForSingleObject 12
200 NtWaitHighEventPair ZwWaitHighEventPair 4
201 NtWaitLowEventPair ZwWaitLowEventPair 4
202 NtWriteFile ZwWriteFile 36
203 NtWriteFileGather ZwWriteFileGather 36
204 NtWriteRequestData ZwWriteRequestData 24
205 NtWriteVirtualMemory ZwWriteVirtualMemory 20
206 NtW32Call ZwW32Call 20
207 NtCreateChannel ZwCreateChannel 8
208 NtListenChannel ZwListenChannel 8
209 NtOpenChannel ZwOpenChannel 8
210 NtReplyWaitSendChannel ZwReplyWaitSendChannel 12
211 NtSendWaitReplyChannel ZwSendWaitReplyChannel 16
212 NtSetContextChannel ZwSetContextChannel 4
213 NtYieldExecution ZwYieldExecution 0