Syscall(hex) Syscall(dec) Syscall(name)
-------------------------------------------------------------------------
0 0 NtAccessCheck
0 0 NtFlushWriteBuffer
0 0 NtFreeUserPhysicalPages
0 0 NtFreezeRegistry
0 0 NtFreezeTransactions
0 0 NtGetCachedSigningLevel
0 0 NtGetCompleteWnfStateSubscription
0 0 NtGetContextThread
0 0 NtGetCurrentProcessorNumber
0 0 NtGetCurrentProcessorNumberEx
0 0 NtGetDevicePowerState
0 0 ZwAccessCheck
0 0 ZwFlushWriteBuffer
0 0 ZwFreeUserPhysicalPages
0 0 ZwFreezeRegistry
0 0 ZwFreezeTransactions
0 0 ZwGetCachedSigningLevel
0 0 ZwGetCompleteWnfStateSubscription
0 0 ZwGetContextThread
0 0 ZwGetCurrentProcessorNumber
0 0 ZwGetCurrentProcessorNumberEx
0 0 ZwGetDevicePowerState
1 1 NtWorkerFactoryWorkerReady
1 1 ZwWorkerFactoryWorkerReady
2 2 NtAcceptConnectPort
2 2 ZwAcceptConnectPort
3 3 NtMapUserPhysicalPagesScatter
3 3 ZwMapUserPhysicalPagesScatter
4 4 NtWaitForSingleObject
4 4 ZwWaitForSingleObject
5 5 NtCallbackReturn
5 5 ZwCallbackReturn
6 6 NtReadFile
6 6 ZwReadFile
7 7 NtDeviceIoControlFile
7 7 ZwDeviceIoControlFile
8 8 NtWriteFile
8 8 ZwWriteFile
9 9 NtRemoveIoCompletion
9 9 ZwRemoveIoCompletion
A 10 NtReleaseSemaphore
A 10 ZwReleaseSemaphore
B 11 NtReplyWaitReceivePort
B 11 ZwReplyWaitReceivePort
C 12 NtReplyPort
C 12 ZwReplyPort
D 13 NtSetInformationThread
D 13 ZwSetInformationThread
E 14 NtSetEvent
E 14 ZwSetEvent
F 15 NtClose
F 15 ZwClose
10 16 NtQueryObject
10 16 ZwQueryObject
11 17 NtQueryInformationFile
11 17 ZwQueryInformationFile
12 18 NtOpenKey
12 18 ZwOpenKey
13 19 NtEnumerateValueKey
13 19 ZwEnumerateValueKey
14 20 NtFindAtom
14 20 ZwFindAtom
15 21 NtQueryDefaultLocale
15 21 ZwQueryDefaultLocale
16 22 NtQueryKey
16 22 ZwQueryKey
17 23 NtQueryValueKey
17 23 ZwQueryValueKey
18 24 NtAllocateVirtualMemory
18 24 ZwAllocateVirtualMemory
19 25 NtQueryInformationProcess
19 25 ZwQueryInformationProcess
01A 26 NtWaitForMultipleObjects32
01A 26 ZwWaitForMultipleObjects32
01B 27 NtWriteFileGather
01B 27 ZwWriteFileGather
01C 28 NtSetInformationProcess
01C 28 ZwSetInformationProcess
01D 29 NtCreateKey
01D 29 ZwCreateKey
01E 30 NtFreeVirtualMemory
01E 30 ZwFreeVirtualMemory
01F 31 NtImpersonateClientOfPort
01F 31 ZwImpersonateClientOfPort
20 32 NtReleaseMutant
20 32 ZwReleaseMutant
21 33 NtQueryInformationToken
21 33 ZwQueryInformationToken
22 34 NtRequestWaitReplyPort
22 34 ZwRequestWaitReplyPort
23 35 NtQueryVirtualMemory
23 35 ZwQueryVirtualMemory
24 36 NtOpenThreadToken
24 36 ZwOpenThreadToken
25 37 NtQueryInformationThread
25 37 ZwQueryInformationThread
26 38 NtOpenProcess
26 38 ZwOpenProcess
27 39 NtSetInformationFile
27 39 ZwSetInformationFile
28 40 NtMapViewOfSection
28 40 ZwMapViewOfSection
29 41 NtAccessCheckAndAuditAlarm
29 41 ZwAccessCheckAndAuditAlarm
02A 42 NtUnmapViewOfSection
02A 42 ZwUnmapViewOfSection
02B 43 NtReplyWaitReceivePortEx
02B 43 ZwReplyWaitReceivePortEx
02C 44 NtTerminateProcess
02C 44 ZwTerminateProcess
02D 45 NtSetEventBoostPriority
02D 45 ZwSetEventBoostPriority
02E 46 NtReadFileScatter
02E 46 ZwReadFileScatter
02F 47 NtOpenThreadTokenEx
02F 47 ZwOpenThreadTokenEx
30 48 NtOpenProcessTokenEx
30 48 ZwOpenProcessTokenEx
31 49 NtQueryPerformanceCounter
31 49 ZwQueryPerformanceCounter
32 50 NtEnumerateKey
32 50 ZwEnumerateKey
33 51 NtOpenFile
33 51 ZwOpenFile
34 52 NtDelayExecution
34 52 ZwDelayExecution
35 53 NtQueryDirectoryFile
35 53 ZwQueryDirectoryFile
36 54 NtQuerySystemInformation
36 54 RtlGetNativeSystemInformation
36 54 ZwQuerySystemInformation
37 55 NtOpenSection
37 55 ZwOpenSection
38 56 NtQueryTimer
38 56 ZwQueryTimer
39 57 NtFsControlFile
39 57 ZwFsControlFile
03A 58 NtWriteVirtualMemory
03A 58 ZwWriteVirtualMemory
03B 59 NtCloseObjectAuditAlarm
03B 59 ZwCloseObjectAuditAlarm
03C 60 NtDuplicateObject
03C 60 ZwDuplicateObject
03D 61 NtQueryAttributesFile
03D 61 ZwQueryAttributesFile
03E 62 NtClearEvent
03E 62 ZwClearEvent
03F 63 NtReadVirtualMemory
03F 63 ZwReadVirtualMemory
40 64 NtOpenEvent
40 64 ZwOpenEvent
41 65 NtAdjustPrivilegesToken
41 65 ZwAdjustPrivilegesToken
42 66 NtDuplicateToken
42 66 ZwDuplicateToken
43 67 NtContinue
43 67 ZwContinue
44 68 NtQueryDefaultUILanguage
44 68 ZwQueryDefaultUILanguage
45 69 NtQueueApcThread
45 69 ZwQueueApcThread
46 70 NtYieldExecution
46 70 ZwYieldExecution
47 71 NtAddAtom
47 71 ZwAddAtom
48 72 NtCreateEvent
48 72 ZwCreateEvent
49 73 NtQueryVolumeInformationFile
49 73 ZwQueryVolumeInformationFile
04A 74 NtCreateSection
04A 74 ZwCreateSection
04B 75 NtFlushBuffersFile
04B 75 ZwFlushBuffersFile
04C 76 NtApphelpCacheControl
04C 76 ZwApphelpCacheControl
04D 77 NtCreateProcessEx
04D 77 ZwCreateProcessEx
04E 78 NtCreateThread
04E 78 ZwCreateThread
04F 79 NtIsProcessInJob
04F 79 ZwIsProcessInJob
50 80 NtProtectVirtualMemory
50 80 ZwProtectVirtualMemory
51 81 NtQuerySection
51 81 ZwQuerySection
52 82 NtResumeThread
52 82 ZwResumeThread
53 83 NtTerminateThread
53 83 ZwTerminateThread
54 84 NtReadRequestData
54 84 ZwReadRequestData
55 85 NtCreateFile
55 85 ZwCreateFile
56 86 NtQueryEvent
56 86 ZwQueryEvent
57 87 NtWriteRequestData
57 87 ZwWriteRequestData
58 88 NtOpenDirectoryObject
58 88 ZwOpenDirectoryObject
59 89 NtAccessCheckByTypeAndAuditAlarm
59 89 ZwAccessCheckByTypeAndAuditAlarm
05B 91 NtWaitForMultipleObjects
05B 91 ZwWaitForMultipleObjects
05C 92 NtSetInformationObject
05C 92 ZwSetInformationObject
05D 93 NtCancelIoFile
05D 93 ZwCancelIoFile
05E 94 NtTraceEvent
05E 94 ZwTraceEvent
05F 95 NtPowerInformation
05F 95 ZwPowerInformation
60 96 NtSetValueKey
60 96 ZwSetValueKey
61 97 NtCancelTimer
61 97 ZwCancelTimer
62 98 NtSetTimer
62 98 ZwSetTimer
63 99 NtAccessCheckByType
63 99 ZwAccessCheckByType
64 100 NtAccessCheckByTypeResultList
64 100 ZwAccessCheckByTypeResultList
65 101 NtAccessCheckByTypeResultListAndAuditAlarm
65 101 ZwAccessCheckByTypeResultListAndAuditAlarm
66 102 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
66 102 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
67 103 NtAddAtomEx
67 103 ZwAddAtomEx
68 104 NtAddBootEntry
68 104 ZwAddBootEntry
69 105 NtAddDriverEntry
69 105 ZwAddDriverEntry
06A 106 NtAdjustGroupsToken
06A 106 ZwAdjustGroupsToken
06B 107 NtAdjustTokenClaimsAndDeviceGroups
06B 107 ZwAdjustTokenClaimsAndDeviceGroups
06C 108 NtAlertResumeThread
06C 108 ZwAlertResumeThread
06D 109 NtAlertThread
06D 109 ZwAlertThread
06E 110 NtAlertThreadByThreadId
06E 110 ZwAlertThreadByThreadId
06F 111 NtAllocateLocallyUniqueId
06F 111 ZwAllocateLocallyUniqueId
70 112 NtAllocateReserveObject
70 112 ZwAllocateReserveObject
71 113 NtAllocateUserPhysicalPages
71 113 ZwAllocateUserPhysicalPages
72 114 NtAllocateUuids
72 114 ZwAllocateUuids
73 115 NtAlpcAcceptConnectPort
73 115 ZwAlpcAcceptConnectPort
74 116 NtAlpcCancelMessage
74 116 ZwAlpcCancelMessage
75 117 NtAlpcConnectPort
75 117 ZwAlpcConnectPort
76 118 NtAlpcConnectPortEx
76 118 ZwAlpcConnectPortEx
77 119 NtAlpcCreatePort
77 119 ZwAlpcCreatePort
78 120 NtAlpcCreatePortSection
78 120 ZwAlpcCreatePortSection
79 121 NtAlpcCreateResourceReserve
79 121 ZwAlpcCreateResourceReserve
07A 122 NtAlpcCreateSectionView
07A 122 ZwAlpcCreateSectionView
07B 123 NtAlpcCreateSecurityContext
07B 123 ZwAlpcCreateSecurityContext
07C 124 NtAlpcDeletePortSection
07C 124 ZwAlpcDeletePortSection
07D 125 NtAlpcDeleteResourceReserve
07D 125 ZwAlpcDeleteResourceReserve
07E 126 NtAlpcDeleteSectionView
07E 126 ZwAlpcDeleteSectionView
07F 127 NtAlpcDeleteSecurityContext
07F 127 ZwAlpcDeleteSecurityContext
80 128 NtAlpcDisconnectPort
80 128 ZwAlpcDisconnectPort
81 129 NtAlpcImpersonateClientContainerOfPort
81 129 ZwAlpcImpersonateClientContainerOfPort
82 130 NtAlpcImpersonateClientOfPort
82 130 ZwAlpcImpersonateClientOfPort
83 131 NtAlpcOpenSenderProcess
83 131 ZwAlpcOpenSenderProcess
84 132 NtAlpcOpenSenderThread
84 132 ZwAlpcOpenSenderThread
85 133 NtAlpcQueryInformation
85 133 ZwAlpcQueryInformation
86 134 NtAlpcQueryInformationMessage
86 134 ZwAlpcQueryInformationMessage
87 135 NtAlpcRevokeSecurityContext
87 135 ZwAlpcRevokeSecurityContext
88 136 NtAlpcSendWaitReceivePort
88 136 ZwAlpcSendWaitReceivePort
89 137 NtAlpcSetInformation
89 137 ZwAlpcSetInformation
08A 138 NtAreMappedFilesTheSame
08A 138 ZwAreMappedFilesTheSame
08B 139 NtAssignProcessToJobObject
08B 139 ZwAssignProcessToJobObject
08C 140 NtAssociateWaitCompletionPacket
08C 140 ZwAssociateWaitCompletionPacket
08D 141 NtCancelIoFileEx
08D 141 ZwCancelIoFileEx
08E 142 NtCancelSynchronousIoFile
08E 142 ZwCancelSynchronousIoFile
08F 143 NtCancelTimer2
08F 143 ZwCancelTimer2
90 144 NtCancelWaitCompletionPacket
90 144 ZwCancelWaitCompletionPacket
91 145 NtCommitComplete
91 145 ZwCommitComplete
92 146 NtCommitEnlistment
92 146 ZwCommitEnlistment
93 147 NtCommitRegistryTransaction
93 147 ZwCommitRegistryTransaction
94 148 NtCommitTransaction
94 148 ZwCommitTransaction
95 149 NtCompactKeys
95 149 ZwCompactKeys
96 150 NtCompareObjects
96 150 ZwCompareObjects
97 151 NtCompareTokens
97 151 ZwCompareTokens
98 152 NtCompleteConnectPort
98 152 ZwCompleteConnectPort
99 153 NtCompressKey
99 153 ZwCompressKey
09A 154 NtConnectPort
09A 154 ZwConnectPort
09B 155 NtCreateDebugObject
09B 155 ZwCreateDebugObject
09C 156 NtCreateDirectoryObject
09C 156 ZwCreateDirectoryObject
09D 157 NtCreateDirectoryObjectEx
09D 157 ZwCreateDirectoryObjectEx
09E 158 NtCreateEnclave
09E 158 ZwCreateEnclave
09F 159 NtCreateEnlistment
09F 159 ZwCreateEnlistment
0A0 160 NtCreateEventPair
0A0 160 ZwCreateEventPair
0A1 161 NtCreateIRTimer
0A1 161 ZwCreateIRTimer
0A2 162 NtCreateIoCompletion
0A2 162 ZwCreateIoCompletion
0A3 163 NtCreateJobObject
0A3 163 ZwCreateJobObject
0A4 164 NtCreateJobSet
0A4 164 ZwCreateJobSet
0A5 165 NtCreateKeyTransacted
0A5 165 ZwCreateKeyTransacted
0A6 166 NtCreateKeyedEvent
0A6 166 ZwCreateKeyedEvent
0A7 167 NtCreateLowBoxToken
0A7 167 ZwCreateLowBoxToken
0A8 168 NtCreateMailslotFile
0A8 168 ZwCreateMailslotFile
0A9 169 NtCreateMutant
0A9 169 ZwCreateMutant
0AA 170 NtCreateNamedPipeFile
0AA 170 ZwCreateNamedPipeFile
0AB 171 NtCreatePagingFile
0AB 171 ZwCreatePagingFile
0AC 172 NtCreatePartition
0AC 172 ZwCreatePartition
0AD 173 NtCreatePort
0AD 173 ZwCreatePort
0AE 174 NtCreatePrivateNamespace
0AE 174 ZwCreatePrivateNamespace
0AF 175 NtCreateProcess
0AF 175 ZwCreateProcess
0B0 176 NtCreateProfile
0B0 176 ZwCreateProfile
0B1 177 NtCreateProfileEx
0B1 177 ZwCreateProfileEx
0B2 178 NtCreateRegistryTransaction
0B2 178 ZwCreateRegistryTransaction
0B3 179 NtCreateResourceManager
0B3 179 ZwCreateResourceManager
0B4 180 NtCreateSemaphore
0B4 180 ZwCreateSemaphore
0B5 181 NtCreateSymbolicLinkObject
0B5 181 ZwCreateSymbolicLinkObject
0B6 182 NtCreateThreadEx
0B6 182 ZwCreateThreadEx
0B7 183 NtCreateTimer
0B7 183 ZwCreateTimer
0B8 184 NtCreateTimer2
0B8 184 ZwCreateTimer2
0B9 185 NtCreateToken
0B9 185 ZwCreateToken
0BA 186 NtCreateTokenEx
0BA 186 ZwCreateTokenEx
0BB 187 NtCreateTransaction
0BB 187 ZwCreateTransaction
0BC 188 NtCreateTransactionManager
0BC 188 ZwCreateTransactionManager
0BD 189 NtCreateUserProcess
0BD 189 ZwCreateUserProcess
0BE 190 NtCreateWaitCompletionPacket
0BE 190 ZwCreateWaitCompletionPacket
0BF 191 NtCreateWaitablePort
0BF 191 ZwCreateWaitablePort
0C0 192 NtCreateWnfStateName
0C0 192 ZwCreateWnfStateName
0C1 193 NtCreateWorkerFactory
0C1 193 ZwCreateWorkerFactory
0C2 194 NtDebugActiveProcess
0C2 194 ZwDebugActiveProcess
0C3 195 NtDebugContinue
0C3 195 ZwDebugContinue
0C4 196 NtDeleteAtom
0C4 196 ZwDeleteAtom
0C5 197 NtDeleteBootEntry
0C5 197 ZwDeleteBootEntry
0C6 198 NtDeleteDriverEntry
0C6 198 ZwDeleteDriverEntry
0C7 199 NtDeleteFile
0C7 199 ZwDeleteFile
0C8 200 NtDeleteKey
0C8 200 ZwDeleteKey
0C9 201 NtDeleteObjectAuditAlarm
0C9 201 ZwDeleteObjectAuditAlarm
0CA 202 NtDeletePrivateNamespace
0CA 202 ZwDeletePrivateNamespace
0CB 203 NtDeleteValueKey
0CB 203 ZwDeleteValueKey
0CC 204 NtDeleteWnfStateData
0CC 204 ZwDeleteWnfStateData
0CD 205 NtDeleteWnfStateName
0CD 205 ZwDeleteWnfStateName
0CE 206 NtDisableLastKnownGood
0CE 206 ZwDisableLastKnownGood
0CF 207 NtDisplayString
0CF 207 ZwDisplayString
0D0 208 NtDrawText
0D0 208 ZwDrawText
0D1 209 NtEnableLastKnownGood
0D1 209 ZwEnableLastKnownGood
0D2 210 NtEnumerateBootEntries
0D2 210 ZwEnumerateBootEntries
0D3 211 NtEnumerateDriverEntries
0D3 211 ZwEnumerateDriverEntries
0D4 212 NtEnumerateSystemEnvironmentValuesEx
0D4 212 ZwEnumerateSystemEnvironmentValuesEx
0D5 213 NtEnumerateTransactionObject
0D5 213 ZwEnumerateTransactionObject
0D6 214 NtExtendSection
0D6 214 ZwExtendSection
0D7 215 NtFilterBootOption
0D7 215 ZwFilterBootOption
0D8 216 NtFilterToken
0D8 216 ZwFilterToken
0D9 217 NtFilterTokenEx
0D9 217 ZwFilterTokenEx
0DA 218 NtFlushBuffersFileEx
0DA 218 ZwFlushBuffersFileEx
0DB 219 NtFlushInstallUILanguage
0DB 219 ZwFlushInstallUILanguage
0DC 220 NtFlushInstructionCache
0DC 220 ZwFlushInstructionCache
0DD 221 NtFlushKey
0DD 221 ZwFlushKey
0DE 222 NtFlushProcessWriteBuffers
0DE 222 ZwFlushProcessWriteBuffers
0DF 223 NtFlushVirtualMemory
0DF 223 ZwFlushVirtualMemory
0EA 234 NtGetMUIRegistryInfo
0EA 234 ZwGetMUIRegistryInfo
0EB 235 NtGetNextProcess
0EB 235 ZwGetNextProcess
0EC 236 NtGetNextThread
0EC 236 ZwGetNextThread
0ED 237 NtGetNlsSectionPtr
0ED 237 ZwGetNlsSectionPtr
0EE 238 NtGetNotificationResourceManager
0EE 238 ZwGetNotificationResourceManager
0EF 239 NtGetWriteWatch
0EF 239 ZwGetWriteWatch
0F0 240 NtImpersonateAnonymousToken
0F0 240 ZwImpersonateAnonymousToken
0F1 241 NtImpersonateThread
0F1 241 ZwImpersonateThread
0F2 242 NtInitializeEnclave
0F2 242 ZwInitializeEnclave
0F3 243 NtInitializeNlsFiles
0F3 243 ZwInitializeNlsFiles
0F4 244 NtInitializeRegistry
0F4 244 ZwInitializeRegistry
0F5 245 NtInitiatePowerAction
0F5 245 ZwInitiatePowerAction
0F6 246 NtIsSystemResumeAutomatic
0F6 246 ZwIsSystemResumeAutomatic
0F7 247 NtIsUILanguageComitted
0F7 247 ZwIsUILanguageComitted
0F8 248 NtListenPort
0F8 248 ZwListenPort
0F9 249 NtLoadDriver
0F9 249 ZwLoadDriver
0FA 250 NtLoadEnclaveData
0FA 250 ZwLoadEnclaveData
0FB 251 NtLoadKey
0FB 251 ZwLoadKey
0FC 252 NtLoadKey2
0FC 252 ZwLoadKey2
0FD 253 NtLoadKeyEx
0FD 253 ZwLoadKeyEx
0FE 254 NtLockFile
0FE 254 ZwLockFile
0FF 255 NtLockProductActivationKeys
0FF 255 ZwLockProductActivationKeys
100 256 NtLockRegistryKey
100 256 ZwLockRegistryKey
101 257 NtLockVirtualMemory
101 257 ZwLockVirtualMemory
102 258 NtMakePermanentObject
102 258 ZwMakePermanentObject
103 259 NtMakeTemporaryObject
103 259 ZwMakeTemporaryObject
104 260 NtManagePartition
104 260 ZwManagePartition
105 261 NtMapCMFModule
105 261 ZwMapCMFModule
106 262 NtMapUserPhysicalPages
106 262 ZwMapUserPhysicalPages
107 263 NtModifyBootEntry
107 263 ZwModifyBootEntry
108 264 NtModifyDriverEntry
108 264 ZwModifyDriverEntry
109 265 NtNotifyChangeDirectoryFile
109 265 ZwNotifyChangeDirectoryFile
10A 266 NtNotifyChangeKey
10A 266 ZwNotifyChangeKey
10B 267 NtNotifyChangeMultipleKeys
10B 267 ZwNotifyChangeMultipleKeys
10C 268 NtNotifyChangeSession
10C 268 ZwNotifyChangeSession
10D 269 NtOpenEnlistment
10D 269 ZwOpenEnlistment
10E 270 NtOpenEventPair
10E 270 ZwOpenEventPair
10F 271 NtOpenIoCompletion
10F 271 ZwOpenIoCompletion
110 272 NtOpenJobObject
110 272 ZwOpenJobObject
111 273 NtOpenKeyEx
111 273 ZwOpenKeyEx
112 274 NtOpenKeyTransacted
112 274 ZwOpenKeyTransacted
113 275 NtOpenKeyTransactedEx
113 275 ZwOpenKeyTransactedEx
114 276 NtOpenKeyedEvent
114 276 ZwOpenKeyedEvent
115 277 NtOpenMutant
115 277 ZwOpenMutant
116 278 NtOpenObjectAuditAlarm
116 278 ZwOpenObjectAuditAlarm
117 279 NtOpenPartition
117 279 ZwOpenPartition
118 280 NtOpenPrivateNamespace
118 280 ZwOpenPrivateNamespace
119 281 NtOpenProcessToken
119 281 ZwOpenProcessToken
11A 282 NtOpenRegistryTransaction
11A 282 ZwOpenRegistryTransaction
11B 283 NtOpenResourceManager
11B 283 ZwOpenResourceManager
11C 284 NtOpenSemaphore
11C 284 ZwOpenSemaphore
11D 285 NtOpenSession
11D 285 ZwOpenSession
11E 286 NtOpenSymbolicLinkObject
11E 286 ZwOpenSymbolicLinkObject
11F 287 NtOpenThread
11F 287 ZwOpenThread
120 288 NtOpenTimer
120 288 ZwOpenTimer
121 289 NtOpenTransaction
121 289 ZwOpenTransaction
122 290 NtOpenTransactionManager
122 290 ZwOpenTransactionManager
123 291 NtPlugPlayControl
123 291 ZwPlugPlayControl
124 292 NtPrePrepareComplete
124 292 ZwPrePrepareComplete
125 293 NtPrePrepareEnlistment
125 293 ZwPrePrepareEnlistment
126 294 NtPrepareComplete
126 294 ZwPrepareComplete
127 295 NtPrepareEnlistment
127 295 ZwPrepareEnlistment
128 296 NtPrivilegeCheck
128 296 ZwPrivilegeCheck
129 297 NtPrivilegeObjectAuditAlarm
129 297 ZwPrivilegeObjectAuditAlarm
12A 298 NtPrivilegedServiceAuditAlarm
12A 298 ZwPrivilegedServiceAuditAlarm
12B 299 NtPropagationComplete
12B 299 ZwPropagationComplete
12C 300 NtPropagationFailed
12C 300 ZwPropagationFailed
12D 301 NtPulseEvent
12D 301 ZwPulseEvent
12E 302 NtQueryBootEntryOrder
12E 302 ZwQueryBootEntryOrder
12F 303 NtQueryBootOptions
12F 303 ZwQueryBootOptions
130 304 NtQueryDebugFilterState
130 304 ZwQueryDebugFilterState
131 305 NtQueryDirectoryObject
131 305 ZwQueryDirectoryObject
132 306 NtQueryDriverEntryOrder
132 306 ZwQueryDriverEntryOrder
133 307 NtQueryEaFile
133 307 ZwQueryEaFile
134 308 NtQueryFullAttributesFile
134 308 ZwQueryFullAttributesFile
135 309 NtQueryInformationAtom
135 309 ZwQueryInformationAtom
136 310 NtQueryInformationEnlistment
136 310 ZwQueryInformationEnlistment
137 311 NtQueryInformationJobObject
137 311 ZwQueryInformationJobObject
138 312 NtQueryInformationPort
138 312 ZwQueryInformationPort
139 313 NtQueryInformationResourceManager
139 313 ZwQueryInformationResourceManager
13A 314 NtQueryInformationTransaction
13A 314 ZwQueryInformationTransaction
13B 315 NtQueryInformationTransactionManager
13B 315 ZwQueryInformationTransactionManager
13C 316 NtQueryInformationWorkerFactory
13C 316 ZwQueryInformationWorkerFactory
13D 317 NtQueryInstallUILanguage
13D 317 ZwQueryInstallUILanguage
13E 318 NtQueryIntervalProfile
13E 318 ZwQueryIntervalProfile
13F 319 NtQueryIoCompletion
13F 319 ZwQueryIoCompletion
140 320 NtQueryLicenseValue
140 320 ZwQueryLicenseValue
141 321 NtQueryMultipleValueKey
141 321 ZwQueryMultipleValueKey
142 322 NtQueryMutant
142 322 ZwQueryMutant
143 323 NtQueryOpenSubKeys
143 323 ZwQueryOpenSubKeys
144 324 NtQueryOpenSubKeysEx
144 324 ZwQueryOpenSubKeysEx
145 325 NtQueryPortInformationProcess
145 325 ZwQueryPortInformationProcess
146 326 NtQueryQuotaInformationFile
146 326 ZwQueryQuotaInformationFile
147 327 NtQuerySecurityAttributesToken
147 327 ZwQuerySecurityAttributesToken
148 328 NtQuerySecurityObject
148 328 ZwQuerySecurityObject
149 329 NtQuerySecurityPolicy
149 329 ZwQuerySecurityPolicy
14A 330 NtQuerySemaphore
14A 330 ZwQuerySemaphore
14B 331 NtQuerySymbolicLinkObject
14B 331 ZwQuerySymbolicLinkObject
14C 332 NtQuerySystemEnvironmentValue
14C 332 ZwQuerySystemEnvironmentValue
14D 333 NtQuerySystemEnvironmentValueEx
14D 333 ZwQuerySystemEnvironmentValueEx
14E 334 NtQuerySystemInformationEx
14E 334 ZwQuerySystemInformationEx
14F 335 NtQueryTimerResolution
14F 335 ZwQueryTimerResolution
150 336 NtQueryWnfStateData
150 336 ZwQueryWnfStateData
151 337 NtQueryWnfStateNameInformation
151 337 ZwQueryWnfStateNameInformation
152 338 NtQueueApcThreadEx
152 338 ZwQueueApcThreadEx
153 339 NtRaiseException
153 339 ZwRaiseException
154 340 NtRaiseHardError
154 340 ZwRaiseHardError
155 341 NtReadOnlyEnlistment
155 341 ZwReadOnlyEnlistment
156 342 NtRecoverEnlistment
156 342 ZwRecoverEnlistment
157 343 NtRecoverResourceManager
157 343 ZwRecoverResourceManager
158 344 NtRecoverTransactionManager
158 344 ZwRecoverTransactionManager
159 345 NtRegisterProtocolAddressInformation
159 345 ZwRegisterProtocolAddressInformation
15A 346 NtRegisterThreadTerminatePort
15A 346 ZwRegisterThreadTerminatePort
15B 347 NtReleaseKeyedEvent
15B 347 ZwReleaseKeyedEvent
15C 348 NtReleaseWorkerFactoryWorker
15C 348 ZwReleaseWorkerFactoryWorker
15D 349 NtRemoveIoCompletionEx
15D 349 ZwRemoveIoCompletionEx
15E 350 NtRemoveProcessDebug
15E 350 ZwRemoveProcessDebug
15F 351 NtRenameKey
15F 351 ZwRenameKey
160 352 NtRenameTransactionManager
160 352 ZwRenameTransactionManager
161 353 NtReplaceKey
161 353 ZwReplaceKey
162 354 NtReplacePartitionUnit
162 354 ZwReplacePartitionUnit
163 355 NtReplyWaitReplyPort
163 355 ZwReplyWaitReplyPort
164 356 NtRequestPort
164 356 ZwRequestPort
165 357 NtResetEvent
165 357 ZwResetEvent
166 358 NtResetWriteWatch
166 358 ZwResetWriteWatch
167 359 NtRestoreKey
167 359 ZwRestoreKey
168 360 NtResumeProcess
168 360 ZwResumeProcess
169 361 NtRevertContainerImpersonation
169 361 ZwRevertContainerImpersonation
16A 362 NtRollbackComplete
16A 362 ZwRollbackComplete
16B 363 NtRollbackEnlistment
16B 363 ZwRollbackEnlistment
16C 364 NtRollbackRegistryTransaction
16C 364 ZwRollbackRegistryTransaction
16D 365 NtRollbackTransaction
16D 365 ZwRollbackTransaction
16E 366 NtRollforwardTransactionManager
16E 366 ZwRollforwardTransactionManager
16F 367 NtSaveKey
16F 367 ZwSaveKey
170 368 NtSaveKeyEx
170 368 ZwSaveKeyEx
171 369 NtSaveMergedKeys
171 369 ZwSaveMergedKeys
172 370 NtSecureConnectPort
172 370 ZwSecureConnectPort
173 371 NtSerializeBoot
173 371 ZwSerializeBoot
174 372 NtSetBootEntryOrder
174 372 ZwSetBootEntryOrder
175 373 NtSetBootOptions
175 373 ZwSetBootOptions
176 374 NtSetCachedSigningLevel
176 374 ZwSetCachedSigningLevel
177 375 NtSetCachedSigningLevel2
177 375 ZwSetCachedSigningLevel2
178 376 NtSetContextThread
178 376 ZwSetContextThread
179 377 NtSetDebugFilterState
179 377 ZwSetDebugFilterState
17A 378 NtSetDefaultHardErrorPort
17A 378 ZwSetDefaultHardErrorPort
17B 379 NtSetDefaultLocale
17B 379 ZwSetDefaultLocale
17C 380 NtSetDefaultUILanguage
17C 380 ZwSetDefaultUILanguage
17D 381 NtSetDriverEntryOrder
17D 381 ZwSetDriverEntryOrder
17E 382 NtSetEaFile
17E 382 ZwSetEaFile
17F 383 NtSetHighEventPair
17F 383 ZwSetHighEventPair
180 384 NtSetHighWaitLowEventPair
180 384 ZwSetHighWaitLowEventPair
181 385 NtSetIRTimer
181 385 ZwSetIRTimer
182 386 NtSetInformationDebugObject
182 386 ZwSetInformationDebugObject
183 387 NtSetInformationEnlistment
183 387 ZwSetInformationEnlistment
184 388 NtSetInformationJobObject
184 388 ZwSetInformationJobObject
185 389 NtSetInformationKey
185 389 ZwSetInformationKey
186 390 NtSetInformationResourceManager
186 390 ZwSetInformationResourceManager
187 391 NtSetInformationSymbolicLink
187 391 ZwSetInformationSymbolicLink
188 392 NtSetInformationToken
188 392 ZwSetInformationToken
189 393 NtSetInformationTransaction
189 393 ZwSetInformationTransaction
18A 394 NtSetInformationTransactionManager
18A 394 ZwSetInformationTransactionManager
18B 395 NtSetInformationVirtualMemory
18B 395 ZwSetInformationVirtualMemory
18C 396 NtSetInformationWorkerFactory
18C 396 ZwSetInformationWorkerFactory
18D 397 NtSetIntervalProfile
18D 397 ZwSetIntervalProfile
18E 398 NtSetIoCompletion
18E 398 ZwSetIoCompletion
18F 399 NtSetIoCompletionEx
18F 399 ZwSetIoCompletionEx
190 400 NtSetLdtEntries
190 400 ZwSetLdtEntries
191 401 NtSetLowEventPair
191 401 ZwSetLowEventPair
192 402 NtSetLowWaitHighEventPair
192 402 ZwSetLowWaitHighEventPair
193 403 NtSetQuotaInformationFile
193 403 ZwSetQuotaInformationFile
194 404 NtSetSecurityObject
194 404 ZwSetSecurityObject
195 405 NtSetSystemEnvironmentValue
195 405 ZwSetSystemEnvironmentValue
196 406 NtSetSystemEnvironmentValueEx
196 406 ZwSetSystemEnvironmentValueEx
197 407 NtSetSystemInformation
197 407 ZwSetSystemInformation
198 408 NtSetSystemPowerState
198 408 ZwSetSystemPowerState
199 409 NtSetSystemTime
199 409 ZwSetSystemTime
19A 410 NtSetThreadExecutionState
19A 410 ZwSetThreadExecutionState
19B 411 NtSetTimer2
19B 411 ZwSetTimer2
19C 412 NtSetTimerEx
19C 412 ZwSetTimerEx
19D 413 NtSetTimerResolution
19D 413 ZwSetTimerResolution
19E 414 NtSetUuidSeed
19E 414 ZwSetUuidSeed
19F 415 NtSetVolumeInformationFile
19F 415 ZwSetVolumeInformationFile
1A0 416 NtSetWnfProcessNotificationEvent
1A0 416 ZwSetWnfProcessNotificationEvent
1A1 417 NtShutdownSystem
1A1 417 ZwShutdownSystem
1A2 418 NtShutdownWorkerFactory
1A2 418 ZwShutdownWorkerFactory
1A3 419 NtSignalAndWaitForSingleObject
1A3 419 ZwSignalAndWaitForSingleObject
1A4 420 NtSinglePhaseReject
1A4 420 ZwSinglePhaseReject
1A5 421 NtStartProfile
1A5 421 ZwStartProfile
1A6 422 NtStopProfile
1A6 422 ZwStopProfile
1A7 423 NtSubscribeWnfStateChange
1A7 423 ZwSubscribeWnfStateChange
1A8 424 NtSuspendProcess
1A8 424 ZwSuspendProcess
1A9 425 NtSuspendThread
1A9 425 ZwSuspendThread
1AA 426 NtSystemDebugControl
1AA 426 ZwSystemDebugControl
1AB 427 NtTerminateJobObject
1AB 427 ZwTerminateJobObject
1AC 428 NtTestAlert
1AC 428 ZwTestAlert
1AD 429 NtThawRegistry
1AD 429 ZwThawRegistry
1AE 430 NtThawTransactions
1AE 430 ZwThawTransactions
1AF 431 NtTraceControl
1AF 431 ZwTraceControl
1B0 432 NtTranslateFilePath
1B0 432 ZwTranslateFilePath
1B1 433 NtUmsThreadYield
1B1 433 ZwUmsThreadYield
1B2 434 NtUnloadDriver
1B2 434 ZwUnloadDriver
1B3 435 NtUnloadKey
1B3 435 ZwUnloadKey
1B4 436 NtUnloadKey2
1B4 436 ZwUnloadKey2
1B5 437 NtUnloadKeyEx
1B5 437 ZwUnloadKeyEx
1B6 438 NtUnlockFile
1B6 438 ZwUnlockFile
1B7 439 NtUnlockVirtualMemory
1B7 439 ZwUnlockVirtualMemory
1B8 440 NtUnmapViewOfSectionEx
1B8 440 ZwUnmapViewOfSectionEx
1B9 441 NtUnsubscribeWnfStateChange
1B9 441 ZwUnsubscribeWnfStateChange
1BA 442 NtUpdateWnfStateData
1BA 442 ZwUpdateWnfStateData
1BB 443 NtVdmControl
1BB 443 ZwVdmControl
1BC 444 NtWaitForAlertByThreadId
1BC 444 ZwWaitForAlertByThreadId
1BD 445 NtWaitForDebugEvent
1BD 445 ZwWaitForDebugEvent
1BE 446 NtWaitForKeyedEvent
1BE 446 ZwWaitForKeyedEvent
1BF 447 NtWaitForWorkViaWorkerFactory
1BF 447 ZwWaitForWorkViaWorkerFactory
1C0 448 NtWaitHighEventPair
1C0 448 ZwWaitHighEventPair
1C1 449 NtWaitLowEventPair
1C1 449 ZwWaitLowEventPair