48 if (((
External) && ((Primary) || (Log))) ||
49 ((Log) && !(Primary)) ||
51 ((Primary) || (
External) || (Log))) ||
79 Cluster =
max(1, Cluster);
205 if (CheckStatus != 0)
296 Length = BaseName->Length;
370 Status = ZwCreateFile(Primary,
394 if (MarkAsSystemHive)
434 CompressionState = 0;
442 sizeof(CompressionState),
460 Status = ZwQueryInformationFile(*Primary,
483 sizeof(FsSizeInformation),
547 Status = ZwCreateFile(Log,
605 sizeof(CompressionState),
637 if (Hive->FileHandles[
i] !=
NULL)
640 Hive->FileHandles[
i] =
NULL;
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
FORCEINLINE VOID ExAcquirePushLockExclusive(PEX_PUSH_LOCK PushLock)
LIST_ENTRY TrustClassEntry
_Must_inspect_result_ _In_ WDFDEVICE _In_ ULONG _In_ ACCESS_MASK DesiredAccess
#define FILE_NO_COMPRESSION
PWORK_QUEUE_ITEM UnloadWorkItem
#define STATUS_INSUFFICIENT_RESOURCES
_In_ ULONG _In_ ULONG _In_ ULONG Length
#define HFILE_TYPE_EXTERNAL
#define OBJ_CASE_INSENSITIVE
#define STATUS_INVALID_PARAMETER
LIST_ENTRY CmpHiveListHead
NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)
struct _LIST_ENTRY * Blink
FORCEINLINE VOID InsertHeadList(_Inout_ PLIST_ENTRY ListHead, _Inout_ __drv_aliasesMem PLIST_ENTRY Entry)
#define FSCTL_SET_COMPRESSION
#define STATUS_REGISTRY_IO_FAILED
NTSTATUS CMAPI HvInitialize(PHHIVE RegistryHive, ULONG OperationType, ULONG HiveFlags, ULONG FileType, PVOID HiveData OPTIONAL, PALLOCATE_ROUTINE Allocate, PFREE_ROUTINE Free, PFILE_SET_SIZE_ROUTINE FileSetSize, PFILE_WRITE_ROUTINE FileWrite, PFILE_READ_ROUTINE FileRead, PFILE_FLUSH_ROUTINE FileFlush, ULONG Cluster OPTIONAL, PCUNICODE_STRING FileName OPTIONAL)
PVOID NTAPI CmpAllocate(_In_ SIZE_T Size, _In_ BOOLEAN Paged, _In_ ULONG Tag)
_Check_return_ _CRTIMP int __cdecl _wcsnicmp(_In_reads_or_z_(_MaxCount) const wchar_t *_Str1, _In_reads_or_z_(_MaxCount) const wchar_t *_Str2, _In_ size_t _MaxCount)
NTSTATUS ExInitializeResourceLite(PULONG res)
NTSTATUS NTAPI ExDeleteResourceLite(IN PERESOURCE Resource)
NTSTATUS NTAPI CmpDestroyHive(IN PCMHIVE CmHive)
static OUT PIO_STATUS_BLOCK OUT PVOID FileInformation
#define STATUS_INVALID_DEVICE_REQUEST
CM_USE_COUNT_LOG UseCountLog
#define HINIT_MEMORY_INPLACE
EX_PUSH_LOCK SecurityLock
NTSTATUS NTAPI KeWaitForSingleObject(IN PVOID Object, IN KWAIT_REASON WaitReason, IN KPROCESSOR_MODE WaitMode, IN BOOLEAN Alertable, IN PLARGE_INTEGER Timeout OPTIONAL)
#define OBJ_KERNEL_HANDLE
NTSYSAPI VOID NTAPI RtlCopyUnicodeString(PUNICODE_STRING DestinationString, PUNICODE_STRING SourceString)
UNICODE_STRING FileUserName
FORCEINLINE BOOLEAN RemoveEntryList(_In_ PLIST_ENTRY Entry)
#define FILE_NO_INTERMEDIATE_BUFFERING
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
VOID NTAPI CmpCloseHiveFiles(IN PCMHIVE Hive)
_In_ WDFDEVICE _In_ WDF_SPECIAL_FILE_TYPE FileType
NTSTATUS NTAPI CmpOpenHiveFiles(IN PCUNICODE_STRING BaseName, IN PCWSTR Extension OPTIONAL, OUT PHANDLE Primary, OUT PHANDLE Log, OUT PULONG PrimaryDisposition, OUT PULONG LogDisposition, IN BOOLEAN CreateAllowed, IN BOOLEAN MarkAsSystemHive, IN BOOLEAN NoBuffering, OUT PULONG ClusterSize OPTIONAL)
PCM_KEY_CONTROL_BLOCK RootKcb
VOID NTAPI CmpInitHiveViewList(IN PCMHIVE Hive)
_In_ PVOID _In_ ULONG Event
HANDLE FileHandles[HFILE_TYPE_MAX]
NTSYSAPI NTSTATUS NTAPI ZwFsControlFile(IN HANDLE DeviceHandle, IN HANDLE Event OPTIONAL, IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, IN PVOID ApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG IoControlCode, IN PVOID InputBuffer, IN ULONG InputBufferSize, OUT PVOID OutputBuffer, IN ULONG OutputBufferSize)
UNICODE_STRING FileFullPath
static IDispatch External
#define ExInitializePushLock
VOID CMAPI HvFree(PHHIVE RegistryHive)
#define STATUS_REGISTRY_CORRUPT
BOOLEAN NTAPI CmpFileFlush(IN PHHIVE RegistryHive, IN ULONG FileType, IN OUT PLARGE_INTEGER FileOffset, IN ULONG Length)
#define FSCTL_MARK_AS_SYSTEM_HIVE
struct _LIST_ENTRY * Flink
_Must_inspect_result_ _In_opt_ WDFKEY _In_ PCUNICODE_STRING _In_ ACCESS_MASK _In_ ULONG _Out_opt_ PULONG CreateDisposition
#define NT_SUCCESS(StatCode)
VOID NTAPI CmpFree(_In_ PVOID Ptr, _In_ ULONG Quota)
#define ObDereferenceObject
NTSYSAPI NTSTATUS NTAPI ZwQueryVolumeInformationFile(IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID FsInformation, IN ULONG Length, IN FS_INFORMATION_CLASS FsInformationClass)
#define ExAllocatePoolWithTag(hernya, size, tag)
#define STATUS_CANNOT_LOAD_REGISTRY_FILE
#define FILE_ATTRIBUTE_NORMAL
ULONG NTAPI CmCheckRegistry(IN PCMHIVE RegistryHive, IN ULONG Flags)
NTSTATUS NTAPI CmpInitializeHive(OUT PCMHIVE *CmHive, IN ULONG OperationType, IN ULONG HiveFlags, IN ULONG FileType, IN PVOID HiveData OPTIONAL, IN HANDLE Primary, IN HANDLE Log, IN HANDLE External, IN PCUNICODE_STRING FileName OPTIONAL, IN ULONG CheckFlags)
FORCEINLINE VOID ExReleasePushLock(PEX_PUSH_LOCK PushLock)
LIST_ENTRY KnodeConvertListHead
VOID NTAPI CmpInitSecurityCache(IN PCMHIVE Hive)
BOOLEAN NTAPI CmpFileRead(IN PHHIVE RegistryHive, IN ULONG FileType, IN PULONG FileOffset, OUT PVOID Buffer, IN SIZE_T BufferLength)
NTSTATUS NTAPI CmpCreateEvent(IN EVENT_TYPE EventType, OUT PHANDLE EventHandle, OUT PKEVENT *Event)
VOID FASTCALL KeInitializeGuardedMutex(OUT PKGUARDED_MUTEX GuardedMutex)
EX_PUSH_LOCK CmpHiveListHeadLock
PCM_CELL_REMAP_BLOCK CellRemapArray
GLsizei GLenum const GLvoid GLsizei GLenum GLbyte GLbyte GLbyte GLdouble GLdouble GLdouble GLfloat GLfloat GLfloat GLint GLint GLint GLshort GLshort GLshort GLubyte GLubyte GLubyte GLuint GLuint GLuint GLushort GLushort GLushort GLbyte GLbyte GLbyte GLbyte GLdouble GLdouble GLdouble GLdouble GLfloat GLfloat GLfloat GLfloat GLint GLint GLint GLint GLshort GLshort GLshort GLshort GLubyte GLubyte GLubyte GLubyte GLuint GLuint GLuint GLuint GLushort GLushort GLushort GLushort GLboolean const GLdouble const GLfloat const GLint const GLshort const GLbyte const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLdouble const GLfloat const GLfloat const GLint const GLint const GLshort const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort GLenum GLenum GLenum GLfloat GLenum GLint GLenum GLenum GLenum GLfloat GLenum GLenum GLint GLenum GLfloat GLenum GLint GLint GLushort GLenum GLenum GLfloat GLenum GLenum GLint GLfloat const GLubyte GLenum GLenum GLenum const GLfloat GLenum GLenum const GLint GLenum GLint GLint GLsizei GLsizei GLint GLenum GLenum const GLvoid GLenum GLenum const GLfloat GLenum GLenum const GLint GLenum GLenum const GLdouble GLenum GLenum const GLfloat GLenum GLenum const GLint GLsizei GLuint GLfloat GLuint GLbitfield GLfloat GLint GLuint GLboolean GLenum GLfloat GLenum GLbitfield GLenum GLfloat GLfloat GLint GLint const GLfloat GLenum GLfloat GLfloat GLint GLint GLfloat GLfloat GLint GLint const GLfloat GLint GLfloat GLfloat GLint GLfloat GLfloat GLint GLfloat GLfloat const GLdouble const GLfloat const GLdouble const GLfloat GLint i
#define HFILE_TYPE_PRIMARY
#define InitializeListHead(ListHead)
NTSYSAPI NTSTATUS NTAPI RtlAppendUnicodeStringToString(PUNICODE_STRING Destination, PUNICODE_STRING Source)
static OUT PIO_STATUS_BLOCK IoStatusBlock
#define FILE_RANDOM_ACCESS
#define FILE_ATTRIBUTE_HIDDEN
PKTHREAD HiveSecurityLockOwner
BOOLEAN NTAPI CmpFileWrite(IN PHHIVE RegistryHive, IN ULONG FileType, IN PULONG FileOffset, IN PVOID Buffer, IN SIZE_T BufferLength)
#define FileStandardInformation
CM_USE_COUNT_LOG LockHiveLog
#define FILE_SYNCHRONOUS_IO_NONALERT
NTSYSAPI VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
#define InitializeObjectAttributes(p, n, a, r, s)
#define ExFreePoolWithTag(_P, _T)
BOOLEAN NTAPI CmpFileSetSize(IN PHHIVE RegistryHive, IN ULONG FileType, IN ULONG FileSize, IN ULONG OldFileSize)
#define KeGetCurrentThread
unsigned short MaximumLength
VOID NTAPI CmpDestroySecurityCache(IN PCMHIVE Hive)
_Inout_opt_ PUNICODE_STRING Extension
size_t __cdecl wcslen(_In_z_ const wchar_t *_Str)
LIST_ENTRY KcbConvertListHead
VOID NTAPI CmpDestroyHiveViewList(IN PCMHIVE Hive)
BOOLEAN CmpShareSystemHives
_Out_ PHANDLE EventHandle
PULONG MinorVersion OPTIONAL