轉：http://blog.sina.com.cn/s/blog_4a1acc7f0100cfuc.html

        83   4B 0007C008 NlsAnsiCodePage
         84   4C 0007C010 NlsMbCodePageTag
         85   4D 0007C018 NlsMbOemCodePageTag
         86   4E 0000D379 NtAcceptConnectPort
         87   4F 0000D38E NtAccessCheck
         88   50 0000D3A3 NtAccessCheckAndAuditAlarm
         89   51 0000D3B8 NtAccessCheckByType
         90   52 0000D3CD NtAccessCheckByTypeAndAuditAlarm
         91   53 0000D3E2 NtAccessCheckByTypeResultList
         92   54 0000D3F7 NtAccessCheckByTypeResultListAndAuditAlarm
         93   55 0000D40C NtAccessCheckByTypeResultListAndAuditAlarmByHandle
         94   56 0000D421 NtAddAtom
         95   57 0000D436 NtAddBootEntry
         96   58 0000D44B NtAdjustGroupsToken
         97   59 0000D460 NtAdjustPrivilegesToken
         98   5A 0000D475 NtAlertResumeThread
         99   5B 0000D48A NtAlertThread
        100   5C 0000D49F NtAllocateLocallyUniqueId
        101   5D 0000D4B4 NtAllocateUserPhysicalPages
        102   5E 0000D4C9 NtAllocateUuids
        103   5F 0000D4DE NtAllocateVirtualMemory
        104   60 0000D4F3 NtAreMappedFilesTheSame
        105   61 0000D508 NtAssignProcessToJobObject
        106   62 0000D51D NtCallbackReturn
        107   63 0000D532 NtCancelDeviceWakeupRequest
        108   64 0000D547 NtCancelIoFile
        109   65 0000D55C NtCancelTimer
        110   66 0000D571 NtClearEvent
        111   67 0000D586 NtClose
        112   68 0000D59B NtCloseObjectAuditAlarm
        113   69 0000D5B0 NtCompactKeys
        114   6A 0000D5C5 NtCompareTokens
        115   6B 0000D5DA NtCompleteConnectPort
        116   6C 0000D5EF NtCompressKey
        117   6D 0000D604 NtConnectPort
        118   6E 0000D619 NtContinue
        119   6F 0000D62E NtCreateDebugObject
        120   70 0000D643 NtCreateDirectoryObject
        121   71 0000D658 NtCreateEvent
        122   72 0000D66D NtCreateEventPair
        123   73 0000D682 NtCreateFile
        124   74 0000D697 NtCreateIoCompletion
        125   75 0000D6AC NtCreateJobObject
        126   76 0000D6C1 NtCreateJobSet
        127   77 0000D6D6 NtCreateKey
        128   78 0000EA5C NtCreateKeyedEvent
        129   79 0000D6EB NtCreateMailslotFile
        130   7A 0000D700 NtCreateMutant
        131   7B 0000D715 NtCreateNamedPipeFile
        132   7C 0000D72A NtCreatePagingFile
        133   7D 0000D73F NtCreatePort
        134   7E 0000D754 NtCreateProcess
        135   7F 0000D769 NtCreateProcessEx
        136   80 0000D77E NtCreateProfile
        137   81 0000D793 NtCreateSection
        138   82 0000D7A8 NtCreateSemaphore
        139   83 0000D7BD NtCreateSymbolicLinkObject
        140   84 0000D7D2 NtCreateThread
        141   85 0000D7E7 NtCreateTimer
        142   86 0000D7FC NtCreateToken
        143   87 0000D811 NtCreateWaitablePort
        144   88 00001250 NtCurrentTeb
        145   89 0000D826 NtDebugActiveProcess
        146   8A 0000D83B NtDebugContinue
        147   8B 0000D850 NtDelayExecution
        148   8C 0000D865 NtDeleteAtom
        149   8D 0000D87A NtDeleteBootEntry
        150   8E 0000D88F NtDeleteFile
        151   8F 0000D8A4 NtDeleteKey
        152   90 0000D8B9 NtDeleteObjectAuditAlarm
        153   91 0000D8CE NtDeleteValueKey
        154   92 0000D8E3 NtDeviceIoControlFile
        155   93 0000D8F8 NtDisplayString
        156   94 0000D90D NtDuplicateObject
        157   95 0000D922 NtDuplicateToken
        158   96 0000D937 NtEnumerateBootEntries
        159   97 0000D94C NtEnumerateKey
        160   98 0000D961 NtEnumerateSystemEnvironmentValuesEx
        161   99 0000D976 NtEnumerateValueKey
        162   9A 0000D98B NtExtendSection
        163   9B 0000D9A0 NtFilterToken
        164   9C 0000D9B5 NtFindAtom
        165   9D 0000D9CA NtFlushBuffersFile
        166   9E 0000D9DF NtFlushInstructionCache
        167   9F 0000D9F4 NtFlushKey
        168   A0 0000DA09 NtFlushVirtualMemory
        169   A1 0000DA1E NtFlushWriteBuffer
        170   A2 0000DA33 NtFreeUserPhysicalPages
        171   A3 0000DA48 NtFreeVirtualMemory
        172   A4 0000DA5D NtFsControlFile
        173   A5 0000DA72 NtGetContextThread
        174   A6 0000DA87 NtGetDevicePowerState
        175   A7 0000DA9C NtGetPlugPlayEvent
        176   A8 0000DAB1 NtGetWriteWatch
        177   A9 0000DAC6 NtImpersonateAnonymousToken
        178   AA 0000DADB NtImpersonateClientOfPort
        179   AB 0000DAF0 NtImpersonateThread
        180   AC 0000DB05 NtInitializeRegistry
        181   AD 0000DB1A NtInitiatePowerAction
        182   AE 0000DB2F NtIsProcessInJob
        183   AF 0000DB44 NtIsSystemResumeAutomatic
        184   B0 0000DB59 NtListenPort
        185   B1 0000DB6E NtLoadDriver
        187   B2 0000DB83 NtLoadKey
        186   B3 0000DB98 NtLoadKey2
        188   B4 0000DBAD NtLockFile
        189   B5 0000DBC2 NtLockProductActivationKeys
        190   B6 0000DBD7 NtLockRegistryKey
        191   B7 0000DBEC NtLockVirtualMemory
        192   B8 0000DC01 NtMakePermanentObject
        193   B9 0000DC16 NtMakeTemporaryObject
        194   BA 0000DC2B NtMapUserPhysicalPages
        195   BB 0000DC40 NtMapUserPhysicalPagesScatter
        196   BC 0000DC55 NtMapViewOfSection
        197   BD 0000DC6A NtModifyBootEntry
        198   BE 0000DC7F NtNotifyChangeDirectoryFile
        199   BF 0000DC94 NtNotifyChangeKey
        200   C0 0000DCA9 NtNotifyChangeMultipleKeys
        201   C1 0000DCBE NtOpenDirectoryObject
        202   C2 0000DCD3 NtOpenEvent
        203   C3 0000DCE8 NtOpenEventPair
        204   C4 0000DCFD NtOpenFile
        205   C5 0000DD12 NtOpenIoCompletion
        206   C6 0000DD27 NtOpenJobObject
        207   C7 0000DD3C NtOpenKey
        208   C8 0000EA71 NtOpenKeyedEvent
        209   C9 0000DD51 NtOpenMutant
        210   CA 0000DD66 NtOpenObjectAuditAlarm
        211   CB 0000DD7B NtOpenProcess
        212   CC 0000DD90 NtOpenProcessToken
        213   CD 0000DDA5 NtOpenProcessTokenEx
        214   CE 0000DDBA NtOpenSection
        215   CF 0000DDCF NtOpenSemaphore
        216   D0 0000DDE4 NtOpenSymbolicLinkObject
        217   D1 0000DDF9 NtOpenThread
        218   D2 0000DE0E NtOpenThreadToken
        219   D3 0000DE23 NtOpenThreadTokenEx
        220   D4 0000DE38 NtOpenTimer
        221   D5 0000DE4D NtPlugPlayControl
        222   D6 0000DE62 NtPowerInformation
        223   D7 0000DE77 NtPrivilegeCheck
        224   D8 0000DE8C NtPrivilegeObjectAuditAlarm
        225   D9 0000DEA1 NtPrivilegedServiceAuditAlarm
        226   DA 0000DEB6 NtProtectVirtualMemory
        227   DB 0000DECB NtPulseEvent
        228   DC 0000DEE0 NtQueryAttributesFile
        229   DD 0000DEF5 NtQueryBootEntryOrder
        230   DE 0000DF0A NtQueryBootOptions
        231   DF 0000DF1F NtQueryDebugFilterState
        232   E0 0000DF34 NtQueryDefaultLocale
        233   E1 0000DF49 NtQueryDefaultUILanguage
        234   E2 0000DF5E NtQueryDirectoryFile
        235   E3 0000DF73 NtQueryDirectoryObject
        236   E4 0000DF88 NtQueryEaFile
        237   E5 0000DF9D NtQueryEvent
        238   E6 0000DFB2 NtQueryFullAttributesFile
        239   E7 0000DFC7 NtQueryInformationAtom
        240   E8 0000DFDC NtQueryInformationFile
        241   E9 0000DFF1 NtQueryInformationJobObject
        242   EA 0000E006 NtQueryInformationPort
        243   EB 0000E01B NtQueryInformationProcess
        244   EC 0000E030 NtQueryInformationThread
        245   ED 0000E045 NtQueryInformationToken
        246   EE 0000E05A NtQueryInstallUILanguage
        247   EF 0000E06F NtQueryIntervalProfile
        248   F0 0000E084 NtQueryIoCompletion
        249   F1 0000E099 NtQueryKey
        250   F2 0000E0AE NtQueryMultipleValueKey
        251   F3 0000E0C3 NtQueryMutant
        252   F4 0000E0D8 NtQueryObject
        253   F5 0000E0ED NtQueryOpenSubKeys
        254   F6 0000E102 NtQueryPerformanceCounter
        255   F7 0000EAB0 NtQueryPortInformationProcess
        256   F8 0000E117 NtQueryQuotaInformationFile
        257   F9 0000E12C NtQuerySection
        258   FA 0000E141 NtQuerySecurityObject
        259   FB 0000E156 NtQuerySemaphore
        260   FC 0000E16B NtQuerySymbolicLinkObject
        261   FD 0000E180 NtQuerySystemEnvironmentValue
        262   FE 0000E195 NtQuerySystemEnvironmentValueEx
        263   FF 0000E1AA NtQuerySystemInformation
        264  100 0000E1BF NtQuerySystemTime
        265  101 0000E1D4 NtQueryTimer
        266  102 0000E1E9 NtQueryTimerResolution
        267  103 0000E1FE NtQueryValueKey
        268  104 0000E213 NtQueryVirtualMemory
        269  105 0000E228 NtQueryVolumeInformationFile
        270  106 0000E23D NtQueueApcThread
        271  107 0000E252 NtRaiseException
        272  108 0000E267 NtRaiseHardError
        273  109 0000E27C NtReadFile
        274  10A 0000E291 NtReadFileScatter
        275  10B 0000E2A6 NtReadRequestData
        276  10C 0000E2BB NtReadVirtualMemory
        277  10D 0000E2D0 NtRegisterThreadTerminatePort
        278  10E 0000EA86 NtReleaseKeyedEvent
        279  10F 0000E2E5 NtReleaseMutant
        280  110 0000E2FA NtReleaseSemaphore
        281  111 0000E30F NtRemoveIoCompletion
        282  112 0000E324 NtRemoveProcessDebug
        283  113 0000E339 NtRenameKey
        284  114 0000E34E NtReplaceKey
        285  115 0000E363 NtReplyPort
        286  116 0000E378 NtReplyWaitReceivePort
        287  117 0000E38D NtReplyWaitReceivePortEx
        288  118 0000E3A2 NtReplyWaitReplyPort
        289  119 0000E3B7 NtRequestDeviceWakeup
        290  11A 0000E3CC NtRequestPort
        291  11B 0000E3E1 NtRequestWaitReplyPort
        292  11C 0000E3F6 NtRequestWakeupLatency
        293  11D 0000E40B NtResetEvent
        294  11E 0000E420 NtResetWriteWatch
        295  11F 0000E435 NtRestoreKey
        296  120 0000E44A NtResumeProcess
        297  121 0000E45F NtResumeThread
        298  122 0000E474 NtSaveKey
        299  123 0000E489 NtSaveKeyEx
        300  124 0000E49E NtSaveMergedKeys
        301  125 0000E4B3 NtSecureConnectPort
        302  126 0000E4C8 NtSetBootEntryOrder
        303  127 0000E4DD NtSetBootOptions
        304  128 0000E4F2 NtSetContextThread
        305  129 0000E507 NtSetDebugFilterState
        306  12A 0000E51C NtSetDefaultHardErrorPort
        307  12B 0000E531 NtSetDefaultLocale
        308  12C 0000E546 NtSetDefaultUILanguage
        309  12D 0000E55B NtSetEaFile
        310  12E 0000E570 NtSetEvent
        311  12F 0000E585 NtSetEventBoostPriority
        312  130 0000E59A NtSetHighEventPair
        313  131 0000E5AF NtSetHighWaitLowEventPair
        314  132 0000E5C4 NtSetInformationDebugObject
        315  133 0000E5D9 NtSetInformationFile
        316  134 0000E5EE NtSetInformationJobObject
        317  135 0000E603 NtSetInformationKey
        318  136 0000E618 NtSetInformationObject
        319  137 0000E62D NtSetInformationProcess
        320  138 0000E642 NtSetInformationThread
        321  139 0000E657 NtSetInformationToken
        322  13A 0000E66C NtSetIntervalProfile
        323  13B 0000E681 NtSetIoCompletion
        324  13C 0000E696 NtSetLdtEntries
        325  13D 0000E6AB NtSetLowEventPair
        326  13E 0000E6C0 NtSetLowWaitHighEventPair
        327  13F 0000E6D5 NtSetQuotaInformationFile
        328  140 0000E6EA NtSetSecurityObject
        329  141 0000E6FF NtSetSystemEnvironmentValue
        330  142 0000E714 NtSetSystemEnvironmentValueEx
        331  143 0000E729 NtSetSystemInformation
        332  144 0000E73E NtSetSystemPowerState
        333  145 0000E753 NtSetSystemTime
        334  146 0000E768 NtSetThreadExecutionState
        335  147 0000E77D NtSetTimer
        336  148 0000E792 NtSetTimerResolution
        337  149 0000E7A7 NtSetUuidSeed
        338  14A 0000E7BC NtSetValueKey
        339  14B 0000E7D1 NtSetVolumeInformationFile
        340  14C 0000E7E6 NtShutdownSystem
        341  14D 0000E7FB NtSignalAndWaitForSingleObject
        342  14E 0000E810 NtStartProfile
        343  14F 0000E825 NtStopProfile
        344  150 0000E83A NtSuspendProcess
        345  151 0000E84F NtSuspendThread
        346  152 0000E864 NtSystemDebugControl
        347  153 0000E879 NtTerminateJobObject
        348  154 0000E88E NtTerminateProcess
        349  155 0000E8A3 NtTerminateThread
        350  156 0000E8B8 NtTestAlert
        351  157 0000E8CD NtTraceEvent
        352  158 0000E8E2 NtTranslateFilePath
        353  159 0000E8F7 NtUnloadDriver
        354  15A 0000E90C NtUnloadKey
        355  15B 0000E921 NtUnloadKeyEx
        356  15C 0000E936 NtUnlockFile
        357  15D 0000E94B NtUnlockVirtualMemory
        358  15E 0000E960 NtUnmapViewOfSection
        359  15F 0000E975 NtVdmControl
        360  160 0000E98A NtWaitForDebugEvent
        361  161 0000EA9B NtWaitForKeyedEvent
        362  162 0000E99F NtWaitForMultipleObjects
        363  163 0000E9B4 NtWaitForSingleObject
        364  164 0000E9C9 NtWaitHighEventPair
        365  165 0000E9DE NtWaitLowEventPair
        366  166 0000E9F3 NtWriteFile
        367  167 0000EA08 NtWriteFileGather
        368  168 0000EA1D NtWriteRequestData
        369  169 0000EA32 NtWriteVirtualMemory
        370  16A 0000EA47 NtYieldExecution