mirror of
https://github.com/mirror/processhacker
synced 2026-06-08 16:03:24 +00:00
wj32
7bd28e4357
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@2304 21ef857c-d57f-4fe0-8362-d861dc6d29cd
380 lines
14 KiB
C#
380 lines
14 KiB
C#
/*
|
|
* Process Hacker -
|
|
* NT status values
|
|
*
|
|
* Copyright (C) 2009 wj32
|
|
*
|
|
* This file is part of Process Hacker.
|
|
*
|
|
* Process Hacker is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Process Hacker is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Process Hacker. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace ProcessHacker.Native.Api
|
|
{
|
|
/// <summary>
|
|
/// A NT status value.
|
|
/// </summary>
|
|
public enum NtStatus : uint
|
|
{
|
|
// Success
|
|
Success = 0x00000000,
|
|
Wait0 = 0x00000000,
|
|
Wait1 = 0x00000001,
|
|
Wait2 = 0x00000002,
|
|
Wait3 = 0x00000003,
|
|
Wait63 = 0x0000003f,
|
|
Abandoned = 0x00000080,
|
|
AbandonedWait0 = 0x00000080,
|
|
AbandonedWait1 = 0x00000081,
|
|
AbandonedWait2 = 0x00000082,
|
|
AbandonedWait3 = 0x00000083,
|
|
AbandonedWait63 = 0x000000bf,
|
|
UserApc = 0x000000c0,
|
|
KernelApc = 0x00000100,
|
|
Alerted = 0x00000101,
|
|
Timeout = 0x00000102,
|
|
Pending = 0x00000103,
|
|
Reparse = 0x00000104,
|
|
MoreEntries = 0x00000105,
|
|
NotAllAssigned = 0x00000106,
|
|
SomeNotMapped = 0x00000107,
|
|
OpLockBreakInProgress = 0x00000108,
|
|
VolumeMounted = 0x00000109,
|
|
RxActCommitted = 0x0000010a,
|
|
NotifyCleanup = 0x0000010b,
|
|
NotifyEnumDir = 0x0000010c,
|
|
NoQuotasForAccount = 0x0000010d,
|
|
PrimaryTransportConnectFailed = 0x0000010e,
|
|
PageFaultTransition = 0x00000110,
|
|
PageFaultDemandZero = 0x00000111,
|
|
PageFaultCopyOnWrite = 0x00000112,
|
|
PageFaultGuardPage = 0x00000113,
|
|
PageFaultPagingFile = 0x00000114,
|
|
CrashDump = 0x00000116,
|
|
ReparseObject = 0x00000118,
|
|
NothingToTerminate = 0x00000122,
|
|
ProcessNotInJob = 0x00000123,
|
|
ProcessInJob = 0x00000124,
|
|
ProcessCloned = 0x00000129,
|
|
FileLockedWithOnlyReaders = 0x0000012a,
|
|
FileLockedWithWriters = 0x0000012b,
|
|
|
|
// Informational
|
|
Informational = 0x40000000,
|
|
ObjectNameExists = 0x40000000,
|
|
ThreadWasSuspended = 0x40000001,
|
|
WorkingSetLimitRange = 0x40000002,
|
|
ImageNotAtBase = 0x40000003,
|
|
RegistryRecovered = 0x40000009,
|
|
|
|
// Warning
|
|
Warning = 0x80000000,
|
|
GuardPageViolation = 0x80000001,
|
|
DatatypeMisalignment = 0x80000002,
|
|
Breakpoint = 0x80000003,
|
|
SingleStep = 0x80000004,
|
|
BufferOverflow = 0x80000005,
|
|
NoMoreFiles = 0x80000006,
|
|
HandlesClosed = 0x8000000a,
|
|
PartialCopy = 0x8000000d,
|
|
DeviceBusy = 0x80000011,
|
|
InvalidEaName = 0x80000013,
|
|
EaListInconsistent = 0x80000014,
|
|
NoMoreEntries = 0x8000001a,
|
|
LongJump = 0x80000026,
|
|
DllMightBeInsecure = 0x8000002b,
|
|
|
|
// Error
|
|
Error = 0xc0000000,
|
|
Unsuccessful = 0xc0000001,
|
|
NotImplemented = 0xc0000002,
|
|
InvalidInfoClass = 0xc0000003,
|
|
InfoLengthMismatch = 0xc0000004,
|
|
AccessViolation = 0xc0000005,
|
|
InPageError = 0xc0000006,
|
|
PagefileQuota = 0xc0000007,
|
|
InvalidHandle = 0xc0000008,
|
|
BadInitialStack = 0xc0000009,
|
|
BadInitialPc = 0xc000000a,
|
|
InvalidCid = 0xc000000b,
|
|
TimerNotCanceled = 0xc000000c,
|
|
InvalidParameter = 0xc000000d,
|
|
NoSuchDevice = 0xc000000e,
|
|
NoSuchFile = 0xc000000f,
|
|
InvalidDeviceRequest = 0xc0000010,
|
|
EndOfFile = 0xc0000011,
|
|
WrongVolume = 0xc0000012,
|
|
NoMediaInDevice = 0xc0000013,
|
|
NoMemory = 0xc0000017,
|
|
NotMappedView = 0xc0000019,
|
|
UnableToFreeVm = 0xc000001a,
|
|
UnableToDeleteSection = 0xc000001b,
|
|
IllegalInstruction = 0xc000001d,
|
|
AlreadyCommitted = 0xc0000021,
|
|
AccessDenied = 0xc0000022,
|
|
BufferTooSmall = 0xc0000023,
|
|
ObjectTypeMismatch = 0xc0000024,
|
|
NonContinuableException = 0xc0000025,
|
|
BadStack = 0xc0000028,
|
|
NotLocked = 0xc000002a,
|
|
NotCommitted = 0xc000002d,
|
|
InvalidParameterMix = 0xc0000030,
|
|
ObjectNameInvalid = 0xc0000033,
|
|
ObjectNameNotFound = 0xc0000034,
|
|
ObjectNameCollision = 0xc0000035,
|
|
ObjectPathInvalid = 0xc0000039,
|
|
ObjectPathNotFound = 0xc000003a,
|
|
ObjectPathSyntaxBad = 0xc000003b,
|
|
DataOverrun = 0xc000003c,
|
|
DataLate = 0xc000003d,
|
|
DataError = 0xc000003e,
|
|
CrcError = 0xc000003f,
|
|
SectionTooBig = 0xc0000040,
|
|
PortConnectionRefused = 0xc0000041,
|
|
InvalidPortHandle = 0xc0000042,
|
|
SharingViolation = 0xc0000043,
|
|
QuotaExceeded = 0xc0000044,
|
|
InvalidPageProtection = 0xc0000045,
|
|
MutantNotOwned = 0xc0000046,
|
|
SemaphoreLimitExceeded = 0xc0000047,
|
|
PortAlreadySet = 0xc0000048,
|
|
SectionNotImage = 0xc0000049,
|
|
SuspendCountExceeded = 0xc000004a,
|
|
ThreadIsTerminating = 0xc000004b,
|
|
BadWorkingSetLimit = 0xc000004c,
|
|
IncompatibleFileMap = 0xc000004d,
|
|
SectionProtection = 0xc000004e,
|
|
EasNotSupported = 0xc000004f,
|
|
EaTooLarge = 0xc0000050,
|
|
NonExistentEaEntry = 0xc0000051,
|
|
NoEasOnFile = 0xc0000052,
|
|
EaCorruptError = 0xc0000053,
|
|
FileLockConflict = 0xc0000054,
|
|
LockNotGranted = 0xc0000055,
|
|
DeletePending = 0xc0000056,
|
|
CtlFileNotSupported = 0xc0000057,
|
|
UnknownRevision = 0xc0000058,
|
|
RevisionMismatch = 0xc0000059,
|
|
InvalidOwner = 0xc000005a,
|
|
InvalidPrimaryGroup = 0xc000005b,
|
|
NoImpersonationToken = 0xc000005c,
|
|
CantDisableMandatory = 0xc000005d,
|
|
NoLogonServers = 0xc000005e,
|
|
NoSuchLogonSession = 0xc000005f,
|
|
NoSuchPrivilege = 0xc0000060,
|
|
PrivilegeNotHeld = 0xc0000061,
|
|
InvalidAccountName = 0xc0000062,
|
|
UserExists = 0xc0000063,
|
|
NoSuchUser = 0xc0000064,
|
|
GroupExists = 0xc0000065,
|
|
NoSuchGroup = 0xc0000066,
|
|
MemberInGroup = 0xc0000067,
|
|
MemberNotInGroup = 0xc0000068,
|
|
LastAdmin = 0xc0000069,
|
|
WrongPassword = 0xc000006a,
|
|
IllFormedPassword = 0xc000006b,
|
|
PasswordRestriction = 0xc000006c,
|
|
LogonFailure = 0xc000006d,
|
|
AccountRestriction = 0xc000006e,
|
|
InvalidLogonHours = 0xc000006f,
|
|
InvalidWorkstation = 0xc0000070,
|
|
PasswordExpired = 0xc0000071,
|
|
AccountDisabled = 0xc0000072,
|
|
FileInvalid = 0xc0000098,
|
|
InstanceNotAvailable = 0xc00000ab,
|
|
PipeNotAvailable = 0xc00000ac,
|
|
InvalidPipeState = 0xc00000ad,
|
|
PipeBusy = 0xc00000ae,
|
|
IllegalFunction = 0xc00000af,
|
|
PipeDisconnected = 0xc00000b0,
|
|
PipeClosing = 0xc00000b1,
|
|
PipeConnected = 0xc00000b2,
|
|
PipeListening = 0xc00000b3,
|
|
InvalidReadMode = 0xc00000b4,
|
|
IoTimeout = 0xc00000b5,
|
|
FileForcedClosed = 0xc00000b6,
|
|
ProfilingNotStarted = 0xc00000b7,
|
|
ProfilingNotStopped = 0xc00000b8,
|
|
NotSameDevice = 0xc00000d4,
|
|
FileRenamed = 0xc00000d5,
|
|
CantWait = 0xc00000d8,
|
|
PipeEmpty = 0xc00000d9,
|
|
CantTerminateSelf = 0xc00000db,
|
|
InternalError = 0xc00000e5,
|
|
InvalidParameter1 = 0xc00000ef,
|
|
InvalidParameter2 = 0xc00000f0,
|
|
InvalidParameter3 = 0xc00000f1,
|
|
InvalidParameter4 = 0xc00000f2,
|
|
InvalidParameter5 = 0xc00000f3,
|
|
InvalidParameter6 = 0xc00000f4,
|
|
InvalidParameter7 = 0xc00000f5,
|
|
InvalidParameter8 = 0xc00000f6,
|
|
InvalidParameter9 = 0xc00000f7,
|
|
InvalidParameter10 = 0xc00000f8,
|
|
InvalidParameter11 = 0xc00000f9,
|
|
InvalidParameter12 = 0xc00000fa,
|
|
MappedFileSizeZero = 0xc000011e,
|
|
TooManyOpenedFiles = 0xc000011f,
|
|
Cancelled = 0xc0000120,
|
|
CannotDelete = 0xc0000121,
|
|
InvalidComputerName = 0xc0000122,
|
|
FileDeleted = 0xc0000123,
|
|
SpecialAccount = 0xc0000124,
|
|
SpecialGroup = 0xc0000125,
|
|
SpecialUser = 0xc0000126,
|
|
MembersPrimaryGroup = 0xc0000127,
|
|
FileClosed = 0xc0000128,
|
|
TooManyThreads = 0xc0000129,
|
|
ThreadNotInProcess = 0xc000012a,
|
|
TokenAlreadyInUse = 0xc000012b,
|
|
PagefileQuotaExceeded = 0xc000012c,
|
|
CommitmentLimit = 0xc000012d,
|
|
InvalidImageLeFormat = 0xc000012e,
|
|
InvalidImageNotMz = 0xc000012f,
|
|
InvalidImageProtect = 0xc0000130,
|
|
InvalidImageWin16 = 0xc0000131,
|
|
LogonServer = 0xc0000132,
|
|
DifferenceAtDc = 0xc0000133,
|
|
SynchronizationRequired = 0xc0000134,
|
|
DllNotFound = 0xc0000135,
|
|
IoPrivilegeFailed = 0xc0000137,
|
|
OrdinalNotFound = 0xc0000138,
|
|
EntryPointNotFound = 0xc0000139,
|
|
ControlCExit = 0xc000013a,
|
|
PortNotSet = 0xc0000353,
|
|
DebuggerInactive = 0xc0000354,
|
|
CallbackBypass = 0xc0000503,
|
|
PortClosed = 0xc0000700,
|
|
MessageLost = 0xc0000701,
|
|
InvalidMessage = 0xc0000702,
|
|
RequestCanceled = 0xc0000703,
|
|
RecursiveDispatch = 0xc0000704,
|
|
LpcReceiveBufferExpected = 0xc0000705,
|
|
LpcInvalidConnectionUsage = 0xc0000706,
|
|
LpcRequestsNotAllowed = 0xc0000707,
|
|
ResourceInUse = 0xc0000708,
|
|
ProcessIsProtected = 0xc0000712,
|
|
VolumeDirty = 0xc0000806,
|
|
FileCheckedOut = 0xc0000901,
|
|
CheckOutRequired = 0xc0000902,
|
|
BadFileType = 0xc0000903,
|
|
FileTooLarge = 0xc0000904,
|
|
FormsAuthRequired = 0xc0000905,
|
|
VirusInfected = 0xc0000906,
|
|
VirusDeleted = 0xc0000907,
|
|
|
|
MaximumNtStatus = 0xffffffff
|
|
}
|
|
|
|
public static class NtStatusExtensions
|
|
{
|
|
/// <summary>
|
|
/// Gets a string which describes the NT status value.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
/// <returns>A message, or null if the message could not be retrieved.</returns>
|
|
public static string GetMessage(this NtStatus status)
|
|
{
|
|
string message;
|
|
|
|
message = NativeUtils.GetMessage(
|
|
Loader.GetDllHandle("ntdll.dll"),
|
|
0xb,
|
|
System.Threading.Thread.CurrentThread.CurrentUICulture.LCID,
|
|
(int)status
|
|
);
|
|
|
|
if (message != null)
|
|
{
|
|
// Fix those messages which are formatted like:
|
|
// {Asdf}\r\nAsdf asdf asdf...
|
|
if (message.StartsWith("{"))
|
|
{
|
|
string[] split = message.Split('\n');
|
|
|
|
if (split.Length > 1)
|
|
message = split[1];
|
|
}
|
|
}
|
|
|
|
return message;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Gets whether the NT status value indicates an error.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static bool IsError(this NtStatus status)
|
|
{
|
|
return status >= NtStatus.Error && status <= NtStatus.MaximumNtStatus;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Gets whether the NT status value indicates information.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static bool IsInformational(this NtStatus status)
|
|
{
|
|
return status >= NtStatus.Informational && status < NtStatus.Warning;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Gets whether the NT status value indicates success.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static bool IsSuccess(this NtStatus status)
|
|
{
|
|
return status >= NtStatus.Success && status < NtStatus.Informational;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Gets whether the NT status value indicates a warning.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static bool IsWarning(this NtStatus status)
|
|
{
|
|
return status >= NtStatus.Warning && status < NtStatus.Error;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Throws the NT status value as an exception.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static void Throw(this NtStatus status)
|
|
{
|
|
throw new WindowsException(status);
|
|
}
|
|
|
|
/// <summary>
|
|
/// Throws the NT status value as an exception if it is an error or warning.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
public static void ThrowIf(this NtStatus status)
|
|
{
|
|
if (status.IsError() || status.IsWarning())
|
|
status.Throw();
|
|
}
|
|
|
|
/// <summary>
|
|
/// Converts the NT status value to a DOS/Windows error code.
|
|
/// </summary>
|
|
/// <param name="status">The NT status value.</param>
|
|
/// <returns>A DOS/Windows error code.</returns>
|
|
public static Win32Error ToDosError(this NtStatus status)
|
|
{
|
|
return Win32.RtlNtStatusToDosError(status);
|
|
}
|
|
}
|
|
}
|