w2k_img.h

Undocumented WIndows 2000 Secrets 完整简体中文版！！NT架构windows（20000、xp）Kernel Hacking必备！！附cd iso与完整附录！

#define imgPathEnumerate    imgPathEnumerateA
#define imgPathSymbols      imgPathSymbolsA
#define imgPathCallback     imgPathCallbackA
#define imgPathSymbolsEx    imgPathSymbolsExA
#define imgPathDbg          imgPathDbgA
#define imgPathPdb          imgPathPdbA
#define imgFileOpen         imgFileOpenA
#define imgFileNew          imgFileNewA
#define imgFileTest         imgFileTestA
#define imgFileLoad         imgFileLoadA
#define imgFileSave         imgFileSaveA
#define imgCvPdb            imgCvPdbA
#define imgDbgLoad          imgDbgLoadA
#define imgPdbLoad          imgPdbLoadA
#define imgPdbStreamEx      imgPdbStreamExA
#define imgInfoLoad         imgInfoLoadA
#define imgInfoType         imgInfoTypeA
#define imgTableLoad        imgTableLoadA
#define imgModuleFind       imgModuleFindA
#define imgModuleBase       imgModuleBaseA

#endif // #ifdef UNICODE

// =================================================================
// API PROTOTYPES
// =================================================================

INT WINAPI imgBoxA (HWND  hWnd,
                    UINT  uiType,
                    PBYTE pbCaption,
                    PBYTE pbFormat,
                    ...);

INT WINAPI imgBoxW (HWND  hWnd,
                    UINT  uiType,
                    PWORD pwCaption,
                    PWORD pwFormat,
                    ...);

PVOID WINAPI imgMemoryCreate (DWORD dBytes);

PVOID WINAPI imgMemoryResize (PVOID pData,
                              DWORD dBytes);

PVOID WINAPI imgMemoryDestroy (PVOID pData);

BOOL WINAPI imgAnsiMatchA (PBYTE pbFilter,
                           PBYTE pbData,
                           BOOL  fIgnoreCase);

BOOL WINAPI imgAnsiMatchW (PWORD pwFilter,
                           PBYTE pbData,
                           BOOL  fIgnoreCase);

IMG_TIME WINAPI imgTimeNow (BOOL fLocal);

DWORD WINAPI imgTimePack (IMG_TIME it);

IMG_TIME WINAPI imgTimeUnpack (DWORD dTime);

PBYTE WINAPI imgTimeDayA (IMG_TIME it);

PWORD WINAPI imgTimeDayW (IMG_TIME it);

DWORD WINAPI imgPathRootA (PBYTE pbPath);

DWORD WINAPI imgPathRootW (PWORD pwPath);

DWORD WINAPI imgPathNameA (PBYTE  pbPath,
                           PDWORD pdExtension);

DWORD WINAPI imgPathNameW (PWORD  pwPath,
                           PDWORD pdExtension);

DWORD WINAPI imgPathCanonicalA (PBYTE pbPath,   // NULL: current dir
                                PBYTE pbBuffer, // can be == pbPath
                                DWORD dBuffer);

DWORD WINAPI imgPathCanonicalW (PWORD pwPath,   // NULL: current dir
                                PWORD pwBuffer, // can be == pwPath
                                DWORD dBuffer);

DWORD WINAPI imgPathCurrentA (PBYTE pbBuffer,
                              DWORD dBuffer);

DWORD WINAPI imgPathCurrentW (PWORD pwBuffer,
                              DWORD dBuffer);

DWORD WINAPI imgPathWindowsA (PBYTE pbBuffer,
                              DWORD dBuffer);

DWORD WINAPI imgPathWindowsW (PWORD pwBuffer,
                              DWORD dBuffer);

DWORD WINAPI imgPathVariableA (PBYTE pbVariable,
                               PBYTE pbBuffer,
                               DWORD dBuffer,
                               DWORD dIndex);

DWORD WINAPI imgPathVariableW (PWORD pwVariable,
                               PWORD pwBuffer,
                               DWORD dBuffer,
                               DWORD dIndex);

DWORD WINAPI imgPathEnumerateA (IMG_CALLBACKA CallbackA,
                                PBYTE         pbModule,
                                PVOID         pContext);

DWORD WINAPI imgPathEnumerateW (IMG_CALLBACKW CallbackW,
                                PWORD         pwModule,
                                PVOID         pContext);

DWORD WINAPI imgPathSymbolsA (PBYTE pbModule,   // NULL: ntoskrnl
                              PBYTE pbExtension,// NULL: .dbg
                              PBYTE pbPath,     // NULL: current dir
                              PBYTE pbBuffer,   // can be == pbPath
                              DWORD dBuffer,
                              BOOL  fSymbols);

DWORD WINAPI imgPathSymbolsW (PWORD pwModule,   // NULL: ntoskrnl
                              PWORD pwExtension,// NULL: .dbg
                              PWORD pwPath,     // NULL: current dir
                              PWORD pwBuffer,   // can be == pwPath
                              DWORD dBuffer,
                              BOOL  fSymbols);

DWORD CALLBACK imgPathCallbackA (PBYTE        pbModule,
                                 PBYTE        pbPath,
                                 DWORD        dPath,
                                 PIMG_CONTEXT pic);

DWORD CALLBACK imgPathCallbackW (PWORD        pwModule,
                                 PWORD        pwPath,
                                 DWORD        dPath,
                                 PIMG_CONTEXT pic);

DWORD WINAPI imgPathSymbolsExA (PBYTE pbModule,
                                PBYTE pbExtension,
                                PBYTE pbBuffer,
                                DWORD dBuffer);

DWORD WINAPI imgPathSymbolsExW (PWORD pwModule,
                                PWORD pwExtension,
                                PWORD pwBuffer,
                                DWORD dBuffer);

DWORD WINAPI imgPathDbgA (PBYTE pbModule,
                          PBYTE pbBuffer,
                          DWORD dBuffer);

DWORD WINAPI imgPathDbgW (PWORD pwModule,
                          PWORD pwBuffer,
                          DWORD dBuffer);

DWORD WINAPI imgPathPdbA (PBYTE pbModule,
                          PBYTE pbBuffer,
                          DWORD dBuffer);

DWORD WINAPI imgPathPdbW (PWORD pwModule,
                          PWORD pwBuffer,
                          DWORD dBuffer);

HANDLE WINAPI imgFileClose (HANDLE hf);

HANDLE WINAPI imgFileOpenA (PBYTE pbPath);

HANDLE WINAPI imgFileOpenW (PWORD pwPath);

HANDLE WINAPI imgFileNewA (PBYTE pbPath);

HANDLE WINAPI imgFileNewW (PWORD pwPath);

BOOL WINAPI imgFileTestA (PBYTE pbPath);

BOOL WINAPI imgFileTestW (PWORD pwPath);

PVOID WINAPI imgFileLoadA (PBYTE  pbPath,
                           PDWORD pdSize);

PVOID WINAPI imgFileLoadW (PWORD  pwPath,
                           PDWORD pdSize);

BOOL WINAPI imgFileSaveA (PBYTE pbPath,
                          PVOID pData,
                          DWORD dData);

BOOL WINAPI imgFileSaveW (PWORD pwPath,
                          PVOID pData,
                          DWORD dData);

PCV_ENTRY WINAPI imgCvEntry (PCV_NB09 pc09,
                             DWORD    dType,
                             DWORD    dIndex);

PCV_MODULE WINAPI imgCvModule (PCV_NB09 pc09,
                               DWORD    dIndex,
                               PDWORD   pdSize);

PCV_PUBSYM WINAPI imgCvSymbols (PCV_NB09 pc09,
                                PDWORD   pdCount,
                                PDWORD   pdSize);

PCV_SEGMAP WINAPI imgCvSegments (PCV_NB09 pc09,
                                 PDWORD   pdCount);

PVOID WINAPI imgCvPdbA (PCV_NB10 pc10,
                        PBYTE    pbPath,
                        PDWORD   pdSize);

PVOID WINAPI imgCvPdbW (PCV_NB10 pc10,
                        PWORD    pwPath,
                        PDWORD   pdSize);

BOOL WINAPI imgDbgVerify (PIMG_DBG pid,
                          DWORD    dSize);

PVOID WINAPI imgDbgLoadA (PBYTE  pbPath,
                          PDWORD pdSize);

PVOID WINAPI imgDbgLoadW (PWORD  pwPath,
                          PDWORD pdSize);

PBYTE WINAPI imgDbgExports (PIMG_DBG pid,
                            PDWORD   pdCount);

PIMAGE_DEBUG_DIRECTORY WINAPI imgDbgDirectories (PIMG_DBG pid,
                                                 PDWORD   pdCount);

PIMAGE_DEBUG_DIRECTORY WINAPI imgDbgDirectory (PIMG_DBG pid,
                                               DWORD    dType);

PCV_DATA WINAPI imgDbgCv (PIMG_DBG pid,
                          PDWORD   pdSize);

PFPO_DATA WINAPI imgDbgFpo (PIMG_DBG pid,
                            PDWORD   pdCount);

PIMAGE_DEBUG_MISC WINAPI imgDbgMisc (PIMG_DBG pid,
                                     PDWORD   pdCount);

POMAP_TO_SRC WINAPI imgDbgOmapToSrc (PIMG_DBG pid,
                                     PDWORD   pdCount);

POMAP_FROM_SRC WINAPI imgDbgOmapFromSrc (PIMG_DBG pid,
                                         PDWORD   pdCount);

BOOL WINAPI imgPdbVerify (PIMG_PDB pip,
                          DWORD    dSize);

PVOID WINAPI imgPdbLoadA (PBYTE  pbPath,
                          PDWORD pdSize);

PVOID WINAPI imgPdbLoadW (PWORD  pwPath,
                          PDWORD pdSize);

PVOID WINAPI imgPdbPage (PIMG_PDB pip,
                         DWORD    dPage);

DWORD WINAPI imgPdbPages (PIMG_PDB pip,
                          DWORD    dBytes);

PVOID WINAPI imgPdbRead (PIMG_PDB    pip,
                         PPDB_STREAM pps);

PPDB_ROOT WINAPI imgPdbRoot (PIMG_PDB pip);

PVOID WINAPI imgPdbStream (PIMG_PDB pip,
                           DWORD    dStream,
                           PDWORD   pdSize);

PVOID WINAPI imgPdbStreamExA (PBYTE  pbPath,
                              DWORD  dStream,
                              PDWORD pdSize);

PVOID WINAPI imgPdbStreamExW (PWORD  pwPath,
                              DWORD  dStream,
                              PDWORD pdSize);

PPDB_PUBSYM WINAPI imgPdbSymbols (PIMG_PDB pip,
                                  PDWORD   pdCount,
                                  PDWORD   pdSize);

BOOL WINAPI imgInfoInitialize (PIMG_INFO pii,
                               PVOID     pBase,
                               DWORD     dSize);

PIMG_INFO WINAPI imgInfoLoadA (PBYTE pbPath,
                               PVOID pBase);

PIMG_INFO WINAPI imgInfoLoadW (PWORD pwPath,
                               PVOID pBase);

DWORD WINAPI imgInfoOmapToSrc (PIMG_INFO pii,
                               DWORD     dTarget,
                               PDWORD    pdOffset);

DWORD WINAPI imgInfoOmapFromSrc (PIMG_INFO pii,
                                 DWORD     dSource,
                                 PDWORD    pdOffset);

DWORD WINAPI imgInfoOmapSection (PIMG_INFO pii,
                                 DWORD     dSection);

PIMG_PUBSYM WINAPI imgInfoSymbols (PIMG_INFO pii,
                                   PDWORD    pdCount,
                                   PDWORD    pdSize,
                                   PDWORD    pdVersion);

PBYTE WINAPI imgInfoTypeA (PIMG_INFO pii,
                           DWORD     dType);

PWORD WINAPI imgInfoTypeW (PIMG_INFO pii,
                           DWORD     dType);

PIMG_PUBSYM WINAPI imgSymbolNext (PIMG_PUBSYM pip);

DWORD WINAPI imgSymbolTest (PIMG_PUBSYM pip);

DWORD WINAPI imgSymbolUndecorate (PBYTE  pbSymbol,
                                  PBYTE  pbBuffer,
                                  PDWORD pdConvention);

DWORD WINAPI imgSymbolExported (PIMG_PUBSYM pip,
                                PIMG_INFO   pii);

PVOID WINAPI imgSymbolInfo (PIMG_PUBSYM pip,
                            PIMG_INFO   pii,
                            PIMG_SYMBOL pis,
                            BOOL        fUndecorate);

DWORD WINAPI imgSymbolLookup (PVOID       pAddress,
                              DWORD       dCount,
                              PIMG_PUBSYM pip,
                              PIMG_INFO   pii,
                              PIMG_SYMBOL pis,
                              BOOL        fUndecorate);

PIMG_TABLE WINAPI imgSymbolTable (DWORD       dCount,
                                  PIMG_PUBSYM pip,
                                  PIMG_INFO   pii);

INT WINAPI imgSymbolCompare (PIMG_ENTRY pie1,
                             PIMG_ENTRY pie2,
                             BOOL       fCompareNames,
                             BOOL       fIgnoreCase);

DWORD WINAPI imgSymbolSort (DWORD      dCount,
                            PIMG_INDEX pii,
                            BOOL       fSortByName,
                            BOOL       fIgnoreCase);

PIMG_TABLE WINAPI imgTableLoadA (PBYTE pbPath,
                                 PVOID pBase);

PIMG_TABLE WINAPI imgTableLoadW (PWORD pwPath,
                                 PVOID pBase);

PIMG_ENTRY WINAPI imgTableLookup (PIMG_TABLE pit,
                                  PVOID      pAddress,
                                  PDWORD     pdOffset);

PIMG_ENTRY WINAPI imgTableResolve (PIMG_TABLE pit,
                                   PBYTE      pbSymbol);

PVOID WINAPI imgModuleExport (PBYTE pbModule,
                              PBYTE pbExport);

PMODULE_LIST WINAPI imgModuleList (PDWORD pdData);

PMODULE_LIST WINAPI imgModuleFindA (PBYTE  pbModule,
                                    PDWORD pdIndex);

PMODULE_LIST WINAPI imgModuleFindW (PWORD  pwModule,
                                    PDWORD pdIndex);

PVOID WINAPI imgModuleBaseA (PBYTE pbModule);

PVOID WINAPI imgModuleBaseW (PWORD pwModule);

// =================================================================
// LINKER CONTROL
// =================================================================

#ifdef _W2K_IMG_DLL_
#pragma comment (linker, "/entry:\"DllMain\"")
#else
#pragma comment (linker, "/defaultlib:w2k_img.lib")
#endif

////////////////////////////////////////////////////////////////////
#endif // #ifndef _RC_PASS_
////////////////////////////////////////////////////////////////////

// =================================================================
// END OF FILE
// =================================================================