📄 ntice323.inc
字号:
pINT_41_0152_3 EQU 0x00036D19c_MAP32 EQU 0x00037186c_STACK__ EQU 0x000376CFpCheckInternalStack EQU 0x00037D18pPrintErrorMessage EQU 0x00038168pPrintErrorToCommandWindow EQU 0x00038179pPrintLine_Color EQU 0x0003818ApPrintLine_Help EQU 0x000381A6pMemset EQU 0x00038277pMemcopy EQU 0x000382C6pMapSelectorOffsetToLinAddr EQU 0x0003840ApCopyDword EQU 0x00038435pCopyWord EQU 0x00038460pCopyByte EQU 0x0003848CpWriteDword EQU 0x000384B7pReadArea EQU 0x000384D7jPAGEIN_INT3 EQU 0x0003850Fc_PAGEIN__ EQU 0x00038510pINT3_CleanupForPAGEIN EQU 0x000385A4pSwitchContext EQU 0x000385E0pGetNumber EQU 0x000388CBc_addr_ EQU 0x00038C7FpEvaluateProcessType EQU 0x00038E59pGetCurrentThreadAndProcessPointers EQU 0x00038F0Bc_ADDR EQU 0x00039068pPrintADDRResults EQU 0x0003911Ac_NTCALL_ EQU 0x000391B7c_query_ EQU 0x000392F3query_extendedinfo EQU 0x00039320query_alien_context EQU 0x00039337query_switch_to_next_context EQU 0x0003935Cquery_exec_query EQU 0x00039386query_leave EQU 0x000393A6c_VER_QUE_ EQU 0x000396C2c_VER_PHY_ EQU 0x00039B4Bc_VER_TES_ EQU 0x00039E3FpHook_MapViewOfImageSection EQU 0x0003A00CjHook_MVOIS_Fail EQU 0x0003A084pHook_AddValidPageToWorkingSet EQU 0x0003A091jHook_AVPTWS_fail EQU 0x0003A15FpHook_MiCopyOnWrite EQU 0x0003A16CjHook_MCOW_fail EQU 0x0003A1BBpHook_RtlAssert EQU 0x0003A1C9pIoConnectInterrupt_1 EQU 0x0003A510pIoConnectInterrupt_1_ EQU 0x0003A519pIoDisconnectInterrupt_2_ EQU 0x0003A565pIoConnectInterrupt_2 EQU 0x0003A5DEpIoDisconnectInterrupt_1 EQU 0x0003A5FCpIoDisconnectInterrupt_2 EQU 0x0003A61BpMmIsThisAnNtAsSystem_1 EQU 0x0003A634pMmIsThisAnNtAsSystem_2 EQU 0x0003A72BpMmIsThisAnNtAsSystem_2_ EQU 0x0003A7B8jMmIsThisAnNtAsSystem_2_Start EQU 0x0003A7F7jMmIsThisAnNtAsSystem_2_End EQU 0x0003A834pMmUnmapViewOfFile_1 EQU 0x0003A8F8pMmUnmapViewOfFile_2 EQU 0x0003A9E5pDbgBreakPoint_1 EQU 0x0003A9F9pDbgBreakPoint_2 EQU 0x0003A9FFpINT_2D EQU 0x0003AA18pINT_2E EQU 0x0003AD87tMmIsAddressValid_1 EQU 0x0003B2ADtMmIsAddressValid_2 EQU 0x0003B2AEpKeBugCheck_1 EQU 0x0003B2D3pKeBugCheck_2 EQU 0x0003B409pHalDisplayString_1 EQU 0x0003B41DpHalDisplayString_2 EQU 0x0003B425pRtlAssert_1 EQU 0x0003B439pRtlAssert_2 EQU 0x0003B47Cstart EQU 0x0003B91BpDispatchIo EQU 0x0003C298devio_UnknownControlCode EQU 0x0003C305devio_Leave EQU 0x0003C4F9pDeviceIOControl EQU 0x0003C591pRetriveRegistryValueLite EQU 0x0003D3E0pPrintToBlueScreen EQU 0x0003D466pGetUserInfo EQU 0x0003D696pSprintf_ EQU 0x0003DA35pInitTypeParsers_1 EQU 0x0003ECC1jInitEvalStructs EQU 0x0003F8B9pInitEvalStructs EQU 0x0003F9BCpParser_EVALUE EQU 0x00041599pGetIRQLLevel EQU 0x0004169BpExpression2Integer2_ EQU 0x000437D0pExpression2Integer2 EQU 0x0004395ApEval_Bx_IF EQU 0x00043A2EpGetPrintLineStatus EQU 0x00049FD1pPrintf EQU 0x0004A202pIsNullPointer EQU 0x0004A9ADpGetValueFromPCRB EQU 0x0004A9E2c_XFRAME__ EQU 0x0004B2F5c_OBJDIR_ EQU 0x0004E27Cc_DEVICE_ EQU 0x0004E5C6c_FOBJ_ EQU 0x0004F45Dc_objtab_ EQU 0x0004FA4FpIsNTVersionSufficient EQU 0x000503E8pGetNTInfo EQU 0x00050409pGet_NT_Version EQU 0x00050459pGet_NT_Version_Major EQU 0x00050460pGet_NT_Check EQU 0x0005046BpPrintNTVersionInfo EQU 0x00050472c_BSTAT_ EQU 0x00050A8Bc_WHAT__ EQU 0x0005172FpParseMacro EQU 0x00053C15pEval_Bx_DO EQU 0x00053DF9c_MACRO_ EQU 0x00053E34pParseUserCommand EQU 0x0005419EpParse_EXCLUDE_SIWVIDRANGE EQU 0x00054B7FpDeleteSymbolTable__ EQU 0x00057E9Bnullsub_2 EQU 0x00057EC7pDeleteSymbolTable_ EQU 0x00057ECApDeviceIO_3 EQU 0x000584A0c_SYM_ EQU 0x0005D3C5c_TYPES_ EQU 0x0005D680c_PEEK_ EQU 0x0005D976c_POKE_ EQU 0x0005DAA7c_ALTSCR_ EQU 0x0005DBFCpInitUpdateFunctions_Base EQU 0x0005DE5Fnullsub_16 EQU 0x0005DE80nullsub_17 EQU 0x0005DE81nullsub_18 EQU 0x0005DE82nullsub_19 EQU 0x0005DE88pUpdateBase_38 EQU 0x0005DE8BpUpdateBase_20 EQU 0x0005DE94pUpdateBase_44 EQU 0x0005DEADpUpdateBase_00 EQU 0x0005DF27pInitUpdateFunctions_Locals EQU 0x0005E1E1pUpdateLocals_44 EQU 0x0005E4F5pPrintLocals_ EQU 0x0005E706pInitUpdateFunctions_Watches EQU 0x0005EC24pUpdateWatches_44 EQU 0x0005ED4EpPrintWatches_ EQU 0x0005F0D7c_PCI_QueryPCIRegisters EQU 0x0005F3D2c_PCI_Query_BusDeviceFunction EQU 0x0005F56Bc_PCI_ EQU 0x0005FA8Ac_fiber_ EQU 0x0005FD6Fc_width_ EQU 0x00061170pAllocateHeapBlock EQU 0x0006233DpHeapFree EQU 0x0006236Fc_PAGEIN_ EQU 0x00062399nullsub_23 EQU 0x000626F8j_strstr EQU 0x000626FAj__purecall EQU 0x00062892j_RtlUnwind EQU 0x00062898Service_Table_0 EQU 0x00088480SDK_Version_0 EQU 0x00088494Req_Device_Number_0 EQU 0x00088496Dev_Major_Version_0 EQU 0x00088498Dev_Minor_Version_0 EQU 0x00088499Flags_0 EQU 0x0008849AName_0 EQU 0x0008849CInit_Order_0 EQU 0x000884A4Control_Proc_0 EQU 0x000884A8V86_API_Proc_0 EQU 0x000884ACPM_API_Proc_0 EQU 0x000884B0V86_API_CSIP_0 EQU 0x000884B4PM_API_CSIP_0 EQU 0x000884B8Reference_Data_0 EQU 0x000884BCService_Table_Ptr_0 EQU 0x000884C0Service_Size_0 EQU 0x000884C4Win32_Service_Table_0 EQU 0x000884C8Prev_0 EQU 0x000884CCSize_0 EQU 0x000884D0Reserved1_0 EQU 0x000884D4Reserved2_0 EQU 0x000884D8Reserved3_0 EQU 0x000884DCfExecuteMoreCommands EQU 0x0008FC59fClientMode EQU 0x0008FC5BfUsing_IOAPIC EQU 0x000926FFdPhysAddr_IOAPIC EQU 0x00092700dLinAddr_IOAPIC EQU 0x00092704dNumOfProcessors EQU 0x0009270CtIRQ2INT EQU 0x0009279AtSerial EQU 0x00092E64tUser EQU 0x00092EB4tCompany EQU 0x00092F04dClient_EAX EQU 0x00092FDDdClient_EBX EQU 0x00092FE1dClient_ECX EQU 0x00092FE5dClient_EDX EQU 0x00092FE9dClient_ESI EQU 0x00092FEDdClient_EDI EQU 0x00092FF1dClient_EBP EQU 0x00092FF5dClient_ESP EQU 0x00092FF9dClient_EIP EQU 0x00092FFDdClient_EFLAGS EQU 0x00093001dClient_CS EQU 0x00093005dClient_DS EQU 0x00093009dClient_SS EQU 0x0009300DdClient_ES EQU 0x00093011dClient_FS EQU 0x00093015dClient_GS EQU 0x00093019bUserCommand EQU 0x000963F7dBreakReason EQU 0x000A8DC6dCurrentContext EQU 0x000D18BFdPopupContext EQU 0x000D18C3fPAGEIN_InProgress EQU 0x000D649BoPAGEIN_INT3 EQU 0x000D64E7dMmMapViewOfFile_24 EQU 0x000D7580dMmMapViewOfFile_30 EQU 0x000D7584dMmMapViewOfFile_28 EQU 0x000D7588tIoConnectInterrupt EQU 0x000D759FtIoDisconnectInterrupt EQU 0x000D75B0tMmIsThisAnNtAsSystem EQU 0x000D75C1tMmUnmapViewOfFile EQU 0x000D75D2tMmIsAddressValid EQU 0x000D75E3tKeBugCheck EQU 0x000D75F4tDbgBreakPoint EQU 0x000D7605tHalDisplayString EQU 0x000D7616tRtlAssert EQU 0x000D7627wNT_Check EQU 0x000E3CD0wNT_Build EQU 0x000E3CD4wNT_Version EQU 0x000E3CD8wNT_Uniprocessor EQU 0x000E3CDCfHalDisplayString EQU 0x000F0018ExAcquireFastMutex EQU 0x000F3D58ExReleaseFastMutex EQU 0x000F3D5CHalDisplayString EQU 0x000F3D60KdComPortInUse EQU 0x000F3D64HalInitializeProcessor EQU 0x000F3D68MmUnmapViewOfSection EQU 0x000F3D70DbgBreakPoint EQU 0x000F3D74PsCreateSystemProcess EQU 0x000F3D78NtSetSecurityObject EQU 0x000F3D7CExRaiseDatatypeMisalignment EQU 0x000F3D80KeUpdateSystemTime EQU 0x000F3D84RtlAssert EQU 0x000F3D88ExAllocatePoolWithTag EQU 0x000F3D8CExFreePool EQU 0x000F3D90PsInitialSystemProcess EQU 0x000F3D94KeInitializeEvent EQU 0x000F3D98IoRegisterShutdownNotification EQU 0x000F3D9CMmMapIoSpace EQU 0x000F3DA0IoDeleteDevice EQU 0x000F3DA4IoCreateSymbolicLink EQU 0x000F3DA8IoCreateDevice EQU 0x000F3DACRtlInitUnicodeString EQU 0x000F3DB0ZwClose EQU 0x000F3DB4ObfDereferenceObject EQU 0x000F3DB8ObReferenceObjectByHandle EQU 0x000F3DBCZwOpenDirectoryObject EQU 0x000F3DC0MmIsAddressValid EQU 0x000F3DC4KeBugCheckEx EQU 0x000F3DC8IoQueryDeviceDescription EQU 0x000F3DCCstrstr EQU 0x000F3DD0IofCompleteRequest EQU 0x000F3DD4IoDeleteSymbolicLink EQU 0x000F3DD8MmUnmapIoSpace EQU 0x000F3DDCRtlFreeUnicodeString EQU 0x000F3DE0ZwQueryValueKey EQU 0x000F3DE4ZwOpenKey EQU 0x000F3DE8RtlAppendUnicodeToString EQU 0x000F3DECRtlCopyUnicodeString EQU 0x000F3DF0RtlAnsiStringToUnicodeString EQU 0x000F3DF4RtlInitAnsiString EQU 0x000F3DF8ZwCreateFile EQU 0x000F3DFCZwReadFile EQU 0x000F3E00IoGetDeviceObjectPointer EQU 0x000F3E04ZwWriteFile EQU 0x000F3E08ZwQueryInformationFile EQU 0x000F3E0CKeDelayExecutionThread EQU 0x000F3E10_purecall EQU 0x000F3E14RtlUnwind EQU 0x000F3E18MmIsThisAnNtAsSystem EQU 0x000F3E1CIoDisconnectInterrupt EQU 0x000F3E20IoConnectInterrupt EQU 0x000F3E24RtlFreeAnsiString EQU 0x000F3E28RtlUnicodeStringToAnsiString EQU 0x000F3E2C
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -