NtAcceptConnectPort ZwAcceptConnectPort 24 NtAccessCheck ZwAccessCheck 32 NtAccessCheckAndAuditAlarm ZwAccessCheckAndAuditAlarm 44 NtAddAtom ZwAddAtom 8 NtAdjustGroupsToken ZwAdjustGroupsToken 24 NtAdjustPrivilegesToken ZwAdjustPrivilegesToken 24 NtAlertResumeThread ZwAlertResumeThread 8 NtAlertThread ZwAlertThread 4 NtAllocateLocallyUniqueId ZwAllocateLocallyUniqueId 4 NtAllocateUuids ZwAllocateUuids 12 NtAllocateVirtualMemory ZwAllocateVirtualMemory 24 NtCallbackReturn ZwCallbackReturn 12 NtCancelIoFile ZwCancelIoFile 8 NtCancelTimer ZwCancelTimer 8 NtClearEvent ZwClearEvent 4 NtClose ZwClose 4 NtCloseObjectAuditAlarm ZwCloseObjectAuditAlarm 12 NtCompleteConnectPort ZwCompleteConnectPort 4 NtConnectPort ZwConnectPort 32 NtContinue ZwContinue 8 NtCreateDirectoryObject ZwCreateDirectoryObject 12 NtCreateEvent ZwCreateEvent 20 NtCreateEventPair ZwCreateEventPair 12 NtCreateFile ZwCreateFile 44 NtCreateIoCompletion ZwCreateIoCompletion 16 NtCreateKey ZwCreateKey 28 NtCreateMailslotFile ZwCreateMailslotFile 32 NtCreateMutant ZwCreateMutant 16 NtCreateNamedPipeFile ZwCreateNamedPipeFile 56 NtCreatePagingFile ZwCreatePagingFile 16 NtCreatePort ZwCreatePort 20 NtCreateProcess ZwCreateProcess 32 NtCreateProfile ZwCreateProfile 36 NtCreateSection ZwCreateSection 28 NtCreateSemaphore ZwCreateSemaphore 20 NtCreateSymbolicLinkObject ZwCreateSymbolicLinkObject 16 NtCreateThread ZwCreateThread 32 NtCreateTimer ZwCreateTimer 16 NtCreateToken ZwCreateToken 52 NtCreateWaitablePort ZwCreateWaitablePort 20 NtDelayExecution ZwDelayExecution 8 NtDeleteAtom ZwDeleteAtom 4 NtDeleteFile ZwDeleteFile 4 NtDeleteKey ZwDeleteKey 4 NtDeleteObjectAuditAlarm ZwDeleteObjectAuditAlarm 12 NtDeleteValueKey ZwDeleteValueKey 8 NtDeviceIoControlFile ZwDeviceIoControlFile 40 NtDisplayString ZwDisplayString 4 NtDuplicateObject ZwDuplicateObject 28 NtDuplicateToken ZwDuplicateToken 24 NtEnumerateKey ZwEnumerateKey 24 NtEnumerateValueKey ZwEnumerateValueKey 24 NtExtendSection ZwExtendSection 8 NtFindAtom ZwFindAtom 8 NtFlushBuffersFile ZwFlushBuffersFile 8 NtFlushInstructionCache ZwFlushInstructionCache 12 NtFlushKey ZwFlushKey 4 NtFlushVirtualMemory ZwFlushVirtualMemory 16 NtFlushWriteBuffer ZwFlushWriteBuffer 0 NtFreeVirtualMemory ZwFreeVirtualMemory 16 NtFsControlFile ZwFsControlFile 40 NtGetContextThread ZwGetContextThread 8 NtGetPlugPlayEvent ZwGetPlugPlayEvent 16 NtGetTickCount ZwGetTickCount 4 NtImpersonateClientOfPort ZwImpersonateClientOfPort 8 NtImpersonateThread ZwImpersonateThread 12 NtInitializeRegistry ZwInitializeRegistry 4 NtListenPort ZwListenPort 8 NtLoadDriver ZwLoadDriver 4 NtLoadKey ZwLoadKey 8 NtLoadKey2 ZwLoadKey2 12 NtLockFile ZwLockFile 40 NtLockVirtualMemory ZwLockVirtualMemory 16 NtMakeTemporaryObject ZwMakeTemporaryObject 4 NtMapViewOfSection ZwMapViewOfSection 40 NtNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFile 36 NtNotifyChangeKey ZwNotifyChangeKey 40 NtOpenDirectoryObject ZwOpenDirectoryObject 12 NtOpenEvent ZwOpenEvent 12 NtOpenEventPair ZwOpenEventPair 12 NtOpenFile ZwOpenFile 24 NtOpenIoCompletion ZwOpenIoCompletion 12 NtOpenKey ZwOpenKey 12 NtOpenMutant ZwOpenMutant 12 NtOpenObjectAuditAlarm ZwOpenObjectAuditAlarm 48 NtOpenProcess ZwOpenProcess 16 NtOpenProcessToken ZwOpenProcessToken 12 NtOpenSection ZwOpenSection 12 NtOpenSemaphore ZwOpenSemaphore 12 NtOpenSymbolicLinkObject ZwOpenSymbolicLinkObject 12 NtOpenThread ZwOpenThread 16 NtOpenThreadToken ZwOpenThreadToken 16 NtOpenTimer ZwOpenTimer 12 NtPlugPlayControl ZwPlugPlayControl 16 NtPrivilegeCheck ZwPrivilegeCheck 12 NtPrivilegedServiceAuditAlarm ZwPrivilegedServiceAuditAlarm 20 NtPrivilegeObjectAuditAlarm ZwPrivilegeObjectAuditAlarm 24 NtProtectVirtualMemory ZwProtectVirtualMemory 20 NtPulseEvent ZwPulseEvent 8 NtQueryInformationAtom ZwQueryInformationAtom 20 NtQueryAttributesFile ZwQueryAttributesFile 8 NtQueryDefaultLocale ZwQueryDefaultLocale 8 NtQueryDirectoryFile ZwQueryDirectoryFile 44 NtQueryDirectoryObject ZwQueryDirectoryObject 28 NtQueryEaFile ZwQueryEaFile 36 NtQueryEvent ZwQueryEvent 20 NtQueryFullAttributesFile ZwQueryFullAttributesFile 8 NtQueryInformationFile ZwQueryInformationFile 20 NtQueryInformationPort ZwQueryInformationPort 20 NtQueryInformationProcess ZwQueryInformationProcess 20 NtQueryInformationThread ZwQueryInformationThread 20 NtQueryInformationToken ZwQueryInformationToken 20 NtQueryIntervalProfile ZwQueryIntervalProfile 8 NtQueryIoCompletion ZwQueryIoCompletion 20 NtQueryKey ZwQueryKey 20 NtQueryMultipleValueKey ZwQueryMultipleValueKey 24 NtQueryMutant ZwQueryMutant 20 NtQueryObject ZwQueryObject 20 NtQueryOleDirectoryFile ZwQueryOleDirectoryFile 44 NtQueryPerformanceCounter ZwQueryPerformanceCounter 8 NtQuerySection ZwQuerySection 20 NtQuerySecurityObject ZwQuerySecurityObject 20 NtQuerySemaphore ZwQuerySemaphore 20 NtQuerySymbolicLinkObject ZwQuerySymbolicLinkObject 12 NtQuerySystemEnvironmentValue ZwQuerySystemEnvironmentValue 16 NtQuerySystemInformation ZwQuerySystemInformation 16 NtQuerySystemTime ZwQuerySystemTime 4 NtQueryTimer ZwQueryTimer 20 NtQueryTimerResolution ZwQueryTimerResolution 12 NtQueryValueKey ZwQueryValueKey 24 NtQueryVirtualMemory ZwQueryVirtualMemory 24 NtQueryVolumeInformationFile ZwQueryVolumeInformationFile 20 NtQueueApcThread ZwQueueApcThread 20 NtRaiseException ZwRaiseException 12 NtRaiseHardError ZwRaiseHardError 24 NtReadFile ZwReadFile 36 NtReadFileScatter ZwReadFileScatter 36 NtReadRequestData ZwReadRequestData 24 NtReadVirtualMemory ZwReadVirtualMemory 20 NtRegisterThreadTerminatePort ZwRegisterThreadTerminatePort 4 NtReleaseMutant ZwReleaseMutant 8 NtReleaseSemaphore ZwReleaseSemaphore 12 NtRemoveIoCompletion ZwRemoveIoCompletion 20 NtReplaceKey ZwReplaceKey 12 NtReplyPort ZwReplyPort 8 NtReplyWaitReceivePort ZwReplyWaitReceivePort 16 NtReplyWaitReplyPort ZwReplyWaitReplyPort 8 NtRequestPort ZwRequestPort 8 NtRequestWaitReplyPort ZwRequestWaitReplyPort 12 NtResetEvent ZwResetEvent 8 NtRestoreKey ZwRestoreKey 12 NtResumeThread ZwResumeThread 8 NtSaveKey ZwSaveKey 8 NtSetIoCompletion ZwSetIoCompletion 20 NtSetContextThread ZwSetContextThread 8 NtSetDefaultHardErrorPort ZwSetDefaultHardErrorPort 4 NtSetDefaultLocale ZwSetDefaultLocale 8 NtSetEaFile ZwSetEaFile 16 NtSetEvent ZwSetEvent 8 NtSetHighEventPair ZwSetHighEventPair 4 NtSetHighWaitLowEventPair ZwSetHighWaitLowEventPair 4 NtSetHighWaitLowThread ZwSetHighWaitLowThread 0 NtSetInformationFile ZwSetInformationFile 20 NtSetInformationKey ZwSetInformationKey 16 NtSetInformationObject ZwSetInformationObject 16 NtSetInformationProcess ZwSetInformationProcess 16 NtSetInformationThread ZwSetInformationThread 16 NtSetInformationToken ZwSetInformationToken 16 NtSetIntervalProfile ZwSetIntervalProfile 8 NtSetLdtEntries ZwSetLdtEntries 24 NtSetLowEventPair ZwSetLowEventPair 4 NtSetLowWaitHighEventPair ZwSetLowWaitHighEventPair 4 NtSetLowWaitHighThread ZwSetLowWaitHighThread 0 NtSetSecurityObject ZwSetSecurityObject 12 NtSetSystemEnvironmentValue ZwSetSystemEnvironmentValue 8 NtSetSystemInformation ZwSetSystemInformation 12 NtSetSystemPowerState ZwSetSystemPowerState 12 NtSetSystemTime ZwSetSystemTime 8 NtSetTimer ZwSetTimer 28 NtSetTimerResolution ZwSetTimerResolution 12 NtSetValueKey ZwSetValueKey 24 NtSetVolumeInformationFile ZwSetVolumeInformationFile 20 NtShutdownSystem ZwShutdownSystem 4 NtSignalAndWaitForSingleObject ZwSignalAndWaitForSingleObject 16 NtStartProfile ZwStartProfile 4 NtStopProfile ZwStopProfile 4 NtSuspendThread ZwSuspendThread 8 NtSystemDebugControl ZwSystemDebugControl 24 NtTerminateProcess ZwTerminateProcess 8 NtTerminateThread ZwTerminateThread 8 NtTestAlert ZwTestAlert 0 NtUnloadDriver ZwUnloadDriver 4 NtUnloadKey ZwUnloadKey 4 NtUnlockFile ZwUnlockFile 20 NtUnlockVirtualMemory ZwUnlockVirtualMemory 16 NtUnmapViewOfSection ZwUnmapViewOfSection 8 NtVdmControl ZwVdmControl 8 NtWaitForMultipleObjects ZwWaitForMultipleObjects 20 NtWaitForSingleObject ZwWaitForSingleObject 12 NtWaitHighEventPair ZwWaitHighEventPair 4 NtWaitLowEventPair ZwWaitLowEventPair 4 NtWriteFile ZwWriteFile 36 NtWriteFileGather ZwWriteFileGather 36 NtWriteRequestData ZwWriteRequestData 24 NtWriteVirtualMemory ZwWriteVirtualMemory 20 NtW32Call ZwW32Call 20 NtCreateChannel ZwCreateChannel 8 NtListenChannel ZwListenChannel 8 NtOpenChannel ZwOpenChannel 8 NtReplyWaitSendChannel ZwReplyWaitSendChannel 12 NtSendWaitReplyChannel ZwSendWaitReplyChannel 16 NtSetContextChannel ZwSetContextChannel 4 NtYieldExecution ZwYieldExecution 0