#pragma once





CHAR szWinXPFunctionNameSSDT[284][100]=
{
	"NtAcceptConnectPort"		
	,"NtAccessCheck"	
	,"NtAccessCheckAndAuditAlarm"		
	,"NtAccessCheckByType"		
	,"NtAccessCheckByTypeAndAuditAlarm"	
	,"NtAccessCheckByTypeResultList"		
	,"NtAccessCheckByTypeResultListAndAuditAlarm"	
	,"NtAccessCheckByTypeResultListAndAuditAlarmByHandle"		
	,"NtAddAtom"		
	,"NtAddBootEntry"	
	,"NtAdjustGroupsToken"		
	,"NtAdjustPrivilegesToken"		
	,"NtAlertResumeThread"		
	,"NtAlertThread"		
	,"NtAllocateLocallyUniqueId"	
	,"NtAllocateUserPhysicalPages"		
	,"NtAllocateUuids"		
	,"NtAllocateVirtualMemory"		
	,"NtAreMappedFilesTheSame"		
	,"NtAssignProcessToJobObject"		
	,"NtCallbackReturn"		
	,"NtCancelDeviceWakeupRequest"		
	,"NtCancelIoFile"		
	,"NtCancelTimer"		
	,"NtClearEvent"		
	,"NtClose"		
	,"NtCloseObjectAuditAlarm"		
	,"NtCompactKeys"		
	,"NtCompareTokens"		
	,"NtCompleteConnectPort"		
	,"NtCompressKey"		
	,"NtConnectPort"		
	,"NtContinue"		
	,"NtCreateDebugObject"		
	,"NtCreateDirectoryObject"		
	,"NtCreateEvent"		
	,"NtCreateEventPair"		
	,"NtCreateFile"		
	,"NtCreateIoCompletion"		
	,"NtCreateJobObject"		
	,"NtCreateJobSet"		
	,"NtCreateKey"		
	,"NtCreateMailslotFile"		
	,"NtCreateMutant"		
	,"NtCreateNamedPipeFile"		
	,"NtCreatePagingFile"		
	,"NtCreatePort"		
	,"NtCreateProcess"	
	,"NtCreateProcessEx"		
	,"NtCreateProfile"		
	,"NtCreateSection"		
	,"NtCreateSemaphore"		
	,"NtCreateSymbolicLinkObject"	
	,"NtCreateThread"		
	,"NtCreateTimer"		
	,"NtCreateToken"		
	,"NtCreateWaitablePort"		
	,"NtDebugActiveProcess"		
	,"NtDebugContinue"		
	,"NtDelayExecution"	
	,"NtDeleteAtom"		
	,"NtDeleteBootEntry"	
	,"NtDeleteFile"		
	,"NtDeleteKey"		
	,"NtDeleteObjectAuditAlarm"	
	,"NtDeleteValueKey"		
	,"NtDeviceIoControlFile"		
	,"NtDisplayString"	
	,"NtDuplicateObject"		
	,"NtDuplicateToken"		
	,"NtEnumerateBootEntries"		
	,"NtEnumerateKey"		
	,"NtEnumerateSystemEnvironmentValuesEx"	
	,"NtEnumerateValueKey"		
	,"NtExtendSection"		
	,"NtFilterToken"		
	,"NtFindAtom"		
	,"NtFlushBuffersFile"		
	,"NtFlushInstructionCache"		
	,"NtFlushKey"		
	,"NtFlushVirtualMemory"		
	,"NtFlushWriteBuffer"		
	,"NtFreeUserPhysicalPages"		
	,"NtFreeVirtualMemory"		
	,"NtFsControlFile"		
	,"NtGetContextThread"		
	,"NtGetDevicePowerState"		
	,"NtGetPlugPlayEvent"		
	,"NtGetWriteWatch"		
	,"NtImpersonateAnonymousToken"	
	,"NtImpersonateClientOfPort"	
	,"NtImpersonateThread"		
	,"NtInitializeRegistry"		
	,"NtInitiatePowerAction"		
	,"NtIsProcessInJob"		
	,"NtIsSystemResumeAutomatic"		
	,"NtListenPort"		
	,"NtLoadDriver"		
	,"NtLoadKey"		
	,"NtLoadKey2"		
	,"NtLockFile"		
	,"NtLockProductActivationKeys"	
	,"NtLockRegistryKey"		
	,"NtLockVirtualMemory"		
	,"NtMakePermanentObject"	
	,"NtMakeTemporaryObject"	
	,"NtMapUserPhysicalPages"		
	,"NtMapUserPhysicalPagesScatter"	
	,"NtMapViewOfSection"		
	,"NtModifyBootEntry"		
	,"NtNotifyChangeDirectoryFile"		
	,"NtNotifyChangeKey"		
	,"NtNotifyChangeMultipleKeys"	
	,"NtOpenDirectoryObject"		
	,"NtOpenEvent"		
	,"NtOpenEventPair"		
	,"NtOpenFile"		
	,"NtOpenIoCompletion"		
	,"NtOpenJobObject"		
	,"NtOpenKey"		
	,"NtOpenMutant"		
	,"NtOpenObjectAuditAlarm"		
	,"NtOpenProcess"		
	,"NtOpenProcessToken"		
	,"NtOpenProcessTokenEx"		
	,"NtOpenSection"		
	,"NtOpenSemaphore"		
	,"NtOpenSymbolicLinkObject"		
	,"NtOpenThread"		
	,"NtOpenThreadToken"	
	,"NtOpenThreadTokenEx"		
	,"NtOpenTimer"		
	,"NtPlugPlayControl"	
	,"NtPowerInformation"	
	,"NtPrivilegeCheck"	
	,"NtPrivilegeObjectAuditAlarm"	
	,"NtPrivilegedServiceAuditAlarm"		
	,"NtProtectVirtualMemory"		
	,"NtPulseEvent"		
	,"NtQueryAttributesFile"		
	,"NtQueryBootEntryOrder"		
	,"NtQueryBootOptions"		
	,"NtQueryDebugFilterState"		
	,"NtQueryDefaultLocale"		
	,"NtQueryDefaultUILanguage"		
	,"NtQueryDirectoryFile"		
	,"NtQueryDirectoryObject"		
	,"NtQueryEaFile"		
	,"NtQueryEvent"		
	,"NtQueryFullAttributesFile"		
	,"NtQueryInformationAtom"		
	,"NtQueryInformationFile"		
	,"NtQueryInformationJobObject"		
	,"NtQueryInformationPort"		
	,"NtQueryInformationProcess"		
	,"NtQueryInformationThread"		
	,"NtQueryInformationToken"		
	,"NtQueryInstallUILanguage"		
	,"NtQueryIntervalProfile"		
	,"NtQueryIoCompletion"	
	,"NtQueryKey"		
	,"NtQueryMultipleValueKey"		
	,"NtQueryMutant"		
	,"NtQueryObject"		
	,"NtQueryOpenSubKeys"		
	,"NtQueryPerformanceCounter"		
	,"NtQueryQuotaInformationFile"		
	,"NtQuerySection"		
	,"NtQuerySecurityObject"		
	,"NtQuerySemaphore"		
	,"NtQuerySymbolicLinkObject"		
	,"NtQuerySystemEnvironmentValue"		
	,"NtQuerySystemEnvironmentValueEx"		
	,"NtQuerySystemInformation"		
	,"NtQuerySystemTime"		
	,"NtQueryTimer"		
	,"NtQueryTimerResolution"		
	,"NtQueryValueKey"		
	,"NtQueryVirtualMemory"		
	,"NtQueryVolumeInformationFile"		
	,"NtQueueApcThread"		
	,"NtRaiseException"		
	,"NtRaiseHardError"		
	,"NtReadFile"		
	,"NtReadFileScatter"		
	,"NtReadRequestData"		
	,"NtReadVirtualMemory"		
	,"NtRegisterThreadTerminatePort"		
	,"NtReleaseMutant"		
	,"NtReleaseSemaphore"		
	,"NtRemoveIoCompletion"		
	,"NtRemoveProcessDebug"		
	,"NtRenameKey"		
	,"NtReplaceKey"		
	,"NtReplyPort"		
	,"NtReplyWaitReceivePort"		
	,"NtReplyWaitReceivePortEx"		
	,"NtReplyWaitReplyPort"		
	,"NtRequestDeviceWakeup"		
	,"NtRequestPort"		
	,"NtRequestWaitReplyPort"		
	,"NtRequestWakeupLatency"		
	,"NtResetEvent"		
	,"NtResetWriteWatch"		
	,"NtRestoreKey"		
	,"NtResumeProcess"		
	,"NtResumeThread"		
	,"NtSaveKey"		
	,"NtSaveKeyEx"		
	,"NtSaveMergedKeys"		
	,"NtSecureConnectPort"		
	,"NtSetBootEntryOrder"		
	,"NtSetBootOptions"		
	,"NtSetContextThread"		
	,"NtSetDebugFilterState"		
	,"NtSetDefaultHardErrorPort"		
	,"NtSetDefaultLocale"		
	,"NtSetDefaultUILanguage"		
	,"NtSetEaFile"		
	,"NtSetEvent"		
	,"NtSetEventBoostPriority"		
	,"NtSetHighEventPair"		
	,"NtSetHighWaitLowEventPair"		
	,"NtSetInformationDebugObject"		
	,"NtSetInformationFile"		
	,"NtSetInformationJobObject"		
	,"NtSetInformationKey"		
	,"NtSetInformationObject"		
	,"NtSetInformationProcess"		
	,"NtSetInformationThread"		
	,"NtSetInformationToken"		
	,"NtSetIntervalProfile"		
	,"NtSetIoCompletion"		
	,"NtSetLdtEntries"		
	,"NtSetLowEventPair"		
	,"NtSetLowWaitHighEventPair"		
	,"NtSetQuotaInformationFile"		
	,"NtSetSecurityObject"		
	,"NtSetSystemEnvironmentValue"		
	,"NtSetSystemEnvironmentValueEx"		
	,"NtSetSystemInformation"		
	,"NtSetSystemPowerState"		
	,"NtSetSystemTime"		
	,"NtSetThreadExecutionState"		
	,"NtSetTimer"		
	,"NtSetTimerResolution"		
	,"NtSetUuidSeed"	
	,"NtSetValueKey"		
	,"NtSetVolumeInformationFile"		
	,"NtShutdownSystem"		
	,"NtSignalAndWaitForSingleObject"		
	,"NtStartProfile"		
	,"NtStopProfile"		
	,"NtSuspendProcess"		
	,"NtSuspendThread"		
	,"NtSystemDebugControl"		
	,"NtTerminateJobObject"		
	,"NtTerminateProcess"		
	,"NtTerminateThread"		
	,"NtTestAlert"		
	,"NtTraceEvent"		
	,"NtTranslateFilePath"		
	,"NtUnloadDriver"		
	,"NtUnloadKey"		
	,"NtUnloadKeyEx"		
	,"NtUnlockFile"		
	,"NtUnlockVirtualMemory"		
	,"NtUnmapViewOfSection"		
	,"NtVdmControl"		
	,"NtWaitForDebugEvent"		
	,"NtWaitForMultipleObjects"		
	,"NtWaitForSingleObject"	
	,"NtWaitHighEventPair"		
	,"NtWaitLowEventPair"		
	,"NtWriteFile"		
	,"NtWriteFileGather"		
	,"NtWriteRequestData"		
	,"NtWriteVirtualMemory"		
	,"NtYieldExecution"		
	,"NtCreateKeyedEvent"		
	,"NtOpenKeyedEvent"		
	,"NtReleaseKeyedEvent"		
	,"NtWaitForKeyedEvent"		
	,"NtQueryPortInformationProcess"	
};
char szWin7FunctionNameSSDT[401][100]=
{

	"NtMapUserPhysicalPagesScatter"
	,"NtWaitForSingleObject"	
	,"NtCallbackReturn"		
	,"NtReadFile"	
	,"NtDeviceIoControlFile"		
	,"NtWriteFile"		
	,"NtRemoveIoCompletion"		
	,"NtReleaseSemaphore"	
	,"NtReplyWaitReceivePort"		
	,"NtReplyPort"	
	,"NtSetInformationThread"		
	,"NtSetEvent"	
	,"NtClose"		
	,"NtQueryObject"		
	,"NtQueryInformationFile"		
	,"NtOpenKey"		
	,"NtEnumerateValueKey"		
	,"NtFindAtom"		
	,"NtQueryDefaultLocale"		
	,"NtQueryKey"		
	,"NtQueryValueKey"		
	,"NtAllocateVirtualMemory"		
	,"NtQueryInformationProcess"		
	,"NtWaitForMultipleObjects32"		
	,"NtWriteFileGather"		
	,"NtSetInformationProcess"		
	,"NtCreateKey"		
	,"NtFreeVirtualMemory"		
	,"NtImpersonateClientOfPort"		
	,"NtReleaseMutant"		
	,"NtQueryInformationToken"		
	,"NtRequestWaitReplyPort"		
	,"NtQueryVirtualMemory"		
	,"NtOpenThreadToken"		
	,"NtQueryInformationThread"		
	,"NtOpenProcess"		
	,"NtSetInformationFile"		
	,"NtMapViewOfSection"		
	,"NtAccessCheckAndAuditAlarm"		
	,"NtUnmapViewOfSection"		
	,"NtReplyWaitReceivePortEx"		
	,"NtTerminateProcess"		
	,"NtSetEventBoostPriority"		
	,"NtReadFileScatter"		
	,"NtOpenThreadTokenEx"		
	,"NtOpenProcessTokenEx"		
	,"NtQueryPerformanceCounter"		
	,"NtEnumerateKey"		
	,"NtOpenFile"		
	,"NtDelayExecution"		
	,"NtQueryDirectoryFile"		
	,"NtQuerySystemInformation"		
	,"NtOpenSection"		
	,"NtQueryTimer"		
	,"NtFsControlFile"		
	,"NtWriteVirtualMemory"		
	,"NtCloseObjectAuditAlarm"		
	,"NtDuplicateObject"		
	,"NtQueryAttributesFile"		
	,"NtClearEvent"		
	,"NtReadVirtualMemory"		
	,"NtOpenEvent"		
	,"NtAdjustPrivilegesToken"		
	,"NtDuplicateToken"		
	,"NtContinue"		
	,"NtQueryDefaultUILanguage"		
	,"NtQueueApcThread"		
	,"NtYieldExecution"		
	,"NtAddAtom"		
	,"NtCreateEvent"		
	,"NtQueryVolumeInformationFile"		
	,"NtCreateSection"		
	,"NtFlushBuffersFile"		
	,"NtApphelpCacheControl"		
	,"NtCreateProcessEx"		
	,"NtCreateThread"		
	,"NtIsProcessInJob"		
	,"NtProtectVirtualMemory"		
	,"NtQuerySection"		
	,"NtResumeThread"		
	,"NtTerminateThread"		
	,"NtReadRequestData"		
	,"NtCreateFile"		
	,"NtQueryEvent"		
	,"NtWriteRequestData"		
	,"NtOpenDirectoryObject"	
	,"NtAccessCheckByTypeAndAuditAlarm"		
	,"NtQuerySystemTime"		
	,"NtWaitForMultipleObjects"		
	,"NtSetInformationObject"		
	,"NtCancelIoFile"		
	,"NtTraceEvent"	
	,"NtPowerInformation"		
	,"NtSetValueKey"		
	,"NtCancelTimer"		
	,"NtSetTimer"		
	,"NtAcceptConnectPort"		
	,"NtAccessCheck"		
	,"NtAccessCheckByType"		
	,"NtAccessCheckByTypeResultList"		
	,"NtAccessCheckByTypeResultListAndAuditAlarm"		
	,"NtAccessCheckByTypeResultListAndAuditAlarmByHandle"		
	,"NtAddBootEntry"		
	,"NtAddDriverEntry"		
	,"NtAdjustGroupsToken"	
	,"NtAlertResumeThread"		
	,"NtAlertThread"	
	,"NtAllocateLocallyUniqueId"		
	,"NtAllocateReserveObject"		
	,"NtAllocateUserPhysicalPages"		
	,"NtAllocateUuids"		
	,"NtAlpcAcceptConnectPort"		
	,"NtAlpcCancelMessage"		
	,"NtAlpcConnectPort"		
	,"NtAlpcCreatePort"		
	,"NtAlpcCreatePortSection"		
	,"NtAlpcCreateResourceReserve"		
	,"NtAlpcCreateSectionView"		
	,"NtAlpcCreateSecurityContext"		
	,"NtAlpcDeletePortSection"		
	,"NtAlpcDeleteResourceReserve"		
	,"NtAlpcDeleteSectionView"		
	,"NtAlpcDeleteSecurityContext"		
	,"NtAlpcDisconnectPort"		
	,"NtAlpcImpersonateClientOfPort"		
	,"NtAlpcOpenSenderProcess"		
	,"NtAlpcOpenSenderThread"		
	,"NtAlpcQueryInformation"		
	,"NtAlpcQueryInformationMessage"	
	,"NtAlpcRevokeSecurityContext"		
	,"NtAlpcSendWaitReceivePort"		
	,"NtAlpcSetInformation"		
	,"NtAreMappedFilesTheSame"		
	,"NtAssignProcessToJobObject"		
	,"NtCancelIoFileEx"		
	,"NtCancelSynchronousIoFile"		
	,"NtCommitComplete"		
	,"NtCommitEnlistment"		
	,"NtCommitTransaction"		
	,"NtCompactKeys"		
	,"NtCompareTokens"		
	,"NtCompleteConnectPort"	
	,"NtCompressKey"		
	,"NtConnectPort"	
	,"NtCreateDebugObject"		
	,"NtCreateDirectoryObject"		
	,"NtCreateEnlistment"		
	,"NtCreateEventPair"		
	,"NtCreateIoCompletion"		
	,"NtCreateJobObject"		
	,"NtCreateJobSet"		
	,"NtCreateKeyTransacted"		
	,"NtCreateKeyedEvent"		
	,"NtCreateMailslotFile"		
	,"NtCreateMutant"		
	,"NtCreateNamedPipeFile"		
	,"NtCreatePagingFile"		
	,"NtCreatePort"		
	,"NtCreatePrivateNamespace"		
	,"NtCreateProcess"		
	,"NtCreateProfile"		
	,"NtCreateProfileEx"		
	,"NtCreateResourceManager"		
	,"NtCreateSemaphore"		
	,"NtCreateSymbolicLinkObject"		
	,"NtCreateThreadEx"		
	,"NtCreateTimer"		
	,"NtCreateToken"		
	,"NtCreateTransaction"		
	,"NtCreateTransactionManager"		
	,"NtCreateUserProcess"		
	,"NtCreateWaitablePort"		
	,"NtCreateWorkerFactory"		
	,"NtDebugActiveProcess"		
	,"NtDebugContinue"		
	,"NtDeleteAtom"		
	,"NtDeleteBootEntry"		
	,"NtDeleteDriverEntry"		
	,"NtDeleteFile"		
	,"NtDeleteKey"		
	,"NtDeleteObjectAuditAlarm"		
	,"NtDeletePrivateNamespace"		
	,"NtDeleteValueKey"		
	,"NtDisableLastKnownGood"		
	,"NtDisplayString"		
	,"NtDrawText"		
	,"NtEnableLastKnownGood"	
	,"NtEnumerateBootEntries"		
	,"NtEnumerateDriverEntries"		
	,"NtEnumerateSystemEnvironmentValuesEx"		
	,"NtEnumerateTransactionObject"		
	,"NtExtendSection"		
	,"NtFilterToken"		
	,"NtFlushInstallUILanguage"		
	,"NtFlushInstructionCache"		
	,"NtFlushKey"		
	,"NtFlushProcessWriteBuffers"		
	,"NtFlushVirtualMemory"		
	,"NtFlushWriteBuffer"		
	,"NtFreeUserPhysicalPages"		
	,"NtFreezeRegistry"		
	,"NtFreezeTransactions"		
	,"NtGetContextThread"		
	,"NtGetCurrentProcessorNumber"		
	,"NtGetDevicePowerState"		
	,"NtGetMUIRegistryInfo"		
	,"NtGetNextProcess"		
	,"NtGetNextThread"		
	,"NtGetNlsSectionPtr"		
	,"NtGetNotificationResourceManager"		
	,"NtGetPlugPlayEvent"		
	,"NtGetWriteWatch"		
	,"NtImpersonateAnonymousToken"	
	,"NtImpersonateThread"		
	,"NtInitializeNlsFiles"		
	,"NtInitializeRegistry"		
	,"NtInitiatePowerAction"		
	,"NtIsSystemResumeAutomatic"		
	,"NtIsUILanguageComitted"		
	,"NtListenPort"		
	,"NtLoadDriver"		
	,"NtLoadKey"		
	,"NtLoadKey2"		
	,"NtLoadKeyEx"		
	,"NtLockFile"		
	,"NtLockProductActivationKeys"		
	,"NtLockRegistryKey"		
	,"NtLockVirtualMemory"		
	,"NtMakePermanentObject"		
	,"NtMakeTemporaryObject"		
	,"NtMapCMFModule"		
	,"NtMapUserPhysicalPages"		
	,"NtModifyBootEntry"		
	,"NtModifyDriverEntry"		
	,"NtNotifyChangeDirectoryFile"		
	,"NtNotifyChangeKey"		
	,"NtNotifyChangeMultipleKeys"		
	,"NtNotifyChangeSession"	
	,"NtOpenEnlistment"		
	,"NtOpenEventPair"		
	,"NtOpenIoCompletion"		
	,"NtOpenJobObject"		
	,"NtOpenKeyEx"		
	,"NtOpenKeyTransacted"		
	,"NtOpenKeyTransactedEx"		
	,"NtOpenKeyedEvent"		
	,"NtOpenMutant"		
	,"NtOpenObjectAuditAlarm"		
	,"NtOpenPrivateNamespace"		
	,"NtOpenProcessToken"		
	,"NtOpenResourceManager"		
	,"NtOpenSemaphore"		
	,"NtOpenSession"		
	,"NtOpenSymbolicLinkObject"		
	,"NtOpenThread"		
	,"NtOpenTimer"		
	,"NtOpenTransaction"		
	,"NtOpenTransactionManager"		
	,"NtPlugPlayControl"		
	,"NtPrePrepareComplete"		
	,"NtPrePrepareEnlistment"		
	,"NtPrepareComplete"		
	,"NtPrepareEnlistment"		
	,"NtPrivilegeCheck"		
	,"NtPrivilegeObjectAuditAlarm"		
	,"NtPrivilegedServiceAuditAlarm"		
	,"NtPropagationComplete"		
	,"NtPropagationFailed"		
	,"NtPulseEvent"		
	,"NtQueryBootEntryOrder"		
	,"NtQueryBootOptions"		
	,"NtQueryDebugFilterState"		
	,"NtQueryDirectoryObject"		
	,"NtQueryDriverEntryOrder"		
	,"NtQueryEaFile"		
	,"NtQueryFullAttributesFile"		
	,"NtQueryInformationAtom"		
	,"NtQueryInformationEnlistment"		
	,"NtQueryInformationJobObject"		
	,"NtQueryInformationPort"		
	,"NtQueryInformationResourceManager"		
	,"NtQueryInformationTransaction"	
	,"NtQueryInformationTransactionManager"		
	,"NtQueryInformationWorkerFactory"		
	,"NtQueryInstallUILanguage"		
	,"NtQueryIntervalProfile"		
	,"NtQueryIoCompletion"		
	,"NtQueryLicenseValue"		
	,"NtQueryMultipleValueKey"		
	,"NtQueryMutant"		
	,"NtQueryOpenSubKeys"		
	,"NtQueryOpenSubKeysEx"		
	,"NtQueryPortInformationProcess"	
	,"NtQueryQuotaInformationFile"		
	,"NtQuerySecurityAttributesToken"		
	,"NtQuerySecurityObject"		
	,"NtQuerySemaphore"		
	,"NtQuerySymbolicLinkObject"		
	,"NtQuerySystemEnvironmentValue"		
	,"NtQuerySystemEnvironmentValueEx"		
	,"NtQuerySystemInformationEx"		
	,"NtQueryTimerResolution"		
	,"NtQueueApcThreadEx"		
	,"NtRaiseException"	
	,"NtRaiseHardError"		
	,"NtReadOnlyEnlistment"	
	,"NtRecoverEnlistment"		
	,"NtRecoverResourceManager"		
	,"NtRecoverTransactionManager"		
	,"NtRegisterProtocolAddressInformation"		
	,"NtRegisterThreadTerminatePort"		
	,"NtReleaseKeyedEvent"		
	,"NtReleaseWorkerFactoryWorker"		
	,"NtRemoveIoCompletionEx"		
	,"NtRemoveProcessDebug"		
	,"NtRenameKey"		
	,"NtRenameTransactionManager"		
	,"NtReplaceKey"		
	,"NtReplacePartitionUnit"		
	,"NtReplyWaitReplyPort"		
	,"NtRequestPort"	
	,"NtResetEvent"		
	,"NtResetWriteWatch"		
	,"NtRestoreKey"		
	,"NtResumeProcess"		
	,"NtRollbackComplete"		
	,"NtRollbackEnlistment"		
	,"NtRollbackTransaction"	
	,"NtRollforwardTransactionManager"		
	,"NtSaveKey"		
	,"NtSaveKeyEx"		
	,"NtSaveMergedKeys"		
	,"NtSecureConnectPort"		
	,"NtSerializeBoot"		
	,"NtSetBootEntryOrder"		
	,"NtSetBootOptions"		
	,"NtSetContextThread"		
	,"NtSetDebugFilterState"		
	,"NtSetDefaultHardErrorPort"		
	,"NtSetDefaultLocale"		
	,"NtSetDefaultUILanguage"		
	,"NtSetDriverEntryOrder"		
	,"NtSetEaFile"		
	,"NtSetHighEventPair"		
	,"NtSetHighWaitLowEventPair"		
	,"NtSetInformationDebugObject"	
	,"NtSetInformationEnlistment"		
	,"NtSetInformationJobObject"		
	,"NtSetInformationKey"		
	,"NtSetInformationResourceManager"		
	,"NtSetInformationToken"	
	,"NtSetInformationTransaction"		
	,"NtSetInformationTransactionManager"		
	,"NtSetInformationWorkerFactory"		
	,"NtSetIntervalProfile"		
	,"NtSetIoCompletion"		
	,"NtSetIoCompletionEx"		
	,"NtSetLdtEntries"		
	,"NtSetLowEventPair"		
	,"NtSetLowWaitHighEventPair"		
	,"NtSetQuotaInformationFile"		
	,"NtSetSecurityObject"		
	,"NtSetSystemEnvironmentValue"		
	,"NtSetSystemEnvironmentValueEx"		
	,"NtSetSystemInformation"		
	,"NtSetSystemPowerState"	
	,"NtSetSystemTime"		
	,"NtSetThreadExecutionState"		
	,"NtSetTimerEx"		
	,"NtSetTimerResolution"		
	,"NtSetUuidSeed"		
	,"NtSetVolumeInformationFile"		
	,"NtShutdownSystem"		
	,"NtShutdownWorkerFactory"		
	,"NtSignalAndWaitForSingleObject"		
	,"NtSinglePhaseReject"		
	,"NtStartProfile"		
	,"NtStopProfile"		
	,"NtSuspendProcess"		
	,"NtSuspendThread"		
	,"NtSystemDebugControl"		
	,"NtTerminateJobObject"		
	,"NtTestAlert"		
	,"NtThawRegistry"		
	,"NtThawTransactions"		
	,"NtTraceControl"		
	,"NtTranslateFilePath"		
	,"NtUmsThreadYield"		
	,"NtUnloadDriver"		
	,"NtUnloadKey"		
	,"NtUnloadKey2"		
	,"NtUnloadKeyEx"		
	,"NtUnlockFile"		
	,"NtUnlockVirtualMemory"		
	,"NtVdmControl"		
	,"NtWaitForDebugEvent"		
	,"NtWaitForKeyedEvent"		
	,"NtWaitForWorkViaWorkerFactory"	
	,"NtWaitHighEventPair"		
	,"NtWaitLowEventPair"		
	,"NtWorkerFactoryWorkerReady"		
};

