Windows System Call Table (NT72000/XP/2003/Vista) The Hetasploit Project Highlight a given system call number by its index (in hex] I----------- Highlight | System Call Symbol Windows NT Windows 2000 Windows XP Windows 2003 Server Vista SP3 SP5 SP6 SPO SP1 SP2 SP3 SP4 SPO SP1 SP2 SPO SP1 SPO NtAcceptConnectPort 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 NtAccessCheck 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 0x0001 NtAccessCheckAndAuditAlarm 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 0x0002 NtAccessCheckByType 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 0x0003 NtAccessCheckByTypeAndAuditAlarm 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 0x0004 NtAccessCheckByTypeResultList 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 0x0005 NtAccessCheckByTypeResultListAndAuditAlarm 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 0x0006 NtAccessCheckByTypeResultListAndAuditAlarmByHandle 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 0x0007 NtAddAtom 0x0003 0x0003 0x0003 0x0003 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 0x0008 NtAddBootEntrv 0x0009 0x0009 0x0009 0x0009 0x0009 0x0009 NtAddDriverEntry OxOOOa OxOOOa OxOOOa NtAdiustGroupsToken 0x0004 0x0004 0x0004 0x0004 0x0009 0x0009 0x0009 0x0009 0x0009 OxOOOa OxOOOa OxOOOa OxOOOb OxOOOb OxOOOb NtAdjustPrivileqesToken 0x0005 0x0005 0x0005 0x0005 0x000a OxOOOa OxOOOa OxOOOa OxOOOa OxOOOb OxOOOb OxOOOb OxOOOe OxOOOe OxOOOe NtAlertResumeThread 0x0006 0x0006 0x0006 0x0006 0x000b OxOOOb OxOOOb OxOOOb OxOOOb OxOOOe OxOOOe OxOOOe OxOOOd OxOOOd OxOOOd NtAlertThread 0x0007 0x0007 0x0007 0x0007 OxOOOe OxOOOe OxOOOe OxOOOe OxOOOe OxOOOd OxOOOd OxOOOd OxOOOe OxOOOe OxOOOe NtAI locate LocallvUniqueld 0x0008 0x0008 0x0008 0x0008 OxOOOd OxOOOd OxOOOd OxOOOd OxOOOd OxOOOe OxOOOe OxOOOe OxOOOf OxOOOf OxOOOf NtAI locate UserPhysicalPaqes OxOOOe OxOOOe OxOOOe OxOOOe OxOOOe OxOOOf OxOOOf OxOOOf 0x0010 0x0010 0x0010 NtAllocateUuids 0x0009 0x0009 0x0009 0x0009 OxOOOf OxOOOf OxOOOf OxOOOf OxOOOf 0x0010 0x0010 0x0010 0x0011 0x0011 0x0011 NtAllocateVirtualMemory 0x000a 0x000a 0x000a 0x000a 0x0010 0x0010 0x0010 0x0010 0x0010 0x0011 0x0011 0x0011 0x0012 0x0012 0x0012 NtAlpcAcceptConnectPort 0x0013 NtAlpcCancelMessaqe 0x0014 NtAlpcConnectPort 0x0015 NtAlpcCreatePort 0x0016 NtAlpcCreatePortSection 0x0017 NtAI pcCreateResourceRese rve 0x0018 NtAlpcCreateSectionView 0x0019 NtAIpcCreateSecurityContext 0x001a NtAlpcDeletePortSection 0x001b NtAlpcDeleteResourceReserve OxOOle NtAlpcDeleteSectionView OxOOld NtAIpcDeleteSecurityContext OxOOle NtAlpcDisconnectPort OxOOlf NtAlpcImpersonateClientOfPort 0x0020 NtAlpcOpenSenderProcess 0x0021 NtAI pcOpenSenderTh read 0x0022 NtAlpcQuerylnformation 0x0023 NtAlpcQuerylnformationMessaqe 0x0024 NtAlpcSendWaitReceivePort 0x0025 NtAlpcSetlnformation 0x0026 NtApphelpCacheControl 0x0013 0x0013 0x0027 NtAreMappedFilesTheSame 0x0011 0x0011 0x0011 0x0011 0x0011 0x0012 0x0012 0x0012 0x0014 0x0014 0x0028 NtAssiqnProcessToJobObject 0x0012 0x0012 0x0012 0x0012 0x0012 0x0013 0x0013 0x0013 0x0015 0x0015 0x0029 NtCallbackReturn 0x000b 0x000b 0x000b 0x000b 0x0013 0x0013 0x0013 0x0013 0x0013 0x0014 0x0014 0x0014 0x0016 0x0016 0x002a NtCancelDeviceWakeu p Request 0x0016 0x0016 0x0016 0x0016 0x0016 0x0015 0x0015 0x0015 0x0017 0x0017 0x002b NtCancelloFile 0x000c OxOOOe OxOOOe OxOOOe 0x0014 0x0014 0x0014 0x0014 0x0014 0x0016 0x0016 0x0016 0x0018 0x0018 0x002c NtCancelloFileEx 0x0172 NtCancelSynchronousIoFile 0x0173 NtCancelTimer OxOOOd OxOOOd OxOOOd OxOOOd 0x0015 0x0015 0x0015 0x0015 0x0015 0x0017 0x0017 0x0017 0x0019 0x0019 Ox002d NtClearAIISavepointsTransaction 0x011b NtClearEvent OxOOOe OxOOOe OxOOOe OxOOOe 0x0017 0x0017 0x0017 0x0017 0x0017 0x0018 0x0018 0x0018 0x001a 0x001a Ox002e NtClearMUILicenselnfo 0x0187 NtClearSavepointTransaction 0x011a NtClose OxOOOf OxOOOf OxOOOf OxOOOf 0x0018 0x0018 0x0018 0x0018 0x0018 0x0019 0x0019 0x0019 0x00lb 0x00lb Ox002f NtCloseObiectAuditAlarm 0x0010 0x0010 0x0010 0x0010 0x0019 0x0019 0x0019 0x0019 0x0019 0x001a 0x001a 0x001a OxOOle OxOOle 0x0030 NtCommitComplete Ox005d NtCommitEnlistment 0x0055 NtCommitTransaction 0x0059 NtCompactKeys 0x001b 0x00lb 0x00lb OxOOld OxOOld 0x0031 NtCompareTokens OxOOle OxOOle OxOOle OxOOle OxOOle 0x0032 NtCompleteConnectPort 0x0011 0x0011 0x0011 0x0011 0x001a 0x001a 0x001a 0x001a 0x001a OxOOld OxOOld OxOOld OxOOlf OxOOlf 0x0033 NtCompressKey OxOOle OxOOle OxOOle 0x0020 0x0020 0x0034 NtConnectPort 0x0012 0x0012 0x0012 0x0012 0x00lb 0x001b 0x00lb 0x00lb 0x00lb OxOOlf OxOOlf OxOOlf 0x0021 0x0021 0x0035 NtContinue 0x0013 0x0013 0x0013 0x0013 OxOOle OxOOle OxOOle OxOOle OxOOle 0x0020 0x0020 0x0020 0x0022 0x0022 0x0036 NtCreateChannel OxOOcd OxOOcc OxOOcc OxOOcc OxOOfl OxOOfl OxOOfl OxOOfl OxOOfl NtCreateDebuqObiect 0x0021 0x0021 0x0021 0x0023 0x0023 0x0037 NtCreateDirectoryObject 0x0014 0x0014 0x0014 0x0014 OxOOld OxOOld OxOOld OxOOld OxOOld 0x0022 0x0022 0x0022 0x0024 0x0024 0x0038 NtCreate Enlistment 0x006d NtCreateEvent 0x0015 0x0015 0x0015 0x0015 OxOOle OxOOle OxOOle OxOOle OxOOle 0x0023 0x0023 0x0023 0x0025 0x0025 0x0039 NtCreateEventPair 0x0016 0x0016 0x0016 0x0016 OxOOlf OxOOlf OxOOlf OxOOlf OxOOlf 0x0024 0x0024 0x0024 0x0026 0x0026 0x003a NtCreate File 0x0017 0x0017 0x0017 0x0017 0x0020 0x0020 0x0020 0x0020 0x0020 0x0025 0x0025 0x0025 0x0027 0x0027 0x003b NtCreateloCompletion 0x0018 0x0018 0x0018 0x0018 0x0021 0x0021 0x0021 0x0021 0x0021 0x0026 0x0026 0x0026 0x0028 0x0028 0x003c NtCreateJobObject 0x0022 0x0022 0x0022 0x0022 0x0022 0x0027 0x0027 0x0027 0x0029 0x0029 0x003d NtCreateJobSet 0x0028 0x0028 0x0028 0x002a 0x002a Ox003e NtCreate Key 0x0019 0x0019 0x0019 0x0019 0x0023 0x0023 0x0023 0x0023 0x0023 0x0029 0x0029 0x0029 0x002b 0x002b Ox003f NtCreateKeyedEvent 0x0117 0x0117 0x0117 0x0121 0x0121 0x0169 NtCreateMailslotFile 0x001a 0x001a 0x001a 0x001a 0x0024 0x0024 0x0024 0x0024 0x0024 0x002a 0x002a 0x002a 0x002c 0x002c 0x0040 NtCreateMutant 0x00lb 0x001b 0x00lb 0x00lb 0x0025 0x0025 0x0025 0x0025 0x0025 0x002b 0x002b 0x002b Ox002d Ox002d 0x0041 NtCreateNamedPipeFile 0x001c OxOOle OxOOle OxOOle 0x0026 0x0026 0x0026 0x0026 0x0026 0x002c 0x002c 0x002c Ox002e Ox002e 0x0042 NtCreatePaqinqFile OxOOld OxOOld OxOOld OxOOld 0x0027 0x0027 0x0027 0x0027 0x0027 Ox002d Ox002d Ox002d Ox002f Ox002f 0x0044 NtCreatePort OxOOle OxOOle OxOOle OxOOle 0x0028 0x0028 0x0028 0x0028 0x0028 Ox002e Ox002e Ox002e 0x0030 0x0030 0x0045 NtCreatePrivateNamespace 0x0043 NtCreateProcess OxOOlf OxOOlf OxOOlf OxOOlf 0x0029 0x0029 0x0029 0x0029 0x0029 Ox002f Ox002f Ox002f 0x0031 0x0031 0x0046 NtCreateProcessEx 0x0030 0x0030 0x0030 0x0032 0x0032 0x0047 NtCreateProfile 0x0020 0x0020 0x0020 0x0020 0x002a 0x002a 0x002a 0x002a 0x002a 0x0031 0x0031 0x0031 0x0033 0x0033 0x0048 NtCreate Reso u rceManaq er 0x0069 NtCreateSection 0x0021 0x0021 0x0021 0x0021 0x002b 0x002b 0x002b 0x002b 0x002b 0x0032 0x0032 0x0032 0x0034 0x0034 0x0049 NtCreateSemaphore 0x0022 0x0022 0x0022 0x0022 0x002c 0x002c 0x002c 0x002c 0x002c 0x0033 0x0033 0x0033 0x0035 0x0035 0x004a NtCreateSvmbolicLinkObiect 0x0023 0x0023 0x0023 0x0023 Ox002d Ox002d Ox002d Ox002d Ox002d 0x0034 0x0034 0x0034 0x0036 0x0036 0x004b NtCreateThread 0x0024 0x0024 0x0024 0x0024 Ox002e Ox002e Ox002e Ox002e Ox002e 0x0035 0x0035 0x0035 0x0037 0x0037 0x004c t7300X0 uo|ss3SU3doíN E300X0 t7800X0 t7800X0 3Z00X0 3Z00X0 3Z00X0 P900X0 P900X0 P900X0 P900X0 P900X0 ZSOOXO ZSOOXO ZSOOXO ZSOOXO 3J0qdEUJ3SU3d0ÍN 3300X0 E800X0 E800X0 PZOOXO PZOOXO PZOOXO 3900X0 3900X0 3900X0 3900X0 3900X0 9S00X0 9S00X0 9S00X0 9S00X0 U0!í33SU3d04N E900X0 J3bEUE[n]33JnOS3yU3dOÍN T300X0 3800X0 3800X0 3Z00X0 3Z00X0 3Z00X0 xguB^oissBsojjuBdoíN 0300X0 T800X0 T800X0 qzooxo qzooxo qzooxo q900X0 q900X0 q900X0 q900X0 q900X0 SSOOXO SSOOXO SSOOXO SSOOXO UB^OlSSBSOJJUBdOÍN jqooxo 0800X0 0800X0 BZOOXO BZOOXO BZOOXO B900X0 B900X0 B900X0 B900X0 B900X0 frSOOXO tSOOXO tSOOXO frSOOXO SS330JdU3d04N pqooxo BSEdSBUJEMBÍEAUdUBdOÍN sqooxo JZOOXO JZOOXO 6Z00X0 6Z00X0 6Z00X0 6900X0 6900X0 6900X0 6900X0 6900X0 ESOOXO ESOOXO ESOOXO ESOOXO UJJE|\rt!pn\rt33[q0U3d04N 3qooxo 3Z00X0 3Z00X0 8Z00X0 8Z00X0 8Z00X0 8900X0 8900X0 8900X0 8900X0 8900X0 3S00X0 3S00X0 3S00X0 3S00X0 ÍUEíniAiUBdoiN E9T0X0 3310X0 33T0X0 8TT0X0 8TT0X0 8TT0X0 ÍU3A3p3A3»U3d04N qqooxo PZOOXO PZOOXO LLOQy-0 LLOQy-0 LLOQy-0 Z900X0 Z900X0 Z900X0 Z900X0 Z900X0 TSOOXO TSOOXO TSOOXO TSOOXO A3»U3d04N eqooxo 3Z00X0 3Z00X0 9Z00X0 9Z00X0 9Z00X0 9900X0 9900X0 9900X0 9900X0 9900X0 í33Lqoqo[U3d04N 6qooxo qzooxo qzooxo SZOOXO SZOOXO SZOOXO S900X0 S900X0 S900X0 S900X0 S900X0 OSOOXO OSOOXO OSOOXO OSOOXO uo|í3|dujo30iU3doíN 8qooxo EZOOXO EZOOXO tZOOXO tZOOXO frZOOXO t7900X0 t7900X0 t7900X0 t7900X0 t7900X0 JfrOOXO JtOOXO JfrOOXO JK»XO 3|!dU3d04N zqooxo 6Z00X0 6Z00X0 EZOOXO EZOOXO EZOOXO E900X0 E900X0 E900X0 E900X0 E900X0 3^00X0 3K»X0 3^00X0 3^00X0 J!EdíU3A3U3d04N 9qooxo 8Z00X0 8Z00X0 3Z00X0 3Z00X0 3Z00X0 3900X0 3900X0 3900X0 3900X0 3900X0 PtOOXO PtOOXO PtOOXO PtOOXO ÍU3A3U3d04N 3900X0 ÍU3UJíS!|U3U3d04N sqooxo LLOQy-0 LLOQy-0 TZOOXO TZOOXO TZOOXO T900X0 T900X0 T900X0 T900X0 T900X0 3t700X0 3t700X0 3K»X0 3t700X0 í33[qoAJOí33J!au3d04N EJOOXO EJOOXO EJOOXO EJOOXO EJOOXO 3300X0 3300X0 3300X0 POOXO |3UUEq3U3d04N tqooxo 9Z00X0 9Z00X0 OZOOXO OZOOXO OZOOXO 0900X0 0900X0 0900X0 0900X0 0900X0 sA3»3|d!mniAl3bUEq3Aj!íON4N eqooxo SZOOXO SZOOXO J900X0 J900X0 J900X0 JSOOXO JSOOXO JSOOXO JSOOXO JSOOXO qtooxo qtooxo qtooxo qtooxo A3»3bUEq3Aj!íON4N zqooxo frZOOXO tZOOXO 3900X0 3900X0 3900X0 3S00X0 3S00X0 3S00X0 3S00X0 3S00X0 BtOOXO BK»XO BtOOXO BtOOXO 3|!3AjOí33J!a3bUEq3Aj!íOMíM Tqooxo EZOOXO EZOOXO AJíU3J3AuaAj!poiAlíN oqooxo 3Z00X0 3Z00X0 P900X0 P900X0 P900X0 AJíU3í00gAj!poiAlíN ZZTOXO U0!í3ESUEJl||EqsjElAlíN JEOOXO TZOOXO TZOOXO 3900X0 3900X0 3900X0 PSOOXO PSOOXO PSOOXO PSOOXO PSOOXO ĎtOOXO ĎtOOXO ĎtOOXO ĎtOOXO U0!í33SJ0^3!AdElAl4N seooxo OZOOXO OZOOXO q900X0 q900X0 q900X0 3S00X0 3S00X0 3S00X0 3S00X0 3S00X0 JBÍÍESSSBbEdlESisAqd-iBsndBiAmN peooxo J900X0 J900X0 E900X0 B900X0 B900X0 qsooxo qsooxo qsooxo qsooxo qsooxo ssbEdlESjsAqd-iBsndEiAmN t78T0X0 3|npowdN3dEWJN 3B00X0 3900X0 3900X0 6900X0 6900X0 6900X0 ESOOXO ESOOXO ESOOXO ESOOXO ESOOXO 8t700X0 8t700X0 8t700X0 8t700X0 í33[qoAjEJOduJ313>|ElAlíN qeooxo P900X0 P900X0 8900X0 8900X0 8900X0 í33Lq04U3UEUJJ3d3>|ElAlíN eeooxo 3900X0 3900X0 Z900X0 Z900X0 Z900X0 6S00X0 6S00X0 6S00X0 6S00X0 6S00X0 ZfrOOXO ZtOOXO ZtOOXO ZK»XO Ajouj3iAl|EníJ!A>|30-mM 6E00X0 q900X0 q900X0 9900X0 9900X0 9900X0 A3»AJíS|b3y>|3oníN 8E00X0 E900X0 E900X0 S900X0 S900X0 S900X0 sA3»uo!íEA!í3\fl3npoJd>|30-mM ZEOOXO 6900X0 6900X0 t7900X0 t7900X0 t7900X0 8S00X0 8S00X0 8S00X0 8S00X0 8S00X0 9t700X0 9t700X0 9t700X0 9t700X0 3|!d>|30UN 9E00X0 8900X0 8900X0 X3A3>|pE0n)N SEOOXO Z900X0 Z900X0 E900X0 E900X0 E900X0 ZSOOXO ZSOOXO ZSOOXO ZSOOXO ZSOOXO StOOXO SfrOOXO StOOXO StOOXO 3*3>|pE0n)N teooxo 9900X0 9900X0 3900X0 3900X0 3900X0 9S00X0 9S00X0 9S00X0 9S00X0 9S00X0 ttOOXO ttOOXO ttOOXO ttOOXO *3>|pE0n)N EEOOXO S900X0 S900X0 T900X0 T900X0 T900X0 SSOOXO SSOOXO SSOOXO SSOOXO SSOOXO EtOOXO EtOOXO EfrOOXO EtOOXO JBAUapBOHÍN 3E00X0 t7900X0 t7900X0 0900X0 0900X0 0900X0 tSOOXO tSOOXO tSOOXO tSOOXO tSOOXO 3t700X0 3t700X0 3t700X0 3K»X0 ÍJ0dU3ísníN 3J00X0 3J00X0 3J00X0 3J00X0 3J00X0 P300X0 P300X0 P300X0 3300X0 |3UUEq3U3ísníN S8T0X0 SU0!í3ESUEJlíSní[\] 88T0X0 p3íí!LU033bEnbuEninsHN TEOOXO E900X0 E900X0 JSOOXO JSOOXO JSOOXO ESOOXO ESOOXO ESOOXO ESOOXO ESOOXO 3!íEUjoínv3UJns3yuj3ísAssnN OEOOXO 3900X0 3900X0 3S00X0 3S00X0 3S00X0 qo[UISS330JdSHN J600X0 T900X0 T900X0 PSOOXO PSOOXO PSOOXO 3S00X0 3S00X0 3S00X0 3S00X0 3S00X0 U0p3VJ3M0d3ÍE!í!Up[\l 3600X0 0900X0 0900X0 3S00X0 3S00X0 3S00X0 TSOOXO TSOOXO TSOOXO TSOOXO TSOOXO TtOOXO TfrOOXO TtOOXO TtOOXO AJíS!b3y3Z!|E!í!up[\l P600X0 S3|!dS|N3Z!|E!í!UHN 3600X0 JSOOXO JSOOXO qsooxo qsooxo qsooxo OSOOXO OSOOXO OSOOXO OSOOXO OSOOXO OtOOXO OtOOXO OtOOXO OtOOXO pE3jqi3ÍEU0SJ3dUjp[\] q600X0 3S00X0 3S00X0 ESOOXO ESOOXO ESOOXO JK»XO JfrOOXO JfrOOXO JfrOOXO JK»XO JEOOXO JEOOXO JEOOXO JEOOXO 4JOdJ04U3!p3ÍEUOSJ3duJnN E600X0 PSOOXO PSOOXO 6S00X0 6S00X0 6S00X0 3^00X0 3^00X0 3^00X0 3^00X0 3^00X0 U3>|01Sn0UjAU0UV3ÍBU0SJ3dUjp[\] 6600X0 3S00X0 3S00X0 8S00X0 8S00X0 8S00X0 PtOOXO PtOOXO PtOOXO PtOOXO PtOOXO q3JEM3J!JM53£«N 3t700X0 3t700X0 3t700X0 3t700X0 3t700X0 3E00X0 3E00X0 3E00X0 3E00X0 íun03>|3!lí3DíN 8600X0 qsooxo qsooxo ZSOOXO ZSOOXO ZSOOXO qtooxo qtooxo qtooxo qtooxo qtooxo PEOOXO PEOOXO PEOOXO PEOOXO ÍU3A3AE|dbn|d4304N q900X0 J3bEUEln]33Jn0S3yU0!ÍE3!J!í0[\]í39í[\] Z600X0 JídUO!í33SS|N4304N TZTOXO pE3jqiíX3N4304N OZTOXO SS330Jd4X3N4304N E8T0X0 OjUlAJíS!b3ymN4304N 98T0X0 OjUI3SU33nmN4304N 9600X0 ESOOXO ESOOXO 9S00X0 9S00X0 9S00X0 BfrOOXO BfrOOXO BK»XO BfrOOXO BfrOOXO 3ÍEÍS-13M0d33!A3a4304N 39T0X0 93 T 0X0 93 T 0X0 J3qujn[\]joss330JdíU3jjn3í3Qí[\] S600X0 6S00X0 6S00X0 SSOOXO SSOOXO SSOOXO ĎtOOXO ĎtOOXO ĎtOOXO ĎtOOXO ĎtOOXO 3E00X0 3E00X0 3E00X0 3E00X0 pE3jqiíX3íU03í3DíN t7600X0 8S00X0 8S00X0 tSOOXO tSOOXO tSOOXO 8t700X0 8t700X0 8t700X0 8t700X0 8t700X0 qEOOXO qEOOXO qEOOXO qEOOXO 3|!d|0JÍU03SdíN E600X0 SU0!í3ESUEJ13Z33JdíN 3600X0 AJ3S|b3^3Z33Jd3N T600X0 ZSOOXO ZSOOXO ESOOXO ESOOXO ESOOXO ZtOOXO ZtOOXO ZtOOXO ZtOOXO ZtOOXO EEOOXO EEOOXO EEOOXO EEOOXO AJ0UJ3lAl|EníJ!A33Jd4N 0600X0 9S00X0 9S00X0 3S00X0 3S00X0 3S00X0 9t700X0 9t700X0 9t700X0 9t700X0 9t700X0 SBbEdlESjsAqd-IBSnBB-IdlN J800X0 SSOOXO SSOOXO TSOOXO TSOOXO TSOOXO SfrOOXO SfrOOXO SfrOOXO SK»XO SfrOOXO 6E00X0 6E00X0 6E00X0 6E00X0 JSjjngsjUMqsnidJN 3800X0 tSOOXO tSOOXO OSOOXO OSOOXO OSOOXO ttOOXO ttOOXO ttOOXO ttOOXO ttOOXO 8E00X0 8E00X0 8E00X0 8E00X0 Ajoai3iAl|EníJ!Aqsn|d4N P800X0 sj3jjng3íUMSS330Jdqsn|d4N 3800X0 ESOOXO ESOOXO JtOOXO JtOOXO JfrOOXO EtOOXO EtOOXO EtOOXO EtOOXO EtOOXO ZEOOXO ZEOOXO ZEOOXO ZEOOXO *3>|qsn|dJN q800X0 3S00X0 3S00X0 SfrOOXO 3^00X0 3^00X0 3t700X0 3t700X0 3t700X0 3t700X0 3t700X0 9E00X0 9E00X0 9E00X0 9E00X0 3q3E3UO!í3nJíSUiqsn|d4N 68T0X0 3bEnbuEnin||Bísuiqsn|d4N E800X0 TSOOXO TSOOXO PtOOXO PfrOOXO PtOOXO TtOOXO TtOOXO TtOOXO TtOOXO TtOOXO SEOOXO SEOOXO SEOOXO SEOOXO 3|!dsJ3Jjngqsn|dJN 6800X0 OSOOXO OSOOXO 3t700X0 3t700X0 3K»X0 OfrOOXO OfrOOXO OfrOOXO OK»XO OfrOOXO frEOOXO tEOOXO frEOOXO frEOOXO aioívpuyiN 8800X0 JtOOXO JfrOOXO qtooxo qtooxo qtooxo JEOOXO JEOOXO JEOOXO JEOOXO JEOOXO U3>|01J3í|!d4N Z800X0 SfrOOXO 3^00X0 BtOOXO BtOOXO BtOOXO 3E00X0 3E00X0 3E00X0 3E00X0 3E00X0 EEOOXO EEOOXO EEOOXO EEOOXO U0|í33Spu3íX3íN 9800X0 PfrOOXO PtOOXO ĎtOOXO ĎtOOXO ĎtOOXO PEOOXO PEOOXO PEOOXO PEOOXO PEOOXO 3E00X0 3E00X0 3E00X0 3E00X0 A3>|3n|EA3íBj3Ujnu3í[\] S800X0 3t700X0 3fr00X0 8t700X0 8t700X0 8t700X0 X3S3n|EAíU3UjuoJ!AU3Uj3ísAs3íBj3Ujnu3í[\] t7800X0 qtooxo qtooxo ZtOOXO ZtOOXO ZK»XO 3E00X0 3E00X0 3E00X0 3E00X0 3E00X0 TEOOXO TEOOXO TEOOXO TEOOXO A3>|3ÍEJ3UJnU3í[\] E800X0 EtOOXO EtOOXO S3UÍU3J3AUa3ÍBJ3UJnU3í[\] 3800X0 ĎtOOXO ĎtOOXO 9t700X0 9t700X0 9t700X0 s3U3U330og33Ej3Ujnu33|\] T800X0 8t700X0 8t700X0 StOOXO StOOXO StOOXO qEOOXO qEOOXO qEOOXO qEOOXO qEOOXO OEOOXO OEOOXO OEOOXO OEOOXO u3>|oi3íE3!|dna4N 0800X0 ZtOOXO ZfrOOXO WOOXO ttOOXO ttOOXO EEOOXO EEOOXO EEOOXO EEOOXO EEOOXO J300X0 J300X0 J300X0 J300X0 í33[q034B3!|dnaiN JZOOXO 9t700X0 9t700X0 EtOOXO EfrOOXO EtOOXO 6E00X0 6E00X0 6E00X0 6E00X0 6E00X0 3300X0 3300X0 3300X0 3300X0 buuísAE|dS!aiN 3Z00X0 StOOXO StOOXO 3t700X0 3t700X0 3K»X0 8E00X0 8E00X0 8E00X0 8E00X0 8E00X0 P300X0 P300X0 P300X0 P300X0 3|!d|0JÍU030I33!A3aiN PZOOXO ttOOXO ttOOXO TtOOXO TtOOXO TtOOXO ZEOOXO ZEOOXO ZEOOXO ZEOOXO ZEOOXO 3300X0 3300X0 3300X0 3300X0 A3»3n|EA343|3a4N qzooxo 33EdS3UJE|\]33EAUd333|3G3N 3Z00X0 EfrOOXO EtOOXO OtOOXO OtOOXO OtOOXO 9E00X0 9E00X0 9E00X0 9E00X0 9E00X0 qsooxo qsooxo qsooxo qsooxo UJJE|\rt!pn\rt33Lq0343|3a4N EZOOXO 3t700X0 3t700X0 JEOOXO JEOOXO JEOOXO SEOOXO SEOOXO SEOOXO SEOOXO SEOOXO B300X0 B300X0 B300X0 B300X0 A3»3í3|3aiN 6Z00X0 TtOOXO TtOOXO 3E00X0 3E00X0 3E00X0 tEOOXO tEOOXO tEOOXO tEOOXO tEOOXO 6300X0 6300X0 6300X0 6300X0 3|!d3í3|3aiN 8Z00X0 OtOOXO OtOOXO AJíU3J3Aua343|3aiN LLOQy-0 JEOOXO JEOOXO PEOOXO PEOOXO PEOOXO AJíU3íoog3í3|3aiN 9Z00X0 3E00X0 3E00X0 3E00X0 3E00X0 3E00X0 EEOOXO EEOOXO EEOOXO EEOOXO EEOOXO 8300X0 8300X0 8300X0 8300X0 UJOíV343|3a4N SZOOXO PEOOXO PEOOXO qEOOXO qEOOXO qEOOXO 3E00X0 3E00X0 3E00X0 3E00X0 3E00X0 Z300X0 Z300X0 Z300X0 Z300X0 uomn33X3AE|3aíN tZOOXO 3E00X0 3E00X0 EEOOXO EEOOXO EEOOXO 3nu|íU03bnq3a4N EZOOXO qEOOXO qEOOXO 6E00X0 6E00X0 6E00X0 ss330Jd3A!í3vbnq3aiN EZTOXO AjOí3EdJ3>|JOA/\34E3J3íM EPOOXO U0!íEíSU!M34E3J3ÍN 3Z00X0 EEOOXO EEOOXO 8E00X0 8E00X0 8E00X0 TEOOXO TEOOXO TEOOXO TEOOXO TEOOXO ÍJ0d3|qEí!EM34E3J3íN 3900X0 J3bEUEln]U0!í3ESUEJ13ÍE3J3í[\] JtOOXO U0!Í3ESUEJ13ÍE3J3Í[\] SfrOOXO 6E00X0 6E00X0 ZEOOXO ZEOOXO ZEOOXO OEOOXO OEOOXO OEOOXO OEOOXO OEOOXO 9300X0 9300X0 9300X0 9300X0 U3>|013ÍE3J3ÍN PtOOXO 8E00X0 8E00X0 9E00X0 9E00X0 9E00X0 J300X0 J300X0 J300X0 J300X0 J300X0 S300X0 S300X0 S300X0 S300X0 J3UJH3ÍE3J3ÍM T8T0X0 X3pE3jqi3íE3J3íN NtOpenSymbolicLinkObject 0x0058 0x0058 0x0058 0x0058 0x006e 0x006e 0x006e 0x006e 0x006e 0x007f Ox007f Ox007f 0x0085 0x0085 OxOOc5 NtOpenThread 0x0059 0x0059 0x0059 0x0059 0x006f 0x006f 0x006f 0x006f 0x006f 0x0080 0x0080 0x0080 0x0086 0x0086 0x00c6 NtOpenThreadToken 0x005a 0x005a 0x005a 0x005a 0x0070 0x0070 0x0070 0x0070 0x0070 0x0081 0x0081 0x0081 0x0087 0x0087 OxOOc7 NtOpenThreadTokenEx 0x0082 0x0082 0x0082 0x0088 0x0088 0x00c8 NtOpenTimer 0x005b 0x005b 0x005b 0x005b 0x0071 0x0071 0x0071 0x0071 0x0071 0x0083 0x0083 0x0083 0x0089 0x0089 0x00c9 NtOpenTransaction 0x0050 NtOpenTransactionManaqer 0x0063 NtOpenWinStation 0x00d4 NtPluqPlayControl 0x005c 0x005c 0x005c 0x005c 0x0072 0x0072 0x0072 0x0072 0x0072 0x0084 0x0084 0x0084 0x008a 0x008a OxOOca NtPowerlnformation 0x0073 0x0073 0x0073 0x0073 0x0073 0x0085 0x0085 0x0085 0x008b 0x008b OxOOcb NtPreP řepa reComp lete 0x005b NtPrePrepareEnlistment 0x0053 NtPrepareComplete 0x005c NtPrepareEnlistment 0x0054 NtPrivileqeCheck 0x005d 0x005d 0x005d 0x005d 0x0074 0x0074 0x0074 0x0074 0x0074 0x0086 0x0086 0x0086 0x008c 0x008c OxOOcc NtPrivileqeObjectAud itAla rm 0x005f 0x005f 0x005f 0x005f 0x0076 0x0076 0x0076 0x0076 0x0076 0x0087 0x0087 0x0087 0x008d 0x008d OxOOcd NtPrivileqedServiceAuditAlarm 0x005e 0x005e 0x005e 0x005e 0x0075 0x0075 0x0075 0x0075 0x0075 0x0088 0x0088 0x0088 0x008e 0x008e OxOOce NtPropaqationComplete 0x0178 NtPropaqationFailed 0x0179 NtProtectVirtualMemory 0x0060 0x0060 0x0060 0x0060 0x0077 0x0077 0x0077 0x0077 0x0077 0x0089 0x0089 0x0089 0x008f 0x008f OxOOcf NtPullTransaction 0x0176 NtPulseEvent 0x0061 0x0061 0x0061 0x0061 0x0078 0x0078 0x0078 0x0078 0x0078 0x008a 0x008a 0x008a 0x0090 0x0090 OxOOdO NtOuervAttributesFile 0x0063 0x0063 0x0063 0x0063 0x007a 0x007a 0x007a 0x007a 0x007a 0x008b 0x008b 0x008b 0x0091 0x0091 OxOOd1 NtQueryBootEntryOrder 0x008c 0x008c 0x008c 0x0092 0x0092 OxOOd2 NtQueryBootOptions 0x008d 0x008d 0x008d 0x0093 0x0093 OxOOd3 NtQueryDebuq Filters täte 0x008e 0x008e 0x008e 0x0094 0x0094 OxOOd4 NtQueryDefaultLocale 0x0064 0x0064 0x0064 0x0064 0x007b 0x007b 0x007b 0x007b 0x007b 0x008f 0x008f 0x008f 0x0095 0x0095 OxOOd5 NtQueryDefaultUILanquaqe 0x007c 0x007c 0x007c 0x007c 0x007c 0x0090 0x0090 0x0090 0x0096 0x0096 OxOOd6 NtQuery Directory File 0x0065 0x0065 0x0065 0x0065 0x007d 0x007d 0x007d 0x007d 0x007d 0x0091 0x0091 0x0091 0x0097 0x0097 OxOOd7 NtQueryDirectoryObject 0x0066 0x0066 0x0066 0x0066 0x007e 0x007e 0x007e 0x007e 0x007e 0x0092 0x0092 0x0092 0x0098 0x0098 OxOOd8 NtQuery Dri verEntryOrde r 0x0099 0x0099 OxOOd9 NtQueryEaFile 0x0067 0x0067 0x0067 0x0067 0x007f 0x007f 0x007f 0x007f 0x007f 0x0093 0x0093 0x0093 0x009a 0x009a OxOOda NtQueryEvent 0x0068 0x0068 0x0068 0x0068 0x0080 0x0080 0x0080 0x0080 0x0080 0x0094 0x0094 0x0094 0x009b 0x009b OxOOdb NtOuervFullAttributesFile 0x0069 0x0069 0x0069 0x0069 0x0081 0x0081 0x0081 0x0081 0x0081 0x0095 0x0095 0x0095 0x009c 0x009c OxOOdc NtQuerylnformationAtom 0x0062 0x0062 0x0062 0x0062 0x0079 0x0079 0x0079 0x0079 0x0079 0x0096 0x0096 0x0096 0x009d 0x009d OxOOdd NtOuervInformation Enlistment 0x0070 NtQuerylnformation File 0x006a 0x006a 0x006a 0x006a 0x0082 0x0082 0x0082 0x0082 0x0082 0x0097 0x0097 0x0097 0x009e 0x009e OxOOde NtOuervInformationJobObiect 0x0083 0x0083 0x0083 0x0083 0x0083 0x0098 0x0098 0x0098 0x009f 0x009f OxOOdf NtQuerylnformation Port 0x006c 0x006c 0x006c 0x006c 0x0085 0x0085 0x0085 0x0085 0x0085 0x0099 0x0099 0x0099 OxOOaO OxOOaO OxOOeO NtQuerylnformation Process 0x006d 0x006d 0x006d 0x006d 0x0086 0x0086 0x0086 0x0086 0x0086 0x009a 0x009a 0x009a OxOOal OxOOal OxOOel NtQuerylnformationResourceManaqer 0x006c NtQuervInformationThread 0x006e 0x006e 0x006e 0x006e 0x0087 0x0087 0x0087 0x0087 0x0087 0x009b 0x009b 0x009b OxOOa2 OxOOa2 OxOOe2 NtQuerylnformationToken 0x006f 0x006f 0x006f 0x006f 0x0088 0x0088 0x0088 0x0088 0x0088 0x009c 0x009c 0x009c OxOOa3 OxOOa3 OxOOe3 NtQuerylnformationTransaction 0x0051 NtQuerylnformationTransactionManaqer 0x0052 NtQuerylnformation Wo rkerFactory 0x017e NtQuerylnstallUILanquaqe 0x0089 0x0089 0x0089 0x0089 0x0089 0x009d 0x009d 0x009d 0x00a4 0x00a4 0x00e4 NtQuerylnterval Profile 0x0070 0x0070 0x0070 0x0070 0x008a 0x008a 0x008a 0x008a 0x008a 0x009e 0x009e 0x009e OxOOa5 OxOOa5 OxOOe5 NtQueryloCompletion 0x006b 0x006b 0x006b 0x006b 0x0084 0x0084 0x0084 0x0084 0x0084 0x009f 0x009f 0x009f 0x00a6 0x00a6 0x00e6 NtQueryKey 0x0071 0x0071 0x0071 0x0071 0x008b 0x008b 0x008b 0x008b 0x008b OxOOaO OxOOaO OxOOaO OxOOa7 OxOOa7 OxOOe7 NtQuery LicenseVa lue 0x0183 NtQueryMultipleValueKey 0x0072 0x0072 0x0072 0x0072 0x008c 0x008c 0x008c 0x008c 0x008c OxOOal OxOOa1 OxOOal 0x00a8 0x00a8 0x00e8 NtQuervMutant 0x0073 0x0073 0x0073 0x0073 0x008d 0x008d 0x008d 0x008d 0x008d 0x00a2 OxOOa2 OxOOa2 0x00a9 0x00a9 0x00e9 NtQueryObject 0x0074 0x0074 0x0074 0x0074 0x008e 0x008e 0x008e 0x008e 0x008e 0x00a3 OxOOa3 OxOOa3 OxOOaa OxOOaa OxOOea NtQuervOleDirectorvFile 0x0075 0x0075 0x0075 0x0075 NtQueryOpenSubKeys 0x008f 0x008f 0x008f 0x008f 0x008f 0x00a4 0x00a4 0x00a4 OxOOab OxOOab OxOOeb NtQuervOpenSubKevsEx OxOOac OxOOac OxOOec NtQuery PerformanceCounter 0x0076 0x0076 0x0076 0x0076 0x0090 0x0090 0x0090 0x0090 0x0090 0x00a5 OxOOa5 OxOOa5 OxOOad OxOOad OxOOed NtQuervPortlnformatio n Process 0x011b 0x011b 0x011b 0x0125 0x0125 0x016d NtQueryQuotalnformationFile 0x0091 0x0091 0x0091 0x0091 0x0091 0x00a6 0x00a6 0x00a6 OxOOae OxOOae OxOOee NtQuerySection 0x0077 0x0077 0x0077 0x0077 0x0092 0x0092 0x0092 0x0092 0x0092 0x00a7 OxOOa7 OxOOa7 OxOOaf OxOOaf OxOOef NtQuerySecurityObject 0x0078 0x0078 0x0078 0x0078 0x0093 0x0093 0x0093 0x0093 0x0093 0x00a8 0x00a8 0x00a8 OxOObO OxOObO OxOOfO NtQuerySemaphore 0x0079 0x0079 0x0079 0x0079 0x0094 0x0094 0x0094 0x0094 0x0094 0x00a9 0x00a9 0x00a9 OxOObl OxOObl OxOOfl NtQuerySymbolicLinkObject 0x007a 0x007a 0x007a 0x007a 0x0095 0x0095 0x0095 0x0095 0x0095 OxOOaa OxOOaa OxOOaa OxOOb2 OxOOb2 OxOOf2 NtQuerySystemEnvironmentValue 0x007b 0x007b 0x007b 0x007b 0x0096 0x0096 0x0096 0x0096 0x0096 OxOOab OxOOab OxOOab OxOOb3 OxOOb3 OxOOf3 NtQuerySystemEnvironmentValueEx OxOOac OxOOac OxOOac 0x00b4 0x00b4 0x00f4 NtQuerySystemlnformation 0x007c 0x007c 0x007c 0x007c 0x0097 0x0097 0x0097 0x0097 0x0097 OxOOad OxOOad OxOOad OxOOb5 OxOOb5 OxOOf5 NtQuerySystemTime 0x007d 0x007d 0x007d 0x007d 0x0098 0x0098 0x0098 0x0098 0x0098 OxOOae OxOOae OxOOae 0x00b6 0x00b6 0x00f6 NtQueryTimer 0x007e 0x007e 0x007e 0x007e 0x0099 0x0099 0x0099 0x0099 0x0099 OxOOaf OxOOaf OxOOaf OxOOb7 OxOOb7 OxOOf7 NtQueryTimerResolution 0x007f 0x007f 0x007f 0x007f 0x009a 0x009a 0x009a 0x009a 0x009a OxOObO OxOObO OxOObO 0x00b8 0x00b8 0x00f8 NtQueryValueKey 0x0080 0x0080 0x0080 0x0080 0x009b 0x009b 0x009b 0x009b 0x009b OxOObl OxOObl OxOObl 0x00b9 0x00b9 0x00f9 NtQuervVirtualMemorv 0x0081 0x0081 0x0081 0x0081 0x009c 0x009c 0x009c 0x009c 0x009c OxOOb2 OxOOb2 OxOOb2 OxOOba OxOOba OxOOfa NtQueryVolumelnformationFile 0x0082 0x0082 0x0082 0x0082 0x009d 0x009d 0x009d 0x009d 0x009d OxOOb3 OxOOb3 OxOOb3 OxOObb OxOObb OxOOfb NtQuervWinStationlnformation 0x00d5 NtQueueApcThread 0x0083 0x0083 0x0083 0x0083 0x009e 0x009e 0x009e 0x009e 0x009e 0x00b4 0x00b4 0x00b4 OxOObc OxOObc OxOOfc NtRaise Exception 0x0084 0x0084 0x0084 0x0084 0x009f 0x009f 0x009f 0x009f 0x009f OxOOb5 OxOOb5 OxOOb5 OxOObd OxOObd OxOOfd NtRaiseHardError 0x0085 0x0085 0x0085 0x0085 OxOOaO OxOOaO OxOOaO OxOOaO OxOOaO 0x00b6 0x00b6 0x00b6 OxOObe OxOObe OxOOfe NtReadFile 0x0086 0x0086 0x0086 0x0086 OxOOal OxOOal 0x00a1 OxOOal OxOOal OxOOb7 OxOOb7 OxOOb7 OxOObf OxOObf OxOOff NtReadFileScatter 0x0087 0x0087 0x0087 0x0087 0x00a2 0x00a2 0x00a2 0x00a2 0x00a2 0x00b8 0x00b8 0x00b8 OxOOcO OxOOcO 0x0100 NtReadOnlyEnlistment 0x0056 NtReadRequestData 0x0088 0x0088 0x0088 0x0088 0x00a3 0x00a3 0x00a3 0x00a3 0x00a3 0x00b9 0x00b9 0x00b9 OxOOcl OxOOcl 0x0101 NtReadVirtualMemory 0x0089 0x0089 0x0089 0x0089 0x00a4 0x00a4 0x00a4 0x00a4 0x00a4 OxOOba OxOOba OxOOba OxOOc2 OxOOc2 0x0102 NtRecoverEnlistment 0x0066 NtRecoverResourceManaqer 0x0067 NtRecoverTransactionManaqer 0x0068 NtReqisterProtocolAddressInformation 0x0175 NtReqisterThreadTerminatePort 0x008a 0x008a 0x008a 0x008a 0x00a5 0x00a5 0x00a5 0x00a5 0x00a5 OxOObb OxOObb OxOObb OxOOc3 OxOOc3 0x0103 NtReleaseKeyed Event 0x0119 0x0119 0x0119 0x0123 0x0123 0x016b NtReleaseMutant 0x008b 0x008b 0x008b 0x008b 0x00a6 0x00a6 0x00a6 0x00a6 0x00a6 OxOObc OxOObc OxOObc 0x00c4 0x00c4 0x0104 NtReleaseSemaphore 0x008c 0x008c 0x008c 0x008c 0x00a7 0x00a7 0x00a7 0x00a7 0x00a7 OxOObd OxOObd OxOObd OxOOc5 OxOOc5 0x0105 NtReleaseWorkerFactorv Worker 0x017b NtRemoveloCompletion 0x008d 0x008d 0x008d 0x008d 0x00a8 0x00a8 0x00a8 0x00a8 0x00a8 OxOObe OxOObe OxOObe 0x00c6 0x00c6 0x0106 NtRemoveloCompletionEx 0x0174 NtRemo ve Process Debuq OxOObf OxOObf OxOObf OxOOc7 OxOOc7 0x0107 NtRenameKev OxOOcO OxOOcO OxOOcO 0x00c8 0x00c8 0x0108 NtRenameTransactionManaqer 0x0064 NtReplaceKev 0x008e 0x008e 0x008e 0x008e 0x00a9 0x00a9 0x00a9 0x00a9 0x00a9 OxOOcl OxOOcl OxOOcl 0x00c9 0x00c9 0x0109 NtReplyPort 0x008f 0x008f 0x008f 0x008f OxOOaa OxOOaa OxOOaa OxOOaa OxOOaa OxOOc2 OxOOc2 OxOOc2 OxOOca OxOOca 0x010a NtReplyWaitReceivePort 0x0090 0x0090 0x0090 0x0090 OxOOab OxOOab OxOOab OxOOab OxOOab OxOOc3 OxOOc3 OxOOc3 OxOOcb OxOOcb 0x010b NtReplyWaitReceivePortEx OxOOac OxOOac OxOOac OxOOac OxOOac 0x00c4 0x00c4 0x00c4 OxOOcc OxOOcc 0x010c NtReplyWaitReplyPort 0x0091 0x0091 0x0091 0x0091 OxOOad OxOOad OxOOad OxOOad OxOOad OxOOc5 OxOOc5 OxOOc5 OxOOcd OxOOcd 0x0 lOd NtReplyWaitSendChannel OxOOdO OxOOcf OxOOcf OxOOcf 0x00f4 0x00f4 0x00f4 0x00f4 0x00f4 NtRequestDeviceWakeup OxOOae OxOOae OxOOae OxOOae OxOOae 0x00c6 0x00c6 0x00c6 OxOOce OxOOce OxOlOe NtRequestPort 0x0092 0x0092 0x0092 0x0092 OxOOaf OxOOaf OxOOaf OxOOaf OxOOaf OxOOc7 OxOOc7 OxOOc7 OxOOcf OxOOcf OxOlOf NtRequestWaitReplyPort 0x0093 0x0093 0x0093 0x0093 OxOObO OxOObO OxOObO OxOObO OxOObO 0x00c8 0x00c8 0x00c8 OxOOdO OxOOdO 0x0110 NtRequestWakeu p Latency OxOObl OxOObl OxOObl OxOObl OxOObl 0x00c9 0x00c9 0x00c9 OxOOd1 OxOOdl 0x0111 NtResetEvent 0x0094 0x0094 0x0094 0x0094 0x00b2 0x00b2 0x00b2 0x00b2 0x00b2 OxOOca OxOOca OxOOca OxOOd2 OxOOd2 0x0112 NtResetWriteWatch OxOOb3 OxOOb3 OxOOb3 OxOOb3 OxOOb3 OxOOcb OxOOcb OxOOcb OxOOd3 OxOOd3 0x0113 NtRestoreKev 0x0095 0x0095 0x0095 0x0095 0x00b4 0x00b4 0x00b4 0x00b4 0x00b4 OxOOcc OxOOcc OxOOcc OxOOd4 0x00d4 0x0114 NtResumeProcess OxOOcd OxOOcd OxOOcd OxOOd5 OxOOd5 0x0115 NtResumeThread 0x0096 0x0096 0x0096 0x0096 OxOOb5 OxOOb5 OxOOb5 OxOOb5 OxOOb5 OxOOce OxOOce OxOOce OxOOd6 0x00d6 0x0116 NtRollbackComplete Ox005ľ NtRollbackEnlistment 0x0058 NtRollbackSavepointTransaction OxOlle NtRollbackTransaction 0x005a NtRollforwardTransactionManaqer 0x0065 NtSaveKey 0x0097 0x0097 0x009ľ 0x009ľ 0x00b6 0x00b6 0x00b6 0x00b6 0x00b6 OxOOcf OxOOcf OxOOcf OxOOdľ OxOOdľ OxOllľ NtSaveKeyEx OxOOdO OxOOdO OxOOdO OxOOd8 0x00d8 0x0118 NtSaveMerqedKeys OxOObľ OxOObľ OxOObľ OxOObľ OxOObľ OxOOd1 OxOOd1 OxOOd1 OxOOd9 0x00d9 0x0119 NtSavepointComplete OxOlle NtSavepointTransaction OxOlld NtSecureConnectPort 0x00b8 0x00b8 0x00b8 0x00b8 0x00b8 OxOOd2 OxOOd2 OxOOd2 OxOOda OxOOda OxOllf NtSendWaitReplyChannel OxOOdl OxOOdO OxOOdO OxOOdO OxOOf5 OxOOf5 OxOOf5 OxOOf5 OxOOf5 NtSetBootEntrvOrder OxOOd3 OxOOd3 OxOOd3 OxOOdb OxOOdb 0x0120 NtSetBootOptions OxOOd4 OxOOd4 OxOOd4 OxOOdc OxOOdc 0x0121 NtSetContextChannel 0x00d2 OxOOd1 OxOOd1 OxOOd1 0x00f6 0x00f6 0x00f6 0x00f6 0x00f6 NtSetContextThread 0x0099 0x0099 0x0099 0x0099 OxOOba OxOOba OxOOba OxOOba OxOOba OxOOd5 OxOOd5 OxOOd5 OxOOdd OxOOdd 0x0122 NtSetDebuqFilterState OxOOd6 OxOOd6 OxOOd6 OxOOde OxOOde 0x0123 NtSetDefaultHardErrorPort 0x009a 0x009a 0x009a 0x009a OxOObb OxOObb OxOObb OxOObb OxOObb OxOOdľ OxOOdľ OxOOdľ OxOOdf OxOOdf 0x0124 NtSetDefaultLocale 0x009b 0x009b 0x009b 0x009b OxOObc OxOObc OxOObc OxOObc OxOObc OxOOd8 OxOOd8 OxOOd8 OxOOeO OxOOeO 0x0125 NtSetDefaultUILanquaqe OxOObd OxOObd OxOObd OxOObd OxOObd OxOOd9 OxOOd9 OxOOd9 OxOOel OxOOel 0x0126 NtSetDriverEntryOrder OxOOe2 OxOOe2 Ox012ľ NtSetEaFile 0x009c 0x009c 0x009c 0x009c OxOObe OxOObe OxOObe OxOObe OxOObe OxOOda OxOOda OxOOda OxOOe3 OxOOe3 0x0128 NtSetEvent 0x009d 0x009d 0x009d 0x009d OxOObf OxOObf OxOObf OxOObf OxOObf OxOOdb OxOOdb OxOOdb 0x00e4 0x00e4 0x0129 NtSetEventBoostPriority OxOOdc OxOOdc OxOOdc OxOOe5 OxOOe5 0x012a NtSetHiqhEventPair 0x009e 0x009e 0x009e 0x009e OxOOcO OxOOcO OxOOcO OxOOcO OxOOcO OxOOdd OxOOdd OxOOdd 0x00e6 0x00e6 0x012b NtSetHiqhWaitLowEventPair 0x009f 0x009f 0x009f 0x009f OxOOcl OxOOcl OxOOcl OxOOcl OxOOcl OxOOde OxOOde OxOOde OxOOeľ OxOOeľ 0x012c NtSetH iq hWa itLowThread OxOOaO OxOOaO OxOOaO OxOOaO NtSetlnformation Deb uq Object OxOOdf OxOOdf OxOOdf 0x00e8 0x00e8 Ox012d NtSetlnformation Enlistment 0x006f NtSetlnformation File OxOOal OxOOal 0x00a1 OxOOal OxOOc2 OxOOc2 OxOOc2 OxOOc2 OxOOc2 OxOOeO OxOOeO OxOOeO 0x00e9 0x00e9 0x012e NtSetlnformationJobObject OxOOc3 OxOOc3 OxOOc3 OxOOc3 OxOOc3 OxOOel OxOOel OxOOel OxOOea OxOOea 0x012f NtSetlnformation Key 0x00a2 0x00a2 0x00a2 OxOOa2 0x00c4 0x00c4 0x00c4 0x00c4 0x00c4 OxOOe2 OxOOe2 OxOOe2 OxOOeb OxOOeb 0x0130 NtSetlnformationObject 0x00a3 0x00a3 0x00a3 OxOOa3 OxOOc5 OxOOc5 OxOOc5 OxOOc5 OxOOc5 OxOOe3 OxOOe3 OxOOe3 OxOOec OxOOec 0x0131 NtSetlnformation Process 0x00a4 0x00a4 0x00a4 0x00a4 0x00c6 0x00c6 0x00c6 0x00c6 0x00c6 0x00e4 0x00e4 0x00e4 OxOOed OxOOed 0x0132 NtSetlnformationResourceManaqer 0x0061 NtSetlnformationThread 0x00a5 0x00a5 0x00a5 OxOOa5 OxOOcľ OxOOcľ OxOOcľ OxOOcľ OxOOcľ OxOOe5 OxOOe5 OxOOe5 OxOOee OxOOee 0x0133 NtSetlnformationToken 0x00a6 0x00a6 0x00a6 0x00a6 0x00c8 0x00c8 0x00c8 0x00c8 0x00c8 0x00e6 0x00e6 0x00e6 OxOOef OxOOef 0x0134 NtSetlnformationTransaction Ox005f NtSetlnformationTransactionManaqer 0x0060 NtSetlnformation Wo rkerFactory OxOlľd NtSetlntervalProfile OxOOaľ OxOOaľ OxOOaľ OxOOaľ 0x00c9 0x00c9 0x00c9 0x00c9 0x00c9 OxOOeľ OxOOeľ OxOOeľ OxOOfO OxOOfO 0x0135 NtSetloCompletion 0x0098 0x0098 0x0098 0x0098 0x00b9 0x00b9 0x00b9 0x00b9 0x00b9 0x00e8 0x00e8 0x00e8 OxOOfl OxOOfl 0x0136 NtSetLdtEntries 0x00a8 0x00a8 0x00a8 0x00a8 OxOOca OxOOca OxOOca OxOOca OxOOca 0x00e9 0x00e9 0x00e9 OxOOf2 OxOOf2 Ox013ľ NtSetLowEventPair 0x00a9 0x00a9 0x00a9 0x00a9 OxOOcb OxOOcb OxOOcb OxOOcb OxOOcb OxOOea OxOOea OxOOea OxOOf3 OxOOf3 0x0138 NtSetLowWaitHiqhEventPair OxOOaa OxOOaa OxOOaa OxOOaa OxOOcc OxOOcc OxOOcc OxOOcc OxOOcc OxOOeb OxOOeb OxOOeb 0x00f4 0x00f4 0x0139 NtSetLowWaitHiqhThread OxOOab OxOOab OxOOab OxOOab NtSetQuota Information File OxOOcd OxOOcd OxOOcd OxOOcd OxOOcd OxOOec OxOOec OxOOec OxOOf5 OxOOf5 Ox013a NtSetSecurityObject OxOOac OxOOac OxOOac OxOOac OxOOce OxOOce OxOOce OxOOce OxOOce OxOOed OxOOed OxOOed 0x00f6 0x00f6 0x013b NtSetSvstemEnvironmentValue OxOOad OxOOad OxOOad OxOOad OxOOcf OxOOcf OxOOcf OxOOcf OxOOcf OxOOee OxOOee OxOOee OxOOfľ OxOOfľ 0x013c NtSetSystemEnvironmentValueEx OxOOef OxOOef OxOOef 0x00f8 0x00f8 0x013d NtSetSvstemlnformation OxOOae OxOOae OxOOae OxOOae OxOOdO OxOOdO OxOOdO OxOOdO OxOOdO OxOOfO OxOOfO OxOOfO 0x00f9 0x00f9 Ox013e NtSetSystem Powers täte OxOOaf OxOOaf OxOOaf OxOOaf OxOOdl OxOOd1 OxOOd1 OxOOd1 OxOOdl OxOOfl OxOOfl OxOOfl OxOOfa OxOOfa Ox013f NtSetSvstemTime OxOObO OxOObO OxOObO OxOObO OxOOd2 OxOOd2 OxOOd2 OxOOd2 OxOOd2 OxOOf2 OxOOf2 OxOOf2 OxOOfb OxOOfb 0x0140 NtSetTh read Exec utionState OxOOd3 OxOOd3 OxOOd3 OxOOd3 OxOOd3 OxOOf3 OxOOf3 OxOOf3 OxOOfc OxOOfc 0x0141 NtSetTimer OxOObl OxOObl OxOObl OxOObl 0x00d4 OxOOd4 OxOOd4 OxOOd4 0x00d4 0x00f4 0x00f4 0x00f4 OxOOfd OxOOfd 0x0142 NtSetTimerResolution 0x00b2 0x00b2 OxOOb2 OxOOb2 OxOOd5 OxOOd5 OxOOd5 OxOOd5 OxOOd5 OxOOf5 OxOOf5 OxOOf5 OxOOfe OxOOfe 0x0143 NtSetUuidSeed 0x00d6 OxOOd6 OxOOd6 OxOOd6 0x00d6 0x00f6 0x00f6 0x00f6 OxOOff OxOOff 0x0144 NtSetValueKey 0x00b3 0x00b3 OxOOb3 OxOOb3 OxOOdľ OxOOdľ OxOOdľ OxOOdľ OxOOdľ OxOOfľ OxOOfľ OxOOfľ 0x0100 0x0100 0x0145 NtSetVolumelnformationFile 0x00b4 0x00b4 0x00b4 0x00b4 0x00d8 OxOOd8 OxOOd8 OxOOd8 0x00d8 0x00f8 0x00f8 0x00f8 0x0101 0x0101 0x0146 NtSetWinStationlnformation 0x00d6 NtShutdownSystem 0x00b5 0x00b5 OxOOb5 OxOOb5 0x00d9 OxOOd9 OxOOd9 OxOOd9 0x00d9 0x00f9 0x00f9 0x00f9 0x0102 0x0102 0x014ľ NtShutd own Wo rkerFactory 0x0180 NtSiqnalAndWaitForSinqleObject 0x00b6 0x00b6 0x00b6 0x00b6 OxOOda OxOOda OxOOda OxOOda OxOOda OxOOfa OxOOfa OxOOfa 0x0103 0x0103 0x0148 NtSinqlePhaseReject Ox005e NtStartProfile OxOObľ OxOObľ OxOObľ OxOObľ OxOOdb OxOOdb OxOOdb OxOOdb OxOOdb OxOOfb OxOOfb OxOOfb 0x0104 0x0104 0x0149 NtStartTm OxOOľl NtStopProfile 0x00b8 0x00b8 0x00b8 0x00b8 OxOOdc OxOOdc OxOOdc OxOOdc OxOOdc OxOOfc OxOOfc OxOOfc 0x0105 0x0105 0x014a NtSuspendProcess OxOOfd OxOOfd OxOOfd 0x0106 0x0106 0x014b NtSuspendThread 0x00b9 0x00b9 0x00b9 0x00b9 OxOOdd OxOOdd OxOOdd OxOOdd OxOOdd OxOOfe OxOOfe OxOOfe OxOlOľ OxOlOľ 0x014c NtSvstem Deb uq Control OxOOba OxOOba OxOOba OxOOba OxOOde OxOOde OxOOde OxOOde OxOOde OxOOff OxOOff OxOOff 0x0108 0x0108 0x014d NtTerminateJobObject OxOOdf OxOOdf OxOOdf OxOOdf OxOOdf 0x0100 0x0100 0x0100 0x0109 0x0109 0x014e NtTerminateProcess OxOObb OxOObb OxOObb OxOObb OxOOeO OxOOeO OxOOeO OxOOeO OxOOeO 0x0101 0x0101 0x0101 OxOlOa OxOlOa 0x014f NtTerminateThread OxOObc OxOObc OxOObc OxOObc OxOOel OxOOel OxOOel OxOOel OxOOel 0x0102 0x0102 0x0102 0x010b 0x010b 0x0150 NtTestAlert OxOObd OxOObd OxOObd OxOObd OxOOe2 OxOOe2 OxOOe2 OxOOe2 OxOOe2 0x0103 0x0103 0x0103 0x010c 0x010c 0x0151 NtThawReqistry 0x0152 NtThawTransactions 0x0153 NtTraceControl 0x0155 NtTraceEvent 0x0104 0x0104 0x0104 OxOlOd OxOlOd 0x0154 NtTranslateFilePath 0x0105 0x0105 0x0105 OxOlOe OxOlOe 0x0156 NtUnloadDriver OxOObe OxOObe OxOObe OxOObe OxOOe3 OxOOe3 OxOOe3 OxOOe3 OxOOe3 0x0106 0x0106 0x0106 OxOlOf OxOlOf Ox015ľ NtUnloadKey OxOObf OxOObf OxOObf OxOObf 0x00e4 0x00e4 0x00e4 0x00e4 0x00e4 OxOlOľ OxOlOľ OxOlOľ 0x0110 0x0110 0x0158 NtUnloadKey2 0x0111 0x0111 0x0159 NtUnloadKeyEx 0x0108 0x0108 0x0108 0x0112 0x0112 0x015a NtUnlockFile OxOOcO OxOOcO OxOOcO OxOOcO OxOOe5 OxOOe5 OxOOe5 OxOOe5 OxOOe5 0x0109 0x0109 0x0109 0x0113 0x0113 0x015b NtUnlockVirtualMemory OxOOcl OxOOcl OxOOcl OxOOcl 0x00e6 0x00e6 0x00e6 0x00e6 0x00e6 OxOlOa 0x010a OxOlOa 0x0114 0x0114 0x015c NtUnmapViewOfSection 0x00c2 0x00c2 OxOOc2 OxOOc2 OxOOeľ OxOOeľ OxOOeľ OxOOeľ OxOOeľ 0x010b 0x010b 0x010b 0x0115 0x0115 Ox015d NtVdmControl 0x00c3 0x00c3 OxOOc3 OxOOc3 0x00e8 0x00e8 0x00e8 0x00e8 0x00e8 0x010c 0x010c 0x010c 0x0116 0x0116 0x015e NtW32Call OxOOcc NtWa itForDebuq Event 0x0 lOd OxOlOd OxOlOd OxOllľ OxOllľ 0x015f NtWaitForKeyed Event 0x011a 0x011a 0x011a 0x0124 0x0124 0x016c NtWaitForMultipleObiects 0x00c4 0x00c4 0x00c4 0x00c4 0x00e9 0x00e9 0x00e9 0x00e9 0x00e9 OxOlOe 0x0 lOe OxOlOe 0x0118 0x0118 0x0160 NtWaitForMultipleObjects32 Ox012ľ 0x016f NtWaitForSinqleObiect 0x00c5 0x00c5 OxOOc5 OxOOc5 OxOOea OxOOea OxOOea OxOOea OxOOea OxOlOf OxOlOf OxOlOf 0x0119 0x0119 0x0161 NtWaitForWorkViaWorkerFactory 0x017c NtWaitHiqhEventPair 0x00c6 0x00c6 0x00c6 0x00c6 OxOOeb OxOOeb OxOOeb OxOOeb OxOOeb 0x0110 0x0110 0x0110 OxOlla OxOlla 0x0162 NtWaitLowEventPair OxOOcľ OxOOcľ OxOOcľ OxOOcľ OxOOec OxOOec OxOOec OxOOec OxOOec 0x0111 0x0111 0x0111 0x011b OxOllb 0x0163 NtWo rkerFactory WorkerReady 0x0lľf NtWriteErrorLoq Entry OxOOdľ NtWriteFile 0x00c8 0x00c8 0x00c8 0x00c8 OxOOed OxOOed OxOOed OxOOed OxOOed 0x0112 0x0112 0x0112 0x011c OxOlle 0x0164 NtWriteFileGather 0x00c9 0x00c9 0x00c9 0x00c9 OxOOee OxOOee OxOOee OxOOee OxOOee 0x0113 0x0113 0x0113 OxOlld OxOlld 0x0165 NtWriteRequestData OxOOca OxOOca OxOOca OxOOca OxOOef OxOOef OxOOef OxOOef OxOOef 0x0114 0x0114 0x0114 OxOlle OxOlle 0x0166 NtWriteVirtualMemory OxOOcb OxOOcb OxOOcb OxOOcb OxOOfO OxOOfO OxOOfO OxOOfO OxOOfO 0x0115 0x0115 0x0115 OxOllf OxOllf 0x016ľ NtYieldExecution 0x00d3 0x00d2 OxOOd2 OxOOd2 OxOOfľ OxOOfľ OxOOfľ OxOOfľ OxOOfľ 0x0116 0x0116 0x0116 0x0120 0x0120 0x0168