window7 SSDT 服务函数表 401个
Windows Major Version: 6Windows Minor Version: 1
Windows Build Number: 7600
-------------------------------------------------------
0x828620CB NtAcceptConnectPort
0x826BB22B NtAccessCheck
0x8280DE4E NtAccessCheckAndAuditAlarm
0x826266E1 NtAccessCheckByType
0x82882E6E NtAccessCheckByTypeAndAuditAlarm
0x826FF48A NtAccessCheckByTypeResultList
0x828EBB6D NtAccessCheckByTypeResultListAndAuditAlarm
0x828EBBB6 NtAccessCheckByTypeResultListAndAuditAlarmByHandle
0x827F92D7 NtAddAtom
0x82905426 NtAddBootEntry
0x8290667B NtAddDriverEntry
0x828076F7 NtAdjustGroupsToken
0x8280F875 NtAdjustPrivilegesToken
0x828DE979 NtAlertResumeThread
0x8288C718 NtAlertThread
0x8281019C NtAllocateLocallyUniqueId
0x827A3C97 NtAllocateReserveObject
0x828D0B1C NtAllocateUserPhysicalPages
0x827FAC7D NtAllocateUuids
0x8284DE0F NtAllocateVirtualMemory
0x82880CF6 NtAlpcAcceptConnectPort
0x827DCD73 NtAlpcCancelMessage
0x82855821 NtAlpcConnectPort
0x827F03BE NtAlpcCreatePort
0x8280CA35 NtAlpcCreatePortSection
0x827EF093 NtAlpcCreateResourceReserve
0x8280C773 NtAlpcCreateSectionView
0x8281544B NtAlpcCreateSecurityContext
0x8281A123 NtAlpcDeletePortSection
0x828CBAD3 NtAlpcDeleteResourceReserve
0x82875906 NtAlpcDeleteSectionView
0x82814B6F NtAlpcDeleteSecurityContext
0x828797D8 NtAlpcDisconnectPort
0x8287565D NtAlpcImpersonateClientOfPort
0x8280429F NtAlpcOpenSenderProcess
0x827F62CE NtAlpcOpenSenderThread
0x82807ABA NtAlpcQueryInformation
0x82860387 NtAlpcQueryInformationMessage
0x828CBBFB NtAlpcRevokeSecurityContext
0x828770A3 NtAlpcSendWaitReceivePort
0x827F5800 NtAlpcSetInformation
0x82884DE0 NtApphelpCacheControl
0x827D1314 NtAreMappedFilesTheSame
0x827F970E NtAssignProcessToJobObject
0x82672210 NtCallbackReturn
0x827CCD69 NtCancelIoFile
0x827F8485 NtCancelIoFileEx
0x828BB608 NtCancelSynchronousIoFile
0x82630292 NtCancelTimer
0x828380F4 NtClearEvent
0x8284909C NtClose
0x82882BDD NtCloseObjectAuditAlarm
0x828F359A NtCommitComplete
0x828F32BA NtCommitEnlistment
0x827D53A1 NtCommitTransaction
0x8289F835 NtCompactKeys
0x827F50DE NtCompareTokens
0x827F15C7 NtCompleteConnectPort
0x8289FAA3 NtCompressKey
0x8287A894 NtConnectPort
0x82648F2C NtContinue
0x828B1297 NtCreateDebugObject
0x82811247 NtCreateDirectoryObject
0x827CAD23 NtCreateEnlistment
0x828635D9 NtCreateEvent
0x8290B134 NtCreateEventPair
0x8284CE82 NtCreateFile
0x82866195 NtCreateIoCompletion
0x827FA1B9 NtCreateJobObject
0x828E0700 NtCreateJobSet
0x828109FF NtCreateKey
0x82887B22 NtCreateKeyedEvent
0x827D5719 NtCreateKeyTransacted
0x82811326 NtCreateMailslotFile
0x82880C15 NtCreateMutant
0x8288C086 NtCreateNamedPipeFile
0x8279264F NtCreatePagingFile
0x827F7156 NtCreatePort
0x827D91F9 NtCreatePrivateNamespace
0x828DCE07 NtCreateProcess
0x828DCE52 NtCreateProcessEx
0x8290BBCB NtCreateProfile
0x8290BB8F NtCreateProfileEx
0x8279EE6A NtCreateResourceManager
0x82832CE3 NtCreateSection
0x82883009 NtCreateSemaphore
0x82811059 NtCreateSymbolicLinkObject
0x828DCC0E NtCreateThread
0x8283AD51 NtCreateThreadEx
0x827FC145 NtCreateTimer
0x8281243C NtCreateToken
0x827D9668 NtCreateTransaction
0x8279F10F NtCreateTransactionManager
0x82857DE0 NtCreateUserProcess
0x827A238B NtCreateWaitablePort
0x82865F38 NtCreateWorkerFactory
0x828B2150 NtDebugActiveProcess
0x828B2811 NtDebugContinue
0x8283365F NtDelayExecution
0x827EE62D NtDeleteAtom
0x82905457 NtDeleteBootEntry
0x829066AF NtDeleteDriverEntry
0x827BC9EC NtDeleteFile
0x827FF219 NtDeleteKey
0x82894236 NtDeleteObjectAuditAlarm
0x82898D05 NtDeletePrivateNamespace
0x827E51C9 NtDeleteValueKey
0x8285F482 NtDeviceIoControlFile
0x828C8914 NtDisableLastKnownGood
0x8290368F NtDisplayString
0x82715AF9 NtDrawText
0x8287E0C2 NtDuplicateObject
0x8283E205 NtDuplicateToken
0x828C89F5 NtEnableLastKnownGood
0x82905659 NtEnumerateBootEntries
0x829068AF NtEnumerateDriverEntries
0x82867A2F NtEnumerateKey
0x82905239 NtEnumerateSystemEnvironmentValuesEx
0x828F40D4 NtEnumerateTransactionObject
0x8285F610 NtEnumerateValueKey
0x828CED1D NtExtendSection
0x827E60E1 NtFilterToken
0x827F31FA NtFindAtom
0x82820C83 NtFlushBuffersFile
0x8279B58E NtFlushInstallUILanguage
0x827F097E NtFlushInstructionCache
0x827E02D1 NtFlushKey
0x826264E7 NtFlushProcessWriteBuffers
0x827E1173 NtFlushVirtualMemory
0x828D1BC7 NtFlushWriteBuffer
0x828D1237 NtFreeUserPhysicalPages
0x826B5821 NtFreeVirtualMemory
0x826D39BC NtFreezeRegistry
0x828F4522 NtFreezeTransactions
0x82865CDE NtFsControlFile
0x8289B16F NtGetContextThread
0x827E0EA5 NtGetCurrentProcessorNumber
0x828D9E4F NtGetDevicePowerState
0x8287B8C7 NtGetMUIRegistryInfo
0x828DEB70 NtGetNextProcess
0x82895A82 NtGetNextThread
0x827F5F96 NtGetNlsSectionPtr
0x828F467C NtGetNotificationResourceManager
0x827B9270 NtGetPlugPlayEvent
0x826EC72B NtGetWriteWatch
0x827F4F40 NtImpersonateAnonymousToken
0x828CAC1D NtImpersonateClientOfPort
0x8285A63B NtImpersonateThread
0x828840D9 NtInitializeNlsFiles
0x827BC266 NtInitializeRegistry
0x828939D4 NtInitiatePowerAction
0x82896FB5 NtIsProcessInJob
0x828D9E36 NtIsSystemResumeAutomatic
0x8279C617 NtIsUILanguageComitted
0x827960CB NtListenPort
0x827A3279 NtLoadDriver
0x82799AB9 NtLoadKey
0x82780137 NtLoadKey2
0x827BEDA2 NtLoadKeyEx
0x8281588C NtLockFile
0x8277994C NtLockProductActivationKeys
0x827756E1 NtLockRegistryKey
0x82624DA1 NtLockVirtualMemory
0x82890C54 NtMakePermanentObject
0x82809363 NtMakeTemporaryObject
0x82863F2E NtMapCMFModule
0x828CFDDD NtMapUserPhysicalPages
0x828D03B3 NtMapUserPhysicalPagesScatter
0x82880ED7 NtMapViewOfSection
0x82905628 NtModifyBootEntry
0x82906880 NtModifyDriverEntry
0x827F064E NtNotifyChangeDirectoryFile
0x827FBCE5 NtNotifyChangeKey
0x827FB08F NtNotifyChangeMultipleKeys
0x827A09B1 NtNotifyChangeSession
0x828803E4 NtOpenDirectoryObject
0x828F2B1D NtOpenEnlistment
0x82883567 NtOpenEvent
0x8290B235 NtOpenEventPair
0x8287C5C4 NtOpenFile
0x828BB2FD NtOpenIoCompletion
0x828E0077 NtOpenJobObject
0x82844704 NtOpenKey
0x8283B6DF NtOpenKeyEx
0x8290B56B NtOpenKeyedEvent
0x827D94D4 NtOpenKeyTransacted
0x827D9464 NtOpenKeyTransactedEx
0x8281E6E1 NtOpenMutant
0x827DF7A2 NtOpenObjectAuditAlarm
0x827DD082 NtOpenPrivateNamespace
**** Hidden Message ***** 支持楼主，支持看流星社区，以后我会经常来！
页:
[1]