mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-23 20:05:26 +00:00
468 lines
8.0 KiB
C
468 lines
8.0 KiB
C
|
/*
|
||
|
* This file is part of the Process Hacker project - https://processhacker.sourceforge.io/
|
||
|
*
|
||
|
* You can redistribute this file and/or modify it under the terms of the
|
||
|
* Attribution 4.0 International (CC BY 4.0) license.
|
||
|
*
|
||
|
* You must give appropriate credit, provide a link to the license, and
|
||
|
* indicate if changes were made. You may do so in any reasonable manner, but
|
||
|
* not in any way that suggests the licensor endorses you or your use.
|
||
|
*/
|
||
|
|
||
|
#ifndef _NTTP_H
|
||
|
#define _NTTP_H
|
||
|
|
||
|
// Some types are already defined in winnt.h.
|
||
|
|
||
|
typedef struct _TP_ALPC TP_ALPC, *PTP_ALPC;
|
||
|
|
||
|
// private
|
||
|
typedef VOID (NTAPI *PTP_ALPC_CALLBACK)(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_ PTP_ALPC Alpc
|
||
|
);
|
||
|
|
||
|
// rev
|
||
|
typedef VOID (NTAPI *PTP_ALPC_CALLBACK_EX)(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_ PTP_ALPC Alpc,
|
||
|
_In_ PVOID ApcContext
|
||
|
);
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_VISTA)
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocPool(
|
||
|
_Out_ PTP_POOL *PoolReturn,
|
||
|
_Reserved_ PVOID Reserved
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpool
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleasePool(
|
||
|
_Inout_ PTP_POOL Pool
|
||
|
);
|
||
|
|
||
|
// winbase:SetThreadpoolThreadMaximum
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpSetPoolMaxThreads(
|
||
|
_Inout_ PTP_POOL Pool,
|
||
|
_In_ ULONG MaxThreads
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpSetPoolMinThreads(
|
||
|
_Inout_ PTP_POOL Pool,
|
||
|
_In_ ULONG MinThreads
|
||
|
);
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_WIN7)
|
||
|
// rev
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpQueryPoolStackInformation(
|
||
|
_In_ PTP_POOL Pool,
|
||
|
_Out_ PTP_POOL_STACK_INFORMATION PoolStackInformation
|
||
|
);
|
||
|
#endif
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_WIN7)
|
||
|
// rev
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpSetPoolStackInformation(
|
||
|
_Inout_ PTP_POOL Pool,
|
||
|
_In_ PTP_POOL_STACK_INFORMATION PoolStackInformation
|
||
|
);
|
||
|
#endif
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocCleanupGroup(
|
||
|
_Out_ PTP_CLEANUP_GROUP *CleanupGroupReturn
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolCleanupGroup
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseCleanupGroup(
|
||
|
_Inout_ PTP_CLEANUP_GROUP CleanupGroup
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolCleanupGroupMembers
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseCleanupGroupMembers(
|
||
|
_Inout_ PTP_CLEANUP_GROUP CleanupGroup,
|
||
|
_In_ LOGICAL CancelPendingCallbacks,
|
||
|
_Inout_opt_ PVOID CleanupParameter
|
||
|
);
|
||
|
|
||
|
// winbase:SetEventWhenCallbackReturns
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCallbackSetEventOnCompletion(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_In_ HANDLE Event
|
||
|
);
|
||
|
|
||
|
// winbase:ReleaseSemaphoreWhenCallbackReturns
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCallbackReleaseSemaphoreOnCompletion(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_In_ HANDLE Semaphore,
|
||
|
_In_ ULONG ReleaseCount
|
||
|
);
|
||
|
|
||
|
// winbase:ReleaseMutexWhenCallbackReturns
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCallbackReleaseMutexOnCompletion(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_In_ HANDLE Mutex
|
||
|
);
|
||
|
|
||
|
// winbase:LeaveCriticalSectionWhenCallbackReturns
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCallbackLeaveCriticalSectionOnCompletion(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_Inout_ PRTL_CRITICAL_SECTION CriticalSection
|
||
|
);
|
||
|
|
||
|
// winbase:FreeLibraryWhenCallbackReturns
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCallbackUnloadDllOnCompletion(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_In_ PVOID DllHandle
|
||
|
);
|
||
|
|
||
|
// winbase:CallbackMayRunLong
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpCallbackMayRunLong(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance
|
||
|
);
|
||
|
|
||
|
// winbase:DisassociateCurrentThreadFromCallback
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpDisassociateCallback(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance
|
||
|
);
|
||
|
|
||
|
// winbase:TrySubmitThreadpoolCallback
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpSimpleTryPost(
|
||
|
_In_ PTP_SIMPLE_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocWork(
|
||
|
_Out_ PTP_WORK *WorkReturn,
|
||
|
_In_ PTP_WORK_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolWork
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseWork(
|
||
|
_Inout_ PTP_WORK Work
|
||
|
);
|
||
|
|
||
|
// winbase:SubmitThreadpoolWork
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpPostWork(
|
||
|
_Inout_ PTP_WORK Work
|
||
|
);
|
||
|
|
||
|
// winbase:WaitForThreadpoolWorkCallbacks
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpWaitForWork(
|
||
|
_Inout_ PTP_WORK Work,
|
||
|
_In_ LOGICAL CancelPendingCallbacks
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocTimer(
|
||
|
_Out_ PTP_TIMER *Timer,
|
||
|
_In_ PTP_TIMER_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolTimer
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseTimer(
|
||
|
_Inout_ PTP_TIMER Timer
|
||
|
);
|
||
|
|
||
|
// winbase:SetThreadpoolTimer
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpSetTimer(
|
||
|
_Inout_ PTP_TIMER Timer,
|
||
|
_In_opt_ PLARGE_INTEGER DueTime,
|
||
|
_In_ ULONG Period,
|
||
|
_In_opt_ ULONG WindowLength
|
||
|
);
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_WIN7)
|
||
|
// winbase:SetThreadpoolTimerEx
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpSetTimerEx(
|
||
|
_Inout_ PTP_TIMER Timer,
|
||
|
_In_opt_ PLARGE_INTEGER DueTime,
|
||
|
_In_ ULONG Period,
|
||
|
_In_opt_ ULONG WindowLength
|
||
|
);
|
||
|
#endif
|
||
|
|
||
|
// winbase:IsThreadpoolTimerSet
|
||
|
NTSYSAPI
|
||
|
LOGICAL
|
||
|
NTAPI
|
||
|
TpIsTimerSet(
|
||
|
_In_ PTP_TIMER Timer
|
||
|
);
|
||
|
|
||
|
// winbase:WaitForThreadpoolTimerCallbacks
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpWaitForTimer(
|
||
|
_Inout_ PTP_TIMER Timer,
|
||
|
_In_ LOGICAL CancelPendingCallbacks
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocWait(
|
||
|
_Out_ PTP_WAIT *WaitReturn,
|
||
|
_In_ PTP_WAIT_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolWait
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseWait(
|
||
|
_Inout_ PTP_WAIT Wait
|
||
|
);
|
||
|
|
||
|
// winbase:SetThreadpoolWait
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpSetWait(
|
||
|
_Inout_ PTP_WAIT Wait,
|
||
|
_In_opt_ HANDLE Handle,
|
||
|
_In_opt_ PLARGE_INTEGER Timeout
|
||
|
);
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_WIN7)
|
||
|
// winbase:SetThreadpoolWaitEx
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpSetWaitEx(
|
||
|
_Inout_ PTP_WAIT Wait,
|
||
|
_In_opt_ HANDLE Handle,
|
||
|
_In_opt_ PLARGE_INTEGER Timeout,
|
||
|
_In_opt_ PVOID Reserved
|
||
|
);
|
||
|
#endif
|
||
|
|
||
|
// winbase:WaitForThreadpoolWaitCallbacks
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpWaitForWait(
|
||
|
_Inout_ PTP_WAIT Wait,
|
||
|
_In_ LOGICAL CancelPendingCallbacks
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
typedef VOID (NTAPI *PTP_IO_CALLBACK)(
|
||
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_ PVOID ApcContext,
|
||
|
_In_ PIO_STATUS_BLOCK IoSB,
|
||
|
_In_ PTP_IO Io
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
_Check_return_
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocIoCompletion(
|
||
|
_Out_ PTP_IO *IoReturn,
|
||
|
_In_ HANDLE File,
|
||
|
_In_ PTP_IO_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
// winbase:CloseThreadpoolIo
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseIoCompletion(
|
||
|
_Inout_ PTP_IO Io
|
||
|
);
|
||
|
|
||
|
// winbase:StartThreadpoolIo
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpStartAsyncIoOperation(
|
||
|
_Inout_ PTP_IO Io
|
||
|
);
|
||
|
|
||
|
// winbase:CancelThreadpoolIo
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCancelAsyncIoOperation(
|
||
|
_Inout_ PTP_IO Io
|
||
|
);
|
||
|
|
||
|
// winbase:WaitForThreadpoolIoCallbacks
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpWaitForIoCompletion(
|
||
|
_Inout_ PTP_IO Io,
|
||
|
_In_ LOGICAL CancelPendingCallbacks
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocAlpcCompletion(
|
||
|
_Out_ PTP_ALPC *AlpcReturn,
|
||
|
_In_ HANDLE AlpcPort,
|
||
|
_In_ PTP_ALPC_CALLBACK Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
|
||
|
#if (PHNT_VERSION >= PHNT_WIN7)
|
||
|
// rev
|
||
|
NTSYSAPI
|
||
|
NTSTATUS
|
||
|
NTAPI
|
||
|
TpAllocAlpcCompletionEx(
|
||
|
_Out_ PTP_ALPC *AlpcReturn,
|
||
|
_In_ HANDLE AlpcPort,
|
||
|
_In_ PTP_ALPC_CALLBACK_EX Callback,
|
||
|
_Inout_opt_ PVOID Context,
|
||
|
_In_opt_ PTP_CALLBACK_ENVIRON CallbackEnviron
|
||
|
);
|
||
|
#endif
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpReleaseAlpcCompletion(
|
||
|
_Inout_ PTP_ALPC Alpc
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpWaitForAlpcCompletion(
|
||
|
_Inout_ PTP_ALPC Alpc
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
typedef enum _TP_TRACE_TYPE
|
||
|
{
|
||
|
TpTraceThreadPriority = 1,
|
||
|
TpTraceThreadAffinity,
|
||
|
MaxTpTraceType
|
||
|
} TP_TRACE_TYPE;
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCaptureCaller(
|
||
|
_In_ TP_TRACE_TYPE Type
|
||
|
);
|
||
|
|
||
|
// private
|
||
|
NTSYSAPI
|
||
|
VOID
|
||
|
NTAPI
|
||
|
TpCheckTerminateWorker(
|
||
|
_In_ HANDLE Thread
|
||
|
);
|
||
|
|
||
|
#endif
|
||
|
|
||
|
#endif
|