Data Structures |
| struct | POB_DUMP_CONTROL |
| struct | POBJECT_HANDLE_ATTRIBUTE_INFORMATION |
| struct | POBJECT_DIRECTORY_INFORMATION |
| struct | POBJECT_TYPE_INFORMATION |
| struct | POBJECT_ALL_TYPES_INFORMATION |
| struct | POBJECT_CREATE_INFORMATION |
| struct | POBJECT_TYPE_INITIALIZER |
| struct | OBJECT_TYPE |
| struct | POBJECT_DIRECTORY_ENTRY |
| struct | POBJECT_DIRECTORY |
| struct | POBJECT_HEADER_NAME_INFO |
| struct | POBJECT_HANDLE_COUNT_ENTRY |
| struct | POBJECT_HANDLE_COUNT_DATABASE |
| struct | POBJECT_HEADER_HANDLE_INFO |
| struct | POBJECT_HEADER_CREATOR_INFO |
| struct | POBJECT_HEADER_QUOTA_INFO |
| struct | POBJECT_HEADER |
| struct | POBP_LOOKUP_CONTEXT |
| struct | PDEVICE_MAP |
| struct | POBJECT_SYMBOLIC_LINK |
Defines |
| #define | OB_FLAG_CREATE_INFO 0x01 |
| #define | OB_FLAG_KERNEL_MODE 0x02 |
| #define | OB_FLAG_CREATOR_INFO 0x04 |
| #define | OB_FLAG_EXCLUSIVE 0x08 |
| #define | OB_FLAG_PERMANENT 0x10 |
| #define | OB_FLAG_SECURITY 0x20 |
| #define | OB_FLAG_SINGLE_PROCESS 0x40 |
| #define | OB_FLAG_DEFER_DELETE 0x80 |
| #define | OBJECT_TO_OBJECT_HEADER(o) CONTAINING_RECORD((o), OBJECT_HEADER, Body) |
| #define | OBJECT_HEADER_TO_NAME_INFO(h) |
| #define | OBJECT_HEADER_TO_HANDLE_INFO(h) |
| #define | OBJECT_HEADER_TO_QUOTA_INFO(h) |
| #define | OBJECT_HEADER_TO_CREATOR_INFO(h) |
| #define | OBJECT_HEADER_TO_EXCLUSIVE_PROCESS(h) |
| #define | DUPLICATE_SAME_ATTRIBUTES 0x00000004 |
| #define | NUMBER_HASH_BUCKETS 37 |
| #define | DOSDEVICE_DRIVE_UNKNOWN 0 |
| #define | DOSDEVICE_DRIVE_CALCULATE 1 |
| #define | DOSDEVICE_DRIVE_REMOVABLE 2 |
| #define | DOSDEVICE_DRIVE_FIXED 3 |
| #define | DOSDEVICE_DRIVE_REMOTE 4 |
| #define | DOSDEVICE_DRIVE_CDROM 5 |
| #define | DOSDEVICE_DRIVE_RAMDISK 6 |
Typedefs |
| typedef VOID(NTAPI * | OB_DUMP_METHOD )(IN PVOID Object, IN POB_DUMP_CONTROL Control OPTIONAL) |
| typedef NTSTATUS(NTAPI * | OB_OPEN_METHOD )(IN OB_OPEN_REASON Reason, IN PEPROCESS Process OPTIONAL, IN PVOID ObjectBody, IN ACCESS_MASK GrantedAccess, IN ULONG HandleCount) |
| typedef VOID(NTAPI * | OB_CLOSE_METHOD )(IN PEPROCESS Process OPTIONAL, IN PVOID Object, IN ACCESS_MASK GrantedAccess, IN ULONG ProcessHandleCount, IN ULONG SystemHandleCount) |
| typedef VOID(NTAPI * | OB_DELETE_METHOD )(IN PVOID Object) |
| typedef NTSTATUS(NTAPI * | OB_PARSE_METHOD )(IN PVOID ParseObject, IN PVOID ObjectType, IN OUT PACCESS_STATE AccessState, IN KPROCESSOR_MODE AccessMode, IN ULONG Attributes, IN OUT PUNICODE_STRING CompleteName, IN OUT PUNICODE_STRING RemainingName, IN OUT PVOID Context OPTIONAL, IN PSECURITY_QUALITY_OF_SERVICE SecurityQos OPTIONAL, OUT PVOID *Object) |
| typedef NTSTATUS(NTAPI * | OB_SECURITY_METHOD )(IN PVOID Object, IN SECURITY_OPERATION_CODE OperationType, IN PSECURITY_INFORMATION SecurityInformation, IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN OUT PULONG CapturedLength, IN OUT PSECURITY_DESCRIPTOR *ObjectSecurityDescriptor, IN POOL_TYPE PoolType, IN PGENERIC_MAPPING GenericMapping) |
| typedef NTSTATUS(NTAPI * | OB_QUERYNAME_METHOD )(IN PVOID Object, IN BOOLEAN HasObjectName, OUT POBJECT_NAME_INFORMATION ObjectNameInfo, IN ULONG Length, OUT PULONG ReturnLength, IN KPROCESSOR_MODE AccessMode) |
| typedef BOOLEAN(NTAPI * | OB_OKAYTOCLOSE_METHOD )(IN PEPROCESS Process OPTIONAL, IN PVOID Object, IN HANDLE Handle, IN KPROCESSOR_MODE AccessMode) |
Enumerations |
| enum | OB_OPEN_REASON {
ObCreateHandle,
ObOpenHandle,
ObDuplicateHandle,
ObInheritHandle,
ObMaxOpenReason
} |
Variables |
| POBJECT_TYPE NTSYSAPI | ObDirectoryType |
| PDEVICE_MAP NTSYSAPI | ObSystemDeviceMap |