📄 ntoskrnl.inc
字号:
NtReadFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryVolumeInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySystemInformation PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtQuerySecurityObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryQuotaInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryInformationAtom PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryEaFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtQueryDirectoryFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtOpenProcessToken PROTO STDCALL :DWORD, :DWORD, :DWORD
NtOpenProcess PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtOpenFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtNotifyChangeDirectoryFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtMapViewOfSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtLockFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtFsControlFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtFreeVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtFindAtom PROTO STDCALL :DWORD, :DWORD, :DWORD
NtDuplicateToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtDuplicateObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtDeviceIoControlFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtDeleteFile PROTO STDCALL :DWORD
NtDeleteAtom PROTO STDCALL :DWORD
NtCreateSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtCreateFile PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtCreateEvent PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtConnectPort PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtClose PROTO STDCALL :DWORD
NtAllocateVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtAllocateUuids PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
NtAllocateLocallyUniqueId PROTO STDCALL :DWORD
NtAdjustPrivilegesToken PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
NtAddAtom PROTO STDCALL :DWORD, :DWORD, :DWORD
MmUnsecureVirtualMemory PROTO STDCALL :DWORD
MmUnmapViewOfSection PROTO STDCALL :DWORD, :DWORD
MmUnmapViewInSystemSpace PROTO STDCALL :DWORD
MmUnmapViewInSessionSpace PROTO STDCALL :DWORD
MmUnmapVideoDisplay PROTO STDCALL :DWORD, :DWORD
MmUnmapLockedPages PROTO STDCALL :DWORD, :DWORD
MmUnmapIoSpace PROTO STDCALL :DWORD, :DWORD
MmUnlockPages PROTO STDCALL :DWORD
MmUnlockPagableImageSection PROTO STDCALL :DWORD
MmTrimAllSystemPagableMemory PROTO STDCALL :DWORD
MmSizeOfMdl PROTO STDCALL :DWORD, :DWORD
MmSetBankedSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmSetAddressRangeModified PROTO STDCALL :DWORD, :DWORD
MmSecureVirtualMemory PROTO STDCALL :DWORD, :DWORD, :DWORD
MmResetDriverPaging PROTO STDCALL :DWORD
MmRemovePhysicalMemory PROTO STDCALL :DWORD, :DWORD
MmQuerySystemSize PROTO STDCALL
MmProbeAndLockSelectedPages PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
MmProbeAndLockProcessPages PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
MmProbeAndLockPages PROTO STDCALL :DWORD, :DWORD, :DWORD
MmPageEntireDriver PROTO STDCALL :DWORD
MmMapViewOfSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmMapViewInSystemSpace PROTO STDCALL :DWORD, :DWORD, :DWORD
MmMapViewInSessionSpace PROTO STDCALL :DWORD, :DWORD, :DWORD
MmMapVideoDisplay PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
MmMapUserAddressesToPage PROTO STDCALL :DWORD, :DWORD, :DWORD
MmMapMemoryDumpMdl PROTO STDCALL :DWORD
MmMapLockedPagesSpecifyCache PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmMapLockedPages PROTO STDCALL :DWORD, :DWORD
MmMapIoSpace PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
MmLockPagableSectionByHandle PROTO STDCALL :DWORD
MmLockPagableImageSection PROTO STDCALL :DWORD
MmLockPagableDataSection PROTO STDCALL :DWORD
MmIsThisAnNtAsSystem PROTO STDCALL
MmIsRecursiveIoFault PROTO STDCALL
MmIsNonPagedSystemAddressValid PROTO STDCALL :DWORD
MmIsDriverVerifying PROTO STDCALL :DWORD
MmIsAddressValid PROTO STDCALL :DWORD
MmGrowKernelStack PROTO STDCALL :DWORD
MmGetVirtualForPhysical PROTO STDCALL :DWORD, :DWORD
MmGetSystemRoutineAddress PROTO STDCALL :DWORD
MmGetPhysicalMemoryRanges PROTO STDCALL
MmGetPhysicalAddress PROTO STDCALL :DWORD
MmFreePagesFromMdl PROTO STDCALL :DWORD
MmFreeNonCachedMemory PROTO STDCALL :DWORD, :DWORD
MmFreeContiguousMemorySpecifyCache PROTO STDCALL :DWORD, :DWORD, :DWORD
MmFreeContiguousMemory PROTO STDCALL :DWORD
MmForceSectionClosed PROTO STDCALL :DWORD, :DWORD
MmFlushImageSection PROTO STDCALL :DWORD, :DWORD
MmDisableModifiedWriteOfSection PROTO STDCALL :DWORD
MmCreateSection PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmCreateMdl PROTO STDCALL :DWORD, :DWORD, :DWORD
MmCanFileBeTruncated PROTO STDCALL :DWORD, :DWORD
MmBuildMdlForNonPagedPool PROTO STDCALL :DWORD
MmAllocatePagesForMdl PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmAllocateNonCachedMemory PROTO STDCALL :DWORD
MmAllocateContiguousMemorySpecifyCache PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
MmAllocateContiguousMemory PROTO STDCALL :DWORD, :DWORD, :DWORD
MmAdjustWorkingSetSize PROTO STDCALL :DWORD, :DWORD, :DWORD
MmAddPhysicalMemory PROTO STDCALL :DWORD, :DWORD
LsaRegisterLogonProcess PROTO STDCALL :DWORD, :DWORD, :DWORD
LsaLookupAuthenticationPackage PROTO STDCALL :DWORD, :DWORD, :DWORD
LsaLogonUser PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
LsaFreeReturnBuffer PROTO STDCALL :DWORD
LsaDeregisterLogonProcess PROTO STDCALL :DWORD
LsaCallAuthenticationPackage PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
LpcRequestWaitReplyPort PROTO STDCALL :DWORD, :DWORD, :DWORD
LpcRequestPort PROTO STDCALL :DWORD, :DWORD
LdrFindResource_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
LdrFindResourceDirectory_U PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
LdrEnumResources PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
LdrAccessResource PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KiIpiServiceRoutine PROTO STDCALL :DWORD, :DWORD
KiDispatchInterrupt PROTO STDCALL
KiDeliverApc PROTO STDCALL :DWORD, :DWORD, :DWORD
KiCoprocessorError PROTO STDCALL
KeWaitForSingleObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeWaitForMutexObject PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeWaitForMultipleObjects PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeUserModeCallback PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeUpdateSystemTime PROTO STDCALL
KeUpdateRunTime PROTO STDCALL :DWORD
KeUnstackDetachProcess PROTO STDCALL :DWORD
KeTerminateThread PROTO STDCALL :DWORD
KeSynchronizeExecution PROTO STDCALL :DWORD, :DWORD, :DWORD
KeStackAttachProcess PROTO STDCALL :DWORD, :DWORD
KeSetTimerEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeSetTimer PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeSetTimeIncrement PROTO STDCALL :DWORD, :DWORD
KeSetTargetProcessorDpc PROTO STDCALL :DWORD, :DWORD
KeSetSystemAffinityThread PROTO STDCALL :DWORD
KeSetProfileIrql PROTO STDCALL :DWORD
KeSetPriorityThread PROTO STDCALL :DWORD, :DWORD
KeSetKernelStackSwapEnable PROTO STDCALL :DWORD
KeSetImportanceDpc PROTO STDCALL :DWORD, :DWORD
KeSetIdealProcessorThread PROTO STDCALL :DWORD, :DWORD
KeSetEventBoostPriority PROTO STDCALL :DWORD, :DWORD
KeSetEvent PROTO STDCALL :DWORD, :DWORD, :DWORD
KeSetDmaIoCoherency PROTO STDCALL :DWORD
KeSetBasePriorityThread PROTO STDCALL :DWORD, :DWORD
KeSetAffinityThread PROTO STDCALL :DWORD, :DWORD
KeSaveFloatingPointState PROTO STDCALL :DWORD
KeRundownQueue PROTO STDCALL :DWORD
KeRevertToUserAffinityThread PROTO STDCALL
KeRestoreFloatingPointState PROTO STDCALL :DWORD
KeResetEvent PROTO STDCALL :DWORD
KeRemoveQueueDpc PROTO STDCALL :DWORD
KeRemoveQueue PROTO STDCALL :DWORD, :DWORD, :DWORD
KeRemoveEntryDeviceQueue PROTO STDCALL :DWORD, :DWORD
KeRemoveDeviceQueue PROTO STDCALL :DWORD
KeRemoveByKeyDeviceQueue PROTO STDCALL :DWORD, :DWORD
KeReleaseSpinLockFromDpcLevel PROTO STDCALL :DWORD
KeReleaseSemaphore PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeReleaseMutex PROTO STDCALL :DWORD, :DWORD
KeReleaseMutant PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeRegisterBugCheckCallback PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeReadStateTimer PROTO STDCALL :DWORD
KeReadStateSemaphore PROTO STDCALL :DWORD
KeReadStateQueue PROTO STDCALL :DWORD
KeReadStateMutex PROTO STDCALL :DWORD
KeReadStateMutant PROTO STDCALL :DWORD
KeReadStateEvent PROTO STDCALL :DWORD
KeRaiseUserException PROTO STDCALL :DWORD
KeQueryTimeIncrement PROTO STDCALL
KeQueryTickCount PROTO STDCALL :DWORD
KeQuerySystemTime PROTO STDCALL :DWORD
KeQueryPriorityThread PROTO STDCALL :DWORD
KeQueryInterruptTime PROTO STDCALL
KeQueryActiveProcessors PROTO STDCALL
KePulseEvent PROTO STDCALL :DWORD, :DWORD, :DWORD
KeProfileInterruptWithSource PROTO STDCALL :DWORD, :DWORD
KeProfileInterrupt PROTO STDCALL :DWORD
KeLeaveCriticalRegion PROTO STDCALL
KeIsExecutingDpc PROTO STDCALL
KeInsertQueueDpc PROTO STDCALL :DWORD, :DWORD, :DWORD
KeInsertQueueApc PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeInsertQueue PROTO STDCALL :DWORD, :DWORD
KeInsertHeadQueue PROTO STDCALL :DWORD, :DWORD
KeInsertDeviceQueue PROTO STDCALL :DWORD, :DWORD
KeInsertByKeyDeviceQueue PROTO STDCALL :DWORD, :DWORD, :DWORD
KeInitializeTimerEx PROTO STDCALL :DWORD, :DWORD
KeInitializeTimer PROTO STDCALL :DWORD
KeInitializeSpinLock PROTO STDCALL :DWORD
KeInitializeSemaphore PROTO STDCALL :DWORD, :DWORD, :DWORD
KeInitializeQueue PROTO STDCALL :DWORD, :DWORD
KeInitializeMutex PROTO STDCALL :DWORD, :DWORD
KeInitializeMutant PROTO STDCALL :DWORD, :DWORD
KeInitializeInterrupt PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeInitializeEvent PROTO STDCALL :DWORD, :DWORD, :DWORD
KeInitializeDpc PROTO STDCALL :DWORD, :DWORD, :DWORD
KeInitializeDeviceQueue PROTO STDCALL :DWORD
KeInitializeApc PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeI386SetGdtSelector PROTO STDCALL :DWORD, :DWORD
KeI386ReleaseLid PROTO STDCALL :DWORD, :DWORD
KeI386ReleaseGdtSelectors PROTO STDCALL :DWORD, :DWORD
KeI386GetLid PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeI386FlatToGdtSelector PROTO STDCALL :DWORD, :DWORD, :DWORD
KeI386Call16BitFunction PROTO STDCALL :DWORD
KeI386Call16BitCStyleFunction PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeI386AllocateGdtSelectors PROTO STDCALL :DWORD, :DWORD
KeI386AbiosCall PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeGetPreviousMode PROTO STDCALL
KeGetCurrentThread PROTO STDCALL
KeFlushEntireTb PROTO STDCALL :DWORD, :DWORD
KeFindConfigurationNextEntry PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeFindConfigurationEntry PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
KeEnterKernelDebugger PROTO STDCALL
KeEnterCriticalRegion PROTO STDCALL
KeDisconnectInterrupt PROTO STDCALL :DWORD
KeDetachProcess PROTO STDCALL
KeDeregisterBugCheckCallback PROTO STDCALL :DWORD
KeDelayExecutionThread PROTO STDCALL :DWORD, :DWORD, :DWORD
KeConnectInterrupt PROTO STDCALL :DWORD
KeClearEvent PROTO STDCALL :DWORD
KeCancelTimer PROTO STDCALL :DWORD
KeBugCheckEx PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeBugCheck PROTO STDCALL :DWORD
KeAttachProcess PROTO STDCALL :DWORD
KeAddSystemServiceTable PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD, :DWORD
KeAcquireSpinLockAtDpcLevel PROTO STDCALL :DWORD
Ke386SetIoAccessMap PROTO STDCALL :DWORD, :DWORD
Ke386QueryIoAccessMap PROTO STDCALL :DWORD, :DWORD
Ke386IoSetAccessProcess PROTO STDCALL :DWORD, :DWORD
Ke386CallBios PROTO STDCALL :DWORD, :DWORD
KdPollBreakIn PROTO STDCALL
KdEnableDebugger PROTO STDCALL
KdDisableDebugger PROTO STDCALL
IoWriteErrorLogEntry PROTO STDCALL :DWORD
IoWMIWriteEvent PROTO STDCALL :DWORD
IoWMISuggestInstanceName PROTO STDCALL :DWORD, :DWORD, :DWORD, :DWORD
IoWMIRegistrationControl PROTO STDCALL :DWORD, :DWORD
IoWMIAllocateInstanceIds PROTO STDCALL :DWORD, :DWORD, :DWORD
IoVerifyVolume PROTO STDCALL :DWORD, :DWORD
IoUpdateShareAccess PROTO STDCALL :DWORD, :DWORD
IoUnregisterShutdownNotification PROTO STDCALL :DWORD
IoUnregisterPlugPlayNotification PROTO STDCALL :DWORD
IoUnregisterFsRegistrationChange PROTO STDCALL :DWORD, :DWORD
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -