ioctls.h

驱动枚举进程,控制线程AFFINITY,通过修改EPROCESS,ETHREAD ,KTHREAD 等结构,修改AFFINITY

/************************************************************************
* 文件名称:Ioctls.h                                           
* 作    者:李骥
*************************************************************************/
#ifndef IOCTLS_H
#define IOCTLS_H

#ifndef CTL_CODE
	#pragma message("CTL_CODE undefined. Include winioctl.h or wdm.h")
#endif

#define IOCTL_DUMP_DEVICE_STACK				CTL_CODE(FILE_DEVICE_UNKNOWN,0x800,METHOD_BUFFERED, FILE_ANY_ACCESS)	//其它方式读取
#define IOCTL_GETPROCESS				    CTL_CODE(FILE_DEVICE_UNKNOWN,0x801, METHOD_BUFFERED,FILE_ANY_ACCESS)
#define IOCTL_SETPROCESS				    CTL_CODE(FILE_DEVICE_UNKNOWN,0x802, METHOD_NEITHER,FILE_ANY_ACCESS)
#define IOCTL_SETPROCESS_ALL_AFFINITY       CTL_CODE(FILE_DEVICE_UNKNOWN,0x803,METHOD_NEITHER,FILE_ANY_ACCESS)
#define IOCTL_GIVE_FUNCTION			        CTL_CODE(FILE_DEVICE_UNKNOWN,0x804,METHOD_NEITHER,FILE_ANY_ACCESS)






#define	IOCTL_HOOK_INT			CTL_CODE( FILE_DEVICE_UNKNOWN, 0x810, METHOD_NEITHER, FILE_ALL_ACCESS )		//其它方式读取
#define IOCTL_UNHOOK_INT		CTL_CODE( FILE_DEVICE_UNKNOWN, 0x811, METHOD_NEITHER, FILE_ALL_ACCESS )
#define	IOCTL_HOOK_ALL_INT		CTL_CODE( FILE_DEVICE_UNKNOWN, 0x812, METHOD_NEITHER, FILE_ALL_ACCESS )
#define IOCTL_DUMP_IDT			CTL_CODE( FILE_DEVICE_UNKNOWN, 0x813, METHOD_BUFFERED, FILE_ALL_ACCESS )	//缓冲方方读取
#define IOCTL_GET_INT_COUNTS	CTL_CODE( FILE_DEVICE_UNKNOWN, 0x814, METHOD_BUFFERED, FILE_ALL_ACCESS )
#define	IOCTL_GET_START_TIME	CTL_CODE( FILE_DEVICE_UNKNOWN, 0x815, METHOD_BUFFERED, FILE_ALL_ACCESS )


#define  GetIO_FUNCTIONCODE(X)  ((X&0x3ffc)>>2)

#endif


#define PAGEDCODE code_seg("PAGE")
#define LOCKEDCODE code_seg()
#define INITCODE code_seg("INIT")

#define PAGEDDATA data_seg("PAGE")
#define LOCKEDDATA data_seg()
#define INITDATA data_seg("INIT")

#define MAX_FILE_LENGTH 1024