2 * Copyright 2004-2005 Ivan Leo Puoti
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
26 #define POINTER_ALIGNMENT DECLSPEC_ALIGN(8)
28 #define POINTER_ALIGNMENT
31 typedef LONG KPRIORITY
;
33 typedef ULONG_PTR KSPIN_LOCK
, *PKSPIN_LOCK
;
35 typedef ULONG_PTR ERESOURCE_THREAD
;
36 typedef ERESOURCE_THREAD
*PERESOURCE_THREAD
;
41 struct _DEVICE_OBJECT
;
42 struct _DRIVER_OBJECT
;
44 typedef VOID (WINAPI
*PKDEFERRED_ROUTINE
)(struct _KDPC
*, PVOID
, PVOID
, PVOID
);
45 typedef VOID (WINAPI
*PKSTART_ROUTINE
)(PVOID
);
47 typedef NTSTATUS (WINAPI
*PDRIVER_INITIALIZE
)(struct _DRIVER_OBJECT
*, PUNICODE_STRING
);
48 typedef NTSTATUS (WINAPI
*PDRIVER_DISPATCH
)(struct _DEVICE_OBJECT
*, struct _IRP
*);
49 typedef void (WINAPI
*PDRIVER_STARTIO
)(struct _DEVICE_OBJECT
*, struct _IRP
*);
50 typedef void (WINAPI
*PDRIVER_UNLOAD
)(struct _DRIVER_OBJECT
*);
52 typedef struct _DISPATCHER_HEADER
{
58 LIST_ENTRY WaitListHead
;
59 } DISPATCHER_HEADER
, *PDISPATCHER_HEADER
;
61 typedef struct _KEVENT
{
62 DISPATCHER_HEADER Header
;
63 } KEVENT
, *PKEVENT
, *RESTRICTED_POINTER PRKEVENT
;
65 typedef struct _KSEMAPHORE
{
66 DISPATCHER_HEADER Header
;
68 } KSEMAPHORE
, *PKSEMAPHORE
, *PRKSEMAPHORE
;
70 typedef struct _KDPC
{
74 LIST_ENTRY DpcListEntry
;
75 PKDEFERRED_ROUTINE DeferredRoutine
;
76 PVOID DeferredContext
;
77 PVOID SystemArgument1
;
78 PVOID SystemArgument2
;
80 } KDPC
, *PKDPC
, *RESTRICTED_POINTER PRKDPC
;
82 typedef struct _KDEVICE_QUEUE_ENTRY
{
83 LIST_ENTRY DeviceListEntry
;
86 } KDEVICE_QUEUE_ENTRY
, *PKDEVICE_QUEUE_ENTRY
,
87 *RESTRICTED_POINTER PRKDEVICE_QUEUE_ENTRY
;
89 typedef struct _KDEVICE_QUEUE
{
92 LIST_ENTRY DeviceListHead
;
95 } KDEVICE_QUEUE
, *PKDEVICE_QUEUE
, *RESTRICTED_POINTER PRKDEVICE_QUEUE
;
97 typedef struct _KMUTANT
{
98 DISPATCHER_HEADER Header
;
99 LIST_ENTRY MutantListEntry
;
100 struct _KTHREAD
*RESTRICTED_POINTER OwnerThread
;
103 } KMUTANT
, *PKMUTANT
, *RESTRICTED_POINTER PRKMUTANT
, KMUTEX
, *PKMUTEX
, *RESTRICTED_POINTER PRKMUTEX
;
105 typedef enum _KWAIT_REASON
135 typedef struct _ALLOCATE_FUNCTION
*PALLOCATE_FUNCTION
;
136 typedef struct _IO_TIMER
*PIO_TIMER
;
137 typedef struct _IO_TIMER_ROUTINE
*PIO_TIMER_ROUTINE
;
138 typedef struct _ETHREAD
*PETHREAD
;
139 typedef struct _FREE_FUNCTION
*PFREE_FUNCTION
;
140 typedef struct _KTHREAD
*PKTHREAD
, *PRKTHREAD
;
141 typedef struct _EPROCESS
*PEPROCESS
;
142 typedef struct _ERESOURCE
*PERESOURCE
;
143 typedef struct _IO_WORKITEM
*PIO_WORKITEM
;
144 typedef struct _NPAGED_LOOKASIDE_LIST
*PNPAGED_LOOKASIDE_LIST
;
145 typedef struct _PAGED_LOOKASIDE_LIST
*PPAGED_LOOKASIDE_LIST
;
146 typedef struct _OBJECT_TYPE
*POBJECT_TYPE
;
147 typedef struct _OBJECT_HANDLE_INFORMATION
*POBJECT_HANDLE_INFORMATION
;
148 typedef struct _ZONE_HEADER
*PZONE_HEADER
;
150 typedef struct _FAST_MUTEX
157 } FAST_MUTEX
, *PFAST_MUTEX
;
159 #define MAXIMUM_VOLUME_LABEL_LENGTH (32 * sizeof(WCHAR))
161 typedef struct _VPB
{
165 USHORT VolumeLabelLength
;
166 struct _DEVICE_OBJECT
*DeviceObject
;
167 struct _DEVICE_OBJECT
*RealDevice
;
169 ULONG ReferenceCount
;
170 WCHAR VolumeLabel
[MAXIMUM_VOLUME_LABEL_LENGTH
/ sizeof(WCHAR
)];
173 typedef enum _POOL_TYPE
{
176 NonPagedPoolMustSucceed
,
178 NonPagedPoolCacheAligned
,
179 PagedPoolCacheAligned
,
180 NonPagedPoolCacheAlignedMustS
,
184 typedef struct _WAIT_CONTEXT_BLOCK
{
185 KDEVICE_QUEUE_ENTRY WaitQueueEntry
;
186 struct _DRIVER_CONTROL
*DeviceRoutine
;
188 ULONG NumberOfMapRegisters
;
191 PKDPC BufferChainingDpc
;
192 } WAIT_CONTEXT_BLOCK
, *PWAIT_CONTEXT_BLOCK
;
194 #define DO_BUFFERED_IO 0x00000004
195 #define DO_EXCLUSIVE 0x00000008
196 #define DO_DIRECT_IO 0x00000010
197 #define DO_MAP_IO_BUFFER 0x00000020
198 #define DO_DEVICE_INITIALIZING 0x00000080
199 #define DO_SHUTDOWN_REGISTERED 0x00000800
200 #define DO_BUS_ENUMERATED_DEVICE 0x00001000
201 #define DO_POWER_PAGABLE 0x00002000
202 #define DO_POWER_INRUSH 0x00004000
204 #define IO_NO_INCREMENT 0
205 #define IO_CD_ROM_INCREMENT 1
206 #define IO_DISK_INCREMENT 1
207 #define IO_KEYBOARD_INCREMENT 6
208 #define IO_MAILSLOT_INCREMENT 2
209 #define IO_MOUSE_INCREMENT 6
210 #define IO_NAMED_PIPE_INCREMENT 2
211 #define IO_NETWORK_INCREMENT 2
212 #define IO_PARALLEL_INCREMENT 1
213 #define IO_SERIAL_INCREMENT 2
214 #define IO_SOUND_INCREMENT 8
215 #define IO_VIDEO_INCREMENT 1
218 #define DEVICE_TYPE ULONG
220 #define IRP_MJ_MAXIMUM_FUNCTION 0x1b
221 #define IRP_MJ_CREATE 0x00
222 #define IRP_MJ_CREATE_NAMED_PIPE 0x01
223 #define IRP_MJ_CLOSE 0x02
224 #define IRP_MJ_READ 0x03
225 #define IRP_MJ_WRITE 0x04
226 #define IRP_MJ_QUERY_INFORMATION 0x05
227 #define IRP_MJ_SET_INFORMATION 0x06
228 #define IRP_MJ_QUERY_EA 0x07
229 #define IRP_MJ_SET_EA 0x08
230 #define IRP_MJ_FLUSH_BUFFERS 0x09
231 #define IRP_MJ_QUERY_VOLUME_INFORMATION 0x0a
232 #define IRP_MJ_SET_VOLUME_INFORMATION 0x0b
233 #define IRP_MJ_DIRECTORY_CONTROL 0x0c
234 #define IRP_MJ_FILE_SYSTEM_CONTROL 0x0d
235 #define IRP_MJ_DEVICE_CONTROL 0x0e
236 #define IRP_MJ_INTERNAL_DEVICE_CONTROL 0x0f
237 #define IRP_MJ_SHUTDOWN 0x10
238 #define IRP_MJ_LOCK_CONTROL 0x11
239 #define IRP_MJ_CLEANUP 0x12
240 #define IRP_MJ_CREATE_MAILSLOT 0x13
241 #define IRP_MJ_QUERY_SECURITY 0x14
242 #define IRP_MJ_SET_SECURITY 0x15
243 #define IRP_MJ_POWER 0x16
244 #define IRP_MJ_SYSTEM_CONTROL 0x17
245 #define IRP_MJ_DEVICE_CHANGE 0x18
246 #define IRP_MJ_QUERY_QUOTA 0x19
247 #define IRP_MJ_SET_QUOTA 0x1a
248 #define IRP_MJ_PNP 0x1b
250 #define IRP_MN_START_DEVICE 0x00
251 #define IRP_MN_QUERY_REMOVE_DEVICE 0x01
252 #define IRP_MN_REMOVE_DEVICE 0x02
253 #define IRP_MN_CANCEL_REMOVE_DEVICE 0x03
254 #define IRP_MN_STOP_DEVICE 0x04
255 #define IRP_MN_QUERY_STOP_DEVICE 0x05
256 #define IRP_MN_CANCEL_STOP_DEVICE 0x06
257 #define IRP_MN_QUERY_DEVICE_RELATIONS 0x07
258 #define IRP_MN_QUERY_INTERFACE 0x08
259 #define IRP_MN_QUERY_CAPABILITIES 0x09
260 #define IRP_MN_QUERY_RESOURCES 0x0A
261 #define IRP_MN_QUERY_RESOURCE_REQUIREMENTS 0x0B
262 #define IRP_MN_QUERY_DEVICE_TEXT 0x0C
263 #define IRP_MN_FILTER_RESOURCE_REQUIREMENTS 0x0D
264 #define IRP_MN_READ_CONFIG 0x0F
265 #define IRP_MN_WRITE_CONFIG 0x10
266 #define IRP_MN_EJECT 0x11
267 #define IRP_MN_SET_LOCK 0x12
268 #define IRP_MN_QUERY_ID 0x13
269 #define IRP_MN_QUERY_PNP_DEVICE_STATE 0x14
270 #define IRP_MN_QUERY_BUS_INFORMATION 0x15
271 #define IRP_MN_DEVICE_USAGE_NOTIFICATION 0x16
272 #define IRP_MN_SURPRISE_REMOVAL 0x17
273 #define IRP_MN_QUERY_LEGACY_BUS_INFORMATION 0x18
275 #define IRP_MN_WAIT_WAKE 0x00
276 #define IRP_MN_POWER_SEQUENCE 0x01
277 #define IRP_MN_SET_POWER 0x02
278 #define IRP_MN_QUERY_POWER 0x03
280 #define IRP_QUOTA_CHARGED 0x01
281 #define IRP_ALLOCATED_MUST_SUCCEED 0x02
282 #define IRP_ALLOCATED_FIXED_SIZE 0x04
283 #define IRP_LOOKASIDE_ALLOCATION 0x08
285 #define IO_TYPE_ADAPTER 0x01
286 #define IO_TYPE_CONTROLLER 0x02
287 #define IO_TYPE_DEVICE 0x03
288 #define IO_TYPE_DRIVER 0x04
289 #define IO_TYPE_FILE 0x05
290 #define IO_TYPE_IRP 0x06
291 #define IO_TYPE_MASTER_ADAPTER 0x07
292 #define IO_TYPE_OPEN_PACKET 0x08
293 #define IO_TYPE_TIMER 0x09
294 #define IO_TYPE_VPB 0x0a
295 #define IO_TYPE_ERROR_LOG 0x0b
296 #define IO_TYPE_ERROR_MESSAGE 0x0c
297 #define IO_TYPE_DEVICE_OBJECT_EXTENSION 0x0d
299 typedef struct _DEVICE_OBJECT
{
303 struct _DRIVER_OBJECT
*DriverObject
;
304 struct _DEVICE_OBJECT
*NextDevice
;
305 struct _DEVICE_OBJECT
*AttachedDevice
;
306 struct _IRP
*CurrentIrp
;
309 ULONG Characteristics
;
311 PVOID DeviceExtension
;
312 DEVICE_TYPE DeviceType
;
315 LIST_ENTRY ListEntry
;
316 WAIT_CONTEXT_BLOCK Wcb
;
318 ULONG AlignmentRequirement
;
319 KDEVICE_QUEUE DeviceQueue
;
321 ULONG ActiveThreadCount
;
322 PSECURITY_DESCRIPTOR SecurityDescriptor
;
326 struct _DEVOBJ_EXTENSION
*DeviceObjectExtension
;
329 typedef struct _DEVICE_OBJECT
*PDEVICE_OBJECT
;
331 typedef struct _DEVICE_RELATIONS
{
333 PDEVICE_OBJECT Objects
[1];
335 typedef struct _DEVICE_RELATIONS
*PDEVICE_RELATIONS
;
337 typedef struct _DRIVER_EXTENSION
{
338 struct _DRIVER_OBJECT
*DriverObject
;
341 UNICODE_STRING ServiceKeyName
;
342 } DRIVER_EXTENSION
, *PDRIVER_EXTENSION
;
344 typedef struct _DRIVER_OBJECT
{
347 PDEVICE_OBJECT DeviceObject
;
352 PDRIVER_EXTENSION DriverExtension
;
353 UNICODE_STRING DriverName
;
354 PUNICODE_STRING HardwareDatabase
;
355 PVOID FastIoDispatch
;
356 PDRIVER_INITIALIZE DriverInit
;
357 PDRIVER_STARTIO DriverStartIo
;
358 PDRIVER_UNLOAD DriverUnload
;
359 PDRIVER_DISPATCH MajorFunction
[IRP_MJ_MAXIMUM_FUNCTION
+ 1];
361 typedef struct _DRIVER_OBJECT
*PDRIVER_OBJECT
;
363 /* Irp definitions */
364 typedef UCHAR KIRQL
, *PKIRQL
;
365 typedef CCHAR KPROCESSOR_MODE
;
367 typedef VOID (WINAPI
*PDRIVER_CANCEL
)(
368 IN
struct _DEVICE_OBJECT
*DeviceObject
,
369 IN
struct _IRP
*Irp
);
371 typedef VOID (WINAPI
*PKNORMAL_ROUTINE
)(
372 IN PVOID NormalContext
,
373 IN PVOID SystemArgument1
,
374 IN PVOID SystemArgument2
);
376 typedef VOID (WINAPI
*PKKERNEL_ROUTINE
)(
377 IN
struct _KAPC
*Apc
,
378 IN OUT PKNORMAL_ROUTINE
*NormalRoutine
,
379 IN OUT PVOID
*NormalContext
,
380 IN OUT PVOID
*SystemArgument1
,
381 IN OUT PVOID
*SystemArgument2
);
383 typedef VOID (WINAPI
*PKRUNDOWN_ROUTINE
)(
384 IN
struct _KAPC
*Apc
);
386 typedef struct _KAPC
{
390 struct _KTHREAD
*Thread
;
391 LIST_ENTRY ApcListEntry
;
392 PKKERNEL_ROUTINE KernelRoutine
;
393 PKRUNDOWN_ROUTINE RundownRoutine
;
394 PKNORMAL_ROUTINE NormalRoutine
;
396 PVOID SystemArgument1
;
397 PVOID SystemArgument2
;
399 KPROCESSOR_MODE ApcMode
;
401 } KAPC
, *PKAPC
, *RESTRICTED_POINTER PRKAPC
;
403 typedef struct _IRP
{
406 struct _MDL
*MdlAddress
;
409 struct _IRP
*MasterIrp
;
413 LIST_ENTRY ThreadListEntry
;
414 IO_STATUS_BLOCK IoStatus
;
415 KPROCESSOR_MODE RequestorMode
;
416 BOOLEAN PendingReturned
;
418 CHAR CurrentLocation
;
421 CCHAR ApcEnvironment
;
422 UCHAR AllocationFlags
;
423 PIO_STATUS_BLOCK UserIosb
;
427 PIO_APC_ROUTINE UserApcRoutine
;
428 PVOID UserApcContext
;
429 } AsynchronousParameters
;
430 LARGE_INTEGER AllocationSize
;
432 PDRIVER_CANCEL CancelRoutine
;
437 KDEVICE_QUEUE_ENTRY DeviceQueueEntry
;
439 PVOID DriverContext
[4];
443 PCHAR AuxiliaryBuffer
;
445 LIST_ENTRY ListEntry
;
447 struct _IO_STACK_LOCATION
*CurrentStackLocation
;
451 struct _FILE_OBJECT
*OriginalFileObject
;
457 typedef struct _IRP
*PIRP
;
459 typedef VOID (WINAPI
*PINTERFACE_REFERENCE
)(
462 typedef VOID (WINAPI
*PINTERFACE_DEREFERENCE
)(
465 typedef struct _INTERFACE
{
469 PINTERFACE_REFERENCE InterfaceReference
;
470 PINTERFACE_DEREFERENCE InterfaceDereference
;
471 } INTERFACE
, *PINTERFACE
;
473 typedef struct _SECTION_OBJECT_POINTERS
{
474 PVOID DataSectionObject
;
475 PVOID SharedCacheMap
;
476 PVOID ImageSectionObject
;
477 } SECTION_OBJECT_POINTERS
, *PSECTION_OBJECT_POINTERS
;
479 typedef struct _IO_COMPLETION_CONTEXT
{
482 } IO_COMPLETION_CONTEXT
, *PIO_COMPLETION_CONTEXT
;
484 typedef enum _DEVICE_RELATION_TYPE
{
489 TargetDeviceRelation
,
491 } DEVICE_RELATION_TYPE
, *PDEVICE_RELATION_TYPE
;
493 typedef struct _FILE_OBJECT
{
496 PDEVICE_OBJECT DeviceObject
;
500 PSECTION_OBJECT_POINTERS SectionObjectPointer
;
501 PVOID PrivateCacheMap
;
502 NTSTATUS FinalStatus
;
503 struct _FILE_OBJECT
*RelatedFileObject
;
504 BOOLEAN LockOperation
;
505 BOOLEAN DeletePending
;
508 BOOLEAN DeleteAccess
;
511 BOOLEAN SharedDelete
;
513 UNICODE_STRING FileName
;
514 LARGE_INTEGER CurrentByteOffset
;
520 PIO_COMPLETION_CONTEXT CompletionContext
;
522 typedef struct _FILE_OBJECT
*PFILE_OBJECT
;
524 #define INITIAL_PRIVILEGE_COUNT 3
526 typedef struct _INITIAL_PRIVILEGE_SET
{
527 ULONG PrivilegeCount
;
529 LUID_AND_ATTRIBUTES Privilege
[INITIAL_PRIVILEGE_COUNT
];
530 } INITIAL_PRIVILEGE_SET
, * PINITIAL_PRIVILEGE_SET
;
532 typedef struct _SECURITY_SUBJECT_CONTEXT
{
533 PACCESS_TOKEN ClientToken
;
534 SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
;
535 PACCESS_TOKEN PrimaryToken
;
536 PVOID ProcessAuditId
;
537 } SECURITY_SUBJECT_CONTEXT
, *PSECURITY_SUBJECT_CONTEXT
;
539 typedef struct _ACCESS_STATE
{
541 BOOLEAN SecurityEvaluated
;
542 BOOLEAN GenerateAudit
;
543 BOOLEAN GenerateOnClose
;
544 BOOLEAN PrivilegesAllocated
;
546 ACCESS_MASK RemainingDesiredAccess
;
547 ACCESS_MASK PreviouslyGrantedAccess
;
548 ACCESS_MASK OriginalDesiredAccess
;
549 SECURITY_SUBJECT_CONTEXT SubjectSecurityContext
;
550 PSECURITY_DESCRIPTOR SecurityDescriptor
;
553 INITIAL_PRIVILEGE_SET InitialPrivilegeSet
;
554 PRIVILEGE_SET PrivilegeSet
;
557 BOOLEAN AuditPrivileges
;
558 UNICODE_STRING ObjectName
;
559 UNICODE_STRING ObjectTypeName
;
560 } ACCESS_STATE
, *PACCESS_STATE
;
562 typedef struct _IO_SECURITY_CONTEXT
{
563 PSECURITY_QUALITY_OF_SERVICE SecurityQos
;
564 PACCESS_STATE AccessState
;
565 ACCESS_MASK DesiredAccess
;
566 ULONG FullCreateOptions
;
567 } IO_SECURITY_CONTEXT
, *PIO_SECURITY_CONTEXT
;
569 typedef struct _DEVICE_CAPABILITIES
{
574 ULONG LockSupported
: 1;
575 ULONG EjectSupported
: 1;
577 ULONG DockDevice
: 1;
579 ULONG SilentInstall
: 1;
580 ULONG RawDeviceOK
: 1;
581 ULONG SurpriseRemovalOK
: 1;
582 ULONG WakeFromD0
: 1;
583 ULONG WakeFromD1
: 1;
584 ULONG WakeFromD2
: 1;
585 ULONG WakeFromD3
: 1;
586 ULONG HardwareDisabled
: 1;
587 ULONG NonDynamic
: 1;
588 ULONG WarmEjectSupported
: 1;
589 ULONG NoDisplayInUI
: 1;
593 DEVICE_POWER_STATE DeviceState
[PowerSystemMaximum
];
594 SYSTEM_POWER_STATE SystemWake
;
595 DEVICE_POWER_STATE DeviceWake
;
599 } DEVICE_CAPABILITIES
, *PDEVICE_CAPABILITIES
;
601 typedef struct _DEVICE_INTERFACE_CHANGE_NOTIFICATION
{
605 GUID InterfaceClassGuid
;
606 PUNICODE_STRING SymbolicLinkName
;
607 } DEVICE_INTERFACE_CHANGE_NOTIFICATION
, *PDEVICE_INTERFACE_CHANGE_NOTIFICATION
;
609 typedef enum _INTERFACE_TYPE
{
610 InterfaceTypeUndefined
= -1,
628 } INTERFACE_TYPE
, *PINTERFACE_TYPE
;
630 typedef LARGE_INTEGER PHYSICAL_ADDRESS
, *PPHYSICAL_ADDRESS
;
632 #define IO_RESOURCE_PREFERRED 0x01
633 #define IO_RESOURCE_DEFAULT 0x02
634 #define IO_RESOURCE_ALTERNATIVE 0x08
636 typedef struct _IO_RESOURCE_DESCRIPTOR
{
639 UCHAR ShareDisposition
;
647 PHYSICAL_ADDRESS MinimumAddress
;
648 PHYSICAL_ADDRESS MaximumAddress
;
653 PHYSICAL_ADDRESS MinimumAddress
;
654 PHYSICAL_ADDRESS MaximumAddress
;
661 ULONG MinimumChannel
;
662 ULONG MaximumChannel
;
667 PHYSICAL_ADDRESS MinimumAddress
;
668 PHYSICAL_ADDRESS MaximumAddress
;
685 } IO_RESOURCE_DESCRIPTOR
, *PIO_RESOURCE_DESCRIPTOR
;
687 typedef struct _IO_RESOURCE_LIST
{
691 IO_RESOURCE_DESCRIPTOR Descriptors
[1];
692 } IO_RESOURCE_LIST
, *PIO_RESOURCE_LIST
;
694 typedef struct _IO_RESOURCE_REQUIREMENTS_LIST
{
696 INTERFACE_TYPE InterfaceType
;
700 ULONG AlternativeLists
;
701 IO_RESOURCE_LIST List
[1];
702 } IO_RESOURCE_REQUIREMENTS_LIST
, *PIO_RESOURCE_REQUIREMENTS_LIST
;
704 typedef enum _BUS_QUERY_ID_TYPE
{
707 BusQueryCompatibleIDs
,
709 BusQueryDeviceSerialNumber
710 } BUS_QUERY_ID_TYPE
, *PBUS_QUERY_ID_TYPE
;
713 DevicePropertyDeviceDescription
,
714 DevicePropertyHardwareID
,
715 DevicePropertyCompatibleIDs
,
716 DevicePropertyBootConfiguration
,
717 DevicePropertyBootConfigurationTranslated
,
718 DevicePropertyClassName
,
719 DevicePropertyClassGuid
,
720 DevicePropertyDriverKeyName
,
721 DevicePropertyManufacturer
,
722 DevicePropertyFriendlyName
,
723 DevicePropertyLocationInformation
,
724 DevicePropertyPhysicalDeviceObjectName
,
725 DevicePropertyBusTypeGuid
,
726 DevicePropertyLegacyBusType
,
727 DevicePropertyBusNumber
,
728 DevicePropertyEnumeratorName
,
729 DevicePropertyAddress
,
730 DevicePropertyUINumber
,
731 DevicePropertyInstallState
,
732 DevicePropertyRemovalPolicy
733 } DEVICE_REGISTRY_PROPERTY
;
735 typedef enum _DEVICE_TEXT_TYPE
{
736 DeviceTextDescription
,
737 DeviceTextLocationInformation
738 } DEVICE_TEXT_TYPE
, *PDEVICE_TEXT_TYPE
;
740 typedef enum _DEVICE_USAGE_NOTIFICATION_TYPE
{
741 DeviceUsageTypeUndefined
,
742 DeviceUsageTypePaging
,
743 DeviceUsageTypeHibernation
,
744 DeviceUsageTypeDumpFile
745 } DEVICE_USAGE_NOTIFICATION_TYPE
;
747 typedef struct _POWER_SEQUENCE
{
751 } POWER_SEQUENCE
, *PPOWER_SEQUENCE
;
753 typedef enum _POWER_STATE_TYPE
{
756 } POWER_STATE_TYPE
, *PPOWER_STATE_TYPE
;
758 typedef union _POWER_STATE
{
759 SYSTEM_POWER_STATE SystemState
;
760 DEVICE_POWER_STATE DeviceState
;
761 } POWER_STATE
, *PPOWER_STATE
;
763 typedef struct _CM_PARTIAL_RESOURCE_DESCRIPTOR
{
765 UCHAR ShareDisposition
;
769 PHYSICAL_ADDRESS Start
;
773 PHYSICAL_ADDRESS Start
;
782 PHYSICAL_ADDRESS Start
;
802 } DeviceSpecificData
;
804 } CM_PARTIAL_RESOURCE_DESCRIPTOR
, *PCM_PARTIAL_RESOURCE_DESCRIPTOR
;
806 typedef struct _CM_PARTIAL_RESOURCE_LIST
{
810 CM_PARTIAL_RESOURCE_DESCRIPTOR PartialDescriptors
[1];
811 } CM_PARTIAL_RESOURCE_LIST
, *PCM_PARTIAL_RESOURCE_LIST
;
813 typedef struct _CM_FULL_RESOURCE_DESCRIPTOR
{
814 INTERFACE_TYPE InterfaceType
;
816 CM_PARTIAL_RESOURCE_LIST PartialResourceList
;
817 } CM_FULL_RESOURCE_DESCRIPTOR
, *PCM_FULL_RESOURCE_DESCRIPTOR
;
819 typedef struct _CM_RESOURCE_LIST
{
821 CM_FULL_RESOURCE_DESCRIPTOR List
[1];
822 } CM_RESOURCE_LIST
, *PCM_RESOURCE_LIST
;
824 typedef NTSTATUS (WINAPI
*PIO_COMPLETION_ROUTINE
)(
825 IN
struct _DEVICE_OBJECT
*DeviceObject
,
829 #define SL_PENDING_RETURNED 0x01
830 #define SL_INVOKE_ON_CANCEL 0x20
831 #define SL_INVOKE_ON_SUCCESS 0x40
832 #define SL_INVOKE_ON_ERROR 0x80
835 #include <pshpack4.h>
837 typedef struct _IO_STACK_LOCATION
{
844 PIO_SECURITY_CONTEXT SecurityContext
;
846 USHORT POINTER_ALIGNMENT FileAttributes
;
848 ULONG POINTER_ALIGNMENT EaLength
;
852 ULONG POINTER_ALIGNMENT Key
;
853 LARGE_INTEGER ByteOffset
;
857 ULONG POINTER_ALIGNMENT Key
;
858 LARGE_INTEGER ByteOffset
;
862 FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass
;
866 FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass
;
867 PFILE_OBJECT FileObject
;
870 BOOLEAN ReplaceIfExists
;
879 FS_INFORMATION_CLASS POINTER_ALIGNMENT FsInformationClass
;
882 ULONG OutputBufferLength
;
883 ULONG POINTER_ALIGNMENT InputBufferLength
;
884 ULONG POINTER_ALIGNMENT IoControlCode
;
885 PVOID Type3InputBuffer
;
888 SECURITY_INFORMATION SecurityInformation
;
889 ULONG POINTER_ALIGNMENT Length
;
892 SECURITY_INFORMATION SecurityInformation
;
893 PSECURITY_DESCRIPTOR SecurityDescriptor
;
897 PDEVICE_OBJECT DeviceObject
;
901 PDEVICE_OBJECT DeviceObject
;
904 struct _SCSI_REQUEST_BLOCK
*Srb
;
907 DEVICE_RELATION_TYPE Type
;
908 } QueryDeviceRelations
;
910 const GUID
*InterfaceType
;
913 PINTERFACE Interface
;
914 PVOID InterfaceSpecificData
;
917 PDEVICE_CAPABILITIES Capabilities
;
918 } DeviceCapabilities
;
920 PIO_RESOURCE_REQUIREMENTS_LIST IoResourceRequirementList
;
921 } FilterResourceRequirements
;
926 ULONG POINTER_ALIGNMENT Length
;
932 BUS_QUERY_ID_TYPE IdType
;
935 DEVICE_TEXT_TYPE DeviceTextType
;
936 LCID POINTER_ALIGNMENT LocaleId
;
941 DEVICE_USAGE_NOTIFICATION_TYPE POINTER_ALIGNMENT Type
;
944 SYSTEM_POWER_STATE PowerState
;
947 PPOWER_SEQUENCE PowerSequence
;
951 POWER_STATE_TYPE POINTER_ALIGNMENT Type
;
952 POWER_STATE POINTER_ALIGNMENT State
;
953 POWER_ACTION POINTER_ALIGNMENT ShutdownType
;
956 PCM_RESOURCE_LIST AllocatedResources
;
957 PCM_RESOURCE_LIST AllocatedResourcesTranslated
;
960 ULONG_PTR ProviderId
;
972 PDEVICE_OBJECT DeviceObject
;
973 PFILE_OBJECT FileObject
;
974 PIO_COMPLETION_ROUTINE CompletionRoutine
;
976 } IO_STACK_LOCATION
, *PIO_STACK_LOCATION
;
981 /* MDL definitions */
983 #define MDL_MAPPED_TO_SYSTEM_VA 0x0001
984 #define MDL_PAGES_LOCKED 0x0002
985 #define MDL_SOURCE_IS_NONPAGED_POOL 0x0004
986 #define MDL_ALLOCATED_FIXED_SIZE 0x0008
987 #define MDL_PARTIAL 0x0010
988 #define MDL_PARTIAL_HAS_BEEN_MAPPED 0x0020
989 #define MDL_IO_PAGE_READ 0x0040
990 #define MDL_WRITE_OPERATION 0x0080
991 #define MDL_PARENT_MAPPED_SYSTEM_VA 0x0100
992 #define MDL_FREE_EXTRA_PTES 0x0200
993 #define MDL_DESCRIBES_AWE 0x0400
994 #define MDL_IO_SPACE 0x0800
995 #define MDL_NETWORK_HEADER 0x1000
996 #define MDL_MAPPING_CAN_FAIL 0x2000
997 #define MDL_ALLOCATED_MUST_SUCCEED 0x4000
998 #define MDL_INTERNAL 0x8000
1000 #define MDL_MAPPING_FLAGS (MDL_MAPPED_TO_SYSTEM_VA | \
1001 MDL_PAGES_LOCKED | \
1002 MDL_SOURCE_IS_NONPAGED_POOL | \
1003 MDL_PARTIAL_HAS_BEEN_MAPPED | \
1004 MDL_PARENT_MAPPED_SYSTEM_VA | \
1008 typedef struct _MDL
{
1012 struct _EPROCESS
*Process
;
1013 PVOID MappedSystemVa
;
1021 typedef struct _KTIMER
{
1022 DISPATCHER_HEADER Header
;
1023 ULARGE_INTEGER DueTime
;
1024 LIST_ENTRY TimerListEntry
;
1029 typedef struct _KSYSTEM_TIME
{
1033 } KSYSTEM_TIME
, *PKSYSTEM_TIME
;
1035 typedef enum _NT_PRODUCT_TYPE
{
1039 } NT_PRODUCT_TYPE
, *PNT_PRODUCT_TYPE
;
1041 #define PROCESSOR_FEATURE_MAX 64
1043 typedef enum _ALTERNATIVE_ARCHITECTURE_TYPE
1048 } ALTERNATIVE_ARCHITECTURE_TYPE
;
1050 #define NX_SUPPORT_POLICY_ALWAYSOFF 0
1051 #define NX_SUPPORT_POLICY_ALWAYSON 1
1052 #define NX_SUPPORT_POLICY_OPTIN 2
1053 #define NX_SUPPORT_POLICY_OPTOUT 3
1055 #define MAX_WOW64_SHARED_ENTRIES 16
1057 typedef struct _KUSER_SHARED_DATA
{
1058 ULONG TickCountLowDeprecated
;
1059 ULONG TickCountMultiplier
;
1060 volatile KSYSTEM_TIME InterruptTime
;
1061 volatile KSYSTEM_TIME SystemTime
;
1062 volatile KSYSTEM_TIME TimeZoneBias
;
1063 USHORT ImageNumberLow
;
1064 USHORT ImageNumberHigh
;
1065 WCHAR NtSystemRoot
[260];
1066 ULONG MaxStackTraceDepth
;
1067 ULONG CryptoExponent
;
1069 ULONG LargePageMinimum
;
1071 NT_PRODUCT_TYPE NtProductType
;
1072 BOOLEAN ProductTypeIsValid
;
1073 ULONG NtMajorVersion
;
1074 ULONG NtMinorVersion
;
1075 BOOLEAN ProcessorFeatures
[PROCESSOR_FEATURE_MAX
];
1078 volatile ULONG TimeSlip
;
1079 ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture
;
1080 LARGE_INTEGER SystemExpirationDate
;
1082 BOOLEAN KdDebuggerEnabled
;
1083 UCHAR NXSupportPolicy
;
1084 volatile ULONG ActiveConsoleId
;
1085 volatile ULONG DismountCount
;
1086 ULONG ComPlusPackage
;
1087 ULONG LastSystemRITEventTickCount
;
1088 ULONG NumberOfPhysicalPages
;
1089 BOOLEAN SafeBootMode
;
1091 ULONGLONG TestRetInstruction
;
1093 ULONG SystemCallReturn
;
1094 ULONGLONG SystemCallPad
[3];
1096 volatile KSYSTEM_TIME TickCount
;
1097 volatile ULONG64 TickCountQuad
;
1100 ULONG Wow64SharedInformation
[MAX_WOW64_SHARED_ENTRIES
];
1101 } KSHARED_USER_DATA
, *PKSHARED_USER_DATA
;
1103 typedef enum _MEMORY_CACHING_TYPE
{
1106 MmWriteCombined
= 2,
1107 MmHardwareCoherentCached
= 3,
1108 MmNonCachedUnordered
= 4,
1110 MmMaximumCacheType
= 6
1111 } MEMORY_CACHING_TYPE
;
1113 typedef enum _MM_PAGE_PRIORITY
{
1115 NormalPagePriority
= 16,
1116 HighPagePriority
= 32
1119 typedef enum _MM_SYSTEM_SIZE
1126 typedef struct _IO_REMOVE_LOCK_COMMON_BLOCK
{
1128 BOOLEAN Reserved
[3];
1131 } IO_REMOVE_LOCK_COMMON_BLOCK
;
1133 typedef struct _IO_REMOVE_LOCK_TRACKING_BLOCK
*PIO_REMOVE_LOCK_TRACKING_BLOCK
;
1135 typedef struct _IO_REMOVE_LOCK_DBG_BLOCK
{
1138 LONGLONG MaxLockedTicks
;
1140 LIST_ENTRY LockList
;
1142 LONG LowMemoryCount
;
1145 PIO_REMOVE_LOCK_TRACKING_BLOCK Blocks
;
1146 } IO_REMOVE_LOCK_DBG_BLOCK
;
1148 typedef struct _IO_REMOVE_LOCK
{
1149 IO_REMOVE_LOCK_COMMON_BLOCK Common
;
1150 IO_REMOVE_LOCK_DBG_BLOCK Dbg
;
1151 } IO_REMOVE_LOCK
, *PIO_REMOVE_LOCK
;
1159 typedef struct _CALLBACK_OBJECT
1163 LIST_ENTRY RegisteredCallbacks
;
1164 BOOLEAN AllowMultipleCallbacks
;
1166 } CALLBACK_OBJECT
, *PCALLBACK_OBJECT
;
1168 typedef NTSTATUS (NTAPI EX_CALLBACK_FUNCTION
)(void *CallbackContext
, void *Argument1
, void *Argument2
);
1169 typedef EX_CALLBACK_FUNCTION
*PEX_CALLBACK_FUNCTION
;
1171 NTSTATUS WINAPI
ObCloseHandle(IN HANDLE handle
);
1173 #ifdef NONAMELESSUNION
1174 # ifdef NONAMELESSSTRUCT
1175 # define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.u2.CurrentStackLocation)
1176 # define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.u2.CurrentStackLocation - 1)
1178 # define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.u2.CurrentStackLocation)
1179 # define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.u2.CurrentStackLocation - 1)
1182 # ifdef NONAMELESSSTRUCT
1183 # define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.CurrentStackLocation)
1184 # define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.CurrentStackLocation - 1)
1186 # define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.CurrentStackLocation)
1187 # define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.CurrentStackLocation - 1)
1191 #define KernelMode 0
1194 /* directory object access rights */
1195 #define DIRECTORY_QUERY 0x0001
1196 #define DIRECTORY_TRAVERSE 0x0002
1197 #define DIRECTORY_CREATE_OBJECT 0x0004
1198 #define DIRECTORY_CREATE_SUBDIRECTORY 0x0008
1199 #define DIRECTORY_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0xF)
1201 /* symbolic link access rights */
1202 #define SYMBOLIC_LINK_QUERY 0x0001
1203 #define SYMBOLIC_LINK_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0x1)
1205 PVOID WINAPI
ExAllocatePool(POOL_TYPE
,SIZE_T
);
1206 PVOID WINAPI
ExAllocatePoolWithQuota(POOL_TYPE
,SIZE_T
);
1207 PVOID WINAPI
ExAllocatePoolWithTag(POOL_TYPE
,SIZE_T
,ULONG
);
1208 PVOID WINAPI
ExAllocatePoolWithQuotaTag(POOL_TYPE
,SIZE_T
,ULONG
);
1209 void WINAPI
ExFreePool(PVOID
);
1210 void WINAPI
ExFreePoolWithTag(PVOID
,ULONG
);
1212 NTSTATUS WINAPI
IoAllocateDriverObjectExtension(PDRIVER_OBJECT
,PVOID
,ULONG
,PVOID
*);
1213 PVOID WINAPI
IoAllocateErrorLogEntry(PVOID
,UCHAR
);
1214 PIRP WINAPI
IoAllocateIrp(CCHAR
,BOOLEAN
);
1215 PMDL WINAPI
IoAllocateMdl(PVOID
,ULONG
,BOOLEAN
,BOOLEAN
,IRP
*);
1216 PIRP WINAPI
IoBuildDeviceIoControlRequest(ULONG
,DEVICE_OBJECT
*,PVOID
,ULONG
,PVOID
,ULONG
,BOOLEAN
,PKEVENT
,IO_STATUS_BLOCK
*);
1217 PIRP WINAPI
IoBuildSynchronousFsdRequest(ULONG
,DEVICE_OBJECT
*,PVOID
,ULONG
,PLARGE_INTEGER
,PKEVENT
,IO_STATUS_BLOCK
*);
1218 NTSTATUS WINAPI
IoCallDriver(DEVICE_OBJECT
*,IRP
*);
1219 VOID WINAPI
IoCompleteRequest(IRP
*,UCHAR
);
1220 NTSTATUS WINAPI
IoCreateDevice(DRIVER_OBJECT
*,ULONG
,UNICODE_STRING
*,DEVICE_TYPE
,ULONG
,BOOLEAN
,DEVICE_OBJECT
**);
1221 NTSTATUS WINAPI
IoCreateDriver(UNICODE_STRING
*,PDRIVER_INITIALIZE
);
1222 NTSTATUS WINAPI
IoCreateSymbolicLink(UNICODE_STRING
*,UNICODE_STRING
*);
1223 void WINAPI
IoDeleteDevice(DEVICE_OBJECT
*);
1224 void WINAPI
IoDeleteDriver(DRIVER_OBJECT
*);
1225 NTSTATUS WINAPI
IoDeleteSymbolicLink(UNICODE_STRING
*);
1226 void WINAPI
IoFreeIrp(IRP
*);
1227 void WINAPI
IoFreeMdl(MDL
*);
1228 PEPROCESS WINAPI
IoGetCurrentProcess(void);
1229 NTSTATUS WINAPI
IoGetDeviceInterfaces(const GUID
*,PDEVICE_OBJECT
,ULONG
,PWSTR
*);
1230 NTSTATUS WINAPI
IoGetDeviceObjectPointer(UNICODE_STRING
*,ACCESS_MASK
,PFILE_OBJECT
*,PDEVICE_OBJECT
*);
1231 NTSTATUS WINAPI
IoGetDeviceProperty(PDEVICE_OBJECT
,DEVICE_REGISTRY_PROPERTY
,ULONG
,PVOID
,PULONG
);
1232 PVOID WINAPI
IoGetDriverObjectExtension(PDRIVER_OBJECT
,PVOID
);
1233 PDEVICE_OBJECT WINAPI
IoGetRelatedDeviceObject(PFILE_OBJECT
);
1234 void WINAPI
IoInitializeIrp(IRP
*,USHORT
,CCHAR
);
1235 VOID WINAPI
IoInitializeRemoveLockEx(PIO_REMOVE_LOCK
,ULONG
,ULONG
,ULONG
,ULONG
);
1236 NTSTATUS WINAPI
IoWMIRegistrationControl(PDEVICE_OBJECT
,ULONG
);
1238 PKTHREAD WINAPI
KeGetCurrentThread(void);
1239 void WINAPI
KeQuerySystemTime(LARGE_INTEGER
*);
1240 void WINAPI
KeQueryTickCount(LARGE_INTEGER
*);
1241 ULONG WINAPI
KeQueryTimeIncrement(void);
1242 LONG WINAPI
KeReleaseSemaphore(PRKSEMAPHORE
,KPRIORITY
,LONG
,BOOLEAN
);
1243 LONG WINAPI
KeResetEvent(PRKEVENT
);
1244 LONG WINAPI
KeSetEvent(PRKEVENT
,KPRIORITY
,BOOLEAN
);
1245 KPRIORITY WINAPI
KeSetPriorityThread(PKTHREAD
,KPRIORITY
);
1246 void WINAPI
KeSetSystemAffinityThread(KAFFINITY
);
1248 PVOID WINAPI
MmAllocateContiguousMemory(SIZE_T
,PHYSICAL_ADDRESS
);
1249 PVOID WINAPI
MmAllocateNonCachedMemory(SIZE_T
);
1250 PMDL WINAPI
MmAllocatePagesForMdl(PHYSICAL_ADDRESS
,PHYSICAL_ADDRESS
,PHYSICAL_ADDRESS
,SIZE_T
);
1251 void WINAPI
MmFreeNonCachedMemory(PVOID
,SIZE_T
);
1252 MM_SYSTEMSIZE WINAPI
MmQuerySystemSize(void);
1254 NTSTATUS WINAPI
ObReferenceObjectByHandle(HANDLE
,ACCESS_MASK
,POBJECT_TYPE
,KPROCESSOR_MODE
,PVOID
*,POBJECT_HANDLE_INFORMATION
);
1256 POWER_STATE WINAPI
PoSetPowerState(PDEVICE_OBJECT
,POWER_STATE_TYPE
,POWER_STATE
);
1257 NTSTATUS WINAPI
PsCreateSystemThread(PHANDLE
,ULONG
,POBJECT_ATTRIBUTES
,HANDLE
,PCLIENT_ID
,PKSTART_ROUTINE
,PVOID
);
1258 #define PsGetCurrentProcess() IoGetCurrentProcess()
1259 #define PsGetCurrentThread() ((PETHREAD)KeGetCurrentThread())
1260 HANDLE WINAPI
PsGetCurrentProcessId(void);
1261 HANDLE WINAPI
PsGetCurrentThreadId(void);
1262 BOOLEAN WINAPI
PsGetVersion(ULONG
*,ULONG
*,ULONG
*,UNICODE_STRING
*);
1263 NTSTATUS WINAPI
PsTerminateSystemThread(NTSTATUS
);
1265 NTSTATUS WINAPI
ZwAddBootEntry(PUNICODE_STRING
,PUNICODE_STRING
);
1266 NTSTATUS WINAPI
ZwAccessCheckAndAuditAlarm(PUNICODE_STRING
,HANDLE
,PUNICODE_STRING
,PUNICODE_STRING
,PSECURITY_DESCRIPTOR
,ACCESS_MASK
,PGENERIC_MAPPING
,BOOLEAN
,PACCESS_MASK
,PBOOLEAN
,PBOOLEAN
);
1267 NTSTATUS WINAPI
ZwAdjustPrivilegesToken(HANDLE
,BOOLEAN
,PTOKEN_PRIVILEGES
,DWORD
,PTOKEN_PRIVILEGES
,PDWORD
);
1268 NTSTATUS WINAPI
ZwAlertThread(HANDLE ThreadHandle
);
1269 NTSTATUS WINAPI
ZwAllocateVirtualMemory(HANDLE
,PVOID
*,ULONG
,SIZE_T
*,ULONG
,ULONG
);
1270 NTSTATUS WINAPI
ZwCancelIoFile(HANDLE
,PIO_STATUS_BLOCK
);
1271 NTSTATUS WINAPI
ZwCancelTimer(HANDLE
, BOOLEAN
*);
1272 NTSTATUS WINAPI
ZwClearEvent(HANDLE
);
1273 NTSTATUS WINAPI
ZwClose(HANDLE
);
1274 NTSTATUS WINAPI
ZwCloseObjectAuditAlarm(PUNICODE_STRING
,HANDLE
,BOOLEAN
);
1275 NTSTATUS WINAPI
ZwConnectPort(PHANDLE
,PUNICODE_STRING
,PSECURITY_QUALITY_OF_SERVICE
,PLPC_SECTION_WRITE
,PLPC_SECTION_READ
,PULONG
,PVOID
,PULONG
);
1276 NTSTATUS WINAPI
ZwCreateDirectoryObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
);
1277 NTSTATUS WINAPI
ZwCreateEvent(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,BOOLEAN
,BOOLEAN
);
1278 NTSTATUS WINAPI
ZwCreateFile(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,PLARGE_INTEGER
,ULONG
,ULONG
,ULONG
,ULONG
,PVOID
,ULONG
);
1279 NTSTATUS WINAPI
ZwCreateKey(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
,const UNICODE_STRING
*,ULONG
,PULONG
);
1280 NTSTATUS WINAPI
ZwCreateSection(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const LARGE_INTEGER
*,ULONG
,ULONG
,HANDLE
);
1281 NTSTATUS WINAPI
ZwCreateSymbolicLinkObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PUNICODE_STRING
);
1282 NTSTATUS WINAPI
ZwCreateTimer(HANDLE
*, ACCESS_MASK
, const OBJECT_ATTRIBUTES
*, TIMER_TYPE
);
1283 NTSTATUS WINAPI
ZwDeleteAtom(RTL_ATOM
);
1284 NTSTATUS WINAPI
ZwDeleteFile(POBJECT_ATTRIBUTES
);
1285 NTSTATUS WINAPI
ZwDeleteKey(HANDLE
);
1286 NTSTATUS WINAPI
ZwDeleteValueKey(HANDLE
,const UNICODE_STRING
*);
1287 NTSTATUS WINAPI
ZwDeviceIoControlFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,PVOID
,ULONG
,PVOID
,ULONG
);
1288 NTSTATUS WINAPI
ZwDisplayString(PUNICODE_STRING
);
1289 NTSTATUS WINAPI
ZwDuplicateObject(HANDLE
,HANDLE
,HANDLE
,PHANDLE
,ACCESS_MASK
,ULONG
,ULONG
);
1290 NTSTATUS WINAPI
ZwDuplicateToken(HANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,SECURITY_IMPERSONATION_LEVEL
,TOKEN_TYPE
,PHANDLE
);
1291 NTSTATUS WINAPI
ZwEnumerateKey(HANDLE
,ULONG
,KEY_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
1292 NTSTATUS WINAPI
ZwEnumerateValueKey(HANDLE
,ULONG
,KEY_VALUE_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
1293 NTSTATUS WINAPI
ZwFlushInstructionCache(HANDLE
,LPCVOID
,SIZE_T
);
1294 NTSTATUS WINAPI
ZwFlushKey(HANDLE
);
1295 NTSTATUS WINAPI
ZwFlushVirtualMemory(HANDLE
,LPCVOID
*,SIZE_T
*,ULONG
);
1296 NTSTATUS WINAPI
ZwFreeVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
);
1297 NTSTATUS WINAPI
ZwFsControlFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,PVOID
,ULONG
,PVOID
,ULONG
);
1298 NTSTATUS WINAPI
ZwInitiatePowerAction(POWER_ACTION
,SYSTEM_POWER_STATE
,ULONG
,BOOLEAN
);
1299 NTSTATUS WINAPI
ZwLoadDriver(const UNICODE_STRING
*);
1300 NTSTATUS WINAPI
ZwLoadKey(const OBJECT_ATTRIBUTES
*,OBJECT_ATTRIBUTES
*);
1301 NTSTATUS WINAPI
ZwLockVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
);
1302 NTSTATUS WINAPI
ZwMakeTemporaryObject(HANDLE
);
1303 NTSTATUS WINAPI
ZwMapViewOfSection(HANDLE
,HANDLE
,PVOID
*,ULONG
,SIZE_T
,const LARGE_INTEGER
*,SIZE_T
*,SECTION_INHERIT
,ULONG
,ULONG
);
1304 NTSTATUS WINAPI
ZwNotifyChangeKey(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,BOOLEAN
,PVOID
,ULONG
,BOOLEAN
);
1305 NTSTATUS WINAPI
ZwOpenDirectoryObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
);
1306 NTSTATUS WINAPI
ZwOpenEvent(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
1307 NTSTATUS WINAPI
ZwOpenFile(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,ULONG
,ULONG
);
1308 NTSTATUS WINAPI
ZwOpenKey(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
1309 NTSTATUS WINAPI
ZwOpenProcess(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const CLIENT_ID
*);
1310 NTSTATUS WINAPI
ZwOpenProcessToken(HANDLE
,DWORD
,HANDLE
*);
1311 NTSTATUS WINAPI
ZwOpenSection(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
1312 NTSTATUS WINAPI
ZwOpenSymbolicLinkObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
);
1313 NTSTATUS WINAPI
ZwOpenThread(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const CLIENT_ID
*);
1314 NTSTATUS WINAPI
ZwOpenThreadToken(HANDLE
,DWORD
,BOOLEAN
,HANDLE
*);
1315 NTSTATUS WINAPI
ZwOpenTimer(HANDLE
*, ACCESS_MASK
, const OBJECT_ATTRIBUTES
*);
1316 NTSTATUS WINAPI
ZwPowerInformation(POWER_INFORMATION_LEVEL
,PVOID
,ULONG
,PVOID
,ULONG
);
1317 NTSTATUS WINAPI
ZwPulseEvent(HANDLE
,PULONG
);
1318 NTSTATUS WINAPI
ZwQueryDefaultLocale(BOOLEAN
,LCID
*);
1319 NTSTATUS WINAPI
ZwQueryDefaultUILanguage(LANGID
*);
1320 NTSTATUS WINAPI
ZwQueryDirectoryFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FILE_INFORMATION_CLASS
,BOOLEAN
,PUNICODE_STRING
,BOOLEAN
);
1321 NTSTATUS WINAPI
ZwQueryDirectoryObject(HANDLE
,PDIRECTORY_BASIC_INFORMATION
,ULONG
,BOOLEAN
,BOOLEAN
,PULONG
,PULONG
);
1322 NTSTATUS WINAPI
ZwQueryEaFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,BOOLEAN
,PVOID
,ULONG
,PVOID
,BOOLEAN
);
1323 NTSTATUS WINAPI
ZwQueryFullAttributesFile(const OBJECT_ATTRIBUTES
*,FILE_NETWORK_OPEN_INFORMATION
*);
1324 NTSTATUS WINAPI
ZwQueryInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,LONG
,FILE_INFORMATION_CLASS
);
1325 NTSTATUS WINAPI
ZwQueryInformationThread(HANDLE
,THREADINFOCLASS
,PVOID
,ULONG
,PULONG
);
1326 NTSTATUS WINAPI
ZwQueryInformationToken(HANDLE
,DWORD
,PVOID
,DWORD
,LPDWORD
);
1327 NTSTATUS WINAPI
ZwQueryInstallUILanguage(LANGID
*);
1328 NTSTATUS WINAPI
ZwQueryKey(HANDLE
,KEY_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
1329 NTSTATUS WINAPI
ZwQueryObject(HANDLE
, OBJECT_INFORMATION_CLASS
, PVOID
, ULONG
, PULONG
);
1330 NTSTATUS WINAPI
ZwQuerySecurityObject(HANDLE
,SECURITY_INFORMATION
,PSECURITY_DESCRIPTOR
,ULONG
,PULONG
);
1331 NTSTATUS WINAPI
ZwQuerySection(HANDLE
,SECTION_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
1332 NTSTATUS WINAPI
ZwQuerySymbolicLinkObject(HANDLE
,PUNICODE_STRING
,PULONG
);
1333 NTSTATUS WINAPI
ZwQuerySystemInformation(SYSTEM_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
1334 NTSTATUS WINAPI
ZwQueryTimerResolution(PULONG
,PULONG
,PULONG
);
1335 NTSTATUS WINAPI
ZwQueryValueKey(HANDLE
,const UNICODE_STRING
*,KEY_VALUE_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
1336 NTSTATUS WINAPI
ZwQueryVolumeInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FS_INFORMATION_CLASS
);
1337 NTSTATUS WINAPI
ZwReadFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,PLARGE_INTEGER
,PULONG
);
1338 NTSTATUS WINAPI
ZwReplaceKey(POBJECT_ATTRIBUTES
,HANDLE
,POBJECT_ATTRIBUTES
);
1339 NTSTATUS WINAPI
ZwRequestWaitReplyPort(HANDLE
,PLPC_MESSAGE
,PLPC_MESSAGE
);
1340 NTSTATUS WINAPI
ZwResetEvent(HANDLE
,PULONG
);
1341 NTSTATUS WINAPI
ZwRestoreKey(HANDLE
,HANDLE
,ULONG
);
1342 NTSTATUS WINAPI
ZwSaveKey(HANDLE
,HANDLE
);
1343 NTSTATUS WINAPI
ZwSecureConnectPort(PHANDLE
,PUNICODE_STRING
,PSECURITY_QUALITY_OF_SERVICE
,PLPC_SECTION_WRITE
,PSID
,PLPC_SECTION_READ
,PULONG
,PVOID
,PULONG
);
1344 NTSTATUS WINAPI
ZwSetDefaultLocale(BOOLEAN
,LCID
);
1345 NTSTATUS WINAPI
ZwSetDefaultUILanguage(LANGID
);
1346 NTSTATUS WINAPI
ZwSetEaFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
);
1347 NTSTATUS WINAPI
ZwSetEvent(HANDLE
,PULONG
);
1348 NTSTATUS WINAPI
ZwSetInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FILE_INFORMATION_CLASS
);
1349 NTSTATUS WINAPI
ZwSetInformationKey(HANDLE
,const int,PVOID
,ULONG
);
1350 NTSTATUS WINAPI
ZwSetInformationObject(HANDLE
, OBJECT_INFORMATION_CLASS
, PVOID
, ULONG
);
1351 NTSTATUS WINAPI
ZwSetInformationProcess(HANDLE
,PROCESS_INFORMATION_CLASS
,PVOID
,ULONG
);
1352 NTSTATUS WINAPI
ZwSetInformationThread(HANDLE
,THREADINFOCLASS
,LPCVOID
,ULONG
);
1353 NTSTATUS WINAPI
ZwSetIoCompletion(HANDLE
,ULONG
,ULONG
,NTSTATUS
,ULONG
);
1354 NTSTATUS WINAPI
ZwSetLdtEntries(ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
);
1355 NTSTATUS WINAPI
ZwSetSecurityObject(HANDLE
,SECURITY_INFORMATION
,PSECURITY_DESCRIPTOR
);
1356 NTSTATUS WINAPI
ZwSetSystemInformation(SYSTEM_INFORMATION_CLASS
,PVOID
,ULONG
);
1357 NTSTATUS WINAPI
ZwSetSystemTime(const LARGE_INTEGER
*,LARGE_INTEGER
*);
1358 NTSTATUS WINAPI
ZwSetTimer(HANDLE
, const LARGE_INTEGER
*, PTIMER_APC_ROUTINE
, PVOID
, BOOLEAN
, ULONG
, BOOLEAN
*);
1359 NTSTATUS WINAPI
ZwSetValueKey(HANDLE
,const UNICODE_STRING
*,ULONG
,ULONG
,const void *,ULONG
);
1360 NTSTATUS WINAPI
ZwSetVolumeInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FS_INFORMATION_CLASS
);
1361 NTSTATUS WINAPI
ZwSuspendThread(HANDLE
,PULONG
);
1362 NTSTATUS WINAPI
ZwTerminateProcess(HANDLE
,LONG
);
1363 NTSTATUS WINAPI
ZwUnloadDriver(const UNICODE_STRING
*);
1364 NTSTATUS WINAPI
ZwUnloadKey(HANDLE
);
1365 NTSTATUS WINAPI
ZwUnmapViewOfSection(HANDLE
,PVOID
);
1366 NTSTATUS WINAPI
ZwWaitForSingleObject(HANDLE
,BOOLEAN
,const LARGE_INTEGER
*);
1367 NTSTATUS WINAPI
ZwWaitForMultipleObjects(ULONG
,const HANDLE
*,BOOLEAN
,BOOLEAN
,const LARGE_INTEGER
*);
1368 NTSTATUS WINAPI
ZwWriteFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,const void*,ULONG
,PLARGE_INTEGER
,PULONG
);
1369 NTSTATUS WINAPI
ZwYieldExecution(void);