N |
Windows 2003 |
Стек |
Windows XP |
Стек |
Windows Vista |
Стек |
0 |
NtAcceptConnectPort | 18 |
NtAcceptConnectPort | 18 |
NtAcceptConnectPort | 18 |
1 |
NtAccessCheck | 20 |
NtAccessCheck | 20 |
NtAccessCheck | 20 |
2 |
NtAccessCheckAndAuditAlarm | 2C |
NtAccessCheckAndAuditAlarm | 2C |
NtAccessCheckAndAuditAlarm | 2C |
3 |
NtAccessCheckByType | 2C |
NtAccessCheckByType | 2C |
NtAccessCheckByType | 2C |
4 |
NtAccessCheckByTypeAndAuditAlarm | 40 |
NtAccessCheckByTypeAndAuditAlarm | 40 |
NtAccessCheckByTypeAndAuditAlarm | 40 |
5 |
NtAccessCheckByTypeResultList | 2C |
NtAccessCheckByTypeResultList | 2C |
NtAccessCheckByTypeResultList | 2C |
6 |
NtAccessCheckByTypeResultListAndAuditAlarm | 40 |
NtAccessCheckByTypeResultListAndAuditAlarm | 40 |
NtAccessCheckByTypeResultListAndAuditAlarm | 40 |
7 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle | 44 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle | 44 |
NtAccessCheckByTypeResultListAndAuditAlarmByHandle | 44 |
8 |
NtAddAtom | 0C |
NtAddAtom | 0C |
NtAddAtom | 0C |
9 |
NtAddBootEntry | 08 |
NtAddBootEntry | 08 |
NtAddBootEntry | 08 |
A |
NtAddDriverEntry | 08 |
NtAdjustGroupsToken | 18 |
NtAddDriverEntry | 08 |
B |
NtAdjustGroupsToken | 18 |
NtAdjustPrivilegesToken | 18 |
NtAdjustGroupsToken | 18 |
C |
NtAdjustPrivilegesToken | 18 |
NtAlertResumeThread | 08 |
NtAdjustPrivilegesToken | 18 |
D |
NtAlertResumeThread | 08 |
NtAlertThread | 04 |
NtAlertResumeThread | 08 |
E |
NtAlertThread | 04 |
NtAllocateLocallyUniqueId | 04 |
NtAlertThread | 04 |
F |
NtAllocateLocallyUniqueId | 04 |
NtAllocateUserPhysicalPages | 0C |
NtAllocateLocallyUniqueId | 04 |
10 |
NtAllocateUserPhysicalPages | 0C |
NtAllocateUuids | 10 |
NtAllocateUserPhysicalPages | 0C |
11 |
NtAllocateUuids | 10 |
NtAllocateVirtualMemory | 18 |
NtAllocateUuids | 10 |
12 |
NtAllocateVirtualMemory | 18 |
NtAreMappedFilesTheSame | 08 |
NtAllocateVirtualMemory | 18 |
13 |
NtApphelpCacheControl | 08 |
NtAssignProcessToJobObject | 08 |
NtAlpcAcceptConnectPortt | 24 |
14 |
NtAreMappedFilesTheSame | 08 |
NtCallbackReturn | 0C |
NtAlpcCancelMessage | 0C |
15 |
NtAssignProcessToJobObject | 08 |
NtCancelDeviceWakeupRequest | 04 |
NtAlpcConnectPort | 2C |
16 |
NtCallbackReturn | 0C |
NtCancelIoFile | 08 |
NtAlpcCreatePort | 0C |
17 |
NtCancelDeviceWakeupRequest | 04 |
NtCancelTimer | 08 |
NtAlpcCreatePortSection | 18 |
18 |
NtCancelIoFile | 08 |
NtClearEvent | 04 |
NtAlpcCreateResourceReserve | 10 |
19 |
NtCancelTimer | 08 |
NtClose | 04 |
NtAlpcCreateSectionView | 0C |
1A |
NtClearEvent | 04 |
NtCloseObjectAuditAlarm | 0C |
NtAlpcCreateSecurityContext | 0C |
1B |
NtClose | 04 |
NtCompactKeys | 08 |
NtAlpcDeletePortSection | 0C |
1C |
NtCloseObjectAuditAlarm | 0C |
NtCompareTokens | 0C |
NtAlpcDeleteResourceReserve | 0C |
1D |
NtCompactKeys | 08 |
NtCompleteConnectPort | 04 |
NtAlpcDeleteSectionView | 0C |
1E |
NtCompareTokens | 0C |
NtCompressKey | 04 |
NtAlpcDeleteSecurityContext | 0C |
1F |
NtCompleteConnectPort | 04 |
NtConnectPort | 20 |
NtAlpcDisconnectPort | 08 |
20 |
NtCompressKey | 04 |
NtContinue | 08 |
NtAlpcImpersonateClientOfPort | 0C |
21 |
NtConnectPort | 20 |
NtCreateDebugObject | 10 |
NtAlpcOpenSenderProcess | 18 |
22 |
NtContinue | 08 |
NtCreateDirectoryObject | 0C |
NtAlpcOpenSenderThread | 18 |
23 |
NtCreateDebugObject | 10 |
NtCreateEvent | 14 |
NtAlpcQueryInformation | 14 |
24 |
NtCreateDirectoryObject | 0C |
NtCreateEventPair | 0C |
NtAlpcQueryInformationMessage | 18 |
25 |
NtCreateEvent | 14 |
NtCreateFile | 2C |
NtAlpcRevokeSecurityContext | 0C |
26 |
NtCreateEventPair | 0C |
NtCreateIoCompletion | 10 |
NtAlpcSendWaitReceivePort | 20 |
27 |
NtCreateFile | 2C |
NtCreateJobObject | 0C |
NtAlpcSetInformation | 10 |
28 |
NtCreateIoCompletion | 10 |
NtCreateJobSet | 0C |
NtApphelpCacheControl | 08 |
29 |
NtCreateJobObject | 0C |
NtCreateKey | 1C |
NtAreMappedFilesTheSame | 08 |
2A |
NtCreateJobSet | 0C |
NtCreateMailslotFile | 20 |
NtAssignProcessToJobObject | 08 |
2B |
NtCreateKey | 1C |
NtCreateMutant | 10 |
NtCallbackReturn | 0C |
2C |
NtCreateMailslotFile | 20 |
NtCreateNamedPipeFile | 38 |
NtCancelDeviceWakeupRequest | 04 |
2D |
NtCreateMutant | 10 |
NtCreatePagingFile | 10 |
NtCancelIoFile | 08 |
2E |
NtCreateNamedPipeFile | 38 |
NtCreatePort | 14 |
NtCancelTimer | 08 |
2F |
NtCreatePagingFile | 10 |
NtCreateProcess | 20 |
NtClearEvent | 04 |
30 |
NtCreatePort | 14 |
NtCreateProcessEx | 24 |
NtClose | 04 |
31 |
NtCreateProcess | 20 |
NtCreateProfile | 24 |
NtCloseObjectAuditAlarm | 0C |
32 |
NtCreateProcessEx | 24 |
NtCreateSection | 1C |
NtCompactKeys | 08 |
33 |
NtCreateProfile | 24 |
NtCreateSemaphore | 14 |
NtCompareTokens | 12 |
34 |
NtCreateSection | 1C |
NtCreateSymbolicLinkObject | 10 |
NtCompleteConnectPort | 04 |
35 |
NtCreateSemaphore | 14 |
NtCreateThread | 20 |
NtCompressKey | 04 |
36 |
NtCreateSymbolicLinkObject | 10 |
NtCreateTimer | 10 |
NtConnectPort | 20 |
37 |
NtCreateThread | 20 |
NtCreateToken | 34 |
NtContinue | 08 |
38 |
NtCreateTimer | 10 |
NtCreateWaitablePort | 14 |
NtCreateDebugObject | 10 |
39 |
NtCreateToken | 34 |
NtDebugActiveProcess | 08 |
NtCreateDirectoryObject | 0C |
3A |
NtCreateWaitablePort | 14 |
NtDebugContinue | 0C |
NtCreateEvent | 14 |
3B |
NtDebugActiveProcess | 08 |
NtDelayExecution | 08 |
NtCreateEventPair | 0C |
3C |
NtDebugContinue | 0C |
NtDeleteAtom | 04 |
NtCreateFile | 2C |
3D |
NtDelayExecution | 08 |
NtDeleteBootEntry | 04 |
NtCreateIoCompletion | 10 |
3E |
NtDeleteAtom | 04 |
NtDeleteFile | 04 |
NtCreateJobObject | 0C |
3F |
NtDeleteBootEntry | 04 |
NtDeleteKey | 04 |
NtCreateJobSet | 0C |
40 |
NtDeleteDriverEntry | 04 |
NtDeleteObjectAuditAlarm | 0C |
NtCreateKey | 1C |
41 |
NtDeleteFile | 04 |
NtDeleteValueKey | 08 |
NtCreateKeyTransacted | 20 |
42 |
NtDeleteKey | 04 |
NtDeviceIoControlFile | 28 |
NtCreateMailslotFile | 20 |
43 |
NtDeleteObjectAuditAlarm | 0C |
NtDisplayString | 04 |
NtCreateMutant | 10 |
44 |
NtDeleteValueKey | 08 |
NtDuplicateObject | 1C |
NtCreateNamedPipeFile | 38 |
45 |
NtDeviceIoControlFile | 28 |
NtDuplicateToken | 18 |
NtCreatePrivateNamespace | 10 |
46 |
NtDisplayString | 04 |
NtEnumerateBootEntries | 08 |
NtCreatePagingFile | 10 |
47 |
NtDuplicateObject | 1C |
NtEnumerateKey | 18 |
NtCreatePort | 14 |
48 |
NtDuplicateToken | 18 |
NtEnumerateSystemEnvironmentValuesEx | 0C |
NtCreateProcess | 20 |
49 |
NtEnumerateBootEntries | 08 |
NtEnumerateValueKey | 18 |
NtCreateProcessEx | 24 |
4A |
NtEnumerateDriverEntries | 08 |
NtExtendSection | 08 |
NtCreateProfile | 24 |
4B |
NtEnumerateKey | 18 |
NtFilterToken | 18 |
NtCreateSection | 1C |
4C |
NtEnumerateSystemEnvironmentValuesEx | 0C |
NtFindAtom | 0C |
NtCreateSemaphore | 14 |
4D |
NtEnumerateValueKey | 18 |
NtFlushBuffersFile | 08 |
NtCreateSymbolicLinkObject | 10 |
4E |
NtExtendSection | 08 |
NtFlushInstructionCache | 0C |
NtCreateThread | 20 |
4F |
NtFilterToken | 18 |
NtFlushKey | 04 |
NtCreateTimer | 10 |
50 |
NtFindAtom | 0C |
NtFlushVirtualMemory | 10 |
NtCreateToken | 34 |
51 |
NtFlushBuffersFile | 08 |
NtFlushWriteBuffer | 00 |
||
52 |
NtFlushInstructionCache | 12 |
NtFreeUserPhysicalPages | 0C |
||
53 |
NtFlushKey | 04 |
NtFreeVirtualMemory | 10 |
||
54 |
NtFlushVirtualMemory | 10 |
NtFsControlFile | 28 |
||
55 |
NtFlushWriteBuffer | 00 |
NtGetContextThread | 08 |
||
56 |
NtFreeUserPhysicalPages | 0C |
NtGetDevicePowerState | 08 |
||
57 |
NtFreeVirtualMemory | 10 |
NtGetPlugPlayEvent | 10 |
||
58 |
NtFsControlFile | 28 |
NtGetWriteWatch | 1C |
||
59 |
NtGetContextThread | 08 |
NtImpersonateAnonymousToken | 04 |
||
5A |
NtGetDevicePowerState | 08 |
NtImpersonateClientOfPort | 08 |
||
5B |
NtGetPlugPlayEvent | 10 |
NtImpersonateThread | 0C |
||
5C |
NtGetWriteWatch | 1C |
NtInitializeRegistry | 04 |
||
5D |
NtImpersonateAnonymousToken | 04 |
NtInitiatePowerAction | 10 |
||
5E |
NtImpersonateClientOfPort | 08 |
NtIsProcessInJob | 08 |
||
5F |
NtImpersonateThread | 0C |
NtIsSystemResumeAutomatic | 00 |
||
60 |
NtInitializeRegistry | 04 |
NtListenPort | 08 |
||
61 |
NtInitiatePowerAction | 10 |
NtLoadDriver | 04 |
||
62 |
NtIsProcessInJob | 08 |
NtLoadKey2 | 08 |
||
63 |
NtIsSystemResumeAutomatic | 00 |
NtLoadKey | 0C |
||
64 |
NtListenPort | 08 |
NtLockFile | 28 |
||
65 |
NtLoadDriver | 04 |
NtLockProductActivationKeys | 08 |
||
66 |
NtLoadKey2 | 08 |
NtLockRegistryKey | 04 |
||
67 |
NtLoadKey | 0C |
NtLockVirtualMemory | 10 |
||
68 |
NtLoadKeyEx | 10 |
NtMakePermanentObject | 04 |
||
69 |
NtLockFile | 28 |
NtMakeTemporaryObject | 04 |
||
6A |
NtLockProductActivationKeys | 08 |
NtMapUserPhysicalPages | 0C |
||
6B |
NtLockRegistryKey | 04 |
NtMapUserPhysicalPagesScatter | 0C |
||
6C |
NtLockVirtualMemory | 10 |
NtMapViewOfSection | 28 |
||
6D |
NtMakePermanentObject | 04 |
NtModifyBootEntry | 04 |
||
6E |
NtMakeTemporaryObject | 04 |
NtNotifyChangeDirectoryFile | 24 |
||
6F |
NtMapUserPhysicalPages | 0C |
NtNotifyChangeKey | 28 |
||
70 |
NtMapUserPhysicalPagesScatter | 0C |
NtNotifyChangeMultipleKeys | 30 |
||
71 |
NtMapViewOfSection | 28 |
NtOpenDirectoryObject | 0C |
||
72 |
NtModifyBootEntry | 04 |
NtOpenEvent | 0C |
||
73 |
NtModifyDriverEntry | 04 |
NtOpenEventPair | 0C |
||
74 |
NtNotifyChangeDirectoryFile | 24 |
NtOpenFile | 18 |
||
75 |
NtNotifyChangeKey | 28 |
NtOpenIoCompletion | 0C |
||
76 |
NtNotifyChangeMultipleKeys | 30 |
NtOpenJobObject | 0C |
||
77 |
NtOpenDirectoryObject | 0C |
NtOpenKey | 0C |
||
78 |
NtOpenEvent | 0C |
NtOpenMutant | 0C |
||
79 |
NtOpenEventPair | 0C |
NtOpenObjectAuditAlarm | 30 |
||
7A |
NtOpenFile | 18 |
NtOpenProcess | 10 |
||
7B |
NtOpenIoCompletion | 0C |
NtOpenProcessToken | 0C |
||
7C |
NtOpenJobObject | 0C |
NtOpenProcessTokenEx | 10 |
||
7D |
NtOpenKey | 0C |
NtOpenSection | 0C |
||
7E |
NtOpenMutant | 0C |
NtOpenSemaphore | 0C |
||
7F |
NtOpenObjectAuditAlarm | 30 |
NtOpenSymbolicLinkObject | 0C |
||
80 |
NtOpenProcess | 10 |
NtOpenThread | 10 |
||
81 |
NtOpenProcessToken | 0C |
NtOpenThreadToken | 10 |
||
82 |
NtOpenProcessTokenEx | 10 |
NtOpenThreadTokenEx | 14 |
||
83 |
NtOpenSection | 0C |
NtOpenTimer | 0C |
||
84 |
NtOpenSemaphore | 0C |
NtPlugPlayControl | 0C |
||
85 |
NtOpenSymbolicLinkObject | 0C |
NtPowerInformation | 14 |
||
86 |
NtOpenThread | 10 |
NtPrivilegeCheck | 0C |
||
87 |
NtOpenThreadToken | 10 |
NtPrivilegeObjectAuditAlarm | 18 |
||
88 |
NtOpenThreadTokenEx | 14 |
NtPrivilegedServiceAuditAlarm | 14 |
||
89 |
NtOpenTimer | 0C |
NtProtectVirtualMemory | 14 |
||
8A |
NtPlugPlayControl | 0C |
NtPulseEvent | 08 |
||
8B |
NtPowerInformation | 14 |
NtQueryAttributesFile | 08 |
||
8C |
NtPrivilegeCheck | 0C |
NtQueryBootEntryOrder | 08 |
||
8D |
NtPrivilegeObjectAuditAlarm | 18 |
NtQueryBootOptions | 08 |
||
8E |
NtPrivilegedServiceAuditAlarm | 14 |
NtQueryDebugFilterState | 08 |
||
8F |
NtProtectVirtualMemory | 14 |
NtQueryDefaultLocale | 08 |
||
90 |
NtPulseEvent | 08 |
NtQueryDefaultUILanguage | 04 |
||
91 |
NtQueryAttributesFile | 08 |
NtQueryDirectoryFile | 2C |
||
92 |
NtQueryBootEntryOrder | 08 |
NtQueryDirectoryObject | 1C |
||
93 |
NtQueryBootOptions | 08 |
NtQueryEaFile | 24 |
||
94 |
NtQueryDebugFilterState | 08 |
NtQueryEvent | 14 |
||
95 |
NtQueryDefaultLocale | 08 |
NtQueryFullAttributesFile | 08 |
||
96 |
NtQueryDefaultUILanguage | 04 |
NtQueryInformationAtom | 14 |
||
97 |
NtQueryDirectoryFile | 2C |
NtQueryInformationFile | 14 |
||
98 |
NtQueryDirectoryObject | 1C |
NtQueryInformationJobObject | 14 |
||
99 |
NtQueryDriverEntryOrder | 08 |
NtQueryInformationPort | 14 |
||
9A |
NtQueryEaFile | 24 |
NtQueryInformationProcess | 14 |
||
9B |
NtQueryEvent | 14 |
NtQueryInformationThread | 14 |
||
9C |
NtQueryFullAttributesFile | 08 |
NtQueryInformationToken | 14 |
||
9D |
NtQueryInformationAtom | 14 |
NtQueryInstallUILanguage | 04 |
||
9E |
NtQueryInformationFile | 14 |
NtQueryIntervalProfile | 08 |
||
9F |
NtQueryInformationJobObject | 14 |
NtQueryIoCompletion | 14 |
||
A0 |
NtQueryInformationPort | 14 |
NtQueryKey | 14 |
||
A1 |
NtQueryInformationProcess | 14 |
NtQueryMultipleValueKey | 18 |
||
A2 |
NtQueryInformationThread | 14 |
NtQueryMutant | 14 |
||
A3 |
NtQueryInformationToken | 14 |
NtQueryObject | 14 |
||
A4 |
NtQueryInstallUILanguage | 04 |
NtQueryOpenSubKeys | 08 |
||
A5 |
NtQueryIntervalProfile | 08 |
NtQueryPerformanceCounter | 08 |
||
A6 |
NtQueryIoCompletion | 14 |
NtQueryQuotaInformationFile | 24 |
||
A7 |
NtQueryKey | 14 |
NtQuerySection | 14 |
||
A8 |
NtQueryMultipleValueKey | 18 |
NtQuerySecurityObject | 14 |
||
A9 |
NtQueryMutant | 14 |
NtQuerySemaphore | 14 |
||
AA |
NtQueryObject | 14 |
NtQuerySymbolicLinkObject | 0C |
||
AB |
NtQueryOpenSubKeys | 08 |
NtQuerySystemEnvironmentValue | 10 |
||
AC |
NtQueryOpenSubKeysEx | 10 |
NtQuerySystemEnvironmentValueEx | 14 |
||
AD |
NtQueryPerformanceCounter | 08 |
NtQuerySystemInformation | 10 |
||
AE |
NtQueryQuotaInformationFile | 24 |
NtQuerySystemTime | 04 |
||
AF |
NtQuerySection | 14 |
NtQueryTimer | 14 |
||
B0 |
NtQuerySecurityObject | 14 |
NtQueryTimerResolution | 0C |
||
B1 |
NtQuerySemaphore | 14 |
NtQueryValueKey | 18 |
||
B2 |
NtQuerySymbolicLinkObject | 0C |
NtQueryVirtualMemory | 18 |
||
B3 |
NtQuerySystemEnvironmentValue | 10 |
NtQueryVolumeInformationFile | 14 |
||
B4 |
NtQuerySystemEnvironmentValueEx | 14 |
NtQueueApcThread | 14 |
||
B5 |
NtQuerySystemInformation | 10 |
NtRaiseException | 0C |
||
B6 |
NtQuerySystemTime | 04 |
NtRaiseHardError | 18 |
||
B7 |
NtQueryTimer | 14 |
NtReadFile | 24 |
||
B8 |
NtQueryTimerResolution | 0C |
NtReadFileScatter | 24 |
||
|
B9 |
NtQueryValueKey | 18 |
NtReadRequestData | 18 |
||
BA |
NtQueryVirtualMemory | 18 |
NtReadVirtualMemory | 14 |
||
BB |
NtQueryVolumeInformationFile | 14 |
NtRegisterThreadTerminatePort | 04 |
||
BC |
NtQueueApcThread | 14 |
NtReleaseMutant | 08 |
||
BD |
NtRaiseException | 0C |
NtReleaseSemaphore | 0C |
||
BE |
NtRaiseHardError | 18 |
NtRemoveIoCompletion | 14 |
||
BF |
NtReadFile | 24 |
NtRemoveProcessDebug | 08 |
||
C0 |
NtReadFileScatter | 24 |
NtRenameKey | 08 |
||
C1 |
NtReadRequestData | 18 |
NtReplaceKey | 0C |
||
C2 |
NtReadVirtualMemory | 14 |
NtReplyPort | 08 |
||
C3 |
NtRegisterThreadTerminatePort | 04 |
NtReplyWaitReceivePort | 10 |
||
C4 |
NtReleaseMutant | 08 |
NtReplyWaitReceivePortEx | 14 |
||
C5 |
NtReleaseSemaphore | 0C |
NtReplyWaitReplyPort | 08 |
||
C6 |
NtRemoveIoCompletion | 14 |
NtRequestDeviceWakeup | 04 |
||
C7 |
NtRemoveProcessDebug | 08 |
NtRequestPort | 08 |
||
C8 |
NtRenameKey | 08 |
NtRequestWaitReplyPort | 0C |
||
C9 |
NtReplaceKey | 0C |
NtRequestWakeupLatency | 04 |
||
CA |
NtReplyPort | 08 |
NtResetEvent | 08 |
||
CB |
NtReplyWaitReceivePort | 10 |
NtResetWriteWatch | 0C |
||
CC |
NtReplyWaitReceivePortEx | 14 |
NtRestoreKey | 0C |
||
CD |
NtReplyWaitReplyPort | 08 |
NtResumeProcess | 04 |
||
CE |
NtRequestDeviceWakeup | 04 |
NtResumeThread | 08 |
||
CF |
NtRequestPort | 08 |
NtSaveKey | 08 |
||
D0 |
NtRequestWaitReplyPort | 0C |
NtSaveKeyEx | 0C |
||
D1 |
NtRequestWakeupLatency | 04 |
NtSaveMergedKeys | 0C |
||
D2 |
NtResetEvent | 08 |
NtSecureConnectPort | 24 |
||
D3 |
NtResetWriteWatch | 0C |
NtSetBootEntryOrder | 08 |
||
D4 |
NtRestoreKey | 0C |
NtSetBootOptions | 08 |
||
D5 |
NtResumeProcess | 04 |
NtSetContextThread | 08 |
||
D6 |
NtResumeThread | 08 |
NtSetDebugFilterState | 0C |
||
D7 |
NtSaveKey | 08 |
NtSetDefaultHardErrorPort | 04 |
||
D8 |
NtSaveKeyEx | 0C |
NtSetDefaultLocale | 08 |
||
D9 |
NtSaveMergedKeys | 0C |
NtSetDefaultUILanguage | 04 |
||
DA |
NtSecureConnectPort | 24 |
NtSetEaFile | 10 |
||
DB |
NtSetBootEntryOrder | 08 |
NtSetEvent | 08 |
||
DC |
NtSetBootOptions | 08 |
NtSetEventBoostPriority | 04 |
||
DD |
NtSetContextThread | 08 |
NtSetHighEventPair | 04 |
||
DE |
NtSetDebugFilterState | 0C |
NtSetHighWaitLowEventPair | 04 |
||
DF |
NtSetDefaultHardErrorPort | 04 |
NtSetInformationDebugObject | 14 |
||
E0 |
NtSetDefaultLocale | 08 |
NtSetInformationFile | 14 |
||
E1 |
NtSetDefaultUILanguage | 04 |
NtSetInformationJobObject | 10 |
||
E2 |
NtSetDriverEntryOrder | 08 |
NtSetInformationKey | 10 |
||
E3 |
NtSetEaFile | 10 |
NtSetInformationObject | 10 |
||
E4 |
NtSetEvent | 08 |
NtSetInformationProcess | 10 |
||
E5 |
NtSetEventBoostPriority | 04 |
NtSetInformationThread | 10 |
||
E6 |
NtSetHighEventPair | 04 |
NtSetInformationToken | 10 |
||
E7 |
NtSetHighWaitLowEventPair | 04 |
NtSetIntervalProfile | 08 |
||
E8 |
NtSetInformationDebugObject | 14 |
NtSetIoCompletion | 14 |
||
E9 |
NtSetInformationFile | 14 |
NtSetLdtEntries | 18 |
||
EA |
NtSetInformationJobObject | 10 |
NtSetLowEventPair | 04 |
||
EB |
NtSetInformationKey | 10 |
NtSetLowWaitHighEventPair | 04 |
||
EC |
NtSetInformationObject | 10 |
NtSetQuotaInformationFile | 10 |
||
ED |
NtSetInformationProcess | 10 |
NtSetSecurityObject | 0C |
||
EE |
NtSetInformationThread | 10 |
NtSetSystemEnvironmentValue | 08 |
||
EF |
NtSetInformationToken | 10 |
NtSetSystemEnvironmentValueEx | 14 |
||
F0 |
NtSetIntervalProfile | 08 |
NtSetSystemInformation | 0C |
||
F1 |
NtSetIoCompletion | 14 |
NtSetSystemPowerState | 0C |
||
F2 |
NtSetLdtEntries | 18 |
NtSetSystemTime | 08 |
||
F3 |
NtSetLowEventPair | 04 |
NtSetThreadExecutionState | 08 |
||
F4 |
NtSetLowWaitHighEventPair | 04 |
NtSetTimer | 1C |
||
F5 |
NtSetQuotaInformationFile | 10 |
NtSetTimerResolution | 0C |
||
F6 |
NtSetSecurityObject | 0C |
NtSetUuidSeed | 04 |
||
F7 |
NtSetSystemEnvironmentValue | 08 |
NtSetValueKey | 18 |
||
F8 |
NtSetSystemEnvironmentValueEx | 14 |
NtSetVolumeInformationFile | 14 |
||
F9 |
NtSetSystemInformation | 0C |
NtShutdownSystem | 04 |
||
FA |
NtSetSystemPowerState | 0C |
NtSignalAndWaitForSingleObject | 10 |
||
FB |
NtSetSystemTime | 08 |
NtStartProfile | 04 |
||
FC |
NtSetThreadExecutionState | 08 |
NtStopProfile | 04 |
||
FD |
NtSetTimer | 1C |
NtSuspendProcess | 04 |
||
FE |
NtSetTimerResolution | 0C |
NtSuspendThread | 08 |
||
FF |
NtSetUuidSeed | 04 |
NtSystemDebugControl | 18 |
||
100 |
NtSetValueKey | 18 |
NtTerminateJobObject | 08 |
||
101 |
NtSetVolumeInformationFile | 14 |
NtTerminateProcess | 08 |
||
102 |
NtShutdownSystem | 04 |
NtTerminateThread | 08 |
||
103 |
NtSignalAndWaitForSingleObject | 10 |
NtTestAlert | 00 |
||
104 |
NtStartProfile | 04 |
NtTraceEvent | 10 |
||
105 |
NtStopProfile | 04 |
NtTranslateFilePath | 10 |
||
106 |
NtSuspendProcess | 04 |
NtUnloadDriver | 04 |
||
107 |
NtSuspendThread | 08 |
NtUnloadKey | 04 |
||
108 |
NtSystemDebugControl | 18 |
NtUnloadKeyEx | 08 |
||
109 |
NtTerminateJobObject | 08 |
NtUnlockFile | 14 |
||
10A |
NtTerminateProcess | 08 |
NtUnlockVirtualMemory | 10 |
||
10B |
NtTerminateThread | 08 |
NtUnmapViewOfSection | 08 |
||
10C |
NtTestAlert | 00 |
NtVdmControl | 08 |
||
10D |
NtTraceEvent | 10 |
NtWaitForDebugEvent | 10 |
||
10E |
NtTranslateFilePath | 10 |
NtWaitForMultipleObjects | 14 |
||
10F |
NtUnloadDriver | 04 |
NtWaitForSingleObject | 0C |
||
110 |
NtUnloadKey2 | 04 |
NtWaitHighEventPair | 04 |
||
111 |
NtUnloadKey | 08 |
NtWaitLowEventPair | 04 |
||
112 |
NtUnloadKeyEx | 08 |
NtWriteFile | 24 |
||
113 |
NtUnlockFile | 14 |
NtWriteFileGather | 24 |
||
114 |
NtUnlockVirtualMemory | 10 |
NtWriteRequestData | 18 |
||
115 |
NtUnmapViewOfSection | 08 |
NtWriteVirtualMemory | 14 |
||
116 |
NtVdmControl | 08 |
NtYieldExecution | 00 |
||
117 |
NtWaitForDebugEvent | 10 |
NtCreateKeyedEvent | 10 |
||
118 |
NtWaitForMultipleObjects | 14 |
NtOpenKeyedEvent | 0C |
||
119 |
NtWaitForSingleObject | 0C |
NtReleaseKeyedEvent | 10 |
||
11A |
NtWaitHighEventPair | 04 |
NtWaitForKeyedEvent | 10 |
||
11B |
NtWaitLowEventPair | 04 |
NtQueryPortInformationProcess | 00 |
||
11C |
NtWriteFile | 24 |
||||
11D |
NtWriteFileGather | 24 |
||||
11E |
NtWriteRequestData | 18 |
||||
11F |
NtWriteVirtualMemory | 14 |
||||
120 |
NtYieldExecution | 00 |
||||
121 |
NtCreateKeyedEvent | 10 |
||||
122 |
NtOpenKeyedEvent | 0C |
||||
123 |
NtReleaseKeyedEvent | 10 |
||||
124 |
NtWaitForKeyedEvent | 10 |
||||
125 |
NtQueryPortInformationProcess | 00 |
||||
126 |
NtGetCurrentProcessorNumber | 00 |