Macros
#define	NtCurrentProcess() ( (HANDLE)(LONG_PTR) -1 )

#define	ZwCurrentProcess() NtCurrentProcess()

#define	NtCurrentThread() ( (HANDLE)(LONG_PTR) -2 )

#define	ZwCurrentThread() NtCurrentThread()

Functions
	$if (_WDMDDK_) $endif(_WDMDDK_) $if(_NTDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwAllocateLocallyUniqueId(_Out_ PLUID Luid)

	_IRQL_requires_max_ (PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwTerminateProcess(_In_opt_ HANDLE ProcessHandle
	Queries information details about a security descriptor.

	$endif (_NTDDK_) $if(_NTIFS_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwQueryEaFile(_In_ HANDLE FileHandle

_Out_ PIO_STATUS_BLOCK	_Out_writes_bytes_ (Length) PVOID Buffer

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_In_reads_bytes_opt_ (EaListLength) PVOID EaList

_Out_ PIO_STATUS_BLOCK	_In_reads_bytes_ (Length) PVOID Buffer

	$endif (_NTIFS_) $if(_WDMDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG	_In_reads_bytes_opt_ (EaLength) PVOID EaBuffer

	_IRQL_requires_max_ (APC_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwCreateSection(_Out_ PHANDLE SectionHandle
	Probes and locks virtual pages in memory for the specified process.

	_Post_satisfies_ (return< 0)) _When_(Length > 0

	_Post_satisfies_ (return<=0)) NTSYSAPI NTSTATUS NTAPI ZwEnumerateKey(_In_ HANDLE KeyHandle

_In_ ULONG _In_ KEY_INFORMATION_CLASS	_Out_writes_bytes_opt_ (Length) PVOID KeyInformation

_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG	_In_reads_bytes_opt_ (DataSize) PVOID Data

	$endif (_WDMDDK_) $if(_NTDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSTATUS NTAPI ZwCancelTimer(_In_ HANDLE TimerHandle

	__drv_allocatesMem (TimerObject)) NTSTATUS NTAPI ZwCreateTimer(_Out_ PHANDLE TimerHandle

_In_ THREADINFOCLASS	_In_reads_bytes_ (ThreadInformationLength) PVOID ThreadInformation

	_In_reads_bytes_opt_ (InputBufferLength) PVOID InputBuffer

_In_ ULONG	_Out_writes_bytes_opt_ (OutputBufferLength) PVOID OutputBuffer

_In_ OBJECT_INFORMATION_CLASS	_Out_writes_bytes_opt_ (ObjectInformationLength) PVOID ObjectInformation

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_Out_writes_bytes_opt_ (BufferLength) PVOID Buffer

_Must_inspect_result_ _At_ *	BaseAddress (Mem)) __kernel_entryNTSYSAPINTSTATUSNTAPIZwAllocateVirtualMemory(_In_ HANDLE ProcessHandle, _Inout_ _Outptr_result_buffer_(RegionSize) PVOID BaseAddress, _In_ ULONG_PTR ZeroBits, _Inout_ PSIZE_T RegionSize, _In_ ULONG AllocationType, _In_ ULONG Protect

_Inout_	__drv_freesMem (Mem) PVOID *BaseAddress

	_When_ (Timeout==NULL, _IRQL_requires_max_(APC_LEVEL)) _When_(Timeout -> QuadPart !=0

	_IRQL_requires_max_ (DISPATCH_LEVEL)) NTSYSAPI NTSTATUS NTAPI ZwWaitForSingleObject(_In_ HANDLE Handle

_In_ TOKEN_INFORMATION_CLASS	_Out_writes_bytes_to_opt_ (Length, *ResultLength) PVOID TokenInformation

_In_ SECURITY_INFORMATION	_Out_writes_bytes_to_ (Length, *ResultLength) PSECURITY_DESCRIPTOR SecurityDescriptor

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS	_Out_writes_bytes_ (TransactionManagerInformationLength) PVOID TransactionManagerInformation

_In_ KTMOBJECT_TYPE	_Inout_updates_bytes_ (ObjectCursorLength) PKTMOBJECT_CURSOR ObjectCursor

_In_ TRANSACTION_INFORMATION_CLASS	_Out_writes_bytes_ (TransactionInformationLength) PVOID TransactionInformation

_In_ RESOURCEMANAGER_INFORMATION_CLASS	_Out_writes_bytes_ (ResourceManagerInformationLength) PVOID ResourceManagerInformation

_In_ RESOURCEMANAGER_INFORMATION_CLASS	_In_reads_bytes_ (ResourceManagerInformationLength) PVOID ResourceManagerInformation

_In_ ENLISTMENT_INFORMATION_CLASS	_Out_writes_bytes_ (EnlistmentInformationLength) PVOID EnlistmentInformation

_In_ ENLISTMENT_INFORMATION_CLASS	_In_reads_bytes_ (EnlistmentInformationLength) PVOID EnlistmentInformation

NTSYSCALLAPI NTSTATUS NTAPI	ZwRollbackComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)

NTSYSCALLAPI NTSTATUS NTAPI	ZwSinglePhaseReject (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_In_reads_bytes_opt_ (SidListLength) PVOID SidList

NTSYSAPI NTSTATUS NTAPI	ZwNotifyChangeMultipleKeys (_In_ HANDLE MasterKeyHandle, _In_opt_ ULONG Count, _In_opt_ OBJECT_ATTRIBUTES SubordinateObjects[], _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_opt_ PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)

NTSYSAPI NTSTATUS NTAPI	ZwQueryMultipleValueKey (_In_ HANDLE KeyHandle, _Inout_ PKEY_VALUE_ENTRY ValueEntries, _In_ ULONG EntryCount, _Out_ PVOID ValueBuffer, _Inout_ PULONG BufferLength, _Out_opt_ PULONG RequiredBufferLength)

_In_	__drv_strictTypeMatch (__drv_typeConst) KEY_SET_INFORMATION_CLASS KeySetInformationClass

_In_	_In_reads_bytes_ (KeySetInformationLength) PVOID KeySetInformation

_In_ TIMER_SET_INFORMATION_CLASS	_Inout_updates_bytes_opt_ (TimerSetInformationLength) PVOID TimerSetInformation

_In_ TOKEN_INFORMATION_CLASS	_In_reads_bytes_ (TokenInformationLength) PVOID TokenInformation

NTSYSAPI NTSTATUS NTAPI	ZwAlertThread (_In_ HANDLE ThreadHandle)

NTSYSAPI NTSTATUS NTAPI	ZwAccessCheckAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PBOOLEAN AccessStatus, _Out_ PBOOLEAN GenerateOnClose)

NTSYSAPI NTSTATUS NTAPI	ZwClearEvent (_In_ HANDLE EventHandle)

NTSYSAPI NTSTATUS NTAPI	ZwCloseObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)

NTSYSAPI NTSTATUS NTAPI	ZwCreateSymbolicLinkObject (_Out_ PHANDLE SymbolicLinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PUNICODE_STRING TargetName)

NTSYSAPI NTSTATUS NTAPI	ZwFlushInstructionCache (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ ULONG FlushSize)

NTSYSAPI NTSTATUS NTAPI	ZwFlushBuffersFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)

NTSYSAPI NTSTATUS NTAPI	ZwLoadKey (_In_ POBJECT_ATTRIBUTES KeyObjectAttributes, _In_ POBJECT_ATTRIBUTES FileObjectAttributes)

NTSYSAPI NTSTATUS NTAPI	ZwOpenProcessToken (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)

NTSYSAPI NTSTATUS NTAPI	ZwOpenThread (_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PCLIENT_ID ClientId)

NTSYSAPI NTSTATUS NTAPI	ZwOpenThreadToken (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _Out_ PHANDLE TokenHandle)

NTSYSAPI NTSTATUS NTAPI	ZwPulseEvent (_In_ HANDLE EventHandle, _In_opt_ PLONG PulseCount)

NTSYSAPI NTSTATUS NTAPI	ZwQueryDefaultLocale (_In_ BOOLEAN UserProfile, _Out_ PLCID DefaultLocaleId)

NTSYSAPI NTSTATUS NTAPI	ZwReplaceKey (_In_ POBJECT_ATTRIBUTES NewFileObjectAttributes, _In_ HANDLE KeyHandle, _In_ POBJECT_ATTRIBUTES OldFileObjectAttributes)

NTSYSAPI NTSTATUS NTAPI	ZwResetEvent (_In_ HANDLE EventHandle, _Out_opt_ PLONG NumberOfWaitingThreads)

NTSYSAPI NTSTATUS NTAPI	ZwSaveKey (_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle)

NTSYSAPI NTSTATUS NTAPI	ZwSetDefaultLocale (_In_ BOOLEAN UserProfile, _In_ LCID DefaultLocaleId)

NTSYSAPI NTSTATUS NTAPI	ZwSetInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _In_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength)

NTSYSAPI NTSTATUS NTAPI	ZwSetSystemTime (_In_ PLARGE_INTEGER NewTime, _Out_opt_ PLARGE_INTEGER OldTime)

NTSYSAPI NTSTATUS NTAPI	ZwUnloadKey (_In_ POBJECT_ATTRIBUTES KeyObjectAttributes)

NTSYSAPI NTSTATUS NTAPI	ZwWaitForMultipleObjects (_In_ ULONG HandleCount, _In_ PHANDLE Handles, _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)

NTSYSAPI NTSTATUS NTAPI	ZwYieldExecution (VOID)

Variables
_In_ NTSTATUS	ExitStatus

_In_ ACCESS_MASK	DesiredAccess

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES	ObjectAttributes

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _In_opt_ PCLIENT_ID	ClientId

_Out_ PIO_STATUS_BLOCK	IoStatusBlock

_Out_ PIO_STATUS_BLOCK _In_ ULONG	Length

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	ReturnSingleEntry

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG	EaListLength

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG	EaIndex

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG _In_ BOOLEAN	RestartScan

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN	EffectiveOnly

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE	TokenType

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE _Out_ PHANDLE	NewTokenHandle

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER	AllocationSize

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG	FileAttributes

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG	ShareAccess

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG	CreateDisposition

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG	CreateOptions

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG	EaLength

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG	TitleIndex

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING	Class

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _Out_opt_ PULONG	Disposition

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER	MaximumSize

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG	SectionPageProtection

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG	AllocationAttributes

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_opt_ HANDLE	FileHandle

_In_ PUNICODE_STRING	ValueName

_In_ ULONG	Index

_In_ ULONG _In_ KEY_INFORMATION_CLASS	KeyInformationClass

_In_ ULONG _In_ KEY_INFORMATION_CLASS _In_ ULONG _Out_ PULONG	ResultLength

_In_ ULONG _In_ KEY_VALUE_INFORMATION_CLASS	KeyValueInformationClass

_In_ HANDLE	ProcessHandle

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID *	BaseAddress

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR	ZeroBits

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T	CommitSize

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER	SectionOffset

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T	ViewSize

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT	InheritDisposition

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG	AllocationType

_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG _In_ ULONG	Protect

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG	OpenOptions

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS	FileInformationClass

_Inout_ PUNICODE_STRING	LinkTarget

_Inout_ PUNICODE_STRING _Out_opt_ PULONG	ReturnedLength

_In_opt_ HANDLE	Event

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE	ApcRoutine

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID	ApcContext

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_opt_ PLARGE_INTEGER	ByteOffset

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_opt_ PLARGE_INTEGER _In_opt_ PULONG	Key

_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG	Type

_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG _In_ ULONG	DataSize

_Out_ PFILE_NETWORK_OPEN_INFORMATION	FileInformation

_Out_opt_ PBOOLEAN	CurrentState

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ TIMER_TYPE	TimerType

_In_ THREADINFOCLASS	ThreadInformationClass

_In_ THREADINFOCLASS _In_ ULONG	ThreadInformationLength

_In_ PLARGE_INTEGER	DueTime

_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE	TimerApcRoutine

_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID	TimerContext

_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN	ResumeTimer

_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG	Period

_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG _Out_opt_ PBOOLEAN	PreviousState

_In_ ULONG	InputBufferLength

_In_ ULONG _In_ ULONG	OutputBufferLength

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FS_INFORMATION_CLASS	FsInformationClass

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	IoControlCode

_In_ OBJECT_INFORMATION_CLASS	ObjectInformationClass

_In_ OBJECT_INFORMATION_CLASS _In_ ULONG	ObjectInformationLength

_In_ OBJECT_INFORMATION_CLASS _In_ ULONG _Out_opt_ PULONG	ReturnLength

_In_opt_ HANDLE	EventHandle

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	NotifyFilter

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	WatchSubtree

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG	BufferLength

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_ BOOLEAN	Asynchronous

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE	EventType

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE _In_ BOOLEAN	InitialState

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS _In_ BOOLEAN _In_opt_ PUNICODE_STRING	FileName

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	FsControlCode

_In_ HANDLE	SourceHandle

_In_ HANDLE _In_opt_ HANDLE	TargetProcessHandle

_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE	TargetHandle

_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG	HandleAttributes

_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG _In_ ULONG	Options

_Inout_ _Inout_ PSIZE_T	RegionSize

_Inout_ _Inout_ PSIZE_T _In_ ULONG	FreeType

_In_ BOOLEAN	Alertable

_In_ BOOLEAN _In_opt_ PLARGE_INTEGER	Timeout

_In_ TOKEN_INFORMATION_CLASS	TokenInformationClass

_In_ SECURITY_INFORMATION	SecurityInformation

_In_ SECURITY_INFORMATION _In_ PSECURITY_DESCRIPTOR	SecurityDescriptor

_In_ ACCESS_MASK _In_ ULONG _Out_ PHANDLE	TokenHandle

_In_ ACCESS_MASK _In_ BOOLEAN	OpenAsSelf

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _In_ HANDLE	TransactionHandle

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING	LogFileName

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ ULONG _In_opt_ ULONG	CommitStrength

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ LPGUID	TmIdentity

_In_opt_ PLARGE_INTEGER	TmVirtualClock

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS	TransactionManagerInformationClass

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ ULONG	TransactionManagerInformationLength

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ PVOID	TransactionManagerInformation

_In_ KTMOBJECT_TYPE	QueryType

_In_ KTMOBJECT_TYPE _In_ ULONG	ObjectCursorLength

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID	Uow

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE	TmHandle

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG	IsolationLevel

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG	IsolationFlags

_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG _In_opt_ PLARGE_INTEGER _In_opt_ PUNICODE_STRING	Description

_In_ TRANSACTION_INFORMATION_CLASS	TransactionInformationClass

_In_ TRANSACTION_INFORMATION_CLASS _In_ ULONG	TransactionInformationLength

_In_ TRANSACTION_INFORMATION_CLASS _In_ PVOID	TransactionInformation

_In_ BOOLEAN	Wait

_In_ ACCESS_MASK _In_ HANDLE _In_opt_ LPGUID	ResourceManagerGuid

_Out_ PTRANSACTION_NOTIFICATION	TransactionNotification

_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG	NotificationLength

_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG _In_ PLARGE_INTEGER _Out_opt_ PULONG _In_ ULONG _In_opt_ ULONG_PTR	AsynchronousContext

_In_ RESOURCEMANAGER_INFORMATION_CLASS	ResourceManagerInformationClass

_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_ ULONG	ResourceManagerInformationLength

_In_ ACCESS_MASK _In_ HANDLE	ResourceManagerHandle

_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK	NotificationMask

_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK _In_opt_ PVOID	EnlistmentKey

_In_ ACCESS_MASK _In_ HANDLE	RmHandle

_In_ ACCESS_MASK _In_ HANDLE _In_ LPGUID	EnlistmentGuid

_In_ ENLISTMENT_INFORMATION_CLASS	EnlistmentInformationClass

_In_ ENLISTMENT_INFORMATION_CLASS _In_ ULONG	EnlistmentInformationLength

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN	FailImmediately

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ BOOLEAN	ExclusiveLock

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG	SidListLength

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PSID	StartSid

_In_ PUNICODE_STRING	NewName

_In_ _In_ ULONG	KeySetInformationLength

_In_ TIMER_SET_INFORMATION_CLASS	TimerSetInformationClass

_In_ TIMER_SET_INFORMATION_CLASS _In_ ULONG	TimerSetInformationLength

_In_ TOKEN_INFORMATION_CLASS _In_ ULONG	TokenInformationLength

Macro Definition Documentation

◆ NtCurrentProcess

#define NtCurrentProcess ( ) ( (HANDLE)(LONG_PTR) -1 )

◆ NtCurrentThread

#define NtCurrentThread ( ) ( (HANDLE)(LONG_PTR) -2 )

◆ ZwCurrentProcess

#define ZwCurrentProcess ( ) NtCurrentProcess()

◆ ZwCurrentThread

#define ZwCurrentThread ( ) NtCurrentThread()

Function Documentation

◆ $endif() [1/3]

$endif ( _NTDDK_ )

Definition at line 559 of file iofuncs.h.

{
    PriorityInfo->Size = sizeof(IO_PRIORITY_INFO);
    PriorityInfo->ThreadPriority = 0xffff;
    PriorityInfo->IoPriority = IoPriorityNormal;
    PriorityInfo->PagePriority = 0;
}

◆ $endif() [2/3]

$endif ( _NTIFS_ )

Definition at line 396 of file rtlfuncs.h.

{
  LARGE_INTEGER ret;
  ret.QuadPart = SignedInteger;
  return ret;
}

◆ $endif() [3/3]

$endif ( _WDMDDK_ )

Definition at line 85 of file ke.h.

{
    ULONGLONG Low;
    LONGLONG High;
} NEON128, *PNEON128;

◆ $if()

$if ( _WDMDDK_ )

Kernel definitions for AMD64

Kernel definitions for ARM

Kernel definitions for ARM64

Kernel definitions for AMD64

Kernel definitions for ARM

Kernel definitions for x86

Definition at line 1 of file ke.h.

{
    ULONG Dummy;
} KFLOATING_SAVE, *PKFLOATING_SAVE;

◆ __drv_allocatesMem()

__drv_allocatesMem ( TimerObject )

◆ __drv_freesMem()

_Inout_ __drv_freesMem ( Mem )

Definition at line 913 of file exfuncs.h.

{
  Lookaside->L.TotalFrees++;
#ifdef NONAMELESSUNION
  if (ExQueryDepthSList(&Lookaside->L.u.ListHead) >= Lookaside->L.Depth) {
    Lookaside->L.u3.FreeMisses++;
    (Lookaside->L.u5.Free)(Entry);
  } else {
#if defined(_WIN2K_COMPAT_SLIST_USAGE) && defined(_X86_)
      ExInterlockedPushEntrySList(&Lookaside->L.u.ListHead,
                                  (PSLIST_ENTRY)Entry,
                                  &Lookaside->Lock__ObsoleteButDoNotDelete);
#else
      InterlockedPushEntrySList(&Lookaside->L.u.ListHead, (PSLIST_ENTRY)Entry);
#endif
   }
#else /* NONAMELESSUNION */
  if (ExQueryDepthSList(&Lookaside->L.ListHead) >= Lookaside->L.Depth) {
    Lookaside->L.FreeMisses++;
    (Lookaside->L.Free)(Entry);
  } else {
#if defined(_WIN2K_COMPAT_SLIST_USAGE) && defined(_X86_)
      ExInterlockedPushEntrySList(&Lookaside->L.ListHead,
                                  (PSLIST_ENTRY)Entry,
                                  &Lookaside->Lock__ObsoleteButDoNotDelete);
#else
      InterlockedPushEntrySList(&Lookaside->L.ListHead, (PSLIST_ENTRY)Entry);
#endif
   }
#endif /* NONAMELESSUNION */
}

◆ __drv_strictTypeMatch()

__in WDFIOTARGET __in __drv_strictTypeMatch ( __drv_typeConst )

Definition at line 140 of file fxiotargetapi.cpp.

{
    DDI_ENTRY();
 
    PFX_DRIVER_GLOBALS pFxDriverGlobals;
    FxIoTarget* pTarget;
    NTSTATUS status;
 
    FxObjectHandleGetPtrAndGlobals(GetFxDriverGlobals(DriverGlobals),
                                   IoTarget,
                                   FX_TYPE_IO_TARGET,
                                   (PVOID*) &pTarget,
                                   &pFxDriverGlobals);
 
    if (Action == WdfIoTargetPurgeIoUndefined ||
        Action > WdfIoTargetPurgeIo) {
        DoTraceLevelMessage(pFxDriverGlobals, TRACE_LEVEL_ERROR, TRACINGIOTARGET,
                            "Action %d undefined or out of range", Action);
        return;
    }
 
    if (Action == WdfIoTargetPurgeIoAndWait) {
        status = FxVerifierCheckIrqlLevel(pFxDriverGlobals, PASSIVE_LEVEL);
        if (!NT_SUCCESS(status)) {
            return;
        }
    }
 
    pTarget->Purge(Action);
}

◆ _In_reads_bytes_() [1/6]

_In_ ENLISTMENT_INFORMATION_CLASS _In_reads_bytes_ ( EnlistmentInformationLength )

◆ _In_reads_bytes_() [2/6]

_In_ _In_reads_bytes_ ( KeySetInformationLength )

◆ _In_reads_bytes_() [3/6]

_Out_ PIO_STATUS_BLOCK _In_reads_bytes_ ( Length )

◆ _In_reads_bytes_() [4/6]

_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_reads_bytes_ ( ResourceManagerInformationLength )

◆ _In_reads_bytes_() [5/6]

_In_ THREADINFOCLASS _In_reads_bytes_ ( ThreadInformationLength )

◆ _In_reads_bytes_() [6/6]

_In_ TOKEN_INFORMATION_CLASS _In_reads_bytes_ ( TokenInformationLength )

◆ _In_reads_bytes_opt_() [1/5]

_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG _In_reads_bytes_opt_ ( DataSize )

◆ _In_reads_bytes_opt_() [2/5]

_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_reads_bytes_opt_ ( EaLength )

◆ _In_reads_bytes_opt_() [3/5]

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_reads_bytes_opt_ ( EaListLength )

◆ _In_reads_bytes_opt_() [4/5]

_In_reads_bytes_opt_ ( InputBufferLength )

◆ _In_reads_bytes_opt_() [5/5]

_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_reads_bytes_opt_ ( SidListLength )

◆ _Inout_updates_bytes_()

_In_ KTMOBJECT_TYPE _Inout_updates_bytes_ ( ObjectCursorLength )

◆ _Inout_updates_bytes_opt_()

_In_ TIMER_SET_INFORMATION_CLASS _Inout_updates_bytes_opt_ ( TimerSetInformationLength )

◆ _IRQL_requires_max_() [1/3]

_IRQL_requires_max_ ( APC_LEVEL )

Probes and locks virtual pages in memory for the specified process.

Parameters

[in,out]	MemoryDescriptorList	Memory Descriptor List (MDL) containing the buffer to be probed and locked.
[in]	Process	The process for which the buffer should be probed and locked.
[in]	AccessMode	Access mode for probing the pages. Can be KernelMode or UserMode.
[in]	LockOperation	The type of the probing and locking operation. Can be IoReadAccess, IoWriteAccess or IoModifyAccess.

Returns: Nothing.

See also: MmProbeAndLockPages

Remarks: Must be called at IRQL <= APC_LEVEL

Probes and locks virtual pages in memory for the specified process.

Frees previously reserved amount of memory in system virtual address space.

Parameters

[in]	NumberOfBytes	Size, in bytes, of memory to reserve.
[in]	PoolTag	Pool Tag identifying the buffer. Usually consists from 4 characters in reversed order.

Returns: A pointer to the 1st memory block of the reserved buffer in case of success, NULL otherwise.

Remarks: Must be called at IRQL <= APC_LEVEL

Parameters

[in]	BaseAddress	A pointer to the 1st memory block of the reserved buffer.
[in]	PoolTag	Pool Tag identifying the buffer. Usually consists from 4 characters in reversed order.

Returns: Nothing.

See also: MmAllocateMappingAddress

Remarks: Must be called at IRQL <= APC_LEVEL

Definition at line 37 of file cddata.c.

{
    THREAD_CONTEXT ThreadContext = {0};
    PIRP_CONTEXT IrpContext = NULL;
    BOOLEAN Wait;
 
#ifdef CD_SANITY
    PVOID PreviousTopLevel;
#endif
 
    NTSTATUS Status;
 
#if DBG
 
    KIRQL SaveIrql = KeGetCurrentIrql();
 
#endif
 
    ASSERT_OPTIONAL_IRP( Irp );
 
    UNREFERENCED_PARAMETER( DeviceObject );
 
    FsRtlEnterFileSystem();
 
#ifdef CD_SANITY
    PreviousTopLevel = IoGetTopLevelIrp();
#endif
 
    //
    //  Loop until this request has been completed or posted.
    //
 
    do {
 
        //
        //  Use a try-except to handle the exception cases.
        //
 
        _SEH2_TRY {
 
            //
            //  If the IrpContext is NULL then this is the first pass through
            //  this loop.
            //
 
            if (IrpContext == NULL) {
 
                //
                //  Decide if this request is waitable an allocate the IrpContext.
                //  If the file object in the stack location is NULL then this
                //  is a mount which is always waitable.  Otherwise we look at
                //  the file object flags.
                //
 
                if (IoGetCurrentIrpStackLocation( Irp )->FileObject == NULL) {
 
                    Wait = TRUE;
 
                } else {
 
                    Wait = CanFsdWait( Irp );
                }
 
                IrpContext = CdCreateIrpContext( Irp, Wait );
 
                //
                //  Update the thread context information.
                //
 
                CdSetThreadContext( IrpContext, &ThreadContext );
 
#ifdef CD_SANITY
                NT_ASSERT( !CdTestTopLevel ||
                        SafeNodeType( IrpContext->TopLevel ) == CDFS_NTC_IRP_CONTEXT );
#endif
 
            //
            //  Otherwise cleanup the IrpContext for the retry.
            //
 
            } else {
 
                //
                //  Set the MORE_PROCESSING flag to make sure the IrpContext
                //  isn't inadvertently deleted here.  Then cleanup the
                //  IrpContext to perform the retry.
                //
 
                SetFlag( IrpContext->Flags, IRP_CONTEXT_FLAG_MORE_PROCESSING );
                CdCleanupIrpContext( IrpContext, FALSE );
            }
 
            //
            //  Case on the major irp code.
            //
 
            switch (IrpContext->MajorFunction) {
 
            case IRP_MJ_CREATE :
 
                Status = CdCommonCreate( IrpContext, Irp );
                break;
 
            case IRP_MJ_CLOSE :
 
                Status = CdCommonClose( IrpContext, Irp );
                break;
 
            case IRP_MJ_READ :
 
                //
                //  If this is an Mdl complete request, don't go through
                //  common read.
                //
 
                if (FlagOn( IrpContext->MinorFunction, IRP_MN_COMPLETE )) {
 
                    Status = CdCompleteMdl( IrpContext, Irp );
 
                } else {
 
                    Status = CdCommonRead( IrpContext, Irp );
                }
 
                break;
 
            case IRP_MJ_WRITE :
 
                Status = CdCommonWrite( IrpContext, Irp );
                break;
 
            case IRP_MJ_QUERY_INFORMATION :
 
                Status = CdCommonQueryInfo( IrpContext, Irp );
                break;
 
            case IRP_MJ_SET_INFORMATION :
 
                Status = CdCommonSetInfo( IrpContext, Irp );
                break;
 
            case IRP_MJ_QUERY_VOLUME_INFORMATION :
 
                Status = CdCommonQueryVolInfo( IrpContext, Irp );
                break;
 
            case IRP_MJ_DIRECTORY_CONTROL :
 
                Status = CdCommonDirControl( IrpContext, Irp );
                break;
 
            case IRP_MJ_FILE_SYSTEM_CONTROL :
 
                Status = CdCommonFsControl( IrpContext, Irp );
                break;
 
            case IRP_MJ_DEVICE_CONTROL :
 
                Status = CdCommonDevControl( IrpContext, Irp );
                break;
 
            case IRP_MJ_LOCK_CONTROL :
 
                Status = CdCommonLockControl( IrpContext, Irp );
                break;
 
            case IRP_MJ_CLEANUP :
 
                Status = CdCommonCleanup( IrpContext, Irp );
                break;
 
            case IRP_MJ_PNP :
 
                Status = CdCommonPnp( IrpContext, Irp );
                break;
 
            case IRP_MJ_SHUTDOWN :
 
                Status = CdCommonShutdown( IrpContext, Irp );
                break;
 
            default :
 
                Status = STATUS_INVALID_DEVICE_REQUEST;
                CdCompleteRequest( IrpContext, Irp, Status );
            }
 
        } _SEH2_EXCEPT( CdExceptionFilter( IrpContext, _SEH2_GetExceptionInformation() )) {
 
            Status = CdProcessException( IrpContext, Irp, _SEH2_GetExceptionCode() );
        } _SEH2_END;
 
    } while (Status == STATUS_CANT_WAIT);
 
#ifdef CD_SANITY
    NT_ASSERT( !CdTestTopLevel ||
            (PreviousTopLevel == IoGetTopLevelIrp()) );
#endif
 
    FsRtlExitFileSystem();
 
    NT_ASSERT( SaveIrql == KeGetCurrentIrql( ));
 
    return Status;
}

◆ _IRQL_requires_max_() [2/3]

_IRQL_requires_max_ ( DISPATCH_LEVEL )

Definition at line 347 of file common.c.

{
    NTSTATUS                    status;
    BOOLEAN                     requestSent = FALSE;
 
    BOOLEAN                     shouldRetry = TRUE;
    PCDB                        cdb = (PCDB)DeviceExtension->PowerContext.Srb.Cdb;
    ULONG                       timeoutValue = DeviceExtension->TimeOutValue;
    ULONG                       retryCount = 1;
 
    // reset some fields.
    DeviceExtension->PowerContext.RetryIntervalIn100ns = 0;
    status = PowerContextReuseRequest(DeviceExtension);
    RequestClearSendTime(DeviceExtension->PowerContext.PowerRequest);
 
    if (!NT_SUCCESS(status))
    {
        return status;
    }
 
    // set proper timeout value and max retry count.
    switch(DeviceExtension->PowerContext.PowerChangeState.PowerDown)
    {
    case PowerDownDeviceInitial:
    case PowerDownDeviceQuiesced:
    case PowerDownDeviceStopped:
        break;
 
    case PowerDownDeviceLocked:
        // Case of issuing SYNC CACHE command. Do not use power irp timeout remaining time in this case
        // as we want to give best try on SYNC CACHE command.
        retryCount = MAXIMUM_RETRIES;
        timeoutValue = DeviceExtension->TimeOutValue;
        break;
 
    case PowerDownDeviceFlushed:
    {
        // Case of issuing STOP UNIT command
        // As "Imme" bit is set to '1', this command should be completed in short time.
        // This command is at low importance, failure of this command has very small impact.
        ULONG secondsRemaining = 0;
 
#if (WINVER >= 0x0601)
        // this API is introduced in Windows7
        PoQueryWatchdogTime(DeviceExtension->LowerPdo, &secondsRemaining);
#endif
 
        if (secondsRemaining == 0)
        {
            // not able to retrieve remaining time from PoQueryWatchdogTime API, use default values.
            retryCount = MAXIMUM_RETRIES;
            timeoutValue = SCSI_CDROM_TIMEOUT;
        }
        else
        {
            // plan to leave about 30 seconds to lower level drivers if possible.
            if (secondsRemaining >= 32)
            {
                retryCount = (secondsRemaining - 30)/SCSI_CDROM_TIMEOUT + 1;
                timeoutValue = SCSI_CDROM_TIMEOUT;
 
                if (retryCount > MAXIMUM_RETRIES)
                {
                    retryCount = MAXIMUM_RETRIES;
                }
 
                if (retryCount == 1)
                {
                    timeoutValue = secondsRemaining - 30;
                }
            }
            else
            {
                // issue the command with minimal timeout value and do not retry on it.
                retryCount = 1;
                timeoutValue = 2;
            }
        }
    }
        break;
    default:
        NT_ASSERT( FALSE );
        status = STATUS_NOT_IMPLEMENTED;
        return status;
    }
 
    DeviceExtension->PowerContext.RetryCount = retryCount;
 
    // issue command.
    while (shouldRetry)
    {
 
        // set SRB fields.
        DeviceExtension->PowerContext.Srb.SrbFlags = SRB_FLAGS_NO_DATA_TRANSFER |
                                                     SRB_FLAGS_DISABLE_SYNCH_TRANSFER |
                                                     SRB_FLAGS_NO_QUEUE_FREEZE |
                                                     SRB_FLAGS_BYPASS_LOCKED_QUEUE |
                                                     SRB_FLAGS_D3_PROCESSING;
 
        DeviceExtension->PowerContext.Srb.Function = SRB_FUNCTION_EXECUTE_SCSI;
        DeviceExtension->PowerContext.Srb.TimeOutValue = timeoutValue;
 
        if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceInitial)
        {
            DeviceExtension->PowerContext.Srb.Function = SRB_FUNCTION_LOCK_QUEUE;
        }
        else if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceLocked)
        {
            DeviceExtension->PowerContext.Srb.Function = SRB_FUNCTION_QUIESCE_DEVICE;
        }
        else if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceQuiesced)
        {
            // Case of issuing SYNC CACHE command.
            DeviceExtension->PowerContext.Srb.CdbLength = 10;
            cdb->SYNCHRONIZE_CACHE10.OperationCode = SCSIOP_SYNCHRONIZE_CACHE;
        }
        else if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceFlushed)
        {
            // Case of issuing STOP UNIT command.
            DeviceExtension->PowerContext.Srb.CdbLength = 6;
            cdb->START_STOP.OperationCode = SCSIOP_START_STOP_UNIT;
            cdb->START_STOP.Start = 0;
            cdb->START_STOP.Immediate = 1;
        }
        else if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceStopped)
        {
            DeviceExtension->PowerContext.Srb.Function = SRB_FUNCTION_UNLOCK_QUEUE;
        }
 
        // Set up completion routine and context if requested
        if (CompletionRoutine)
        {
            WdfRequestSetCompletionRoutine(DeviceExtension->PowerContext.PowerRequest,
                                           CompletionRoutine,
                                           Context);
        }
 
        status = RequestSend(DeviceExtension,
                             DeviceExtension->PowerContext.PowerRequest,
                             DeviceExtension->IoTarget,
                             CompletionRoutine ? 0 : WDF_REQUEST_SEND_OPTION_SYNCHRONOUS,
                             &requestSent);
 
        if (requestSent)
        {
            if ((CompletionRoutine == NULL) &&
                (SRB_STATUS(DeviceExtension->PowerContext.Srb.SrbStatus) != SRB_STATUS_SUCCESS))
            {
                TracePrint((TRACE_LEVEL_ERROR,
                            TRACE_FLAG_POWER,
                            "%p\tError occured when issuing %s command to device. Srb %p, Status %x\n",
                            DeviceExtension->PowerContext.PowerRequest,
                            (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceQuiesced) ? "SYNC CACHE" : "STOP UNIT",
                            &DeviceExtension->PowerContext.Srb,
                            DeviceExtension->PowerContext.Srb.SrbStatus));
 
                NT_ASSERT(!(TEST_FLAG(DeviceExtension->PowerContext.Srb.SrbStatus, SRB_STATUS_QUEUE_FROZEN)));
 
                shouldRetry = RequestSenseInfoInterpret(DeviceExtension,
                                                        DeviceExtension->PowerContext.PowerRequest,
                                                        &(DeviceExtension->PowerContext.Srb),
                                                        retryCount - DeviceExtension->PowerContext.RetryCount,
                                                        &status,
                                                        &(DeviceExtension->PowerContext.RetryIntervalIn100ns));
 
                if (shouldRetry && (DeviceExtension->PowerContext.RetryCount-- == 0))
                {
                    shouldRetry = FALSE;
                }
            }
            else
            {
                // succeeded, do not need to retry.
                shouldRetry = FALSE;
            }
 
        }
        else
        {
            // request failed to be sent
            shouldRetry = FALSE;
        }
 
        if (shouldRetry)
        {
            LARGE_INTEGER t;
            t.QuadPart = -DeviceExtension->PowerContext.RetryIntervalIn100ns;
            KeDelayExecutionThread(KernelMode, FALSE, &t);
 
            status = PowerContextReuseRequest(DeviceExtension);
            if (!NT_SUCCESS(status))
            {
                shouldRetry = FALSE;
            }
        }
    }
 
    if (DeviceExtension->PowerContext.PowerChangeState.PowerDown == PowerDownDeviceQuiesced)
    {
        // record SYNC CACHE command completion time stamp.
        KeQueryTickCount(&DeviceExtension->PowerContext.Step1CompleteTime);
    }
 
    return status;
}

◆ _IRQL_requires_max_() [3/3]

_IRQL_requires_max_ ( PASSIVE_LEVEL )

Queries information details about a security descriptor.

Computes the quota size of a security descriptor.

Assigns a security descriptor for a new object.

An extended function that assigns a security descriptor for a new object.

Frees a security descriptor.

An extended function that sets new information data to a security descriptor.

Modifies some information data about a security descriptor.

Parameters

[in]	SecurityInformation	Security information details to be queried from a security descriptor.
[out]	SecurityDescriptor	The returned security descriptor with security information data.
[in,out]	Length	The returned length of a security descriptor.
[in,out]	ObjectsSecurityDescriptor	The returned object security descriptor.

Returns: Returns STATUS_SUCCESS if the operations have been completed successfully and that the specific information about the security descriptor has been queried. STATUS_BUFFER_TOO_SMALL is returned if the buffer size is too small to contain the queried info about the security descriptor.

Parameters

[in]	Object	If specified, the function will use this arbitrary object that points to an object security descriptor.
[in]	SecurityInformation	Security information details to be set.
[in]	SecurityDescriptor	A security descriptor where its info is to be changed.
[in,out]	ObjectsSecurityDescriptor	The returned pointer to security descriptor objects.
[in]	PoolType	Pool type for the new security descriptor to allocate.
[in]	GenericMapping	The generic mapping of access rights masks.

Returns: See SeSetSecurityDescriptorInfoEx.

Parameters

[in]	Object	If specified, the function will use this arbitrary object that points to an object security descriptor.
[in]	SecurityInformation	Security information details to be set.
[in]	SecurityDescriptor	A security descriptor where its info is to be changed.
[in,out]	ObjectsSecurityDescriptor	The returned pointer to security descriptor objects.
[in]	AutoInheritFlags	Flags bitmask inheritation, influencing how the security descriptor can be inherited and if it can be in the first place.
[in]	PoolType	Pool type for the new security descriptor to allocate.
[in]	GenericMapping	The generic mapping of access rights masks.

Returns: Returns STATUS_SUCCESS if the operations have been completed without problems and that new info has been set to the security descriptor. STATUS_NO_SECURITY_ON_OBJECT is returned if the object does not have a security descriptor. STATUS_INSUFFICIENT_RESOURCES is returned if memory pool allocation for the new security descriptor with new info set has failed.

Parameters

[in] SecurityDescriptor A security descriptor to be freed from memory.

Returns: Returns STATUS_SUCCESS.

Parameters

[in]	_ParentDescriptor	A security descriptor of the parent object that is being created.
[in]	_ExplicitDescriptor	An explicit security descriptor that is applied to a new object.
[out]	NewDescriptor	The new allocated security descriptor.
[in]	ObjectType	The type of the new object.
[in]	IsDirectoryObject	Set this to TRUE if the newly created object is a directory object, otherwise set this to FALSE.
[in]	AutoInheritFlags	Automatic inheritance flags that influence how access control entries within ACLs from security descriptors are inherited.
[in]	SubjectContext	Security subject context of the new object.
[in]	GenericMapping	Generic mapping of access mask rights.
[in]	PoolType	This parameter is unused.

Returns: Returns STATUS_SUCCESS if the operations have been completed successfully and that the security descriptor has been assigned to the new object. STATUS_NO_TOKEN is returned if the caller hasn't supplied a valid argument to a security subject context. STATUS_INVALID_OWNER is returned if the caller hasn't supplied a parent descriptor that belongs to the main user (owner). STATUS_INVALID_PRIMARY_GROUP is returned by the same reason as with the previous NTSTATUS code. The two NTSTATUS codes are returned if the calling thread stated that the owner and/or group is defaulted to the parent descriptor (SEF_DEFAULT_OWNER_FROM_PARENT and/or SEF_DEFAULT_GROUP_FROM_PARENT respectively). STATUS_INSUFFICIENT_RESOURCES is returned if memory pool allocation for the descriptor buffer has failed. A failure NTSTATUS is returned otherwise.

Parameters

[in]	ParentDescriptor	A security descriptor of the parent object that is being created.
[in]	ExplicitDescriptor	An explicit security descriptor that is applied to a new object.
[out]	NewDescriptor	The new allocated security descriptor.
[in]	IsDirectoryObject	Set this to TRUE if the newly created object is a directory object, otherwise set this to FALSE.
[in]	SubjectContext	Security subject context of the new object.
[in]	GenericMapping	Generic mapping of access mask rights.
[in]	PoolType	This parameter is unused.

Returns: See SeAssignSecurityEx.

Parameters

[in]	SecurityDescriptor	A security descriptor.
[out]	QuotaInfoSize	The returned quota size of the given security descriptor to the caller. The function may return 0 to this parameter if the descriptor doesn't have a group or a discretionary access control list (DACL) even.

Returns: Returns STATUS_SUCCESS if the quota size of a security descriptor has been computed successfully. STATUS_UNKNOWN_REVISION is returned if the security descriptor has an invalid revision.

Definition at line 923 of file Messaging.c.

{
    PFLT_SERVER_PORT_OBJECT PortObject;
    NTSTATUS Status;
 
    /* The caller must allow at least one connection */
    if (MaxConnections == 0)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /* The request must be for a kernel handle */
    if (!(ObjectAttributes->Attributes & OBJ_KERNEL_HANDLE))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /*
     * Get rundown protection on the target to stop the owner
     * from unloading whilst this port object is open. It gets
     * removed in the FltpServerPortClose callback
     */
    Status = FltObjectReference(Filter);
    if (!NT_SUCCESS(Status))
    {
        return Status;
    }
 
    /* Create the server port object for this filter */
    Status = ObCreateObject(KernelMode,
                            ServerPortObjectType,
                            ObjectAttributes,
                            KernelMode,
                            NULL,
                            sizeof(FLT_SERVER_PORT_OBJECT),
                            0,
                            0,
                            (PVOID *)&PortObject);
    if (NT_SUCCESS(Status))
    {
        /* Zero out the struct */
        RtlZeroMemory(PortObject, sizeof(FLT_SERVER_PORT_OBJECT));
 
        /* Increment the ref count on the target filter */
        FltpObjectPointerReference((PFLT_OBJECT)Filter);
 
        /* Setup the filter port object */
        PortObject->Filter = Filter;
        PortObject->ConnectNotify = ConnectNotifyCallback;
        PortObject->DisconnectNotify = DisconnectNotifyCallback;
        PortObject->MessageNotify = MessageNotifyCallback;
        PortObject->Cookie = ServerPortCookie;
        PortObject->MaxConnections = MaxConnections;
 
        /* Insert the object */
        Status = ObInsertObject(PortObject,
                                NULL,
                                STANDARD_RIGHTS_ALL | FILE_READ_DATA,
                                0,
                                NULL,
                                (PHANDLE)ServerPort);
        if (NT_SUCCESS(Status))
        {
            /* Lock the connection list */
            ExAcquireFastMutex(&Filter->ConnectionList.mLock);
 
            /* Add the new port object to the connection list and increment the count */
            InsertTailList(&Filter->ConnectionList.mList, &PortObject->FilterLink);
            Filter->ConnectionList.mCount++;
 
            /* Unlock the connection list*/
            ExReleaseFastMutex(&Filter->ConnectionList.mLock);
        }
    }
 
    if (!NT_SUCCESS(Status))
    {
        /* Allow the filter to be cleaned up */
        FltObjectDereference(Filter);
    }
 
    return Status;
}

◆ _Out_writes_bytes_() [1/5]

_In_ ENLISTMENT_INFORMATION_CLASS _Out_writes_bytes_ ( EnlistmentInformationLength )

◆ _Out_writes_bytes_() [2/5]

_Out_ PIO_STATUS_BLOCK _Out_writes_bytes_ ( Length )

◆ _Out_writes_bytes_() [3/5]

_In_ RESOURCEMANAGER_INFORMATION_CLASS _Out_writes_bytes_ ( ResourceManagerInformationLength )

◆ _Out_writes_bytes_() [4/5]

_In_ TRANSACTION_INFORMATION_CLASS _Out_writes_bytes_ ( TransactionInformationLength )

◆ _Out_writes_bytes_() [5/5]

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _Out_writes_bytes_ ( TransactionManagerInformationLength )

◆ _Out_writes_bytes_opt_() [1/4]

_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _Out_writes_bytes_opt_ ( BufferLength )

◆ _Out_writes_bytes_opt_() [2/4]

_In_ ULONG _In_ KEY_INFORMATION_CLASS _Out_writes_bytes_opt_ ( Length )

◆ _Out_writes_bytes_opt_() [3/4]

_In_ OBJECT_INFORMATION_CLASS _Out_writes_bytes_opt_ ( ObjectInformationLength )

◆ _Out_writes_bytes_opt_() [4/4]

_In_ ULONG _Out_writes_bytes_opt_ ( OutputBufferLength )

◆ _Out_writes_bytes_to_()

_In_ SECURITY_INFORMATION _Out_writes_bytes_to_	(	Length	,
		*	ResultLength
	)

◆ _Out_writes_bytes_to_opt_()

_In_ TOKEN_INFORMATION_CLASS _Out_writes_bytes_to_opt_	(	Length	,
		*	ResultLength
	)

◆ _Post_satisfies_() [1/2]

_Post_satisfies_ ( )

◆ _Post_satisfies_() [2/2]

_Post_satisfies_ ( return<= 0 )

◆ _When_()

_When_	(	Timeout	= `= NULL`,
		_IRQL_requires_max_(APC_LEVEL)
	)		-> QuadPart !

pure virtual

◆ BaseAddress()

_Must_inspect_result_ _At_ * BaseAddress ( Mem )

◆ ZwAccessCheckAndAuditAlarm()

NTSYSAPI NTSTATUS NTAPI ZwAccessCheckAndAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_ PVOID	HandleId,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_In_ BOOLEAN	ObjectCreation,
		_Out_ PACCESS_MASK	GrantedAccess,
		_Out_ PBOOLEAN	AccessStatus,
		_Out_ PBOOLEAN	GenerateOnClose
	)

◆ ZwAlertThread()

NTSYSAPI NTSTATUS NTAPI ZwAlertThread ( _In_ HANDLE ThreadHandle )

◆ ZwClearEvent()

NTSYSAPI NTSTATUS NTAPI ZwClearEvent ( _In_ HANDLE EventHandle )

◆ ZwCloseObjectAuditAlarm()

NTSYSAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_ PVOID	HandleId,
		_In_ BOOLEAN	GenerateOnClose
	)

◆ ZwCreateSymbolicLinkObject()

NTSYSAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject	(	_Out_ PHANDLE	SymbolicLinkHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PUNICODE_STRING	TargetName
	)

◆ ZwFlushBuffersFile()

NTSYSAPI NTSTATUS NTAPI ZwFlushBuffersFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

Referenced by CmpFileFlush(), PopFlushVolumeWorker(), and RtlUnlockBootStatusData().

◆ ZwFlushInstructionCache()

NTSYSAPI NTSTATUS NTAPI ZwFlushInstructionCache	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress,
		_In_ ULONG	FlushSize
	)

◆ ZwLoadKey()

NTSYSAPI NTSTATUS NTAPI ZwLoadKey	(	_In_ POBJECT_ATTRIBUTES	KeyObjectAttributes,
		_In_ POBJECT_ATTRIBUTES	FileObjectAttributes
	)

◆ ZwNotifyChangeMultipleKeys()

NTSYSAPI NTSTATUS NTAPI ZwNotifyChangeMultipleKeys	(	_In_ HANDLE	MasterKeyHandle,
		_In_opt_ ULONG	Count,
		_In_opt_ OBJECT_ATTRIBUTES	SubordinateObjects[],
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	CompletionFilter,
		_In_ BOOLEAN	WatchTree,
		_Out_opt_ PVOID	Buffer,
		_In_ ULONG	BufferSize,
		_In_ BOOLEAN	Asynchronous
	)

◆ ZwOpenProcessToken()

NTSYSAPI NTSTATUS NTAPI ZwOpenProcessToken	(	_In_ HANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_Out_ PHANDLE	TokenHandle
	)

Referenced by IntGetCurrentAccessToken(), main(), RtlAcquirePrivilege(), RtlAdjustPrivilege(), RtlImpersonateSelf(), and RtlpSysVolTakeOwnership().

◆ ZwOpenThread()

NTSYSAPI NTSTATUS NTAPI ZwOpenThread	(	_Out_ PHANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PCLIENT_ID	ClientId
	)

◆ ZwOpenThreadToken()

NTSYSAPI NTSTATUS NTAPI ZwOpenThreadToken	(	_In_ HANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ BOOLEAN	OpenAsSelf,
		_Out_ PHANDLE	TokenHandle
	)

◆ ZwPulseEvent()

NTSYSAPI NTSTATUS NTAPI ZwPulseEvent	(	_In_ HANDLE	EventHandle,
		_In_opt_ PLONG	PulseCount
	)

◆ ZwQueryDefaultLocale()

NTSYSAPI NTSTATUS NTAPI ZwQueryDefaultLocale	(	_In_ BOOLEAN	UserProfile,
		_Out_ PLCID	DefaultLocaleId
	)

◆ ZwQueryMultipleValueKey()

NTSYSAPI NTSTATUS NTAPI ZwQueryMultipleValueKey	(	_In_ HANDLE	KeyHandle,
		_Inout_ PKEY_VALUE_ENTRY	ValueEntries,
		_In_ ULONG	EntryCount,
		_Out_ PVOID	ValueBuffer,
		_Inout_ PULONG	BufferLength,
		_Out_opt_ PULONG	RequiredBufferLength
	)

◆ ZwReplaceKey()

NTSYSAPI NTSTATUS NTAPI ZwReplaceKey	(	_In_ POBJECT_ATTRIBUTES	NewFileObjectAttributes,
		_In_ HANDLE	KeyHandle,
		_In_ POBJECT_ATTRIBUTES	OldFileObjectAttributes
	)

◆ ZwResetEvent()

NTSYSAPI NTSTATUS NTAPI ZwResetEvent	(	_In_ HANDLE	EventHandle,
		_Out_opt_ PLONG	NumberOfWaitingThreads
	)

◆ ZwRollbackComplete()

NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackComplete	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

◆ ZwSaveKey()

NTSYSAPI NTSTATUS NTAPI ZwSaveKey	(	_In_ HANDLE	KeyHandle,
		_In_ HANDLE	FileHandle
	)

◆ ZwSetDefaultLocale()

NTSYSAPI NTSTATUS NTAPI ZwSetDefaultLocale	(	_In_ BOOLEAN	UserProfile,
		_In_ LCID	DefaultLocaleId
	)

◆ ZwSetInformationProcess()

NTSYSAPI NTSTATUS NTAPI ZwSetInformationProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ PROCESSINFOCLASS	ProcessInformationClass,
		_In_ PVOID	ProcessInformation,
		_In_ ULONG	ProcessInformationLength
	)

◆ ZwSetSystemTime()

NTSYSAPI NTSTATUS NTAPI ZwSetSystemTime	(	_In_ PLARGE_INTEGER	NewTime,
		_Out_opt_ PLARGE_INTEGER	OldTime
	)

◆ ZwSinglePhaseReject()

NTSYSCALLAPI NTSTATUS NTAPI ZwSinglePhaseReject	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

◆ ZwUnloadKey()

NTSYSAPI NTSTATUS NTAPI ZwUnloadKey ( _In_ POBJECT_ATTRIBUTES KeyObjectAttributes )

◆ ZwWaitForMultipleObjects()

NTSYSAPI NTSTATUS NTAPI ZwWaitForMultipleObjects	(	_In_ ULONG	HandleCount,
		_In_ PHANDLE	Handles,
		_In_ WAIT_TYPE	WaitType,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)