WINDOWS SEVEN/7 BETA1 内核服务函数列表
关键词: 广州中专学校
WINDOWS SEVEN/7 BETA1 内核服务函数列表,数量=0x193(比NT多160个系统服务函数)——广州中专学校转 WINDOWS VISTA 内核服务函数列表,数量=0x18E(比NT多150个系统服务函数) WINDOWS 2K3/sp1 内核服务函数列表,数量=0x127(比NT多47个系统服务函数) WINDOWS xp/sp2 内核服务函数列表,数量=0x11C(比NT多36个系统服务函数) WINDOWS nt/sp4 内核服务函数列表,数量=0x0F8 WINDOWS 7 内核服务函数列表,数量=0x193 (此表由创建于CNASM内部系统分析工具3.0) 000=82A1BAB3:ZwAcceptConnectPort 001=828C41B4:ZwAccessCheck 002=82A8B3E2:ZwAccessCheckAndAuditAlarm 003=82852001:ZwAccessCheckByType 004=82A94E36:ZwAccessCheckByTypeAndAuditAlarm 005=82918816:ZwAccessCheckByTypeResultList 006=82AFB2E1:ZwAccessCheckByTypeResultListAndAuditAlarm 007=82AFB32A:ZwAccessCheckByTypeResultListAndAuditAlarmByHandle 008=82B203C0:ZwAcquireCMFViewOwnership 009=82A1F0A7:ZwAddAtom 00A=82B19D70:ZwAddBootEntry 00B=82B1AFB2:ZwAddDriverEntry 00C=829FE177:ZwAdjustGroupsToken 00D=82A83B39:ZwAdjustPrivilegesToken 00E=82AECA1D:ZwAlertResumeThread 00F=82A942AB:ZwAlertThread 010=82A288E5:ZwAllocateLocallyUniqueId 011=82AEB1B0:ZwAllocateReserveObject 012=82ADB586:ZwAllocateUserPhysicalPages 013=82A02759:ZwAllocateUuids 014=82A431D8:ZwAllocateVirtualMemory 015=82A854EB:ZwAlpcAcceptConnectPort 016=82A173A0:ZwAlpcCancelMessage 017=82A276C3:ZwAlpcConnectPort 018=82A1A8A5:ZwAlpcCreatePort 019=82A03D5A:ZwAlpcCreatePortSection 01A=82A16A60:ZwAlpcCreateResourceReserve 01B=82A03B3A:ZwAlpcCreateSectionView 01C=82A23430:ZwAlpcCreateSecurityContext 01D=82A03F59:ZwAlpcDeletePortSection 01E=82AD61B9:ZwAlpcDeleteResourceReserve 01F=82A6D8B7:ZwAlpcDeleteSectionView 020=82A23A03:ZwAlpcDeleteSecurityContext 021=82A6C8C4:ZwAlpcDisconnectPort 022=82A94ACC:ZwAlpcImpersonateClientOfPort 023=82A278C8:ZwAlpcOpenSenderProcess 024=82A2B171:ZwAlpcOpenSenderThread 025=82A1BE61:ZwAlpcQueryInformation 026=82A5E5DD:ZwAlpcQueryInformationMessage 027=82AD62DD:ZwAlpcRevokeSecurityContext 028=82A5CD17:ZwAlpcSendWaitReceivePort 029=82A1ACD1:ZwAlpcSetInformation 02A=82A8A1D6:ZwApphelpCacheControl 02B=82A9B010:ZwAreMappedFilesTheSame 02C=82A2C1A4:ZwAssignProcessToJobObject 02D=82887534:ZwCallbackReturn 02E=82A104DF:ZwCancelIoFile 02F=82A9B160:ZwCancelIoFileEx 030=82AC0BC8:ZwCancelSynchronousIoFile 031=8285216E:ZwCancelTimer 032=82A3D692:ZwClearEvent 033=82A48462:ZwClose 034=82A94D65:ZwCloseObjectAuditAlarm 035=82B0353F:ZwCommitComplete 036=82B03263:ZwCommitEnlistment 037=829D7B53:ZwCommitTransaction 038=82AA231B:ZwCompactKeys 039=82A11ED4:ZwCompareTokens 03A=82A1BB30:ZwCompleteConnectPort 03B=82AA2587:ZwCompressKey 03C=82A88B95:ZwConnectPort 03D=828623A4:ZwContinue 03E=82AB670E:ZwCreateDebugObject 03F=82A25837:ZwCreateDirectoryObject 040=829C8C08:ZwCreateEnlistment 041=82A5EAF5:ZwCreateEvent 042=82B20D75:ZwCreateEventPair 043=82A687FB:ZwCreateFile 044=82A85928:ZwCreateIoCompletion 045=829FCEE7:ZwCreateJobObject 046=82AEE8B4:ZwCreateJobSet 047=82A6ECAA:ZwCreateKey 048=82A1A327:ZwCreateKeyedEvent 049=829D62AA:ZwCreateKeyTransacted 04A=82A02579:ZwCreateMailslotFile 04B=82A881FE:ZwCreateMutant 04C=82A88CB0:ZwCreateNamedPipeFile 04D=829A3226:ZwCreatePagingFile 04E=829DE91E:ZwCreatePort 04F=829EC6E0:ZwCreatePrivateNamespace 050=82AEAC9F:ZwCreateProcess 051=82AEACEA:ZwCreateProcessEx 052=82B21483:ZwCreateProfile 053=829313A3:ZwCreateProfileEx 054=829CE1F5:ZwCreateResourceManager 055=82A64632:ZwCreateSection 056=82A87697:ZwCreateSemaphore 057=82A252C4:ZwCreateSymbolicLinkObject 058=82AEAAD2:ZwCreateThread 059=82A93AFD:ZwCreateThreadEx 05A=82A1B982:ZwCreateTimer 05B=82A299B0:ZwCreateToken 05C=829FD700:ZwCreateTransaction 05D=829D0106:ZwCreateTransactionManager 05E=82A80A70:ZwCreateUserProcess 05F=829D452E:ZwCreateWaitablePort 060=82A1B533:ZwCreateWorkerFactory 061=82AB75DC:ZwDebugActiveProcess 062=82AB7DD5:ZwDebugContinue 063=82A2CAD0:ZwDelayExecution 064=82A10D1F:ZwDeleteAtom 065=82B19DA1:ZwDeleteBootEntry 066=82B1AFE3:ZwDeleteDriverEntry 067=82AC0CCF:ZwDeleteFile 068=82A13FCC:ZwDeleteKey 069=82A9A688:ZwDeleteObjectAuditAlarm 06A=82AE1755:ZwDeletePrivateNamespace 06B=82A0A2E0:ZwDeleteValueKey 06C=82A45882:ZwDeviceIoControlFile 06D=82AD2AE8:ZwDisableLastKnownGood 06E=829A305C:ZwDisplayString 06F=8292F3CA:ZwDrawText

