📄 ntice401.inc
字号:
RtlUnwind EQU 0x0003C952RtlValidSid EQU 0x0003C958RtlTimeToTimeFields EQU 0x0003C95ERtlTimeFieldsToTime EQU 0x0003C964sprintf EQU 0x0003C96Astrchr EQU 0x0003C970strncmp EQU 0x0003C976strncpy EQU 0x0003C97Cstrstr EQU 0x0003C982swprintf EQU 0x0003C988tolower EQU 0x0003C98Etoupper EQU 0x0003C994vsprintf EQU 0x0003C99Awcscmp EQU 0x0003C9A0wcscpy EQU 0x0003C9A6wcslen EQU 0x0003C9ACqsort EQU 0x0003C9B2_chkstk EQU 0x0003CA00pDeviceIOControl EQU 0x0003D297pInitFailureCleanup EQU 0x0003D2CEpSprintf_ EQU 0x0003DC7FpInitTypeParsers_1 EQU 0x0003EF98jInitEvalStructs EQU 0x0003FB8ApInitEvalStructs EQU 0x0003FC8Dnullsub_7 EQU 0x00040000pParser_EVALUE EQU 0x00041867pGetIRQLLevel EQU 0x00041969pExpression2Integer2_ EQU 0x00043AA3pExpression2Integer2 EQU 0x00043C2DpEval_Bx_IF EQU 0x00043D01pGetPrintLineStatus EQU 0x0004A7EBpPrintf EQU 0x0004A999pIsNullPointer EQU 0x0004B144pGetValueFromPCRB EQU 0x0004B179_ui64toa EQU 0x0004B81Dc_XFRAME__ EQU 0x0004BBD9c_OBJDIR_ EQU 0x0004ED46c_device_ EQU 0x0004F141c_driver_ EQU 0x0004F56Dc_IRP_ EQU 0x0004FD3Fc_FOBJ_ EQU 0x00050210c_objtab_ EQU 0x00050881pIsBuild817 EQU 0x0005137DpRetriveNtVersionData EQU 0x000513B0pDiplayNtVersions EQU 0x0005143Dc_TIMER EQU 0x00051918c_INTOBJ EQU 0x00051CF3c_DPC EQU 0x00051F91c_APC EQU 0x0005233Ec_BSTAT_ EQU 0x0005331Cc_WHAT__ EQU 0x00053FC0pEval_Bx_DO EQU 0x0005668Cc_MACRO_ EQU 0x000566C7pParseUserCommand EQU 0x00056A31pParse_EXCLUDE_SIWVIDRANGE EQU 0x00057412_vsnprintf EQU 0x000624C1strcspn EQU 0x00062547_strupr EQU 0x00062567malloc EQU 0x000625B0free EQU 0x00062604LocalAlloc EQU 0x00062618LocalFree EQU 0x0006265BLocalLock EQU 0x00062679fopen EQU 0x00062693fwrite EQU 0x000626A0fclose EQU 0x000626ADLocalUnlock EQU 0x000626BA_initterm EQU 0x000626C9DisableThreadLibraryCalls EQU 0x000626CAsscanf EQU 0x0006282ECloseHandle EQU 0x00062AC4CreateFileA EQU 0x00062AD3GetFullPathNameW EQU 0x00062AE5GetLastError EQU 0x00062AF4GetVersion EQU 0x00062AFAGetProcessHeap EQU 0x00062B18HeapAlloc EQU 0x00062B1EHeapFree EQU 0x00062B6FHeapReAlloc EQU 0x00062B9EGlobalAlloc EQU 0x00062BADGlobalFree EQU 0x00062BBCRaiseException EQU 0x00062BCBVirtualAlloc EQU 0x00062C15VirtualFree EQU 0x00062C41WriteFile EQU 0x00062C6C_except_handler3 EQU 0x00062C7B_local_unwind2 EQU 0x00062C86_wtoi EQU 0x00062C91ctime EQU 0x00062CF3strpbrk EQU 0x00062DFCstrtok EQU 0x00062E09strtoul EQU 0x00062ED9isalpha EQU 0x00062F2Ctowlower EQU 0x00062F57towupper EQU 0x00062F71RtlGetAce EQU 0x00062F8BRtlValidAcl EQU 0x00062F96RtlAnsiStringToUnicodeString EQU 0x00062FA1RtlFreeUnicodeString EQU 0x00063003RtlUnicodeStringToAnsiString EQU 0x00063031RtlFreeAnsiString EQU 0x00063091RtlTimeToElapsedTimeFields EQU 0x000630BFGetTimeZoneInformation EQU 0x000630D3nullsub_8 EQU 0x00063345pDeleteSymbolTable__ EQU 0x000663C5nullsub_9 EQU 0x000663F1pDeleteSymbolTable_ EQU 0x000663F4pDeviceIO_3 EQU 0x00066C2Bc_SYM_ EQU 0x0006BDA0c_types_ EQU 0x0006C05Bc_PEEK_ EQU 0x0006C49Cc_POKE_ EQU 0x0006C5CDc_altscr_ EQU 0x0006C722pInitUpdateFunctions_Base EQU 0x0006C984nullsub_17 EQU 0x0006C9A5nullsub_18 EQU 0x0006C9A6nullsub_19 EQU 0x0006C9A7nullsub_20 EQU 0x0006C9ADpUpdateBase_38 EQU 0x0006C9B0pUpdateBase_20 EQU 0x0006C9B9pUpdateBase_00 EQU 0x0006CA4CpInitUpdateFunctions_Locals EQU 0x0006CD04pUpdateLocals_44 EQU 0x0006D01ApPrintLocals_ EQU 0x0006D22BpInitUpdateFunctions_Watches EQU 0x0006D75ApUpdateWatches_44 EQU 0x0006D884pPrintWatches_ EQU 0x0006DC0Fc_PCI_QueryPCIRegisters EQU 0x0006DF0Ac_PCI_Query_BusDeviceFunction EQU 0x0006E0A3c_PCI_ EQU 0x0006E5C5c_fiber_ EQU 0x0006E8A8c_width_ EQU 0x0006FC70pAllocateHeapBlock EQU 0x00072671pHeapFree EQU 0x000726A3c_PAGEIN_ EQU 0x000726CDpin_PageNotPresent EQU 0x0007279Epin_InterrupsEnabled EQU 0x000727BBpin_IrqlLevelBelow2 EQU 0x000727E1JPageinAcceptCommand EQU 0x00072833JPagein_ret EQU 0x0007283Fj__stricmp_0 EQU 0x00073BA4j_RtlUnwind_0 EQU 0x00073BAAj_strncpy_0 EQU 0x00073BB0j_strstr_0 EQU 0x00073BB6j_ExAllocatePool EQU 0x00073D4EfExecuteMoreCommands EQU 0x000BC6B9fClientMode EQU 0x000BC6BBdClient_EAX EQU 0x000BFC2DdClient_EBX EQU 0x000BFC31dClient_ECX EQU 0x000BFC35dClient_EDX EQU 0x000BFC39dClient_ESI EQU 0x000BFC3DdClient_EDI EQU 0x000BFC41dClient_EBP EQU 0x000BFC45dClient_ESP EQU 0x000BFC49dClient_EIP EQU 0x000BFC4DdClient_EFLAGS EQU 0x000BFC51dClient_CS EQU 0x000BFC55dClient_DS EQU 0x000BFC59dClient_SS EQU 0x000BFC5DdClient_ES EQU 0x000BFC61dClient_FS EQU 0x000BFC65dClient_GS EQU 0x000BFC69bUserCommand EQU 0x000C30FFdCurrentContext EQU 0x000FEB23dPopupContext EQU 0x000FEB27fPAGEIN_InProgress EQU 0x001036FFoPAGEIN_INT3 EQU 0x0010374BExAcquireFastMutex EQU 0x0012ADBCExReleaseFastMutex EQU 0x0012ADC0HalDisplayString EQU 0x0012ADC4KdComPortInUse EQU 0x0012ADC8HalInitializeProcessor EQU 0x0012ADCCMmUnmapViewOfSection EQU 0x0012ADD4DbgBreakPoint EQU 0x0012ADD8ObReferenceObjectByHandle EQU 0x0012ADDCPsCreateSystemProcess EQU 0x0012ADE0ExRaiseDatatypeMisalignment EQU 0x0012ADE4KeUpdateSystemTime EQU 0x0012ADE8RtlAssert EQU 0x0012ADEC_snwprintf_0 EQU 0x0012ADF0_stricmp_0 EQU 0x0012ADF4_strnicmp_0 EQU 0x0012ADF8_wcsicmp_0 EQU 0x0012ADFC_wcsnicmp_0 EQU 0x0012AE00DbgPrint_0 EQU 0x0012AE04isspace_0 EQU 0x0012AE08isprint_0 EQU 0x0012AE0CRtlCompareMemoryUlong_0 EQU 0x0012AE10RtlCompareMemory_0 EQU 0x0012AE14RtlCompareString_0 EQU 0x0012AE18RtlCompareUnicodeString_0 EQU 0x0012AE1CRtlConvertSidToUnicodeString_0 EQU 0x0012AE20RtlInitAnsiString_0 EQU 0x0012AE24RtlInitString_0 EQU 0x0012AE28RtlInitUnicodeString_0 EQU 0x0012AE2CRtlLengthRequiredSid_0 EQU 0x0012AE30RtlLengthSid_0 EQU 0x0012AE34RtlNumberGenericTableElements_0 EQU 0x0012AE38RtlUnwind_0 EQU 0x0012AE3CRtlValidSid_0 EQU 0x0012AE40RtlTimeToTimeFields_0 EQU 0x0012AE44RtlTimeFieldsToTime_0 EQU 0x0012AE48sprintf_0 EQU 0x0012AE4Cstrchr_0 EQU 0x0012AE50strncmp_0 EQU 0x0012AE54strncpy_0 EQU 0x0012AE58strstr_0 EQU 0x0012AE5Cswprintf_0 EQU 0x0012AE60tolower_0 EQU 0x0012AE64toupper_0 EQU 0x0012AE68vsprintf_0 EQU 0x0012AE6Cwcscmp_0 EQU 0x0012AE70wcscpy_0 EQU 0x0012AE74MmIsAddressValid EQU 0x0012AE78KeBugCheckEx EQU 0x0012AE7CExAllocatePoolWithTag EQU 0x0012AE80ExFreePool EQU 0x0012AE84KeSetTimer EQU 0x0012AE88KeInitializeDpc EQU 0x0012AE8CKeInitializeTimer EQU 0x0012AE90MmGetPhysicalAddress EQU 0x0012AE94MmAllocateContiguousMemory EQU 0x0012AE98KeInitializeEvent EQU 0x0012AE9CIoRegisterShutdownNotification EQU 0x0012AEA0PsInitialSystemProcess EQU 0x0012AEA4KeServiceDescriptorTable EQU 0x0012AEA8NtBuildNumber EQU 0x0012AEACMmMapIoSpace EQU 0x0012AEB0IoDeleteDevice EQU 0x0012AEB4IoCreateSymbolicLink EQU 0x0012AEB8IoCreateDevice EQU 0x0012AEBCZwClose EQU 0x0012AEC0ObfDereferenceObject EQU 0x0012AEC4ZwOpenDirectoryObject EQU 0x0012AEC8RtlFreeAnsiString_0 EQU 0x0012AECCRtlUnicodeStringToAnsiString_0 EQU 0x0012AED0IoQueryDeviceDescription EQU 0x0012AED4IofCompleteRequest EQU 0x0012AED8IoDeleteSymbolicLink EQU 0x0012AEDCMmUnmapIoSpace EQU 0x0012AEE0KeCancelTimer EQU 0x0012AEE4ZwQueryValueKey EQU 0x0012AEE8ZwOpenKey EQU 0x0012AEECIoGetDeviceObjectPointer EQU 0x0012AEF0RtlFreeUnicodeString_0 EQU 0x0012AEF4ZwWriteFile EQU 0x0012AEF8ZwCreateFile EQU 0x0012AEFCRtlAnsiStringToUnicodeString_0 EQU 0x0012AF00KeDelayExecutionThread EQU 0x0012AF04ExReleaseResourceForThread EQU 0x0012AF08RtlAppendUnicodeToString EQU 0x0012AF0CRtlCopyUnicodeString EQU 0x0012AF10ZwReadFile EQU 0x0012AF14ZwQueryInformationFile EQU 0x0012AF18ExAllocatePool EQU 0x0012AF1C_purecall EQU 0x0012AF20MmIsThisAnNtAsSystem EQU 0x0012AF24IoDisconnectInterrupt EQU 0x0012AF28IoConnectInterrupt EQU 0x0012AF2Cwcslen_0 EQU 0x0012AF30qsort_0 EQU 0x0012AF34start EQU 0x0012BEA0pRetriveRegistryValue EQU 0x0012C984pRetriveRegistryValueLite EQU 0x0012CA28
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -