Dear technical writer (@Microsoft)

You write in the documentation of NtDeviceIoControlFile.

Deprecated. Builds descriptors for the supplied buffer(s) and passes the untyped data to the device driver associated with the file handle. NtDeviceIoControlFile is superseded by DeviceIoControl.

Could you please be a little more specific in what sense it supersedes DeviceIoControl? Now driver writers are a peculiar bunch and usually very careful to put nice error information where it belongs, i.e. into the IO_STATUS_BLOCK, I fail to see how to extract that information – be it only the NTSTATUS member from a call to DeviceIoControl.

Perhaps I’m missing something here?

Thanks in advance,

// Oliver

This entry was posted in EN, Reversing. Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.