windows 7 SSDT 函数汇总
COUNT: 00000191SSTD Function List
--------------------------------------------------------------------------------------
ADDR:83C6E0CB | NtAcceptConnectPort
--------------------------------------------------------------------------------------
ADDR:83AC722B | NtAccessCheck
--------------------------------------------------------------------------------------
ADDR:83C19E4E | NtAccessCheckAndAuditAlarm
--------------------------------------------------------------------------------------
ADDR:83A326E1 | NtAccessCheckByType
--------------------------------------------------------------------------------------
ADDR:83C8EE6E | NtAccessCheckByTypeAndAuditAlarm
--------------------------------------------------------------------------------------
ADDR:83B0B48A | NtAccessCheckByTypeResultList
--------------------------------------------------------------------------------------
ADDR:83CF7B6D | NtAccessCheckByTypeResultListAndAuditAlarm
--------------------------------------------------------------------------------------
ADDR:83CF7BB6 | NtAccessCheckByTypeResultListAndAuditAlarmByHandle
--------------------------------------------------------------------------------------
ADDR:83C052D7 | NtAddAtom
--------------------------------------------------------------------------------------
ADDR:83D11426 | NtAddBootEntry
--------------------------------------------------------------------------------------
ADDR:83D1267B | NtAddDriverEntry
--------------------------------------------------------------------------------------
ADDR:83C136F7 | NtAdjustGroupsToken
--------------------------------------------------------------------------------------
ADDR:83C1B875 | NtAdjustPrivilegesToken
--------------------------------------------------------------------------------------
ADDR:83CEA979 | NtAlertResumeThread
--------------------------------------------------------------------------------------
ADDR:83C98718 | NtAlertThread
--------------------------------------------------------------------------------------
ADDR:83C1C19C | NtAllocateLocallyUniqueId
--------------------------------------------------------------------------------------
ADDR:83BAFC97 | NtAllocateReserveObject
--------------------------------------------------------------------------------------
ADDR:83CDCB1C | NtAllocateUserPhysicalPages
--------------------------------------------------------------------------------------
ADDR:83C06C7D | NtAllocateUuids
--------------------------------------------------------------------------------------
ADDR:83C59E0F | NtAllocateVirtualMemory
--------------------------------------------------------------------------------------
ADDR:83C8CCF6 | NtAlpcAcceptConnectPort
--------------------------------------------------------------------------------------
ADDR:83BE8D73 | NtAlpcCancelMessage
--------------------------------------------------------------------------------------
ADDR:83C61821 | NtAlpcConnectPort
--------------------------------------------------------------------------------------
ADDR:83BFC3BE | NtAlpcCreatePort
--------------------------------------------------------------------------------------
ADDR:83C18A35 | NtAlpcCreatePortSection
--------------------------------------------------------------------------------------
ADDR:83BFB093 | NtAlpcCreateResourceReserve
--------------------------------------------------------------------------------------
ADDR:83C18773 | NtAlpcCreateSectionView
--------------------------------------------------------------------------------------
ADDR:83C2144B | NtAlpcCreateSecurityContext
--------------------------------------------------------------------------------------
ADDR:83C26123 | NtAlpcDeletePortSection
--------------------------------------------------------------------------------------
ADDR:83CD7AD3 | NtAlpcDeleteResourceReserve
--------------------------------------------------------------------------------------
ADDR:83C81906 | NtAlpcDeleteSectionView
--------------------------------------------------------------------------------------
ADDR:83C20B6F | NtAlpcDeleteSecurityContext
--------------------------------------------------------------------------------------
ADDR:83C857D8 | NtAlpcDisconnectPort
--------------------------------------------------------------------------------------
ADDR:83C8165D | NtAlpcImpersonateClientOfPort
--------------------------------------------------------------------------------------
ADDR:83C1029F | NtAlpcOpenSenderProcess
--------------------------------------------------------------------------------------
ADDR:83C022CE | NtAlpcOpenSenderThread
--------------------------------------------------------------------------------------
ADDR:83C13ABA | NtAlpcQueryInformation
--------------------------------------------------------------------------------------
ADDR:83C6C387 | NtAlpcQueryInformationMessage
--------------------------------------------------------------------------------------
ADDR:83CD7BFB | NtAlpcRevokeSecurityContext
--------------------------------------------------------------------------------------
ADDR:83C830A3 | NtAlpcSendWaitReceivePort
--------------------------------------------------------------------------------------
ADDR:83C01800 | NtAlpcSetInformation
--------------------------------------------------------------------------------------
ADDR:83C90DE0 | NtApphelpCacheControl
--------------------------------------------------------------------------------------
ADDR:83BDD314 | NtAreMappedFilesTheSame
--------------------------------------------------------------------------------------
ADDR:83C0570E | NtAssignProcessToJobObject
--------------------------------------------------------------------------------------
ADDR:83A7E210 | NtCallbackReturn
--------------------------------------------------------------------------------------
ADDR:83BD8D69 | NtCancelIoFile
--------------------------------------------------------------------------------------
ADDR:83C04485 | NtCancelIoFileEx
--------------------------------------------------------------------------------------
ADDR:83CC7608 | NtCancelSynchronousIoFile
--------------------------------------------------------------------------------------
ADDR:83A3C292 | NtCancelTimer
--------------------------------------------------------------------------------------
ADDR:83C440F4 | NtClearEvent
--------------------------------------------------------------------------------------
ADDR:83C5509C | NtClose
--------------------------------------------------------------------------------------
ADDR:83C8EBDD | NtCloseObjectAuditAlarm
--------------------------------------------------------------------------------------
ADDR:83CFF59A | NtCommitComplete
--------------------------------------------------------------------------------------
ADDR:83CFF2BA | NtCommitEnlistment
--------------------------------------------------------------------------------------
ADDR:83BE13A1 | NtCommitTransaction
--------------------------------------------------------------------------------------
ADDR:83CAB835 | NtCompactKeys
--------------------------------------------------------------------------------------
ADDR:83C010DE | NtCompareTokens
--------------------------------------------------------------------------------------
ADDR:83BFD5C7 | NtCompleteConnectPort
--------------------------------------------------------------------------------------
ADDR:83CABAA3 | NtCompressKey
--------------------------------------------------------------------------------------
ADDR:83C86894 | NtConnectPort
--------------------------------------------------------------------------------------
ADDR:83A54F2C | NtContinue
--------------------------------------------------------------------------------------
ADDR:83CBD297 | NtCreateDebugObject
--------------------------------------------------------------------------------------
ADDR:83C1D247 | NtCreateDirectoryObject
--------------------------------------------------------------------------------------
ADDR:83BD6D23 | NtCreateEnlistment
--------------------------------------------------------------------------------------
ADDR:83C6F5D9 | NtCreateEvent
--------------------------------------------------------------------------------------
ADDR:83D17134 | NtCreateEventPair
--------------------------------------------------------------------------------------
ADDR:83C58E82 | NtCreateFile
--------------------------------------------------------------------------------------
ADDR:83C72195 | NtCreateIoCompletion
--------------------------------------------------------------------------------------
ADDR:83C061B9 | NtCreateJobObject
--------------------------------------------------------------------------------------
ADDR:83CEC700 | NtCreateJobSet
--------------------------------------------------------------------------------------
ADDR:83C1C9FF | NtCreateKey
--------------------------------------------------------------------------------------
ADDR:83C93B22 | NtCreateKeyedEvent
--------------------------------------------------------------------------------------
ADDR:83BE1719 | NtCreateKeyTransacted
--------------------------------------------------------------------------------------
ADDR:83C1D326 | NtCreateMailslotFile
--------------------------------------------------------------------------------------
ADDR:83C8CC15 | NtCreateMutant
--------------------------------------------------------------------------------------
ADDR:83C98086 | NtCreateNamedPipeFile
--------------------------------------------------------------------------------------
ADDR:83B9E64F | NtCreatePagingFile
--------------------------------------------------------------------------------------
ADDR:83C03156 | NtCreatePort
--------------------------------------------------------------------------------------
ADDR:83BE51F9 | NtCreatePrivateNamespace
--------------------------------------------------------------------------------------
ADDR:83CE8E07 | NtCreateProcess
--------------------------------------------------------------------------------------
ADDR:83CE8E52 | NtCreateProcessEx
--------------------------------------------------------------------------------------
ADDR:83D17BCB | NtCreateProfile
--------------------------------------------------------------------------------------
ADDR:83D17B8F | NtCreateProfileEx
--------------------------------------------------------------------------------------
ADDR:83BAAE6A | NtCreateResourceManager
--------------------------------------------------------------------------------------
ADDR:83C3ECE3 | NtCreateSection
--------------------------------------------------------------------------------------
ADDR:83C8F009 | NtCreateSemaphore
--------------------------------------------------------------------------------------
ADDR:83C1D059 | NtCreateSymbolicLinkObject
--------------------------------------------------------------------------------------
ADDR:83CE8C0E | NtCreateThread
--------------------------------------------------------------------------------------
ADDR:83C46D51 | NtCreateThreadEx
--------------------------------------------------------------------------------------
ADDR:83C08145 | NtCreateTimer
--------------------------------------------------------------------------------------
ADDR:83C1E43C | NtCreateToken
--------------------------------------------------------------------------------------
ADDR:83BE5668 | NtCreateTransaction
--------------------------------------------------------------------------------------
ADDR:83BAB10F | NtCreateTransactionManager
--------------------------------------------------------------------------------------
ADDR:83C63DE0 | NtCreateUserProcess
--------------------------------------------------------------------------------------
ADDR:83BAE38B | NtCreateWaitablePort
--------------------------------------------------------------------------------------
ADDR:83C71F38 | NtCreateWorkerFactory
--------------------------------------------------------------------------------------
ADDR:83CBE150 | NtDebugActiveProcess
--------------------------------------------------------------------------------------
ADDR:83CBE811 | NtDebugContinue
--------------------------------------------------------------------------------------
ADDR:83C3F65F | NtDelayExecution
--------------------------------------------------------------------------------------
ADDR:83BFA62D | NtDeleteAtom
--------------------------------------------------------------------------------------
ADDR:83D11457 | NtDeleteBootEntry
--------------------------------------------------------------------------------------
ADDR:83D126AF | NtDeleteDriverEntry
--------------------------------------------------------------------------------------
ADDR:83BC89EC | NtDeleteFile
--------------------------------------------------------------------------------------
ADDR:83C0B219 | NtDeleteKey
--------------------------------------------------------------------------------------
ADDR:83CA0236 | NtDeleteObjectAuditAlarm
--------------------------------------------------------------------------------------
ADDR:83CA4D05 | NtDeletePrivateNamespace
--------------------------------------------------------------------------------------
ADDR:83BF11C9 | NtDeleteValueKey
--------------------------------------------------------------------------------------
ADDR:83C6B482 | NtDeviceIoControlFile
--------------------------------------------------------------------------------------
ADDR:83CD4914 | NtDisableLastKnownGood
--------------------------------------------------------------------------------------
ADDR:83D0F68F | NtDisplayString
--------------------------------------------------------------------------------------
ADDR:83B21AF9 | NtDrawText
--------------------------------------------------------------------------------------
ADDR:83C8A0C2 | NtDuplicateObject
--------------------------------------------------------------------------------------
ADDR:83C4A205 | NtDuplicateToken
--------------------------------------------------------------------------------------
ADDR:83CD49F5 | NtEnableLastKnownGood
--------------------------------------------------------------------------------------
ADDR:83D11659 | NtEnumerateBootEntries
--------------------------------------------------------------------------------------
ADDR:83D128AF | NtEnumerateDriverEntries
--------------------------------------------------------------------------------------
ADDR:83C73A2F | NtEnumerateKey
--------------------------------------------------------------------------------------
ADDR:83D11239 | NtEnumerateSystemEnvironmentValuesEx
--------------------------------------------------------------------------------------
ADDR:83D000D4 | NtEnumerateTransactionObject
--------------------------------------------------------------------------------------
ADDR:83C6B610 | NtEnumerateValueKey
--------------------------------------------------------------------------------------
ADDR:83CDAD1D | NtExtendSection
--------------------------------------------------------------------------------------
ADDR:83BF20E1 | NtFilterToken
--------------------------------------------------------------------------------------
ADDR:83BFF1FA | NtFindAtom
--------------------------------------------------------------------------------------
ADDR:83C2CC83 | NtFlushBuffersFile
--------------------------------------------------------------------------------------
ADDR:83BA758E | NtFlushInstallUILanguage
--------------------------------------------------------------------------------------
ADDR:83BFC97E | NtFlushInstructionCache
--------------------------------------------------------------------------------------
ADDR:83BEC2D1 | NtFlushKey
--------------------------------------------------------------------------------------
ADDR:83A324E7 | NtFlushProcessWriteBuffers
--------------------------------------------------------------------------------------
ADDR:83BED173 | NtFlushVirtualMemory
--------------------------------------------------------------------------------------
ADDR:83CDDBC7 | NtFlushWriteBuffer
--------------------------------------------------------------------------------------
ADDR:83CDD237 | NtFreeUserPhysicalPages
--------------------------------------------------------------------------------------
ADDR:83AC1821 | NtFreeVirtualMemory
--------------------------------------------------------------------------------------
ADDR:83ADF9BC | NtFreezeRegistry
--------------------------------------------------------------------------------------
ADDR:83D00522 | NtFreezeTransactions
--------------------------------------------------------------------------------------
ADDR:83C71CDE | NtFsControlFile
--------------------------------------------------------------------------------------
ADDR:83CA716F | NtGetContextThread
--------------------------------------------------------------------------------------
ADDR:83BECEA5 | NtGetCurrentProcessorNumber
--------------------------------------------------------------------------------------
ADDR:83CE5E4F | NtGetDevicePowerState
--------------------------------------------------------------------------------------
ADDR:83C878C7 | NtGetMUIRegistryInfo
--------------------------------------------------------------------------------------
ADDR:83CEAB70 | NtGetNextProcess
--------------------------------------------------------------------------------------
ADDR:83CA1A82 | NtGetNextThread
--------------------------------------------------------------------------------------
ADDR:83C01F96 | NtGetNlsSectionPtr
--------------------------------------------------------------------------------------
ADDR:83D0067C | NtGetNotificationResourceManager
--------------------------------------------------------------------------------------
ADDR:83BC5270 | NtGetPlugPlayEvent
--------------------------------------------------------------------------------------
ADDR:83AF872B | NtGetWriteWatch
--------------------------------------------------------------------------------------
ADDR:83C00F40 | NtImpersonateAnonymousToken
--------------------------------------------------------------------------------------
ADDR:83CD6C1D | NtImpersonateClientOfPort
--------------------------------------------------------------------------------------
ADDR:83C6663B | NtImpersonateThread
--------------------------------------------------------------------------------------
ADDR:83C900D9 | NtInitializeNlsFiles
--------------------------------------------------------------------------------------
ADDR:83BC8266 | NtInitializeRegistry
--------------------------------------------------------------------------------------
ADDR:83C9F9D4 | NtInitiatePowerAction
--------------------------------------------------------------------------------------
ADDR:83CA2FB5 | NtIsProcessInJob
--------------------------------------------------------------------------------------
ADDR:83CE5E36 | NtIsSystemResumeAutomatic
--------------------------------------------------------------------------------------
ADDR:83BA8617 | NtIsUILanguageComitted
--------------------------------------------------------------------------------------
ADDR:83BA20CB | NtListenPort
--------------------------------------------------------------------------------------
ADDR:83BAF279 | NtLoadDriver
--------------------------------------------------------------------------------------
ADDR:83BA5AB9 | NtLoadKey
--------------------------------------------------------------------------------------
ADDR:83B8C137 | NtLoadKey2
--------------------------------------------------------------------------------------
ADDR:83BCADA2 | NtLoadKeyEx
--------------------------------------------------------------------------------------
ADDR:83C2188C | NtLockFile
--------------------------------------------------------------------------------------
ADDR:83B8594C | NtLockProductActivationKeys
**** Hidden Message ***** 来学习了不是沙发呀,呵呵!辛苦了。 聪明的女人对付男人,而笨女人对付女人. 回复 1# 透明007
页:
[1]