windows 7 SSDT 函数汇总

透明007

COUNT: 00000191
SSTD Function List
--------------------------------------------------------------------------------------
ADDR:83C6E0CB        |        NtAcceptConnectPort

--------------------------------------------------------------------------------------
ADDR:83AC722B        |        NtAccessCheck

--------------------------------------------------------------------------------------
ADDR:83C19E4E        |        NtAccessCheckAndAuditAlarm

--------------------------------------------------------------------------------------
ADDR:83A326E1        |        NtAccessCheckByType

--------------------------------------------------------------------------------------
ADDR:83C8EE6E        |        NtAccessCheckByTypeAndAuditAlarm

--------------------------------------------------------------------------------------
ADDR:83B0B48A        |        NtAccessCheckByTypeResultList

--------------------------------------------------------------------------------------
ADDR:83CF7B6D        |        NtAccessCheckByTypeResultListAndAuditAlarm

--------------------------------------------------------------------------------------
ADDR:83CF7BB6        |        NtAccessCheckByTypeResultListAndAuditAlarmByHandle

--------------------------------------------------------------------------------------
ADDR:83C052D7        |        NtAddAtom

--------------------------------------------------------------------------------------
ADDR:83D11426        |        NtAddBootEntry

--------------------------------------------------------------------------------------
ADDR:83D1267B        |        NtAddDriverEntry

--------------------------------------------------------------------------------------
ADDR:83C136F7        |        NtAdjustGroupsToken

--------------------------------------------------------------------------------------
ADDR:83C1B875        |        NtAdjustPrivilegesToken

--------------------------------------------------------------------------------------
ADDR:83CEA979        |        NtAlertResumeThread

--------------------------------------------------------------------------------------
ADDR:83C98718        |        NtAlertThread

--------------------------------------------------------------------------------------
ADDR:83C1C19C        |        NtAllocateLocallyUniqueId

--------------------------------------------------------------------------------------
ADDR:83BAFC97        |        NtAllocateReserveObject

--------------------------------------------------------------------------------------
ADDR:83CDCB1C        |        NtAllocateUserPhysicalPages

--------------------------------------------------------------------------------------
ADDR:83C06C7D        |        NtAllocateUuids

--------------------------------------------------------------------------------------
ADDR:83C59E0F        |        NtAllocateVirtualMemory

--------------------------------------------------------------------------------------
ADDR:83C8CCF6        |        NtAlpcAcceptConnectPort

--------------------------------------------------------------------------------------
ADDR:83BE8D73        |        NtAlpcCancelMessage

--------------------------------------------------------------------------------------
ADDR:83C61821        |        NtAlpcConnectPort

--------------------------------------------------------------------------------------
ADDR:83BFC3BE        |        NtAlpcCreatePort

--------------------------------------------------------------------------------------
ADDR:83C18A35        |        NtAlpcCreatePortSection

--------------------------------------------------------------------------------------
ADDR:83BFB093        |        NtAlpcCreateResourceReserve

--------------------------------------------------------------------------------------
ADDR:83C18773        |        NtAlpcCreateSectionView

--------------------------------------------------------------------------------------
ADDR:83C2144B        |        NtAlpcCreateSecurityContext

--------------------------------------------------------------------------------------
ADDR:83C26123        |        NtAlpcDeletePortSection

--------------------------------------------------------------------------------------
ADDR:83CD7AD3        |        NtAlpcDeleteResourceReserve

--------------------------------------------------------------------------------------
ADDR:83C81906        |        NtAlpcDeleteSectionView

--------------------------------------------------------------------------------------
ADDR:83C20B6F        |        NtAlpcDeleteSecurityContext

--------------------------------------------------------------------------------------
ADDR:83C857D8        |        NtAlpcDisconnectPort

--------------------------------------------------------------------------------------
ADDR:83C8165D        |        NtAlpcImpersonateClientOfPort

--------------------------------------------------------------------------------------
ADDR:83C1029F        |        NtAlpcOpenSenderProcess

--------------------------------------------------------------------------------------
ADDR:83C022CE        |        NtAlpcOpenSenderThread

--------------------------------------------------------------------------------------
ADDR:83C13ABA        |        NtAlpcQueryInformation

--------------------------------------------------------------------------------------
ADDR:83C6C387        |        NtAlpcQueryInformationMessage

--------------------------------------------------------------------------------------
ADDR:83CD7BFB        |        NtAlpcRevokeSecurityContext

--------------------------------------------------------------------------------------
ADDR:83C830A3        |        NtAlpcSendWaitReceivePort

--------------------------------------------------------------------------------------
ADDR:83C01800        |        NtAlpcSetInformation

--------------------------------------------------------------------------------------
ADDR:83C90DE0        |        NtApphelpCacheControl

--------------------------------------------------------------------------------------
ADDR:83BDD314        |        NtAreMappedFilesTheSame

--------------------------------------------------------------------------------------
ADDR:83C0570E        |        NtAssignProcessToJobObject

--------------------------------------------------------------------------------------
ADDR:83A7E210        |        NtCallbackReturn

--------------------------------------------------------------------------------------
ADDR:83BD8D69        |        NtCancelIoFile

--------------------------------------------------------------------------------------
ADDR:83C04485        |        NtCancelIoFileEx

--------------------------------------------------------------------------------------
ADDR:83CC7608        |        NtCancelSynchronousIoFile

--------------------------------------------------------------------------------------
ADDR:83A3C292        |        NtCancelTimer

--------------------------------------------------------------------------------------
ADDR:83C440F4        |        NtClearEvent

--------------------------------------------------------------------------------------
ADDR:83C5509C        |        NtClose

--------------------------------------------------------------------------------------
ADDR:83C8EBDD        |        NtCloseObjectAuditAlarm

--------------------------------------------------------------------------------------
ADDR:83CFF59A        |        NtCommitComplete

--------------------------------------------------------------------------------------
ADDR:83CFF2BA        |        NtCommitEnlistment

--------------------------------------------------------------------------------------
ADDR:83BE13A1        |        NtCommitTransaction

--------------------------------------------------------------------------------------
ADDR:83CAB835        |        NtCompactKeys

--------------------------------------------------------------------------------------
ADDR:83C010DE        |        NtCompareTokens

--------------------------------------------------------------------------------------
ADDR:83BFD5C7        |        NtCompleteConnectPort

--------------------------------------------------------------------------------------
ADDR:83CABAA3        |        NtCompressKey

--------------------------------------------------------------------------------------
ADDR:83C86894        |        NtConnectPort

--------------------------------------------------------------------------------------
ADDR:83A54F2C        |        NtContinue

--------------------------------------------------------------------------------------
ADDR:83CBD297        |        NtCreateDebugObject

--------------------------------------------------------------------------------------
ADDR:83C1D247        |        NtCreateDirectoryObject

--------------------------------------------------------------------------------------
ADDR:83BD6D23        |        NtCreateEnlistment

--------------------------------------------------------------------------------------
ADDR:83C6F5D9        |        NtCreateEvent

--------------------------------------------------------------------------------------
ADDR:83D17134        |        NtCreateEventPair

--------------------------------------------------------------------------------------
ADDR:83C58E82        |        NtCreateFile

--------------------------------------------------------------------------------------
ADDR:83C72195        |        NtCreateIoCompletion

--------------------------------------------------------------------------------------
ADDR:83C061B9        |        NtCreateJobObject

--------------------------------------------------------------------------------------
ADDR:83CEC700        |        NtCreateJobSet

--------------------------------------------------------------------------------------
ADDR:83C1C9FF        |        NtCreateKey

--------------------------------------------------------------------------------------
ADDR:83C93B22        |        NtCreateKeyedEvent

--------------------------------------------------------------------------------------
ADDR:83BE1719        |        NtCreateKeyTransacted

--------------------------------------------------------------------------------------
ADDR:83C1D326        |        NtCreateMailslotFile

--------------------------------------------------------------------------------------
ADDR:83C8CC15        |        NtCreateMutant

--------------------------------------------------------------------------------------
ADDR:83C98086        |        NtCreateNamedPipeFile

--------------------------------------------------------------------------------------
ADDR:83B9E64F        |        NtCreatePagingFile

--------------------------------------------------------------------------------------
ADDR:83C03156        |        NtCreatePort

--------------------------------------------------------------------------------------
ADDR:83BE51F9        |        NtCreatePrivateNamespace

--------------------------------------------------------------------------------------
ADDR:83CE8E07        |        NtCreateProcess

--------------------------------------------------------------------------------------
ADDR:83CE8E52        |        NtCreateProcessEx

--------------------------------------------------------------------------------------
ADDR:83D17BCB        |        NtCreateProfile

--------------------------------------------------------------------------------------
ADDR:83D17B8F        |        NtCreateProfileEx

--------------------------------------------------------------------------------------
ADDR:83BAAE6A        |        NtCreateResourceManager

--------------------------------------------------------------------------------------
ADDR:83C3ECE3        |        NtCreateSection

--------------------------------------------------------------------------------------
ADDR:83C8F009        |        NtCreateSemaphore

--------------------------------------------------------------------------------------
ADDR:83C1D059        |        NtCreateSymbolicLinkObject

--------------------------------------------------------------------------------------
ADDR:83CE8C0E        |        NtCreateThread

--------------------------------------------------------------------------------------
ADDR:83C46D51        |        NtCreateThreadEx

--------------------------------------------------------------------------------------
ADDR:83C08145        |        NtCreateTimer

--------------------------------------------------------------------------------------
ADDR:83C1E43C        |        NtCreateToken

--------------------------------------------------------------------------------------
ADDR:83BE5668        |        NtCreateTransaction

--------------------------------------------------------------------------------------
ADDR:83BAB10F        |        NtCreateTransactionManager

--------------------------------------------------------------------------------------
ADDR:83C63DE0        |        NtCreateUserProcess

--------------------------------------------------------------------------------------
ADDR:83BAE38B        |        NtCreateWaitablePort

--------------------------------------------------------------------------------------
ADDR:83C71F38        |        NtCreateWorkerFactory

--------------------------------------------------------------------------------------
ADDR:83CBE150        |        NtDebugActiveProcess

--------------------------------------------------------------------------------------
ADDR:83CBE811        |        NtDebugContinue

--------------------------------------------------------------------------------------
ADDR:83C3F65F        |        NtDelayExecution

--------------------------------------------------------------------------------------
ADDR:83BFA62D        |        NtDeleteAtom

--------------------------------------------------------------------------------------
ADDR:83D11457        |        NtDeleteBootEntry

--------------------------------------------------------------------------------------
ADDR:83D126AF        |        NtDeleteDriverEntry

--------------------------------------------------------------------------------------
ADDR:83BC89EC        |        NtDeleteFile

--------------------------------------------------------------------------------------
ADDR:83C0B219        |        NtDeleteKey

--------------------------------------------------------------------------------------
ADDR:83CA0236        |        NtDeleteObjectAuditAlarm

--------------------------------------------------------------------------------------
ADDR:83CA4D05        |        NtDeletePrivateNamespace

--------------------------------------------------------------------------------------
ADDR:83BF11C9        |        NtDeleteValueKey

--------------------------------------------------------------------------------------
ADDR:83C6B482        |        NtDeviceIoControlFile

--------------------------------------------------------------------------------------
ADDR:83CD4914        |        NtDisableLastKnownGood

--------------------------------------------------------------------------------------
ADDR:83D0F68F        |        NtDisplayString

--------------------------------------------------------------------------------------
ADDR:83B21AF9        |        NtDrawText

--------------------------------------------------------------------------------------
ADDR:83C8A0C2        |        NtDuplicateObject

--------------------------------------------------------------------------------------
ADDR:83C4A205        |        NtDuplicateToken

--------------------------------------------------------------------------------------
ADDR:83CD49F5        |        NtEnableLastKnownGood

--------------------------------------------------------------------------------------
ADDR:83D11659        |        NtEnumerateBootEntries

--------------------------------------------------------------------------------------
ADDR:83D128AF        |        NtEnumerateDriverEntries

--------------------------------------------------------------------------------------
ADDR:83C73A2F        |        NtEnumerateKey

--------------------------------------------------------------------------------------
ADDR:83D11239        |        NtEnumerateSystemEnvironmentValuesEx

--------------------------------------------------------------------------------------
ADDR:83D000D4        |        NtEnumerateTransactionObject

--------------------------------------------------------------------------------------
ADDR:83C6B610        |        NtEnumerateValueKey

--------------------------------------------------------------------------------------
ADDR:83CDAD1D        |        NtExtendSection

--------------------------------------------------------------------------------------
ADDR:83BF20E1        |        NtFilterToken

--------------------------------------------------------------------------------------
ADDR:83BFF1FA        |        NtFindAtom

--------------------------------------------------------------------------------------
ADDR:83C2CC83        |        NtFlushBuffersFile

--------------------------------------------------------------------------------------
ADDR:83BA758E        |        NtFlushInstallUILanguage

--------------------------------------------------------------------------------------
ADDR:83BFC97E        |        NtFlushInstructionCache

--------------------------------------------------------------------------------------
ADDR:83BEC2D1        |        NtFlushKey

--------------------------------------------------------------------------------------
ADDR:83A324E7        |        NtFlushProcessWriteBuffers

--------------------------------------------------------------------------------------
ADDR:83BED173        |        NtFlushVirtualMemory

--------------------------------------------------------------------------------------
ADDR:83CDDBC7        |        NtFlushWriteBuffer

--------------------------------------------------------------------------------------
ADDR:83CDD237        |        NtFreeUserPhysicalPages

--------------------------------------------------------------------------------------
ADDR:83AC1821        |        NtFreeVirtualMemory

--------------------------------------------------------------------------------------
ADDR:83ADF9BC        |        NtFreezeRegistry

--------------------------------------------------------------------------------------
ADDR:83D00522        |        NtFreezeTransactions

--------------------------------------------------------------------------------------
ADDR:83C71CDE        |        NtFsControlFile

--------------------------------------------------------------------------------------
ADDR:83CA716F        |        NtGetContextThread

--------------------------------------------------------------------------------------
ADDR:83BECEA5        |        NtGetCurrentProcessorNumber

--------------------------------------------------------------------------------------
ADDR:83CE5E4F        |        NtGetDevicePowerState

--------------------------------------------------------------------------------------
ADDR:83C878C7        |        NtGetMUIRegistryInfo

--------------------------------------------------------------------------------------
ADDR:83CEAB70        |        NtGetNextProcess

--------------------------------------------------------------------------------------
ADDR:83CA1A82        |        NtGetNextThread

--------------------------------------------------------------------------------------
ADDR:83C01F96        |        NtGetNlsSectionPtr

--------------------------------------------------------------------------------------
ADDR:83D0067C        |        NtGetNotificationResourceManager

--------------------------------------------------------------------------------------
ADDR:83BC5270        |        NtGetPlugPlayEvent

--------------------------------------------------------------------------------------
ADDR:83AF872B        |        NtGetWriteWatch

--------------------------------------------------------------------------------------
ADDR:83C00F40        |        NtImpersonateAnonymousToken

--------------------------------------------------------------------------------------
ADDR:83CD6C1D        |        NtImpersonateClientOfPort

--------------------------------------------------------------------------------------
ADDR:83C6663B        |        NtImpersonateThread

--------------------------------------------------------------------------------------
ADDR:83C900D9        |        NtInitializeNlsFiles

--------------------------------------------------------------------------------------
ADDR:83BC8266        |        NtInitializeRegistry

--------------------------------------------------------------------------------------
ADDR:83C9F9D4        |        NtInitiatePowerAction

--------------------------------------------------------------------------------------
ADDR:83CA2FB5        |        NtIsProcessInJob

--------------------------------------------------------------------------------------
ADDR:83CE5E36        |        NtIsSystemResumeAutomatic

--------------------------------------------------------------------------------------
ADDR:83BA8617        |        NtIsUILanguageComitted

--------------------------------------------------------------------------------------
ADDR:83BA20CB        |        NtListenPort

--------------------------------------------------------------------------------------
ADDR:83BAF279        |        NtLoadDriver

--------------------------------------------------------------------------------------
ADDR:83BA5AB9        |        NtLoadKey

--------------------------------------------------------------------------------------
ADDR:83B8C137        |        NtLoadKey2

--------------------------------------------------------------------------------------
ADDR:83BCADA2        |        NtLoadKeyEx

--------------------------------------------------------------------------------------
ADDR:83C2188C        |        NtLockFile

--------------------------------------------------------------------------------------
ADDR:83B8594C        |        NtLockProductActivationKeys

游客，如果您要查看本帖隐藏内容请回复

cooby

来学习了不是沙发呀，呵呵！辛苦了。

cooby

聪明的女人对付男人，而笨女人对付女人.

niulin

回复 1# 透明007