[FEATURE] enumeration of MajorCodes

[voidsec]

[FEATURE] enumeration of MajorCodes

[VoidSec]

Thank you, it would be a really good idea to have something like that!
I do not have any timeframe yet to implement that but I'll try.

• https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/irp-major-function-codes

Enums

• Macro IRP

Structs

• DRIVERSTATUS
• DRIVER_OBJECT
• IRP
• IO_STACK_LOCATION

[HongThatCong]

IRP_MJ_XXX already declared as MACRO_IRP in ntddkxx_yyy .til type libraries of IDA
xxx = 64 or not
yyy = win7, win8, win81, vista, win10
When open an .sys file on IDA, IDA auto import on of til file above.
We can auto import MACRO_IRP to IDA by a line of code:
idaapi.import_type(idaapi.cvar.idati, 0, "MACRO_IRP")
Same as another structs:
idaapi.import_type(idaapi.cvar.idati, 0, "DRIVERSTATUS")
....