内核API函数（Kernel API Functions）

来源：作者：出处：巧巧读书 2006-09-17 进入讨论组

关键词：
director
access

函数名称 INT 2eh Ntdll.Nt* Ntdll.Zw* Ntoskrnl.Nt* Ntoskrnl.Zw* 1 NtAcceptConnectPort 0x0000 N/A N/A 2 NtAccessCheck 0x0001 N/A N/A 3 NtAccessCheckAndAuditAlarm 0x0002 N/A 4 NtAccessCheckByType 0x0003 N/A N/A 5 NtAccessCheckByTypeAndAuditAlarm 0x0004 N/A N/A 6 NtAccessCheckByTypeResultList 0x0005 N/A N/A 7 NtAccessCheckByTypeResultListAndAuditAlarm 0x0006 N/A N/A 8 NtAccessCheckByTypeResultListAndAuditAlarmByHandle 0x0007 N/A N/A 9 NtAddAtom 0x0008 N/A 10 NtAdjustGroupsToken 0x0009 N/A N/A 11 NtAdjustPrivilegesToken 0x000A 12 NtAlertResumeThread 0x000B N/A N/A 13 NtAlertThread 0x000C N/A 14 NtAllocateLocallyUniqueld 0x000D N/A 15 NtAllocateUserPhysicalPages 0x000E N/A N/A 16 NtAllocateUuids 0x000F N/A 17 NtAllocateVirtualMemory 0x0010 18 NtAreMappedFilesTheSame 0x0011 N/A N/A 19 NtAssignProcessToJobObject 0x0012 N/A N/A 20 NtBuildNumber N/A N/A N/A N/A 21 NtCallbackReturn 0x0013 N/A N/A 22 NtCancelDeviceWakeupRequest 0x0016 N/A N/A 23 NtCancelloFile 0x0014 N/A 24 NtCancelTimer 0x0015 N/A 25 NtClearEvent 0x0017 N/A 26 NtClose 0x0018 27 NtCloseObjectAuditAlarm 0x0019 N/A 28 NtCompleteConnectPort 0x001A N/A N/A 29 NtConnectPort 0x001B 30 NtContinue 0x001C N/A N/A 31 NtCreateChannel 0x00F1 N/A N/A 32 NtCreateDirectoryObject 0x001D N/A 33 NtCreateEvent 0x001E 34 NtCreateEventPair 0x001F N/A N/A 35 NtCreateFile 0x0020 36 NtCreateloCompletion 0x0021 N/A N/A 37 NtCreateJobObject 0x0022 N/A N/A 38 NtCreateKey 0x0023 N/A 39 NtCreateMailslotFile 0x0024 N/A N/A 40 NtCreateMutant 0x0025 N/A N/A 41 NtCreateNamedPipeFile 0x0026 N/A N/A 42 NtCreatePagingFile 0x0027 N/A N/A 43 NtCreatePort 0x0028 N/A N/A 44 NtCreateProcess 0x0029 N/A N/A 45 NtCreateProfile 0x002A N/A N/A 46 NtCreateSection 0x002B 47 NtCreateSemaphore 0x002C N/A N/A 48 NtCreateSymbolicLinkObject 0x002D N/A 49 NtCreateThread 0x002E N/A N/A 50 NtCreateTimer 0x002F N/A 51 NtCreateToken 0x0030 N/A N/A 52 NtCreateWaitablePort 0x0031 N/A N/A 53 NtCurrentTeb N/A N/A N/A N/A 54 NtDelayExecution 0x0032 N/A N/A 55 NtDeleteAtom 0x0033 N/A 56 NtDeleteFile 0x0034 57 NtDeleteKey 0x0035 N/A 58 NtDeleteObjectAuditAlarm 0x0036 N/A N/A 59 NtDeleteValueKey 0x0037 N/A 60 NtDeviceloControlFile 0x0038 61 NtDisplayString 0x0039 N/A 62 NtDuplicateObject 0x003A 63 NtDuplicateToken 0x003B 64 NtEnumerateKey 0x003C N/A 65 NtEnumerateValueKey 0x003D N/A 66 NtExtendSection 0x003E N/A N/A 67 NtFilterToken 0x003F N/A N/A 68 NtFindAtom 0x0040 N/A 69 NtFlushBuffersFile 0x0041 N/A N/A 70 NtFlushlnstructionCache 0x0042 N/A 71 NtFlushKey 0x0043 N/A 72 NtFlushVirtualMemory 0x0044 N/A 73 NtFlushWriteBuffer 0x0045 N/A N/A 74 NtFreeUserPhysicalPages 0x0046 N/A N/A 75 NtFreeVirtualMemory 0x0047 76 NtFsControlFile 0x0048 77 NtGetContextThread 0x0049 N/A N/A 78 NtGet转载保留：http://www.qqread.com/winnt/o234863.html