枚举IoTimer

/***************************************************************************************
* AUTHOR : yifi
* DATE   : 2015-11-5
* MODULE : EnumIoTimer.H
*
* IOCTRL Sample Driver
*
* Description:
*        Demonstrates communications between USER and KERNEL.
*
****************************************************************************************
* Copyright (C) 2010 yifi.
****************************************************************************************/

#ifndef CXX_ENUMIOTIMER_H
#define CXX_ENUMIOTIMER_H

#include <ntifs.h>

typedef struct _IO_TIMER_WIN7_X64
{
INT16        Type;
INT16        TimerFlag;
LONG32        Unknown;
LIST_ENTRY    TimerList;
PVOID        TimerRoutine;
PVOID        Context;
PVOID        DeviceObject;
}IO_TIMER_WIN7_X64, *PIO_TIMER_WIN7_X64;

typedef struct _IO_TIMER_WINXP_X86
{
INT16        Type;
INT16        TimerFlag;
LIST_ENTRY    TimerList;
PVOID        TimerRoutine;
PVOID        Context;
PVOID        DeviceObject;
} IO_TIMER_WINXP_X86, *PIO_TIMER_WINXP_X86;

#ifdef _WIN64
#define PIO_TIMER PIO_TIMER_WIN7_X64
#define IO_TIMER  IO_TIMER_WIN7_X64
#else
#define PIO_TIMER PIO_TIMER_WINXP_X86
#define IO_TIMER  IO_TIMER_WINXP_X86
#endif

VOID UnloadDriver(PDRIVER_OBJECT DriverObject);
BOOLEAN EnumIoTimer();
PVOID GetExportVariableAddressFormNtosExportTableByVariableName(WCHAR *wzVariableName);

#endif