📄 ldr.h
字号:
#ifndef __INCLUDE_INTERNAL_LDR_H
#define __INCLUDE_INTERNAL_LDR_H
#define KERNEL_MODULE_NAME L"ntoskrnl.exe"
#define HAL_MODULE_NAME L"hal.dll"
#define DRIVER_ROOT_NAME L"\\Driver\\"
#define FILESYSTEM_ROOT_NAME L"\\FileSystem\\"
extern ULONG_PTR LdrHalBase;
NTSTATUS
NTAPI
LdrLoadInitialProcess(
PHANDLE ProcessHandle,
PHANDLE ThreadHandle
);
VOID
NTAPI
LdrLoadAutoConfigDrivers(VOID);
NTSTATUS
NTAPI
LdrpMapImage(
HANDLE ProcessHandle,
HANDLE SectionHandle,
PVOID *ImageBase
);
NTSTATUS
NTAPI
LdrpLoadImage(
PUNICODE_STRING DriverName,
PVOID *ModuleBase,
PVOID *SectionPointer,
PVOID *EntryPoint,
PVOID *ExportDirectory
);
NTSTATUS
NTAPI
LdrpUnloadImage(PVOID ModuleBase);
NTSTATUS
NTAPI
LdrpLoadAndCallImage(PUNICODE_STRING DriverName);
NTSTATUS
NTAPI
LdrpQueryModuleInformation(
PVOID Buffer,
ULONG Size,
PULONG ReqSize
);
VOID
NTAPI
LdrInit1(VOID);
VOID
NTAPI
LdrInitDebug(
PLOADER_MODULE Module,
PWCH Name
);
NTSTATUS
NTAPI
LdrLoadModule(
PUNICODE_STRING Filename,
PLDR_DATA_TABLE_ENTRY *ModuleObject
);
NTSTATUS
NTAPI
LdrUnloadModule(PLDR_DATA_TABLE_ENTRY ModuleObject);
PLDR_DATA_TABLE_ENTRY
NTAPI
LdrGetModuleObject(PUNICODE_STRING ModuleName);
#endif /* __INCLUDE_INTERNAL_LDR_H */
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -