Data Structures |
| union | PFLT_PARAMETERS |
| struct | PFLT_IO_PARAMETER_BLOCK |
| struct | PFLT_CALLBACK_DATA |
| struct | PCFLT_RELATED_OBJECTS |
| struct | PFLT_RELATED_CONTEXTS |
| struct | PCFLT_CONTEXT_REGISTRATION |
| struct | PFLT_OPERATION_REGISTRATION |
| struct | PFLT_TAG_DATA_BUFFER |
| struct | PFLT_NAME_CONTROL |
| struct | PFLT_REGISTRATION |
| struct | PFLT_FILE_NAME_INFORMATION |
| struct | PFLT_VOLUME_PROPERTIES |
| struct | PFLT_CALLBACK_DATA_QUEUE |
Defines |
| #define | FLT_MGR_BASELINE |
| #define | FLT_MGR_AFTER_XPSP2 |
| #define | FLT_MGR_LONGHORN (NTDDI_VERSION >= NTDDI_VISTA) |
| #define | FLT_MGR_WIN7 (NTDDI_VERSION >= NTDDI_WIN7) |
| #define | FLT_ASSERT(_e) NT_ASSERT(_e) |
| #define | FLT_ASSERTMSG(_m, _e) NT_ASSERTMSG(_m, _e) |
| #define | Add2Ptr(P, I) ((PVOID)((PUCHAR)(P) + (I))) |
| #define | PtrOffset(B, O) ((ULONG)((ULONG_PTR)(O) - (ULONG_PTR)(B))) |
| #define | ROUND_TO_SIZE(_length, _alignment) ((((ULONG_PTR)(_length)) + ((_alignment)-1)) & ~(ULONG_PTR) ((_alignment) - 1)) |
| #define | IS_ALIGNED(_pointer, _alignment) ((((ULONG_PTR) (_pointer)) & ((_alignment) - 1)) == 0) |
| #define | IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION ((UCHAR)-1) |
| #define | IRP_MJ_RELEASE_FOR_SECTION_SYNCHRONIZATION ((UCHAR)-2) |
| #define | IRP_MJ_ACQUIRE_FOR_MOD_WRITE ((UCHAR)-3) |
| #define | IRP_MJ_RELEASE_FOR_MOD_WRITE ((UCHAR)-4) |
| #define | IRP_MJ_ACQUIRE_FOR_CC_FLUSH ((UCHAR)-5) |
| #define | IRP_MJ_RELEASE_FOR_CC_FLUSH ((UCHAR)-6) |
| #define | IRP_MJ_FAST_IO_CHECK_IF_POSSIBLE ((UCHAR)-13) |
| #define | IRP_MJ_NETWORK_QUERY_OPEN ((UCHAR)-14) |
| #define | IRP_MJ_MDL_READ ((UCHAR)-15) |
| #define | IRP_MJ_MDL_READ_COMPLETE ((UCHAR)-16) |
| #define | IRP_MJ_PREPARE_MDL_WRITE ((UCHAR)-17) |
| #define | IRP_MJ_MDL_WRITE_COMPLETE ((UCHAR)-18) |
| #define | IRP_MJ_VOLUME_MOUNT ((UCHAR)-19) |
| #define | IRP_MJ_VOLUME_DISMOUNT ((UCHAR)-20) |
| #define | IRP_MJ_OPERATION_END ((UCHAR)0x80) |
| #define | FLT_INTERNAL_OPERATION_COUNT 22 |
| #define | NULL_CONTEXT ((PFLT_CONTEXT)NULL) |
| #define | FLTFL_CALLBACK_DATA_REISSUE_MASK 0x0000FFFF |
| #define | FLTFL_CALLBACK_DATA_IRP_OPERATION 0x00000001 |
| #define | FLTFL_CALLBACK_DATA_FAST_IO_OPERATION 0x00000002 |
| #define | FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION 0x00000004 |
| #define | FLTFL_CALLBACK_DATA_SYSTEM_BUFFER 0x00000008 |
| #define | FLTFL_CALLBACK_DATA_GENERATED_IO 0x00010000 |
| #define | FLTFL_CALLBACK_DATA_REISSUED_IO 0x00020000 |
| #define | FLTFL_CALLBACK_DATA_DRAINING_IO 0x00040000 |
| #define | FLTFL_CALLBACK_DATA_POST_OPERATION 0x00080000 |
| #define | FLTFL_CALLBACK_DATA_NEW_SYSTEM_BUFFER 0x00100000 |
| #define | FLTFL_CALLBACK_DATA_DIRTY 0x80000000 |
| #define | FLT_SET_CALLBACK_DATA_DIRTY(Data) FltSetCallbackDataDirty(Data) |
| #define | FLT_CLEAR_CALLBACK_DATA_DIRTY(Data) FltClearCallbackDataDirty(Data) |
| #define | FLT_IS_CALLBACK_DATA_DIRTY(Data) FltIsCallbackDataDirty(Data) |
| #define | FLT_IS_IRP_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_IRP_OPERATION)) |
| #define | FLT_IS_FASTIO_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_FAST_IO_OPERATION)) |
| #define | FLT_IS_FS_FILTER_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION)) |
| #define | FLT_IS_REISSUED_IO(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_REISSUED_IO)) |
| #define | FLT_IS_SYSTEM_BUFFER(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_SYSTEM_BUFFER)) |
| #define | FLT_VOLUME_CONTEXT 0x0001 |
| #define | FLT_INSTANCE_CONTEXT 0x0002 |
| #define | FLT_FILE_CONTEXT 0x0004 |
| #define | FLT_STREAM_CONTEXT 0x0008 |
| #define | FLT_STREAMHANDLE_CONTEXT 0x0010 |
| #define | FLT_TRANSACTION_CONTEXT 0x0020 |
| #define | FLT_CONTEXT_END 0xffff |
| #define | FLT_ALL_CONTEXTS |
| #define | FLT_ALLOCATE_CALLBACK_DATA_PREALLOCATE_ALL_MEMORY 0x00000001 |
| #define | FLTFL_CONTEXT_REGISTRATION_NO_EXACT_SIZE_MATCH 0x0001 |
| #define | FLT_VARIABLE_SIZED_CONTEXTS ((SIZE_T)-1) |
| #define | FLTFL_INSTANCE_SETUP_AUTOMATIC_ATTACHMENT 0x00000001 |
| #define | FLTFL_INSTANCE_SETUP_MANUAL_ATTACHMENT 0x00000002 |
| #define | FLTFL_INSTANCE_SETUP_NEWLY_MOUNTED_VOLUME 0x00000004 |
| #define | FLTFL_INSTANCE_SETUP_DETACHED_VOLUME 0x00000008 |
| #define | FLT_MAX_TRANSACTION_NOTIFICATIONS |
| #define | FLTFL_INSTANCE_TEARDOWN_MANUAL 0x00000001 |
| #define | FLTFL_INSTANCE_TEARDOWN_FILTER_UNLOAD 0x00000002 |
| #define | FLTFL_INSTANCE_TEARDOWN_MANDATORY_FILTER_UNLOAD 0x00000004 |
| #define | FLTFL_INSTANCE_TEARDOWN_VOLUME_DISMOUNT 0x00000008 |
| #define | FLTFL_INSTANCE_TEARDOWN_INTERNAL_ERROR 0x00000010 |
| #define | FLTFL_POST_OPERATION_DRAINING 0x00000001 |
| #define | FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO 0x00000001 |
| #define | FLTFL_OPERATION_REGISTRATION_SKIP_CACHED_IO 0x00000002 |
| #define | FLTFL_OPERATION_REGISTRATION_SKIP_NON_DASD_IO 0x00000004 |
| #define | FLT_TAG_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(FLT_TAG_DATA_BUFFER, GenericReparseBuffer) |
| #define | FLTFL_FILTER_UNLOAD_MANDATORY 0x00000001 |
| #define | FLTFL_NORMALIZE_NAME_CASE_SENSITIVE 0x01 |
| #define | FLTFL_NORMALIZE_NAME_DESTINATION_FILE_NAME 0x02 |
| #define | FLT_REGISTRATION_VERSION_0200 0x0200 |
| #define | FLT_REGISTRATION_VERSION_0201 0x0201 |
| #define | FLT_REGISTRATION_VERSION_0202 0x0202 |
| #define | FLT_REGISTRATION_VERSION_0203 0x0203 |
| #define | FLT_REGISTRATION_VERSION FLT_REGISTRATION_VERSION_0202 |
| #define | FLTFL_REGISTRATION_DO_NOT_SUPPORT_SERVICE_STOP 0x00000001 |
| #define | FLTFL_REGISTRATION_SUPPORT_NPFS_MSFS 0x00000002 |
| #define | FLTFL_IO_OPERATION_NON_CACHED 0x00000001 |
| #define | FLTFL_IO_OPERATION_PAGING 0x00000002 |
| #define | FLTFL_IO_OPERATION_DO_NOT_UPDATE_BYTE_OFFSET 0x00000004 |
| #define | FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING 0x00000008 |
| #define | FLT_VALID_FILE_NAME_FORMATS 0x000000ff |
| #define | FLT_FILE_NAME_NORMALIZED 0x01 |
| #define | FLT_FILE_NAME_OPENED 0x02 |
| #define | FLT_FILE_NAME_SHORT 0x03 |
| #define | FltGetFileNameFormat(_NameOptions) ((_NameOptions) & FLT_VALID_FILE_NAME_FORMATS) |
| #define | FLT_VALID_FILE_NAME_QUERY_METHODS 0x0000ff00 |
| #define | FLT_FILE_NAME_QUERY_DEFAULT 0x0100 |
| #define | FLT_FILE_NAME_QUERY_CACHE_ONLY 0x0200 |
| #define | FLT_FILE_NAME_QUERY_FILESYSTEM_ONLY 0x0300 |
| #define | FLT_FILE_NAME_QUERY_ALWAYS_ALLOW_CACHE_LOOKUP 0x0400 |
| #define | FltGetFileNameQueryMethod(_NameOptions) ((_NameOptions) & FLT_VALID_FILE_NAME_QUERY_METHODS) |
| #define | FLT_VALID_FILE_NAME_FLAGS 0xff000000 |
| #define | FLT_FILE_NAME_REQUEST_FROM_CURRENT_PROVIDER 0x01000000 |
| #define | FLT_FILE_NAME_DO_NOT_CACHE 0x02000000 |
| #define | FLT_FILE_NAME_ALLOW_QUERY_ON_REPARSE 0x04000000 |
| #define | FLTFL_FILE_NAME_PARSED_FINAL_COMPONENT 0x0001 |
| #define | FLTFL_FILE_NAME_PARSED_EXTENSION 0x0002 |
| #define | FLTFL_FILE_NAME_PARSED_STREAM 0x0004 |
| #define | FLTFL_FILE_NAME_PARSED_PARENT_DIR 0x0008 |
| #define | FLT_PORT_CONNECT 0x0001 |
| #define | FLT_PORT_ALL_ACCESS (FLT_PORT_CONNECT | STANDARD_RIGHTS_ALL) |
Typedefs |
| typedef struct _FLT_FILTER * | PFLT_FILTER |
| typedef struct _FLT_VOLUME * | PFLT_VOLUME |
| typedef struct _FLT_INSTANCE * | PFLT_INSTANCE |
| typedef struct _FLT_PORT * | PFLT_PORT |
| typedef PVOID | PFLT_CONTEXT |
| typedef USHORT | FLT_CONTEXT_TYPE |
| typedef ULONG | FLT_CALLBACK_DATA_FLAGS |
| typedef ULONG | FLT_ALLOCATE_CALLBACK_DATA_FLAGS |
| typedef VOID(FLTAPI * | PFLT_CONTEXT_CLEANUP_CALLBACK )(_In_ PFLT_CONTEXT Context, _In_ FLT_CONTEXT_TYPE ContextType) |
| typedef PVOID(FLTAPI * | PFLT_CONTEXT_ALLOCATE_CALLBACK )(_In_ POOL_TYPE PoolType, _In_ SIZE_T Size, _In_ FLT_CONTEXT_TYPE ContextType) |
| typedef VOID(FLTAPI * | PFLT_CONTEXT_FREE_CALLBACK )(_In_ PVOID Pool, _In_ FLT_CONTEXT_TYPE ContextType) |
| typedef USHORT | FLT_CONTEXT_REGISTRATION_FLAGS |
| typedef ULONG | FLT_INSTANCE_SETUP_FLAGS |
| typedef NTSTATUS(FLTAPI * | PFLT_INSTANCE_SETUP_CALLBACK )(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_SETUP_FLAGS Flags, _In_ DEVICE_TYPE VolumeDeviceType, _In_ FLT_FILESYSTEM_TYPE VolumeFilesystemType) |
| typedef ULONG | FLT_INSTANCE_QUERY_TEARDOWN_FLAGS |
| typedef NTSTATUS(FLTAPI * | PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK )(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_QUERY_TEARDOWN_FLAGS Flags) |
| typedef ULONG | FLT_INSTANCE_TEARDOWN_FLAGS |
| typedef VOID(FLTAPI * | PFLT_INSTANCE_TEARDOWN_CALLBACK )(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_TEARDOWN_FLAGS Reason) |
typedef enum
_FLT_PREOP_CALLBACK_STATUS * | PFLT_PREOP_CALLBACK_STATUS |
typedef
FLT_PREOP_CALLBACK_STATUS(FLTAPI * | PFLT_PRE_OPERATION_CALLBACK )(_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Outptr_result_maybenull_ PVOID *CompletionContext) |
typedef enum
_FLT_POSTOP_CALLBACK_STATUS * | PFLT_POSTOP_CALLBACK_STATUS |
| typedef ULONG | FLT_POST_OPERATION_FLAGS |
typedef
FLT_POSTOP_CALLBACK_STATUS(FLTAPI * | PFLT_POST_OPERATION_CALLBACK )(_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags) |
| typedef ULONG | FLT_OPERATION_REGISTRATION_FLAGS |
| typedef ULONG | FLT_FILTER_UNLOAD_FLAGS |
| typedef NTSTATUS(FLTAPI * | PFLT_FILTER_UNLOAD_CALLBACK )(FLT_FILTER_UNLOAD_FLAGS Flags) |
| typedef ULONG | FLT_FILE_NAME_OPTIONS |
| typedef NTSTATUS(FLTAPI * | PFLT_GENERATE_FILE_NAME )(_In_ PFLT_INSTANCE Instance, _In_ PFILE_OBJECT FileObject, _In_opt_ PFLT_CALLBACK_DATA CallbackData, _In_ FLT_FILE_NAME_OPTIONS NameOptions, _Out_ PBOOLEAN CacheFileNameInformation, _Out_ PFLT_NAME_CONTROL FileName) |
| typedef ULONG | FLT_NORMALIZE_NAME_FLAGS |
| typedef NTSTATUS(FLTAPI * | PFLT_NORMALIZE_NAME_COMPONENT )(_In_ PFLT_INSTANCE Instance, _In_ PCUNICODE_STRING ParentDirectory, _In_ USHORT VolumeNameLength, _In_ PCUNICODE_STRING Component, _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName, _In_ ULONG ExpandComponentNameLength, _In_ FLT_NORMALIZE_NAME_FLAGS Flags, _Inout_ PVOID *NormalizationContext) |
| typedef NTSTATUS(FLTAPI * | PFLT_NORMALIZE_NAME_COMPONENT_EX )(_In_ PFLT_INSTANCE Instance, _In_ PFILE_OBJECT FileObject, _In_ PCUNICODE_STRING ParentDirectory, _In_ USHORT VolumeNameLength, _In_ PCUNICODE_STRING Component, _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName, _In_ ULONG ExpandComponentNameLength, _In_ FLT_NORMALIZE_NAME_FLAGS Flags, _Inout_ PVOID *NormalizationContext) |
| typedef VOID(FLTAPI * | PFLT_NORMALIZE_CONTEXT_CLEANUP )(_In_opt_ PVOID *NormalizationContext) |
| typedef NTSTATUS(FLTAPI * | PFLT_TRANSACTION_NOTIFICATION_CALLBACK )(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ PFLT_CONTEXT TransactionContext, _In_ ULONG NotificationMask) |
| typedef ULONG | FLT_REGISTRATION_FLAGS |
| typedef VOID(FLTAPI * | PFLT_COMPLETED_ASYNC_IO_CALLBACK )(_In_ PFLT_CALLBACK_DATA CallbackData, _In_ PFLT_CONTEXT Context) |
| typedef ULONG | FLT_IO_OPERATION_FLAGS |
| typedef VOID(FLTAPI * | PFLT_GET_OPERATION_STATUS_CALLBACK )(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ PFLT_IO_PARAMETER_BLOCK IopbSnapshot, _In_ NTSTATUS OperationStatus, _In_opt_ PVOID RequesterContext) |
| typedef USHORT | FLT_FILE_NAME_PARSED_FLAGS |
typedef enum
_FLT_SET_CONTEXT_OPERATION * | PFLT_SET_CONTEXT_OPERATION |
| typedef NTSTATUS(FLTAPI * | PFLT_MESSAGE_NOTIFY )(_In_opt_ PVOID PortCookie, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_to_opt_(OutputBufferLength,*ReturnOutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength, _Out_ PULONG ReturnOutputBufferLength) |
| typedef NTSTATUS(FLTAPI * | PFLT_CONNECT_NOTIFY )(_In_ PFLT_PORT ClientPort, _In_opt_ PVOID ServerPortCookie, _In_reads_bytes_opt_(SizeOfContext) PVOID ConnectionContext, _In_ ULONG SizeOfContext, _Outptr_result_maybenull_ PVOID *ConnectionPortCookie) |
| typedef VOID(FLTAPI * | PFLT_DISCONNECT_NOTIFY )(_In_opt_ PVOID ConnectionCookie) |
| typedef VOID(FLTAPI * | PFLT_COMPLETE_CANCELED_CALLBACK )(_In_ PFLT_CALLBACK_DATA CallbackData) |
typedef struct
_FLT_DEFERRED_IO_WORKITEM * | PFLT_DEFERRED_IO_WORKITEM |
typedef struct
_FLT_GENERIC_WORKITEM * | PFLT_GENERIC_WORKITEM |
| typedef VOID(FLTAPI * | PFLT_DEFERRED_IO_WORKITEM_ROUTINE )(_In_ PFLT_DEFERRED_IO_WORKITEM FltWorkItem, _In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context) |
| typedef VOID(FLTAPI * | PFLT_GENERIC_WORKITEM_ROUTINE )(_In_ PFLT_GENERIC_WORKITEM FltWorkItem, _In_ PVOID FltObject, _In_opt_ PVOID Context) |
| typedef IO_CSQ_IRP_CONTEXT | FLT_CALLBACK_DATA_QUEUE_IO_CONTEXT |
| typedef IO_CSQ_IRP_CONTEXT * | PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT |
typedef struct
_FLT_CALLBACK_DATA_QUEUE | FLT_CALLBACK_DATA_QUEUE |
typedef struct
_FLT_CALLBACK_DATA_QUEUE * | PFLT_CALLBACK_DATA_QUEUE |
| typedef NTSTATUS(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_INSERT_IO )(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PVOID InsertContext) |
| typedef VOID(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO )(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd) |
| typedef PFLT_CALLBACK_DATA(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO )(_In_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PVOID PeekContext) |
| typedef VOID(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_ACQUIRE )(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _Out_opt_ PKIRQL Irql) |
| typedef VOID(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_RELEASE )(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ KIRQL Irql) |
| typedef VOID(FLTAPI * | PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO )(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _Inout_ PFLT_CALLBACK_DATA Cbd) |
typedef enum
_FLT_CALLBACK_DATA_QUEUE_FLAGS | FLT_CALLBACK_DATA_QUEUE_FLAGS |
| typedef NTSTATUS(* | PFLT_COMPLETE_LOCK_CALLBACK_DATA_ROUTINE )(_In_opt_ PVOID Context, _In_ PFLT_CALLBACK_DATA CallbackData) |
| typedef VOID(FLTAPI * | PFLTOPLOCK_WAIT_COMPLETE_ROUTINE )(_In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context) |
| typedef VOID(FLTAPI * | PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE )(_In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context) |
Enumerations |
| enum | FLT_PREOP_CALLBACK_STATUS {
FLT_PREOP_SUCCESS_WITH_CALLBACK,
FLT_PREOP_SUCCESS_NO_CALLBACK,
FLT_PREOP_PENDING,
FLT_PREOP_DISALLOW_FASTIO,
FLT_PREOP_COMPLETE,
FLT_PREOP_SYNCHRONIZE
} |
| enum | FLT_POSTOP_CALLBACK_STATUS { FLT_POSTOP_FINISHED_PROCESSING,
FLT_POSTOP_MORE_PROCESSING_REQUIRED
} |
| enum | FLT_SET_CONTEXT_OPERATION { FLT_SET_CONTEXT_REPLACE_IF_EXISTS,
FLT_SET_CONTEXT_KEEP_IF_EXISTS
} |
Functions |
| VOID FLTAPI | FltSetCallbackDataDirty (_Inout_ PFLT_CALLBACK_DATA Data) |
| VOID FLTAPI | FltClearCallbackDataDirty (_Inout_ PFLT_CALLBACK_DATA Data) |
| BOOLEAN FLTAPI | FltIsCallbackDataDirty (_In_ PFLT_CALLBACK_DATA Data) |
_Must_inspect_result_ BOOLEAN
FLTAPI | FltDoCompletionProcessingWhenSafe (_In_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags, _In_ PFLT_POST_OPERATION_CALLBACK SafePostCallback, _Out_ PFLT_POSTOP_CALLBACK_STATUS RetPostOperationStatus) |
| _Must_inspect_result_ | _IRQL_requires_max_ (APC_LEVEL) NTSTATUS FLTAPI FltCheckAndGrowNameControl(_Inout_ PFLT_NAME_CONTROL NameCtrl = = 0 |
| | _When_ (CallbackStatus==FLT_PREOP_COMPLETE, _IRQL_requires_max_(DISPATCH_LEVEL)) _When_(CallbackStatus! |
| | _IRQL_requires_max_ (DISPATCH_LEVEL) VOID FLTAPI FltCompletePendedPostOperation(_In_ PFLT_CALLBACK_DATA CallbackData) |
| | _When_ ((PoolType==NonPagedPoolNx), _IRQL_requires_max_(DISPATCH_LEVEL)) _When_((PoolType! |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_ HANDLE | _In_reads_bytes_ (FileNameLength) PWSTR FileName |
| _Must_inspect_result_ | _IRQL_requires_max_ (PASSIVE_LEVEL) NTSTATUS FLTAPI FltLoadFilter(_In_ PCUNICODE_STRING FilterName) |
| | _When_ (FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(APC_LEVEL)) _When_(!FlagOn(CallbackData->Iopb->IrpFlags |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG _In_ ULONG | _In_reads_bytes_opt_ (EaLength) PVOID EaBuffer |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER _In_ ULONG | _Out_writes_bytes_to_ (Length,*BytesRead) PVOID Buffer |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG
_In_opt_ GUID | _In_reads_bytes_ (DataBufferLength) PVOID DataBuffer |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER _In_ ULONG | _In_reads_bytes_ (Length) PVOID Buffer |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_
SECURITY_INFORMATION | _Inout_updates_bytes_opt_ (Length) PSECURITY_DESCRIPTOR SecurityDescriptor |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG | _In_reads_bytes_opt_ (InputBufferLength) PVOID InputBuffer |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
ULONG | _Out_writes_bytes_to_opt_ (OutputBufferLength,*LengthReturned) PVOID OutputBuffer |
_Must_inspect_result_ _In_
FLT_CONTEXT_TYPE _In_ SIZE_T
_In_ POOL_TYPE | _Outptr_result_bytebuffer_ (ContextSize) PFLT_CONTEXT *ReturnedContext) |
| LONG FLTAPI | FltCompareInstanceAltitudes (_In_ PFLT_INSTANCE Instance1, _In_ PFLT_INSTANCE Instance2) |
| _In_ FILTER_INFORMATION_CLASS | _Out_writes_bytes_to_opt_ (BufferSize,*BytesReturned) PVOID Buffer |
| | _Out_writes_bytes_to_opt_ (VolumePropertiesLength,*LengthReturned) PFLT_VOLUME_PROPERTIES VolumeProperties |
_Must_inspect_result_ _Out_
PIO_STATUS_BLOCK | _Out_writes_bytes_ (Length) PVOID FsInformation |
| _Must_inspect_result_ | _Out_writes_to_opt_ (VolumeListSize,*NumberVolumesReturned) PFLT_VOLUME *VolumeList |
_Must_inspect_result_ _In_opt_
PFLT_FILTER | _Out_writes_to_opt_ (InstanceListSize,*NumberInstancesReturned) PFLT_INSTANCE *InstanceList |
_Must_inspect_result_ _In_
PFLT_PORT | _In_reads_bytes_ (SenderBufferLength) PVOID SenderBuffer |
| BOOLEAN FLTAPI | FltIsIoCanceled (_In_ PFLT_CALLBACK_DATA CallbackData) |
| NTSTATUS FLTAPI | FltDecodeParameters (_In_ PFLT_CALLBACK_DATA CallbackData, _Outptr_opt_ PMDL **MdlAddressPointer, _Outptr_opt_result_bytebuffer_(**Length) PVOID **Buffer, _Outptr_opt_ PULONG *Length, _Out_opt_ LOCK_OPERATION *DesiredAccess) |
| PMDL FASTCALL | FltGetSwappedBufferMdlAddress (_In_ PFLT_CALLBACK_DATA CallbackData) |
| VOID FASTCALL | FltRetainSwappedBufferMdlAddress (_In_ PFLT_CALLBACK_DATA CallbackData) |
| NTSTATUS FLTAPI | FltCbdqInitialize (_In_ PFLT_INSTANCE Instance, _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA_QUEUE_INSERT_IO CbdqInsertIo, _In_ PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO CbdqRemoveIo, _In_ PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO CbdqPeekNextIo, _In_ PFLT_CALLBACK_DATA_QUEUE_ACQUIRE CbdqAcquire, _In_ PFLT_CALLBACK_DATA_QUEUE_RELEASE CbdqRelease, _In_ PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO CbdqCompleteCanceledIo) |
| VOID FLTAPI | FltCbdqEnable (_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq) |
| VOID FLTAPI | FltCbdqDisable (_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq) |
_Must_inspect_result_ NTSTATUS
FLTAPI | FltCbdqInsertIo (_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context, _In_opt_ PVOID InsertContext) |
_Must_inspect_result_
PFLT_CALLBACK_DATA FLTAPI | FltCbdqRemoveIo (_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context) |
_Must_inspect_result_
PFLT_CALLBACK_DATA FLTAPI | FltCbdqRemoveNextIo (_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ PVOID PeekContext) |
| VOID FLTAPI | FltInitializeFileLock (_Out_ PFILE_LOCK FileLock) |
| VOID FLTAPI | FltUninitializeFileLock (_In_ PFILE_LOCK FileLock) |
| | _Acquires_lock_ (_Global_critical_region_) _IRQL_requires_max_(APC_LEVEL) VOID FLTAPI FltAcquireResourceExclusive(_Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PERESOURCE Resource) |
| | _Releases_lock_ (_Global_critical_region_) _IRQL_requires_max_(DISPATCH_LEVEL) VOID FLTAPI FltReleaseResource(_Inout_ _Requires_lock_held_(*_Curr_) _Releases_lock_(*_Curr_) PERESOURCE Resource) |
| BOOLEAN FLTAPI | FltIsOperationSynchronous (_In_ PFLT_CALLBACK_DATA CallbackData) |
| PCHAR FLTAPI | FltGetIrpName (_In_ UCHAR IrpMajorCode) |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
BOOLEAN | _In_reads_bytes_opt_ (EaListLength) PVOID EaList |
| _Must_inspect_result_ | _When_ (((CallbackData!=NULL)&&FLT_IS_IRP_OPERATION(CallbackData)), _IRQL_requires_max_(PASSIVE_LEVEL)) _When_((!((CallbackData! |
| _Must_inspect_result_ | _IRQL_requires_max_ (DPC_LEVEL) PVOID FLTAPI FltGetNewSystemBufferAddress(_In_ PFLT_CALLBACK_DATA CallbackData) |
| BOOLEAN FLTAPI | FltOplockKeysEqual (_In_opt_ PFILE_OBJECT Fo1, _In_opt_ PFILE_OBJECT Fo2) |
Variables |
| _Must_inspect_result_ _In_ USHORT | NewSize |
_Must_inspect_result_ _In_opt_
PFILE_OBJECT | FileObject |
_Must_inspect_result_ _In_
CONST FLT_REGISTRATION * | Registration |
_Must_inspect_result_ _In_
CONST FLT_REGISTRATION
_Outptr_ PFLT_FILTER * | RetFilter |
| _In_ FLT_PREOP_CALLBACK_STATUS | CallbackStatus |
_In_ FLT_PREOP_CALLBACK_STATUS
_In_opt_ PVOID | Context |
_Must_inspect_result_ _In_
PFLT_GET_OPERATION_STATUS_CALLBACK | CallbackRoutine |
_Must_inspect_result_ _In_
PFLT_GET_OPERATION_STATUS_CALLBACK
_In_opt_ PVOID | RequesterContext |
| _In_ PVOID | Buffer |
| _In_ PVOID _In_ ULONG | Tag |
_Must_inspect_result_ _In_
FLT_FILE_NAME_OPTIONS | NameOptions |
_Must_inspect_result_ _In_
FLT_FILE_NAME_OPTIONS _Outptr_
PFLT_FILE_NAME_INFORMATION * | FileNameInformation |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE | Instance |
| _Inout_opt_ PUNICODE_STRING | Extension |
_Inout_opt_ PUNICODE_STRING
_Inout_opt_ PUNICODE_STRING | Stream |
_Inout_opt_ PUNICODE_STRING
_Inout_opt_ PUNICODE_STRING
_Inout_opt_ PUNICODE_STRING | FinalComponent |
_Must_inspect_result_ _In_
PFLT_FILE_NAME_INFORMATION
_Outptr_result_maybenull_
PFLT_FILE_NAME_INFORMATION * | RetTunneledFileNameInformation |
_Must_inspect_result_
_Inout_opt_ PUNICODE_STRING | VolumeName |
_Must_inspect_result_
_Inout_opt_ PUNICODE_STRING
_Out_opt_ PULONG | BufferSizeNeeded |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_ HANDLE | RootDirectory |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_ HANDLE
_In_ ULONG | FileNameLength |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_ HANDLE
_In_ ULONG _In_
FLT_FILE_NAME_OPTIONS _Outptr_
PFLT_FILE_NAME_INFORMATION * | RetFileNameInformation |
_Must_inspect_result_ _In_
PFLT_INSTANCE _Out_ PBOOLEAN | IsDirectory |
_Must_inspect_result_ _Inout_
PFLT_VOLUME | Volume |
_Must_inspect_result_ _Inout_
PFLT_VOLUME _In_opt_
PCUNICODE_STRING | InstanceName |
_Must_inspect_result_ _Inout_
PFLT_VOLUME _In_opt_
PCUNICODE_STRING
_Outptr_opt_result_maybenull_
PFLT_INSTANCE * | RetInstance |
_Must_inspect_result_ _Inout_
PFLT_VOLUME _In_
PCUNICODE_STRING | Altitude |
_Must_inspect_result_ _In_opt_
PFILE_OBJECT _Outptr_
PFLT_CALLBACK_DATA * | RetNewCallbackData |
| | IRP_PAGING_IO |
_Must_inspect_result_ _In_
PFLT_COMPLETED_ASYNC_IO_CALLBACK
_In_ PVOID | CallbackContext |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE | FileHandle |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK | DesiredAccess |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES | ObjectAttributes |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK | IoStatusBlock |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER | AllocationSize |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG | FileAttributes |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG | ShareAccess |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG | CreateDisposition |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG _In_ ULONG | CreateOptions |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG _In_ ULONG
_In_ ULONG | EaLength |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_In_ ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG _In_ ULONG
_In_ ULONG _In_ ULONG | Flags |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER | ByteOffset |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER _In_ ULONG | Length |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
FLT_IO_OPERATION_FLAGS
_Out_opt_ PULONG | BytesRead |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG | FileTag |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG
_In_opt_ GUID * | Guid |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG
_In_opt_ GUID _In_ USHORT | DataBufferLength |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
FLT_IO_OPERATION_FLAGS
_Out_opt_ PULONG | BytesWritten |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
FILE_INFORMATION_CLASS | FileInformationClass |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
FILE_INFORMATION_CLASS
_Out_opt_ PULONG | LengthReturned |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
FS_INFORMATION_CLASS | FsInformationClass |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_
SECURITY_INFORMATION | SecurityInformation |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_
SECURITY_INFORMATION _In_
ULONG _Out_opt_ PULONG | LengthNeeded |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_
SECURITY_INFORMATION _In_
PSECURITY_DESCRIPTOR | SecurityDescriptor |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG | FsControlCode |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
ULONG | InputBufferLength |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
ULONG _In_ ULONG | OutputBufferLength |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG | IoControlCode |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA | CallbackData |
_Must_inspect_result_ _In_
FLT_CONTEXT_TYPE | ContextType |
_Must_inspect_result_ _In_
FLT_CONTEXT_TYPE _In_ SIZE_T | ContextSize |
_Must_inspect_result_ _In_
FLT_CONTEXT_TYPE _In_ SIZE_T
_In_ POOL_TYPE | PoolType |
| _In_ FLT_CONTEXT_TYPE | DesiredContexts |
_In_ FLT_CONTEXT_TYPE _Out_
PFLT_RELATED_CONTEXTS | Contexts |
| _In_ FLT_SET_CONTEXT_OPERATION | Operation |
_In_ FLT_SET_CONTEXT_OPERATION
_In_ PFLT_CONTEXT | NewContext |
_In_ FLT_SET_CONTEXT_OPERATION
_In_ PFLT_CONTEXT
_Outptr_opt_result_maybenull_
PFLT_CONTEXT * | OldContext |
_In_ PCUNICODE_STRING _Outptr_
PFLT_VOLUME * | RetVolume |
| _In_ PDEVICE_OBJECT | DeviceObject |
| _Outptr_ PDEVICE_OBJECT * | DiskDeviceObject |
| _Outptr_ PFLT_INSTANCE * | LowerInstance |
| _Outptr_ PFLT_INSTANCE * | UpperInstance |
| _In_ FILTER_INFORMATION_CLASS | InformationClass |
_In_ FILTER_INFORMATION_CLASS
_In_ ULONG | BufferSize |
_In_ FILTER_INFORMATION_CLASS
_In_ ULONG _Out_ PULONG | BytesReturned |
| _In_ ULONG | VolumePropertiesLength |
_Must_inspect_result_ _Out_
PBOOLEAN | IsWritable |
_Must_inspect_result_ _Out_
PUNICODE_STRING | VolumeGuidName |
_Must_inspect_result_ _Out_
PIO_STATUS_BLOCK | Iosb |
_Must_inspect_result_
*NumberFiltersReturned
PFLT_FILTER * | FilterList |
_Must_inspect_result_
*NumberFiltersReturned
PFLT_FILTER _In_ ULONG | FilterListSize |
_Must_inspect_result_
*NumberFiltersReturned
PFLT_FILTER _In_ ULONG _Out_
PULONG | NumberFiltersReturned |
| _Must_inspect_result_ _In_ ULONG | VolumeListSize |
_Must_inspect_result_ _In_
ULONG _Out_ PULONG | NumberVolumesReturned |
_Must_inspect_result_ _In_opt_
PFLT_FILTER | Filter |
_Must_inspect_result_ _In_opt_
PFLT_FILTER _In_ ULONG | InstanceListSize |
_Must_inspect_result_ _In_opt_
PFLT_FILTER _In_ ULONG _Out_
PULONG | NumberInstancesReturned |
| _Must_inspect_result_ _In_ ULONG | Index |
_Must_inspect_result_ _Outptr_
PFLT_PORT * | ServerPort |
_Must_inspect_result_ _Outptr_
PFLT_PORT _In_
POBJECT_ATTRIBUTES _In_opt_
PVOID | ServerPortCookie |
_Must_inspect_result_ _Outptr_
PFLT_PORT _In_
POBJECT_ATTRIBUTES _In_opt_
PVOID _In_ PFLT_CONNECT_NOTIFY | ConnectNotifyCallback |
_Must_inspect_result_ _Outptr_
PFLT_PORT _In_
POBJECT_ATTRIBUTES _In_opt_
PVOID _In_ PFLT_CONNECT_NOTIFY
_In_ PFLT_DISCONNECT_NOTIFY | DisconnectNotifyCallback |
_Must_inspect_result_ _Outptr_
PFLT_PORT _In_
POBJECT_ATTRIBUTES _In_opt_
PVOID _In_ PFLT_CONNECT_NOTIFY
_In_ PFLT_DISCONNECT_NOTIFY
_In_opt_ PFLT_MESSAGE_NOTIFY | MessageNotifyCallback |
_Must_inspect_result_ _Outptr_
PFLT_PORT _In_
POBJECT_ATTRIBUTES _In_opt_
PVOID _In_ PFLT_CONNECT_NOTIFY
_In_ PFLT_DISCONNECT_NOTIFY
_In_opt_ PFLT_MESSAGE_NOTIFY
_In_ LONG | MaxConnections |
| _Outptr_ PFLT_PORT * | ClientPort |
_Must_inspect_result_ _In_
PFLT_PORT _In_ ULONG | SenderBufferLength |
_Must_inspect_result_ _In_
PFLT_PORT _In_ ULONG
_Out_writes_bytes_opt_
ReplyLength PVOID | ReplyBuffer |
_Must_inspect_result_ _In_
PFLT_PORT _In_ ULONG
_Out_writes_bytes_opt_
ReplyLength PVOID _Inout_opt_
PULONG | ReplyLength |
_Must_inspect_result_ _In_
PFLT_PORT _In_ ULONG
_Out_writes_bytes_opt_
ReplyLength PVOID _Inout_opt_
PULONG _In_opt_ PLARGE_INTEGER | Timeout |
_In_
PFLT_COMPLETE_CANCELED_CALLBACK | CanceledCallback |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA | Data |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA _In_
PFLT_DEFERRED_IO_WORKITEM_ROUTINE | WorkerRoutine |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA _In_
PFLT_DEFERRED_IO_WORKITEM_ROUTINE
_In_ WORK_QUEUE_TYPE | QueueType |
| _Must_inspect_result_ _In_ PVOID | FltObject |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA _In_ ULONG | OpenCount |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA _In_opt_
PVOID _In_opt_
PFLTOPLOCK_WAIT_COMPLETE_ROUTINE | WaitCompletionRoutine |
_Must_inspect_result_ _In_
PFLT_CALLBACK_DATA _In_opt_
PVOID _In_opt_
PFLTOPLOCK_WAIT_COMPLETE_ROUTINE
_In_opt_
PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE | PrePostCallbackDataRoutine |
_Must_inspect_result_ _In_opt_
PUNLOCK_ROUTINE | UnlockRoutine |
| _Inout_ PLIST_ENTRY | NotifyList |
| _Inout_ PLIST_ENTRY _In_ PVOID | FsContext |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING | FullDirectoryName |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN | WatchTree |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN | IgnoreBuffer |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN _In_ ULONG | CompletionFilter |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN _In_ ULONG _In_
PFLT_CALLBACK_DATA | NotifyCallbackData |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN _In_ ULONG _In_
PFLT_CALLBACK_DATA _In_opt_
PCHECK_FOR_TRAVERSE_ACCESS | TraverseCallback |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN _In_ ULONG _In_
PFLT_CALLBACK_DATA _In_opt_
PCHECK_FOR_TRAVERSE_ACCESS
_In_opt_
PSECURITY_SUBJECT_CONTEXT | SubjectContext |
_Inout_ PLIST_ENTRY _In_ PVOID
_In_ PSTRING _In_ BOOLEAN _In_
BOOLEAN _In_ ULONG _In_
PFLT_CALLBACK_DATA _In_opt_
PCHECK_FOR_TRAVERSE_ACCESS
_In_opt_
PSECURITY_SUBJECT_CONTEXT
_In_opt_ PFILTER_REPORT_CHANGE | FilterCallback |
| _Must_inspect_result_ _Out_ PHANDLE | VolumeHandle |
_Must_inspect_result_ _Out_
PHANDLE _Outptr_opt_
PFILE_OBJECT * | VolumeFileObject |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
BOOLEAN | ReturnSingleEntry |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
BOOLEAN _In_ ULONG | EaListLength |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
BOOLEAN _In_ ULONG _In_opt_
PULONG | EaIndex |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
BOOLEAN _In_ ULONG _In_opt_
PULONG _In_ BOOLEAN | RestartScan |
_Must_inspect_result_ _In_opt_
PFLT_INSTANCE _Out_ PHANDLE
_Outptr_opt_ PFILE_OBJECT _In_
ACCESS_MASK _In_
POBJECT_ATTRIBUTES _Out_
PIO_STATUS_BLOCK _In_opt_
PLARGE_INTEGER _In_ ULONG _In_
ULONG _In_ ULONG _In_ ULONG
_In_ ULONG _In_ ULONG _In_opt_
PIO_DRIVER_CREATE_CONTEXT | DriverContext |
_Must_inspect_result_ _In_
PFILE_OBJECT _In_ ULONG _In_
FILE_INFORMATION_CLASS _In_
BOOLEAN _In_opt_
PUNICODE_STRING | FileName |
| _In_ PKTRANSACTION | Transaction |
| _Out_ PFLT_FILESYSTEM_TYPE | FileSystemType |
_Must_inspect_result_ _Out_
PBOOLEAN | IsSnapshotVolume |
_Must_inspect_result_ _In_
PKTRANSACTION _In_
PFLT_CONTEXT | TransactionContext |
_Must_inspect_result_ _In_
PKTRANSACTION _In_
PFLT_CONTEXT _In_
NOTIFICATION_MASK | NotificationMask |
_Must_inspect_result_ _In_
FSRTL_ALLOCATE_ECPLIST_FLAGS
_Outptr_ PECP_LIST * | EcpList |
| _Must_inspect_result_ _In_ LPCGUID | EcpType |
_Must_inspect_result_ _In_
LPCGUID ULONG | SizeOfContext |
_Must_inspect_result_ _In_
LPCGUID ULONG _In_
FSRTL_ALLOCATE_ECP_FLAGS
_In_opt_
PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK | CleanupCallback |
_Must_inspect_result_ _In_
LPCGUID ULONG _In_
FSRTL_ALLOCATE_ECP_FLAGS
_In_opt_
PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK
_In_ ULONG | PoolTag |
_Must_inspect_result_ _In_
LPCGUID ULONG _In_
FSRTL_ALLOCATE_ECP_FLAGS
_In_opt_
PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK
_In_ ULONG _Outptr_ PVOID * | EcpContext |
| _Inout_ PVOID | Lookaside |
_Inout_ PVOID _In_
FSRTL_ECP_LOOKASIDE_FLAGS _In_
SIZE_T | Size |
_Must_inspect_result_ _In_
LPCGUID _In_ ULONG _In_
FSRTL_ALLOCATE_ECP_FLAGS
_In_opt_
PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK
_Inout_ PVOID | LookasideList |
_In_ PECP_LIST _In_ LPCGUID
_Outptr_opt_ PVOID _Out_opt_
ULONG * | EcpContextSize |
| _In_ PECP_LIST _In_opt_ PVOID | CurrentEcpContext |
_In_ PECP_LIST _In_opt_ PVOID
_Out_opt_ LPGUID | NextEcpType |
_In_ PECP_LIST _In_opt_ PVOID
_Out_opt_ LPGUID _Outptr_opt_
PVOID * | NextEcpContext |
_In_ PECP_LIST _In_opt_ PVOID
_Out_opt_ LPGUID _Outptr_opt_
PVOID _Out_opt_ ULONG * | NextEcpContextSize |
_In_opt_ PFILE_OBJECT _In_opt_
PETHREAD | Thread |
_In_opt_ PFILE_OBJECT _In_opt_
PETHREAD _Inout_
PIO_PRIORITY_INFO | PriorityInfo |
| _Out_opt_ PIO_PRIORITY_INFO | OutputPriorityInfo |
| _In_ IO_PRIORITY_HINT | PriorityHint |
| _Must_inspect_result_ _Out_ PULONG | SessionId |
| _In_ PFLT_INSTANCE | TargetInstance |
_In_ PFLT_INSTANCE _Out_opt_
PBOOLEAN | SourceDeviceStackSizeModified |
| _In_ PFLT_INSTANCE _Out_ PBOOLEAN | RedirectionAllowed |
| _In_ PFLT_INSTANCE _Out_ PBOOLEAN | RedirectionAllowedThisIo |
_In_ PFLT_INSTANCE _Out_
PBOOLEAN _Out_opt_ PBOOLEAN | RedirectionAllowedAllIo |
1.7.6.1
