w2k_lib.h

Undocumented WIndows 2000 Secrets 完整简体中文版！！NT架构windows（20000、xp）Kernel Hacking必备！！附cd iso与完整附录！

typedef struct _VS_TRANSLATION
    {
    WORD wLanguage;
    WORD wCodePage;
    }
    VS_TRANSLATION, *PVS_TRANSLATION, **PPVS_TRANSLATION;

#define VS_TRANSLATION_ sizeof (VS_TRANSLATION)

// -----------------------------------------------------------------

typedef struct _VS_VAR
    {
    VS_HEADER_13     Header;    // "Translation" + padding
    VS_TRANSLATION   Translation [];
    }
    VS_VAR, *PVS_VAR, **PPVS_VAR;

#define VS_VAR_ sizeof (VS_VAR)

// -----------------------------------------------------------------

typedef struct _VS_VARFILEINFO
    {
    VS_HEADER_13     Header;    // "VarFileInfo" + padding
    VS_VAR           Var;
    }
    VS_VARFILEINFO, *PVS_VARFILEINFO, **PPVS_VARFILEINFO;

#define VS_VARFILEINFO_ sizeof (VS_VARFILEINFO)

// -----------------------------------------------------------------

typedef struct _VS_VERSIONINFO
    {
    VS_HEADER_17     Header;    // "VS_VERSION_INFO" + padding
    VS_FIXEDFILEINFO FixedFileInfo;
    BYTE             abData [];
    }
    VS_VERSIONINFO, *PVS_VERSIONINFO, **PPVS_VERSIONINFO;

#define VS_VERSIONINFO_ sizeof (VS_VERSIONINFO)

// -----------------------------------------------------------------

typedef struct _VS_CODE_PAGE
    {
    DWORD dId;
    PWORD pwName;
    }
    VS_CODE_PAGE, *PVS_CODE_PAGE, **PPVS_CODE_PAGE;

#define VS_CODE_PAGE_ sizeof (VS_CODE_PAGE)

// -----------------------------------------------------------------

typedef struct _VS_VERSIONQUAD
    {
    union
        {
        struct
            {
            QWORD qVersion;
            };
        struct
            {
            DWORD dVersionL;
            DWORD dVersionH;
            };
        struct
            {
            WORD wVersionLL;
            WORD wVersionL;
            WORD wVersionH;
            WORD wVersionHH;
            };
        };
    }
    VS_VERSIONQUAD, *PVS_VERSIONQUAD, **PPVS_VERSIONQUAD;

#define VS_VERSIONQUAD_ sizeof (VS_VERSIONQUAD)

// -----------------------------------------------------------------

typedef struct _VS_VERSIONDATA
    {
    VS_VERSIONQUAD vvqFile;
    VS_VERSIONQUAD vvqProduct;
    DWORD          dTableIndex;
    DWORD          dTableCount;
    VS_TRANSLATION Translation;
    WORD           awLanguage         [N_STRING];
    WORD           awCodePage         [N_STRING];
    WORD           awCompanyName      [N_STRING];
    WORD           awFileDescription  [N_STRING];
    WORD           awFileVersion      [N_STRING];
    WORD           awInternalName     [N_STRING];
    WORD           awLegalCopyright   [N_STRING];
    WORD           awOriginalFilename [N_STRING];
    WORD           awProductName      [N_STRING];
    WORD           awProductVersion   [N_STRING];
    WORD           awComments         [N_STRING];
    WORD           awLegalTrademarks  [N_STRING];
    WORD           awPrivateBuild     [N_STRING];
    WORD           awSpecialBuild     [N_STRING];
    }
    VS_VERSIONDATA, *PVS_VERSIONDATA, **PPVS_VERSIONDATA;

#define VS_VERSIONDATA_ sizeof (VS_VERSIONDATA)

// =================================================================
// SPECIAL API PROTOTYPES
// =================================================================

DWORD WINAPI _vsprintf (PWORD pwBuffer,
                        PWORD pwFormat,
                        PVOID pArguments);

INT WINAPI _vmprintf (HWND  hWnd,
                      UINT  uiType,
                      PWORD pwCaption,
                      PWORD pwFormat,
                      PVOID pArguments);

DWORD WINAPI _vfprintf (HANDLE hFile,
                        PWORD  pwFormat,
                        PVOID  pArguments);

DWORD WINAPI _veprintf (PWORD pwFormat,
                        PVOID pArguments);

DWORD WINAPI _vprintf (PWORD pwFormat,
                       PVOID pArguments);

// -----------------------------------------------------------------

DWORD WINAPI _sprintf (PWORD pwBuffer,
                       PWORD pwFormat,
                       ...);

INT WINAPI _mprintf (HWND  hWnd,
                     UINT  uiType,
                     PWORD pwCaption,
                     PWORD pwFormat,
                     ...);

DWORD WINAPI _fprintf (HANDLE hFile,
                       PWORD  pwFormat,
                       ...);

DWORD WINAPI _eprintf (PWORD pwFormat,
                      ...);

DWORD WINAPI _printf (PWORD pwFormat,
                      ...);

// -----------------------------------------------------------------

PWORD WINAPI _strcpy (PWORD pwTo,
                      PWORD pwFrom,
                      PWORD pwDefault);

PWORD WINAPI _strcpyn (PWORD pwTo,
                       PWORD pwFrom,
                       PWORD pwDefault,
                       DWORD dTo);

// =================================================================
// API PROTOTYPES
// =================================================================

DWORD WINAPI w2kLibVersion (void);

DWORD WINAPI w2kLibTest (DWORD dVersion);

PBYTE WINAPI w2kMemoryAnsi (DWORD dSize);

PWORD WINAPI w2kMemoryUnicode (DWORD dSize);

PVOID WINAPI w2kMemoryCreate (DWORD dSize);

PVOID WINAPI w2kMemoryCreateEx (DWORD dSize,
                                DWORD dTag);

PW2K_MEMORY WINAPI w2kMemoryBase (PVOID pData);

PW2K_MEMORY WINAPI w2kMemoryBaseEx (PVOID pData,
                                    DWORD dTag);

PVOID WINAPI w2kMemoryResize (PVOID pData,
                              DWORD dSize,
                              PBOOL pfOk);

PVOID WINAPI w2kMemoryResizeEx (PVOID pData,
                                DWORD dSize,
                                PBOOL pfOk,
                                DWORD dTag);

PVOID WINAPI w2kMemoryDestroy (PVOID pData);

PVOID WINAPI w2kMemoryDestroyEx (PVOID pData,
                                 DWORD dTag);

void WINAPI w2kMemoryReset (void);

void WINAPI w2kMemoryTrack (DWORD dSize,
                            BOOL  fAdd);

BOOL WINAPI w2kMemoryStatus (PDWORD pdMemoryNow,
                             PDWORD pdMemoryMax);

PVOID WINAPI w2kMemoryCopy (PVOID pTarget,
                            PVOID pSource,
                            DWORD dBytes);

PVOID WINAPI w2kMemoryFill (PVOID pTarget,
                            DWORD dBytes,
                            BYTE  bData);

PVOID WINAPI w2kMemoryZero (PVOID pTarget,
                            DWORD dBytes);

BOOL WINAPI w2kStringFilter (PWORD pwFilter,
                             PWORD pwData,
                             BOOL  fIgnoreCase);

PW2K_POOL WINAPI w2kPoolCreate (DWORD dCount);

PW2K_POOL WINAPI w2kPoolDestroy (PW2K_POOL  pwp,
                                 W2K_NOTIFY Notify,
                                 PDWORD     pdErrors);

BOOL WINAPI w2kPoolLock (PW2K_POOL pwp);

BOOL WINAPI w2kPoolUnlock (PW2K_POOL pwp);

BOOL WINAPI w2kPoolAdd (PW2K_POOL  pwp,
                        W2K_NOTIFY Notify,
                        PWORD      pwName,
                        PVOID      pData,
                        BOOL       fUnique);

DWORD WINAPI w2kPoolRemove (PW2K_POOL  pwp,
                            W2K_NOTIFY Notify,
                            PWORD      pwName);

DWORD WINAPI w2kPoolEnumerate (PW2K_POOL  pwp,
                               W2K_NOTIFY Notify,
                               PWORD      pwName);

BOOL WINAPI w2kConsoleTest (void);

BOOL WINAPI w2kConsoleOpen (void);

BOOL WINAPI w2kConsoleClose (void);

DWORD WINAPI w2kFormatAnsi (PWORD pwBuffer,
                            DWORD dOffset,
                            PBYTE pbData,
                            DWORD dData,
                            DWORD dWidth,
                            DWORD dPrecision,
                            WORD  wFill,
                            BOOL  fRight,
                            BOOL  fZero);

DWORD WINAPI w2kFormatUnicode (PWORD pwBuffer,
                               DWORD dOffset,
                               PWORD pwData,
                               DWORD dData,
                               DWORD dWidth,
                               DWORD dPrecision,
                               WORD  wFill,
                               BOOL  fRight,
                               BOOL  fZero);

DWORD WINAPI w2kFormatDecimal (PWORD pwBuffer,
                               DWORD dOffset,
                               DWORD dData,
                               DWORD dWidth,
                               DWORD dPrecision,
                               WORD  wFill,
                               BOOL  fRight,
                               BOOL  fZero,
                               BOOL  fPrefix,
                               BOOL  fSigned);

DWORD WINAPI w2kFormatHex (PWORD pwBuffer,
                           DWORD dOffset,
                           DWORD dData,
                           DWORD dWidth,
                           DWORD dPrecision,
                           WORD  wFill,
                           BOOL  fRight,
                           BOOL  fZero,
                           BOOL  fPrefix,
                           BOOL  fLower);

DWORD WINAPI w2kFormatSingle (PWORD  pwBuffer,
                              DWORD  dOffset,
                              PWORD  pwFormat,
                              PDWORD pdFormat,
                              PVOID *ppData,
                              WORD   wFill,
                              BOOL   fUnicode);

DWORD WINAPI w2kFormatMulti (PWORD pwBuffer,
                             DWORD dOffset,
                             PWORD pwFormat,
                             PVOID pArguments,
                             WORD  wFill,
                             BOOL  fUnicode);

PBYTE WINAPI w2kFormatW2A (PWORD pwFrom,
                           PBYTE pbTo);

DWORD WINAPI w2kCrc32Start (PDWORD pdCrc32);

BOOL WINAPI w2kCrc32Stop (PDWORD pdCrc32);

DWORD WINAPI w2kCrc32Byte (PDWORD pdCrc32,
                           BYTE   bData);

DWORD WINAPI w2kCrc32Word (PDWORD pdCrc32,
                           WORD   wData);

DWORD WINAPI w2kCrc32Dword (PDWORD pdCrc32,
                            DWORD  dData);

DWORD WINAPI w2kCrc32Multi (PDWORD pdCrc32,
                            PVOID  pData,
                            DWORD  dData);

DWORD WINAPI w2kCrc32Text (PDWORD pdCrc32,
                           PWORD  pwData,
                           DWORD  dData);

DWORD WINAPI w2kRandomInitialize (PDWORD pdData,
                                  PDWORD pdAddress,
                                  DWORD  dSeed);

BYTE WINAPI w2kRandomByte (PDWORD pdData,
                           PDWORD pdAddress);

WORD WINAPI w2kRandomWord (PDWORD pdData,
                           PDWORD pdAddress);

DWORD WINAPI w2kRandomDword (PDWORD pdData,
                             PDWORD pdAddress);

PWORD WINAPI w2kEnvironmentString (PWORD pwStrings,
                                   PWORD pwName);

DWORD WINAPI w2kPathNormalize (PWORD pwPath);

PWORD WINAPI w2kPathEvaluate (PWORD  pwPath,
                              PDWORD pdData);

DWORD WINAPI w2kPathRoot (PWORD pwPath);

DWORD WINAPI w2kPathName (PWORD  pwPath,
                          PDWORD pdExtension);

DWORD WINAPI w2kFilePath (HINSTANCE hInstance,
                          PWORD     pwFile,
                          PWORD     pwBuffer,
                          DWORD     dBuffer);

HANDLE WINAPI w2kFileOpen (PWORD pwPath,
                           BOOL  fWrite);

HANDLE WINAPI w2kFileNew (PWORD pwPath);

HANDLE WINAPI w2kFileClose (HANDLE hf);

BOOL WINAPI w2kFileTest (PWORD pwPath);

PVOID WINAPI w2kFileLoad (PWORD     pwPath,
                          PDWORD    pdSize,
                          PFILETIME pft);

BOOL WINAPI w2kFileSave (PWORD pwPath,
                         PVOID pData,
                         DWORD dData);

BOOL WINAPI w2kFileAppend (PWORD pwPath,
                           PVOID pData,
                           DWORD dData);

BOOL WINAPI w2kFileWrite (HANDLE hf,
                          PVOID  pData,
                          DWORD  dData);

BOOL WINAPI w2kRegistryRoot (PWORD pwRoot,
                             PHKEY phk);