w2k_dbg.h

Undocumented WIndows 2000 Secrets 完整简体中文版！！NT架构windows（20000、xp）Kernel Hacking必备！！附cd iso与完整附录！

                              PBOOL pfOk);

PVOID WINAPI dbgMemoryResizeEx (PVOID pData,
                                DWORD dSize,
                                PBOOL pfOk,
                                DWORD dTag);

PVOID WINAPI dbgMemoryDestroy (PVOID pData);

PVOID WINAPI dbgMemoryDestroyEx (PVOID pData,
                                 DWORD dTag);

void WINAPI dbgMemoryReset (void);

void WINAPI dbgMemoryTrack (DWORD dSize,
                            BOOL  fAdd);

BOOL WINAPI dbgMemoryStatus (PDWORD pdMemoryNow,
                             PDWORD pdMemoryMax);

DWORD WINAPI dbgMemoryAlign (DWORD dSize);

DWORD WINAPI dbgMemoryAlignEx (DWORD dFixed,
                               DWORD dText);

DWORD WINAPI dbgFileRoot (PWORD pwPath);

HANDLE WINAPI dbgFileOpen (PWORD pwPath);

HANDLE WINAPI dbgFileNew (PWORD pwPath);

HANDLE WINAPI dbgFileClose (HANDLE hf);

PVOID WINAPI dbgFileUnload (PVOID pData);

PVOID WINAPI dbgFileLoad (PWORD  pwPath,
                          PDWORD pdData);

BOOL WINAPI dbgFileSave (PWORD pwPath,
                         PVOID pData,
                         DWORD dData);

DWORD WINAPI dbgSizeDivide (DWORD dShift,
                            DWORD dSize,
                            BOOL  fRoundUp,
                            BOOL  fRoundDown);

DWORD WINAPI dbgSizeKB (DWORD dBytes,
                        BOOL  fRoundUp,
                        BOOL  fRoundDown);

DWORD WINAPI dbgSizeMB (DWORD dBytes,
                        BOOL  fRoundUp,
                        BOOL  fRoundDown);

PBYTE WINAPI dbgStringAnsi (PWORD pwData,
                            PBYTE pbData);

BOOL WINAPI dbgStringMatch (PWORD pwFilter,
                            PWORD pwData,
                            BOOL  fCase);

PWORD WINAPI dbgStringDay (DWORD dDay);

DWORD WINAPI dbgPathFile (PWORD pwPath);

DWORD WINAPI dbgPathDriver (PWORD pwFile,
                            PWORD pwBuffer,
                            DWORD dBuffer);

PDBG_LIST WINAPI dbgListCreate (void);

PDBG_LIST WINAPI dbgListCreateEx (DWORD       dData,
                                  DWORD       dEntries,
                                  DWORD       dContext,
                                  PVOID       pContext,
                                  PSYSTEMTIME pst);

PDBG_LIST WINAPI dbgListDestroy (PDBG_LIST pdl);

PDBG_LIST WINAPI dbgListResize (PDBG_LIST pdl,
                                DWORD     dData);

DWORD WINAPI dbgListNext (PDBG_LIST pdl,
                          DWORD     dData,
                          BOOL      fCount);

PDBG_LIST WINAPI dbgListFinish (PDBG_LIST pdl);

PDBG_INDEX WINAPI dbgListIndex (PDBG_LIST pdl,
                                DWORD     dMemberNext);

PDBG_LIST WINAPI dbgListLoad (PWORD pwPath);

BOOL WINAPI dbgListSave (PWORD     pwPath,
                         PDBG_LIST pdl);

PDBG_INDEX WINAPI dbgIndexCreate (PDBG_LIST pdl,
                                  DWORD     dMemberNext);

PDBG_INDEX WINAPI dbgIndexCreateEx (PDBG_LIST pdl,
                                    DWORD     dMemberNext,
                                    DWORD     dMemberAddress,
                                    DWORD     dMemberSize,
                                    DWORD     dMemberId,
                                    DWORD     dMemberNameData,
                                    DWORD     dMemberNameOffset,
                                    DWORD     dSort,
                                    BOOL      fReverse);

PDBG_INDEX WINAPI dbgIndexDestroy (PDBG_INDEX pdi);

PDBG_INDEX WINAPI dbgIndexDestroyEx (PDBG_INDEX pdi);

void WINAPI dbgIndexReverse (PDBG_INDEX pdi);

INT WINAPI dbgIndexCompare (PVOID pData1,
                            PVOID pData2,
                            DWORD dControl);

void WINAPI dbgIndexSort (PDBG_INDEX pdi,
                          DWORD      dMemberData,
                          DWORD      dMemberOffset,
                          DWORD      dControl);

PDBG_LIST WINAPI dbgIndexList (PDBG_INDEX pdi);

PDBG_LIST WINAPI dbgIndexListEx (PDBG_INDEX pdi);

BOOL WINAPI dbgIndexSave (PWORD      pwPath,
                          PDBG_INDEX pdi);

BOOL WINAPI dbgIndexSaveEx (PWORD      pwPath,
                            PDBG_INDEX pdi);

PDWORD WINAPI dbgProcessIds (PDWORD pdCount);

PHMODULE WINAPI dbgProcessModules (HANDLE hProcess,
                                   PDWORD pdCount);

PDBG_LIST WINAPI dbgProcessAdd (PDBG_LIST pdl,
                                DWORD     dId);

PDBG_LIST WINAPI dbgProcessList (void);

PDBG_INDEX WINAPI dbgProcessIndex (PWORD pwImage,
                                   DWORD dSort,
                                   BOOL  fReverse);

PDBG_INDEX WINAPI dbgProcessIndexEx (PWORD pwImage,
                                     DWORD dSort,
                                     BOOL  fReverse);

PWORD WINAPI dbgProcessGuess (DWORD dIndex);

PDBG_LIST WINAPI dbgModuleList (PDBG_PROCESS pdp);

PDBG_INDEX WINAPI dbgModuleIndex (PDBG_PROCESS pdp,
                                  DWORD        dSort,
                                  BOOL         fReverse);

PPVOID WINAPI dbgDriverAddresses (PDWORD pdCount);

PDBG_LIST WINAPI dbgDriverAdd (PDBG_LIST pdl,
                               PVOID     pBase);

PDBG_LIST WINAPI dbgDriverList (void);

PDBG_INDEX WINAPI dbgDriverIndex (PWORD pwImage,
                                  DWORD dSort,
                                  BOOL  fReverse);

BOOL CALLBACK dbgSymbolCallback (PSTR       psSymbolName,
                                 DWORD      dSymbolAddress,
                                 DWORD      dSymbolSize,
                                 PPDBG_LIST ppdl);

PLOADED_IMAGE WINAPI dbgSymbolLoad (PWORD  pwPath,
                                    PVOID  pBase,
                                    HANDLE hProcess);

PLOADED_IMAGE WINAPI dbgSymbolUnload (PLOADED_IMAGE pli,
                                      PVOID         pBase,
                                      HANDLE        hProcess);

PDBG_LIST WINAPI dbgSymbolList (PWORD pwPath,
                                PVOID pBase);

PDBG_INDEX WINAPI dbgSymbolIndex (PWORD pwPath,
                                  PVOID pBase,
                                  PWORD pwImage,
                                  DWORD dSort,
                                  BOOL  fReverse);

PDBG_SYMBOL WINAPI dbgSymbolLookup (PDBG_INDEX pdi,
                                    PVOID      pAddress,
                                    PDWORD     pdOffset);

PVOID WINAPI dbgBaseModule (PWORD  pwPath,
                            PDWORD pdSize);

PVOID WINAPI dbgBaseDriver (PWORD  pwPath,
                            PDWORD pdSize);

// =================================================================
// NTDLL.DLL STRUCTURES
// =================================================================

typedef struct _UNICODE_STRING
    {
    USHORT Length;
    USHORT MaximumLength;
    PWSTR  Buffer;
    }
    UNICODE_STRING, *PUNICODE_STRING, **PPUNICODE_STRING;

#define UNICODE_STRING_ sizeof (UNICODE_STRING)

// =================================================================
// NTDLL.DLL API FUNCTIONS
// =================================================================

NTSYSAPI LONG NTAPI
RtlCompareUnicodeString (PUNICODE_STRING String1,
                         PUNICODE_STRING String2,
                         BOOLEAN         CaseInSensitive);

NTSYSAPI VOID NTAPI
RtlInitUnicodeString (PUNICODE_STRING DestinationString,
                      PCWSTR          SourceString);

// =================================================================
// LINKER CONTROL
// =================================================================

#ifdef _W2K_DBG_DLL_

#pragma comment (linker, "/entry:\"DllMain\"")
#pragma comment (linker, "/defaultlib:imagehlp.lib")
#pragma comment (linker, "/defaultlib:psapi.lib")
#pragma comment (linker, "/defaultlib:ntdll.lib")

#else

#pragma comment (linker, "/defaultlib:w2k_dbg.lib")

#endif

////////////////////////////////////////////////////////////////////
#endif // #ifndef _RC_PASS_
////////////////////////////////////////////////////////////////////

// =================================================================
// END OF FILE
// =================================================================