SSDT函数服务号对照表

ZwDisplayString ZwDisplayString ZwDisplayString ZwDisplayString ZwDisplayString ZwDrawText ZwDuplicateObject ZwDuplicateObject ZwDuplicateObject ZwDuplicateObject ZwDuplicateObject ZwDuplicateObject ZwDuplicateToken ZwDuplicateToken ZwDuplicateToken ZwDuplicateToken ZwDuplicateToken ZwDuplicateToken ZwEnumerateBootEntries ZwEnumerateBootEntries ZwEnumerateBootEntries ZwEnumerateBootEntries ZwEnumerateBootEntries ZwEnumerateDriverEntries ZwEnumerateDriverEntries ZwEnumerateDriverEntries ZwEnumerateDriverEntries ZwEnumerateKey ZwEnumerateKey ZwEnumerateKey ZwEnumerateKey ZwEnumerateKey ZwEnumerateKey

ZwEnumerateSystemEnvironmentValuesEx

ZwEnumerateSystemEnvironmentValuesEx

ZwEnumerateSystemEnvironmentValuesEx

ZwEnumerateSystemEnvironmentValuesEx

ZwEnumerateSystemEnvironmentValuesEx

ZwEnumerateTransactionObject

2600 3790 6000 6001 7000 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2600 3790 6000 6001 7000 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2600 3790 6000 6001 7000 6000

WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

67 70 128 128 109 110 58 68 71 129 129 111 59 69 72 130 130 112 70 73 131 131 113 74 132 132 114 60 71 75 133 133 115 72 76 134 134 116 135

ZwEnumerateTransactionObject ZwEnumerateTransactionObject ZwEnumerateValueKey ZwEnumerateValueKey ZwEnumerateValueKey ZwEnumerateValueKey ZwEnumerateValueKey ZwEnumerateValueKey ZwExtendSection ZwExtendSection ZwExtendSection ZwExtendSection ZwExtendSection ZwExtendSection ZwFilterToken ZwFilterToken ZwFilterToken ZwFilterToken ZwFilterToken ZwFilterToken ZwFindAtom ZwFindAtom ZwFindAtom ZwFindAtom ZwFindAtom ZwFindAtom ZwFlushBuffersFile ZwFlushBuffersFile ZwFlushBuffersFile ZwFlushBuffersFile ZwFlushBuffersFile ZwFlushBuffersFile ZwFlushInstallUILanguage ZwFlushInstallUILanguage ZwFlushInstallUILanguage ZwFlushInstructionCache ZwFlushInstructionCache ZwFlushInstructionCache ZwFlushInstructionCache ZwFlushInstructionCache ZwFlushInstructionCache ZwFlushKey ZwFlushKey ZwFlushKey

6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2

135 117 61 73 77 136 136 118 62 74 78 137 137 119 63 75 79 138 138 120 64 76 80 139 139 121 65 77 81 140 140 122 394 387 123 66 78 82 141 141 124 67 79 83

ZwFlushKey ZwFlushKey ZwFlushKey

ZwFlushProcessWriteBuffers ZwFlushProcessWriteBuffers ZwFlushProcessWriteBuffers ZwFlushVirtualMemory ZwFlushVirtualMemory ZwFlushVirtualMemory ZwFlushVirtualMemory ZwFlushVirtualMemory ZwFlushVirtualMemory ZwFlushWriteBuffer ZwFlushWriteBuffer ZwFlushWriteBuffer ZwFlushWriteBuffer ZwFlushWriteBuffer ZwFlushWriteBuffer ZwFreeUserPhysicalPages ZwFreeUserPhysicalPages ZwFreeUserPhysicalPages ZwFreeUserPhysicalPages ZwFreeUserPhysicalPages ZwFreeUserPhysicalPages ZwFreeVirtualMemory ZwFreeVirtualMemory ZwFreeVirtualMemory ZwFreeVirtualMemory ZwFreeVirtualMemory ZwFreeVirtualMemory ZwFreezeRegistry ZwFreezeRegistry ZwFreezeRegistry ZwFreezeTransactions ZwFreezeTransactions ZwFreezeTransactions ZwFsControlFile ZwFsControlFile ZwFsControlFile ZwFsControlFile ZwFsControlFile ZwFsControlFile ZwGetContextThread ZwGetContextThread

6000 6001 7000 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 6000 6001 7000 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2600

Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3

142 142 125 143 143 126 68 80 84 144 144 127 69 81 85 145 145 128 70 82 86 146 146 129 71 83 87 147 147 130 148 148 131 149 149 132 72 84 88 150 150 133 73 85

ZwGetContextThread ZwGetContextThread ZwGetContextThread ZwGetContextThread

ZwGetCurrentProcessorNumber ZwGetCurrentProcessorNumber ZwGetCurrentProcessorNumber ZwGetCurrentProcessorNumber ZwGetDevicePowerState ZwGetDevicePowerState ZwGetDevicePowerState ZwGetDevicePowerState ZwGetDevicePowerState ZwGetDevicePowerState ZwGetMUIRegistryInfo ZwGetMUIRegistryInfo ZwGetMUIRegistryInfo ZwGetNextProcess ZwGetNextProcess ZwGetNextProcess ZwGetNextThread ZwGetNextThread ZwGetNextThread ZwGetNlsSectionPtr ZwGetNlsSectionPtr ZwGetNlsSectionPtr

ZwGetNotificationResourceManager ZwGetNotificationResourceManager ZwGetNotificationResourceManager ZwGetPlugPlayEvent ZwGetPlugPlayEvent ZwGetPlugPlayEvent ZwGetPlugPlayEvent ZwGetPlugPlayEvent ZwGetPlugPlayEvent ZwGetTickCount ZwGetWriteWatch ZwGetWriteWatch ZwGetWriteWatch ZwGetWriteWatch ZwGetWriteWatch ZwGetWriteWatch

ZwImpersonateAnonymousToken ZwImpersonateAnonymousToken

3790 6000 6001 7000 3790 6000 6001 7000 2195 2600 3790 6000 6001 7000 6000 6001 7000 6000 6001 7000 6000 6001 7000 6000 6001 7000 6000 6001 7000 2195 2600 3790 6000 6001 7000 2195 2195 2600 3790 6000 6001 7000 2195 2600

Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 Win2000 SP0-SP4 WinXP SP0-SP3 Win2003 SP0-SP2 Vista SP0

Vista SP1, Win2008 Windows 7 Win2000 SP0-SP4 WinXP SP0-SP3

89 151 151 134 294 369 365 135 74 86 90 152 152 136 395 388 137 371 367 138 372 368 139 153 153 140 108 109 141 75 87 91 154 154 142 76 77 88 92 155 155 143 78 89