2.2.ReactOS系统，系统调用表MainSSDT的实现

2.2.ReactOS系统，系统调用表MainSSDT的实现

2.2.ReactOS系统，系统调用表MainSSDT的实现

---

系统调用表MainSSDT

ULONG_PTR MainSSDT[] = {
#include "sysfuncs.h"
};

SVC_ 宏的定义

#define SVC_(name, argcount) (ULONG_PTR)Nt##name,

sysfuncs.h函数的声明

    SVC_(AcceptConnectPort, 6)
    SVC_(AccessCheck, 8)
    SVC_(AccessCheckAndAuditAlarm, 11)
    SVC_(AccessCheckByType, 11)
    SVC_(AccessCheckByTypeAndAuditAlarm, 16)
    SVC_(AccessCheckByTypeResultList, 11)
    SVC_(AccessCheckByTypeResultListAndAuditAlarm, 16)
    SVC_(AccessCheckByTypeResultListAndAuditAlarmByHandle, 17)
    SVC_(AddAtom, 3)
    SVC_(AddBootEntry, 2)
    SVC_(AddDriverEntry, 2)
    SVC_(AdjustGroupsToken, 6)
    SVC_(AdjustPrivilegesToken, 6)
    SVC_(AlertResumeThread, 2)
    SVC_(AlertThread, 1)
    SVC_(AllocateLocallyUniqueId, 1)
    SVC_(AllocateUserPhysicalPages, 3)
    SVC_(AllocateUuids, 4)
    SVC_(AllocateVirtualMemory, 6)
    SVC_(ApphelpCacheControl, 2)
    SVC_(AreMappedFilesTheSame, 2)
    SVC_(AssignProcessToJobObject, 2)
    SVC_(CallbackReturn, 3)
    SVC_(CancelDeviceWakeupRequest, 1)
    SVC_(CancelIoFile, 2)
    SVC_(CancelTimer, 2)
    SVC_(ClearEvent, 1)
    SVC_(Close, 1)
    SVC_(CloseObjectAuditAlarm, 3)
    SVC_(CompactKeys, 2)
    SVC_(CompareTokens, 3)
    SVC_(CompleteConnectPort, 1)
    SVC_(CompressKey, 1)
    SVC_(ConnectPort, 8)
    SVC_(Continue, 2)
    SVC_(CreateDebugObject, 4)
    SVC_(CreateDirectoryObject, 3)
    SVC_(CreateEvent, 5)
    SVC_(CreateEventPair, 3)
    SVC_(CreateFile, 11)
    SVC_(CreateIoCompletion, 4)
    SVC_(CreateJobObject, 3)
    SVC_(CreateJobSet, 3)
    SVC_(CreateKey, 7)
    SVC_(CreateMailslotFile, 8)
    SVC_(CreateMutant, 4)
    SVC_(CreateNamedPipeFile, 14)
    SVC_(CreatePagingFile, 4)
    SVC_(CreatePort, 5)
    SVC_(CreateProcess, 8)
    SVC_(CreateProcessEx, 9)
    SVC_(CreateProfile, 9)
    SVC_(CreateSection, 7)
    SVC_(CreateSemaphore, 5)
    SVC_(CreateSymbolicLinkObject, 4)
    SVC_(CreateThread, 8)
    SVC_(CreateTimer, 4)
    SVC_(CreateToken, 13)
    SVC_(CreateWaitablePort, 5)
    SVC_(DebugActiveProcess, 2)
    SVC_(DebugContinue, 3)
    SVC_(DelayExecution, 2)
    SVC_(DeleteAtom, 1)
    SVC_(DeleteBootEntry, 1)
    SVC_(DeleteDriverEntry, 1)
    SVC_(DeleteFile, 1)
    SVC_(DeleteKey, 1)
    SVC_(DeleteObjectAuditAlarm, 3)
    SVC_(DeleteValueKey, 2)
    SVC_(DeviceIoControlFile, 10)
    SVC_(DisplayString, 1)
    SVC_(DuplicateObject, 7)
    SVC_(DuplicateToken, 6)
    SVC_(EnumerateBootEntries, 2)
    SVC_(EnumerateDriverEntries, 2)
    SVC_(EnumerateKey, 6)
    SVC_(EnumerateSystemEnvironmentValuesEx, 3)
    SVC_(EnumerateValueKey, 6)
    SVC_(ExtendSection, 2)
    SVC_(FilterToken, 6)
    SVC_(FindAtom, 3)
    SVC_(FlushBuffersFile, 2)
    SVC_(FlushInstructionCache, 3)
    SVC_(FlushKey, 1)
    SVC_(FlushVirtualMemory, 4)
    SVC_(FlushWriteBuffer, 0)
    SVC_(FreeUserPhysicalPages, 3)
    SVC_(FreeVirtualMemory, 4)
    SVC_(FsControlFile, 10)
    SVC_(GetContextThread, 2)
    SVC_(GetDevicePowerState, 2)
    SVC_(GetPlugPlayEvent, 4)
    SVC_(GetWriteWatch, 7)
    SVC_(ImpersonateAnonymousToken, 1)
    SVC_(ImpersonateClientOfPort, 2)
    SVC_(ImpersonateThread, 3)
    SVC_(InitializeRegistry, 1)
    SVC_(InitiatePowerAction, 4)
    SVC_(IsProcessInJob, 2)
    SVC_(IsSystemResumeAutomatic, 0)
    SVC_(ListenPort, 2)
    SVC_(LoadDriver, 1)
    SVC_(LoadKey, 2)
    SVC_(LoadKey2, 3)
    SVC_(LoadKeyEx, 4)
    SVC_(LockFile, 10)
    SVC_(LockProductActivationKeys, 2)
    SVC_(LockRegistryKey, 1)
    SVC_(LockVirtualMemory, 4)
    SVC_(MakePermanentObject, 1)
    SVC_(MakeTemporaryObject, 1)
    SVC_(MapUserPhysicalPages, 3)
    SVC_(MapUserPhysicalPagesScatter, 3)
    SVC_(MapViewOfSection, 10)
    SVC_(ModifyBootEntry, 1)
    SVC_(ModifyDriverEntry, 1)
    SVC_(NotifyChangeDirectoryFile, 9)
    SVC_(NotifyChangeKey, 10)
    SVC_(NotifyChangeMultipleKeys, 12)
    SVC_(OpenDirectoryObject, 3)
    SVC_(OpenEvent, 3)
    SVC_(OpenEventPair, 3)
    SVC_(OpenFile, 6)
    SVC_(OpenIoCompletion, 3)
    SVC_(OpenJobObject, 3)
    SVC_(OpenKey, 3)
    SVC_(OpenMutant, 3)
    SVC_(OpenObjectAuditAlarm, 12)
    SVC_(OpenProcess, 4)
    SVC_(OpenProcessToken, 3)
    SVC_(OpenProcessTokenEx, 4)
    SVC_(OpenSection, 3)
    SVC_(OpenSemaphore, 3)
    SVC_(OpenSymbolicLinkObject, 3)
    SVC_(OpenThread, 4)
    SVC_(OpenThreadToken, 4)
    SVC_(OpenThreadTokenEx, 5)
    SVC_(OpenTimer, 3)
    SVC_(PlugPlayControl, 3)
    SVC_(PowerInformation, 5)
    SVC_(PrivilegeCheck, 3)
    SVC_(PrivilegeObjectAuditAlarm, 6)
    SVC_(PrivilegedServiceAuditAlarm, 5)
    SVC_(ProtectVirtualMemory, 5)
    SVC_(PulseEvent, 2)
    SVC_(QueryAttributesFile, 2)
    SVC_(QueryBootEntryOrder, 2)
    SVC_(QueryBootOptions, 2)
    SVC_(QueryDebugFilterState, 2)
    SVC_(QueryDefaultLocale, 2)
    SVC_(QueryDefaultUILanguage, 1)
    SVC_(QueryDirectoryFile, 11)
    SVC_(QueryDirectoryObject, 7)
    SVC_(QueryDriverEntryOrder, 2)
    SVC_(QueryEaFile, 9)
    SVC_(QueryEvent, 5)
    SVC_(QueryFullAttributesFile, 2)
    SVC_(QueryInformationAtom, 5)
    SVC_(QueryInformationFile, 5)
    SVC_(QueryInformationJobObject, 5)
    SVC_(QueryInformationPort, 5)
    SVC_(QueryInformationProcess, 5)
    SVC_(QueryInformationThread, 5)
    SVC_(QueryInformationToken, 5)
    SVC_(QueryInstallUILanguage, 1)
    SVC_(QueryIntervalProfile, 2)
    SVC_(QueryIoCompletion, 5)
    SVC_(QueryKey, 5)
    SVC_(QueryMultipleValueKey, 6)
    SVC_(QueryMutant, 5)
    SVC_(QueryObject, 5)
    SVC_(QueryOpenSubKeys, 2)
    SVC_(QueryOpenSubKeysEx, 4)
    SVC_(QueryPerformanceCounter, 2)
    SVC_(QueryQuotaInformationFile, 9)
    SVC_(QuerySection, 5)
    SVC_(QuerySecurityObject, 5)
    SVC_(QuerySemaphore, 5)
    SVC_(QuerySymbolicLinkObject, 3)
    SVC_(QuerySystemEnvironmentValue, 4)
    SVC_(QuerySystemEnvironmentValueEx, 5)
    SVC_(QuerySystemInformation, 4)
    SVC_(QuerySystemTime, 1)
    SVC_(QueryTimer, 5)
    SVC_(QueryTimerResolution, 3)
    SVC_(QueryValueKey, 6)
    SVC_(QueryVirtualMemory, 6)
    SVC_(QueryVolumeInformationFile, 5)
    SVC_(QueueApcThread, 5)
    SVC_(RaiseException, 3)
    SVC_(RaiseHardError, 6)
    SVC_(ReadFile, 9)
    SVC_(ReadFileScatter, 9)
    SVC_(ReadRequestData, 6)
    SVC_(ReadVirtualMemory, 5)
    SVC_(RegisterThreadTerminatePort, 1)
    SVC_(ReleaseMutant, 2)
    SVC_(ReleaseSemaphore, 3)
    SVC_(RemoveIoCompletion, 5)
    SVC_(RemoveProcessDebug, 2)
    SVC_(RenameKey, 2)
    SVC_(ReplaceKey, 3)
    SVC_(ReplyPort, 2)
    SVC_(ReplyWaitReceivePort, 4)
    SVC_(ReplyWaitReceivePortEx, 5)
    SVC_(ReplyWaitReplyPort, 2)
    SVC_(RequestDeviceWakeup, 1)
    SVC_(RequestPort, 2)
    SVC_(RequestWaitReplyPort, 3)
    SVC_(RequestWakeupLatency, 1)
    SVC_(ResetEvent, 2)
    SVC_(ResetWriteWatch, 3)
    SVC_(RestoreKey, 3)
    SVC_(ResumeProcess, 1)
    SVC_(ResumeThread, 2)
    SVC_(SaveKey, 2)
    SVC_(SaveKeyEx, 3)
    SVC_(SaveMergedKeys, 3)
    SVC_(SecureConnectPort, 9)
    SVC_(SetBootEntryOrder, 2)
    SVC_(SetBootOptions, 2)
    SVC_(SetContextThread, 2)
    SVC_(SetDebugFilterState, 3)
    SVC_(SetDefaultHardErrorPort, 1)
    SVC_(SetDefaultLocale, 2)
    SVC_(SetDefaultUILanguage, 1)
    SVC_(SetDriverEntryOrder, 2)
    SVC_(SetEaFile, 4)
    SVC_(SetEvent, 2)
    SVC_(SetEventBoostPriority, 1)
    SVC_(SetHighEventPair, 1)
    SVC_(SetHighWaitLowEventPair, 1)
    SVC_(SetInformationDebugObject, 5)
    SVC_(SetInformationFile, 5)
    SVC_(SetInformationJobObject, 4)
    SVC_(SetInformationKey, 4)
    SVC_(SetInformationObject, 4)
    SVC_(SetInformationProcess, 4)
    SVC_(SetInformationThread, 4)
    SVC_(SetInformationToken, 4)
    SVC_(SetIntervalProfile, 2)
    SVC_(SetIoCompletion, 5)
    SVC_(SetLdtEntries, 6)
    SVC_(SetLowEventPair, 1)
    SVC_(SetLowWaitHighEventPair, 1)
    SVC_(SetQuotaInformationFile, 4)
    SVC_(SetSecurityObject, 3)
    SVC_(SetSystemEnvironmentValue, 2)
    SVC_(SetSystemEnvironmentValueEx, 5)
    SVC_(SetSystemInformation, 3)
    SVC_(SetSystemPowerState, 3)
    SVC_(SetSystemTime, 2)
    SVC_(SetThreadExecutionState, 2)
    SVC_(SetTimer, 7)
    SVC_(SetTimerResolution, 3)
    SVC_(SetUuidSeed, 1)
    SVC_(SetValueKey, 6)
    SVC_(SetVolumeInformationFile, 5)
    SVC_(ShutdownSystem, 1)
    SVC_(SignalAndWaitForSingleObject, 4)
    SVC_(StartProfile, 1)
    SVC_(StopProfile, 1)
    SVC_(SuspendProcess, 1)
    SVC_(SuspendThread, 2)
    SVC_(SystemDebugControl, 6)
    SVC_(TerminateJobObject, 2)
    SVC_(TerminateProcess, 2)
    SVC_(TerminateThread, 2)
    SVC_(TestAlert, 0)
    SVC_(TraceEvent, 4)
    SVC_(TranslateFilePath, 4)
    SVC_(UnloadDriver, 1)
    SVC_(UnloadKey, 1)
    SVC_(UnloadKey2, 2)
    SVC_(UnloadKeyEx, 2)
    SVC_(UnlockFile, 5)
    SVC_(UnlockVirtualMemory, 4)
    SVC_(UnmapViewOfSection, 2)
    SVC_(VdmControl, 2)
    SVC_(WaitForDebugEvent, 4)
    SVC_(WaitForMultipleObjects, 5)
    SVC_(WaitForSingleObject, 3)
    SVC_(WaitHighEventPair, 1)
    SVC_(WaitLowEventPair, 1)
    SVC_(WriteFile, 9)
    SVC_(WriteFileGather, 9)
    SVC_(WriteRequestData, 6)
    SVC_(WriteVirtualMemory, 5)
    SVC_(YieldExecution, 0)
    SVC_(CreateKeyedEvent, 4)
    SVC_(OpenKeyedEvent, 3)
    SVC_(ReleaseKeyedEvent, 4)
    SVC_(WaitForKeyedEvent, 4)
    SVC_(QueryPortInformationProcess, 0)
    SVC_(GetCurrentProcessorNumber, 0)
    SVC_(WaitForMultipleObjects32, 5)