ReactOS  r75214
fltkernel.h
Go to the documentation of this file.
1 /*
2  * fltkernel.h
3  *
4  * This file is part of the ReactOS DDK package.
5  *
6  * Contributors:
7  * Amine Khaldi (amine.khaldi@reactos.org)
8  *
9  * THIS SOFTWARE IS NOT COPYRIGHTED
10  *
11  * This source code is offered for use in the public domain. You may
12  * use, modify or distribute it freely.
13  *
14  * This code is distributed in the hope that it will be useful but
15  * WITHOUT ANY WARRANTY. ALL WARRANTIES, EXPRESS OR IMPLIED ARE HEREBY
16  * DISCLAIMED. This includes but is not limited to warranties of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
18  *
19  */
20 #pragma once
21 
22 #ifndef __FLTKERNEL__
23 #define __FLTKERNEL__
24 
25 #ifdef __cplusplus
26 extern "C" {
27 #endif
28 
29 #define FLT_MGR_BASELINE (((OSVER(NTDDI_VERSION) == NTDDI_WIN2K) && (SPVER(NTDDI_VERSION) >= SPVER(NTDDI_WIN2KSP4))) || \
30  ((OSVER(NTDDI_VERSION) == NTDDI_WINXP) && (SPVER(NTDDI_VERSION) >= SPVER(NTDDI_WINXPSP2))) || \
31  ((OSVER(NTDDI_VERSION) == NTDDI_WS03) && (SPVER(NTDDI_VERSION) >= SPVER(NTDDI_WS03SP1))) || \
32  (NTDDI_VERSION >= NTDDI_VISTA))
33 
34 #define FLT_MGR_AFTER_XPSP2 (((OSVER(NTDDI_VERSION) == NTDDI_WIN2K) && (SPVER(NTDDI_VERSION) >= SPVER(NTDDI_WIN2KSP4))) || \
35  ((OSVER(NTDDI_VERSION) == NTDDI_WINXP) && (SPVER(NTDDI_VERSION) > SPVER(NTDDI_WINXPSP2))) || \
36  ((OSVER(NTDDI_VERSION) == NTDDI_WS03) && (SPVER(NTDDI_VERSION) >= SPVER(NTDDI_WS03SP1))) || \
37  (NTDDI_VERSION >= NTDDI_VISTA))
38 
39 #define FLT_MGR_LONGHORN (NTDDI_VERSION >= NTDDI_VISTA)
40 #define FLT_MGR_WIN7 (NTDDI_VERSION >= NTDDI_WIN7)
41 
42 #include <ntifs.h>
43 #include <fltuserstructures.h>
44 #include <initguid.h>
45 
46 #if FLT_MGR_BASELINE
47 
48 #if FLT_MGR_LONGHORN
49 #define FLT_ASSERT(_e) NT_ASSERT(_e)
50 #define FLT_ASSERTMSG(_m, _e) NT_ASSERTMSG(_m, _e)
51 #else
52 #define FLT_ASSERT(_e) ASSERT(_e)
53 #define FLT_ASSERTMSG(_m, _e) ASSERTMSG(_m, _e)
54 #endif /* FLT_MGR_LONGHORN */
55 
56 #define Add2Ptr(P,I) ((PVOID)((PUCHAR)(P) + (I)))
57 #define PtrOffset(B,O) ((ULONG)((ULONG_PTR)(O) - (ULONG_PTR)(B)))
58 
59 #define ROUND_TO_SIZE(_length, _alignment) \
60  ((((ULONG_PTR)(_length)) + ((_alignment)-1)) & ~(ULONG_PTR) ((_alignment) - 1))
61 
62 #define IS_ALIGNED(_pointer, _alignment) \
63  ((((ULONG_PTR) (_pointer)) & ((_alignment) - 1)) == 0)
64 
65 #define IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION ((UCHAR)-1)
66 #define IRP_MJ_RELEASE_FOR_SECTION_SYNCHRONIZATION ((UCHAR)-2)
67 #define IRP_MJ_ACQUIRE_FOR_MOD_WRITE ((UCHAR)-3)
68 #define IRP_MJ_RELEASE_FOR_MOD_WRITE ((UCHAR)-4)
69 #define IRP_MJ_ACQUIRE_FOR_CC_FLUSH ((UCHAR)-5)
70 #define IRP_MJ_RELEASE_FOR_CC_FLUSH ((UCHAR)-6)
71 #define IRP_MJ_FAST_IO_CHECK_IF_POSSIBLE ((UCHAR)-13)
72 #define IRP_MJ_NETWORK_QUERY_OPEN ((UCHAR)-14)
73 #define IRP_MJ_MDL_READ ((UCHAR)-15)
74 #define IRP_MJ_MDL_READ_COMPLETE ((UCHAR)-16)
75 #define IRP_MJ_PREPARE_MDL_WRITE ((UCHAR)-17)
76 #define IRP_MJ_MDL_WRITE_COMPLETE ((UCHAR)-18)
77 #define IRP_MJ_VOLUME_MOUNT ((UCHAR)-19)
78 #define IRP_MJ_VOLUME_DISMOUNT ((UCHAR)-20)
79 #define IRP_MJ_OPERATION_END ((UCHAR)0x80)
80 #define FLT_INTERNAL_OPERATION_COUNT 22
81 
82 #define NULL_CONTEXT ((PFLT_CONTEXT)NULL)
83 
84 typedef struct _FLT_FILTER *PFLT_FILTER;
85 typedef struct _FLT_VOLUME *PFLT_VOLUME;
86 typedef struct _FLT_INSTANCE *PFLT_INSTANCE;
87 typedef struct _FLT_PORT *PFLT_PORT;
88 
89 typedef PVOID PFLT_CONTEXT;
90 
91 #if !FLT_MGR_LONGHORN
92 typedef struct _KTRANSACTION *PKTRANSACTION;
93 #endif
94 
95 #if !defined(_AMD64_) && !defined(_IA64_) && !defined(_ARM_)
96 #include "pshpack4.h"
97 #endif
98 
99 typedef union _FLT_PARAMETERS {
100  struct {
101  PIO_SECURITY_CONTEXT SecurityContext;
102  ULONG Options;
103  USHORT POINTER_ALIGNMENT FileAttributes;
104  USHORT ShareAccess;
105  ULONG POINTER_ALIGNMENT EaLength;
106  PVOID EaBuffer;
107  LARGE_INTEGER AllocationSize;
108  } Create;
109  struct {
110  PIO_SECURITY_CONTEXT SecurityContext;
111  ULONG Options;
112  USHORT POINTER_ALIGNMENT Reserved;
113  USHORT ShareAccess;
114  PVOID Parameters;
115  } CreatePipe;
116  struct {
117  PIO_SECURITY_CONTEXT SecurityContext;
118  ULONG Options;
119  USHORT POINTER_ALIGNMENT Reserved;
120  USHORT ShareAccess;
121  PVOID Parameters;
122  } CreateMailslot;
123  struct {
124  ULONG Length;
125  ULONG POINTER_ALIGNMENT Key;
126  LARGE_INTEGER ByteOffset;
127  PVOID ReadBuffer;
128  PMDL MdlAddress;
129  } Read;
130  struct {
131  ULONG Length;
132  ULONG POINTER_ALIGNMENT Key;
133  LARGE_INTEGER ByteOffset;
134  PVOID WriteBuffer;
135  PMDL MdlAddress;
136  } Write;
137  struct {
138  ULONG Length;
139  FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass;
140  PVOID InfoBuffer;
141  } QueryFileInformation;
142  struct {
143  ULONG Length;
144  FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass;
145  PFILE_OBJECT ParentOfTarget;
146  _ANONYMOUS_UNION union {
147  _ANONYMOUS_STRUCT struct {
148  BOOLEAN ReplaceIfExists;
149  BOOLEAN AdvanceOnly;
150  } DUMMYSTRUCTNAME;
151  ULONG ClusterCount;
152  HANDLE DeleteHandle;
153  } DUMMYUNIONNAME;
154  PVOID InfoBuffer;
155  } SetFileInformation;
156  struct {
157  ULONG Length;
158  PVOID EaList;
159  ULONG EaListLength;
160  ULONG POINTER_ALIGNMENT EaIndex;
161  PVOID EaBuffer;
162  PMDL MdlAddress;
163  } QueryEa;
164  struct {
165  ULONG Length;
166  PVOID EaBuffer;
167  PMDL MdlAddress;
168  } SetEa;
169  struct {
170  ULONG Length;
171  FS_INFORMATION_CLASS POINTER_ALIGNMENT FsInformationClass;
172  PVOID VolumeBuffer;
173  } QueryVolumeInformation;
174  struct {
175  ULONG Length;
176  FS_INFORMATION_CLASS POINTER_ALIGNMENT FsInformationClass;
177  PVOID VolumeBuffer;
178  } SetVolumeInformation;
179  union {
180  struct {
181  ULONG Length;
182  PUNICODE_STRING FileName;
183  FILE_INFORMATION_CLASS FileInformationClass;
184  ULONG POINTER_ALIGNMENT FileIndex;
185  PVOID DirectoryBuffer;
186  PMDL MdlAddress;
187  } QueryDirectory;
188  struct {
189  ULONG Length;
190  ULONG POINTER_ALIGNMENT CompletionFilter;
191  ULONG POINTER_ALIGNMENT Spare1;
192  ULONG POINTER_ALIGNMENT Spare2;
193  PVOID DirectoryBuffer;
194  PMDL MdlAddress;
195  } NotifyDirectory;
196  } DirectoryControl;
197  union {
198  struct {
199  PVPB Vpb;
200  PDEVICE_OBJECT DeviceObject;
201  } VerifyVolume;
202  struct {
203  ULONG OutputBufferLength;
204  ULONG POINTER_ALIGNMENT InputBufferLength;
205  ULONG POINTER_ALIGNMENT FsControlCode;
206  } Common;
207  struct {
208  ULONG OutputBufferLength;
209  ULONG POINTER_ALIGNMENT InputBufferLength;
210  ULONG POINTER_ALIGNMENT FsControlCode;
211  PVOID InputBuffer;
212  PVOID OutputBuffer;
213  PMDL OutputMdlAddress;
214  } Neither;
215  struct {
216  ULONG OutputBufferLength;
217  ULONG POINTER_ALIGNMENT InputBufferLength;
218  ULONG POINTER_ALIGNMENT FsControlCode;
219  PVOID SystemBuffer;
220  } Buffered;
221  struct {
222  ULONG OutputBufferLength;
223  ULONG POINTER_ALIGNMENT InputBufferLength;
224  ULONG POINTER_ALIGNMENT FsControlCode;
225  PVOID InputSystemBuffer;
226  PVOID OutputBuffer;
227  PMDL OutputMdlAddress;
228  } Direct;
229  } FileSystemControl;
230  union {
231  struct {
232  ULONG OutputBufferLength;
233  ULONG POINTER_ALIGNMENT InputBufferLength;
234  ULONG POINTER_ALIGNMENT IoControlCode;
235  } Common;
236  struct {
237  ULONG OutputBufferLength;
238  ULONG POINTER_ALIGNMENT InputBufferLength;
239  ULONG POINTER_ALIGNMENT IoControlCode;
240  PVOID InputBuffer;
241  PVOID OutputBuffer;
242  PMDL OutputMdlAddress;
243  } Neither;
244  struct {
245  ULONG OutputBufferLength;
246  ULONG POINTER_ALIGNMENT InputBufferLength;
247  ULONG POINTER_ALIGNMENT IoControlCode;
248  PVOID SystemBuffer;
249  } Buffered;
250  struct {
251  ULONG OutputBufferLength;
252  ULONG POINTER_ALIGNMENT InputBufferLength;
253  ULONG POINTER_ALIGNMENT IoControlCode;
254  PVOID InputSystemBuffer;
255  PVOID OutputBuffer;
256  PMDL OutputMdlAddress;
257  } Direct;
258  struct {
259  ULONG OutputBufferLength;
260  ULONG POINTER_ALIGNMENT InputBufferLength;
261  ULONG POINTER_ALIGNMENT IoControlCode;
262  PVOID InputBuffer;
263  PVOID OutputBuffer;
264  } FastIo;
265  } DeviceIoControl;
266  struct {
267  PLARGE_INTEGER Length;
268  ULONG POINTER_ALIGNMENT Key;
269  LARGE_INTEGER ByteOffset;
270  PEPROCESS ProcessId;
271  BOOLEAN FailImmediately;
272  BOOLEAN ExclusiveLock;
273  } LockControl;
274  struct {
275  SECURITY_INFORMATION SecurityInformation;
276  ULONG POINTER_ALIGNMENT Length;
277  PVOID SecurityBuffer;
278  PMDL MdlAddress;
279  } QuerySecurity;
280  struct {
281  SECURITY_INFORMATION SecurityInformation;
282  PSECURITY_DESCRIPTOR SecurityDescriptor;
283  } SetSecurity;
284  struct {
285  ULONG_PTR ProviderId;
286  PVOID DataPath;
287  ULONG BufferSize;
288  PVOID Buffer;
289  } WMI;
290  struct {
291  ULONG Length;
292  PSID StartSid;
293  PFILE_GET_QUOTA_INFORMATION SidList;
294  ULONG SidListLength;
295  PVOID QuotaBuffer;
296  PMDL MdlAddress;
297  } QueryQuota;
298  struct {
299  ULONG Length;
300  PVOID QuotaBuffer;
301  PMDL MdlAddress;
302  } SetQuota;
303  union {
304  struct {
305  PCM_RESOURCE_LIST AllocatedResources;
306  PCM_RESOURCE_LIST AllocatedResourcesTranslated;
307  } StartDevice;
308  struct {
309  DEVICE_RELATION_TYPE Type;
310  } QueryDeviceRelations;
311  struct {
312  CONST GUID *InterfaceType;
313  USHORT Size;
314  USHORT Version;
315  PINTERFACE Interface;
316  PVOID InterfaceSpecificData;
317  } QueryInterface;
318  struct {
319  PDEVICE_CAPABILITIES Capabilities;
320  } DeviceCapabilities;
321  struct {
322  PIO_RESOURCE_REQUIREMENTS_LIST IoResourceRequirementList;
323  } FilterResourceRequirements;
324  struct {
325  ULONG WhichSpace;
326  PVOID Buffer;
327  ULONG Offset;
328  ULONG POINTER_ALIGNMENT Length;
329  } ReadWriteConfig;
330  struct {
331  BOOLEAN Lock;
332  } SetLock;
333  struct {
334  BUS_QUERY_ID_TYPE IdType;
335  } QueryId;
336  struct {
337  DEVICE_TEXT_TYPE DeviceTextType;
338  LCID POINTER_ALIGNMENT LocaleId;
339  } QueryDeviceText;
340  struct {
341  BOOLEAN InPath;
342  BOOLEAN Reserved[3];
343  DEVICE_USAGE_NOTIFICATION_TYPE POINTER_ALIGNMENT Type;
344  } UsageNotification;
345  } Pnp;
346  struct {
347  FS_FILTER_SECTION_SYNC_TYPE SyncType;
348  ULONG PageProtection;
349  } AcquireForSectionSynchronization;
350  struct {
351  PLARGE_INTEGER EndingOffset;
352  PERESOURCE *ResourceToRelease;
353  } AcquireForModifiedPageWriter;
354  struct {
355  PERESOURCE ResourceToRelease;
356  } ReleaseForModifiedPageWriter;
357  struct {
358  LARGE_INTEGER FileOffset;
359  ULONG Length;
360  ULONG POINTER_ALIGNMENT LockKey;
361  BOOLEAN POINTER_ALIGNMENT CheckForReadOperation;
362  } FastIoCheckIfPossible;
363  struct {
364  PIRP Irp;
365  PFILE_NETWORK_OPEN_INFORMATION NetworkInformation;
366  } NetworkQueryOpen;
367  struct {
368  LARGE_INTEGER FileOffset;
369  ULONG POINTER_ALIGNMENT Length;
370  ULONG POINTER_ALIGNMENT Key;
371  PMDL *MdlChain;
372  } MdlRead;
373  struct {
374  PMDL MdlChain;
375  } MdlReadComplete;
376  struct {
377  LARGE_INTEGER FileOffset;
378  ULONG POINTER_ALIGNMENT Length;
379  ULONG POINTER_ALIGNMENT Key;
380  PMDL *MdlChain;
381  } PrepareMdlWrite;
382  struct {
383  LARGE_INTEGER FileOffset;
384  PMDL MdlChain;
385  } MdlWriteComplete;
386  struct {
387  ULONG DeviceType;
388  } MountVolume;
389  struct {
390  PVOID Argument1;
391  PVOID Argument2;
392  PVOID Argument3;
393  PVOID Argument4;
394  PVOID Argument5;
395  LARGE_INTEGER Argument6;
396  } Others;
397 } FLT_PARAMETERS, *PFLT_PARAMETERS;
398 
399 #if !defined(_AMD64_) && !defined(_IA64_) && !defined(_ARM_)
400 #include "poppack.h"
401 #endif
402 
403 typedef struct _FLT_IO_PARAMETER_BLOCK {
404  ULONG IrpFlags;
405  UCHAR MajorFunction;
406  UCHAR MinorFunction;
407  UCHAR OperationFlags;
408  UCHAR Reserved;
409  PFILE_OBJECT TargetFileObject;
410  PFLT_INSTANCE TargetInstance;
411  FLT_PARAMETERS Parameters;
412 } FLT_IO_PARAMETER_BLOCK, *PFLT_IO_PARAMETER_BLOCK;
413 
414 #define FLTFL_CALLBACK_DATA_REISSUE_MASK 0x0000FFFF
415 #define FLTFL_CALLBACK_DATA_IRP_OPERATION 0x00000001
416 #define FLTFL_CALLBACK_DATA_FAST_IO_OPERATION 0x00000002
417 #define FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION 0x00000004
418 #define FLTFL_CALLBACK_DATA_SYSTEM_BUFFER 0x00000008
419 #define FLTFL_CALLBACK_DATA_GENERATED_IO 0x00010000
420 #define FLTFL_CALLBACK_DATA_REISSUED_IO 0x00020000
421 #define FLTFL_CALLBACK_DATA_DRAINING_IO 0x00040000
422 #define FLTFL_CALLBACK_DATA_POST_OPERATION 0x00080000
423 #define FLTFL_CALLBACK_DATA_NEW_SYSTEM_BUFFER 0x00100000
424 #define FLTFL_CALLBACK_DATA_DIRTY 0x80000000
425 
426 #define FLT_SET_CALLBACK_DATA_DIRTY(Data) FltSetCallbackDataDirty(Data)
427 #define FLT_CLEAR_CALLBACK_DATA_DIRTY(Data) FltClearCallbackDataDirty(Data)
428 #define FLT_IS_CALLBACK_DATA_DIRTY(Data) FltIsCallbackDataDirty(Data)
429 
430 #define FLT_IS_IRP_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_IRP_OPERATION))
431 #define FLT_IS_FASTIO_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_FAST_IO_OPERATION))
432 #define FLT_IS_FS_FILTER_OPERATION(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION))
433 #define FLT_IS_REISSUED_IO(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_REISSUED_IO))
434 #define FLT_IS_SYSTEM_BUFFER(Data) (FlagOn((Data)->Flags, FLTFL_CALLBACK_DATA_SYSTEM_BUFFER))
435 
436 typedef USHORT FLT_CONTEXT_TYPE;
437 
438 #define FLT_VOLUME_CONTEXT 0x0001
439 #define FLT_INSTANCE_CONTEXT 0x0002
440 #define FLT_FILE_CONTEXT 0x0004
441 #define FLT_STREAM_CONTEXT 0x0008
442 #define FLT_STREAMHANDLE_CONTEXT 0x0010
443 #define FLT_TRANSACTION_CONTEXT 0x0020
444 #define FLT_CONTEXT_END 0xffff
445 
446 #define FLT_ALL_CONTEXTS (FLT_VOLUME_CONTEXT | FLT_INSTANCE_CONTEXT | \
447  FLT_FILE_CONTEXT | FLT_STREAM_CONTEXT | \
448  FLT_STREAMHANDLE_CONTEXT | FLT_TRANSACTION_CONTEXT)
449 
450 typedef ULONG FLT_CALLBACK_DATA_FLAGS;
451 
452 #if FLT_MGR_WIN7
453 typedef ULONG FLT_ALLOCATE_CALLBACK_DATA_FLAGS;
454 #define FLT_ALLOCATE_CALLBACK_DATA_PREALLOCATE_ALL_MEMORY 0x00000001
455 #endif /* FLT_MGR_WIN7 */
456 
457 typedef struct _FLT_CALLBACK_DATA {
458  FLT_CALLBACK_DATA_FLAGS Flags;
459  PETHREAD CONST Thread;
460  PFLT_IO_PARAMETER_BLOCK CONST Iopb;
461  IO_STATUS_BLOCK IoStatus;
462  struct _FLT_TAG_DATA_BUFFER *TagData;
463  _ANONYMOUS_UNION union {
464  _ANONYMOUS_STRUCT struct {
465  LIST_ENTRY QueueLinks;
466  PVOID QueueContext[2];
467  } DUMMYSTRUCTNAME;
468  PVOID FilterContext[4];
469  } DUMMYUNIONNAME;
470  KPROCESSOR_MODE RequestorMode;
471 } FLT_CALLBACK_DATA, *PFLT_CALLBACK_DATA;
472 
473 typedef struct _FLT_RELATED_OBJECTS {
474  USHORT CONST Size;
475  USHORT CONST TransactionContext;
476  PFLT_FILTER CONST Filter;
477  PFLT_VOLUME CONST Volume;
478  PFLT_INSTANCE CONST Instance;
479  PFILE_OBJECT CONST FileObject;
480  PKTRANSACTION CONST Transaction;
481 } FLT_RELATED_OBJECTS, *PFLT_RELATED_OBJECTS;
482 typedef const struct _FLT_RELATED_OBJECTS *PCFLT_RELATED_OBJECTS;
483 
484 typedef struct _FLT_RELATED_CONTEXTS {
485  PFLT_CONTEXT VolumeContext;
486  PFLT_CONTEXT InstanceContext;
487  PFLT_CONTEXT FileContext;
488  PFLT_CONTEXT StreamContext;
489  PFLT_CONTEXT StreamHandleContext;
490  PFLT_CONTEXT TransactionContext;
491 } FLT_RELATED_CONTEXTS, *PFLT_RELATED_CONTEXTS;
492 
493 typedef VOID
494 (FLTAPI *PFLT_CONTEXT_CLEANUP_CALLBACK)(
495  _In_ PFLT_CONTEXT Context,
496  _In_ FLT_CONTEXT_TYPE ContextType);
497 
498 typedef PVOID
499 (FLTAPI *PFLT_CONTEXT_ALLOCATE_CALLBACK)(
500  _In_ POOL_TYPE PoolType,
501  _In_ SIZE_T Size,
502  _In_ FLT_CONTEXT_TYPE ContextType);
503 
504 typedef VOID
505 (FLTAPI *PFLT_CONTEXT_FREE_CALLBACK)(
506  _In_ PVOID Pool,
507  _In_ FLT_CONTEXT_TYPE ContextType);
508 
509 typedef USHORT FLT_CONTEXT_REGISTRATION_FLAGS;
510 
511 #define FLTFL_CONTEXT_REGISTRATION_NO_EXACT_SIZE_MATCH 0x0001
512 
513 #define FLT_VARIABLE_SIZED_CONTEXTS ((SIZE_T)-1)
514 
515 typedef struct _FLT_CONTEXT_REGISTRATION {
516  FLT_CONTEXT_TYPE ContextType;
517  FLT_CONTEXT_REGISTRATION_FLAGS Flags;
518  PFLT_CONTEXT_CLEANUP_CALLBACK ContextCleanupCallback;
519  SIZE_T Size;
520  ULONG PoolTag;
521  PFLT_CONTEXT_ALLOCATE_CALLBACK ContextAllocateCallback;
522  PFLT_CONTEXT_FREE_CALLBACK ContextFreeCallback;
523  PVOID Reserved1;
524 } FLT_CONTEXT_REGISTRATION, *PFLT_CONTEXT_REGISTRATION;
525 typedef const struct _FLT_CONTEXT_REGISTRATION *PCFLT_CONTEXT_REGISTRATION;
526 
527 typedef ULONG FLT_INSTANCE_SETUP_FLAGS;
528 
529 #define FLTFL_INSTANCE_SETUP_AUTOMATIC_ATTACHMENT 0x00000001
530 #define FLTFL_INSTANCE_SETUP_MANUAL_ATTACHMENT 0x00000002
531 #define FLTFL_INSTANCE_SETUP_NEWLY_MOUNTED_VOLUME 0x00000004
532 
533 #if FLT_MGR_LONGHORN
534 
535 #define FLTFL_INSTANCE_SETUP_DETACHED_VOLUME 0x00000008
536 
537 #define FLT_MAX_TRANSACTION_NOTIFICATIONS (TRANSACTION_NOTIFY_PREPREPARE | \
538  TRANSACTION_NOTIFY_PREPARE | \
539  TRANSACTION_NOTIFY_COMMIT | \
540  TRANSACTION_NOTIFY_ROLLBACK | \
541  TRANSACTION_NOTIFY_COMMIT_FINALIZE)
542 
543 #endif /* FLT_MGR_LONGHORN */
544 
545 typedef NTSTATUS
546 (FLTAPI *PFLT_INSTANCE_SETUP_CALLBACK)(
547  _In_ PCFLT_RELATED_OBJECTS FltObjects,
548  _In_ FLT_INSTANCE_SETUP_FLAGS Flags,
549  _In_ DEVICE_TYPE VolumeDeviceType,
550  _In_ FLT_FILESYSTEM_TYPE VolumeFilesystemType);
551 
552 typedef ULONG FLT_INSTANCE_QUERY_TEARDOWN_FLAGS;
553 
554 typedef NTSTATUS
555 (FLTAPI *PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK)(
556  _In_ PCFLT_RELATED_OBJECTS FltObjects,
557  _In_ FLT_INSTANCE_QUERY_TEARDOWN_FLAGS Flags);
558 
559 typedef ULONG FLT_INSTANCE_TEARDOWN_FLAGS;
560 
561 #define FLTFL_INSTANCE_TEARDOWN_MANUAL 0x00000001
562 #define FLTFL_INSTANCE_TEARDOWN_FILTER_UNLOAD 0x00000002
563 #define FLTFL_INSTANCE_TEARDOWN_MANDATORY_FILTER_UNLOAD 0x00000004
564 #define FLTFL_INSTANCE_TEARDOWN_VOLUME_DISMOUNT 0x00000008
565 #define FLTFL_INSTANCE_TEARDOWN_INTERNAL_ERROR 0x00000010
566 
567 typedef VOID
568 (FLTAPI *PFLT_INSTANCE_TEARDOWN_CALLBACK)(
569  _In_ PCFLT_RELATED_OBJECTS FltObjects,
570  _In_ FLT_INSTANCE_TEARDOWN_FLAGS Reason);
571 
572 typedef enum _FLT_PREOP_CALLBACK_STATUS {
573  FLT_PREOP_SUCCESS_WITH_CALLBACK,
574  FLT_PREOP_SUCCESS_NO_CALLBACK,
575  FLT_PREOP_PENDING,
576  FLT_PREOP_DISALLOW_FASTIO,
577  FLT_PREOP_COMPLETE,
578  FLT_PREOP_SYNCHRONIZE
579 } FLT_PREOP_CALLBACK_STATUS, *PFLT_PREOP_CALLBACK_STATUS;
580 
581 typedef FLT_PREOP_CALLBACK_STATUS
582 (FLTAPI *PFLT_PRE_OPERATION_CALLBACK)(
583  _Inout_ PFLT_CALLBACK_DATA Data,
584  _In_ PCFLT_RELATED_OBJECTS FltObjects,
585  _Outptr_result_maybenull_ PVOID *CompletionContext);
586 
587 typedef enum _FLT_POSTOP_CALLBACK_STATUS {
588  FLT_POSTOP_FINISHED_PROCESSING,
589  FLT_POSTOP_MORE_PROCESSING_REQUIRED
590 } FLT_POSTOP_CALLBACK_STATUS, *PFLT_POSTOP_CALLBACK_STATUS;
591 
592 typedef ULONG FLT_POST_OPERATION_FLAGS;
593 
594 #define FLTFL_POST_OPERATION_DRAINING 0x00000001
595 
596 typedef FLT_POSTOP_CALLBACK_STATUS
597 (FLTAPI *PFLT_POST_OPERATION_CALLBACK)(
598  _Inout_ PFLT_CALLBACK_DATA Data,
599  _In_ PCFLT_RELATED_OBJECTS FltObjects,
600  _In_opt_ PVOID CompletionContext,
601  _In_ FLT_POST_OPERATION_FLAGS Flags);
602 
603 typedef ULONG FLT_OPERATION_REGISTRATION_FLAGS;
604 
605 #define FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO 0x00000001
606 #define FLTFL_OPERATION_REGISTRATION_SKIP_CACHED_IO 0x00000002
607 #define FLTFL_OPERATION_REGISTRATION_SKIP_NON_DASD_IO 0x00000004
608 
609 typedef struct _FLT_OPERATION_REGISTRATION {
610  UCHAR MajorFunction;
611  FLT_OPERATION_REGISTRATION_FLAGS Flags;
612  PFLT_PRE_OPERATION_CALLBACK PreOperation;
613  PFLT_POST_OPERATION_CALLBACK PostOperation;
614  PVOID Reserved1;
615 } FLT_OPERATION_REGISTRATION, *PFLT_OPERATION_REGISTRATION;
616 
617 typedef struct _FLT_TAG_DATA_BUFFER {
618  ULONG FileTag;
619  USHORT TagDataLength;
620  USHORT UnparsedNameLength;
621  _ANONYMOUS_UNION union {
622  struct {
623  USHORT SubstituteNameOffset;
624  USHORT SubstituteNameLength;
625  USHORT PrintNameOffset;
626  USHORT PrintNameLength;
627  ULONG Flags;
628  WCHAR PathBuffer[1];
629  } SymbolicLinkReparseBuffer;
630  struct {
631  USHORT SubstituteNameOffset;
632  USHORT SubstituteNameLength;
633  USHORT PrintNameOffset;
634  USHORT PrintNameLength;
635  WCHAR PathBuffer[1];
636  } MountPointReparseBuffer;
637  struct {
638  UCHAR DataBuffer[1];
639  } GenericReparseBuffer;
640  struct {
641  GUID TagGuid;
642  UCHAR DataBuffer[1];
643  } GenericGUIDReparseBuffer;
644  } DUMMYUNIONNAME;
645 } FLT_TAG_DATA_BUFFER, *PFLT_TAG_DATA_BUFFER;
646 
647 #define FLT_TAG_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(FLT_TAG_DATA_BUFFER, GenericReparseBuffer)
648 
649 typedef ULONG FLT_FILTER_UNLOAD_FLAGS;
650 
651 #define FLTFL_FILTER_UNLOAD_MANDATORY 0x00000001
652 
653 typedef NTSTATUS
654 (FLTAPI *PFLT_FILTER_UNLOAD_CALLBACK)(
655  FLT_FILTER_UNLOAD_FLAGS Flags);
656 
657 typedef struct _FLT_NAME_CONTROL {
658  UNICODE_STRING Name;
659 } FLT_NAME_CONTROL, *PFLT_NAME_CONTROL;
660 
661 typedef ULONG FLT_FILE_NAME_OPTIONS;
662 
663 typedef NTSTATUS
664 (FLTAPI *PFLT_GENERATE_FILE_NAME)(
665  _In_ PFLT_INSTANCE Instance,
666  _In_ PFILE_OBJECT FileObject,
667  _In_opt_ PFLT_CALLBACK_DATA CallbackData,
668  _In_ FLT_FILE_NAME_OPTIONS NameOptions,
669  _Out_ PBOOLEAN CacheFileNameInformation,
670  _Out_ PFLT_NAME_CONTROL FileName);
671 
672 typedef ULONG FLT_NORMALIZE_NAME_FLAGS;
673 
674 #define FLTFL_NORMALIZE_NAME_CASE_SENSITIVE 0x01
675 #define FLTFL_NORMALIZE_NAME_DESTINATION_FILE_NAME 0x02
676 
677 typedef NTSTATUS
678 (FLTAPI *PFLT_NORMALIZE_NAME_COMPONENT)(
679  _In_ PFLT_INSTANCE Instance,
680  _In_ PCUNICODE_STRING ParentDirectory,
681  _In_ USHORT VolumeNameLength,
682  _In_ PCUNICODE_STRING Component,
683  _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName,
684  _In_ ULONG ExpandComponentNameLength,
685  _In_ FLT_NORMALIZE_NAME_FLAGS Flags,
686  _Inout_ PVOID *NormalizationContext);
687 
688 typedef NTSTATUS
689 (FLTAPI *PFLT_NORMALIZE_NAME_COMPONENT_EX)(
690  _In_ PFLT_INSTANCE Instance,
691  _In_ PFILE_OBJECT FileObject,
692  _In_ PCUNICODE_STRING ParentDirectory,
693  _In_ USHORT VolumeNameLength,
694  _In_ PCUNICODE_STRING Component,
695  _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName,
696  _In_ ULONG ExpandComponentNameLength,
697  _In_ FLT_NORMALIZE_NAME_FLAGS Flags,
698  _Inout_ PVOID *NormalizationContext);
699 
700 typedef VOID
701 (FLTAPI *PFLT_NORMALIZE_CONTEXT_CLEANUP)(
702  _In_opt_ PVOID *NormalizationContext);
703 
704 #if FLT_MGR_LONGHORN
705 typedef NTSTATUS
706 (FLTAPI *PFLT_TRANSACTION_NOTIFICATION_CALLBACK)(
707  _In_ PCFLT_RELATED_OBJECTS FltObjects,
708  _In_ PFLT_CONTEXT TransactionContext,
709  _In_ ULONG NotificationMask);
710 #endif /* FLT_MGR_LONGHORN */
711 
712 #define FLT_REGISTRATION_VERSION_0200 0x0200
713 #define FLT_REGISTRATION_VERSION_0201 0x0201
714 #define FLT_REGISTRATION_VERSION_0202 0x0202
715 #define FLT_REGISTRATION_VERSION_0203 0x0203
716 
717 #if FLT_MGR_LONGHORN
718 #define FLT_REGISTRATION_VERSION FLT_REGISTRATION_VERSION_0202
719 #else
720 #define FLT_REGISTRATION_VERSION FLT_REGISTRATION_VERSION_0200
721 #endif
722 
723 typedef ULONG FLT_REGISTRATION_FLAGS;
724 
725 #define FLTFL_REGISTRATION_DO_NOT_SUPPORT_SERVICE_STOP 0x00000001
726 #define FLTFL_REGISTRATION_SUPPORT_NPFS_MSFS 0x00000002
727 
728 typedef struct _FLT_REGISTRATION {
729  USHORT Size;
730  USHORT Version;
731  FLT_REGISTRATION_FLAGS Flags;
732  CONST FLT_CONTEXT_REGISTRATION *ContextRegistration;
733  CONST FLT_OPERATION_REGISTRATION *OperationRegistration;
734  PFLT_FILTER_UNLOAD_CALLBACK FilterUnloadCallback;
735  PFLT_INSTANCE_SETUP_CALLBACK InstanceSetupCallback;
736  PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK InstanceQueryTeardownCallback;
737  PFLT_INSTANCE_TEARDOWN_CALLBACK InstanceTeardownStartCallback;
738  PFLT_INSTANCE_TEARDOWN_CALLBACK InstanceTeardownCompleteCallback;
739  PFLT_GENERATE_FILE_NAME GenerateFileNameCallback;
740  PFLT_NORMALIZE_NAME_COMPONENT NormalizeNameComponentCallback;
741  PFLT_NORMALIZE_CONTEXT_CLEANUP NormalizeContextCleanupCallback;
742 #if FLT_MGR_LONGHORN
743  PFLT_TRANSACTION_NOTIFICATION_CALLBACK TransactionNotificationCallback;
744  PFLT_NORMALIZE_NAME_COMPONENT_EX NormalizeNameComponentExCallback;
745 #endif /* FLT_MGR_LONGHORN */
746 } FLT_REGISTRATION, *PFLT_REGISTRATION;
747 
748 typedef VOID
749 (FLTAPI *PFLT_COMPLETED_ASYNC_IO_CALLBACK)(
750  _In_ PFLT_CALLBACK_DATA CallbackData,
751  _In_ PFLT_CONTEXT Context);
752 
753 typedef ULONG FLT_IO_OPERATION_FLAGS;
754 
755 #define FLTFL_IO_OPERATION_NON_CACHED 0x00000001
756 #define FLTFL_IO_OPERATION_PAGING 0x00000002
757 #define FLTFL_IO_OPERATION_DO_NOT_UPDATE_BYTE_OFFSET 0x00000004
758 
759 #if FLT_MGR_LONGHORN
760 #define FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING 0x00000008
761 #endif
762 
763 typedef VOID
764 (FLTAPI *PFLT_GET_OPERATION_STATUS_CALLBACK)(
765  _In_ PCFLT_RELATED_OBJECTS FltObjects,
766  _In_ PFLT_IO_PARAMETER_BLOCK IopbSnapshot,
767  _In_ NTSTATUS OperationStatus,
768  _In_opt_ PVOID RequesterContext);
769 
770 typedef ULONG FLT_FILE_NAME_OPTIONS;
771 
772 #define FLT_VALID_FILE_NAME_FORMATS 0x000000ff
773 
774 #define FLT_FILE_NAME_NORMALIZED 0x01
775 #define FLT_FILE_NAME_OPENED 0x02
776 #define FLT_FILE_NAME_SHORT 0x03
777 
778 #define FltGetFileNameFormat( _NameOptions ) ((_NameOptions) & FLT_VALID_FILE_NAME_FORMATS)
779 
780 #define FLT_VALID_FILE_NAME_QUERY_METHODS 0x0000ff00
781 
782 #define FLT_FILE_NAME_QUERY_DEFAULT 0x0100
783 #define FLT_FILE_NAME_QUERY_CACHE_ONLY 0x0200
784 #define FLT_FILE_NAME_QUERY_FILESYSTEM_ONLY 0x0300
785 #define FLT_FILE_NAME_QUERY_ALWAYS_ALLOW_CACHE_LOOKUP 0x0400
786 
787 #define FltGetFileNameQueryMethod( _NameOptions ) ((_NameOptions) & FLT_VALID_FILE_NAME_QUERY_METHODS)
788 
789 #define FLT_VALID_FILE_NAME_FLAGS 0xff000000
790 
791 #define FLT_FILE_NAME_REQUEST_FROM_CURRENT_PROVIDER 0x01000000
792 #define FLT_FILE_NAME_DO_NOT_CACHE 0x02000000
793 
794 #if FLT_MGR_AFTER_XPSP2
795 #define FLT_FILE_NAME_ALLOW_QUERY_ON_REPARSE 0x04000000
796 #endif
797 
798 typedef USHORT FLT_FILE_NAME_PARSED_FLAGS;
799 
800 #define FLTFL_FILE_NAME_PARSED_FINAL_COMPONENT 0x0001
801 #define FLTFL_FILE_NAME_PARSED_EXTENSION 0x0002
802 #define FLTFL_FILE_NAME_PARSED_STREAM 0x0004
803 #define FLTFL_FILE_NAME_PARSED_PARENT_DIR 0x0008
804 
805 typedef struct _FLT_FILE_NAME_INFORMATION {
806  USHORT Size;
807  FLT_FILE_NAME_PARSED_FLAGS NamesParsed;
808  FLT_FILE_NAME_OPTIONS Format;
809  UNICODE_STRING Name;
810  UNICODE_STRING Volume;
811  UNICODE_STRING Share;
812  UNICODE_STRING Extension;
813  UNICODE_STRING Stream;
814  UNICODE_STRING FinalComponent;
815  UNICODE_STRING ParentDir;
816 } FLT_FILE_NAME_INFORMATION, *PFLT_FILE_NAME_INFORMATION;
817 
818 typedef enum _FLT_SET_CONTEXT_OPERATION {
819  FLT_SET_CONTEXT_REPLACE_IF_EXISTS,
820  FLT_SET_CONTEXT_KEEP_IF_EXISTS
821 } FLT_SET_CONTEXT_OPERATION, *PFLT_SET_CONTEXT_OPERATION;
822 
823 typedef struct _FLT_VOLUME_PROPERTIES {
824  DEVICE_TYPE DeviceType;
825  ULONG DeviceCharacteristics;
826  ULONG DeviceObjectFlags;
827  ULONG AlignmentRequirement;
828  USHORT SectorSize;
829  USHORT Reserved0;
830  UNICODE_STRING FileSystemDriverName;
831  UNICODE_STRING FileSystemDeviceName;
832  UNICODE_STRING RealDeviceName;
833 } FLT_VOLUME_PROPERTIES, *PFLT_VOLUME_PROPERTIES;
834 
835 #define FLT_PORT_CONNECT 0x0001
836 #define FLT_PORT_ALL_ACCESS (FLT_PORT_CONNECT | STANDARD_RIGHTS_ALL)
837 
838 typedef NTSTATUS
839 (FLTAPI *PFLT_MESSAGE_NOTIFY)(
840  _In_opt_ PVOID PortCookie,
841  _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer,
842  _In_ ULONG InputBufferLength,
843  _Out_writes_bytes_to_opt_(OutputBufferLength,*ReturnOutputBufferLength) PVOID OutputBuffer,
844  _In_ ULONG OutputBufferLength,
845  _Out_ PULONG ReturnOutputBufferLength);
846 
847 typedef NTSTATUS
848 (FLTAPI *PFLT_CONNECT_NOTIFY)(
849  _In_ PFLT_PORT ClientPort,
850  _In_opt_ PVOID ServerPortCookie,
851  _In_reads_bytes_opt_(SizeOfContext) PVOID ConnectionContext,
852  _In_ ULONG SizeOfContext,
853  _Outptr_result_maybenull_ PVOID *ConnectionPortCookie);
854 
855 typedef VOID
856 (FLTAPI *PFLT_DISCONNECT_NOTIFY)(
857  _In_opt_ PVOID ConnectionCookie);
858 
859 typedef VOID
860 (FLTAPI *PFLT_COMPLETE_CANCELED_CALLBACK)(
861  _In_ PFLT_CALLBACK_DATA CallbackData);
862 
863 typedef struct _FLT_DEFERRED_IO_WORKITEM *PFLT_DEFERRED_IO_WORKITEM;
864 typedef struct _FLT_GENERIC_WORKITEM *PFLT_GENERIC_WORKITEM;
865 
866 typedef VOID
867 (FLTAPI *PFLT_DEFERRED_IO_WORKITEM_ROUTINE)(
868  _In_ PFLT_DEFERRED_IO_WORKITEM FltWorkItem,
869  _In_ PFLT_CALLBACK_DATA CallbackData,
870  _In_opt_ PVOID Context);
871 
872 typedef VOID
873 (FLTAPI *PFLT_GENERIC_WORKITEM_ROUTINE)(
874  _In_ PFLT_GENERIC_WORKITEM FltWorkItem,
875  _In_ PVOID FltObject,
876  _In_opt_ PVOID Context);
877 
878 typedef IO_CSQ_IRP_CONTEXT FLT_CALLBACK_DATA_QUEUE_IO_CONTEXT, *PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT;
879 
880 typedef struct _FLT_CALLBACK_DATA_QUEUE FLT_CALLBACK_DATA_QUEUE, *PFLT_CALLBACK_DATA_QUEUE;
881 
882 typedef NTSTATUS
883 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_INSERT_IO)(
884  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
885  _In_ PFLT_CALLBACK_DATA Cbd,
886  _In_opt_ PVOID InsertContext);
887 
888 typedef VOID
889 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO)(
890  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
891  _In_ PFLT_CALLBACK_DATA Cbd);
892 
893 typedef PFLT_CALLBACK_DATA
894 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO)(
895  _In_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
896  _In_opt_ PFLT_CALLBACK_DATA Cbd,
897  _In_opt_ PVOID PeekContext);
898 
899 typedef VOID
900 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_ACQUIRE)(
901  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
902  _Out_opt_ PKIRQL Irql);
903 
904 typedef VOID
905 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_RELEASE)(
906  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
907  _In_opt_ KIRQL Irql);
908 
909 typedef VOID
910 (FLTAPI *PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO)(
911  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
912  _Inout_ PFLT_CALLBACK_DATA Cbd);
913 
914 typedef ULONG FLT_CALLBACK_DATA_QUEUE_FLAGS;
915 
916 typedef struct _FLT_CALLBACK_DATA_QUEUE {
917  IO_CSQ Csq;
918  FLT_CALLBACK_DATA_QUEUE_FLAGS Flags;
919  PFLT_INSTANCE Instance;
920  PFLT_CALLBACK_DATA_QUEUE_INSERT_IO InsertIo;
921  PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO RemoveIo;
922  PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO PeekNextIo;
923  PFLT_CALLBACK_DATA_QUEUE_ACQUIRE Acquire;
924  PFLT_CALLBACK_DATA_QUEUE_RELEASE Release;
925  PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO CompleteCanceledIo;
926 } FLT_CALLBACK_DATA_QUEUE, *PFLT_CALLBACK_DATA_QUEUE;
927 
928 typedef NTSTATUS
929 (*PFLT_COMPLETE_LOCK_CALLBACK_DATA_ROUTINE)(
930  _In_opt_ PVOID Context,
931  _In_ PFLT_CALLBACK_DATA CallbackData);
932 
933 typedef VOID
934 (FLTAPI *PFLTOPLOCK_WAIT_COMPLETE_ROUTINE)(
935  _In_ PFLT_CALLBACK_DATA CallbackData,
936  _In_opt_ PVOID Context);
937 
938 typedef VOID
939 (FLTAPI *PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE)(
940  _In_ PFLT_CALLBACK_DATA CallbackData,
941  _In_opt_ PVOID Context);
942 
943 VOID
944 FLTAPI
945 FltSetCallbackDataDirty(
946  _Inout_ PFLT_CALLBACK_DATA Data);
947 
948 VOID
949 FLTAPI
950 FltClearCallbackDataDirty(
951  _Inout_ PFLT_CALLBACK_DATA Data);
952 
953 BOOLEAN
954 FLTAPI
955 FltIsCallbackDataDirty(
956  _In_ PFLT_CALLBACK_DATA Data);
957 
958 _Must_inspect_result_
959 BOOLEAN
960 FLTAPI
961 FltDoCompletionProcessingWhenSafe(
962  _In_ PFLT_CALLBACK_DATA Data,
963  _In_ PCFLT_RELATED_OBJECTS FltObjects,
964  _In_opt_ PVOID CompletionContext,
965  _In_ FLT_POST_OPERATION_FLAGS Flags,
966  _In_ PFLT_POST_OPERATION_CALLBACK SafePostCallback,
967  _Out_ PFLT_POSTOP_CALLBACK_STATUS RetPostOperationStatus);
968 
969 _Must_inspect_result_
970 _IRQL_requires_max_(APC_LEVEL)
971 NTSTATUS
972 FLTAPI
973 FltCheckAndGrowNameControl(
974  _Inout_ PFLT_NAME_CONTROL NameCtrl,
975  _In_ USHORT NewSize);
976 
977 _Must_inspect_result_
978 _IRQL_requires_max_(APC_LEVEL)
979 NTSTATUS
980 FLTAPI
981 FltPurgeFileNameInformationCache(
982  _In_ PFLT_INSTANCE Instance,
983  _In_opt_ PFILE_OBJECT FileObject);
984 
985 _Must_inspect_result_
986 _IRQL_requires_max_(APC_LEVEL)
987 NTSTATUS
988 FLTAPI
989 FltRegisterFilter(
990  _In_ PDRIVER_OBJECT Driver,
991  _In_ CONST FLT_REGISTRATION *Registration,
992  _Outptr_ PFLT_FILTER *RetFilter);
993 
994 _IRQL_requires_max_(APC_LEVEL)
995 VOID
996 FLTAPI
997 FltUnregisterFilter(
998  _In_ PFLT_FILTER Filter);
999 
1000 _Must_inspect_result_
1001 _IRQL_requires_max_(APC_LEVEL)
1002 NTSTATUS
1003 FLTAPI
1004 FltStartFiltering(
1005  _In_ PFLT_FILTER Filter);
1006 
1007 _Must_inspect_result_
1008 _IRQL_requires_max_(APC_LEVEL)
1009 PVOID
1010 FLTAPI
1011 FltGetRoutineAddress(
1012  _In_ PCSTR FltMgrRoutineName);
1013 
1014 _When_(CallbackStatus==FLT_PREOP_COMPLETE, _IRQL_requires_max_(DISPATCH_LEVEL))
1015 _When_(CallbackStatus!=FLT_PREOP_COMPLETE, _IRQL_requires_max_(APC_LEVEL))
1016 VOID
1017 FLTAPI
1018 FltCompletePendedPreOperation(
1019  _In_ PFLT_CALLBACK_DATA CallbackData,
1020  _In_ FLT_PREOP_CALLBACK_STATUS CallbackStatus,
1021  _In_opt_ PVOID Context);
1022 
1023 _IRQL_requires_max_(DISPATCH_LEVEL)
1024 VOID
1025 FLTAPI
1026 FltCompletePendedPostOperation(
1027  _In_ PFLT_CALLBACK_DATA CallbackData);
1028 
1029 _Must_inspect_result_
1030 _IRQL_requires_max_(DISPATCH_LEVEL)
1031 NTSTATUS
1032 FLTAPI
1033 FltRequestOperationStatusCallback(
1034  _In_ PFLT_CALLBACK_DATA Data,
1035  _In_ PFLT_GET_OPERATION_STATUS_CALLBACK CallbackRoutine,
1036  _In_opt_ PVOID RequesterContext);
1037 
1038 _When_((PoolType==NonPagedPoolNx), _IRQL_requires_max_(DISPATCH_LEVEL))
1039 _When_((PoolType!=NonPagedPoolNx), _IRQL_requires_max_(APC_LEVEL))
1040 PVOID
1041 FLTAPI
1042 FltAllocatePoolAlignedWithTag(
1043  _In_ PFLT_INSTANCE Instance,
1044  _In_ POOL_TYPE PoolType,
1045  _In_ SIZE_T NumberOfBytes,
1046  _In_ ULONG Tag);
1047 
1048 _IRQL_requires_max_(DISPATCH_LEVEL)
1049 VOID
1050 FLTAPI
1051 FltFreePoolAlignedWithTag(
1052  _In_ PFLT_INSTANCE Instance,
1053  _In_ PVOID Buffer,
1054  _In_ ULONG Tag);
1055 
1056 _Must_inspect_result_
1057 _IRQL_requires_max_(APC_LEVEL)
1058 NTSTATUS
1059 FLTAPI
1060 FltGetFileNameInformation(
1061  _In_ PFLT_CALLBACK_DATA CallbackData,
1062  _In_ FLT_FILE_NAME_OPTIONS NameOptions,
1063  _Outptr_ PFLT_FILE_NAME_INFORMATION *FileNameInformation);
1064 
1065 _Must_inspect_result_
1066 _IRQL_requires_max_(APC_LEVEL)
1067 NTSTATUS
1068 FLTAPI
1069 FltGetFileNameInformationUnsafe(
1070  _In_ PFILE_OBJECT FileObject,
1071  _In_opt_ PFLT_INSTANCE Instance,
1072  _In_ FLT_FILE_NAME_OPTIONS NameOptions,
1073  _Outptr_ PFLT_FILE_NAME_INFORMATION *FileNameInformation);
1074 
1075 _IRQL_requires_max_(APC_LEVEL)
1076 VOID
1077 FLTAPI
1078 FltReleaseFileNameInformation(
1079  _In_ PFLT_FILE_NAME_INFORMATION FileNameInformation);
1080 
1081 _IRQL_requires_max_(APC_LEVEL)
1082 VOID
1083 FLTAPI
1084 FltReferenceFileNameInformation(
1085  _In_ PFLT_FILE_NAME_INFORMATION FileNameInformation);
1086 
1087 _IRQL_requires_max_(APC_LEVEL)
1088 NTSTATUS
1089 FLTAPI
1090 FltParseFileName(
1091  _In_ PCUNICODE_STRING FileName,
1092  _Inout_opt_ PUNICODE_STRING Extension,
1093  _Inout_opt_ PUNICODE_STRING Stream,
1094  _Inout_opt_ PUNICODE_STRING FinalComponent);
1095 
1096 _IRQL_requires_max_(APC_LEVEL)
1097 NTSTATUS
1098 FLTAPI
1099 FltParseFileNameInformation(
1100  _Inout_ PFLT_FILE_NAME_INFORMATION FileNameInformation);
1101 
1102 _Must_inspect_result_
1103 _IRQL_requires_max_(APC_LEVEL)
1104 NTSTATUS
1105 FLTAPI
1106 FltGetTunneledName(
1107  _In_ PFLT_CALLBACK_DATA CallbackData,
1108  _In_ PFLT_FILE_NAME_INFORMATION FileNameInformation,
1109  _Outptr_result_maybenull_ PFLT_FILE_NAME_INFORMATION *RetTunneledFileNameInformation);
1110 
1111 _Must_inspect_result_
1112 _IRQL_requires_max_(APC_LEVEL)
1113 NTSTATUS
1114 FLTAPI
1115 FltGetVolumeName(
1116  _In_ PFLT_VOLUME Volume,
1117  _Inout_opt_ PUNICODE_STRING VolumeName,
1118  _Out_opt_ PULONG BufferSizeNeeded);
1119 
1120 _Must_inspect_result_
1121 _IRQL_requires_max_(APC_LEVEL)
1122 NTSTATUS
1123 FLTAPI
1124 FltGetDestinationFileNameInformation(
1125  _In_ PFLT_INSTANCE Instance,
1126  _In_ PFILE_OBJECT FileObject,
1127  _In_opt_ HANDLE RootDirectory,
1128  _In_reads_bytes_(FileNameLength) PWSTR FileName,
1129  _In_ ULONG FileNameLength,
1130  _In_ FLT_FILE_NAME_OPTIONS NameOptions,
1131  _Outptr_ PFLT_FILE_NAME_INFORMATION *RetFileNameInformation);
1132 
1133 _Must_inspect_result_
1134 _IRQL_requires_max_(APC_LEVEL)
1135 NTSTATUS
1136 FLTAPI
1137 FltIsDirectory(
1138  _In_ PFILE_OBJECT FileObject,
1139  _In_ PFLT_INSTANCE Instance,
1140  _Out_ PBOOLEAN IsDirectory);
1141 
1142 _Must_inspect_result_
1143 _IRQL_requires_max_(PASSIVE_LEVEL)
1144 NTSTATUS
1145 FLTAPI
1146 FltLoadFilter(
1147  _In_ PCUNICODE_STRING FilterName);
1148 
1149 _Must_inspect_result_
1150 _IRQL_requires_max_(PASSIVE_LEVEL)
1151 NTSTATUS
1152 FLTAPI
1153 FltUnloadFilter(
1154  _In_ PCUNICODE_STRING FilterName);
1155 
1156 _Must_inspect_result_
1157 _IRQL_requires_max_(APC_LEVEL)
1158 NTSTATUS
1159 FLTAPI
1160 FltAttachVolume(
1161  _Inout_ PFLT_FILTER Filter,
1162  _Inout_ PFLT_VOLUME Volume,
1163  _In_opt_ PCUNICODE_STRING InstanceName,
1164  _Outptr_opt_result_maybenull_ PFLT_INSTANCE *RetInstance);
1165 
1166 _Must_inspect_result_
1167 _IRQL_requires_max_(APC_LEVEL)
1168 NTSTATUS
1169 FLTAPI
1170 FltAttachVolumeAtAltitude(
1171  _Inout_ PFLT_FILTER Filter,
1172  _Inout_ PFLT_VOLUME Volume,
1173  _In_ PCUNICODE_STRING Altitude,
1174  _In_opt_ PCUNICODE_STRING InstanceName,
1175  _Outptr_opt_result_maybenull_ PFLT_INSTANCE *RetInstance);
1176 
1177 _Must_inspect_result_
1178 _IRQL_requires_max_(APC_LEVEL)
1179 NTSTATUS
1180 FLTAPI
1181 FltDetachVolume(
1182  _Inout_ PFLT_FILTER Filter,
1183  _Inout_ PFLT_VOLUME Volume,
1184  _In_opt_ PCUNICODE_STRING InstanceName);
1185 
1186 _Must_inspect_result_
1187 _IRQL_requires_max_(APC_LEVEL)
1188 NTSTATUS
1189 FLTAPI
1190 FltAllocateCallbackData(
1191  _In_ PFLT_INSTANCE Instance,
1192  _In_opt_ PFILE_OBJECT FileObject,
1193  _Outptr_ PFLT_CALLBACK_DATA *RetNewCallbackData);
1194 
1195 _IRQL_requires_max_(DISPATCH_LEVEL)
1196 VOID
1197 FLTAPI
1198 FltFreeCallbackData(
1199  _In_ PFLT_CALLBACK_DATA CallbackData);
1200 
1201 _IRQL_requires_max_(APC_LEVEL)
1202 VOID
1203 FLTAPI
1204 FltReuseCallbackData(
1205  _Inout_ PFLT_CALLBACK_DATA CallbackData);
1206 
1207 _When_(FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(APC_LEVEL))
1208 _When_(!FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(PASSIVE_LEVEL))
1209 VOID
1210 FLTAPI
1211 FltPerformSynchronousIo(
1212  _Inout_ PFLT_CALLBACK_DATA CallbackData);
1213 
1214 _Must_inspect_result_
1215 _When_( FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(APC_LEVEL))
1216 _When_( !FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(PASSIVE_LEVEL))
1217 NTSTATUS
1218 FLTAPI
1219 FltPerformAsynchronousIo(
1220  _Inout_ PFLT_CALLBACK_DATA CallbackData,
1221  _In_ PFLT_COMPLETED_ASYNC_IO_CALLBACK CallbackRoutine,
1222  _In_ PVOID CallbackContext);
1223 
1224 _Must_inspect_result_
1225 _IRQL_requires_max_(PASSIVE_LEVEL)
1226 NTSTATUS
1227 FLTAPI
1228 FltCreateFile(
1229  _In_ PFLT_FILTER Filter,
1230  _In_opt_ PFLT_INSTANCE Instance,
1231  _Out_ PHANDLE FileHandle,
1232  _In_ ACCESS_MASK DesiredAccess,
1233  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1234  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1235  _In_opt_ PLARGE_INTEGER AllocationSize,
1236  _In_ ULONG FileAttributes,
1237  _In_ ULONG ShareAccess,
1238  _In_ ULONG CreateDisposition,
1239  _In_ ULONG CreateOptions,
1240  _In_reads_bytes_opt_(EaLength)PVOID EaBuffer,
1241  _In_ ULONG EaLength,
1242  _In_ ULONG Flags);
1243 
1244 _Must_inspect_result_
1245 _IRQL_requires_max_(PASSIVE_LEVEL)
1246 _When_((Flags|FLTFL_IO_OPERATION_PAGING|FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING),_IRQL_requires_max_(APC_LEVEL))
1247 NTSTATUS
1248 FLTAPI
1249 FltReadFile(
1250  _In_ PFLT_INSTANCE InitiatingInstance,
1251  _In_ PFILE_OBJECT FileObject,
1252  _In_opt_ PLARGE_INTEGER ByteOffset,
1253  _In_ ULONG Length,
1254  _Out_writes_bytes_to_(Length,*BytesRead) PVOID Buffer,
1255  _In_ FLT_IO_OPERATION_FLAGS Flags,
1256  _Out_opt_ PULONG BytesRead,
1257  _In_opt_ PFLT_COMPLETED_ASYNC_IO_CALLBACK CallbackRoutine,
1258  _In_opt_ PVOID CallbackContext);
1259 
1260 _Must_inspect_result_
1261 _IRQL_requires_max_(PASSIVE_LEVEL)
1262 NTSTATUS
1263 FLTAPI
1264 FltTagFile(
1265  _In_ PFLT_INSTANCE InitiatingInstance,
1266  _In_ PFILE_OBJECT FileObject,
1267  _In_ ULONG FileTag,
1268  _In_opt_ GUID *Guid,
1269  _In_reads_bytes_(DataBufferLength) PVOID DataBuffer,
1270  _In_ USHORT DataBufferLength);
1271 
1272 _Must_inspect_result_
1273 _IRQL_requires_max_(PASSIVE_LEVEL)
1274 NTSTATUS
1275 FLTAPI
1276 FltUntagFile(
1277  _In_ PFLT_INSTANCE InitiatingInstance,
1278  _In_ PFILE_OBJECT FileObject,
1279  _In_ ULONG FileTag,
1280  _In_opt_ GUID *Guid);
1281 
1282 _Must_inspect_result_
1283 _IRQL_requires_max_(PASSIVE_LEVEL)
1284 _When_((Flags|FLTFL_IO_OPERATION_PAGING|FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING),_IRQL_requires_max_(APC_LEVEL))
1285 NTSTATUS
1286 FLTAPI
1287 FltWriteFile(
1288  _In_ PFLT_INSTANCE InitiatingInstance,
1289  _In_ PFILE_OBJECT FileObject,
1290  _In_opt_ PLARGE_INTEGER ByteOffset,
1291  _In_ ULONG Length,
1292  _In_reads_bytes_(Length) PVOID Buffer,
1293  _In_ FLT_IO_OPERATION_FLAGS Flags,
1294  _Out_opt_ PULONG BytesWritten,
1295  _In_opt_ PFLT_COMPLETED_ASYNC_IO_CALLBACK CallbackRoutine,
1296  _In_opt_ PVOID CallbackContext);
1297 
1298 _Must_inspect_result_
1299 _IRQL_requires_max_(PASSIVE_LEVEL)
1300 NTSTATUS
1301 FLTAPI
1302 FltQueryInformationFile(
1303  _In_ PFLT_INSTANCE Instance,
1304  _In_ PFILE_OBJECT FileObject,
1305  _Out_writes_bytes_to_(Length,*LengthReturned) PVOID FileInformation,
1306  _In_ ULONG Length,
1307  _In_ FILE_INFORMATION_CLASS FileInformationClass,
1308  _Out_opt_ PULONG LengthReturned);
1309 
1310 _Must_inspect_result_
1311 _IRQL_requires_max_(PASSIVE_LEVEL)
1312 NTSTATUS
1313 FLTAPI
1314 FltSetInformationFile(
1315  _In_ PFLT_INSTANCE Instance,
1316  _In_ PFILE_OBJECT FileObject,
1317  _In_reads_bytes_(Length) PVOID FileInformation,
1318  _In_ ULONG Length,
1319  _In_ FILE_INFORMATION_CLASS FileInformationClass);
1320 
1321 _Must_inspect_result_
1322 _IRQL_requires_max_(PASSIVE_LEVEL)
1323 NTSTATUS
1324 FLTAPI
1325 FltQueryVolumeInformationFile(
1326  _In_ PFLT_INSTANCE Instance,
1327  _In_ PFILE_OBJECT FileObject,
1328  _Out_writes_bytes_to_(Length,*LengthReturned) PVOID FsInformation,
1329  _In_ ULONG Length,
1330  _In_ FS_INFORMATION_CLASS FsInformationClass,
1331  _Out_opt_ PULONG LengthReturned);
1332 
1333 _Must_inspect_result_
1334 _IRQL_requires_max_(PASSIVE_LEVEL)
1335 NTSTATUS
1336 FLTAPI
1337 FltQuerySecurityObject(
1338  _In_ PFLT_INSTANCE Instance,
1339  _In_ PFILE_OBJECT FileObject,
1340  _In_ SECURITY_INFORMATION SecurityInformation,
1341  _Inout_updates_bytes_opt_(Length) PSECURITY_DESCRIPTOR SecurityDescriptor,
1342  _In_ ULONG Length,
1343  _Out_opt_ PULONG LengthNeeded);
1344 
1345 _Must_inspect_result_
1346 _IRQL_requires_max_(PASSIVE_LEVEL)
1347 NTSTATUS
1348 FLTAPI
1349 FltSetSecurityObject(
1350  _In_ PFLT_INSTANCE Instance,
1351  _In_ PFILE_OBJECT FileObject,
1352  _In_ SECURITY_INFORMATION SecurityInformation,
1353  _In_ PSECURITY_DESCRIPTOR SecurityDescriptor);
1354 
1355 _Must_inspect_result_
1356 _IRQL_requires_max_(PASSIVE_LEVEL)
1357 NTSTATUS
1358 FLTAPI
1359 FltFlushBuffers(
1360  _In_ PFLT_INSTANCE Instance,
1361  _In_ PFILE_OBJECT FileObject);
1362 
1363 _Must_inspect_result_
1364 _IRQL_requires_max_(PASSIVE_LEVEL)
1365 NTSTATUS
1366 FLTAPI
1367 FltFsControlFile(
1368  _In_ PFLT_INSTANCE Instance,
1369  _In_ PFILE_OBJECT FileObject,
1370  _In_ ULONG FsControlCode,
1371  _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer,
1372  _In_ ULONG InputBufferLength,
1373  _Out_writes_bytes_to_opt_(OutputBufferLength,*LengthReturned) PVOID OutputBuffer,
1374  _In_ ULONG OutputBufferLength,
1375  _Out_opt_ PULONG LengthReturned);
1376 
1377 _Must_inspect_result_
1378 _IRQL_requires_max_(PASSIVE_LEVEL)
1379 NTSTATUS
1380 FLTAPI
1381 FltDeviceIoControlFile(
1382  _In_ PFLT_INSTANCE Instance,
1383  _In_ PFILE_OBJECT FileObject,
1384  _In_ ULONG IoControlCode,
1385  _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer,
1386  _In_ ULONG InputBufferLength,
1387  _Out_writes_bytes_to_opt_(OutputBufferLength,*LengthReturned) PVOID OutputBuffer,
1388  _In_ ULONG OutputBufferLength,
1389  _Out_opt_ PULONG LengthReturned);
1390 
1391 _Must_inspect_result_
1392 _When_(FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(APC_LEVEL))
1393 _When_(!FlagOn(CallbackData->Iopb->IrpFlags, IRP_PAGING_IO), _IRQL_requires_max_(PASSIVE_LEVEL))
1394 VOID
1395 FLTAPI
1396 FltReissueSynchronousIo(
1397  _In_ PFLT_INSTANCE InitiatingInstance,
1398  _In_ PFLT_CALLBACK_DATA CallbackData);
1399 
1400 _IRQL_requires_max_(PASSIVE_LEVEL)
1401 NTSTATUS
1402 FLTAPI
1403 FltClose(
1404  _In_ HANDLE FileHandle);
1405 
1406 _IRQL_requires_max_(PASSIVE_LEVEL)
1407 VOID
1408 FLTAPI
1409 FltCancelFileOpen(
1410  _In_ PFLT_INSTANCE Instance,
1411  _In_ PFILE_OBJECT FileObject);
1412 
1413 _Must_inspect_result_
1414 _IRQL_requires_max_(PASSIVE_LEVEL)
1415 NTSTATUS
1416 FLTAPI
1417 FltCreateSystemVolumeInformationFolder(
1418  _In_ PFLT_INSTANCE Instance);
1419 
1420 _IRQL_requires_max_(APC_LEVEL)
1421 BOOLEAN
1422 FLTAPI
1423 FltSupportsFileContexts(
1424  _In_ PFILE_OBJECT FileObject);
1425 
1426 _IRQL_requires_max_(APC_LEVEL)
1427 BOOLEAN
1428 FLTAPI
1429 FltSupportsStreamContexts(
1430  _In_ PFILE_OBJECT FileObject);
1431 
1432 _IRQL_requires_max_(APC_LEVEL)
1433 BOOLEAN
1434 FLTAPI
1435 FltSupportsStreamHandleContexts(
1436  _In_ PFILE_OBJECT FileObject);
1437 
1438 _Must_inspect_result_
1439 _IRQL_requires_max_(APC_LEVEL)
1440 NTSTATUS
1441 FLTAPI
1442 FltAllocateContext(
1443  _In_ PFLT_FILTER Filter,
1444  _In_ FLT_CONTEXT_TYPE ContextType,
1445  _In_ SIZE_T ContextSize,
1446  _In_ POOL_TYPE PoolType,
1447  _Outptr_result_bytebuffer_(ContextSize) PFLT_CONTEXT *ReturnedContext);
1448 
1449 _IRQL_requires_max_(APC_LEVEL)
1450 VOID
1451 FLTAPI
1452 FltGetContexts(
1453  _In_ PCFLT_RELATED_OBJECTS FltObjects,
1454  _In_ FLT_CONTEXT_TYPE DesiredContexts,
1455  _Out_ PFLT_RELATED_CONTEXTS Contexts);
1456 
1457 _IRQL_requires_max_(APC_LEVEL)
1458 VOID
1459 FLTAPI
1460 FltReleaseContexts(
1461  _In_ PFLT_RELATED_CONTEXTS Contexts);
1462 
1463 _IRQL_requires_max_(APC_LEVEL)
1464 NTSTATUS
1465 FLTAPI
1466 FltSetVolumeContext(
1467  _In_ PFLT_VOLUME Volume,
1468  _In_ FLT_SET_CONTEXT_OPERATION Operation,
1469  _In_ PFLT_CONTEXT NewContext,
1470  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1471 
1472 _IRQL_requires_max_(APC_LEVEL)
1473 NTSTATUS
1474 FLTAPI
1475 FltSetInstanceContext(
1476  _In_ PFLT_INSTANCE Instance,
1477  _In_ FLT_SET_CONTEXT_OPERATION Operation,
1478  _In_ PFLT_CONTEXT NewContext,
1479  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1480 
1481 _IRQL_requires_max_(APC_LEVEL)
1482 NTSTATUS
1483 FLTAPI
1484 FltSetFileContext(
1485  _In_ PFLT_INSTANCE Instance,
1486  _In_ PFILE_OBJECT FileObject,
1487  _In_ FLT_SET_CONTEXT_OPERATION Operation,
1488  _In_ PFLT_CONTEXT NewContext,
1489  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1490 
1491 _IRQL_requires_max_(APC_LEVEL)
1492 NTSTATUS
1493 FLTAPI
1494 FltSetStreamContext(
1495  _In_ PFLT_INSTANCE Instance,
1496  _In_ PFILE_OBJECT FileObject,
1497  _In_ FLT_SET_CONTEXT_OPERATION Operation,
1498  _In_ PFLT_CONTEXT NewContext,
1499  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1500 
1501 _IRQL_requires_max_(APC_LEVEL)
1502 NTSTATUS
1503 FLTAPI
1504 FltSetStreamHandleContext(
1505  _In_ PFLT_INSTANCE Instance,
1506  _In_ PFILE_OBJECT FileObject,
1507  _In_ FLT_SET_CONTEXT_OPERATION Operation,
1508  _In_ PFLT_CONTEXT NewContext,
1509  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1510 
1511 _IRQL_requires_max_(APC_LEVEL)
1512 VOID
1513 FLTAPI
1514 FltDeleteContext(
1515  _In_ PFLT_CONTEXT Context);
1516 
1517 _IRQL_requires_max_(APC_LEVEL)
1518 NTSTATUS
1519 FLTAPI
1520 FltDeleteVolumeContext(
1521  _In_ PFLT_FILTER Filter,
1522  _In_ PFLT_VOLUME Volume,
1523  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1524 
1525 _IRQL_requires_max_(APC_LEVEL)
1526 NTSTATUS
1527 FLTAPI
1528 FltDeleteInstanceContext(
1529  _In_ PFLT_INSTANCE Instance,
1530  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1531 
1532 _IRQL_requires_max_(APC_LEVEL)
1533 NTSTATUS
1534 FLTAPI
1535 FltDeleteFileContext(
1536  _In_ PFLT_INSTANCE Instance,
1537  _In_ PFILE_OBJECT FileObject,
1538  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1539 
1540 _IRQL_requires_max_(APC_LEVEL)
1541 NTSTATUS
1542 FLTAPI
1543 FltDeleteStreamContext(
1544  _In_ PFLT_INSTANCE Instance,
1545  _In_ PFILE_OBJECT FileObject,
1546  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1547 
1548 _IRQL_requires_max_(APC_LEVEL)
1549 NTSTATUS
1550 FLTAPI
1551 FltDeleteStreamHandleContext(
1552  _In_ PFLT_INSTANCE Instance,
1553  _In_ PFILE_OBJECT FileObject,
1554  _Outptr_opt_result_maybenull_ PFLT_CONTEXT *OldContext);
1555 
1556 _IRQL_requires_max_(APC_LEVEL)
1557 NTSTATUS
1558 FLTAPI
1559 FltGetVolumeContext(
1560  _In_ PFLT_FILTER Filter,
1561  _In_ PFLT_VOLUME Volume,
1562  _Outptr_ PFLT_CONTEXT *Context);
1563 
1564 _IRQL_requires_max_(APC_LEVEL)
1565 NTSTATUS
1566 FLTAPI
1567 FltGetInstanceContext(
1568  _In_ PFLT_INSTANCE Instance,
1569  _Outptr_ PFLT_CONTEXT *Context);
1570 
1571 _IRQL_requires_max_(APC_LEVEL)
1572 NTSTATUS
1573 FLTAPI
1574 FltGetFileContext(
1575  _In_ PFLT_INSTANCE Instance,
1576  _In_ PFILE_OBJECT FileObject,
1577  _Outptr_ PFLT_CONTEXT *Context);
1578 
1579 _IRQL_requires_max_(APC_LEVEL)
1580 NTSTATUS
1581 FLTAPI
1582 FltGetStreamContext(
1583  _In_ PFLT_INSTANCE Instance,
1584  _In_ PFILE_OBJECT FileObject,
1585  _Outptr_ PFLT_CONTEXT *Context);
1586 
1587 _IRQL_requires_max_(APC_LEVEL)
1588 NTSTATUS
1589 FLTAPI
1590 FltGetStreamHandleContext(
1591  _In_ PFLT_INSTANCE Instance,
1592  _In_ PFILE_OBJECT FileObject,
1593  _Outptr_ PFLT_CONTEXT *Context);
1594 
1595 _IRQL_requires_max_(DISPATCH_LEVEL)
1596 VOID
1597 FLTAPI
1598 FltReferenceContext(
1599  _In_ PFLT_CONTEXT Context);
1600 
1601 _IRQL_requires_max_(DISPATCH_LEVEL)
1602 VOID
1603 FLTAPI
1604 FltReleaseContext(
1605  _In_ PFLT_CONTEXT Context);
1606 
1607 _IRQL_requires_max_(APC_LEVEL)
1608 NTSTATUS
1609 FLTAPI
1610 FltGetFilterFromName(
1611  _In_ PCUNICODE_STRING FilterName,
1612  _Outptr_ PFLT_FILTER *RetFilter);
1613 
1614 _IRQL_requires_max_(PASSIVE_LEVEL)
1615 NTSTATUS
1616 FLTAPI
1617 FltGetVolumeFromName(
1618  _In_ PFLT_FILTER Filter,
1619  _In_ PCUNICODE_STRING VolumeName,
1620  _Outptr_ PFLT_VOLUME *RetVolume);
1621 
1622 _IRQL_requires_max_(APC_LEVEL)
1623 NTSTATUS
1624 FLTAPI
1625 FltGetVolumeInstanceFromName(
1626  _In_opt_ PFLT_FILTER Filter,
1627  _In_ PFLT_VOLUME Volume,
1628  _In_opt_ PCUNICODE_STRING InstanceName,
1629  _Outptr_ PFLT_INSTANCE *RetInstance);
1630 
1631 _IRQL_requires_max_(APC_LEVEL)
1632 NTSTATUS
1633 FLTAPI
1634 FltGetVolumeFromInstance(
1635  _In_ PFLT_INSTANCE Instance,
1636  _Outptr_ PFLT_VOLUME *RetVolume);
1637 
1638 _IRQL_requires_max_(APC_LEVEL)
1639 NTSTATUS
1640 FLTAPI
1641 FltGetFilterFromInstance(
1642  _In_ PFLT_INSTANCE Instance,
1643  _Outptr_ PFLT_FILTER *RetFilter);
1644 
1645 _IRQL_requires_max_(APC_LEVEL)
1646 NTSTATUS
1647 FLTAPI
1648 FltGetVolumeFromFileObject(
1649  _In_ PFLT_FILTER Filter,
1650  _In_ PFILE_OBJECT FileObject,
1651  _Outptr_ PFLT_VOLUME *RetVolume);
1652 
1653 _IRQL_requires_max_(APC_LEVEL)
1654 NTSTATUS
1655 FLTAPI
1656 FltGetVolumeFromDeviceObject(
1657  _In_ PFLT_FILTER Filter,
1658  _In_ PDEVICE_OBJECT DeviceObject,
1659  _Outptr_ PFLT_VOLUME *RetVolume);
1660 
1661 _IRQL_requires_max_(DISPATCH_LEVEL)
1662 NTSTATUS
1663 FLTAPI
1664 FltGetDeviceObject(
1665  _In_ PFLT_VOLUME Volume,
1666  _Outptr_ PDEVICE_OBJECT *DeviceObject);
1667 
1668 _IRQL_requires_max_(DISPATCH_LEVEL)
1669 NTSTATUS
1670 FLTAPI
1671 FltGetDiskDeviceObject(
1672  _In_ PFLT_VOLUME Volume,
1673  _Outptr_ PDEVICE_OBJECT *DiskDeviceObject);
1674 
1675 _IRQL_requires_max_(APC_LEVEL)
1676 NTSTATUS
1677 FLTAPI
1678 FltGetLowerInstance(
1679  _In_ PFLT_INSTANCE CurrentInstance,
1680  _Outptr_ PFLT_INSTANCE *LowerInstance);
1681 
1682 _IRQL_requires_max_(APC_LEVEL)
1683 NTSTATUS
1684 FLTAPI
1685 FltGetUpperInstance(
1686  _In_ PFLT_INSTANCE CurrentInstance,
1687  _Outptr_ PFLT_INSTANCE *UpperInstance);
1688 
1689 _IRQL_requires_max_(APC_LEVEL)
1690 NTSTATUS
1691 FLTAPI
1692 FltGetTopInstance(
1693  _In_ PFLT_VOLUME Volume,
1694  _Outptr_ PFLT_INSTANCE *Instance);
1695 
1696 _IRQL_requires_max_(APC_LEVEL)
1697 NTSTATUS
1698 FLTAPI
1699 FltGetBottomInstance(
1700  _In_ PFLT_VOLUME Volume,
1701  _Outptr_ PFLT_INSTANCE *Instance);
1702 
1703 LONG
1704 FLTAPI
1705 FltCompareInstanceAltitudes(
1706  _In_ PFLT_INSTANCE Instance1,
1707  _In_ PFLT_INSTANCE Instance2);
1708 
1709 _IRQL_requires_max_(APC_LEVEL)
1710 NTSTATUS
1711 FLTAPI
1712 FltGetFilterInformation(
1713  _In_ PFLT_FILTER Filter,
1714  _In_ FILTER_INFORMATION_CLASS InformationClass,
1715  _Out_writes_bytes_to_opt_(BufferSize, *BytesReturned) PVOID Buffer,
1716  _In_ ULONG BufferSize,
1717  _Out_ PULONG BytesReturned);
1718 
1719 _IRQL_requires_max_(APC_LEVEL)
1720 NTSTATUS
1721 FLTAPI
1722 FltGetInstanceInformation(
1723  _In_ PFLT_INSTANCE Instance,
1724  _In_ INSTANCE_INFORMATION_CLASS InformationClass,
1725  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
1726  _In_ ULONG BufferSize,
1727  _Out_ PULONG BytesReturned);
1728 
1729 _IRQL_requires_max_(APC_LEVEL)
1730 NTSTATUS
1731 FLTAPI
1732 FltGetVolumeProperties(
1733  _In_ PFLT_VOLUME Volume,
1734  _Out_writes_bytes_to_opt_(VolumePropertiesLength,*LengthReturned) PFLT_VOLUME_PROPERTIES VolumeProperties,
1735  _In_ ULONG VolumePropertiesLength,
1736  _Out_ PULONG LengthReturned);
1737 
1738 _Must_inspect_result_
1739 _IRQL_requires_max_(PASSIVE_LEVEL)
1740 NTSTATUS
1741 FLTAPI
1742 FltIsVolumeWritable(
1743  _In_ PVOID FltObject,
1744  _Out_ PBOOLEAN IsWritable);
1745 
1746 _Must_inspect_result_
1747 _IRQL_requires_max_(PASSIVE_LEVEL)
1748 NTSTATUS
1749 FLTAPI
1750 FltGetVolumeGuidName(
1751  _In_ PFLT_VOLUME Volume,
1752  _Out_ PUNICODE_STRING VolumeGuidName,
1753  _Out_opt_ PULONG BufferSizeNeeded);
1754 
1755 _Must_inspect_result_
1756 _IRQL_requires_max_(PASSIVE_LEVEL)
1757 NTSTATUS
1758 FLTAPI
1759 FltQueryVolumeInformation(
1760  _In_ PFLT_INSTANCE Instance,
1761  _Out_ PIO_STATUS_BLOCK Iosb,
1762  _Out_writes_bytes_(Length) PVOID FsInformation,
1763  _In_ ULONG Length,
1764  _In_ FS_INFORMATION_CLASS FsInformationClass);
1765 
1766 _Must_inspect_result_
1767 _IRQL_requires_max_(PASSIVE_LEVEL)
1768 NTSTATUS
1769 FLTAPI
1770 FltSetVolumeInformation(
1771  _In_ PFLT_INSTANCE Instance,
1772  _Out_ PIO_STATUS_BLOCK Iosb,
1773  _Out_writes_bytes_(Length) PVOID FsInformation,
1774  _In_ ULONG Length,
1775  _In_ FS_INFORMATION_CLASS FsInformationClass);
1776 
1777 _Must_inspect_result_
1778 _IRQL_requires_max_(APC_LEVEL)
1779 NTSTATUS
1780 FLTAPI
1781 FltEnumerateFilters(
1782  _Out_writes_to_opt_(FilterListSize,*NumberFiltersReturned) PFLT_FILTER *FilterList,
1783  _In_ ULONG FilterListSize,
1784  _Out_ PULONG NumberFiltersReturned);
1785 
1786 _Must_inspect_result_
1787 _IRQL_requires_max_(APC_LEVEL)
1788 NTSTATUS
1789 FLTAPI
1790 FltEnumerateVolumes(
1791  _In_ PFLT_FILTER Filter,
1792  _Out_writes_to_opt_(VolumeListSize,*NumberVolumesReturned) PFLT_VOLUME *VolumeList,
1793  _In_ ULONG VolumeListSize,
1794  _Out_ PULONG NumberVolumesReturned);
1795 
1796 _Must_inspect_result_
1797 _IRQL_requires_max_(APC_LEVEL)
1798 NTSTATUS
1799 FLTAPI
1800 FltEnumerateInstances(
1801  _In_opt_ PFLT_VOLUME Volume,
1802  _In_opt_ PFLT_FILTER Filter,
1803  _Out_writes_to_opt_(InstanceListSize,*NumberInstancesReturned) PFLT_INSTANCE *InstanceList,
1804  _In_ ULONG InstanceListSize,
1805  _Out_ PULONG NumberInstancesReturned);
1806 
1807 _Must_inspect_result_
1808 _IRQL_requires_max_(APC_LEVEL)
1809 NTSTATUS
1810 FLTAPI
1811 FltEnumerateFilterInformation(
1812  _In_ ULONG Index,
1813  _In_ FILTER_INFORMATION_CLASS InformationClass,
1814  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
1815  _In_ ULONG BufferSize,
1816  _Out_ PULONG BytesReturned);
1817 
1818 _Must_inspect_result_
1819 _IRQL_requires_max_(APC_LEVEL)
1820 NTSTATUS
1821 FLTAPI
1822 FltEnumerateInstanceInformationByFilter(
1823  _In_ PFLT_FILTER Filter,
1824  _In_ ULONG Index,
1825  _In_ INSTANCE_INFORMATION_CLASS InformationClass,
1826  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
1827  _In_ ULONG BufferSize,
1828  _Out_ PULONG BytesReturned);
1829 
1830 _Must_inspect_result_
1831 _IRQL_requires_max_(APC_LEVEL)
1832 NTSTATUS
1833 FLTAPI
1834 FltEnumerateInstanceInformationByVolume(
1835  _In_ PFLT_VOLUME Volume,
1836  _In_ ULONG Index,
1837  _In_ INSTANCE_INFORMATION_CLASS InformationClass,
1838  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
1839  _In_ ULONG BufferSize,
1840  _Out_ PULONG BytesReturned);
1841 
1842 _Must_inspect_result_
1843 _IRQL_requires_max_(APC_LEVEL)
1844 NTSTATUS
1845 FLTAPI
1846 FltEnumerateVolumeInformation(
1847  _In_ PFLT_FILTER Filter,
1848  _In_ ULONG Index,
1849  _In_ FILTER_VOLUME_INFORMATION_CLASS InformationClass,
1850  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
1851  _In_ ULONG BufferSize,
1852  _Out_ PULONG BytesReturned);
1853 
1854 _Must_inspect_result_
1855 _IRQL_requires_max_(DISPATCH_LEVEL)
1856 NTSTATUS
1857 FLTAPI
1858 FltObjectReference(
1859  _Inout_ PVOID FltObject);
1860 
1861 _IRQL_requires_max_(DISPATCH_LEVEL)
1862 VOID
1863 FLTAPI
1864 FltObjectDereference(
1865  _Inout_ PVOID FltObject);
1866 
1867 _Must_inspect_result_
1868 _IRQL_requires_max_(PASSIVE_LEVEL)
1869 NTSTATUS
1870 FLTAPI
1871 FltCreateCommunicationPort(
1872  _In_ PFLT_FILTER Filter,
1873  _Outptr_ PFLT_PORT *ServerPort,
1874  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1875  _In_opt_ PVOID ServerPortCookie,
1876  _In_ PFLT_CONNECT_NOTIFY ConnectNotifyCallback,
1877  _In_ PFLT_DISCONNECT_NOTIFY DisconnectNotifyCallback,
1878  _In_opt_ PFLT_MESSAGE_NOTIFY MessageNotifyCallback,
1879  _In_ LONG MaxConnections);
1880 
1881 _IRQL_requires_max_(PASSIVE_LEVEL)
1882 VOID
1883 FLTAPI
1884 FltCloseCommunicationPort(
1885  _In_ PFLT_PORT ServerPort);
1886 
1887 _IRQL_requires_max_(PASSIVE_LEVEL)
1888 VOID
1889 FLTAPI
1890 FltCloseClientPort(
1891  _In_ PFLT_FILTER Filter,
1892  _Outptr_ PFLT_PORT *ClientPort);
1893 
1894 _Must_inspect_result_
1895 _IRQL_requires_max_(APC_LEVEL)
1896 NTSTATUS
1897 FLTAPI
1898 FltSendMessage(
1899  _In_ PFLT_FILTER Filter,
1900  _In_ PFLT_PORT *ClientPort,
1901  _In_reads_bytes_(SenderBufferLength) PVOID SenderBuffer,
1902  _In_ ULONG SenderBufferLength,
1903  _Out_writes_bytes_opt_(*ReplyLength) PVOID ReplyBuffer,
1904  _Inout_opt_ PULONG ReplyLength,
1905  _In_opt_ PLARGE_INTEGER Timeout);
1906 
1907 _Must_inspect_result_
1908 _IRQL_requires_max_(APC_LEVEL)
1909 NTSTATUS
1910 FLTAPI
1911 FltBuildDefaultSecurityDescriptor(
1912  _Outptr_ PSECURITY_DESCRIPTOR *SecurityDescriptor,
1913  _In_ ACCESS_MASK DesiredAccess);
1914 
1915 _IRQL_requires_max_(APC_LEVEL)
1916 VOID
1917 FLTAPI
1918 FltFreeSecurityDescriptor(
1919  _In_ PSECURITY_DESCRIPTOR SecurityDescriptor);
1920 
1921 _Must_inspect_result_
1922 _IRQL_requires_max_(DISPATCH_LEVEL)
1923 BOOLEAN
1924 FLTAPI
1925 FltCancelIo(
1926  _In_ PFLT_CALLBACK_DATA CallbackData);
1927 
1928 _IRQL_requires_max_(DISPATCH_LEVEL)
1929 NTSTATUS
1930 FLTAPI
1931 FltSetCancelCompletion(
1932  _In_ PFLT_CALLBACK_DATA CallbackData,
1933  _In_ PFLT_COMPLETE_CANCELED_CALLBACK CanceledCallback);
1934 
1935 _Must_inspect_result_
1936 _IRQL_requires_max_(DISPATCH_LEVEL)
1937 NTSTATUS
1938 FLTAPI
1939 FltClearCancelCompletion(
1940  _In_ PFLT_CALLBACK_DATA CallbackData);
1941 
1942 BOOLEAN
1943 FLTAPI
1944 FltIsIoCanceled(
1945  _In_ PFLT_CALLBACK_DATA CallbackData);
1946 
1947 _Must_inspect_result_
1948 _IRQL_requires_max_(DISPATCH_LEVEL)
1949 PFLT_DEFERRED_IO_WORKITEM
1950 FLTAPI
1951 FltAllocateDeferredIoWorkItem(VOID);
1952 
1953 _IRQL_requires_max_(DISPATCH_LEVEL)
1954 VOID
1955 FLTAPI
1956 FltFreeDeferredIoWorkItem(
1957  _In_ PFLT_DEFERRED_IO_WORKITEM FltWorkItem);
1958 
1959 _Must_inspect_result_
1960 _IRQL_requires_max_(DISPATCH_LEVEL)
1961 PFLT_GENERIC_WORKITEM
1962 FLTAPI
1963 FltAllocateGenericWorkItem(VOID);
1964 
1965 _IRQL_requires_max_(DISPATCH_LEVEL)
1966 VOID
1967 FLTAPI
1968 FltFreeGenericWorkItem(
1969  _In_ PFLT_GENERIC_WORKITEM FltWorkItem);
1970 
1971 _Must_inspect_result_
1972 _IRQL_requires_max_(DISPATCH_LEVEL)
1973 NTSTATUS
1974 FLTAPI
1975 FltQueueDeferredIoWorkItem(
1976  _In_ PFLT_DEFERRED_IO_WORKITEM FltWorkItem,
1977  _In_ PFLT_CALLBACK_DATA Data,
1978  _In_ PFLT_DEFERRED_IO_WORKITEM_ROUTINE WorkerRoutine,
1979  _In_ WORK_QUEUE_TYPE QueueType,
1980  _In_ PVOID Context);
1981 
1982 _Must_inspect_result_
1983 _IRQL_requires_max_(DISPATCH_LEVEL)
1984 NTSTATUS
1985 FLTAPI
1986 FltQueueGenericWorkItem(
1987  _In_ PFLT_GENERIC_WORKITEM FltWorkItem,
1988  _In_ PVOID FltObject,
1989  _In_ PFLT_GENERIC_WORKITEM_ROUTINE WorkerRoutine,
1990  _In_ WORK_QUEUE_TYPE QueueType,
1991  _In_opt_ PVOID Context);
1992 
1993 _Must_inspect_result_
1994 _IRQL_requires_max_(APC_LEVEL)
1995 NTSTATUS
1996 FLTAPI
1997 FltLockUserBuffer(
1998  _In_ PFLT_CALLBACK_DATA CallbackData);
1999 
2000 NTSTATUS
2001 FLTAPI
2002 FltDecodeParameters(
2003  _In_ PFLT_CALLBACK_DATA CallbackData,
2004  _Outptr_opt_ PMDL **MdlAddressPointer,
2005  _Outptr_opt_result_bytebuffer_(**Length) PVOID **Buffer,
2006  _Outptr_opt_ PULONG *Length,
2007  _Out_opt_ LOCK_OPERATION *DesiredAccess);
2008 
2009 PMDL
2010 FASTCALL
2011 FltGetSwappedBufferMdlAddress(
2012  _In_ PFLT_CALLBACK_DATA CallbackData);
2013 
2014 VOID
2015 FASTCALL
2016 FltRetainSwappedBufferMdlAddress(
2017  _In_ PFLT_CALLBACK_DATA CallbackData);
2018 
2019 NTSTATUS
2020 FLTAPI
2021 FltCbdqInitialize(
2022  _In_ PFLT_INSTANCE Instance,
2023  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
2024  _In_ PFLT_CALLBACK_DATA_QUEUE_INSERT_IO CbdqInsertIo,
2025  _In_ PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO CbdqRemoveIo,
2026  _In_ PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO CbdqPeekNextIo,
2027  _In_ PFLT_CALLBACK_DATA_QUEUE_ACQUIRE CbdqAcquire,
2028  _In_ PFLT_CALLBACK_DATA_QUEUE_RELEASE CbdqRelease,
2029  _In_ PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO CbdqCompleteCanceledIo);
2030 
2031 VOID
2032 FLTAPI
2033 FltCbdqEnable(
2034  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq);
2035 
2036 VOID
2037 FLTAPI
2038 FltCbdqDisable(
2039  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq);
2040 
2041 _Must_inspect_result_
2042 NTSTATUS
2043 FLTAPI
2044 FltCbdqInsertIo(
2045  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
2046  _In_ PFLT_CALLBACK_DATA Cbd,
2047  _In_opt_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context,
2048  _In_opt_ PVOID InsertContext);
2049 
2050 _Must_inspect_result_
2051 PFLT_CALLBACK_DATA
2052 FLTAPI
2053 FltCbdqRemoveIo(
2054  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
2055  _In_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context);
2056 
2057 _Must_inspect_result_
2058 PFLT_CALLBACK_DATA
2059 FLTAPI
2060 FltCbdqRemoveNextIo(
2061  _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq,
2062  _In_opt_ PVOID PeekContext);
2063 
2064 _IRQL_requires_max_(APC_LEVEL)
2065 VOID
2066 FLTAPI
2067 FltInitializeOplock(
2068  _Out_ POPLOCK Oplock);
2069 
2070 _IRQL_requires_max_(APC_LEVEL)
2071 VOID
2072 FLTAPI
2073 FltUninitializeOplock(
2074  _In_ POPLOCK Oplock);
2075 
2076 _Must_inspect_result_
2077 _IRQL_requires_max_(APC_LEVEL)
2078 FLT_PREOP_CALLBACK_STATUS
2079 FLTAPI
2080 FltOplockFsctrl(
2081  _In_ POPLOCK Oplock,
2082  _In_ PFLT_CALLBACK_DATA CallbackData,
2083  _In_ ULONG OpenCount);
2084 
2085 _Must_inspect_result_
2086 _IRQL_requires_max_(APC_LEVEL)
2087 FLT_PREOP_CALLBACK_STATUS
2088 FLTAPI
2089 FltCheckOplock(
2090  _In_ POPLOCK Oplock,
2091  _In_ PFLT_CALLBACK_DATA CallbackData,
2092  _In_opt_ PVOID Context,
2093  _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine,
2094  _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine);
2095 
2096 _IRQL_requires_max_(APC_LEVEL)
2097 BOOLEAN
2098 FLTAPI
2099 FltOplockIsFastIoPossible(
2100  _In_ POPLOCK Oplock);
2101 
2102 _IRQL_requires_max_(APC_LEVEL)
2103 BOOLEAN
2104 FLTAPI
2105 FltCurrentBatchOplock(
2106  _In_ POPLOCK Oplock);
2107 
2108 VOID
2109 FLTAPI
2110 FltInitializeFileLock(
2111  _Out_ PFILE_LOCK FileLock);
2112 
2113 VOID
2114 FLTAPI
2115 FltUninitializeFileLock(
2116  _In_ PFILE_LOCK FileLock);
2117 
2118 _Must_inspect_result_
2119 _IRQL_requires_max_(APC_LEVEL)
2120 PFILE_LOCK
2121 FLTAPI
2122 FltAllocateFileLock(
2123  _In_opt_ PFLT_COMPLETE_LOCK_CALLBACK_DATA_ROUTINE CompleteLockCallbackDataRoutine,
2124  _In_opt_ PUNLOCK_ROUTINE UnlockRoutine);
2125 
2126 _IRQL_requires_max_(APC_LEVEL)
2127 VOID
2128 FLTAPI
2129 FltFreeFileLock(
2130  _In_ PFILE_LOCK FileLock);
2131 
2132 _Must_inspect_result_
2133 _IRQL_requires_max_(APC_LEVEL)
2134 FLT_PREOP_CALLBACK_STATUS
2135 FLTAPI
2136 FltProcessFileLock(
2137  _In_ PFILE_LOCK FileLock,
2138  _In_ PFLT_CALLBACK_DATA CallbackData,
2139  _In_opt_ PVOID Context);
2140 
2141 _Must_inspect_result_
2142 _IRQL_requires_max_(APC_LEVEL)
2143 BOOLEAN
2144 FLTAPI
2145 FltCheckLockForReadAccess(
2146  _In_ PFILE_LOCK FileLock,
2147  _In_ PFLT_CALLBACK_DATA CallbackData);
2148 
2149 _Must_inspect_result_
2150 _IRQL_requires_max_(APC_LEVEL)
2151 BOOLEAN
2152 FLTAPI
2153 FltCheckLockForWriteAccess(
2154  _In_ PFILE_LOCK FileLock,
2155  _In_ PFLT_CALLBACK_DATA CallbackData);
2156 
2157 _Acquires_lock_(_Global_critical_region_)
2158 _IRQL_requires_max_(APC_LEVEL)
2159 VOID
2160 FLTAPI
2161 FltAcquireResourceExclusive(
2162  _Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PERESOURCE Resource);
2163 
2164 _Acquires_lock_(_Global_critical_region_)
2165 _IRQL_requires_max_(APC_LEVEL)
2166 VOID
2167 FLTAPI
2168 FltAcquireResourceShared(
2169  _Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PERESOURCE Resource);
2170 
2171 _Releases_lock_(_Global_critical_region_)
2172 _IRQL_requires_max_(DISPATCH_LEVEL)
2173 VOID
2174 FLTAPI
2175 FltReleaseResource(
2176  _Inout_ _Requires_lock_held_(*_Curr_) _Releases_lock_(*_Curr_) PERESOURCE Resource);
2177 
2178 _IRQL_requires_max_(APC_LEVEL)
2179 VOID
2180 FLTAPI
2181 FltInitializePushLock(
2182  _Out_ PEX_PUSH_LOCK PushLock);
2183 
2184 _IRQL_requires_max_(APC_LEVEL)
2185 VOID
2186 FLTAPI
2187 FltDeletePushLock(
2188  _In_ PEX_PUSH_LOCK PushLock);
2189 
2190 _Acquires_lock_(_Global_critical_region_)
2191 _IRQL_requires_max_(APC_LEVEL)
2192 VOID
2193 FLTAPI
2194 FltAcquirePushLockExclusive(
2195  _Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PEX_PUSH_LOCK PushLock);
2196 
2197 _Acquires_lock_(_Global_critical_region_)
2198 _IRQL_requires_max_(APC_LEVEL)
2199 VOID
2200 FLTAPI
2201 FltAcquirePushLockShared(
2202  _Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PEX_PUSH_LOCK PushLock);
2203 
2204 _Releases_lock_(_Global_critical_region_)
2205 _IRQL_requires_max_(APC_LEVEL)
2206 VOID
2207 FLTAPI
2208 FltReleasePushLock(
2209  _Inout_ _Requires_lock_held_(*_Curr_) _Releases_lock_(*_Curr_) PEX_PUSH_LOCK PushLock);
2210 
2211 BOOLEAN
2212 FLTAPI
2213 FltIsOperationSynchronous(
2214  _In_ PFLT_CALLBACK_DATA CallbackData);
2215 
2216 _IRQL_requires_max_(DISPATCH_LEVEL)
2217 BOOLEAN
2218 FLTAPI
2219 FltIs32bitProcess(
2220  _In_opt_ PFLT_CALLBACK_DATA CallbackData);
2221 
2222 _IRQL_requires_max_(DISPATCH_LEVEL)
2223 PEPROCESS
2224 FLTAPI
2225 FltGetRequestorProcess(
2226  _In_ PFLT_CALLBACK_DATA CallbackData);
2227 
2228 _IRQL_requires_max_(DISPATCH_LEVEL)
2229 ULONG
2230 FLTAPI
2231 FltGetRequestorProcessId(
2232  _In_ PFLT_CALLBACK_DATA CallbackData);
2233 
2234 _IRQL_requires_max_(APC_LEVEL)
2235 VOID
2236 FLTAPI
2237 FltNotifyFilterChangeDirectory(
2238  _Inout_ PNOTIFY_SYNC NotifySync,
2239  _Inout_ PLIST_ENTRY NotifyList,
2240  _In_ PVOID FsContext,
2241  _In_ PSTRING FullDirectoryName,
2242  _In_ BOOLEAN WatchTree,
2243  _In_ BOOLEAN IgnoreBuffer,
2244  _In_ ULONG CompletionFilter,
2245  _In_ PFLT_CALLBACK_DATA NotifyCallbackData,
2246  _In_opt_ PCHECK_FOR_TRAVERSE_ACCESS TraverseCallback,
2247  _In_opt_ PSECURITY_SUBJECT_CONTEXT SubjectContext,
2248  _In_opt_ PFILTER_REPORT_CHANGE FilterCallback);
2249 
2250 PCHAR
2251 FLTAPI
2252 FltGetIrpName(
2253  _In_ UCHAR IrpMajorCode);
2254 
2255 #if FLT_MGR_AFTER_XPSP2
2256 
2257 _Must_inspect_result_
2258 _IRQL_requires_max_(PASSIVE_LEVEL)
2259 NTSTATUS
2260 FLTAPI
2261 FltCreateFileEx(
2262  _In_ PFLT_FILTER Filter,
2263  _In_opt_ PFLT_INSTANCE Instance,
2264  _Out_ PHANDLE FileHandle,
2265  _Outptr_opt_ PFILE_OBJECT *FileObject,
2266  _In_ ACCESS_MASK DesiredAccess,
2267  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
2268  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
2269  _In_opt_ PLARGE_INTEGER AllocationSize,
2270  _In_ ULONG FileAttributes,
2271  _In_ ULONG ShareAccess,
2272  _In_ ULONG CreateDisposition,
2273  _In_ ULONG CreateOptions,
2274  _In_reads_bytes_opt_(EaLength) PVOID EaBuffer,
2275  _In_ ULONG EaLength,
2276  _In_ ULONG Flags);
2277 
2278 _Must_inspect_result_
2279 _IRQL_requires_max_(PASSIVE_LEVEL)
2280 NTSTATUS
2281 FLTAPI
2282 FltOpenVolume(
2283  _In_ PFLT_INSTANCE Instance,
2284  _Out_ PHANDLE VolumeHandle,
2285  _Outptr_opt_ PFILE_OBJECT *VolumeFileObject);
2286 
2287 _Must_inspect_result_
2288 _IRQL_requires_max_(PASSIVE_LEVEL)
2289 NTSTATUS
2290 FLTAPI
2291 FltQueryEaFile(
2292  _In_ PFLT_INSTANCE Instance,
2293  _In_ PFILE_OBJECT FileObject,
2294  _Out_writes_bytes_to_(Length,*LengthReturned) PVOID ReturnedEaData,
2295  _In_ ULONG Length,
2296  _In_ BOOLEAN ReturnSingleEntry,
2297  _In_reads_bytes_opt_(EaListLength) PVOID EaList,
2298  _In_ ULONG EaListLength,
2299  _In_opt_ PULONG EaIndex,
2300  _In_ BOOLEAN RestartScan,
2301  _Out_opt_ PULONG LengthReturned);
2302 
2303 _Must_inspect_result_
2304 _IRQL_requires_max_(PASSIVE_LEVEL)
2305 NTSTATUS
2306 FLTAPI
2307 FltSetEaFile(
2308  _In_ PFLT_INSTANCE Instance,
2309  _In_ PFILE_OBJECT FileObject,
2310  _In_reads_bytes_(Length) PVOID EaBuffer,
2311  _In_ ULONG Length);
2312 
2313 #endif /* FLT_MGR_AFTER_XPSP2 */
2314 
2315 #if FLT_MGR_LONGHORN
2316 
2317 _Must_inspect_result_
2318 _IRQL_requires_max_(PASSIVE_LEVEL)
2319 NTSTATUS
2320 FLTAPI
2321 FltCreateFileEx2(
2322  _In_ PFLT_FILTER Filter,
2323  _In_opt_ PFLT_INSTANCE Instance,
2324  _Out_ PHANDLE FileHandle,
2325  _Outptr_opt_ PFILE_OBJECT *FileObject,
2326  _In_ ACCESS_MASK DesiredAccess,
2327  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
2328  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
2329  _In_opt_ PLARGE_INTEGER AllocationSize,
2330  _In_ ULONG FileAttributes,
2331  _In_ ULONG ShareAccess,
2332  _In_ ULONG CreateDisposition,
2333  _In_ ULONG CreateOptions,
2334  _In_reads_bytes_opt_(EaLength) PVOID EaBuffer,
2335  _In_ ULONG EaLength,
2336  _In_ ULONG Flags,
2337  _In_opt_ PIO_DRIVER_CREATE_CONTEXT DriverContext);
2338 
2339 _Must_inspect_result_
2340 _IRQL_requires_max_(PASSIVE_LEVEL)
2341 NTSTATUS
2342 FLTAPI
2343 FltQueryDirectoryFile(
2344  _In_ PFLT_INSTANCE Instance,
2345  _In_ PFILE_OBJECT FileObject,
2346  _Out_writes_bytes_(Length) PVOID FileInformation,
2347  _In_ ULONG Length,
2348  _In_ FILE_INFORMATION_CLASS FileInformationClass,
2349  _In_ BOOLEAN ReturnSingleEntry,
2350  _In_opt_ PUNICODE_STRING FileName,
2351  _In_ BOOLEAN RestartScan,
2352  _Out_opt_ PULONG LengthReturned);
2353 
2354 _IRQL_requires_max_(APC_LEVEL)
2355 BOOLEAN
2356 FLTAPI
2357 FltSupportsFileContextsEx(
2358  _In_ PFILE_OBJECT FileObject,
2359  _In_opt_ PFLT_INSTANCE Instance);
2360 
2361 _IRQL_requires_max_(APC_LEVEL)
2362 NTSTATUS
2363 FLTAPI
2364 FltSetTransactionContext(
2365  _In_ PFLT_INSTANCE Instance,
2366  _In_ PKTRANSACTION Transaction,
2367  _In_ FLT_SET_CONTEXT_OPERATION Operation,
2368  _In_ PFLT_CONTEXT NewContext,
2369  _Outptr_opt_ PFLT_CONTEXT *OldContext);
2370 
2371 _IRQL_requires_max_(APC_LEVEL)
2372 NTSTATUS
2373 FLTAPI
2374 FltDeleteTransactionContext(
2375  _In_ PFLT_INSTANCE Instance,
2376  _In_ PKTRANSACTION Transaction,
2377  _Outptr_opt_ PFLT_CONTEXT *OldContext);
2378 
2379 _IRQL_requires_max_(APC_LEVEL)
2380 NTSTATUS
2381 FLTAPI
2382 FltGetTransactionContext(
2383  _In_ PFLT_INSTANCE Instance,
2384  _In_ PKTRANSACTION Transaction,
2385  _Outptr_ PFLT_CONTEXT *Context);
2386 
2387 _IRQL_requires_max_(APC_LEVEL)
2388 BOOLEAN
2389 FLTAPI
2390 FltIsFltMgrVolumeDeviceObject(
2391  _In_ PDEVICE_OBJECT DeviceObject);
2392 
2393 _IRQL_requires_max_(APC_LEVEL)
2394 NTSTATUS
2395 FLTAPI
2396 FltGetVolumeInformation(
2397  _In_ PFLT_VOLUME Volume,
2398  _In_ FILTER_VOLUME_INFORMATION_CLASS InformationClass,
2399  _Out_writes_bytes_to_opt_(BufferSize,*BytesReturned) PVOID Buffer,
2400  _In_ ULONG BufferSize,
2401  _Out_ PULONG BytesReturned);
2402 
2403 _IRQL_requires_max_(APC_LEVEL)
2404 NTSTATUS
2405 FLTAPI
2406 FltGetFileSystemType(
2407  _In_ PVOID FltObject,
2408  _Out_ PFLT_FILESYSTEM_TYPE FileSystemType);
2409 
2410 _Must_inspect_result_
2411 _IRQL_requires_max_(PASSIVE_LEVEL)
2412 NTSTATUS
2413 FLTAPI
2414 FltIsVolumeSnapshot(
2415  _In_ PVOID FltObject,
2416  _Out_ PBOOLEAN IsSnapshotVolume);
2417 
2418 _Must_inspect_result_
2419 _When_(((CallbackData!=NULL) && FLT_IS_IRP_OPERATION(CallbackData)), _IRQL_requires_max_(PASSIVE_LEVEL))
2420 _When_((!((CallbackData!=NULL) && FLT_IS_IRP_OPERATION(CallbackData))), _IRQL_requires_max_(APC_LEVEL))
2421 NTSTATUS
2422 FLTAPI
2423 FltCancellableWaitForSingleObject(
2424  _In_ PVOID Object,
2425  _In_opt_ PLARGE_INTEGER Timeout,
2426  _In_opt_ PFLT_CALLBACK_DATA CallbackData);
2427 
2428 _Must_inspect_result_
2429 _When_(((CallbackData!=NULL) && FLT_IS_IRP_OPERATION(CallbackData)), _IRQL_requires_max_(PASSIVE_LEVEL))
2430 _When_((!((CallbackData!=NULL) && FLT_IS_IRP_OPERATION(CallbackData))), _IRQL_requires_max_(APC_LEVEL))
2431 NTSTATUS
2432 FLTAPI
2433 FltCancellableWaitForMultipleObjects(
2434  _In_ ULONG Count,
2435  _In_reads_(Count) PVOID ObjectArray[],
2436  _In_ WAIT_TYPE WaitType,
2437  _In_opt_ PLARGE_INTEGER Timeout,
2438  _In_opt_ PKWAIT_BLOCK WaitBlockArray,
2439  _In_ PFLT_CALLBACK_DATA CallbackData);
2440 
2441 _IRQL_requires_max_(DISPATCH_LEVEL)
2442 HANDLE
2443 FLTAPI
2444 FltGetRequestorProcessIdEx(
2445  _In_ PFLT_CALLBACK_DATA CallbackData);
2446 
2447 _Must_inspect_result_
2448 _IRQL_requires_max_(APC_LEVEL)
2449 NTSTATUS
2450 FLTAPI
2451 FltEnlistInTransaction(
2452  _In_ PFLT_INSTANCE Instance,
2453  _In_ PKTRANSACTION Transaction,
2454  _In_ PFLT_CONTEXT TransactionContext,
2455  _In_ NOTIFICATION_MASK NotificationMask);
2456 
2457 _IRQL_requires_max_(APC_LEVEL)
2458 NTSTATUS
2459 FLTAPI
2460 FltRollbackEnlistment(
2461  _In_ PFLT_INSTANCE Instance,
2462  _In_ PKTRANSACTION Transaction,
2463  _In_opt_ PFLT_CONTEXT TransactionContext);
2464 
2465 _IRQL_requires_max_(APC_LEVEL)
2466 NTSTATUS
2467 FLTAPI
2468 FltPrePrepareComplete(
2469  _In_ PFLT_INSTANCE Instance,
2470  _In_ PKTRANSACTION Transaction,
2471  _In_opt_ PFLT_CONTEXT TransactionContext);
2472 
2473 _IRQL_requires_max_(APC_LEVEL)
2474 NTSTATUS
2475 FLTAPI
2476 FltPrepareComplete(
2477  _In_ PFLT_INSTANCE Instance,
2478  _In_ PKTRANSACTION Transaction,
2479  _In_opt_ PFLT_CONTEXT TransactionContext);
2480 
2481 _IRQL_requires_max_(PASSIVE_LEVEL)
2482 NTSTATUS
2483 FLTAPI
2484 FltCommitComplete(
2485  _In_ PFLT_INSTANCE Instance,
2486  _In_ PKTRANSACTION Transaction,
2487  _In_opt_ PFLT_CONTEXT TransactionContext);
2488 
2489 _IRQL_requires_max_(APC_LEVEL)
2490 NTSTATUS
2491 FLTAPI
2492 FltCommitFinalizeComplete(
2493  _In_ PFLT_INSTANCE Instance,
2494  _In_ PKTRANSACTION Transaction,
2495  _In_opt_ PFLT_CONTEXT TransactionContext);
2496 
2497 _IRQL_requires_max_(PASSIVE_LEVEL)
2498 NTSTATUS
2499 FLTAPI
2500 FltRollbackComplete(
2501  _In_ PFLT_INSTANCE Instance,
2502  _In_ PKTRANSACTION Transaction,
2503  _In_opt_ PFLT_CONTEXT TransactionContext);
2504 
2505 _Must_inspect_result_
2506 _IRQL_requires_max_(APC_LEVEL)
2507 NTSTATUS
2508 FLTAPI
2509 FltAllocateExtraCreateParameterList(
2510  _In_ PFLT_FILTER Filter,
2511  _In_ FSRTL_ALLOCATE_ECPLIST_FLAGS Flags,
2512  _Outptr_ PECP_LIST *EcpList);
2513 
2514 _Must_inspect_result_
2515 _IRQL_requires_max_(APC_LEVEL)
2516 NTSTATUS
2517 FLTAPI
2518 FltAllocateExtraCreateParameter(
2519  _In_ PFLT_FILTER Filter,
2520  _In_ LPCGUID EcpType,
2521  ULONG SizeOfContext,
2522  _In_ FSRTL_ALLOCATE_ECP_FLAGS Flags,
2523  _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK CleanupCallback,
2524  _In_ ULONG PoolTag,
2525  _Outptr_ PVOID *EcpContext);
2526 
2527 _IRQL_requires_max_(APC_LEVEL)
2528 VOID
2529 FLTAPI
2530 FltInitExtraCreateParameterLookasideList(
2531  _In_ PFLT_FILTER Filter,
2532  _Inout_ PVOID Lookaside,
2533  _In_ FSRTL_ECP_LOOKASIDE_FLAGS Flags,
2534  _In_ SIZE_T Size,
2535  _In_ ULONG Tag);
2536 
2537 _IRQL_requires_max_(APC_LEVEL)
2538 VOID
2539 FLTAPI
2540 FltDeleteExtraCreateParameterLookasideList(
2541  _In_ PFLT_FILTER Filter,
2542  _Inout_ PVOID Lookaside,
2543  _In_ FSRTL_ECP_LOOKASIDE_FLAGS Flags);
2544 
2545 _Must_inspect_result_
2546 _IRQL_requires_max_(APC_LEVEL)
2547 NTSTATUS
2548 FLTAPI
2549 FltAllocateExtraCreateParameterFromLookasideList(
2550  _In_ PFLT_FILTER Filter,
2551  _In_ LPCGUID EcpType,
2552  _In_ ULONG SizeOfContext,
2553  _In_ FSRTL_ALLOCATE_ECP_FLAGS Flags,
2554  _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK CleanupCallback,
2555  _Inout_ PVOID LookasideList,
2556  _Outptr_ PVOID *EcpContext);
2557 
2558 _IRQL_requires_max_(APC_LEVEL)
2559 NTSTATUS
2560 FLTAPI
2561 FltInsertExtraCreateParameter(
2562  _In_ PFLT_FILTER Filter,
2563  _Inout_ PECP_LIST EcpList,
2564  _Inout_ PVOID EcpContext);
2565 
2566 _IRQL_requires_max_(APC_LEVEL)
2567 NTSTATUS
2568 FLTAPI
2569 FltFindExtraCreateParameter(
2570  _In_ PFLT_FILTER Filter,
2571  _In_ PECP_LIST EcpList,
2572  _In_ LPCGUID EcpType,
2573  _Outptr_opt_ PVOID *EcpContext,
2574  _Out_opt_ ULONG *EcpContextSize);
2575 
2576 _IRQL_requires_max_(APC_LEVEL)
2577 NTSTATUS
2578 FLTAPI
2579 FltRemoveExtraCreateParameter(
2580  _In_ PFLT_FILTER Filter,
2581  _Inout_ PECP_LIST EcpList,
2582  _In_ LPCGUID EcpType,
2583  _Outptr_ PVOID *EcpContext,
2584  _Out_opt_ ULONG *EcpContextSize);
2585 
2586 _IRQL_requires_max_(APC_LEVEL)
2587 VOID
2588 FLTAPI
2589 FltFreeExtraCreateParameterList(
2590  _In_ PFLT_FILTER Filter,
2591  _In_ PECP_LIST EcpList);
2592 
2593 _IRQL_requires_max_(APC_LEVEL)
2594 VOID
2595 FLTAPI
2596 FltFreeExtraCreateParameter(
2597  _In_ PFLT_FILTER Filter,
2598  _In_ PVOID EcpContext);
2599 
2600 _IRQL_requires_max_(APC_LEVEL)
2601 NTSTATUS
2602 FLTAPI
2603 FltGetEcpListFromCallbackData(
2604  _In_ PFLT_FILTER Filter,
2605  _In_ PFLT_CALLBACK_DATA CallbackData,
2606  _Outptr_result_maybenull_ PECP_LIST *EcpList);
2607 
2608 _IRQL_requires_max_(APC_LEVEL)
2609 NTSTATUS
2610 FLTAPI
2611 FltSetEcpListIntoCallbackData(
2612  _In_ PFLT_FILTER Filter,
2613  _In_ PFLT_CALLBACK_DATA CallbackData,
2614  _In_ PECP_LIST EcpList);
2615 
2616 _IRQL_requires_max_(APC_LEVEL)
2617 NTSTATUS
2618 FLTAPI
2619 FltGetNextExtraCreateParameter(
2620  _In_ PFLT_FILTER Filter,
2621  _In_ PECP_LIST EcpList,
2622  _In_opt_ PVOID CurrentEcpContext,
2623  _Out_opt_ LPGUID NextEcpType,
2624  _Outptr_opt_ PVOID *NextEcpContext,
2625  _Out_opt_ ULONG *NextEcpContextSize);
2626 
2627 _IRQL_requires_max_(APC_LEVEL)
2628 VOID
2629 FLTAPI
2630 FltAcknowledgeEcp(
2631  _In_ PFLT_FILTER Filter,
2632  _In_ PVOID EcpContext);
2633 
2634 _IRQL_requires_max_(APC_LEVEL)
2635 BOOLEAN
2636 FLTAPI
2637 FltIsEcpAcknowledged(
2638  _In_ PFLT_FILTER Filter,
2639  _In_ PVOID EcpContext);
2640 
2641 _IRQL_requires_max_(APC_LEVEL)
2642 BOOLEAN
2643 FLTAPI
2644 FltIsEcpFromUserMode(
2645  _In_ PFLT_FILTER Filter,
2646  _In_ PVOID EcpContext);
2647 
2648 _IRQL_requires_max_(DISPATCH_LEVEL)
2649 NTSTATUS
2650 FLTAPI
2651 FltRetrieveIoPriorityInfo(
2652  _In_opt_ PFLT_CALLBACK_DATA Data,
2653  _In_opt_ PFILE_OBJECT FileObject,
2654  _In_opt_ PETHREAD Thread,
2655  _Inout_ PIO_PRIORITY_INFO PriorityInfo);
2656 
2657 _IRQL_requires_max_(DISPATCH_LEVEL)
2658 NTSTATUS
2659 FLTAPI
2660 FltApplyPriorityInfoThread(
2661  _In_ PIO_PRIORITY_INFO InputPriorityInfo,
2662  _Out_opt_ PIO_PRIORITY_INFO OutputPriorityInfo,
2663  _In_ PETHREAD Thread);
2664 
2665 _IRQL_requires_max_(DISPATCH_LEVEL)
2666 IO_PRIORITY_HINT
2667 FLTAPI
2668 FltGetIoPriorityHint(
2669  _In_ PFLT_CALLBACK_DATA Data);
2670 
2671 _IRQL_requires_max_(DISPATCH_LEVEL)
2672 IO_PRIORITY_HINT
2673 FLTAPI
2674 FltGetIoPriorityHintFromCallbackData(
2675  _In_ PFLT_CALLBACK_DATA Data);
2676 
2677 _IRQL_requires_max_(DISPATCH_LEVEL)
2678 NTSTATUS
2679 FLTAPI
2680 FltSetIoPriorityHintIntoCallbackData(
2681  _In_ PFLT_CALLBACK_DATA Data,
2682  _In_ IO_PRIORITY_HINT PriorityHint);
2683 
2684 _IRQL_requires_max_(DISPATCH_LEVEL)
2685 IO_PRIORITY_HINT
2686 FLTAPI
2687 FltGetIoPriorityHintFromFileObject(
2688  _In_ PFILE_OBJECT FileObject);
2689 
2690 _Must_inspect_result_
2691 _IRQL_requires_max_(DISPATCH_LEVEL)
2692 NTSTATUS
2693 FLTAPI
2694 FltSetIoPriorityHintIntoFileObject(
2695  _In_ PFILE_OBJECT FileObject,
2696  _In_ IO_PRIORITY_HINT PriorityHint);
2697 
2698 _IRQL_requires_max_(DISPATCH_LEVEL)
2699 IO_PRIORITY_HINT
2700 FLTAPI
2701 FltGetIoPriorityHintFromThread(
2702  _In_ PETHREAD Thread);
2703 
2704 _IRQL_requires_max_(DISPATCH_LEVEL)
2705 NTSTATUS
2706 FLTAPI
2707 FltSetIoPriorityHintIntoThread(
2708  _In_ PETHREAD Thread,
2709  _In_ IO_PRIORITY_HINT PriorityHint);
2710 
2711 #endif /* FLT_MGR_LONGHORN */
2712 
2713 #if FLT_MGR_WIN7
2714 
2715 _Must_inspect_result_
2716 _IRQL_requires_max_(APC_LEVEL)
2717 NTSTATUS
2718 FLTAPI
2719 FltAllocateCallbackDataEx(
2720  _In_ PFLT_INSTANCE Instance,
2721  _In_opt_ PFILE_OBJECT FileObject,
2722  _In_ FLT_ALLOCATE_CALLBACK_DATA_FLAGS Flags,
2723  _Outptr_ PFLT_CALLBACK_DATA *RetNewCallbackData);
2724 
2725 _Must_inspect_result_
2726 _IRQL_requires_max_(DPC_LEVEL)
2727 PVOID
2728 FLTAPI
2729 FltGetNewSystemBufferAddress(
2730  _In_ PFLT_CALLBACK_DATA CallbackData);
2731 
2732 _Must_inspect_result_
2733 _IRQL_requires_max_(APC_LEVEL)
2734 FLT_PREOP_CALLBACK_STATUS
2735 FLTAPI
2736 FltCheckOplockEx(
2737  _In_ POPLOCK Oplock,
2738  _In_ PFLT_CALLBACK_DATA CallbackData,
2739  _In_ ULONG Flags,
2740  _In_opt_ PVOID Context,
2741  _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine,
2742  _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine);
2743 
2744 _IRQL_requires_max_(APC_LEVEL)
2745 BOOLEAN
2746 FLTAPI
2747 FltCurrentOplock(
2748  _In_ POPLOCK Oplock);
2749 
2750 _IRQL_requires_max_(APC_LEVEL)
2751 BOOLEAN
2752 FLTAPI
2753 FltCurrentOplockH(
2754  _In_ POPLOCK Oplock);
2755 
2756 _IRQL_requires_max_(APC_LEVEL)
2757 FLT_PREOP_CALLBACK_STATUS
2758 FLTAPI
2759 FltOplockBreakH(
2760  _In_ POPLOCK Oplock,
2761  _In_ PFLT_CALLBACK_DATA CallbackData,
2762  _In_ ULONG Flags,
2763  _In_opt_ PVOID Context,
2764  _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine,
2765  _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine);
2766 
2767 _IRQL_requires_max_(APC_LEVEL)
2768 FLT_PREOP_CALLBACK_STATUS
2769 FLTAPI
2770 FltOplockBreakToNone(
2771  _In_ POPLOCK Oplock,
2772  _In_ PFLT_CALLBACK_DATA CallbackData,
2773  _In_opt_ PVOID Context,
2774  _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine,
2775  _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine);
2776 
2777 _IRQL_requires_max_(APC_LEVEL)
2778 FLT_PREOP_CALLBACK_STATUS
2779 FLTAPI
2780 FltOplockBreakToNoneEx(
2781  _In_ POPLOCK Oplock,
2782  _In_ PFLT_CALLBACK_DATA CallbackData,
2783  _In_ ULONG Flags,
2784  _In_opt_ PVOID Context,
2785  _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine,
2786  _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine);
2787 
2788 _IRQL_requires_max_(APC_LEVEL)
2789 BOOLEAN
2790 FLTAPI
2791 FltOplockIsSharedRequest(
2792  _In_ PFLT_CALLBACK_DATA CallbackData);
2793 
2794 _Must_inspect_result_
2795 _IRQL_requires_max_(APC_LEVEL)
2796 FLT_PREOP_CALLBACK_STATUS
2797 FLTAPI
2798 FltOplockFsctrlEx(
2799  _In_ POPLOCK Oplock,
2800  _In_ PFLT_CALLBACK_DATA CallbackData,
2801  _In_ ULONG OpenCount,
2802  _In_ ULONG Flags);
2803 
2804 BOOLEAN
2805 FLTAPI
2806 FltOplockKeysEqual(
2807  _In_opt_ PFILE_OBJECT Fo1,
2808  _In_opt_ PFILE_OBJECT Fo2);
2809 
2810 _Must_inspect_result_
2811 _IRQL_requires_max_(APC_LEVEL)
2812 NTSTATUS
2813 FLTAPI
2814 FltGetRequestorSessionId(
2815  _In_ PFLT_CALLBACK_DATA CallbackData,
2816  _Out_ PULONG SessionId);
2817 
2818 _IRQL_requires_max_(DISPATCH_LEVEL)
2819 NTSTATUS
2820 FLTAPI
2821 FltAdjustDeviceStackSizeForIoRedirection(
2822  _In_ PFLT_INSTANCE SourceInstance,
2823  _In_ PFLT_INSTANCE TargetInstance,
2824  _Out_opt_ PBOOLEAN SourceDeviceStackSizeModified);
2825 
2826 _IRQL_requires_max_(DISPATCH_LEVEL)
2827 NTSTATUS
2828 FLTAPI
2829 FltIsIoRedirectionAllowed(
2830  _In_ PFLT_INSTANCE SourceInstance,
2831  _In_ PFLT_INSTANCE TargetInstance,
2832  _Out_ PBOOLEAN RedirectionAllowed);
2833 
2834 _IRQL_requires_max_(DISPATCH_LEVEL)
2835 NTSTATUS
2836 FLTAPI
2837 FltIsIoRedirectionAllowedForOperation(
2838  _In_ PFLT_CALLBACK_DATA Data,
2839  _In_ PFLT_INSTANCE TargetInstance,
2840  _Out_ PBOOLEAN RedirectionAllowedThisIo,
2841  _Out_opt_ PBOOLEAN RedirectionAllowedAllIo);
2842 
2843 #endif /* FLT_MGR_WIN7 */
2844 
2845 #endif /* FLT_MGR_BASELINE */
2846 
2847 #ifdef __cplusplus
2848 } /* extern "C" */
2849 #endif
2850 
2851 #endif /* __FLTKERNEL__ */
FilterList
_Must_inspect_result_ *NumberFiltersReturned PFLT_FILTER * FilterList
Definition: fltkernel.h:1782
_FLT_PARAMETERS::Spare1
ULONG POINTER_ALIGNMENT Spare1
Definition: fltkernel.h:191
_FLT_CALLBACK_DATA_QUEUE::Csq
IO_CSQ Csq
Definition: fltkernel.h:917
_FLT_FILE_NAME_INFORMATION::Stream
UNICODE_STRING Stream
Definition: fltkernel.h:813
_SECURITY_DESCRIPTOR
Definition: ms-dtyp.idl:301
FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING
#define FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING
Definition: fltkernel.h:760
PVOID
DWORD *typedef PVOID
Definition: winlogon.h:52
FsContext
_Inout_ PLIST_ENTRY _In_ PVOID FsContext
Definition: fltkernel.h:2239
FilterListSize
_Must_inspect_result_ *NumberFiltersReturned PFLT_FILTER _In_ ULONG FilterListSize
Definition: fltkernel.h:1782
_FLT_OPERATION_REGISTRATION::MajorFunction
UCHAR MajorFunction
Definition: fltkernel.h:610
_FLT_RELATED_CONTEXTS::TransactionContext
PFLT_CONTEXT TransactionContext
Definition: fltkernel.h:490
FLT_IO_OPERATION_FLAGS
ULONG FLT_IO_OPERATION_FLAGS
Definition: fltkernel.h:753
EcpList
_Must_inspect_result_ _In_ FSRTL_ALLOCATE_ECPLIST_FLAGS _Outptr_ PECP_LIST * EcpList
Definition: fltkernel.h:2511
_FLT_PARAMETERS::StartSid
PSID StartSid
Definition: fltkernel.h:292
OutputPriorityInfo
_Out_opt_ PIO_PRIORITY_INFO OutputPriorityInfo
Definition: fltkernel.h:2662
_FLT_PARAMETERS::CheckForReadOperation
BOOLEAN POINTER_ALIGNMENT CheckForReadOperation
Definition: fltkernel.h:361
_FLT_PARAMETERS::Length
ULONG POINTER_ALIGNMENT Length
Definition: fltkernel.h:276
Volume
_Must_inspect_result_ _Inout_ PFLT_VOLUME Volume
Definition: fltkernel.h:1162
_FLT_PARAMETERS::SetLock
struct _FLT_PARAMETERS::@1753::@1785 SetLock
_FLT_REGISTRATION::TransactionNotificationCallback
PFLT_TRANSACTION_NOTIFICATION_CALLBACK TransactionNotificationCallback
Definition: fltkernel.h:743
_FLT_PARAMETERS::NetworkQueryOpen
struct _FLT_PARAMETERS::@1758 NetworkQueryOpen
_FLT_PARAMETERS::SystemBuffer
PVOID SystemBuffer
Definition: fltkernel.h:219
PFLT_CONTEXT_FREE_CALLBACK
VOID(FLTAPI * PFLT_CONTEXT_FREE_CALLBACK)(_In_ PVOID Pool, _In_ FLT_CONTEXT_TYPE ContextType)
Definition: fltkernel.h:505
PFLT_NAME_CONTROL
struct _FLT_NAME_CONTROL * PFLT_NAME_CONTROL
Timeout
_Must_inspect_result_ _In_ PFLT_PORT _In_ ULONG _Out_writes_bytes_opt_ ReplyLength PVOID _Inout_opt_ PULONG _In_opt_ PLARGE_INTEGER Timeout
Definition: fltkernel.h:1903
FileName
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ FILE_INFORMATION_CLASS _In_ BOOLEAN _In_opt_ PUNICODE_STRING FileName
Definition: fltkernel.h:2347
_FLT_PARAMETERS::DeviceObject
PDEVICE_OBJECT DeviceObject
Definition: fltkernel.h:200
_FLT_PARAMETERS::NetworkInformation
PFILE_NETWORK_OPEN_INFORMATION NetworkInformation
Definition: fltkernel.h:365
_Out_writes_bytes_to_opt_
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ ULONG _Out_writes_bytes_to_opt_(OutputBufferLength,*LengthReturned) PVOID OutputBuffer
FLT_OPERATION_REGISTRATION
struct _FLT_OPERATION_REGISTRATION FLT_OPERATION_REGISTRATION
_FLT_PARAMETERS::QueryEa
struct _FLT_PARAMETERS::@1740 QueryEa
FSRTL_ALLOCATE_ECPLIST_FLAGS
ULONG FSRTL_ALLOCATE_ECPLIST_FLAGS
Definition: fsrtltypes.h:141
_FLT_TAG_DATA_BUFFER::Flags
ULONG Flags
Definition: fltkernel.h:627
_FLT_PARAMETERS::SecurityBuffer
PVOID SecurityBuffer
Definition: fltkernel.h:277
_Must_inspect_result_
#define _Must_inspect_result_
Definition: no_sal2.h:314
FLT_INSTANCE_QUERY_TEARDOWN_FLAGS
ULONG FLT_INSTANCE_QUERY_TEARDOWN_FLAGS
Definition: fltkernel.h:552
BytesWritten
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ FLT_IO_OPERATION_FLAGS _Out_opt_ PULONG BytesWritten
Definition: fltkernel.h:1293
_EX_PUSH_LOCK
Definition: extypes.h:453
_Requires_lock_not_held_
#define _Requires_lock_not_held_(lock)
Definition: no_sal2.h:705
FsInformationClass
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ FS_INFORMATION_CLASS FsInformationClass
Definition: fltkernel.h:1329
BUS_QUERY_ID_TYPE
enum _BUS_QUERY_ID_TYPE BUS_QUERY_ID_TYPE
PFLT_FILTER_UNLOAD_CALLBACK
NTSTATUS(FLTAPI * PFLT_FILTER_UNLOAD_CALLBACK)(FLT_FILTER_UNLOAD_FLAGS Flags)
Definition: fltkernel.h:654
CallbackData
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA CallbackData
Definition: fltkernel.h:2082
PriorityHint
_In_ IO_PRIORITY_HINT PriorityHint
Definition: fltkernel.h:2682
_FLT_PARAMETERS::EaIndex
ULONG POINTER_ALIGNMENT EaIndex
Definition: fltkernel.h:160
DEVICE_TYPE
#define DEVICE_TYPE
Definition: nt_native.h:578
PrePostCallbackDataRoutine
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA _In_opt_ PVOID _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE _In_opt_ PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE PrePostCallbackDataRoutine
Definition: fltkernel.h:2091
IoControlCode
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG IoControlCode
Definition: fltkernel.h:1383
_FLT_RELATED_OBJECTS::Transaction
PKTRANSACTION CONST Transaction
Definition: fltkernel.h:480
_FLT_PARAMETERS::FileName
PUNICODE_STRING FileName
Definition: fltkernel.h:182
RestartScan
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG _In_ BOOLEAN RestartScan
Definition: fltkernel.h:2298
_FLT_REGISTRATION::OperationRegistration
CONST FLT_OPERATION_REGISTRATION * OperationRegistration
Definition: fltkernel.h:733
_FLT_NAME_CONTROL::Name
UNICODE_STRING Name
Definition: fltkernel.h:658
_FLT_PARAMETERS::FileIndex
ULONG POINTER_ALIGNMENT FileIndex
Definition: fltkernel.h:184
WaitCompletionRoutine
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA _In_opt_ PVOID _In_opt_ PFLTOPLOCK_WAIT_COMPLETE_ROUTINE WaitCompletionRoutine
Definition: fltkernel.h:2091
_SID
Definition: ms-dtyp.idl:198
_FLT_PARAMETERS::DirectoryControl
union _FLT_PARAMETERS::@1744 DirectoryControl
BufferSizeNeeded
_Must_inspect_result_ _Inout_opt_ PUNICODE_STRING _Out_opt_ PULONG BufferSizeNeeded
Definition: fltkernel.h:1117
UnlockRoutine
_Must_inspect_result_ _In_opt_ PUNLOCK_ROUTINE UnlockRoutine
Definition: fltkernel.h:2124
_FLT_PARAMETERS::NotifyDirectory
struct _FLT_PARAMETERS::@1744::@1768 NotifyDirectory
FLT_POSTOP_CALLBACK_STATUS
enum _FLT_POSTOP_CALLBACK_STATUS FLT_POSTOP_CALLBACK_STATUS
_FLT_SET_CONTEXT_OPERATION
_FLT_SET_CONTEXT_OPERATION
Definition: fltkernel.h:818
_FLT_PARAMETERS::QueryDeviceRelations
struct _FLT_PARAMETERS::@1753::@1780 QueryDeviceRelations
_FLT_PARAMETERS::MdlReadComplete
struct _FLT_PARAMETERS::@1760 MdlReadComplete
_FLT_PARAMETERS::IdType
BUS_QUERY_ID_TYPE IdType
Definition: fltkernel.h:334
_FLT_PARAMETERS::Size
USHORT Size
Definition: fltkernel.h:313
FltStartFiltering
NTSTATUS NTAPI FltStartFiltering(_In_ PFLT_FILTER Filter)
Definition: Filter.c:280
_FLT_TAG_DATA_BUFFER::GenericGUIDReparseBuffer
struct _FLT_TAG_DATA_BUFFER::@1791::@1795 GenericGUIDReparseBuffer
_FLT_REGISTRATION::NormalizeNameComponentExCallback
PFLT_NORMALIZE_NAME_COMPONENT_EX NormalizeNameComponentExCallback
Definition: fltkernel.h:744
_FLT_PARAMETERS::ClusterCount
ULONG ClusterCount
Definition: fltkernel.h:151
PFLT_CONTEXT_REGISTRATION
struct _FLT_CONTEXT_REGISTRATION * PFLT_CONTEXT_REGISTRATION
_FLT_PARAMETERS::FileInformationClass
FILE_INFORMATION_CLASS FileInformationClass
Definition: fltkernel.h:183
Data
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA Data
Definition: fltkernel.h:1977
FltDecodeParameters
NTSTATUS FLTAPI FltDecodeParameters(_In_ PFLT_CALLBACK_DATA CallbackData, _Outptr_opt_ PMDL **MdlAddressPointer, _Outptr_opt_result_bytebuffer_(**Length) PVOID **Buffer, _Outptr_opt_ PULONG *Length, _Out_opt_ LOCK_OPERATION *DesiredAccess)
_FLT_PARAMETERS::Pnp
union _FLT_PARAMETERS::@1753 Pnp
_FLT_PARAMETERS::Vpb
PVPB Vpb
Definition: fltkernel.h:199
PFLT_FILTER
struct _FLT_FILTER * PFLT_FILTER
Definition: fltkernel.h:84
_FLT_PARAMETERS::QueryId
struct _FLT_PARAMETERS::@1753::@1786 QueryId
_OBJECT_ATTRIBUTES
Definition: umtypes.h:169
SecurityDescriptor
_In_ USHORT _In_ ULONG _In_ PSOCKADDR _In_ PSOCKADDR _Reserved_ ULONG _In_opt_ PVOID _In_opt_ const WSK_CLIENT_CONNECTION_DISPATCH _In_opt_ PEPROCESS _In_opt_ PETHREAD _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor
Definition: wsk.h:182
PFLT_CONTEXT_ALLOCATE_CALLBACK
PVOID(FLTAPI * PFLT_CONTEXT_ALLOCATE_CALLBACK)(_In_ POOL_TYPE PoolType, _In_ SIZE_T Size, _In_ FLT_CONTEXT_TYPE ContextType)
Definition: fltkernel.h:499
WCHAR
__wchar_t WCHAR
Definition: xmlstorage.h:180
EaIndex
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG EaIndex
Definition: fltkernel.h:2298
_FLT_VOLUME_PROPERTIES::Reserved0
USHORT Reserved0
Definition: fltkernel.h:829
WaitType
_Must_inspect_result_ _In_ WAIT_TYPE WaitType
Definition: fsrtlfuncs.h:1151
_FLT_PARAMETERS::MdlRead
struct _FLT_PARAMETERS::@1759 MdlRead
_ANONYMOUS_UNION
#define _ANONYMOUS_UNION
Definition: ntbasedef.h:30
_FLT_PARAMETERS::SecurityDescriptor
PSECURITY_DESCRIPTOR SecurityDescriptor
Definition: fltkernel.h:282
FLT_IS_IRP_OPERATION
#define FLT_IS_IRP_OPERATION(Data)
Definition: fltkernel.h:430
ServerPort
_Must_inspect_result_ _Outptr_ PFLT_PORT * ServerPort
Definition: fltkernel.h:1873
PCSTR
const char * PCSTR
Definition: typedefs.h:52
FLT_OPERATION_REGISTRATION_FLAGS
ULONG FLT_OPERATION_REGISTRATION_FLAGS
Definition: fltkernel.h:603
CompletionContext
PVOID ULONG ULONG PULONG ULONG_PTR PACPI_OP_REGION_CALLBACK PVOID CompletionContext
Definition: oprghdlr.h:14
Size
_Inout_ PVOID _In_ FSRTL_ECP_LOOKASIDE_FLAGS _In_ SIZE_T Size
Definition: fltkernel.h:2532
SourceDeviceStackSizeModified
_In_ PFLT_INSTANCE _Out_opt_ PBOOLEAN SourceDeviceStackSizeModified
Definition: fltkernel.h:2823
_In_reads_
#define _In_reads_(size)
Definition: no_sal2.h:228
_FLT_PARAMETERS::Direct
struct _FLT_PARAMETERS::@1745::@1773 Direct
PFLT_VOLUME
struct _FLT_VOLUME * PFLT_VOLUME
Definition: fltkernel.h:85
FltOplockKeysEqual
BOOLEAN FLTAPI FltOplockKeysEqual(_In_opt_ PFILE_OBJECT Fo1, _In_opt_ PFILE_OBJECT Fo2)
PFLT_PREOP_CALLBACK_STATUS
enum _FLT_PREOP_CALLBACK_STATUS * PFLT_PREOP_CALLBACK_STATUS
DEVICE_USAGE_NOTIFICATION_TYPE
enum _DEVICE_USAGE_NOTIFICATION_TYPE DEVICE_USAGE_NOTIFICATION_TYPE
FSRTL_ECP_LOOKASIDE_FLAGS
ULONG FSRTL_ECP_LOOKASIDE_FLAGS
Definition: fsrtltypes.h:143
_FLT_PARAMETERS::FileSystemControl
union _FLT_PARAMETERS::@1745 FileSystemControl
FltObjectDereference
VOID FLTAPI FltObjectDereference(_Inout_ PVOID Object)
Definition: Object.c:53
FltCbdqInsertIo
_Must_inspect_result_ NTSTATUS FLTAPI FltCbdqInsertIo(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context, _In_opt_ PVOID InsertContext)
WorkerRoutine
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA _In_ PFLT_DEFERRED_IO_WORKITEM_ROUTINE WorkerRoutine
Definition: fltkernel.h:1977
EaBuffer
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_opt_ PVOID EaBuffer
Definition: iofuncs.h:835
_FLT_FILE_NAME_INFORMATION::ParentDir
UNICODE_STRING ParentDir
Definition: fltkernel.h:815
_FLT_PARAMETERS::Reserved
USHORT POINTER_ALIGNMENT Reserved
Definition: fltkernel.h:112
PFLT_CALLBACK_DATA_QUEUE
struct _FLT_CALLBACK_DATA_QUEUE * PFLT_CALLBACK_DATA_QUEUE
Definition: fltkernel.h:880
_FLT_CALLBACK_DATA
Definition: fltkernel.h:457
_FLT_CALLBACK_DATA_QUEUE
Definition: fltkernel.h:916
_FLT_PARAMETERS::EndingOffset
PLARGE_INTEGER EndingOffset
Definition: fltkernel.h:351
_FLT_PARAMETERS::InterfaceSpecificData
PVOID InterfaceSpecificData
Definition: fltkernel.h:316
_Outptr_
#define _Outptr_
Definition: no_sal2.h:396
PWSTR
PVOID *typedef PWSTR
Definition: winlogon.h:57
ReturnSingleEntry
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ BOOLEAN ReturnSingleEntry
Definition: fltkernel.h:2295
PFLT_RELATED_OBJECTS
struct _FLT_RELATED_OBJECTS * PFLT_RELATED_OBJECTS
_FLT_PARAMETERS::Length
PLARGE_INTEGER Length
Definition: fltkernel.h:267
_FILE_NETWORK_OPEN_INFORMATION
Definition: from_kernel.h:207
RetVolume
_In_ PCUNICODE_STRING _Outptr_ PFLT_VOLUME * RetVolume
Definition: fltkernel.h:1619
FLT_CONTEXT_TYPE
USHORT FLT_CONTEXT_TYPE
Definition: fltkernel.h:436
PFLT_GENERATE_FILE_NAME
NTSTATUS(FLTAPI * PFLT_GENERATE_FILE_NAME)(_In_ PFLT_INSTANCE Instance, _In_ PFILE_OBJECT FileObject, _In_opt_ PFLT_CALLBACK_DATA CallbackData, _In_ FLT_FILE_NAME_OPTIONS NameOptions, _Out_ PBOOLEAN CacheFileNameInformation, _Out_ PFLT_NAME_CONTROL FileName)
Definition: fltkernel.h:664
_Outptr_result_bytebuffer_
_Must_inspect_result_ _In_ FLT_CONTEXT_TYPE _In_ SIZE_T _In_ POOL_TYPE _Outptr_result_bytebuffer_(ContextSize) PFLT_CONTEXT *ReturnedContext)
_FLT_CALLBACK_DATA::QueueLinks
LIST_ENTRY QueueLinks
Definition: fltkernel.h:465
OutputBufferLength
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ ULONG _In_ ULONG OutputBufferLength
Definition: fltkernel.h:1374
FileInformation
static OUT PIO_STATUS_BLOCK OUT PVOID FileInformation
Definition: pipe.c:75
NumberVolumesReturned
_Must_inspect_result_ _In_ ULONG _Out_ PULONG NumberVolumesReturned
Definition: fltkernel.h:1793
_FLT_REGISTRATION::InstanceTeardownStartCallback
PFLT_INSTANCE_TEARDOWN_CALLBACK InstanceTeardownStartCallback
Definition: fltkernel.h:737
_FLT_REGISTRATION::InstanceSetupCallback
PFLT_INSTANCE_SETUP_CALLBACK InstanceSetupCallback
Definition: fltkernel.h:735
_FLT_VOLUME_PROPERTIES::DeviceObjectFlags
ULONG DeviceObjectFlags
Definition: fltkernel.h:826
Count
_Inout_ __drv_aliasesMem PSLIST_ENTRY _Inout_ PSLIST_ENTRY _In_ ULONG Count
Definition: exfuncs.h:1015
FLT_INSTANCE_TEARDOWN_FLAGS
ULONG FLT_INSTANCE_TEARDOWN_FLAGS
Definition: fltkernel.h:559
_FLT_PARAMETERS::Argument5
PVOID Argument5
Definition: fltkernel.h:394
_FLT_PARAMETERS::OutputBuffer
PVOID OutputBuffer
Definition: fltkernel.h:212
_IO_DRIVER_CREATE_CONTEXT
Definition: iotypes.h:4119
_FLT_PARAMETERS::PageProtection
ULONG PageProtection
Definition: fltkernel.h:348
WatchTree
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN WatchTree
Definition: fltkernel.h:2239
_FLT_PARAMETERS::SetVolumeInformation
struct _FLT_PARAMETERS::@1743 SetVolumeInformation
RetInstance
_Must_inspect_result_ _Inout_ PFLT_VOLUME _In_opt_ PCUNICODE_STRING _Outptr_opt_result_maybenull_ PFLT_INSTANCE * RetInstance
Definition: fltkernel.h:1162
ClientPort
_Outptr_ PFLT_PORT * ClientPort
Definition: fltkernel.h:1892
_FLT_CALLBACK_DATA_QUEUE::RemoveIo
PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO RemoveIo
Definition: fltkernel.h:921
_FLT_PARAMETERS::DeviceIoControl
union _FLT_PARAMETERS::@1746 DeviceIoControl
_FLT_PARAMETERS::WhichSpace
ULONG WhichSpace
Definition: fltkernel.h:325
EcpType
_Must_inspect_result_ _In_ LPCGUID EcpType
Definition: fltkernel.h:2520
_EPROCESS
Definition: pstypes.h:1192
_FLT_TAG_DATA_BUFFER::FileTag
ULONG FileTag
Definition: fltkernel.h:618
PFLTOPLOCK_WAIT_COMPLETE_ROUTINE
VOID(FLTAPI * PFLTOPLOCK_WAIT_COMPLETE_ROUTINE)(_In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context)
Definition: fltkernel.h:934
ContextSize
_Must_inspect_result_ _In_ FLT_CONTEXT_TYPE _In_ SIZE_T ContextSize
Definition: fltkernel.h:1444
_FLT_REGISTRATION::NormalizeNameComponentCallback
PFLT_NORMALIZE_NAME_COMPONENT NormalizeNameComponentCallback
Definition: fltkernel.h:740
_FLT_IO_PARAMETER_BLOCK::IrpFlags
ULONG IrpFlags
Definition: fltkernel.h:404
_FLT_CONTEXT_REGISTRATION::Size
SIZE_T Size
Definition: fltkernel.h:519
IsSnapshotVolume
_Must_inspect_result_ _Out_ PBOOLEAN IsSnapshotVolume
Definition: fltkernel.h:2416
_FLT_PARAMETERS::AllocationSize
LARGE_INTEGER AllocationSize
Definition: fltkernel.h:107
InstanceName
IN OUT PULONG IN OUT PUNICODE_STRING InstanceName
Definition: wmilib.h:28
_FLT_VOLUME_PROPERTIES
Definition: fltkernel.h:823
_FLT_VOLUME_PROPERTIES::FileSystemDriverName
UNICODE_STRING FileSystemDriverName
Definition: fltkernel.h:830
_FLT_TAG_DATA_BUFFER::PrintNameOffset
USHORT PrintNameOffset
Definition: fltkernel.h:625
_FLT_PARAMETERS::QueryDeviceText
struct _FLT_PARAMETERS::@1753::@1787 QueryDeviceText
FLT_CALLBACK_DATA
struct _FLT_CALLBACK_DATA FLT_CALLBACK_DATA
Index
_Must_inspect_result_ _In_ ULONG Index
Definition: fltkernel.h:1824
_FLT_PARAMETERS::FileOffset
LARGE_INTEGER FileOffset
Definition: fltkernel.h:358
_FLT_PARAMETERS::CreatePipe
struct _FLT_PARAMETERS::@1734 CreatePipe
_FLT_OPERATION_REGISTRATION
Definition: fltkernel.h:609
_FLT_VOLUME_PROPERTIES::DeviceType
DEVICE_TYPE DeviceType
Definition: fltkernel.h:824
_FLT_TAG_DATA_BUFFER::DUMMYUNIONNAME
_ANONYMOUS_UNION union _FLT_TAG_DATA_BUFFER::@1791 DUMMYUNIONNAME
FLT_RELATED_CONTEXTS
struct _FLT_RELATED_CONTEXTS FLT_RELATED_CONTEXTS
_FLT_RELATED_CONTEXTS::StreamHandleContext
PFLT_CONTEXT StreamHandleContext
Definition: fltkernel.h:489
PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK
VOID(* PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK)(_Inout_ PVOID EcpContext, _In_ LPCGUID EcpType)
Definition: fsrtltypes.h:135
PFLT_TAG_DATA_BUFFER
struct _FLT_TAG_DATA_BUFFER * PFLT_TAG_DATA_BUFFER
PMDL
PVOID PMDL
Definition: usb.h:39
_FLT_PARAMETERS::Buffer
PVOID Buffer
Definition: fltkernel.h:288
DEVICE_TEXT_TYPE
enum _DEVICE_TEXT_TYPE DEVICE_TEXT_TYPE
_FLT_PARAMETERS::Offset
ULONG Offset
Definition: fltkernel.h:327
FASTCALL
#define FASTCALL
Definition: nt_native.h:50
_FLT_RELATED_OBJECTS::FileObject
PFILE_OBJECT CONST FileObject
Definition: fltkernel.h:479
Transaction
_In_ PKTRANSACTION Transaction
Definition: fltkernel.h:2366
Irql
_Out_ PKIRQL Irql
Definition: csq.h:179
Reason
ULONG Reason
Definition: ntimage.h:533
_FLT_PARAMETERS::WriteBuffer
PVOID WriteBuffer
Definition: fltkernel.h:134
_FLT_PARAMETERS::InterfaceType
CONST GUID * InterfaceType
Definition: fltkernel.h:312
_FLT_IO_PARAMETER_BLOCK::TargetInstance
PFLT_INSTANCE TargetInstance
Definition: fltkernel.h:410
_FLT_PARAMETERS::VolumeBuffer
PVOID VolumeBuffer
Definition: fltkernel.h:172
_FLT_PARAMETERS::FastIoCheckIfPossible
struct _FLT_PARAMETERS::@1757 FastIoCheckIfPossible
PFLT_CALLBACK_DATA_QUEUE_INSERT_IO
NTSTATUS(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_INSERT_IO)(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PVOID InsertContext)
Definition: fltkernel.h:883
_FLT_IO_PARAMETER_BLOCK::Parameters
FLT_PARAMETERS Parameters
Definition: fltkernel.h:411
_FLT_TAG_DATA_BUFFER::TagDataLength
USHORT TagDataLength
Definition: fltkernel.h:619
RedirectionAllowedAllIo
_In_ PFLT_INSTANCE _Out_ PBOOLEAN _Out_opt_ PBOOLEAN RedirectionAllowedAllIo
Definition: fltkernel.h:2839
FinalComponent
_Inout_opt_ PUNICODE_STRING _Inout_opt_ PUNICODE_STRING _Inout_opt_ PUNICODE_STRING FinalComponent
Definition: fltkernel.h:1092
RootDirectory
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ HANDLE RootDirectory
Definition: fltkernel.h:1126
_FLT_PARAMETERS::MdlWriteComplete
struct _FLT_PARAMETERS::@1762 MdlWriteComplete
_FLT_OPERATION_REGISTRATION::Flags
FLT_OPERATION_REGISTRATION_FLAGS Flags
Definition: fltkernel.h:611
FilterCallback
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_ PFLT_CALLBACK_DATA _In_opt_ PCHECK_FOR_TRAVERSE_ACCESS _In_opt_ PSECURITY_SUBJECT_CONTEXT _In_opt_ PFILTER_REPORT_CHANGE FilterCallback
Definition: fltkernel.h:2239
PFLT_SET_CONTEXT_OPERATION
enum _FLT_SET_CONTEXT_OPERATION * PFLT_SET_CONTEXT_OPERATION
InputBuffer
CHAR InputBuffer[80]
Definition: conmgr.c:33
_In_opt_
#define _In_opt_
Definition: no_sal2.h:213
RetFileNameInformation
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ HANDLE _In_ ULONG _In_ FLT_FILE_NAME_OPTIONS _Outptr_ PFLT_FILE_NAME_INFORMATION * RetFileNameInformation
Definition: fltkernel.h:1129
RetFilter
_Must_inspect_result_ _In_ CONST FLT_REGISTRATION _Outptr_ PFLT_FILTER * RetFilter
Definition: fltkernel.h:991
FltCbdqEnable
VOID FLTAPI FltCbdqEnable(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq)
_FLT_NAME_CONTROL
Definition: fltkernel.h:657
DesiredContexts
_In_ FLT_CONTEXT_TYPE DesiredContexts
Definition: fltkernel.h:1454
_FLT_PARAMETERS::DeviceCapabilities
struct _FLT_PARAMETERS::@1753::@1782 DeviceCapabilities
FltCbdqInitialize
NTSTATUS FLTAPI FltCbdqInitialize(_In_ PFLT_INSTANCE Instance, _Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA_QUEUE_INSERT_IO CbdqInsertIo, _In_ PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO CbdqRemoveIo, _In_ PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO CbdqPeekNextIo, _In_ PFLT_CALLBACK_DATA_QUEUE_ACQUIRE CbdqAcquire, _In_ PFLT_CALLBACK_DATA_QUEUE_RELEASE CbdqRelease, _In_ PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO CbdqCompleteCanceledIo)
_FLT_PARAMETERS::DeviceType
ULONG DeviceType
Definition: fltkernel.h:387
CreateDisposition
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG CreateDisposition
Definition: fltkernel.h:1230
PFLT_PORT
struct _FLT_PORT * PFLT_PORT
Definition: fltkernel.h:87
_FLT_PARAMETERS::SetEa
struct _FLT_PARAMETERS::@1741 SetEa
FLT_NAME_CONTROL
struct _FLT_NAME_CONTROL FLT_NAME_CONTROL
ULONG_PTR
uint32_t ULONG_PTR
Definition: typedefs.h:64
FLT_FILE_NAME_OPTIONS
ULONG FLT_FILE_NAME_OPTIONS
Definition: fltkernel.h:661
_FLT_PARAMETERS::DUMMYSTRUCTNAME
_ANONYMOUS_STRUCT struct _FLT_PARAMETERS::@1739::@1765::@1766 DUMMYSTRUCTNAME
_FLT_PARAMETERS::BufferSize
ULONG BufferSize
Definition: fltkernel.h:287
_FLT_PARAMETERS::Read
struct _FLT_PARAMETERS::@1736 Read
_FLT_PARAMETERS::SyncType
FS_FILTER_SECTION_SYNC_TYPE SyncType
Definition: fltkernel.h:347
_FLT_FILE_NAME_INFORMATION::Volume
UNICODE_STRING Volume
Definition: fltkernel.h:810
_FILE_NAMES_INFORMATION
Definition: from_kernel.h:117
_FLT_PARAMETERS::SecurityContext
PIO_SECURITY_CONTEXT SecurityContext
Definition: fltkernel.h:101
_FLT_PARAMETERS::EaBuffer
PVOID EaBuffer
Definition: fltkernel.h:106
_FLT_PARAMETERS::InputBuffer
PVOID InputBuffer
Definition: fltkernel.h:211
_FLT_PARAMETERS::ReadWriteConfig
struct _FLT_PARAMETERS::@1753::@1784 ReadWriteConfig
Iosb
_Must_inspect_result_ _Out_ PIO_STATUS_BLOCK Iosb
Definition: fltkernel.h:1761
ReplyLength
_Must_inspect_result_ _In_ PFLT_PORT _In_ ULONG _Out_writes_bytes_opt_ ReplyLength PVOID _Inout_opt_ PULONG ReplyLength
Definition: fltkernel.h:1903
VolumePropertiesLength
_In_ ULONG VolumePropertiesLength
Definition: fltkernel.h:1735
_FLT_CALLBACK_DATA_QUEUE::Release
PFLT_CALLBACK_DATA_QUEUE_RELEASE Release
Definition: fltkernel.h:924
KIRQL
UCHAR KIRQL
Definition: env_spec_w32.h:591
CallbackRoutine
_Must_inspect_result_ _In_ PFLT_GET_OPERATION_STATUS_CALLBACK CallbackRoutine
Definition: fltkernel.h:1035
VolumeFileObject
_Must_inspect_result_ _Out_ PHANDLE _Outptr_opt_ PFILE_OBJECT * VolumeFileObject
Definition: fltkernel.h:2284
_FLT_PARAMETERS::QueryQuota
struct _FLT_PARAMETERS::@1751 QueryQuota
UpperInstance
_Outptr_ PFLT_INSTANCE * UpperInstance
Definition: fltkernel.h:1687
PCFLT_CONTEXT_REGISTRATION
const struct _FLT_CONTEXT_REGISTRATION * PCFLT_CONTEXT_REGISTRATION
Definition: fltkernel.h:525
FilterContext
_In_ PVOID FilterContext
Definition: fsrtltypes.h:299
_FLT_REGISTRATION::Size
USHORT Size
Definition: fltkernel.h:729
FLT_PREOP_CALLBACK_STATUS
enum _FLT_PREOP_CALLBACK_STATUS FLT_PREOP_CALLBACK_STATUS
FLT_POST_OPERATION_FLAGS
ULONG FLT_POST_OPERATION_FLAGS
Definition: fltkernel.h:592
FltCompareInstanceAltitudes
LONG FLTAPI FltCompareInstanceAltitudes(_In_ PFLT_INSTANCE Instance1, _In_ PFLT_INSTANCE Instance2)
PFLT_FILE_NAME_INFORMATION
struct _FLT_FILE_NAME_INFORMATION * PFLT_FILE_NAME_INFORMATION
_FLT_PARAMETERS::DUMMYUNIONNAME
_ANONYMOUS_UNION union _FLT_PARAMETERS::@1739::@1765 DUMMYUNIONNAME
PERESOURCE
ERESOURCE * PERESOURCE
Definition: env_spec_w32.h:595
_FLT_REGISTRATION::NormalizeContextCleanupCallback
PFLT_NORMALIZE_CONTEXT_CLEANUP NormalizeContextCleanupCallback
Definition: fltkernel.h:741
_FLT_TAG_DATA_BUFFER::MountPointReparseBuffer
struct _FLT_TAG_DATA_BUFFER::@1791::@1793 MountPointReparseBuffer
_FLT_PARAMETERS::Capabilities
PDEVICE_CAPABILITIES Capabilities
Definition: fltkernel.h:319
_FLT_CONTEXT_REGISTRATION::Flags
FLT_CONTEXT_REGISTRATION_FLAGS Flags
Definition: fltkernel.h:517
_FLT_PARAMETERS::FastIo
struct _FLT_PARAMETERS::@1746::@1778 FastIo
PoolType
_Must_inspect_result_ _In_ FLT_CONTEXT_TYPE _In_ SIZE_T _In_ POOL_TYPE PoolType
Definition: fltkernel.h:1444
_FLT_OPERATION_REGISTRATION::PostOperation
PFLT_POST_OPERATION_CALLBACK PostOperation
Definition: fltkernel.h:613
_FLT_PARAMETERS::Neither
struct _FLT_PARAMETERS::@1745::@1771 Neither
FltRetainSwappedBufferMdlAddress
VOID FASTCALL FltRetainSwappedBufferMdlAddress(_In_ PFLT_CALLBACK_DATA CallbackData)
SessionId
_Must_inspect_result_ _Out_ PULONG SessionId
Definition: fltkernel.h:2816
PFLT_GET_OPERATION_STATUS_CALLBACK
VOID(FLTAPI * PFLT_GET_OPERATION_STATUS_CALLBACK)(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ PFLT_IO_PARAMETER_BLOCK IopbSnapshot, _In_ NTSTATUS OperationStatus, _In_opt_ PVOID RequesterContext)
Definition: fltkernel.h:764
_FLT_TAG_DATA_BUFFER::PrintNameLength
USHORT PrintNameLength
Definition: fltkernel.h:626
LONG
long LONG
Definition: pedump.c:60
SECURITY_INFORMATION
DWORD SECURITY_INFORMATION
Definition: ms-dtyp.idl:311
PFLT_CALLBACK_DATA_QUEUE_ACQUIRE
VOID(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_ACQUIRE)(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _Out_opt_ PKIRQL Irql)
Definition: fltkernel.h:900
PFLT_NORMALIZE_NAME_COMPONENT
NTSTATUS(FLTAPI * PFLT_NORMALIZE_NAME_COMPONENT)(_In_ PFLT_INSTANCE Instance, _In_ PCUNICODE_STRING ParentDirectory, _In_ USHORT VolumeNameLength, _In_ PCUNICODE_STRING Component, _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName, _In_ ULONG ExpandComponentNameLength, _In_ FLT_NORMALIZE_NAME_FLAGS Flags, _Inout_ PVOID *NormalizationContext)
Definition: fltkernel.h:678
DeviceObject
_In_ PDEVICE_OBJECT DeviceObject
Definition: fltkernel.h:1658
FltClearCallbackDataDirty
VOID FLTAPI FltClearCallbackDataDirty(_Inout_ PFLT_CALLBACK_DATA Data)
PFLT_VOLUME_PROPERTIES
struct _FLT_VOLUME_PROPERTIES * PFLT_VOLUME_PROPERTIES
Filter
_Must_inspect_result_ _In_opt_ PFLT_FILTER Filter
Definition: fltkernel.h:1802
EcpContext
_Must_inspect_result_ _In_ LPCGUID ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _In_ ULONG _Outptr_ PVOID * EcpContext
Definition: fltkernel.h:2520
_FLT_REGISTRATION::InstanceQueryTeardownCallback
PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK InstanceQueryTeardownCallback
Definition: fltkernel.h:736
_FLT_TAG_DATA_BUFFER::SubstituteNameOffset
USHORT SubstituteNameOffset
Definition: fltkernel.h:623
_FLT_PARAMETERS::LocaleId
LCID POINTER_ALIGNMENT LocaleId
Definition: fltkernel.h:338
TargetInstance
_In_ PFLT_INSTANCE TargetInstance
Definition: fltkernel.h:2823
_FLT_PARAMETERS::QuerySecurity
struct _FLT_PARAMETERS::@1748 QuerySecurity
_FLT_CALLBACK_DATA_QUEUE::Instance
PFLT_INSTANCE Instance
Definition: fltkernel.h:919
_FLT_PARAMETERS::Length
ULONG Length
Definition: fltkernel.h:124
Resource
_Acquires_shared_lock_ _Curr_ PERESOURCE Resource
Definition: exfuncs.h:440
BufferSize
UINTN * BufferSize
Definition: acefiex.h:370
_FLT_PARAMETERS::MountVolume
struct _FLT_PARAMETERS::@1763 MountVolume
IgnoreBuffer
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN IgnoreBuffer
Definition: fltkernel.h:2239
_FLT_PARAMETERS::AdvanceOnly
BOOLEAN AdvanceOnly
Definition: fltkernel.h:149
EcpContextSize
_In_ PECP_LIST _In_ LPCGUID _Outptr_opt_ PVOID _Out_opt_ ULONG * EcpContextSize
Definition: fltkernel.h:2571
PoolTag
_Must_inspect_result_ _In_ LPCGUID ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _In_ ULONG PoolTag
Definition: fltkernel.h:2520
_FLT_PARAMETERS::InPath
BOOLEAN InPath
Definition: fltkernel.h:341
_FLT_PARAMETERS::Irp
PIRP Irp
Definition: fltkernel.h:364
FltUninitializeFileLock
VOID FLTAPI FltUninitializeFileLock(_In_ PFILE_LOCK FileLock)
_FLT_IO_PARAMETER_BLOCK::MinorFunction
UCHAR MinorFunction
Definition: fltkernel.h:406
PFLT_CONTEXT
PVOID PFLT_CONTEXT
Definition: fltkernel.h:89
_FLT_PARAMETERS::LockKey
ULONG POINTER_ALIGNMENT LockKey
Definition: fltkernel.h:360
_FLT_PARAMETERS::Others
struct _FLT_PARAMETERS::@1764 Others
NULL
smooth NULL
Definition: ftsmooth.c:513
NumberInstancesReturned
_Must_inspect_result_ _In_opt_ PFLT_FILTER _In_ ULONG _Out_ PULONG NumberInstancesReturned
Definition: fltkernel.h:1804
_FLT_CALLBACK_DATA::TagData
struct _FLT_TAG_DATA_BUFFER * TagData
Definition: fltkernel.h:462
NotificationMask
_Must_inspect_result_ _In_ PKTRANSACTION _In_ PFLT_CONTEXT _In_ NOTIFICATION_MASK NotificationMask
Definition: fltkernel.h:2453
LengthReturned
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ FILE_INFORMATION_CLASS _Out_opt_ PULONG LengthReturned
Definition: fltkernel.h:1306
FltCbdqDisable
VOID FLTAPI FltCbdqDisable(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq)
_FLT_PARAMETERS::FileAttributes
USHORT POINTER_ALIGNMENT FileAttributes
Definition: fltkernel.h:103
_Out_
#define _Out_
Definition: no_sal2.h:323
FileTag
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG FileTag
Definition: fltkernel.h:1266
NotifyCallbackData
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_ PFLT_CALLBACK_DATA NotifyCallbackData
Definition: fltkernel.h:2239
_FLT_CONTEXT_REGISTRATION::ContextType
FLT_CONTEXT_TYPE ContextType
Definition: fltkernel.h:516
SecurityInformation
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ SECURITY_INFORMATION SecurityInformation
Definition: fltkernel.h:1339
FLTFL_IO_OPERATION_PAGING
#define FLTFL_IO_OPERATION_PAGING
Definition: fltkernel.h:756
_ETHREAD
Definition: pstypes.h:1033
_FileName
Definition: filecomp.c:347
Buffer
Definition: bufpool.h:45
ShareAccess
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG ShareAccess
Definition: fltkernel.h:1230
PFLT_PRE_OPERATION_CALLBACK
FLT_PREOP_CALLBACK_STATUS(FLTAPI * PFLT_PRE_OPERATION_CALLBACK)(_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Outptr_result_maybenull_ PVOID *CompletionContext)
Definition: fltkernel.h:582
_FLT_CALLBACK_DATA_QUEUE::Acquire
PFLT_CALLBACK_DATA_QUEUE_ACQUIRE Acquire
Definition: fltkernel.h:923
_FLT_RELATED_OBJECTS::Size
USHORT CONST Size
Definition: fltkernel.h:474
OpenCount
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA _In_ ULONG OpenCount
Definition: fltkernel.h:2082
_FLT_FILE_NAME_INFORMATION::Share
UNICODE_STRING Share
Definition: fltkernel.h:811
OutputBuffer
_Must_inspect_result_ __drv_aliasesMem _In_ PDEVICE_OBJECT _In_opt_ PVOID _In_ ULONG _Out_opt_ PVOID OutputBuffer
Definition: iofuncs.h:713
FltUnregisterFilter
VOID FLTAPI FltUnregisterFilter(_In_ PFLT_FILTER Filter)
Definition: Filter.c:222
_DEVICE_OBJECT
Definition: env_spec_w32.h:413
FileAttributes
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG FileAttributes
Definition: fltkernel.h:1230
_FLT_PARAMETERS::SetSecurity
struct _FLT_PARAMETERS::@1749 SetSecurity
_FLT_PARAMETERS::MdlChain
PMDL MdlChain
Definition: fltkernel.h:374
Driver
_In_ PCUNICODE_STRING _In_ PVOID Driver
Definition: cmfuncs.h:32
_IO_RESOURCE_REQUIREMENTS_LIST
Definition: iotypes.h:2380
_FLT_PARAMETERS::SetQuota
struct _FLT_PARAMETERS::@1752 SetQuota
PFLT_CONNECT_NOTIFY
NTSTATUS(FLTAPI * PFLT_CONNECT_NOTIFY)(_In_ PFLT_PORT ClientPort, _In_opt_ PVOID ServerPortCookie, _In_reads_bytes_opt_(SizeOfContext) PVOID ConnectionContext, _In_ ULONG SizeOfContext, _Outptr_result_maybenull_ PVOID *ConnectionPortCookie)
Definition: fltkernel.h:848
_FLT_PARAMETERS::OutputMdlAddress
PMDL OutputMdlAddress
Definition: fltkernel.h:213
CONST
#define CONST
Definition: compiler.h:170
_FLT_FILE_NAME_INFORMATION::Size
USHORT Size
Definition: fltkernel.h:806
FS_INFORMATION_CLASS
enum _FSINFOCLASS FS_INFORMATION_CLASS
_FLT_PARAMETERS::QueryFileInformation
struct _FLT_PARAMETERS::@1738 QueryFileInformation
_IO_PRIORITY_INFO
Definition: iotypes.h:7054
PFLT_NORMALIZE_NAME_COMPONENT_EX
NTSTATUS(FLTAPI * PFLT_NORMALIZE_NAME_COMPONENT_EX)(_In_ PFLT_INSTANCE Instance, _In_ PFILE_OBJECT FileObject, _In_ PCUNICODE_STRING ParentDirectory, _In_ USHORT VolumeNameLength, _In_ PCUNICODE_STRING Component, _Out_writes_bytes_(ExpandComponentNameLength) PFILE_NAMES_INFORMATION ExpandComponentName, _In_ ULONG ExpandComponentNameLength, _In_ FLT_NORMALIZE_NAME_FLAGS Flags, _Inout_ PVOID *NormalizationContext)
Definition: fltkernel.h:689
PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO
VOID(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO)(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _Inout_ PFLT_CALLBACK_DATA Cbd)
Definition: fltkernel.h:910
DEVICE_RELATION_TYPE
enum _DEVICE_RELATION_TYPE DEVICE_RELATION_TYPE
POINTER_ALIGNMENT
#define POINTER_ALIGNMENT
_FLT_PARAMETERS::ReadBuffer
PVOID ReadBuffer
Definition: fltkernel.h:127
OperationStatus
_In_ NTSTATUS OperationStatus
Definition: iotypes.h:7022
FLT_CALLBACK_DATA_QUEUE_FLAGS
ULONG FLT_CALLBACK_DATA_QUEUE_FLAGS
Definition: fltkernel.h:914
Altitude
_Must_inspect_result_ _Inout_ PFLT_VOLUME _In_ PCUNICODE_STRING Altitude
Definition: fltkernel.h:1172
_FLT_FILE_NAME_INFORMATION
Definition: fltkernel.h:805
FLT_CONTEXT_REGISTRATION_FLAGS
USHORT FLT_CONTEXT_REGISTRATION_FLAGS
Definition: fltkernel.h:509
FltIsOperationSynchronous
BOOLEAN FLTAPI FltIsOperationSynchronous(_In_ PFLT_CALLBACK_DATA CallbackData)
PFLT_GENERIC_WORKITEM_ROUTINE
VOID(FLTAPI * PFLT_GENERIC_WORKITEM_ROUTINE)(_In_ PFLT_GENERIC_WORKITEM FltWorkItem, _In_ PVOID FltObject, _In_opt_ PVOID Context)
Definition: fltkernel.h:873
InsertContext
_In_ PIRP _In_ PVOID InsertContext
Definition: csq.h:257
_FLT_CONTEXT_REGISTRATION::ContextAllocateCallback
PFLT_CONTEXT_ALLOCATE_CALLBACK ContextAllocateCallback
Definition: fltkernel.h:521
FltGetSwappedBufferMdlAddress
PMDL FASTCALL FltGetSwappedBufferMdlAddress(_In_ PFLT_CALLBACK_DATA CallbackData)
FILE_INFORMATION_CLASS
enum _FILE_INFORMATION_CLASS FILE_INFORMATION_CLASS
Definition: file.c:104
_Out_opt_
#define _Out_opt_
Definition: no_sal2.h:339
_FLT_PARAMETERS::IoResourceRequirementList
PIO_RESOURCE_REQUIREMENTS_LIST IoResourceRequirementList
Definition: fltkernel.h:322
_FLT_REGISTRATION::GenerateFileNameCallback
PFLT_GENERATE_FILE_NAME GenerateFileNameCallback
Definition: fltkernel.h:739
NumberFiltersReturned
_Must_inspect_result_ *NumberFiltersReturned PFLT_FILTER _In_ ULONG _Out_ PULONG NumberFiltersReturned
Definition: fltkernel.h:1782
BOOLEAN
unsigned char BOOLEAN
Definition: ProcessorBind.h:185
_FLT_PARAMETERS::ReplaceIfExists
BOOLEAN ReplaceIfExists
Definition: fltkernel.h:148
_FLT_PARAMETERS::DeleteHandle
HANDLE DeleteHandle
Definition: fltkernel.h:152
FltGetIrpName
PCHAR FLTAPI FltGetIrpName(_In_ UCHAR IrpMajorCode)
PFLT_PARAMETERS
union _FLT_PARAMETERS * PFLT_PARAMETERS
_FLT_CALLBACK_DATA_QUEUE::PeekNextIo
PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO PeekNextIo
Definition: fltkernel.h:922
PFLT_NORMALIZE_CONTEXT_CLEANUP
VOID(FLTAPI * PFLT_NORMALIZE_CONTEXT_CLEANUP)(_In_opt_ PVOID *NormalizationContext)
Definition: fltkernel.h:701
_FLT_PARAMETERS::Type
DEVICE_USAGE_NOTIFICATION_TYPE POINTER_ALIGNMENT Type
Definition: fltkernel.h:343
PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO
VOID(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_REMOVE_IO)(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA Cbd)
Definition: fltkernel.h:889
_FLT_TAG_DATA_BUFFER::DataBuffer
UCHAR DataBuffer[1]
Definition: fltkernel.h:638
CanceledCallback
_In_ PFLT_COMPLETE_CANCELED_CALLBACK CanceledCallback
Definition: fltkernel.h:1933
_FLT_CONTEXT_REGISTRATION::Reserved1
PVOID Reserved1
Definition: fltkernel.h:523
_FLT_CALLBACK_DATA::IoStatus
IO_STATUS_BLOCK IoStatus
Definition: fltkernel.h:461
Lookaside
_Inout_ PVOID Lookaside
Definition: fltkernel.h:2532
DiskDeviceObject
_Outptr_ PDEVICE_OBJECT * DiskDeviceObject
Definition: fltkernel.h:1673
FLT_TAG_DATA_BUFFER
struct _FLT_TAG_DATA_BUFFER FLT_TAG_DATA_BUFFER
_FLT_IO_PARAMETER_BLOCK::TargetFileObject
PFILE_OBJECT TargetFileObject
Definition: fltkernel.h:409
_FLT_TAG_DATA_BUFFER::SubstituteNameLength
USHORT SubstituteNameLength
Definition: fltkernel.h:624
_FLT_PARAMETERS::AcquireForModifiedPageWriter
struct _FLT_PARAMETERS::@1755 AcquireForModifiedPageWriter
OldContext
_In_ FLT_SET_CONTEXT_OPERATION _In_ PFLT_CONTEXT _Outptr_opt_result_maybenull_ PFLT_CONTEXT * OldContext
Definition: fltkernel.h:1468
EaLength
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG EaLength
Definition: fltkernel.h:1241
DisconnectNotifyCallback
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY DisconnectNotifyCallback
Definition: fltkernel.h:1873
FLT_SET_CONTEXT_OPERATION
enum _FLT_SET_CONTEXT_OPERATION FLT_SET_CONTEXT_OPERATION
POOL_TYPE
INT POOL_TYPE
Definition: typedefs.h:77
_FLT_PARAMETERS::UsageNotification
struct _FLT_PARAMETERS::@1753::@1788 UsageNotification
_FLT_PARAMETERS::FailImmediately
BOOLEAN FailImmediately
Definition: fltkernel.h:271
_FLT_PARAMETERS::ResourceToRelease
PERESOURCE ResourceToRelease
Definition: fltkernel.h:355
PFLT_OPERATION_REGISTRATION
struct _FLT_OPERATION_REGISTRATION * PFLT_OPERATION_REGISTRATION
PNOTIFY_SYNC
PVOID PNOTIFY_SYNC
Definition: fsrtltypes.h:284
_FLT_PARAMETERS::ResourceToRelease
PERESOURCE * ResourceToRelease
Definition: fltkernel.h:352
_FLT_TAG_DATA_BUFFER::SymbolicLinkReparseBuffer
struct _FLT_TAG_DATA_BUFFER::@1791::@1792 SymbolicLinkReparseBuffer
Registration
ACPI_EFI_EVENT VOID ** Registration
Definition: acefiex.h:607
_Out_writes_bytes_
_Must_inspect_result_ _Out_ PIO_STATUS_BLOCK _Out_writes_bytes_(Length) PVOID FsInformation
_FLT_REGISTRATION::FilterUnloadCallback
PFLT_FILTER_UNLOAD_CALLBACK FilterUnloadCallback
Definition: fltkernel.h:734
FLT_PARAMETERS
union _FLT_PARAMETERS FLT_PARAMETERS
_FLT_RELATED_CONTEXTS::StreamContext
PFLT_CONTEXT StreamContext
Definition: fltkernel.h:488
Pool
Definition: bufpool.h:50
_Outptr_result_maybenull_
#define _Outptr_result_maybenull_
Definition: no_sal2.h:426
_FLT_CALLBACK_DATA::Thread
PETHREAD CONST Thread
Definition: fltkernel.h:459
FileObject
_Must_inspect_result_ _In_opt_ PFILE_OBJECT FileObject
Definition: fltkernel.h:983
WAIT_TYPE
enum _WAIT_TYPE WAIT_TYPE
Thread
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD Thread
Definition: fltkernel.h:2653
VolumeHandle
_Must_inspect_result_ _Out_ PHANDLE VolumeHandle
Definition: fltkernel.h:2284
Instance
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE Instance
Definition: fltkernel.h:1071
CreateOptions
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG CreateOptions
Definition: fltkernel.h:1230
FltSetCallbackDataDirty
VOID FLTAPI FltSetCallbackDataDirty(_Inout_ PFLT_CALLBACK_DATA Data)
DataBufferLength
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_opt_ GUID _In_ USHORT DataBufferLength
Definition: fltkernel.h:1270
_Inout_
#define _Inout_
Definition: no_sal2.h:244
_FLT_CALLBACK_DATA_QUEUE::InsertIo
PFLT_CALLBACK_DATA_QUEUE_INSERT_IO InsertIo
Definition: fltkernel.h:920
_FLT_PARAMETERS::ExclusiveLock
BOOLEAN ExclusiveLock
Definition: fltkernel.h:272
_FLT_PARAMETERS::DeviceTextType
DEVICE_TEXT_TYPE DeviceTextType
Definition: fltkernel.h:337
_FLT_PARAMETERS::EaList
PVOID EaList
Definition: fltkernel.h:158
KPROCESSOR_MODE
CCHAR KPROCESSOR_MODE
Definition: ketypes.h:7
_Acquires_lock_
_Acquires_lock_(_Global_critical_region_) _IRQL_requires_max_(APC_LEVEL) VOID FLTAPI FltAcquireResourceExclusive(_Inout_ _Requires_lock_not_held_(*_Curr_) _Acquires_lock_(*_Curr_) PERESOURCE Resource)
Definition: Object.c:59
PFILE_OBJECT
* PFILE_OBJECT
Definition: iotypes.h:1949
_FLT_CALLBACK_DATA_QUEUE::Flags
FLT_CALLBACK_DATA_QUEUE_FLAGS Flags
Definition: fltkernel.h:918
_IO_SECURITY_CONTEXT
Definition: iotypes.h:2504
_FLT_PARAMETERS::StartDevice
struct _FLT_PARAMETERS::@1753::@1779 StartDevice
_FLT_PARAMETERS::ByteOffset
LARGE_INTEGER ByteOffset
Definition: fltkernel.h:126
Object
static IUnknown Object
Definition: main.c:512
FltCbdqRemoveIo
_Must_inspect_result_ PFLT_CALLBACK_DATA FLTAPI FltCbdqRemoveIo(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_ PFLT_CALLBACK_DATA_QUEUE_IO_CONTEXT Context)
PFLT_POST_OPERATION_CALLBACK
FLT_POSTOP_CALLBACK_STATUS(FLTAPI * PFLT_POST_OPERATION_CALLBACK)(_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags)
Definition: fltkernel.h:597
_FLT_PARAMETERS::QueryInterface
struct _FLT_PARAMETERS::@1753::@1781 QueryInterface
RedirectionAllowed
_In_ PFLT_INSTANCE _Out_ PBOOLEAN RedirectionAllowed
Definition: fltkernel.h:2831
CleanupCallback
_Must_inspect_result_ _In_ LPCGUID ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK CleanupCallback
Definition: fltkernel.h:2520
_FLT_CALLBACK_DATA::DUMMYUNIONNAME
_ANONYMOUS_UNION union _FLT_CALLBACK_DATA::@1789 DUMMYUNIONNAME
PFLT_COMPLETE_LOCK_CALLBACK_DATA_ROUTINE
NTSTATUS(* PFLT_COMPLETE_LOCK_CALLBACK_DATA_ROUTINE)(_In_opt_ PVOID Context, _In_ PFLT_CALLBACK_DATA CallbackData)
Definition: fltkernel.h:929
Flags
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG Flags
Definition: fltkernel.h:1241
WORK_QUEUE_TYPE
enum _WORK_QUEUE_TYPE WORK_QUEUE_TYPE
_FLT_VOLUME_PROPERTIES::RealDeviceName
UNICODE_STRING RealDeviceName
Definition: fltkernel.h:832
UCHAR
unsigned char UCHAR
Definition: xmlstorage.h:181
CallbackStatus
_In_ FLT_PREOP_CALLBACK_STATUS CallbackStatus
Definition: fltkernel.h:1020
_FLT_CALLBACK_DATA_QUEUE::CompleteCanceledIo
PFLT_CALLBACK_DATA_QUEUE_COMPLETE_CANCELED_IO CompleteCanceledIo
Definition: fltkernel.h:925
PBOOLEAN
char * PBOOLEAN
Definition: retypes.h:11
ReplyBuffer
_Must_inspect_result_ _In_ PFLT_PORT _In_ ULONG _Out_writes_bytes_opt_ ReplyLength PVOID ReplyBuffer
Definition: fltkernel.h:1903
CurrentEcpContext
_In_ PECP_LIST _In_opt_ PVOID CurrentEcpContext
Definition: fltkernel.h:2621
EaListLength
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ BOOLEAN _In_ ULONG EaListLength
Definition: fltkernel.h:2298
_FLT_PARAMETERS::EaLength
ULONG POINTER_ALIGNMENT EaLength
Definition: fltkernel.h:105
_FLT_PARAMETERS::Version
USHORT Version
Definition: fltkernel.h:314
Length
VOID UINTN Length
Definition: acefiex.h:718
_FILE_GET_QUOTA_INFORMATION
Definition: iotypes.h:5594
IsDirectory
_Must_inspect_result_ _In_ PFLT_INSTANCE _Out_ PBOOLEAN IsDirectory
Definition: fltkernel.h:1139
_FLT_CONTEXT_REGISTRATION::ContextCleanupCallback
PFLT_CONTEXT_CLEANUP_CALLBACK ContextCleanupCallback
Definition: fltkernel.h:518
_Releases_lock_
_Releases_lock_(_Global_critical_region_) _IRQL_requires_max_(DISPATCH_LEVEL) VOID FLTAPI FltReleaseResource(_Inout_ _Requires_lock_held_(*_Curr_) _Releases_lock_(*_Curr_) PERESOURCE Resource)
Definition: Object.c:101
NumberOfBytes
IN SIZE_T NumberOfBytes
Definition: ndis.h:3914
Context
_In_ FLT_PREOP_CALLBACK_STATUS _In_opt_ PVOID Context
Definition: fltkernel.h:1020
Fo2
_In_opt_ PFILE_OBJECT Fo2
Definition: fsrtlfuncs.h:1477
_IO_CSQ_IRP_CONTEXT
Definition: csq.h:84
FltIsCallbackDataDirty
BOOLEAN FLTAPI FltIsCallbackDataDirty(_In_ PFLT_CALLBACK_DATA Data)
PHANDLE
PVOID *typedef PHANDLE
Definition: ntsecpkg.h:411
RetTunneledFileNameInformation
_Must_inspect_result_ _In_ PFLT_FILE_NAME_INFORMATION _Outptr_result_maybenull_ PFLT_FILE_NAME_INFORMATION * RetTunneledFileNameInformation
Definition: fltkernel.h:1108
VOID
#define VOID
Definition: acefi.h:69
_FLT_INSTANCE
Definition: fltmgrint.h:107
_FLT_PARAMETERS::Buffered
struct _FLT_PARAMETERS::@1745::@1772 Buffered
_FLT_CONTEXT_REGISTRATION::ContextFreeCallback
PFLT_CONTEXT_FREE_CALLBACK ContextFreeCallback
Definition: fltkernel.h:522
PFLT_CONTEXT_CLEANUP_CALLBACK
VOID(FLTAPI * PFLT_CONTEXT_CLEANUP_CALLBACK)(_In_ PFLT_CONTEXT Context, _In_ FLT_CONTEXT_TYPE ContextType)
Definition: fltkernel.h:494
_FLT_PREOP_CALLBACK_STATUS
_FLT_PREOP_CALLBACK_STATUS
Definition: fltkernel.h:572
PFLT_COMPLETED_ASYNC_IO_CALLBACK
VOID(FLTAPI * PFLT_COMPLETED_ASYNC_IO_CALLBACK)(_In_ PFLT_CALLBACK_DATA CallbackData, _In_ PFLT_CONTEXT Context)
Definition: fltkernel.h:749
_In_reads_bytes_opt_
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_reads_bytes_opt_(EaLength) PVOID EaBuffer
PFLT_CALLBACK_DATA
struct _FLT_CALLBACK_DATA * PFLT_CALLBACK_DATA
_FLT_CALLBACK_DATA::Flags
FLT_CALLBACK_DATA_FLAGS Flags
Definition: fltkernel.h:458
PKIRQL
KIRQL * PKIRQL
Definition: env_spec_w32.h:592
PFLT_POSTOP_CALLBACK_STATUS
enum _FLT_POSTOP_CALLBACK_STATUS * PFLT_POSTOP_CALLBACK_STATUS
PFLT_INSTANCE
struct _FLT_INSTANCE * PFLT_INSTANCE
Definition: fltkernel.h:86
_FLT_PARAMETERS::QuotaBuffer
PVOID QuotaBuffer
Definition: fltkernel.h:295
_FLT_PARAMETERS::Spare2
ULONG POINTER_ALIGNMENT Spare2
Definition: fltkernel.h:192
_FLT_PARAMETERS::FsInformationClass
FS_INFORMATION_CLASS POINTER_ALIGNMENT FsInformationClass
Definition: fltkernel.h:171
_FLT_RELATED_CONTEXTS
Definition: fltkernel.h:484
NewSize
_Must_inspect_result_ _In_ USHORT NewSize
Definition: fltkernel.h:975
_Outptr_opt_
#define _Outptr_opt_
Definition: no_sal2.h:397
NextEcpContextSize
_In_ PECP_LIST _In_opt_ PVOID _Out_opt_ LPGUID _Outptr_opt_ PVOID _Out_opt_ ULONG * NextEcpContextSize
Definition: fltkernel.h:2621
_FLT_PARAMETERS::Argument3
PVOID Argument3
Definition: fltkernel.h:392
_LIST_ENTRY
Definition: typedefs.h:118
FlagOn
#define FlagOn(_F, _SF)
Definition: ext2fs.h:178
_FLT_FILTER
Definition: fltmgrint.h:61
_FLT_PARAMETERS::CreateMailslot
struct _FLT_PARAMETERS::@1735 CreateMailslot
PFLT_IO_PARAMETER_BLOCK
struct _FLT_IO_PARAMETER_BLOCK * PFLT_IO_PARAMETER_BLOCK
RetNewCallbackData
_Must_inspect_result_ _In_opt_ PFILE_OBJECT _Outptr_ PFLT_CALLBACK_DATA * RetNewCallbackData
Definition: fltkernel.h:1192
POPLOCK
PVOID * POPLOCK
Definition: fsrtltypes.h:250
_FLT_REGISTRATION::InstanceTeardownCompleteCallback
PFLT_INSTANCE_TEARDOWN_CALLBACK InstanceTeardownCompleteCallback
Definition: fltkernel.h:738
_FLT_PARAMETERS::LockControl
struct _FLT_PARAMETERS::@1747 LockControl
PASSIVE_LEVEL
#define PASSIVE_LEVEL
Definition: env_spec_w32.h:693
FileHandle
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE FileHandle
Definition: fltkernel.h:1230
_FLT_PARAMETERS::Parameters
PVOID Parameters
Definition: fltkernel.h:114
_FLT_FILE_NAME_INFORMATION::FinalComponent
UNICODE_STRING FinalComponent
Definition: fltkernel.h:814
FLT_NORMALIZE_NAME_FLAGS
ULONG FLT_NORMALIZE_NAME_FLAGS
Definition: fltkernel.h:672
ConnectNotifyCallback
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY ConnectNotifyCallback
Definition: fltkernel.h:1873
_FLT_PARAMETERS::AllocatedResourcesTranslated
PCM_RESOURCE_LIST AllocatedResourcesTranslated
Definition: fltkernel.h:306
_FLT_PARAMETERS::SecurityInformation
SECURITY_INFORMATION SecurityInformation
Definition: fltkernel.h:275
Reserved
ULONG PVOID Reserved
Definition: ntimage.h:533
InputBufferLength
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ ULONG InputBufferLength
Definition: fltkernel.h:1372
_FLT_OPERATION_REGISTRATION::Reserved1
PVOID Reserved1
Definition: fltkernel.h:614
IO_PRIORITY_HINT
enum _IO_PRIORITY_HINT IO_PRIORITY_HINT
FileNameLength
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ HANDLE _In_ ULONG FileNameLength
Definition: fltkernel.h:1129
FLT_REGISTRATION_FLAGS
ULONG FLT_REGISTRATION_FLAGS
Definition: fltkernel.h:723
_FLT_PARAMETERS::ProviderId
ULONG_PTR ProviderId
Definition: fltkernel.h:285
_ANONYMOUS_STRUCT
#define _ANONYMOUS_STRUCT
Definition: ntbasedef.h:56
_FLT_TAG_DATA_BUFFER::TagGuid
GUID TagGuid
Definition: fltkernel.h:641
_FLT_TAG_DATA_BUFFER::GenericReparseBuffer
struct _FLT_TAG_DATA_BUFFER::@1791::@1794 GenericReparseBuffer
PDEVICE_CAPABILITIES
* PDEVICE_CAPABILITIES
Definition: iotypes.h:927
_KWAIT_BLOCK
Definition: ketypes.h:443
PFLT_INSTANCE_TEARDOWN_CALLBACK
VOID(FLTAPI * PFLT_INSTANCE_TEARDOWN_CALLBACK)(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_TEARDOWN_FLAGS Reason)
Definition: fltkernel.h:568
PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE
VOID(FLTAPI * PFLTOPLOCK_PREPOST_CALLBACKDATA_ROUTINE)(_In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context)
Definition: fltkernel.h:939
_FLT_PARAMETERS::Options
ULONG Options
Definition: fltkernel.h:102
FLT_ALLOCATE_CALLBACK_DATA_FLAGS
ULONG FLT_ALLOCATE_CALLBACK_DATA_FLAGS
Definition: fltkernel.h:453
_FLT_PARAMETERS::ParentOfTarget
PFILE_OBJECT ParentOfTarget
Definition: fltkernel.h:145
PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK
NTSTATUS(FLTAPI * PFLT_INSTANCE_QUERY_TEARDOWN_CALLBACK)(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_QUERY_TEARDOWN_FLAGS Flags)
Definition: fltkernel.h:555
CallbackContext
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ FLT_IO_OPERATION_FLAGS _Out_opt_ PULONG _In_opt_ PFLT_COMPLETED_ASYNC_IO_CALLBACK _In_opt_ PVOID CallbackContext
Definition: fltkernel.h:1255
DISPATCH_LEVEL
#define DISPATCH_LEVEL
Definition: env_spec_w32.h:696
_In_
#define _In_
Definition: no_sal2.h:204
PECP_LIST
struct _ECP_LIST * PECP_LIST
Definition: fsrtltypes.h:139
_Outptr_opt_result_bytebuffer_
#define _Outptr_opt_result_bytebuffer_(size)
Definition: no_sal2.h:404
_FLT_IO_PARAMETER_BLOCK::OperationFlags
UCHAR OperationFlags
Definition: fltkernel.h:407
ByteOffset
_In_ PLARGE_INTEGER ByteOffset
Definition: mrx.h:168
_IO_CSQ
Definition: csq.h:222
PCFLT_RELATED_OBJECTS
const struct _FLT_RELATED_OBJECTS * PCFLT_RELATED_OBJECTS
Definition: fltkernel.h:482
_IO_STATUS_BLOCK
Definition: env_spec_w32.h:870
RequesterContext
_Must_inspect_result_ _In_ PFLT_GET_OPERATION_STATUS_CALLBACK _In_opt_ PVOID RequesterContext
Definition: fltkernel.h:1035
_DRIVER_OBJECT
Definition: iotypes.h:2160
FLT_CALLBACK_DATA_QUEUE
struct _FLT_CALLBACK_DATA_QUEUE FLT_CALLBACK_DATA_QUEUE
Definition: fltkernel.h:880
SIZE_T
ULONG_PTR SIZE_T
Definition: typedefs.h:79
DesiredAccess
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK DesiredAccess
Definition: fltkernel.h:1230
_FLT_PARAMETERS::Lock
BOOLEAN Lock
Definition: fltkernel.h:331
_UNICODE_STRING
Definition: env_spec_w32.h:368
_FLT_PARAMETERS::FileInformationClass
FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass
Definition: fltkernel.h:139
_FILE_LOCK
Definition: fsrtltypes.h:202
_Requires_lock_held_
#define _Requires_lock_held_(lock)
Definition: no_sal2.h:704
HANDLE
DWORD *typedef HANDLE
Definition: winlogon.h:52
_FLT_PARAMETERS::InfoBuffer
PVOID InfoBuffer
Definition: fltkernel.h:140
_FLT_PARAMETERS::Argument4
PVOID Argument4
Definition: fltkernel.h:393
_FLT_RELATED_OBJECTS::Volume
PFLT_VOLUME CONST Volume
Definition: fltkernel.h:477
NTSTATUS
LONG NTSTATUS
Definition: DriverTester.h:11
_FLT_PARAMETERS::Interface
PINTERFACE Interface
Definition: fltkernel.h:315
NameOptions
_Must_inspect_result_ _In_ FLT_FILE_NAME_OPTIONS NameOptions
Definition: fltkernel.h:1062
_FLT_PARAMETERS::QueryVolumeInformation
struct _FLT_PARAMETERS::@1742 QueryVolumeInformation
_FLT_PARAMETERS::Argument6
LARGE_INTEGER Argument6
Definition: fltkernel.h:395
LowerInstance
_Outptr_ PFLT_INSTANCE * LowerInstance
Definition: fltkernel.h:1680
FLT_INSTANCE_SETUP_FLAGS
ULONG FLT_INSTANCE_SETUP_FLAGS
Definition: fltkernel.h:527
_FLT_TAG_DATA_BUFFER::PathBuffer
WCHAR PathBuffer[1]
Definition: fltkernel.h:628
LOCK_OPERATION
enum _LOCK_OPERATION LOCK_OPERATION
_FLT_PARAMETERS::QueryDirectory
struct _FLT_PARAMETERS::@1744::@1767 QueryDirectory
_FLT_FILE_NAME_INFORMATION::NamesParsed
FLT_FILE_NAME_PARSED_FLAGS NamesParsed
Definition: fltkernel.h:807
_FLT_PARAMETERS::InputBufferLength
ULONG POINTER_ALIGNMENT InputBufferLength
Definition: fltkernel.h:204
RedirectionAllowedThisIo
_In_ PFLT_INSTANCE _Out_ PBOOLEAN RedirectionAllowedThisIo
Definition: fltkernel.h:2839
USHORT
unsigned short USHORT
Definition: pedump.c:61
_FLT_PARAMETERS::WMI
struct _FLT_PARAMETERS::@1750 WMI
_FLT_TAG_DATA_BUFFER::UnparsedNameLength
USHORT UnparsedNameLength
Definition: fltkernel.h:620
_FLT_PARAMETERS::DataPath
PVOID DataPath
Definition: fltkernel.h:286
_FLT_PARAMETERS::SidList
PFILE_GET_QUOTA_INFORMATION SidList
Definition: fltkernel.h:293
_FLT_PARAMETERS::FilterResourceRequirements
struct _FLT_PARAMETERS::@1753::@1783 FilterResourceRequirements
FltObjectReference
NTSTATUS FLTAPI FltObjectReference(_Inout_ PVOID Object)
Definition: Object.c:41
AllocationSize
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER AllocationSize
Definition: fltkernel.h:1230
FLT_FILE_NAME_PARSED_FLAGS
USHORT FLT_FILE_NAME_PARSED_FLAGS
Definition: fltkernel.h:798
TransactionContext
_Must_inspect_result_ _In_ PKTRANSACTION _In_ PFLT_CONTEXT TransactionContext
Definition: fltkernel.h:2453
_FLT_PARAMETERS::Key
ULONG POINTER_ALIGNMENT Key
Definition: fltkernel.h:125
SenderBufferLength
_Must_inspect_result_ _In_ PFLT_PORT _In_ ULONG SenderBufferLength
Definition: fltkernel.h:1902
NotifyList
_Inout_ PLIST_ENTRY NotifyList
Definition: fltkernel.h:2239
_FLT_CONTEXT_REGISTRATION
Definition: fltkernel.h:515
ServerPortCookie
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID ServerPortCookie
Definition: fltkernel.h:1873
_FLT_PARAMETERS::VerifyVolume
struct _FLT_PARAMETERS::@1745::@1769 VerifyVolume
BytesReturned
_In_ FILTER_INFORMATION_CLASS _In_ ULONG _Out_ PULONG BytesReturned
Definition: fltkernel.h:1716
VolumeListSize
_Must_inspect_result_ _In_ ULONG VolumeListSize
Definition: fltkernel.h:1793
_Outptr_opt_result_maybenull_
#define _Outptr_opt_result_maybenull_
Definition: no_sal2.h:410
PFLT_GENERIC_WORKITEM
struct _FLT_GENERIC_WORKITEM * PFLT_GENERIC_WORKITEM
Definition: fltkernel.h:864
FLT_CALLBACK_DATA_FLAGS
ULONG FLT_CALLBACK_DATA_FLAGS
Definition: fltkernel.h:450
Contexts
_In_ FLT_CONTEXT_TYPE _Out_ PFLT_RELATED_CONTEXTS Contexts
Definition: fltkernel.h:1454
_FLT_RELATED_CONTEXTS::FileContext
PFLT_CONTEXT FileContext
Definition: fltkernel.h:487
PULONG
unsigned int * PULONG
Definition: retypes.h:1
PFLT_REGISTRATION
struct _FLT_REGISTRATION * PFLT_REGISTRATION
_FLT_PARAMETERS::Common
struct _FLT_PARAMETERS::@1745::@1770 Common
_FLT_REGISTRATION::Flags
FLT_REGISTRATION_FLAGS Flags
Definition: fltkernel.h:731
ObjectAttributes
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES ObjectAttributes
Definition: fltkernel.h:1230
_FLT_PARAMETERS::Argument2
PVOID Argument2
Definition: fltkernel.h:391
FLT_REGISTRATION
struct _FLT_REGISTRATION FLT_REGISTRATION
_Out_writes_bytes_to_
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ PLARGE_INTEGER _In_ ULONG _Out_writes_bytes_to_(Length,*BytesRead) PVOID Buffer
CompletionFilter
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG CompletionFilter
Definition: fltkernel.h:2239
_FLT_PARAMETERS::Argument1
PVOID Argument1
Definition: fltkernel.h:390
FLT_FILE_NAME_INFORMATION
struct _FLT_FILE_NAME_INFORMATION FLT_FILE_NAME_INFORMATION
IsWritable
_Must_inspect_result_ _Out_ PBOOLEAN IsWritable
Definition: fltkernel.h:1744
_FLT_PARAMETERS::ProcessId
PEPROCESS ProcessId
Definition: fltkernel.h:270
FLT_RELATED_OBJECTS
struct _FLT_RELATED_OBJECTS FLT_RELATED_OBJECTS
_FLT_TAG_DATA_BUFFER
Definition: fltkernel.h:617
IRP_PAGING_IO
#define IRP_PAGING_IO
_FLT_PARAMETERS::SidListLength
ULONG SidListLength
Definition: fltkernel.h:294
FLT_IO_PARAMETER_BLOCK
struct _FLT_IO_PARAMETER_BLOCK FLT_IO_PARAMETER_BLOCK
_SECURITY_SUBJECT_CONTEXT
Definition: setypes.h:189
PeekContext
_In_opt_ PIRP _In_opt_ PVOID PeekContext
Definition: csq.h:159
_FLT_RELATED_CONTEXTS::VolumeContext
PFLT_CONTEXT VolumeContext
Definition: fltkernel.h:485
_LARGE_INTEGER
Definition: typedefs.h:101
FsControlCode
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG FsControlCode
Definition: fltkernel.h:1369
_FLT_PARAMETERS::ShareAccess
USHORT ShareAccess
Definition: fltkernel.h:104
_FLT_PARAMETERS::IoControlCode
ULONG POINTER_ALIGNMENT IoControlCode
Definition: fltkernel.h:234
Tag
IN ULONG IN ULONG Tag
Definition: evtlib.h:153
_FLT_REGISTRATION::ContextRegistration
CONST FLT_CONTEXT_REGISTRATION * ContextRegistration
Definition: fltkernel.h:732
FS_FILTER_SECTION_SYNC_TYPE
enum _FS_FILTER_SECTION_SYNC_TYPE FS_FILTER_SECTION_SYNC_TYPE
_FLT_PARAMETERS::Write
struct _FLT_PARAMETERS::@1737 Write
TraverseCallback
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_ PFLT_CALLBACK_DATA _In_opt_ PCHECK_FOR_TRAVERSE_ACCESS TraverseCallback
Definition: fltkernel.h:2239
PFLT_DISCONNECT_NOTIFY
VOID(FLTAPI * PFLT_DISCONNECT_NOTIFY)(_In_opt_ PVOID ConnectionCookie)
Definition: fltkernel.h:856
NewContext
_In_ FLT_SET_CONTEXT_OPERATION _In_ PFLT_CONTEXT NewContext
Definition: fltkernel.h:1468
_FLT_CALLBACK_DATA::Iopb
PFLT_IO_PARAMETER_BLOCK CONST Iopb
Definition: fltkernel.h:460
_FLT_PARAMETERS::AllocatedResources
PCM_RESOURCE_LIST AllocatedResources
Definition: fltkernel.h:305
VolumeName
_Must_inspect_result_ _Inout_opt_ PUNICODE_STRING VolumeName
Definition: fltkernel.h:1117
_Inout_updates_bytes_opt_
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ SECURITY_INFORMATION _Inout_updates_bytes_opt_(Length) PSECURITY_DESCRIPTOR SecurityDescriptor
_FLT_VOLUME_PROPERTIES::DeviceCharacteristics
ULONG DeviceCharacteristics
Definition: fltkernel.h:825
_Out_writes_to_opt_
_Must_inspect_result_ _Out_writes_to_opt_(VolumeListSize,*NumberVolumesReturned) PFLT_VOLUME *VolumeList
PCHAR
signed char * PCHAR
Definition: retypes.h:7
FileInformationClass
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_ FILE_INFORMATION_CLASS FileInformationClass
Definition: fltkernel.h:1306
_FLT_VOLUME_PROPERTIES::FileSystemDeviceName
UNICODE_STRING FileSystemDeviceName
Definition: fltkernel.h:831
InstanceListSize
_Must_inspect_result_ _In_opt_ PFLT_FILTER _In_ ULONG InstanceListSize
Definition: fltkernel.h:1804
_VPB
Definition: iotypes.h:166
_FLT_PARAMETERS::ReleaseForModifiedPageWriter
struct _FLT_PARAMETERS::@1756 ReleaseForModifiedPageWriter
FltRegisterFilter
NTSTATUS NTAPI FltRegisterFilter(_In_ PDRIVER_OBJECT DriverObject, _In_ const FLT_REGISTRATION *Registration, _Out_ PFLT_FILTER *RetFilter)
Definition: Filter.c:65
FltCbdqRemoveNextIo
_Must_inspect_result_ PFLT_CALLBACK_DATA FLTAPI FltCbdqRemoveNextIo(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ PVOID PeekContext)
_FLT_REGISTRATION
Definition: fltkernel.h:728
_FLT_IO_PARAMETER_BLOCK::MajorFunction
UCHAR MajorFunction
Definition: fltkernel.h:405
PFLT_DEFERRED_IO_WORKITEM
struct _FLT_DEFERRED_IO_WORKITEM * PFLT_DEFERRED_IO_WORKITEM
Definition: fltkernel.h:863
IoStatusBlock
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK IoStatusBlock
Definition: fltkernel.h:1230
_FLT_PARAMETERS::MdlAddress
PMDL MdlAddress
Definition: fltkernel.h:128
_FLT_PARAMETERS::FsControlCode
ULONG POINTER_ALIGNMENT FsControlCode
Definition: fltkernel.h:205
_FLT_CONTEXT_REGISTRATION::PoolTag
ULONG PoolTag
Definition: fltkernel.h:520
PFLT_INSTANCE_SETUP_CALLBACK
NTSTATUS(FLTAPI * PFLT_INSTANCE_SETUP_CALLBACK)(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ FLT_INSTANCE_SETUP_FLAGS Flags, _In_ DEVICE_TYPE VolumeDeviceType, _In_ FLT_FILESYSTEM_TYPE VolumeFilesystemType)
Definition: fltkernel.h:546
_FLT_PARAMETERS::DirectoryBuffer
PVOID DirectoryBuffer
Definition: fltkernel.h:185
PIRP
PVOID PIRP
Definition: usb.h:38
ULONG
unsigned int ULONG
Definition: retypes.h:1
_FLT_PARAMETERS::EaListLength
ULONG EaListLength
Definition: fltkernel.h:159
_FLT_RELATED_OBJECTS
Definition: fltkernel.h:473
_FLT_RELATED_OBJECTS::Filter
PFLT_FILTER CONST Filter
Definition: fltkernel.h:476
PFLT_MESSAGE_NOTIFY
NTSTATUS(FLTAPI * PFLT_MESSAGE_NOTIFY)(_In_opt_ PVOID PortCookie, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_to_opt_(OutputBufferLength,*ReturnOutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength, _Out_ PULONG ReturnOutputBufferLength)
Definition: fltkernel.h:839
_FLT_FILE_NAME_INFORMATION::Extension
UNICODE_STRING Extension
Definition: fltkernel.h:812
ContextType
_Must_inspect_result_ _In_ FLT_CONTEXT_TYPE ContextType
Definition: fltkernel.h:1444
_FLT_CALLBACK_DATA::RequestorMode
KPROCESSOR_MODE RequestorMode
Definition: fltkernel.h:470
WaitBlockArray
_Must_inspect_result_ _In_ WAIT_TYPE _In_opt_ PLARGE_INTEGER _In_opt_ PKWAIT_BLOCK WaitBlockArray
Definition: fsrtlfuncs.h:1151
Operation
_In_ FLT_SET_CONTEXT_OPERATION Operation
Definition: fltkernel.h:1468
FltIsIoCanceled
BOOLEAN FLTAPI FltIsIoCanceled(_In_ PFLT_CALLBACK_DATA CallbackData)
_FLT_PARAMETERS::MdlChain
PMDL * MdlChain
Definition: fltkernel.h:371
MaxConnections
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY _In_opt_ PFLT_MESSAGE_NOTIFY _In_ LONG MaxConnections
Definition: fltkernel.h:1873
SubjectContext
_In_opt_ PVOID _In_ PSECURITY_SUBJECT_CONTEXT SubjectContext
Definition: fsrtltypes.h:293
LengthNeeded
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ SECURITY_INFORMATION _In_ ULONG _Out_opt_ PULONG LengthNeeded
Definition: fltkernel.h:1342
_FLT_IO_PARAMETER_BLOCK
Definition: fltkernel.h:403
FltObject
_Must_inspect_result_ _In_ PVOID FltObject
Definition: fltkernel.h:1988
NTSTATUS
#define NTSTATUS
Definition: env_spec_w32.h:77
_FLT_PARAMETERS::InputSystemBuffer
PVOID InputSystemBuffer
Definition: fltkernel.h:225
PFLT_DEFERRED_IO_WORKITEM_ROUTINE
VOID(FLTAPI * PFLT_DEFERRED_IO_WORKITEM_ROUTINE)(_In_ PFLT_DEFERRED_IO_WORKITEM FltWorkItem, _In_ PFLT_CALLBACK_DATA CallbackData, _In_opt_ PVOID Context)
Definition: fltkernel.h:867
PriorityInfo
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD _Inout_ PIO_PRIORITY_INFO PriorityInfo
Definition: fltkernel.h:2653
_FLT_VOLUME_PROPERTIES::SectorSize
USHORT SectorSize
Definition: fltkernel.h:828
_FLT_OPERATION_REGISTRATION::PreOperation
PFLT_PRE_OPERATION_CALLBACK PreOperation
Definition: fltkernel.h:612
_IRQL_requires_max_
_Must_inspect_result_ _IRQL_requires_max_(APC_LEVEL) NTSTATUS FLTAPI FltCheckAndGrowNameControl(_Inout_ PFLT_NAME_CONTROL NameCtrl
_FLT_VOLUME_PROPERTIES::AlignmentRequirement
ULONG AlignmentRequirement
Definition: fltkernel.h:827
_When_
_When_(CallbackStatus==FLT_PREOP_COMPLETE, _IRQL_requires_max_(DISPATCH_LEVEL)) _When_(CallbackStatus!
SizeOfContext
_Must_inspect_result_ _In_ LPCGUID ULONG SizeOfContext
Definition: fltkernel.h:2520
_FLT_PARAMETERS::Create
struct _FLT_PARAMETERS::@1733 Create
InformationClass
_In_ FILTER_INFORMATION_CLASS InformationClass
Definition: fltkernel.h:1714
NextEcpType
_In_ PECP_LIST _In_opt_ PVOID _Out_opt_ LPGUID NextEcpType
Definition: fltkernel.h:2621
_FLT_PARAMETERS::CompletionFilter
ULONG POINTER_ALIGNMENT CompletionFilter
Definition: fltkernel.h:190
FltInitializeFileLock
VOID FLTAPI FltInitializeFileLock(_Out_ PFILE_LOCK FileLock)
PFLT_RELATED_CONTEXTS
struct _FLT_RELATED_CONTEXTS * PFLT_RELATED_CONTEXTS
_FLT_RELATED_OBJECTS::Instance
PFLT_INSTANCE CONST Instance
Definition: fltkernel.h:478
FileNameInformation
_Must_inspect_result_ _In_ FLT_FILE_NAME_OPTIONS _Outptr_ PFLT_FILE_NAME_INFORMATION * FileNameInformation
Definition: fltkernel.h:1062
PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO
PFLT_CALLBACK_DATA(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_PEEK_NEXT_IO)(_In_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ PFLT_CALLBACK_DATA Cbd, _In_opt_ PVOID PeekContext)
Definition: fltkernel.h:894
_FLT_REGISTRATION::Version
USHORT Version
Definition: fltkernel.h:730
PFLT_CALLBACK_DATA_QUEUE_RELEASE
VOID(FLTAPI * PFLT_CALLBACK_DATA_QUEUE_RELEASE)(_Inout_ PFLT_CALLBACK_DATA_QUEUE Cbdq, _In_opt_ KIRQL Irql)
Definition: fltkernel.h:905
_Out_writes_bytes_opt_
#define _Out_writes_bytes_opt_(size)
Definition: no_sal2.h:373
NOTIFICATION_MASK
ULONG NOTIFICATION_MASK
Definition: ktmtypes.h:99
_CM_RESOURCE_LIST
Definition: hwresource.cpp:163
LCID
DWORD LCID
Definition: nls.h:14
_FLT_FILE_NAME_INFORMATION::Format
FLT_FILE_NAME_OPTIONS Format
Definition: fltkernel.h:808
_FLT_CALLBACK_DATA::QueueContext
PVOID QueueContext[2]
Definition: fltkernel.h:466
_FLT_CALLBACK_DATA::DUMMYSTRUCTNAME
_ANONYMOUS_STRUCT struct _FLT_CALLBACK_DATA::@1789::@1790 DUMMYSTRUCTNAME
APC_LEVEL
#define APC_LEVEL
Definition: env_spec_w32.h:695
MessageNotifyCallback
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY _In_opt_ PFLT_MESSAGE_NOTIFY MessageNotifyCallback
Definition: fltkernel.h:1873
FLT_FILTER_UNLOAD_FLAGS
ULONG FLT_FILTER_UNLOAD_FLAGS
Definition: fltkernel.h:649
_FLT_RELATED_CONTEXTS::InstanceContext
PFLT_CONTEXT InstanceContext
Definition: fltkernel.h:486
Extension
_Inout_opt_ PUNICODE_STRING Extension
Definition: fltkernel.h:1092
_FLT_PARAMETERS::AcquireForSectionSynchronization
struct _FLT_PARAMETERS::@1754 AcquireForSectionSynchronization
Stream
_Inout_opt_ PUNICODE_STRING _Inout_opt_ PUNICODE_STRING Stream
Definition: fltkernel.h:1092
FLT_VOLUME_PROPERTIES
struct _FLT_VOLUME_PROPERTIES FLT_VOLUME_PROPERTIES
ACCESS_MASK
ULONG ACCESS_MASK
Definition: nt_native.h:40
VolumeGuidName
_Must_inspect_result_ _Out_ PUNICODE_STRING VolumeGuidName
Definition: fltkernel.h:1752
_STRING
Definition: sprintf.c:449
NextEcpContext
_In_ PECP_LIST _In_opt_ PVOID _Out_opt_ LPGUID _Outptr_opt_ PVOID * NextEcpContext
Definition: fltkernel.h:2621
BytesRead
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ FLT_IO_OPERATION_FLAGS _Out_opt_ PULONG BytesRead
Definition: fltkernel.h:1255
DriverContext
_Must_inspect_result_ _In_opt_ PFLT_INSTANCE _Out_ PHANDLE _Outptr_opt_ PFILE_OBJECT _In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_opt_ PIO_DRIVER_CREATE_CONTEXT DriverContext
Definition: fltkernel.h:2335
_FLT_PARAMETERS::Type
DEVICE_RELATION_TYPE Type
Definition: fltkernel.h:309
_FLT_PARAMETERS::PrepareMdlWrite
struct _FLT_PARAMETERS::@1761 PrepareMdlWrite
FullDirectoryName
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING FullDirectoryName
Definition: fltkernel.h:2239
QueueType
_Must_inspect_result_ _In_ PFLT_CALLBACK_DATA _In_ PFLT_DEFERRED_IO_WORKITEM_ROUTINE _In_ WORK_QUEUE_TYPE QueueType
Definition: fltkernel.h:1977
_INTERFACE
Definition: miniport.h:120
PFLT_COMPLETE_CANCELED_CALLBACK
VOID(FLTAPI * PFLT_COMPLETE_CANCELED_CALLBACK)(_In_ PFLT_CALLBACK_DATA CallbackData)
Definition: fltkernel.h:860
_FLT_FILE_NAME_INFORMATION::Name
UNICODE_STRING Name
Definition: fltkernel.h:809
_FLT_PARAMETERS::OutputBufferLength
ULONG OutputBufferLength
Definition: fltkernel.h:203
PFLT_TRANSACTION_NOTIFICATION_CALLBACK
NTSTATUS(FLTAPI * PFLT_TRANSACTION_NOTIFICATION_CALLBACK)(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ PFLT_CONTEXT TransactionContext, _In_ ULONG NotificationMask)
Definition: fltkernel.h:706
_FLT_POSTOP_CALLBACK_STATUS
_FLT_POSTOP_CALLBACK_STATUS
Definition: fltkernel.h:587
FltDoCompletionProcessingWhenSafe
_Must_inspect_result_ BOOLEAN FLTAPI FltDoCompletionProcessingWhenSafe(_In_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags, _In_ PFLT_POST_OPERATION_CALLBACK SafePostCallback, _Out_ PFLT_POSTOP_CALLBACK_STATUS RetPostOperationStatus)
FSRTL_ALLOCATE_ECP_FLAGS
ULONG FSRTL_ALLOCATE_ECP_FLAGS
Definition: fsrtltypes.h:142
FltUnloadFilter
NTSTATUS NTAPI FltUnloadFilter(_In_ PCUNICODE_STRING FilterName)
Definition: Filter.c:57
_In_reads_bytes_
_Must_inspect_result_ _In_ PFILE_OBJECT _In_opt_ HANDLE _In_reads_bytes_(FileNameLength) PWSTR FileName
FltLoadFilter
NTSTATUS NTAPI FltLoadFilter(_In_ PCUNICODE_STRING FilterName)
Definition: Filter.c:33
FLT_CONTEXT_REGISTRATION
struct _FLT_CONTEXT_REGISTRATION FLT_CONTEXT_REGISTRATION
_Inout_opt_
#define _Inout_opt_
Definition: no_sal2.h:258
_FLT_IO_PARAMETER_BLOCK::Reserved
UCHAR Reserved
Definition: fltkernel.h:408
Guid
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ ULONG _In_opt_ GUID * Guid
Definition: fltkernel.h:1266
LookasideList
_Must_inspect_result_ _In_ LPCGUID _In_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _Inout_ PVOID LookasideList
Definition: fltkernel.h:2551
_FLT_PARAMETERS::SetFileInformation
struct _FLT_PARAMETERS::@1739 SetFileInformation
FileSystemType
_Out_ PFLT_FILESYSTEM_TYPE FileSystemType
Definition: fltkernel.h:2408
_FLT_PARAMETERS
Definition: fltkernel.h:99
_FLT_RELATED_OBJECTS::TransactionContext
USHORT CONST TransactionContext
Definition: fltkernel.h:475