10 #define DRIVER_NAME L"FltMgr" 12 #define FLT_MAJOR_VERSION 0x0200 13 #define FLT_MINOR_VERSION 0x0000 //win2k3 15 #define FM_TAG_DISPATCH_TABLE 'ifMF' 16 #define FM_TAG_REGISTRY_DATA 'rtMF' 17 #define FM_TAG_DEV_OBJ_PTRS 'ldMF' 18 #define FM_TAG_UNICODE_STRING 'suMF' 19 #define FM_TAG_FILTER 'lfMF' 20 #define FM_TAG_CONTEXT_REGISTA 'rcMF' 21 #define FM_TAG_CCB 'bcMF' 22 #define FM_TAG_TEMP_REGISTRY 'rtMF' 24 #define MAX_DEVNAME_LENGTH 64
NTSTATUS FltpRegisterContexts(_In_ PFLT_FILTER Filter, _In_ const FLT_CONTEXT_REGISTRATION *Context)
PDRIVER_OBJECT DriverObject
VOID FltpFreeUnicodeString(_In_ PUNICODE_STRING String)
FAST_MUTEX FilterAttachLock
PDEVICE_OBJECT StorageStackDeviceObject
_In_ PVOID _Out_opt_ PULONG_PTR _Outptr_opt_ PCUNICODE_STRING * ObjectName
UNICODE_STRING DeviceName
PDEVICE_OBJECT CommsDeviceObject
static USHORT USHORT * NewLength
struct _DRIVER_DATA * PDRIVER_DATA
BOOLEAN FltpExAcquireRundownProtection(_Inout_ PEX_RUNDOWN_REF RundownRef)
_In_ PDEVICE_OBJECT DeviceObject
_Must_inspect_result_ _In_ WDFDEVICE _In_ WDFSTRING String
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
_Must_inspect_result_ _In_opt_ PFLT_FILTER Filter
NTSTATUS FltpGetBaseDeviceObjectName(_In_ PDEVICE_OBJECT DeviceObject, _Inout_ PUNICODE_STRING ObjectName)
NTSTATUS FltpReallocateUnicodeString(_In_ PUNICODE_STRING String, _In_ SIZE_T NewLength, _In_ BOOLEAN CopyExisting)
struct _DRIVER_DATA DRIVER_DATA
#define MAX_DEVNAME_LENGTH
VOID FltpExInitializeRundownProtection(_Out_ PEX_RUNDOWN_REF RundownRef)
PDEVICE_OBJECT DeviceObject
struct _FLTMGR_DEVICE_EXTENSION FLTMGR_DEVICE_EXTENSION
_Must_inspect_result_ _In_ WDFCOLLECTION _In_ WDFOBJECT Object
BOOLEAN FltpExRundownCompleted(_Inout_ PEX_RUNDOWN_REF RundownRef)
BOOLEAN FltpExReleaseRundownProtection(_Inout_ PEX_RUNDOWN_REF RundownRef)
NTSTATUS NTAPI FltpObjectRundownWait(_Inout_ PEX_RUNDOWN_REF RundownRef)
PDEVICE_OBJECT AttachedToDeviceObject
struct _FLTMGR_DEVICE_EXTENSION * PFLTMGR_DEVICE_EXTENSION
UNICODE_STRING ServiceKey
NTSTATUS FltpGetObjectName(_In_ PVOID Object, _Inout_ PUNICODE_STRING ObjectName)
WCHAR DeviceNameBuffer[MAX_DEVNAME_LENGTH]
PFAST_IO_DISPATCH FastIoDispatch