misc.c File Reference

#include <ntoskrnl.h>
#include <debug.h>

Include dependency graph for misc.c:

Go to the source code of this file.

Macros
#define	NDEBUG
#define	PRODUCT_TAG   'iPtR'

Functions
ULONG NTAPI	RtlGetNtGlobalFlags (VOID)
NTSTATUS NTAPI	RtlGetVersion (IN OUT PRTL_OSVERSIONINFOW lpVersionInformation)
BOOLEAN NTAPI	RtlGetNtProductType (OUT PNT_PRODUCT_TYPE ProductType)
	Retrieves the NT type product of the operating system. This is the kernel-mode variant of this function. More...
VOID FASTCALL	RtlPrefetchMemoryNonTemporal (IN PVOID Source, IN SIZE_T Length)

Variables
ULONG	NtGlobalFlag
ULONG	NtMajorVersion
ULONG	NtMinorVersion
ULONG	NtOSCSDVersion

Macro Definition Documentation

NDEBUG

#define NDEBUG

Definition at line 13 of file misc.c.

PRODUCT_TAG

#define PRODUCT_TAG   'iPtR'

Definition at line 22 of file misc.c.

Function Documentation

RtlGetNtGlobalFlags()

ULONG NTAPI RtlGetNtGlobalFlags

(

VOID

)

Definition at line 31 of file misc.c.

{
    return NtGlobalFlag;
}

RtlGetNtProductType()

BOOLEAN NTAPI RtlGetNtProductType

(

OUT PNT_PRODUCT_TYPE

ProductType

)

Retrieves the NT type product of the operating system. This is the kernel-mode variant of this function.

Parameters

[out]

ProductType

The NT type product enumeration value returned by the call.

Returns

The function returns TRUE when the call successfully returned the type product of the system. It'll return FALSE on failure otherwise. In the latter case the function will return WinNT as the default product type.

Remarks

The call expects to be called at PASSIVE_LEVEL. The function firstly checks if the product type is actually valid by checking the "ProductTypeIsValid" member of _KUSER_SHARED_DATA structure. Currently we do not implement code that is responsible for the management of this member, yet.

Definition at line 87 of file misc.c.

{
    HANDLE Key;
    BOOLEAN Success;
    ULONG ReturnedLength;
    OBJECT_ATTRIBUTES ObjectAttributes;
    NTSTATUS Status;
    PKEY_VALUE_PARTIAL_INFORMATION BufferKey;
    ULONG BufferKeyLength = sizeof(PKEY_VALUE_PARTIAL_INFORMATION) + (256 * sizeof(WCHAR));
    UNICODE_STRING NtProductType;
    static UNICODE_STRING WorkstationProduct = RTL_CONSTANT_STRING(L"WinNT");
    static UNICODE_STRING LanManProduct = RTL_CONSTANT_STRING(L"LanmanNT");
    static UNICODE_STRING ServerProduct = RTL_CONSTANT_STRING(L"ServerNT");
    static UNICODE_STRING KeyProduct = RTL_CONSTANT_STRING(L"\\Registry\\Machine\\SYSTEM\\CurrentControlSet\\Control\\ProductOptions");
    static UNICODE_STRING ValueNtProduct = RTL_CONSTANT_STRING(L"ProductType");

    PAGED_CODE();

    /* Before doing anything else we must allocate some buffer space in the pool */
    BufferKey = ExAllocatePoolWithTag(PagedPool, BufferKeyLength, PRODUCT_TAG);
    if (!BufferKey)
    {
        /* We failed to allocate pool memory, bail out */
        DPRINT1("RtlGetNtProductType(): Memory pool allocation has failed!\n");
        Success = FALSE;
        goto Exit;
    }

    /* Initialize the object attributes to open our key */
    InitializeObjectAttributes(&ObjectAttributes,
                               &KeyProduct,
                               OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE,
                               NULL,
                               NULL);

    /* Open the key */
    Status = ZwOpenKey(&Key, KEY_QUERY_VALUE, &ObjectAttributes);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("RtlGetNtProductType(): The ZwOpenKey() function has failed! (Status: 0x%lx)\n", Status);
        Success = FALSE;
        goto Exit;
    }

    /* Now it's time to query the value from the key to check what kind of product the OS is */
    Status = ZwQueryValueKey(Key,
                             &ValueNtProduct,
                             KeyValuePartialInformation,
                             BufferKey,
                             BufferKeyLength,
                             &ReturnedLength);

    /* Free the key from the memory */
    ZwClose(Key);

    if (!NT_SUCCESS(Status))
    {
        DPRINT1("RtlGetNtProductType(): The ZwQueryValueKey() function has failed! (Status: 0x%lx)\n", Status);
        Success = FALSE;
        goto Exit;
    }

    /*
     * Do a sanity check before we get the product type of the operating system
     * so that we're sure the type of the value we've got is actually correct.
     */
    if (BufferKey->Type != REG_SZ)
    {
        /* We've got something else, so bail out */
        DPRINT1("RtlGetNtProductType(): An invalid value type has been found!\n");
        Success = FALSE;
        goto Exit;
    }

    /* Initialise the Unicode string with the data from the registry value */
    NtProductType.Length = NtProductType.MaximumLength = BufferKey->DataLength;
    NtProductType.Buffer = (PWCHAR)BufferKey->Data;

    if (NtProductType.Length > sizeof(WCHAR) && NtProductType.Buffer[NtProductType.Length /
        sizeof(WCHAR) - 1] == UNICODE_NULL)
    {
        NtProductType.Length -= sizeof(WCHAR);
    }

    /* Now it's time to get the product based on the value data */
    if (RtlCompareUnicodeString(&NtProductType, &WorkstationProduct, TRUE) == 0)
    {
        /* The following product is an OS Workstation */
        *ProductType = NtProductWinNt;
        Success = TRUE;
    }
    else if (RtlCompareUnicodeString(&NtProductType, &LanManProduct, TRUE) == 0)
    {
        /* The following product is an OS Advanced Server */
        *ProductType = NtProductLanManNt;
        Success = TRUE;
    }
    else if (RtlCompareUnicodeString(&NtProductType, &ServerProduct, TRUE) == 0)
    {
        /* The following product is an OS Server */
        *ProductType = NtProductServer;
        Success = TRUE;
    }
    else
    {
        /* None of the product types match so bail out */
        DPRINT1("RtlGetNtProductType(): Couldn't find a valid product type! Defaulting to WinNT...\n");
        Success = FALSE;
        goto Exit;
    }

Exit:
    if (!Success)
    {
        *ProductType = NtProductWinNt;
    }

    ExFreePoolWithTag(BufferKey, PRODUCT_TAG);
    return Success;
}

RtlGetVersion()

NTSTATUS NTAPI RtlGetVersion

(

IN OUT PRTL_OSVERSIONINFOW

lpVersionInformation

)

Definition at line 41 of file misc.c.

{
    PAGED_CODE();

    /* Return the basics */
    lpVersionInformation->dwMajorVersion = NtMajorVersion;
    lpVersionInformation->dwMinorVersion = NtMinorVersion;
    lpVersionInformation->dwBuildNumber = NtBuildNumber & 0x3FFF;
    lpVersionInformation->dwPlatformId = VER_PLATFORM_WIN32_NT;

    /* Check if this is the extended version */
    if (lpVersionInformation->dwOSVersionInfoSize == sizeof(RTL_OSVERSIONINFOEXW))
    {
        PRTL_OSVERSIONINFOEXW InfoEx = (PRTL_OSVERSIONINFOEXW)lpVersionInformation;
        InfoEx->wServicePackMajor = (USHORT)(CmNtCSDVersion >> 8) & 0xFF;
        InfoEx->wServicePackMinor = (USHORT)(CmNtCSDVersion & 0xFF);
        InfoEx->wSuiteMask = (USHORT)(SharedUserData->SuiteMask & 0xFFFF);
        InfoEx->wProductType = SharedUserData->NtProductType;
        InfoEx->wReserved = 0;
    }

    /* Always succeed */
    return STATUS_SUCCESS;
}

RtlPrefetchMemoryNonTemporal()

VOID FASTCALL RtlPrefetchMemoryNonTemporal	(	IN PVOID	Source,
		IN SIZE_T	Length
	)

Definition at line 214 of file misc.c.

{
    //
    // Do nothing
    //
    UNREFERENCED_PARAMETER(Source);
    UNREFERENCED_PARAMETER(Length);
}

Referenced by KiInitMachineDependent(), and START_TEST().

Variable Documentation

NtGlobalFlag

ULONG NtGlobalFlag

Definition at line 52 of file init.c.

Referenced by AVrfDllLoadNotification(), AVrfDllUnloadNotification(), ExpInitializeExecutive(), KdpReport(), MiLoadImageSection(), MmCreatePeb(), MmLoadSystemImage(), ObReferenceFileObjectForWrite(), QSI_DEF(), RtlGetNtGlobalFlags(), RtlSetProcessIsCritical(), RtlSetThreadIsCritical(), SSI_DEF(), and STRUCT().

NtMajorVersion

ULONG NtMajorVersion

Definition at line 43 of file init.c.

Referenced by ExpInitializeExecutive(), MmCreatePeb(), PsGetVersion(), and RtlGetVersion().

NtMinorVersion

ULONG NtMinorVersion

Definition at line 44 of file init.c.

Referenced by ExpInitializeExecutive(), MmCreatePeb(), PsGetVersion(), and RtlGetVersion().

NtOSCSDVersion

ULONG NtOSCSDVersion