w2k_call.h

Undocumented WIndows 2000 Secrets 完整简体中文版！！NT架构windows（20000、xp）Kernel Hacking必备！！附cd iso与完整附录！

__ExLockHandleTableShared (PHANDLE_TABLE HandleTable);

PHANDLE_ENTRY WINAPI
__ExMapHandleToPointer (PHANDLE_TABLE HandleTable,
                        HANDLE        Handle);

VOID WINAPI
_ExReleaseResourceLite (PERESOURCE Resource);

VOID WINAPI
__ExUnlockHandleTableEntry (PHANDLE_TABLE HandleTable,
                            PHANDLE_ENTRY HandleEntry);

VOID WINAPI
__ExUnlockHandleTableShared (PERESOURCE Resource);

PHANDLE_ENTRY WINAPI
__ExpLookupHandleTableEntry (PHANDLE_TABLE HandleTable,
                             HANDLE        Handle);

PBYTE WINAPI
_FsRtlLegalAnsiCharacterArray (VOID);

BOOLEAN WINAPI
_HalMakeBeep (DWORD Pitch);

VOID WINAPI
_HalQueryRealTimeClock (PTIME_FIELDS TimeFields);

VOID WINAPI
_HalSetRealTimeClock (PTIME_FIELDS TimeFields);

PLIST_ENTRY WINAPI
__HandleTableListHead (VOID);

PERESOURCE WINAPI
__HandleTableListLock (VOID);

DWORD WINAPI
_KeI386MachineType (VOID);

BYTE WINAPI
_KeNumberProcessors (VOID);

PSERVICE_DESCRIPTOR_TABLE WINAPI
_KeServiceDescriptorTable (VOID);

QWORD WINAPI
_KeTickCount (VOID);

PHYSICAL_ADDRESS WINAPI
_MmGetPhysicalAddress (PVOID BaseAddress);

PVOID WINAPI
_MmGetSystemRoutineAddress (PWORD SystemRoutineName);

PVOID WINAPI
_MmGetVirtualForPhysical (PHYSICAL_ADDRESS PhysicalAddress);

PVOID WINAPI
_MmHighestUserAddress (VOID);

BOOLEAN WINAPI
_MmIsAddressValid (PVOID VirtualAddress);

PVOID WINAPI
_MmSystemRangeStart (VOID);

PVOID WINAPI
_MmUserProbeAddress (VOID);

WORD WINAPI
_NlsAnsiCodePage (VOID);

BOOLEAN WINAPI
_NlsMbCodePageTag (VOID);

BOOLEAN WINAPI
_NlsMbOemCodePageTag (VOID);

WORD WINAPI
_NlsOemCodePage (VOID);

WORD WINAPI
_NtBuildNumber (VOID);

NTSTATUS WINAPI
_NtClose (HANDLE Handle);

DWORD WINAPI
_NtGlobalFlag (VOID);

VOID WINAPI
_ObDereferenceObject (POBJECT Object);

NTSTATUS WINAPI
_ObOpenObjectByPointer (POBJECT         Object,
                        DWORD           HandleAttributes,
         /* optional */ PACCESS_STATE   PassedAccessState,
                        ACCESS_MASK     DesiredAccess,
                        POBJECT_TYPE    ObjectType,
                        KPROCESSOR_MODE AccessMode,
                        PHANDLE         Handle);

NTSTATUS WINAPI
_ObQueryNameString (POBJECT                  Object,
                    POBJECT_NAME_INFORMATION NameString,
        /* bytes */ DWORD                    NameStringLength,
                    PDWORD                   ReturnLength);

NTSTATUS WINAPI
__ObQueryTypeInfo (POBJECT_TYPE      ObjectType,
                   POBJECT_TYPE_INFO TypeInfo,
   /* bytes     */ DWORD             TypeInfoLength,
   /* init to 0 */ PDWORD            ReturnLength);

NTSTATUS WINAPI
__ObQueryTypeName (POBJECT                  Object,
                   POBJECT_NAME_INFORMATION NameString,
       /* bytes */ DWORD                    NameStringLength,
                   PDWORD                   ReturnLength);

NTSTATUS WINAPI
_ObReferenceObjectByHandle
                     (HANDLE                     Handle,
                      ACCESS_MASK                DesiredAccess,
       /* optional */ POBJECT_TYPE               ObjectType,
                      KPROCESSOR_MODE            AccessMode,
                      PPOBJECT                   Object,
       /* optional */ POBJECT_HANDLE_INFORMATION HandleInformation);

NTSTATUS WINAPI
_ObReferenceObjectByPointer (POBJECT         Object,
                             ACCESS_MASK     DesiredAccess,
                             POBJECT_TYPE    ObjectType,
                             KPROCESSOR_MODE AccessMode);

VOID WINAPI
_ObfDereferenceObject (POBJECT Object);

VOID WINAPI
_ObfReferenceObject (POBJECT Object);

PHANDLE_TABLE WINAPI
__ObpKernelHandleTable (VOID);

PERESOURCE WINAPI
__ObpRootDirectoryMutex (VOID);

POBJECT_DIRECTORY WINAPI
__ObpRootDirectoryObject (VOID);

POBJECT_DIRECTORY WINAPI
__ObpTypeDirectoryObject (VOID);

DWORD WINAPI
_ProbeForRead (PVOID Address,
               DWORD Length,
               DWORD Alignment);

DWORD WINAPI
_ProbeForWrite (PVOID Address,
                DWORD Length,
                DWORD Alignment);

HANDLE WINAPI
_PsGetCurrentProcessId (VOID);

HANDLE WINAPI
_PsGetCurrentThreadId (VOID);

LARGE_INTEGER WINAPI
_PsGetProcessExitTime (VOID);

BOOLEAN WINAPI
_PsGetVersion (PDWORD          MajorVersion,
               PDWORD          MinorVersion,
               PDWORD          BuildNumber,
               PUNICODE_STRING CSDVersion);

PEPROCESS WINAPI
_PsInitialSystemProcess (VOID);

BOOLEAN WINAPI
_PsIsThreadTerminating (PETHREAD Thread);

NTSTATUS WINAPI
_PsLookupProcessByProcessId (HANDLE     UniqueProcessId,
                             PPEPROCESS Process);

NTSTATUS WINAPI
_PsLookupProcessThreadByCid (PCLIENT_ID Cid,
              /* optional */ PPEPROCESS Process,
                             PPETHREAD  Thread);

NTSTATUS WINAPI
_PsLookupThreadByThreadId (HANDLE    UniqueThreadId,
                           PPETHREAD Thread);

NTSTATUS WINAPI
_RtlAnsiStringToUnicodeString (PUNICODE_STRING Destination,
                               PANSI_STRING    Source,
                               BOOLEAN         AllocateDestination);

NTSTATUS WINAPI
_RtlAppendUnicodeStringToString (PUNICODE_STRING Destination,
                                 PUNICODE_STRING Source);

NTSTATUS WINAPI
_RtlAppendUnicodeToString (PUNICODE_STRING Destination,
                           PWORD           Source);

SIZE_T WINAPI
_RtlCompareMemory (PVOID  Source1,
                   PVOID  Source2,
                   SIZE_T Length);

SIZE_T WINAPI
_RtlCompareMemoryUlong (PVOID  Source1,
                        PVOID  Source2,
            /* Bytes */ SIZE_T Length);

LONG WINAPI
_RtlCompareUnicodeString (PUNICODE_STRING String1,
                          PUNICODE_STRING String2,
                          BOOLEAN         CaseInSensitive);

VOID WINAPI
_RtlCopyUnicodeString (PUNICODE_STRING Destination,
                       PUNICODE_STRING Source);

BOOLEAN WINAPI
_RtlEqualUnicodeString (PUNICODE_STRING String1,
                        PUNICODE_STRING String2,
                        BOOLEAN         CaseInSensitive);

VOID WINAPI
_RtlFillMemory (PVOID  Destination,
                SIZE_T Length,
                BYTE   Fill);

VOID WINAPI
_RtlFillMemoryUlong (PVOID  Destination,
         /* Bytes */ SIZE_T Length,
                     DWORD  Fill);

VOID WINAPI
_RtlFreeUnicodeString (PUNICODE_STRING UnicodeString);

PVOID WINAPI
_RtlImageDirectoryEntryToData (PVOID   Base,
                               BOOLEAN MappedAsImage,
                               WORD    DirectoryEntry,
                               PDWORD  Size);

PIMAGE_NT_HEADERS WINAPI
_RtlImageNtHeader (PVOID Base);

VOID WINAPI
_RtlInitAnsiString (PANSI_STRING Destination,
                    PBYTE        Source);

VOID WINAPI
_RtlInitString (PSTRING Destination,
                PBYTE   Source);

VOID WINAPI
_RtlInitUnicodeString (PUNICODE_STRING Destination,
                       PWORD           Source);

NTSTATUS WINAPI
_RtlInt64ToUnicodeString (QWORD          Value,
                          DWORD           Base,
                          PUNICODE_STRING String);

NTSTATUS WINAPI
_RtlIntegerToUnicodeString (DWORD           Value,
                            DWORD           Base,
                            PUNICODE_STRING String);

VOID WINAPI
_RtlMoveMemory (PVOID  Destination,
                PVOID  Source,
                SIZE_T Length);

BOOLEAN WINAPI
_RtlPrefixUnicodeString (PUNICODE_STRING String1,
                         PUNICODE_STRING String2,
                         BOOLEAN         CaseInSensitive);

NTSTATUS WINAPI
_RtlUnicodeStringToAnsiString (PANSI_STRING    Destination,
                               PUNICODE_STRING Source,
                               BOOLEAN         AllocateDestination);

NTSTATUS WINAPI
_RtlUnicodeStringToInteger (PUNICODE_STRING String,
                            DWORD           Base,
                            PDWORD          Value);

NTSTATUS WINAPI
_RtlUpcaseUnicodeString (PUNICODE_STRING Destination,
                         PUNICODE_STRING Source,
                         BOOLEAN         AllocateDestination);

VOID WINAPI
_RtlZeroMemory (PVOID  Destination,
                SIZE_T Length);

PACL WINAPI
_SePublicDefaultDacl (VOID);

PACL WINAPI
_SeSystemDefaultDacl (VOID);

NTSTATUS WINAPI
_TdiDeregisterPnPHandlers (HANDLE BindingHandle);

NTSTATUS WINAPI
_TdiEnumerateAddresses (HANDLE BindingHandle);

NTSTATUS WINAPI
_TdiRegisterPnPHandlers (PTDI_CLIENT_INTERFACE_INFO Info,
                         DWORD                      InfoSize,
                         PHANDLE                    BindingHandle);

NTSTATUS WINAPI
_ZwClose (HANDLE Handle);

// -----------------------------------------------------------------

POBJECT_TYPE WINAPI
__CmpKeyObjectType (VOID);

POBJECT_TYPE WINAPI
__ExCallbackObjectType (VOID);

POBJECT_TYPE WINAPI
_ExDesktopObjectType (VOID);

POBJECT_TYPE WINAPI
_ExEventObjectType (VOID);

POBJECT_TYPE WINAPI
__ExEventPairObjectType (VOID);

POBJECT_TYPE WINAPI
__ExMutantObjectType (VOID);

POBJECT_TYPE WINAPI
__ExProfileObjectType (VOID);

POBJECT_TYPE WINAPI
_ExSemaphoreObjectType (VOID);

POBJECT_TYPE WINAPI
__ExTimerObjectType (VOID);

POBJECT_TYPE WINAPI
_ExWindowStationObjectType (VOID);

POBJECT_TYPE WINAPI
_IoAdapterObjectType (VOID);

POBJECT_TYPE WINAPI
__IoCompletionObjectType (VOID);

POBJECT_TYPE WINAPI
__IoControllerObjectType (VOID);

POBJECT_TYPE WINAPI
_IoDeviceObjectType (VOID);

POBJECT_TYPE WINAPI
_IoDriverObjectType (VOID);

POBJECT_TYPE WINAPI
_IoFileObjectType (VOID);

POBJECT_TYPE WINAPI
_LpcPortObjectType (VOID);

POBJECT_TYPE WINAPI
__LpcWaitablePortObjectType (VOID);

POBJECT_TYPE WINAPI
_MmSectionObjectType (VOID);

POBJECT_TYPE WINAPI
__ObpDirectoryObjectType (VOID);

POBJECT_TYPE WINAPI
__ObpSymbolicLinkObjectType (VOID);

POBJECT_TYPE WINAPI
__ObpTypeObjectType (VOID);

POBJECT_TYPE WINAPI
_PsJobType (VOID);

POBJECT_TYPE WINAPI
_PsProcessType (VOID);

POBJECT_TYPE WINAPI
_PsThreadType (VOID);

POBJECT_TYPE WINAPI
__SepTokenObjectType (VOID);

POBJECT_TYPE WINAPI
__WmipGuidObjectType (VOID);

// =================================================================
// LINKER CONTROL
// =================================================================

#ifdef _W2K_CALL_DLL_

#pragma comment (linker, "/entry:\"DllMain\"")

#else

#pragma comment (linker, "/defaultlib:w2k_call.lib")

#endif

////////////////////////////////////////////////////////////////////
#endif // #ifndef _RC_PASS_
////////////////////////////////////////////////////////////////////

// =================================================================
// END OF FILE
// =================================================================