COUNT: 00000191 SSTD Function List -------------------------------------------------------------------------------------- ADDR:83C6E0CB | NtAcceptConnectPort -------------------------------------------------------------------------------------- ADDR:83AC722B | NtAccessCheck -------------------------------------------------------------------------------------- ADDR:83C19E4E | NtAccessCheckAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:83A326E1 | NtAccessCheckByType -------------------------------------------------------------------------------------- ADDR:83C8EE6E | NtAccessCheckByTypeAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:83B0B48A | NtAccessCheckByTypeResultList -------------------------------------------------------------------------------------- ADDR:83CF7B6D | NtAccessCheckByTypeResultListAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:83CF7BB6 | NtAccessCheckByTypeResultListAndAuditAlarmByHandle -------------------------------------------------------------------------------------- ADDR:83C052D7 | NtAddAtom -------------------------------------------------------------------------------------- ADDR:83D11426 | NtAddBootEntry -------------------------------------------------------------------------------------- ADDR:83D1267B | NtAddDriverEntry -------------------------------------------------------------------------------------- ADDR:83C136F7 | NtAdjustGroupsToken -------------------------------------------------------------------------------------- ADDR:83C1B875 | NtAdjustPrivilegesToken -------------------------------------------------------------------------------------- ADDR:83CEA979 | NtAlertResumeThread -------------------------------------------------------------------------------------- ADDR:83C98718 | NtAlertThread -------------------------------------------------------------------------------------- ADDR:83C1C19C | NtAllocateLocallyUniqueId -------------------------------------------------------------------------------------- ADDR:83BAFC97 | NtAllocateReserveObject -------------------------------------------------------------------------------------- ADDR:83CDCB1C | NtAllocateUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:83C06C7D | NtAllocateUuids -------------------------------------------------------------------------------------- ADDR:83C59E0F | NtAllocateVirtualMemory -------------------------------------------------------------------------------------- ADDR:83C8CCF6 | NtAlpcAcceptConnectPort -------------------------------------------------------------------------------------- ADDR:83BE8D73 | NtAlpcCancelMessage -------------------------------------------------------------------------------------- ADDR:83C61821 | NtAlpcConnectPort -------------------------------------------------------------------------------------- ADDR:83BFC3BE | NtAlpcCreatePort -------------------------------------------------------------------------------------- ADDR:83C18A35 | NtAlpcCreatePortSection -------------------------------------------------------------------------------------- ADDR:83BFB093 | NtAlpcCreateResourceReserve -------------------------------------------------------------------------------------- ADDR:83C18773 | NtAlpcCreateSectionView -------------------------------------------------------------------------------------- ADDR:83C2144B | NtAlpcCreateSecurityContext -------------------------------------------------------------------------------------- ADDR:83C26123 | NtAlpcDeletePortSection -------------------------------------------------------------------------------------- ADDR:83CD7AD3 | NtAlpcDeleteResourceReserve -------------------------------------------------------------------------------------- ADDR:83C81906 | NtAlpcDeleteSectionView -------------------------------------------------------------------------------------- ADDR:83C20B6F | NtAlpcDeleteSecurityContext -------------------------------------------------------------------------------------- ADDR:83C857D8 | NtAlpcDisconnectPort -------------------------------------------------------------------------------------- ADDR:83C8165D | NtAlpcImpersonateClientOfPort -------------------------------------------------------------------------------------- ADDR:83C1029F | NtAlpcOpenSenderProcess -------------------------------------------------------------------------------------- ADDR:83C022CE | NtAlpcOpenSenderThread -------------------------------------------------------------------------------------- ADDR:83C13ABA | NtAlpcQueryInformation -------------------------------------------------------------------------------------- ADDR:83C6C387 | NtAlpcQueryInformationMessage -------------------------------------------------------------------------------------- ADDR:83CD7BFB | NtAlpcRevokeSecurityContext -------------------------------------------------------------------------------------- ADDR:83C830A3 | NtAlpcSendWaitReceivePort -------------------------------------------------------------------------------------- ADDR:83C01800 | NtAlpcSetInformation -------------------------------------------------------------------------------------- ADDR:83C90DE0 | NtApphelpCacheControl -------------------------------------------------------------------------------------- ADDR:83BDD314 | NtAreMappedFilesTheSame -------------------------------------------------------------------------------------- ADDR:83C0570E | NtAssignProcessToJobObject -------------------------------------------------------------------------------------- ADDR:83A7E210 | NtCallbackReturn -------------------------------------------------------------------------------------- ADDR:83BD8D69 | NtCancelIoFile -------------------------------------------------------------------------------------- ADDR:83C04485 | NtCancelIoFileEx -------------------------------------------------------------------------------------- ADDR:83CC7608 | NtCancelSynchronousIoFile -------------------------------------------------------------------------------------- ADDR:83A3C292 | NtCancelTimer -------------------------------------------------------------------------------------- ADDR:83C440F4 | NtClearEvent -------------------------------------------------------------------------------------- ADDR:83C5509C | NtClose -------------------------------------------------------------------------------------- ADDR:83C8EBDD | NtCloseObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:83CFF59A | NtCommitComplete -------------------------------------------------------------------------------------- ADDR:83CFF2BA | NtCommitEnlistment -------------------------------------------------------------------------------------- ADDR:83BE13A1 | NtCommitTransaction -------------------------------------------------------------------------------------- ADDR:83CAB835 | NtCompactKeys -------------------------------------------------------------------------------------- ADDR:83C010DE | NtCompareTokens -------------------------------------------------------------------------------------- ADDR:83BFD5C7 | NtCompleteConnectPort -------------------------------------------------------------------------------------- ADDR:83CABAA3 | NtCompressKey -------------------------------------------------------------------------------------- ADDR:83C86894 | NtConnectPort -------------------------------------------------------------------------------------- ADDR:83A54F2C | NtContinue -------------------------------------------------------------------------------------- ADDR:83CBD297 | NtCreateDebugObject -------------------------------------------------------------------------------------- ADDR:83C1D247 | NtCreateDirectoryObject -------------------------------------------------------------------------------------- ADDR:83BD6D23 | NtCreateEnlistment -------------------------------------------------------------------------------------- ADDR:83C6F5D9 | NtCreateEvent -------------------------------------------------------------------------------------- ADDR:83D17134 | NtCreateEventPair -------------------------------------------------------------------------------------- ADDR:83C58E82 | NtCreateFile -------------------------------------------------------------------------------------- ADDR:83C72195 | NtCreateIoCompletion -------------------------------------------------------------------------------------- ADDR:83C061B9 | NtCreateJobObject -------------------------------------------------------------------------------------- ADDR:83CEC700 | NtCreateJobSet -------------------------------------------------------------------------------------- ADDR:83C1C9FF | NtCreateKey -------------------------------------------------------------------------------------- ADDR:83C93B22 | NtCreateKeyedEvent -------------------------------------------------------------------------------------- ADDR:83BE1719 | NtCreateKeyTransacted -------------------------------------------------------------------------------------- ADDR:83C1D326 | NtCreateMailslotFile -------------------------------------------------------------------------------------- ADDR:83C8CC15 | NtCreateMutant -------------------------------------------------------------------------------------- ADDR:83C98086 | NtCreateNamedPipeFile -------------------------------------------------------------------------------------- ADDR:83B9E64F | NtCreatePagingFile -------------------------------------------------------------------------------------- ADDR:83C03156 | NtCreatePort -------------------------------------------------------------------------------------- ADDR:83BE51F9 | NtCreatePrivateNamespace -------------------------------------------------------------------------------------- ADDR:83CE8E07 | NtCreateProcess -------------------------------------------------------------------------------------- ADDR:83CE8E52 | NtCreateProcessEx -------------------------------------------------------------------------------------- ADDR:83D17BCB | NtCreateProfile -------------------------------------------------------------------------------------- ADDR:83D17B8F | NtCreateProfileEx -------------------------------------------------------------------------------------- ADDR:83BAAE6A | NtCreateResourceManager -------------------------------------------------------------------------------------- ADDR:83C3ECE3 | NtCreateSection -------------------------------------------------------------------------------------- ADDR:83C8F009 | NtCreateSemaphore -------------------------------------------------------------------------------------- ADDR:83C1D059 | NtCreateSymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:83CE8C0E | NtCreateThread -------------------------------------------------------------------------------------- ADDR:83C46D51 | NtCreateThreadEx -------------------------------------------------------------------------------------- ADDR:83C08145 | NtCreateTimer -------------------------------------------------------------------------------------- ADDR:83C1E43C | NtCreateToken -------------------------------------------------------------------------------------- ADDR:83BE5668 | NtCreateTransaction -------------------------------------------------------------------------------------- ADDR:83BAB10F | NtCreateTransactionManager -------------------------------------------------------------------------------------- ADDR:83C63DE0 | NtCreateUserProcess -------------------------------------------------------------------------------------- ADDR:83BAE38B | NtCreateWaitablePort -------------------------------------------------------------------------------------- ADDR:83C71F38 | NtCreateWorkerFactory -------------------------------------------------------------------------------------- ADDR:83CBE150 | NtDebugActiveProcess -------------------------------------------------------------------------------------- ADDR:83CBE811 | NtDebugContinue -------------------------------------------------------------------------------------- ADDR:83C3F65F | NtDelayExecution -------------------------------------------------------------------------------------- ADDR:83BFA62D | NtDeleteAtom -------------------------------------------------------------------------------------- ADDR:83D11457 | NtDeleteBootEntry -------------------------------------------------------------------------------------- ADDR:83D126AF | NtDeleteDriverEntry -------------------------------------------------------------------------------------- ADDR:83BC89EC | NtDeleteFile -------------------------------------------------------------------------------------- ADDR:83C0B219 | NtDeleteKey -------------------------------------------------------------------------------------- ADDR:83CA0236 | NtDeleteObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:83CA4D05 | NtDeletePrivateNamespace -------------------------------------------------------------------------------------- ADDR:83BF11C9 | NtDeleteValueKey -------------------------------------------------------------------------------------- ADDR:83C6B482 | NtDeviceIoControlFile -------------------------------------------------------------------------------------- ADDR:83CD4914 | NtDisableLastKnownGood -------------------------------------------------------------------------------------- ADDR:83D0F68F | NtDisplayString -------------------------------------------------------------------------------------- ADDR:83B21AF9 | NtDrawText -------------------------------------------------------------------------------------- ADDR:83C8A0C2 | NtDuplicateObject -------------------------------------------------------------------------------------- ADDR:83C4A205 | NtDuplicateToken -------------------------------------------------------------------------------------- ADDR:83CD49F5 | NtEnableLastKnownGood -------------------------------------------------------------------------------------- ADDR:83D11659 | NtEnumerateBootEntries -------------------------------------------------------------------------------------- ADDR:83D128AF | NtEnumerateDriverEntries -------------------------------------------------------------------------------------- ADDR:83C73A2F | NtEnumerateKey -------------------------------------------------------------------------------------- ADDR:83D11239 | NtEnumerateSystemEnvironmentValuesEx -------------------------------------------------------------------------------------- ADDR:83D000D4 | NtEnumerateTransactionObject -------------------------------------------------------------------------------------- ADDR:83C6B610 | NtEnumerateValueKey -------------------------------------------------------------------------------------- ADDR:83CDAD1D | NtExtendSection -------------------------------------------------------------------------------------- ADDR:83BF20E1 | NtFilterToken -------------------------------------------------------------------------------------- ADDR:83BFF1FA | NtFindAtom -------------------------------------------------------------------------------------- ADDR:83C2CC83 | NtFlushBuffersFile -------------------------------------------------------------------------------------- ADDR:83BA758E | NtFlushInstallUILanguage -------------------------------------------------------------------------------------- ADDR:83BFC97E | NtFlushInstructionCache -------------------------------------------------------------------------------------- ADDR:83BEC2D1 | NtFlushKey -------------------------------------------------------------------------------------- ADDR:83A324E7 | NtFlushProcessWriteBuffers -------------------------------------------------------------------------------------- ADDR:83BED173 | NtFlushVirtualMemory -------------------------------------------------------------------------------------- ADDR:83CDDBC7 | NtFlushWriteBuffer -------------------------------------------------------------------------------------- ADDR:83CDD237 | NtFreeUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:83AC1821 | NtFreeVirtualMemory -------------------------------------------------------------------------------------- ADDR:83ADF9BC | NtFreezeRegistry -------------------------------------------------------------------------------------- ADDR:83D00522 | NtFreezeTransactions -------------------------------------------------------------------------------------- ADDR:83C71CDE | NtFsControlFile -------------------------------------------------------------------------------------- ADDR:83CA716F | NtGetContextThread -------------------------------------------------------------------------------------- ADDR:83BECEA5 | NtGetCurrentProcessorNumber -------------------------------------------------------------------------------------- ADDR:83CE5E4F | NtGetDevicePowerState -------------------------------------------------------------------------------------- ADDR:83C878C7 | NtGetMUIRegistryInfo -------------------------------------------------------------------------------------- ADDR:83CEAB70 | NtGetNextProcess -------------------------------------------------------------------------------------- ADDR:83CA1A82 | NtGetNextThread -------------------------------------------------------------------------------------- ADDR:83C01F96 | NtGetNlsSectionPtr -------------------------------------------------------------------------------------- ADDR:83D0067C | NtGetNotificationResourceManager -------------------------------------------------------------------------------------- ADDR:83BC5270 | NtGetPlugPlayEvent -------------------------------------------------------------------------------------- ADDR:83AF872B | NtGetWriteWatch -------------------------------------------------------------------------------------- ADDR:83C00F40 | NtImpersonateAnonymousToken -------------------------------------------------------------------------------------- ADDR:83CD6C1D | NtImpersonateClientOfPort -------------------------------------------------------------------------------------- ADDR:83C6663B | NtImpersonateThread -------------------------------------------------------------------------------------- ADDR:83C900D9 | NtInitializeNlsFiles -------------------------------------------------------------------------------------- ADDR:83BC8266 | NtInitializeRegistry -------------------------------------------------------------------------------------- ADDR:83C9F9D4 | NtInitiatePowerAction -------------------------------------------------------------------------------------- ADDR:83CA2FB5 | NtIsProcessInJob -------------------------------------------------------------------------------------- ADDR:83CE5E36 | NtIsSystemResumeAutomatic -------------------------------------------------------------------------------------- ADDR:83BA8617 | NtIsUILanguageComitted -------------------------------------------------------------------------------------- ADDR:83BA20CB | NtListenPort -------------------------------------------------------------------------------------- ADDR:83BAF279 | NtLoadDriver -------------------------------------------------------------------------------------- ADDR:83BA5AB9 | NtLoadKey -------------------------------------------------------------------------------------- ADDR:83B8C137 | NtLoadKey2 -------------------------------------------------------------------------------------- ADDR:83BCADA2 | NtLoadKeyEx -------------------------------------------------------------------------------------- ADDR:83C2188C | NtLockFile -------------------------------------------------------------------------------------- ADDR:83B8594C | NtLockProductActivationKeys -------------------------------------------------------------------------------------- ADDR:83B816E1 | NtLockRegistryKey -------------------------------------------------------------------------------------- ADDR:83A30DA1 | NtLockVirtualMemory -------------------------------------------------------------------------------------- ADDR:83C9CC54 | NtMakePermanentObject -------------------------------------------------------------------------------------- ADDR:83C15363 | NtMakeTemporaryObject -------------------------------------------------------------------------------------- ADDR:83C6FF2E | NtMapCMFModule -------------------------------------------------------------------------------------- ADDR:83CDBDDD | NtMapUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:83CDC3B3 | NtMapUserPhysicalPagesScatter -------------------------------------------------------------------------------------- ADDR:83C8CED7 | NtMapViewOfSection -------------------------------------------------------------------------------------- ADDR:83D11628 | NtModifyBootEntry -------------------------------------------------------------------------------------- ADDR:83D12880 | NtModifyDriverEntry -------------------------------------------------------------------------------------- ADDR:83BFC64E | NtNotifyChangeDirectoryFile -------------------------------------------------------------------------------------- ADDR:83C07CE5 | NtNotifyChangeKey -------------------------------------------------------------------------------------- ADDR:83C0708F | NtNotifyChangeMultipleKeys -------------------------------------------------------------------------------------- ADDR:83BAC9B1 | NtNotifyChangeSession -------------------------------------------------------------------------------------- ADDR:83C8C3E4 | NtOpenDirectoryObject -------------------------------------------------------------------------------------- ADDR:83CFEB1D | NtOpenEnlistment -------------------------------------------------------------------------------------- ADDR:83C8F567 | NtOpenEvent -------------------------------------------------------------------------------------- ADDR:83D17235 | NtOpenEventPair -------------------------------------------------------------------------------------- ADDR:83C885C4 | NtOpenFile -------------------------------------------------------------------------------------- ADDR:83CC72FD | NtOpenIoCompletion -------------------------------------------------------------------------------------- ADDR:83CEC077 | NtOpenJobObject -------------------------------------------------------------------------------------- ADDR:83C50704 | NtOpenKey -------------------------------------------------------------------------------------- ADDR:83C476DF | NtOpenKeyEx -------------------------------------------------------------------------------------- ADDR:83D1756B | NtOpenKeyedEvent -------------------------------------------------------------------------------------- ADDR:83BE54D4 | NtOpenKeyTransacted -------------------------------------------------------------------------------------- ADDR:83BE5464 | NtOpenKeyTransactedEx -------------------------------------------------------------------------------------- ADDR:83C2A6E1 | NtOpenMutant -------------------------------------------------------------------------------------- ADDR:83BEB7A2 | NtOpenObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:83BE9082 | NtOpenPrivateNamespace -------------------------------------------------------------------------------------- ADDR:83C8F531 | NtOpenProcess -------------------------------------------------------------------------------------- ADDR:83C4A8F1 | NtOpenProcessToken -------------------------------------------------------------------------------------- ADDR:83C4A03E | NtOpenProcessTokenEx -------------------------------------------------------------------------------------- ADDR:83B8BDC0 | NtOpenResourceManager -------------------------------------------------------------------------------------- ADDR:83C8D1BA | NtOpenSection -------------------------------------------------------------------------------------- ADDR:83BF23CA | NtOpenSemaphore -------------------------------------------------------------------------------------- ADDR:83C11CC8 | NtOpenSession -------------------------------------------------------------------------------------- ADDR:83C8C48A | NtOpenSymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:83C8DE88 | NtOpenThread -------------------------------------------------------------------------------------- ADDR:83C4A155 | NtOpenThreadToken -------------------------------------------------------------------------------------- ADDR:83C49C29 | NtOpenThreadTokenEx -------------------------------------------------------------------------------------- ADDR:83D16EDB | NtOpenTimer -------------------------------------------------------------------------------------- ADDR:83CFF879 | NtOpenTransaction -------------------------------------------------------------------------------------- ADDR:83D00B11 | NtOpenTransactionManager -------------------------------------------------------------------------------------- ADDR:83BF6231 | NtPlugPlayControl -------------------------------------------------------------------------------------- ADDR:83C477FC | NtPowerInformation -------------------------------------------------------------------------------------- ADDR:83CFF42A | NtPrepareComplete -------------------------------------------------------------------------------------- ADDR:83CFF14A | NtPrepareEnlistment -------------------------------------------------------------------------------------- ADDR:83CFF4E2 | NtPrePrepareComplete -------------------------------------------------------------------------------------- ADDR:83CFF202 | NtPrePrepareEnlistment -------------------------------------------------------------------------------------- ADDR:83C0905C | NtPrivilegeCheck -------------------------------------------------------------------------------------- ADDR:83BD19BA | NtPrivilegedServiceAuditAlarm -------------------------------------------------------------------------------------- ADDR:83BEC03F | NtPrivilegeObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:83D0126C | NtPropagationComplete -------------------------------------------------------------------------------------- ADDR:83D01332 | NtPropagationFailed -------------------------------------------------------------------------------------- ADDR:83C8DC41 | NtProtectVirtualMemory -------------------------------------------------------------------------------------- ADDR:83CA4C3C | NtPulseEvent -------------------------------------------------------------------------------------- ADDR:83C70B48 | NtQueryAttributesFile -------------------------------------------------------------------------------------- ADDR:83D11AFA | NtQueryBootEntryOrder -------------------------------------------------------------------------------------- ADDR:83D11F3D | NtQueryBootOptions -------------------------------------------------------------------------------------- ADDR:83AD0C6A | NtQueryDebugFilterState -------------------------------------------------------------------------------------- ADDR:83C92473 | NtQueryDefaultLocale -------------------------------------------------------------------------------------- ADDR:83BADF33 | NtQueryDefaultUILanguage -------------------------------------------------------------------------------------- ADDR:83C8862F | NtQueryDirectoryFile -------------------------------------------------------------------------------------- ADDR:83C9687A | NtQueryDirectoryObject -------------------------------------------------------------------------------------- ADDR:83D1243B | NtQueryDriverEntryOrder -------------------------------------------------------------------------------------- ADDR:83BA7B40 | NtQueryEaFile -------------------------------------------------------------------------------------- ADDR:83C02B7C | NtQueryEvent -------------------------------------------------------------------------------------- ADDR:83C707F1 | NtQueryFullAttributesFile -------------------------------------------------------------------------------------- ADDR:83BFA4E4 | NtQueryInformationAtom -------------------------------------------------------------------------------------- ADDR:83CFED2A | NtQueryInformationEnlistment -------------------------------------------------------------------------------------- ADDR:83C6A718 | NtQueryInformationFile -------------------------------------------------------------------------------------- ADDR:83CA0F77 | NtQueryInformationJobObject -------------------------------------------------------------------------------------- ADDR:83CD6C50 | NtQueryInformationPort -------------------------------------------------------------------------------------- ADDR:83C57037 | NtQueryInformationProcess -------------------------------------------------------------------------------------- ADDR:83D00786 | NtQueryInformationResourceManager -------------------------------------------------------------------------------------- ADDR:83C7577D | NtQueryInformationThread -------------------------------------------------------------------------------------- ADDR:83C5091C | NtQueryInformationToken -------------------------------------------------------------------------------------- ADDR:83CFFA6C | NtQueryInformationTransaction -------------------------------------------------------------------------------------- ADDR:83B8B8C8 | NtQueryInformationTransactionManager -------------------------------------------------------------------------------------- ADDR:83B22737 | NtQueryInformationWorkerFactory -------------------------------------------------------------------------------------- ADDR:83BEC543 | NtQueryInstallUILanguage -------------------------------------------------------------------------------------- ADDR:83D17F3B | NtQueryIntervalProfile -------------------------------------------------------------------------------------- ADDR:83CC73C0 | NtQueryIoCompletion -------------------------------------------------------------------------------------- ADDR:83C646F9 | NtQueryKey -------------------------------------------------------------------------------------- ADDR:83C192F5 | NtQueryLicenseValue -------------------------------------------------------------------------------------- ADDR:83C02EC1 | NtQueryMultipleValueKey -------------------------------------------------------------------------------------- ADDR:83D1764A | NtQueryMutant -------------------------------------------------------------------------------------- ADDR:83C1ACB1 | NtQueryObject -------------------------------------------------------------------------------------- ADDR:83CAB327 | NtQueryOpenSubKeys -------------------------------------------------------------------------------------- ADDR:83C9A2FB | NtQueryOpenSubKeysEx -------------------------------------------------------------------------------------- ADDR:83C8E519 | NtQueryPerformanceCounter -------------------------------------------------------------------------------------- ADDR:83CE92D6 | NtQueryPortInformationProcess -------------------------------------------------------------------------------------- ADDR:83CC89A1 | NtQueryQuotaInformationFile -------------------------------------------------------------------------------------- ADDR:83C79F04 | NtQuerySection -------------------------------------------------------------------------------------- ADDR:83C03C25 | NtQuerySecurityAttributesToken -------------------------------------------------------------------------------------- ADDR:83C1A033 | NtQuerySecurityObject -------------------------------------------------------------------------------------- ADDR:83D104B6 | NtQuerySemaphore -------------------------------------------------------------------------------------- ADDR:83C8FD05 | NtQuerySymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:83D1068F | NtQuerySystemEnvironmentValue -------------------------------------------------------------------------------------- ADDR:83D10C85 | NtQuerySystemEnvironmentValueEx -------------------------------------------------------------------------------------- ADDR:83C44416 | NtQuerySystemInformation -------------------------------------------------------------------------------------- ADDR:83C7227F | NtQuerySystemInformationEx -------------------------------------------------------------------------------------- ADDR:83C8E432 | NtQuerySystemTime -------------------------------------------------------------------------------------- ADDR:83D16F9A | NtQueryTimer -------------------------------------------------------------------------------------- ADDR:83BFB864 | NtQueryTimerResolution -------------------------------------------------------------------------------------- ADDR:83C8970E | NtQueryValueKey -------------------------------------------------------------------------------------- ADDR:83C87003 | NtQueryVirtualMemory -------------------------------------------------------------------------------------- ADDR:83C5F3BE | NtQueryVolumeInformationFile -------------------------------------------------------------------------------------- ADDR:83BFAAF1 | NtQueueApcThread -------------------------------------------------------------------------------------- ADDR:83BFAB15 | NtQueueApcThreadEx -------------------------------------------------------------------------------------- ADDR:83A54F74 | NtRaiseException -------------------------------------------------------------------------------------- ADDR:83BE99DA | NtRaiseHardError -------------------------------------------------------------------------------------- ADDR:83C5D858 | NtReadFile -------------------------------------------------------------------------------------- ADDR:83BC3286 | NtReadFileScatter -------------------------------------------------------------------------------------- ADDR:83CFF708 | NtReadOnlyEnlistment -------------------------------------------------------------------------------------- ADDR:83CD6D35 | NtReadRequestData -------------------------------------------------------------------------------------- ADDR:83C91B79 | NtReadVirtualMemory -------------------------------------------------------------------------------------- ADDR:83CFECCE | NtRecoverEnlistment -------------------------------------------------------------------------------------- ADDR:83BAC95D | NtRecoverResourceManager -------------------------------------------------------------------------------------- ADDR:83BAA780 | NtRecoverTransactionManager -------------------------------------------------------------------------------------- ADDR:83D010C0 | NtRegisterProtocolAddressInformation -------------------------------------------------------------------------------------- ADDR:83CEA0AE | NtRegisterThreadTerminatePort -------------------------------------------------------------------------------------- ADDR:83C98769 | NtReleaseKeyedEvent -------------------------------------------------------------------------------------- ADDR:83C3F563 | NtReleaseMutant -------------------------------------------------------------------------------------- ADDR:83C2949C | NtReleaseSemaphore -------------------------------------------------------------------------------------- ADDR:83A800C7 | NtReleaseWorkerFactoryWorker -------------------------------------------------------------------------------------- ADDR:83C190A0 | NtRemoveIoCompletion -------------------------------------------------------------------------------------- ADDR:83C1B5C8 | NtRemoveIoCompletionEx -------------------------------------------------------------------------------------- ADDR:83CBE29B | NtRemoveProcessDebug -------------------------------------------------------------------------------------- ADDR:83CAB56D | NtRenameKey -------------------------------------------------------------------------------------- ADDR:83D00D5C | NtRenameTransactionManager -------------------------------------------------------------------------------------- ADDR:83CAB0BA | NtReplaceKey -------------------------------------------------------------------------------------- ADDR:83AE9197 | NtReplacePartitionUnit -------------------------------------------------------------------------------------- ADDR:83BFF338 | NtReplyPort -------------------------------------------------------------------------------------- ADDR:83C84B2D | NtReplyWaitReceivePort -------------------------------------------------------------------------------------- ADDR:83C7AFE2 | NtReplyWaitReceivePortEx -------------------------------------------------------------------------------------- ADDR:83CD6F01 | NtReplyWaitReplyPort -------------------------------------------------------------------------------------- ADDR:83C98D31 | NtRequestPort -------------------------------------------------------------------------------------- ADDR:83C84ACB | NtRequestWaitReplyPort -------------------------------------------------------------------------------------- ADDR:83BED6A6 | NtResetEvent -------------------------------------------------------------------------------------- ADDR:83AF8D7C | NtResetWriteWatch -------------------------------------------------------------------------------------- ADDR:83CA3F4F | NtRestoreKey -------------------------------------------------------------------------------------- ADDR:83CEA913 | NtResumeProcess -------------------------------------------------------------------------------------- ADDR:83C7FFCF | NtResumeThread -------------------------------------------------------------------------------------- ADDR:83CFF7BE | NtRollbackComplete -------------------------------------------------------------------------------------- ADDR:83CFF372 | NtRollbackEnlistment -------------------------------------------------------------------------------------- ADDR:83BD4E9F | NtRollbackTransaction -------------------------------------------------------------------------------------- ADDR:83D00EBE | NtRollforwardTransactionManager -------------------------------------------------------------------------------------- ADDR:83CA2060 | NtSaveKey -------------------------------------------------------------------------------------- ADDR:83CA2B93 | NtSaveKeyEx -------------------------------------------------------------------------------------- ADDR:83CAA3DF | NtSaveMergedKeys -------------------------------------------------------------------------------------- ADDR:83C6DA01 | NtSecureConnectPort -------------------------------------------------------------------------------------- ADDR:83B9806D | NtSerializeBoot -------------------------------------------------------------------------------------- ADDR:83D11D39 | NtSetBootEntryOrder -------------------------------------------------------------------------------------- ADDR:83D12225 | NtSetBootOptions -------------------------------------------------------------------------------------- ADDR:83CE9D13 | NtSetContextThread -------------------------------------------------------------------------------------- ADDR:83B7E9C9 | NtSetDebugFilterState -------------------------------------------------------------------------------------- ADDR:83B9E0CF | NtSetDefaultHardErrorPort -------------------------------------------------------------------------------------- ADDR:83BACCD8 | NtSetDefaultLocale -------------------------------------------------------------------------------------- ADDR:83BADF06 | NtSetDefaultUILanguage -------------------------------------------------------------------------------------- ADDR:83D12CB3 | NtSetDriverEntryOrder -------------------------------------------------------------------------------------- ADDR:83CC8432 | NtSetEaFile -------------------------------------------------------------------------------------- ADDR:83C43FE7 | NtSetEvent -------------------------------------------------------------------------------------- ADDR:83D10167 | NtSetEventBoostPriority -------------------------------------------------------------------------------------- ADDR:83D17501 | NtSetHighEventPair -------------------------------------------------------------------------------------- ADDR:83D17433 | NtSetHighWaitLowEventPair -------------------------------------------------------------------------------------- ADDR:83CBE9D7 | NtSetInformationDebugObject -------------------------------------------------------------------------------------- ADDR:83CFEF72 | NtSetInformationEnlistment -------------------------------------------------------------------------------------- ADDR:83C5DEB3 | NtSetInformationFile -------------------------------------------------------------------------------------- ADDR:83BFF8A5 | NtSetInformationJobObject -------------------------------------------------------------------------------------- ADDR:83CAABCF | NtSetInformationKey -------------------------------------------------------------------------------------- ADDR:83C1CE73 | NtSetInformationObject -------------------------------------------------------------------------------------- ADDR:83C5B409 | NtSetInformationProcess -------------------------------------------------------------------------------------- ADDR:83D00994 | NtSetInformationResourceManager -------------------------------------------------------------------------------------- ADDR:83C777AA | NtSetInformationThread -------------------------------------------------------------------------------------- ADDR:83C27F42 | NtSetInformationToken -------------------------------------------------------------------------------------- ADDR:83D002CE | NtSetInformationTransaction -------------------------------------------------------------------------------------- ADDR:83D00F83 | NtSetInformationTransactionManager -------------------------------------------------------------------------------------- ADDR:83AAFAC0 | NtSetInformationWorkerFactory -------------------------------------------------------------------------------------- ADDR:83D17F18 | NtSetIntervalProfile -------------------------------------------------------------------------------------- ADDR:83BF1167 | NtSetIoCompletion -------------------------------------------------------------------------------------- ADDR:83CC74E6 | NtSetIoCompletionEx -------------------------------------------------------------------------------------- ADDR:83CEBD37 | NtSetLdtEntries -------------------------------------------------------------------------------------- ADDR:83D1749E | NtSetLowEventPair -------------------------------------------------------------------------------------- ADDR:83D173C8 | NtSetLowWaitHighEventPair -------------------------------------------------------------------------------------- ADDR:83CC8FB7 | NtSetQuotaInformationFile -------------------------------------------------------------------------------------- ADDR:83C24025 | NtSetSecurityObject -------------------------------------------------------------------------------------- ADDR:83D1098B | NtSetSystemEnvironmentValue -------------------------------------------------------------------------------------- ADDR:83D10F9D | NtSetSystemEnvironmentValueEx -------------------------------------------------------------------------------------- ADDR:83C98DF5 | NtSetSystemInformation -------------------------------------------------------------------------------------- ADDR:83D2F355 | NtSetSystemPowerState -------------------------------------------------------------------------------------- ADDR:83C9D5D2 | NtSetSystemTime -------------------------------------------------------------------------------------- ADDR:83CA7306 | NtSetThreadExecutionState -------------------------------------------------------------------------------------- ADDR:83A7FF74 | NtSetTimer -------------------------------------------------------------------------------------- ADDR:83AA6654 | NtSetTimerEx -------------------------------------------------------------------------------------- ADDR:83BFE227 | NtSetTimerResolution -------------------------------------------------------------------------------------- ADDR:83BA7906 | NtSetUuidSeed -------------------------------------------------------------------------------------- ADDR:83C0E5B1 | NtSetValueKey -------------------------------------------------------------------------------------- ADDR:83CC8FD1 | NtSetVolumeInformationFile -------------------------------------------------------------------------------------- ADDR:83D0F64B | NtShutdownSystem -------------------------------------------------------------------------------------- ADDR:83C72F7F | NtShutdownWorkerFactory -------------------------------------------------------------------------------------- ADDR:83AD8195 | NtSignalAndWaitForSingleObject -------------------------------------------------------------------------------------- ADDR:83CFF652 | NtSinglePhaseReject -------------------------------------------------------------------------------------- ADDR:83D17C54 | NtStartProfile -------------------------------------------------------------------------------------- ADDR:83D17E4B | NtStopProfile -------------------------------------------------------------------------------------- ADDR:83CEA8B3 | NtSuspendProcess -------------------------------------------------------------------------------------- ADDR:83CA7650 | NtSuspendThread -------------------------------------------------------------------------------------- ADDR:83C172FC | NtSystemDebugControl -------------------------------------------------------------------------------------- ADDR:83C007AA | NtTerminateJobObject -------------------------------------------------------------------------------------- ADDR:83C6FB3D | NtTerminateProcess -------------------------------------------------------------------------------------- ADDR:83C828E4 | NtTerminateThread -------------------------------------------------------------------------------------- ADDR:83C80098 | NtTestAlert -------------------------------------------------------------------------------------- ADDR:83ADFA1F | NtThawRegistry -------------------------------------------------------------------------------------- ADDR:83D00600 | NtThawTransactions -------------------------------------------------------------------------------------- ADDR:83C60249 | NtTraceControl -------------------------------------------------------------------------------------- ADDR:83A40E34 | NtTraceEvent -------------------------------------------------------------------------------------- ADDR:83D12EB7 | NtTranslateFilePath -------------------------------------------------------------------------------------- ADDR:83CD6BC7 | NtUmsThreadYield -------------------------------------------------------------------------------------- ADDR:83CC9827 | NtUnloadDriver -------------------------------------------------------------------------------------- ADDR:83C9A2E1 | NtUnloadKey -------------------------------------------------------------------------------------- ADDR:83C9BA54 | NtUnloadKey2 -------------------------------------------------------------------------------------- ADDR:83CAA575 | NtUnloadKeyEx -------------------------------------------------------------------------------------- ADDR:83C21CE1 | NtUnlockFile -------------------------------------------------------------------------------------- ADDR:83A455D8 | NtUnlockVirtualMemory -------------------------------------------------------------------------------------- ADDR:83C89CDC | NtUnmapViewOfSection -------------------------------------------------------------------------------------- ADDR:83D04A8F | NtVdmControl -------------------------------------------------------------------------------------- ADDR:83CBE4F5 | NtWaitForDebugEvent -------------------------------------------------------------------------------------- ADDR:83C59398 | NtWaitForKeyedEvent -------------------------------------------------------------------------------------- ADDR:83C402C4 | NtWaitForMultipleObjects -------------------------------------------------------------------------------------- ADDR:83CE0AB4 | NtWaitForMultipleObjects32 -------------------------------------------------------------------------------------- ADDR:83C3F44F | NtWaitForSingleObject -------------------------------------------------------------------------------------- ADDR:83A7FB44 | NtWaitForWorkViaWorkerFactory -------------------------------------------------------------------------------------- ADDR:83D1735F | NtWaitHighEventPair -------------------------------------------------------------------------------------- ADDR:83D172F6 | NtWaitLowEventPair -------------------------------------------------------------------------------------- ADDR:83ABFF87 | NtWorkerFactoryWorkerReady -------------------------------------------------------------------------------------- ADDR:83C4C0B4 | NtWriteFile -------------------------------------------------------------------------------------- ADDR:83BC37DF | NtWriteFileGather -------------------------------------------------------------------------------------- ADDR:83CD6DA2 | NtWriteRequestData -------------------------------------------------------------------------------------- ADDR:83C955B5 | NtWriteVirtualMemory -------------------------------------------------------------------------------------- ADDR:83A39128 | NtYieldExecution --------------------------------------------------------------------------------------