发布时间 : 星期二 文章SSDT函数服务号对照表更新完毕开始阅读
系统调用表参考(System Call Table - SSDT)
Api Name (*)
ZwAcceptConnectPort ZwAccessCheck ZwAccessCheckAndAuditAlarm ZwAccessCheckByType ZwAccessCheckByTypeAndAuditAlarm ZwAccessCheckByTypeResultList ZwAccessCheckByTypeResultListAndAuditAlarm
Build No (*) 2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001
Os Ver (*)
Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008
Idx
0 0 0 0 0 0 1 1 1 1 1 1 2 2 2 2 2 2 3 3 3 3 3 3 4 4 4 4 4 4 5 5 5 5 5 5 6 6 6 6 6
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
ZwAcquireCMFViewOwnership
ZwAddAtom
ZwAddBootEntry
ZwAddDriverEntry
ZwAdjustGroupsToken
ZwAdjustPrivilegesToken
ZwAlertResumeThread
ZwAlertThread
7000
2195 2600 3790 6000 6001 7000
6000 6001 7000
2195 2600 3790 6000 6001 7000
2600 3790 6000 6001 7000
3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195
Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4
6 7 7 7 7 7 7 396 389 8 8 8 8 8 8 9 9 9 9 9 10 10 10 10 11 9 10 11 11 11 12 10 11 12 12 12 13 11 12 13 13 13 14 12
ZwAllocateLocallyUniqueId
ZwAllocateReserveObject ZwAllocateUserPhysicalPages
ZwAllocateUuids
ZwAllocateVirtualMemory
ZwAlpcAcceptConnectPort
ZwAlpcCancelMessage
ZwAlpcConnectPort
ZwAlpcCreatePort
ZwAlpcCreatePortSection
2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
7000 2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
2195 2600 3790 6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001
WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008
13 14 14 14 15 13 14 15 15 15 16 17 14 15 16 16 16 18 15 16 17 17 17 19 16 17 18 18 18 20 19 19 21 20 20 22 21 21 23 22 22 24 23 23
ZwAlpcCreateResourceReserve
ZwAlpcCreateSectionView
ZwAlpcCreateSecurityContext
ZwAlpcDeletePortSection
ZwAlpcDeleteResourceReserve
ZwAlpcDeleteSectionView
ZwAlpcDeleteSecurityContext
ZwAlpcDisconnectPort
ZwAlpcImpersonateClientOfPort
ZwAlpcOpenSenderProcess
ZwAlpcOpenSenderThread
ZwAlpcQueryInformation
ZwAlpcQueryInformationMessage
ZwAlpcRevokeSecurityContext
ZwAlpcSendWaitReceivePort
7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000 6001 7000
6000
Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
Vista SP1, Win2008 Windows 7 Vista SP0
25 24 24 26 25 25 27 26 26 28 27 27 29 28 28 30 29 29 31 30 30 32 31 31 33 32 32 34 33 33 35 34 34 36 35 35 37 36 36 38 37 37 39 38