COUNT: 000001A9 SSTD Function List -------------------------------------------------------------------------------------- ADDR:81151438 | NtYieldExecution -------------------------------------------------------------------------------------- ADDR:813A7064 | NtWriteVirtualMemory -------------------------------------------------------------------------------------- ADDR:8138DC4F | NtWriteRequestData -------------------------------------------------------------------------------------- ADDR:81340D39 | NtWriteFileGather -------------------------------------------------------------------------------------- ADDR:81340519 | NtWriteFile -------------------------------------------------------------------------------------- ADDR:81205E67 | NtWorkerFactoryWorkerReady -------------------------------------------------------------------------------------- ADDR:814A35D3 | NtWaitLowEventPair -------------------------------------------------------------------------------------- ADDR:814A363C | NtWaitHighEventPair -------------------------------------------------------------------------------------- ADDR:81205402 | NtWaitForWorkViaWorkerFactory -------------------------------------------------------------------------------------- ADDR:81495C0F | NtWaitForWnfNotifications -------------------------------------------------------------------------------------- ADDR:813C6B03 | NtWaitForSingleObject -------------------------------------------------------------------------------------- ADDR:813C70E7 | NtWaitForMultipleObjects32 -------------------------------------------------------------------------------------- ADDR:813C6FE6 | NtWaitForMultipleObjects -------------------------------------------------------------------------------------- ADDR:814A3DB5 | NtWaitForKeyedEvent -------------------------------------------------------------------------------------- ADDR:8131FAEB | NtWaitForDebugEvent -------------------------------------------------------------------------------------- ADDR:81406F16 | NtWaitForAlertByThreadId -------------------------------------------------------------------------------------- ADDR:8145CD47 | NtVdmControl -------------------------------------------------------------------------------------- ADDR:81495984 | NtUnsubscribeWnfStateChange -------------------------------------------------------------------------------------- ADDR:81494B5B | NtUpdateWnfStateData -------------------------------------------------------------------------------------- ADDR:813B0994 | NtUnmapViewOfSection -------------------------------------------------------------------------------------- ADDR:813B0913 | NtUnmapViewOfSectionEx -------------------------------------------------------------------------------------- ADDR:811929AD | NtUnlockVirtualMemory -------------------------------------------------------------------------------------- ADDR:8133B03B | NtUnlockFile -------------------------------------------------------------------------------------- ADDR:812EB40B | NtUnloadKeyEx -------------------------------------------------------------------------------------- ADDR:812EABE1 | NtUnloadKey2 -------------------------------------------------------------------------------------- ADDR:812EABC4 | NtUnloadKey -------------------------------------------------------------------------------------- ADDR:81345716 | NtUnloadDriver -------------------------------------------------------------------------------------- ADDR:81388110 | NtUmsThreadYield -------------------------------------------------------------------------------------- ADDR:8149ACB9 | NtTranslateFilePath -------------------------------------------------------------------------------------- ADDR:811F32BB | NtTraceEvent -------------------------------------------------------------------------------------- ADDR:8146D30C | NtTraceControl -------------------------------------------------------------------------------------- ADDR:81450A12 | NtThawTransactions -------------------------------------------------------------------------------------- ADDR:81275A2B | NtThawRegistry -------------------------------------------------------------------------------------- ADDR:81404D0E | NtTestAlert -------------------------------------------------------------------------------------- ADDR:814025C8 | NtTerminateThread -------------------------------------------------------------------------------------- ADDR:81402133 | NtTerminateProcess -------------------------------------------------------------------------------------- ADDR:81409FEF | NtTerminateJobObject -------------------------------------------------------------------------------------- ADDR:814A4102 | NtSystemDebugControl -------------------------------------------------------------------------------------- ADDR:814048C2 | NtSuspendThread -------------------------------------------------------------------------------------- ADDR:81404AD6 | NtSuspendProcess -------------------------------------------------------------------------------------- ADDR:81495903 | NtSubscribeWnfStateChange -------------------------------------------------------------------------------------- ADDR:814A4E37 | NtStopProfile -------------------------------------------------------------------------------------- ADDR:814A4C36 | NtStartProfile -------------------------------------------------------------------------------------- ADDR:8144F604 | NtSinglePhaseReject -------------------------------------------------------------------------------------- ADDR:811A3913 | NtSignalAndWaitForSingleObject -------------------------------------------------------------------------------------- ADDR:81205EFF | NtShutdownWorkerFactory -------------------------------------------------------------------------------------- ADDR:814885C5 | NtShutdownSystem -------------------------------------------------------------------------------------- ADDR:8133F295 | NtSetVolumeInformationFile -------------------------------------------------------------------------------------- ADDR:812E9F19 | NtSetValueKey -------------------------------------------------------------------------------------- ADDR:81497701 | NtSetUuidSeed -------------------------------------------------------------------------------------- ADDR:81486B7F | NtSetTimerResolution -------------------------------------------------------------------------------------- ADDR:81206DC9 | NtSetTimerEx -------------------------------------------------------------------------------------- ADDR:81206CE6 | NtSetTimer -------------------------------------------------------------------------------------- ADDR:813E742F | NtSetThreadExecutionState -------------------------------------------------------------------------------------- ADDR:8148685E | NtSetSystemTime -------------------------------------------------------------------------------------- ADDR:81505358 | NtSetSystemPowerState -------------------------------------------------------------------------------------- ADDR:8148F71E | NtSetSystemInformation -------------------------------------------------------------------------------------- ADDR:81498CB7 | NtSetSystemEnvironmentValueEx -------------------------------------------------------------------------------------- ADDR:8149869F | NtSetSystemEnvironmentValue -------------------------------------------------------------------------------------- ADDR:81443A23 | NtSetSystemCodeIntegrityRoots -------------------------------------------------------------------------------------- ADDR:813C5B32 | NtSetSecurityObject -------------------------------------------------------------------------------------- ADDR:8133ECEB | NtSetQuotaInformationFile -------------------------------------------------------------------------------------- ADDR:814A36A5 | NtSetLowWaitHighEventPair -------------------------------------------------------------------------------------- ADDR:814A377B | NtSetLowEventPair -------------------------------------------------------------------------------------- ADDR:81406B7B | NtSetLdtEntries -------------------------------------------------------------------------------------- ADDR:81336468 | NtSetIoCompletionEx -------------------------------------------------------------------------------------- ADDR:81336401 | NtSetIoCompletion -------------------------------------------------------------------------------------- ADDR:814A4F05 | NtSetIntervalProfile -------------------------------------------------------------------------------------- ADDR:81205791 | NtSetInformationWorkerFactory -------------------------------------------------------------------------------------- ADDR:814520FB | NtSetInformationTransactionManager -------------------------------------------------------------------------------------- ADDR:81450675 | NtSetInformationTransaction -------------------------------------------------------------------------------------- ADDR:81433927 | NtSetInformationToken -------------------------------------------------------------------------------------- ADDR:813F8641 | NtSetInformationThread -------------------------------------------------------------------------------------- ADDR:814512CF | NtSetInformationResourceManager -------------------------------------------------------------------------------------- ADDR:813F562C | NtSetInformationProcess -------------------------------------------------------------------------------------- ADDR:813CA583 | NtSetInformationObject -------------------------------------------------------------------------------------- ADDR:812EBAE0 | NtSetInformationKey -------------------------------------------------------------------------------------- ADDR:814080DF | NtSetInformationJobObject -------------------------------------------------------------------------------------- ADDR:8133D7D1 | NtSetInformationFile -------------------------------------------------------------------------------------- ADDR:8144EE90 | NtSetInformationEnlistment -------------------------------------------------------------------------------------- ADDR:813200F7 | NtSetInformationDebugObject -------------------------------------------------------------------------------------- ADDR:814A3710 | NtSetHighWaitLowEventPair -------------------------------------------------------------------------------------- ADDR:814A37DE | NtSetHighEventPair -------------------------------------------------------------------------------------- ADDR:8149404F | NtSetEventBoostPriority -------------------------------------------------------------------------------------- ADDR:81493F80 | NtSetEvent -------------------------------------------------------------------------------------- ADDR:8133C5AB | NtSetEaFile -------------------------------------------------------------------------------------- ADDR:8149AAA3 | NtSetDriverEntryOrder -------------------------------------------------------------------------------------- ADDR:8148B5B7 | NtSetDefaultUILanguage -------------------------------------------------------------------------------------- ADDR:8148A2BB | NtSetDefaultLocale -------------------------------------------------------------------------------------- ADDR:81496A4B | NtSetDefaultHardErrorPort -------------------------------------------------------------------------------------- ADDR:814D806C | NtSetDebugFilterState -------------------------------------------------------------------------------------- ADDR:81401D05 | NtSetContextThread -------------------------------------------------------------------------------------- ADDR:81499FBA | NtSetBootOptions -------------------------------------------------------------------------------------- ADDR:81499AB3 | NtSetBootEntryOrder -------------------------------------------------------------------------------------- ADDR:814D7B22 | NtSerializeBoot -------------------------------------------------------------------------------------- ADDR:8138CF40 | NtSecureConnectPort -------------------------------------------------------------------------------------- ADDR:812E9D32 | NtSaveMergedKeys -------------------------------------------------------------------------------------- ADDR:812E9A57 | NtSaveKeyEx -------------------------------------------------------------------------------------- ADDR:812E97F4 | NtSaveKey -------------------------------------------------------------------------------------- ADDR:81451A37 | NtRollforwardTransactionManager -------------------------------------------------------------------------------------- ADDR:8145060C | NtRollbackTransaction -------------------------------------------------------------------------------------- ADDR:8144F2D8 | NtRollbackEnlistment -------------------------------------------------------------------------------------- ADDR:8144F796 | NtRollbackComplete -------------------------------------------------------------------------------------- ADDR:814049FB | NtResumeThread -------------------------------------------------------------------------------------- ADDR:81404B3D | NtResumeProcess -------------------------------------------------------------------------------------- ADDR:812E957B | NtRestoreKey -------------------------------------------------------------------------------------- ADDR:8119362B | NtResetWriteWatch -------------------------------------------------------------------------------------- ADDR:81493EB5 | NtResetEvent -------------------------------------------------------------------------------------- ADDR:8138D9E8 | NtRequestWaitReplyPort -------------------------------------------------------------------------------------- ADDR:8138D91B | NtRequestPort -------------------------------------------------------------------------------------- ADDR:8138E037 | NtReplyWaitReplyPort -------------------------------------------------------------------------------------- ADDR:8138DDF3 | NtReplyWaitReceivePortEx -------------------------------------------------------------------------------------- ADDR:8138DDCB | NtReplyWaitReceivePort -------------------------------------------------------------------------------------- ADDR:8138DCBE | NtReplyPort -------------------------------------------------------------------------------------- ADDR:8121871A | NtReplacePartitionUnit -------------------------------------------------------------------------------------- ADDR:812EC039 | NtReplaceKey -------------------------------------------------------------------------------------- ADDR:814518CE | NtRenameTransactionManager -------------------------------------------------------------------------------------- ADDR:812ECF51 | NtRenameKey -------------------------------------------------------------------------------------- ADDR:8131F6F6 | NtRemoveProcessDebug -------------------------------------------------------------------------------------- ADDR:813366D7 | NtRemoveIoCompletionEx -------------------------------------------------------------------------------------- ADDR:8133653B | NtRemoveIoCompletion -------------------------------------------------------------------------------------- ADDR:81205343 | NtReleaseWorkerFactoryWorker -------------------------------------------------------------------------------------- ADDR:81497273 | NtReleaseSemaphore -------------------------------------------------------------------------------------- ADDR:814A57CA | NtReleaseMutant -------------------------------------------------------------------------------------- ADDR:814A3A77 | NtReleaseKeyedEvent -------------------------------------------------------------------------------------- ADDR:8140369F | NtRegisterThreadTerminatePort -------------------------------------------------------------------------------------- ADDR:81452267 | NtRegisterProtocolAddressInformation -------------------------------------------------------------------------------------- ADDR:81451B02 | NtRecoverTransactionManager -------------------------------------------------------------------------------------- ADDR:81450F0E | NtRecoverResourceManager -------------------------------------------------------------------------------------- ADDR:8144EB7B | NtRecoverEnlistment -------------------------------------------------------------------------------------- ADDR:813A703B | NtReadVirtualMemory -------------------------------------------------------------------------------------- ADDR:8138DBDA | NtReadRequestData -------------------------------------------------------------------------------------- ADDR:8144F6CD | NtReadOnlyEnlistment -------------------------------------------------------------------------------------- ADDR:8133FEB7 | NtReadFileScatter -------------------------------------------------------------------------------------- ADDR:8133F733 | NtReadFile -------------------------------------------------------------------------------------- ADDR:814966EF | NtRaiseHardError -------------------------------------------------------------------------------------- ADDR:8123293C | NtRaiseException -------------------------------------------------------------------------------------- ADDR:81401760 | NtQueueApcThreadEx -------------------------------------------------------------------------------------- ADDR:814016F6 | NtQueueApcThread -------------------------------------------------------------------------------------- ADDR:81494EEF | NtQueryWnfStateData -------------------------------------------------------------------------------------- ADDR:814952A3 | NtQueryWnfStateNameInformation -------------------------------------------------------------------------------------- ADDR:8133ED00 | NtQueryVolumeInformationFile -------------------------------------------------------------------------------------- ADDR:813B81FB | NtQueryVirtualMemory -------------------------------------------------------------------------------------- ADDR:812E90AF | NtQueryValueKey -------------------------------------------------------------------------------------- ADDR:81486A9C | NtQueryTimerResolution -------------------------------------------------------------------------------------- ADDR:814A52FB | NtQueryTimer -------------------------------------------------------------------------------------- ADDR:814867C4 | NtQuerySystemTime -------------------------------------------------------------------------------------- ADDR:8148C09B | NtQuerySystemInformationEx -------------------------------------------------------------------------------------- ADDR:8148C013 | NtQuerySystemInformation -------------------------------------------------------------------------------------- ADDR:81498993 | NtQuerySystemEnvironmentValueEx -------------------------------------------------------------------------------------- ADDR:8149838D | NtQuerySystemEnvironmentValue -------------------------------------------------------------------------------------- ADDR:813BE945 | NtQuerySymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:8149713F | NtQuerySemaphore -------------------------------------------------------------------------------------- ADDR:813C5E1C | NtQuerySecurityObject -------------------------------------------------------------------------------------- ADDR:8143227F | NtQuerySecurityAttributesToken -------------------------------------------------------------------------------------- ADDR:813B56F7 | NtQuerySection -------------------------------------------------------------------------------------- ADDR:8133E60B | NtQueryQuotaInformationFile -------------------------------------------------------------------------------------- ADDR:813F523D | NtQueryPortInformationProcess -------------------------------------------------------------------------------------- ADDR:814A4FFA | NtQueryPerformanceCounter -------------------------------------------------------------------------------------- ADDR:812ECC43 | NtQueryOpenSubKeysEx -------------------------------------------------------------------------------------- ADDR:812ECA99 | NtQueryOpenSubKeys -------------------------------------------------------------------------------------- ADDR:813C9DE1 | NtQueryObject -------------------------------------------------------------------------------------- ADDR:814A563F | NtQueryMutant -------------------------------------------------------------------------------------- ADDR:812EC348 | NtQueryMultipleValueKey -------------------------------------------------------------------------------------- ADDR:814833F7 | NtQueryLicenseValue -------------------------------------------------------------------------------------- ADDR:812E8C42 | NtQueryKey -------------------------------------------------------------------------------------- ADDR:813362B3 | NtQueryIoCompletion -------------------------------------------------------------------------------------- ADDR:814A4F5F | NtQueryIntervalProfile -------------------------------------------------------------------------------------- ADDR:8148A56A | NtQueryInstallUILanguage -------------------------------------------------------------------------------------- ADDR:81205C69 | NtQueryInformationWorkerFactory -------------------------------------------------------------------------------------- ADDR:81451B5D | NtQueryInformationTransactionManager -------------------------------------------------------------------------------------- ADDR:8144FD7B | NtQueryInformationTransaction -------------------------------------------------------------------------------------- ADDR:8142F021 | NtQueryInformationToken -------------------------------------------------------------------------------------- ADDR:813F7839 | NtQueryInformationThread -------------------------------------------------------------------------------------- ADDR:8145108C | NtQueryInformationResourceManager -------------------------------------------------------------------------------------- ADDR:813F2E2B | NtQueryInformationProcess -------------------------------------------------------------------------------------- ADDR:8138DAF7 | NtQueryInformationPort -------------------------------------------------------------------------------------- ADDR:814074DB | NtQueryInformationJobObject -------------------------------------------------------------------------------------- ADDR:8133CC3F | NtQueryInformationFile -------------------------------------------------------------------------------------- ADDR:8144EBD7 | NtQueryInformationEnlistment -------------------------------------------------------------------------------------- ADDR:81498194 | NtQueryInformationAtom -------------------------------------------------------------------------------------- ADDR:81337866 | NtQueryFullAttributesFile -------------------------------------------------------------------------------------- ADDR:81493D92 | NtQueryEvent -------------------------------------------------------------------------------------- ADDR:8133BF43 | NtQueryEaFile -------------------------------------------------------------------------------------- ADDR:8149A1D0 | NtQueryDriverEntryOrder -------------------------------------------------------------------------------------- ADDR:813C1D43 | NtQueryDirectoryObject -------------------------------------------------------------------------------------- ADDR:8133BABC | NtQueryDirectoryFile -------------------------------------------------------------------------------------- ADDR:8148A5E3 | NtQueryDefaultUILanguage -------------------------------------------------------------------------------------- ADDR:8148A233 | NtQueryDefaultLocale -------------------------------------------------------------------------------------- ADDR:8121897F | NtQueryDebugFilterState -------------------------------------------------------------------------------------- ADDR:81499CC9 | NtQueryBootOptions -------------------------------------------------------------------------------------- ADDR:81499869 | NtQueryBootEntryOrder -------------------------------------------------------------------------------------- ADDR:813376D8 | NtQueryAttributesFile -------------------------------------------------------------------------------------- ADDR:81493CC3 | NtPulseEvent -------------------------------------------------------------------------------------- ADDR:813B8927 | NtProtectVirtualMemory -------------------------------------------------------------------------------------- ADDR:81452509 | NtPropagationFailed -------------------------------------------------------------------------------------- ADDR:8145242A | NtPropagationComplete -------------------------------------------------------------------------------------- ADDR:8143B71C | NtPrivilegeObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:8143B97B | NtPrivilegedServiceAuditAlarm -------------------------------------------------------------------------------------- ADDR:81443034 | NtPrivilegeCheck -------------------------------------------------------------------------------------- ADDR:813AFCB9 | NtPrefetchVirtualMemory -------------------------------------------------------------------------------------- ADDR:8144F142 | NtPrePrepareEnlistment -------------------------------------------------------------------------------------- ADDR:8144F46E | NtPrePrepareComplete -------------------------------------------------------------------------------------- ADDR:8144F077 | NtPrepareEnlistment -------------------------------------------------------------------------------------- ADDR:8144F3A3 | NtPrepareComplete -------------------------------------------------------------------------------------- ADDR:813DD8A8 | NtPowerInformation -------------------------------------------------------------------------------------- ADDR:814D79EF | NtPlugPlayControl -------------------------------------------------------------------------------------- ADDR:8145166F | NtOpenTransactionManager -------------------------------------------------------------------------------------- ADDR:8144FB63 | NtOpenTransaction -------------------------------------------------------------------------------------- ADDR:814A523B | NtOpenTimer -------------------------------------------------------------------------------------- ADDR:8142ED73 | NtOpenThreadTokenEx -------------------------------------------------------------------------------------- ADDR:8142ED4B | NtOpenThreadToken -------------------------------------------------------------------------------------- ADDR:813F293F | NtOpenThread -------------------------------------------------------------------------------------- ADDR:813BE897 | NtOpenSymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:813B4D3B | NtOpenSession -------------------------------------------------------------------------------------- ADDR:8149707E | NtOpenSemaphore -------------------------------------------------------------------------------------- ADDR:813AA8D7 | NtOpenSection -------------------------------------------------------------------------------------- ADDR:81450D3B | NtOpenResourceManager -------------------------------------------------------------------------------------- ADDR:8142EC26 | NtOpenProcessTokenEx -------------------------------------------------------------------------------------- ADDR:8142EC01 | NtOpenProcessToken -------------------------------------------------------------------------------------- ADDR:813F25D4 | NtOpenProcess -------------------------------------------------------------------------------------- ADDR:813CD635 | NtOpenPrivateNamespace -------------------------------------------------------------------------------------- ADDR:8143CE03 | NtOpenObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:814A5580 | NtOpenMutant -------------------------------------------------------------------------------------- ADDR:812E889F | NtOpenKeyTransactedEx -------------------------------------------------------------------------------------- ADDR:812E87ED | NtOpenKeyTransacted -------------------------------------------------------------------------------------- ADDR:812E87C6 | NtOpenKeyEx -------------------------------------------------------------------------------------- ADDR:814A3983 | NtOpenKeyedEvent -------------------------------------------------------------------------------------- ADDR:812E879F | NtOpenKey -------------------------------------------------------------------------------------- ADDR:8140740A | NtOpenJobObject -------------------------------------------------------------------------------------- ADDR:813361C8 | NtOpenIoCompletion -------------------------------------------------------------------------------------- ADDR:8133BF07 | NtOpenFile -------------------------------------------------------------------------------------- ADDR:814A34FE | NtOpenEventPair -------------------------------------------------------------------------------------- ADDR:81493C03 | NtOpenEvent -------------------------------------------------------------------------------------- ADDR:8144E9B3 | NtOpenEnlistment -------------------------------------------------------------------------------------- ADDR:813C1C95 | NtOpenDirectoryObject -------------------------------------------------------------------------------------- ADDR:81337C40 | NtNotifyChangeSession -------------------------------------------------------------------------------------- ADDR:812E7FAF | NtNotifyChangeMultipleKeys -------------------------------------------------------------------------------------- ADDR:812E7F74 | NtNotifyChangeKey -------------------------------------------------------------------------------------- ADDR:8133BB2B | NtNotifyChangeDirectoryFile -------------------------------------------------------------------------------------- ADDR:8149A627 | NtModifyDriverEntry -------------------------------------------------------------------------------------- ADDR:81499363 | NtModifyBootEntry -------------------------------------------------------------------------------------- ADDR:8139FE47 | NtMapViewOfSection -------------------------------------------------------------------------------------- ADDR:813B971A | NtMapUserPhysicalPagesScatter -------------------------------------------------------------------------------------- ADDR:813B914F | NtMapUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:814A6D3E | NtMapCMFModule -------------------------------------------------------------------------------------- ADDR:813C027B | NtMakeTemporaryObject -------------------------------------------------------------------------------------- ADDR:813C33CB | NtMakePermanentObject -------------------------------------------------------------------------------------- ADDR:81192486 | NtLockVirtualMemory -------------------------------------------------------------------------------------- ADDR:812ED65B | NtLockRegistryKey -------------------------------------------------------------------------------------- ADDR:81485F37 | NtLockProductActivationKeys -------------------------------------------------------------------------------------- ADDR:8133AB1B | NtLockFile -------------------------------------------------------------------------------------- ADDR:812EA3FF | NtLoadKeyEx -------------------------------------------------------------------------------------- ADDR:812EA3D3 | NtLoadKey2 -------------------------------------------------------------------------------------- ADDR:812EA3A9 | NtLoadKey -------------------------------------------------------------------------------------- ADDR:8134555A | NtLoadDriver -------------------------------------------------------------------------------------- ADDR:8138DA7F | NtListenPort -------------------------------------------------------------------------------------- ADDR:814A7993 | NtIsUILanguageComitted -------------------------------------------------------------------------------------- ADDR:813E778B | NtIsSystemResumeAutomatic -------------------------------------------------------------------------------------- ADDR:81407347 | NtIsProcessInJob -------------------------------------------------------------------------------------- ADDR:813E75C2 | NtInitiatePowerAction -------------------------------------------------------------------------------------- ADDR:812E7D67 | NtInitializeRegistry -------------------------------------------------------------------------------------- ADDR:8148772C | NtInitializeNlsFiles -------------------------------------------------------------------------------------- ADDR:8140EB65 | NtImpersonateThread -------------------------------------------------------------------------------------- ADDR:8138DA4F | NtImpersonateClientOfPort -------------------------------------------------------------------------------------- ADDR:814411D6 | NtImpersonateAnonymousToken -------------------------------------------------------------------------------------- ADDR:81192E2B | NtGetWriteWatch -------------------------------------------------------------------------------------- ADDR:81450F67 | NtGetNotificationResourceManager -------------------------------------------------------------------------------------- ADDR:8148794E | NtGetNlsSectionPtr -------------------------------------------------------------------------------------- ADDR:814056F1 | NtGetNextThread -------------------------------------------------------------------------------------- ADDR:81405415 | NtGetNextProcess -------------------------------------------------------------------------------------- ADDR:814A762B | NtGetMUIRegistryInfo -------------------------------------------------------------------------------------- ADDR:813E77A5 | NtGetDevicePowerState -------------------------------------------------------------------------------------- ADDR:813F94B1 | NtGetCurrentProcessorNumber -------------------------------------------------------------------------------------- ADDR:81401AA9 | NtGetContextThread -------------------------------------------------------------------------------------- ADDR:8133AADF | NtFsControlFile -------------------------------------------------------------------------------------- ADDR:81450927 | NtFreezeTransactions -------------------------------------------------------------------------------------- ADDR:812759C7 | NtFreezeRegistry -------------------------------------------------------------------------------------- ADDR:81183B1E | NtFreeVirtualMemory -------------------------------------------------------------------------------------- ADDR:813BA385 | NtFreeUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:813BAD6B | NtFlushWriteBuffer -------------------------------------------------------------------------------------- ADDR:813B188F | NtFlushVirtualMemory -------------------------------------------------------------------------------------- ADDR:8114833B | NtFlushProcessWriteBuffers -------------------------------------------------------------------------------------- ADDR:812E7A8B | NtFlushKey -------------------------------------------------------------------------------------- ADDR:81326012 | FsRtlSyncVolumes -------------------------------------------------------------------------------------- ADDR:814A79B3 | NtFlushInstallUILanguage -------------------------------------------------------------------------------------- ADDR:813373F5 | NtFlushBuffersFile -------------------------------------------------------------------------------------- ADDR:81337417 | NtFlushBuffersFileEx -------------------------------------------------------------------------------------- ADDR:81497FC5 | NtFindAtom -------------------------------------------------------------------------------------- ADDR:8142DFC3 | NtFilterToken -------------------------------------------------------------------------------------- ADDR:8142DFAF | NtFilterTokenEx -------------------------------------------------------------------------------------- ADDR:813B0E2B | NtExtendSection -------------------------------------------------------------------------------------- ADDR:812E7720 | NtEnumerateValueKey -------------------------------------------------------------------------------------- ADDR:81450373 | NtEnumerateTransactionObject -------------------------------------------------------------------------------------- ADDR:81498F65 | NtEnumerateSystemEnvironmentValuesEx -------------------------------------------------------------------------------------- ADDR:812E7403 | NtEnumerateKey -------------------------------------------------------------------------------------- ADDR:8149A656 | NtEnumerateDriverEntries -------------------------------------------------------------------------------------- ADDR:81499392 | NtEnumerateBootEntries -------------------------------------------------------------------------------------- ADDR:814D7C69 | NtEnableLastKnownGood -------------------------------------------------------------------------------------- ADDR:8142D467 | NtDuplicateToken -------------------------------------------------------------------------------------- ADDR:813C3F77 | NtDuplicateObject -------------------------------------------------------------------------------------- ADDR:811FE9A4 | NtDrawText -------------------------------------------------------------------------------------- ADDR:81488607 | NtDisplayString -------------------------------------------------------------------------------------- ADDR:814D7B71 | NtDisableLastKnownGood -------------------------------------------------------------------------------------- ADDR:8133AAA4 | NtDeviceIoControlFile -------------------------------------------------------------------------------------- ADDR:8149450B | NtDeleteWnfStateName -------------------------------------------------------------------------------------- ADDR:8149487F | NtDeleteWnfStateData -------------------------------------------------------------------------------------- ADDR:812E6FF7 | NtDeleteValueKey -------------------------------------------------------------------------------------- ADDR:813CD973 | NtDeletePrivateNamespace -------------------------------------------------------------------------------------- ADDR:8143D3B6 | NtDeleteObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:812E6C09 | NtDeleteKey -------------------------------------------------------------------------------------- ADDR:813372EC | NtDeleteFile -------------------------------------------------------------------------------------- ADDR:8149A44F | NtDeleteDriverEntry -------------------------------------------------------------------------------------- ADDR:8149918B | NtDeleteBootEntry -------------------------------------------------------------------------------------- ADDR:8149814F | NtDeleteAtom -------------------------------------------------------------------------------------- ADDR:814A7AE7 | NtDelayExecution -------------------------------------------------------------------------------------- ADDR:8131FEE7 | NtDebugContinue -------------------------------------------------------------------------------------- ADDR:8131F58D | NtDebugActiveProcess -------------------------------------------------------------------------------------- ADDR:8149F177 | NtCreateWorkerFactory -------------------------------------------------------------------------------------- ADDR:814941C0 | NtCreateWnfStateName -------------------------------------------------------------------------------------- ADDR:813368A7 | NtCreateWaitCompletionPacket -------------------------------------------------------------------------------------- ADDR:8138CED3 | NtCreateWaitablePort -------------------------------------------------------------------------------------- ADDR:813FB5F6 | NtCreateUserProcess -------------------------------------------------------------------------------------- ADDR:81451469 | NtCreateTransactionManager -------------------------------------------------------------------------------------- ADDR:8144F85F | NtCreateTransaction -------------------------------------------------------------------------------------- ADDR:8143FFD9 | NtCreateToken -------------------------------------------------------------------------------------- ADDR:81440653 | NtCreateLowBoxToken -------------------------------------------------------------------------------------- ADDR:8144001E | NtCreateTokenEx -------------------------------------------------------------------------------------- ADDR:814A50E2 | NtCreateTimer -------------------------------------------------------------------------------------- ADDR:813FD688 | NtCreateThreadEx -------------------------------------------------------------------------------------- ADDR:81400CBE | NtCreateThread -------------------------------------------------------------------------------------- ADDR:813BE693 | NtCreateSymbolicLinkObject -------------------------------------------------------------------------------------- ADDR:81496F73 | NtCreateSemaphore -------------------------------------------------------------------------------------- ADDR:813A787B | NtCreateSection -------------------------------------------------------------------------------------- ADDR:81450A7B | NtCreateResourceManager -------------------------------------------------------------------------------------- ADDR:814A4B6E | NtCreateProfileEx -------------------------------------------------------------------------------------- ADDR:814A4BA7 | NtCreateProfile -------------------------------------------------------------------------------------- ADDR:814013EB | NtCreateProcessEx -------------------------------------------------------------------------------------- ADDR:814013A0 | NtCreateProcess -------------------------------------------------------------------------------------- ADDR:813CD3C2 | NtCreatePrivateNamespace -------------------------------------------------------------------------------------- ADDR:8138CE63 | NtCreatePort -------------------------------------------------------------------------------------- ADDR:813B5A7E | NtCreatePagingFile -------------------------------------------------------------------------------------- ADDR:8133A8E6 | NtCreateNamedPipeFile -------------------------------------------------------------------------------------- ADDR:814A549B | NtCreateMutant -------------------------------------------------------------------------------------- ADDR:8133A9D2 | NtCreateMailslotFile -------------------------------------------------------------------------------------- ADDR:812E6701 | NtCreateKeyTransacted -------------------------------------------------------------------------------------- ADDR:814A3841 | NtCreateKeyedEvent -------------------------------------------------------------------------------------- ADDR:812E66D1 | NtCreateKey -------------------------------------------------------------------------------------- ADDR:81407331 | NtCreateJobSet -------------------------------------------------------------------------------------- ADDR:814070CD | NtCreateJobObject -------------------------------------------------------------------------------------- ADDR:813360AB | NtCreateIoCompletion -------------------------------------------------------------------------------------- ADDR:8133A8A3 | NtCreateFile -------------------------------------------------------------------------------------- ADDR:814A33F7 | NtCreateEventPair -------------------------------------------------------------------------------------- ADDR:81493B03 | NtCreateEvent -------------------------------------------------------------------------------------- ADDR:8144E782 | NtCreateEnlistment -------------------------------------------------------------------------------------- ADDR:813C1C80 | NtCreateDirectoryObjectEx -------------------------------------------------------------------------------------- ADDR:813C1C5B | NtCreateDirectoryObject -------------------------------------------------------------------------------------- ADDR:8131E319 | NtCreateDebugObject -------------------------------------------------------------------------------------- ADDR:812328F4 | NtContinue -------------------------------------------------------------------------------------- ADDR:8138D6F6 | NtConnectPort -------------------------------------------------------------------------------------- ADDR:812ED521 | NtCompressKey -------------------------------------------------------------------------------------- ADDR:814B40E6 | AhcpCdbEntryComputeChecksum -------------------------------------------------------------------------------------- ADDR:814414CB | NtCompareTokens -------------------------------------------------------------------------------------- ADDR:812ED2E7 | NtCompactKeys -------------------------------------------------------------------------------------- ADDR:814505A3 | NtCommitTransaction -------------------------------------------------------------------------------------- ADDR:8144F20D | NtCommitEnlistment -------------------------------------------------------------------------------------- ADDR:8144F539 | NtCommitComplete -------------------------------------------------------------------------------------- ADDR:8143D2E7 | NtCloseObjectAuditAlarm -------------------------------------------------------------------------------------- ADDR:813C021C | NtClose -------------------------------------------------------------------------------------- ADDR:81493AB0 | NtClearEvent -------------------------------------------------------------------------------------- ADDR:81153CCA | NtCancelWaitCompletionPacket -------------------------------------------------------------------------------------- ADDR:81206633 | NtCancelTimer -------------------------------------------------------------------------------------- ADDR:813371E9 | NtCancelSynchronousIoFile -------------------------------------------------------------------------------------- ADDR:81337066 | NtCancelIoFileEx -------------------------------------------------------------------------------------- ADDR:81336E77 | NtCancelIoFile -------------------------------------------------------------------------------------- ADDR:8121D8C0 | NtCallbackReturn -------------------------------------------------------------------------------------- ADDR:8115F46C | NtAssociateWaitCompletionPacket -------------------------------------------------------------------------------------- ADDR:81406FF6 | NtAssignProcessToJobObject -------------------------------------------------------------------------------------- ADDR:813A1BC7 | NtAreMappedFilesTheSame -------------------------------------------------------------------------------------- ADDR:814B0373 | NtApphelpCacheControl -------------------------------------------------------------------------------------- ADDR:8138E7F4 | NtAlpcSetInformation -------------------------------------------------------------------------------------- ADDR:813951AD | NtAlpcSendWaitReceivePort -------------------------------------------------------------------------------------- ADDR:81396997 | NtAlpcRevokeSecurityContext -------------------------------------------------------------------------------------- ADDR:81395FE8 | NtAlpcQueryInformationMessage -------------------------------------------------------------------------------------- ADDR:8138F260 | NtAlpcQueryInformation -------------------------------------------------------------------------------------- ADDR:8138F89B | NtAlpcOpenSenderThread -------------------------------------------------------------------------------------- ADDR:8138F3C1 | NtAlpcOpenSenderProcess -------------------------------------------------------------------------------------- ADDR:81396D53 | NtAlpcImpersonateClientOfPort -------------------------------------------------------------------------------------- ADDR:81398BEF | NtAlpcDisconnectPort -------------------------------------------------------------------------------------- ADDR:81396ABA | NtAlpcDeleteSecurityContext -------------------------------------------------------------------------------------- ADDR:8139B444 | NtAlpcDeleteSectionView -------------------------------------------------------------------------------------- ADDR:8139C9B3 | NtAlpcDeleteResourceReserve -------------------------------------------------------------------------------------- ADDR:8139B121 | NtAlpcDeletePortSection -------------------------------------------------------------------------------------- ADDR:81396567 | NtAlpcCreateSecurityContext -------------------------------------------------------------------------------------- ADDR:8139B21C | NtAlpcCreateSectionView -------------------------------------------------------------------------------------- ADDR:8139C87B | NtAlpcCreateResourceReserve -------------------------------------------------------------------------------------- ADDR:8139ACE6 | NtAlpcCreatePortSection -------------------------------------------------------------------------------------- ADDR:8139CF44 | NtAlpcCreatePort -------------------------------------------------------------------------------------- ADDR:8139DBA4 | NtAlpcConnectPort -------------------------------------------------------------------------------------- ADDR:8139DB67 | NtAlpcConnectPortEx -------------------------------------------------------------------------------------- ADDR:81395304 | NtAlpcCancelMessage -------------------------------------------------------------------------------------- ADDR:8139E705 | NtAlpcAcceptConnectPort -------------------------------------------------------------------------------------- ADDR:813A5DE0 | NtAllocateVirtualMemory -------------------------------------------------------------------------------------- ADDR:81497987 | NtAllocateUuids -------------------------------------------------------------------------------------- ADDR:813B9DF6 | NtAllocateUserPhysicalPages -------------------------------------------------------------------------------------- ADDR:813F94EC | NtAllocateReserveObject -------------------------------------------------------------------------------------- ADDR:814982F1 | NtAllocateLocallyUniqueId -------------------------------------------------------------------------------------- ADDR:81406F9F | NtAlertThreadByThreadId -------------------------------------------------------------------------------------- ADDR:81404BA7 | NtAlertThread -------------------------------------------------------------------------------------- ADDR:81404C0B | NtAlertResumeThread -------------------------------------------------------------------------------------- ADDR:8142C658 | NtAdjustPrivilegesToken -------------------------------------------------------------------------------------- ADDR:8142CA44 | NtAdjustGroupsToken -------------------------------------------------------------------------------------- ADDR:8142CE79 | NtAdjustTokenClaimsAndDeviceGroups -------------------------------------------------------------------------------------- ADDR:8149A41B | NtAddDriverEntry -------------------------------------------------------------------------------------- ADDR:8149915A | NtAddBootEntry -------------------------------------------------------------------------------------- ADDR:81497E0E | NtAddAtom -------------------------------------------------------------------------------------- ADDR:81497E31 | NtAddAtomEx -------------------------------------------------------------------------------------- ADDR:8143CDB8 | NtAccessCheckByTypeResultListAndAuditAlarmByHandle -------------------------------------------------------------------------------------- ADDR:8143CD6F | NtAccessCheckByTypeResultListAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:811D749E | NtAccessCheckByTypeResultList -------------------------------------------------------------------------------------- ADDR:8143CD26 | NtAccessCheckByTypeAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:811D7463 | NtAccessCheckByType -------------------------------------------------------------------------------------- ADDR:8143CCE7 | NtAccessCheckAndAuditAlarm -------------------------------------------------------------------------------------- ADDR:811D742C | NtAccessCheck -------------------------------------------------------------------------------------- ADDR:8138D729 | NtAcceptConnectPort --------------------------------------------------------------------------------------