Author: Mateusz "j00ru" Jurczyk (j00ru.vx tech blog)
Team Vexillium
See also: Windows X86 System Call Table: http://j00ru.vexillium.org/ntapi/
Special thanks to: MeMek
Layout by Metasploit Team
|
Enter the Syscall ID to highlight (hex): |
| System Call Symbol | Windows XP (hide) |
Windows 2003 Server (hide) |
Windows Vista (hide) |
Windows 2008 Server (hide) |
Windows 7 (hide) |
Windows 8 (hide) |
|||||||||
| SP0 | SP1 | SP2 | SP0 | SP1 | SP2 | SP0 | SP1 | SP2 | SP0 | SP1 | SP2 | SP0 | SP1 | dev-preview | |
| ArbPreprocessEntry | 0x008e | 0x008e | |||||||||||||
| KeRestoreFloatingPointState | 0x0131 | ||||||||||||||
| NtAcceptConnectPort | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 | 0x0060 |
| NtAccessCheck | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 | 0x0061 |
| NtAccessCheckAndAuditAlarm | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 | 0x0026 |
| NtAccessCheckByType | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 | 0x0062 |
| NtAccessCheckByTypeAndAuditAlarm | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 | 0x0056 |
| NtAccessCheckByTypeResultList | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 | 0x0063 |
| NtAccessCheckByTypeResultListAndAuditAlarm | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 | 0x0064 |
| NtAccessCheckByTypeResultListAndAuditAlarmByHandle | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 | 0x0065 |
| NtAcquireCMFViewOwnership | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0066 | |||||||||
| NtAddAtom | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 | 0x0044 |
| NtAddAtomEx | 0x0066 | ||||||||||||||
| NtAddBootEntry | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x0067 | 0x0066 | 0x0066 | 0x0067 | ||||||
| NtAddDriverEntry | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0067 | 0x0067 | 0x0068 | ||||||
| NtAdjustGroupsToken | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0068 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0068 | 0x0068 | 0x0069 |
| NtAdjustPrivilegesToken | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e | 0x003e |
| NtAlertResumeThread | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x0069 | 0x006a | 0x006a | 0x006a | 0x006a | 0x006a | 0x006a | 0x0069 | 0x0069 | 0x006b |
| NtAlertThread | 0x006a | 0x006a | 0x006a | 0x006a | 0x006a | 0x006a | 0x006b | 0x006b | 0x006b | 0x006b | 0x006b | 0x006b | 0x006a | 0x006a | 0x006c |
| NtAlertThreadByThreadId | 0x006d | ||||||||||||||
| NtAllocateLocallyUniqueId | 0x006b | 0x006b | 0x006b | 0x006b | 0x006b | 0x006b | 0x006c | 0x006c | 0x006c | 0x006c | 0x006c | 0x006c | 0x006b | 0x006b | 0x006e |
| NtAllocateReserveObject | 0x006c | 0x006c | 0x006f | ||||||||||||
| NtAllocateUserPhysicalPages | 0x006c | 0x006c | 0x006c | 0x006c | 0x006c | 0x006c | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x0070 |
| NtAllocateUuids | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x006d | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x0071 |
| NtAllocateVirtualMemory | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 | 0x0015 |
| NtAlpcAcceptConnectPort | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x0072 | ||||||
| NtAlpcCancelMessage | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0070 | 0x0073 | ||||||
| NtAlpcConnectPort | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0074 | ||||||
| NtAlpcConnectPortEx | 0x0075 | ||||||||||||||
| NtAlpcCreatePort | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0076 | ||||||
| NtAlpcCreatePortSection | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0077 | ||||||
| NtAlpcCreateResourceReserve | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0078 | ||||||
| NtAlpcCreateSectionView | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0079 | ||||||
| NtAlpcCreateSecurityContext | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x007a | ||||||
| NtAlpcDeletePortSection | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x007b | ||||||
| NtAlpcDeleteResourceReserve | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x007c | ||||||
| NtAlpcDeleteSectionView | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x007d | ||||||
| NtAlpcDeleteSecurityContext | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x007e | ||||||
| NtAlpcDisconnectPort | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x007f | ||||||
| NtAlpcImpersonateClientOfPort | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x0080 | ||||||
| NtAlpcOpenSenderProcess | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x0081 | ||||||
| NtAlpcOpenSenderThread | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x0082 | ||||||
| NtAlpcQueryInformation | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x0083 | ||||||
| NtAlpcQueryInformationMessage | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0084 | ||||||
| NtAlpcRevokeSecurityContext | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0085 | ||||||
| NtAlpcSendWaitReceivePort | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0086 | ||||||
| NtAlpcSetInformation | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0087 | ||||||
| NtApphelpCacheControl | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 | 0x0049 |
| NtAreMappedFilesTheSame | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x006e | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0088 |
| NtAssignProcessToJobObject | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x006f | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0089 |
| NtAssociateWaitCompletionPacket | 0x008a | ||||||||||||||
| NtCallbackReturn | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 | 0x0002 |
| NtCancelIoFile | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a | 0x005a |
| NtCancelIoFileEx | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0086 | 0x0086 | 0x008b | ||||||
| NtCancelSynchronousIoFile | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0087 | 0x0087 | 0x008c | ||||||
| NtCancelTimer | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e | 0x005e |
| NtCancelWaitCompletionPacket | 0x008d | ||||||||||||||
| NtClearEvent | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b | 0x003b |
| NtClose | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c | 0x000c |
| NtCloseObjectAuditAlarm | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 | 0x0038 |
| NtCommitComplete | 0x008b | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x0088 | 0x0088 | 0x008e | ||||||
| NtCommitEnlistment | 0x008c | 0x008a | 0x008a | 0x008a | 0x008a | 0x008a | 0x0089 | 0x0089 | 0x008f | ||||||
| NtCommitTransaction | 0x008d | 0x008b | 0x008b | 0x008b | 0x008b | 0x008b | 0x008a | 0x008a | 0x0090 | ||||||
| NtCompactKeys | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x0071 | 0x008e | 0x008c | 0x008c | 0x008c | 0x008c | 0x008c | 0x008b | 0x008b | 0x0091 |
| NtCompareTokens | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x0072 | 0x008f | 0x008d | 0x008d | 0x008d | 0x008d | 0x008d | 0x008c | 0x008c | 0x0092 |
| NtCompleteConnectPort | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0073 | 0x0090 | 0x008e | 0x008e | 0x008e | |||||
| NtCompressKey | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0074 | 0x0091 | 0x008f | 0x008f | 0x008f | 0x008f | 0x008f | 0x008e | 0x008e | 0x0094 |
| NtConnectPort | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0075 | 0x0092 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x008f | 0x008f | 0x0095 |
| NtContinue | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 | 0x0040 |
| NtCreateDebugObject | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0076 | 0x0093 | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x0090 | 0x0090 | 0x0096 |
| NtCreateDirectoryObject | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0077 | 0x0094 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x0091 | 0x0091 | 0x0097 |
| NtCreateDirectoryObjectEx | 0x0098 | ||||||||||||||
| NtCreateEnlistment | 0x0095 | 0x0093 | 0x0093 | 0x0093 | 0x0093 | 0x0093 | 0x0092 | 0x0092 | 0x0099 | ||||||
| NtCreateEvent | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 | 0x0045 |
| NtCreateEventPair | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0078 | 0x0096 | 0x0094 | 0x0094 | 0x0094 | 0x0094 | 0x0094 | 0x0093 | 0x0093 | 0x009a |
| NtCreateFile | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 | 0x0052 |
| NtCreateIoCompletion | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0079 | 0x0097 | 0x0095 | 0x0095 | 0x0095 | 0x0095 | 0x0095 | 0x0094 | 0x0094 | 0x009b |
| NtCreateJobObject | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x007a | 0x0098 | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x0095 | 0x0095 | 0x009c |
| NtCreateJobSet | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x007b | 0x0099 | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x0096 | 0x0096 | |
| NtCreateKey | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a | 0x001a |
| NtCreateKeyTransacted | 0x009a | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x0097 | 0x0097 | 0x009e | ||||||
| NtCreateKeyedEvent | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x007c | 0x009b | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x0098 | 0x0098 | 0x009f |
| NtCreateLowBoxToken | 0x00a0 | ||||||||||||||
| NtCreateMailslotFile | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x007d | 0x009c | 0x009a | 0x009a | 0x009a | 0x009a | 0x009a | 0x0099 | 0x0099 | 0x00a1 |
| NtCreateMutant | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x007e | 0x009d | 0x009b | 0x009b | 0x009b | 0x009b | 0x009b | 0x009a | 0x009a | 0x00a2 |
| NtCreateNamedPipeFile | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x007f | 0x009e | 0x009c | 0x009c | 0x009c | 0x009c | 0x009c | 0x009b | 0x009b | 0x00a3 |
| NtCreatePagingFile | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x0080 | 0x009f | 0x009d | 0x009d | 0x009d | 0x009d | 0x009d | 0x009c | 0x009c | 0x00a4 |
| NtCreatePort | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x0081 | 0x00a0 | 0x009e | 0x009e | 0x009e | 0x009e | 0x009e | 0x009d | 0x009d | 0x00a5 |
| NtCreatePrivateNamespace | 0x00a1 | 0x009f | 0x009f | 0x009f | 0x009f | 0x009f | 0x009e | 0x009e | 0x00a6 | ||||||
| NtCreateProcess | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x0082 | 0x00a2 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x009f | 0x009f | 0x00a7 |
| NtCreateProcessEx | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a | 0x004a |
| NtCreateProfile | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x0083 | 0x00a3 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a0 | 0x00a0 | 0x00a8 |
| NtCreateProfileEx | 0x00a1 | 0x00a1 | 0x00a9 | ||||||||||||
| NtCreateResourceManager | 0x00a4 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00aa | ||||||
| NtCreateSection | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 | 0x0047 |
| NtCreateSemaphore | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x0084 | 0x00a5 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00ab |
| NtCreateSymbolicLinkObject | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x0085 | 0x00a6 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00ac |
| NtCreateThread | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b | 0x004b |
| NtCreateThreadEx | 0x00a7 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00ad | ||||||
| NtCreateTimer | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x0086 | 0x00a8 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00ae |
| NtCreateToken | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x0087 | 0x00a9 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00af |
| NtCreateTokenEx | 0x00b0 | ||||||||||||||
| NtCreateTransaction | 0x00aa | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00b1 | ||||||
| NtCreateTransactionManager | 0x00ab | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00b2 | ||||||
| NtCreateUserProcess | 0x00ac | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00b3 | ||||||
| NtCreateWaitCompletionPacket | 0x00b4 | ||||||||||||||
| NtCreateWaitablePort | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x0088 | 0x00ad | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00b5 |
| NtCreateWnfStateName | 0x00b6 | ||||||||||||||
| NtCreateWorkerFactory | 0x00ae | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00b7 | ||||||
| NtDebugActiveProcess | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x0089 | 0x00af | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00b8 |
| NtDebugContinue | 0x008a | 0x008a | 0x008a | 0x008a | 0x008a | 0x008a | 0x00b0 | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00b9 |
| NtDelayExecution | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 | 0x0031 |
| NtDeleteAtom | 0x008b | 0x008b | 0x008b | 0x008b | 0x008b | 0x008b | 0x00b1 | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00ba |
| NtDeleteBootEntry | 0x00b2 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00bb | ||||||
| NtDeleteDriverEntry | 0x00b3 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00bc | ||||||
| NtDeleteFile | 0x008e | 0x008e | 0x008e | 0x008e | 0x008e | 0x008e | 0x00b4 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00bd |
| NtDeleteKey | 0x008f | 0x008f | 0x008f | 0x008f | 0x008f | 0x008f | 0x00b5 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00b3 | 0x00be |
| NtDeleteObjectAuditAlarm | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x0090 | 0x00b6 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00b4 | 0x00bf |
| NtDeletePrivateNamespace | 0x00b7 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00c0 | ||||||
| NtDeleteValueKey | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x0091 | 0x00b8 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00c1 |
| NtDeleteWnfStateData | 0x00c2 | ||||||||||||||
| NtDeleteWnfStateName | 0x00c3 | ||||||||||||||
| NtDeviceIoControlFile | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 | 0x0004 |
| NtDisableLastKnownGood | 0x00b7 | 0x00b7 | 0x00c4 | ||||||||||||
| NtDisplayString | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x0092 | 0x00b9 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b8 | 0x00b8 | 0x00c5 |
| NtDrawText | 0x00b9 | 0x00b9 | 0x00c6 | ||||||||||||
| NtDuplicateObject | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 | 0x0039 |
| NtDuplicateToken | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f | 0x003f |
| NtEnableLastKnownGood | 0x00ba | 0x00ba | 0x00c7 | ||||||||||||
| NtEnumerateBootEntries | 0x00ba | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00bb | 0x00bb | 0x00c8 | ||||||
| NtEnumerateDriverEntries | 0x00bb | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00bc | 0x00bc | 0x00c9 | ||||||
| NtEnumerateKey | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f | 0x002f |
| NtEnumerateSystemEnvironmentValuesEx | 0x00bc | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00bd | 0x00bd | 0x00ca | ||||||
| NtEnumerateTransactionObject | 0x00bd | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00be | 0x00be | 0x00cb | ||||||
| NtEnumerateValueKey | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 | 0x0010 |
| NtExtendSection | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x0096 | 0x00be | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00bf | 0x00bf | 0x00cc |
| NtFilterToken | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x0097 | 0x00bf | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00c0 | 0x00c0 | 0x00cd |
| NtFindAtom | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 | 0x0011 |
| NtFlushBuffersFile | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 | 0x0048 |
| NtFlushBuffersFileEx | 0x00cf | ||||||||||||||
| NtFlushInstallUILanguage | 0x00c0 | 0x00be | 0x00be | 0x00be | 0x00be | 0x00be | 0x00c1 | 0x00c1 | 0x00d0 | ||||||
| NtFlushInstructionCache | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x0098 | 0x00c1 | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00c2 | 0x00c2 | |
| NtFlushKey | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x0099 | 0x00c2 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c3 | 0x00c3 | 0x00d2 |
| NtFlushProcessWriteBuffers | 0x00c3 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c4 | 0x00c4 | 0x00d3 | ||||||
| NtFlushVirtualMemory | 0x009a | 0x009a | 0x009a | 0x009a | 0x009a | 0x009a | 0x00c4 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c5 | 0x00c5 | 0x00d4 |
| NtFlushWriteBuffer | 0x009b | 0x009b | 0x009b | 0x009b | 0x009b | 0x009b | 0x00c5 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c6 | 0x00c6 | 0x00d5 |
| NtFreeUserPhysicalPages | 0x009c | 0x009c | 0x009c | 0x009c | 0x009c | 0x009c | 0x00c6 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c7 | 0x00c7 | 0x00d6 |
| NtFreeVirtualMemory | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b | 0x001b |
| NtFreezeRegistry | 0x00c7 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c8 | 0x00c8 | 0x00d7 | ||||||
| NtFreezeTransactions | 0x00c8 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c9 | 0x00c9 | 0x00d8 | ||||||
| NtFsControlFile | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 | 0x0036 |
| NtGetContextThread | 0x009d | 0x009d | 0x009d | 0x009d | 0x009d | 0x009d | 0x00c9 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00ca | 0x00ca | 0x00d9 |
| NtGetCurrentProcessorNumber | 0x009e | 0x009e | 0x009e | 0x009e | 0x009e | 0x009e | 0x00ca | 0x00c8 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00c8 | 0x00cb | 0x00cb | 0x00da |
| NtGetDevicePowerState | 0x009f | 0x009f | 0x009f | 0x009f | 0x009f | 0x009f | 0x00cb | 0x00c9 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00c9 | 0x00cc | 0x00cc | 0x00db |
| NtGetMUIRegistryInfo | 0x00cc | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00cd | 0x00cd | 0x00dc | ||||||
| NtGetNextProcess | 0x00cd | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00ce | 0x00ce | 0x00dd | ||||||
| NtGetNextThread | 0x00ce | 0x00cc | 0x00cc | 0x00cc | 0x00cc | 0x00cc | 0x00cf | 0x00cf | 0x00de | ||||||
| NtGetNlsSectionPtr | 0x00cf | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00d0 | 0x00d0 | 0x00df | ||||||
| NtGetNotificationResourceManager | 0x00d0 | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00d1 | 0x00d1 | 0x00e0 | ||||||
| NtGetPlugPlayEvent | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00a0 | 0x00d1 | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00d2 | 0x00d2 | |
| NtGetWriteWatch | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00a1 | 0x00d2 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d3 | 0x00d3 | 0x00e1 |
| NtImpersonateAnonymousToken | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00a2 | 0x00d3 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d4 | 0x00d4 | 0x00e2 |
| NtImpersonateClientOfPort | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c | 0x001c |
| NtImpersonateThread | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00a3 | 0x00d4 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d5 | 0x00d5 | 0x00e3 |
| NtInitializeNlsFiles | 0x00d5 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d6 | 0x00d6 | 0x00e4 | ||||||
| NtInitializeRegistry | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00a4 | 0x00d6 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d7 | 0x00d7 | 0x00e5 |
| NtInitiatePowerAction | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00a5 | 0x00d7 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d8 | 0x00d8 | 0x00e6 |
| NtIsProcessInJob | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c | 0x004c |
| NtIsSystemResumeAutomatic | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00a6 | 0x00d8 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d9 | 0x00d9 | 0x00e7 |
| NtIsUILanguageComitted | 0x00d9 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00da | 0x00da | 0x00e8 | ||||||
| NtListenPort | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00a7 | 0x00db | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00db | 0x00db | 0x00e9 |
| NtLoadDriver | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00a8 | 0x00dc | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00dc | 0x00dc | 0x00ea |
| NtLoadKey | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00a9 | 0x00dd | 0x00da | 0x00da | 0x00da | 0x00da | 0x00da | 0x00dd | 0x00dd | 0x00eb |
| NtLoadKey2 | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00aa | 0x00de | 0x00db | 0x00db | 0x00db | 0x00db | 0x00db | 0x00de | 0x00de | 0x00ec |
| NtLoadKeyEx | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00ab | 0x00df | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00df | 0x00df | 0x00ed |
| NtLockFile | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00ac | 0x00e0 | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00e0 | 0x00e0 | 0x00ee |
| NtLockProductActivationKeys | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00ad | 0x00e1 | 0x00de | 0x00de | 0x00de | 0x00de | 0x00de | 0x00e1 | 0x00e1 | 0x00ef |
| NtLockRegistryKey | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00ae | 0x00e2 | 0x00df | 0x00df | 0x00df | 0x00df | 0x00df | 0x00e2 | 0x00e2 | 0x00f0 |
| NtLockVirtualMemory | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00af | 0x00e3 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e3 | 0x00e3 | 0x00f1 |
| NtMakePermanentObject | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00b0 | 0x00e4 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e4 | 0x00e4 | 0x00f2 |
| NtMakeTemporaryObject | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00b1 | 0x00e5 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e5 | 0x00e5 | 0x00f3 |
| NtMapCMFModule | 0x00e6 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e6 | 0x00e6 | 0x00f4 | ||||||
| NtMapUserPhysicalPages | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00b2 | 0x00e7 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e7 | 0x00e7 | 0x00f5 |
| NtMapUserPhysicalPagesScatter | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 | 0x0000 |
| NtMapViewOfSection | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 | 0x0025 |
| NtModifyBootEntry | 0x00e9 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e8 | 0x00e8 | 0x00f6 | ||||||
| NtModifyDriverEntry | 0x00ea | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e9 | 0x00e9 | 0x00f7 | ||||||
| NtNotifyChangeDirectoryFile | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00b5 | 0x00eb | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00ea | 0x00ea | 0x00f8 |
| NtNotifyChangeKey | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00b6 | 0x00ec | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00eb | 0x00eb | 0x00f9 |
| NtNotifyChangeMultipleKeys | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00b7 | 0x00ed | 0x00e9 | 0x00e9 | 0x00e9 | 0x00e9 | 0x00e9 | 0x00ec | 0x00ec | 0x00fa |
| NtNotifyChangeSession | 0x00ed | 0x00ed | 0x00fb | ||||||||||||
| NtOpenDirectoryObject | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 | 0x0055 |
| NtOpenEnlistment | 0x00ee | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x00ee | 0x00ee | 0x00fc | ||||||
| NtOpenEvent | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d | 0x003d |
| NtOpenEventPair | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00b8 | 0x00ef | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x00ef | 0x00ef | 0x00fd |
| NtOpenFile | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 | 0x0030 |
| NtOpenIoCompletion | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00b9 | 0x00f0 | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x00f0 | 0x00f0 | 0x00fe |
| NtOpenJobObject | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00ba | 0x00f1 | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x00f1 | 0x00f1 | 0x00ff |
| NtOpenKey | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f | 0x000f |
| NtOpenKeyEx | 0x00f2 | 0x00f2 | 0x0100 | ||||||||||||
| NtOpenKeyTransacted | 0x00f2 | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x00f3 | 0x00f3 | 0x0101 | ||||||
| NtOpenKeyTransactedEx | 0x00f4 | 0x00f4 | 0x0102 | ||||||||||||
| NtOpenKeyedEvent | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00bb | 0x00f3 | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x00f5 | 0x00f5 | 0x0103 |
| NtOpenMutant | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00bc | 0x00f4 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f6 | 0x00f6 | 0x0104 |
| NtOpenObjectAuditAlarm | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00bd | 0x00f5 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f7 | 0x00f7 | 0x0105 |
| NtOpenPrivateNamespace | 0x00f6 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f8 | 0x00f8 | 0x0106 | ||||||
| NtOpenProcess | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 | 0x0023 |
| NtOpenProcessToken | 0x00be | 0x00be | 0x00be | 0x00be | 0x00be | 0x00be | 0x00f7 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f9 | 0x00f9 | 0x0107 |
| NtOpenProcessTokenEx | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d | 0x002d |
| NtOpenResourceManager | 0x00f8 | 0x00f4 | 0x00f4 | 0x00f4 | 0x00f4 | 0x00f4 | 0x00fa | 0x00fa | 0x0108 | ||||||
| NtOpenSection | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 | 0x0034 |
| NtOpenSemaphore | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00bf | 0x00f9 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00f5 | 0x00fb | 0x00fb | 0x0109 |
| NtOpenSession | 0x00fa | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00fc | 0x00fc | 0x010a | ||||||
| NtOpenSymbolicLinkObject | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00c0 | 0x00fb | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00fd | 0x00fd | 0x010b |
| NtOpenThread | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00c1 | 0x00fc | 0x00f8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x00fe | 0x00fe | 0x010c |
| NtOpenThreadToken | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 | 0x0021 |
| NtOpenThreadTokenEx | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c | 0x002c |
| NtOpenTimer | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00c2 | 0x00fd | 0x00f9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x00ff | 0x00ff | 0x010d |
| NtOpenTransaction | 0x00fe | 0x00fa | 0x00fa | 0x00fa | 0x00fa | 0x00fa | 0x0100 | 0x0100 | 0x010e | ||||||
| NtOpenTransactionManager | 0x00ff | 0x00fb | 0x00fb | 0x00fb | 0x00fb | 0x00fb | 0x0101 | 0x0101 | 0x010f | ||||||
| NtPlugPlayControl | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x00c3 | 0x0100 | 0x00fc | 0x00fc | 0x00fc | 0x00fc | 0x00fc | 0x0102 | 0x0102 | 0x0110 |
| NtPowerInformation | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c | 0x005c |
| NtPrePrepareComplete | 0x0101 | 0x00fd | 0x00fd | 0x00fd | 0x00fd | 0x00fd | 0x0103 | 0x0103 | 0x0111 | ||||||
| NtPrePrepareEnlistment | 0x0102 | 0x00fe | 0x00fe | 0x00fe | 0x00fe | 0x00fe | 0x0104 | 0x0104 | 0x0112 | ||||||
| NtPrefetchVirtualMemory | 0x0113 | ||||||||||||||
| NtPrepareComplete | 0x0103 | 0x00ff | 0x00ff | 0x00ff | 0x00ff | 0x00ff | 0x0105 | 0x0105 | 0x0114 | ||||||
| NtPrepareEnlistment | 0x0104 | 0x0100 | 0x0100 | 0x0100 | 0x0100 | 0x0100 | 0x0106 | 0x0106 | 0x0115 | ||||||
| NtPrivilegeCheck | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x00c4 | 0x0105 | 0x0101 | 0x0101 | 0x0101 | 0x0101 | 0x0101 | 0x0107 | 0x0107 | 0x0116 |
| NtPrivilegeObjectAuditAlarm | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x00c5 | 0x0106 | 0x0102 | 0x0102 | 0x0102 | 0x0102 | 0x0102 | 0x0108 | 0x0108 | 0x0117 |
| NtPrivilegedServiceAuditAlarm | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x00c6 | 0x0107 | 0x0103 | 0x0103 | 0x0103 | 0x0103 | 0x0103 | 0x0109 | 0x0109 | 0x0118 |
| NtPropagationComplete | 0x0104 | 0x0104 | 0x0104 | 0x0104 | 0x0104 | 0x010a | 0x010a | 0x0119 | |||||||
| NtPropagationFailed | 0x0105 | 0x0105 | 0x0105 | 0x0105 | 0x0105 | 0x010b | 0x010b | 0x011a | |||||||
| NtProtectVirtualMemory | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d | 0x004d |
| NtPulseEvent | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x00c7 | 0x010b | 0x0106 | 0x0106 | 0x0106 | 0x0106 | 0x0106 | 0x010c | 0x010c | 0x011b |
| NtQueryAttributesFile | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a | 0x003a |
| NtQueryBootEntryOrder | 0x010c | 0x0107 | 0x0107 | 0x0107 | 0x0107 | 0x0107 | 0x010d | 0x010d | 0x011c | ||||||
| NtQueryBootOptions | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x0066 | 0x010d | 0x0108 | 0x0108 | 0x0108 | 0x0108 | 0x0108 | 0x010e | 0x010e | 0x011d |
| NtQueryDebugFilterState | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x00ca | 0x010e | 0x0109 | 0x0109 | 0x0109 | 0x0109 | 0x0109 | 0x010f | 0x010f | 0x011e |
| NtQueryDefaultLocale | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 | 0x0012 |
| NtQueryDefaultUILanguage | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 | 0x0041 |
| NtQueryDirectoryFile | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 | 0x0032 |
| NtQueryDirectoryObject | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x00cb | 0x010f | 0x010a | 0x010a | 0x010a | 0x010a | 0x010a | 0x0110 | 0x0110 | 0x011f |
| NtQueryDriverEntryOrder | 0x0110 | 0x010b | 0x010b | 0x010b | 0x010b | 0x010b | 0x0111 | 0x0111 | 0x0120 | ||||||
| NtQueryEaFile | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x00cd | 0x0111 | 0x010c | 0x010c | 0x010c | 0x010c | 0x010c | 0x0112 | 0x0112 | 0x0121 |
| NtQueryEvent | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 | 0x0053 |
| NtQueryFullAttributesFile | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x00ce | 0x0112 | 0x010d | 0x010d | 0x010d | 0x010d | 0x010d | 0x0113 | 0x0113 | 0x0122 |
| NtQueryInformationAtom | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x00cf | 0x0113 | 0x010e | 0x010e | 0x010e | 0x010e | 0x010e | 0x0114 | 0x0114 | 0x0123 |
| NtQueryInformationEnlistment | 0x0114 | 0x010f | 0x010f | 0x010f | 0x010f | 0x010f | 0x0115 | 0x0115 | 0x0124 | ||||||
| NtQueryInformationFile | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e | 0x000e |
| NtQueryInformationJobObject | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x00d0 | 0x0115 | 0x0110 | 0x0110 | 0x0110 | 0x0110 | 0x0110 | 0x0116 | 0x0116 | 0x0125 |
| NtQueryInformationPort | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x00d1 | 0x0116 | 0x0111 | 0x0111 | 0x0111 | 0x0111 | 0x0111 | 0x0117 | 0x0117 | 0x0126 |
| NtQueryInformationProcess | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 | 0x0016 |
| NtQueryInformationResourceManager | 0x0117 | 0x0112 | 0x0112 | 0x0112 | 0x0112 | 0x0112 | 0x0118 | 0x0118 | 0x0127 | ||||||
| NtQueryInformationThread | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 | 0x0022 |
| NtQueryInformationToken | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e | 0x001e |
| NtQueryInformationTransaction | 0x0118 | 0x0113 | 0x0113 | 0x0113 | 0x0113 | 0x0113 | 0x0119 | 0x0119 | 0x0128 | ||||||
| NtQueryInformationTransactionManager | 0x0119 | 0x0114 | 0x0114 | 0x0114 | 0x0114 | 0x0114 | 0x011a | 0x011a | 0x0129 | ||||||
| NtQueryInformationWorkerFactory | 0x011a | 0x0115 | 0x0115 | 0x0115 | 0x0115 | 0x0115 | 0x011b | 0x011b | 0x012a | ||||||
| NtQueryInstallUILanguage | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x00d2 | 0x011b | 0x0116 | 0x0116 | 0x0116 | 0x0116 | 0x0116 | 0x011c | 0x011c | 0x012b |
| NtQueryIntervalProfile | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x00d3 | 0x011c | 0x0117 | 0x0117 | 0x0117 | 0x0117 | 0x0117 | 0x011d | 0x011d | 0x012c |
| NtQueryIoCompletion | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x00d4 | 0x011d | 0x0118 | 0x0118 | 0x0118 | 0x0118 | 0x0118 | 0x011e | 0x011e | 0x012d |
| NtQueryKey | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 | 0x0013 |
| NtQueryLicenseValue | 0x011e | 0x0119 | 0x0119 | 0x0119 | 0x0119 | 0x0119 | 0x011f | 0x011f | 0x012e | ||||||
| NtQueryMultipleValueKey | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x00d5 | 0x011f | 0x011a | 0x011a | 0x011a | 0x011a | 0x011a | 0x0120 | 0x0120 | 0x012f |
| NtQueryMutant | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x00d6 | 0x0120 | 0x011b | 0x011b | 0x011b | 0x011b | 0x011b | 0x0121 | 0x0121 | 0x0130 |
| NtQueryObject | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d | 0x000d |
| NtQueryOpenSubKeys | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x00d7 | 0x0121 | 0x011c | 0x011c | 0x011c | 0x011c | 0x011c | 0x0122 | 0x0122 | 0x0131 |
| NtQueryOpenSubKeysEx | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x00d8 | 0x0122 | 0x011d | 0x011d | 0x011d | 0x011d | 0x011d | 0x0123 | 0x0123 | 0x0132 |
| NtQueryPerformanceCounter | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e | 0x002e |
| NtQueryPortInformationProcess | 0x0123 | 0x011e | 0x011e | 0x011e | 0x011e | 0x011e | 0x0124 | 0x0124 | 0x0133 | ||||||
| NtQueryQuotaInformationFile | 0x00da | 0x00da | 0x00da | 0x00da | 0x00da | 0x00da | 0x0124 | 0x011f | 0x011f | 0x011f | 0x011f | 0x011f | 0x0125 | 0x0125 | 0x0134 |
| NtQuerySection | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e | 0x004e |
| NtQuerySecurityAttributesToken | 0x0126 | 0x0126 | 0x0135 | ||||||||||||
| NtQuerySecurityObject | 0x00db | 0x00db | 0x00db | 0x00db | 0x00db | 0x00db | 0x0125 | 0x0120 | 0x0120 | 0x0120 | 0x0120 | 0x0120 | 0x0127 | 0x0127 | 0x0136 |
| NtQuerySemaphore | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x00dc | 0x0126 | 0x0121 | 0x0121 | 0x0121 | 0x0121 | 0x0121 | 0x0128 | 0x0128 | 0x0137 |
| NtQuerySymbolicLinkObject | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x00dd | 0x0127 | 0x0122 | 0x0122 | 0x0122 | 0x0122 | 0x0122 | 0x0129 | 0x0129 | 0x0138 |
| NtQuerySystemEnvironmentValue | 0x00de | 0x00de | 0x00de | 0x00de | 0x00de | 0x00de | 0x0128 | 0x0123 | 0x0123 | 0x0123 | 0x0123 | 0x0123 | 0x012a | 0x012a | 0x0139 |
| NtQuerySystemEnvironmentValueEx | 0x0129 | 0x0124 | 0x0124 | 0x0124 | 0x0124 | 0x0124 | 0x012b | 0x012b | 0x013a | ||||||
| NtQuerySystemInformation | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 | 0x0033 |
| NtQuerySystemInformationEx | 0x012c | 0x012c | 0x013b | ||||||||||||
| NtQuerySystemTime | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 | 0x0057 |
| NtQueryTimer | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 | 0x0035 |
| NtQueryTimerResolution | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x00e0 | 0x012a | 0x0125 | 0x0125 | 0x0125 | 0x0125 | 0x0125 | 0x012d | 0x012d | 0x013c |
| NtQueryValueKey | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 | 0x0014 |
| NtQueryVirtualMemory | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 | 0x0020 |
| NtQueryVolumeInformationFile | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 | 0x0046 |
| NtQueryWnfStateData | 0x013d | ||||||||||||||
| NtQueryWnfStateNameInformation | 0x013e | ||||||||||||||
| NtQueueApcThread | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 | 0x0042 |
| NtQueueApcThreadEx | 0x012e | 0x012e | 0x013f | ||||||||||||
| NtRaiseException | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x00e1 | 0x012b | 0x0126 | 0x0126 | 0x0126 | 0x0126 | 0x0126 | 0x012f | 0x012f | 0x0140 |
| NtRaiseHardError | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x00e2 | 0x012c | 0x0127 | 0x0127 | 0x0127 | 0x0127 | 0x0127 | 0x0130 | 0x0130 | 0x0141 |
| NtReadFile | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 | 0x0003 |
| NtReadFileScatter | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b | 0x002b |
| NtReadOnlyEnlistment | 0x012d | 0x0128 | 0x0128 | 0x0128 | 0x0128 | 0x0128 | 0x0131 | 0x0131 | 0x0142 | ||||||
| NtReadRequestData | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 | 0x0051 |
| NtReadVirtualMemory | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c | 0x003c |
| NtRecoverEnlistment | 0x012e | 0x0129 | 0x0129 | 0x0129 | 0x0129 | 0x0129 | 0x0132 | 0x0132 | 0x0143 | ||||||
| NtRecoverResourceManager | 0x012f | 0x012a | 0x012a | 0x012a | 0x012a | 0x012a | 0x0133 | 0x0133 | 0x0144 | ||||||
| NtRecoverTransactionManager | 0x0130 | 0x012b | 0x012b | 0x012b | 0x012b | 0x012b | 0x0134 | 0x0134 | 0x0145 | ||||||
| NtRegisterProtocolAddressInformation | 0x012c | 0x012c | 0x012c | 0x012c | 0x012c | 0x0135 | 0x0135 | 0x0146 | |||||||
| NtRegisterThreadTerminatePort | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x00e3 | 0x0132 | 0x012d | 0x012d | 0x012d | 0x012d | 0x012d | 0x0136 | 0x0136 | 0x0147 |
| NtReleaseCMFViewOwnership | 0x0133 | 0x012e | 0x012e | 0x012e | 0x012e | 0x012e | |||||||||
| NtReleaseKeyedEvent | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x00e4 | 0x0134 | 0x012f | 0x012f | 0x012f | 0x012f | 0x012f | 0x0137 | 0x0137 | 0x0148 |
| NtReleaseMutant | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d | 0x001d |
| NtReleaseSemaphore | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 | 0x0007 |
| NtReleaseWorkerFactoryWorker | 0x0135 | 0x0130 | 0x0130 | 0x0130 | 0x0130 | 0x0130 | 0x0138 | 0x0138 | 0x0149 | ||||||
| NtRemoveIoCompletion | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 | 0x0006 |
| NtRemoveIoCompletionEx | 0x0136 | 0x0131 | 0x0131 | 0x0131 | 0x0131 | 0x0131 | 0x0139 | 0x0139 | 0x014a | ||||||
| NtRemoveProcessDebug | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x00e5 | 0x0137 | 0x0132 | 0x0132 | 0x0132 | 0x0132 | 0x0132 | 0x013a | 0x013a | 0x014b |
| NtRenameKey | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x00e6 | 0x0138 | 0x0133 | 0x0133 | 0x0133 | 0x0133 | 0x0133 | 0x013b | 0x013b | 0x014c |
| NtRenameTransactionManager | 0x0134 | 0x0134 | 0x0134 | 0x0134 | 0x0134 | 0x013c | 0x013c | 0x014d | |||||||
| NtReplaceKey | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x00e7 | 0x0139 | 0x0135 | 0x0135 | 0x0135 | 0x0135 | 0x0135 | 0x013d | 0x013d | 0x014e |
| NtReplacePartitionUnit | 0x0136 | 0x0136 | 0x0136 | 0x0136 | 0x0136 | 0x013e | 0x013e | 0x014f | |||||||
| NtReplyPort | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 | 0x0009 |
| NtReplyWaitReceivePort | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 | 0x0008 |
| NtReplyWaitReceivePortEx | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 | 0x0028 |
| NtReplyWaitReplyPort | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x00e8 | 0x013a | 0x0137 | 0x0137 | 0x0137 | 0x0137 | 0x0137 | 0x013f | 0x013f | 0x0150 |
| NtRequestDeviceWakeup | 0x0086 | 0x0086 | 0x0086 | ||||||||||||
| NtRequestPort | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x00ea | 0x013c | 0x0139 | 0x0139 | 0x0139 | 0x0139 | 0x0139 | 0x0140 | 0x0140 | 0x0151 |
| NtRequestWaitReplyPort | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f | 0x001f |
| NtRequestWakeupLatency | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x00eb | 0x013d | 0x013a | 0x013a | 0x013a | 0x013a | 0x013a | |||
| NtResetEvent | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x00ec | 0x013e | 0x013b | 0x013b | 0x013b | 0x013b | 0x013b | 0x0141 | 0x0141 | 0x0152 |
| NtResetWriteWatch | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x00ed | 0x013f | 0x013c | 0x013c | 0x013c | 0x013c | 0x013c | 0x0142 | 0x0142 | 0x0153 |
| NtRestoreKey | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x00ee | 0x0140 | 0x013d | 0x013d | 0x013d | 0x013d | 0x013d | 0x0143 | 0x0143 | 0x0154 |
| NtResumeProcess | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x00ef | 0x0141 | 0x013e | 0x013e | 0x013e | 0x013e | 0x013e | 0x0144 | 0x0144 | 0x0155 |
| NtResumeThread | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f | 0x004f |
| NtRollbackComplete | 0x0142 | 0x013f | 0x013f | 0x013f | 0x013f | 0x013f | 0x0145 | 0x0145 | 0x0156 | ||||||
| NtRollbackEnlistment | 0x0143 | 0x0140 | 0x0140 | 0x0140 | 0x0140 | 0x0140 | 0x0146 | 0x0146 | 0x0157 | ||||||
| NtRollbackTransaction | 0x0145 | 0x0141 | 0x0141 | 0x0141 | 0x0141 | 0x0141 | 0x0147 | 0x0147 | 0x0158 | ||||||
| NtRollforwardTransactionManager | 0x0146 | 0x0142 | 0x0142 | 0x0142 | 0x0142 | 0x0142 | 0x0148 | 0x0148 | 0x0159 | ||||||
| NtSaveKey | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x00f0 | 0x0147 | 0x0143 | 0x0143 | 0x0143 | 0x0143 | 0x0143 | 0x0149 | 0x0149 | 0x015a |
| NtSaveKeyEx | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x00f1 | 0x0148 | 0x0144 | 0x0144 | 0x0144 | 0x0144 | 0x0144 | 0x014a | 0x014a | 0x015b |
| NtSaveMergedKeys | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x00f2 | 0x0149 | 0x0145 | 0x0145 | 0x0145 | 0x0145 | 0x0145 | 0x014b | 0x014b | 0x015c |
| NtSavepointTransaction | 0x0086 | ||||||||||||||
| NtSecureConnectPort | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x00f3 | 0x014c | 0x0146 | 0x0146 | 0x0146 | 0x0146 | 0x0146 | 0x014c | 0x014c | 0x015d |
| NtSerializeBoot | 0x014d | 0x014d | 0x015e | ||||||||||||
| NtSetBootEntryOrder | 0x014d | 0x0147 | 0x0147 | 0x0147 | 0x0147 | 0x0147 | 0x014e | 0x014e | 0x015f | ||||||
| NtSetBootOptions | 0x014e | 0x0148 | 0x0148 | 0x0148 | 0x0148 | 0x0148 | 0x014f | 0x014f | 0x0160 | ||||||
| NtSetContextThread | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x00f6 | 0x014f | 0x0149 | 0x0149 | 0x0149 | 0x0149 | 0x0149 | 0x0150 | 0x0150 | 0x0161 |
| NtSetDebugFilterState | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x00f7 | 0x0150 | 0x014a | 0x014a | 0x014a | 0x014a | 0x014a | 0x0151 | 0x0151 | 0x0162 |
| NtSetDefaultHardErrorPort | 0x00f8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x00f8 | 0x0151 | 0x014b | 0x014b | 0x014b | 0x014b | 0x014b | 0x0152 | 0x0152 | 0x0163 |
| NtSetDefaultLocale | 0x00f9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x00f9 | 0x0152 | 0x014c | 0x014c | 0x014c | 0x014c | 0x014c | 0x0153 | 0x0153 | 0x0164 |
| NtSetDefaultUILanguage | 0x00fa | 0x00fa | 0x00fa | 0x00fa | 0x00fa | 0x00fa | 0x0153 | 0x014d | 0x014d | 0x014d | 0x014d | 0x014d | 0x0154 | 0x0154 | 0x0165 |
| NtSetDriverEntryOrder | 0x0154 | 0x014e | 0x014e | 0x014e | 0x014e | 0x014e | 0x0155 | 0x0155 | 0x0166 | ||||||
| NtSetEaFile | 0x00fc | 0x00fc | 0x00fc | 0x00fc | 0x00fc | 0x00fc | 0x0155 | 0x014f | 0x014f | 0x014f | 0x014f | 0x014f | 0x0156 | 0x0156 | 0x0167 |
| NtSetEvent | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b | 0x000b |
| NtSetEventBoostPriority | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a | 0x002a |
| NtSetHighEventPair | 0x00fd | 0x00fd | 0x00fd | 0x00fd | 0x00fd | 0x00fd | 0x0156 | 0x0150 | 0x0150 | 0x0150 | 0x0150 | 0x0150 | 0x0157 | 0x0157 | 0x0168 |
| NtSetHighWaitLowEventPair | 0x00fe | 0x00fe | 0x00fe | 0x00fe | 0x00fe | 0x00fe | 0x0157 | 0x0151 | 0x0151 | 0x0151 | 0x0151 | 0x0151 | 0x0158 | 0x0158 | 0x0169 |
| NtSetInformationDebugObject | 0x00ff | 0x00ff | 0x00ff | 0x00ff | 0x00ff | 0x00ff | 0x0158 | 0x0152 | 0x0152 | 0x0152 | 0x0152 | 0x0152 | 0x0159 | 0x0159 | 0x016a |
| NtSetInformationEnlistment | 0x0159 | 0x0153 | 0x0153 | 0x0153 | 0x0153 | 0x0153 | 0x015a | 0x015a | 0x016b | ||||||
| NtSetInformationFile | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 | 0x0024 |
| NtSetInformationJobObject | 0x0100 | 0x0100 | 0x0100 | 0x0100 | 0x0100 | 0x0100 | 0x015a | 0x0154 | 0x0154 | 0x0154 | 0x0154 | 0x0154 | 0x015b | 0x015b | 0x016c |
| NtSetInformationKey | 0x0101 | 0x0101 | 0x0101 | 0x0101 | 0x0101 | 0x0101 | 0x015b | 0x0155 | 0x0155 | 0x0155 | 0x0155 | 0x0155 | 0x015c | 0x015c | 0x016d |
| NtSetInformationObject | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 | 0x0059 |
| NtSetInformationProcess | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 | 0x0019 |
| NtSetInformationResourceManager | 0x015c | 0x0156 | 0x0156 | 0x0156 | 0x0156 | 0x0156 | 0x015d | 0x015d | 0x016e | ||||||
| NtSetInformationThread | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a | 0x000a |
| NtSetInformationToken | 0x0102 | 0x0102 | 0x0102 | 0x0102 | 0x0102 | 0x0102 | 0x015d | 0x0157 | 0x0157 | 0x0157 | 0x0157 | 0x0157 | 0x015e | 0x015e | 0x016f |
| NtSetInformationTransaction | 0x015e | 0x0158 | 0x0158 | 0x0158 | 0x0158 | 0x0158 | 0x015f | 0x015f | 0x0170 | ||||||
| NtSetInformationTransactionManager | 0x015f | 0x0159 | 0x0159 | 0x0159 | 0x0159 | 0x0159 | 0x0160 | 0x0160 | 0x0171 | ||||||
| NtSetInformationWorkerFactory | 0x0160 | 0x015a | 0x015a | 0x015a | 0x015a | 0x015a | 0x0161 | 0x0161 | 0x0172 | ||||||
| NtSetIntervalProfile | 0x0103 | 0x0103 | 0x0103 | 0x0103 | 0x0103 | 0x0103 | 0x0161 | 0x015b | 0x015b | 0x015b | 0x015b | 0x015b | 0x0162 | 0x0162 | 0x0173 |
| NtSetIoCompletion | 0x0104 | 0x0104 | 0x0104 | 0x0104 | 0x0104 | 0x0104 | 0x0162 | 0x015c | 0x015c | 0x015c | 0x015c | 0x015c | 0x0163 | 0x0163 | 0x0174 |
| NtSetIoCompletionEx | 0x0164 | 0x0164 | 0x0175 | ||||||||||||
| NtSetLdtEntries | 0x015d | 0x015d | 0x015d | ||||||||||||
| NtSetLowEventPair | 0x0106 | 0x0106 | 0x0106 | 0x0106 | 0x0106 | 0x0106 | 0x0164 | 0x015e | 0x015e | 0x015e | 0x015e | 0x015e | 0x0166 | 0x0166 | 0x0177 |
| NtSetLowWaitHighEventPair | 0x0107 | 0x0107 | 0x0107 | 0x0107 | 0x0107 | 0x0107 | 0x0165 | 0x015f | 0x015f | 0x015f | 0x015f | 0x015f | 0x0167 | 0x0167 | 0x0178 |
| NtSetQuotaInformationFile | 0x0108 | 0x0108 | 0x0108 | 0x0108 | 0x0108 | 0x0108 | 0x0166 | 0x0160 | 0x0160 | 0x0160 | 0x0160 | 0x0160 | 0x0168 | 0x0168 | 0x0179 |
| NtSetSecurityObject | 0x0109 | 0x0109 | 0x0109 | 0x0109 | 0x0109 | 0x0109 | 0x0167 | 0x0161 | 0x0161 | 0x0161 | 0x0161 | 0x0161 | 0x0169 | 0x0169 | 0x017a |
| NtSetSystemCodeIntegrityRoots | 0x017b | ||||||||||||||
| NtSetSystemEnvironmentValue | 0x010a | 0x010a | 0x010a | 0x010a | 0x010a | 0x010a | 0x0168 | 0x0162 | 0x0162 | 0x0162 | 0x0162 | 0x0162 | 0x016a | 0x016a | 0x017c |
| NtSetSystemEnvironmentValueEx | 0x0169 | 0x0163 | 0x0163 | 0x0163 | 0x0163 | 0x0163 | 0x016b | 0x016b | 0x017d | ||||||
| NtSetSystemInformation | 0x010c | 0x010c | 0x010c | 0x010c | 0x010c | 0x010c | 0x016a | 0x0164 | 0x0164 | 0x0164 | 0x0164 | 0x0164 | 0x016c | 0x016c | 0x017e |
| NtSetSystemPowerState | 0x010d | 0x010d | 0x010d | 0x010d | 0x010d | 0x010d | 0x016b | 0x0165 | 0x0165 | 0x0165 | 0x0165 | 0x0165 | 0x016d | 0x016d | 0x017f |
| NtSetSystemTime | 0x010e | 0x010e | 0x010e | 0x010e | 0x010e | 0x010e | 0x016c | 0x0166 | 0x0166 | 0x0166 | 0x0166 | 0x0166 | 0x016e | 0x016e | 0x0180 |
| NtSetThreadExecutionState | 0x010f | 0x010f | 0x010f | 0x010f | 0x010f | 0x010f | 0x016d | 0x0167 | 0x0167 | 0x0167 | 0x0167 | 0x0167 | 0x016f | 0x016f | 0x0181 |
| NtSetTimer | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f | 0x005f |
| NtSetTimerEx | 0x0170 | 0x0170 | 0x0182 | ||||||||||||
| NtSetTimerResolution | 0x0110 | 0x0110 | 0x0110 | 0x0110 | 0x0110 | 0x0110 | 0x016e | 0x0168 | 0x0168 | 0x0168 | 0x0168 | 0x0168 | 0x0171 | 0x0171 | 0x0183 |
| NtSetUuidSeed | 0x0111 | 0x0111 | 0x0111 | 0x0111 | 0x0111 | 0x0111 | 0x016f | 0x0169 | 0x0169 | 0x0169 | 0x0169 | 0x0169 | 0x0172 | 0x0172 | 0x0184 |
| NtSetValueKey | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d | 0x005d |
| NtSetVolumeInformationFile | 0x0112 | 0x0112 | 0x0112 | 0x0112 | 0x0112 | 0x0112 | 0x0170 | 0x016a | 0x016a | 0x016a | 0x016a | 0x016a | 0x0173 | 0x0173 | 0x0185 |
| NtShutdownSystem | 0x0113 | 0x0113 | 0x0113 | 0x0113 | 0x0113 | 0x0113 | 0x0171 | 0x016b | 0x016b | 0x016b | 0x016b | 0x016b | 0x0174 | 0x0174 | 0x0186 |
| NtShutdownWorkerFactory | 0x0172 | 0x016c | 0x016c | 0x016c | 0x016c | 0x016c | 0x0175 | 0x0175 | 0x0187 | ||||||
| NtSignalAndWaitForSingleObject | 0x0114 | 0x0114 | 0x0114 | 0x0114 | 0x0114 | 0x0114 | 0x0173 | 0x016d | 0x016d | 0x016d | 0x016d | 0x016d | 0x0176 | 0x0176 | 0x0188 |
| NtSinglePhaseReject | 0x0174 | 0x016e | 0x016e | 0x016e | 0x016e | 0x016e | 0x0177 | 0x0177 | 0x0189 | ||||||
| NtStartProfile | 0x0115 | 0x0115 | 0x0115 | 0x0115 | 0x0115 | 0x0115 | 0x0175 | 0x016f | 0x016f | 0x016f | 0x016f | 0x016f | 0x0178 | 0x0178 | 0x018a |
| NtStopProfile | 0x0116 | 0x0116 | 0x0116 | 0x0116 | 0x0116 | 0x0116 | 0x0177 | 0x0170 | 0x0170 | 0x0170 | 0x0170 | 0x0170 | 0x0179 | 0x0179 | 0x018b |
| NtSubscribeWnfStateChange | 0x018c | ||||||||||||||
| NtSuspendProcess | 0x0117 | 0x0117 | 0x0117 | 0x0117 | 0x0117 | 0x0117 | 0x0178 | 0x0171 | 0x0171 | 0x0171 | 0x0171 | 0x0171 | 0x017a | 0x017a | 0x018d |
| NtSuspendThread | 0x0118 | 0x0118 | 0x0118 | 0x0118 | 0x0118 | 0x0118 | 0x0179 | 0x0172 | 0x0172 | 0x0172 | 0x0172 | 0x0172 | 0x017b | 0x017b | 0x018e |
| NtSystemDebugControl | 0x0119 | 0x0119 | 0x0119 | 0x0119 | 0x0119 | 0x0119 | 0x017a | 0x0173 | 0x0173 | 0x0173 | 0x0173 | 0x0173 | 0x017c | 0x017c | 0x018f |
| NtTerminateJobObject | 0x011a | 0x011a | 0x011a | 0x011a | 0x011a | 0x011a | 0x017b | 0x0174 | 0x0174 | 0x0174 | 0x0174 | 0x0174 | 0x017d | 0x017d | 0x0190 |
| NtTerminateProcess | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 | 0x0029 |
| NtTerminateThread | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 | 0x0050 |
| NtTestAlert | 0x011b | 0x011b | 0x011b | 0x011b | 0x011b | 0x011b | 0x017c | 0x0175 | 0x0175 | 0x0175 | 0x0175 | 0x0175 | 0x017e | 0x017e | 0x0191 |
| NtThawRegistry | 0x017d | 0x0176 | 0x0176 | 0x0176 | 0x0176 | 0x0176 | 0x017f | 0x017f | 0x0192 | ||||||
| NtThawTransactions | 0x017e | 0x0177 | 0x0177 | 0x0177 | 0x0177 | 0x0177 | 0x0180 | 0x0180 | 0x0193 | ||||||
| NtTraceControl | 0x017f | 0x0178 | 0x0178 | 0x0178 | 0x0178 | 0x0178 | 0x0181 | 0x0181 | 0x0194 | ||||||
| NtTraceEvent | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b | 0x005b |
| NtTranslateFilePath | 0x0180 | 0x0179 | 0x0179 | 0x0179 | 0x0179 | 0x0179 | 0x0182 | 0x0182 | 0x0195 | ||||||
| NtUmsThreadYield | 0x0183 | 0x0183 | 0x0196 | ||||||||||||
| NtUnloadDriver | 0x011d | 0x011d | 0x011d | 0x011d | 0x011d | 0x011d | 0x0181 | 0x017a | 0x017a | 0x017a | 0x017a | 0x017a | 0x0184 | 0x0184 | 0x0197 |
| NtUnloadKey | 0x011e | 0x011e | 0x011e | 0x011e | 0x011e | 0x011e | 0x0182 | 0x017b | 0x017b | 0x017b | 0x017b | 0x017b | 0x0185 | 0x0185 | 0x0198 |
| NtUnloadKey2 | 0x011f | 0x011f | 0x011f | 0x011f | 0x011f | 0x011f | 0x0183 | 0x017c | 0x017c | 0x017c | 0x017c | 0x017c | 0x0186 | 0x0186 | 0x0199 |
| NtUnloadKeyEx | 0x0120 | 0x0120 | 0x0120 | 0x0120 | 0x0120 | 0x0120 | 0x0184 | 0x017d | 0x017d | 0x017d | 0x017d | 0x017d | 0x0187 | 0x0187 | 0x019a |
| NtUnlockFile | 0x0121 | 0x0121 | 0x0121 | 0x0121 | 0x0121 | 0x0121 | 0x0185 | 0x017e | 0x017e | 0x017e | 0x017e | 0x017e | 0x0188 | 0x0188 | 0x019b |
| NtUnlockVirtualMemory | 0x0122 | 0x0122 | 0x0122 | 0x0122 | 0x0122 | 0x0122 | 0x0186 | 0x017f | 0x017f | 0x017f | 0x017f | 0x017f | 0x0189 | 0x0189 | 0x019c |
| NtUnmapViewOfSection | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 | 0x0027 |
| NtUnmapViewOfSectionEx | 0x019d | ||||||||||||||
| NtUnsubscribeWnfStateChange | 0x019e | ||||||||||||||
| NtUpdateWnfStateData | 0x019f | ||||||||||||||
| NtVdmControl | 0x0123 | 0x0123 | 0x0123 | 0x0123 | 0x0123 | 0x0123 | 0x0187 | 0x0180 | 0x0180 | 0x0180 | 0x0180 | 0x0180 | 0x018a | 0x018a | 0x006a |
| NtWaitForAlertByThreadId | 0x01a1 | ||||||||||||||
| NtWaitForDebugEvent | 0x0124 | 0x0124 | 0x0124 | 0x0124 | 0x0124 | 0x0124 | 0x0188 | 0x0181 | 0x0181 | 0x0181 | 0x0181 | 0x0181 | 0x018b | 0x018b | 0x01a2 |
| NtWaitForKeyedEvent | 0x0125 | 0x0125 | 0x0125 | 0x0125 | 0x0125 | 0x0125 | 0x0189 | 0x0182 | 0x0182 | 0x0182 | 0x0182 | 0x0182 | 0x018c | 0x018c | 0x01a3 |
| NtWaitForMultipleObjects | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 | 0x0058 |
| NtWaitForMultipleObjects32 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 | 0x0017 |
| NtWaitForSingleObject | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 | 0x0001 |
| NtWaitForWnfNotifications | 0x01a4 | ||||||||||||||
| NtWaitForWorkViaWorkerFactory | 0x018a | 0x0183 | 0x0183 | 0x0183 | 0x0183 | 0x0183 | 0x018d | 0x018d | 0x01a5 | ||||||
| NtWaitHighEventPair | 0x0126 | 0x0126 | 0x0126 | 0x0126 | 0x0126 | 0x0126 | 0x018b | 0x0184 | 0x0184 | 0x0184 | 0x0184 | 0x0184 | 0x018e | 0x018e | 0x01a6 |
| NtWaitLowEventPair | 0x0127 | 0x0127 | 0x0127 | 0x0127 | 0x0127 | 0x0127 | 0x018c | 0x0185 | 0x0185 | 0x0185 | 0x0185 | 0x0185 | 0x018f | 0x018f | 0x01a7 |
| NtWorkerFactoryWorkerReady | 0x018d | 0x0186 | 0x0186 | 0x0186 | 0x0186 | 0x0186 | 0x0190 | 0x0190 | 0x01a8 | ||||||
| NtWriteFile | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 | 0x0005 |
| NtWriteFileGather | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 | 0x0018 |
| NtWriteRequestData | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 | 0x0054 |
| NtWriteVirtualMemory | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 | 0x0037 |
| NtYieldExecution | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 | 0x0043 |
| ShimExceptionHandler | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | 0x00d9 | |||||||||
| xHalAllocatePmcCounterSet | 0x009d | ||||||||||||||
| xHalGetInterruptTranslator | 0x0176 | 0x008d | 0x008d | 0x0093 | |||||||||||
| xHalPostMicrocodeUpdate | 0x0086 | 0x0086 | |||||||||||||
| xKdReleaseIntegratedDeviceForDebugging | 0x0176 | ||||||||||||||
| xKdSetupPciDeviceForDebugging | 0x0105 | 0x0105 | 0x0105 | 0x0105 | 0x0105 | 0x0105 | 0x00e8 | 0x015d | 0x015d | 0x0165 | 0x0165 | ||||