mrexodia / phnt-single-header Goto Github PK

The idea would be that you can use the releases of this repository with FetchContent directly. Additionally an example in the README is needed. The file would be in out/CMakeLists.txt and provide a phnt::phnt target (potentially also linking to ntdll.lib for user-mode, maybe a split with a phnt::headers target?)

Currently phnt_windows.h is hardcoded. We can wrap this header in an ifdef with the _KERNEL_MODE define and additionally define the appropriate PHNT_MODE macro. This would also need to build a kernel driver as part of the tests (see https://github.com/build-cpp/wdk_template).

This feature should be implemented by modifying phnt_amalgamate.h

This should be possible with a simple python script that loads ntdll.dll, iterates the exports and generates ntdll.def. A (potentially) better idea could be to reuse parse_phnt.py from dumpulator and generate the DEF file from the imports actually exposed with that OS version.

Could be implemented with a GH actions cron job:

• Diff the phnt subfolder of the system informer project with the current submodule
• Automatically create a PR that bumps the submodule
• Automatically create a release once the PR is merged

This can be done by creating a dummy CMakeLists.txt that just does:

message(FATAL_ERROR "Include phnt.zip from the release instead")

Would be nice to create IDA/Ghidra type libraries from the latest phnt version and include those in the release as well.

There's some issues:

• IDA SDK is non-free and it's difficult to use it on GH Actions
• Their parser is absolutely horrible and unlikely to parse the headers correctly