|
Classes |
struct | _FILE_REFERENCE |
struct | _MAP_HANDLE |
struct | _QUICK_INDEX_HINT |
struct | INDEX_KEY |
struct | INDEX_DATA |
struct | INDEX_ROW |
struct | _UPCASE_TABLE_AND_KEY |
struct | _WAIT_FOR_NEW_LENGTH |
struct | _ENCRYPTION_CALL_BACK |
Defines |
#define | NTFS_WAIT_FLAG_ASYNC (0x00000001) |
#define | SUPPRESS_CONTENT_INDEX (0x20000000) |
#define | NTOFS_VIEW_INDEX_BUFFER_SIZE (0x1000) |
#define | NTFSAPI DECLSPEC_IMPORT |
#define | NtOfsInitializeMapHandle(M) { (M)->Bcb = NULL; } |
#define | NtOfsDirty(I, M, L) {CcSetDirtyPinnedData((M)->Bcb,(L));} |
#define | LOGGED_UTILITY_STREAM (0x100) |
#define | STREAM_NEW_OR_EXIST_MASK 0x000f0000 |
#define | FILE_DIR_TYPE_MASK 0x000000ff |
#define | FILE_NEW 0x00000001 |
#define | FILE_EXISTING 0x00000002 |
#define | DIRECTORY_NEW 0x00000004 |
#define | DIRECTORY_EXISTING 0x00000008 |
#define | EXISTING_FILE_ENCRYPTED 0x00000010 |
#define | STREAM_NEW 0x00010000 |
#define | STREAM_EXISTING 0x00020000 |
#define | STREAM_ENCRYPTED 0x00000001 |
#define | FILE_ENCRYPTED 0x00000002 |
#define | READ_DATA_ACCESS 0x01 |
#define | WRITE_DATA_ACCESS 0x02 |
#define | APPEND_DATA_ACCESS 0x04 |
#define | EXECUTE_ACCESS 0x20 |
#define | BACKUP_ACCESS 0x08 |
#define | RESTORE_ACCESS 0x10 |
#define | TRAVERSE_ACCESS 0x40 |
#define | ENCRYPTION_CURRENT_INTERFACE_VERSION 3 |
#define | ENCRYPTION_ALL_STREAMS 0x00000001 |
#define | ENCRYPTION_ALLOW_COMPRESSION 0x00000002 |
Typedefs |
typedef _FILE_REFERENCE | FILE_REFERENCE |
typedef _FILE_REFERENCE * | PFILE_REFERENCE |
typedef _FCB * | OBJECT_HANDLE |
typedef _SCB * | ATTRIBUTE_HANDLE |
typedef _SCB * | INDEX_HANDLE |
typedef _READ_CONTEXT * | PREAD_CONTEXT |
typedef ULONG | SECURITY_ID |
typedef _CI_CALL_BACK CI_CALL_BACK * | PCI_CALL_BACK |
typedef _VIEW_CALL_BACK VIEW_CALL_BACK * | PVIEW_CALL_BACK |
typedef _IRP_CONTEXT * | PIRP_CONTEXT |
typedef _MAP_HANDLE | MAP_HANDLE |
typedef _MAP_HANDLE * | PMAP_HANDLE |
typedef _QUICK_INDEX_HINT | QUICK_INDEX_HINT |
typedef _QUICK_INDEX_HINT * | PQUICK_INDEX_HINT |
typedef * | PINDEX_KEY |
typedef * | PINDEX_DATA |
typedef * | PINDEX_ROW |
typedef FSRTL_COMPARISON_RESULT(* | PCOLLATION_FUNCTION )(IN PINDEX_KEY Key1, IN PINDEX_KEY Key2, IN PVOID CollationData) |
typedef _UPCASE_TABLE_AND_KEY | UPCASE_TABLE_AND_KEY |
typedef _UPCASE_TABLE_AND_KEY * | PUPCASE_TABLE_AND_KEY |
typedef _WAIT_FOR_NEW_LENGTH | WAIT_FOR_NEW_LENGTH |
typedef _WAIT_FOR_NEW_LENGTH * | PWAIT_FOR_NEW_LENGTH |
typedef NTSTATUS(* | PMATCH_FUNCTION )(IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
typedef enum _CREATE_OPTIONS | CREATE_OPTIONS |
typedef enum _EXCLUSION | EXCLUSION |
typedef _BASE_FILE_SEGMENT_ITERATOR | BASE_FILE_SEGMENT_ITERATOR |
typedef _USN_ITERATOR | USN_ITERATOR |
typedef enum _NTFS_ADDON_TYPES | NTFS_ADDON_TYPES |
typedef NTSTATUS(* | ENCRYPTED_FILE_CREATE )(IN OBJECT_HANDLE FileHdl, IN OBJECT_HANDLE ParentDir OPTIONAL, IN PIO_STACK_LOCATION IrpSp, IN ULONG FileDirFlag, IN PIRP_CONTEXT IrpContext, IN PDEVICE_OBJECT VolDo, IN PVOID FileKeyContext, IN OUT PVOID *PKeyContext, IN OUT ULONG *ContextLength, IN OUT PVOID *PCreateContext, IN OUT PBOOLEAN Reserved) |
typedef NTSTATUS(* | ENCRYPTED_FILE_PRE_CREATE )(IN PDEVICE_OBJECT VolDo, IN PIRP Irp, IN PFILE_OBJECT FileObject) |
typedef NTSTATUS(* | ENCRYPTED_FILE_POST_CREATE )(IN PDEVICE_OBJECT VolDo, IN PIRP Irp, IN PFILE_OBJECT FileObject, IN NTSTATUS Status, IN OUT PVOID *PCreateContext) |
typedef NTSTATUS(* | ENCRYPTED_FILE_SYSTEM_CONTROL )(IN PVOID PInputBuffer OPTIONAL, IN ULONG InputDataLength, OUT PVOID OutputBuffer OPTIONAL, IN OUT ULONG *OutputBufferLength OPTIONAL, IN ULONG EncryptionFlag, IN ULONG AccessFlag, IN ULONG FsControlCode, IN OBJECT_HANDLE FileHdl, IN PIRP_CONTEXT IrpContext, IN PDEVICE_OBJECT VolDo, IN ATTRIBUTE_HANDLE Attribute, IN OUT PVOID *PContext OPTIONAL, IN OUT ULONG *ContextLength OPTIONAL) |
typedef NTSTATUS(* | ENCRYPTED_FILE_PRE_FILE_SYSTEM_CONTROL )(IN PDEVICE_OBJECT VolDo, IN PIRP Irp, IN PFILE_OBJECT FileObject) |
typedef NTSTATUS(* | ENCRYPTED_FILE_READ )(IN OUT PUCHAR InOutBuffer, IN PLARGE_INTEGER Offset, IN ULONG BufferSize, IN PVOID Context) |
typedef NTSTATUS(* | ENCRYPTED_FILE_WRITE )(IN PUCHAR InBuffer, OUT PUCHAR OutBuffer, IN PLARGE_INTEGER Offset, IN ULONG BufferSize, IN PUCHAR Context) |
typedef VOID(* | ENCRYPTED_FILE_CLEANUP )(IN OUT PVOID *Context) |
typedef _ENCRYPTION_CALL_BACK | ENCRYPTION_CALL_BACK |
typedef _ENCRYPTION_CALL_BACK * | PENCRYPTION_CALL_BACK |
Enumerations |
enum | _CREATE_OPTIONS { CREATE_NEW = 0,
CREATE_OR_OPEN = 1,
OPEN_EXISTING = 2
} |
enum | _EXCLUSION { SHARED = 0,
EXCLUSIVE
} |
enum | _NTFS_ADDON_TYPES { Encryption = 3
} |
Functions |
FSRTL_COMPARISON_RESULT | NtOfsCollateUlong (IN PINDEX_KEY Key1, IN PINDEX_KEY Key2, IN PVOID CollationData) |
FSRTL_COMPARISON_RESULT | NtOfsCollateUlongs (IN PINDEX_KEY Key1, IN PINDEX_KEY Key2, IN PVOID CollationData) |
FSRTL_COMPARISON_RESULT | NtOfsCollateSid (IN PINDEX_KEY Key1, IN PINDEX_KEY Key2, IN PVOID CollationData) |
FSRTL_COMPARISON_RESULT | NtOfsCollateUnicode (IN PINDEX_KEY Key1, IN PINDEX_KEY Key2, IN PVOID CollationData) |
NTSTATUS | NtOfsMatchAll (IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
NTSTATUS | NtOfsMatchUlongExact (IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
NTSTATUS | NtOfsMatchUlongsExact (IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
NTSTATUS | NtOfsMatchUnicodeExpression (IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
NTSTATUS | NtOfsMatchUnicodeString (IN PINDEX_ROW IndexRow, IN OUT PVOID MatchData) |
NTFSAPI NTSTATUS | NtOfsCreateIndex (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, IN UNICODE_STRING Name, IN CREATE_OPTIONS CreateOptions, IN ULONG DeleteCollationData, IN ULONG CollationRule, IN PCOLLATION_FUNCTION CollationFunction, IN PVOID CollationData OPTIONAL, OUT INDEX_HANDLE *IndexHandle) |
NTFSAPI NTSTATUS | NtOfsFindRecord (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN PINDEX_KEY IndexKey, OUT PINDEX_ROW IndexRow, OUT PMAP_HANDLE MapHandle, IN OUT PQUICK_INDEX_HINT QuickIndexHint OPTIONAL) |
NTFSAPI NTSTATUS | NtOfsFindLastRecord (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN PINDEX_KEY MaxIndexKey, OUT PINDEX_ROW IndexRow, OUT PMAP_HANDLE MapHandle) |
NTFSAPI VOID | NtOfsAddRecords (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN ULONG Count, IN PINDEX_ROW IndexRow, IN ULONG SequentialInsertMode) |
NTFSAPI VOID | NtOfsDeleteRecords (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN ULONG Count, IN PINDEX_KEY IndexKey) |
NTFSAPI NTSTATUS | NtOfsReadRecords (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN OUT PREAD_CONTEXT *ReadContext, IN OPTIONAL PINDEX_KEY IndexKey, IN PMATCH_FUNCTION MatchFunction, IN PVOID MatchData, IN OUT ULONG *Count, OUT PINDEX_ROW Rows, IN ULONG BufferLength, OUT PVOID Buffer) |
NTFSAPI VOID | NtOfsFreeReadContext (IN PREAD_CONTEXT ReadContext) |
NTFSAPI VOID | NtOfsUpdateRecord (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle, IN ULONG Count, IN PINDEX_ROW IndexRow, IN OUT PQUICK_INDEX_HINT QuickIndexHint OPTIONAL, IN OUT PMAP_HANDLE MapHandle OPTIONAL) |
NTFSAPI VOID | NtOfsCloseIndex (IN PIRP_CONTEXT IrpContext, IN INDEX_HANDLE IndexHandle) |
NTFSAPI VOID | NtOfsDeleteIndex (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, IN INDEX_HANDLE IndexHandle) |
NTFSAPI VOID | NtOfsMapAttribute (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Offset, IN ULONG Length, OUT PVOID *Buffer, OUT PMAP_HANDLE MapHandle) |
NTFSAPI VOID | NtOfsPreparePinWrite (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Offset, IN ULONG Length, OUT PVOID *Buffer, OUT PMAP_HANDLE MapHandle) |
NTFSAPI VOID | NtOfsPinRead (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Offset, IN ULONG Length, OUT PMAP_HANDLE MapHandle) |
NTFSAPI VOID | NtOfsReleaseMap (IN PIRP_CONTEXT IrpContext, IN PMAP_HANDLE MapHandle) |
NTFSAPI VOID | NtOfsPutData (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Offset, IN ULONG Length, IN PVOID Data OPTIONAL) |
NTFSAPI NTSTATUS | NtOfsCreateAttribute (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, IN UNICODE_STRING Name, IN CREATE_OPTIONS CreateOptions, IN ULONG LogNonresidentToo, OUT ATTRIBUTE_HANDLE *AttributeHandle) |
NTFSAPI NTSTATUS | NtOfsCreateAttributeEx (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, IN UNICODE_STRING Name, IN ULONG AttributeTypeCode, IN CREATE_OPTIONS CreateOptions, IN ULONG LogNonresidentToo, OUT ATTRIBUTE_HANDLE *AttributeHandle) |
NTFSAPI VOID | NtOfsCloseAttribute (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE AttributeHandle) |
NTFSAPI VOID | NtOfsDeleteAttribute (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, IN ATTRIBUTE_HANDLE AttributeHandle) |
NTFSAPI LONGLONG | NtOfsQueryLength (IN ATTRIBUTE_HANDLE AttributeHandle) |
NTFSAPI VOID | NtOfsSetLength (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Length) |
NTFSAPI NTSTATUS | NtOfsWaitForNewLength (IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Length, IN ULONG Async, IN PIRP Irp, IN PDRIVER_CANCEL CancelRoutine, IN PLARGE_INTEGER Timeout OPTIONAL) |
VOID | NtOfsPostNewLength (IN PIRP_CONTEXT IrpContext OPTIONAL, IN ATTRIBUTE_HANDLE Attribute, IN BOOLEAN WakeAll) |
NTFSAPI VOID | NtOfsDecommit (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN LONGLONG Offset, IN LONGLONG Length) |
NTFSAPI VOID | NtOfsFlushAttribute (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, IN ULONG Purge) |
NTFSAPI VOID | NtOfsQueryAttributeSecurityId (IN PIRP_CONTEXT IrpContext, IN ATTRIBUTE_HANDLE Attribute, OUT SECURITY_ID *SecurityId) |
VOID | NtOfsAcquireObjectShared (HANDLE ObjectHandle) |
VOID | NtOfsReleaseObject (HANDLE ObjectHandle) |
BOOLEAN | NtOfsIsObjectAcquiredExclusive (HANDLE ObjectHandle) |
BOOLEAN | NtOfsIsObjectAcquiredShared (HANDLE ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsOpenByFileReference (IN PIRP_CONTEXT IrpContext, IN FILE_REFERENCE FileReference, IN EXCLUSION Exclusion, OUT OBJECT_HANDLE *ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsCreateRelativeObject (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ParentObjectHandle, IN UNICODE_STRING Name, IN CREATE_OPTIONS CreateOptions, IN EXCLUSION Exclusion, OUT OBJECT_HANDLE *ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsCloseObject (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsDeleteObject (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsDeleteAllAttributes (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsQueryPathFromRoot (IN PIRP_CONTEXT IrpContext, IN FILE_REFERENCE FileReference, OUT UNICODE_STRING *PathName) |
NTFSAPI NTSTATUS | NtOfsQueryFileName (IN PIRP_CONTEXT IrpContext, IN FILE_REFERENCE FileReference, OUT UNICODE_STRING *FileName) |
NTFSAPI NTSTATUS | NtOfsQueryFileReferenceFromName (IN PIRP_CONTEXT IrpContext, IN UNICODE_STRING Name, OUT FILE_REFERENCE *FileReference) |
NTFSAPI NTSTATUS | NtOfsQueryFileReferenceFromHandle (IN OBJECT_HANDLE Object, OUT FILE_REFERENCE *FileReference) |
NTFSAPI NTSTATUS | NtOfsQueryObjectSecurityId (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ObjectHandle, OUT SECURITY_ID *SecurityId) |
NTFSAPI NTSTATUS | NtOfsIsAncestorOf (IN PIRP_CONTEXT IrpContext, IN FILE_REFERENCE Ancestor, IN FILE_REFERENCE Child) |
NTFSAPI NTSTATUS | NtOfsGetParentFileReferenceFromHandle (IN PIRP_CONTEXT IrpContext, IN OBJECT_HANDLE ChildObject, OUT FILE_REFERENCE *ParentFileReference) |
NTFSAPI NTSTATUS | NtOfsClearSecurityCache (IN PIRP_CONTEXT IrpContext) |
NTFSAPI NTSTATUS | NtOfsIsAccessGranted (IN PIRP_CONTEXT IrpContext, IN SECURITY_ID SecurityId, IN ACCESS_MASK DesiredAccess, IN ACCESS_STATE *SecurityAccessState) |
NTFSAPI NTSTATUS | NtOfsMarkVolumeCorrupt (IN PIRP_CONTEXT IrpContext, IN ULONG NewState, IN ULONG StateMask, OUT ULONG *OldState) |
NTFSAPI NTSTATUS | NtOfsQueryVolumeStatistics (IN PIRP_CONTEXT IrpContext, OUT LONGLONG *TotalClusters, OUT LONGLONG *FreeClusters) |
NTFSAPI NTSTATUS | NtOfsQueryHandleState (IN PIRP_CONTEXT IrpContext, OUT VOID *OldData) |
NTFSAPI NTSTATUS | NtOfsSetHandleState (IN PIRP_CONTEXT IrpContext, IN VOID *Data) |
NTFSAPI NTSTATUS | NtOfsQueryAttributeHandle (IN PIRP_CONTEXT IrpContext, OUT ATTRIBUTE_HANDLE *AttributeHandle) |
NTFSAPI NTSTATUS | NtOfsQueryObjectHandle (IN PIRP_CONTEXT IrpContext, OUT OBJECT_HANDLE *ObjectHandle) |
NTFSAPI NTSTATUS | NtOfsCloneIrpContext (IN PIRP_CONTEXT IrpContext, OUT PIRP_CONTEXT *NewIrpContext) |
NTFSAPI NTSTATUS | NtOfsCompleteRequest (IN PIRP_CONTEXT IrpContext, NTSTATUS Status) |
NTFSAPI NTSTATUS | NtOfsCreateBaseFileSegmentIterator (IN PIRP_CONTEXT IrpContext, OUT BASE_FILE_SEGMENT_ITERATOR *Iterator) |
NTFSAPI NTSTATUS | NtOfsNextBaseFileSegmentIteration (IN PIRP_CONTEXT IrpContext, IN BASE_FILE_SEGMENT_ITERATOR *Iterator, IN OUT ULONG *BufferLength, IN OUT PVOID Buffer) |
NTFSAPI NTSTATUS | NtOfsCloseBaseFileSegmentIterator (IN PIRP_CONTEXT IrpContext, IN BASE_FILE_SEGMENT_ITERATOR *Iterator) |
NTFSAPI NTSTATUS | NtOfsCreateUsnIterator (IN PIRP_CONTEXT IrpContext, IN USN BeginningUsn, IN USN EndingUsn, OUT USN_ITERATOR *Iterator) |
NTFSAPI NTSTATUS | NtOfsNextUsnIteration (IN PIRP_CONTEXT IrpContext, IN USN_ITERATOR *Iterator, IN OUT ULONG *BufferLength, IN OUT PVOID Buffer) |
NTFSAPI NTSTATUS | NtOfsCloseUsnIterator (IN PIRP_CONTEXT IrpContext, IN USN_ITERATOR *Iterator) |
NTFSAPI NTSTATUS | NtOfsRegisterCallBacks (NTFS_ADDON_TYPES NtfsAddonType, PVOID CallBackTable) |
Variables |
FILE_REFERENCE | NtOfsContentIndexSystemFile |