krnl32.ini

Script C被设计成一种解释执行的、C语言风格的脚本语言。它用来完成bat批处理无法完成

;BOOL GetVersionExA(
;    LPOSVERSIONINFO lpVersionInformation 	// pointer to version information structure
;   );
;typedef struct _OSVERSIONINFO{  
;    DWORD dwOSVersionInfoSize; 
;    DWORD dwMajorVersion; 
;    DWORD dwMinorVersion; 
;    DWORD dwBuildNumber; 
;    DWORD dwPlatformId; 
;    TCHAR szCSDVersion[ 128 ]; 
;} OSVERSIONINFO; 
[GetVersionEx]
Name=GetVersionExA
ReturnType = 0
ParamCount = 0

;BOOL GetVolumeInformation(
;    LPCTSTR lpRootPathName,	// address of root directory of the file system 
;    LPTSTR lpVolumeNameBuffer,	// address of name of the volume 
;    DWORD nVolumeNameSize,	// length of lpVolumeNameBuffer 
;    LPDWORD lpVolumeSerialNumber,	// address of volume serial number 
;    LPDWORD lpMaximumComponentLength,	// address of system's maximum filename length
;    LPDWORD lpFileSystemFlags,	// address of file system flags 
;    LPTSTR lpFileSystemNameBuffer,	// address of name of file system 
;    DWORD nFileSystemNameSize 	// length of lpFileSystemNameBuffer 
;   );
[GetVolumeInformation]
Name=GetVolumeInformationA
ReturnType = 0
ParamCount = 8
Type1=2
Type2=2
Type3=0
Type4=0
Type5=0
Type6=0
Type7=2
Type8=0

;UINT GetWindowsDirectoryA(
;    LPTSTR lpBuffer,	// address of buffer for Windows directory 
;    UINT uSize 	// size of directory buffer 
;   );	
[GetWindowsDirectory]
Name=GetWindowsDirectoryA
ReturnType = 0
ParamCount = 2
Type1 = 2
CanDefault1 = 0
Type2 = 0
CanDefault2 = 1
Default2=1024
 
;VOID GlobalMemoryStatus(
;    LPMEMORYSTATUS lpBuffer 	// pointer to the memory status structure  
;   );	
[GlobalMemoryStatus]
Name=GlobalMemoryStatus
ReturnType = 0
ParamCount = 1
Type1 = 0
 

;BOOL IsBadCodePtr(
;    FARPROC lpfn 	// address of function  
;   );
[IsBadCodePtr]
Name=IsBadCodePtr
ReturnType = 0
ParamCount = 1
Type1 = 0

;BOOL IsBadHugeReadPtr(
;    CONST VOID *lp,	// address of memory block 
;    UINT ucb 	// size of block 
;   );
[IsBadHugeReadPtr]
Name=IsBadHugeReadPtr
ReturnType = 0
ParamCount = 2
Type1 = 0
Type2 = 0

;BOOL IsBadHugeWritePtr(
;    LPVOID lp,	// address of memory block  
;    UINT ucb 	// size of block 
;   );
[IsBadHugeWritePtr]
Name=IsBadHugeWritePtr
ReturnType = 0
ParamCount = 2
Type1 = 0
Type2 = 0

;BOOL IsBadReadPtr(
;    CONST VOID *lp,	// address of memory block 
;    UINT ucb 	// size of block 
;   );	


;BOOL IsBadStringPtr(
;    LPCTSTR lpsz,	// address of string 
;    UINT ucchMax 	// maximum size of string  
;   );


;BOOL IsBadWritePtr(
;    LPVOID lp,	// address of memory block  
;    UINT ucb 	// size of block 
;   ); 

;BOOL LockFile(
;    HANDLE hFile,	// handle of file to lock 
;    DWORD dwFileOffsetLow,	// low-order word of lock region offset 
;    DWORD dwFileOffsetHigh,	// high-order word of lock region offset  
;    DWORD nNumberOfBytesToLockLow,	// low-order word of length to lock 
;    DWORD nNumberOfBytesToLockHigh 	// high-order word of length to lock 
;   );

;BOOL LockFileEx(
;    HANDLE hFile,	// handle of file to lock 
;    DWORD dwFlags,	// functional behavior modification flags 
;    DWORD dwReserved,	// reserved, must be set to zero 
;    DWORD nNumberOfBytesToLockLow,	// low-order 32 bits of length to lock 
;    DWORD nNumberOfBytesToLockHigh,	// high-order 32 bits of length to lock 
;    LPOVERLAPPED lpOverlapped 	// addr. of structure with lock region start offset  
;   );

;HINSTANCE LoadLibraryA(
;    LPCTSTR lpLibFileName 	// address of filename of executable module 
;   );	
[LoadLibrary]
Name=LoadLibraryA
ReturnType = 0
ParamCount = 1
Type1 = 2
CanDefault1 = 0


;The lstrcat function appends one string to another. 
;LPTSTR lstrcatA(
;    LPTSTR lpString1,	// address of buffer for concatenated strings 
;    LPCTSTR lpString2 	// address of string to add to string1 
;   );
[lstrcat]
Name=lstrcatA
ReturnType = 0
ParamCount = 2
Type1 = 2
Type2 = 2



;int lstrcmpA(
;    LPCTSTR lpString1,	// address of first string 
;    LPCTSTR lpString2 	// address of second string 
;   );
[lstrcmp]
Name=lstrcmpA
ReturnType = 0
ParamCount = 2
Type1 = 2
Type2 = 2


;The lstrcmpi function compares two character strings. The comparison is not case sensitive. 
;int lstrcmpiA(
;    LPCTSTR lpString1,	// address of first string 
;    LPCTSTR lpString2 	// address of second string 
;   );	
[lstrcmpi]
Name=lstrcmpiA
ReturnType = 0
ParamCount = 2
Type1 = 2
Type2 = 2
 
;The lstrcpy function copies a string to a buffer. 
;LPTSTR lstrcpyA(
;    LPTSTR lpString1,	// address of buffer 
;    LPCTSTR lpString2 	// address of string to copy 
;   );
[lstrcpy]
Name=lstrcpyA
ReturnType = 0
ParamCount = 2
Type1 = 2
Type2 = 2



;The lstrcpyn function copies a specified number of characters from a source string into a buffer. 
;LPTSTR lstrcpynA(
;    LPTSTR lpString1,	// address of target buffer 
;    LPCTSTR lpString2,	// address of source string
;    int iMaxLength 	// number of bytes or characters to copy
;   );
[lstrcpyn]
Name=lstrcpynA
ReturnType = 0
ParamCount = 3
Type1 = 2
Type2 = 2
Type3=0

;int lstrlen(
;    LPCTSTR lpString 	// address of string to count  
;   );
[lstrlen]
Name=lstrlen
ReturnType = 0
ParamCount = 1
Type1 = 2


 
;LPVOID MapViewOfFile(
;    HANDLE hFileMappingObject,	// file-mapping object to map into address space  
;    DWORD dwDesiredAccess,	// access mode 
;    DWORD dwFileOffsetHigh,	// high-order 32 bits of file offset 
;    DWORD dwFileOffsetLow,	// low-order 32 bits of file offset 
;    DWORD dwNumberOfBytesToMap 	// number of bytes to map 
;   );
[MapViewOfFile]
Name=MapViewOfFile
ReturnType = 0
ParamCount = 5
Type1 = 0
Type2 = 0
Type3 = 0
Type4 = 0
Type5 = 0

;LPVOID MapViewOfFileEx(
;    HANDLE hFileMappingObject,	// file-mapping object to map into address space  
;    DWORD dwDesiredAccess,	// access mode 
;    DWORD dwFileOffsetHigh,	// high-order 32 bits of file offset 
;    DWORD dwFileOffsetLow,	// low-order 32 bits of file offset 
;    DWORD dwNumberOfBytesToMap,	// number of bytes to map 
;    LPVOID lpBaseAddress 	// suggested starting address for mapped view 
;   );
[MapViewOfFileEx]
Name=MapViewOfFileEx
ReturnType = 0
ParamCount = 6
Type1 = 0
Type2 = 0
Type3 = 0
Type4 = 0
Type5 = 0


;BOOL MoveFileA(
;    LPCTSTR lpExistingFileName,	// address of name of the existing file  
;    LPCTSTR lpNewFileName 	// address of new name for the file 
;   );	
[MoveFile]
Name=MoveFileA
ReturnType = 0
ParamCount = 2
Type1 = 2
CanDefault1 = 0
Type2 = 2
CanDefault2 = 0

 
;BOOL MoveFileEx(
;    LPCTSTR lpExistingFileName,	// address of name of the existing file  
;    LPCTSTR lpNewFileName,	// address of new name for the file 
;    DWORD dwFlags 	// flag to determine how to move file 
;   );
[MoveFile]
Name=MoveFileA
ReturnType = 0
ParamCount = 3
Type1 = 2
Type2 = 2
Type3 = 0

;int MulDiv(
;    int nNumber,	// 32-bit signed multiplicand  
;    int nNumerator,	// 32-bit signed multiplier 
;    int nDenominator 	// 32-bit signed divisor 
;   );
[MulDiv]
Name=MulDiv
ReturnType = 0
ParamCount = 3
Type1 = 0
Type2 = 0
Type3 = 0


;The OpenProcess function returns a handle of an existing process object. 
;HANDLE OpenProcess(
;    DWORD dwDesiredAccess,	// access flag 
;    BOOL bInheritHandle,	// handle inheritance flag 
;    DWORD dwProcessId 	// process identifier 
;   );	
[OpenProcess]
Name=OpenProcess
ReturnType = 0
ParamCount = 3
Type1 = 0
Type2 = 0
Type3 = 0


;VOID OutputDebugString(
;    LPCTSTR lpOutputString 	// pointer to string to be displayed  
;   );



;BOOL ReadFile(
;    HANDLE hFile,	// handle of file to read 
;    LPVOID lpBuffer,	// address of buffer that receives data  
;    DWORD nNumberOfBytesToRead,	// number of bytes to read 
;    LPDWORD lpNumberOfBytesRead,	// address of number of bytes read 
;    LPOVERLAPPED lpOverlapped 	// address of structure for data 
;   );

;BOOL ReadFileEx(
;    HANDLE hFile,	// handle of file to read 
;    LPVOID lpBuffer,	// address of buffer 
;    DWORD nNumberOfBytesToRead,	// number of bytes to read 
;    LPOVERLAPPED lpOverlapped,	// address of offset 
;    LPOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine 	// address of completion routine 
;   );

;BOOL ReadProcessMemory(
;    HANDLE hProcess,	// handle of the process whose memory is read  
;    LPCVOID lpBaseAddress,	// address to start reading
;    LPVOID lpBuffer,	// address of buffer to place read data
;    DWORD nSize,	// number of bytes to read
;    LPDWORD lpNumberOfBytesRead 	// address of number of bytes read
;   );





;BOOL RemoveDirectoryA(
;    LPCTSTR lpPathName 	// address of directory to remove  
;   );	
[RemoveDirectory]
Name=RemoveDirectoryA
ReturnType = 0
ParamCount = 1
Type1 = 2
CanDefault1 = 0



;DWORD RegisterServiceProcess(DWORD dwProcessId, 
;    DWORD dwType);
;dwProcessId
;Specifies the identifier of the process to register as a service process. Specifies NULL to register the current process. 
;dwType
;Specifies whether the service is to be registered or unregistered. This parameter can be one of the following values. 
;Value	Meaning
;RSP_SIMPLE_SERVICE=1		Registers the process as a service process.
;RSP_UNREGISTER_SERVICE=0	Unregisters the process as a service process.
[RegisterServiceProcess]
Name=RegisterServiceProcess
ReturnType = 0
ParamCount = 2
Type1 = 0
Type2 = 0


;DWORD SearchPath(
;    LPCTSTR lpPath,	// address of search path 
;    LPCTSTR lpFileName,	// address of filename 
;    LPCTSTR lpExtension,	// address of extension 
;    DWORD nBufferLength,	// size, in characters, of buffer 
;    LPTSTR lpBuffer,	// address of buffer for found filename 
;    LPTSTR *lpFilePart 	// address of pointer to file component 
;   );
[SearchPath]
Name=SearchPathA
ReturnType = 0
ParamCount = 6
Type1 = 2
Type2 = 2
Type3 = 2
Type4 = 0
Type5 = 2
Type6 = 2


;BOOL SetComputerNameA(
;    LPCTSTR lpComputerName 	// address of new computer name 
;   );
[SetComputerName]
Name=SetComputerNameA
ReturnType = 0
ParamCount = 1
Type1 = 2
CanDefault1 = 0


;BOOL SetCurrentDirectoryA(
;    LPCTSTR lpPathName 	// address of name of new current directory 
;   );
[SetCurrentDirectory]
Name=SetCurrentDirectoryA
ReturnType = 0
ParamCount = 1
Type1 = 2
CanDefault1 = 0

;BOOL SetFileAttributesA(
;    LPCTSTR lpFileName,	// address of filename 
;    DWORD dwFileAttributes 	// address of attributes to set 
;   ); 



;BOOL SetFileTime(
;    HANDLE hFile,	// identifies the file 
;    CONST FILETIME *lpCreationTime,	// time the file was created 
;    CONST FILETIME *lpLastAccessTime,	// time the file was last accessed 
;    CONST FILETIME *lpLastWriteTime 	// time the file was last written 
;   );	


;VOID SetLastError(
;    DWORD dwErrCode 	// per-thread error code  
;   );

;BOOL SetLocalTime(
;    CONST SYSTEMTIME *lpSystemTime 	// address of local time to set 
;   );


;BOOL SetSystemPowerState(
;    BOOL fSuspend,	
;    BOOL fForce	
;   );
[SetSystemPowerState]
Name=SetSystemPowerState
ReturnType = 0
ParamCount = 2
Type1=0
Type2=0


;BOOL SetPriorityClass(
;    HANDLE hProcess,	// handle to the process  
;    DWORD dwPriorityClass 	// priority class value 
;   );
[SetPriorityClass]
Name=SetPriorityClass
ReturnType = 0
ParamCount = 2
Type1 = 0
Type2 = 0




;BOOL SetVolumeLabelA(
;    LPCTSTR lpRootPathName,	// address of name of root directory for volume 
;    LPCTSTR lpVolumeName 	// name for the volume 
;   );
[SetVolumeLabel]
Name=SetVolumeLabelA
ReturnType = 0
ParamCount = 2
Type1 = 2
CanDefault1 = 0
Type2 = 2
CanDefault2 = 0


;VOID Sleep(
;    DWORD dwMilliseconds 	// sleep time in milliseconds 
;   );
[Sleep]
Name=Sleep
ReturnType = 0
ParamCount = 1
Type1 = 0
CanDefault1 = 1
Default1 = 2000


;BOOL SystemTimeToFileTime(
;    CONST SYSTEMTIME *lpSystemTime,	// address of system time to convert 
;    LPFILETIME lpFileTime 	// address of buffer for converted file time 
;   );	
;typedef struct _FILETIME { // ft  
;    DWORD dwLowDateTime; 
;    DWORD dwHighDateTime; 
;} FILETIME; 

;BOOL TerminateProcess(
;    HANDLE hProcess,	// handle to the process 
;    UINT uExitCode 	// exit code for the process  
;   );


;BOOL WINAPI Toolhelp32ReadProcessMemory(DWORD th32ProcessID, 
;    LPCVOID lpBaseAddress, LPVOID lpBuffer, DWORD cbRead, 
;    LPDWORD lpNumberOfBytesRead);  


;BOOL UnmapViewOfFile(
;    LPCVOID lpBaseAddress 	// address where mapped view begins  
;   ); 

;LPVOID VirtualAlloc(
;    LPVOID lpAddress,	// address of region to reserve or commit  
;    DWORD dwSize,	// size of region 
;    DWORD flAllocationType,	// type of allocation 
;    DWORD flProtect 	// type of access protection 
;   );

;BOOL VirtualFree(
;    LPVOID lpAddress,	// address of region of committed pages  
;    DWORD dwSize,	// size of region 
;    DWORD dwFreeType 	// type of free operation 
;   );

;BOOL VirtualProtect(
;    LPVOID lpAddress,	// address of region of committed pages 
;    DWORD dwSize,	// size of the region 
;    DWORD flNewProtect,	// desired access protection 
;    PDWORD lpflOldProtect 	// address of variable to get old protection  
;   );

;BOOL VirtualProtectEx(
;    HANDLE hProcess,	// handle of process 
;    LPVOID lpAddress,	// address of region of committed pages 
;    DWORD dwSize,	// size of region 
;    DWORD flNewProtect,	// desired access protection 
;    PDWORD lpflOldProtect 	// address of variable to get old protection  
;   );

;DWORD VirtualQuery(
;    LPCVOID lpAddress,	// address of region 
;    PMEMORY_BASIC_INFORMATION lpBuffer,	// address of information buffer  
;    DWORD dwLength 	// size of buffer 
;   );

;DWORD VirtualQueryEx(
;    HANDLE hProcess,	// handle of process 
;    LPCVOID lpAddress,	// address of region 
;    PMEMORY_BASIC_INFORMATION lpBuffer,	// address of information buffer  
;    DWORD dwLength 	// size of buffer 
;   );


;UINT WinExec(
;    LPCSTR lpCmdLine,	// address of command line 
;    UINT uCmdShow 	// window style for new application 
;   );
[WinExec]
Name=WinExecA
ReturnType = 0
ParamCount = 2
Type1 = 2
CanDefault1 = 0
Type2 = 0
CanDefault2 = 0



;BOOL WriteFile(
;    HANDLE hFile,	// handle to file to write to 
;    LPCVOID lpBuffer,	// pointer to data to write to file 
;    DWORD nNumberOfBytesToWrite,	// number of bytes to write 
;    LPDWORD lpNumberOfBytesWritten,	// pointer to number of bytes written 
;    LPOVERLAPPED lpOverlapped 	// pointer to structure needed for overlapped I/O
;   );


;BOOL WriteFileEx(
;    HANDLE hFile, 	// handle to output file
;    LPCVOID lpBuffer, 	// pointer to input buffer
;    DWORD nNumberOfBytesToWrite, 	// number of bytes to write
;    LPOVERLAPPED lpOverlapped, 	// pointer to async. i/o data
;    LPOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine 	// ptr. to completion routine
;   );	
 
;BOOL WriteProcessMemory(
;    HANDLE hProcess,	// handle to process whose memory is written to  
;    LPVOID lpBaseAddress,	// address to start writing to 
;    LPVOID lpBuffer,	// pointer to buffer to write data to
;    DWORD nSize,	// number of bytes to write
;    LPDWORD lpNumberOfBytesWritten 	// actual number of bytes written 
;   );