3 #define WINSTA_OBJ_DIR L"\\Windows\\WindowStations" 4 #define SESSION_DIR L"\\Sessions" 8 #define WSS_NOINTERACTIVE (2) 10 #define WSS_SHUTDOWN (8) 11 #define WSS_DYING (16) 12 #define WSS_REALSHUTDOWN (32) 89 HWINSTA WindowStation,
98 OUT HWINSTA* phWinSta,
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
_Must_inspect_result_ _In_ WDFDEVICE _In_ ULONG _In_ ACCESS_MASK DesiredAccess
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES IN DWORD Unknown3
NTSTATUS NTAPI IntWinStaObjectParse(_In_ PVOID Parameters)
_Must_inspect_result_ _In_ WDFQUEUE _In_opt_ WDFREQUEST _In_opt_ WDFFILEOBJECT _Inout_opt_ PWDF_REQUEST_PARAMETERS Parameters
struct _DESKTOP * ActiveDesktop
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES IN DWORD IN DWORD IN DWORD IN DWORD Unknown6
NTSTATUS FASTCALL IntCreateWindowStation(OUT HWINSTA *phWinSta, IN POBJECT_ATTRIBUTES ObjectAttributes, IN KPROCESSOR_MODE AccessMode, IN KPROCESSOR_MODE OwnerMode, IN ACCESS_MASK dwDesiredAccess, DWORD Unknown2, DWORD Unknown3, DWORD Unknown4, DWORD Unknown5, DWORD Unknown6)
LIST_ENTRY DesktopListHead
PWINSTATION_OBJECT FASTCALL IntGetProcessWindowStation(HWINSTA *phWinSta OPTIONAL)
WINSTATION_OBJECT * InputWindowStation
UNICODE_STRING gustrWindowStationsDir
C_ASSERT(offsetof(WINSTATION_OBJECT, Flags)==0x10)
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
BOOL FASTCALL co_IntInitializeDesktopGraphics(VOID)
VOID FASTCALL IntEndDesktopGraphics(VOID)
PRTL_UNICODE_STRING_BUFFER PULONG PULONG Unknown4
_In_ PEPROCESS _In_ KPROCESSOR_MODE AccessMode
BOOL FASTCALL UserSetProcessWindowStation(HWINSTA hWindowStation)
#define offsetof(TYPE, MEMBER)
NTSTATUS NTAPI IntWinStaOkToClose(_In_ PVOID Parameters)
_Must_inspect_result_ _In_ ULONG Flags
NTSTATUS FASTCALL IntValidateWindowStationHandle(HWINSTA WindowStation, KPROCESSOR_MODE AccessMode, ACCESS_MASK DesiredAccess, PWINSTATION_OBJECT *Object, POBJECT_HANDLE_INFORMATION pObjectHandleInfo)
struct _WINSTATION_OBJECT * PWINSTATION_OBJECT
struct _WINSTATION_OBJECT WINSTATION_OBJECT
NTSTATUS NTAPI IntWinStaObjectDelete(_In_ PVOID Parameters)
struct atom_table ** PRTL_ATOM_TABLE
_Must_inspect_result_ _In_ WDFCOLLECTION _In_ WDFOBJECT Object
PTHREADINFO ptiDrawingClipboard
PRTL_ATOM_TABLE AtomTable
NTSTATUS NTAPI InitWindowStationImpl(VOID)
PWND spwndClipboardListener
BOOL FASTCALL CheckWinstaAttributeAccess(ACCESS_MASK)
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES IN DWORD IN DWORD IN DWORD Unknown5
NTSTATUS NTAPI UserCreateWinstaDirectory(VOID)
PULONG MinorVersion OPTIONAL