📄 ntcall.htm
字号:
<TD>6</TD>
<TD>NtDuplicateToken</TD>
<TD> </TD>
<TD>00</TD>
<TD>NtFlushWriteBuffer</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtQueryBootOptions</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtSetBootOptions</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtAddBootEntry</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtSetBootEntryOrder</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtQueryBootEntryOrder</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>46</TD>
<TD>2</TD>
<TD>NtEnumerateBootEntries</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
</TR>
<TR>
<TD>47</TD>
<TD>6</TD>
<TD>NtEnumerateKey</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtFreeVirtualMemory</TD>
</TR>
<TR>
<TD>48</TD>
<TD>3</TD>
<TD>NtEnumerateSystemEnvironmentValuesEx</TD>
<TD>v</TD>
<TD>0A</TD>
<TD>NtFsControlFile</TD>
</TR>
<TR>
<TD>49</TD>
<TD>6</TD>
<TD>NtEnumerateValueKey</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtGetContextThread</TD>
</TR>
<TR>
<TD>004A</TD>
<TD>2</TD>
<TD>NtExtendSection</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtGetDevicePowerState</TD>
</TR>
<TR>
<TD>004B</TD>
<TD>6</TD>
<TD>NtFilterToken</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtGetPlugPlayEvent</TD>
</TR>
<TR>
<TD>004C</TD>
<TD>3</TD>
<TD>NtFindAtom</TD>
<TD> </TD>
<TD>00</TD>
<TD>NtGetTickCount</TD>
</TR>
<TR>
<TD>004D</TD>
<TD>2</TD>
<TD>NtFlushBuffersFile</TD>
<TD> </TD>
<TD>7</TD>
<TD>NtGetWriteWatch</TD>
</TR>
<TR>
<TD>004E</TD>
<TD>3</TD>
<TD>NtFlushInstructionCache</TD>
<TD> </TD>
<TD>1</TD>
<TD>NtImpersonateAnonymousToken</TD>
</TR>
<TR>
<TD>004F</TD>
<TD>1</TD>
<TD>NtFlushKey</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtImpersonateClientOfPort</TD>
</TR>
<TR>
<TD>50</TD>
<TD>4</TD>
<TD>NtFlushVirtualMemory</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtImpersonateThread</TD>
</TR>
<TR>
<TD>51</TD>
<TD>0</TD>
<TD>NtFlushWriteBuffer</TD>
<TD> </TD>
<TD>1</TD>
<TD>NtInitializeRegistry</TD>
</TR>
<TR>
<TD>52</TD>
<TD>3</TD>
<TD>NtFreeUserPhysicalPages</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtInitiatePowerAction</TD>
</TR>
<TR>
<TD>53</TD>
<TD>4</TD>
<TD>NtFreeVirtualMemory</TD>
<TD> </TD>
<TD>00</TD>
<TD>NtIsSystemResumeAutomatic</TD>
</TR>
<TR>
<TD>54</TD>
<TD>0A</TD>
<TD>NtFsControlFile</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtListenPort</TD>
</TR>
<TR>
<TD>55</TD>
<TD>2</TD>
<TD>NtGetContextThread</TD>
<TD> </TD>
<TD>1</TD>
<TD>NtLoadDriver</TD>
</TR>
<TR>
<TD>56</TD>
<TD>2</TD>
<TD>NtGetDevicePowerState</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtLoadKey</TD>
</TR>
<TR>
<TD>57</TD>
<TD>4</TD>
<TD>NtGetPlugPlayEvent</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtLoadKey2</TD>
</TR>
<TR>
<TD>58</TD>
<TD>7</TD>
<TD>NtGetWriteWatch</TD>
<TD> </TD>
<TD>0A</TD>
<TD>NtLockFile</TD>
</TR>
<TR>
<TD>59</TD>
<TD>1</TD>
<TD>NtImpersonateAnonymousToken</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtLockVirtualMemory</TD>
</TR>
<TR>
<TD>005A</TD>
<TD>2</TD>
<TD>NtImpersonateClientOfPort</TD>
<TD> </TD>
<TD>1</TD>
<TD>NtMakeTemporaryObject</TD>
</TR>
<TR>
<TD>005B</TD>
<TD>3</TD>
<TD>NtImpersonateThread</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtMapUserPhysicalPages</TD>
</TR>
<TR>
<TD>005C</TD>
<TD>1</TD>
<TD>NtInitializeRegistry</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtMapUserPhysicalPagesScatter</TD>
</TR>
<TR>
<TD>005D</TD>
<TD>4</TD>
<TD>NtInitiatePowerAction</TD>
<TD> </TD>
<TD>0A</TD>
<TD>NtMapViewOfSection</TD>
</TR>
<TR>
<TD>005E</TD>
<TD>2</TD>
<TD>NtIsProcessInJob</TD>
<TD>v</TD>
<TD>9</TD>
<TD>NtNotifyChangeDirectoryFile</TD>
</TR>
<TR>
<TD>005F</TD>
<TD>0</TD>
<TD>NtIsSystemResumeAutomatic</TD>
<TD> </TD>
<TD>0A</TD>
<TD>NtNotifyChangeKey</TD>
</TR>
<TR>
<TD>60</TD>
<TD>2</TD>
<TD>NtListenPort</TD>
<TD> </TD>
<TD>0C</TD>
<TD>NtNotifyChangeMultipleKeys</TD>
</TR>
<TR>
<TD>61</TD>
<TD>1</TD>
<TD>NtLoadDriver</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenDirectoryObject</TD>
</TR>
<TR>
<TD>62</TD>
<TD>2</TD>
<TD>NtLoadKey</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenEvent</TD>
</TR>
<TR>
<TD>63</TD>
<TD>3</TD>
<TD>NtLoadKey2</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenEventPair</TD>
</TR>
<TR>
<TD>64</TD>
<TD>0A</TD>
<TD>NtLockFile</TD>
<TD> </TD>
<TD>6</TD>
<TD>NtOpenFile</TD>
</TR>
<TR>
<TD>65</TD>
<TD>2</TD>
<TD>NtLockProductActivationKeys</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtOpenIoCompletion</TD>
</TR>
<TR>
<TD>66</TD>
<TD>1</TD>
<TD>NtLockRegistryKey</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtOpenJobObject</TD>
</TR>
<TR>
<TD>67</TD>
<TD>4</TD>
<TD>NtLockVirtualMemory</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenKey</TD>
</TR>
<TR>
<TD>68</TD>
<TD>1</TD>
<TD>NtMakePermanentObject</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtOpenMutant</TD>
</TR>
<TR>
<TD>69</TD>
<TD>1</TD>
<TD>NtMakeTemporaryObject</TD>
<TD> </TD>
<TD>0C</TD>
<TD>NtOpenObjectAuditAlarm</TD>
</TR>
<TR>
<TD>006A</TD>
<TD>3</TD>
<TD>NtMapUserPhysicalPages</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtOpenProcess</TD>
</TR>
<TR>
<TD>006B</TD>
<TD>3</TD>
<TD>NtMapUserPhysicalPagesScatter</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenProcessToken</TD>
</TR>
<TR>
<TD>006C</TD>
<TD>0A</TD>
<TD>NtMapViewOfSection</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenSection</TD>
</TR>
<TR>
<TD>006D</TD>
<TD>1</TD>
<TD>NtCancelDeviceWakeupRequest</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenSemaphore</TD>
</TR>
<TR>
<TD>006D</TD>
<TD>1</TD>
<TD>NtModifyBootEntry</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtOpenSemaphore</TD>
</TR>
<TR>
<TD>006D</TD>
<TD>1</TD>
<TD>NtDeleteBootEntry</TD>
<TD>v</TD>
<TD>3</TD>
<TD>NtOpenSemaphore</TD>
</TR>
<TR>
<TD>006E</TD>
<TD>9</TD>
<TD>NtNotifyChangeDirectoryFile</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenSymbolicLinkObject</TD>
</TR>
<TR>
<TD>006F</TD>
<TD>0A</TD>
<TD>NtNotifyChangeKey</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtOpenThread</TD>
</TR>
<TR>
<TD>70</TD>
<TD>0C</TD>
<TD>NtNotifyChangeMultipleKeys</TD>
<TD> </TD>
<TD>4</TD>
<TD>NtOpenThreadToken</TD>
</TR>
<TR>
<TD>71</TD>
<TD>3</TD>
<TD>NtOpenDirectoryObject</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtOpenTimer</TD>
</TR>
<TR>
<TD>72</TD>
<TD>3</TD>
<TD>NtOpenEvent</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtPlugPlayControl</TD>
</TR>
<TR>
<TD>73</TD>
<TD>3</TD>
<TD>NtOpenEventPair</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtPowerInformation</TD>
</TR>
<TR>
<TD>74</TD>
<TD>6</TD>
<TD>NtOpenFile</TD>
<TD> </TD>
<TD>3</TD>
<TD>NtPrivilegeCheck</TD>
</TR>
<TR>
<TD>75</TD>
<TD>3</TD>
<TD>NtOpenIoCompletion</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtPrivilegedServiceAuditAlarm</TD>
</TR>
<TR>
<TD>76</TD>
<TD>3</TD>
<TD>NtOpenJobObject</TD>
<TD> </TD>
<TD>6</TD>
<TD>NtPrivilegeObjectAuditAlarm</TD>
</TR>
<TR>
<TD>77</TD>
<TD>3</TD>
<TD>NtOpenKey</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtProtectVirtualMemory</TD>
</TR>
<TR>
<TD>78</TD>
<TD>3</TD>
<TD>NtOpenMutant</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtPulseEvent</TD>
</TR>
<TR>
<TD>79</TD>
<TD>0C</TD>
<TD>NtOpenObjectAuditAlarm</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationAtom</TD>
</TR>
<TR>
<TD>007A</TD>
<TD>4</TD>
<TD>NtOpenProcess</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtQueryAttributesFile</TD>
</TR>
<TR>
<TD>007B</TD>
<TD>3</TD>
<TD>NtOpenProcessToken</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtQueryDefaultLocale</TD>
</TR>
<TR>
<TD>007C</TD>
<TD>4</TD>
<TD>NtOpenProcessTokenEx</TD>
<TD>v</TD>
<TD>1</TD>
<TD>NtQueryDefaultUILanguage</TD>
</TR>
<TR>
<TD>007D</TD>
<TD>3</TD>
<TD>NtOpenSection</TD>
<TD> </TD>
<TD>0B</TD>
<TD>NtQueryDirectoryFile</TD>
</TR>
<TR>
<TD>007E</TD>
<TD>3</TD>
<TD>NtOpenSemaphore</TD>
<TD> </TD>
<TD>7</TD>
<TD>NtQueryDirectoryObject</TD>
</TR>
<TR>
<TD>007F</TD>
<TD>3</TD>
<TD>NtOpenSymbolicLinkObject</TD>
<TD> </TD>
<TD>9</TD>
<TD>NtQueryEaFile</TD>
</TR>
<TR>
<TD>80</TD>
<TD>4</TD>
<TD>NtOpenThread</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryEvent</TD>
</TR>
<TR>
<TD>81</TD>
<TD>4</TD>
<TD>NtOpenThreadToken</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtQueryFullAttributesFile</TD>
</TR>
<TR>
<TD>82</TD>
<TD>5</TD>
<TD>NtOpenThreadTokenEx</TD>
<TD>v</TD>
<TD>5</TD>
<TD>NtQueryInformationFile</TD>
</TR>
<TR>
<TD>83</TD>
<TD>3</TD>
<TD>NtOpenTimer</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationJobObject</TD>
</TR>
<TR>
<TD>84</TD>
<TD>3</TD>
<TD>NtPlugPlayControl</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryIoCompletion</TD>
</TR>
<TR>
<TD>85</TD>
<TD>5</TD>
<TD>NtPowerInformation</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationPort</TD>
</TR>
<TR>
<TD>86</TD>
<TD>3</TD>
<TD>NtPrivilegeCheck</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationProcess</TD>
</TR>
<TR>
<TD>87</TD>
<TD>6</TD>
<TD>NtPrivilegeObjectAuditAlarm</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationThread</TD>
</TR>
<TR>
<TD>88</TD>
<TD>5</TD>
<TD>NtPrivilegedServiceAuditAlarm</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryInformationToken</TD>
</TR>
<TR>
<TD>89</TD>
<TD>5</TD>
<TD>NtProtectVirtualMemory</TD>
<TD> </TD>
<TD>1</TD>
<TD>NtQueryInstallUILanguage</TD>
</TR>
<TR>
<TD>008A</TD>
<TD>2</TD>
<TD>NtPulseEvent</TD>
<TD> </TD>
<TD>2</TD>
<TD>NtQueryIntervalProfile</TD>
</TR>
<TR>
<TD>008B</TD>
<TD>2</TD>
<TD>NtQueryAttributesFile</TD>
<TD> </TD>
<TD>5</TD>
<TD>NtQueryKey</TD>
</TR>
<TR>
<TD>008C</TD>
<TD>2</TD>
<TD>NtQueryBootOptions</TD>
<TD>v</TD>
<TD>6</TD>
<TD>NtQueryMultipleValueKey</TD>
</TR>
<TR>
<TD>008C</TD>
<TD>2</TD>
<TD>NtAddBootEntry</TD>
<TD>v</TD>
<TD>6</TD>
<TD>NtQueryMultipleValueKey</TD>
</TR>
<TR>
<TD>008C</TD>
<TD>2</TD>
<TD>NtQueryBootEntryOrder</TD>
<TD>v</TD>
<TD>6</TD>
<TD>NtQueryMultipleValueKey</TD>
</TR>
<TR>
<TD>008C</TD>
<TD>2</TD>
<TD>NtSetBootEntryOrder</TD>
<TD>v</TD>
<TD>6</TD>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -