|
Data Structures |
| struct | _credenciales |
| struct | _IO_STATUS_BLOCK |
| struct | _TDI_REQUEST |
| struct | _TDI_CONNECTION_INFORMATION |
| struct | _TDI_REQUEST_QUERY_INFORMATION |
| struct | _SYSTEM_HANDLE |
| struct | _SYSTEM_HANDLE_INFORMATION |
| struct | _UNICODE_STRING |
| struct | _PROCESS_BASIC_INFORMATION |
| struct | _FILE_NAME_INFORMATION |
Defines |
| #define | MAX_USERS 1000 |
| #define | TDI_QUERY_ADDRESS_INFO 0x00000003 |
| #define | IOCTL_TDI_QUERY_INFORMATION CTL_CODE(FILE_DEVICE_TRANSPORT, 4, METHOD_OUT_DIRECT, FILE_ANY_ACCESS) |
| #define | STATUS_SUCCESS ((NTSTATUS)0x00000000L) |
| #define | STATUS_INFO_LENGTH_MISMATCH ((NTSTATUS)0xC0000004L) |
| #define | STATUS_BUFFER_OVERFLOW ((NTSTATUS)0x80000005L) |
| #define | SystemHandleInformation 16 |
| #define | OBJTOKEN 1 |
| #define | OBJTHREAD 2 |
| #define | OBJPROCESS 3 |
| #define | OBJFILE 4 |
| #define | OBJUNKNOWN 5 |
Typedefs |
| typedef struct _credenciales | CREDENCIALES |
| typedef LONG | NTSTATUS |
| typedef VOID * | POBJECT |
| typedef struct _IO_STATUS_BLOCK | IO_STATUS_BLOCK |
| typedef struct _IO_STATUS_BLOCK * | PIO_STATUS_BLOCK |
| typedef void(WINAPI * | PIO_APC_ROUTINE )(PVOID, PIO_STATUS_BLOCK, DWORD) |
| typedef LONG | TDI_STATUS |
| typedef PVOID | CONNECTION_CONTEXT |
| typedef struct _TDI_REQUEST | TDI_REQUEST |
| typedef struct _TDI_REQUEST * | PTDI_REQUEST |
typedef struct
_TDI_CONNECTION_INFORMATION | TDI_CONNECTION_INFORMATION |
typedef struct
_TDI_CONNECTION_INFORMATION * | PTDI_CONNECTION_INFORMATION |
typedef struct
_TDI_REQUEST_QUERY_INFORMATION | TDI_REQUEST_QUERY_INFORMATION |
typedef struct
_TDI_REQUEST_QUERY_INFORMATION * | PTDI_REQUEST_QUERY_INFORMATION |
| typedef struct _SYSTEM_HANDLE | SYSTEM_HANDLE |
| typedef struct _SYSTEM_HANDLE * | PSYSTEM_HANDLE |
typedef struct
_SYSTEM_HANDLE_INFORMATION | SYSTEM_HANDLE_INFORMATION |
typedef struct
_SYSTEM_HANDLE_INFORMATION * | PSYSTEM_HANDLE_INFORMATION |
| typedef struct _UNICODE_STRING | UNICODE_STRING |
| typedef UNICODE_STRING * | PUNICODE_STRING |
| typedef const UNICODE_STRING * | PCUNICODE_STRING |
| typedef UNICODE_STRING | OBJECT_NAME_INFORMATION |
| typedef UNICODE_STRING * | POBJECT_NAME_INFORMATION |
typedef enum
_OBJECT_INFORMATION_CLASS | OBJECT_INFORMATION_CLASS |
| typedef enum _PROCESSINFOCLASS | PROCESSINFOCLASS |
| typedef enum _THREADINFOCLASS | THREADINFOCLASS |
typedef struct
_PROCESS_BASIC_INFORMATION | PROCESS_BASIC_INFORMATION |
typedef enum
_FILE_INFORMATION_CLASS | FILE_INFORMATION_CLASS |
typedef enum
_FILE_INFORMATION_CLASS * | PFILE_INFORMATION_CLASS |
typedef struct
_FILE_NAME_INFORMATION | FILE_NAME_INFORMATION |
typedef struct
_FILE_NAME_INFORMATION * | PFILE_NAME_INFORMATION |
| typedef PROCESSINFOCLASS | ProcessInformationClass |
| typedef PROCESSINFOCLASS PVOID | ProcessInformation |
typedef PROCESSINFOCLASS PVOID
DWORD | ProcessInformationLength |
typedef PROCESSINFOCLASS PVOID
DWORD DWORD * | ReturnLength |
| typedef NTSTATUS(WINAPI * | NTQUERYSYSTEMINFORMATION )(DWORD SystemInformationClass, PVOID SystemInformation, DWORD SystemInformationLength, PDWORD ReturnLength) |
| typedef NTSTATUS(WINAPI * | NTQUERYOBJECT )(HANDLE ObjectHandle, OBJECT_INFORMATION_CLASS ObjectInformationClass, PVOID ObjectInformation, DWORD Length, PDWORD ResultLength) |
| typedef NTSTATUS(WINAPI * | NTDEVICEIOCONTROLFILE )(HANDLE FileHandle, HANDLE Event, PIO_APC_ROUTINE ApcRoutine, PVOID ApcContext, PIO_STATUS_BLOCK IoStatusBlock, DWORD IoControlCode, PVOID InputBuffer, DWORD InputBufferLength, PVOID OutputBuffer, DWORD OutputBufferLength) |
| typedef THREADINFOCLASS | ThreadInfoClass |
| typedef THREADINFOCLASS PVOID | ThreadInformation |
| typedef THREADINFOCLASS PVOID DWORD | Length |
| typedef PVOID | IoStatusBlock |
| typedef PVOID PVOID | FileInformation |
| typedef PVOID PVOID DWORD DWORD | FileInformationClass |
| typedef HANDLE | SecondTokenHandle |
| typedef HANDLE PBOOLEAN | Equal |
Enumerations |
| enum | _OBJECT_INFORMATION_CLASS {
ObjectBasicInformation,
ObjectNameInformation,
ObjectTypeInformation,
ObjectAllTypesInformation,
ObjectHandleInformation
} |
| enum | _PROCESSINFOCLASS {
ProcessBasicInformation,
ProcessQuotaLimits,
ProcessIoCounters,
ProcessVmCounters,
ProcessTimes,
ProcessBasePriority,
ProcessRaisePriority,
ProcessDebugPort,
ProcessExceptionPort,
ProcessAccessToken,
ProcessLdtInformation,
ProcessLdtSize,
ProcessDefaultHardErrorMode,
ProcessIoPortHandlers,
ProcessPooledUsageAndLimits,
ProcessWorkingSetWatch,
ProcessUserModeIOPL,
ProcessEnableAlignmentFaultFixup,
ProcessPriorityClass,
MaxProcessInfoClass
} |
| enum | _THREADINFOCLASS {
ThreadBasicInformation,
ThreadTimes,
ThreadPriority,
ThreadBasePriority,
ThreadAffinityMask,
ThreadImpersonationToken,
ThreadDescriptorTableEntry,
ThreadEnableAlignmentFaultFixup,
ThreadEventPair,
ThreadQuerySetWin32StartAddress,
ThreadZeroTlsCell,
ThreadPerformanceCount,
ThreadAmILastThread,
MaxThreadInfoClass
} |
| enum | _FILE_INFORMATION_CLASS {
FileDirectoryInformation,
FileFullDirectoryInformation,
FileBothDirectoryInformation,
FileBasicInformation,
FileStandardInformation,
FileInternalInformation,
FileEaInformation,
FileAccessInformation,
FileNameInformation,
FileRenameInformation,
FileLinkInformation,
FileNamesInformation,
FileDispositionInformation,
FilePositionInformation,
FileFullEaInformation,
FileModeInformation,
FileAlignmentInformation,
FileAllInformation,
FileAllocationInformation,
FileEndOfFileInformation,
FileAlternateNameInformation,
FileStreamInformation,
FilePipeInformation,
FilePipeLocalInformation,
FilePipeRemoteInformation,
FileMailslotQueryInformation,
FileMailslotSetInformation,
FileCompressionInformation,
FileCopyOnWriteInformation,
FileCompletionInformation,
FileMoveClusterInformation,
FileQuotaInformation,
FileReparsePointInformation,
FileNetworkOpenInformation,
FileObjectIdInformation,
FileTrackingInformation,
FileOleDirectoryInformation,
FileContentIndexInformation,
FileInheritContentIndexInformation,
FileOleInformation,
FileMaximumInformation
} |
Functions |
| typedef | NTSTATUS (WINAPI *NTQUERYINFORMATIONPROCESS)(HANDLE ProcessHandle |
