Skip to content

Latest commit

 

History

History
482 lines (481 loc) · 59.5 KB

ssdt_amd64.md

File metadata and controls

482 lines (481 loc) · 59.5 KB
Raw

ssdt amd64 table

name vista_sp0(id/argc) vista_sp1(id/argc) vista_sp2(id/argc) 7_sp0(id/argc) 7_sp1(id/argc) 8(id/argc) 8_1(id/argc) 10_th1_1507(id/argc) 10_th2_1511(id/argc) 10_rs1_1607(id/argc) 10_rs2_1703(id/argc) 10_rs3_1709(id/argc) 10_rs4_1803(id/argc)
NtAcceptConnectPort 96/6 96/6 96/6 96/6 96/6 97/6 1/6 2/6 2/6 2/6 2/6 2/6 2/6
NtAccessCheck 97/8 97/8 97/8 97/8 97/8 98/8 98/8 0/8 0/8 0/8 0/8 0/8 0/8
NtAccessCheckAndAuditAlarm 38/11 38/11 38/11 38/11 38/11 39/11 40/11 41/11 41/11 41/11 41/11 41/11 41/11
NtAccessCheckByType 98/11 98/11 98/11 98/11 98/11 99/11 99/11 99/11 99/11 99/11 99/11 99/11 99/11
NtAccessCheckByTypeAndAuditAlarm 86/16 86/16 86/16 86/16 86/16 87/16 88/16 89/16 89/16 89/16 89/16 89/16 89/16
NtAccessCheckByTypeResultList 99/11 99/11 99/11 99/11 99/11 100/11 100/11 100/11 100/11 100/11 100/11 100/11 100/11
NtAccessCheckByTypeResultListAndAuditAlarm 100/16 100/16 100/16 100/16 100/16 101/16 101/16 101/16 101/16 101/16 101/16 101/16 101/16
NtAccessCheckByTypeResultListAndAuditAlarmByHandle 101/17 101/17 101/17 101/17 101/17 102/17 102/17 102/17 102/17 102/17 102/17 102/17 102/17
NtAcquireCMFViewOwnership 102/3 102/3 102/3 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtAcquireProcessActivityReference -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 103/3 103/3 103/3
NtAddAtom 68/3 68/3 68/3 68/3 68/3 69/3 70/3 71/3 71/3 71/3 71/3 71/3 71/3
NtAddAtomEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 103/4 103/4 103/4 103/4 103/4 104/4 104/4 104/4
NtAddBootEntry 103/2 103/2 103/2 102/2 102/2 104/2 104/2 104/2 104/2 104/2 105/2 105/2 105/2
NtAddDriverEntry 104/2 104/2 104/2 103/2 103/2 105/2 105/2 105/2 105/2 105/2 106/2 106/2 106/2
NtAdjustGroupsToken 105/6 105/6 105/6 104/6 104/6 106/6 106/6 106/6 106/6 106/6 107/6 107/6 107/6
NtAdjustPrivilegesToken 62/6 62/6 62/6 62/6 62/6 63/6 64/6 65/6 65/6 65/6 65/6 65/6 65/6
NtAdjustTokenClaimsAndDeviceGroups -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 107/16 107/16 107/16 107/16 107/16 108/16 108/16 108/16
NtAlertResumeThread 106/2 106/2 106/2 105/2 105/2 108/2 108/2 108/2 108/2 108/2 109/2 109/2 109/2
NtAlertThread 107/1 107/1 107/1 106/1 106/1 109/1 109/1 109/1 109/1 109/1 110/1 110/1 110/1
NtAlertThreadByThreadId -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 110/1 110/1 110/1 110/1 110/1 111/1 111/1 111/1
NtAllocateLocallyUniqueId 108/1 108/1 108/1 107/1 107/1 111/1 111/1 111/1 111/1 111/1 112/1 112/1 112/1
NtAllocateReserveObject -1/-1 -1/-1 -1/-1 108/3 108/3 112/3 112/3 112/3 112/3 112/3 113/3 113/3 113/3
NtAllocateUserPhysicalPages 109/3 109/3 109/3 109/3 109/3 113/3 113/3 113/3 113/3 113/3 114/3 114/3 114/3
NtAllocateUuids 110/4 110/4 110/4 110/4 110/4 114/4 114/4 114/4 114/4 114/4 115/4 115/4 115/4
NtAllocateVirtualMemory 21/6 21/6 21/6 21/6 21/6 22/6 23/6 24/6 24/6 24/6 24/6 24/6 24/6
NtAllocateVirtualMemoryEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 116/7
NtAlpcAcceptConnectPort 111/9 111/9 111/9 111/9 111/9 115/9 115/9 115/9 115/9 115/9 116/9 116/9 117/9
NtAlpcCancelMessage 112/3 112/3 112/3 112/3 112/3 116/3 116/3 116/3 116/3 116/3 117/3 117/3 118/3
NtAlpcConnectPort 113/11 113/11 113/11 113/11 113/11 117/11 117/11 117/11 117/11 117/11 118/11 118/11 119/11
NtAlpcConnectPortEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 118/11 118/11 118/11 118/11 118/11 119/11 119/11 120/11
NtAlpcCreatePort 114/3 114/3 114/3 114/3 114/3 119/3 119/3 119/3 119/3 119/3 120/3 120/3 121/3
NtAlpcCreatePortSection 115/6 115/6 115/6 115/6 115/6 120/6 120/6 120/6 120/6 120/6 121/6 121/6 122/6
NtAlpcCreateResourceReserve 116/4 116/4 116/4 116/4 116/4 121/4 121/4 121/4 121/4 121/4 122/4 122/4 123/4
NtAlpcCreateSectionView 117/3 117/3 117/3 117/3 117/3 122/3 122/3 122/3 122/3 122/3 123/3 123/3 124/3
NtAlpcCreateSecurityContext 118/3 118/3 118/3 118/3 118/3 123/3 123/3 123/3 123/3 123/3 124/3 124/3 125/3
NtAlpcDeletePortSection 119/3 119/3 119/3 119/3 119/3 124/3 124/3 124/3 124/3 124/3 125/3 125/3 126/3
NtAlpcDeleteResourceReserve 120/3 120/3 120/3 120/3 120/3 125/3 125/3 125/3 125/3 125/3 126/3 126/3 127/3
NtAlpcDeleteSectionView 121/3 121/3 121/3 121/3 121/3 126/3 126/3 126/3 126/3 126/3 127/3 127/3 128/3
NtAlpcDeleteSecurityContext 122/3 122/3 122/3 122/3 122/3 127/3 127/3 127/3 127/3 127/3 128/3 128/3 129/3
NtAlpcDisconnectPort 123/2 123/2 123/2 123/2 123/2 128/2 128/2 128/2 128/2 128/2 129/2 129/2 130/2
NtAlpcImpersonateClientContainerOfPort -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 129/3 129/3 129/3 130/3 130/3 131/3
NtAlpcImpersonateClientOfPort 124/3 124/3 124/3 124/3 124/3 129/3 129/3 130/3 130/3 130/3 131/3 131/3 132/3
NtAlpcOpenSenderProcess 125/6 125/6 125/6 125/6 125/6 130/6 130/6 131/6 131/6 131/6 132/6 132/6 133/6
NtAlpcOpenSenderThread 126/6 126/6 126/6 126/6 126/6 131/6 131/6 132/6 132/6 132/6 133/6 133/6 134/6
NtAlpcQueryInformation 127/5 127/5 127/5 127/5 127/5 132/5 132/5 133/5 133/5 133/5 134/5 134/5 135/5
NtAlpcQueryInformationMessage 128/6 128/6 128/6 128/6 128/6 133/6 133/6 134/6 134/6 134/6 135/6 135/6 136/6
NtAlpcRevokeSecurityContext 129/3 129/3 129/3 129/3 129/3 134/3 134/3 135/3 135/3 135/3 136/3 136/3 137/3
NtAlpcSendWaitReceivePort 130/8 130/8 130/8 130/8 130/8 135/8 135/8 136/8 136/8 136/8 137/8 137/8 138/8
NtAlpcSetInformation 131/4 131/4 131/4 131/4 131/4 136/4 136/4 137/4 137/4 137/4 138/4 138/4 139/4
NtApphelpCacheControl 73/2 73/2 73/2 73/2 73/2 74/2 75/2 76/2 76/2 76/2 76/2 76/2 76/2
NtAreMappedFilesTheSame 132/2 132/2 132/2 132/2 132/2 137/2 137/2 138/2 138/2 138/2 139/2 139/2 140/2
NtAssignProcessToJobObject 133/2 133/2 133/2 133/2 133/2 138/2 138/2 139/2 139/2 139/2 140/2 140/2 141/2
NtAssociateWaitCompletionPacket -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 139/8 139/8 140/8 140/8 140/8 141/8 141/8 142/8
NtCallEnclave -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 142/4 143/4
NtCallbackReturn 2/3 2/3 2/3 2/3 2/3 3/3 4/3 5/3 5/3 5/3 5/3 5/3 5/3
NtCancelDeviceWakeupRequest 134/1 134/1 134/1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtCancelIoFile 90/2 90/2 90/2 90/2 90/2 91/2 92/2 93/2 93/2 93/2 93/2 93/2 93/2
NtCancelIoFileEx 135/3 135/3 135/3 134/3 134/3 140/3 140/3 141/3 141/3 141/3 142/3 143/3 144/3
NtCancelSynchronousIoFile 136/3 136/3 136/3 135/3 135/3 141/3 141/3 142/3 142/3 142/3 143/3 144/3 145/3
NtCancelTimer 94/2 94/2 94/2 94/2 94/2 95/2 96/2 97/2 97/2 97/2 97/2 97/2 97/2
NtCancelTimer2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 142/2 143/2 143/2 143/2 144/2 145/2 146/2
NtCancelWaitCompletionPacket -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 142/2 143/2 144/2 144/2 144/2 145/2 146/2 147/2
NtClearAllSavepointsTransaction 137/1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtClearEvent 59/1 59/1 59/1 59/1 59/1 60/1 61/1 62/1 62/1 62/1 62/1 62/1 62/1
NtClearSavepointTransaction 138/2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtClose 12/1 12/1 12/1 12/1 12/1 13/1 14/1 15/1 15/1 15/1 15/1 15/1 15/1
NtCloseObjectAuditAlarm 56/3 56/3 56/3 56/3 56/3 57/3 58/3 59/3 59/3 59/3 59/3 59/3 59/3
NtCommitComplete 139/2 137/2 137/2 136/2 136/2 143/2 144/2 145/2 145/2 145/2 146/2 147/2 148/2
NtCommitEnlistment 140/2 138/2 138/2 137/2 137/2 144/2 145/2 146/2 146/2 146/2 147/2 148/2 149/2
NtCommitRegistryTransaction -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 147/2 148/2 149/2 150/2
NtCommitTransaction 141/2 139/2 139/2 138/2 138/2 145/2 146/2 147/2 147/2 148/2 149/2 150/2 151/2
NtCompactKeys 142/2 140/2 140/2 139/2 139/2 146/2 147/2 148/2 148/2 149/2 150/2 151/2 152/2
NtCompareObjects -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 149/2 149/2 150/2 151/2 152/2 153/2
NtCompareSigningLevels -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 152/2 153/2 154/2
NtCompareTokens 143/3 141/3 141/3 140/3 140/3 147/3 148/3 150/3 150/3 151/3 153/3 154/3 155/3
NtCompleteConnectPort 144/1 142/1 142/1 141/1 141/1 148/1 149/1 151/1 151/1 152/1 154/1 155/1 156/1
NtCompressKey 145/1 143/1 143/1 142/1 142/1 149/1 150/1 152/1 152/1 153/1 155/1 156/1 157/1
NtConnectPort 146/8 144/8 144/8 143/8 143/8 150/8 151/8 153/8 153/8 154/8 156/8 157/8 158/8
NtContinue 64/2 64/2 64/2 64/2 64/2 65/2 66/2 67/2 67/2 67/2 67/2 67/2 67/2
NtConvertBetweenAuxiliaryCounterAndPerformanceCounter -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 157/4 158/4 159/4
NtCreateDebugObject 147/4 145/4 145/4 144/4 144/4 151/4 152/4 154/4 154/4 155/4 158/4 159/4 160/4
NtCreateDirectoryObject 148/3 146/3 146/3 145/3 145/3 152/3 153/3 155/3 155/3 156/3 159/3 160/3 161/3
NtCreateDirectoryObjectEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 153/5 154/5 156/5 156/5 157/5 160/5 161/5 162/5
NtCreateEnclave -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 157/9 158/9 161/9 162/9 163/9
NtCreateEnlistment 149/8 147/8 147/8 146/8 146/8 154/8 155/8 157/8 158/8 159/8 162/8 163/8 164/8
NtCreateEvent 69/5 69/5 69/5 69/5 69/5 70/5 71/5 72/5 72/5 72/5 72/5 72/5 72/5
NtCreateEventPair 150/3 148/3 148/3 147/3 147/3 155/3 156/3 158/3 159/3 160/3 163/3 164/3 165/3
NtCreateFile 82/11 82/11 82/11 82/11 82/11 83/11 84/11 85/11 85/11 85/11 85/11 85/11 85/11
NtCreateIRTimer -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 156/2 157/2 159/2 160/2 161/2 164/3 165/3 166/3
NtCreateIoCompletion 151/4 149/4 149/4 148/4 148/4 157/4 158/4 160/4 161/4 162/4 165/4 166/4 167/4
NtCreateJobObject 152/3 150/3 150/3 149/3 149/3 158/3 159/3 161/3 162/3 163/3 166/3 167/3 168/3
NtCreateJobSet 153/3 151/3 151/3 150/3 150/3 159/3 160/3 162/3 163/3 164/3 167/3 168/3 169/3
NtCreateKey 26/7 26/7 26/7 26/7 26/7 27/7 28/7 29/7 29/7 29/7 29/7 29/7 29/7
NtCreateKeyTransacted 154/8 152/8 152/8 151/8 151/8 160/8 161/8 163/8 164/8 165/8 168/8 169/8 170/8
NtCreateKeyedEvent 155/4 153/4 153/4 152/4 152/4 161/4 162/4 164/4 165/4 166/4 169/4 170/4 171/4
NtCreateLowBoxToken -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 162/9 163/9 165/9 166/9 167/9 170/9 171/9 172/9
NtCreateMailslotFile 156/8 154/8 154/8 153/8 153/8 163/8 164/8 166/8 167/8 168/8 171/8 172/8 173/8
NtCreateMutant 157/4 155/4 155/4 154/4 154/4 164/4 165/4 167/4 168/4 169/4 172/4 173/4 174/4
NtCreateNamedPipeFile 158/14 156/14 156/14 155/14 155/14 165/14 166/14 168/14 169/14 170/14 173/14 174/14 175/14
NtCreatePagingFile 159/4 157/4 157/4 156/4 156/4 166/4 167/4 169/4 170/4 171/4 174/4 175/4 176/4
NtCreatePartition -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 170/5 171/4 172/4 175/4 176/4 177/4
NtCreatePort 160/5 158/5 158/5 157/5 157/5 167/5 168/5 171/5 172/5 173/5 176/5 177/5 178/5
NtCreatePrivateNamespace 161/4 159/4 159/4 158/4 158/4 168/4 169/4 172/4 173/4 174/4 177/4 178/4 179/4
NtCreateProcess 162/8 160/8 160/8 159/8 159/8 169/8 170/8 173/8 174/8 175/8 178/8 179/8 180/8
NtCreateProcessEx 74/9 74/9 74/9 74/9 74/9 75/9 76/9 77/9 77/9 77/9 77/9 77/9 77/9
NtCreateProfile 163/9 161/9 161/9 160/9 160/9 170/9 171/9 174/9 175/9 176/9 179/9 180/9 181/9
NtCreateProfileEx -1/-1 -1/-1 -1/-1 161/10 161/10 171/10 172/10 175/10 176/10 177/10 180/10 181/10 182/10
NtCreateRegistryTransaction -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 178/4 181/4 182/4 183/4
NtCreateResourceManager 164/7 162/7 162/7 162/7 162/7 172/7 173/7 176/7 177/7 179/7 182/7 183/7 184/7
NtCreateSection 71/7 71/7 71/7 71/7 71/7 72/7 73/7 74/7 74/7 74/7 74/7 74/7 74/7
NtCreateSemaphore 165/5 163/5 163/5 163/5 163/5 173/5 174/5 177/5 178/5 180/5 183/5 184/5 185/5
NtCreateSymbolicLinkObject 166/4 164/4 164/4 164/4 164/4 174/4 175/4 178/4 179/4 181/4 184/4 185/4 186/4
NtCreateThread 75/8 75/8 75/8 75/8 75/8 76/8 77/8 78/8 78/8 78/8 78/8 78/8 78/8
NtCreateThreadEx 167/11 165/11 165/11 165/11 165/11 175/11 176/11 179/11 180/11 182/11 185/11 186/11 187/11
NtCreateTimer 168/4 166/4 166/4 166/4 166/4 176/4 177/4 180/4 181/4 183/4 186/4 187/4 188/4
NtCreateTimer2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 178/5 181/5 182/5 184/5 187/5 188/5 189/5
NtCreateToken 169/13 167/13 167/13 167/13 167/13 177/13 179/13 182/13 183/13 185/13 188/13 189/13 190/13
NtCreateTokenEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 178/17 180/17 183/17 184/17 186/17 189/17 190/17 191/17
NtCreateTransaction 170/10 168/10 168/10 168/10 168/10 179/10 181/10 184/10 185/10 187/10 190/10 191/10 192/10
NtCreateTransactionManager 171/6 169/6 169/6 169/6 169/6 180/6 182/6 185/6 186/6 188/6 191/6 192/6 193/6
NtCreateUserProcess 172/11 170/11 170/11 170/11 170/11 181/11 183/11 186/11 187/11 189/11 192/11 193/11 194/11
NtCreateWaitCompletionPacket -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 182/3 184/3 187/3 188/3 190/3 193/3 194/3 195/3
NtCreateWaitablePort 173/5 171/5 171/5 171/5 171/5 183/5 185/5 188/5 189/5 191/5 194/5 195/5 196/5
NtCreateWnfStateName -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 184/7 186/7 189/7 190/7 192/7 195/7 196/7 197/7
NtCreateWorkerFactory 174/10 172/10 172/10 172/10 172/10 185/10 187/10 190/10 191/10 193/10 196/10 197/10 198/10
NtDebugActiveProcess 175/2 173/2 173/2 173/2 173/2 186/2 188/2 191/2 192/2 194/2 197/2 198/2 199/2
NtDebugContinue 176/3 174/3 174/3 174/3 174/3 187/3 189/3 192/3 193/3 195/3 198/3 199/3 200/3
NtDelayExecution 49/2 49/2 49/2 49/2 49/2 50/2 51/2 52/2 52/2 52/2 52/2 52/2 52/2
NtDeleteAtom 177/1 175/1 175/1 175/1 175/1 188/1 190/1 193/1 194/1 196/1 199/1 200/1 201/1
NtDeleteBootEntry 178/1 176/1 176/1 176/1 176/1 189/1 191/1 194/1 195/1 197/1 200/1 201/1 202/1
NtDeleteDriverEntry 179/1 177/1 177/1 177/1 177/1 190/1 192/1 195/1 196/1 198/1 201/1 202/1 203/1
NtDeleteFile 180/1 178/1 178/1 178/1 178/1 191/1 193/1 196/1 197/1 199/1 202/1 203/1 204/1
NtDeleteKey 181/1 179/1 179/1 179/1 179/1 192/1 194/1 197/1 198/1 200/1 203/1 204/1 205/1
NtDeleteObjectAuditAlarm 182/3 180/3 180/3 180/3 180/3 193/3 195/3 198/3 199/3 201/3 204/3 205/3 206/3
NtDeletePrivateNamespace 183/1 181/1 181/1 181/1 181/1 194/1 196/1 199/1 200/1 202/1 205/1 206/1 207/1
NtDeleteValueKey 184/2 182/2 182/2 182/2 182/2 195/2 197/2 200/2 201/2 203/2 206/2 207/2 208/2
NtDeleteWnfStateData -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 196/2 198/2 201/2 202/2 204/2 207/2 208/2 209/2
NtDeleteWnfStateName -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 197/1 199/1 202/1 203/1 205/1 208/1 209/1 210/1
NtDeviceIoControlFile 4/10 4/10 4/10 4/10 4/10 5/10 6/10 7/10 7/10 7/10 7/10 7/10 7/10
NtDisableLastKnownGood -1/-1 -1/-1 -1/-1 183/0 183/0 198/0 200/0 203/0 204/0 206/0 209/0 210/0 211/0
NtDisplayString 185/1 183/1 183/1 184/1 184/1 199/1 201/1 204/1 205/1 207/1 210/1 211/1 212/1
NtDrawText -1/-1 -1/-1 -1/-1 185/1 185/1 200/1 202/1 205/1 206/1 208/1 211/1 212/1 213/1
NtDuplicateObject 57/7 57/7 57/7 57/7 57/7 58/7 59/7 60/7 60/7 60/7 60/7 60/7 60/7
NtDuplicateToken 63/6 63/6 63/6 63/6 63/6 64/6 65/6 66/6 66/6 66/6 66/6 66/6 66/6
NtEnableLastKnownGood -1/-1 -1/-1 -1/-1 186/0 186/0 201/0 203/0 206/0 207/0 209/0 212/0 213/0 214/0
NtEnumerateBootEntries 186/2 184/2 184/2 187/2 187/2 202/2 204/2 207/2 208/2 210/2 213/2 214/2 215/2
NtEnumerateDriverEntries 187/2 185/2 185/2 188/2 188/2 203/2 205/2 208/2 209/2 211/2 214/2 215/2 216/2
NtEnumerateKey 47/6 47/6 47/6 47/6 47/6 48/6 49/6 50/6 50/6 50/6 50/6 50/6 50/6
NtEnumerateSystemEnvironmentValuesEx 188/3 186/3 186/3 189/3 189/3 204/3 206/3 209/3 210/3 212/3 215/3 216/3 217/3
NtEnumerateTransactionObject 189/5 187/5 187/5 190/5 190/5 205/5 207/5 210/5 211/5 213/5 216/5 217/5 218/5
NtEnumerateValueKey 16/6 16/6 16/6 16/6 16/6 17/6 18/6 19/6 19/6 19/6 19/6 19/6 19/6
NtExtendSection 190/2 188/2 188/2 191/2 191/2 206/2 208/2 211/2 212/2 214/2 217/2 218/2 219/2
NtFilterBootOption -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 207/5 209/5 212/5 213/5 215/5 218/5 219/5 220/5
NtFilterToken 191/6 189/6 189/6 192/6 192/6 208/6 210/6 213/6 214/6 216/6 219/6 220/6 221/6
NtFilterTokenEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 209/14 211/14 214/14 215/14 217/14 220/14 221/14 222/14
NtFindAtom 17/3 17/3 17/3 17/3 17/3 18/3 19/3 20/3 20/3 20/3 20/3 20/3 20/3
NtFlushBuffersFile 72/2 72/2 72/2 72/2 72/2 73/2 74/2 75/2 75/2 75/2 75/2 75/2 75/2
NtFlushBuffersFileEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 210/5 212/5 215/5 216/5 218/5 221/5 222/5 223/5
NtFlushInstallUILanguage 192/2 190/2 190/2 193/2 193/2 211/2 213/2 216/2 217/2 219/2 222/2 223/2 224/2
NtFlushInstructionCache 193/3 191/3 191/3 194/3 194/3 212/3 214/3 217/3 218/3 220/3 223/3 224/3 225/3
NtFlushKey 194/1 192/1 192/1 195/1 195/1 213/1 215/1 218/1 219/1 221/1 224/1 225/1 226/1
NtFlushProcessWriteBuffers 195/0 193/0 193/0 196/0 196/0 214/0 216/0 219/0 220/0 222/0 225/0 226/0 227/0
NtFlushVirtualMemory 196/4 194/4 194/4 197/4 197/4 215/4 217/4 220/4 221/4 223/4 226/4 227/4 228/4
NtFlushWriteBuffer 197/0 195/0 195/0 198/0 198/0 216/0 218/0 221/0 222/0 224/0 227/0 228/0 229/0
NtFreeUserPhysicalPages 198/3 196/3 196/3 199/3 199/3 217/3 219/3 222/3 223/3 225/3 228/3 229/3 230/3
NtFreeVirtualMemory 27/4 27/4 27/4 27/4 27/4 28/4 29/4 30/4 30/4 30/4 30/4 30/4 30/4
NtFreezeRegistry 199/1 197/1 197/1 200/1 200/1 218/1 220/1 223/1 224/1 226/1 229/1 230/1 231/1
NtFreezeTransactions 200/2 198/2 198/2 201/2 201/2 219/2 221/2 224/2 225/2 227/2 230/2 231/2 232/2
NtFsControlFile 54/10 54/10 54/10 54/10 54/10 55/10 56/10 57/10 57/10 57/10 57/10 57/10 57/10
NtGetCachedSigningLevel -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 220/6 222/6 225/6 226/6 228/6 231/6 232/6 233/6
NtGetCompleteWnfStateSubscription -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 223/6 226/6 227/6 229/6 232/6 233/6 234/6
NtGetContextThread 201/2 199/2 199/2 202/2 202/2 221/2 224/2 227/2 228/2 230/2 233/2 234/2 235/2
NtGetCurrentProcessorNumber 202/0 200/0 200/0 203/0 203/0 222/0 225/0 228/0 229/0 231/0 234/0 235/0 236/0
NtGetCurrentProcessorNumberEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 229/1 230/1 232/1 235/1 236/1 237/1
NtGetDevicePowerState 203/2 201/2 201/2 204/2 204/2 223/2 226/2 230/2 231/2 233/2 236/2 237/2 238/2
NtGetMUIRegistryInfo 204/3 202/3 202/3 205/3 205/3 224/3 227/3 231/3 232/3 234/3 237/3 238/3 239/3
NtGetNextProcess 205/5 203/5 203/5 206/5 206/5 225/5 228/5 232/5 233/5 235/5 238/5 239/5 240/5
NtGetNextThread 206/6 204/6 204/6 207/6 207/6 226/6 229/6 233/6 234/6 236/6 239/6 240/6 241/6
NtGetNlsSectionPtr 207/5 205/5 205/5 208/5 208/5 227/5 230/5 234/5 235/5 237/5 240/5 241/5 242/5
NtGetNotificationResourceManager 208/7 206/7 206/7 209/7 209/7 228/7 231/7 235/7 236/7 238/7 241/7 242/7 243/7
NtGetPlugPlayEvent 209/4 207/4 207/4 210/4 210/4 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtGetWriteWatch 210/7 208/7 208/7 211/7 211/7 229/7 232/7 236/7 237/7 239/7 242/7 243/7 244/7
NtImpersonateAnonymousToken 211/1 209/1 209/1 212/1 212/1 230/1 233/1 237/1 238/1 240/1 243/1 244/1 245/1
NtImpersonateClientOfPort 28/2 28/2 28/2 28/2 28/2 29/2 30/2 31/2 31/2 31/2 31/2 31/2 31/2
NtImpersonateThread 212/3 210/3 210/3 213/3 213/3 231/3 234/3 238/3 239/3 241/3 244/3 245/3 246/3
NtInitializeEnclave -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 240/5 242/5 245/5 246/5 247/5
NtInitializeNlsFiles 213/3 211/4 211/4 214/3 214/3 232/3 235/3 239/3 241/3 243/3 246/3 247/3 248/3
NtInitializeRegistry 214/1 212/1 212/1 215/1 215/1 233/1 236/1 240/1 242/1 244/1 247/1 248/1 249/1
NtInitiatePowerAction 215/4 213/4 213/4 216/4 216/4 234/4 237/4 241/4 243/4 245/4 248/4 249/4 250/4
NtIsProcessInJob 76/2 76/2 76/2 76/2 76/2 77/2 78/2 79/2 79/2 79/2 79/2 79/2 79/2
NtIsSystemResumeAutomatic 216/0 214/0 214/0 217/0 217/0 235/0 238/0 242/0 244/0 246/0 249/0 250/0 251/0
NtIsUILanguageComitted 217/0 215/0 215/0 218/0 218/0 236/0 239/0 243/0 245/0 247/0 250/0 251/0 252/0
NtListTransactions 218/3 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtListenPort 219/2 216/2 216/2 219/2 219/2 237/2 240/2 244/2 246/2 248/2 251/2 252/2 253/2
NtLoadDriver 220/1 217/1 217/1 220/1 220/1 238/1 241/1 245/1 247/1 249/1 252/1 253/1 254/1
NtLoadEnclaveData -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 248/9 250/9 253/9 254/9 255/9
NtLoadHotPatch -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 254/2 255/2 256/2
NtLoadKey 221/2 218/2 218/2 221/2 221/2 239/2 242/2 246/2 249/2 251/2 255/2 256/2 257/2
NtLoadKey2 222/3 219/3 219/3 222/3 222/3 240/3 243/3 247/3 250/3 252/3 256/3 257/3 258/3
NtLoadKeyEx 223/8 220/8 220/8 223/8 223/8 241/8 244/8 248/8 251/8 253/8 257/8 258/8 259/8
NtLockFile 224/10 221/10 221/10 224/10 224/10 242/10 245/10 249/10 252/10 254/10 258/10 259/10 260/10
NtLockProductActivationKeys 225/2 222/2 222/2 225/2 225/2 243/2 246/2 250/2 253/2 255/2 259/2 260/2 261/2
NtLockRegistryKey 226/1 223/1 223/1 226/1 226/1 244/1 247/1 251/1 254/1 256/1 260/1 261/1 262/1
NtLockVirtualMemory 227/4 224/4 224/4 227/4 227/4 245/4 248/4 252/4 255/4 257/4 261/4 262/4 263/4
NtMakePermanentObject 228/1 225/1 225/1 228/1 228/1 246/1 249/1 253/1 256/1 258/1 262/1 263/1 264/1
NtMakeTemporaryObject 229/1 226/1 226/1 229/1 229/1 247/1 250/1 254/1 257/1 259/1 263/1 264/1 265/1
NtManagePartition -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 255/5 258/5 260/5 264/5 265/5 266/5
NtMapCMFModule 230/6 227/6 227/6 230/6 230/6 248/6 251/6 256/6 259/6 261/6 265/6 266/6 267/6
NtMapUserPhysicalPages 231/3 228/3 228/3 231/3 231/3 249/3 252/3 257/3 260/3 262/3 266/3 267/3 268/3
NtMapUserPhysicalPagesScatter 0/3 0/3 0/3 0/3 0/3 1/3 2/3 3/3 3/3 3/3 3/3 3/3 3/3
NtMapViewOfSection 37/10 37/10 37/10 37/10 37/10 38/10 39/10 40/10 40/10 40/10 40/10 40/10 40/10
NtMapViewOfSectionEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 269/9
NtMarshallTransaction 232/6 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtModifyBootEntry 233/1 229/1 229/1 232/1 232/1 250/1 253/1 258/1 261/1 263/1 267/1 268/1 270/1
NtModifyDriverEntry 234/1 230/1 230/1 233/1 233/1 251/1 254/1 259/1 262/1 264/1 268/1 269/1 271/1
NtNotifyChangeDirectoryFile 235/9 231/9 231/9 234/9 234/9 252/9 255/9 260/9 263/9 265/9 269/9 270/9 272/9
NtNotifyChangeDirectoryFileEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 271/10 273/10
NtNotifyChangeKey 236/10 232/10 232/10 235/10 235/10 253/10 256/10 261/10 264/10 266/10 270/10 272/10 274/10
NtNotifyChangeMultipleKeys 237/12 233/12 233/12 236/12 236/12 254/12 257/12 262/12 265/12 267/12 271/12 273/12 275/12
NtNotifyChangeSession -1/-1 -1/-1 -1/-1 237/8 237/8 255/8 258/8 263/8 266/8 268/8 272/8 274/8 276/8
NtOpenDirectoryObject 85/3 85/3 85/3 85/3 85/3 86/3 87/3 88/3 88/3 88/3 88/3 88/3 88/3
NtOpenEnlistment 238/5 234/5 234/5 238/5 238/5 256/5 259/5 264/5 267/5 269/5 273/5 275/5 277/5
NtOpenEvent 61/3 61/3 61/3 61/3 61/3 62/3 63/3 64/3 64/3 64/3 64/3 64/3 64/3
NtOpenEventPair 239/3 235/3 235/3 239/3 239/3 257/3 260/3 265/3 268/3 270/3 274/3 276/3 278/3
NtOpenFile 48/6 48/6 48/6 48/6 48/6 49/6 50/6 51/6 51/6 51/6 51/6 51/6 51/6
NtOpenIoCompletion 240/3 236/3 236/3 240/3 240/3 258/3 261/3 266/3 269/3 271/3 275/3 277/3 279/3
NtOpenJobObject 241/3 237/3 237/3 241/3 241/3 259/3 262/3 267/3 270/3 272/3 276/3 278/3 280/3
NtOpenKey 15/3 15/3 15/3 15/3 15/3 16/3 17/3 18/3 18/3 18/3 18/3 18/3 18/3
NtOpenKeyEx -1/-1 -1/-1 -1/-1 242/4 242/4 260/4 263/4 268/4 271/4 273/4 277/4 279/4 281/4
NtOpenKeyTransacted 242/4 238/4 238/4 243/4 243/4 261/4 264/4 269/4 272/4 274/4 278/4 280/4 282/4
NtOpenKeyTransactedEx -1/-1 -1/-1 -1/-1 244/5 244/5 262/5 265/5 270/5 273/5 275/5 279/5 281/5 283/5
NtOpenKeyedEvent 243/3 239/3 239/3 245/3 245/3 263/3 266/3 271/3 274/3 276/3 280/3 282/3 284/3
NtOpenMutant 244/3 240/3 240/3 246/3 246/3 264/3 267/3 272/3 275/3 277/3 281/3 283/3 285/3
NtOpenObjectAuditAlarm 245/12 241/12 241/12 247/12 247/12 265/12 268/12 273/12 276/12 278/12 282/12 284/12 286/12
NtOpenPartition -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 274/3 277/3 279/3 283/3 285/3 287/3
NtOpenPrivateNamespace 246/4 242/4 242/4 248/4 248/4 266/4 269/4 275/4 278/4 280/4 284/4 286/4 288/4
NtOpenProcess 35/4 35/4 35/4 35/4 35/4 36/4 37/4 38/4 38/4 38/4 38/4 38/4 38/4
NtOpenProcessToken 247/3 243/3 243/3 249/3 249/3 267/3 270/3 276/3 279/3 281/3 285/3 287/3 289/3
NtOpenProcessTokenEx 45/4 45/4 45/4 45/4 45/4 46/4 47/4 48/4 48/4 48/4 48/4 48/4 48/4
NtOpenRegistryTransaction -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 282/3 286/3 288/3 290/3
NtOpenResourceManager 248/5 244/5 244/5 250/5 250/5 268/5 271/5 277/5 280/5 283/5 287/5 289/5 291/5
NtOpenSection 52/3 52/3 52/3 52/3 52/3 53/3 54/3 55/3 55/3 55/3 55/3 55/3 55/3
NtOpenSemaphore 249/3 245/3 245/3 251/3 251/3 269/3 272/3 278/3 281/3 284/3 288/3 290/3 292/3
NtOpenSession 250/3 246/3 246/3 252/3 252/3 270/3 273/3 279/3 282/3 285/3 289/3 291/3 293/3
NtOpenSymbolicLinkObject 251/3 247/3 247/3 253/3 253/3 271/3 274/3 280/3 283/3 286/3 290/3 292/3 294/3
NtOpenThread 252/4 248/4 248/4 254/4 254/4 272/4 275/4 281/4 284/4 287/4 291/4 293/4 295/4
NtOpenThreadToken 33/4 33/4 33/4 33/4 33/4 34/4 35/4 36/4 36/4 36/4 36/4 36/4 36/4
NtOpenThreadTokenEx 44/5 44/5 44/5 44/5 44/5 45/5 46/5 47/5 47/5 47/5 47/5 47/5 47/5
NtOpenTimer 253/3 249/3 249/3 255/3 255/3 273/3 276/3 282/3 285/3 288/3 292/3 294/3 296/3
NtOpenTransaction 254/5 250/5 250/5 256/5 256/5 274/5 277/5 283/5 286/5 289/5 293/5 295/5 297/5
NtOpenTransactionManager 255/6 251/6 251/6 257/6 257/6 275/6 278/6 284/6 287/6 290/6 294/6 296/6 298/6
NtPlugPlayControl 256/3 252/3 252/3 258/3 258/3 276/3 279/3 285/3 288/3 291/3 295/3 297/3 299/3
NtPowerInformation 92/5 92/5 92/5 92/5 92/5 93/5 94/5 95/5 95/5 95/5 95/5 95/5 95/5
NtPrePrepareComplete 257/2 253/2 253/2 259/2 259/2 277/2 280/2 286/2 289/2 292/2 296/2 298/2 300/2
NtPrePrepareEnlistment 258/2 254/2 254/2 260/2 260/2 278/2 281/2 287/2 290/2 293/2 297/2 299/2 301/2
NtPrepareComplete 259/2 255/2 255/2 261/2 261/2 279/2 282/2 288/2 291/2 294/2 298/2 300/2 302/2
NtPrepareEnlistment 260/2 256/2 256/2 262/2 262/2 280/2 283/2 289/2 292/2 295/2 299/2 301/2 303/2
NtPrivilegeCheck 261/3 257/3 257/3 263/3 263/3 281/3 284/3 290/3 293/3 296/3 300/3 302/3 304/3
NtPrivilegeObjectAuditAlarm 262/6 258/6 258/6 264/6 264/6 282/6 285/6 291/6 294/6 297/6 301/6 303/6 305/6
NtPrivilegedServiceAuditAlarm 263/5 259/5 259/5 265/5 265/5 283/5 286/5 292/5 295/5 298/5 302/5 304/5 306/5
NtPropagationComplete 264/4 260/4 260/4 266/4 266/4 284/4 287/4 293/4 296/4 299/4 303/4 305/4 307/4
NtPropagationFailed 265/3 261/3 261/3 267/3 267/3 285/3 288/3 294/3 297/3 300/3 304/3 306/3 308/3
NtProtectVirtualMemory 77/5 77/5 77/5 77/5 77/5 78/5 79/5 80/5 80/5 80/5 80/5 80/5 80/5
NtPullTransaction 266/7 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtPulseEvent 267/2 262/2 262/2 268/2 268/2 286/2 289/2 295/2 298/2 301/2 305/2 307/2 309/2
NtQueryAttributesFile 58/2 58/2 58/2 58/2 58/2 59/2 60/2 61/2 61/2 61/2 61/2 61/2 61/2
NtQueryAuxiliaryCounterFrequency -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 306/1 308/1 310/1
NtQueryBootEntryOrder 268/2 263/2 263/2 269/2 269/2 287/2 290/2 296/2 299/2 302/2 307/2 309/2 311/2
NtQueryBootOptions 269/2 264/2 264/2 270/2 270/2 288/2 291/2 297/2 300/2 303/2 308/2 310/2 312/2
NtQueryDebugFilterState 270/2 265/2 265/2 271/2 271/2 289/2 292/2 298/2 301/2 304/2 309/2 311/2 313/2
NtQueryDefaultLocale 18/2 18/2 18/2 18/2 18/2 19/2 20/2 21/2 21/2 21/2 21/2 21/2 21/2
NtQueryDefaultUILanguage 65/1 65/1 65/1 65/1 65/1 66/1 67/1 68/1 68/1 68/1 68/1 68/1 68/1
NtQueryDirectoryFile 50/11 50/11 50/11 50/11 50/11 51/11 52/11 53/11 53/11 53/11 53/11 53/11 53/11
NtQueryDirectoryFileEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 312/10 314/10
NtQueryDirectoryObject 271/7 266/7 266/7 272/7 272/7 290/7 293/7 299/7 302/7 305/7 310/7 313/7 315/7
NtQueryDriverEntryOrder 272/2 267/2 267/2 273/2 273/2 291/2 294/2 300/2 303/2 306/2 311/2 314/2 316/2
NtQueryEaFile 273/9 268/9 268/9 274/9 274/9 292/9 295/9 301/9 304/9 307/9 312/9 315/9 317/9
NtQueryEvent 83/5 83/5 83/5 83/5 83/5 84/5 85/5 86/5 86/5 86/5 86/5 86/5 86/5
NtQueryFullAttributesFile 274/2 269/2 269/2 275/2 275/2 293/2 296/2 302/2 305/2 308/2 313/2 316/2 318/2
NtQueryInformationAtom 275/5 270/5 270/5 276/5 276/5 294/5 297/5 303/5 306/5 309/5 314/5 317/5 319/5
NtQueryInformationByName -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 315/5 318/5 320/5
NtQueryInformationEnlistment 276/5 271/5 271/5 277/5 277/5 295/5 298/5 304/5 307/5 310/5 316/5 319/5 321/5
NtQueryInformationFile 14/5 14/5 14/5 14/5 14/5 15/5 16/5 17/5 17/5 17/5 17/5 17/5 17/5
NtQueryInformationJobObject 277/5 272/5 272/5 278/5 278/5 296/5 299/5 305/5 308/5 311/5 317/5 320/5 322/5
NtQueryInformationPort 278/5 273/5 273/5 279/5 279/5 297/5 300/5 306/5 309/5 312/5 318/5 321/5 323/5
NtQueryInformationProcess 22/5 22/5 22/5 22/5 22/5 23/5 24/5 25/5 25/5 25/5 25/5 25/5 25/5
NtQueryInformationResourceManager 279/5 274/5 274/5 280/5 280/5 298/5 301/5 307/5 310/5 313/5 319/5 322/5 324/5
NtQueryInformationThread 34/5 34/5 34/5 34/5 34/5 35/5 36/5 37/5 37/5 37/5 37/5 37/5 37/5
NtQueryInformationToken 30/5 30/5 30/5 30/5 30/5 31/5 32/5 33/5 33/5 33/5 33/5 33/5 33/5
NtQueryInformationTransaction 280/5 275/5 275/5 281/5 281/5 299/5 302/5 308/5 311/5 314/5 320/5 323/5 325/5
NtQueryInformationTransactionManager 281/5 276/5 276/5 282/5 282/5 300/5 303/5 309/5 312/5 315/5 321/5 324/5 326/5
NtQueryInformationWorkerFactory 282/5 277/5 277/5 283/5 283/5 301/5 304/5 310/5 313/5 316/5 322/5 325/5 327/5
NtQueryInstallUILanguage 283/1 278/1 278/1 284/1 284/1 302/1 305/1 311/1 314/1 317/1 323/1 326/1 328/1
NtQueryIntervalProfile 284/2 279/2 279/2 285/2 285/2 303/2 306/2 312/2 315/2 318/2 324/2 327/2 329/2
NtQueryIoCompletion 285/5 280/5 280/5 286/5 286/5 304/5 307/5 313/5 316/5 319/5 325/5 328/5 330/5
NtQueryKey 19/5 19/5 19/5 19/5 19/5 20/5 21/5 22/5 22/5 22/5 22/5 22/5 22/5
NtQueryLicenseValue 286/5 281/5 281/5 287/5 287/5 305/5 308/5 314/5 317/5 320/5 326/5 329/5 331/5
NtQueryMultipleValueKey 287/6 282/6 282/6 288/6 288/6 306/6 309/6 315/6 318/6 321/6 327/6 330/6 332/6
NtQueryMutant 288/5 283/5 283/5 289/5 289/5 307/5 310/5 316/5 319/5 322/5 328/5 331/5 333/5
NtQueryObject 13/5 13/5 13/5 13/5 13/5 14/5 15/5 16/5 16/5 16/5 16/5 16/5 16/5
NtQueryOpenSubKeys 289/2 284/2 284/2 290/2 290/2 308/2 311/2 317/2 320/2 323/2 329/2 332/2 334/2
NtQueryOpenSubKeysEx 290/4 285/4 285/4 291/4 291/4 309/4 312/4 318/4 321/4 324/4 330/4 333/4 335/4
NtQueryPerformanceCounter 46/2 46/2 46/2 46/2 46/2 47/2 48/2 49/2 49/2 49/2 49/2 49/2 49/2
NtQueryPortInformationProcess 291/0 286/0 286/0 292/0 292/0 310/0 313/0 319/0 322/0 325/0 331/0 334/0 336/0
NtQueryQuotaInformationFile 292/9 287/9 287/9 293/9 293/9 311/9 314/9 320/9 323/9 326/9 332/9 335/9 337/9
NtQuerySection 78/5 78/5 78/5 78/5 78/5 79/5 80/5 81/5 81/5 81/5 81/5 81/5 81/5
NtQuerySecurityAttributesToken -1/-1 -1/-1 -1/-1 294/6 294/6 312/6 315/6 321/6 324/6 327/6 333/6 336/6 338/6
NtQuerySecurityObject 293/5 288/5 288/5 295/5 295/5 313/5 316/5 322/5 325/5 328/5 334/5 337/5 339/5
NtQuerySecurityPolicy -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 329/6 335/6 338/6 340/6
NtQuerySemaphore 294/5 289/5 289/5 296/5 296/5 314/5 317/5 323/5 326/5 330/5 336/5 339/5 341/5
NtQuerySymbolicLinkObject 295/3 290/3 290/3 297/3 297/3 315/3 318/3 324/3 327/3 331/3 337/3 340/3 342/3
NtQuerySystemEnvironmentValue 296/4 291/4 291/4 298/4 298/4 316/4 319/4 325/4 328/4 332/4 338/4 341/4 343/4
NtQuerySystemEnvironmentValueEx 297/5 292/5 292/5 299/5 299/5 317/5 320/5 326/5 329/5 333/5 339/5 342/5 344/5
NtQuerySystemInformation 51/4 51/4 51/4 51/4 51/4 52/4 53/4 54/4 54/4 54/4 54/4 54/4 54/4
NtQuerySystemInformationEx -1/-1 -1/-1 -1/-1 300/6 300/6 318/6 321/6 327/6 330/6 334/6 340/6 343/6 345/6
NtQuerySystemTime 87/1 87/1 87/1 87/1 87/1 88/1 89/1 90/1 90/1 90/1 90/1 90/1 90/1
NtQueryTimer 53/5 53/5 53/5 53/5 53/5 54/5 55/5 56/5 56/5 56/5 56/5 56/5 56/5
NtQueryTimerResolution 298/3 293/3 293/3 301/3 301/3 319/3 322/3 328/3 331/3 335/3 341/3 344/3 346/3
NtQueryValueKey 20/6 20/6 20/6 20/6 20/6 21/6 22/6 23/6 23/6 23/6 23/6 23/6 23/6
NtQueryVirtualMemory 32/6 32/6 32/6 32/6 32/6 33/6 34/6 35/6 35/6 35/6 35/6 35/6 35/6
NtQueryVolumeInformationFile 70/5 70/5 70/5 70/5 70/5 71/5 72/5 73/5 73/5 73/5 73/5 73/5 73/5
NtQueryWnfStateData -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 320/6 323/6 329/6 332/6 336/6 342/6 345/6 347/6
NtQueryWnfStateNameInformation -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 321/5 324/5 330/5 333/5 337/5 343/5 346/5 348/5
NtQueueApcThread 66/5 66/5 66/5 66/5 66/5 67/5 68/5 69/5 69/5 69/5 69/5 69/5 69/5
NtQueueApcThreadEx -1/-1 -1/-1 -1/-1 302/6 302/6 322/6 325/6 331/6 334/6 338/6 344/6 347/6 349/6
NtRaiseException 299/3 294/3 294/3 303/3 303/3 323/3 326/3 332/3 335/3 339/3 345/3 348/3 350/3
NtRaiseHardError 300/6 295/6 295/6 304/6 304/6 324/6 327/6 333/6 336/6 340/6 346/6 349/6 351/6
NtReadFile 3/9 3/9 3/9 3/9 3/9 4/9 5/9 6/9 6/9 6/9 6/9 6/9 6/9
NtReadFileScatter 43/9 43/9 43/9 43/9 43/9 44/9 45/9 46/9 46/9 46/9 46/9 46/9 46/9
NtReadOnlyEnlistment 301/2 296/2 296/2 305/2 305/2 325/2 328/2 334/2 337/2 341/2 347/2 350/2 352/2
NtReadRequestData 81/6 81/6 81/6 81/6 81/6 82/6 83/6 84/6 84/6 84/6 84/6 84/6 84/6
NtReadVirtualMemory 60/5 60/5 60/5 60/5 60/5 61/5 62/5 63/5 63/5 63/5 63/5 63/5 63/5
NtRecoverEnlistment 302/2 297/2 297/2 306/2 306/2 326/2 329/2 335/2 338/2 342/2 348/2 351/2 353/2
NtRecoverResourceManager 303/1 298/1 298/1 307/1 307/1 327/1 330/1 336/1 339/1 343/1 349/1 352/1 354/1
NtRecoverTransactionManager 304/1 299/1 299/1 308/1 308/1 328/1 331/1 337/1 340/1 344/1 350/1 353/1 355/1
NtRegisterProtocolAddressInformation 305/5 300/5 300/5 309/5 309/5 329/5 332/5 338/5 341/5 345/5 351/5 354/5 356/5
NtRegisterThreadTerminatePort 306/1 301/1 301/1 310/1 310/1 330/1 333/1 339/1 342/1 346/1 352/1 355/1 357/1
NtReleaseCMFViewOwnership 307/0 302/0 302/0 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtReleaseKeyedEvent 308/4 303/4 303/4 311/4 311/4 331/4 334/4 340/4 343/4 347/4 353/4 356/4 358/4
NtReleaseMutant 29/2 29/2 29/2 29/2 29/2 30/2 31/2 32/2 32/2 32/2 32/2 32/2 32/2
NtReleaseSemaphore 7/3 7/3 7/3 7/3 7/3 8/3 9/3 10/3 10/3 10/3 10/3 10/3 10/3
NtReleaseWorkerFactoryWorker 309/1 304/1 304/1 312/1 312/1 332/1 335/1 341/1 344/1 348/1 354/1 357/1 359/1
NtRemoveIoCompletion 6/5 6/5 6/5 6/5 6/5 7/5 8/5 9/5 9/5 9/5 9/5 9/5 9/5
NtRemoveIoCompletionEx 310/6 305/6 305/6 313/6 313/6 333/6 336/6 342/6 345/6 349/6 355/6 358/6 360/6
NtRemoveProcessDebug 311/2 306/2 306/2 314/2 314/2 334/2 337/2 343/2 346/2 350/2 356/2 359/2 361/2
NtRenameKey 312/2 307/2 307/2 315/2 315/2 335/2 338/2 344/2 347/2 351/2 357/2 360/2 362/2
NtRenameTransactionManager -1/-1 308/2 308/2 316/2 316/2 336/2 339/2 345/2 348/2 352/2 358/2 361/2 363/2
NtReplaceKey 313/3 309/3 309/3 317/3 317/3 337/3 340/3 346/3 349/3 353/3 359/3 362/3 364/3
NtReplacePartitionUnit -1/-1 310/3 310/3 318/3 318/3 338/3 341/3 347/3 350/3 354/3 360/3 363/3 365/3
NtReplyPort 9/2 9/2 9/2 9/2 9/2 10/2 11/2 12/2 12/2 12/2 12/2 12/2 12/2
NtReplyWaitReceivePort 8/4 8/4 8/4 8/4 8/4 9/4 10/4 11/4 11/4 11/4 11/4 11/4 11/4
NtReplyWaitReceivePortEx 40/5 40/5 40/5 40/5 40/5 41/5 42/5 43/5 43/5 43/5 43/5 43/5 43/5
NtReplyWaitReplyPort 314/2 311/2 311/2 319/2 319/2 339/2 342/2 348/2 351/2 355/2 361/2 364/2 366/2
NtRequestDeviceWakeup 315/1 312/1 312/1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtRequestPort 316/2 313/2 313/2 320/2 320/2 340/2 343/2 349/2 352/2 356/2 362/2 365/2 367/2
NtRequestWaitReplyPort 31/3 31/3 31/3 31/3 31/3 32/3 33/3 34/3 34/3 34/3 34/3 34/3 34/3
NtRequestWakeupLatency 317/1 314/1 314/1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtResetEvent 318/2 315/2 315/2 321/2 321/2 341/2 344/2 350/2 353/2 357/2 363/2 366/2 368/2
NtResetWriteWatch 319/3 316/3 316/3 322/3 322/3 342/3 345/3 351/3 354/3 358/3 364/3 367/3 369/3
NtRestoreKey 320/3 317/3 317/3 323/3 323/3 343/3 346/3 352/3 355/3 359/3 365/3 368/3 370/3
NtResumeProcess 321/1 318/1 318/1 324/1 324/1 344/1 347/1 353/1 356/1 360/1 366/1 369/1 371/1
NtResumeThread 79/2 79/2 79/2 79/2 79/2 80/2 81/2 82/2 82/2 82/2 82/2 82/2 82/2
NtRevertContainerImpersonation -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 354/0 357/0 361/0 367/0 370/0 372/0
NtRollbackComplete 322/2 319/2 319/2 325/2 325/2 345/2 348/2 355/2 358/2 362/2 368/2 371/2 373/2
NtRollbackEnlistment 323/2 320/2 320/2 326/2 326/2 346/2 349/2 356/2 359/2 363/2 369/2 372/2 374/2
NtRollbackRegistryTransaction -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 364/2 370/2 373/2 375/2
NtRollbackSavepointTransaction 324/2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtRollbackTransaction 325/2 321/2 321/2 327/2 327/2 347/2 350/2 357/2 360/2 365/2 371/2 374/2 376/2
NtRollforwardTransactionManager 326/2 322/2 322/2 328/2 328/2 348/2 351/2 358/2 361/2 366/2 372/2 375/2 377/2
NtSaveKey 327/2 323/2 323/2 329/2 329/2 349/2 352/2 359/2 362/2 367/2 373/2 376/2 378/2
NtSaveKeyEx 328/3 324/3 324/3 330/3 330/3 350/3 353/3 360/3 363/3 368/3 374/3 377/3 379/3
NtSaveMergedKeys 329/3 325/3 325/3 331/3 331/3 351/3 354/3 361/3 364/3 369/3 375/3 378/3 380/3
NtSavepointComplete 330/2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtSavepointTransaction 331/3 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtSecureConnectPort 332/9 326/9 326/9 332/9 332/9 352/9 355/9 362/9 365/9 370/9 376/9 379/9 381/9
NtSerializeBoot -1/-1 -1/-1 -1/-1 333/0 333/0 353/0 356/0 363/0 366/0 371/0 377/0 380/0 382/0
NtSetBootEntryOrder 333/2 327/2 327/2 334/2 334/2 354/2 357/2 364/2 367/2 372/2 378/2 381/2 383/2
NtSetBootOptions 334/2 328/2 328/2 335/2 335/2 355/2 358/2 365/2 368/2 373/2 379/2 382/2 384/2
NtSetCachedSigningLevel -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 356/5 359/5 366/5 369/5 374/5 380/5 383/5 385/5
NtSetCachedSigningLevel2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 375/6 381/6 384/6 386/6
NtSetContextThread 335/2 329/2 329/2 336/2 336/2 357/2 360/2 367/2 370/2 376/2 382/2 385/2 387/2
NtSetDebugFilterState 336/3 330/3 330/3 337/3 337/3 358/3 361/3 368/3 371/3 377/3 383/3 386/3 388/3
NtSetDefaultHardErrorPort 337/1 331/1 331/1 338/1 338/1 359/1 362/1 369/1 372/1 378/1 384/1 387/1 389/1
NtSetDefaultLocale 338/2 332/2 332/2 339/2 339/2 360/2 363/2 370/2 373/2 379/2 385/2 388/2 390/2
NtSetDefaultUILanguage 339/1 333/1 333/1 340/1 340/1 361/1 364/1 371/1 374/1 380/1 386/1 389/1 391/1
NtSetDriverEntryOrder 340/2 334/2 334/2 341/2 341/2 362/2 365/2 372/2 375/2 381/2 387/2 390/2 392/2
NtSetEaFile 341/4 335/4 335/4 342/4 342/4 363/4 366/4 373/4 376/4 382/4 388/4 391/4 393/4
NtSetEvent 11/2 11/2 11/2 11/2 11/2 12/2 13/2 14/2 14/2 14/2 14/2 14/2 14/2
NtSetEventBoostPriority 42/1 42/1 42/1 42/1 42/1 43/1 44/1 45/1 45/1 45/1 45/1 45/1 45/1
NtSetHighEventPair 342/1 336/1 336/1 343/1 343/1 364/1 367/1 374/1 377/1 383/1 389/1 392/1 394/1
NtSetHighWaitLowEventPair 343/1 337/1 337/1 344/1 344/1 365/1 368/1 375/1 378/1 384/1 390/1 393/1 395/1
NtSetIRTimer -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 366/2 369/2 376/2 379/2 385/2 391/2 394/2 396/2
NtSetInformationDebugObject 344/5 338/5 338/5 345/5 345/5 367/5 370/5 377/5 380/5 386/5 392/5 395/5 397/5
NtSetInformationEnlistment 345/4 339/4 339/4 346/4 346/4 368/4 371/4 378/4 381/4 387/4 393/4 396/4 398/4
NtSetInformationFile 36/5 36/5 36/5 36/5 36/5 37/5 38/5 39/5 39/5 39/5 39/5 39/5 39/5
NtSetInformationJobObject 346/4 340/4 340/4 347/4 347/4 369/4 372/4 379/4 382/4 388/4 394/4 397/4 399/4
NtSetInformationKey 347/4 341/4 341/4 348/4 348/4 370/4 373/4 380/4 383/4 389/4 395/4 398/4 400/4
NtSetInformationObject 89/4 89/4 89/4 89/4 89/4 90/4 91/4 92/4 92/4 92/4 92/4 92/4 92/4
NtSetInformationProcess 25/4 25/4 25/4 25/4 25/4 26/4 27/4 28/4 28/4 28/4 28/4 28/4 28/4
NtSetInformationResourceManager 348/4 342/4 342/4 349/4 349/4 371/4 374/4 381/4 384/4 390/4 396/4 399/4 401/4
NtSetInformationSymbolicLink -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 382/4 385/4 391/4 397/4 400/4 402/4
NtSetInformationThread 10/4 10/4 10/4 10/4 10/4 11/4 12/4 13/4 13/4 13/4 13/4 13/4 13/4
NtSetInformationToken 349/4 343/4 343/4 350/4 350/4 372/4 375/4 383/4 386/4 392/4 398/4 401/4 403/4
NtSetInformationTransaction 350/4 344/4 344/4 351/4 351/4 373/4 376/4 384/4 387/4 393/4 399/4 402/4 404/4
NtSetInformationTransactionManager 351/4 345/4 345/4 352/4 352/4 374/4 377/4 385/4 388/4 394/4 400/4 403/4 405/4
NtSetInformationVirtualMemory -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 375/6 378/6 386/6 389/6 395/6 401/6 404/6 406/6
NtSetInformationWorkerFactory 352/4 346/4 346/4 353/4 353/4 376/4 379/4 387/4 390/4 396/4 402/4 405/4 407/4
NtSetIntervalProfile 353/2 347/2 347/2 354/2 354/2 377/2 380/2 388/2 391/2 397/2 403/2 406/2 408/2
NtSetIoCompletion 354/5 348/5 348/5 355/5 355/5 378/5 381/5 389/5 392/5 398/5 404/5 407/5 409/5
NtSetIoCompletionEx -1/-1 -1/-1 -1/-1 356/6 356/6 379/6 382/6 390/6 393/6 399/6 405/6 408/6 410/6
NtSetLdtEntries 355/6 349/6 349/6 357/6 357/6 380/6 383/6 391/6 394/6 400/6 406/6 409/6 411/6
NtSetLowEventPair 356/1 350/1 350/1 358/1 358/1 381/1 384/1 392/1 395/1 401/1 407/1 410/1 412/1
NtSetLowWaitHighEventPair 357/1 351/1 351/1 359/1 359/1 382/1 385/1 393/1 396/1 402/1 408/1 411/1 413/1
NtSetQuotaInformationFile 358/4 352/4 352/4 360/4 360/4 383/4 386/4 394/4 397/4 403/4 409/4 412/4 414/4
NtSetSecurityObject 359/3 353/3 353/3 361/3 361/3 384/3 387/3 395/3 398/3 404/3 410/3 413/3 415/3
NtSetSystemEnvironmentValue 360/2 354/2 354/2 362/2 362/2 385/2 388/2 396/2 399/2 405/2 411/2 414/2 416/2
NtSetSystemEnvironmentValueEx 361/5 355/5 355/5 363/5 363/5 386/5 389/5 397/5 400/5 406/5 412/5 415/5 417/5
NtSetSystemInformation 362/3 356/3 356/3 364/3 364/3 387/3 390/3 398/3 401/3 407/3 413/3 416/3 418/3
NtSetSystemPowerState 363/3 357/3 357/3 365/3 365/3 388/3 391/3 399/3 402/3 408/3 414/3 417/3 419/3
NtSetSystemTime 364/2 358/2 358/2 366/2 366/2 389/2 392/2 400/2 403/2 409/2 415/2 418/2 420/2
NtSetThreadExecutionState 365/2 359/2 359/2 367/2 367/2 390/2 393/2 401/2 404/2 410/2 416/2 419/2 421/2
NtSetTimer 95/7 95/7 95/7 95/7 95/7 96/7 97/7 98/7 98/7 98/7 98/7 98/7 98/7
NtSetTimer2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 394/4 402/4 405/4 411/4 417/4 420/4 422/4
NtSetTimerEx -1/-1 -1/-1 -1/-1 368/4 368/4 391/4 395/4 403/4 406/4 412/4 418/4 421/4 423/4
NtSetTimerResolution 366/3 360/3 360/3 369/3 369/3 392/3 396/3 404/3 407/3 413/3 419/3 422/3 424/3
NtSetUuidSeed 367/1 361/1 361/1 370/1 370/1 393/1 397/1 405/1 408/1 414/1 420/1 423/1 425/1
NtSetValueKey 93/6 93/6 93/6 93/6 93/6 94/6 95/6 96/6 96/6 96/6 96/6 96/6 96/6
NtSetVolumeInformationFile 368/5 362/5 362/5 371/5 371/5 394/5 398/5 406/5 409/5 415/5 421/5 424/5 426/5
NtSetWnfProcessNotificationEvent -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 399/1 407/1 410/1 416/1 422/1 425/1 427/1
NtShutdownSystem 369/1 363/1 363/1 372/1 372/1 395/1 400/1 408/1 411/1 417/1 423/1 426/1 428/1
NtShutdownWorkerFactory 370/2 364/2 364/2 373/2 373/2 396/2 401/2 409/2 412/2 418/2 424/2 427/2 429/2
NtSignalAndWaitForSingleObject 371/4 365/4 365/4 374/4 374/4 397/4 402/4 410/4 413/4 419/4 425/4 428/4 430/4
NtSinglePhaseReject 372/2 366/2 366/2 375/2 375/2 398/2 403/2 411/2 414/2 420/2 426/2 429/2 431/2
NtStartProfile 373/1 367/1 367/1 376/1 376/1 399/1 404/1 412/1 415/1 421/1 427/1 430/1 432/1
NtStartTm 374/0 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtStopProfile 375/1 368/1 368/1 377/1 377/1 400/1 405/1 413/1 416/1 422/1 428/1 431/1 433/1
NtSubscribeWnfStateChange -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 401/4 406/4 414/4 417/4 423/4 429/4 432/4 434/4
NtSuspendProcess 376/1 369/1 369/1 378/1 378/1 402/1 407/1 415/1 418/1 424/1 430/1 433/1 435/1
NtSuspendThread 377/2 370/2 370/2 379/2 379/2 403/2 408/2 416/2 419/2 425/2 431/2 434/2 436/2
NtSystemDebugControl 378/6 371/6 371/6 380/6 380/6 404/6 409/6 417/6 420/6 426/6 432/6 435/6 437/6
NtTerminateEnclave -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 436/2 438/2
NtTerminateJobObject 379/2 372/2 372/2 381/2 381/2 405/2 410/2 418/2 421/2 427/2 433/2 437/2 439/2
NtTerminateProcess 41/2 41/2 41/2 41/2 41/2 42/2 43/2 44/2 44/2 44/2 44/2 44/2 44/2
NtTerminateThread 80/2 80/2 80/2 80/2 80/2 81/2 82/2 83/2 83/2 83/2 83/2 83/2 83/2
NtTestAlert 380/0 373/0 373/0 382/0 382/0 406/0 411/0 419/0 422/0 428/0 434/0 438/0 440/0
NtThawRegistry 381/0 374/0 374/0 383/0 383/0 407/0 412/0 420/0 423/0 429/0 435/0 439/0 441/0
NtThawTransactions 382/0 375/0 375/0 384/0 384/0 408/0 413/0 421/0 424/0 430/0 436/0 440/0 442/0
NtTraceControl 383/6 376/6 376/6 385/6 385/6 409/6 414/6 422/6 425/6 431/6 437/6 441/6 443/6
NtTraceEvent 91/4 91/4 91/4 91/4 91/4 92/4 93/4 94/4 94/4 94/4 94/4 94/4 94/4
NtTranslateFilePath 384/4 377/4 377/4 386/4 386/4 410/4 415/4 423/4 426/4 432/4 438/4 442/4 444/4
NtUmsThreadYield -1/-1 -1/-1 -1/-1 387/1 387/1 411/1 416/1 424/1 427/1 433/1 439/1 443/1 445/1
NtUnloadDriver 385/1 378/1 378/1 388/1 388/1 412/1 417/1 425/1 428/1 434/1 440/1 444/1 446/1
NtUnloadKey 386/1 379/1 379/1 389/1 389/1 413/1 418/1 426/1 429/1 435/1 441/1 445/1 447/1
NtUnloadKey2 387/2 380/2 380/2 390/2 390/2 414/2 419/2 427/2 430/2 436/2 442/2 446/2 448/2
NtUnloadKeyEx 388/2 381/2 381/2 391/2 391/2 415/2 420/2 428/2 431/2 437/2 443/2 447/2 449/2
NtUnlockFile 389/5 382/5 382/5 392/5 392/5 416/5 421/5 429/5 432/5 438/5 444/5 448/5 450/5
NtUnlockVirtualMemory 390/4 383/4 383/4 393/4 393/4 417/4 422/4 430/4 433/4 439/4 445/4 449/4 451/4
NtUnmapViewOfSection 39/2 39/2 39/2 39/2 39/2 40/2 41/2 42/2 42/2 42/2 42/2 42/2 42/2
NtUnmapViewOfSectionEx -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 418/3 423/3 431/3 434/3 440/3 446/3 450/3 452/3
NtUnsubscribeWnfStateChange -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 419/1 424/1 432/1 435/1 441/1 447/1 451/1 453/1
NtUpdateWnfStateData -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 420/7 425/7 433/7 436/7 442/7 448/7 452/7 454/7
NtVdmControl 391/2 384/2 384/2 394/2 394/2 421/2 426/2 434/2 437/2 443/2 449/2 453/2 455/2
NtWaitForAlertByThreadId -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 422/2 427/2 435/2 438/2 444/2 450/2 454/2 456/2
NtWaitForDebugEvent 392/4 385/4 385/4 395/4 395/4 423/4 428/4 436/4 439/4 445/4 451/4 455/4 457/4
NtWaitForKeyedEvent 393/4 386/4 386/4 396/4 396/4 424/4 429/4 437/4 440/4 446/4 452/4 456/4 458/4
NtWaitForMultipleObjects 88/5 88/5 88/5 88/5 88/5 89/5 90/5 91/5 91/5 91/5 91/5 91/5 91/5
NtWaitForMultipleObjects32 23/5 23/5 23/5 23/5 23/5 24/5 25/5 26/5 26/5 26/5 26/5 26/5 26/5
NtWaitForSingleObject 1/3 1/3 1/3 1/3 1/3 2/3 3/3 4/3 4/3 4/3 4/3 4/3 4/3
NtWaitForWnfNotifications -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 425/2 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1 -1/-1
NtWaitForWorkViaWorkerFactory 394/2 387/2 387/2 397/2 397/2 426/4 430/5 438/5 441/5 447/5 453/5 457/5 459/5
NtWaitHighEventPair 395/1 388/1 388/1 398/1 398/1 427/1 431/1 439/1 442/1 448/1 454/1 458/1 460/1
NtWaitLowEventPair 396/1 389/1 389/1 399/1 399/1 428/1 432/1 440/1 443/1 449/1 455/1 459/1 461/1
NtWorkerFactoryWorkerReady 397/1 390/1 390/1 400/1 400/1 0/1 0/1 1/1 1/1 1/1 1/1 1/1 1/1
NtWriteFile 5/9 5/9 5/9 5/9 5/9 6/9 7/9 8/9 8/9 8/9 8/9 8/9 8/9
NtWriteFileGather 24/9 24/9 24/9 24/9 24/9 25/9 26/9 27/9 27/9 27/9 27/9 27/9 27/9
NtWriteRequestData 84/6 84/6 84/6 84/6 84/6 85/6 86/6 87/6 87/6 87/6 87/6 87/6 87/6
NtWriteVirtualMemory 55/5 55/5 55/5 55/5 55/5 56/5 57/5 58/5 58/5 58/5 58/5 58/5 58/5
NtYieldExecution 67/0 67/0 67/0 67/0 67/0 68/0 69/0 70/0 70/0 70/0 70/0 70/0 70/0