📄 ntice324.inc
字号:
pSwitchContext_InWinice EQU 0x0003452CpINT_41_0070 EQU 0x00034BD8pINT_41_0071 EQU 0x00034BE9pINT_41_0072 EQU 0x00034BFApINT_41_0074 EQU 0x00034C1ApINT_41_0073 EQU 0x00034C30pINT_41_0075 EQU 0x00034C99pINT_41_0076 EQU 0x00034CBApINT_41_0077 EQU 0x00034CDCpINT_41_0078 EQU 0x00034D0BpINT_41_0079 EQU 0x00034D3FpINT_41_007A EQU 0x00034D5BpINT_41_007B EQU 0x00034F31pINT_41_007F EQU 0x00034F4ApINT_41_0080 EQU 0x00034FC2pHandleFaultIn_DOT_QUERY EQU 0x00035021pINT_41_0084 EQU 0x0003505BpFindDotCommand EQU 0x000350ABpRegisterDotCommand EQU 0x000350D2c_DOT_VXDNAME_? EQU 0x000350F9c_DOT_VXDNAME_ EQU 0x00035141pDotCommand_FaultHandler EQU 0x000351ABpSaveClientRegisters_ EQU 0x00035240c_VER_DOT_ EQU 0x000352C5pStrend EQU 0x000353F8pINT_41_0050 EQU 0x00035414pINT_41_0152 EQU 0x0003555EpINT_41_0052 EQU 0x000355D9pINT_41_0065 EQU 0x00035638pINT_41_0066 EQU 0x000356B7pINT_41_0064 EQU 0x00035759pINT_41_007x_PrintRegs EQU 0x000357EBpNew_VMM_12D EQU 0x0003591BpNew_VMM_F3 EQU 0x0003592FpINT_41_0002_0012 EQU 0x00035BA1pINT_41_0001 EQU 0x00035BD0pNew_VMM_C4 EQU 0x00035C36pINT_41_0000 EQU 0x00035C6EpINT_41_000F EQU 0x00035C90pBeep EQU 0x00035CCCc_VER_LIN_ EQU 0x00036077c_VER_ADD_ EQU 0x000360C3c_VER_ADD__ EQU 0x0003618Ec_VER_EXP_ EQU 0x0003627Fc_VER_SYM_ EQU 0x0003654Enullsub_6 EQU 0x0003666ApINT_41_0152_ EQU 0x00036736pINT_41_F003 EQU 0x0003689FpINT_41_0150_3_2 EQU 0x00036C06pINT_41_0150 EQU 0x00036CC1pINT_41_0152__ EQU 0x00036D49c_STACK__ EQU 0x00037784pCheckInternalStack EQU 0x00037E20pPrintErrorMessage EQU 0x00038270pPrintErrorToCommandWindow EQU 0x00038281pPrintLine_Color EQU 0x00038292pPrintLine_Help EQU 0x000382AEpMemset EQU 0x0003837FpMemcopy EQU 0x000383CEpMapSelectorOffsetToLinAddr EQU 0x00038512pCopyDword EQU 0x0003853DpCopyWord EQU 0x00038568pCopyByte EQU 0x00038594pWriteDword EQU 0x000385BFpReadArea EQU 0x000385DFjPAGEIN_INT3 EQU 0x00038617c_PAGEIN__ EQU 0x00038618pINT3_CleanupForPAGEIN EQU 0x000386ACpSwitchContext EQU 0x000386E8pGetNumber EQU 0x000389D3c_addr_ EQU 0x00038D87pEvaluateProcessType EQU 0x00038F61pGetCurrentThreadAndProcessPointers EQU 0x00039013c_ADDR EQU 0x00039170pPrintADDRResults EQU 0x00039222c_NTCALL_ EQU 0x000392BFc_query_ EQU 0x000393FBquery_extendedinfo EQU 0x00039428query_alien_context EQU 0x0003943Fquery_switch_to_next_context EQU 0x00039464query_exec_query EQU 0x0003948Equery_leave EQU 0x000394AEpHookMapViewOfImageSection EQU 0x0003A0B0pHookAddValidPageToWorkingSet EQU 0x0003A135pDispatchIo EQU 0x0003BBF8devio_UnknownControlCode EQU 0x0003BC65devio_Leave EQU 0x0003BE59pDeviceIOControl EQU 0x0003BEF1pInitTypeParsers_1 EQU 0x0003DDC5jInitEvalStructs EQU 0x0003E9B7pInitEvalStructs EQU 0x0003EABApParser_EVALUE EQU 0x00040694pGetIRQLLevel EQU 0x00040796pExpression2Integer2_ EQU 0x000428C8pExpression2Integer2 EQU 0x00042A52pEval_Bx_IF EQU 0x00042B26pGetPrintLineStatus EQU 0x000490E4pPrintf EQU 0x00049315pSprintf EQU 0x000494E4pIsNullPointer EQU 0x00049ABCpGetValueFromPCRB EQU 0x00049AF1c_XFRAME__ EQU 0x0004A460c_OBJDIR_ EQU 0x0004D3E2c_DEVICE_ EQU 0x0004D728c_FOBJ_ EQU 0x0004E610c_objtab_ EQU 0x0004EC02pIsBuild817 EQU 0x0004F54EpRetriveNtVersionData EQU 0x0004F56Fc_TIMER EQU 0x0004FA98c_INTOBJ EQU 0x0004FE73c_BSTAT_ EQU 0x00050557c_WHAT__ EQU 0x000511FBpParseMacro EQU 0x000536DBpEval_Bx_DO EQU 0x000538BFc_MACRO_ EQU 0x000538FApParseUserCommand EQU 0x00053C64pParse_EXCLUDE_SIWVIDRANGE EQU 0x00054647pDeleteSymbolTable__ EQU 0x00057B42nullsub_2 EQU 0x00057B6EpDeleteSymbolTable_ EQU 0x00057B71pDeviceIO_3 EQU 0x00058147c_SYM_ EQU 0x0005D06Cc_TYPES_ EQU 0x0005D327c_PEEK_ EQU 0x0005D61Dc_POKE_ EQU 0x0005D74Ec_ALTSCR_ EQU 0x0005D8A3pInitUpdateFunctions_Base EQU 0x0005DB06pUpdateBase_38 EQU 0x0005DB32pUpdateBase_20 EQU 0x0005DB3BpUpdateBase_44 EQU 0x0005DB54pUpdateBase_00 EQU 0x0005DBCEpInitUpdateFunctions_Locals EQU 0x0005DE88pUpdateLocals_44 EQU 0x0005E19ApPrintLocals_ EQU 0x0005E3ABpInitUpdateFunctions_Watches EQU 0x0005E8B7pUpdateWatches_44 EQU 0x0005E9E1pPrintWatches_ EQU 0x0005ED68c_PCI_QueryPCIRegisters EQU 0x0005F063c_PCI_Query_BusDeviceFunction EQU 0x0005F1FCc_PCI_ EQU 0x0005F71Bc_fiber_ EQU 0x0005FA00c_width_ EQU 0x00060E00pAllocateHeapBlock EQU 0x00062271pHeapFree EQU 0x000622A3c_PAGEIN_ EQU 0x000622CDnullsub_12 EQU 0x0006262Cj_strstr EQU 0x0006262Ej_RtlUnwind EQU 0x000627CCfExecuteMoreCommands EQU 0x0008FD39fClientMode EQU 0x0008FD3BdClient_EAX EQU 0x000930CDdClient_EBX EQU 0x000930D1dClient_ECX EQU 0x000930D5dClient_EDX EQU 0x000930D9dClient_ESI EQU 0x000930DDdClient_EDI EQU 0x000930E1dClient_EBP EQU 0x000930E5dClient_ESP EQU 0x000930E9dClient_EIP EQU 0x000930EDdClient_EFLAGS EQU 0x000930F1dClient_CS EQU 0x000930F5dClient_DS EQU 0x000930F9dClient_SS EQU 0x000930FDdClient_ES EQU 0x00093101dClient_FS EQU 0x00093105dClient_GS EQU 0x00093109bUserCommand EQU 0x000964E7dCurrentContext EQU 0x000D16EFdPopupContext EQU 0x000D16F3fPAGEIN_InProgress EQU 0x000D62CBoPAGEIN_INT3 EQU 0x000D6317ExAcquireFastMutex EQU 0x000F2634ExReleaseFastMutex EQU 0x000F2638HalDisplayString EQU 0x000F263CKdComPortInUse EQU 0x000F2640HalInitializeProcessor EQU 0x000F2644MmUnmapViewOfSection EQU 0x000F264CDbgBreakPoint EQU 0x000F2650PsCreateSystemProcess EQU 0x000F2654ExRaiseDatatypeMisalignment EQU 0x000F2658KeUpdateSystemTime EQU 0x000F265CRtlAssert EQU 0x000F2660ExAllocatePoolWithTag EQU 0x000F2664ExFreePool EQU 0x000F2668PsInitialSystemProcess EQU 0x000F266CKeInitializeEvent EQU 0x000F2670IoRegisterShutdownNotification EQU 0x000F2674MmMapIoSpace EQU 0x000F2678IoDeleteDevice EQU 0x000F267CIoCreateSymbolicLink EQU 0x000F2680IoCreateDevice EQU 0x000F2684RtlInitUnicodeString EQU 0x000F2688ZwClose EQU 0x000F268CObfDereferenceObject EQU 0x000F2690ObReferenceObjectByHandle EQU 0x000F2694ZwOpenDirectoryObject EQU 0x000F2698MmIsAddressValid EQU 0x000F269CKeBugCheckEx EQU 0x000F26A0IoQueryDeviceDescription EQU 0x000F26A4strstr EQU 0x000F26A8IofCompleteRequest EQU 0x000F26ACIoDeleteSymbolicLink EQU 0x000F26B0MmUnmapIoSpace EQU 0x000F26B4IoGetDeviceObjectPointer EQU 0x000F26B8RtlFreeUnicodeString EQU 0x000F26BCZwWriteFile EQU 0x000F26C0ZwCreateFile EQU 0x000F26C4RtlAnsiStringToUnicodeString EQU 0x000F26C8RtlInitAnsiString EQU 0x000F26CCZwQueryValueKey EQU 0x000F26D0ZwOpenKey EQU 0x000F26D4KeDelayExecutionThread EQU 0x000F26D8RtlAppendUnicodeToString EQU 0x000F26DCRtlCopyUnicodeString EQU 0x000F26E0ZwReadFile EQU 0x000F26E4ZwQueryInformationFile EQU 0x000F26E8_purecall EQU 0x000F26ECRtlUnwind EQU 0x000F26F0MmIsThisAnNtAsSystem EQU 0x000F26F4IoDisconnectInterrupt EQU 0x000F26F8IoConnectInterrupt EQU 0x000F26FCRtlFreeAnsiString EQU 0x000F2700RtlUnicodeStringToAnsiString EQU 0x000F2704start EQU 0x000F2BA0pRetriveRegistryValueLite EQU 0x000F37F0pPrintToBlueScreen EQU 0x000F3876⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -