HELLXMAN这里收集了一些MSDN中未公开的函数,这些函数是通过对windows 7 二进制文件逆向得到的。函数自kernel32.dll,ntdll.dll,shell32.dll,user32.dll和shlwapi.dll。
kernel32.dll

   1. BaseFormatTimeOut
   2. BaseGetNamedObjectDirectory
   3. Basep8BitStringToDynamicUnicodeString
   4. CheckElevationEnabled
   5. SetConsoleCursor
   6. SetConsoleMaximumWindowSize
   7. SetStdHandleEx
   8. ShowConsoleCursor

ntdll.dll

   1. RtlAcquireResourceExclusive
   2. RtlAcquireResourceShared
   3. RtlDeleteResource
   4. RtlDumpResource
   5. RtlInitializeResource
   6. RtlLockCurrentThread
   7. RtlQueryElevationFlags
   8. RtlReleaseResource
   9. RtlTraceDatabaseAdd
  10. RtlTraceDatabaseCreate
  11. RtlTraceDatabaseDestroy
  12. RtlTraceDatabaseEnumerate
  13. RtlTraceDatabaseFind
  14. RtlTraceDatabaseLock
  15. RtlTraceDatabaseUnlock
  16. RtlTraceDatabaseValidate
  17. RtlUnlockCurrentThread

shell32.dll

   1. AddCommasExportW
   2. AppCompat_RunDLLW
   3. CheckStagingArea
   4. CreateAutoListParser
   5. CreateInfoTipFromItem
   6. CreateInfoTipFromItem2
   7. DisconnectWindowsDialog
   8. GetAppPathFromLink
   9. GetSqmableFileName
  10. Int64ToString
  11. IsElevationRequired
  12. IsSearchEnabled
  13. LargeIntegerToString
  14. LinkWindow_RegisterClass
  15. PathGetPathDisplayName
  16. PathIsTemporaryA
  17. PathIsTemporaryW
  18. Printer_AddPrinterPropPages
  19. Printer_LoadIconsW
  20. Printers_RegisterWindowW
  21. Printers_UnregisterWindow
  22. RefreshBrowserLayout
  23. RunAsNewUser_RunDLLW
  24. SHGetUserDisplayName
  25. SHGetUserPicturePath
  26. SHGetUserPicturePathEx
  27. SHHelpShortcuts_RunDLL
  28. SHHelpShortcuts_RunDLLW
  29. SHResolveUserNames
  30. SHSetUserPicturePath
  31. SHSettingsChanged
  32. SHShouldShowWizards
  33. SHTestTokenPrivilegeW
  34. ShellExecCmdLine
  35. ShortSizeFormatExport

shlwapi.dll

   1. DupWideToAnsi
   2. IStream_ReadStrLong
   3. IStream_WriteStrLong
   4. IUnknown_RemoveBackReferences
   5. IUnknown_TranslateAcceleratorGlobal
   6. IUnknown_TranslateAcceleratorIO
   7. IsInternetESCEnabled
   8. MapWin32ErrorToSTG
   9. ModeToCreateFileFlags
  10. PathUnExpandEnvStringsForUserW
  11. PathUnExpandSystemEnvStringsW
  12. QuerySourceCreateFromKey
  13. QuerySourceCreateFromKeyEx
  14. SHAnsiToUnicodeCPAlloc
  15. SHAreIconsEqual
  16. SHBoolSystemParametersInfo
  17. SHCreatePropertyBagOnMemory
  18. SHCreatePropertyStoreOnXML
  19. SHCreateStreamOnDllResourceW
  20. SHCreateStreamOnModuleResourceW
  21. SHExpandEnvironmentStringsAlloc
  22. SHForwardContextMenuMsg
  23. SHGetSizeShared
  24. SHInvokeCommandOnContextMenu
  25. SHInvokeCommandOnContextMenuEx
  26. SHInvokeCommandWithFlagsAndSite
  27. SHInvokeCommandsOnContextMenuEx
  28. SHRegSetValue
  29. SHUnicodeToAnsiCPAlloc

user32.dll

   1. FrostCrashedWindow
   2. GetWindowCompositionAttribute
   3. GhostWindowFromHungWindow
   4. HungWindowFromGhostWindow
   5. MB_GetString
   6. QuerySendMessage
   7. SetWindowCompositionAttribute