ntobjenum.h File Reference

#include <pshpack1.h>
#include <poppack.h>

Include dependency graph for ntobjenum.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	NtPidlEntry
struct	NtPidlTypeData
struct	RegPidlEntry

Macros
#define	NT_OBJECT_PIDL_MAGIC   (USHORT)0x9A03
#define	REGISTRY_PIDL_MAGIC   (USHORT)0x5364

Enumerations
enum	OBJECT_TYPE {   DIRECTORY_OBJECT , SYMBOLICLINK_OBJECT , MUTANT_OBJECT , SECTION_OBJECT ,   EVENT_OBJECT , SEMAPHORE_OBJECT , TIMER_OBJECT , KEY_OBJECT ,   EVENTPAIR_OBJECT , IOCOMPLETION_OBJECT , DEVICE_OBJECT , FILE_OBJECT ,   CONTROLLER_OBJECT , PROFILE_OBJECT , TYPE_OBJECT , DESKTOP_OBJECT ,   WINDOWSTATION_OBJECT , DRIVER_OBJECT , TOKEN_OBJECT , PROCESS_OBJECT ,   THREAD_OBJECT , ADAPTER_OBJECT , PORT_OBJECT , UNKNOWN_OBJECT_TYPE = -1 ,   DIRECTORY_OBJECT , SYMBOLICLINK_OBJECT , MUTANT_OBJECT , SECTION_OBJECT ,   EVENT_OBJECT , SEMAPHORE_OBJECT , TIMER_OBJECT , KEY_OBJECT ,   EVENTPAIR_OBJECT , IOCOMPLETITION_OBJECT , DEVICE_OBJECT , FILE_OBJECT ,   CONTROLLER_OBJECT , PROFILE_OBJECT , TYPE_OBJECT , DESKTOP_OBJECT ,   WINDOWSTATION_OBJECT , DRIVER_OBJECT , TOKEN_OBJECT , PROCESS_OBJECT ,   THREAD_OBJECT , ADAPTER_OBJECT , PORT_OBJECT , UNKNOWN_OBJECT_TYPE =-1 }
enum	REG_ENTRY_TYPE { REG_ENTRY_ROOT , REG_ENTRY_KEY , REG_ENTRY_VALUE , REG_ENTRY_VALUE_WITH_CONTENT }

Functions
HRESULT	ReadRegistryValue (HKEY root, PCWSTR path, PCWSTR valueName, PVOID *valueData, PDWORD valueLength)
HRESULT	GetEnumRegistryRoot (IEnumIDList **ppil)
HRESULT	GetEnumRegistryKey (LPCWSTR path, HKEY root, IEnumIDList **ppil)
HRESULT	GetEnumNTDirectory (LPCWSTR path, IEnumIDList **ppil)
HRESULT	GetNTObjectSymbolicLinkTarget (LPCWSTR path, LPCWSTR entryName, PUNICODE_STRING LinkTarget)

Variables
const LPCWSTR	ObjectTypeNames []
const LPCWSTR	RegistryTypeNames []

Macro Definition Documentation

NT_OBJECT_PIDL_MAGIC

#define NT_OBJECT_PIDL_MAGIC   (USHORT)0x9A03

Definition at line 25 of file ntobjenum.h.

REGISTRY_PIDL_MAGIC

#define REGISTRY_PIDL_MAGIC   (USHORT)0x5364

Definition at line 26 of file ntobjenum.h.

Enumeration Type Documentation

OBJECT_TYPE

enum OBJECT_TYPE

Enumerator
DIRECTORY_OBJECT
SYMBOLICLINK_OBJECT
MUTANT_OBJECT
SECTION_OBJECT
EVENT_OBJECT
SEMAPHORE_OBJECT
TIMER_OBJECT
KEY_OBJECT
EVENTPAIR_OBJECT
IOCOMPLETION_OBJECT
DEVICE_OBJECT
FILE_OBJECT
CONTROLLER_OBJECT
PROFILE_OBJECT
TYPE_OBJECT
DESKTOP_OBJECT
WINDOWSTATION_OBJECT
DRIVER_OBJECT
TOKEN_OBJECT
PROCESS_OBJECT
THREAD_OBJECT
ADAPTER_OBJECT
PORT_OBJECT
UNKNOWN_OBJECT_TYPE
DIRECTORY_OBJECT
SYMBOLICLINK_OBJECT
MUTANT_OBJECT
SECTION_OBJECT
EVENT_OBJECT
SEMAPHORE_OBJECT
TIMER_OBJECT
KEY_OBJECT
EVENTPAIR_OBJECT
IOCOMPLETITION_OBJECT
DEVICE_OBJECT
FILE_OBJECT
CONTROLLER_OBJECT
PROFILE_OBJECT
TYPE_OBJECT
DESKTOP_OBJECT
WINDOWSTATION_OBJECT
DRIVER_OBJECT
TOKEN_OBJECT
PROCESS_OBJECT
THREAD_OBJECT
ADAPTER_OBJECT
PORT_OBJECT
UNKNOWN_OBJECT_TYPE

Definition at line 13 of file ntobjenum.h.

                 {
    DIRECTORY_OBJECT, SYMBOLICLINK_OBJECT,
    MUTANT_OBJECT, SECTION_OBJECT, EVENT_OBJECT, SEMAPHORE_OBJECT,
    TIMER_OBJECT, KEY_OBJECT, EVENTPAIR_OBJECT, IOCOMPLETION_OBJECT,
    DEVICE_OBJECT, FILE_OBJECT, CONTROLLER_OBJECT, PROFILE_OBJECT,
    TYPE_OBJECT, DESKTOP_OBJECT, WINDOWSTATION_OBJECT, DRIVER_OBJECT,
    TOKEN_OBJECT, PROCESS_OBJECT, THREAD_OBJECT, ADAPTER_OBJECT, PORT_OBJECT,
 
    UNKNOWN_OBJECT_TYPE = -1
};

REG_ENTRY_TYPE

enum REG_ENTRY_TYPE

Enumerator
REG_ENTRY_ROOT
REG_ENTRY_KEY
REG_ENTRY_VALUE
REG_ENTRY_VALUE_WITH_CONTENT

Definition at line 50 of file ntobjenum.h.

{
    REG_ENTRY_ROOT,
    REG_ENTRY_KEY,
    REG_ENTRY_VALUE,
    REG_ENTRY_VALUE_WITH_CONTENT
    // any more?
};

Function Documentation

GetEnumNTDirectory()

HRESULT GetEnumNTDirectory	(	LPCWSTR	path,
		IEnumIDList **	ppil
	)

Definition at line 737 of file ntobjenum.cpp.

{
    return ShellObjectCreatorInit<CEnumNTDirectory>(path, IID_PPV_ARG(IEnumIDList, ppil));
}

Referenced by CNtObjectFolder::EnumObjects().

GetEnumRegistryKey()

HRESULT GetEnumRegistryKey	(	LPCWSTR	path,
		HKEY	root,
		IEnumIDList **	ppil
	)

Definition at line 732 of file ntobjenum.cpp.

{
    return ShellObjectCreatorInit<CEnumRegKey>(path, root, IID_PPV_ARG(IEnumIDList, ppil));
}

Referenced by CRegistryFolder::EnumObjects().

GetEnumRegistryRoot()

HRESULT GetEnumRegistryRoot

(

IEnumIDList **

ppil

)

Definition at line 727 of file ntobjenum.cpp.

{
    return ShellObjectCreator<CEnumRegRoot>(IID_PPV_ARG(IEnumIDList, ppil));
}

Referenced by CRegistryFolder::EnumObjects().

GetNTObjectSymbolicLinkTarget()

HRESULT GetNTObjectSymbolicLinkTarget	(	LPCWSTR	path,
		LPCWSTR	entryName,
		PUNICODE_STRING	LinkTarget
	)

Definition at line 151 of file ntobjenum.cpp.

{
    HANDLE handle;
    WCHAR buffer[MAX_PATH];
    LPWSTR pend = buffer;
 
    StringCbCopyExW(buffer, sizeof(buffer), path, &pend, NULL, 0);
 
    if (pend[-1] != '\\')
    {
        *pend++ = '\\';
        *pend = 0;
    }
 
    StringCbCatW(buffer, sizeof(buffer), entryName);
 
    DbgPrint("GetNTObjectSymbolicLinkTarget %d\n", buffer);
 
    LinkTarget->Length = 0;
 
    DWORD err = NtOpenObject(SYMBOLICLINK_OBJECT, &handle, SYMBOLIC_LINK_QUERY, buffer);
    if (!NT_SUCCESS(err))
        return HRESULT_FROM_NT(err);
 
    err = NtQuerySymbolicLinkObject(handle, LinkTarget, NULL);
    if (!NT_SUCCESS(err))
        return HRESULT_FROM_NT(err);
 
    NtClose(handle);
 
    return S_OK;
}

Referenced by CNtObjectFolder::CompareIDs(), CNtObjectFolder::GetDetailsEx(), CNtObjectFolder::GetDetailsOf(), and CNtObjectFolder::ResolveSymLink().

ReadRegistryValue()

HRESULT ReadRegistryValue	(	HKEY	root,
		PCWSTR	path,
		PCWSTR	valueName,
		PVOID *	valueData,
		PDWORD	valueLength
	)

Definition at line 98 of file ntobjenum.cpp.

{
    HKEY hkey;
 
    DWORD res;
    if (root)
    {
        res = RegOpenKeyExW(root, *path == '\\' ? path + 1 : path, 0, STANDARD_RIGHTS_READ | KEY_QUERY_VALUE, &hkey);
    }
    else
    {
        res = NtOpenObject(KEY_OBJECT, (PHANDLE) &hkey, STANDARD_RIGHTS_READ | KEY_QUERY_VALUE, path);
    }
    if (!NT_SUCCESS(res))
    {
        ERR("RegOpenKeyExW failed for path %S with status=%x\n", path, res);
        return HRESULT_FROM_NT(res);
    }
 
    res = RegQueryValueExW(hkey, valueName, NULL, NULL, NULL, valueLength);
    if (!NT_SUCCESS(res))
    {
        ERR("RegQueryValueExW failed for path %S with status=%x\n", path, res);
        return HRESULT_FROM_NT(res);
    }
 
    if (*valueLength > 0)
    {
        PBYTE data = (PBYTE) CoTaskMemAlloc(*valueLength);
        *valueData = data;
 
        res = RegQueryValueExW(hkey, valueName, NULL, NULL, data, valueLength);
        if (!NT_SUCCESS(res))
        {
            CoTaskMemFree(data);
            *valueData = NULL;
 
            RegCloseKey(hkey);
 
            ERR("RegOpenKeyExW failed for path %S with status=%x\n", path, res);
            return HRESULT_FROM_NT(res);
        }
    }
    else
    {
        *valueData = NULL;
    }
 
    RegCloseKey(hkey);
 
    return S_OK;
}

Variable Documentation

ObjectTypeNames

const LPCWSTR ObjectTypeNames[]

extern

Definition at line 25 of file ntobjenum.cpp.

Referenced by CNtObjectFolder::GetDetailsEx(), CNtObjectFolder::GetDetailsOf(), and MapTypeNameToType().

RegistryTypeNames

const LPCWSTR RegistryTypeNames[]

extern

Definition at line 35 of file ntobjenum.cpp.

Referenced by CRegistryFolder::GetDetailsEx(), and CRegistryFolder::GetDetailsOf().